Fedora 7 Update: bittorrent-4.4.0-6.fc7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3111
2008-05-09 22:21:06
--------------------------------------------------------------------------------
Name : bittorrent
Product : Fedora 7
Version : 4.4.0
Release : 6.fc7
URL : http://www.bittorrent.com/
Summary : BitTorrent swarming network file transfer tool
Description :
BitTorrent is a tool for distributing files. It's extremely easy to use -
downloads are started by clicking on hyperlinks. Whenever more than one person
is downloading at once they send pieces of the file(s) to each other, thus
relieving the central server's bandwidth burden. Even with many simultaneous
downloads, the upload burden on the central server remains quite small, since
each new downloader introduces new upload capacity.
--------------------------------------------------------------------------------
Update Information:
This is a cumulative bugfix release, fixing the failure to save fastresume data
properly when exiting (#245421), missing credits information (#237256), improved
documentation on seed/tracker setup (#430849), and removal of some deprecated
function warnings. A significant change in this update is that the default
data directory for the seed/tracker services has moved from /srv/bittorrent to
/var/lib/bittorrent. People using the btseed/bttrack services will need to
either move their data to the new location or edit /etc/sysconfig/bittorrent to
change the SEEDDIR and/or TRACKDIR variables back to /srv/bittorrent. This
change has been made because Fedora policy is not to package anything under /srv
and leave it to admins as to what to put there.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 8 2008 Paul Howarth <paul(a)city-fan.org> 4.4.0-6
- Default data directory moved back out of /srv
(to %{_localstatedir}/lib/bittorrent)
(http://fedoraproject.org/wiki/PackagingDrafts/NoBitsInSrv)
- Change torrent user's home directory from %{_localstatedir}/spool/bittorrent
to %{_localstatedir}/lib/bittorrent, fix the home directory of any existing
torrent user, and don't include %{_localstatedir}/spool/bittorrent in the
package any more
- Include egg-info if present (#440906)
- Fix some deprecation warnings from pygtk2
- Include credits-l10n.txt document (#237256)
- Write fastresume data properly so that it's recognized next time (#245421)
- Add README.Fedora to explain how to use the track/seed services (#430849)
- Use short license name to pacify rpmlint
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #430849 - bittorrent track/generate/seed fails, and documents do not help
https://bugzilla.redhat.com/show_bug.cgi?id=430849
[ 2 ] Bug #237256 - Error in about dialog
https://bugzilla.redhat.com/show_bug.cgi?id=237256
[ 3 ] Bug #245421 - bittorrent fastresume does not work (because of python incompatibility?)
https://bugzilla.redhat.com/show_bug.cgi?id=245421
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update bittorrent' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years
Fedora 8 Update: pAgenda-3.2-2.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3416
2008-05-09 22:34:06
--------------------------------------------------------------------------------
Name : pAgenda
Product : Fedora 8
Version : 3.2
Release : 2.fc8
URL : http://www.pcbypaul.com/software/pagenda.html
Summary : A cross platform calendar and scheduler
Description :
A cross platform calendar and scheduler with the ability to use sqlite
databases to manage multiple portable schedules.
Also includes appointment and contact management abilities.
--------------------------------------------------------------------------------
Update Information:
New Package: A cross platform calendar and scheduler with the ability to use
sqlite databases to manage multiple portable schedules. Also includes
appointment and contact management abilities.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #443195 - Review Request: pAgenda -A cross platform calendar and scheduler
https://bugzilla.redhat.com/show_bug.cgi?id=443195
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pAgenda' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years
[SECURITY] Fedora 7 Update: zoneminder-1.22.3-8.fc7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3516
2008-05-09 22:26:38
--------------------------------------------------------------------------------
Name : zoneminder
Product : Fedora 7
Version : 1.22.3
Release : 8.fc7
URL : http://www.zoneminder.com/
Summary : A camera monitoring and analysis tool
Description :
ZoneMinder is a set of applications which is intended to provide a complete
solution allowing you to capture, analyse, record and monitor any cameras you
have attached to a Linux based machine. It is designed to run on kernels which
support the Video For Linux (V4L) interface and has been tested with cameras
attached to BTTV cards, various USB cameras and IP network cameras. It is
designed to support as many cameras as you can attach to your computer without
too much degradation of performance. This package includes cambozola.jar.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #444434 - CVE-2008-1381 zoneminder: command injection via unescaped php exec() calls
https://bugzilla.redhat.com/show_bug.cgi?id=444434
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update zoneminder' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years
Fedora 7 Update: system-config-vsftpd-0.5.1-2.fc7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3438
2008-05-09 22:13:06
--------------------------------------------------------------------------------
Name : system-config-vsftpd
Product : Fedora 7
Version : 0.5.1
Release : 2.fc7
URL : http://vsftpd-config.sf.net
Summary : A graphical interface for administering vsftpd server
Description :
System-config-vsftpd is a graphical utility for administrating
Very Secure FTP Daemon ( VSFTPD ).
--------------------------------------------------------------------------------
Update Information:
Rebase
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update system-config-vsftpd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years
Fedora 8 Update: pyfits-1.3-3.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3072
2008-05-09 22:20:06
--------------------------------------------------------------------------------
Name : pyfits
Product : Fedora 8
Version : 1.3
Release : 3.fc8
URL : http://www.stsci.edu/resources/software_hardware/pyfits
Summary : Python interface to FITS
Description :
PyFITS provides an interface to FITS formatted files under the Python
scripting language. It is useful both for interactive data analysis and for
writing analysis scripts in Python using FITS files as either input or output.
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pyfits' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years
[SECURITY] Fedora 8 Update: audacity-1.3.2-21.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3456
2008-05-09 22:16:03
--------------------------------------------------------------------------------
Name : audacity
Product : Fedora 8
Version : 1.3.2
Release : 21.fc8
URL : http://audacity.sourceforge.net
Summary : A multitrack audio editor
Description :
Audacity is a cross-platform multitrack audio editor. It allows you to
record sounds directly or to import Ogg, WAV, AIFF, AU, IRCAM, or MP3
files. It features a few simple effects, all of the editing features
you should need, and unlimited undo. The GUI was built with wxWindows
and the audio I/O currently uses OSS under Linux. Audacity runs on
Linux/*BSD, MacOS, and Windows.
--------------------------------------------------------------------------------
Update Information:
A local attacker could exploit Audacity's insecure handling of the directory for
temporary files to conduct symlink attacks in order to delete arbitrary files
and directories with the privileges of the user running Audacity.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 3 2008 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.3.2-21
- check ownership of temporary files directory (#436260) (CVE-2007-6061)
* Fri Mar 21 2008 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.3.2-20
- make soundtouch and allegro build with RPM optflags
* Sun Feb 10 2008 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.3.2-19
- rawhide: patch for JACK 0.109.0 API changes (jack_port_lock/unlock removal).
- rebuilt for GCC 4.3 as requested by Fedora Release Engineering
- subst _libdir in ladspa plugin loader
* Thu Jan 3 2008 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.3.2-18
- Patch for GCC 4.3.0 C++.
* Fri Nov 16 2007 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.3.2-17
- rebuilt for FLAC 1.1.4 -> 1.2.x upgrade, which broke FLAC import
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #393251 - CVE-2007-6061 Audacity insecure temporary file handling
https://bugzilla.redhat.com/show_bug.cgi?id=393251
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update audacity' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years
[SECURITY] Fedora 8 Update: thunderbird-2.0.0.14-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3557
2008-05-09 22:33:22
--------------------------------------------------------------------------------
Name : thunderbird
Product : Fedora 8
Version : 2.0.0.14
Release : 1.fc8
URL : http://www.mozilla.org/projects/thunderbird/
Summary : Mozilla Thunderbird mail/newsgroup client
Description :
Mozilla Thunderbird is a standalone mail and newsgroup client.
--------------------------------------------------------------------------------
Update Information:
Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws
were found in the processing of some malformed HTML mail content. An HTML mail
message containing such malicious content could cause Thunderbird to crash or,
potentially, execute arbitrary code as the user running Thunderbird.
(CVE-2008-1233, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237) Several flaws
were found in the display of malformed web content. An HTML mail message
containing specially-crafted content could, potentially, trick a user into
surrendering sensitive information. (CVE-2008-1234) A flaw was found in the
processing of malformed JavaScript content. An HTML mail message containing
such malicious content could cause Thunderbird to crash or, potentially,
execute arbitrary code as the user running Thunderbird. (CVE-2008-1380)
Note: JavaScript support is disabled by default in Thunderbird; the above issue
is not exploitable unless JavaScript is enabled. All Thunderbird users should
upgrade to these updated packages, which contain backported patches to resolve
these issues.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 1 2008 Christopher Aillon <caillon(a)redhat.com> 2.0.0.14-1
- Update to 2.0.0.14
* Fri Mar 7 2008 Martin Stransky <stransky(a)redhat.com>
- updated starting script, fixes #436410
* Tue Feb 26 2008 Christopher Aillon <caillon(a)redhat.com> 2.0.0.12-1
- Update to 2.0.0.12
* Thu Nov 15 2007 Christopher Aillon <caillon(a)redhat.com> 2.0.0.9-1
- Update to 2.0.0.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #438713 - CVE-2008-1233 Mozilla products XPCNativeWrapper pollution
https://bugzilla.redhat.com/show_bug.cgi?id=438713
[ 2 ] Bug #438715 - CVE-2008-1234 universal XSS using event handlers
https://bugzilla.redhat.com/show_bug.cgi?id=438715
[ 3 ] Bug #438717 - CVE-2008-1235 chrome privilege via wrong principal
https://bugzilla.redhat.com/show_bug.cgi?id=438717
[ 4 ] Bug #440518 - CVE-2008-1380 Firefox JavaScript garbage collection crash
https://bugzilla.redhat.com/show_bug.cgi?id=440518
[ 5 ] Bug #438718 - CVE-2008-1236 browser engine crashes
https://bugzilla.redhat.com/show_bug.cgi?id=438718
[ 6 ] Bug #438721 - CVE-2008-1237 javascript crashes
https://bugzilla.redhat.com/show_bug.cgi?id=438721
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update thunderbird' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years
Fedora 8 Update: nmh-1.3-RC1.1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3503
2008-05-09 22:24:12
--------------------------------------------------------------------------------
Name : nmh
Product : Fedora 8
Version : 1.3
Release : RC1.1.fc8
URL : http://savannah.nongnu.org/projects/nmh
Summary : A capable mail handling system with a command line interface.
Description :
Nmh is an email system based on the MH email system and is intended to
be a (mostly) compatible drop-in replacement for MH. Nmh isn't a
single comprehensive program. Instead, it consists of a number of
fairly simple single-purpose programs for sending, receiving, saving,
retrieving and otherwise manipulating email messages. You can freely
intersperse nmh commands with other shell commands or write custom
scripts which utilize nmh commands. If you want to use nmh as a true
email user agent, you'll want to also install exmh to provide a user
interface for it--nmh only has a command line interface.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 29 2008 Josh Bressers <bressers(a)redhat.com> 0:1.3-RC1.1
- Update to nmh version 1.3-RC1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update nmh' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years
Fedora 8 Update: perl-CGI-SpeedyCGI-2.22-2.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3558
2008-05-09 22:33:27
--------------------------------------------------------------------------------
Name : perl-CGI-SpeedyCGI
Product : Fedora 8
Version : 2.22
Release : 2.fc8
URL : http://search.cpan.org/dist/CGI-SpeedyCGI/
Summary : Speed up perl scripts by running them persistently
Description :
SpeedyCGI is a way to run perl scripts persistently, which can make
them run much more quickly. After the script is initially run, instead
of exiting, the perl interpreter is kept running. During subsequent
runs, this interpreter is used to handle new executions instead of
starting a new perl interpreter each time. It is a very fast frontend
program, written in C, is executed for each request.
--------------------------------------------------------------------------------
Update Information:
This is the initial import of SpeedyCGI into Fedora. SpeedyCGI is a way to run
perl scripts persistently, which can make them run much more quickly. After the
script is initially run, instead of exiting, the perl interpreter is kept
running. During subsequent runs, this interpreter is used to handle new
executions instead of starting a new perl interpreter each time. It is a very
fast frontend program, written in C, is executed for each request.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-CGI-SpeedyCGI' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years
Fedora 7 Update: cmake-2.4.8-1.fc7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3300
2008-05-09 22:28:41
--------------------------------------------------------------------------------
Name : cmake
Product : Fedora 7
Version : 2.4.8
Release : 1.fc7
URL : http://www.cmake.org
Summary : Cross-platform make system
Description :
CMake is used to control the software compilation process using simple
platform and compiler independent configuration files. CMake generates
native makefiles and workspaces that can be used in the compiler
environment of your choice. CMake is quite sophisticated: it is possible
to support complex environments requiring system configuration, pre-processor
generation, code generation, and template instantiation.
--------------------------------------------------------------------------------
Update Information:
Update to 2.4.8.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 24 2008 Orion Poplawski <orion(a)cora.nwra.com> - 2.4.8-1
- Update to 2.4.8
* Tue Aug 21 2007 Orion Poplawski <orion(a)cora.nwra.com> - 2.4.7-1
- Update to 2.4.7
* Tue Jul 24 2007 Orion Poplawski <orion(a)cora.nwra.com> - 2.4.6-4
- Update macros.cmake to add CMAKE_INSTALL_LIBDIR, INCLUDE_INSTALL_DIR,
LIB_INSTALL_DIR, SYSCONF_INSTALL_DIR, and SHARE_INSTALL_PREFIX
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #443951 - Please update cmake to 2.4.8 in Fedora 7.
https://bugzilla.redhat.com/show_bug.cgi?id=443951
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cmake' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years