--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-0001
None
--------------------------------------------------------------------------------
Name : yelp
Product : Fedora 7
Version : 2.18.1
Release : 4.fc7
Summary : A system documentation reader from the Gnome project
Description :
Yelp is the Gnome 2 help/documentation browser. It is designed
to help you browse all the documentation on your system in
one central tool.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security bugs are now available for Fedora Core 7.
Users of yelp are advised to upgrade to these erratum packages which contain a version of yelp built against a firefox version not vulnerable to these flaws.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 25 2007 Christopher Aillon <caillon(a)redhat.com> - 2.18.1-4
- Rebuild against newer gecko
* Wed Apr 18 2007 Matthias Clasen <mclasen(a)redhat.com> - 2.18.1-3
- Improve the man parser a bit
- Fix another crash in the info parser
--------------------------------------------------------------------------------
References:
Bug #241840 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241840
CVE-2007-1362 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1362
CVE-2007-1562 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1562
CVE-2007-2867 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2867
CVE-2007-2868 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2868
CVE-2007-2869 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2869
CVE-2007-2870 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2870
CVE-2007-2871 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2871
--------------------------------------------------------------------------------
Updated packages:
05e450069be7cc5ac641b42d265af462db22186c yelp-2.18.1-4.fc7.ppc64.rpm
cde1de195d50486fc5c5806ccc97ff1b96cbf0d2 yelp-debuginfo-2.18.1-4.fc7.ppc64.rpm
451ffa765a529d35bb115d8ef1a43d2f658a8b45 yelp-debuginfo-2.18.1-4.fc7.i386.rpm
1abd2f3a64b4817f609afaf8d1cd5ff07e8dd63d yelp-2.18.1-4.fc7.i386.rpm
c2f65348200174327b87e6c5a0b023af0e5d43a5 yelp-2.18.1-4.fc7.x86_64.rpm
3f5aedbb58d814e6995176cf0d8fad7883a2a5b5 yelp-debuginfo-2.18.1-4.fc7.x86_64.rpm
03a853f4bde421107411f19e83a07075fbdc1c46 yelp-debuginfo-2.18.1-4.fc7.ppc.rpm
269a84ddcb64088d7d92d3fcbd3dd5f14ceabd99 yelp-2.18.1-4.fc7.ppc.rpm
81315fa5248e5d89d43040d236b5ff2647180fcf yelp-2.18.1-4.fc7.src.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-0001
None
--------------------------------------------------------------------------------
Name : firefox
Product : Fedora 7
Version : 2.0.0.4
Release : 1.fc7
Summary : Mozilla Firefox Web browser.
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security bugs are now available for Fedora Core 7.
This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execute arbitrary code as the user running Firefox. (CVE-2007-2867, CVE-2007-2868)
A flaw was found in the way Firefox handled certain FTP PASV commands. A malicious FTP server could use this flaw to perform a rudimentary port-scan of machines behind a user's firewall. (CVE-2007-1562)
Several denial of service flaws were found in the way Firefox handled certain form and cookie data. A malicious web site that is able to set arbitrary form and cookie data could prevent Firefox from functioning properly. (CVE-2007-1362, CVE-2007-2869)
A flaw was found in the way Firefox handled the addEventListener JavaScript method. A malicious web site could use this method to access or modify sensitive data from another web site. (CVE-2007-2870)
A flaw was found in the way Firefox displayed certain web content. A malicious web page could generate content that would overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site. (CVE-2007-2871)
Users of Firefox are advised to upgrade to these erratum packages, which contain Firefox version 2.0.0.4 that corrects these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.4-1
- Final version
* Wed May 23 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.4-0.rc3
- Update to 2.0.0.4 RC3
--------------------------------------------------------------------------------
References:
Bug #241840 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241840
CVE-2007-1362 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1362
CVE-2007-1562 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1562
CVE-2007-2867 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2867
CVE-2007-2868 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2868
CVE-2007-2869 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2869
CVE-2007-2870 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2870
CVE-2007-2871 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2871
--------------------------------------------------------------------------------
Updated packages:
18c29736efa5d1b4727e4cd202f5e0155e897a53 firefox-debuginfo-2.0.0.4-1.fc7.ppc64.rpm
bc29016cee75b9f7fc5b9cb07a1122c37021bd62 firefox-devel-2.0.0.4-1.fc7.ppc64.rpm
42aa46f5b3fbfd5ba298a404b8a7fba1246b8c20 firefox-2.0.0.4-1.fc7.ppc64.rpm
9f4cd34855dfca83f5b4125b6ea3ca396643732e firefox-debuginfo-2.0.0.4-1.fc7.i386.rpm
5fcf42599604c2fe48c575a07ecb78990ac96e25 firefox-2.0.0.4-1.fc7.i386.rpm
76ac8b455fa63a690544f43146f4f249afbfe5a4 firefox-devel-2.0.0.4-1.fc7.i386.rpm
6ac169395f65e5a17430b1c6a4a3a32dbd1aae91 firefox-2.0.0.4-1.fc7.x86_64.rpm
e83da4ee0c5f2ed01494f6169f3e4f8b4d1631c6 firefox-devel-2.0.0.4-1.fc7.x86_64.rpm
c06b4a2604549fad7af51b4c128d7835780c6273 firefox-debuginfo-2.0.0.4-1.fc7.x86_64.rpm
bc4610a1b5c90849b85ca5bed576eef1bf2b5530 firefox-debuginfo-2.0.0.4-1.fc7.ppc.rpm
94f0b1d0431054d16e7f67be994e26cdd48a2e0b firefox-2.0.0.4-1.fc7.ppc.rpm
edae97c5880043e1aad745594d5fdd2eb650666c firefox-devel-2.0.0.4-1.fc7.ppc.rpm
17f2bfe4b2792faa84f9e46d6e88e8e240eb342b firefox-2.0.0.4-1.fc7.src.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-0001
None
--------------------------------------------------------------------------------
Name : epiphany
Product : Fedora 7
Version : 2.18.1
Release : 3.fc7
Summary : GNOME web browser based on the Mozilla rendering engine
Description :
epiphany is a simple GNOME web browser based on the Mozilla rendering
engine.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security bugs are now available for Fedora Core 7.
Users of epiphany are advised to upgrade to these erratum packages which have been rebuilt against a patched firefox which is not vulnerable to these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 24 2007 Christopher Aillon <caillon(a)redhat.com> 2.18.1-3
- Rebuild against newer gecko
--------------------------------------------------------------------------------
References:
Bug #241840 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241840
CVE-2007-1362 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1362
CVE-2007-1562 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1562
CVE-2007-2867 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2867
CVE-2007-2868 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2868
CVE-2007-2869 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2869
CVE-2007-2870 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2870
CVE-2007-2871 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2871
--------------------------------------------------------------------------------
Updated packages:
3a3535aef522d5ebd1447c77c16bb366b5e9ac3a epiphany-2.18.1-3.fc7.ppc64.rpm
449177707a2b77bd4ee6e389203e664724e69e1a epiphany-devel-2.18.1-3.fc7.ppc64.rpm
b7a81e7fd3e79998a5c445c816601ad46a18b520 epiphany-debuginfo-2.18.1-3.fc7.ppc64.rpm
67a9a4685720029ced46086eeb0803ffde36f6a4 epiphany-devel-2.18.1-3.fc7.i386.rpm
a794dfc51f01d836b72c3d82a270c35f2f52a5ca epiphany-debuginfo-2.18.1-3.fc7.i386.rpm
543a1b553dda90e32df875d1bb0b105b36310867 epiphany-2.18.1-3.fc7.i386.rpm
615cd99f5769fbbca6418898beb4fb415c5fda6d epiphany-2.18.1-3.fc7.x86_64.rpm
caa5d06889571a2a66e00fd6f4d2aa6c5273b257 epiphany-devel-2.18.1-3.fc7.x86_64.rpm
24c3bdbc240d9e2de2741f3bcd89609502991196 epiphany-debuginfo-2.18.1-3.fc7.x86_64.rpm
ca8430ff7ebceb6966fe09605399dd81f5582215 epiphany-debuginfo-2.18.1-3.fc7.ppc.rpm
784c42e0914bfb727dfa479134efc01fdd5a0c35 epiphany-2.18.1-3.fc7.ppc.rpm
faa9755a48e5d2dd544262f5d5e8b7cf35465f29 epiphany-devel-2.18.1-3.fc7.ppc.rpm
b6f24159f3b63148d4a258ed7f612cbb93a34541 epiphany-2.18.1-3.fc7.src.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-0001
None
--------------------------------------------------------------------------------
Name : devhelp
Product : Fedora 7
Version : 0.13
Release : 8.fc7
Summary : API document browser
Description :
An API document browser for GNOME 2.
--------------------------------------------------------------------------------
Update Information:
Updated firefox packages that fix several security bugs are now available for Fedora Core 7.
Users of devhelp are advised to upgrade to these erratum packages, which contain an update to devhelp built against the updated Firefox packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 25 2007 Christopher Aillon <caillon(a)redhat.com> - 0.13-8
- Rebuild against newer gecko
* Mon Apr 23 2007 Matthew Barnes <mbarnes(a)redhat.com> - 0.13-7.fc7
- Add patch for RH bug #230837 (initialize GThread).
* Sat Apr 21 2007 Matthias Clasen <mclasen(a)redhat.com> - 0.13-6
- Don't install INSTALL
--------------------------------------------------------------------------------
References:
Bug #241840 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241840
CVE-2007-1362 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1362
CVE-2007-1562 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1562
CVE-2007-2867 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2867
CVE-2007-2868 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2868
CVE-2007-2869 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2869
CVE-2007-2870 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2870
CVE-2007-2871 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2871
--------------------------------------------------------------------------------
Updated packages:
91a53f3fe54e8d503ea3433365d5c26235760f88 devhelp-debuginfo-0.13-8.fc7.ppc64.rpm
a29a72c4b76a87d4f3aaf77e52307c69f704f1ed devhelp-0.13-8.fc7.ppc64.rpm
c53690fedaa531a34c14d7d01630b74d73d4c2af devhelp-devel-0.13-8.fc7.ppc64.rpm
e5c238c8be2236309520357e896e8802145c4b26 devhelp-devel-0.13-8.fc7.i386.rpm
5d79adb83863162b092505698ae250b955399eea devhelp-debuginfo-0.13-8.fc7.i386.rpm
c0503a60e69761b93d1156e7333e2a997ae66de5 devhelp-0.13-8.fc7.i386.rpm
ad11114ebb65ed22f3fb46928efc6b299018f4bd devhelp-debuginfo-0.13-8.fc7.x86_64.rpm
57c958b93ef4a50e948cca500a15f591429e6c1b devhelp-0.13-8.fc7.x86_64.rpm
617036342307c38840df6451fb2b969d8b25c327 devhelp-devel-0.13-8.fc7.x86_64.rpm
22e25a50508563b4a24896fc9b6eea6c3be8d41a devhelp-debuginfo-0.13-8.fc7.ppc.rpm
34281868c706f177c998135bf4896b35d568875f devhelp-0.13-8.fc7.ppc.rpm
8c8dbb68850b5bdbf3c5fca0ae559e1d376413ab devhelp-devel-0.13-8.fc7.ppc.rpm
42ae7a4b8f9cf3a8f9c62317060c71c36cf3ac21 devhelp-0.13-8.fc7.src.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-0001
None
--------------------------------------------------------------------------------
Name : libwnck
Product : Fedora 7
Version : 2.18.2
Release : 1.fc7
Summary : Window Navigator Construction Kit
Description :
libwnck (pronounced "libwink") is used to implement pagers, tasklists,
and other such things. It allows applications to monitor information
about open windows, workspaces, their names/icons, and so forth.
--------------------------------------------------------------------------------
Update Information:
The latest stable upstream release of libwnck includes a number of crash fixes and other bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 28 2007 Matthias Clasen <mclasen(a)redhat.com> - 2.18.2-1
- Update to 2.18.2
- Drop upstreamed patches
--------------------------------------------------------------------------------
Updated packages:
0e73d452c0de110ca09fb82e1eb89293179a40f1 libwnck-debuginfo-2.18.2-1.fc7.ppc64.rpm
520a71a428b68fec3c3af0106e943860eceec282 libwnck-2.18.2-1.fc7.ppc64.rpm
7c014033291d3074fc64d67875ddd40f9c89176f libwnck-devel-2.18.2-1.fc7.ppc64.rpm
0a10e058d33bcda64e72ddea554dc509d952e744 libwnck-debuginfo-2.18.2-1.fc7.i386.rpm
913c3637878ce6da586a6feaddd14a8ea0e60106 libwnck-devel-2.18.2-1.fc7.i386.rpm
e8d866fd325ce25c68986b2b2051dde4a9207afb libwnck-2.18.2-1.fc7.i386.rpm
e3a6847637b2fd12bcf41ea768c6f9ed139cfaae libwnck-2.18.2-1.fc7.x86_64.rpm
c72b206ee92ad2c50fe0083b1bbf701a90d3f512 libwnck-debuginfo-2.18.2-1.fc7.x86_64.rpm
8ea6ae1ffeeda7dc32c2755d01b373c8cd9740f4 libwnck-devel-2.18.2-1.fc7.x86_64.rpm
8e7da8e7c1dc53d025ddac70e37dc2e60f5ce041 libwnck-debuginfo-2.18.2-1.fc7.ppc.rpm
5987de33b0de6b10eb6329474fd14538d067760c libwnck-devel-2.18.2-1.fc7.ppc.rpm
170eb7e07d43c1573c8767dbf8a54e3059c317a9 libwnck-2.18.2-1.fc7.ppc.rpm
b600c20409f1f32b5fb6741cc3ee5a3d52a152db libwnck-2.18.2-1.fc7.src.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-0001
None
--------------------------------------------------------------------------------
Name : libexif
Product : Fedora 7
Version : 0.6.15
Release : 1.fc7
Summary : Library for extracting extra information from image files
Description :
Most digital cameras produce EXIF files, which are JPEG files with
extra tags that contain information about the image. The EXIF library
allows you to parse an EXIF file and read the data from those tags.
--------------------------------------------------------------------------------
Update Information:
This update to the latest upstream release fixes a number of bugs, among them a possible integer overflow in the exif_data_load_data_entry function
(CVE-2007-2645), which allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 30 2007 Matthias Clasen <mclasen(a)redhat.com> - 0.6.15-1
- Update to 0.6.15
- Drop obsolete patch
* Thu May 24 2007 Matthias Clasen <mclasen(a)redhat.com> - 0.6.13-4
- Add patch for CVE-2007-2645.
--------------------------------------------------------------------------------
References:
CVE-2007-2645 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2645
--------------------------------------------------------------------------------
Updated packages:
259b0a93b4e96c33c24a75a6d0b312120ac530bf libexif-devel-0.6.15-1.fc7.ppc64.rpm
1e2453c2ca793bcda0729db3cd45b1fa18c21685 libexif-debuginfo-0.6.15-1.fc7.ppc64.rpm
66ed02a08e52eab0d06d120e521ca23ff33679f3 libexif-0.6.15-1.fc7.ppc64.rpm
13c1a5cd5a17155825bf0d77584086fd87f6810a libexif-debuginfo-0.6.15-1.fc7.i386.rpm
052b7d7fdfefbf2c5e18a1b31f2256e00d61d622 libexif-devel-0.6.15-1.fc7.i386.rpm
0494958fb4278f7c859bfa23afaf0eed6e47ed1b libexif-0.6.15-1.fc7.i386.rpm
2fcd5d419e690eff68a9845e9a51d81665ed82d4 libexif-debuginfo-0.6.15-1.fc7.x86_64.rpm
b8904b86c20a7dbc39d9d58164c0258789469c6c libexif-0.6.15-1.fc7.x86_64.rpm
8d8657eb0e463125bea71b1b97d8c6613e73ffd0 libexif-devel-0.6.15-1.fc7.x86_64.rpm
a5e9d7f1d81bb295a13f30681f7eac8b517b47e1 libexif-0.6.15-1.fc7.ppc.rpm
e47125d9b3919724edffb544101305c3dd8e2a4c libexif-debuginfo-0.6.15-1.fc7.ppc.rpm
fe35d26972c90154cb285534be03bebba4be315b libexif-devel-0.6.15-1.fc7.ppc.rpm
500a6a4fda130d4fe4025d6f64feddd29ebac275 libexif-0.6.15-1.fc7.src.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-0001
None
--------------------------------------------------------------------------------
Name : jasper
Product : Fedora 7
Version : 1.900.1
Release : 2.fc7
Summary : Implementation of the JPEG-2000 standard, Part 1
Description :
This package contains an implementation of the image compression
standard JPEG-2000, Part 1. It consists of tools for conversion to and
from the JP2 and JPC formats.
--------------------------------------------------------------------------------
Update Information:
This update addresses an issue where the jpc_qcx_getcompparms function in jpc/jpc_cs.c could allow remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 23 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 1.900.1-2
- CVE-2007-2721 (#240397)
--------------------------------------------------------------------------------
References:
Bug #240397 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=240397
CVE-2007-2721 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2721
--------------------------------------------------------------------------------
Updated packages:
d1ad33ddc37ab768ed6680048be8d6ff298c5193 jasper-debuginfo-1.900.1-2.fc7.ppc64.rpm
487a2d7359e9bda009d1cb90e12d9a94b4bb8455 jasper-devel-1.900.1-2.fc7.ppc64.rpm
b848fcedda02f79acc2ad2a50d058ee43a274651 jasper-1.900.1-2.fc7.ppc64.rpm
3efe94050c58f766413f0c8981e33d9b49ed7a83 jasper-devel-1.900.1-2.fc7.i386.rpm
7dbffd09354793d414153b58525d50edc63efe9f jasper-1.900.1-2.fc7.i386.rpm
8800f678c0f0e59617b5406026f9ea024c74d59a jasper-debuginfo-1.900.1-2.fc7.i386.rpm
e062a97af5434d7f6fdc43ae78468b810e79363a jasper-debuginfo-1.900.1-2.fc7.x86_64.rpm
661da74b51d29d66f1aa9e7a0cab5e9d00e387f2 jasper-devel-1.900.1-2.fc7.x86_64.rpm
28b3c4972e4fe4ff559508f275baf44afa737fe3 jasper-1.900.1-2.fc7.x86_64.rpm
2fd896cac056c8213ccc8316645357bfbe31fefa jasper-debuginfo-1.900.1-2.fc7.ppc.rpm
379381c938132c783da4f20fd32fcd67d6c02f81 jasper-1.900.1-2.fc7.ppc.rpm
24c1f280a11268e0297a2440898bf5e4637dfcea jasper-devel-1.900.1-2.fc7.ppc.rpm
b51f9c6f957de49b24964c90f3da385d6379164a jasper-1.900.1-2.fc7.src.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-0001
None
--------------------------------------------------------------------------------
Name : libpng10
Product : Fedora 7
Version : 1.0.26
Release : 1.fc7.1
Summary : Old version of libpng, needed to run old binaries
Description :
The libpng10 package contains an old version of libpng, a library of functions
for creating and manipulating PNG (Portable Network Graphics) image format
files.
This package is needed if you want to run binaries that were linked dynamically
with libpng 1.0.x.
--------------------------------------------------------------------------------
Update Information:
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.
This update to libpng 1.0.26 resolves this problem.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 20 2007 Paul Howarth <paul(a)city-fan.org> 1.0.26-1
- update to 1.0.26 to address DoS issue (#240398, CVE-2007-2445)
- update soname patch
- libpng.txt now has a versioned filename
--------------------------------------------------------------------------------
References:
Bug #240398 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=240398
CVE-2007-2445 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2445
--------------------------------------------------------------------------------
Updated packages:
e9d0f41b57d69f1e6586e0b503ef9b6ccc3e5e9a libpng10-devel-1.0.26-1.fc7.1.ppc64.rpm
2ef256533015c24e8f118d522545ed18a8643ed9 libpng10-1.0.26-1.fc7.1.ppc64.rpm
35238b6de27fb1400b6843fb26dd6d4acc27cc33 libpng10-debuginfo-1.0.26-1.fc7.1.ppc64.rpm
0a3e2caac921bdd85bca761ee19cd17172e130b0 libpng10-1.0.26-1.fc7.1.i386.rpm
58be28d63413aff84fcf3e36ffeb8884e751cca8 libpng10-devel-1.0.26-1.fc7.1.i386.rpm
6b9e214bf674647fa3ccd46983d82c000f822708 libpng10-debuginfo-1.0.26-1.fc7.1.i386.rpm
35f6ec7b1b873d8c303ca519b60d68fda09b08c9 libpng10-1.0.26-1.fc7.1.x86_64.rpm
c0a5ee9564b9c3aaf59aa5c55f0532c3484e0b05 libpng10-devel-1.0.26-1.fc7.1.x86_64.rpm
27f21433ba444324e108340c79b41952358e7a5d libpng10-debuginfo-1.0.26-1.fc7.1.x86_64.rpm
925fde948bb53bb0c7bd531bb954ad85a925c941 libpng10-1.0.26-1.fc7.1.ppc.rpm
a9d7f273e7adff68cc418b68d6c666574deaef8b libpng10-debuginfo-1.0.26-1.fc7.1.ppc.rpm
5896b5ca2aba2dee876323315f56fc3057079c76 libpng10-devel-1.0.26-1.fc7.1.ppc.rpm
d10cc045eb953333e8b60bb54984b815b0c088ec libpng10-1.0.26-1.fc7.1.src.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-0001
None
--------------------------------------------------------------------------------
Name : mutt
Product : Fedora 7
Version : 1.5.14
Release : 4.fc7
Summary : A text mode mail user agent
Description :
Mutt is a text-mode mail user agent. Mutt supports color, threading,
arbitrary key remapping, and a lot of customization.
You should install mutt if you have used it in the past and you prefer
it, or if you are new to mail programs and have not decided which one
you are going to use.
--------------------------------------------------------------------------------
Update Information:
This update fixes two security issues:
The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. (CVE-2007-1558)
Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion. (CVE-2007-2683)
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 31 2007 Miroslav Lichvar <mlichvar(a)redhat.com> 5:1.5.14-4
- validate msgid in APOP authentication (CVE-2007-1558)
- fix overflow in gecos field handling (CVE-2007-2683)
--------------------------------------------------------------------------------
References:
CVE-2007-2683 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2683
CVE-2007-1558 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1558
--------------------------------------------------------------------------------
Updated packages:
0d77cc0f649490abd9f9f5647e4e2913e00159d8 mutt-1.5.14-4.fc7.ppc64.rpm
d785c471a51d451659879c46f658c0092464408b mutt-debuginfo-1.5.14-4.fc7.ppc64.rpm
89497641c382a999a84f9104dd313bf07b7e716b mutt-debuginfo-1.5.14-4.fc7.i386.rpm
001d473a42444ca1fa6199fdbff01d830553a2f5 mutt-1.5.14-4.fc7.i386.rpm
114cf3b1e8b53f083d8aa1b35f3aa2721fbdeb17 mutt-1.5.14-4.fc7.x86_64.rpm
cbf04dc13dbb231be3a364531067b1a5a826e69d mutt-debuginfo-1.5.14-4.fc7.x86_64.rpm
2726b125f4f05053507b4efee16a689b37e6dea6 mutt-1.5.14-4.fc7.ppc.rpm
616e62c1e6b402709285d54dbefc03da034fbe67 mutt-debuginfo-1.5.14-4.fc7.ppc.rpm
240746a7009d04df72e45d3b29999fc11f0a320f mutt-1.5.14-4.fc7.src.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-559
2007-05-31
---------------------------------------------------------------------
Product : Fedora Core 5
Name : logrotate
Version : 3.7.3
Release : 3.fc5
Summary : Rotates, compresses, removes and mails system log files.
Description :
The logrotate utility is designed to simplify the administration of
log files on a system which generates a lot of log files. Logrotate
allows for the automatic rotation compression, removal and mailing of
log files. Logrotate can be set to handle a log file daily, weekly,
monthly or when the log file gets to a certain size. Normally,
logrotate runs as a daily cron job.
Install the logrotate package if you need a utility to deal with the
log files on your system.
---------------------------------------------------------------------
* Thu May 31 2007 Tomas Smetana <tsmetana(a)redhat.com> 3.7.3-3
- fix ignoring pre/postrotate arguments (related #241766)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
2cda703c4917f407b9360386dae08c8cd02dd379 SRPMS/logrotate-3.7.3-3.fc5.src.rpm
2cda703c4917f407b9360386dae08c8cd02dd379 noarch/logrotate-3.7.3-3.fc5.src.rpm
31d01cdf0b2b9357fc108f40080a95b0eb4288cf ppc/logrotate-3.7.3-3.fc5.ppc.rpm
753e6749f3dc8131e50d578111ecd51e5967c42b ppc/debug/logrotate-debuginfo-3.7.3-3.fc5.ppc.rpm
73d1520f2c66a2c6b10fdccad82fbc036da47d7c x86_64/debug/logrotate-debuginfo-3.7.3-3.fc5.x86_64.rpm
1dec558d459c541c6297bfe18b583f64310fbc57 x86_64/logrotate-3.7.3-3.fc5.x86_64.rpm
d2141363c5c53ec8e81c006ed051d73066ec4aa1 i386/logrotate-3.7.3-3.fc5.i386.rpm
fe6f899c79b7c2e92b7961a169f454af4ee9ea0d i386/debug/logrotate-debuginfo-3.7.3-3.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------