[SECURITY] Fedora EPEL 5 Update: wordpress-3.1-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-2881
2011-03-21 17:36:07
--------------------------------------------------------------------------------
Name : wordpress
Product : Fedora EPEL 5
Version : 3.1
Release : 1.el5
URL : http://www.wordpress.org
Summary : WordPress blogging software
Description :
Wordpress is an online publishing / weblog package that makes it very easy,
almost trivial, to get information out to people on the web.
--------------------------------------------------------------------------------
Update Information:
In order to protect against two CVEs*, I'm upgrading Wordpress in all releases to 3.1. In addition, this will obsolete wordpress-mu, since this functionality has been migrated to the main wordpress release as of wordpress 3.0, and wordpress-mu has been deprecated upstream. I would not normally make so drastic a change on any stable release, especially EPEL, but backporting patches to the 2.x series is becoming increasingly unmaintainable. This is already done for rawhide and F15, and I intend to build for F13, F14, EL5 and EL6 today, and send them to testing, and then push to stable one the appropriate period has elapsed.
Please redistribute this to anyone you know who might be affected and may not be on this list.
Thank you, Jon
* https://bugzilla.redhat.com/show_bug.cgi?id=687909 https://bugzilla.redhat.com/show_bug.cgi?id=687911
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #687909 - CVE-2011-0700 CVE-2011-0701 wordpress: multiple vulnerabilities corrected in 3.0.5 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=687909
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update wordpress' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years
Fedora EPEL 4 Update: fetch-crl3-3.0.6-1.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-2869
2011-03-20 18:36:14
--------------------------------------------------------------------------------
Name : fetch-crl3
Product : Fedora EPEL 4
Version : 3.0.6
Release : 1.el4
URL : http://www.nikhef.nl/grid/gridwiki/index.php/FetchCRL3
Summary : Downloads Certificate Revocation Lists
Description :
This tool and associated cron entry ensure that Certificate Revocation
Lists (CRLs) are periodically retrieved from the web sites of the respective
Certification Authorities.
It assumes that the installed CA files follow the hash.crl_url convention.
--------------------------------------------------------------------------------
Update Information:
Changes in 3.0.6-1
----------------------
* Response parsing disabled to suppress superfluous warning on unexpected UTF-8 respons when retrieving a CRL (solves RedHat Bugzilla 688902)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #688902 - fetch-crl3 UTF-8 errors decoding entities post earthquake.
https://bugzilla.redhat.com/show_bug.cgi?id=688902
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update fetch-crl3' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years
Fedora EPEL 6 Update: perl-VOMS-Lite-0.14-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-2853
2011-03-18 19:08:04
--------------------------------------------------------------------------------
Name : perl-VOMS-Lite
Product : Fedora EPEL 6
Version : 0.14
Release : 1.el6
URL : http://search.cpan.org/dist/VOMS-Lite/
Summary : Perl extension for VOMS Attribute certificate creation
Description :
VOMS (virtual organization membership service) is a system for
managing grid level authorization data within
multi-institutional collaborations via membership and roles
within that membership.
VOMS::Lite provides a perl library and client tools
for interacting with an existing voms service including the
well known C implementation of voms.
A number of commands are included for generating and processing
proxies including voms-proxy-init.pl, voms-ac-issue.pl, ...
Configuration of client tools can be supplied via
$ENV{'VOMS_CONFIG_FILE'} or else ~/.grid-security/voms.conf.
The root user only uses /etc/grid-security/voms.config.
--------------------------------------------------------------------------------
Update Information:
VOMS (virtual organisation membership service) is a system for managing grid level authorization data within multi-institutional collaborations via membership and roles within that membership.
VOMS::Lite provides a perl library and client tools for interacting with an existing voms service including the well known C impementation of voms.
VOMS (virtual organisation membership service) is a system for managing grid level authorization data within multi-institutional collaborations via membership and roles within that membership.
VOMS::Lite provides a perl library and client tools for interacting with an existing voms service including the well known C impementation of voms.
VOMS (virtual organisation membership service) is a system for managing grid level authorization data within multi-institutional collaborations via membership and roles within that membership.
VOMS::Lite provides a perl library and client tools for interacting with an existing voms service including the well known C impementation of voms.
VOMS (virtual organisation membership service) is a system for managing grid level authorization data within multi-institutional collaborations via membership and roles within that membership.
VOMS::Lite provides a perl library and client tools for interacting with an existing voms service including the well known C impementation of voms.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #565949 - Review Request: perl-VOMS-Lite - Perl extension for VOMS Attribute certificate creation
https://bugzilla.redhat.com/show_bug.cgi?id=565949
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-VOMS-Lite' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years
Fedora EPEL 5 Update: mydns-1.2.8.31-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-0021
2011-01-04 17:08:07
--------------------------------------------------------------------------------
Name : mydns
Product : Fedora EPEL 5
Version : 1.2.8.31
Release : 1.el5
URL : http://mydns-ng.com/
Summary : A Database based DNS server
Description :
A nameserver that serves records directly from your database.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mydns' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years
Fedora EPEL 6 Update: zeroinstall-injector-0.53-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-2883
2011-03-22 15:42:39
--------------------------------------------------------------------------------
Name : zeroinstall-injector
Product : Fedora EPEL 6
Version : 0.53
Release : 1.el6
URL : http://0install.net
Summary : The Zero Install Injector (0launch)
Description :
The Zero Install Injector makes it easy for users to install software
without needing root privileges. It takes the URL of a program and
runs it (downloading it first if necessary). Any dependencies of the
program are fetched in the same way. The user controls which version
of the program and its dependencies to use.
Zero Install is a decentralized installation system (there is no
central repository; all packages are identified by URLs),
loosely-coupled (if different programs require different versions of a
library then both versions are installed in parallel, without
conflicts), and has an emphasis on security (all package descriptions
are GPG-signed, and contain cryptographic hashes of the contents of
each version). Each version of each program is stored in its own
sub-directory within the Zero Install cache (nothing is installed to
directories outside of the cache, such as /usr/bin) and no code from
the package is run during install or uninstall. The system can
automatically check for updates when software is run.
--------------------------------------------------------------------------------
Update Information:
- Removal of deprecated features
- API clean-up
- Better defaults for approving new keys
see http://0install.net/roadmap.html
New upstream release, adding:
- 0install command
- value attribute for <environment>
- recursive use of <runner>
See http://0install.net/roadmap.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #684739 - zeroinstall-injector-0.53 is available
https://bugzilla.redhat.com/show_bug.cgi?id=684739
[ 2 ] Bug #626359 - zeroinstall-injector-0.52 is available
https://bugzilla.redhat.com/show_bug.cgi?id=626359
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zeroinstall-injector' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years
Fedora EPEL 5 Update: cvsps-2.2-0.8.b1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-2840
2011-03-18 19:07:34
--------------------------------------------------------------------------------
Name : cvsps
Product : Fedora EPEL 5
Version : 2.2
Release : 0.8.b1.el5
URL : http://www.cobite.com/cvsps/
Summary : Patchset tool for CVS
Description :
CVSps is a program for generating 'patchset' information from a CVS
repository. A patchset in this case is defined as a set of changes
made to a collection of files, and all committed at the same time
(using a single 'cvs commit' command). This information is valuable
to seeing the big picture of the evolution of a cvs project. While
cvs tracks revision information, it is often difficult to see what
changes were committed 'atomically' to the repository.
--------------------------------------------------------------------------------
Update Information:
Updates EPEL 5's cvsps to the latest from Fedora
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cvsps' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 1 month
Fedora EPEL 4 Update: python-ctypes-1.0.2-2.el4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-0264
2011-02-04 17:39:26
--------------------------------------------------------------------------------
Name : python-ctypes
Product : Fedora EPEL 4
Version : 1.0.2
Release : 2.el4
URL : http://starship.python.net/crew/theller/ctypes/
Summary : Advanced Foreign Function Interface for Python
Description :
ctypes is an advanced ffi (Foreign Function Interface) package for
Python 2.3 and higher.
ctypes allows to call functions exposed from dlls/shared libraries
and has extensive facilities to create, access and manipulate
simple and complicated C data types in Python - in other words:
wrap libraries in pure Python. It is even possible to implement C
callback functions in pure Python.
--------------------------------------------------------------------------------
Update Information:
Initial release for EPEL4, in support of libsmbios which now has a dependency on python-ctypes.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-ctypes' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 1 month
Fedora EPEL 6 Update: pymssql-1.0.2-4.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-2873
2011-03-20 18:36:23
--------------------------------------------------------------------------------
Name : pymssql
Product : Fedora EPEL 6
Version : 1.0.2
Release : 4.el6
URL : http://pymssql.sourceforge.net/
Summary : A simple database interface to MS-SQL for Python
Description :
pymssql is the Python language extension module that provides access to
Microsoft SQL Servers from Python scripts. It is compliant with Python
DB-API 2.0 Specification.
--------------------------------------------------------------------------------
Update Information:
Dropped version 1.9.x (which didn't build) in favor of the more stable 1.0.x series.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pymssql' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 1 month
Fedora EPEL 5 Update: drupal6-authfas-0.2.3-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-2857
2011-03-18 19:08:13
--------------------------------------------------------------------------------
Name : drupal6-authfas
Product : Fedora EPEL 5
Version : 0.2.3
Release : 1.el5
URL : http://fedorahosted.org/drupal6-authfas
Summary : Drupal 6 module for authentication via a Fedora Account System
Description :
This module allows Drupal 6 users to be authenticated via an instance
of the Fedora Account System (FAS). Each Drupal role can also be
mapped to a group in FAS, and group memberships are updated for a user
before the session starts.
--------------------------------------------------------------------------------
Update Information:
Includes an option for testing with invalid SSL certificates
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal6-authfas' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 1 month