Fedora EPEL 6 Update: libzdb-2.8.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3720
2011-07-06 17:35:16
--------------------------------------------------------------------------------
Name : libzdb
Product : Fedora EPEL 6
Version : 2.8.1
Release : 1.el6
URL : http://www.tildeslash.com/libzdb/
Summary : Small, fast, and easy to use database API
Description :
The Zild C Database Library implements a small, fast, and easy to use database
API with thread-safe connection pooling. The library can connect transparently
to multiple database systems, has zero configuration and connections are
specified via a standard URL scheme.
--------------------------------------------------------------------------------
Update Information:
This is a bug fix release which fixes a transaction related memory leak in the Oracle driver. There are no other changes.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libzdb' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 6 Update: perl-Crypt-RC4-2.02-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3722
2011-07-06 17:35:20
--------------------------------------------------------------------------------
Name : perl-Crypt-RC4
Product : Fedora EPEL 6
Version : 2.02
Release : 1.el6
URL : http://search.cpan.org/dist/Crypt-RC4/
Summary : Perl implementation of the RC4 encryption algorithm
Description :
A simple implementation of the RC4 algorithm, developed by RSA Security,
Inc. Here is the description from RSA's website:
RC4 is a stream cipher designed by Rivest for RSA Data Security (now RSA
Security). It is a variable key-size stream cipher with byte-oriented
operations. The algorithm is based on the use of a random permutation. Analysis
shows that the period of the cipher is overwhelmingly likely to be greater than
10100. Eight to sixteen machine operations are required per output byte, and
the cipher can be expected to run very quickly in software. Independent analysts
have scrutinized the algorithm and it is considered secure.
--------------------------------------------------------------------------------
Update Information:
New package for EPEL 6.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Crypt-RC4' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 6 Update: cups-bjnp-1.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3729
2011-07-06 17:35:35
--------------------------------------------------------------------------------
Name : cups-bjnp
Product : Fedora EPEL 6
Version : 1.0
Release : 1.el6
URL : https://sourceforge.net/projects/cups-bjnp/
Summary : CUPS backend for the Canon BJNP network printers
Description :
This package contains a backend for CUPS for Canon printers using the
proprietary BJNP network protocol.
--------------------------------------------------------------------------------
Update Information:
New upstream release
Fix FTBS on Fedora BZ715649
Fix hostname resolution on some buggy routers that return bogus hostnames on a
reverse lookup
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cups-bjnp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
[SECURITY] Fedora EPEL 5 Update: dokuwiki-0-0.10.20110525.a.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3742
2011-07-08 15:12:21
--------------------------------------------------------------------------------
Name : dokuwiki
Product : Fedora EPEL 5
Version : 0
Release : 0.10.20110525.a.el5
URL : http://www.dokuwiki.org/dokuwiki
Summary : Standards compliant simple to use wiki
Description :
DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creating
documentation of any kind. It has a simple but powerful syntax which makes sure
the datafiles remain readable outside the Wiki and eases the creation of
structured texts.
All data is stored in plain text files no database is required.
--------------------------------------------------------------------------------
Update Information:
Fixes dependency
Fix: XSS in DokuWiki's RSS embedding mechanism
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #717146 - CVE-2011-2510 dokuwiki: XSS in DokuWiki's RSS embedding mechanism
https://bugzilla.redhat.com/show_bug.cgi?id=717146
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dokuwiki' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 6 Update: php-zipstream-0.2.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3730
2011-07-06 17:35:37
--------------------------------------------------------------------------------
Name : php-zipstream
Product : Fedora EPEL 6
Version : 0.2.2
Release : 1.el6
URL : http://pablotron.org/software/zipstream-php/
Summary : Streaming dynamic zip from PHP without writing to the disk
Description :
ZipStream is a library for dynamically streaming dynamic zip files from PHP
without writing to the disk at all on the server.
--------------------------------------------------------------------------------
Update Information:
ZipStream is a library for dynamically streaming dynamic zip files from PHP
without writing to the disk at all on the server.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #716615 - Review Request: php-zipstream - zipstream-php
https://bugzilla.redhat.com/show_bug.cgi?id=716615
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-zipstream' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 6 Update: gridsite-1.7.15-4.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3695
2011-07-01 16:28:04
--------------------------------------------------------------------------------
Name : gridsite
Product : Fedora EPEL 6
Version : 1.7.15
Release : 4.el6
URL : http://www.gridsite.org
Summary : Grid Security for the Web, Web platforms for Grids
Description :
GridSite was originally a web application developed for managing and formatting
the content of the http://www.gridpp.ac.uk/ website. Over the past years it
has grown into a set of extensions to the Apache web server and a toolkit for
Grid credentials, GACL access control lists and HTTP(S) protocol operations.
This package gridsite contains apache httpd modules for enabling
mod_gridsite.
--------------------------------------------------------------------------------
Update Information:
Changes from 1.7.9 to 1.7.15.
* Fixing memleak in GRSTx509MakeProxyCert
* Not relying on hard-coded positions of certificates (fixes using VOMS .lsc files)
* Fixes from Mattias Ellert <mellert> (bugs #69632, #83449, and #83450):
* extern "C" declarations and include protections in public headers
* integer/pointer portability fix
* proper link ordering
* IPv6 portability
* Fix static declaration in public header, function GACLparseEntry() added into gridsite-gacl.h
* Makefile distinguishes between -lgsoap and -lgsoapssl in cflags.
* Makefile: CFLAGS cleanup, HTTPD_FLAGS replaces httpd-specific cflags.
* Unresolved symbols from xml in _globus and _nossl library versions fixed.
* Compile and link flags of dependencies unified.
* Portability improvements
* Support for using IPv6
* Patch to grst_x509.c VOMS verification from Daniel Kouril
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #719174 - gridsite-devel should depend on openssl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=719174
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update gridsite' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
[SECURITY] Fedora EPEL 6 Update: libpng10-1.0.55-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3664
2011-06-29 18:00:06
--------------------------------------------------------------------------------
Name : libpng10
Product : Fedora EPEL 6
Version : 1.0.55
Release : 1.el6
URL : http://www.libpng.org/pub/png/libpng.html
Summary : Old version of libpng, needed to run old binaries
Description :
The libpng10 package contains an old version of libpng, a library of functions
for creating and manipulating PNG (Portable Network Graphics) image format
files.
This package is needed if you want to run binaries that were linked dynamically
with libpng 1.0.x.
--------------------------------------------------------------------------------
Update Information:
This update fixes a 1-byte uninitialized memory reference in png_format_buffer(). It allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message. This is CVE-2011-2501.
Also fixed in this release are some other minor security problems and there's additionally a bugfix backported from 1.5.3: when expanding a paletted image, always expand to RGBA if transparency is present.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #717084 - CVE-2011-2501 libpng: regression of CVE-2004-0421 in 1.2.23+
https://bugzilla.redhat.com/show_bug.cgi?id=717084
[ 2 ] Bug #720607 - CVE-2011-2690 libpng: buffer overwrite in png_rgb_to_gray
https://bugzilla.redhat.com/show_bug.cgi?id=720607
[ 3 ] Bug #720608 - CVE-2011-2691 libpng: Crash in png_default_error due to use of NULL Pointer
https://bugzilla.redhat.com/show_bug.cgi?id=720608
[ 4 ] Bug #720612 - CVE-2011-2692 libpng: Memory corruption when handling empty sCAL chunks
https://bugzilla.redhat.com/show_bug.cgi?id=720612
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libpng10' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 5 Update: libzdb-2.8.1-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3723
2011-07-06 17:35:22
--------------------------------------------------------------------------------
Name : libzdb
Product : Fedora EPEL 5
Version : 2.8.1
Release : 1.el5
URL : http://www.tildeslash.com/libzdb/
Summary : Small, fast, and easy to use database API
Description :
The Zild C Database Library implements a small, fast, and easy to use database
API with thread-safe connection pooling. The library can connect transparently
to multiple database systems, has zero configuration and connections are
specified via a standard URL scheme.
--------------------------------------------------------------------------------
Update Information:
This is a bug fix release which fixes a transaction related memory leak in the Oracle driver. There are no other changes.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libzdb' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 6 Update: python-asciitable-0.7.0.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3719
2011-07-06 17:35:14
--------------------------------------------------------------------------------
Name : python-asciitable
Product : Fedora EPEL 6
Version : 0.7.0.2
Release : 1.el6
URL : http://cxc.harvard.edu/contrib/asciitable/
Summary : Extensible ASCII table reader and writer
Description :
An extensible ASCII table reader. Asciitable can read a wide range of ASCII
table formats via built-in Extension Reader Classes:
* Basic: basic table with customizable delimiters and header configurations
* Cds: CDS format table (also Vizier and ApJ machine readable tables)
* CommentedHeader: column names given in a line that begins with
the comment character
* Daophot: table from the IRAF DAOphot package
* Ipac: IPAC format table
* Latex: LaTeX tables (plain and AASTex)
* NoHeader: basic table with no header where columns are auto-named
* Rdb: tab-separated values with an extra line after the column
definition line
* Tab: tab-separated values
--------------------------------------------------------------------------------
Update Information:
New upstream version with Latex, AASTex support
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-asciitable' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 5 Update: cups-bjnp-1.0-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3718
2011-07-06 17:35:12
--------------------------------------------------------------------------------
Name : cups-bjnp
Product : Fedora EPEL 5
Version : 1.0
Release : 1.el5
URL : https://sourceforge.net/projects/cups-bjnp/
Summary : CUPS backend for the Canon BJNP network printers
Description :
This package contains a backend for CUPS for Canon printers using the
proprietary BJNP network protocol.
--------------------------------------------------------------------------------
Update Information:
New upstream release
Fix FTBS on Fedora BZ715649
Fix hostname resolution on some buggy routers that return bogus hostnames on a
reverse lookup
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cups-bjnp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months