Fedora EPEL 6 Update: will-crash-0.3-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0429
2013-02-22 18:26:06
--------------------------------------------------------------------------------
Name : will-crash
Product : Fedora EPEL 6
Version : 0.3
Release : 1.el6
URL : http://github.com/sorki/will-crash
Summary : Set of crashing executables written in various languages
Description :
The main purpose of this project is to provide sample
executables for testing crash/exception handling tools
like ABRT.
--------------------------------------------------------------------------------
Update Information:
Version bump.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update will-crash' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: mozilla-https-everywhere-3.1.3-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0180
2013-01-23 21:33:02
--------------------------------------------------------------------------------
Name : mozilla-https-everywhere
Product : Fedora EPEL 6
Version : 3.1.3
Release : 1.el6
URL : https://eff.org/https-everywhere
Summary : HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
Description :
HTTPS Everywhere is a Firefox extension produced as a collaboration between
The Tor Project and the Electronic Frontier Foundation. It encrypts your
communications with a number of major websites.
Many sites on the web offer some limited support for encryption over HTTPS,
but make it difficult to use. For instance, they may default to unencrypted
HTTP, or fill encrypted pages with links that go back to the unencrypted site.
The HTTPS Everywhere extension fixes these problems by rewriting all requests
to these sites to HTTPS.
--------------------------------------------------------------------------------
Update Information:
Fixes: CloudFront/Spotify, AmazonAWS (Amazon MP3s
and product images), Libav, Google Maps, UserEcho
https://trac.torproject.org/projects/tor/ticket/7931
https://trac.torproject.org/projects/tor/ticket/7888
https://trac.torproject.org/projects/tor/ticket/7594
https://trac.torproject.org/projects/tor/ticket/7539
https://trac.torproject.org/projects/tor/ticket/7698
Disable broken: Coursera, EBay, Etsy, OpenOffice,
Ping.fm, Pinterest :(
https://trac.torproject.org/projects/tor/ticket/7336
https://trac.torproject.org/projects/tor/ticket/7825
https://trac.torproject.org/projects/tor/ticket/7774
https://trac.torproject.org/projects/tor/ticket/7695
https://trac.torproject.org/projects/tor/ticket/7777
https://trac.torproject.org/projects/tor/ticket/7865
Update cert whitelist
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mozilla-https-everywhere' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 5 Update: mozilla-https-everywhere-3.1.3-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0187
2013-01-23 21:33:30
--------------------------------------------------------------------------------
Name : mozilla-https-everywhere
Product : Fedora EPEL 5
Version : 3.1.3
Release : 1.el5
URL : https://eff.org/https-everywhere
Summary : HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
Description :
HTTPS Everywhere is a Firefox extension produced as a collaboration between
The Tor Project and the Electronic Frontier Foundation. It encrypts your
communications with a number of major websites.
Many sites on the web offer some limited support for encryption over HTTPS,
but make it difficult to use. For instance, they may default to unencrypted
HTTP, or fill encrypted pages with links that go back to the unencrypted site.
The HTTPS Everywhere extension fixes these problems by rewriting all requests
to these sites to HTTPS.
--------------------------------------------------------------------------------
Update Information:
Fixes: CloudFront/Spotify, AmazonAWS (Amazon MP3s
and product images), Libav, Google Maps, UserEcho
https://trac.torproject.org/projects/tor/ticket/7931
https://trac.torproject.org/projects/tor/ticket/7888
https://trac.torproject.org/projects/tor/ticket/7594
https://trac.torproject.org/projects/tor/ticket/7539
https://trac.torproject.org/projects/tor/ticket/7698
Disable broken: Coursera, EBay, Etsy, OpenOffice,
Ping.fm, Pinterest :(
https://trac.torproject.org/projects/tor/ticket/7336
https://trac.torproject.org/projects/tor/ticket/7825
https://trac.torproject.org/projects/tor/ticket/7774
https://trac.torproject.org/projects/tor/ticket/7695
https://trac.torproject.org/projects/tor/ticket/7777
https://trac.torproject.org/projects/tor/ticket/7865
Update cert whitelist
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mozilla-https-everywhere' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: canl-c-2.0.7-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0246
2013-02-02 18:54:55
--------------------------------------------------------------------------------
Name : canl-c
Product : Fedora EPEL 6
Version : 2.0.7
Release : 1.el6
URL : http://www.eu-emi.eu
Summary : EMI Common Authentication library - bindings for C
Description :
This is the C part of the EMI caNl -- the Common Authentication
Library.
--------------------------------------------------------------------------------
Update Information:
This is the C part of the EMI caNl -- the Common Authentication Library.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #867368 - Review Request: canl-c - Common Authentication Library for C
https://bugzilla.redhat.com/show_bug.cgi?id=867368
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update canl-c' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: log4cplus-1.1.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0396
2013-02-19 21:18:14
--------------------------------------------------------------------------------
Name : log4cplus
Product : Fedora EPEL 6
Version : 1.1.0
Release : 1.el6
URL : http://sourceforge.net/projects/log4cplus
Summary : Logging Framework for C++
Description :
log4cplus is a simple to use C++ logging API providing thread-safe, flexible,
and arbitrarily granular control over log management and configuration. It is
modeled after the Java log4j API.
--------------------------------------------------------------------------------
Update Information:
This update introduces log4cplus in epel6 repository.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update log4cplus' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: trac-mastertickets-plugin-3.0.3-1.20130209.git4c461fe.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0334
2013-02-10 18:45:08
--------------------------------------------------------------------------------
Name : trac-mastertickets-plugin
Product : Fedora EPEL 6
Version : 3.0.3
Release : 1.20130209.git4c461fe.el6
URL : http://trac-hacks.org/wiki/MasterTicketsPlugin
Summary : Add support for ticket dependencies to Trac
Description :
This plugin adds "blocks" and "blocked by" fields to each ticket, enabling
you to express dependencies between tickets. It also provides a
graphviz-based dependency-graph feature for those tickets having
dependencies specified, allowing you to visually understand the
dependency tree. The dependency graph is viewable by clicking 'depgraph' in
the context (in the upper right corner) menu when viewing a ticket that
blocks or is blocked by another ticket.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream snapshot with doc additions and bugfixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #907591 - trac-mastertickets-plugin: please update to version 3.0.3
https://bugzilla.redhat.com/show_bug.cgi?id=907591
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update trac-mastertickets-plugin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
[SECURITY] Fedora EPEL 6 Update: roundcubemail-0.8.5-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0298
2013-02-09 01:07:31
--------------------------------------------------------------------------------
Name : roundcubemail
Product : Fedora EPEL 6
Version : 0.8.5
Release : 1.el6
URL : http://www.roundcube.net
Summary : Round Cube Webmail is a browser-based multilingual IMAP client
Description :
RoundCube Webmail is a browser-based multilingual IMAP client
with an application-like user interface. It provides full
functionality you expect from an e-mail client, including MIME
support, address book, folder manipulation, message searching
and spell checking. RoundCube Webmail is written in PHP and
requires the MySQL database or the PostgreSQL database. The user
interface is fully skinnable using XHTML and CSS 2.
--------------------------------------------------------------------------------
Update Information:
A cross-site scripting (XSS) flaws were round in the way Round Cube Webmail, a browser-based multilingual IMAP client, performed sanitization of 'data' and 'vbscript' URLs. A remote attacker could provide a specially-crafted URL that, when opened would lead to arbitrary JavaScript, VisualBasic script or HTML code execution in the context of Round Cube Webmail's user session.
Upstream ticket:
[1] http://trac.roundcube.net/ticket/1488850
Further details:
[2] http://trac.roundcube.net/attachment/ticket/1488850/RoundCube2XSS.pdf
Upstream patch:
[3] https://github.com/roundcube/roundcubemail/commit/74cd0a9b62f11bc07c5a1d3...
References:
[4] http://sourceforge.net/news/?group_id=139281&id=310213
[5] http://www.openwall.com/lists/oss-security/2013/02/07/11
[6] http://www.openwall.com/lists/oss-security/2013/02/08/1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #909304 - CVE-2012-6121 roundcubemail: Cross-site scripting (XSS) in vbscript: and data:text URL handling [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=909304
[ 2 ] Bug #909306 - CVE-2012-6121 roundcubemail: Cross-site scripting (XSS) in vbscript: and data:text URL handling [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=909306
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update roundcubemail' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: rubygem-kgio-2.8.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0326
2013-02-10 18:44:46
--------------------------------------------------------------------------------
Name : rubygem-kgio
Product : Fedora EPEL 6
Version : 2.8.0
Release : 1.el6
URL : http://bogomips.org/kgio
Summary : Kinder, gentler I/O for Ruby
Description :
kgio provides non-blocking I/O methods for Ruby without raising
exceptions on EAGAIN and EINPROGRESS. It is intended for use with the
Unicorn and Rainbows! Rack servers, but may be used by other
applications (that run on Unix-like platforms).
--------------------------------------------------------------------------------
Update Information:
Updated version.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rubygem-kgio' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: drupal7-ckeditor-1.12-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0303
2013-02-09 01:07:44
--------------------------------------------------------------------------------
Name : drupal7-ckeditor
Product : Fedora EPEL 6
Version : 1.12
Release : 1.el6
URL : http://drupal.org/project/ckeditor
Summary : Replace textarea fields with the CKEditor - a visual HTML editor
Description :
This module will allow Drupal to replace textarea fields with the CKEditor -
a visual HTML editor, sometimes called WYSIWYG editor. This HTML text editor
brings many of the powerful WYSIWYG editing functions of known desktop
editors like Word to the web. It's very fast and doesn't require any kind of
installation on the client computer.
--------------------------------------------------------------------------------
Update Information:
Update to 1.12 - https://drupal.org/node/1872650
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #908485 - Update drupal7-ckeditor
https://bugzilla.redhat.com/show_bug.cgi?id=908485
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal7-ckeditor' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months
Fedora EPEL 6 Update: munin-2.0.11.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0320
2013-02-10 18:44:31
--------------------------------------------------------------------------------
Name : munin
Product : Fedora EPEL 6
Version : 2.0.11.1
Release : 1.el6
URL : http://munin-monitoring.org/
Summary : Network-wide graphing framework (grapher/gatherer)
Description :
Munin is a highly flexible and powerful solution used to create graphs
of virtually everything imaginable throughout your network, while still
maintaining a rattling ease of installation and configuration.
This package contains the grapher/gatherer. You will only need one instance of
it in your network. It will periodically poll all the nodes in your network
it's aware of for data, which it in turn will use to create graphs and HTML
pages, suitable for viewing with your graphical web browser of choice.
Munin is written in Perl, and relies heavily on Tobi Oetiker's excellent
RRDtool.
Creaete a munin web user after installing:
htpasswd -bc /etc/munin/munin-htpasswd MUNIN_WEB_USER PASSWORD
--------------------------------------------------------------------------------
Update Information:
Upstream version 2.0.11.1, fixes asyncd
Upstream 2.0.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #908711 - munin-async: wrong path in init script
https://bugzilla.redhat.com/show_bug.cgi?id=908711
[ 2 ] Bug #907369 - Munin HTMLOld.pm is patched with a bad patch from munin track that breaks thread counting
https://bugzilla.redhat.com/show_bug.cgi?id=907369
[ 3 ] Bug #896644 - Wrong path to munin jar in jmx plugin
https://bugzilla.redhat.com/show_bug.cgi?id=896644
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update munin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 2 months