[SECURITY] Fedora EPEL 6 Update: gajim-0.14.4-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-5586
2012-04-17 23:08:51
--------------------------------------------------------------------------------
Name : gajim
Product : Fedora EPEL 6
Version : 0.14.4
Release : 3.el6
URL : http://gajim.org/
Summary : Jabber client written in PyGTK
Description :
Gajim is a Jabber client written in PyGTK. The goal of Gajim's developers is
to provide a full featured and easy to use xmpp client for the GTK+ users.
Gajim does not require GNOME to run, even though it exists with it nicely.
--------------------------------------------------------------------------------
Update Information:
This updates gajim to the last bugfix release of the 0.14 series and adds fixes for security bugs:
* CVE-2012-2085 - user-assisted code execution
* CVE-2012-2086 - SQL injection
* CVE-2012-2093 - (LaTeX module): Insecure creation of temporary file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #811651 - CVE-2012-2093 gajim (LaTeX module): Insecure creation of temporary file
https://bugzilla.redhat.com/show_bug.cgi?id=811651
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update gajim' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 11 months
Fedora EPEL 6 Update: procServ-2.6.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-5592
2012-04-17 23:09:08
--------------------------------------------------------------------------------
Name : procServ
Product : Fedora EPEL 6
Version : 2.6.0
Release : 1.el6
URL : http://sourceforge.net/projects/procserv
Summary : Process server with telnet console and log access
Description :
procServ is a wrapper that starts an arbitrary command as a child process in
the background, connecting its standard input and output to a TCP port for
telnet access. It supports logging, child restart (manual or automatic on
exit), and more.
procServ does not have the rich feature set of the screen utility,
but is intended to provide running a command in a system service style,
in a small, robust way.
Handling multiple users, authorization, authentication, central logging
is done best on a higher level, using a package like conserver.
For security reasons, procServ only accepts connections from localhost.
--------------------------------------------------------------------------------
Update Information:
New upstream version.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update procServ' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 12 months
Fedora EPEL 5 Update: perl-Messaging-Message-1.0-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-5596
2012-04-17 23:09:18
--------------------------------------------------------------------------------
Name : perl-Messaging-Message
Product : Fedora EPEL 5
Version : 1.0
Release : 1.el5
URL : http://search.cpan.org/dist/Messaging-Message/
Summary : Abstraction of a message
Description :
This module provides an abstraction of a "message", as used in messaging,
see for instance: http://en.wikipedia.org/wiki/Enterprise_messaging_system.
--------------------------------------------------------------------------------
Update Information:
upgrade to latest 1.0 version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #799881 - Upgrade to new upstream version
https://bugzilla.redhat.com/show_bug.cgi?id=799881
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Messaging-Message' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 12 months
Fedora EPEL 6 Update: perl-Messaging-Message-1.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-5591
2012-04-17 23:09:03
--------------------------------------------------------------------------------
Name : perl-Messaging-Message
Product : Fedora EPEL 6
Version : 1.0
Release : 1.el6
URL : http://search.cpan.org/dist/Messaging-Message/
Summary : Abstraction of a message
Description :
This module provides an abstraction of a "message", as used in messaging,
see for instance: http://en.wikipedia.org/wiki/Enterprise_messaging_system.
--------------------------------------------------------------------------------
Update Information:
upgrade to latest 1.0 version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #799881 - Upgrade to new upstream version
https://bugzilla.redhat.com/show_bug.cgi?id=799881
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Messaging-Message' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 12 months
Fedora EPEL 5 Update: python-auth-credential-0.6-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-5593
2012-04-17 23:09:11
--------------------------------------------------------------------------------
Name : python-auth-credential
Product : Fedora EPEL 5
Version : 0.6
Release : 1.el5
URL : http://mpaladin.web.cern.ch/mpaladin/python/auth.credential/
Summary : Python abstraction of a credential
Description :
This module offers an abstraction of a credential, i.e. something that
can be used to authenticate. It allows the creation and manipulation of
credentials. In particular, it defines a standard string representation
(so that credentials can be given to external programs as command line
options), a standard structured representation (so that credentials can
be stored in structured configuration files or using JSON) and
"preparators" that can transform credentials into ready-to-use data for
well known targets.
The python module auth.credential is compatible with the Perl
module Authen::Credential.
--------------------------------------------------------------------------------
Update Information:
upgrade to latest upstream version 0.6
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-auth-credential' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 12 months
[SECURITY] Fedora EPEL 6 Update: gridengine-6.2u5-10.el6.4
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-5605
2012-04-17 23:09:42
--------------------------------------------------------------------------------
Name : gridengine
Product : Fedora EPEL 6
Version : 6.2u5
Release : 10.el6.4
URL : http://gridengine.sunsource.net/
Summary : Grid Engine - Distributed Computing Management software
Description :
In a typical network that does not have distributed resource management
software, workstations and servers are used from 5% to 20% of the time.
Even technical servers are generally less than fully utilized. This
means that there are a lot of cycles that can be used productively if
only users know where they are, can capture them, and put them to work.
Grid Engine finds a pool of idle resources and harnesses it
productively, so an organization gets as much as five to ten times the
usable power out of systems on the network. That can increase utilization
to as much as 98%.
Grid Engine software aggregates available compute resources and
delivers compute power as a network service.
These are the local files shared by both the qmaster and execd
daemons. You must install this package in order to use any one of them.
--------------------------------------------------------------------------------
Update Information:
- Use hardened build
- Add upstream env-code-injection and two other security patches
- Use sge_/SGE_ in man pages
- Use system jemalloc library
- Add patches from opengridscheduler to fix vmem reporting and slotwise preemption
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update gridengine' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 12 months
[SECURITY] Fedora EPEL 6 Update: mozilla-https-everywhere-2.0.3-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-5739
2012-05-02 20:05:19
--------------------------------------------------------------------------------
Name : mozilla-https-everywhere
Product : Fedora EPEL 6
Version : 2.0.3
Release : 2.el6
URL : https://eff.org/https-everywhere
Summary : HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
Description :
HTTPS Everywhere is a Firefox extension produced as a collaboration between
The Tor Project and the Electronic Frontier Foundation. It encrypts your
communications with a number of major websites.
Many sites on the web offer some limited support for encryption over HTTPS,
but make it difficult to use. For instance, they may default to unencrypted
HTTP, or fill encrypted pages with links that go back to the unencrypted site.
The HTTPS Everywhere extension fixes these problems by rewriting all requests
to these sites to HTTPS.
--------------------------------------------------------------------------------
Update Information:
Fix a possible SSL downgrade vulnerability.
Fix upstream bug 5676, which fixes an SSL downgrade attack.
Fix upstream bug 5676, which fixes an SSL downgrade attack.
Fix upstream bug 5676, which fixes an SSL downgrade attack.
Fix upstream bug 5676, which fixes an SSL downgrade attack.
Fix upstream bug 5676, which fixes an SSL downgrade attack.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mozilla-https-everywhere' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 12 months
Fedora EPEL 6 Update: python-auth-credential-0.6-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-5582
2012-04-17 23:08:40
--------------------------------------------------------------------------------
Name : python-auth-credential
Product : Fedora EPEL 6
Version : 0.6
Release : 1.el6
URL : http://mpaladin.web.cern.ch/mpaladin/python/auth.credential/
Summary : Python abstraction of a credential
Description :
This module offers an abstraction of a credential, i.e. something that
can be used to authenticate. It allows the creation and manipulation of
credentials. In particular, it defines a standard string representation
(so that credentials can be given to external programs as command line
options), a standard structured representation (so that credentials can
be stored in structured configuration files or using JSON) and
"preparators" that can transform credentials into ready-to-use data for
well known targets.
The python module auth.credential is compatible with the Perl
module Authen::Credential.
--------------------------------------------------------------------------------
Update Information:
upgrade to latest upstream version 0.6
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-auth-credential' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 12 months
Fedora EPEL 6 Update: postgrey-1.34-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-5581
2012-04-16 17:21:58
--------------------------------------------------------------------------------
Name : postgrey
Product : Fedora EPEL 6
Version : 1.34
Release : 1.el6
URL : http://postgrey.schweikert.ch/
Summary : Postfix Greylisting Policy Server
Description :
Postgrey is a Postfix policy server implementing greylisting. When a request
for delivery of a mail is received by Postfix via SMTP, the triplet CLIENT_IP /
SENDER / RECIPIENT is built. If it is the first time that this triplet is
seen, or if the triplet was first seen less than 5 minutes, then the mail gets
rejected with a temporary error. Hopefully spammers or viruses will not try
again later, as it is however required per RFC.
--------------------------------------------------------------------------------
Update Information:
This is the long awaited initial EPEL build.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #624418 - it'd be nice to build postgrey for epel too
https://bugzilla.redhat.com/show_bug.cgi?id=624418
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update postgrey' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 12 months
[SECURITY] Fedora EPEL 5 Update: puppet-2.6.16-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-5577
2012-04-16 17:21:47
--------------------------------------------------------------------------------
Name : puppet
Product : Fedora EPEL 5
Version : 2.6.16
Release : 1.el5
URL : http://puppetlabs.com
Summary : A network tool for managing many disparate systems
Description :
Puppet lets you centrally manage every important aspect of your system using a
cross-platform specification language that manages all the separate elements
normally aggregated in different files, like users, cron jobs, and hosts,
along with obviously discrete elements like packages, services, and files.
--------------------------------------------------------------------------------
Update Information:
This update fixes several security issues recently found in puppet related to filebucket functionality. For full details, refer to the upstream release notes:
http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #810069 - CVE-2012-1986 puppet: Filebucket arbitrary file read
https://bugzilla.redhat.com/show_bug.cgi?id=810069
[ 2 ] Bug #810070 - CVE-2012-1987 puppet: Filebucket denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=810070
[ 3 ] Bug #810071 - CVE-2012-1988 puppet: Filebucket arbitrary code execution
https://bugzilla.redhat.com/show_bug.cgi?id=810071
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update puppet' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 12 months