--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3220
2008-04-21 23:23:25
--------------------------------------------------------------------------------
Name : fedora-ds-admin
Product : Fedora 8
Version : 1.1.4
Release : 1.fc8
URL : http://directory.fedoraproject.org/
Summary : Fedora Administration Server (admin)
Description :
Fedora Administration Server is an HTTP agent that provides management features
for Fedora Directory Server. It provides some management web apps that can
be used through a web browser. It provides the authentication, access control,
and CGI utilities used by the console.
--------------------------------------------------------------------------------
Update Information:
This release addresses two security vulerabilities in the package: - shell
command injection in CGI replication monitor (CVE-2008-0892) - unrestricted
access to CGI scripts (CVE-2008-0893) Fix Description: Remove ScriptAlias
for bin/admin/admin/bin - do not use that directory for CGI URIs - use only
protected URIs for CGIs requiring authentication Remove most CGI parameters
from repl-monitor-cgi.pl - user must supply replmon.conf in the admin server
config directory instead of passing in this pathname - repl-monitor-cgi.pl does
not use system to call repl-monitor.pl, it "includes" that script (using perl
import).
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #437301 - CVE-2008-0892 Director Server: shell command injection in CGI replication monitor
https://bugzilla.redhat.com/show_bug.cgi?id=437301
[ 2 ] Bug #437320 - CVE-2008-0893 Directory Server: unrestricted access to CGI scripts
https://bugzilla.redhat.com/show_bug.cgi?id=437320
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update fedora-ds-admin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3218
2008-04-21 23:23:16
--------------------------------------------------------------------------------
Name : lshw
Product : Fedora 7
Version : B.02.12.01
Release : 5.fc7
URL : http://ezix.org/project/wiki/HardwareLiSter
Summary : Hardware lister
Description :
lshw is a small tool to provide detailed informaton on the hardware
configuration of the machine. It can report exact memory configuration,
firmware version, mainboard configuration, CPU version and speed, cache
configuration, bus speed, etc. on DMI-capable x86 systems and on some
PowerPC machines (PowerMac G4 is known to work).
Information can be output in plain text, XML or HTML.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #442501 - lshw hangs at PCI(sysfs)
https://bugzilla.redhat.com/show_bug.cgi?id=442501
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update lshw' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3217
2008-04-21 23:23:13
--------------------------------------------------------------------------------
Name : sweep
Product : Fedora 8
Version : 0.9.3
Release : 1.fc8
URL : http://www.metadecks.org/software/sweep/index.html
Summary : An audio editor and live playback tool
Description :
Sweep is an audio editor and live playback tool for GNU/Linux, BSD and
compatible systems. It supports many music and voice formats including
WAV, AIFF, Ogg Vorbis, Speex and MP3, with multichannel editing and
LADSPA effects plugins.
--------------------------------------------------------------------------------
Update Information:
new release 0.9.3
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sweep' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3216
2008-04-21 23:23:10
--------------------------------------------------------------------------------
Name : adminutil
Product : Fedora 8
Version : 1.1.6
Release : 1.fc8
URL : http://directory.fedoraproject.org/wiki/AdminUtil
Summary : Utility library for directory server administration
Description :
adminutil is libraries of functions used to administer directory
servers, usually in conjunction with the admin server. adminutil is
broken into two libraries - libadminutil contains the basic
functionality, and libadmsslutil contains SSL versions and wrappers
around the basic functions. The PSET functions allow applications to
store their preferences and configuration parameters in LDAP, without
having to know anything about LDAP. The configuration is cached in a
local file, allowing applications to function even if the LDAP server
is down. The other code is typically used by CGI programs used for
directory server management, containing GET/POST processing code as
well as resource handling (ICU ures API).
--------------------------------------------------------------------------------
Update Information:
This fix is required for the DSGW (not yet released).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 3 2008 Rich Megginson <rmeggins(a)redhat.com> - 1.1.6-1
- Resolves bug 245248 - dsgw doesn't escape filename in error message
- The new dsgw hasn't been released yet, and the old one doesn't use
- this code.
* Thu Oct 18 2007 Rich Megginson <rmeggins(a)redhat.com> - 1.1.5-1
- bump version to 1.1.5
- fix icu linking issue
- disable libtool rpath by default - added --enable-rpath option to configure
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update adminutil' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3215
2008-04-21 23:23:05
--------------------------------------------------------------------------------
Name : rhm
Product : Fedora 8
Version : 0.2
Release : 19.fc8
URL : http://rhm.et.redhat.com/rhm
Summary : Red Hat extensions to the Qpid messaging system
Description :
Red Hat extensions to the Qpid AMQP broker: persistent message storage
in Berkeley DB.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rhm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-2927
2008-04-21 20:20:53
--------------------------------------------------------------------------------
Name : php-pear-File-Find
Product : Fedora 8
Version : 1.3.0
Release : 1.fc8
URL : http://pear.php.net/package/File_Find
Summary : Class which facilitates the search of filesystems
Description :
File_Find, created as a replacement for its Perl counterpart, also named
File_Find, is a directory searcher, which handles, globbing, recursive
directory searching, as well as a slew of other cool features.
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-pear-File-Find' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3214
2008-04-21 23:23:01
--------------------------------------------------------------------------------
Name : fedora-ds-admin
Product : Fedora 7
Version : 1.1.4
Release : 1.fc7
URL : http://directory.fedoraproject.org/
Summary : Fedora Administration Server (admin)
Description :
Fedora Administration Server is an HTTP agent that provides management features
for Fedora Directory Server. It provides some management web apps that can
be used through a web browser. It provides the authentication, access control,
and CGI utilities used by the console.
--------------------------------------------------------------------------------
Update Information:
This release addresses two security vulerabilities in the package: - shell
command injection in CGI replication monitor (CVE-2008-0892) - unrestricted
access to CGI scripts (CVE-2008-0893) Fix Description: Remove ScriptAlias
for bin/admin/admin/bin - do not use that directory for CGI URIs - use only
protected URIs for CGIs requiring authentication Remove most CGI parameters
from repl-monitor-cgi.pl - user must supply replmon.conf in the admin server
config directory instead of passing in this pathname - repl-monitor-cgi.pl does
not use system to call repl-monitor.pl, it "includes" that script (using perl
import).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #437301 - CVE-2008-0892 Director Server: shell command injection in CGI replication monitor
https://bugzilla.redhat.com/show_bug.cgi?id=437301
[ 2 ] Bug #437320 - CVE-2008-0893 Directory Server: unrestricted access to CGI scripts
https://bugzilla.redhat.com/show_bug.cgi?id=437320
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update fedora-ds-admin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-2837
2008-04-17 03:29:39.322814
--------------------------------------------------------------------------------
Name : cyrus-imapd
Product : Fedora 8
Version : 2.3.11
Release : 1.fc8
URL : http://cyrusimap.web.cmu.edu/
Summary : A high-performance mail server with IMAP, POP3, NNTP and SIEVE support
Description :
The cyrus-imapd package contains the core of the Cyrus IMAP server.
It is a scaleable enterprise mail system designed for use from
small to large enterprise environments using standards-based
internet mail technologies.
A full Cyrus IMAP implementation allows a seamless mail and bulletin
board environment to be set up across multiple servers. It differs from
other IMAP server implementations in that it is run on "sealed"
servers, where users are not normally permitted to log in and have no
system account on the server. The mailbox database is stored in parts
of the filesystem that are private to the Cyrus IMAP server. All user
access to mail is through software using the IMAP, POP3 or KPOP
protocols. It also includes support for virtual domains, NNTP,
mailbox annotations, and much more. The private mailbox database design
gives the server large advantages in efficiency, scalability and
administratability. Multiple concurrent read/write connections to the
same mailbox are permitted. The server supports access control lists on
mailboxes and storage quotas on mailbox hierarchies.
The Cyrus IMAP server supports the IMAP4rev1 protocol described
in RFC 3501. IMAP4rev1 has been approved as a proposed standard.
It supports any authentication mechanism available from the SASL
library, imaps/pop3s/nntps (IMAP/POP3/NNTP encrypted using SSL and
TLSv1) can be used for security. The server supports single instance
store where possible when an email message is addressed to multiple
recipients, SIEVE provides server side email filtering.
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 25 2008 Tomas Janousek <tjanouse(a)redhat.com> - 2.3.11-1
- update to latest upstream
- (temporarily) dropped the rmquota+deletemailbox patch (doesn't apply)
* Wed Mar 19 2008 Rex Dieter <rdieter(a)fedoraproject.org> - 2.3.9-12
- cyrus-imapd conflicts with uw-imap (#222506)
* Tue Mar 18 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 2.3.9-11
- add Requires for versioned perl (libperl.so)
* Wed Feb 20 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 2.3.9-10
- Autorebuild for GCC 4.3
* Fri Feb 8 2008 Tomas Janousek <tjanouse(a)redhat.com> - 2.3.9-9
- don't run cronjob if cyrus-imapd has never been started (#418191)
* Tue Dec 4 2007 Tomas Janousek <tjanouse(a)redhat.com> - 2.3.9-8
- move certificate creation from -utils postinst to main package
- rebuild with newer openssl and openldap
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #437351 - skiplist corruption in cyrus-imapd 2.3.9; please upgrade to latest upstream
https://bugzilla.redhat.com/show_bug.cgi?id=437351
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cyrus-imapd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3208
2008-04-17 03:29:21
--------------------------------------------------------------------------------
Name : sysprof
Product : Fedora 8
Version : 1.0.9
Release : 1.fc8
URL : http://www.daimi.au.dk/~sandmann/sysprof/
Summary : Sysprof is a sampling CPU profiler
Description :
Sysprof is a sampling CPU profiler for Linux that uses a kernel module
to profile the entire system, not just a single application.
Sysprof handles shared libraries and applications do not need to be
recompiled. In fact they don't even have to be restarted.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 9 2008 Gianluca Sforna <giallu gmail com> - 1.0.9-1
- version update to 1.0.9
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sysprof' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3207
2008-04-17 03:29:18
--------------------------------------------------------------------------------
Name : bigloo
Product : Fedora 8
Version : 3.0c
Release : 4.1.fc8
URL : http://www-sop.inria.fr/mimosa/fp/Bigloo
Summary : Bigloo is compiler for the Scheme programming language
Description :
Bigloo is a Scheme implementation devoted to one goal: enabling Scheme
based programming style where C(++) is usually required. Bigloo
attempts to make Scheme practical by offering features usually
presented by traditional programming languages but ot offered by
Scheme and functional programming. Bigloo compiles Scheme modules. It
delivers small and fast stand alone binary executables. Bigloo enables
full connections between Scheme and C programs.
--------------------------------------------------------------------------------
Update Information:
new release 3.0c-4
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 14 2008 Gerard Milmeister <gemi(a)bluewin.ch> - 3.0c-4.1
- new release 3.0c-4
* Mon Feb 18 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 3.0b-2
- Autorebuild for GCC 4.3
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update bigloo' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------