---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-520
2007-05-24
---------------------------------------------------------------------
Product : Fedora Core 6
Name : nfs-utils
Version : 1.0.10
Release : 12.fc6
Summary : NFS utlilities and supporting clients and daemons for the kernel NFS server.
Description :
The nfs-utils package provides a daemon for the kernel NFS server and
related tools, which provides a much higher level of performance than the
traditional Linux NFS server used by most users.
This package also contains the showmount program. Showmount queries the
mount daemon on a remote host for information about the NFS (Network File
System) server on the remote host. For example, showmount can display the
clients which are mounted on that host.
This package also contains the mount.nfs and umount.nfs program.
---------------------------------------------------------------------
Update Information:
- Stopped /etc/sysconfig/nfs from being overwritten on
updates (bz 234543)
---------------------------------------------------------------------
* Tue May 22 2007 Steve Dickson <steved(a)redhat.com> 1.0.10-12
- Stopped /etc/sysconfig/nfs from being overwritten on updates (bz 234543)
* Wed May 16 2007 Steve Dickson <steved(a)redhat.com> 1.0.10-11
- Make sure the condrestarts exit with a zero value (240225)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
af14c284cc3b6ed7e4eeae468eccc7e6c7d2126d SRPMS/nfs-utils-1.0.10-12.fc6.src.rpm
af14c284cc3b6ed7e4eeae468eccc7e6c7d2126d noarch/nfs-utils-1.0.10-12.fc6.src.rpm
4f4f457b36e1c033d3b90a0db3dcae3bba440871 ppc/nfs-utils-1.0.10-12.fc6.ppc.rpm
a7bcfdaa16f2c4e8fb5bad038adbb2cdb2e1f37e ppc/debug/nfs-utils-debuginfo-1.0.10-12.fc6.ppc.rpm
df61f7380bbaa041b3992657991862a7a6d40467 x86_64/nfs-utils-1.0.10-12.fc6.x86_64.rpm
c6afbbbb2f95d1f50513c7bb0ec0596baaee2b1c x86_64/debug/nfs-utils-debuginfo-1.0.10-12.fc6.x86_64.rpm
b65eccc4beb3887fa9c2117b541b34964848d3e2 i386/debug/nfs-utils-debuginfo-1.0.10-12.fc6.i386.rpm
c5d1446c87dee141579feae021fdcb3b6b4e5bc4 i386/nfs-utils-1.0.10-12.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-518
2007-05-21
---------------------------------------------------------------------
Product : Fedora Core 5
Name : samba
Version : 3.0.24
Release : 6.fc5
Summary : The Samba SMB server.
Description :
Samba is the suite of programs by which a lot of PC-related machines
share files, printers, and other information (such as lists of
available files and printers). The Windows NT, OS/2, and Linux
operating systems support this natively, and add-on packages can
enable the same thing for DOS, Windows, VMS, UNIX of all kinds, MVS,
and more. This package provides an SMB server that can be used to
provide network services to SMB (sometimes called "Lan Manager")
clients. Samba uses NetBIOS over TCP/IP (NetBT) protocols and does NOT
need the NetBEUI (Microsoft Raw NetBIOS frame) protocol.
---------------------------------------------------------------------
Update Information:
fix nmbd segfault in some rare conditions
fix a bug introduced with CVE-2007-2444 in some configurations
---------------------------------------------------------------------
* Mon May 14 2007 Simo Sorce <ssorce(a)redhat.com> 3.0.24-5.fc5
- Security fixes for
CVE-2007-2444
CVE-2007-2446
CVE-2007-2447
* Thu Apr 5 2007 Simo Sorce <ssorce(a)redhat.com> 3.0.24-4.fc5
- sync up patches from the rawhide packages
* Wed Mar 28 2007 Simo Sorce <ssorce(a)redhat.com> 3.0.24-3.fc5
- add patch for bug 176649
* Mon Mar 26 2007 Simo Sorce <ssorce(a)redhat.com>
- remove patch for bug 106483 as it introduces a new bug that prevents
the use of a credentials file with the smbclient tar command
* Fri Mar 23 2007 Simo Sorce <ssorce(a)redhat.com> 3.0.24-2.fc5
- fix log rotate script to no kill -HUP samba daemons
* Fri Mar 23 2007 Simo Sorce <ssorce(a)redhat.com> 3.0.24-2.fc5
- A newer cups lib introduced new symbols now we depend on,
adjust dependencies to require the latest cups-libs package.
* Wed Feb 7 2007 Jay Fenlason <fenlason(a)redhat.com> 3.0.24-1.fc5
- New upstream release
- Update the -man patch to work with 3.0.24
- This release
fixes CVE-2007-0452 Samba smbd denial of service
* Tue Sep 26 2006 Jay Fenlason <fenlason(a)redhat.com> 3.0.23c-1.fc5
- Include the newer smb.init that includes the configtest option
- Upgrade to 3.0.23c, obsoleting the -samr_alias patch.
* Wed Aug 9 2006 Jay Fenlason <fenlason(a)redhat.com> 3.0.23b-1.fc5
- New upstream release, fixing some annoying bugs.
* Mon Jul 24 2006 Jay Fenlason <fenlason(a)redhat.com> 3.0.23a-1.fc5.1
- Fix the -logfiles patch to close
bz#199607 Samba compiled with wrong log path.
bz#199206 smb.conf has incorrect log file path
* Mon Jul 24 2006 Jay Fenlason <fenlason(a)redhat.com> 3.0.23a-1.fc5
- Upgrade to new upstream 3.0.23a
- include upstream samr_alias patch
* Wed Jul 12 2006 Jay Fenlason <fenlason(a)redhat.com> 3.0.23-1.fc5
- Upgrade to 3.0.23 to close
bz#197836 CVE-2006-3403 Samba denial of service
- include related spec file, filter-requires-samba.sh and patch changes
from rawhide.
- include the fixed smb.init file from rawhide, closing
bz#182560 Wrong retval for initscript when smbd is dead
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
6704bcbc47eb55597b640203bab5b256f3062b8f SRPMS/samba-3.0.24-6.fc5.src.rpm
6704bcbc47eb55597b640203bab5b256f3062b8f noarch/samba-3.0.24-6.fc5.src.rpm
00b81bec80eed9f4a92227932e314eb3df959c8c ppc/samba-swat-3.0.24-6.fc5.ppc.rpm
368996dd3e5a7abca8d98d01ce5fdc32cbc9582d ppc/samba-client-3.0.24-6.fc5.ppc.rpm
f003d53c2e32d0ecf0a6a41840539c826a425f2c ppc/samba-3.0.24-6.fc5.ppc.rpm
d6cdd1d7433bab6d20f7f3dc5eb47e0da3623e59 ppc/debug/samba-debuginfo-3.0.24-6.fc5.ppc.rpm
d70e87806698bce75d0c6da56f0b04fd15b1ee8f ppc/samba-common-3.0.24-6.fc5.ppc.rpm
697ec1cc2eb40be411bb915a7db91794daccfb6d x86_64/samba-client-3.0.24-6.fc5.x86_64.rpm
f537cdc189279d7d1378166eb64862eb108ddb05 x86_64/samba-swat-3.0.24-6.fc5.x86_64.rpm
39cf4decf09fba6f10743c481789f42ed380e252 x86_64/debug/samba-debuginfo-3.0.24-6.fc5.x86_64.rpm
b78078da73fd02e56985dd70f45c5313d878e274 x86_64/samba-3.0.24-6.fc5.x86_64.rpm
ce8adb47b5fafe122cfe7172d4ca172b7e8d68a0 x86_64/samba-common-3.0.24-6.fc5.x86_64.rpm
a6bc99ea6b01dbf92342abb3aaf1216d5b8ea4fb i386/debug/samba-debuginfo-3.0.24-6.fc5.i386.rpm
05b20dbdfcd000cf4ce517a2edceb20d70ceb2b1 i386/samba-common-3.0.24-6.fc5.i386.rpm
6fd4dad1d19c2e4525c6596b6acb38765c75d85c i386/samba-3.0.24-6.fc5.i386.rpm
eb146c18f1558a6698d5086872b531242c3f8a06 i386/samba-client-3.0.24-6.fc5.i386.rpm
c41afa33c3b2f5aa85ee0168203457932d0355b6 i386/samba-swat-3.0.24-6.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-497
2007-05-21
---------------------------------------------------------------------
Product : Fedora Core 6
Name : cups
Version : 1.2.10
Release : 7.fc6
Summary : Common Unix Printing System
Description :
The Common UNIX Printing System provides a portable printing layer for
UNIX® operating systems. It has been developed by Easy Software Products
to promote a standard printing solution for all UNIX vendors and users.
CUPS provides the System V and Berkeley command-line interfaces.
---------------------------------------------------------------------
Update Information:
This package contains a fix for printing PDFs that have been
rotated, more robust server settings handling, paper-out
detection for the usb backend, and a small D-BUS
QueueChanged signal fix.
---------------------------------------------------------------------
* Mon May 21 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.10-7
- Fixed _cupsAdminSetServerSettings() sharing/shared handling (bug #238057).
* Wed May 9 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.10-6
- Applied fix for rotated PDFs (bug #236753, STR #2348).
* Wed Apr 25 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.10-5
- Until bug #236736 is fixed, work around the kernel usblp driver's
quirks so that we can detect paper-out conditions.
* Wed Apr 4 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.10-4
- Send D-BUS QueueChanged signal on printer state changes.
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
855c3a48fe37c573a7112acf80b39614c1fd7746 SRPMS/cups-1.2.10-7.fc6.src.rpm
855c3a48fe37c573a7112acf80b39614c1fd7746 noarch/cups-1.2.10-7.fc6.src.rpm
5ef8586caac99822e8a04656fbd6c508bb875acd ppc/cups-1.2.10-7.fc6.ppc.rpm
7ba743b523061eb7b76bf3d8054a6e9d553c5df7 ppc/debug/cups-debuginfo-1.2.10-7.fc6.ppc.rpm
0c03395ecc9f8175800d34a0c2149bea5d185947 ppc/cups-devel-1.2.10-7.fc6.ppc.rpm
466ef385087c7cb2a19671ab803dab4682363019 ppc/cups-lpd-1.2.10-7.fc6.ppc.rpm
36ba4c4069f32a17ea75c2c28d7c4da746d4b395 ppc/cups-libs-1.2.10-7.fc6.ppc.rpm
4a6058f7831f9702570717ec63db42161a75c5d3 x86_64/cups-lpd-1.2.10-7.fc6.x86_64.rpm
6051f20c42c0b56c7a203401273891305d848dd5 x86_64/cups-libs-1.2.10-7.fc6.x86_64.rpm
d08b17e259f4fcd00364d499f6e00a2035cd8d99 x86_64/cups-1.2.10-7.fc6.x86_64.rpm
87a3dd52aef1988cfd79c43403f194f759377c2a x86_64/debug/cups-debuginfo-1.2.10-7.fc6.x86_64.rpm
6a5c2a28ee7025e2ece224e029410a75b68fc8e8 x86_64/cups-devel-1.2.10-7.fc6.x86_64.rpm
9595484581897bfa3e1f681a1e84401c3b7379e7 i386/cups-lpd-1.2.10-7.fc6.i386.rpm
093eabbd87f5fe3d0b04aac6e481295c332fe4e1 i386/debug/cups-debuginfo-1.2.10-7.fc6.i386.rpm
8b4feaac562ffaac8d53d4b9085477fe7303bba4 i386/cups-libs-1.2.10-7.fc6.i386.rpm
c18a7cabf20d5726c1a20574503a34cdbf1cf423 i386/cups-devel-1.2.10-7.fc6.i386.rpm
c191320cb33ca65c300fd07a8402c095dadddfb9 i386/cups-1.2.10-7.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-470
2007-05-21
---------------------------------------------------------------------
Product : Fedora Core 6
Name : hal-cups-utils
Version : 0.6.9
Release : 1.fc6
Summary : Halified CUPS utilities
Description :
Halified utilities for CUPS:
- hal_lpadmin
- hal CUPS backend
---------------------------------------------------------------------
Update Information:
Now uses 'usb:' URIs if possible when adding printers.
The hal backend now retries when the device is not yet
connected.
---------------------------------------------------------------------
* Thu May 3 2007 Tim Waugh <twaugh(a)redhat.com> 0.6.9-1
- 0.6.9:
- Reverted hal backend printer state management and paper-out detection
for the moment.
* Thu Apr 26 2007 Tim Waugh <twaugh(a)redhat.com> 0.6.8-1
- 0.6.8:
- Several hal backend fixes (retry when device not connected,
printer state management, paper-out detection).
- Small hal_lpadmin fix for traceback.
* Wed Apr 25 2007 Tim Waugh <twaugh(a)redhat.com> 0.6.7-1
- 0.6.7:
- Use usb: URI scheme when possible (bug #236720).
- Prevent a traceback in hal_lpadmin (bug #232733).
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
4021334bd3387803ee6ab430ee29a990e973a5f9 SRPMS/hal-cups-utils-0.6.9-1.fc6.src.rpm
4021334bd3387803ee6ab430ee29a990e973a5f9 noarch/hal-cups-utils-0.6.9-1.fc6.src.rpm
e0b74d241f634b66d00667d13187c36c997884b5 ppc/hal-cups-utils-0.6.9-1.fc6.ppc.rpm
ead8e072a181b6c82579982cc6651dda7b8f1391 ppc/debug/hal-cups-utils-debuginfo-0.6.9-1.fc6.ppc.rpm
c09c6ef2c849fc8e0b1df6c0376393d61f49654b x86_64/debug/hal-cups-utils-debuginfo-0.6.9-1.fc6.x86_64.rpm
be5cf9870eba8724530f09882f0266f806f71b98 x86_64/hal-cups-utils-0.6.9-1.fc6.x86_64.rpm
b8712b1c62b192d460cf6ba989fba01615f810b4 i386/debug/hal-cups-utils-debuginfo-0.6.9-1.fc6.i386.rpm
67f2e7b28ad19f146c9268349a3b672bc151a449 i386/hal-cups-utils-0.6.9-1.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-517
2007-05-21
---------------------------------------------------------------------
Product : Fedora Core 5
Name : SDL
Version : 1.2.9
Release : 6.1
Summary : A cross-platform multimedia library.
Description :
Simple DirectMedia Layer (SDL) is a cross-platform multimedia library
designed to provide fast access to the graphics frame buffer and audio
device.
---------------------------------------------------------------------
* Mon May 21 2007 Thomas Woerner <twoerner(a)redhat.com> 1.2.9-6.1
- added missing libXt-devel (rhbz#240199)
* Mon May 7 2007 Thomas Woerner <twoerner(a)redhat.com> 1.2.9-6
- added missing (build) requires for GL and GLU
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
c84f90447a97a72a6f536081a6adc78bcfe6ef31 SRPMS/SDL-1.2.9-6.1.src.rpm
c84f90447a97a72a6f536081a6adc78bcfe6ef31 noarch/SDL-1.2.9-6.1.src.rpm
5f1bf5b5744796baba99aba00c2c630cb23d28eb ppc/SDL-devel-1.2.9-6.1.ppc.rpm
3c9092cdf960b5fc6d7ae2a934d506fae05ff7b6 ppc/SDL-1.2.9-6.1.ppc.rpm
83a27bd32815d040c932a49cecd2be5766e89e7a ppc/debug/SDL-debuginfo-1.2.9-6.1.ppc.rpm
5f710ec2216e5572bbad6127ea528ad65d487793 x86_64/SDL-1.2.9-6.1.x86_64.rpm
892c5a9e701f521b159b2ebe0bdb881e612869b0 x86_64/SDL-devel-1.2.9-6.1.x86_64.rpm
b0a824b1ce4240a178958bd0750d98cee7f3ced2 x86_64/debug/SDL-debuginfo-1.2.9-6.1.x86_64.rpm
117e240827e9e68fe3229df5d0abdd1b372ff651 i386/SDL-devel-1.2.9-6.1.i386.rpm
4d83231b24950be2a6c700d1d4e9facebaef5f58 i386/debug/SDL-debuginfo-1.2.9-6.1.i386.rpm
43c1ec35cc2751d4d476d3ce9f012ef60056d6f0 i386/SDL-1.2.9-6.1.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-490
2007-05-21
---------------------------------------------------------------------
Product : Fedora Core 6
Name : minicom
Version : 2.2
Release : 1.fc6
Summary : A text-based modem control and terminal emulation program.
Description :
Minicom is a simple text-based modem control and terminal emulation
program somewhat similar to MSDOS Telix. Minicom includes a dialing
directory, full ANSI and VT100 emulation, an (external) scripting
language, and other features.
---------------------------------------------------------------------
* Wed May 2 2007 Miroslav Lichvar <mlichvar(a)redhat.com> 2.2-1
- update to 2.2 (#237906)
- handle filenames with spaces (#98655)
- add requires for lrzsz
- spec cleanup
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
dd99effad19c16201b3a24e71b1197f937ed2f35 SRPMS/minicom-2.2-1.fc6.src.rpm
dd99effad19c16201b3a24e71b1197f937ed2f35 noarch/minicom-2.2-1.fc6.src.rpm
1a177f75d9252e7480030953f5bc823c5d1514a1 ppc/minicom-2.2-1.fc6.ppc.rpm
09612825938f5b8f21c47f6062e906fa62f00621 ppc/debug/minicom-debuginfo-2.2-1.fc6.ppc.rpm
f8549d742173d1394e1cda6bdaf4ae3f4d322956 x86_64/debug/minicom-debuginfo-2.2-1.fc6.x86_64.rpm
19a7d8467e4cfdf8860dd52c1a80ca16ca31b884 x86_64/minicom-2.2-1.fc6.x86_64.rpm
76b00b52faa8b5bc382368959b4a1abd79e47b6d i386/debug/minicom-debuginfo-2.2-1.fc6.i386.rpm
2505a3a94441afa5218bc33136784c15b211a06f i386/minicom-2.2-1.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-515
2007-05-21
---------------------------------------------------------------------
Product : Fedora Core 6
Name : screen
Version : 4.0.3
Release : 3.fc6
Summary : A screen manager that supports multiple logins on one terminal
Description :
The screen utility allows you to have multiple logins on just one
terminal. Screen is useful for users who telnet into a machine or are
connected via a dumb terminal, but want to use more than just one
login.
Install the screen package if you need a screen manager that can
support multiple logins on one terminal.
---------------------------------------------------------------------
Update Information:
Revert key bindings back to default.
---------------------------------------------------------------------
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
3a34cc1768c3f154a9bbef5f3826e830dfb1ec6d SRPMS/screen-4.0.3-3.fc6.src.rpm
3a34cc1768c3f154a9bbef5f3826e830dfb1ec6d noarch/screen-4.0.3-3.fc6.src.rpm
d34bbc6cb142ec0cf990a468f0326a069cc253d6 ppc/debug/screen-debuginfo-4.0.3-3.fc6.ppc.rpm
5fd3d908e63581dfcc0d84128719205385b654a8 ppc/screen-4.0.3-3.fc6.ppc.rpm
2b64004dc8a596047b9a5a8b5fcd287697f82fce x86_64/debug/screen-debuginfo-4.0.3-3.fc6.x86_64.rpm
305fe1a1760635156ccb6d63fef702d515fcbc63 x86_64/screen-4.0.3-3.fc6.x86_64.rpm
3fb821a0baf0ab86e11d17e052d6866091d54722 i386/screen-4.0.3-3.fc6.i386.rpm
d027ffdad8cce9b4e45cc55443123aa1f9d49d4e i386/debug/screen-debuginfo-4.0.3-3.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-514
2007-05-21
---------------------------------------------------------------------
Product : Fedora Core 6
Name : jakarta-commons-modeler
Version : 1.1
Release : 8jpp.2.fc6
Summary : Jakarta Commons Modeler Package
Description :
The Modeler project shall create and maintain a set of Java
classes to provide the facilities described in the preceeding section, plus
unit tests and small examples of using these facilities to instrument
Java classes with Model MBean support.
---------------------------------------------------------------------
Update Information:
Several security issues were reported to be fixed in
releases prior to 5.5.23
(http://tomcat.apache.org/security-5.html)
Tomcat was found to accept multiple content-length headers
in a request. This could allow attackers to poison a
web-cache, bypass web application firewall protection, or
conduct cross-site scripting attacks. (CVE-2005-2090)
Tomcat permitted various characters as path delimiters. If
Tomcat was used behind certain proxies and configured to
only proxy some contexts, an attacker could construct an
HTTP request to work around the context restriction and
potentially access non-proxied content. (CVE-2007-0450)
The implict-objects.jsp file distributed in the examples
webapp displayed a number of unfiltered header values. If
the JSP examples were accessible, this flaw could allow a
remote attacker to perform cross-site scripting
attacks. (CVE-2006-7195)
Users should upgrade to these erratum packages which contain
an update to Tomcat that resolves these issues. Updated
jakarta-commons-modeler packages are also included which
correct a bug when used with Tomcat 5.5.23.
---------------------------------------------------------------------
* Sun Apr 29 2007 Vivek Lakshmanan <vivekl(a)redhat.com> - 0:1.1-8jpp.2
- Add patch to fix jira task: MODELER-15 to allow tomcat5 5.5.23
to build against j-c-modeler
- Resolves: bug 237704
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
dad1218b669850e79dbd5d467c95ed95301b8d34 SRPMS/jakarta-commons-modeler-1.1-8jpp.2.fc6.src.rpm
dad1218b669850e79dbd5d467c95ed95301b8d34 noarch/jakarta-commons-modeler-1.1-8jpp.2.fc6.src.rpm
8dd80a01e127b5d40d732ce2e75c5c04e2000421 ppc/jakarta-commons-modeler-javadoc-1.1-8jpp.2.fc6.ppc.rpm
dd1ab4ed4a18518210a3609441d3c337a2dd5a69 ppc/debug/jakarta-commons-modeler-debuginfo-1.1-8jpp.2.fc6.ppc.rpm
7f4b54c6922fb76248bafd205e14119183ea99df ppc/jakarta-commons-modeler-1.1-8jpp.2.fc6.ppc.rpm
2a629ca2249b3012627ce9cea4ef89eee957f82a x86_64/jakarta-commons-modeler-javadoc-1.1-8jpp.2.fc6.x86_64.rpm
c397048d0562227811fb735b49acb0bda2c68511 x86_64/debug/jakarta-commons-modeler-debuginfo-1.1-8jpp.2.fc6.x86_64.rpm
2aa455ba7eb7d52799a3c0d93dab468cefa96c9e x86_64/jakarta-commons-modeler-1.1-8jpp.2.fc6.x86_64.rpm
ba5a53f53d214e199394ea50cdf2306b049e9085 i386/debug/jakarta-commons-modeler-debuginfo-1.1-8jpp.2.fc6.i386.rpm
501ec172627d91dbcabb7134d3b5b3c10f256e06 i386/jakarta-commons-modeler-javadoc-1.1-8jpp.2.fc6.i386.rpm
faee0b25204c51e08dd19930cf2c81880ce9bc23 i386/jakarta-commons-modeler-1.1-8jpp.2.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-514
2007-05-21
---------------------------------------------------------------------
Product : Fedora Core 6
Name : tomcat5
Version : 5.5.23
Release : 0jpp.2.fc6
Summary : Apache Servlet/JSP Engine, RI for Servlet 2.4/JSP 2.0 API
Description :
Tomcat is the servlet container that is used in the official Reference
Implementation for the Java Servlet and JavaServer Pages technologies.
The Java Servlet and JavaServer Pages specifications are developed by
Sun under the Java Community Process.
Tomcat is developed in an open and participatory environment and
released under the Apache Software License. Tomcat is intended to be
a collaboration of the best-of-breed developers from around the world.
We invite you to participate in this open development project. To
learn more about getting involved, click here.
---------------------------------------------------------------------
Update Information:
Several security issues were reported to be fixed in
releases prior to 5.5.23
(http://tomcat.apache.org/security-5.html)
Tomcat was found to accept multiple content-length headers
in a request. This could allow attackers to poison a
web-cache, bypass web application firewall protection, or
conduct cross-site scripting attacks. (CVE-2005-2090)
Tomcat permitted various characters as path delimiters. If
Tomcat was used behind certain proxies and configured to
only proxy some contexts, an attacker could construct an
HTTP request to work around the context restriction and
potentially access non-proxied content. (CVE-2007-0450)
The implict-objects.jsp file distributed in the examples
webapp displayed a number of unfiltered header values. If
the JSP examples were accessible, this flaw could allow a
remote attacker to perform cross-site scripting
attacks. (CVE-2006-7195)
Users should upgrade to these erratum packages which contain
an update to Tomcat that resolves these issues. Updated
jakarta-commons-modeler packages are also included which
correct a bug when used with Tomcat 5.5.23.
---------------------------------------------------------------------
* Tue May 8 2007 Vivek Lakshmanan <vivekl(a)redhat.com> - 0:5.5.23-0jpp.2
- Rebuild
- Add catalina.out to the rpm and set explicit permissions; tomcat ownership
- Resolves: bug 237088
* Mon Apr 23 2007 Vivek Lakshmanan <vivekl(a)redhat.com> - 0:5.5.23-0jpp.1
- Resolves: bug 237088
- Merge 0:5.5.17-8jpp.2 with sources/patches from 5.5.23
- Build against jakarta-commons-modeler 1.1 with MODELER-15 patch
* Thu Jan 18 2007 Rafael Schloming <rafaels(a)redhat.com> - 0:5.5.17-8jpp.2
- Changed PreReq to Requires(pre)
* Wed Oct 4 2006 Fernando Nasser <fnasser(a)redhat.com> 0:5.5.17-8jpp.1
- Merge with upstream
* Wed Oct 4 2006 Permaine Cheung <pcheung(a)redhat.com> 0:5.5.17-8jpp
- Fix condrestart in init script and location of init script in the spec file.
* Mon Oct 2 2006 Permaine Cheung <pcheung(a)redhat.com> 0:5.5.17-7jpp
- Add the new config file, and add the CONNECTOR_PORT variable in it.
* Mon Oct 2 2006 Permaine Cheung <pcheung(a)redhat.com> 0:5.5.17-6jpp
- Add the ability to start multiple instances of tomcat on the same machine.
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
4cca27a62b490d4bf7bf7260953cdda3fe7b9632 SRPMS/tomcat5-5.5.23-0jpp.2.fc6.src.rpm
4cca27a62b490d4bf7bf7260953cdda3fe7b9632 noarch/tomcat5-5.5.23-0jpp.2.fc6.src.rpm
fa28a89b09743ddcbb66a3c4e3d93ddee0e61f80 ppc/tomcat5-webapps-5.5.23-0jpp.2.fc6.ppc.rpm
babc63085ca6d10b9d8929c182d32284d087882a ppc/debug/tomcat5-debuginfo-5.5.23-0jpp.2.fc6.ppc.rpm
59294e81a221af65ef7aa1e6dc482896f05bf2da ppc/tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.2.fc6.ppc.rpm
626197a35ffb3d02153b84aa237309008ed67e1f ppc/tomcat5-servlet-2.4-api-5.5.23-0jpp.2.fc6.ppc.rpm
5f3a626c616d94886d89e61e3bf58891748c92d7 ppc/tomcat5-admin-webapps-5.5.23-0jpp.2.fc6.ppc.rpm
4ae8d9162d6bd4df4adbfc89de8ed436027d8072 ppc/tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.2.fc6.ppc.rpm
a033072d572483f5a01585330a487d72fdc9d454 ppc/tomcat5-5.5.23-0jpp.2.fc6.ppc.rpm
5c94bb64a50ce805f67ca754d03c324d3ee9c191 ppc/tomcat5-common-lib-5.5.23-0jpp.2.fc6.ppc.rpm
cfde40d1adeaca9bd3e0c8f7724d8cac6746e66a ppc/tomcat5-jsp-2.0-api-5.5.23-0jpp.2.fc6.ppc.rpm
9714969cd5a2e095aa98a3241e106e942f718c78 ppc/tomcat5-jasper-5.5.23-0jpp.2.fc6.ppc.rpm
f83be623d67da74aa707dc9c2cd8e404fd9ab388 ppc/tomcat5-server-lib-5.5.23-0jpp.2.fc6.ppc.rpm
204e54dc778e70928bf0b3f9da4ad4eac7eb645a ppc/tomcat5-jasper-javadoc-5.5.23-0jpp.2.fc6.ppc.rpm
06be1666b690dbdd52f91128e0b3ba91adccedc1 x86_64/tomcat5-5.5.23-0jpp.2.fc6.x86_64.rpm
842bf589d1e6734fb192dd934486153d44a6ef43 x86_64/tomcat5-admin-webapps-5.5.23-0jpp.2.fc6.x86_64.rpm
3976f5f7b0e59976a13ac56d39ebf9c666e1ba8f x86_64/debug/tomcat5-debuginfo-5.5.23-0jpp.2.fc6.x86_64.rpm
2b57e22fce9d78a248218aa4c7b33132796a8640 x86_64/tomcat5-server-lib-5.5.23-0jpp.2.fc6.x86_64.rpm
95896ca7579076120463d0beb1cc613254292796 x86_64/tomcat5-common-lib-5.5.23-0jpp.2.fc6.x86_64.rpm
0085f20c161c502511dfd25233747b302d5a7521 x86_64/tomcat5-jasper-javadoc-5.5.23-0jpp.2.fc6.x86_64.rpm
6d30e6f4c472916dd262c0056192ed880abcbb45 x86_64/tomcat5-jsp-2.0-api-5.5.23-0jpp.2.fc6.x86_64.rpm
89d644b14afa349fffe4d24d6a37416b5ac45e11 x86_64/tomcat5-servlet-2.4-api-5.5.23-0jpp.2.fc6.x86_64.rpm
7e6ad962c2c3915442a81ea71939e0004e917678 x86_64/tomcat5-webapps-5.5.23-0jpp.2.fc6.x86_64.rpm
4ff870f0ee9d6d23a7f2abf1883700270efefbb8 x86_64/tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.2.fc6.x86_64.rpm
f71f1eca6dd73bc4e02664d12e846fb4e3aa3b03 x86_64/tomcat5-jasper-5.5.23-0jpp.2.fc6.x86_64.rpm
7a2a66f27f119ae7de932733930375b751c1bc6f x86_64/tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.2.fc6.x86_64.rpm
29b88174aaf36c0bab7fd70973aacfed1502a471 i386/tomcat5-common-lib-5.5.23-0jpp.2.fc6.i386.rpm
6bd22d9f96ada74ef5402fb613da90a670024115 i386/tomcat5-5.5.23-0jpp.2.fc6.i386.rpm
2d0f392b9c90f05524d30ffaf0b138d5d5adb7ea i386/tomcat5-webapps-5.5.23-0jpp.2.fc6.i386.rpm
2dca87727af3ddfaf28cf673f30ca4dc445189d5 i386/tomcat5-jasper-5.5.23-0jpp.2.fc6.i386.rpm
bba9784fb0f9d1754b4299d68ebfb35a2c760691 i386/tomcat5-jsp-2.0-api-5.5.23-0jpp.2.fc6.i386.rpm
adb7176bd20f5cd86f024f166c6c052441ffc096 i386/debug/tomcat5-debuginfo-5.5.23-0jpp.2.fc6.i386.rpm
f225deb128e8efde1996eb85b60fc42d1da5fb5c i386/tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.2.fc6.i386.rpm
76338c98164ff4eb037c740c48c8c529228e3281 i386/tomcat5-jasper-javadoc-5.5.23-0jpp.2.fc6.i386.rpm
4cdb79d010d57caa239a46d4347b63156bcf49cb i386/tomcat5-server-lib-5.5.23-0jpp.2.fc6.i386.rpm
b0420a7cd4d585cded56c51b04f3af437fc4c338 i386/tomcat5-servlet-2.4-api-5.5.23-0jpp.2.fc6.i386.rpm
9ab2e7349e93b75bd26963ce34acb83786e551bd i386/tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.2.fc6.i386.rpm
2cca945073dc983aa08d9f4d2964fb4f575eb5b8 i386/tomcat5-admin-webapps-5.5.23-0jpp.2.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------