[SECURITY] Fedora 9 Update: rubygems-1.2.0-2.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8322
2008-09-27 03:05:43
--------------------------------------------------------------------------------
Name : rubygems
Product : Fedora 9
Version : 1.2.0
Release : 2.fc9
URL : http://rubyforge.org/projects/rubygems/
Summary : The Ruby standard for packaging ruby libraries
Description :
RubyGems is the Ruby standard for publishing and managing third party
libraries.
--------------------------------------------------------------------------------
Update Information:
Fixes CVE-2008-4094 (SQL injection in limit and offset clauses)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 16 2008 David Lutterkort <dlutter(a)redhat.com> - 1.2.0-2
- Bump release because I forgot to check in newer patch
* Tue Sep 16 2008 David Lutterkort <dlutter(a)redhat.com> - 1.2.0-1
- Updated for new setup.rb
- Simplified by removing conditionals that were needed for EL-4;
there's just no way we can support that with newer rubygems
* Wed Sep 3 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.9.4-2
- fix license tag
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #462302 - CVE-2008-4094 Security: rubygem-rails 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462302
[ 2 ] Bug #462303 - CVE-2008-4094 Security: rubygem-actionmailer 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462303
[ 3 ] Bug #462304 - CVE-2008-4094 Security: rubygem-actionpack 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462304
[ 4 ] Bug #462306 - CVE-2008-4094 Security: rubygem-activerecord 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462306
[ 5 ] Bug #462307 - CVE-2008-4094 Security: rubygem-activeresource 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462307
[ 6 ] Bug #462308 - CVE-2008-4094 Security: rubygem-activesupport 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462308
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygems' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
[SECURITY] Fedora 9 Update: rubygem-activesupport-2.1.1-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8322
2008-09-27 03:05:43
--------------------------------------------------------------------------------
Name : rubygem-activesupport
Product : Fedora 9
Version : 2.1.1
Release : 1.fc9
URL : http://www.rubyonrails.org
Summary : Support and utility classes used by the Rails framework
Description :
Utility library which carries commonly used classes and
goodies from the Rails framework
--------------------------------------------------------------------------------
Update Information:
Fixes CVE-2008-4094 (SQL injection in limit and offset clauses)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 16 2008 David Lutterkort <dlutter(a)redhat.com> - 2.1.1-1
- New version (fixes CVE-2008-4094)
* Thu Jul 31 2008 Michael Stahnke <stahnma(a)fedoraproject.org> - 2.1.0-1
- New Upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #462302 - CVE-2008-4094 Security: rubygem-rails 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462302
[ 2 ] Bug #462303 - CVE-2008-4094 Security: rubygem-actionmailer 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462303
[ 3 ] Bug #462304 - CVE-2008-4094 Security: rubygem-actionpack 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462304
[ 4 ] Bug #462306 - CVE-2008-4094 Security: rubygem-activerecord 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462306
[ 5 ] Bug #462307 - CVE-2008-4094 Security: rubygem-activeresource 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462307
[ 6 ] Bug #462308 - CVE-2008-4094 Security: rubygem-activesupport 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462308
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-activesupport' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
[SECURITY] Fedora 9 Update: rubygem-activerecord-2.1.1-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8322
2008-09-27 03:05:43
--------------------------------------------------------------------------------
Name : rubygem-activerecord
Product : Fedora 9
Version : 2.1.1
Release : 1.fc9
URL : http://www.rubyonrails.org
Summary : Implements the ActiveRecord pattern for ORM
Description :
Implements the ActiveRecord pattern (Fowler, PoEAA) for ORM. It ties database
tables and classes together for business objects, like Customer or
Subscription, that can find, save, and destroy themselves without resorting to
manual SQL.
--------------------------------------------------------------------------------
Update Information:
Fixes CVE-2008-4094 (SQL injection in limit and offset clauses)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 16 2008 David Lutterkort <dlutter(a)redhat.com> - 2.1.1-2
- New version (fixes CVE-2008-4094)
* Thu Jul 31 2008 Michael Stahnke <stahnma(a)fedoraproject.org> - 2.1.0-1
- New Upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #462302 - CVE-2008-4094 Security: rubygem-rails 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462302
[ 2 ] Bug #462303 - CVE-2008-4094 Security: rubygem-actionmailer 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462303
[ 3 ] Bug #462304 - CVE-2008-4094 Security: rubygem-actionpack 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462304
[ 4 ] Bug #462306 - CVE-2008-4094 Security: rubygem-activerecord 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462306
[ 5 ] Bug #462307 - CVE-2008-4094 Security: rubygem-activeresource 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462307
[ 6 ] Bug #462308 - CVE-2008-4094 Security: rubygem-activesupport 2.1.1 is available, please update
https://bugzilla.redhat.com/show_bug.cgi?id=462308
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-activerecord' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 8 Update: koan-1.2.5-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8385
2008-09-27 03:02:23
--------------------------------------------------------------------------------
Name : koan
Product : Fedora 8
Version : 1.2.5
Release : 1.fc8
URL : http://cobbler.et.redhat.com/
Summary : Network provisioning tool for Xen and Bare Metal Machines
Description :
Koan stands for kickstart-over-a-network and allows for both
network provisioning of new virtualized guests and destructive re-provisioning
of any existing system. For use with a boot-server configured with
'cobbler'
--------------------------------------------------------------------------------
Update Information:
Re-enables --replace-self for non-DHCP environments, or environments with slow
DHCP
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 26 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.2.5-1
- Upstream changes (see CHANGELOG)
* Fri Aug 29 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.2.0-1
- Upstream changes (see CHANGELOG)
* Mon Jun 16 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.0.2-1
- Upstream changes (see CHANGELOG)
* Fri Jun 6 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.0.1-1
- Upstream changes (see CHANGELOG)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update koan' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 9 Update: mfiler3-2.0.8a-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8438
2008-09-27 03:06:02
--------------------------------------------------------------------------------
Name : mfiler3
Product : Fedora 9
Version : 2.0.8a
Release : 1.fc9
URL : http://www.geocities.jp/daisuke530221jp/index3.html
Summary : Two pane file manager under UNIX console
Description :
Minnu's Filer3 is a two pane file manager under UNIX console.
--------------------------------------------------------------------------------
Update Information:
New version 2.0.8a is released.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mfiler3' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 9 Update: iscsi-initiator-utils-6.2.0.870-0.0.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-5956
2008-09-27 03:04:41
--------------------------------------------------------------------------------
Name : iscsi-initiator-utils
Product : Fedora 9
Version : 6.2.0.870
Release : 0.0.fc9
URL : http://www.open-iscsi.org
Summary : iSCSI daemon and utility programs
Description :
The iscsi package provides the server daemon for the iSCSI protocol,
as well as the utility programs used to manage it. iSCSI is a protocol
for distributed disk access using SCSI commands sent over Internet
Protocol networks.
--------------------------------------------------------------------------------
Update Information:
This update fixes several sysfs parsing bugs that occur when using 2.6.25 and
2.6.26 kernels. For 2.6.25+ kernels, iscsiadm -m session -P 3, was not
displaying the LUN to /dev/sdX mapping correctly, because iscsiadm was digging
into the block sysfs symlinks incorrectly. For 2.6.26 kernels, iscsiadm
logout and session mode commands failed, because iscsiadm was not searching
sysfs correctly.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2008 Mike Christie <mchristie(a)redhat.com> - 6.2.0.870
- Rebase to open-iscsi-2-870
- 453282 Handle sysfs changes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #453282 - cope with sysfs breakage introduced in 2.6.25
https://bugzilla.redhat.com/show_bug.cgi?id=453282
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update iscsi-initiator-utils' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 9 Update: monotone-0.41-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8150
2008-09-27 03:06:25
--------------------------------------------------------------------------------
Name : monotone
Product : Fedora 9
Version : 0.41
Release : 1.fc9
URL : http://monotone.ca/
Summary : A free, distributed version control system
Description :
monotone is a free, distributed version control system.
It provides fully disconnected operation, manages complete
tree versions, keeps its state in a local transactional
database, supports overlapping branches and extensible
metadata, exchanges work over plain network protocols,
performs history-sensitive merging, and delegates trust
functions to client-side RSA certificates.
--------------------------------------------------------------------------------
Update Information:
Update to 0.41. This version fixes some annoying bugs and adds a few new
features, mainly in the automation interface.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 12 2008 Thomas Moschny <thomas.moschny(a)gmx.de> - 0.41-1
- Updated for 0.41 release.
- Added mtnopt helper.
* Mon Aug 11 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.40-2
- fix license tag
* Mon Apr 14 2008 Roland McGrath <roland(a)redhat.com> - 0.40-1
- Updated for 0.40 release.
- Tweaked trivia for packaging guidelines nits.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #442420 - monotone-0.40 is available
https://bugzilla.redhat.com/show_bug.cgi?id=442420
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update monotone' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 9 Update: abcMIDI-20080924-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8417
2008-09-27 03:04:37
--------------------------------------------------------------------------------
Name : abcMIDI
Product : Fedora 9
Version : 20080924
Release : 1.fc9
URL : http://abc.sourceforge.net/abcMIDI
Summary : ABC to/from MIDI conversion utilities
Description :
The abcMIDI package contains four programs: abc2midi to convert ABC
music notation to MIDI, midi2abc to convert MIDI files to (a first
approximation to) the corresponding ABC, abc2abc to reformat and/or
transpose ABC files, and yaps to typeset ABC files as PostScript.
For a description of the ABC syntax, please see the ABC userguide
which is a part of the abcm2ps.
--------------------------------------------------------------------------------
Update Information:
new release 20080924
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 24 2008 Gerard Milmeister <gemi(a)bluewin.ch> - 20080924-1
- new release 2008-09-24
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #463711 - not all *.abc examples packaged
https://bugzilla.redhat.com/show_bug.cgi?id=463711
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update abcMIDI' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 8 Update: libUnihan-0.5.1-0.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8310
2008-09-27 03:02:09
--------------------------------------------------------------------------------
Name : libUnihan
Product : Fedora 8
Version : 0.5.1
Release : 0.fc8
URL : http://sourceforge.net/projects/libunihan
Summary : C library for Unihan character database in fifth normal form
Description :
libUnihan provides a C library for Unihan character database in fifth
normal form (5NF).
--------------------------------------------------------------------------------
Update Information:
- New Features: + PinYin accent format conversion functions (C and SQL
scalar). + ZhuYin tone mark format conversion functions (C and SQL scalar).
+ PinYin <--> ZhuYin conversion functions (C and SQL scalar). + Display as
ZhuYin. - Fixed: + Correct counting in FreqRank field of kMandarin table.
+ The query functions such as unihan_find_all_matched() returns SQL_Results
type, to avoid the memory leaking problems. - Changed: + unihanDb_open() now
supports the R/W control. + Changed CMakefile.txt to reflects the version
scheme change of UnihanDb + StringList type for storing const string arrays.
+ Add test suite. + Where-clause-generator is now able to escape the quote
character('). + unihan_field_validation is moved to test/, therefore it will
not be in binary package. + New make targets: rpm, srpm, rpm_db and srpm_db
to generate rpm and srpm for libUnihan and UnihanDb. - Removed: +
unihanSql_get_result_table(). As it uses sqlite3_get_table() which might cause
memory leak.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libUnihan' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months
Fedora 9 Update: cobbler-1.2.5-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8427
2008-09-27 03:05:20
--------------------------------------------------------------------------------
Name : cobbler
Product : Fedora 9
Version : 1.2.5
Release : 1.fc9
URL : http://cobbler.et.redhat.com
Summary : Boot server configurator
Description :
Cobbler is a network boot and update server. Cobbler
supports PXE, provisioning virtualized images, and
reinstalling existing Linux machines. The last two
modes require a helper tool called 'koan' that
integrates with cobbler. Cobbler's advanced features
include importing distributions from DVDs and rsync
mirrors, kickstart templating, integrated yum
mirroring, and built-in DHCP/DNS Management. Cobbler has
a Python and XMLRPC API for integration with other
applications.
--------------------------------------------------------------------------------
Update Information:
Fixes various small bugs.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 26 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.2.5-1
- Upstream changes (see CHANGELOG)
* Mon Sep 8 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.2.4-1
- Rebuild
* Sun Sep 7 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.2.3-1
- Upstream changes (see CHANGELOG)
* Fri Sep 5 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.2.2-1
- Upstream changes (see CHANGELOG)
* Tue Sep 2 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.2.1-1
- Upstream changes (see CHANGELOG)
- Package unowned directories
* Fri Aug 29 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.2.0-1
- Upstream changes (see CHANGELOG)
* Tue Jun 10 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.0.3-1
- Upstream changes (see CHANGELOG)
* Mon Jun 9 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.0.2-1
- Upstream changes (see CHANGELOG)
* Tue Jun 3 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.0.1-1
- Upstream changes (see CHANGELOG)
- stop owning files in tftpboot
- condrestart for Apache
* Tue May 27 2008 Michael DeHaan <mdehaan(a)redhat.com> - 1.0.0-2
- Upstream changes (see CHANGELOG)
* Fri May 16 2008 Michael DeHaan <mdehaan(a)redhat.com> - 0.9.2-2
- Upstream changes (see CHANGELOG)
- moved /var/lib/cobbler/settings to /etc/cobbler/settings
* Fri May 9 2008 Michael DeHaan <mdehaan(a)redhat.com> - 0.9.1-1
- Upstream changes (see CHANGELOG)
- packaged /etc/cobbler/users.conf
- remaining CGI replaced with mod_python
* Tue Apr 8 2008 Michael DeHaan <mdehaan(a)redhat.com> - 0.8.3-2
- Upstream changes (see CHANGELOG)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cobbler' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 7 months