[SECURITY] Fedora 8 Update: poppler-0.6.2-2.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7104
2008-08-07 21:21:08
--------------------------------------------------------------------------------
Name : poppler
Product : Fedora 8
Version : 0.6.2
Release : 2.fc8
URL : http://poppler.freedesktop.org/
Summary : PDF rendering library
Description :
Poppler, a PDF rendering library, it's a fork of the xpdf PDF
viewer developed by Derek Noonburg of Glyph and Cog, LLC.
--------------------------------------------------------------------------------
Update Information:
Security fix: Add upstream patch for CVE-2008-2950 / oCERT-2008-007 - use of
an uninitialized pointer to call free() in Page::~Page (#454277)
http://www.ocert.org/advisories/ocert-2008-007.html
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 30 2008 Tomas Hoger <thoger(a)redhat.com> - 0.6.2-2
- Security update:
Add upstream patch for CVE-2008-2950 / oCERT-2008-007 - use of
an uninitilized pointer to call free() in Page::~Page (#454277)
* Fri Nov 30 2007 Matthias Clasen <mclasen(a)redhat.com> - 0.6.2-1
- package xpdf headers in poppler-devel (Jindrich Novy)
- Fix qt3 detection (Denis Leroy)
- Update to 0.6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #454277 - CVE-2008-2950 poppler: uninitialized pointer free (oCERT-2008-007)
https://bugzilla.redhat.com/show_bug.cgi?id=454277
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update poppler' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 9 months
Fedora 8 Update: perl-Event-ExecFlow-0.63-4.fc8.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6806
2008-08-07 21:21:08
--------------------------------------------------------------------------------
Name : perl-Event-ExecFlow
Product : Fedora 8
Version : 0.63
Release : 4.fc8.1
URL : http://search.cpan.org/dist/Event-ExecFlow/
Summary : High level API for event-based execution flow control
Description :
Event::ExecFlow offers a high level API to declare jobs, which mainly execute
external commands, parse their output to get progress or other status
information, triggers actions when the command has been finished etc. Such jobs
can be chained together in a recursive fashion to fulfill rather complex tasks
which consist of many jobs.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Event-ExecFlow' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 9 months
Fedora 8 Update: shorewall-4.0.13-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6769
2008-08-07 21:21:08
--------------------------------------------------------------------------------
Name : shorewall
Product : Fedora 8
Version : 4.0.13
Release : 1.fc8
URL : http://www.shorewall.net/
Summary : An iptables front end for firewall configuration
Description :
The Shoreline Firewall, more commonly known as "Shorewall", is a
Netfilter (iptables) based firewall that can be used on a dedicated
firewall system, a multi-function gateway/ router/server or on a
standalone GNU/Linux system.
--------------------------------------------------------------------------------
Update Information:
Update to upstream bugfix release 4.0.13.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 29 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.13-1
- Update to version 4.0.13
- Remove patch-perl-4.0.12.1
- Update BuildRoot to mktemp variant
* Sat Jul 5 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.12-2
- Apply patch-perl-4.0.12.1 from upstream
* Fri Jun 27 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.12-1
- Update to version 4.0.12
* Sun May 25 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.11-1
- Update to version 4.0.11
- Remove patches for version 4.0.10
* Sun May 4 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.10-2
- Add upstream patches patch-perl-4.0.10-1.diff and patch-common-4.0.10-1.diff
* Sun Apr 6 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.10-1
- Update to version 4.0.10
- Remove 4.0.9 patches
* Tue Mar 25 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.9-2
- Replace patch-perl-4.0,9-1 with patch-perl-4.0.9.1
- Add patch-shell-4.0.9.1
* Thu Feb 28 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.9-1
- Update to version 4.0.9
- Remove 4.0.8 series patches
- Add upstream patch patch-perl-4.0,9-1 (the comma is not a typo)
* Sat Feb 16 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.8-3
- Added patch-perl-4.0.8-3.diff and patch-perl-4.0.8-4.diff patches from
upstream
* Wed Feb 6 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.8-2
- Add upstream patches patch-perl-4.0.8-1.diff and patch-perl-4.0.8-2.diff
* Sun Jan 27 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.8-1
- Update to version 4.0.8
- Remove 4.0.7 patches
* Sun Jan 6 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.7-2
- Remove 4.0.7.1 patch as it seems that's already been applied to the tarball
contents
* Sun Jan 6 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.7-2
- Fix error in patching commands in spec file (change -p0 to -p1 for new patches)
* Sun Jan 6 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.7-1
- Update to version 4.0.7
- Added 4.0.7.1 patch and all parts of the 4.0.7.2 patch that are relevant
(i.e. not the parts working around the iproute2-2.23 bug, as we don't ship the
broken iproute2)
- Clarified notes about tarball and patch locations
* Sat Dec 8 2007 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.6-3
- Added patch-perl-4.0.6-2.diff and patch-perl-4.0.6-3.diff
- Fixed URLs for tarballs to match where upstream has moved them to
* Wed Nov 28 2007 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.6-2
- Add Requires for shorewall-common to shorewall-shell and shorewall-perl (Orion
Poplawski)
* Sat Nov 24 2007 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.6-1
- Update to 4.0.6 plus patch-perl-4.0.6-1.diff upstream errata
* Sat Oct 27 2007 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.5-1
- Update to 4.0.5 which removes the need for the buildports.pl functionality
* Mon Oct 8 2007 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.4-2
- Add ghost files for /var/lib/shorewall/.modules and /var/lib/shorewall/.modulesdir
- Fix ownership of /var/lib/shorewall-lite
* Sun Oct 7 2007 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.4-1
- Initial version 4 packaging based upon upstream specs by Tom Eastep and
version 3 spec by Robert Marcano
- Split into shorewall-common, shorewall-shell, shorewall-perl,
shorewall-lite subpackages
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update shorewall' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 9 months
Fedora 9 Update: gts-0.7.6-11.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6927
2008-08-07 21:21:08
--------------------------------------------------------------------------------
Name : gts
Product : Fedora 9
Version : 0.7.6
Release : 11.fc9
URL : http://gts.sourceforge.net/index.html
Summary : GNU Triangulated Surface Library
Description :
GTS provides a set of useful functions to deal with 3D surfaces meshed
with interconnected triangles including collision detection,
multiresolution models, constrained Delaunay triangulations and robust
set operations (union, intersection, differences).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #457099 - devel subpackage should depend on glib-devel
https://bugzilla.redhat.com/show_bug.cgi?id=457099
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 9 months
Fedora 8 Update: speech-dispatcher-0.6.6-18.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7101
2008-08-07 21:20:57
--------------------------------------------------------------------------------
Name : speech-dispatcher
Product : Fedora 8
Version : 0.6.6
Release : 18.fc8
URL : http://www.freebsoft.org/pub/projects/speechd/
Summary : To provide a high-level device independent layer for speech synthesis
Description :
* Common interface to different TTS engines
* Handling concurrent synthesis requests – requests may come
asynchronously from multiple sources within an application
and/or from more different applications.
* Subsequent serialization, resolution of conflicts and
priorities of incoming requests
* Context switching – state is maintained for each client
connection independently, event for connections from
within one application.
* High-level client interfaces for popular programming languages
* Common sound output handling – audio playback is handled by
Speech Dispatcher rather than the TTS engine, since most engines
have limited sound output capabilities.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update speech-dispatcher' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 9 months
Fedora 9 Update: perl-Config-Augeas-0.203-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7100
2008-08-07 21:20:54
--------------------------------------------------------------------------------
Name : perl-Config-Augeas
Product : Fedora 9
Version : 0.203
Release : 1.fc9
URL : http://search.cpan.org/dist/Config-Augeas/
Summary : Edit configuration files through Augeas C library
Description :
Augeas is a library and command line tool that focuses on the most basic
problem in handling Linux configurations programmatically: editing actual
configuration files in a controlled manner.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Config-Augeas' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 9 months
Fedora 8 Update: qosmic-1.4-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7099
2008-08-07 21:20:50
--------------------------------------------------------------------------------
Name : qosmic
Product : Fedora 8
Version : 1.4
Release : 1.fc8
URL : http://code.google.com/p/qosmic/
Summary : A cosmic recursive fractal flame editor written in Qt4
Description :
Qosmic is a nifty toy with which you can edit and render flam3 fractal images.
It is comparable to Apophysis for Windows, with the same basic interface.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 4 2008 Ian Weller <ianweller(a)gmail.com> 1.4-1
- Updated upstream:
- Fixed a bug in calculating the scaling factor when resizing triangles.
- Added more options for origin placement when editing triangles.
- Added a function to duplicate a triangle.
- Post transforms for a triangle can be modified.
- Updated to libflam3-2.7.14.
- Improved rendering request scheduling.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qosmic' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 9 months
Fedora 8 Update: xapian-bindings-1.0.7-2.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6756
2008-08-07 21:20:50
--------------------------------------------------------------------------------
Name : xapian-bindings
Product : Fedora 8
Version : 1.0.7
Release : 2.fc8
URL : http://www.xapian.org/
Summary : Bindings for the Xapian Probabilistic Information Retrieval Library
Description :
Xapian is an Open Source Probabilistic Information Retrieval Library. It
offers a highly adaptable toolkit that allows developers to easily add advanced
indexing and search facilities to applications. This package provides the
files needed for scripts which use Xapian
--------------------------------------------------------------------------------
Update Information:
Enable ruby bindings.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 28 2008 Adel Gadllah <adel.gadllah(a)gmail.com> 1.0.7-2
- Enable ruby bindings RH #456951, patch by Scott Seago
* Tue Jul 22 2008 Adel Gadllah <adel.gadllah(a)gmail.com> 1.0.7-1
- Update to 1.0.7
* Sun Mar 30 2008 Adel Gadllah <adel.gadllah(a)gmail.com> 1.0.6-1
- Update to 1.0.6
* Thu Dec 27 2007 Adel Gadllah <adel.gadllah(a)gmail.com> 1.0.5-1
- Update to 1.0.5
* Sat Dec 1 2007 Adel Gadllah <adel.gadllah(a)gmail.com> 1.0.4-2
- Fix requires for xapian-core
* Sat Dec 1 2007 Adel Gadllah <adel.gadllah(a)gmail.com> 1.0.4-1
- Update to 1.0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #456951 - Ruby bindings are not currently being built.
https://bugzilla.redhat.com/show_bug.cgi?id=456951
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xapian-bindings' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 9 months
[SECURITY] Fedora 8 Update: httpd-2.2.9-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6314
2008-08-07 21:20:50
--------------------------------------------------------------------------------
Name : httpd
Product : Fedora 8
Version : 2.2.9
Release : 1.fc8
URL : http://httpd.apache.org/
Summary : Apache HTTP Server
Description :
The Apache HTTP Server is a powerful, efficient, and extensible
web server.
--------------------------------------------------------------------------------
Update Information:
This update includes the latest release of httpd 2.2. A security issue is
fixed in this update: A flaw was found in the handling of excessive interim
responses from an origin server when using mod_proxy_http. In a forward proxy
configuration, if a user of the proxy could be tricked into visiting a malicious
web server, the proxy could be forced into consuming a large amount of stack or
heap memory. This could lead to an eventual process crash due to stack space
exhaustion.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 14 2008 Joe Orton <jorton(a)redhat.com> 2.2.9-1.fc8
- update to 2.2.9 (#454100)
* Mon Jan 28 2008 Joe Orton <jorton(a)redhat.com> 2.2.8-1.fc8
- update to 2.2.8 (#430465)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #451615 - CVE-2008-2364 httpd: mod_proxy_http DoS via excessive interim responses from the origin server
https://bugzilla.redhat.com/show_bug.cgi?id=451615
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update httpd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 9 months
Fedora 9 Update: nginx-0.6.32-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6874
2008-08-07 21:20:46
--------------------------------------------------------------------------------
Name : nginx
Product : Fedora 9
Version : 0.6.32
Release : 1.fc9
URL : http://nginx.net/
Summary : Robust, small and high performance http and reverse proxy server
Description :
Nginx [engine x] is an HTTP(S) server, HTTP(S) reverse proxy and IMAP/POP3
proxy server written by Igor Sysoev.
One third party module, nginx-upstream-fair, is added
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 22 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 0.6.32-1
- update to 0.6.32
- nginx now supports DESTDIR so removed the patches that enabled it
* Mon May 26 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 0.6.31-3
- init script fixes
- resolve 'listen 80 default' [#447873]
* Mon May 12 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 0.6.31-2
- update to 0.6.31
* Sun May 11 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 0.6.30-2
- upate to new upstream stable branch 0.6
- added 3rd party module nginx-upstream-fair
- added default webpages
* Sun Apr 20 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 0.5.35-2
- update init script to match recommended guidelines
- add /etc/nginx/conf.d support [#443280]
- use /etc/sysconfig/nginx to determine nginx.conf [#442708]
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update nginx' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 9 months