[SECURITY] Fedora 9 Update: trac-0.10.5-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6833
2008-07-30 18:07:15
--------------------------------------------------------------------------------
Name : trac
Product : Fedora 9
Version : 0.10.5
Release : 1.fc9
URL : http://trac.edgewall.com/
Summary : Enhanced wiki and issue tracking system
Description :
Trac is an integrated system for managing software projects, an
enhanced wiki, a flexible web-based issue tracker, and an interface to
the Subversion revision control system. At the core of Trac lies an
integrated wiki and issue/bug database. Using wiki markup, all objects
managed by Trac can directly link to other issues/bug reports, code
changesets, documentation and files. Around the core lies other
modules, providing additional features and tools to make software
development more streamlined and effective.
--------------------------------------------------------------------------------
Update Information:
Update to 0.10.5 to fix two non-critical security issues: CVE-2008-2951:
Open redirect vulnerability in the search script in Trac before 0.10.5 allows
remote attackers to redirect users to arbitrary web sites and conduct phishing
attacks via a URL in the q parameter. CVE-2008-3328: Cross-site scripting
(XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote
attackers to inject arbitrary web script or HTML via unknown vectors.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 22 2008 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 0.10.5-1
- Update to 0.10.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #456874 - trac: multiple security fixes in 0.10.5 (CVE-2008-2951, CVE-2008-3328)
https://bugzilla.redhat.com/show_bug.cgi?id=456874
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update trac' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 9 Update: ocaml-pa-monad-1.2.0-5.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-5924
2008-07-30 18:07:15
--------------------------------------------------------------------------------
Name : ocaml-pa-monad
Product : Fedora 9
Version : 1.2.0
Release : 5.fc9
URL : http://www.cas.mcmaster.ca/~carette/pa_monad/
Summary : OCaml syntax extension for monads
Description :
This Camlp4 parser adds some syntactic sugar to beautify monadic
expressions. The name of the syntax extension is a bit misleading as
it does not provide any monad nor monadic computation.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #451235 - repository dependancy errors
https://bugzilla.redhat.com/show_bug.cgi?id=451235
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ocaml-pa-monad' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 9 Update: bip-0.7.4-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6171
2008-07-30 18:07:15
--------------------------------------------------------------------------------
Name : bip
Product : Fedora 9
Version : 0.7.4
Release : 1.fc9
URL : http://bip.t1r.net
Summary : IRC Bouncer
Description :
Bip is an IRC proxy, which means it keeps connected to your preferred IRC
servers, can store the logs for you, and even send them back to your IRC
client(s) upon connection.
You may want to use bip to keep your logfiles (in a unique format and on a
unique computer) whatever your client is, when you connect from multiple
workstations, or when you simply want to have a playback of what was said
while you were away.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update bip' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 8 Update: glabels-2.2.2-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-2241
2008-07-30 18:07:15
--------------------------------------------------------------------------------
Name : glabels
Product : Fedora 8
Version : 2.2.2
Release : 1.fc8
URL : http://glabels.sf.net
Summary : A program for creating labels and business cards for GNOME
Description :
gLabels is a lightweight program for creating labels and
business cards for the GNOME desktop environment.
It is designed to work with various laser/ink-jet peel-off
label and business card sheets that you'll find at most office
supply stores.
--------------------------------------------------------------------------------
Update Information:
This is a version update to 2.2.2 of gLabels. Changes and fixes include:
Fixed crashes when creating a Code128C barcode or deleting a muliple-object
selection; explicitely set page size when printing "other" page size; Fixed
rendering bugs with bitmap fonts and "Invalid bar code data"; fixes for problems
with image size (enforcing a minimum size and fixing a spin-box bug), and fixes
for the template example in the documentation. Default units are also used when
writing XML files.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 4 2008 Peter Gordon <peter(a)thecodergeek.com> - 2.2.2-1
- Update to new upstream bug-fix release (2.2.2).
* Mon Jan 28 2008 Peter Gordon <peter(a)thecodergeek.com> - 2.2.1-1
- Update to new upstream bug-fix release (2.2.1).
* Mon Jan 14 2008 Peter Gordon <peter(a)thecodergeek.com> - 2.2.0-1
- Update to new upstream release (2.2.0 Final); Yay!
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update glabels' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 8 Update: roadstencil-fonts-1.0-2.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3504
2008-07-30 18:07:10
--------------------------------------------------------------------------------
Name : roadstencil-fonts
Product : Fedora 8
Version : 1.0
Release : 2.fc8
URL : http://openfontlibrary.org/media/files/andyfitz/237
Summary : Roadstencil Fonts
Description :
A rough font influenced by roadwork stencils
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #445146 - Review Request: roadstencil-fonts - Roadstencil fonts
https://bugzilla.redhat.com/show_bug.cgi?id=445146
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update roadstencil-fonts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 8 Update: gbrainy-0.70-4.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6831
2008-07-30 18:07:07
--------------------------------------------------------------------------------
Name : gbrainy
Product : Fedora 8
Version : 0.70
Release : 4.fc8
URL : http://live.gnome.org/gbrainy
Summary : Gbrainy is a brain teaser game and trainer to keep your brain trained
Description :
gbrainy is a brain teaser game and trainer to have
fun and to keep your brain trained.
It provides the following types of games:
* Logic puzzles. Games designed to challenge your
reasoning and thinking skills.
* Mental calculation. Games based on arithmetical
operations designed to prove your mental calculation skills.
* Memory trainers. Games designed to challenge your short term memory.
--------------------------------------------------------------------------------
Update Information:
Rebuild for dependencies
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gbrainy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 8 Update: sagator-1.1.0-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6405
2008-07-30 18:07:07
--------------------------------------------------------------------------------
Name : sagator
Product : Fedora 8
Version : 1.1.0
Release : 1.fc8
URL : http://www.salstar.sk/sagator/
Summary : SAGATOR - antivir/antispam gateway for smtp server
Description :
This program is an email antivirus/antispam gateway. It is an interface to
the postfix, sendmail, or any other smtpd, which runs antivirus and/or
spamchecker. Its modular architecture can use any combination of
antivirus/spamchecker according to configuration.
It has some internal checkers (string_scanner and regexp_scanner). Sagator
can parse MIME mails and decompress archives, if it is configured so.
Features:
* modular antivirus/spamchecker support
* you don't need any perl modules or any other modules, only python
* you can return any quarantined mail to mailq/user mailbox
* mailbox/maildir scanning and cleaning
* smtp policy service (greylist)
* nice statistics via RRDTOOL or MRTG
* web-quarantine access for users
* daily reports for users
* SQL database logging and configuration
* simple chroot support
--------------------------------------------------------------------------------
Update Information:
This version has totally rewritten sagator-libclamav and sagator-pydspam, using
python-ctypes library. Now it is not neccessary to recompile clamav support
after update of clamav.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sagator' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
[SECURITY] Fedora 8 Update: trac-0.10.5-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6830
2008-07-30 18:07:03
--------------------------------------------------------------------------------
Name : trac
Product : Fedora 8
Version : 0.10.5
Release : 1.fc8
URL : http://trac.edgewall.com/
Summary : Enhanced wiki and issue tracking system
Description :
Trac is an integrated system for managing software projects, an
enhanced wiki, a flexible web-based issue tracker, and an interface to
the Subversion revision control system. At the core of Trac lies an
integrated wiki and issue/bug database. Using wiki markup, all objects
managed by Trac can directly link to other issues/bug reports, code
changesets, documentation and files. Around the core lies other
modules, providing additional features and tools to make software
development more streamlined and effective.
--------------------------------------------------------------------------------
Update Information:
Update to 0.10.5 to fix two non-critical security issues: CVE-2008-2951:
Open redirect vulnerability in the search script in Trac before 0.10.5 allows
remote attackers to redirect users to arbitrary web sites and conduct phishing
attacks via a URL in the q parameter. CVE-2008-3328: Cross-site scripting
(XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote
attackers to inject arbitrary web script or HTML via unknown vectors.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 22 2008 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 0.10.5-1
- Update to 0.10.5
* Thu Jan 3 2008 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 0.10.4-2
- Simplify files section so that it picks up the egg info files.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #456874 - trac: multiple security fixes in 0.10.5 (CVE-2008-2951, CVE-2008-3328)
https://bugzilla.redhat.com/show_bug.cgi?id=456874
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update trac' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 9 Update: lxsplit-0.2.3-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6087
2008-07-30 18:06:55
--------------------------------------------------------------------------------
Name : lxsplit
Product : Fedora 9
Version : 0.2.3
Release : 1.fc9
URL : http://lxsplit.sourceforge.net/
Summary : File split / merge utility
Description :
lxSplit is a simple tool for splitting files and joining the splitted files
on linux and unix-like platforms. Splitting is done without compression and
large files (> 4 GB) are supported. lxSplit is fully compatible with the
HJSplit utility which is available for other operating systems.
--------------------------------------------------------------------------------
Update Information:
Fixes a build issue that earlier required a patch
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 3 2008 Rahul Sundaram<sundaram(a)fedoraproject.org> - 0.2.3-1
Pull new upstream. Drop obsoleted patch and fix defattr
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update lxsplit' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 8 Update: duplicity-0.4.12-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6826
2008-07-30 18:06:47
--------------------------------------------------------------------------------
Name : duplicity
Product : Fedora 8
Version : 0.4.12
Release : 1.fc8
URL : http://www.nongnu.org/duplicity/
Summary : Encrypted bandwidth-efficient backup using rsync algorithm
Description :
Duplicity incrementally backs up files and directory by encrypting
tar-format volumes with GnuPG and uploading them to a remote (or
local) file server. In theory many protocols for connecting to a
file server could be supported; so far ssh/scp, local file access,
rsync, ftp, HSI, WebDAV and Amazon S3 have been written.
Because duplicity uses librsync, the incremental archives are space
efficient and only record the parts of files that have changed since
the last backup. Currently duplicity supports deleted files, full
unix permissions, directories, symbolic links, fifos, device files,
but not hard links.
--------------------------------------------------------------------------------
Update Information:
Duplicity 0.4.12 contains the following changes and fixes from upstream: Dan
Muresan created a patch to minimize the number of password prompts. To do so,
it sometimes requests a password once without confirmation; if later it turns
out that a full backup is needed, the user is prompted for confirmation. bug
#23540: doc bug in man page (environment FTP_PASSWORD)
https://savannah.nongnu.org/bugs/index.php?23540 bug #23362: Documentation
for --version, --time-separator <char>
https://savannah.nongnu.org/bugs/index.php?23362 bug #23283: interactive
passphrase query is suboptimal https://savannah.nongnu.org/bugs/index.php?23283
bug #23066 was not actually applied to 0.4.11. Its here now.
https://savannah.nongnu.org/bugs/index.php?23066 bug #22826: regressions
caused by boto 1.1c https://savannah.nongnu.org/bugs/index.php?22826
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 27 2008 Robert Scheck <robert(a)fedoraproject.org> 0.4.12-1
- Upgrade to 0.4.12
* Sat Jun 28 2008 Robert Scheck <robert(a)fedoraproject.org> 0.4.11-2
- Added patch for incremental backups using python 2.3 (#453069)
* Mon May 5 2008 Robert Scheck <robert(a)fedoraproject.org> 0.4.11-1
- Upgrade to 0.4.11 (#440346)
* Sun Feb 10 2008 Robert Scheck <robert(a)fedoraproject.org> 0.4.9-1
- Upgrade to 0.4.9 (#293081, #431467)
* Sat Dec 8 2007 Robert Scheck <robert(a)fedoraproject.org> 0.4.7-1
- Upgrade to 0.4.7
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update duplicity' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months