[SECURITY] Fedora EPEL 5 Update: glpi-pdf-0.7.2-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3907
2011-07-26 07:21:48
--------------------------------------------------------------------------------
Name : glpi-pdf
Product : Fedora EPEL 5
Version : 0.7.2
Release : 1.el5
URL : https://forge.indepnet.net/projects/pdf
Summary : GLPI Plugin to print PDF of equipment
Description :
This GLPI plugin enables you to print, in pdf format, the information
sheet of an equipment or a software of the inventory.
--------------------------------------------------------------------------------
Update Information:
New major version of GLPI and plugins.
For more information, see annoucement on http://www.glpi-project.org/spip.php?lang=en
This update also include a security fix.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #726187 - CVE-2011-2720 glpi: does not properly blacklist certain sensitive variables, like username and password [epel-5]
https://bugzilla.redhat.com/show_bug.cgi?id=726187
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update glpi-pdf' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
[SECURITY] Fedora EPEL 5 Update: glpi-data-injection-2.0.2-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3907
2011-07-26 07:21:48
--------------------------------------------------------------------------------
Name : glpi-data-injection
Product : Fedora EPEL 5
Version : 2.0.2
Release : 1.el5
URL : https://forge.indepnet.net/projects/datainjection
Summary : Plugin for importing data into GLPI
Description :
Plugin for importing data into GLPI
It'll can serve, for example, to :
- import machines at the delivery (electronic delivery order in CSV)
- import additional data
- import equipment not managed by OCS
- transmit from an other tool of asset management
--------------------------------------------------------------------------------
Update Information:
New major version of GLPI and plugins.
For more information, see annoucement on http://www.glpi-project.org/spip.php?lang=en
This update also include a security fix.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #726187 - CVE-2011-2720 glpi: does not properly blacklist certain sensitive variables, like username and password [epel-5]
https://bugzilla.redhat.com/show_bug.cgi?id=726187
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update glpi-data-injection' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 6 Update: nordugrid-arc-1.0.1-1.el6.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3919
2011-07-26 07:22:23
--------------------------------------------------------------------------------
Name : nordugrid-arc
Product : Fedora EPEL 6
Version : 1.0.1
Release : 1.el6.1
URL : http://www.nordugrid.org/
Summary : Advanced Resource Connector Grid Middleware
Description :
NorduGrid is a collaboration aiming at development, maintenance and
support of the free Grid middleware, known as the Advanced Resource
Connector (ARC).
The Advanced Resource Connector (ARC) brings computing resources
together across institutional boundaries. This concept is commonly
referred to as a "computational grid". Historically, grids address the
organization of distributed storage of data and parallel computation,
but arbitrary services are thinkable.
Just like the web, ARC has its roots in the IT infrastructure that was
erected to analyze the experiments for high energy physics at CERN.
The first release, ARC-0.x, was dependent on Globus, the current
release keeps that compatibility but can also be used independently.
With ARC, the user gains flexibility with additional services and more
supported platforms. The service developer notices that even for
persistent functionality across the two major versions, what has been
a script on the server side once, that was repeatedly started and ran
through, this has now become a service. Those are only started once
and can then be queried, which is far more efficient, far more
responsive, and is no longer stateless but can observe changes of
values over time.
--------------------------------------------------------------------------------
Update Information:
The Advanced Resource Connector (ARC) Grid Middleware developed by the NorduGrid collaboration.
ARC brings computing resources together across institutional boundaries. This concept is commonly referred to as a "computational grid". Historically, grids address the organization of distributed storage of data and parallel computation, but arbitrary services are thinkable.
This is the first release of ARC in Fedora and EPEL.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #530684 - Review Request: nordugrid-arc - Advanced Resource Connector Grid Middleware
https://bugzilla.redhat.com/show_bug.cgi?id=530684
[ 2 ] Bug #704835 - Review Request: nordugrid-arc-doc - Advanced Resource Connector Documentation
https://bugzilla.redhat.com/show_bug.cgi?id=704835
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nordugrid-arc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 6 Update: nordugrid-arc-doc-1.0.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3919
2011-07-26 07:22:23
--------------------------------------------------------------------------------
Name : nordugrid-arc-doc
Product : Fedora EPEL 6
Version : 1.0.2
Release : 1.el6
URL : http://www.nordugrid.org/
Summary : Advanced Resource Connector Documentation
Description :
The NorduGrid is a collaboration aiming at development, maintenance
and support of the free Grid middleware, known as the Advanced
Resource Connector (ARC).
--------------------------------------------------------------------------------
Update Information:
The Advanced Resource Connector (ARC) Grid Middleware developed by the NorduGrid collaboration.
ARC brings computing resources together across institutional boundaries. This concept is commonly referred to as a "computational grid". Historically, grids address the organization of distributed storage of data and parallel computation, but arbitrary services are thinkable.
This is the first release of ARC in Fedora and EPEL.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #530684 - Review Request: nordugrid-arc - Advanced Resource Connector Grid Middleware
https://bugzilla.redhat.com/show_bug.cgi?id=530684
[ 2 ] Bug #704835 - Review Request: nordugrid-arc-doc - Advanced Resource Connector Documentation
https://bugzilla.redhat.com/show_bug.cgi?id=704835
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nordugrid-arc-doc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 6 Update: bluefish-2.0.3-4.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3918
2011-07-26 07:22:21
--------------------------------------------------------------------------------
Name : bluefish
Product : Fedora EPEL 6
Version : 2.0.3
Release : 4.el6
URL : http://bluefish.openoffice.nl/
Summary : GTK2 web development application for experienced users
Description :
Bluefish is a powerful editor for experienced web designers and programmers.
Bluefish supports many programming and markup languages, but it focuses on
editing dynamic and interactive websites.
--------------------------------------------------------------------------------
Update Information:
This update includes an upstream fix for a crash originally caused by opening lots of files and then closing them quickly with
Ctrl-W.
https://bugzilla.gnome.org/show_bug.cgi?id=654838
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #720990 - [abrt] bluefish-2.0.3-3.fc14: Process /usr/bin/bluefish was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=720990
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update bluefish' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 6 Update: spectrum-1.4.8-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3917
2011-07-26 07:22:19
--------------------------------------------------------------------------------
Name : spectrum
Product : Fedora EPEL 6
Version : 1.4.8
Release : 2.el6
URL : http://spectrum.im/
Summary : XMPP transport/gateway
Description :
Spectrum is an XMPP transport/gateway. It allows XMPP users to communicate with
their friends who are using one of the supported networks. Spectrum is written
in C++ and uses the Gloox XMPP library and libpurple for “legacy networks”.
Spectrum supports a wide range of different networks such as ICQ, XMPP (Jabber,
GTalk), AIM, MSN, Facebook, Twitter, Gadu-Gadu, IRC and SIMPLE.
--------------------------------------------------------------------------------
Update Information:
Build against new libev.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update spectrum' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 6 Update: grace-5.1.22-7.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3905
2011-07-26 07:21:44
--------------------------------------------------------------------------------
Name : grace
Product : Fedora EPEL 6
Version : 5.1.22
Release : 7.el6
URL : http://plasma-gate.weizmann.ac.il/Grace/
Summary : Numerical Data Processing and Visualization Tool
Description :
Grace is a Motif application for two-dimensional data visualization.
Grace can transform the data using free equations, FFT, cross- and
auto-correlation, differences, integrals, histograms, and much
more. The generated figures are of high quality. Grace is a very
convenient tool for data inspection, data transformation, and for
making figures for publications.
--------------------------------------------------------------------------------
Update Information:
First build for EPEL 6.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update grace' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
[SECURITY] Fedora EPEL 5 Update: libsndfile-1.0.17-5.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3809
2011-07-14 23:22:17
--------------------------------------------------------------------------------
Name : libsndfile
Product : Fedora EPEL 5
Version : 1.0.17
Release : 5.el5
URL : http://www.mega-nerd.com/libsndfile/
Summary : Library for reading and writing sound files
Description :
libsndfile is a C library for reading and writing sound files such as
AIFF, AU, WAV, and others through one standard interface. It can
currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and
64-bit floating point WAV files and a number of compressed formats. It
compiles and runs on *nix, MacOS, and Win32.
--------------------------------------------------------------------------------
Update Information:
- fixes integer overflow by processing certain PAF audio files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #721234 - CVE-2011-2696 libsndfile: Application crash due integer overflow by processing certain PAF audio files
https://bugzilla.redhat.com/show_bug.cgi?id=721234
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libsndfile' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 6 Update: zeroinstall-injector-1.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3913
2011-07-26 07:22:07
--------------------------------------------------------------------------------
Name : zeroinstall-injector
Product : Fedora EPEL 6
Version : 1.2
Release : 1.el6
URL : http://0install.net
Summary : The Zero Install Injector (0launch)
Description :
The Zero Install Injector makes it easy for users to install software
without needing root privileges. It takes the URL of a program and
runs it (downloading it first if necessary). Any dependencies of the
program are fetched in the same way. The user controls which version
of the program and its dependencies to use.
Zero Install is a decentralized installation system (there is no
central repository; all packages are identified by URLs),
loosely-coupled (if different programs require different versions of a
library then both versions are installed in parallel, without
conflicts), and has an emphasis on security (all package descriptions
are GPG-signed, and contain cryptographic hashes of the contents of
each version). Each version of each program is stored in its own
sub-directory within the Zero Install cache (nothing is installed to
directories outside of the cache, such as /usr/bin) and no code from
the package is run during install or uninstall. The system can
automatically check for updates when software is run.
--------------------------------------------------------------------------------
Update Information:
0install 1.1: http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/4331
- support for optional dependencies
- '0install digest' command
- environment variable separator now configurable
0install 1.2: http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/4387
- added <executable-in-path> and <executable-in-var> bindings
- In selections, store <command> elements inside <selection> elements
- Display a deprecation warning if Selections(Policy) is used.
- 0alias now generates new-style launchers, and can parse both formats
- Batch up queries to PackageKit
- Fixed GUI performance problem with large number of feeds
- Write separator attribute for <environment> tag when serializing model
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #725155 - zeroinstall-injector-1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=725155
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zeroinstall-injector' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months
Fedora EPEL 5 Update: django-tracking-0.3.7-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-3916
2011-07-26 07:22:16
--------------------------------------------------------------------------------
Name : django-tracking
Product : Fedora EPEL 5
Version : 0.3.7
Release : 2.el5
URL : https://bitbucket.org/codekoala/django-tracking/
Summary : Django site visitor tracking, including basic blacklisting
Description :
django-tracking is a simple attempt at keeping track of visitors to
Django-powered Web sites. It also offers basic blacklisting capabilities.
--------------------------------------------------------------------------------
Update Information:
This update is a release update from upstream and applies a few minor bugfixes.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update django-tracking' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 9 months