[SECURITY] Fedora 14 Update: tor-0.2.1.28-1400.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19147
2010-12-21 23:08:25
--------------------------------------------------------------------------------
Name : tor
Product : Fedora 14
Version : 0.2.1.28
Release : 1400.fc14
URL : http://tor.eff.org
Summary : Anonymizing overlay network for TCP (The onion router)
Description :
Tor is a connection-based low-latency anonymous communication system.
Applications connect to the local Tor proxy using the SOCKS protocol. The
local proxy chooses a path through a set of relays, in which each relay
knows its predecessor and successor, but no others. Traffic flowing down
the circuit is unwrapped by a symmetric key at each relay, which reveals
the downstream relay.
Warnings: Tor does no protocol cleaning. That means there is a danger
that application protocols and associated programs can be induced to
reveal information about the initiator. Tor depends on Privoxy and
similar protocol cleaners to solve this problem. This is alpha code,
and is even more likely than released code to have anonymity-spoiling
bugs. The present network is very small -- this further reduces the
strength of the anonymity provided. Tor is not presently suitable for
high-stakes anonymity.
--------------------------------------------------------------------------------
Update Information:
Major bugfixes:
* Fix a remotely exploitable bug that could be used to crash instances of Tor remotely by overflowing on the heap. Remote-code execution hasn't been confirmed, but can't be ruled out. Everyone should upgrade. (CVE-2010-1676)
Directory authority changes:
* Change IP address and ports for gabelmoo (v3 directory authority).
Minor features:
* Update to the December 1 2010 Maxmind GeoLite Country database.
https://blog.torproject.org/blog/tor-02128-released-security-patches
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 21 2010 Luke Macken <lmacken(a)redhat.com> - 0.2.1.28-1400
- updated to 0.2.1.28 (SECURITY: fixes a remotely exploitable heap overflow bug)
* Fri Nov 26 2010 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.2.1.27-1400
- updated to 0.2.1.27
- work around broken chkconfig by adding dummy Default-Start: in -lsb (#647512)
* Fri Nov 26 2010 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 0.2.1.26-1401
- fixed 'limit' statement in upstart script
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update tor' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 3 months
Fedora 14 Update: gnu-smalltalk-3.2.3-1.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19135
2010-12-21 23:07:57
--------------------------------------------------------------------------------
Name : gnu-smalltalk
Product : Fedora 14
Version : 3.2.3
Release : 1.fc14
URL : http://www.gnu.org/software/smalltalk/smalltalk.html
Summary : GNU Smalltalk
Description :
GNU Smalltalk is an implementation that closely follows the
Smalltalk-80 language as described in the book `Smalltalk-80: the
Language and its Implementation' by Adele Goldberg and David Robson.
The Smalltalk programming language is an object oriented programming
language.
Unlike other Smalltalks (including Smalltalk-80), GNU Smalltalk
emphasizes Smalltalk's rapid prototyping features rather than the
graphical and easy-to-use nature of the programming environment.
Therefore, even though we have a nice GUI environment including a class
browser, the goal of the GNU Smalltalk project is currently to produce a
complete system to be used to write your scripts in a clear, aesthetically
pleasing, and philosophically appealing programming language.
--------------------------------------------------------------------------------
Update Information:
New upstream release with bug fixes and enhancements.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2010 Jochen Schmitt <JOchen herr-schmitt de> 3.2.3-1
- New upstream release
* Sun Nov 28 2010 Rex Dieter <rdieter(a)fedoraproject.org> 3.2.2-2
- rebuild (libsigsegv)
* Sun Aug 1 2010 Jochen Schmitt <Jochen herr-schmitt de> 3.2.2-1
- New upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gnu-smalltalk' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 3 months
Fedora 13 Update: techne-0.2-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19168
2010-12-21 23:09:33
--------------------------------------------------------------------------------
Name : techne
Product : Fedora 13
Version : 0.2
Release : 1.fc13
URL : http://www.nongnu.org/techne/
Summary : A general purpose, programmable physical simulator and renderer
Description :
Techne is a general purpose, programmable physical simulator and renderer.
It reads in a set of scripts wherein every aspect of a physical system is
specified and then proceeds to simulate and render the system onscreen.
--------------------------------------------------------------------------------
Update Information:
New package: techne - A general purpose, programmable physical simulator and renderer.
Updated ode package, which adds support for a double precision subpackage.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #660625 - Review Request: techne - A general purpose, programmable physical simulator and renderer
https://bugzilla.redhat.com/show_bug.cgi?id=660625
[ 2 ] Bug #574034 - RFE: Add --disable-asserts, --with-trimesh=opcode and --enable-double-precision configuration options
https://bugzilla.redhat.com/show_bug.cgi?id=574034
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update techne' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 3 months
Fedora 13 Update: ode-0.11.1-5.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19168
2010-12-21 23:09:33
--------------------------------------------------------------------------------
Name : ode
Product : Fedora 13
Version : 0.11.1
Release : 5.fc13
URL : http://www.ode.org
Summary : High performance library for simulating rigid body dynamics
Description :
ODE is an open source, high performance library for simulating rigid body
dynamics. It is fully featured, stable, mature and platform independent with
an easy to use C/C++ API. It has advanced joint types and integrated collision
detection with friction. ODE is useful for simulating vehicles, objects in
virtual reality environments and virtual creatures. It is currently used in
many computer games, 3D authoring tools and simulation tools.
--------------------------------------------------------------------------------
Update Information:
New package: techne - A general purpose, programmable physical simulator and renderer.
Updated ode package, which adds support for a double precision subpackage.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 8 2010 Hans de Goede <hdegoede(a)redhat.com> 0.11.1-5
- Add a -double subpackage providing a version of ode compiled with
double precision (#574034)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #660625 - Review Request: techne - A general purpose, programmable physical simulator and renderer
https://bugzilla.redhat.com/show_bug.cgi?id=660625
[ 2 ] Bug #574034 - RFE: Add --disable-asserts, --with-trimesh=opcode and --enable-double-precision configuration options
https://bugzilla.redhat.com/show_bug.cgi?id=574034
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ode' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 3 months
Fedora 13 Update: perl-Class-Load-0.06-3.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19141
2010-12-21 23:08:12
--------------------------------------------------------------------------------
Name : perl-Class-Load
Product : Fedora 13
Version : 0.06
Release : 3.fc13
URL : http://search.cpan.org/dist/Class-Load/
Summary : A working (require "Class::Name") and more
Description :
require EXPR only accepts Class/Name.pm style module names, not Class::Name.
How frustrating! For that, we provide load_class 'Class::Name'.
It's often useful to test whether a module can be loaded, instead of throwing
an error when it's not available. For that, we provide
try_load_class 'Class::Name'.
Finally, sometimes we need to know whether a particular class has been loaded.
Asking %INC is an option, but that will miss inner packages and any class for
which the filename does not correspond to the package name. For that, we
provide is_class_loaded 'Class::Name'.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #656408 - Review Request: perl-Class-Load - A working (require "Class::Name") and more
https://bugzilla.redhat.com/show_bug.cgi?id=656408
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Class-Load' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 3 months
Fedora 14 Update: sylpheed-3.1.0-0.1.beta5.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-18725
2010-12-09 21:27:51
--------------------------------------------------------------------------------
Name : sylpheed
Product : Fedora 14
Version : 3.1.0
Release : 0.1.beta5.fc14
URL : http://sylpheed.sraoss.jp/
Summary : GTK+ based, lightweight, and fast email client
Description :
This program is an X based fast email client which has features like:
o user-friendly and intuitive interface
o integrated NetNews client (partially implemented)
o ability of keyboard-only operation
o Mew/Wanderlust-like key bind
o multipart MIME
o unlimited multiple account handling
o message queueing
o assortment function
o XML-based address book
See /usr/share/doc/sylpheed*/README for more information.
--------------------------------------------------------------------------------
Update Information:
This release contains some new features such as SOCKS proxy support and a new plug-in API. Some usability fixes have also been made.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 12 2010 Christoph Wickert <cwickert(a)fedoraproject.org> - 3.1.0-0.1.beta5
- Update to 3.1.0 Beta 5 (#662504)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #662504 - sylpheed-3.1.0beta5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=662504
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sylpheed' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 3 months
Fedora 13 Update: yumex-3.0.1-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19175
2010-12-21 23:09:57
--------------------------------------------------------------------------------
Name : yumex
Product : Fedora 13
Version : 3.0.1
Release : 1.fc13
URL : http://www.yum-extender.org
Summary : Yum Extender graphical package management tool
Description :
Graphical User Interface for Yum.
--------------------------------------------------------------------------------
Update Information:
new upstream release 3.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 21 2010 Tim Lauridsen <timlau(a)fedoraproject.org> - 3.0.1-1
- bumped version to 3.0.1-1
* Sat Nov 6 2010 Tim Lauridsen <timlau(a)fedoraproject.org> - 3.0.0-1
- bumped version to 3.0.0-1
* Sat Sep 11 2010 Tim Lauridsen <timlau(a)fedoraproject.org> - 2.9.11-1
- bumped version to 2.9.11-1
* Fri Jul 30 2010 Tim Lauridsen <timlau(a)fedoraproject.org> - 2.9.10-1
- bumped version to 2.9.10-1
* Tue Jul 6 2010 Tim Lauridsen <timlau(a)fedoraproject.org> - 2.9.9-1
- bumped version to 2.9.9-1
* Sat Jun 5 2010 Tim Lauridsen <timlau(a)fedoraproject.org> - 2.9.8-1
- bumped version to 2.9.8-1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update yumex' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 3 months
Fedora 13 Update: youtube-dl-2010.12.09-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-18869
2010-12-13 19:42:38
--------------------------------------------------------------------------------
Name : youtube-dl
Product : Fedora 13
Version : 2010.12.09
Release : 1.fc13
URL : http://rg3.github.com/youtube-dl/
Summary : Small command-line program to download videos from YouTube
Description :
Small command-line program to download videos from YouTube.
--------------------------------------------------------------------------------
Update Information:
- Adjust to recent youtube changes
- support depositfiles.com
Upstream changelog:
https://github.com/rg3/youtube-dl/commits/master
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 12 2010 Till Maas <opensource(a)till.name> - 2010.12.09-1
- Update to latest release to adjust with youtube changes
* Sat Nov 6 2010 Till Maas <opensource(a)till.name> - 2010.10.24-1
- Update to latest release
- Adjust to new upstream location at github instead of bitbucket
- add -p to install
- remove index.html
* Thu Oct 7 2010 Till Maas <opensource(a)till.name> - 2010.10.03-1
- Update to latest release
* Thu Aug 5 2010 Till Maas <opensource(a)till.name> - 2010.08.04-1
- Update to latest release
* Fri Jul 23 2010 Till Maas <opensource(a)till.name> - 2010.07.22-1
- Update to latest release
* Thu Jul 15 2010 Till Maas <opensource(a)till.name> - 2010.07.14-1
- Update to latest release
* Mon Jun 7 2010 Till Maas <opensource(a)till.name> - 2010.06.06-1
- Update to latest release
* Thu Apr 29 2010 Till Maas <opensource(a)till.name> - 2010.04.04-1
- Update to latest release to fix some download issues RH #582372
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #662394 - 2010.10.03 unable to download video
https://bugzilla.redhat.com/show_bug.cgi?id=662394
[ 2 ] Bug #666171 - RFE: request to update to 2010.12.09
https://bugzilla.redhat.com/show_bug.cgi?id=666171
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update youtube-dl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 3 months
Fedora 14 Update: lxlauncher-0.2.1-8.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-18837
2010-12-12 19:23:28
--------------------------------------------------------------------------------
Name : lxlauncher
Product : Fedora 14
Version : 0.2.1
Release : 8.fc14
URL : http://lxde.org/
Summary : Open source replacement for Launcher on the EeePC
Description :
LXLauncher is designed as an open source replacement for the Asus Launcher
included in their EeePC. It is desktop-independent and follows
freedesktop.org specs, so newly added applications will automatically show
up in the launcher, and vice versa for the removed ones.
LXLauncher is part of LXDE, the Lightweight X11 Desktop Environment.
--------------------------------------------------------------------------------
Update Information:
This update fixes a segfault that appears when a window manager returns no data for current desktop.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 12 2010 Christoph Wickert <cwickert(a)fedoraproject.org> - 0.2.1-8
- Use workaround for build loop again (#661008)
- Fix segfault if a window manager returns no data for current desktop
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update lxlauncher' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 3 months
Fedora 14 Update: openscada-0.7.0.1-3.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19146
2010-12-21 23:08:23
--------------------------------------------------------------------------------
Name : openscada
Product : Fedora 14
Version : 0.7.0.1
Release : 3.fc14
URL : http://oscada.org.ua
Summary : Open SCADA system project
Description :
Open SCADA system. For access use account "root" and password "openscada".
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 21 2010 Aleksey Popkov <aleksey(a)oscada.org> - 0.7.0.1-3
- Fixed:UI.VCAEngine: A session deadlock is fixed for dynamic-active projects, for attributes access.
* Mon Dec 20 2010 Aleksey Popkov <aleksey(a)oscada.org> - 0.7.0.1-2
- Fixed BuildRequires.
* Mon Dec 20 2010 Aleksey Popkov <aleksey(a)oscada.org> - 0.7.0.1-1
- Fixed Source0 patch
- Build 0.7.0.1 update to production release.
* Fri Nov 26 2010 Aleksey Popkov <aleksey(a)oscada.org> - 0.7.0-3
- Fixed unresolved deps.
* Tue Oct 26 2010 Aleksey Popkov <aleksey(a)oscada.org> - 0.7.0-2
- Build the 0.7.0 version.
* Wed Oct 13 2010 Aleksey Popkov <aleksey(a)oscada.org> - 0.7.0-2
- Adding the module to self package of PostgreSQL servers.
- Build the 0.7.0 version.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openscada' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 3 months