Fedora Core 5 Update: gnupg-1.4.7-4.1
by Nalin Dahyabhai
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-337
2007-03-19
---------------------------------------------------------------------
Product : Fedora Core 5
Name : gnupg
Version : 1.4.7
Release : 4.1
Summary : A GNU utility for secure communication and data storage.
Description :
GnuPG (GNU Privacy Guard) is a GNU utility for encrypting data and
creating digital signatures. GnuPG has advanced key management
capabilities and is compliant with the proposed OpenPGP Internet
standard described in RFC2440. Since GnuPG doesn't use any patented
algorithm, it is not compatible with any version of PGP2 (PGP2.x uses
only IDEA for symmetric-key encryption, which is patented worldwide).
---------------------------------------------------------------------
Update Information:
This update corrects a packaging error which prevented the
binaries which were included in the previous update from
being able to find locale data.
---------------------------------------------------------------------
* Mon Mar 12 2007 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.7-4.1
- "override" localedir, because autoconf < 2.60 didn't set it, causing gnupg
to not find its locale data (#231595)
* Mon Mar 5 2007 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.7-1
- update to 1.4.7, changing the default to not allow multiple plaintexts in
a single stream
* Wed Dec 6 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.6-1
- update to 1.4.6, incorporating fixes for CVE-2006-6169 and CVE-2006-6235
* Tue Dec 5 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.5-13
- apply the termlib patch again
* Tue Dec 5 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.5-12
- don't apply the non-security termlib patch
* Tue Dec 5 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.5-11
- rebuild
* Tue Dec 5 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.5-10
- incorporate patch from Werner to fix use of stack variable after it goes
out of scope (CVE-2006-6235, #218483)
* Fri Dec 1 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.5-9
- rebuild
- give configure a --with-termlib option which can be used to force the
selection of libtermcap or libncurses, but don't flip the switch yet
* Fri Dec 1 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.5-8
- rebuild
* Fri Dec 1 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.5-7
- rebuild
* Fri Dec 1 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.5-6
- add patch for overflow in openfile.c from Werner's mail
(CVE-2006-6169, #218506)
* Tue Oct 31 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.5-5
- rebuild against current libcurl
* Fri Aug 18 2006 Jesse Keating <jkeating(a)redhat.com> - 1.4.5-4
- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
(#203001)
* Tue Aug 1 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.5-3
- rebuild
* Tue Aug 1 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.5-2
- rebuild
- reenable curl support
* Tue Aug 1 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.5-1
- update to 1.4.5, fixing additional size overflows in packet parsing (#200904,
CVE-2006-3746)
- temporarily disable curl support again
* Fri Jul 28 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.4.90-1
- update to 1.4.5rc1 to check for build problems, but mark it as 1.4.4.90
to avoid looking "newer" than the eventual 1.4.5
- because we call aclocal, buildrequire gettext-devel to get AM_GNU_GETTEXT
* Thu Jul 20 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.4-7
- add BuildPrereq on curl-devel to get curl's ipv6 support (#198375)
* Wed Jul 12 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.4-6
- fix a cast in gpgkeys_hkp to avoid tripping stack smashing or buffer overflow
detection (#198612)
* Wed Jul 12 2006 Jesse Keating <jkeating(a)redhat.com> - 1.4.4-5.1
- rebuild
* Wed Jul 5 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.4-5
- try again using per-platform buildprereq (jkeating)
* Wed Jul 5 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.4-4
- buildprereq libusb-devel, so that we get CCID support back (#197450)
* Mon Jun 26 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.4-3
- rebuild
* Mon Jun 26 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.4-2
- rebuild
* Mon Jun 26 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.4-1
- update to 1.4.4
* Tue Jun 20 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.3-5
- rebuild
* Tue Jun 20 2006 Nalin Dahyabhai <nalin(a)redhat.com> - 1.4.3-4
- add patch from upstream to fix CVE-2006-3082 (#195946)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
a5c90d085e854e4aba1bbc7a84782703e122f835 SRPMS/gnupg-1.4.7-4.1.src.rpm
a5c90d085e854e4aba1bbc7a84782703e122f835 noarch/gnupg-1.4.7-4.1.src.rpm
dd5265b69fdfa3be7742caeb7ae37e80cd607b3b ppc/debug/gnupg-debuginfo-1.4.7-4.1.ppc.rpm
19569486b8bd24d22dab6b03ad6113373f5379e2 ppc/gnupg-1.4.7-4.1.ppc.rpm
abdc772396f2b8637402560939b02393556c8502 x86_64/gnupg-1.4.7-4.1.x86_64.rpm
52d4e80dc81f2300c7c6482cb87714a613de3073 x86_64/debug/gnupg-debuginfo-1.4.7-4.1.x86_64.rpm
9eb6057b81ee779304a4cfc2dc30ba39c4b89fbc i386/debug/gnupg-debuginfo-1.4.7-4.1.i386.rpm
76a246b1611830b7db64b5a0af3cf3ded70b4014 i386/gnupg-1.4.7-4.1.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
17 years, 1 month
Fedora Core 6 Update: openssh-4.3p2-18.fc6
by Tomas Mraz
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-297
2007-03-19
---------------------------------------------------------------------
Product : Fedora Core 6
Name : openssh
Version : 4.3p2
Release : 18.fc6
Summary : The OpenSSH implementation of SSH protocol versions 1 and 2
Description :
SSH (Secure SHell) is a program for logging into and executing
commands on a remote machine. SSH is intended to replace rlogin and
rsh, and to provide secure encrypted communications between two
untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.
OpenSSH is OpenBSD's version of the last free version of SSH, bringing
it up to date in terms of security and features, as well as removing
all patented algorithms to separate libraries.
This package includes the core files necessary for both the OpenSSH
client and server. To make this package useful, you should also
install openssh-clients, openssh-server, or both.
---------------------------------------------------------------------
* Tue Feb 27 2007 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-18
- reject connection if requested mls range is not obtained (#229278)
* Fri Feb 9 2007 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-17
- allow selecting non-default roles and audit role changes (#227733)
* Thu Jan 11 2007 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-16
- support also level selection on unlabeled networks (#220487)
* Fri Dec 22 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-15
- make sshd work with mls networking (patch by Klaus Weidner) (#220487)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
9cf5135b21e8a9249105c10b36e9885c26bfe2f2 SRPMS/openssh-4.3p2-18.fc6.src.rpm
9cf5135b21e8a9249105c10b36e9885c26bfe2f2 noarch/openssh-4.3p2-18.fc6.src.rpm
eb8c46e14eccf463ca40cf1aef27ebad5729a50a ppc/openssh-askpass-4.3p2-18.fc6.ppc.rpm
c507e54852aab5a2f738c60e59c2169c0cd191e7 ppc/openssh-server-4.3p2-18.fc6.ppc.rpm
d66a211234a985504ce04c1d3a9763408cf3c55d ppc/openssh-clients-4.3p2-18.fc6.ppc.rpm
3a05dd462bc9c9b3d2c69f2111b2e03b4d483592 ppc/debug/openssh-debuginfo-4.3p2-18.fc6.ppc.rpm
346930a788e36ee38df49395dd26aaced679583e ppc/openssh-4.3p2-18.fc6.ppc.rpm
51e947c16b01a4f523df1e80e515c3cfbdece216 x86_64/openssh-server-4.3p2-18.fc6.x86_64.rpm
097a2ec73e16242d492ca8a9e6a5faefe9b02edd x86_64/openssh-clients-4.3p2-18.fc6.x86_64.rpm
f0cc55684fee564764b9c494ef7d232134c1378f x86_64/debug/openssh-debuginfo-4.3p2-18.fc6.x86_64.rpm
34e3e40870371dee3ca80cd35434a48bbedc0b99 x86_64/openssh-4.3p2-18.fc6.x86_64.rpm
87b76dee0604be912ecbed5501f3ee47cf590004 x86_64/openssh-askpass-4.3p2-18.fc6.x86_64.rpm
d765799c2eb2ac6c9e6cab78e5ba77c084b5e916 i386/openssh-clients-4.3p2-18.fc6.i386.rpm
1fdd3ff2f7e9beb7c7c7f2804ce7c9445916fc18 i386/openssh-askpass-4.3p2-18.fc6.i386.rpm
25cdba76ebd02b345325916a600fb8254d6cd564 i386/debug/openssh-debuginfo-4.3p2-18.fc6.i386.rpm
d726488e6dd56e2b24e00e65e853ff119506468d i386/openssh-server-4.3p2-18.fc6.i386.rpm
0bd7805061255dc48643910d1005836c44d22bf2 i386/openssh-4.3p2-18.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
17 years, 1 month
Fedora Core 6 Update: scim-tables-0.5.7-2.fc6
by Caius Carlos CHANCE
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-352
2007-03-19
---------------------------------------------------------------------
Product : Fedora Core 6
Name : scim-tables
Version : 0.5.7
Release : 2.fc6
Summary : SCIM Generic Table IMEngine
Description :
This package contains the Generic Table IMEngine for SCIM.
---------------------------------------------------------------------
* Mon Mar 19 2007 Caius Chance <cchance(a)redhat.com> - 0.5.7-2.fc6
- Fixed bz#232875: scim-tables Chang-Jie preedit was not cleared after focus
out then focus in.
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
34f66984bb1bc85cfa220e82d82cea223b750b94 SRPMS/scim-tables-0.5.7-2.fc6.src.rpm
34f66984bb1bc85cfa220e82d82cea223b750b94 noarch/scim-tables-0.5.7-2.fc6.src.rpm
d8d9a7ecf925d0e1af206d862a299436cf4baf07 ppc/scim-tables-arabic-0.5.7-2.fc6.ppc.rpm
062dbee18cb495f7cdb2a533a2f5bd190664fdc4 ppc/scim-tables-thai-0.5.7-2.fc6.ppc.rpm
482d1910cc006a052878223f639ccd1de4dd91e8 ppc/debug/scim-tables-debuginfo-0.5.7-2.fc6.ppc.rpm
e3d1bfe47b4bd4ef63127a97afa30b26cec86a38 ppc/scim-tables-russian-0.5.7-2.fc6.ppc.rpm
7c1940da863e81186b3fa8e024835250330fb5bb ppc/scim-tables-nepali-0.5.7-2.fc6.ppc.rpm
3bdc0ef7250a80755cad3cfa5e7cf09738a4888c ppc/scim-tables-chinese-0.5.7-2.fc6.ppc.rpm
7dec3fd87d5f0e3f174042708903f5cd6cebb6f1 ppc/scim-tables-0.5.7-2.fc6.ppc.rpm
02b9747a44c19b501e0ef48d99a762c5428a332f ppc/scim-tables-additional-0.5.7-2.fc6.ppc.rpm
2d7d8d2f04460e0b3fcd64f4c1b1e8c38858820d ppc/scim-tables-vietnamese-0.5.7-2.fc6.ppc.rpm
ac810aa1949e8143fe334d5cf9b5f7fa58baef49 ppc/scim-tables-amharic-0.5.7-2.fc6.ppc.rpm
4b51c8827d2ee1542c68f4dfd9de47494db39cf9 x86_64/scim-tables-thai-0.5.7-2.fc6.x86_64.rpm
d7b0ad658c04b815539d4c271d5abd8e5921726d x86_64/scim-tables-chinese-0.5.7-2.fc6.x86_64.rpm
a02bb8dddd1bd2b707c6c4c19e29c89b33866411 x86_64/scim-tables-0.5.7-2.fc6.x86_64.rpm
c12529edcc456f2fd8cc0c7017d6e26e36ccb5d1 x86_64/scim-tables-vietnamese-0.5.7-2.fc6.x86_64.rpm
3e8e12c4a119e13f3c0c8e26445008b6ed4888be x86_64/scim-tables-nepali-0.5.7-2.fc6.x86_64.rpm
1cdc77d3c071f4b3717542981562863a3bfe0b32 x86_64/scim-tables-arabic-0.5.7-2.fc6.x86_64.rpm
35ae1c68bd7499ddc4adc9d9ef74af8488da73b1 x86_64/scim-tables-additional-0.5.7-2.fc6.x86_64.rpm
7d1d634ac257283ab2f28b980374ba61fc8f1121 x86_64/debug/scim-tables-debuginfo-0.5.7-2.fc6.x86_64.rpm
871e644424af6e7193ffa4a43bba48b015324263 x86_64/scim-tables-amharic-0.5.7-2.fc6.x86_64.rpm
fc9ec02fdf8a82243acc320f9110370af88aa301 x86_64/scim-tables-russian-0.5.7-2.fc6.x86_64.rpm
2fdbe6853df2d154f66e4098ff0dab8b3059c500 i386/scim-tables-russian-0.5.7-2.fc6.i386.rpm
92b9e5605916272f2d3b42450668db0c90765a96 i386/scim-tables-thai-0.5.7-2.fc6.i386.rpm
2a00979b03f872092283c3fd8f2261e8044847a0 i386/scim-tables-amharic-0.5.7-2.fc6.i386.rpm
c4ddd33a4a34dd9f3b898a6a5256fe2891ea17cb i386/scim-tables-0.5.7-2.fc6.i386.rpm
fac2bde3115b34dff7c0e353ad25d046e590b3c2 i386/scim-tables-additional-0.5.7-2.fc6.i386.rpm
f4fbc3aed9b048c54238599237a91e95c336fd7a i386/scim-tables-arabic-0.5.7-2.fc6.i386.rpm
4e0a6792d31f5ec48fd0fb444d3790349ce0f343 i386/scim-tables-chinese-0.5.7-2.fc6.i386.rpm
895c4e27b40c43003512854fd9f44713f7049ee9 i386/debug/scim-tables-debuginfo-0.5.7-2.fc6.i386.rpm
cd0930b008cbae5a857a759436cdb82bffe03142 i386/scim-tables-nepali-0.5.7-2.fc6.i386.rpm
6f224d970cd070f92e40bc21c539937fe86b1816 i386/scim-tables-vietnamese-0.5.7-2.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
17 years, 1 month
[SECURITY] Fedora Core 6 Update: libwpd-0.8.9-1.fc6
by Caolán McNamara
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-351
2007-03-19
---------------------------------------------------------------------
Product : Fedora Core 6
Name : libwpd
Version : 0.8.9
Release : 1.fc6
Summary : Library for reading and converting WordPerfect(tm) documents.
Description :
Library that handles Word Perfect documents.
---------------------------------------------------------------------
Update Information:
CVE-2007-0002 buffer overflows in wordperfect document parsing
---------------------------------------------------------------------
* Fri Mar 16 2007 Caolan McNamara <caolanm(a)redhat.com> - 0.8.9-1
- Resolves: rhbz#222808 CVE-2007-0002 buffer overflows
* Mon Oct 9 2006 Caolan McNamara <caolanm(a)redhat.com> - 0.8.7-1
- next version
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
c19d2541e88b8056998e24b35787b6fcc0d180b8 SRPMS/libwpd-0.8.9-1.fc6.src.rpm
c19d2541e88b8056998e24b35787b6fcc0d180b8 noarch/libwpd-0.8.9-1.fc6.src.rpm
9a62af4f6bdc15e1f86f4994b36d2a5e308ba8cd ppc/libwpd-tools-0.8.9-1.fc6.ppc.rpm
969a4eba1cf413a3dcd67c6922a08a33f3ea9653 ppc/debug/libwpd-debuginfo-0.8.9-1.fc6.ppc.rpm
f321d3a10543871abb9da7b3a25b24904c84be3c ppc/libwpd-0.8.9-1.fc6.ppc.rpm
7e6745b9128b0ac3897c2777573d484093d35542 ppc/libwpd-devel-0.8.9-1.fc6.ppc.rpm
db32fec3ec0e96954b2d8ae3d45fbbd3dc9c3f3f x86_64/libwpd-0.8.9-1.fc6.x86_64.rpm
200fd78dfb054e2baa86490d911e0d086af18de0 x86_64/libwpd-tools-0.8.9-1.fc6.x86_64.rpm
38824f1a522b860c1cac18c0dd4c0e1a64ff374d x86_64/debug/libwpd-debuginfo-0.8.9-1.fc6.x86_64.rpm
3be810bc0cc4034654171c12909c0e60f116a635 x86_64/libwpd-devel-0.8.9-1.fc6.x86_64.rpm
bc601298c43b4c327e1a4899e20878326c9936f5 i386/debug/libwpd-debuginfo-0.8.9-1.fc6.i386.rpm
ddfced7f9b7f179b4a1d7e71a1fc0ae4b92c2578 i386/libwpd-devel-0.8.9-1.fc6.i386.rpm
fbbdd9387496f1838be01e9e62376bc691474dbb i386/libwpd-0.8.9-1.fc6.i386.rpm
d835a4ca83ebb234908bbd4129d2ac959f802264 i386/libwpd-tools-0.8.9-1.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
17 years, 1 month
[SECURITY] Fedora Core 5 Update: libwpd-0.8.9-1.fc5
by Caolán McNamara
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-350
2007-03-19
---------------------------------------------------------------------
Product : Fedora Core 5
Name : libwpd
Version : 0.8.9
Release : 1.fc5
Summary : Library for reading and converting WordPerfect(tm) documents.
Description :
Library that handles Word Perfect documents.
---------------------------------------------------------------------
Update Information:
CVE-2007-0002 buffer overflows in wordperfect document parsing
---------------------------------------------------------------------
* Fri Mar 16 2007 Caolan McNamara <caolanm(a)redhat.com> - 0.8.9-1
- Resolves: rhbz#222808 CVE-2007-0002 buffer overflows
* Sun Jun 11 2006 Caolan McNamara <caolanm(a)redhat.com> 0.8.5-0.2
- additional fix
* Wed Jun 7 2006 Caolan McNamara <caolanm(a)redhat.com> 0.8.5-0.1
- bug fixes for FC-5
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
ac04c855a542713789b012c7c748955902f5e0d5 SRPMS/libwpd-0.8.9-1.fc5.src.rpm
ac04c855a542713789b012c7c748955902f5e0d5 noarch/libwpd-0.8.9-1.fc5.src.rpm
1641f2aa79faf2e7d6a1f40889d9cfa86c0d2e16 ppc/libwpd-devel-0.8.9-1.fc5.ppc.rpm
46fe9d4f8f67892b4aafb54561ca86acf14d564e ppc/libwpd-tools-0.8.9-1.fc5.ppc.rpm
f60a4342b52c013822bc0757b3c77459bb784b0d ppc/debug/libwpd-debuginfo-0.8.9-1.fc5.ppc.rpm
90b0e534b079e6cc4b9fe9d41ba6ce0dffb34953 ppc/libwpd-0.8.9-1.fc5.ppc.rpm
62c4e9cd4e26c42597702ed40b7b35d2db3eca44 x86_64/debug/libwpd-debuginfo-0.8.9-1.fc5.x86_64.rpm
9f906cbe021f4ecf4df1b08e97895827a1a4c534 x86_64/libwpd-devel-0.8.9-1.fc5.x86_64.rpm
c233b7981bb17d98ccc2880657d3b6c46a4cc599 x86_64/libwpd-0.8.9-1.fc5.x86_64.rpm
49be4992c42f05515a450453dec5cafc5afc375c x86_64/libwpd-tools-0.8.9-1.fc5.x86_64.rpm
f8c04ab995ad24f8166a130415749f1696e41705 i386/libwpd-devel-0.8.9-1.fc5.i386.rpm
c87355919592e7faee65e6feead22bb1f488467a i386/libwpd-tools-0.8.9-1.fc5.i386.rpm
8d328c869a9471fe92501f7c1039fb858a66325b i386/libwpd-0.8.9-1.fc5.i386.rpm
cbfb43eb990771b494662032085de34aa5f24d56 i386/debug/libwpd-debuginfo-0.8.9-1.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
17 years, 1 month
[SECURITY] Fedora Core 6 Update: xen-3.0.3-8.fc6
by Daniel P. Berrange
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-343
2007-03-19
---------------------------------------------------------------------
Product : Fedora Core 6
Name : xen
Version : 3.0.3
Release : 8.fc6
Summary : Xen is a virtual machine monitor
Description :
This package contains the Xen hypervisor and Xen tools, needed to
run virtual machines on x86 systems, together with the kernel-xen*
packages. Information on how to use Xen can be found at the Xen
project pages.
Virtualisation can be used to run multiple versions or multiple
Linux distributions on one system, or to test untrusted applications
in a sandboxed environment.
---------------------------------------------------------------------
Update Information:
A flaw was found affecting the VNC server code in QEMU. On a
fullyvirtualized guest VM, where qemu monitor mode is
enabled, a user who had access to the VNC server could gain
the ability to read arbitrary files as root in the host
filesystem. (CVE-2007-0998)
---------------------------------------------------------------------
* Wed Mar 14 2007 Daniel P. Berrange <berrange(a)redhat.com> - 3.0.3-8.fc6
- Disable access to QEMU monitor over VNC (CVE-2007-0998, bz 230295)
* Tue Mar 6 2007 Daniel P. Berrange <berrange(a)redhat.com> - 3.0.3-7.fc6
- Ensure PVFB daemon terminates if domain doesn't startup (bz 230634)
- Fix ia64 shadow page table mode
- Close QEMU file handles when running network script
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
1741f962baeb775c9e2519b18aa44e2831c0585f SRPMS/xen-3.0.3-8.fc6.src.rpm
1741f962baeb775c9e2519b18aa44e2831c0585f noarch/xen-3.0.3-8.fc6.src.rpm
c384423104620e719c2ae8fa2947ede9f675d4f7 x86_64/debug/xen-debuginfo-3.0.3-8.fc6.x86_64.rpm
9f865fd4ed56c4d35382c51bd00e2019156184c5 x86_64/xen-3.0.3-8.fc6.x86_64.rpm
4b458e342a7a6e54ee4260b2cfe5fa30eceda74f x86_64/xen-libs-3.0.3-8.fc6.x86_64.rpm
1485f0bbde1c4f9cbe5fd591806007409cdc9e5c x86_64/xen-devel-3.0.3-8.fc6.x86_64.rpm
e2cac6874e958ec27d6167b23171121b3df08ae9 i386/debug/xen-debuginfo-3.0.3-8.fc6.i386.rpm
435e65f7dd61f4164200f27d72f989571578c288 i386/xen-libs-3.0.3-8.fc6.i386.rpm
6a01404d96baaae8ca45dcd35bc2af6b61dd6f08 i386/xen-devel-3.0.3-8.fc6.i386.rpm
200dc86cf82dc8a7efa6144d037bb52928adf773 i386/xen-3.0.3-8.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
17 years, 1 month
[SECURITY] Fedora Core 5 Update: xen-3.0.3-5.fc5
by Daniel P. Berrange
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-344
2007-03-19
---------------------------------------------------------------------
Product : Fedora Core 5
Name : xen
Version : 3.0.3
Release : 5.fc5
Summary : Xen is a virtual machine monitor
Description :
This package contains the Xen hypervisor and Xen tools, needed to
run virtual machines on x86 systems, together with the kernel-xen*
packages. Information on how to use Xen can be found at the Xen
project pages.
Virtualisation can be used to run multiple versions or multiple
Linux distributions on one system, or to test untrusted applications
in a sandboxed environment.
---------------------------------------------------------------------
Update Information:
A flaw was found affecting the VNC server code in QEMU. On a
fullyvirtualized guest VM, where qemu monitor mode is
enabled, a user who had access to the VNC server could gain
the ability to read arbitrary files as root in the host
filesystem. (CVE-2007-0998)
---------------------------------------------------------------------
* Wed Mar 14 2007 Daniel P. Berrange <berrange(a)redhat.com> - 3.0.3-5.fc5
- Disable access to QEMU monitor over VNC (CVE-2007-0998, bz 230295)
* Tue Mar 6 2007 Daniel P. Berrange <berrange(a)redhat.com> - 3.0.3-4.fc5
- Ensure PVFB daemon terminates if domain doesn't startup (bz 230634)
- Close QEMU file handles when running network script
- Improve hotplug error reporting
- Don't start PVFB daemon for HVM guests
- disable ipv6 autoconf on xenbr* devices (rhbz#216504)
- Fixed destroyDevice callers
- Workaround 'Cannot allocate memory' HVM bug
- Santize man pages
* Tue Jan 30 2007 Markus Armbruster <armbru(a)redhat.com>
- Update Xen paravirt framebuffer patch to upstream xen-unstable
changeset 13066. This changes the protocol to the one accepted
upstream.
- Add compatibility with guests running our initial protocol.
* Tue Jan 9 2007 Daniel P. Berrange <berrange(a)redhat.com> - 3.0.3-3.fc5
- fix core dumps of 32 bit guests >2GB RAM (bz 215796)
- write the /local/domain/vm node early in the startup process (bz 215269)
- fix memory boundary checking in qemu-dm (bz 221119)
- add --force option to xenbus device detach code (bz 217853)
- fix keeping track of HVM vnc password (bz 218050)
- enable DMA on HVM virtual cdrom drive (bz 218357)
- new paravirt framebuffer, as merged upstream (bz 218050)
- more cosmetic pygrub fixing (bz 215316)
- make ballooning work right (bz 212069)
- do not auto-start a domain that was restored from a save (bz 217295)
- use log level info for messages that are not errors (bz 218759)
- Allows HTTP request to dump core of a domain (bz 214913)
- catch it when an HVM guest tries to use hde (bz 217736)
- make "xm list" display how much memory a domain really has (bz 217443)
- pass qemu and blktap I/O errors back to the guest (bz 217765, 217859)
- fix 2TB overflow/wraparound in blktap (bz 217580)
- various fixes from Herbert Xu's security audit
- allow HVM virtual floppy to be a device on dom0 (bz 216449)
- make uppercase characters always work in HVM console (bz 217554)
- move the dump path to /var/lib/xen (bug 212558)
* Tue Nov 14 2006 Juan Quintela <quintela(a)redhat.com> - 3.0.3-2.fc5
- add vmxassist fix from RHEL5.
* Mon Oct 30 2006 Daniel P. Berrange <berrange(a)redhat.com> - 3.0.3-1.fc5
- Update to xen-3.0.3 changeset 11774
- Pull in paravirt framebuffer patches
- Pull in VNC password patches for full & para-virt framebuffer
- Fix xenguest-install.py to use a read-write libvirt connection
- Make /etc/xen & /var/log/xen mode 0700 restricted to protect VNC password
- Add /var/lib/xen/images as a dir for storing file based disk images
- Added pygrub fixes for many kernels & cursor cosmetics
* Wed Sep 20 2006 Juan Quintela <quintela(a)redhat.com> - 3.0.2-4.FC5
- Update to xen-unstable cset: 11540.
* Wed Jun 21 2006 Daniel Veillard <veillard(a)redhat.com> - 3.0.2-3.FC5
- Add missing xen-compat.h needed to compile on the new xen sources
* Tue Jun 20 2006 Stephen C. Tweedie <sct(a)redhat.com> - 3.0.2-2.FC5
- Add BuildRequires: for gnu/stubs-32.h so that x86_64 builds pick up
glibc32 correctly
- Update to xen-unstable cset 10278 (from rawhide) to enable kernel rebase
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
c297d6797d1ce0661faa6aba24d935dad39f802a SRPMS/xen-3.0.3-5.fc5.src.rpm
c297d6797d1ce0661faa6aba24d935dad39f802a noarch/xen-3.0.3-5.fc5.src.rpm
539fcaf6c27e935ba71438a24d73e254e10fe485 x86_64/debug/xen-debuginfo-3.0.3-5.fc5.x86_64.rpm
547908d63701c29026d4bda11aad298c0f4be761 x86_64/xen-3.0.3-5.fc5.x86_64.rpm
513513621d4fb375f982abfbe5ee78d5bc503094 i386/xen-3.0.3-5.fc5.i386.rpm
5a70730cc08d4bdc342f21e614cbe0d0e240b11c i386/debug/xen-debuginfo-3.0.3-5.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
17 years, 1 month
Fedora Core 6 Update: fonts-chinese-3.02-10.fc6
by Caius Carlos CHANCE
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-339
2007-03-16
---------------------------------------------------------------------
Product : Fedora Core 6
Name : fonts-chinese
Version : 3.02
Release : 10.fc6
Summary : Chinese TrueType Font -- Simplified and Traditional Chinese Ming and Kai Face.
Description :
Chinese TTF Fonts donated by Arphic company, with additional Hong Kong characters by Hong Kong font project and bitmap by F
irefly. Read license files for details.
---------------------------------------------------------------------
* Mon Mar 12 2007 Caius Chance <cchance(a)redhat.com> - 3.02-10.fc6
- Fixed bz#231579: LTC30501-Missing files in Traditional Chinese font support
package (el5->fc6)
* Mon Mar 12 2007 Caius Chance <cchance(a)redhat.com> - 3.02-9.fc6
- Fixed bz#231578: [zh_*] need to add CIDFnmap file back (port el5=>fc6)
* Mon Mar 12 2007 Caius Chance <cchance(a)redhat.com> - 3.02-8.fc6
- Fixed bz#231577: Cannot use Chinese fonts on Java application with JRE
(porting el5 => fc6)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
7f9ba0fa6e21f8c218eedfc3801cc04f67094f42 SRPMS/fonts-chinese-3.02-10.fc6.src.rpm
7f9ba0fa6e21f8c218eedfc3801cc04f67094f42 noarch/fonts-chinese-3.02-10.fc6.src.rpm
a3a8b45ff87992fcaedb3eed57e379e07e10799b ppc/fonts-chinese-3.02-10.fc6.noarch.rpm
a3a8b45ff87992fcaedb3eed57e379e07e10799b x86_64/fonts-chinese-3.02-10.fc6.noarch.rpm
a3a8b45ff87992fcaedb3eed57e379e07e10799b i386/fonts-chinese-3.02-10.fc6.noarch.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
17 years, 1 month
[SECURITY] Fedora Core 5 Update: tcpdump-3.9.4-4.fc5
by Miroslav Lichvar
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-348
2007-03-15
---------------------------------------------------------------------
Product : Fedora Core 5
Name : tcpdump
Version : 3.9.4
Release : 4.fc5
Summary : A network traffic monitoring tool.
Description :
Tcpdump is a command-line tool for monitoring network traffic.
Tcpdump can capture and display the packet headers on a particular
network interface or on all interfaces. Tcpdump can display all of
the packet headers, or just the ones that match particular criteria.
Install tcpdump if you need a program to monitor network traffic.
---------------------------------------------------------------------
* Thu Mar 15 2007 Miroslav Lichvar <mlichvar(a)redhat.com> - 14:3.9.4-4.fc5
- fix buffer overflow in 802.11 printer (#232349, CVE-2007-1218)
- require /usr/sbin/sendmail (#232363)
* Wed Nov 8 2006 Miroslav Lichvar <mlichvar(a)redhat.com> - 14:3.9.4-3.fc5
- fix processing of Prism and AVS headers (#207435)
- fix arp2ethers script
- update ethercodes.dat
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
d7ba48e09d7994b96652147676b2f37ad56e8cbc SRPMS/tcpdump-3.9.4-4.fc5.src.rpm
d7ba48e09d7994b96652147676b2f37ad56e8cbc noarch/tcpdump-3.9.4-4.fc5.src.rpm
a3d4abcee5ebb54941e832a5d9da0c34ac89509e ppc/libpcap-0.9.4-4.fc5.ppc.rpm
9cbd06d5487b558ddf70ac255c67db3cec081020 ppc/debug/tcpdump-debuginfo-3.9.4-4.fc5.ppc.rpm
ffa9745aaa2e06e406f4f105700a217a357003e1 ppc/arpwatch-2.1a13-15.fc5.ppc.rpm
3a17a7b9e95e4f2cfbb4c9f079ef1e793b59ba72 ppc/tcpdump-3.9.4-4.fc5.ppc.rpm
ba04e256a2c20c897e627d0340d3e242af978d45 x86_64/libpcap-0.9.4-4.fc5.x86_64.rpm
2c9c1e30beef4b7781d2889696c32bfe4ae395cc x86_64/tcpdump-3.9.4-4.fc5.x86_64.rpm
561427aee56f32681704984d83df1d48fb6460a1 x86_64/arpwatch-2.1a13-15.fc5.x86_64.rpm
43ca82d842c173460ec6dae8f5413e445fa2f539 x86_64/debug/tcpdump-debuginfo-3.9.4-4.fc5.x86_64.rpm
dcc4cb141907967dacd3678f0f17dfd4743f75c7 i386/tcpdump-3.9.4-4.fc5.i386.rpm
44cfb923721a8a87c3bf2747a91d90802ecf78c1 i386/arpwatch-2.1a13-15.fc5.i386.rpm
315f39baeae2f0880b1ec91879838268d9fb9aa6 i386/debug/tcpdump-debuginfo-3.9.4-4.fc5.i386.rpm
216013956355d2d2c7006dbf60124212776bf162 i386/libpcap-0.9.4-4.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
17 years, 1 month
[SECURITY] Fedora Core 6 Update: tcpdump-3.9.4-10.fc6
by Miroslav Lichvar
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-347
2007-03-15
---------------------------------------------------------------------
Product : Fedora Core 6
Name : tcpdump
Version : 3.9.4
Release : 10.fc6
Summary : A network traffic monitoring tool.
Description :
Tcpdump is a command-line tool for monitoring network traffic.
Tcpdump can capture and display the packet headers on a particular
network interface or on all interfaces. Tcpdump can display all of
the packet headers, or just the ones that match particular criteria.
Install tcpdump if you need a program to monitor network traffic.
---------------------------------------------------------------------
* Thu Mar 15 2007 Miroslav Lichvar <mlichvar(a)redhat.com> - 14:3.9.4-10.fc6
- fix buffer overflow in 802.11 printer (#232349, CVE-2007-1218)
- require /usr/sbin/sendmail (#232363)
* Fri Nov 17 2006 Miroslav Lichvar <mlichvar(a)redhat.com> - 14:3.9.4-9
- fix processing of Prism and AVS headers (#206686)
- fix arp2ethers script
- update ethercodes.dat
- move pcap man page to devel package
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
d70fc204d160c153a7e0c2eaecffe03c64b6f98f SRPMS/tcpdump-3.9.4-10.fc6.src.rpm
d70fc204d160c153a7e0c2eaecffe03c64b6f98f noarch/tcpdump-3.9.4-10.fc6.src.rpm
78d280c690b81cb43cfc1114f7d352744d72f2c6 ppc/arpwatch-2.1a13-17.fc6.ppc.rpm
282e470e1a18d1502a55771e1956dc0fd4ed510d ppc/debug/tcpdump-debuginfo-3.9.4-10.fc6.ppc.rpm
6ccffc5016fcac9dd377b186c27fb0aabb83c298 ppc/tcpdump-3.9.4-10.fc6.ppc.rpm
0bac5510dafca986bad39b46ff82f65c7e2efa25 ppc/libpcap-0.9.4-10.fc6.ppc.rpm
3a9b8f7276921a146750bdf87734e354c4ce7074 ppc/libpcap-devel-0.9.4-10.fc6.ppc.rpm
0242836290534f5a513601c7f5fdb2987a127c1c x86_64/libpcap-0.9.4-10.fc6.x86_64.rpm
6b850c13ce89b3b435ce2b12c0bbb7973261cf9c x86_64/libpcap-devel-0.9.4-10.fc6.x86_64.rpm
64017eab83d54f1224cea8f8894f6adac8c67d91 x86_64/tcpdump-3.9.4-10.fc6.x86_64.rpm
4d0cc9863515ae05ed83a2bc052c18882ef19797 x86_64/debug/tcpdump-debuginfo-3.9.4-10.fc6.x86_64.rpm
9ed990c85424e7696530b32196fc6cb01c547cc7 x86_64/arpwatch-2.1a13-17.fc6.x86_64.rpm
ffd384b9d15aac0f3c6f0f900813e6bc2110514f i386/arpwatch-2.1a13-17.fc6.i386.rpm
b800f281187f03a9b3d6242b99d128e925b4f5b9 i386/tcpdump-3.9.4-10.fc6.i386.rpm
cd126685bef09b529aa928fee7809590ce906137 i386/libpcap-devel-0.9.4-10.fc6.i386.rpm
f21c20de322c490de9df03d3a28b4f74e329ba58 i386/debug/tcpdump-debuginfo-3.9.4-10.fc6.i386.rpm
21867d4d9331c474cf65586b508db6195dfeacc5 i386/libpcap-0.9.4-10.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
17 years, 1 month