--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3412
2008-04-29 20:30:51
--------------------------------------------------------------------------------
Name : kdebase-runtime
Product : Fedora 8
Version : 4.0.3
Release : 10.fc8.1
URL : http://www.kde.org/
Summary : K Desktop Environment - Runtime
Description :
Core runtime for the K Desktop Environment 4.
This package does not include the KDE 4 versions of applications which are
provided by KDE 3 because of file and configuration setting conflicts.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader
https://bugzilla.redhat.com/show_bug.cgi?id=443766
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kdebase-runtime' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3412
2008-04-29 20:30:51
--------------------------------------------------------------------------------
Name : kde-filesystem
Product : Fedora 8
Version : 4
Release : 14.fc8
URL : []
Summary : KDE filesystem layout
Description :
This package provides some directories that are required/used by KDE.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 3 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-14
- don't define %{_kde4_debug} in macros.kde4 anymore
* Wed Apr 2 2008 Rex Dieter <rdieter(a)fedoraproject.org> 4-13
- define %{_kde4_buildtype} in macros.kde4 too
* Mon Mar 31 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-12
- actually define %{_kde4_libexecdir} in macros.kde4
* Mon Mar 31 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-11
- add %{_kde4_libexecdir}, set LIBEXEC_INSTALL_DIR to it
- don't own %{_kde4_libdir} which is just %{_libdir}
* Mon Mar 31 2008 Rex Dieter <rdieter(a)fedoraproject.org> 4-10
- macros.kde4: _kde4_buildtype=FEDORA
* Fri Mar 28 2008 Than Ngo <than(a)redhat.com> 4-9
- internal services shouldn't be displayed in menu, bz#321771
* Sun Jan 27 2008 Rex Dieter <rdieter(a)fedoraproject.org> 4-8
- should not own %_datadir/desktop-directories/ (#430420)
* Fri Jan 25 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-7
- own %{_kde4_appsdir}/color-schemes
* Mon Jan 7 2008 Rex Dieter <rdieter[AT]fedoraproject.org> 4-6
- -Requires: redhat-rpm-config (revert 4-1 addition)
* Sun Dec 30 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 4-5
- +%_datadir/autostart, %_kde4_datadir/autostart
* Tue Dec 11 2007 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-4
- set INCLUDE_INSTALL_DIR in %cmake_kde4
* Tue Dec 11 2007 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-3
- actually create the directory listed in the file list
* Tue Dec 11 2007 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 4-2
- set kde4_includedir to %_kde4_prefix/include/kde4
* Mon Nov 19 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 4-1
- Version: 4
- %cmake_kde4: add -DCMAKE_SKIP_RPATH:BOOL=ON
- Requires: redhat-rpm-config (for proper rpm macro defs)
(hmm... may need a new -devel pkg somewhere)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader
https://bugzilla.redhat.com/show_bug.cgi?id=443766
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kde-filesystem' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3412
2008-04-29 20:30:51
--------------------------------------------------------------------------------
Name : kdebase4
Product : Fedora 8
Version : 4.0.3
Release : 9.fc8
URL : http://www.kde.org/
Summary : K Desktop Environment 4 - Core Files
Description :
Core runtime requirements and applications for the K Desktop Environment 4.
This package does not include the KDE 4 versions of applications which are
provided by KDE 3 because of file and configuration setting conflicts.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader
https://bugzilla.redhat.com/show_bug.cgi?id=443766
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kdebase4' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3410
2008-04-29 20:30:40
--------------------------------------------------------------------------------
Name : ipa
Product : Fedora 8
Version : 1.0.0
Release : 1.fc8
URL : http://www.freeipa.org/
Summary : The Identity, Policy and Audit system
Description :
IPA is an integrated solution to provide centrally managed Identity (machine,
user, virtual machines, groups, authentication credentials), Policy
(configuration settings, access control information) and Audit (events,
logs, analysis thereof).
--------------------------------------------------------------------------------
Update Information:
package upstream 1.0.0
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ipa' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-2961
2008-04-29 20:30:31
--------------------------------------------------------------------------------
Name : selinux-policy
Product : Fedora 8
Version : 3.0.8
Release : 98.fc8
URL : http://serefpolicy.sourceforge.net
Summary : SELinux policy configuration
Description :
SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision 2393.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-98
- dontaudit setfiles reading links
- allow semanage sys_resource
- add allow_httpd_mod_auth_ntlm_winbind boolean
- Allow privhome apps including dovecot read on nfs and cifs home
dirs if the boolean is set
- Allow fetchmail to manage sendmail_log
* Fri Mar 28 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-97
- Allow stunnel apps to r/w the stunnel socket
* Fri Mar 28 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-96
- Allow munin-node to bind to socket
* Tue Mar 18 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-95
- Allow rythmbox to talk to avahi
- Add prewikka policy
* Mon Mar 17 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-94
- Correct labeling on /var/run/dmevent.*
- Allow pam_t to read wtmp file
- Allow squid to run chkpwd
- Allow postfix_local to exec clamscan
- Allow munin to listen on munin_port
- Label /var/lib/cups-pdf correctly
- Allow fail2ban to read etc_runtime files and to connectto itself
- Label lustrefs and panfs as nfs_t
- Allow kismet to talk to the terminal
* Tue Mar 11 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-93
- Allow syslog to connect to mysql
- Allow lvm to manage its own fifo_files
- Allow bugzilla to use ldap
* Tue Mar 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-92
- Fix openoffice policy to allow it to run from firefox on xguest
* Tue Mar 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-92
- Fix openoffice policy to allow it to run from firefox on xguest
* Tue Mar 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-91
- Allow rpc.mountd to write to lvm_control_t chr_file
* Tue Mar 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-90
- Allow mozilla to auth_use_nsswitch
- Change location of mock
- Fix context on /usr/sbin/validate
- allow vbetool to map low kernel memory
- Allow fail2ban to connect to whois port
- Allow bitlbee to read locale files
- Allow clamd to execute shell
- dontaudit setroubleshoot reading cifs and nfs files
* Thu Feb 21 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-89
- Add jkubin changes for nx and groupadd
- Add isns port
* Wed Feb 20 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-88
- Add policy for /dev/autofs
* Mon Feb 18 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-87
- Allow apmd to talk to consolekit via dbus
* Fri Feb 15 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-86
- Add prelude/audisp policy
* Tue Feb 12 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-85
- Fix cups executables labeling
* Fri Feb 1 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-84
- Allow fail2ban to create sock_files in /var/run
* Tue Jan 22 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-83
- Make oddjob_mkhomedir work with confined login domains
* Tue Jan 22 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-82
- Allow xdm to sys_ptrace
* Tue Jan 22 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-81
- Allow zebra to listen on port 521
* Thu Jan 17 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-79
- Add procmail_log support
- Lots of fixes for munin
- fixes for dnsmasq
- Allow tmpreaper to delete aqmavis spool files
* Wed Jan 16 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-78
- Allow procmal to signal pyzor
* Tue Jan 15 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-77
- Allow daemons to write to cron fifo_files
* Mon Jan 14 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-76
- Fix filecontext for networkmanagerlog files
- Allow mount to read samba config
- Fix label of /var/lib/tftpboot
- Fix label of /usr/lib(64)?/xorg/modules/glesx.so
- Fix label on /etc/NetworkManager/dispatcher.d/*
- Allow httpd to send dbus messages
* Thu Jan 3 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-75
- Alow postgrey to read postfix_etc_t
- Lots of fixes to get javaplugin to run under xguest
* Thu Jan 3 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-74
- Allow updatedb to getatt on fifo_files
* Mon Dec 31 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-73
- Fix specification for clamav and clamd log files
* Sat Dec 22 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-72
- Fixes to make confined mozilla work better
- Allow procmail to transition to spamd
* Fri Dec 21 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-71
- add file context for nspluginwrapper
* Fri Dec 21 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-70
- Allow mount.crypto to work
- Allow fsck to read file_t
* Wed Dec 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-69
- Allow ssh to read sym links in homedirs
* Mon Dec 10 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-68
- Allow ldconfig to manage files in the homedir
* Thu Dec 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-67
- Allow kdm to transition to bootloader_t through grub
* Thu Dec 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-66
- Allow depmod to read tmp files from rpm
- Dontaudit pam_timestamp_check access to ~.xsessions
- Allow postfix_local to transition to dovecot_deliver
- Allow postgrey to read postfix_spool
* Tue Dec 4 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-65
- Allow httpd_sys_script_t to search users homedirs
* Sun Dec 2 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-64
- Allow xdm to list all filesystem directories
* Wed Nov 28 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-63
- Change labeling on hpijs
- Fix unconfined_u defintion
- Set vmware to unconfiend domain, since policy is very good yet.
* Mon Nov 26 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-62
- Allow xend to create xend_var_log_t directories
- dontaudit setfiles relabel of /proc /sys caused by named-chroot
- Add rules for pam_keyinit (setkeycreate, ipc_lock)
- Allow mount to read unlabeled directorys for reiserfs
* Tue Nov 20 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-61
- Allow xguest to mount hal devices and read/write file systems
- that do not support extended attributes. Allows kiosk users to
- copy to usb media
* Tue Nov 20 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-60
- Allow cupsd to sigkill hplip_t
- Allow automount to create fifo files
* Tue Nov 20 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-59
- Allow logwatch to search all directories
- Allow sendmail to use sasl
- Allow system_mail_t to write to exim_log_t
* Fri Nov 16 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-58
- Allow nmbd to list inotifyfs_t
- Dontaudit consolekit access to user homedir
- dontaudit nscd getserv and shmemserv
- Allow rsync_t dac overrides
- Allow xfs_t to listen to sockets
* Fri Nov 16 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-57
- Allow lvm to search mnt
- Add booleans for xguest account
xguest_mount_media
xguest_connect_network
xguest_use_bluetooth
* Thu Nov 15 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-56
- Remove /usr/sbin/gdm label
- Label gstreamer codecs in homedir as textrel_shlib_t
* Wed Nov 14 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-55
- Allow spamd to manage razor files
* Mon Nov 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-54
- Allow cyrus to authenticate via sasl
- Allow sshd to work in tunnel mode
- Allow sshd to use -R
- Allow ssh to read user homedirs
- Add /var/lib/tftp to tftp.fc
- Add labels for /dev/dmmdi and /dev/admmdi
- Allow postmap to be run by unconfined_t
- Allow dictd to write pid file
- Allow bluetooth to connectto unix_stream_sockets
* Mon Nov 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-53
- Allow bugzilla policy to connect to postgresql and mysql on other machines
* Mon Nov 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-52
- Allow apache to read unconfined users content
* Sat Nov 10 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-51
- Allow login programs to run mount
- Dontaudit writes to user_home_t for semanage
- Allow sendmail to write to cyrus_stream
- Define /dev/dmmidi1 as a sound_device_t
- Allow saslauthd to use nis_authentication
* Fri Nov 9 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-50
- Allow login programs to delete user temp files
* Thu Nov 8 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-49
- Separate xguest from guest
- Allow confined domains to output to rpm pipes
* Wed Nov 7 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-48
- Add obsoletes selinux-policy-strict
- Run inetd unconfined
- dontaudit loadkeys looking at homedir
* Tue Nov 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-47
- Allow all dns_resolves to use avahi stream
- Don't transition from unconfined_t to ping_t
* Tue Nov 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-46
- Allow sendmail to interact with winbind
- Allow dovecot to write log files
* Fri Nov 2 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-45
- Allow system_mail_t to domtrans to exim_t
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update selinux-policy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3408
2008-04-29 20:30:27
--------------------------------------------------------------------------------
Name : ipa
Product : Fedora 7
Version : 1.0.0
Release : 1.fc7
URL : http://www.freeipa.org/
Summary : The Identity, Policy and Audit system
Description :
IPA is an integrated solution to provide centrally managed Identity (machine,
user, virtual machines, groups, authentication credentials), Policy
(configuration settings, access control information) and Audit (events,
logs, analysis thereof).
--------------------------------------------------------------------------------
Update Information:
update to upstream 1.0.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ipa' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3407
2008-04-29 20:30:23
--------------------------------------------------------------------------------
Name : eggdrop
Product : Fedora 7
Version : 1.6.19
Release : 1.fc7
URL : http://www.eggheads.org/
Summary : The world's most popular Open Source IRC bot
Description :
Eggdrop is the world's most popular Open Source IRC bot, designed
for flexibility and ease of use. It is extendable with Tcl scripts
and/or C modules, has support for the big five IRC networks and is
able to form botnets, share partylines and userfiles between bots.
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.19 and cause the DNS linking against libc rather libdns
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 22 2008 Robert Scheck <robert(a)fedoraproject.org> 1.6.19-1
- Upgrade to 1.6.19
* Mon Feb 25 2008 Robert Scheck <robert(a)fedoraproject.org> 1.6.18-16
- Cause the DNS linking against libc rather libdns (#433111)
* Fri Feb 15 2008 Robert Scheck <robert(a)fedoraproject.org> 1.6.18-15
- Rebuild for bind 9.5.0
* Sun Feb 10 2008 Robert Scheck <robert(a)fedoraproject.org> 1.6.18-14
- Added patch to provide better non-latin support (#429621)
* Sat Jan 5 2008 Robert Scheck <robert(a)fedoraproject.org> 1.6.18-13
- Rebuild for tcl 8.5
* Sat Dec 8 2007 Robert Scheck <robert(a)fedoraproject.org> 1.6.18-12
- Added a patch to fix some stack based overflows (CVE-2007-2807)
* Wed Aug 29 2007 Fedora Release Engineering <rel-eng at fedoraproject dot org> - 1.6.18-11
- Rebuild for selinux ppc32 issue.
* Tue Aug 28 2007 Robert Scheck <robert(a)fedoraproject.org> 1.6.18-10
- Updated the license tag according to the guidelines
* Thu Jul 19 2007 Jesse Keating <jkeating(a)redhat.com> 1.6.18-9
- Rebuild for new bind
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #433111 - Broken dependency
https://bugzilla.redhat.com/show_bug.cgi?id=433111
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update eggdrop' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-2026
2008-04-29 20:30:12
--------------------------------------------------------------------------------
Name : sarai-fonts
Product : Fedora 8
Version : 1.0
Release : 4.fc8
URL : http://www.sarai.net/practices/indic-localization
Summary : Free Sarai Hindi Truetype Font
Description :
This package provides a free Sarai Hindi TrueType font.
It is suitable for print and publishing needs.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sarai-fonts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1719
2008-04-29 20:29:43
--------------------------------------------------------------------------------
Name : libgnomeprint22
Product : Fedora 8
Version : 2.18.4
Release : 1.fc8
URL : http://www.gnome.org
Summary : Printing library for GNOME
Description :
GNOME (GNU Network Object Model Environment) is a user-friendly set of
applications and desktop tools to be used in conjunction with a window
manager for the X Window System. The gnome-print package contains
libraries and fonts needed by GNOME applications for printing.
You should install the gnome-print package if you intend to use any of
the GNOME applications that can print. If you would like to develop
GNOME applications that can print you will also need to install the
gnome-print devel package.
--------------------------------------------------------------------------------
Update Information:
The latest stable upstream release contains the following improvements:
* Support searching and cut'n'paste of text in PDF files output by
libgnomeprint. (Suresh Chandrasekharan) * Fix problem in the postcript
backend that caused images to be printed as black squares. (Behdad
Esfahbod)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 13 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.18.4-1
- Update to 2.18.4
* Tue Jan 29 2008 Matthias Clasen <mclasen(a)redhat.com> - 2.18.3-1
- Update to 2.18.3
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libgnomeprint22' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3399
2008-04-29 20:29:23
--------------------------------------------------------------------------------
Name : perl
Product : Fedora 7
Version : 5.8.8
Release : 29.fc7
URL : http://www.perl.org/
Summary : The Perl programming language
Description :
Perl is a high-level programming language with roots in C, sed, awk
and shell scripting. Perl is good at handling processes and files,
and is especially good at handling text. Perl's hallmarks are
practicality and efficiency. While it is used to do a lot of
different things, Perl's most common applications are system
administration utilities and web programming. A large proportion of
the CGI scripts on the web are written in Perl. You need the perl
package installed on your system so that your system can handle Perl
scripts.
Install this package if you want to program in Perl or enable your
system to handle Perl scripts.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 29 2008 Marcela Maslanova <mmaslano(a)redhat.com> - 4:5.8.8-29
- CVE-2008-1927 buffer overflow, when unicode character is used.
* Thu Jan 31 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 4:5.8.8-28
- create /usr/lib/perl5/vendor_perl/5.8.8/auto and own it
in base perl (resolves bugzilla 214580)
* Mon Nov 26 2007 Tom "spot" Callaway <tcallawa(a)redhat.com> - 4:5.8.8-27
- break dep loop, fix bugzilla 397881
* Mon Nov 12 2007 Tom "spot" Callaway <tcallawa(a)redhat.com> - 4:5.8.8-26
- fix for CVE-2007-5116
* Thu Oct 25 2007 Tom "spot" Callaway <tcallawa(a)redhat.com> - 4:5.8.8-25
- patch from perl bug 24254, fix for RH bz 114271
* Mon Oct 1 2007 Tom "spot" Callaway <tcallawa(a)redhat.com> - 4:5.8.8-24
- update DB_File to 1.815
* Sat Aug 18 2007 Stepan Kasal <skasal(a)redhat.com> - 4:5.8.8-23
- Remove unnnecessary parens from the License tags.
* Sat Aug 18 2007 Stepan Kasal <skasal(a)redhat.com> - 4:5.8.8-22
- Fix the License: tags.
* Fri Aug 17 2007 Stepan Kasal <skasal(a)redhat.com> - 4:5.8.8-21
- Apply patch to skip hostname tests, since hostname lookup isn't
available in Fedora buildroots by design.
* Fri Aug 17 2007 Stepan Kasal <skasal(a)redhat.com> - 4:5.8.8-20
- perl rpm requires the corresponding version of perl-libs rpm
- Resolves: rhbz#240540
* Fri Jun 22 2007 Robin Norwood <rnorwood(a)redhat.com> - 4:5.8.8-19
- Resolves: rhbz#196836
- Apply upstream patch #28775, which fixes an issue where reblessing
overloaded objects incurs significant performance penalty
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #443928 - CVE-2008-1927 perl: double free on regular expressions with utf8 characters
https://bugzilla.redhat.com/show_bug.cgi?id=443928
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------