package-announce May 2007

package-announce@lists.fedoraproject.org

33 participants
84 discussions

[SECURITY] Fedora Core 6 Update: yelp-2.16.0-13.fc6
by Christopher Aillon 31 May '07

31 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-549 2007-05-31 --------------------------------------------------------------------- Product : Fedora Core 6 Name : yelp Version : 2.16.0 Release : 13.fc6 Summary : A system documentation reader from the Gnome project Description : Yelp is the Gnome 2 help/documentation browser. It is designed to help you browse all the documentation on your system in one central tool. --------------------------------------------------------------------- Update Information: Updated firefox packages that fix several security bugs are now available Fedora Core 6. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execute arbitrary code as the user running Firefox. (CVE-2007-2867, CVE-2007-2868) A flaw was found in the way Firefox handled certain FTP PASV commands. A malicious FTP server could use this flaw to perform a rudimentary port-scan of machines behind a user's firewall. (CVE-2007-1562) Several denial of service flaws were found in the way Firefox handled certain form and cookie data. A malicious web site that is able to set arbitrary form and cookie data could prevent Firefox from functioning properly. (CVE-2007-1362, CVE-2007-2869) A flaw was found in the way Firefox handled the addEventListener JavaScript method. A malicious web site could use this method to access or modify sensitive data from another web site. (CVE-2007-2870) A flaw was found in the way Firefox displayed certain web content. A malicious web page could generate content that would overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site. (CVE-2007-2871) Users of Firefox are advised to upgrade to these erratum packages, which contain Firefox version 1.5.0.12 that corrects these issues. --------------------------------------------------------------------- * Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> - 2.16.0-13 - Rebuild against newer gecko --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ f180b68f4c5970753df93402214121a63f429aeb SRPMS/yelp-2.16.0-13.fc6.src.rpm f180b68f4c5970753df93402214121a63f429aeb noarch/yelp-2.16.0-13.fc6.src.rpm 51a2f81c7e8e0ec06934f37bfc87d11640b77ead ppc/debug/yelp-debuginfo-2.16.0-13.fc6.ppc.rpm 1779f3eb0565252531055330a3954b22016b202d ppc/yelp-2.16.0-13.fc6.ppc.rpm 59d1165fe5704217a8965c7b863b9a3933d03c53 x86_64/debug/yelp-debuginfo-2.16.0-13.fc6.x86_64.rpm 8c54a35cdabaae9ba415c5a588daf94cc54f1050 x86_64/yelp-2.16.0-13.fc6.x86_64.rpm adfc02cecf94414ff1219855e878a753bcdef44f i386/debug/yelp-debuginfo-2.16.0-13.fc6.i386.rpm 690097b89973a5e2221c1911a66c9583c7e25b78 i386/yelp-2.16.0-13.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 6 Update: devhelp-0.12-11.fc6
by Christopher Aillon 31 May '07

31 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-549 2007-05-31 --------------------------------------------------------------------- Product : Fedora Core 6 Name : devhelp Version : 0.12 Release : 11.fc6 Summary : API document browser Description : An API document browser for GNOME 2. --------------------------------------------------------------------- Update Information: Updated firefox packages that fix several security bugs are now available Fedora Core 6. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execute arbitrary code as the user running Firefox. (CVE-2007-2867, CVE-2007-2868) A flaw was found in the way Firefox handled certain FTP PASV commands. A malicious FTP server could use this flaw to perform a rudimentary port-scan of machines behind a user's firewall. (CVE-2007-1562) Several denial of service flaws were found in the way Firefox handled certain form and cookie data. A malicious web site that is able to set arbitrary form and cookie data could prevent Firefox from functioning properly. (CVE-2007-1362, CVE-2007-2869) A flaw was found in the way Firefox handled the addEventListener JavaScript method. A malicious web site could use this method to access or modify sensitive data from another web site. (CVE-2007-2870) A flaw was found in the way Firefox displayed certain web content. A malicious web page could generate content that would overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site. (CVE-2007-2871) Users of Firefox are advised to upgrade to these erratum packages, which contain Firefox version 1.5.0.12 that corrects these issues. --------------------------------------------------------------------- * Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> - 0.12.6-11 - Rebuild against newer gecko --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ 70ee7c32894c1158b59884de8742100bef138f65 SRPMS/devhelp-0.12-11.fc6.src.rpm 70ee7c32894c1158b59884de8742100bef138f65 noarch/devhelp-0.12-11.fc6.src.rpm 71e9a2f02c5fc326cd5accd7b20436c6c0ab3f2b ppc/devhelp-0.12-11.fc6.ppc.rpm 415d12d0b3657037ecae354231a1a61cf5ee0b2b ppc/devhelp-devel-0.12-11.fc6.ppc.rpm 08bc2b4b49242ba0419e3abe7238ec8e69bf5193 ppc/debug/devhelp-debuginfo-0.12-11.fc6.ppc.rpm 79ac552cf2c77ad0912f97b7743a6f06c7abe171 x86_64/devhelp-devel-0.12-11.fc6.x86_64.rpm 61271faad2305391c547cdb0476e710a4163abdd x86_64/devhelp-0.12-11.fc6.x86_64.rpm c1f70c85c528c5f6d318be91b8de0eb79b9c2bfd x86_64/debug/devhelp-debuginfo-0.12-11.fc6.x86_64.rpm 7b01b121ed65b54193d679662502cb67b3a69f16 i386/devhelp-devel-0.12-11.fc6.i386.rpm 87d50aabfbc55eb72ded243ddb8cc58bf32a4049 i386/debug/devhelp-debuginfo-0.12-11.fc6.i386.rpm bbe06fac18abeb2df42bdf1ad28b5226720df419 i386/devhelp-0.12-11.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 6 Update: epiphany-2.16.3-5.fc6
by Christopher Aillon 31 May '07

31 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-549 2007-05-31 --------------------------------------------------------------------- Product : Fedora Core 6 Name : epiphany Version : 2.16.3 Release : 5.fc6 Summary : GNOME web browser based on the Mozilla rendering engine Description : epiphany is a simple GNOME web browser based on the Mozilla rendering engine --------------------------------------------------------------------- Update Information: Updated firefox packages that fix several security bugs are now available Fedora Core 6. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execute arbitrary code as the user running Firefox. (CVE-2007-2867, CVE-2007-2868) A flaw was found in the way Firefox handled certain FTP PASV commands. A malicious FTP server could use this flaw to perform a rudimentary port-scan of machines behind a user's firewall. (CVE-2007-1562) Several denial of service flaws were found in the way Firefox handled certain form and cookie data. A malicious web site that is able to set arbitrary form and cookie data could prevent Firefox from functioning properly. (CVE-2007-1362, CVE-2007-2869) A flaw was found in the way Firefox handled the addEventListener JavaScript method. A malicious web site could use this method to access or modify sensitive data from another web site. (CVE-2007-2870) A flaw was found in the way Firefox displayed certain web content. A malicious web page could generate content that would overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site. (CVE-2007-2871) Users of Firefox are advised to upgrade to these erratum packages, which contain Firefox version 1.5.0.12 that corrects these issues. --------------------------------------------------------------------- * Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> - 2.16.3-5 - Rebuild against newer gecko --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ aa4435691aa3ba097882fd8339b04c013491133c SRPMS/epiphany-2.16.3-5.fc6.src.rpm aa4435691aa3ba097882fd8339b04c013491133c noarch/epiphany-2.16.3-5.fc6.src.rpm 2d8bfe1ba6ebd4aa76209052205533b49bdf8940 ppc/debug/epiphany-debuginfo-2.16.3-5.fc6.ppc.rpm 582bf1f86d2d6cb6a788754e5d427c3a1a9088db ppc/epiphany-devel-2.16.3-5.fc6.ppc.rpm e8aa0c3669df4fd32bbd50b813c51efe993f14de ppc/epiphany-2.16.3-5.fc6.ppc.rpm 2d2a83b04cef0d0a09e9957e5738879b900444e7 x86_64/epiphany-2.16.3-5.fc6.x86_64.rpm f9257ff00618d8948833e8c6e65dce78e0f2bd7b x86_64/debug/epiphany-debuginfo-2.16.3-5.fc6.x86_64.rpm 44a079cb54147663974ff07b0203b64fd1d846f0 x86_64/epiphany-devel-2.16.3-5.fc6.x86_64.rpm 85b1ac98e202445ccd459704870151f22d0d070e i386/debug/epiphany-debuginfo-2.16.3-5.fc6.i386.rpm 951da666d5351ae947c79e4011eda23d758102b3 i386/epiphany-2.16.3-5.fc6.i386.rpm 005633dfb7189b75428921ba12ea752af5b01044 i386/epiphany-devel-2.16.3-5.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 6 Update: firefox-1.5.0.12-1.fc6
by Christopher Aillon 31 May '07

31 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-549 2007-05-31 --------------------------------------------------------------------- Product : Fedora Core 6 Name : firefox Version : 1.5.0.12 Release : 1.fc6 Summary : Mozilla Firefox Web browser. Description : Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. --------------------------------------------------------------------- Update Information: Updated firefox packages that fix several security bugs are now available Fedora Core 6. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execute arbitrary code as the user running Firefox. (CVE-2007-2867, CVE-2007-2868) A flaw was found in the way Firefox handled certain FTP PASV commands. A malicious FTP server could use this flaw to perform a rudimentary port-scan of machines behind a user's firewall. (CVE-2007-1562) Several denial of service flaws were found in the way Firefox handled certain form and cookie data. A malicious web site that is able to set arbitrary form and cookie data could prevent Firefox from functioning properly. (CVE-2007-1362, CVE-2007-2869) A flaw was found in the way Firefox handled the addEventListener JavaScript method. A malicious web site could use this method to access or modify sensitive data from another web site. (CVE-2007-2870) A flaw was found in the way Firefox displayed certain web content. A malicious web page could generate content that would overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site. (CVE-2007-2871) Users of Firefox are advised to upgrade to these erratum packages, which contain Firefox version 1.5.0.12 that corrects these issues. --------------------------------------------------------------------- * Wed May 30 2007 Christopher Aillon <caillon(a)redhat.com> 1.5.0.12-1 - Update to 1.5.0.12 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ f20bee9997965a6902a26caf0e3c9f18e96f482a SRPMS/firefox-1.5.0.12-1.fc6.src.rpm f20bee9997965a6902a26caf0e3c9f18e96f482a noarch/firefox-1.5.0.12-1.fc6.src.rpm a0e7febfb4264f5a0e2a475ac6cdb9371275cbd4 ppc/firefox-devel-1.5.0.12-1.fc6.ppc.rpm a30ccee95490f6513e559d19994488db50933075 ppc/firefox-1.5.0.12-1.fc6.ppc.rpm e90ca6294a76270b8b1b930ce51d894b67f949eb ppc/debug/firefox-debuginfo-1.5.0.12-1.fc6.ppc.rpm 5452ff82e9fbf62cad4ece460ef9415bd47728e0 x86_64/debug/firefox-debuginfo-1.5.0.12-1.fc6.x86_64.rpm 81fc5a70cc7f0591f7ec90eb0f8cf41cf03cfb4a x86_64/firefox-1.5.0.12-1.fc6.x86_64.rpm 1cce48d2a466f257411cdd421c855eb80fefcdfd x86_64/firefox-devel-1.5.0.12-1.fc6.x86_64.rpm deff2b2abdac9925db3f0402075195322b884454 i386/firefox-1.5.0.12-1.fc6.i386.rpm 50f2730f492818d4fc34868710c1cb728cbd35ad i386/firefox-devel-1.5.0.12-1.fc6.i386.rpm 1abeeac266763742539dcd0a1582e62b97b86645 i386/debug/firefox-debuginfo-1.5.0.12-1.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

Fedora Core 5 Update: gd-2.0.33-8.fc5
by Ivana Varekova 30 May '07

30 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-542 2007-05-30 --------------------------------------------------------------------- Product : Fedora Core 5 Name : gd Version : 2.0.33 Release : 8.fc5 Summary : A graphics library for quick creation of PNG or JPEG images Description : The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the formats accepted for inline images by most browsers. Note that gd is not a paint program. --------------------------------------------------------------------- * Tue May 29 2007 Ivana Varekova <varekova(a)redhat.com> - 2.0.33-8 - fix cve-2006-2906 gd denial of service - fix another problem with infinite loop * Mon Jan 29 2007 Ivana Varekova <varekova(a)redhat.com> - 2.0.33-7 - Resolves: #224610 CVE-2007-0455 gd buffer overrun --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/ 6b6913abf63dbe1427a74ec40230c7b3038f7b8a SRPMS/gd-2.0.33-8.fc5.src.rpm 6b6913abf63dbe1427a74ec40230c7b3038f7b8a noarch/gd-2.0.33-8.fc5.src.rpm cbf58c55faddb3081ad36c0cdf03a0abccd7dbc1 ppc/gd-progs-2.0.33-8.fc5.ppc.rpm 7f27cd7a11c467640a6d72820f4e68ea095ec560 ppc/debug/gd-debuginfo-2.0.33-8.fc5.ppc.rpm 0176f3168a9f601b535dc276e89f3638aeaa418d ppc/gd-devel-2.0.33-8.fc5.ppc.rpm 557e7412ba095b6d55dfb1a20be6377a6ed34ac4 ppc/gd-2.0.33-8.fc5.ppc.rpm 423226e418b794f2e79906e0cfd86f7466a71e55 x86_64/debug/gd-debuginfo-2.0.33-8.fc5.x86_64.rpm b0af6b6d01cf5e94aa0a22e7a4b1e23bcff0bf6e x86_64/gd-progs-2.0.33-8.fc5.x86_64.rpm 4ebb7685e0fbe86e366e630e8fd4cf17927f7d57 x86_64/gd-devel-2.0.33-8.fc5.x86_64.rpm 03938284027e173dc5a73a254752fa8ccb7c88cb x86_64/gd-2.0.33-8.fc5.x86_64.rpm 46160b0afad3edf2f85133016305e750404371dd i386/gd-progs-2.0.33-8.fc5.i386.rpm d4af84f4c9f250cc443cce09812e49fa85950cf1 i386/gd-2.0.33-8.fc5.i386.rpm 5cf3ca2cba896980ca67d65e7684cd7c7943f269 i386/debug/gd-debuginfo-2.0.33-8.fc5.i386.rpm 607e47e7f0a5bb969282904968b1b5fc81c71468 i386/gd-devel-2.0.33-8.fc5.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

Fedora Core 6 Update: selinux-policy-2.4.6-72.fc6
by Daniel J Walsh 30 May '07

30 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-521 2007-05-30 --------------------------------------------------------------------- Product : Fedora Core 6 Name : selinux-policy Version : 2.4.6 Release : 72.fc6 Summary : SELinux policy configuration Description : SELinux Reference Policy - modular. --------------------------------------------------------------------- * Tue May 22 2007 Dan Walsh <dwalsh(a)redhat.com> 2.4.6-72 - Allow prelink sys_resource, Add transition rule to allow apps to run java in different context * Tue May 15 2007 Dan Walsh <dwalsh(a)redhat.com> 2.4.6-71 - Allow netlable to read etc and work with init terminals - Change file context to have all of policy at SystemLow Resolves: #239079 * Tue May 15 2007 Dan Walsh <dwalsh(a)redhat.com> 2.4.6-70 - Back out Useradd change Resolves: #239079 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ a6fc37d72471c63a2904802bd4838b64e38e0501 SRPMS/selinux-policy-2.4.6-72.fc6.src.rpm a6fc37d72471c63a2904802bd4838b64e38e0501 noarch/selinux-policy-2.4.6-72.fc6.src.rpm 9e12309cab113f0098a1ca5262de17447a4fea11 ppc/selinux-policy-devel-2.4.6-72.fc6.noarch.rpm b7da53f4fbc09eb04ba1226150d04742403f73ee ppc/selinux-policy-strict-2.4.6-72.fc6.noarch.rpm a2474c3427791b2c60413c0e112bd7742a62cdb5 ppc/selinux-policy-2.4.6-72.fc6.noarch.rpm 25fa1be39a96ae31d1c9ea835a290de77e65ffee ppc/selinux-policy-mls-2.4.6-72.fc6.noarch.rpm c0c04bedf95eb33da9fcedf75d80988713a66ea1 ppc/selinux-policy-targeted-2.4.6-72.fc6.noarch.rpm 9e12309cab113f0098a1ca5262de17447a4fea11 x86_64/selinux-policy-devel-2.4.6-72.fc6.noarch.rpm b7da53f4fbc09eb04ba1226150d04742403f73ee x86_64/selinux-policy-strict-2.4.6-72.fc6.noarch.rpm a2474c3427791b2c60413c0e112bd7742a62cdb5 x86_64/selinux-policy-2.4.6-72.fc6.noarch.rpm 25fa1be39a96ae31d1c9ea835a290de77e65ffee x86_64/selinux-policy-mls-2.4.6-72.fc6.noarch.rpm c0c04bedf95eb33da9fcedf75d80988713a66ea1 x86_64/selinux-policy-targeted-2.4.6-72.fc6.noarch.rpm 9e12309cab113f0098a1ca5262de17447a4fea11 i386/selinux-policy-devel-2.4.6-72.fc6.noarch.rpm b7da53f4fbc09eb04ba1226150d04742403f73ee i386/selinux-policy-strict-2.4.6-72.fc6.noarch.rpm a2474c3427791b2c60413c0e112bd7742a62cdb5 i386/selinux-policy-2.4.6-72.fc6.noarch.rpm 25fa1be39a96ae31d1c9ea835a290de77e65ffee i386/selinux-policy-mls-2.4.6-72.fc6.noarch.rpm c0c04bedf95eb33da9fcedf75d80988713a66ea1 i386/selinux-policy-targeted-2.4.6-72.fc6.noarch.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 5 Update: mutt-1.4.2.1-8.fc5
by Miroslav Lichvar 30 May '07

30 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-540 2007-05-30 --------------------------------------------------------------------- Product : Fedora Core 5 Name : mutt Version : 1.4.2.1 Release : 8.fc5 Summary : A text mode mail user agent. Description : Mutt is a text-mode mail user agent. Mutt supports color, threading, arbitrary key remapping, and a lot of customization. You should install mutt if you have used it in the past and you prefer it, or if you are new to mail programs and have not decided which one you are going to use. --------------------------------------------------------------------- Update Information: This update fixes two security issues: The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. (CVE-2007-1558) Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion. (CVE-2007-2683) --------------------------------------------------------------------- * Mon May 28 2007 Miroslav Lichvar <mlichvar(a)redhat.com> 5:1.4.2.1-8.fc5 - validate msgid in APOP authentication (CVE-2007-1558) - fix overflow in gecos field handling (CVE-2007-2683) * Tue Oct 24 2006 Miroslav Lichvar <mlichvar(a)redhat.com> 5:1.4.2.1-7.fc5 - fix insecure temp file creation on NFS (#211085, CVE-2006-5297) * Thu Jun 29 2006 Miroslav Lichvar <mlichvar(a)redhat.com> 5:1.4.2.1-6.3.fc5 - fix a buffer overflow when processing IMAP namespace (#197152, CVE-2006-3242) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/ 829bced13a1026fcc26c161386732e07b7334808 SRPMS/mutt-1.4.2.1-8.fc5.src.rpm 829bced13a1026fcc26c161386732e07b7334808 noarch/mutt-1.4.2.1-8.fc5.src.rpm 37ccd07e00e3029df4b0a6861e9ab990778cd527 ppc/mutt-1.4.2.1-8.fc5.ppc.rpm 6cac8e87786bcf6925c99314ce4b9d5bb0886e63 ppc/debug/mutt-debuginfo-1.4.2.1-8.fc5.ppc.rpm f27e2f4eb28efdbb7259318d8e3e3b4a25093d0d x86_64/debug/mutt-debuginfo-1.4.2.1-8.fc5.x86_64.rpm 0fd6fbf7cbf974394661316d2cc114b4fbe74e6a x86_64/mutt-1.4.2.1-8.fc5.x86_64.rpm 5838b7ac7ec9482525a6f10a2a8229ce24b0ced3 i386/mutt-1.4.2.1-8.fc5.i386.rpm ed22bb478f1330eb23f20ad2ff4e1f0887942836 i386/debug/mutt-debuginfo-1.4.2.1-8.fc5.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 6 Update: mutt-1.4.2.3-1.fc6
by Miroslav Lichvar 30 May '07

30 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-539 2007-05-30 --------------------------------------------------------------------- Product : Fedora Core 6 Name : mutt Version : 1.4.2.3 Release : 1.fc6 Summary : A text mode mail user agent. Description : Mutt is a text-mode mail user agent. Mutt supports color, threading, arbitrary key remapping, and a lot of customization. You should install mutt if you have used it in the past and you prefer it, or if you are new to mail programs and have not decided which one you are going to use. --------------------------------------------------------------------- Update Information: This update fixes two security issues: The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. (CVE-2007-1558) Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion. (CVE-2007-2683) --------------------------------------------------------------------- * Mon May 28 2007 Miroslav Lichvar <mlichvar(a)redhat.com> 5:1.4.2.3-1.fc6 - update to 1.4.2.3 (CVE-2007-2683, CVE-2007-1558) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ 95da57dc6d80ba28f234be812fdb04f23422d7e0 SRPMS/mutt-1.4.2.3-1.fc6.src.rpm 95da57dc6d80ba28f234be812fdb04f23422d7e0 noarch/mutt-1.4.2.3-1.fc6.src.rpm 1a88871576ce0a8d9d2c20173232eaf068089171 ppc/debug/mutt-debuginfo-1.4.2.3-1.fc6.ppc.rpm 4f2ff83e7734b6e8b562377af69cd28e8097a9a5 ppc/mutt-1.4.2.3-1.fc6.ppc.rpm 1c6db27e945e767cdca7b2b8cf16b19ffad97751 x86_64/debug/mutt-debuginfo-1.4.2.3-1.fc6.x86_64.rpm fd4c35d9244dbbb6ecadee874f231e3a6eb22ba5 x86_64/mutt-1.4.2.3-1.fc6.x86_64.rpm e071da29cd7d4cc14a8ecbeec6a93ec985da65de i386/debug/mutt-debuginfo-1.4.2.3-1.fc6.i386.rpm 2911156283af56769a72e478297dd2919074a6ae i386/mutt-1.4.2.3-1.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

Fedora Core 6 Update: system-config-soundcard-2.0.6-6.fc6
by Martin Stransky 30 May '07

30 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-537 2007-05-30 --------------------------------------------------------------------- Product : Fedora Core 6 Name : system-config-soundcard Version : 2.0.6 Release : 6.fc6 Summary : A graphical interface for detecting and configuring soundcards Description : system-config-soundcard is a graphical user interface that detects and configures the soundcard(s) on the system. --------------------------------------------------------------------- * Mon May 28 2007 Martin Stransky <stransky(a)redhat.com> - 2.0.6-6 - update the no-vendor fix (#237709) - added a hack for USB devices (#232217) - disabled fix for (#227778) * Mon May 21 2007 Jeremy Katz <katzj(a)redhat.com> - 2.0.6-5 - fix case of no vendor being able to be found in the hal tree (#237709) * Wed Apr 11 2007 Martin Stransky <stransky(a)redhat.com> 2.0.6-4 - fixed #227778 - Firstboot soundcard screen 'too wide' with long name - fixed device and initial soundcard configuration - fixed modprobe.conf parser * Wed Mar 28 2007 Jeremy Katz <katzj(a)redhat.com> - 2.0.6-3 - sox doesn't get used anymore; don't require it * Tue Jan 23 2007 Martin Stransky <stransky(a)redhat.com> 2.0.6-2 - fixed #223915 - system-config-soundcard does not start * Thu Dec 21 2006 Martin Stransky <stransky(a)redhat.com> 2.0.6-1 - translation update * Thu Dec 7 2006 Martin Stransky <stransky(a)redhat.com> 2.0.5-3 - removed unused code (#218389) - hide tabs if only one sound device is detected (#208411) * Fri Dec 1 2006 Adam Jackson <ajax(a)redhat.com> 2.0.5-2 - Bump to fix 6 to 7 upgrades. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ 70387ab82ff650f1a6d1c10acc7256ad6c9fb4e5 SRPMS/system-config-soundcard-2.0.6-6.fc6.src.rpm 70387ab82ff650f1a6d1c10acc7256ad6c9fb4e5 noarch/system-config-soundcard-2.0.6-6.fc6.src.rpm 3ad95141fc801966a7a9b1596a91f428b9cbb4ef ppc/system-config-soundcard-2.0.6-6.fc6.noarch.rpm 3ad95141fc801966a7a9b1596a91f428b9cbb4ef x86_64/system-config-soundcard-2.0.6-6.fc6.noarch.rpm 3ad95141fc801966a7a9b1596a91f428b9cbb4ef i386/system-config-soundcard-2.0.6-6.fc6.noarch.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

Fedora Core 6 Update: vsftpd-2.0.5-10.fc6
by Maros Barabas 30 May '07

30 May '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-536 2007-05-30 --------------------------------------------------------------------- Product : Fedora Core 6 Name : vsftpd Version : 2.0.5 Release : 10.fc6 Summary : vsftpd - Very Secure Ftp Daemon Description : vsftpd is a Very Secure FTP daemon. It was written completely from scratch. --------------------------------------------------------------------- * Mon May 28 2007 Maros Barabas <mbarabas(a)redhat.com> - 2.0.5-10 - fix incorrect use str_stat function - Resolves #206810 * Fri Jan 19 2007 Maros Barabas <mbarabas(a)redhat.com> - 2.0.5-9 - add lost patch: don't die when no user config file is present - Resolves #166986 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ f0e4a80897d548e21c5bd1640181ec3f13cfc8be SRPMS/vsftpd-2.0.5-10.fc6.src.rpm f0e4a80897d548e21c5bd1640181ec3f13cfc8be noarch/vsftpd-2.0.5-10.fc6.src.rpm b1a030a981323e9a40a1f0ecee3308be7531b492 ppc/vsftpd-2.0.5-10.fc6.ppc.rpm 6e41761fc0dd7b9732d58f2a1cae7bf0fef639f3 ppc/debug/vsftpd-debuginfo-2.0.5-10.fc6.ppc.rpm 74f13e419055a28fd4fd081df695198607f25d92 x86_64/vsftpd-2.0.5-10.fc6.x86_64.rpm b8cc7222299ddb0557803184403193c6307b45b8 x86_64/debug/vsftpd-debuginfo-2.0.5-10.fc6.x86_64.rpm 283f21ae0e3649c5df2c690dbf6203d7e4cd5334 i386/debug/vsftpd-debuginfo-2.0.5-10.fc6.i386.rpm 85555eb02e1f798fb1574e1d27f46742af7ccddc i386/vsftpd-2.0.5-10.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce May 2007