[SECURITY] Fedora 7 Update: qemu-0.9.0-4.fc7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-2001
2008-02-25 22:17:09
--------------------------------------------------------------------------------
Name : qemu
Product : Fedora 7
Version : 0.9.0
Release : 4.fc7
URL : http://www.qemu.org/
Summary : QEMU is a FAST! processor emulator
Description :
QEMU is a generic and open source processor emulator which achieves a good
emulation speed by using dynamic translation. QEMU has two operating modes:
* Full system emulation. In this mode, QEMU emulates a full system (for
example a PC), including a processor and various peripherials. It can be
used to launch different Operating Systems without rebooting the PC or
to debug system code.
* User mode emulation. In this mode, QEMU can launch Linux processes compiled
for one CPU on another CPU.
As QEMU requires no host kernel patches to run, it is safe and easy to use.
--------------------------------------------------------------------------------
Update Information:
Ian Jackson discovered that accesses beyond end of qemu emulated disk devices
can result in accesses to emulator's virtual memory space accesses and thus can
allow user with sufficient privilege in guest (root, as this would need
modification to kernel's driver) to break out of VM. http://marc.info/?l
=debian-security&m=120343592917055&w=2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 23 2008 Daniel P. Berrange <berrange(a)redhat.com> - 0.9.0-4.fc7
- Fix block device extents check (rhbz #433560)
* Wed Sep 26 2007 Daniel P. Berrange <berrange(a)redhat.com> - 0.9.0-3.fc7
- Update licence
- Fix CDROM emulation (rhbz #253542)
- Fix rtl8139 mmio region mappings with multiple NICs
- Fix rtl8139 checksum calculation for Vista (rhbz #308201)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #433560 - Qemu insufficient block device address range checking
https://bugzilla.redhat.com/show_bug.cgi?id=433560
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qemu' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 8 Update: pcmanfm-0.3.6-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-2000
2008-02-25 22:17:06
--------------------------------------------------------------------------------
Name : pcmanfm
Product : Fedora 8
Version : 0.3.6
Release : 1.fc8
URL : http://pcmanfm.sourceforge.net/
Summary : Extremly fast and lightweight file manager
Description :
PCMan File Manager is an extremly fast and lightweight file manager
which features tabbed browsing and user-friendly interface.
--------------------------------------------------------------------------------
Update Information:
New version 0.3.6 is released.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pcmanfm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 7 Update: jd-1.9.9-0.3.beta080225.fc7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1999
2008-02-25 22:17:03
--------------------------------------------------------------------------------
Name : jd
Product : Fedora 7
Version : 1.9.9
Release : 0.3.beta080225.fc7
URL : http://jd4linux.sourceforge.jp/
Summary : A 2ch browser
Description :
JD is a 2ch browser based on gtkmm2.
--------------------------------------------------------------------------------
Update Information:
New version 1.9.9 beta 080225 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 25 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.9-0.3.beta080225
- 1.9.9 beta 080225
* Mon Feb 25 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 2.0.0-0.3.svn1869
- svn 1869 (version 2.0.0)
* Sat Feb 9 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp>
- Remove patch for gcc43 (applied by upstream)
- Remove workarround for libsigc++ side bug
* Fri Feb 8 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 2.0.0-0.2.svn1774
- Patch to make jd happy with gcc43
- Workarround for libsigc++ side bug (bug 431017)
* Fri Dec 28 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.8-1
- 1.9.8
* Sun Dec 23 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.8-0.5.rc071223
- 1.9.8 rc 071223
* Tue Dec 18 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.8-0.4,beta071218
- 1.9.8 beta 071218
* Mon Dec 10 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.8-0.3.beta071210
- 1.9.8 beta 071210
* Sun Dec 9 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp>
- Switch from openssl to gnutls
* Thu Nov 22 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.7-1
- 1.9.7
* Thu Nov 15 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.7-0.4.rc071105
- 1.9.7 rc 071115
* Fri Nov 9 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.7-0.3.beta071109
- 1.9.7 beta 071109
* Fri Nov 2 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyoa.c.jp> - 1.9.7-0.2.beta071101
- 1.9.7 beta 071101
* Fri Oct 5 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.6-1
- 1.9.6
* Sun Sep 30 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.6-0.6.rc070930
- 1.9.6 rc 070930
* Tue Sep 18 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.6-0.5.beta070918
- 1.9.6 beta 070918
* Sun Aug 5 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.6-0.2.beta070804
- 1.9.6 beta 070804 release 2
* Sat Aug 4 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.6-0.1.beta070804
- 1.9.6 beta 070804
* Sat Jun 30 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.5-1
- 1.9.5
* Mon Jun 25 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.5-0.6.rc070625
- 1.9.5 rc 070625
* Sat Jun 16 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.5-0.5.beta070616
- 1.9.5 beta 070616
* Mon Jun 11 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.5-0.4.beta070611
- 1.9.5 beta 070611
* Mon May 28 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.5-0.3.beta070528
- 1.9.5 beta 070528
* Tue May 22 2007 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.9.5-0.2.beta070516
- Support C/Migemo search
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update jd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 8 Update: libnetfilter_conntrack-0.0.82-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-0968
2008-02-25 22:17:03
--------------------------------------------------------------------------------
Name : libnetfilter_conntrack
Product : Fedora 8
Version : 0.0.82
Release : 1.fc8
URL : http://netfilter.org
Summary : Netfilter conntrack userspace library
Description :
libnetfilter_conntrack is a userspace library providing a programming
interface (API) to the in-kernel connection tracking state table.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 20 2008 Paul P. Komkoff Jr <i(a)stingr.net> - 0.0.82-1
- new upstream version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libnetfilter_conntrack' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 8 Update: php-pear-Validate-0.8.1-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1996
2008-02-25 22:16:51
--------------------------------------------------------------------------------
Name : php-pear-Validate
Product : Fedora 8
Version : 0.8.1
Release : 1.fc8
URL : http://pear.php.net/package/Validate
Summary : Validation Class for Various Data Types
Description :
Package to validate various data. It includes :
- numbers (min/max, decimal or not)
- email (syntax, domain check, rfc822)
- string (predifined type alpha upper and/or lowercase, numeric,...)
- date (min, max)
- uri (RFC2396)
- possibility valid multiple data with a single method call (::multiple)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-pear-Validate' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
[SECURITY] Fedora 8 Update: qemu-0.9.0-6.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1995
2008-02-25 22:16:48
--------------------------------------------------------------------------------
Name : qemu
Product : Fedora 8
Version : 0.9.0
Release : 6.fc8
URL : http://www.qemu.org/
Summary : QEMU is a FAST! processor emulator
Description :
QEMU is a generic and open source processor emulator which achieves a good
emulation speed by using dynamic translation. QEMU has two operating modes:
* Full system emulation. In this mode, QEMU emulates a full system (for
example a PC), including a processor and various peripherials. It can be
used to launch different Operating Systems without rebooting the PC or
to debug system code.
* User mode emulation. In this mode, QEMU can launch Linux processes compiled
for one CPU on another CPU.
As QEMU requires no host kernel patches to run, it is safe and easy to use.
--------------------------------------------------------------------------------
Update Information:
Ian Jackson discovered that accesses beyond end of qemu emulated disk devices
can result in accesses to emulator's virtual memory space accesses and thus can
allow user with sufficient privilege in guest (root, as this would need
modification to kernel's driver) to break out of VM. http://marc.info/?l
=debian-security&m=120343592917055&w=2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 23 2008 Daniel P. Berrange <berrange(a)redhat.com> - 0.9.0-6.fc8
- Fix block device extents check (rhbz #433560)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #433560 - Qemu insufficient block device address range checking
https://bugzilla.redhat.com/show_bug.cgi?id=433560
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qemu' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 7 Update: mikmod-3.2.2-6.fc7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1871
2008-02-25 22:16:42
--------------------------------------------------------------------------------
Name : mikmod
Product : Fedora 7
Version : 3.2.2
Release : 6.fc7
URL : http://mikmod.raphnet.net/
Summary : A MOD music file player
Description :
MikMod is one of the best and most well known MOD music file players
for UNIX-like systems. This particular distribution is intended to
compile fairly painlessly in a Linux environment. MikMod uses the OSS
/dev/dsp driver including all recent kernels for output, and will also
write .wav files. Supported file formats include MOD, STM, S3M, MTM,
XM, ULT, and IT. The player uses ncurses for console output and
supports transparent loading from gzip/pkzip/zoo archives and the
loading/saving of playlists.
Install the mikmod package if you need a MOD music file player.
--------------------------------------------------------------------------------
Update Information:
Make mikmod work with esd
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 18 2008 Hans de Goede <j.w.r.degoede(a)hhs.nl> 3.2.2-6
- Fix MikMod_InfoLoader() and MikMod_InfoDriver() functions, fixing mikmod -n
output
* Mon Feb 18 2008 Hans de Goede <j.w.r.degoede(a)hhs.nl> 3.2.2-5
- Add BuildRequires esound-devel, so that the esd output driver gets build
- Replace completely braindead (hint to author, drink coffee first, then code)
esd non blocking patch with one that actually works. This fixes using mikmod
with pulseaudio (bz 247865)
- Note: this makes the 2 supported output devices oss and esd (and pulseaudio's
esd emulation) alsa is not supported, this requires a rewrite of the mikmod
alsa code which was written for alsa-0.5 and never updated for the new alsa
0.9/1.0 api
- Do not do library make install in %build, move it to %install, this fixes
building with the new rpm-check-buildroot build-check
* Thu Aug 23 2007 Jindrich Novy <jnovy(a)redhat.com> 3.2.2-3
- update License
- rebuild for BuildID
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #247865 - mikmod doesnt seem to support sound output
https://bugzilla.redhat.com/show_bug.cgi?id=247865
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mikmod' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
[SECURITY] Fedora 8 Update: kvm-60-2.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1993
2008-02-25 22:16:38
--------------------------------------------------------------------------------
Name : kvm
Product : Fedora 8
Version : 60
Release : 2.fc8
URL : http://kvm.sf.net
Summary : Kernel-based Virtual Machine
Description :
KVM (for Kernel-based Virtual Machine) is a full virtualization solution
for Linux on x86 hardware.
Using KVM, one can run multiple virtual machines running unmodified Linux
or Windows images. Each virtual machine has private virtualized hardware:
a network card, disk, graphics adapter, etc.
--------------------------------------------------------------------------------
Update Information:
Ian Jackson discovered that accesses beyond end of qemu emulated disk devices
can result in accesses to emulator's virtual memory space accesses and thus can
allow user with sufficient privilege in guest (root, as this would need
modification to kernel's driver) to break out of VM. http://marc.info/?l
=debian-security&m=120343592917055&w=2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 23 2008 Daniel P. Berrange <berrange(a)redhat.com> - 60-2.fc8
- Fix block device extents check (rhbz #433560)
* Thu Jan 31 2008 Jeremy Katz <katzj(a)redhat.com>
- We don't need e2fsprogs-devel to build anymore (#331871)
* Thu Jan 24 2008 Daniel P. Berrange <berrange(a)redhat.com> - 60-1.fc9
- Updated to kvm-60
- Fix license tag to keep rpmlint quiet
- Remove unused PPC, Sparc and PPC Video BIOS
* Tue Jan 15 2008 Bill Nottingham <notting(a)redhat.com>: - 59-1
- add upstream patch to fix VMs that no longer boot (#427317)
- update to kvm-59
* Thu Dec 27 2007 Jeremy Katz <katzj(a)redhat.com> - 58-2
- Fix up defaults patch to apply
* Thu Dec 27 2007 Jeremy Katz <katzj(a)redhat.com> - 58-1
- Update to kvm-58
* Thu Dec 13 2007 Jeremy Katz <katzj(a)redhat.com> - 56-1
- Update to kvm-56
* Tue Dec 4 2007 Jeremy Katz <katzj(a)redhat.com> - 55-1
- Update to kvm-55
* Mon Dec 3 2007 Jeremy Katz <katzj(a)redhat.com> - 54-1
- update to kvm-54
* Tue Nov 20 2007 Jeremy Katz <katzj(a)redhat.com> - 53-1
- update to kvm-53
* Wed Nov 7 2007 Jeremy Katz <katzj(a)redhat.com> - 51-1
- update to kvm-51
* Tue Nov 6 2007 Jeremy Katz <katzj(a)redhat.com> - 50-1
- update to kvm-50, drop all the patches that have gone upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #433560 - Qemu insufficient block device address range checking
https://bugzilla.redhat.com/show_bug.cgi?id=433560
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kvm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 8 Update: emacs-auctex-11.85-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1827
2008-02-25 22:16:38
--------------------------------------------------------------------------------
Name : emacs-auctex
Product : Fedora 8
Version : 11.85
Release : 1.fc8
URL : http://www.gnu.org/software/auctex/
Summary : Enhanced TeX modes for Emacs
Description :
AUCTeX is an extensible package that supports writing and formatting
TeX files for most variants of Emacs.
AUCTeX supports many different TeX macro packages, including AMS-TeX,
LaTeX, Texinfo and basic support for ConTeXt. Documentation can be
found under /usr/share/doc, e.g. the reference card (tex-ref.pdf) and
the FAQ. The AUCTeX manual is available in Emacs info (C-h i d m
AUCTeX RET). On the AUCTeX home page, we provide manuals in various
formats.
AUCTeX includes preview-latex support which makes LaTeX a tightly
integrated component of your editing workflow by visualizing selected
source chunks (such as single formulas or graphics) directly as images
in the source buffer.
This package is for GNU Emacs.
--------------------------------------------------------------------------------
Update Information:
New upstream bug fix version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 16 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 11.85-1
- Update specfile to conform to Emacs add-on packaging guidelines
- Update to version 11.85
- Update license tag to GPLv3+ accordingly
- Remove Ghostscript requires for tetex-preview package
- Spec file clean-ups
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update emacs-auctex' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 7 Update: libtunepimp-0.5.3-11.fc7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1992
2008-02-25 22:16:34
--------------------------------------------------------------------------------
Name : libtunepimp
Product : Fedora 7
Version : 0.5.3
Release : 11.fc7
URL : http://musicbrainz.org/doc/libtunepimp
Summary : A library for creating MusicBrainz enabled tagging applications
Description :
The TunePimp library is a development library geared towards developers
who wish to create MusicBrainz enabled tagging applications.
--------------------------------------------------------------------------------
Update Information:
This build includes mp4 metadata support (via libmp4v2).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 21 2008 Rex Dieter <rdieter(a)fedoraproject.org> 0.5.3-11
- gcc43 patch
- include mp4 plugin here
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 0.5.3-10
- Autorebuild for GCC 4.3
* Sat Aug 25 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 0.5.3-9
- respin (BuildID)
* Sat Aug 11 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 0.5.3-8
- License: LGPLv2+
* Fri Jun 22 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 0.5.3-7
- fix URL (#245283)
* Thu Jun 14 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 0.5.3-6
- go back to unversioned BR: libmpcdec-devel
* Thu Jun 14 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 0.5.3-5
- respin (again for libmpcdec), BR: libmpcdec-devel >= 1.2.6 (#244228)
* Wed Jun 6 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 0.5.3-4
- respin (for libmpcdec)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libtunepimp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months