[SECURITY] Fedora EPEL 5 Update: drupal6-6.28-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0116
2013-01-22 02:41:37
--------------------------------------------------------------------------------
Name : drupal6
Product : Fedora EPEL 5
Version : 6.28
Release : 1.el5
URL : http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
SA-CORE-2013-001
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #896454 - drupal6-6.28 is available
https://bugzilla.redhat.com/show_bug.cgi?id=896454
[ 2 ] Bug #896468 - drupal6, drupal7: Multiple security flaws fixed in upstream 6.28 and 7.19 versions (SA-CORE-2013-001) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=896468
[ 3 ] Bug #896469 - drupal6, drupal7: Multiple security flaws fixed in upstream 6.28 and 7.19 versions (SA-CORE-2013-001) [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=896469
[ 4 ] Bug #896470 - drupal6, drupal7: Multiple security flaws fixed in upstream 6.28 and 7.19 versions (SA-CORE-2013-001) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=896470
[ 5 ] Bug #896471 - drupal6, drupal7: Multiple security flaws fixed in upstream 6.28 and 7.19 versions (SA-CORE-2013-001) [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=896471
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal6' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
[SECURITY] Fedora EPEL 6 Update: seamonkey-2.15.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0194
2013-01-23 21:33:54
--------------------------------------------------------------------------------
Name : seamonkey
Product : Fedora EPEL 6
Version : 2.15.1
Release : 1.el6
URL : http://www.mozilla.org/projects/seamonkey/
Summary : Web browser, e-mail, news, IRC client, HTML editor
Description :
SeaMonkey is an all-in-one Internet application suite. It includes
a browser, mail/news client, IRC client, JavaScript debugger, and
a tool to inspect the DOM for web pages. It is derived from the
application formerly known as Mozilla Application Suite.
--------------------------------------------------------------------------------
Update Information:
Update to 2.15.1
Update to 2.15
Fixes CVE-2013-0743, CVE-2013-{0744-0760},
CVE-2013-0762, CVE-2013-0764, CVE-2013-{0766-0770}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #902244 - seamonkey-2.15.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=902244
[ 2 ] Bug #893717 - seamonkey-2.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=893717
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update seamonkey' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 5 Update: ivykis-0.36.1-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0125
2013-01-22 02:42:07
--------------------------------------------------------------------------------
Name : ivykis
Product : Fedora EPEL 5
Version : 0.36.1
Release : 1.el5
URL : http://libivykis.sourceforge.net/
Summary : Library for asynchronous I/O readiness notification
Description :
ivykis is a library for asynchronous I/O readiness notification.
It is a thin, portable wrapper around OS-provided mechanisms such
as epoll_create(2), kqueue(2), poll(2), poll(7d) (/dev/poll) and
port_create(3C).
ivykis was mainly designed for building high-performance network
applications, but can be used in any event-driven application that
uses poll(2)able file descriptors as its event sources.
--------------------------------------------------------------------------------
Update Information:
Update to 0.36.1.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ivykis' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
[SECURITY] Fedora EPEL 6 Update: proftpd-1.3.3g-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0157
2013-01-22 02:44:07
--------------------------------------------------------------------------------
Name : proftpd
Product : Fedora EPEL 6
Version : 1.3.3g
Release : 2.el6
URL : http://www.proftpd.org/
Summary : Flexible, stable and highly-configurable FTP server
Description :
ProFTPD is an enhanced FTP server with a focus toward simplicity, security,
and ease of configuration. It features a very Apache-like configuration
syntax, and a highly customizable server infrastructure, including support for
multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory
visibility.
This package defaults to the standalone behavior of ProFTPD, but all the
needed scripts to have it run by xinetd instead are included.
--------------------------------------------------------------------------------
Update Information:
Jann Horn reported that there is a possible race condition in the handling of the MKD/XMKD FTP commands, when the UserOwner directive is involved, and the attacker is on the same physical machine as a running proftpd. This race applies to mod_sftp and the handling of the MKDIR SFTP request as well.
Note that using the DefaultRoot directive to restrict sessions mitigates this attack, since the symlinks created by the local attacker will point outside of the chroot(2) area within the FTP session, and thus the ownership change will fail. The default configuration in EPEL applies the DefaultRoot directive to all users except "adm".
The upstream reference for this issue is: http://bugs.proftpd.org/show_bug.cgi?id=3841
This update includes a backport to 1.3.3g of upstream's backport to proftpd 1.3.4 of the fix for this issue.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #892715 - CVE-2012-6095 proftpd: Symlink race condition when applying UserOwner to a newly (ProFTPD) created directory
https://bugzilla.redhat.com/show_bug.cgi?id=892715
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update proftpd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 5 Update: libxc-2.0.1-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0132
2013-01-22 02:42:33
--------------------------------------------------------------------------------
Name : libxc
Product : Fedora EPEL 5
Version : 2.0.1
Release : 1.el5
URL : http://www.tddft.org/programs/octopus/wiki/index.php/Libxc
Summary : Library of exchange and correlation functionals to be used in DFT codes
Description :
libxc is a library of exchange and correlation functionals. Its purpose is to
be used in codes that implement density-functional theory. For the moment, the
library includes most of the local density approximations (LDAs), generalized
density approximation (GGAs), and meta-GGAs. The library provides values for
the energy density and its 1st, 2nd, and (for the LDAs) 3rd derivatives.
--------------------------------------------------------------------------------
Update Information:
Bugfixes to MGGA functionals, all B97-like GGA functionals and GGA C_WL functional.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libxc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 5 Update: ndjbdns-1.05.6-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0118
2013-01-22 02:41:44
--------------------------------------------------------------------------------
Name : ndjbdns
Product : Fedora EPEL 5
Version : 1.05.6
Release : 1.el5
URL : http://pjp.dgplug.org/djbdns/
Summary : New djbdns: usable djbdns
Description :
New djbdns: is a usable fork of djbdns. `djbdns' is a Domain Name System
originally written by the eminent author of Qmail, Dr D. J. Bernstein.
This *new* version of djbdns is a complete makeover to the original
source(djbdns-1.05) and is meant to make life a lot more pleasant. The
notable changes so far are in the set-up & configuration steps and
integration with the systemd(1) framework. This new release is free from
the clutches of `daemon-tools'. The original source is in public-domain
since late Dec 2007(see: http://cr.yp.to/distributors.html);
--------------------------------------------------------------------------------
Update Information:
New djbdns: usable djbdns
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ndjbdns' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: php-pear-Image-Text-0.6.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0143
2013-01-22 02:43:11
--------------------------------------------------------------------------------
Name : php-pear-Image-Text
Product : Fedora EPEL 6
Version : 0.6.1
Release : 1.el6
URL : http://pear.php.net/package/Image_Text
Summary : Advanced text manipulations in images
Description :
Image_Text provides a comfortable interface to text manipulations in GD
images. Beside common Freetype2 functionality it offers to handle texts
in a graphic- or office-tool like way. For example it allows alignment of
texts inside a text box, rotation (around the top left corner of a text
box or it's center point) and the automatic measurement of the optimal
font size for a given text box.
--------------------------------------------------------------------------------
Update Information:
Image_Text provides a comfortable interface to text manipulations in GD images. Beside common Freetype2 functionality it offers to handle texts in a graphic- or office-tool like way. For example it allows alignment of texts inside a text box, rotation (around the top left corner of a text box or it's center point) and the automatic measurement of the optimal font size for a given text box.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #896014 - Review Request: php-pear-Image-Text - Advanced text manipulations in images
https://bugzilla.redhat.com/show_bug.cgi?id=896014
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-pear-Image-Text' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: php-symfony2-Templating-2.1.7-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0165
2013-01-22 02:44:31
--------------------------------------------------------------------------------
Name : php-symfony2-Templating
Product : Fedora EPEL 6
Version : 2.1.7
Release : 1.el6
URL : http://symfony.com/doc/current/components/templating.html
Summary : Symfony2 Templating Component
Description :
Templating provides all the tools needed to build any kind of template system.
It provides an infrastructure to load template files and optionally monitor
them for changes. It also provides a concrete template engine implementation
using PHP with additional tools for escaping and separating templates into
blocks and layouts.
--------------------------------------------------------------------------------
Update Information:
Updated to upstream version 2.1.7
See: http://symfony.com/blog/security-release-symfony-2-0-22-and-2-1-7-released
Changelog: https://github.com/symfony/symfony/blob/v2.1.7/CHANGELOG-2.1.md
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-symfony2-Templating' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: php-symfony2-Translation-2.1.7-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0165
2013-01-22 02:44:31
--------------------------------------------------------------------------------
Name : php-symfony2-Translation
Product : Fedora EPEL 6
Version : 2.1.7
Release : 1.el6
URL : http://symfony.com/components
Summary : Symfony2 Translation Component
Description :
Translation provides tools for loading translation files and generating
translated strings from these including support for pluralization.
--------------------------------------------------------------------------------
Update Information:
Updated to upstream version 2.1.7
See: http://symfony.com/blog/security-release-symfony-2-0-22-and-2-1-7-released
Changelog: https://github.com/symfony/symfony/blob/v2.1.7/CHANGELOG-2.1.md
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-symfony2-Translation' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months