Fedora EPEL 5 Update: facter-1.5.9-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3425
2011-05-27 14:57:40
--------------------------------------------------------------------------------
Name : facter
Product : Fedora EPEL 5
Version : 1.5.9
Release : 1.el5
URL : http://www.puppetlabs.com/puppet/related-projects/facter/
Summary : Ruby module for collecting simple facts about a host operating system
Description :
Ruby module for collecting simple facts about a host Operating
system. Some of the facts are preconfigured, such as the hostname and the
operating system. Additional facts can be added through simple Ruby scripts
--------------------------------------------------------------------------------
Update Information:
Facter 1.5.9 is a maintenance release containing fixes and updates.
This release contains several fixes, and updated facts, as well as adding some new facts. These include enhancements with Facter & EC2, additional memory facts for OS X, and better Ruby 1.9 support.
A patch from Orion Poplawski to address upstream issue 7682 (http://projects.puppetlabs.com/issues/7682) has been applied. This should improve support for EPEL users on Scientific Linux.
For the full list of changes refer to the upstream release announcement:
http://groups.google.com/group/puppet-announce/browse_thread/thread/b4eb4...
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update facter' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora EPEL 5 Update: perl-Devel-PatchPerl-0.36-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3430
2011-05-27 14:57:51
--------------------------------------------------------------------------------
Name : perl-Devel-PatchPerl
Product : Fedora EPEL 5
Version : 0.36
Release : 1.el5
URL : http://search.cpan.org/dist/Devel-PatchPerl/
Summary : Patch perl source à la Devel::PPPort's buildperl.pl
Description :
Devel::PatchPerl is a modularisation of the patching code contained in
Devel::PPPort's buildperl.pl.
--------------------------------------------------------------------------------
Update Information:
This update fixes chmod of hints files, making it only set 644 instead of 755 (the 5.13.x branch of perls introduced 'porting/exec-bit.t' which is failing when files that shouldn't have execute bit in the source tree do).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Devel-PatchPerl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
[SECURITY] Fedora EPEL 6 Update: syslog-ng-3.2.4-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3416
2011-05-26 15:39:33
--------------------------------------------------------------------------------
Name : syslog-ng
Product : Fedora EPEL 6
Version : 3.2.4
Release : 1.el6
URL : http://www.balabit.com/network-security/syslog-ng
Summary : Next-generation syslog server
Description :
syslog-ng, as the name shows, is a syslogd replacement, but with new
functionality for the new generation. The original syslogd allows
messages only to be sorted based on priority/facility pairs; syslog-ng
adds the possibility to filter based on message contents using regular
expressions. The new configuration scheme is intuitive and powerful.
Forwarding logs over TCP and remembering all forwarding hops makes it
ideal for firewalled environments.
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.4.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update syslog-ng' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
[SECURITY] Fedora EPEL 6 Update: drupal6-6.22-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3412
2011-05-26 15:39:24
--------------------------------------------------------------------------------
Name : drupal6
Product : Fedora EPEL 6
Version : 6.22
Release : 1.el6
URL : http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
* Advisory ID: DRUPAL-SA-CORE-2011-001
* Project: Drupal core [1]
* Version: 6.x, 7.x
* Date: 2011-May-25
* Security risk: Critical [2]
* Exploitable from: Remote
* Vulnerability: Access bypass, Cross Site Scripting
-------- DESCRIPTION
---------------------------------------------------------
Multiple vulnerabilities and weaknesses were discovered in Drupal.
.... Reflected cross site scripting vulnerability in error handler
A reflected cross site scripting vulnerability was discovered in Drupal's
error handler. Drupal displays PHP errors in the messages area, and a
specially crafted URL can cause malicious scripts to be injected into the
message. The issue can be mitigated by disabling on-screen error display at
admin/settings/error-reporting. This is the recommended setting for
production sites.
This issue affects Drupal 6.x only.
.... Cross site scripting vulnerability in Color module
When using re-colorable themes, color inputs are not sanitized. Malicious
color values can be used to insert arbitrary CSS and script code. Successful
exploitation requires the "Administer themes" permission.
This issue affects Drupal 6.x and 7.x.
.... Access bypass in File module
When using private files in combination with a node access module, the File
module allows unrestricted access to private files.
This issue affects Drupal 7.x only.
-------- VERSIONS AFFECTED
---------------------------------------------------
* Drupal 7.x before version 7.1.
* Drupal 6.x before version 6.21.
-------- SOLUTION
------------------------------------------------------------
Install the latest version:
* If you are running Drupal 7.x then upgrade to Drupal 7.1 [3] or 7.2 [4].
* If you are running Drupal 6.x then upgrade to Drupal 6.21 [5] or 6.22. [6]
The Security Team has released both a pure security update without other bug
fixes and a security update combined with other bug fixes and improvements.
You can choose to either only include the security update for an immediate
fix (which might require less quality assurance and testing) or more fixes
and improvements alongside the security fixes by choosing between Drupal 7.1
[7] and Drupal 7.2 [8] or Drupal 6.21 [9] and Drupal 6.22 [10].
See the release announcement [11] for more information.
See also the Drupal core [12] project page.
-------- REPORTED BY
---------------------------------------------------------
* The reflected cross site scripting vulnerability was reported by Heine
Deelstra [13] (*).
* The Color module cross site scripting vulnerability was reported by Kasper
Lindgaard, Secunia Research.
* The File access bypass was reported by Hubert Lecorche, and Peter Bex
[14].
-------- FIXED BY
------------------------------------------------------------
* The reflected cross site scripting vulnerability was fixed by Alan
Smithee.
* The Color module cross site scripting vulnerability was fixed by Stéphane
Corlosquet [15] (*), Heine Deelstra [16] (*), and Peter Wolanin [17] (*).
* The File access bypass was fixed by Heine Deelstra [18] (*).
(*) Member of the Drupal security team.
-------- CONTACT AND MORE INFORMATION
----------------------------------------
The Drupal security team can be reached at security at drupal.org or via the
contact form at http://drupal.org/contact [19].
Learn more about the Drupal Security team and their policies [20], writing
secure code for Drupal [21], and securing your site [22].
[1] http://drupal.org/project/drupal
[2] http://drupal.org/security-team/risk-levels
[3] http://drupal.org/node/1168910
[4] http://drupal.org/node/1168946
[5] http://drupal.org/node/1168908
[6] http://drupal.org/node/1168950
[7] http://drupal.org/node/1168910
[8] http://drupal.org/node/1168946
[9] http://drupal.org/node/1168908
[10] http://drupal.org/node/1168950
[11] http://drupal.org/drupal-7.2
[12] http://drupal.org/project/drupal
[13] http://drupal.org/user/17943
[14] https://drupal.org/user/309898
[15] http://drupal.org/user/52142
[16] http://drupal.org/user/17943
[17] http://drupal.org/user/49851
[18] http://drupal.org/user/17943
[19] http://drupal.org/contact
[20] http://drupal.org/security-team
[21] http://drupal.org/writing-secure-code
[22] http://drupal.org/security/secure-configuration
_______________________________________________
Security-news mailing list
Security-news(a)drupal.org
http://lists.drupal.org/mailman/listinfo/security-news
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal6' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora EPEL 5 Update: mod_flvx-0-0.1.20100525git.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3395
2011-05-25 15:24:18
--------------------------------------------------------------------------------
Name : mod_flvx
Product : Fedora EPEL 5
Version : 0
Release : 0.1.20100525git.el5
URL : http://tperspective.blogspot.com/2009/02/apache-flv-streaming-done-right....
Summary : FLV progressive download streaming for the Apache HTTP Server
Description :
FLV streaming means it can be sought to any position during video, and
browser (Flash player) will buffer only from this position to the end.
Thus streaming allows to skip boring parts or see video ending without
loading the whole file, which simply saves bandwidth. Even H264 is more
efficient, FLV is still a common container format for videos, because
H264 is supported by Flash since version 9.115.
For using FLV streaming on the web, a pseudo-streaming compliant Flash
player, such as Flowplayer, is needed. Streaming requires that the FLV
has embedded key-frame markers (meta-data), that can be injected by any
supported tool, e.g. flvtool2.
--------------------------------------------------------------------------------
Update Information:
FLV streaming means it can be sought to any position during video, and browser (Flash player) will buffer only from this position to the end. Thus streaming allows to skip boring parts or see video ending without loading the whole file, which simply saves bandwidth. Even H264 is more efficient, FLV is still a common container format for videos, because H264 is supported by Flash since version 9.115.
For using FLV streaming on the web, a pseudo-streaming compliant Flash player, such as Flowplayer, is needed. Streaming requires that the FLV has embedded key-frame markers (meta-data), that can be injected by any supported tool, e.g. flvtool2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #688121 - Review Request: mod_flvx - FLV progressive download streaming for the Apache HTTP Server
https://bugzilla.redhat.com/show_bug.cgi?id=688121
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mod_flvx' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora EPEL 5 Update: nagios-plugins-check-updates-1.4.14-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3419
2011-05-26 15:39:39
--------------------------------------------------------------------------------
Name : nagios-plugins-check-updates
Product : Fedora EPEL 5
Version : 1.4.14
Release : 1.el5
URL : https://trac.id.ethz.ch/projects/nagios_plugins/wiki/check_updates
Summary : A Nagios plugin to check if Red Hat or Fedora system is up-to-date
Description :
A Nagios plugin to check if Red Hat or Fedora system is up-to-date.
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.14
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nagios-plugins-check-updates' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora EPEL 5 Update: dojo-1.6.0-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3402
2011-05-25 15:24:36
--------------------------------------------------------------------------------
Name : dojo
Product : Fedora EPEL 5
Version : 1.6.0
Release : 1.el5
URL : http://dojotoolkit.org/
Summary : Modular JavaScript toolkit
Description :
Dojo is a JavaScript toolkit, providing cross-browser abstractions and widgets
for building dynamic web sites.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #609817 - Review Request: dojo - Modular JavaScript toolkit
https://bugzilla.redhat.com/show_bug.cgi?id=609817
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dojo' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora EPEL 5 Update: drupal6-token-1.16-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3361
2011-05-20 17:36:52
--------------------------------------------------------------------------------
Name : drupal6-token
Product : Fedora EPEL 5
Version : 1.16
Release : 1.el5
URL : http://drupal.org/project/token
Summary : Tokens are small bits of text that can be placed into larger documents
Description :
Tokens are small bits of text that can be placed into larger documents
via simple placeholders.
The Token module provides a central API for modules to use these tokens,
and expose their own token values.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #706046 - drupal6-token-1.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=706046
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal6-token' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora EPEL 6 Update: perlbrew-0.22-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3432
2011-05-27 14:58:00
--------------------------------------------------------------------------------
Name : perlbrew
Product : Fedora EPEL 6
Version : 0.22
Release : 1.el6
URL : http://search.cpan.org/dist/App-perlbrew/
Summary : Manage perl installations in your $HOME
Description :
perlbrew is a program to automate the building and installation of perl in
the users HOME. At the moment, it installs everything to ~/perl5/perlbrew,
and requires you to tweak your PATH by including a bashrc/cshrc file it
provides. You then can benefit from not having to run 'sudo' commands to
install cpan modules because those are installed inside your HOME too. It's
almost like an isolated perl environments.
--------------------------------------------------------------------------------
Update Information:
This update includes numerous bugfixes and enhancements.
0.22:
* Fix ccache support on Linux with bash
* `install` command no longer clobbers existing installations
* New commands: uninstall, alias, self-upgrade
* See more detail in http://perlbrew.pl/Release-0.22.html
0.21:
* Let version numbers alone mean installation names. For example, 5.12.3 means perl-5.12.3
* Fixed `perlbrew install <URL>` that might install to a wrong path
* Fixed the --as option
* Improve `perlbrew list` command output
* Improve `perlbrew install` command. Now it takes a local .tar.gz filename
* See more detail in http://perlbrew.pl/Release-0.21.html
0.20:
* stop when user specified an invalid perl version that cannot be found on cpan
* specialized version installation: perlbrew install perl-blead / <URL>
* fix `perlbrew install /path/to/git/src/dir`
* See more detail in http://www.perlbrew.pl/Release-0.20.html
0.19:
* Auto run 'perlbrew init' after an install (or upgrade)
* Symlink dev versions of executables. For example,'perl5.13.11' to 'perl', 'prove5.13.11' to 'prove'
* Automatically apply patches necessary to make older perls build again on modern platforms with the help of Devel::PatchPerl.
* A command `perlbrew available` to list recently available perls to build
0.18:
* Fixed an issue when bash set `noclobber` option, which breaks the creation of ~/.perlbrew/init.
* A simple `perlbrew clean` command to clean build dir
* Delegate `-j` arg value to `make test_harness`
* $HOME is replaced with "~" in many messages
0.17:
* Fix `perlbrew use` to work even if we are switched to a specific version
* Fix `perlbrew env` to use current version, sets PERLBREW_PERL and proper PATH
* Feature: `perlbrew use` shows current version in use
* Feature: `perlbrew switch /path/to/special/perl name-of-special-perl` names for adhoc perl's
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perlbrew' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora EPEL 6 Update: perl-Devel-PatchPerl-0.36-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3426
2011-05-27 14:57:42
--------------------------------------------------------------------------------
Name : perl-Devel-PatchPerl
Product : Fedora EPEL 6
Version : 0.36
Release : 1.el6
URL : http://search.cpan.org/dist/Devel-PatchPerl/
Summary : Patch perl source à la Devel::PPPort's buildperl.pl
Description :
Devel::PatchPerl is a modularisation of the patching code contained in
Devel::PPPort's buildperl.pl.
--------------------------------------------------------------------------------
Update Information:
This update fixes chmod of hints files, making it only set 644 instead of 755 (the 5.13.x branch of perls introduced 'porting/exec-bit.t' which is failing when files that shouldn't have execute bit in the source tree do).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Devel-PatchPerl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months