[SECURITY] Fedora 11 Update: poppler-0.10.7-3.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10845
2009-10-27 05:03:29
--------------------------------------------------------------------------------
Name : poppler
Product : Fedora 11
Version : 0.10.7
Release : 3.fc11
URL : http://poppler.freedesktop.org/
Summary : PDF rendering library
Description :
Poppler, a PDF rendering library, is a fork of the xpdf PDF
viewer developed by Derek Noonburg of Glyph and Cog, LLC.
--------------------------------------------------------------------------------
Update Information:
This build addresses several recent security issues.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 25 2009 Rex Dieter <rdieter(a)fedoraproject.org> - 0.10.7-3
- CVE-2009-3603 xpdf/popppler: SplashBitmap::SplashBitmap
integer overflow (#526915)
- CVE-2009-3604 xpdf/poppler: Splash::drawImage integer overflow
and missing allocation return value check(#526911)
- CVE-2009-3606 xpdf/poppler: PSOutputDev::doImageL1Sep
integer overflow (#526877)
- CVE-2009-3607 poppler: create_surface_from_thumbnail_data
integer overflow (#526924)
- CVE-2009-3608 xpdf/poppler: integer overflow in
ObjectStream::ObjectStream (#526637)
- CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream
integer overflow (#526893)
* Mon Jun 22 2009 Rex Dieter <rdieter(a)fedoraproject.org> - 0.10.7-2
- reduce lib deps in qt/qt4 pkg-config support
* Fri Jun 19 2009 Rex Dieter <rdieter(a)fedoraproject.org> - 0.10.7-1
- Update to 0.10.7
- --enable-libjpeg --enable-libopenjpeg
- (explicitly) --disable-zlib
- %files: track sonames
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #526915 - CVE-2009-3603 xpdf/poppler: SplashBitmap::SplashBitmap integer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=526915
[ 2 ] Bug #526911 - CVE-2009-3604 xpdf/poppler: Splash::drawImage integer overflow and missing allocation return value check
https://bugzilla.redhat.com/show_bug.cgi?id=526911
[ 3 ] Bug #526877 - CVE-2009-3606 xpdf/poppler: PSOutputDev::doImageL1Sep integer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=526877
[ 4 ] Bug #526924 - CVE-2009-3607 poppler: create_surface_from_thumbnail_data integer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=526924
[ 5 ] Bug #526637 - CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)
https://bugzilla.redhat.com/show_bug.cgi?id=526637
[ 6 ] Bug #526893 - CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=526893
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update poppler' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 10 Update: checkgmail-1.13-4.20091022svn.fc10
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10844
2009-10-27 05:03:29
--------------------------------------------------------------------------------
Name : checkgmail
Product : Fedora 10
Version : 1.13
Release : 4.20091022svn.fc10
URL : http://checkgmail.sf.net
Summary : System Tray Application that checks a Gmail Account for New Mail
Description :
CheckGmail is a system tray application that checks a Gmail account for new
mail. It is fast, secure, and uses minimal bandwidth via the use of Atom feeds.
--------------------------------------------------------------------------------
Update Information:
Fix authentication to work again. Add a desktop file and session auto start
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 22 2009 Rahul Sundaram <sundaram(a)fedoraproject.org> - 1.13-4.20091022svn
- Add a desktop file
- Add it to session autostart
- Pull svn snapshot to fix authentication issue
- Fix post release snapshot naming and remove redundant requires
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update checkgmail' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 11 Update: crda-1.1.0_2009.09.08-3.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10228
2009-10-03 17:54:09
--------------------------------------------------------------------------------
Name : crda
Product : Fedora 11
Version : 1.1.0_2009.09.08
Release : 3.fc11
URL : http://www.linuxwireless.org/en/developers/Regulatory/CRDA
Summary : Regulatory compliance daemon for 802.11 wireless networking
Description :
CRDA acts as the udev helper for communication between the kernel
and userspace for regulatory compliance. It relies on nl80211
for communication. CRDA is intended to be run only through udev
communication from the kernel.
--------------------------------------------------------------------------------
Update Information:
Move tools to /sbin for use during boot w/ network /usr...
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 1 2009 John W. Linville <linville(a)redhat.com> 1.1.0_2009.09.08-3
- Move regdb to /lib/crda to facilitate /usr mounted over wireless network
* Wed Sep 9 2009 John W. Linville <linville(a)redhat.com> 1.1.0_2009.09.08-2
- Update wireless-regdb to version 2009.09.08
- Start resetting release number with version updates
- Resync nvr with what is in rawhide
* Sun Jun 7 2009 Dennis Gilmore <dennis(a)ausil.us> 1.1.0_2009.04.17-12
- br kerner-headers not kernel-devel not all arches have kernel-devel
- kernel-devel is for building kernel modules
* Wed May 13 2009 John W. Linville <linville(a)redhat.com> 1.1.0_2009.04.17-11
- Update crda version to version 1.1.0
- Update wireless-regdb to version 2009.04.17
* Fri Apr 17 2009 John W. Linville <linville(a)redhat.com> 1.0.1_2009.04.16-10
- Update wireless-regdb version to pick-up recent updates and fixes (#496392)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #523298 - crda fails to set regulatory domain on boot, succeeds on module unload/reload.
https://bugzilla.redhat.com/show_bug.cgi?id=523298
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update crda' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 11 Update: R-qtl-1.14.2-1.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10368
2009-10-09 02:21:54
--------------------------------------------------------------------------------
Name : R-qtl
Product : Fedora 11
Version : 1.14.2
Release : 1.fc11
URL : http://www.rqtl.org/
Summary : Tools for analyzing QTL experiments
Description :
R-qtl is an extensible, interactive environment for mapping
quantitative trait loci (QTLs) in experimental crosses. Our goal is to
make complex QTL mapping methods widely accessible and allow users to
focus on modeling rather than computing.
A key component of computational methods for QTL mapping is the hidden
Markov model (HMM) technology for dealing with missing genotype
data. We have implemented the main HMM algorithms, with allowance for
the presence of genotyping errors, for backcrosses, intercrosses, and
phase-known four-way crosses.
The current version of R-qtl includes facilities for estimating
genetic maps, identifying genotyping errors, and performing single-QTL
genome scans and two-QTL, two-dimensional genome scans, by interval
mapping (with the EM algorithm), Haley-Knott regression, and multiple
imputation. All of this may be done in the presence of covariates
(such as sex, age or treatment). One may also fit higher-order QTL
models by multiple imputation and Haley-Knott regression.
--------------------------------------------------------------------------------
Update Information:
New release from http://www.rqtl.org/ See http://www.rqtl.org/STATUS.txt for
what was changed.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 7 2009 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 1.14.2-1
- New upstream release
- Disable the check since it trips on a missing suggested package
- Change license tag to GPLv3 to reflect an upstream license change
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.11-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Sat May 23 2009 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 1.11-1
- New upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update R-qtl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 11 Update: python-oauth-1.0.1-1.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10842
2009-10-27 05:03:26
--------------------------------------------------------------------------------
Name : python-oauth
Product : Fedora 11
Version : 1.0.1
Release : 1.fc11
URL : http://code.google.com/p/oauth/
Summary : Library for OAuth version 1.0a
Description :
Library for OAuth version 1.0a.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-oauth' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 11 Update: django-flash-1.6.2-2.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10842
2009-10-27 05:03:26
--------------------------------------------------------------------------------
Name : django-flash
Product : Fedora 11
Version : 1.6.2
Release : 2.fc11
URL : http://djangoflash.destaquenet.com/
Summary : A Django extension to provide support for Rails-like flash
Description :
A simple Django extension that provides support for Rails-like flash messages.
The flash is a temporary storage mechanism that looks like a Python
dictionary, so you can store values associated with keys and later retrieve
them. It has one special property: by default, values stored into the flash
during the processing of a request will be available during the processing
of the immediately following request. Once that second request has been
processed, those values are removed automatically from the storage.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update django-flash' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 11 Update: python-batchhttp-1.0-1.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10842
2009-10-27 05:03:26
--------------------------------------------------------------------------------
Name : python-batchhttp
Product : Fedora 11
Version : 1.0
Release : 1.fc11
URL : http://sixapart.github.com/batchhttp/
Summary : Parallel fetching of HTTP resources through MIME multipart
Description :
This package's BatchClient applies standard MIME multipart encoding to HTTP
messages, providing a standards-conservant technique for making parallelizable
HTTP requests over a single proxy connection.
To make a batch request, open a new request on a BatchClient instance and add
your subrequests, along with callbacks that will receive the subresponses.
Once all parallelized requests are added, complete the request; the request is
made and the batched subresponses are provided to your callbacks.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-batchhttp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 11 Update: python-remoteobjects-1.0-2.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10842
2009-10-27 05:03:26
--------------------------------------------------------------------------------
Name : python-remoteobjects
Product : Fedora 11
Version : 1.0
Release : 2.fc11
URL : http://sixapart.github.com/remoteobjects/
Summary : An Object RESTational Model
Description :
remoteobjects are real subclassable Python objects on which you can build a
rich API library.
remoteobjects provides easy coding and transfer between Python objects and a
JSON REST API. You can define the resources in a RESTful API as RemoteObject
classes and their properties. These objects then support using the basic HTTP
verbs to request and submit data to the API.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-remoteobjects' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 11 Update: python-typepad-1.0-1.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10842
2009-10-27 05:03:26
--------------------------------------------------------------------------------
Name : python-typepad
Product : Fedora 11
Version : 1.0
Release : 1.fc11
URL : http://sixapart.github.com/python-typepad-api/
Summary : Connectivity to the TypePad API through remote objects
Description :
The typepad package contains RemoteObject implementations for TypePad's
content objects and an OAuth client for making authenticated requests to
the API.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-typepad' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months
Fedora 11 Update: django-typepad-1.0.1-1.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10842
2009-10-27 05:03:26
--------------------------------------------------------------------------------
Name : django-typepad
Product : Fedora 11
Version : 1.0.1
Release : 1.fc11
URL : http://sixapart.github.com/typepadapp/
Summary : A helper Django app for making TypePad applications
Description :
The typepadapp Django application provides all the necessary
underpinnings for you to build TypePad cloud applications.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update django-typepad' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 6 months