[SECURITY] Fedora EPEL 5 Update: git-1.8.2.1-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-5517
2013-04-23 02:42:13
--------------------------------------------------------------------------------
Name : git
Product : Fedora EPEL 5
Version : 1.8.2.1
Release : 1.el5
URL : http://git-scm.com/
Summary : Fast Version Control System
Description :
Git is a fast, scalable, distributed revision control system with an
unusually rich command set that provides both high-level operations
and full access to internals.
The git rpm installs the core tools with minimal dependencies. To
install all git packages, including tools for integrating with other
SCMs, install the git-all meta-package.
--------------------------------------------------------------------------------
Update Information:
Update to 1.8.2.1. Refer to the release notes for details.
The release notes are available online at:
https://github.com/git/git/tree/master/Documentation/RelNotes/
After installation, the release notes can also be found at:
/usr/share/doc/git-1.8.2.1/RelNotes/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #909977 - CVE-2013-0308 git: Incorrect IMAP server's SSL x509.v3 certificate validation in git-imap-send command
https://bugzilla.redhat.com/show_bug.cgi?id=909977
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update git' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 11 months
[SECURITY] Fedora EPEL 5 Update: mod_security-2.6.8-4.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-5990
2013-05-28 18:48:42
--------------------------------------------------------------------------------
Name : mod_security
Product : Fedora EPEL 5
Version : 2.6.8
Release : 4.el5
URL : http://www.modsecurity.org/
Summary : Security module for the Apache HTTP Server
Description :
ModSecurity is an open source intrusion detection and prevention engine
for web applications. It operates embedded into the web server, acting
as a powerful umbrella - shielding web applications from attacks.
--------------------------------------------------------------------------------
Update Information:
Fix NULL pointer dereference (DoS, crash) (CVE-2013-2765).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #967615 - mod_security: NULL pointer dereference (DoS, crash) when forceRequestBodyVariable action triggered and unknown Content-Type was used
https://bugzilla.redhat.com/show_bug.cgi?id=967615
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mod_security' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 11 months
Fedora EPEL 6 Update: perl-Directory-Queue-1.8-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-5973
2013-05-27 18:36:51
--------------------------------------------------------------------------------
Name : perl-Directory-Queue
Product : Fedora EPEL 6
Version : 1.8
Release : 2.el6
URL : http://search.cpan.org/dist/Directory-Queue/
Summary : Object oriented interface to a directory based queue
Description :
The goal of this module is to offer a simple queue system using the
underlying file system for storage, security and to prevent race conditions
via atomic operations. It focuses on simplicity, robustness and
scalability.
--------------------------------------------------------------------------------
Update Information:
Updating to upstream version 1.8, rhbz #965604.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #965604 - Upgrade to new upstream version
https://bugzilla.redhat.com/show_bug.cgi?id=965604
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Directory-Queue' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 11 months
Fedora EPEL 5 Update: perl-Mail-IMAPClient-3.33-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-5868
2013-05-21 01:06:15
--------------------------------------------------------------------------------
Name : perl-Mail-IMAPClient
Product : Fedora EPEL 5
Version : 3.33
Release : 1.el5
URL : http://search.cpan.org/dist/Mail-IMAPClient/
Summary : An IMAP Client API
Description :
This module provides perl routines that simplify a sockets connection
to and an IMAP conversation with an IMAP server.
--------------------------------------------------------------------------------
Update Information:
Update imapsync to 1.542
Update perl-Mail-IMAPClient to 3.33
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Mail-IMAPClient' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 11 months
Fedora EPEL 5 Update: imapsync-1.542-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-5868
2013-05-21 01:06:15
--------------------------------------------------------------------------------
Name : imapsync
Product : Fedora EPEL 5
Version : 1.542
Release : 1.el5
URL : http://fedorahosted.org/imapsync
Summary : Tool to migrate email between IMAP servers
Description :
imapsync is a tool for facilitating incremental recursive IMAP
transfers from one mailbox to another. It is useful for mailbox migration,
and reduces the amount of data transferred by only copying messages that
are not present on both servers. Read, unread, and deleted flags are preserved,
and the process can be stopped and resumed. The original messages can
optionally be deleted after a successful transfer.
--------------------------------------------------------------------------------
Update Information:
Update imapsync to 1.542
Update perl-Mail-IMAPClient to 3.33
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update imapsync' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 11 months
[SECURITY] Fedora EPEL 6 Update: cgit-0.9.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-5992
2013-05-28 18:48:46
--------------------------------------------------------------------------------
Name : cgit
Product : Fedora EPEL 6
Version : 0.9.2
Release : 1.el6
URL : http://git.zx2c4.com/cgit/
Summary : A fast web interface for git
Description :
Cgit is a fast web interface for git. It uses caching to increase performance.
--------------------------------------------------------------------------------
Update Information:
A directory traversal vulnerability was discovered in cgit. By default, cgit is not affected. However, if cgit is configured to use a readme file from a filesystem path instead of from the git repo itself then files outside of the repository can be read.
Refer to the discussion on oss-security for further details:
http://www.openwall.com/lists/oss-security/2013/05/25/3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #967346 - CVE-2013-2117 cgit: directory traversal
https://bugzilla.redhat.com/show_bug.cgi?id=967346
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cgit' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 11 months
[SECURITY] Fedora EPEL 6 Update: mod_security-2.7.3-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-5994
2013-05-28 18:48:50
--------------------------------------------------------------------------------
Name : mod_security
Product : Fedora EPEL 6
Version : 2.7.3
Release : 2.el6
URL : http://www.modsecurity.org/
Summary : Security module for the Apache HTTP Server
Description :
ModSecurity is an open source intrusion detection and prevention engine
for web applications. It operates embedded into the web server, acting
as a powerful umbrella - shielding web applications from attacks.
--------------------------------------------------------------------------------
Update Information:
Fix NULL pointer dereference (DoS, crash) (CVE-2013-2765) and a possible memory leak.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #967615 - mod_security: NULL pointer dereference (DoS, crash) when forceRequestBodyVariable action triggered and unknown Content-Type was used
https://bugzilla.redhat.com/show_bug.cgi?id=967615
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mod_security' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 11 months
[SECURITY] Fedora EPEL 5 Update: socat-1.7.2.2-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-5996
2013-05-28 18:48:54
--------------------------------------------------------------------------------
Name : socat
Product : Fedora EPEL 5
Version : 1.7.2.2
Release : 1.el5
URL : http://www.dest-unreach.org/socat
Summary : Bidirectional data relay between two data channels ('netcat++')
Description :
Socat is a relay for bidirectional data transfer between two independent data
channels. Each of these data channels may be a file, pipe, device (serial line
etc. or a pseudo terminal), a socket (UNIX, IP4, IP6 - raw, UDP, TCP), an
SSL socket, proxy CONNECT connection, a file descriptor (stdin etc.), the GNU
line editor (readline), a program, or a combination of two of these.
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2013-3571: Denial of service due to file descriptor leak
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #967345 - CVE-2013-3571 socat: Denial of service due to file descriptor leak
https://bugzilla.redhat.com/show_bug.cgi?id=967345
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update socat' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 11 months
Fedora EPEL 5 Update: kobo-0.3.8-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-0358
2013-02-13 18:20:46
--------------------------------------------------------------------------------
Name : kobo
Product : Fedora EPEL 5
Version : 0.3.8
Release : 1.el5
URL : https://fedorahosted.org/kobo/
Summary : Python modules for tools development
Description :
Kobo is a set of python modules designed for rapid tools development.
--------------------------------------------------------------------------------
Update Information:
a new upstream release
a new upstream release
a new upstream release
a new upstream release
a new upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update kobo' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 11 months
[SECURITY] Fedora EPEL 6 Update: socat-1.7.2.2-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-5995
2013-05-28 18:48:52
--------------------------------------------------------------------------------
Name : socat
Product : Fedora EPEL 6
Version : 1.7.2.2
Release : 1.el6
URL : http://www.dest-unreach.org/socat
Summary : Bidirectional data relay between two data channels ('netcat++')
Description :
Socat is a relay for bidirectional data transfer between two independent data
channels. Each of these data channels may be a file, pipe, device (serial line
etc. or a pseudo terminal), a socket (UNIX, IP4, IP6 - raw, UDP, TCP), an
SSL socket, proxy CONNECT connection, a file descriptor (stdin etc.), the GNU
line editor (readline), a program, or a combination of two of these.
The compat-readline5 library is used to avoid GPLv2 vs GPLv3 issues.
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2013-3571: Denial of service due to file descriptor leak
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #967345 - CVE-2013-3571 socat: Denial of service due to file descriptor leak
https://bugzilla.redhat.com/show_bug.cgi?id=967345
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update socat' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 11 months