[SECURITY] Fedora 9 Update: phpMyAdmin-2.11.9.2-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8335
2008-09-24 12:40:17
--------------------------------------------------------------------------------
Name : phpMyAdmin
Product : Fedora 9
Version : 2.11.9.2
Release : 1.fc9
URL : http://www.phpmyadmin.net/
Summary : Web based MySQL browser written in php
Description :
phpMyAdmin is a tool written in PHP intended to handle the administration of
MySQL over the Web. Currently it can create and drop databases,
create/drop/alter tables, delete/edit/add fields, execute any SQL statement,
manage keys on fields, manage privileges,export data into various formats and
is available in 50 languages
--------------------------------------------------------------------------------
Update Information:
This update by upstream to phpMyAdmin 2.11.9.2 solves a not yet clearly
specified XSS in MSIE using NUL byte vulnerability. - [auth] Links to version
number on login screen - [core] PMA does not start if ini_set() is disabled
- [bookmarks] Saved queries greater than 1000 chars not displayed - [export]
Export type "replace" does not work - [export] DROP PROCEDURE needs IF EXISTS
- [export] Numbers in Excel export - [lang] Norwegian UTF-8 original file
remerged - [parser] Undefined variable seen_from - [security] Code execution
vulnerability - [security] XSS in MSIE using NUL byte
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 22 2008 Robert Scheck <robert(a)fedoraproject.org> 2.11.9.2-1
- Upstream released 2.11.9.2 (#463260)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #463260 - phpMyAdmin: (Currently unspecified) XSS in MSIE using NUL byte
https://bugzilla.redhat.com/show_bug.cgi?id=463260
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update phpMyAdmin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 9 Update: jgoodies-forms-1.2.0-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-4208
2008-09-24 12:40:17
--------------------------------------------------------------------------------
Name : jgoodies-forms
Product : Fedora 9
Version : 1.2.0
Release : 1.fc9
URL : http://www.jgoodies.com/freeware/forms/
Summary : Framework to lay out and implement elegant Swing panels in Java
Description :
The JGoodies Forms framework helps you lay out and implement elegant Swing
panels quickly and consistently. It makes simple things easy and the hard
stuff possible, the good design easy and the bad difficult.
Main Benefits:
* Powerful, flexible and precise layout
* Easy to work with and quite easy to learn
* Faster UI production
* Better UI code readability
* Leads to better style guide compliance
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 1.2.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 19 2008 Mary Ellen Foster <mefoster at gmail.com> 1.2.0-1
- Update to 1.2.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update jgoodies-forms' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 9 Update: perl-Test-Expect-0.31-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8334
2008-09-24 12:40:12
--------------------------------------------------------------------------------
Name : perl-Test-Expect
Product : Fedora 9
Version : 0.31
Release : 1.fc9
URL : http://search.cpan.org/dist/Test-Expect/
Summary : Automated driving and testing of terminal-based programs
Description :
Test::Expect is a module for automated driving and testing of
terminal-based programs. It is handy for testing interactive programs
which have a prompt, and is based on the same concepts as the Tcl Expect
tool. As in Expect::Simple, the Expect object is made available for
tweaking.
Test::Expect is intended for use in a test script.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 16 2008 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 0.31-1
- Upgrade to 0.31 (Required by rt3's testsuite, BZ 462440).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #462440 - Please upgrade to 0.31
https://bugzilla.redhat.com/show_bug.cgi?id=462440
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Test-Expect' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 8 Update: bti-005-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7252
2008-09-24 12:40:12
--------------------------------------------------------------------------------
Name : bti
Product : Fedora 8
Version : 005
Release : 1.fc8
URL : http://www.kernel.org/pub/linux/kernel/people/gregkh/bti
Summary : Bash Twitter Idiocy
Description :
Allows you to pipe your bash input to twitter in an easy and fast manner
to annoy the whole world.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #460615 - Review Request: bti - Bash Twitter Idiocy
https://bugzilla.redhat.com/show_bug.cgi?id=460615
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update bti' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 8 Update: curl-7.18.2-6.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8332
2008-09-24 12:40:01
--------------------------------------------------------------------------------
Name : curl
Product : Fedora 8
Version : 7.18.2
Release : 6.fc8
URL : http://curl.haxx.se/
Summary : A utility for getting files from remote servers (FTP, HTTP, and others)
Description :
cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS,
DICT, TELNET and TFTP servers, using any of the supported protocols.
cURL is designed to work without user interaction or any kind of
interactivity. cURL offers many useful capabilities, like proxy support,
user authentication, FTP upload, HTTP post, and file transfer resume.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 19 2008 Jindrich Novy <jnovy(a)redhat.com> 7.18.2-6
- enable support for libssh2 (#453958)
- update the thread safety patch, thanks to Rob Crittenden (#462217)
* Wed Sep 3 2008 Warren Togami <wtogami(a)redhat.com> 7.18.2-5
- add thread safety to libcurl NSS cleanup() functions (#459297)
* Fri Aug 22 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> 7.18.2-3
- undo mini libcurl.so.3
* Mon Aug 11 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> 7.18.2-2
- make miniature library for libcurl.so.3
* Thu Jun 19 2008 Jindrich Novy <jnovy(a)redhat.com> 7.18.2-1
- update to 7.18.2 (fixes #397911)
- fix curl_multi_perform() over a proxy (#450140), thanks to
Rob Crittenden
- spec cleanup, thanks to Paul Howarth (#225671)
- drop BR: libtool
- convert CHANGES and README to UTF-8
- _GNU_SOURCE in CFLAGS is no more needed
- remove bogus rpath
- add ABI docs for libcurl
- drop curl-config patch, obsoleted by @SSL_ENABLED@ autoconf
substitution (#432667)
- drop sslgen patch -> applied upstream
- add BuildRequires krb5-devel to build curl with GSSAPI
negotiate support (#442069)
* Tue Jan 22 2008 Jindrich Novy <jnovy(a)redhat.com> 7.17.1-2
- do not attempt to close a bad socket (#427966),
thanks to Caolan McNamara
- enable LDAPS support (#225671)
- update description to contain complete supported servers list (#393861)
* Sun Nov 18 2007 Jindrich Novy <jnovy(a)redhat.com> 7.17.1-1
- update to curl 7.17.1
- include patch to enable SSL usage in NSS when a socket is opened
nonblocking, thanks to Rob Crittenden (rcritten(a)redhat.com) (#387991)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #462217 - libcurl hanging up on series requests to ssl sites
https://bugzilla.redhat.com/show_bug.cgi?id=462217
[ 2 ] Bug #453958 - Enable support for SFTP and SCP
https://bugzilla.redhat.com/show_bug.cgi?id=453958
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update curl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 9 Update: perl-CGI-Ajax-0.706-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7969
2008-09-24 12:39:55
--------------------------------------------------------------------------------
Name : perl-CGI-Ajax
Product : Fedora 9
Version : 0.706
Release : 1.fc9
URL : http://search.cpan.org/dist/CGI-Ajax/
Summary : Perl-specific system for writing Asynchronous web applications
Description :
CGI::Ajax is an object-oriented module that provides a unique mechanism for
using perl code asynchronously from javascript- enhanced HTML pages.
CGI::Ajax unburdens the user from having to write extensive javascript,
except for associating an exported method with a document-defined event
(such as onClick, onKeyUp, etc). CGI::Ajax also mixes well with HTML
containing more complex javascript.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 8 2008 Chris Weyl <cweyl(a)alumni.drew.edu> 0.706-1
- update to 0.706
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-CGI-Ajax' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 9 Update: automaton-1.10r5-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8018
2008-09-24 12:39:51
--------------------------------------------------------------------------------
Name : automaton
Product : Fedora 9
Version : 1.10r5
Release : 1.fc9
URL : http://www.brics.dk/automaton/
Summary : A Java finite state automata/regular expression library
Description :
This Java package contains a DFA/NFA (finite-state automata) implementation
with Unicode alphabet (UTF-16) and support for the standard regular expression
operations (concatenation, union, Kleene star) and a number of non-standard
ones (intersection, complement, etc.).
In contrast to many other automaton/regexp packages, this package is fast,
compact, and implements real, unrestricted regular operations. It uses a
symbolic representation based on intervals of Unicode characters.
--------------------------------------------------------------------------------
Update Information:
* Fri Sep 12 2008 Jerry James <loganjerry(a)gmail.com> - 1.10r5-1 - Upgrade to
1.10-5
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update automaton' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 9 Update: python-storm-0.13-2.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7390
2008-09-24 12:39:51
--------------------------------------------------------------------------------
Name : python-storm
Product : Fedora 9
Version : 0.13
Release : 2.fc9
URL : https://storm.canonical.com/
Summary : An object-relational mapper (ORM) for Python
Description :
Storm is an object-relational mapper (ORM) for Python developed at
Canonical. The project has been in development for more than a year
for use in Canonical projects such as [WWW] Launchpad, and has
recently been released as an open-source product.
Highlights:
* Clean and lightweight API offers a short learning curve and
long-term maintainability.
* Storm is developed in a test-driven manner. An untested line of
code is considered a bug.
* Storm needs no special class constructors, nor imperative base
classes.
* Storm is well designed (different classes have very clear
boundaries, with small and clean public APIs).
* Designed from day one to work both with thin relational databases,
such as SQLite, and big iron systems like PostgreSQL and MySQL.
* Storm is easy to debug, since its code is written with a KISS
principle, and thus is easy to understand.
* Designed from day one to work both at the low end, with trivial
small databases, and the high end, with applications accessing
billion row tables and committing to multiple database backends.
* It's very easy to write and support backends for Storm (current
backends have around 100 lines of code).
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #430429 - Review Request: python-storm - An object-relational mapper (ORM) for Python
https://bugzilla.redhat.com/show_bug.cgi?id=430429
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-storm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 9 Update: perl-MooseX-Getopt-0.15-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7848
2008-09-24 12:39:51
--------------------------------------------------------------------------------
Name : perl-MooseX-Getopt
Product : Fedora 9
Version : 0.15
Release : 1.fc9
URL : http://search.cpan.org/dist/MooseX-Getopt/
Summary : Moose role for processing command line options
Description :
This is a Moose role which provides an alternate constructor for creating
objects using parameters passed in from the command line.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 8 2008 Chris Weyl <cweyl(a)alumni.drew.edu> 0.15-1
- update to 0.15
* Thu Jul 10 2008 Chris Weyl <cweyl(a)alumni.drew.edu> 0.13-2
- tweak Getopt::Long dep to 2.35; passes tests just fine with 2.35, and that's
what we have in F-8 perl
* Sat Jun 28 2008 Chris Weyl <cweyl(a)alumni.drew.edu> 0.13-1
- update to 0.13
- switch to Module::Install invocations, rather than Module::Build
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-MooseX-Getopt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months
Fedora 9 Update: wavpack-4.50.1-2.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7682
2008-09-24 12:39:51
--------------------------------------------------------------------------------
Name : wavpack
Product : Fedora 9
Version : 4.50.1
Release : 2.fc9
URL : http://www.wavpack.com/
Summary : A completely open audiocodec
Description :
WavPack is a completely open audio compression format providing lossless,
high-quality lossy, and a unique hybrid compression mode. Although the
technology is loosely based on previous versions of WavPack, the new
version 4 format has been designed from the ground up to offer unparalleled
performance and functionality.
--------------------------------------------------------------------------------
Update Information:
%changelog * Sat Aug 30 2008 Peter Lemenkov <lemenkov(a)gmail.com> 4.50.1-2 -
Fixes to meet the Fedora Packaging Guidelines
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 30 2008 Peter Lemenkov <lemenkov(a)gmail.com> 4.50.1-2
- Fixes to meet the Fedora Packaging Guidelines
* Sun Aug 24 2008 Peter Lemenkov <lemenkov(a)gmail.com> 4.50.1-1
- Version 4.50.1
* Wed Jun 18 2008 Peter Lemenkov <lemenkov(a)gmail.com> 4.50-1
- Version 4.50
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update wavpack' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 8 months