--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3245
2008-04-29 20:32:07.305598
--------------------------------------------------------------------------------
Name : ocfs2-tools
Product : Fedora 8
Version : 1.3.9
Release : 7.20080221git.fc8
URL : http://oss.oracle.com/projects/ocfs2-tools/
Summary : Tools for managing the Ocfs2 cluster file system
Description :
Programs to manage the Ocfs2 cluster file system, including mkfs.ocfs2,
tunefs.ocfs2 and fsck.ocfs2.
Ocfs2 is a general purpose extent based shared disk cluster file
system. It supports 64 bit inode numbers, and has automatically
extending metadata groups which may also make it attractive for
non-clustered use. Ocfs2 leverages some well tested kernel
technologies, such as JBD - the same journaling subsystem in use by
ext3.
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #431277 - Review Request: ocfs2-tools - programs for managing Ocfs2 file systems
https://bugzilla.redhat.com/show_bug.cgi?id=431277
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ocfs2-tools' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3420
2008-04-29 20:31:55
--------------------------------------------------------------------------------
Name : clamav
Product : Fedora 8
Version : 0.92.1
Release : 2.fc8
URL : http://www.clamav.net
Summary : End-user tools for the Clam Antivirus scanner
Description :
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this
software is the integration with mail servers (attachment scanning). The
package provides a flexible and scalable multi-threaded daemon, a command
line scanner, and a tool for automatic updating via Internet. The programs
are based on a shared library distributed with the Clam AntiVirus package,
which you can use with your own software. The virus database is based on
the virus database from OpenAntiVirus, but contains additional signatures
(including signatures for popular polymorphic viruses, too) and is KEPT UP
TO DATE.
--------------------------------------------------------------------------------
Update Information:
Security update - backport security fixes from 0.93: CVE-2008-1100 (#442360):
Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 (#442525): Endless
loop / hang with crafted arj CVE-2008-0314 (#442740): PeSpin Heap Overflow
Vulnerability CVE-2008-1833 (#442741): PE WWPack Heap Overflow Vulnerability
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 24 2008 Tomas Hoger <thoger(a)redhat.com> - 0.92.1-2
- Security update - backport security fixes from 0.93:
CVE-2008-1100 (#442360): Upack Processing Buffer Overflow Vulnerability
CVE-2008-1387 (#442525): Endless loop / hang with crafted arj
CVE-2008-0314 (#442740): PeSpin Heap Overflow Vulnerability
CVE-2008-1833 (#442741): PE WWPack Heap Overflow Vulnerability
* Mon Feb 11 2008 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.92.1-1
- updated to 0.92.1
* Tue Jan 1 2008 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.92-6
- redisabled unrar stuff completely by using clean sources
* Tue Jan 1 2008 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.92-5
- use a better way to disable RPATH-generation (needed for '--with
unrar' builds)
* Mon Dec 31 2007 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.92-4
- added a README.fedora to the milter package (#240610)
- ship original sources again; unrar is now licensed correctly (no more
stolen code put under GPL). Nevertheless, this license is not GPL
compatible, and to allow libclamav to be used by GPL applications,
unrar is disabled by a ./configure switch.
- use pkg-config in clamav-config to emulate --cflags and --libs
operations (fixes partly multilib issues)
- registered some more auto-updated files and marked them as %ghost
* Fri Dec 21 2007 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.92-3
- updated to 0.92 (SECURITY):
- CVE-2007-6335 MEW PE File Integer Overflow Vulnerability
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #442740 - CVE-2008-0314 clamav: PeSpin Heap Overflow Vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=442740
[ 2 ] Bug #442525 - CVE-2008-1387 clamav: Endless loop / hang with crafted arj
https://bugzilla.redhat.com/show_bug.cgi?id=442525
[ 3 ] Bug #442360 - CVE-2008-1100 clamav: Upack Processing Buffer Overflow Vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=442360
[ 4 ] Bug #442741 - CVE-2008-1833 clamav: PE WWPack Heap Overflow Vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=442741
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update clamav' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3419
2008-04-29 20:31:44
--------------------------------------------------------------------------------
Name : util-linux-ng
Product : Fedora 8
Version : 2.13.1
Release : 2.fc8
URL : ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng
Summary : A collection of basic system utilities
Description :
The util-linux-ng package contains a large variety of low-level system
utilities that are necessary for a Linux system to function. Among
others, Util-linux contains the fdisk configuration tool and the login
program.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 22 2008 Karel Zak <kzak(a)redhat.com> 2.13.1-2
- fix audit log injection attack via login
* Wed Jan 16 2008 Karel Zak <kzak(a)redhat.com> 2.13.1-1
- upgrade to stable util-linux-ng 2.13.1
- fix #427874 - util-linux-ng gets "excess command line argument" on update
* Thu Jan 3 2008 Karel Zak <kzak(a)redhat.com> 2.13-3.2
- fix #427207 - util-linux-ng-2.13-3.1.fc8.src.rpm not rebuilded
* Wed Dec 5 2007 Karel Zak <kzak(a)redhat.com> 2.13-3.1
- fix #409551 - hwclock: check for ENODEV (upstream patch)
- fix #408391 - setarch: add missing alpha subarchs (upstream patch)
- mkswap: possible to crash with SELinux relabeling support (upstream patch)
- mount: don't call canonicalize(SPEC) for cifs, smbfs and nfs (upstream patch)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #443925 - CVE-2008-1926 util-linux: audit log injection via login
https://bugzilla.redhat.com/show_bug.cgi?id=443925
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update util-linux-ng' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3415
2008-04-29 20:31:13
--------------------------------------------------------------------------------
Name : midori
Product : Fedora 7
Version : 0.0.17
Release : 3.fc7
URL : http://software.twotoasts.de/?page=midori
Summary : A lightweight GTK+ web browser
Description :
Midori is a lightweight web browser, and has many features expected of a
modern browser, including:
* Full integration with GTK+2.
* Fast rendering with WebKit.
* Tabs, windows and session management.
* Bookmarks are stored with XBEL.
* Searchbox based on OpenSearch.
* Custom context menu actions.
* User scripts and user styles support.
* Extensible via Lua scripts.
The project is currently in an early alpha state. The features are still being
implemented, and some are still quite incomplete.
--------------------------------------------------------------------------------
Update Information:
Updated WebKit packages are available which fix two security vulnerabilities:
CVE-2008-1010 (Arbitrary code execution) and CVE-2008-1011 (Cross-Site
Scripting).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #438532 - CVE-2008-1010 WebKit Arbitrary code execution
https://bugzilla.redhat.com/show_bug.cgi?id=438532
[ 2 ] Bug #438531 - CVE-2008-1011 WebKit Cross Site Scripting
https://bugzilla.redhat.com/show_bug.cgi?id=438531
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update midori' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3415
2008-04-29 20:31:13
--------------------------------------------------------------------------------
Name : WebKit
Product : Fedora 7
Version : 1.0.0
Release : 0.8.svn31787.fc7
URL : http://webkit.org/
Summary : Web content engine library
Description :
WebKit is an open source web browser engine.
--------------------------------------------------------------------------------
Update Information:
Updated WebKit packages are available which fix two security vulnerabilities:
CVE-2008-1010 (Arbitrary code execution) and CVE-2008-1011 (Cross-Site
Scripting).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #438532 - CVE-2008-1010 WebKit Arbitrary code execution
https://bugzilla.redhat.com/show_bug.cgi?id=438532
[ 2 ] Bug #438531 - CVE-2008-1011 WebKit Cross Site Scripting
https://bugzilla.redhat.com/show_bug.cgi?id=438531
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update WebKit' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-2925
2008-04-29 20:30:55
--------------------------------------------------------------------------------
Name : exaile
Product : Fedora 8
Version : 0.2.13
Release : 1.fc8
URL : http://www.exaile.org
Summary : A music player
Description :
Exaile is a media player aiming to be similar to KDE's AmaroK, but for GTK+.
It incorporates many of the cool things from AmaroK (and other media players)
like automatic fetching of album art, handling of large libraries, lyrics
fetching, artist/album information via the wikipedia, last.fm support, optional
iPod support (assuming you have python-gpod installed).
In addition, Exaile also includes a built in shoutcast directory browser,
tabbed playlists (so you can have more than one playlist open at a time),
blacklisting of tracks (so they don't get scanned into your library),
downloading of guitar tablature from fretplay.com, and submitting played tracks
on your iPod to last.fm
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 3 2008 Deji Akingunola <dakingun(a)gmail.com> - 0.2.13-1
- Update to 0.2.13
* Thu Nov 29 2007 Deji Akingunola <dakingun(a)gmail.com> - 0.2.11.1-1
- Update to 0.2.11.1 that removes bogus cruft from 0.2.11 source tarball
- Rebuild for firefox-2.0.0.10
* Fri Nov 16 2007 Deji Akingunola <dakingun(a)gmail.com> - 0.2.11-2
- Rebuild for firefox-2.0.0.9
* Mon Oct 22 2007 Deji Akingunola <dakingun(a)gmail.com> - 0.2.11-1
- New release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update exaile' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-2959
2008-04-29 20:30:55
--------------------------------------------------------------------------------
Name : kpowersave
Product : Fedora 8
Version : 0.7.3
Release : 3.fc8
URL : http://powersave.sourceforge.net/
Summary : KPowersave is the KDE frontend for powermanagement
Description :
KPowersave is the KDE frontend for powermanagement.
It provides battery monitoring, suspend/ standby
triggers and many more features for KDE (and GNOME).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 6 2008 Dennis Gilmore <dennis(a)ausil.us> - 0.7.3-3
- apply patch for bugzilla #245293 #426666
* Sun Dec 9 2007 Rex Dieter <rdieter[AT]fedoraproject.org> - 0.7.3-2
- BR: kdelibs3-devel
* Fri Oct 5 2007 Dennis Gilmore <dennis(a)ausil.us> - 0.7.3-1
- update to 0.7.3 final
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #245293 - kpowersave can't find pidof
https://bugzilla.redhat.com/show_bug.cgi?id=245293
[ 2 ] Bug #441006 - Low battery suspend not working right
https://bugzilla.redhat.com/show_bug.cgi?id=441006
[ 3 ] Bug #426666 - KPowersave Error message / No autosuspend
https://bugzilla.redhat.com/show_bug.cgi?id=426666
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kpowersave' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3412
2008-04-29 20:30:51
--------------------------------------------------------------------------------
Name : kdelibs4
Product : Fedora 8
Version : 4.0.3
Release : 7.fc8
URL : http://www.kde.org/
Summary : K Desktop Environment 4 - Libraries
Description :
Libraries for the K Desktop Environment 4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader
https://bugzilla.redhat.com/show_bug.cgi?id=443766
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kdelibs4' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3412
2008-04-29 20:30:51
--------------------------------------------------------------------------------
Name : qt4
Product : Fedora 8
Version : 4.3.4
Release : 11.fc8
URL : http://www.trolltech.com/products/qt/
Summary : Qt toolkit
Description :
Qt is a software toolkit for developing applications.
This package contains base tools, like string, xml, and network
handling.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader
https://bugzilla.redhat.com/show_bug.cgi?id=443766
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qt4' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3412
2008-04-29 20:30:51
--------------------------------------------------------------------------------
Name : kdepimlibs
Product : Fedora 8
Version : 4.0.3
Release : 3.fc8
URL : http://www.kde.org/
Summary : K Desktop Environment 4 - PIM Libraries
Description :
Personal Information Management (PIM) libraries for the
K Desktop Environment 4.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 3 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4.0.3-3
- rebuild (again) for the fixed %{_kde4_buildtype}
* Mon Mar 31 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4.0.3-2
- rebuild for NDEBUG and _kde4_libexecdir
* Fri Mar 28 2008 Than Ngo <than(a)redhat.com> 4.0.3-1
- 4.0.3
- -apidocs: Drop Requires: %name
- include noarch build hooks (not enabled)
* Thu Mar 6 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4.0.2-2
- build apidocs and put them into an -apidocs subpackage (can be turned off)
- BR doxygen, graphviz and qt4-doc when building apidocs
* Thu Feb 28 2008 Than Ngo <than(a)redhat.com> 4.0.2-1
- 4.0.2
* Wed Jan 30 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4.0.1-2
- don't delete kconf_update script, it has been fixed to do the right thing
* Wed Jan 30 2008 Rex Dieter <rdieter(a)fedoraproject.org> 4.0.1-1
- 4.0.1
* Mon Jan 7 2008 Than Ngo <than(a)redhat.com> 4.0.0-1
- 4.0.0
* Tue Dec 11 2007 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 3.97.0-2
- rebuild for changed _kde4_includedir
* Wed Dec 5 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.97.0-1
- kde-3.97.0
* Thu Nov 29 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.96.2-1
- kde-3.96.2
* Tue Nov 27 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.96.1-2
- kde-3.96.1
* Thu Nov 15 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.96.0-1
- kde-3.96.0
* Fri Nov 9 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.95.2-1
- kde-3.95.2
* Mon Nov 5 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.95.0-1
- kde-3.95.0 (kde4 dev platform rc1)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader
https://bugzilla.redhat.com/show_bug.cgi?id=443766
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kdepimlibs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------