package-announce December 2010

package-announce@lists.fedoraproject.org

1 participants
1038 discussions

[SECURITY] Fedora 14 Update: mantis-1.1.8-5.fc14
by updates＠fedoraproject.org 31 Dec '10

31 Dec '10

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-19078 2010-12-19 19:53:26 -------------------------------------------------------------------------------- Name : mantis Product : Fedora 14 Version : 1.1.8 Release : 5.fc14 URL : http://www.mantisbt.org/ Summary : Web-based issue tracking system Description : Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis-1.1.8 When the package has finished installing, you will need to perform some additional configuration steps; these are described in: /usr/share/doc/mantis-1.1.8/README.Fedora -------------------------------------------------------------------------------- Update Information: This update fixes multiple security issues recently found in Mantis. For more details about the issues in upstream bugs: http://www.mantisbt.org/bugs/view.php?id=12607 http://www.mantisbt.org/bugs/view.php?id=12309 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 17 2010 Gianluca Sforna <giallu(a)gmail.com> - 1.1.8.5 - Updated description (#638942) - Fix CVE-2010-3763 (#640746) - Fix CVE-2010-4348, CVE-2010-4349, CVE-2010-4350 (#663299, #663230) -------------------------------------------------------------------------------- References: [ 1 ] Bug #640746 - CVE-2010-3763 MantisBT: XSS in Summary page https://bugzilla.redhat.com/show_bug.cgi?id=640746 [ 2 ] Bug #663230 - CVE-2010-4348 CVE-2010-4349 CVE-2010-4350 MantisBT <1.2.4 multiple vulnerabilities (LFI, XSS and PD) https://bugzilla.redhat.com/show_bug.cgi?id=663230 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update mantis' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 13 Update: luci-0.22.6-1.fc13
by updates＠fedoraproject.org 31 Dec '10

31 Dec '10

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-18921 2010-12-15 08:17:26 -------------------------------------------------------------------------------- Name : luci Product : Fedora 13 Version : 0.22.6 Release : 1.fc13 URL : http://sources.redhat.com/cluster/wiki/Luci Summary : Web-based high availability administration application Description : Luci is a web-based high availability administration application built on the TurboGears 2 framework. -------------------------------------------------------------------------------- Update Information: This update addresses several major bugs and improves luci compatibility with Fedora cluster packages. -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 13 2010 Fabio M. Di Nitto <fdinitto(a)redhat.com> - 0.22.6-2 - Fix bad merge from upstream spec file * Mon Dec 13 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.6-1 - New upstream release (0.22.6) * Tue Nov 16 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.5-1 - New upstream release (0.22.5) - Display all fence and resource agents for Fedora clusters - Add support for fence_rhevm and fence_cisco_ucs - Cleanup of cluster.conf handler - Fixes for running on TG2.1 - Allow configuration of saslauthd - Enforce a 15 minute idle session timeout - Add back node uptime to the cluster node list display - Allow users to configure the ricci address and port for cluster nodes - Fixes to cope with cluster membership changes made outside of luci * Thu Oct 21 2010 Fabio M. Di Nitto <fdinitto(a)redhat.com> - 0.22.4-2.0.b9faf868074git - Fix CVE-2010-3852 (bug #645404) * Thu Aug 19 2010 Fabio M. Di Nitto <fdinitto(a)redhat.com> - 0.22.4-1.0.b9faf868074git - New upstream release (0.22.4) - Steal fixes from upstream git up to b9faf868074git Fix bz622562 (add support for unfencing) Fix bz624819 (add compatibility with TG2.1) - Update spec file to support alphatag * Sun Aug 8 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.4-1 - Version 0.22.4 - Remove extra debugging logging from the fix for bz619220 - Fix bz614130 (implement tomcat6 resource agent) - Fix bz618578 (ip resource should have netmask field) - Fix bz615926 (luci does not handle qdisk / cman config correctly) - Fix bz619220 (Luci does extra queries which slows down page load) - Fix bz619652 (luci sometimes prints a traceback when deleting multiple nodes at the same time) - Fix bz619641 (luci init script prints a python traceback when status is queried by a non-root user) * Fri Jul 30 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.3-1 - Version 0.22.3 * Thu Jul 29 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.2-11 - Fix bz614433 (cannot configure ipport for fence agents) - Fix bz617575 (Unclear options when configuring a cluster) - Fix bz617591 (Some fields when adding an IP address are unclear) - Fix bz617602 (Fields in "Fence Daemon Properties" have no units) - Fix bz618577 (wrong message displayed when adding ip resource) - Fix bz619220 (Luci does extra queries which slows down page load) * Mon Jul 26 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.2-10 - Additional fixes for bz600027 (Fix cluster service creation/configuration UX issues) - Additional fixes for bz600055 ("cluster busy" dialog does not work) - Fix bz618424 (Can't remove nodes in node add dialog or create cluster dialog) - Fix bz616382 (luci db error removing a node from a cluster) - Fix bz613871 (luci should not give ungraceful error messages when encountering fence devices that it does not recognize/support) * Mon Jul 26 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.2-9 - Fix bz600027 (Fix cluster service creation/configuration UX issues) - Fix bz600040 (Add nodes to existing cluster does not work) - Fix bz600045 (Removing nodes from existing clusters fails) - Fix bz600055 ("cluster busy" dialog does not work) - Fix bz613868 (Remove fence_virsh from luci UI since this fence is not supported with RHEL HA/Cluster) - Fix bz614434 (adding an IP resource ends with an error 500) - Fix bz614439 (adding GFS2 resource type in RHEL6 cluster is "interesting") - Fix bz615096 (Traceback when unchecking "Prioritized" in Failover Domains) - Fix bz615468 (When creating a new failover domain, adding nodes has no effect) - Fix bz615872 (unicode error deleting a cluster) - Fix bz615889 (luci cannot start an imported cluster) - Fix bz615911 (luci shows many unsupported fence devices when adding a new fence device) - Fix bz615917 (adding per node fence instance results in error 500 if no fence devices are configured) - Fix bz615929 (luci generated cluster.conf with fence_scsi fails to validate) - Fix bz616094 (Deleting a fence device which is in use, causes a traceback on Nodes page) - Fix bz616228 (Clicking on cluster from manage clusters page results in traceback (500 error)) - Fix bz616230 (Clicking on the join button doesn't work on nodes page) - Fix bz616244 (Clicking on the leave button doesn't work on nodes page.) * Wed Jul 14 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.2-8 - Fix bz600021 (Fix node fence configuration UX issues) * Tue Jul 13 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.2-7 - Build fix for bz600056 * Tue Jul 13 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.2-6 - Build fix for bz600056 * Tue Jul 13 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.2-5 - Fix bz604740 (Support nfsserver resource agent which is for NFSv4 and NFSv3) - Fix bz600056 (Replace logo image) * Fri Jul 9 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.2-4 - Fix bz600059 (Hide optional fields for fence_scsi) - Fix bz600077 (cman "two_node" attribute should not be set when using qdisk) - Fix bz600083 (Add text to broadcast mode to note that it is for demos only - no production support) - Fix bz605780 (Qdisk shouldn't be part of the main page, it should be in the configuration tab) * Fri Jun 18 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.2-3 - Fix bz598859 (Adding fence_xvm fence device through luci interface throws TypeError Traceback) - Fix bz599074 ("Use same password for all nodes" doesn't work.) - Fix bz599080 (Conga ignores "reboot nodes" check box) - Fix bz600047 (luci allows deletion of global resources that are used by services) - Fix bz600050 (luci requires wrongly requires users to fill interval / tko / minimum score / votes fields for qdisk configuration) - Fix bz600052 (luci allows deletion of the last qdisk heuristics row) - Fix bz600058 (ssh_identity field values are dropped) - Fix bz600060 (Formatting error on fence devices overview page) - Fix bz600061 (Default values not populated in advanced network configuration) - Fix bz600066 (Update resource agent labels) - Fix bz600069 (Configuration page always returns to General Properties Page) - Fix bz600071 (If luci cannot communicate with the nodes they don't appear in the list of nodes) - Fix bz600073 (Update resource agent list) - Fix bz600074 (Fix display error on the resource list page) - Fix bz600075 (update fence_virt / fence_xvm configuration) - Fix bz600076 (When creating a cluster no default radio button is selected for Download Packages/Use locally installed packages) - Fix bz600079 (Unable to edit existing resources) - Fix bz600080 (Homebase page only shows a '-' for Nodes Joined) - Fix bz602482 (Multicast settings are not relayed to cluster.conf and no default) - Fix bz603833 ("Nodes Joined" in main page is inaccurate when no nodes have joined) * Tue Jun 1 2010 Chris Feist <cfeist(a)redhat.com> - 0.22.2-2 - Fix missing requires which will cause some installations to fail - Resolves: rhbz#598725 * Wed May 26 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.2-1 - Fix for bugs related to cluster service creation and editing (bz593836). * Wed May 26 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.1-3 - Fix remaining unresolved issues for 593836 - Make sure the cluster version is updated when creating services - Fix a bug that caused IP resources to fail in services * Wed May 26 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.1-2 - Rebuild to fix a bug introduced during last build. * Wed May 26 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.1-1 - Fix service creation, display, and edit. - Fix qdisk heuristic submission. * Wed May 19 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.0-16 - Rebase to upstream * Mon May 17 2010 Chris Feist <cfeist(a)redhat.com> - 0.22.0-13 - Added static UID/GID for luci user - Resolves: rhbz#585988 * Wed May 12 2010 Chris Feist <cfeist(a)redhat.com> - 0.22.0-11 - Add support for PAM authentication - Resync with main branch - Resolves: rhbz#518206 * Wed May 12 2010 Fabio M. Di Nitto <fdinitto(a)redhat.com> - 0.21.0-8 - Do not build on ppc and ppc64. Resolves: rhbz#590987 * Tue Apr 27 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.0-4 - Update from devel tree. * Thu Apr 22 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.0-3 - Update from development tree. * Thu Apr 8 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.0-2 - Update from development tree. * Tue Mar 9 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.0-1 - Rebase to luci version 0.22.0 * Mon Mar 1 2010 Fabio M. Di Nitto <fdinitto(a)redhat.com> - 0.21.0-7 - Resolves: rhbz#568005 - Add ExcludeArch to drop s390 and s390x * Tue Jan 19 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.21.0-6 - Remove dependency on python-tg-devtools -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update luci' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 14 Update: mingw32-sigar-1.6.5-0.3.git833ca18.fc14
by updates＠fedoraproject.org 31 Dec '10

31 Dec '10

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-19187 2010-12-22 19:33:27 -------------------------------------------------------------------------------- Name : mingw32-sigar Product : Fedora 14 Version : 1.6.5 Release : 0.3.git833ca18.fc14 URL : http://sigar.hyperic.com/ Summary : MinGW Windows sigar library Description : The Sigar API provides a portable interface for gathering system information such as: - System memory, swap, CPU, load average, uptime, logins - Per-process memory, CPU, credential info, state, arguments, environment, open files - File system detection and metrics - Network interface detection, configuration info and metrics - Network route and connection tables This information is available in most operating systems, but each OS has their own way(s) providing it. SIGAR provides developers with one API to access this information regardless of the underlying platform. -------------------------------------------------------------------------------- Update Information: Initial import of mingw32-sigar. -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update mingw32-sigar' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 13 Update: mingw32-tcl-8.5.8-1.fc13
by updates＠fedoraproject.org 31 Dec '10

31 Dec '10

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-19213 2010-12-23 19:38:12 -------------------------------------------------------------------------------- Name : mingw32-tcl Product : Fedora 13 Version : 8.5.8 Release : 1.fc13 URL : http://tcl.sourceforge.net/ Summary : MinGW Windows Tool Command Language, pronounced tickle Description : The Tcl (Tool Command Language) provides a powerful platform for creating integration applications that tie together diverse applications, protocols, devices, and frameworks. When paired with the Tk toolkit, Tcl provides a fastest and powerful way to create cross-platform GUI applications. Tcl can also be used for a variety of web-related tasks and for creating powerful command languages for applications. %{_mingw32_debug_package} -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 23 2010 Thomas Sailer <t.sailer(a)alumni.ethz.ch> - 8.5.8-1 - update to 8.5.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #665350 - Please upgrade mingw32-tcl to 8.5.9 on F13/F14 https://bugzilla.redhat.com/show_bug.cgi?id=665350 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update mingw32-tcl' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 13 Update: CQRlib-1.1.2-1.fc13
by updates＠fedoraproject.org 31 Dec '10

31 Dec '10

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-19208 2010-12-23 19:38:03 -------------------------------------------------------------------------------- Name : CQRlib Product : Fedora 13 Version : 1.1.2 Release : 1.fc13 URL : http://cqrlib.sourceforge.net/ Summary : ANSI C API for quaternion arithmetic and rotation Description : CQRlib is an ANSI C implementation of a utility library for quaternion arithmetic and quaternion rotation math. -------------------------------------------------------------------------------- Update Information: Update to 1.1.2. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 22 2010 Takanori MATSUURA <t.matsuu(a)gmail.com> - 1.1.2-1 - update to 1.1.2 * Mon Oct 18 2010 Takanori MATSUURA <t.matsuu(a)gmail.com> - 1.1.1-2 - use "make all" instead of "make" - add %check -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update CQRlib' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 13 Update: fluxbox-1.1.1-7.fc13
by updates＠fedoraproject.org 31 Dec '10

31 Dec '10

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-18880 2010-12-15 08:16:10 -------------------------------------------------------------------------------- Name : fluxbox Product : Fedora 13 Version : 1.1.1 Release : 7.fc13 URL : http://fluxbox.sourceforge.net Summary : Window Manager based on Blackbox Description : Fluxbox is yet another windowmanager for X. It's based on the Blackbox 0.61.1 code. Fluxbox looks like blackbox and handles styles, colors, window placement and similar thing exactly like blackbox (100% theme/style compatibility). So what's the difference between fluxbox and blackbox then? The answer is: LOTS! Have a look at the homepage for more info ;) -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 14 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.1.1-7 - obsolete fluxconf (#662836) * Wed Dec 8 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.1.1-6 - add -lfontconfig (#660981) -------------------------------------------------------------------------------- References: [ 1 ] Bug #662836 - fluxconf too old, unmaintained, incompatible with current fluxbox - remove from repositories https://bugzilla.redhat.com/show_bug.cgi?id=662836 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update fluxbox' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 13 Update: rxvt-unicode-9.10-1.fc13
by updates＠fedoraproject.org 31 Dec '10

31 Dec '10

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-19093 2010-12-19 19:53:56 -------------------------------------------------------------------------------- Name : rxvt-unicode Product : Fedora 13 Version : 9.10 Release : 1.fc13 URL : http://software.schmorp.de/ Summary : Unicode version of rxvt Description : rxvt-unicode is a clone of the well known terminal emulator rxvt, modified to store text in Unicode (either UCS-2 or UCS-4) and to use locale-correct input and output. It also supports mixing multiple fonts at the same time, including Xft fonts. -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 19 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 9.10-1 - version upgrade * Mon Nov 29 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 9.09-4 - include terminfo for 256color version for now * Thu Nov 18 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 9.09-3 - re-add frills build option for standard versions - bind scrolling actions to crtl+up/down/pgup/pgdown as shift will break the tabbing support * Mon Nov 15 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 9.09-2 - Rework to provide four versions: - standard (rxvt-unicode) - multi-language support (rxvt-unicode-ml) - 256color version (rxvt-unicode-256color) - 256color multi-language (rxvt-unicode-256color-ml) * Sun Nov 14 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 9.09-1 - version upgrade (fixes #581373) - allow scrolling with mod+up/down (#510944) - fixup desktop file (#617519) - spec file cleanups * Wed Jun 2 2010 Marcela Maslanova <mmaslano(a)redhat.com> - 9.07-2 - Mass rebuild with perl-5.12.0 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update rxvt-unicode' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 14 Update: nautilus-open-terminal-0.19-0.2.32a1da0160git.fc14
by updates＠fedoraproject.org 31 Dec '10

31 Dec '10

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-19206 2010-12-23 19:37:59 -------------------------------------------------------------------------------- Name : nautilus-open-terminal Product : Fedora 14 Version : 0.19 Release : 0.2.32a1da0160git.fc14 URL : http://download.gnome.org/sources/nautilus-open-terminal/ Summary : Nautilus extension for an open terminal shortcut Description : The nautilus-open-terminal extension provides a right-click "Open Terminal" option for nautilus users who prefer that option. -------------------------------------------------------------------------------- Update Information: This update restores a missing icon. The missing icon was due to the gnome-icon-theme package no longer carrying multiple links to existing icons under different names. For more information on this change, refer to: http://pkgs.fedoraproject.org/gitweb/?p=gnome-icon-theme.git;a=commit;h=125… -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 22 2010 Paul W. Frields <stickster(a)gmail.com> - 0.19-0.2.32a1da0160git.fc14 - Fix missing icon problem (#653289) -------------------------------------------------------------------------------- References: [ 1 ] Bug #653289 - Icon missing from Open in Terminal menu entry https://bugzilla.redhat.com/show_bug.cgi?id=653289 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update nautilus-open-terminal' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 14 Update: fluxbox-1.1.1-7.fc14
by updates＠fedoraproject.org 31 Dec '10

31 Dec '10

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-18906 2010-12-15 08:16:58 -------------------------------------------------------------------------------- Name : fluxbox Product : Fedora 14 Version : 1.1.1 Release : 7.fc14 URL : http://fluxbox.sourceforge.net Summary : Window Manager based on Blackbox Description : Fluxbox is yet another windowmanager for X. It's based on the Blackbox 0.61.1 code. Fluxbox looks like blackbox and handles styles, colors, window placement and similar thing exactly like blackbox (100% theme/style compatibility). So what's the difference between fluxbox and blackbox then? The answer is: LOTS! Have a look at the homepage for more info ;) -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 14 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.1.1-7 - obsolete fluxconf (#662836) * Wed Dec 8 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 1.1.1-6 - add -lfontconfig (#660981) -------------------------------------------------------------------------------- References: [ 1 ] Bug #662836 - fluxconf too old, unmaintained, incompatible with current fluxbox - remove from repositories https://bugzilla.redhat.com/show_bug.cgi?id=662836 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update fluxbox' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 13 Update: mantis-1.1.8-5.fc13
by updates＠fedoraproject.org 31 Dec '10

31 Dec '10

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-19070 2010-12-19 19:53:11 -------------------------------------------------------------------------------- Name : mantis Product : Fedora 13 Version : 1.1.8 Release : 5.fc13 URL : http://www.mantisbt.org/ Summary : Web-based issue tracking system Description : Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis-1.1.8 When the package has finished installing, you will need to perform some additional configuration steps; these are described in: /usr/share/doc/mantis-1.1.8/README.Fedora -------------------------------------------------------------------------------- Update Information: This update fixes multiple security issues recently found in Mantis. For more details about the issues in upstream bugs: http://www.mantisbt.org/bugs/view.php?id=12607 http://www.mantisbt.org/bugs/view.php?id=12309 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 17 2010 Gianluca Sforna <giallu(a)gmail.com> - 1.1.8.5 - Updated description (#638942) - Fix CVE-2010-3763 (#640746) - Fix CVE-2010-4348, CVE-2010-4349, CVE-2010-4350 (#663299, #663230) * Mon Sep 20 2010 Gianluca Sforna <giallu(a)gmail.com> - 1.1.8-4 - Fix CVE-2010-3070 using system's NuSOAP (#633011) - Fix CVE-2010-2574 and CVE-2010-3303 (#633003 #634340) -------------------------------------------------------------------------------- References: [ 1 ] Bug #640746 - CVE-2010-3763 MantisBT: XSS in Summary page https://bugzilla.redhat.com/show_bug.cgi?id=640746 [ 2 ] Bug #663230 - CVE-2010-4348 CVE-2010-4349 CVE-2010-4350 MantisBT <1.2.4 multiple vulnerabilities (LFI, XSS and PD) https://bugzilla.redhat.com/show_bug.cgi?id=663230 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update mantis' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce December 2010