[SECURITY] Fedora EPEL 6 Update: python-djblets-0.7.18-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11672
2013-09-23 17:04:13
--------------------------------------------------------------------------------
Name : python-djblets
Product : Fedora EPEL 6
Version : 0.7.18
Release : 1.el6
URL : http://www.review-board.org
Summary : A collection of useful classes and functions for Django
Description :
A collection of useful classes and functions for Django
--------------------------------------------------------------------------------
Update Information:
* Mon Sep 23 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.14-1
- New upstream security release 1.7.14
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.14/
- Some API resources were accessible even if their parent resources were not, due to a missing check. In most cases, this was harmless, but it can affect those using access control on groups or review requests.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1008423 - ReviewBoard-1.7.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1008423
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-djblets' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
[SECURITY] Fedora EPEL 6 Update: ReviewBoard-1.7.14-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11672
2013-09-23 17:04:13
--------------------------------------------------------------------------------
Name : ReviewBoard
Product : Fedora EPEL 6
Version : 1.7.14
Release : 1.el6
URL : http://www.review-board.org
Summary : Web-based code review tool
Description :
Review Board is a powerful web-based code review tool that offers
developers an easy way to handle code reviews. It scales well from small
projects to large companies and offers a variety of tools to take much
of the stress and time out of the code review process.
--------------------------------------------------------------------------------
Update Information:
* Mon Sep 23 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.14-1
- New upstream security release 1.7.14
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.14/
- Some API resources were accessible even if their parent resources were not, due to a missing check. In most cases, this was harmless, but it can affect those using access control on groups or review requests.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1008423 - ReviewBoard-1.7.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1008423
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ReviewBoard' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
Fedora EPEL 6 Update: lsyncd-2.1.4-4.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11681
2013-09-25 16:10:26
--------------------------------------------------------------------------------
Name : lsyncd
Product : Fedora EPEL 6
Version : 2.1.4
Release : 4.el6
URL : http://code.google.com/p/lsyncd/
Summary : File change monitoring and synchronization daemon
Description :
Lsyncd watches a local directory trees event monitor interface (inotify).
It aggregates and combines events for a few seconds and then spawns one
(or more) process(es) to synchronize the changes. By default this is
rsync.
Lsyncd is thus a light-weight live mirror solution that is comparatively
easy to install not requiring new file systems or block devices and does
not hamper local file system performance.
--------------------------------------------------------------------------------
Update Information:
Fix outstanding bugs on el6: log directory, PIE flags, logrotate restart
LSYNCD_OPTIONS were accidentally zeroized
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #908151 - lsyncd throws error on installation due to incomplete mkdir command in post install RPM scriptlet
https://bugzilla.redhat.com/show_bug.cgi?id=908151
[ 2 ] Bug #915873 - lsyncd: problem with log rotation
https://bugzilla.redhat.com/show_bug.cgi?id=915873
[ 3 ] Bug #955203 - lsyncd package should be built with PIE flags
https://bugzilla.redhat.com/show_bug.cgi?id=955203
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lsyncd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
[SECURITY] Fedora EPEL 6 Update: xpdf-3.03-8.el6.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11666
2013-09-22 16:51:34
--------------------------------------------------------------------------------
Name : xpdf
Product : Fedora EPEL 6
Version : 3.03
Release : 8.el6.1
URL : http://www.foolabs.com/xpdf/
Summary : A PDF file viewer for the X Window System
Description :
Xpdf is an X Window System based viewer for Portable Document Format
(PDF) files. Xpdf is a small and efficient program which uses
standard X fonts.
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #789936 - CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages
https://bugzilla.redhat.com/show_bug.cgi?id=789936
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xpdf' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
Fedora EPEL 6 Update: mongodb-2.4.6-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11647
2013-09-20 19:08:59
--------------------------------------------------------------------------------
Name : mongodb
Product : Fedora EPEL 6
Version : 2.4.6
Release : 1.el6
URL : http://www.mongodb.org
Summary : High-performance, schema-free document-oriented database
Description :
Mongo (from "humongous") is a high-performance, open source, schema-free
document-oriented database. MongoDB is written in C++ and offers the following
features:
* Collection oriented storage: easy storage of object/JSON-style data
* Dynamic queries
* Full index support, including on inner objects and embedded arrays
* Query profiling
* Replication and fail-over support
* Efficient storage of binary data including large objects (e.g. photos
and videos)
* Auto-sharding for cloud-level scalability (currently in early alpha)
* Commercial Support Available
A key goal of MongoDB is to bridge the gap between key/value stores (which are
fast and highly scalable) and traditional RDBMS systems (which are deep in
functionality).
--------------------------------------------------------------------------------
Update Information:
Update to 2.4.6, fix several bugs (#971595,979784,972904)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mongodb' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
[SECURITY] Fedora EPEL 6 Update: gridsite-2.0.4-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11639
2013-09-20 19:08:41
--------------------------------------------------------------------------------
Name : gridsite
Product : Fedora EPEL 6
Version : 2.0.4
Release : 2.el6
URL : http://www.gridsite.org
Summary : Grid Security for the Web, Web platforms for Grids
Description :
GridSite was originally a web application developed for managing and formatting
the content of the http://www.gridpp.ac.uk/ website. Over the past years it
has grown into a set of extensions to the Apache web server and a toolkit for
Grid credentials, GACL access control lists and HTTP(S) protocol operations.
This package gridsite contains apache httpd modules for enabling
mod_gridsite.
--------------------------------------------------------------------------------
Update Information:
* New upstream version 2.0.4.
* A new package gridsite1.7-compat is added to maintain binary compatibility.
- ==== GridSite version 2.0.4 ====
* Mon Jan 21 2013 Zdeněk Šustr <sustr4(a)cesnet.cz>
* When constructing a list of FQANs, a reference to the proxy is stored in the chain that contains the attribute (GGUS #79096)
* Avoid looking up remote IP, it is available in the Apache context
* Flapping yum update fixed
- ==== GridSite version 2.0.3 ====
* Wed Nov 14 2012 Zdeněk Šustr <sustr4(a)cesnet.cz>
- Segmentation fault in htproxyput fixed (occurred if run by non-root)
- ==== GridSite version 2.0.2 ====
* Tue Nov 06 2012 Zdeněk Šustr <sustr4(a)cesnet.cz>
- Certificates made available in the GRST structure
- ==== GridSite version 2.0.1 ====
* Fri Oct 22 2012 František Dvořák <valtri(a)civ.zcu.cz>
- one more update of the packaging for Debian
* Fri Oct 19 2012 František Dvořák <valtri(a)civ.zcu.cz>
- update of the packaging for Debian due to major version bump
- add DESTDIR to install target
* Thu Oct 18 2012 František Dvořák <valtri(a)civ.zcu.cz>
- fix packaging for SL6 and Fedora (curl-devel -> libcurl-devel)
- big library versions cleanup, using libtool to compile and link
- ==== GridSite version 2.0.0 ====
* Wed Oct 17 2012 Marcel Poul <marcel.poul(a)cern.ch>
- Internals rewritten to use caNl
* Wed Oct 17 2012 František Dvořák <valtri(a)civ.zcu.cz>
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #965532 - gridsite package should be built with PIE flags
https://bugzilla.redhat.com/show_bug.cgi?id=965532
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update gridsite' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
Fedora EPEL 6 Update: nodejs-require-all-0.0.6-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-10927
2013-07-22 20:36:56
--------------------------------------------------------------------------------
Name : nodejs-require-all
Product : Fedora EPEL 6
Version : 0.0.6
Release : 1.el6
URL : http://github.com/felixge/node-require-all
Summary : Require all files within a directory
Description :
An easy way to require all files within a directory.
--------------------------------------------------------------------------------
Update Information:
Newpackage
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nodejs-require-all' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
[SECURITY] Fedora EPEL 5 Update: xpdf-3.03-8.el5.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11667
2013-09-22 16:51:36
--------------------------------------------------------------------------------
Name : xpdf
Product : Fedora EPEL 5
Version : 3.03
Release : 8.el5.1
URL : http://www.foolabs.com/xpdf/
Summary : A PDF file viewer for the X Window System
Description :
Xpdf is an X Window System based viewer for Portable Document Format
(PDF) files. Xpdf is a small and efficient program which uses
standard X fonts.
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #789936 - CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages
https://bugzilla.redhat.com/show_bug.cgi?id=789936
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xpdf' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
Fedora EPEL 6 Update: libtommath-0.42.0-3.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11718
2013-09-29 17:17:34
--------------------------------------------------------------------------------
Name : libtommath
Product : Fedora EPEL 6
Version : 0.42.0
Release : 3.el6
URL : http://www.libtom.org/?page=features&newsitems=5&whatfile=ltm
Summary : A portable number theoretic multiple-precision integer library
Description :
A free open source portable number theoretic multiple-precision integer library
written entirely in C. (phew!). The library is designed to provide a simple to
work with API that provides fairly efficient routines that build out of the box
without configuration.
--------------------------------------------------------------------------------
Update Information:
Simplify header files installation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1013320 - RPM install to the wrong location
https://bugzilla.redhat.com/show_bug.cgi?id=1013320
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libtommath' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
Fedora EPEL 6 Update: libtomcrypt-1.17-21.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-11718
2013-09-29 17:17:34
--------------------------------------------------------------------------------
Name : libtomcrypt
Product : Fedora EPEL 6
Version : 1.17
Release : 21.el6
URL : http://www.libtom.org/?page=features&newsitems=5&whatfile=crypt
Summary : A comprehensive, portable cryptographic toolkit
Description :
A comprehensive, modular and portable cryptographic toolkit that provides
developers with a vast array of well known published block ciphers, one-way hash
functions, chaining modes, pseudo-random number generators, public key
cryptography and a plethora of other routines.
Designed from the ground up to be very simple to use. It has a modular and
standard API that allows new ciphers, hashes and PRNGs to be added or removed
without change to the overall end application. It features easy to use functions
and a complete user manual which has many source snippet examples.
--------------------------------------------------------------------------------
Update Information:
Simplify header files installation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1013320 - RPM install to the wrong location
https://bugzilla.redhat.com/show_bug.cgi?id=1013320
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libtomcrypt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months