package-announce April 2008

package-announce@lists.fedoraproject.org

1 participants
627 discussions

[SECURITY] Fedora 7 Update: clamav-0.92.1-2.fc7
by updates＠fedoraproject.org 29 Apr '08

29 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3358 2008-04-29 20:25:06 -------------------------------------------------------------------------------- Name : clamav Product : Fedora 7 Version : 0.92.1 Release : 2.fc7 URL : http://www.clamav.net Summary : End-user tools for the Clam Antivirus scanner Description : Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. The virus database is based on the virus database from OpenAntiVirus, but contains additional signatures (including signatures for popular polymorphic viruses, too) and is KEPT UP TO DATE. -------------------------------------------------------------------------------- Update Information: Security update - backport security fixes from 0.93: CVE-2008-1100 (#442360): Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 (#442525): Endless loop / hang with crafted arj CVE-2008-0314 (#442740): PeSpin Heap Overflow Vulnerability CVE-2008-1833 (#442741): PE WWPack Heap Overflow Vulnerability -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 24 2008 Tomas Hoger <thoger(a)redhat.com> - 0.92.1-2 - Security update - backport security fixes from 0.93: CVE-2008-1100 (#442360): Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 (#442525): Endless loop / hang with crafted arj CVE-2008-0314 (#442740): PeSpin Heap Overflow Vulnerability CVE-2008-1833 (#442741): PE WWPack Heap Overflow Vulnerability * Mon Feb 11 2008 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.92.1-1 - updated to 0.92.1 * Tue Jan 1 2008 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.92-6 - redisabled unrar stuff completely by using clean sources * Tue Jan 1 2008 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.92-5 - use a better way to disable RPATH-generation (needed for '--with unrar' builds) * Mon Dec 31 2007 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.92-4 - added a README.fedora to the milter package (#240610) - ship original sources again; unrar is now licensed correctly (no more stolen code put under GPL). Nevertheless, this license is not GPL compatible, and to allow libclamav to be used by GPL applications, unrar is disabled by a ./configure switch. - use pkg-config in clamav-config to emulate --cflags and --libs operations (fixes partly multilib issues) - registered some more auto-updated files and marked them as %ghost * Fri Dec 21 2007 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.92-3 - updated to 0.92 (SECURITY): - CVE-2007-6335 MEW PE File Integer Overflow Vulnerability * Mon Oct 29 2007 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.91.2-3 - remove RAR decompression code from source tarball because of legal problems (resolves 334371) - correct license tag * Mon Sep 24 2007 Jesse Keating <jkeating(a)redhat.com> - 0.91.2-2 - Bump release for upgrade path. * Sat Aug 25 2007 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.91.2-1 - updated to 0.91.2 (SECURITY): - CVE-2007-4510 DOS in RTF parser - DOS in html normalizer - arbitrary command execution by special crafted recipients in clamav-milter's black-hole mode - fixed an open(2) issue * Tue Jul 17 2007 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.91.1-0 - updated to 0.91.1 * Thu Jul 12 2007 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.91-1 - updated to 0.91 * Thu May 31 2007 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.90.3-1 - updated to 0.90.3 - BR tcpd.h instead of tcp_wrappers(-devel) to make it build both in FC6- and F7+ -------------------------------------------------------------------------------- References: [ 1 ] Bug #442740 - CVE-2008-0314 clamav: PeSpin Heap Overflow Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=442740 [ 2 ] Bug #442741 - CVE-2008-1833 clamav: PE WWPack Heap Overflow Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=442741 [ 3 ] Bug #442360 - CVE-2008-1100 clamav: Upack Processing Buffer Overflow Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=442360 [ 4 ] Bug #442525 - CVE-2008-1387 clamav: Endless loop / hang with crafted arj https://bugzilla.redhat.com/show_bug.cgi?id=442525 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update clamav' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 8 Update: thunar-shares-0.10-1.fc8
by updates＠fedoraproject.org 29 Apr '08

29 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3357 2008-04-29 20:25:02 -------------------------------------------------------------------------------- Name : thunar-shares Product : Fedora 8 Version : 0.10 Release : 1.fc8 URL : http://thunar-shares.googlecode.com Summary : Thunar file manager extension to share files using Samba Description : A Thunar file manager extension to share files using Samba. The backend is based on nautilus-share. -------------------------------------------------------------------------------- Update Information: Initial Fedora Package -------------------------------------------------------------------------------- References: [ 1 ] Bug #442295 - Review Request: thunar-shares - Thunar file manager extension to share files using Samba https://bugzilla.redhat.com/show_bug.cgi?id=442295 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update thunar-shares' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 8 Update: pyjigdo-0.3.0-1.fc8
by updates＠fedoraproject.org 29 Apr '08

29 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3356 2008-04-29 20:24:58 -------------------------------------------------------------------------------- Name : pyjigdo Product : Fedora 8 Version : 0.3.0 Release : 1.fc8 URL : https://hosted.fedoraproject.org/projects/pyjigdo Summary : Python version of Jigdo, slightly modified Description : PyJigdo is a Python rewrite of the popular Jigdo distribution framework. It has also been slightly modified to add some extra features. -------------------------------------------------------------------------------- Update Information: New! Version 0.3.0 goodness. This is a complete rewrite and is the start of major improvements in speed and efficiency. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update pyjigdo' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 8 Update: libraw1394-1.3.0-6.fc8
by updates＠fedoraproject.org 29 Apr '08

29 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3355 2008-04-29 20:24:54 -------------------------------------------------------------------------------- Name : libraw1394 Product : Fedora 8 Version : 1.3.0 Release : 6.fc8 URL : http://www.linux1394.org/ Summary : Library providing low-level IEEE-1394 access Description : The libraw1394 library provides direct access to the IEEE-1394 bus through the Linux 1394 subsystem's raw1394 user space interface. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 28 2008 Jarod Wilson <jwilson(a)redhat.com> - 1.3.0-6 - Unmap the correct memory range on iso receive teardown, fixes segfault on exit from dvgrab (Mladen Kuntner, #444354) * Tue Feb 26 2008 Jarod Wilson <jwilson(a)redhat.com> - 1.3.0-5 - Update license and kill an errant tab (#226039) * Wed Jan 30 2008 Jarod Wilson <jwilson(a)redhat.com> - 1.3.0-4 - Use firewire-cdev.h provided by kernel-headers -------------------------------------------------------------------------------- References: [ 1 ] Bug #444354 - segfault in dvgrab [solved] https://bugzilla.redhat.com/show_bug.cgi?id=444354 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libraw1394' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 7 Update: eric-3.9.5-3.fc7
by updates＠fedoraproject.org 29 Apr '08

29 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3354 2008-04-29 20:24:49 -------------------------------------------------------------------------------- Name : eric Product : Fedora 7 Version : 3.9.5 Release : 3.fc7 URL : http://www.die-offenbachs.de/eric/index.html Summary : Python IDE Description : eric3 is a full featured Python IDE. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 28 2008 Johan Cwiklinski <johan AT x-tnd DOT be> 3.9.5-3 - full python version were not correctly set - generate QT4DIR and QT4DOCDIR at runtime * Thu Jan 17 2008 Johan Cwiklinski <johan AT x-tnd DOT be> 3.9.5-2 - Add environment variable to set python, qt4 and qt docs path (bug #200856) - Requires python-doc, qt-designer, qt4-devel and qt4-doc - BR: PyQt-devel is already needeed by PyQt-qscintilla-devel * Fri Jan 11 2008 Johan Cwiklinski <johan AT x-tnd DOT be> 3.9.5-1 - Rebuild for last version - Include the translation files * Mon Aug 27 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 3.9.2-3 - License: GPL+ - don't set PYTHONOPTIMIZE, let brp-python-bytecompile do it's job, addresses selinux issues (#243163, #254421) -------------------------------------------------------------------------------- References: [ 1 ] Bug #444429 - Eric fails to run https://bugzilla.redhat.com/show_bug.cgi?id=444429 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update eric' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 8 Update: xine-lib-1.1.12-2.fc8
by updates＠fedoraproject.org 29 Apr '08

29 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3353 2008-04-29 20:24:45 -------------------------------------------------------------------------------- Name : xine-lib Product : Fedora 8 Version : 1.1.12 Release : 2.fc8 URL : http://xinehq.de/ Summary : Xine library Description : This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of the most uncommon formats, too. --with/--without rpmbuild options (some default values depend on target distribution): aalib, caca, directfb, imagemagick, freetype, antialiasing (with freetype), pulseaudio, xcb. -------------------------------------------------------------------------------- References: [ 1 ] Bug #442882 - CVE-2008-1878 xine-lib: buffer overflow in nsf demuxer https://bugzilla.redhat.com/show_bug.cgi?id=442882 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update xine-lib' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 7 Update: strigi-0.5.8-2.fc7
by updates＠fedoraproject.org 29 Apr '08

29 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-2926 2008-04-29 20:24:45 -------------------------------------------------------------------------------- Name : strigi Product : Fedora 7 Version : 0.5.8 Release : 2.fc7 URL : http://www.vandenoever.info/software/strigi Summary : A desktop search program for KDE Description : Strigi is a fast and light desktop search engine. It can handle a large range of file formats such as emails, office documents, media files, and file archives. It can index files that are embedded in other files. This means email attachments and files in zip files are searchable as if they were normal files on your harddisk. Strigi is normally run as a background daemon that can be accessed by many other programs at once. In addition to the daemon, Strigi comes with powerful replacements for the popular unix commands 'find' and 'grep'. These are called 'deepfind' and 'deepgrep' and can search inside files just like the strigi daemon can. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 7 2008 Deji Akingunola <dakingun(a)gmail.com> - 0.5.8-2 - Use upstream's default build options (disable inotify support, #436096) * Thu Feb 21 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 0.5.8-1 - Update to 0.5.8 - Fix LIB_DESTINATION (#433627) - Drop GCC 4.3 patch (fixed upstream) * Sat Feb 9 2008 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 0.5.7-4 - Rebuild for GCC 4.3 * Fri Jan 11 2008 Deji Akingunola <dakingun(a)gmail.com> - 0.5.7-3 - Fix build failure with gcc-4.3 * Tue Nov 13 2007 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 0.5.7-2 - Rebuild for new exiv2 * Tue Oct 30 2007 Deji Akingunola <dakingun(a)gmail.com> - 0.5.7-1 - Update to 0.5.7 release - Fix multilibs conflict (Bug #343221, patch by Kevin Kofler) * Sun Sep 9 2007 Deji Akingunola <dakingun(a)gmail.com> - 0.5.5-2 - Rebuild for BuildID changes * Sat Aug 11 2007 Deji Akingunola <dakingun(a)gmail.com> - 0.5.5-1 - Update to 0.5.5 release * Mon Aug 6 2007 Deji Akingunola <dakingun(a)gmail.com> - 0.5.4-1 - Update to 0.5.4 proper - License tag update * Sun Jul 29 2007 Deji Akingunola <dakingun(a)gmail.com> - 0.5.4-0.1.svn20070729 - New KDE SVN snapshot version for KDE 4.0 beta 1 (bz#20015) -------------------------------------------------------------------------------- References: [ 1 ] Bug #436096 - segfault in strigi's inotifylistener at boot https://bugzilla.redhat.com/show_bug.cgi?id=436096 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update strigi' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 8 Update: perl-Imager-0.64-2.fc8
by updates＠fedoraproject.org 29 Apr '08

29 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3352 2008-04-29 20:24:41 -------------------------------------------------------------------------------- Name : perl-Imager Product : Fedora 8 Version : 0.64 Release : 2.fc8 URL : http://search.cpan.org/dist/Imager/ Summary : Perl extension for Generating 24 bit Images Description : Imager is a module for creating and altering images. It can read and write various image formats, draw primitive shapes like lines,and polygons, blend multiple images together in various ways, scale, crop, render text and more. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 24 2008 Steven Pritchard <steve(a)kspei.com> 0.64-2 - Rebuild. * Thu Apr 24 2008 Steven Pritchard <steve(a)kspei.com> 0.64-1 - Update to 0.64 (CVE-2008-1928). - Add versioned Test::More BR. * Thu Mar 6 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.62-3 - rebuild for new perl * Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 0.62-2 - Autorebuild for GCC 4.3 * Tue Dec 11 2007 Steven Pritchard <steve(a)kspei.com> 0.62-1 - Update to 0.62. - Update License tag. -------------------------------------------------------------------------------- References: [ 1 ] Bug #443938 - CVE-2008-1928 perl-Imager: buffer overflow when using an image based fill on a double precision image https://bugzilla.redhat.com/show_bug.cgi?id=443938 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update perl-Imager' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 7 Update: GeoIP-1.4.4-2.fc7
by updates＠fedoraproject.org 29 Apr '08

29 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3085 2008-04-29 20:24:34 -------------------------------------------------------------------------------- Name : GeoIP Product : Fedora 7 Version : 1.4.4 Release : 2.fc7 URL : http://www.maxmind.com/app/c Summary : C library for country/city/organization to IP address or hostname mapping Description : GeoIP is a C library that enables the user to find the country that any IP address or hostname originates from. It uses a file based database that is accurate as of March 2003. This database simply contains IP blocks as keys, and countries as values. This database should be more complete and accurate than using reverse DNS lookups. -------------------------------------------------------------------------------- ChangeLog: * Sun Apr 13 2008 Michael Fleming <mfleming+rpm(a)enlartenment.com> 1.4.4-1 - New upstream release. * Wed Sep 5 2007 Michael Fleming <mfleming+rpm(a)enlartenment.com> 1.4.3-1 - New upstream release. - Fix GeoIPCity fetcher script - Update License tag -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update GeoIP' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 8 Update: AcetoneISO2-2.0.1-2.fc8
by updates＠fedoraproject.org 29 Apr '08

29 Apr '08

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3348 2008-04-29 20:24:13 -------------------------------------------------------------------------------- Name : AcetoneISO2 Product : Fedora 8 Version : 2.0.1 Release : 2.fc8 URL : http://www.acetoneteam.org/ Summary : CD/DVD Image Manipulator Description : AcetoneISO2: The CD/DVD image manipulator for Linux, it can do the following: - Mount and Unmount ISO, MDF, NRG (if iso-9660 standard) - Convert / Extract / Browse to ISO : *.bin *.mdf *.nrg *.img *.daa *.cdi *.xbx *.b5i *.bwi *.pdi - Play a DVD Movie ISO with most used media players - Generate an ISO from a Folder or CD/DVD - Generate/Check MD5 file of an image - Encrypt/decrypt an image - Split image into X megabyte chunks - Highly compress an image - Rip a PSX cd to *.bin to make it work with epsxe/psx emulators - Service-Menu support for Konqueror - Restore a lost CUE file of *.bin *.img -------------------------------------------------------------------------------- Update Information: New Package: AcetoneISO2 - CD/DVD Image Manipulator -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update AcetoneISO2' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
...
63
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce April 2008