April 2008 - package-announce - Fedora mailing-lists

Fedora 8 Update: ocfs2-tools-1.3.9-7.20080221git.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3245 2008-04-29 20:32:07.305598 -------------------------------------------------------------------------------- Name : ocfs2-tools Product : Fedora 8 Version : 1.3.9 Release : 7.20080221git.fc8 URL : http://oss.oracle.com/projects/ocfs2-tools/ Summary : Tools for managing the Ocfs2 cluster file system Description : Programs to manage the Ocfs2 cluster file system, including mkfs.ocfs2, tunefs.ocfs2 and fsck.ocfs2. Ocfs2 is a general purpose extent based shared disk cluster file system. It supports 64 bit inode numbers, and has automatically extending metadata groups which may also make it attractive for non-clustered use. Ocfs2 leverages some well tested kernel technologies, such as JBD - the same journaling subsystem in use by ext3. -------------------------------------------------------------------------------- Update Information: Initial package for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #431277 - Review Request: ocfs2-tools - programs for managing Ocfs2 file systems https://bugzilla.redhat.com/show_bug.cgi?id=431277 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ocfs2-tools' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 8 Update: clamav-0.92.1-2.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3420 2008-04-29 20:31:55 -------------------------------------------------------------------------------- Name : clamav Product : Fedora 8 Version : 0.92.1 Release : 2.fc8 URL : http://www.clamav.net Summary : End-user tools for the Clam Antivirus scanner Description : Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. The virus database is based on the virus database from OpenAntiVirus, but contains additional signatures (including signatures for popular polymorphic viruses, too) and is KEPT UP TO DATE. -------------------------------------------------------------------------------- Update Information: Security update - backport security fixes from 0.93: CVE-2008-1100 (#442360): Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 (#442525): Endless loop / hang with crafted arj CVE-2008-0314 (#442740): PeSpin Heap Overflow Vulnerability CVE-2008-1833 (#442741): PE WWPack Heap Overflow Vulnerability -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 24 2008 Tomas Hoger <thoger(a)redhat.com> - 0.92.1-2 - Security update - backport security fixes from 0.93: CVE-2008-1100 (#442360): Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 (#442525): Endless loop / hang with crafted arj CVE-2008-0314 (#442740): PeSpin Heap Overflow Vulnerability CVE-2008-1833 (#442741): PE WWPack Heap Overflow Vulnerability * Mon Feb 11 2008 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.92.1-1 - updated to 0.92.1 * Tue Jan 1 2008 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.92-6 - redisabled unrar stuff completely by using clean sources * Tue Jan 1 2008 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.92-5 - use a better way to disable RPATH-generation (needed for '--with unrar' builds) * Mon Dec 31 2007 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.92-4 - added a README.fedora to the milter package (#240610) - ship original sources again; unrar is now licensed correctly (no more stolen code put under GPL). Nevertheless, this license is not GPL compatible, and to allow libclamav to be used by GPL applications, unrar is disabled by a ./configure switch. - use pkg-config in clamav-config to emulate --cflags and --libs operations (fixes partly multilib issues) - registered some more auto-updated files and marked them as %ghost * Fri Dec 21 2007 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.92-3 - updated to 0.92 (SECURITY): - CVE-2007-6335 MEW PE File Integer Overflow Vulnerability -------------------------------------------------------------------------------- References: [ 1 ] Bug #442740 - CVE-2008-0314 clamav: PeSpin Heap Overflow Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=442740 [ 2 ] Bug #442525 - CVE-2008-1387 clamav: Endless loop / hang with crafted arj https://bugzilla.redhat.com/show_bug.cgi?id=442525 [ 3 ] Bug #442360 - CVE-2008-1100 clamav: Upack Processing Buffer Overflow Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=442360 [ 4 ] Bug #442741 - CVE-2008-1833 clamav: PE WWPack Heap Overflow Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=442741 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update clamav' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 8 Update: util-linux-ng-2.13.1-2.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3419 2008-04-29 20:31:44 -------------------------------------------------------------------------------- Name : util-linux-ng Product : Fedora 8 Version : 2.13.1 Release : 2.fc8 URL : ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng Summary : A collection of basic system utilities Description : The util-linux-ng package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, Util-linux contains the fdisk configuration tool and the login program. -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 22 2008 Karel Zak <kzak(a)redhat.com> 2.13.1-2 - fix audit log injection attack via login * Wed Jan 16 2008 Karel Zak <kzak(a)redhat.com> 2.13.1-1 - upgrade to stable util-linux-ng 2.13.1 - fix #427874 - util-linux-ng gets "excess command line argument" on update * Thu Jan 3 2008 Karel Zak <kzak(a)redhat.com> 2.13-3.2 - fix #427207 - util-linux-ng-2.13-3.1.fc8.src.rpm not rebuilded * Wed Dec 5 2007 Karel Zak <kzak(a)redhat.com> 2.13-3.1 - fix #409551 - hwclock: check for ENODEV (upstream patch) - fix #408391 - setarch: add missing alpha subarchs (upstream patch) - mkswap: possible to crash with SELinux relabeling support (upstream patch) - mount: don't call canonicalize(SPEC) for cifs, smbfs and nfs (upstream patch) -------------------------------------------------------------------------------- References: [ 1 ] Bug #443925 - CVE-2008-1926 util-linux: audit log injection via login https://bugzilla.redhat.com/show_bug.cgi?id=443925 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update util-linux-ng' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 7 Update: midori-0.0.17-3.fc7
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3415 2008-04-29 20:31:13 -------------------------------------------------------------------------------- Name : midori Product : Fedora 7 Version : 0.0.17 Release : 3.fc7 URL : http://software.twotoasts.de/?page=midori Summary : A lightweight GTK+ web browser Description : Midori is a lightweight web browser, and has many features expected of a modern browser, including: * Full integration with GTK+2. * Fast rendering with WebKit. * Tabs, windows and session management. * Bookmarks are stored with XBEL. * Searchbox based on OpenSearch. * Custom context menu actions. * User scripts and user styles support. * Extensible via Lua scripts. The project is currently in an early alpha state. The features are still being implemented, and some are still quite incomplete. -------------------------------------------------------------------------------- Update Information: Updated WebKit packages are available which fix two security vulnerabilities: CVE-2008-1010 (Arbitrary code execution) and CVE-2008-1011 (Cross-Site Scripting). -------------------------------------------------------------------------------- References: [ 1 ] Bug #438532 - CVE-2008-1010 WebKit Arbitrary code execution https://bugzilla.redhat.com/show_bug.cgi?id=438532 [ 2 ] Bug #438531 - CVE-2008-1011 WebKit Cross Site Scripting https://bugzilla.redhat.com/show_bug.cgi?id=438531 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update midori' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 7 Update: WebKit-1.0.0-0.8.svn31787.fc7
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3415 2008-04-29 20:31:13 -------------------------------------------------------------------------------- Name : WebKit Product : Fedora 7 Version : 1.0.0 Release : 0.8.svn31787.fc7 URL : http://webkit.org/ Summary : Web content engine library Description : WebKit is an open source web browser engine. -------------------------------------------------------------------------------- Update Information: Updated WebKit packages are available which fix two security vulnerabilities: CVE-2008-1010 (Arbitrary code execution) and CVE-2008-1011 (Cross-Site Scripting). -------------------------------------------------------------------------------- References: [ 1 ] Bug #438532 - CVE-2008-1010 WebKit Arbitrary code execution https://bugzilla.redhat.com/show_bug.cgi?id=438532 [ 2 ] Bug #438531 - CVE-2008-1011 WebKit Cross Site Scripting https://bugzilla.redhat.com/show_bug.cgi?id=438531 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update WebKit' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 8 Update: exaile-0.2.13-1.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-2925 2008-04-29 20:30:55 -------------------------------------------------------------------------------- Name : exaile Product : Fedora 8 Version : 0.2.13 Release : 1.fc8 URL : http://www.exaile.org Summary : A music player Description : Exaile is a media player aiming to be similar to KDE's AmaroK, but for GTK+. It incorporates many of the cool things from AmaroK (and other media players) like automatic fetching of album art, handling of large libraries, lyrics fetching, artist/album information via the wikipedia, last.fm support, optional iPod support (assuming you have python-gpod installed). In addition, Exaile also includes a built in shoutcast directory browser, tabbed playlists (so you can have more than one playlist open at a time), blacklisting of tracks (so they don't get scanned into your library), downloading of guitar tablature from fretplay.com, and submitting played tracks on your iPod to last.fm -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 3 2008 Deji Akingunola <dakingun(a)gmail.com> - 0.2.13-1 - Update to 0.2.13 * Thu Nov 29 2007 Deji Akingunola <dakingun(a)gmail.com> - 0.2.11.1-1 - Update to 0.2.11.1 that removes bogus cruft from 0.2.11 source tarball - Rebuild for firefox-2.0.0.10 * Fri Nov 16 2007 Deji Akingunola <dakingun(a)gmail.com> - 0.2.11-2 - Rebuild for firefox-2.0.0.9 * Mon Oct 22 2007 Deji Akingunola <dakingun(a)gmail.com> - 0.2.11-1 - New release -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update exaile' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 8 Update: kpowersave-0.7.3-3.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-2959 2008-04-29 20:30:55 -------------------------------------------------------------------------------- Name : kpowersave Product : Fedora 8 Version : 0.7.3 Release : 3.fc8 URL : http://powersave.sourceforge.net/ Summary : KPowersave is the KDE frontend for powermanagement Description : KPowersave is the KDE frontend for powermanagement. It provides battery monitoring, suspend/ standby triggers and many more features for KDE (and GNOME). -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 6 2008 Dennis Gilmore <dennis(a)ausil.us> - 0.7.3-3 - apply patch for bugzilla #245293 #426666 * Sun Dec 9 2007 Rex Dieter <rdieter[AT]fedoraproject.org> - 0.7.3-2 - BR: kdelibs3-devel * Fri Oct 5 2007 Dennis Gilmore <dennis(a)ausil.us> - 0.7.3-1 - update to 0.7.3 final -------------------------------------------------------------------------------- References: [ 1 ] Bug #245293 - kpowersave can't find pidof https://bugzilla.redhat.com/show_bug.cgi?id=245293 [ 2 ] Bug #441006 - Low battery suspend not working right https://bugzilla.redhat.com/show_bug.cgi?id=441006 [ 3 ] Bug #426666 - KPowersave Error message / No autosuspend https://bugzilla.redhat.com/show_bug.cgi?id=426666 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update kpowersave' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 8 Update: kdelibs4-4.0.3-7.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3412 2008-04-29 20:30:51 -------------------------------------------------------------------------------- Name : kdelibs4 Product : Fedora 8 Version : 4.0.3 Release : 7.fc8 URL : http://www.kde.org/ Summary : K Desktop Environment 4 - Libraries Description : Libraries for the K Desktop Environment 4. -------------------------------------------------------------------------------- References: [ 1 ] Bug #443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader https://bugzilla.redhat.com/show_bug.cgi?id=443766 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update kdelibs4' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 8 Update: qt4-4.3.4-11.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3412 2008-04-29 20:30:51 -------------------------------------------------------------------------------- Name : qt4 Product : Fedora 8 Version : 4.3.4 Release : 11.fc8 URL : http://www.trolltech.com/products/qt/ Summary : Qt toolkit Description : Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling. -------------------------------------------------------------------------------- References: [ 1 ] Bug #443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader https://bugzilla.redhat.com/show_bug.cgi?id=443766 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update qt4' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 8 Update: kdepimlibs-4.0.3-3.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3412 2008-04-29 20:30:51 -------------------------------------------------------------------------------- Name : kdepimlibs Product : Fedora 8 Version : 4.0.3 Release : 3.fc8 URL : http://www.kde.org/ Summary : K Desktop Environment 4 - PIM Libraries Description : Personal Information Management (PIM) libraries for the K Desktop Environment 4. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 3 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4.0.3-3 - rebuild (again) for the fixed %{_kde4_buildtype} * Mon Mar 31 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4.0.3-2 - rebuild for NDEBUG and _kde4_libexecdir * Fri Mar 28 2008 Than Ngo <than(a)redhat.com> 4.0.3-1 - 4.0.3 - -apidocs: Drop Requires: %name - include noarch build hooks (not enabled) * Thu Mar 6 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4.0.2-2 - build apidocs and put them into an -apidocs subpackage (can be turned off) - BR doxygen, graphviz and qt4-doc when building apidocs * Thu Feb 28 2008 Than Ngo <than(a)redhat.com> 4.0.2-1 - 4.0.2 * Wed Jan 30 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4.0.1-2 - don't delete kconf_update script, it has been fixed to do the right thing * Wed Jan 30 2008 Rex Dieter <rdieter(a)fedoraproject.org> 4.0.1-1 - 4.0.1 * Mon Jan 7 2008 Than Ngo <than(a)redhat.com> 4.0.0-1 - 4.0.0 * Tue Dec 11 2007 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 3.97.0-2 - rebuild for changed _kde4_includedir * Wed Dec 5 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.97.0-1 - kde-3.97.0 * Thu Nov 29 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.96.2-1 - kde-3.96.2 * Tue Nov 27 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.96.1-2 - kde-3.96.1 * Thu Nov 15 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.96.0-1 - kde-3.96.0 * Fri Nov 9 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.95.2-1 - kde-3.95.2 * Mon Nov 5 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.95.0-1 - kde-3.95.0 (kde4 dev platform rc1) -------------------------------------------------------------------------------- References: [ 1 ] Bug #443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader https://bugzilla.redhat.com/show_bug.cgi?id=443766 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update kdepimlibs' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 8 Update: kdebase-runtime-4.0.3-10.fc8.1
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3412 2008-04-29 20:30:51 -------------------------------------------------------------------------------- Name : kdebase-runtime Product : Fedora 8 Version : 4.0.3 Release : 10.fc8.1 URL : http://www.kde.org/ Summary : K Desktop Environment - Runtime Description : Core runtime for the K Desktop Environment 4. This package does not include the KDE 4 versions of applications which are provided by KDE 3 because of file and configuration setting conflicts. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader https://bugzilla.redhat.com/show_bug.cgi?id=443766 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update kdebase-runtime' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 8 Update: kde-filesystem-4-14.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3412 2008-04-29 20:30:51 -------------------------------------------------------------------------------- Name : kde-filesystem Product : Fedora 8 Version : 4 Release : 14.fc8 URL : [] Summary : KDE filesystem layout Description : This package provides some directories that are required/used by KDE. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 3 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-14 - don't define %{_kde4_debug} in macros.kde4 anymore * Wed Apr 2 2008 Rex Dieter <rdieter(a)fedoraproject.org> 4-13 - define %{_kde4_buildtype} in macros.kde4 too * Mon Mar 31 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-12 - actually define %{_kde4_libexecdir} in macros.kde4 * Mon Mar 31 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-11 - add %{_kde4_libexecdir}, set LIBEXEC_INSTALL_DIR to it - don't own %{_kde4_libdir} which is just %{_libdir} * Mon Mar 31 2008 Rex Dieter <rdieter(a)fedoraproject.org> 4-10 - macros.kde4: _kde4_buildtype=FEDORA * Fri Mar 28 2008 Than Ngo <than(a)redhat.com> 4-9 - internal services shouldn't be displayed in menu, bz#321771 * Sun Jan 27 2008 Rex Dieter <rdieter(a)fedoraproject.org> 4-8 - should not own %_datadir/desktop-directories/ (#430420) * Fri Jan 25 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-7 - own %{_kde4_appsdir}/color-schemes * Mon Jan 7 2008 Rex Dieter <rdieter[AT]fedoraproject.org> 4-6 - -Requires: redhat-rpm-config (revert 4-1 addition) * Sun Dec 30 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 4-5 - +%_datadir/autostart, %_kde4_datadir/autostart * Tue Dec 11 2007 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-4 - set INCLUDE_INSTALL_DIR in %cmake_kde4 * Tue Dec 11 2007 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-3 - actually create the directory listed in the file list * Tue Dec 11 2007 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-2 - set kde4_includedir to %_kde4_prefix/include/kde4 * Mon Nov 19 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 4-1 - Version: 4 - %cmake_kde4: add -DCMAKE_SKIP_RPATH:BOOL=ON - Requires: redhat-rpm-config (for proper rpm macro defs) (hmm... may need a new -devel pkg somewhere) -------------------------------------------------------------------------------- References: [ 1 ] Bug #443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader https://bugzilla.redhat.com/show_bug.cgi?id=443766 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update kde-filesystem' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 8 Update: kdebase4-4.0.3-9.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3412 2008-04-29 20:30:51 -------------------------------------------------------------------------------- Name : kdebase4 Product : Fedora 8 Version : 4.0.3 Release : 9.fc8 URL : http://www.kde.org/ Summary : K Desktop Environment 4 - Core Files Description : Core runtime requirements and applications for the K Desktop Environment 4. This package does not include the KDE 4 versions of applications which are provided by KDE 3 because of file and configuration setting conflicts. -------------------------------------------------------------------------------- References: [ 1 ] Bug #443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader https://bugzilla.redhat.com/show_bug.cgi?id=443766 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update kdebase4' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 8 Update: ipa-1.0.0-1.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3410 2008-04-29 20:30:40 -------------------------------------------------------------------------------- Name : ipa Product : Fedora 8 Version : 1.0.0 Release : 1.fc8 URL : http://www.freeipa.org/ Summary : The Identity, Policy and Audit system Description : IPA is an integrated solution to provide centrally managed Identity (machine, user, virtual machines, groups, authentication credentials), Policy (configuration settings, access control information) and Audit (events, logs, analysis thereof). -------------------------------------------------------------------------------- Update Information: package upstream 1.0.0 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ipa' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 8 Update: selinux-policy-3.0.8-98.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-2961 2008-04-29 20:30:31 -------------------------------------------------------------------------------- Name : selinux-policy Product : Fedora 8 Version : 3.0.8 Release : 98.fc8 URL : http://serefpolicy.sourceforge.net Summary : SELinux policy configuration Description : SELinux Reference Policy - modular. Based off of reference policy: Checked out revision 2393. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-98 - dontaudit setfiles reading links - allow semanage sys_resource - add allow_httpd_mod_auth_ntlm_winbind boolean - Allow privhome apps including dovecot read on nfs and cifs home dirs if the boolean is set - Allow fetchmail to manage sendmail_log * Fri Mar 28 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-97 - Allow stunnel apps to r/w the stunnel socket * Fri Mar 28 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-96 - Allow munin-node to bind to socket * Tue Mar 18 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-95 - Allow rythmbox to talk to avahi - Add prewikka policy * Mon Mar 17 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-94 - Correct labeling on /var/run/dmevent.* - Allow pam_t to read wtmp file - Allow squid to run chkpwd - Allow postfix_local to exec clamscan - Allow munin to listen on munin_port - Label /var/lib/cups-pdf correctly - Allow fail2ban to read etc_runtime files and to connectto itself - Label lustrefs and panfs as nfs_t - Allow kismet to talk to the terminal * Tue Mar 11 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-93 - Allow syslog to connect to mysql - Allow lvm to manage its own fifo_files - Allow bugzilla to use ldap * Tue Mar 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-92 - Fix openoffice policy to allow it to run from firefox on xguest * Tue Mar 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-92 - Fix openoffice policy to allow it to run from firefox on xguest * Tue Mar 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-91 - Allow rpc.mountd to write to lvm_control_t chr_file * Tue Mar 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-90 - Allow mozilla to auth_use_nsswitch - Change location of mock - Fix context on /usr/sbin/validate - allow vbetool to map low kernel memory - Allow fail2ban to connect to whois port - Allow bitlbee to read locale files - Allow clamd to execute shell - dontaudit setroubleshoot reading cifs and nfs files * Thu Feb 21 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-89 - Add jkubin changes for nx and groupadd - Add isns port * Wed Feb 20 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-88 - Add policy for /dev/autofs * Mon Feb 18 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-87 - Allow apmd to talk to consolekit via dbus * Fri Feb 15 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-86 - Add prelude/audisp policy * Tue Feb 12 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-85 - Fix cups executables labeling * Fri Feb 1 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-84 - Allow fail2ban to create sock_files in /var/run * Tue Jan 22 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-83 - Make oddjob_mkhomedir work with confined login domains * Tue Jan 22 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-82 - Allow xdm to sys_ptrace * Tue Jan 22 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-81 - Allow zebra to listen on port 521 * Thu Jan 17 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-79 - Add procmail_log support - Lots of fixes for munin - fixes for dnsmasq - Allow tmpreaper to delete aqmavis spool files * Wed Jan 16 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-78 - Allow procmal to signal pyzor * Tue Jan 15 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-77 - Allow daemons to write to cron fifo_files * Mon Jan 14 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-76 - Fix filecontext for networkmanagerlog files - Allow mount to read samba config - Fix label of /var/lib/tftpboot - Fix label of /usr/lib(64)?/xorg/modules/glesx.so - Fix label on /etc/NetworkManager/dispatcher.d/* - Allow httpd to send dbus messages * Thu Jan 3 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-75 - Alow postgrey to read postfix_etc_t - Lots of fixes to get javaplugin to run under xguest * Thu Jan 3 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-74 - Allow updatedb to getatt on fifo_files * Mon Dec 31 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-73 - Fix specification for clamav and clamd log files * Sat Dec 22 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-72 - Fixes to make confined mozilla work better - Allow procmail to transition to spamd * Fri Dec 21 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-71 - add file context for nspluginwrapper * Fri Dec 21 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-70 - Allow mount.crypto to work - Allow fsck to read file_t * Wed Dec 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-69 - Allow ssh to read sym links in homedirs * Mon Dec 10 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-68 - Allow ldconfig to manage files in the homedir * Thu Dec 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-67 - Allow kdm to transition to bootloader_t through grub * Thu Dec 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-66 - Allow depmod to read tmp files from rpm - Dontaudit pam_timestamp_check access to ~.xsessions - Allow postfix_local to transition to dovecot_deliver - Allow postgrey to read postfix_spool * Tue Dec 4 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-65 - Allow httpd_sys_script_t to search users homedirs * Sun Dec 2 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-64 - Allow xdm to list all filesystem directories * Wed Nov 28 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-63 - Change labeling on hpijs - Fix unconfined_u defintion - Set vmware to unconfiend domain, since policy is very good yet. * Mon Nov 26 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-62 - Allow xend to create xend_var_log_t directories - dontaudit setfiles relabel of /proc /sys caused by named-chroot - Add rules for pam_keyinit (setkeycreate, ipc_lock) - Allow mount to read unlabeled directorys for reiserfs * Tue Nov 20 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-61 - Allow xguest to mount hal devices and read/write file systems - that do not support extended attributes. Allows kiosk users to - copy to usb media * Tue Nov 20 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-60 - Allow cupsd to sigkill hplip_t - Allow automount to create fifo files * Tue Nov 20 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-59 - Allow logwatch to search all directories - Allow sendmail to use sasl - Allow system_mail_t to write to exim_log_t * Fri Nov 16 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-58 - Allow nmbd to list inotifyfs_t - Dontaudit consolekit access to user homedir - dontaudit nscd getserv and shmemserv - Allow rsync_t dac overrides - Allow xfs_t to listen to sockets * Fri Nov 16 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-57 - Allow lvm to search mnt - Add booleans for xguest account xguest_mount_media xguest_connect_network xguest_use_bluetooth * Thu Nov 15 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-56 - Remove /usr/sbin/gdm label - Label gstreamer codecs in homedir as textrel_shlib_t * Wed Nov 14 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-55 - Allow spamd to manage razor files * Mon Nov 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-54 - Allow cyrus to authenticate via sasl - Allow sshd to work in tunnel mode - Allow sshd to use -R - Allow ssh to read user homedirs - Add /var/lib/tftp to tftp.fc - Add labels for /dev/dmmdi and /dev/admmdi - Allow postmap to be run by unconfined_t - Allow dictd to write pid file - Allow bluetooth to connectto unix_stream_sockets * Mon Nov 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-53 - Allow bugzilla policy to connect to postgresql and mysql on other machines * Mon Nov 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-52 - Allow apache to read unconfined users content * Sat Nov 10 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-51 - Allow login programs to run mount - Dontaudit writes to user_home_t for semanage - Allow sendmail to write to cyrus_stream - Define /dev/dmmidi1 as a sound_device_t - Allow saslauthd to use nis_authentication * Fri Nov 9 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-50 - Allow login programs to delete user temp files * Thu Nov 8 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-49 - Separate xguest from guest - Allow confined domains to output to rpm pipes * Wed Nov 7 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-48 - Add obsoletes selinux-policy-strict - Run inetd unconfined - dontaudit loadkeys looking at homedir * Tue Nov 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-47 - Allow all dns_resolves to use avahi stream - Don't transition from unconfined_t to ping_t * Tue Nov 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-46 - Allow sendmail to interact with winbind - Allow dovecot to write log files * Fri Nov 2 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-45 - Allow system_mail_t to domtrans to exim_t -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update selinux-policy' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 7 Update: ipa-1.0.0-1.fc7
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3408 2008-04-29 20:30:27 -------------------------------------------------------------------------------- Name : ipa Product : Fedora 7 Version : 1.0.0 Release : 1.fc7 URL : http://www.freeipa.org/ Summary : The Identity, Policy and Audit system Description : IPA is an integrated solution to provide centrally managed Identity (machine, user, virtual machines, groups, authentication credentials), Policy (configuration settings, access control information) and Audit (events, logs, analysis thereof). -------------------------------------------------------------------------------- Update Information: update to upstream 1.0.0 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ipa' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 7 Update: eggdrop-1.6.19-1.fc7
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3407 2008-04-29 20:30:23 -------------------------------------------------------------------------------- Name : eggdrop Product : Fedora 7 Version : 1.6.19 Release : 1.fc7 URL : http://www.eggheads.org/ Summary : The world's most popular Open Source IRC bot Description : Eggdrop is the world's most popular Open Source IRC bot, designed for flexibility and ease of use. It is extendable with Tcl scripts and/or C modules, has support for the big five IRC networks and is able to form botnets, share partylines and userfiles between bots. -------------------------------------------------------------------------------- Update Information: Update to 1.6.19 and cause the DNS linking against libc rather libdns -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 22 2008 Robert Scheck <robert(a)fedoraproject.org> 1.6.19-1 - Upgrade to 1.6.19 * Mon Feb 25 2008 Robert Scheck <robert(a)fedoraproject.org> 1.6.18-16 - Cause the DNS linking against libc rather libdns (#433111) * Fri Feb 15 2008 Robert Scheck <robert(a)fedoraproject.org> 1.6.18-15 - Rebuild for bind 9.5.0 * Sun Feb 10 2008 Robert Scheck <robert(a)fedoraproject.org> 1.6.18-14 - Added patch to provide better non-latin support (#429621) * Sat Jan 5 2008 Robert Scheck <robert(a)fedoraproject.org> 1.6.18-13 - Rebuild for tcl 8.5 * Sat Dec 8 2007 Robert Scheck <robert(a)fedoraproject.org> 1.6.18-12 - Added a patch to fix some stack based overflows (CVE-2007-2807) * Wed Aug 29 2007 Fedora Release Engineering <rel-eng at fedoraproject dot org> - 1.6.18-11 - Rebuild for selinux ppc32 issue. * Tue Aug 28 2007 Robert Scheck <robert(a)fedoraproject.org> 1.6.18-10 - Updated the license tag according to the guidelines * Thu Jul 19 2007 Jesse Keating <jkeating(a)redhat.com> 1.6.18-9 - Rebuild for new bind -------------------------------------------------------------------------------- References: [ 1 ] Bug #433111 - Broken dependency https://bugzilla.redhat.com/show_bug.cgi?id=433111 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update eggdrop' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 8 Update: sarai-fonts-1.0-4.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-2026 2008-04-29 20:30:12 -------------------------------------------------------------------------------- Name : sarai-fonts Product : Fedora 8 Version : 1.0 Release : 4.fc8 URL : http://www.sarai.net/practices/indic-localization Summary : Free Sarai Hindi Truetype Font Description : This package provides a free Sarai Hindi TrueType font. It is suitable for print and publishing needs. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update sarai-fonts' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 8 Update: libgnomeprint22-2.18.4-1.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-1719 2008-04-29 20:29:43 -------------------------------------------------------------------------------- Name : libgnomeprint22 Product : Fedora 8 Version : 2.18.4 Release : 1.fc8 URL : http://www.gnome.org Summary : Printing library for GNOME Description : GNOME (GNU Network Object Model Environment) is a user-friendly set of applications and desktop tools to be used in conjunction with a window manager for the X Window System. The gnome-print package contains libraries and fonts needed by GNOME applications for printing. You should install the gnome-print package if you intend to use any of the GNOME applications that can print. If you would like to develop GNOME applications that can print you will also need to install the gnome-print devel package. -------------------------------------------------------------------------------- Update Information: The latest stable upstream release contains the following improvements: * Support searching and cut'n'paste of text in PDF files output by libgnomeprint. (Suresh Chandrasekharan) * Fix problem in the postcript backend that caused images to be printed as black squares. (Behdad Esfahbod) -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 13 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.18.4-1 - Update to 2.18.4 * Tue Jan 29 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.18.3-1 - Update to 2.18.3 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libgnomeprint22' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 7 Update: perl-5.8.8-29.fc7
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3399 2008-04-29 20:29:23 -------------------------------------------------------------------------------- Name : perl Product : Fedora 7 Version : 5.8.8 Release : 29.fc7 URL : http://www.perl.org/ Summary : The Perl programming language Description : Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common applications are system administration utilities and web programming. A large proportion of the CGI scripts on the web are written in Perl. You need the perl package installed on your system so that your system can handle Perl scripts. Install this package if you want to program in Perl or enable your system to handle Perl scripts. -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 29 2008 Marcela Maslanova <mmaslano(a)redhat.com> - 4:5.8.8-29 - CVE-2008-1927 buffer overflow, when unicode character is used. * Thu Jan 31 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 4:5.8.8-28 - create /usr/lib/perl5/vendor_perl/5.8.8/auto and own it in base perl (resolves bugzilla 214580) * Mon Nov 26 2007 Tom "spot" Callaway <tcallawa(a)redhat.com> - 4:5.8.8-27 - break dep loop, fix bugzilla 397881 * Mon Nov 12 2007 Tom "spot" Callaway <tcallawa(a)redhat.com> - 4:5.8.8-26 - fix for CVE-2007-5116 * Thu Oct 25 2007 Tom "spot" Callaway <tcallawa(a)redhat.com> - 4:5.8.8-25 - patch from perl bug 24254, fix for RH bz 114271 * Mon Oct 1 2007 Tom "spot" Callaway <tcallawa(a)redhat.com> - 4:5.8.8-24 - update DB_File to 1.815 * Sat Aug 18 2007 Stepan Kasal <skasal(a)redhat.com> - 4:5.8.8-23 - Remove unnnecessary parens from the License tags. * Sat Aug 18 2007 Stepan Kasal <skasal(a)redhat.com> - 4:5.8.8-22 - Fix the License: tags. * Fri Aug 17 2007 Stepan Kasal <skasal(a)redhat.com> - 4:5.8.8-21 - Apply patch to skip hostname tests, since hostname lookup isn't available in Fedora buildroots by design. * Fri Aug 17 2007 Stepan Kasal <skasal(a)redhat.com> - 4:5.8.8-20 - perl rpm requires the corresponding version of perl-libs rpm - Resolves: rhbz#240540 * Fri Jun 22 2007 Robin Norwood <rnorwood(a)redhat.com> - 4:5.8.8-19 - Resolves: rhbz#196836 - Apply upstream patch #28775, which fixes an issue where reblessing overloaded objects incurs significant performance penalty -------------------------------------------------------------------------------- References: [ 1 ] Bug #443928 - CVE-2008-1927 perl: double free on regular expressions with utf8 characters https://bugzilla.redhat.com/show_bug.cgi?id=443928 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update perl' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 8 Update: wordpress-2.5.1-1.fc8
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3397 2008-04-29 20:29:12 -------------------------------------------------------------------------------- Name : wordpress Product : Fedora 8 Version : 2.5.1 Release : 1.fc8 URL : http://www.wordpress.org Summary : WordPress blogging software Description : Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. -------------------------------------------------------------------------------- Update Information: This updates contains security fixes: http://wordpress.org/development/2008/04/wordpress-251/ -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 26 2008 Adrian Reber <adrian(a)lisas.de> - 2.5.1-1 - updated to 2.5.1 for security fixes * Fri Feb 8 2008 John Berninger <john at ncphotography dot com> - 2.3.3-0 - update to 2.3.3 for security fixes - BZ 431547 * Sun Dec 30 2007 Adrian Reber <adrian(a)lisas.de> - 2.3.2-1 - updated to 2.3.2 (bz 426431, Draft Information Disclosure) * Tue Oct 30 2007 Adrian Reber <adrian(a)lisas.de> - 2.3.1-1 - updated to 2.3.1 (bz 357731, wordpress XSS issue) * Mon Oct 15 2007 Adrian Reber <adrian(a)lisas.de> - 2.3-1 - updated to 2.3 - disabled wordpress-core-update -------------------------------------------------------------------------------- References: [ 1 ] Bug #444396 - wordpress: security fixes in upstream version 2.5.1 https://bugzilla.redhat.com/show_bug.cgi?id=444396 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update wordpress' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 7 Update: sarai-fonts-1.0-4.fc7
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-1938 2008-04-29 20:29:05 -------------------------------------------------------------------------------- Name : sarai-fonts Product : Fedora 7 Version : 1.0 Release : 4.fc7 URL : http://www.sarai.net/practices/indic-localization Summary : Free Sarai Hindi Truetype Font Description : This package provides a free Sarai Hindi TrueType font. It is suitable for print and publishing needs. -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update sarai-fonts' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 7 Update: speedcrunch-0.10-1.fc7
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3254 2008-04-29 20:29:05 -------------------------------------------------------------------------------- Name : speedcrunch Product : Fedora 7 Version : 0.10 Release : 1.fc7 URL : http://speedcrunch.digitalfanatics.org Summary : A fast power user calculator for KDE Description : SpeedCrunch is a fast, high precision and powerful desktop calculator. Among its distinctive features are a scrollable display, up to 50 decimal precisions, unlimited variable storage, intelligent automatic completion full keyboard-friendly and more than 15 built-in math function. -------------------------------------------------------------------------------- Update Information: Update to new version 0.10. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 17 2008 Roland Wolters <wolters.liste(a)gmx.net> - 0.10-1 - update to version 0.10 * Fri Feb 22 2008 Roland Wolters <wolters.liste(a)gmx.net> - 0.9-3 - rebuild for fixed dependencies * Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 0.9-2 - Autorebuild for GCC 4.3 * Thu Nov 22 2007 Roland Wolters <wolters.liste(a)gmx.net> - 0.9-1 - update to version 0.9 including a new math engine and inverse hyperbolic functions * Thu Aug 16 2007 Roland Wolters <wolters.liste(a)gmx.net> - 0.8-5 - licence tag corrected * Thu Jul 26 2007 Roland Wolters <wolters.liste(a)gmx.net> 0.8-1 - update to upstream 0.8 - various new features and bugfixes -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update speedcrunch' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 7 Update: boinc-client-5.10.45-9.20080315svn.fc7
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3394 2008-04-29 20:28:53 -------------------------------------------------------------------------------- Name : boinc-client Product : Fedora 7 Version : 5.10.45 Release : 9.20080315svn.fc7 URL : http://boinc.berkeley.edu/ Summary : The BOINC client core Description : The Berkeley Open Infrastructure for Network Computing (BOINC) is an open- source software platform which supports distributed computing, primarily in the form of "volunteer" computing and "desktop Grid" computing. It is well suited for problems which are often described as "trivially parallel". BOINC is the underlying software used by projects such as SETI@home, Einstein@Home, ClimatePrediciton.net, the World Community Grid, and many other distributed computing projects. This package installs the BOINC client software, which will allow your computer to participate in one or more BOINC projects, using your spare computer time to search for cures for diseases, model protein folding, study global warming, discover sources of gravitational waves, and many other types of scientific and mathematical research. -------------------------------------------------------------------------------- Update Information: - Do not expect chown of nonexistent files to succeed -------------------------------------------------------------------------------- References: [ 1 ] Bug #443568 - Boinc installation bug and starting aplication errors https://bugzilla.redhat.com/show_bug.cgi?id=443568 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update boinc-client' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 7 Update: xcompmgr-1.1.4-1.fc7
by updates＠fedoraproject.org 30 Apr '08

30 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-2358 2008-04-29 20:28:46 -------------------------------------------------------------------------------- Name : xcompmgr Product : Fedora 7 Version : 1.1.4 Release : 1.fc7 URL : http://xapps.freedesktop.org Summary : X11 composite manager Description : xcompmgr is a sample compositing manager for X servers supporting the XFIXES, DAMAGE, and COMPOSITE extensions. It enables basic eye-candy effects -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 6 2008 Deji Akingunola <dakingun(a)gmail.com> - 1.1.4-1 - New release 1.1.4 * Wed Aug 22 2007 Deji Akingunola <dakingun(a)gmail.com> - 1.1.3-7 - Update License tag -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update xcompmgr' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce April 2008