[SECURITY] Fedora 11 Update: httpd-2.2.14-1.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-12747
2009-12-04 22:43:13
--------------------------------------------------------------------------------
Name : httpd
Product : Fedora 11
Version : 2.2.14
Release : 1.fc11
URL : http://httpd.apache.org/
Summary : Apache HTTP Server
Description :
The Apache HTTP Server is a powerful, efficient, and extensible
web server.
--------------------------------------------------------------------------------
Update Information:
This update contains the latest stable release of Apache httpd. Three security
fixes are included, along with several minor bug fixes. A flaw was found in
the way the TLS/SSL (Transport Layer Security/Secure Sockets Layer) protocols
handle session renegotiation. A man-in-the-middle attacker could use this flaw
to prefix arbitrary plain text to a client's session (for example, an HTTPS
connection to a website). This could force the server to process an attacker's
request as if authenticated using the victim's credentials. This update
partially mitigates this flaw for SSL sessions to HTTP servers using mod_ssl by
rejecting client-requested renegotiation. (CVE-2009-3555) Note: This update
does not fully resolve the issue for HTTPS servers. An attack is still possible
in configurations that require a server-initiated renegotiation A NULL
pointer dereference flaw was found in the Apache mod_proxy_ftp module. A
malicious FTP server to which requests are being proxied could use this flaw to
crash an httpd child process via a malformed reply to the EPSV or PASV commands,
resulting in a limited denial of service. (CVE-2009-3094) A second flaw was
found in the Apache mod_proxy_ftp module. In a reverse proxy configuration, a
remote attacker could use this flaw to bypass intended access restrictions by
creating a carefully-crafted HTTP Authorization header, allowing the attacker to
send arbitrary commands to the FTP server. (CVE-2009-3095) See the upstream
changes file for further information:
http://www.apache.org/dist/httpd/CHANGES_2.2.14
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 3 2009 Joe Orton <jorton(a)redhat.com> - 2.2.14-1
- update to 2.2.14
- relax permissions on /var/run/httpd (#495780)
- Requires(pre): httpd in mod_ssl subpackage (#543275)
- add partial security fix for CVE-2009-3555 (#533125)
- add condrestart in posttrans (#491567)
* Tue Aug 18 2009 Joe Orton <jorton(a)redhat.com> 2.2.13-2
- use "delaycompress" in logrotate config (#506381)
* Tue Aug 18 2009 Joe Orton <jorton(a)redhat.com> 2.2.13-1
- update to 2.2.13
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #521619 - CVE-2009-3094 httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply
https://bugzilla.redhat.com/show_bug.cgi?id=521619
[ 2 ] Bug #522209 - CVE-2009-3095 httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header
https://bugzilla.redhat.com/show_bug.cgi?id=522209
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update httpd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 2 months
Fedora 11 Update: gqradio-1.9.2-6.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-3057
2010-02-27 02:57:55
--------------------------------------------------------------------------------
Name : gqradio
Product : Fedora 11
Version : 1.9.2
Release : 6.fc11
URL : http://gqmpeg.sourceforge.net
Summary : Skinned radio tuner
Description :
Radio tuner with themes.
Interfaces with video4linux compatible radio tuner cards.
--------------------------------------------------------------------------------
Update Information:
Radio tuner with themes. Interfaces with video4linux compatible radio tuner
cards.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gqradio' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 2 months
Fedora 13 Update: qtcurve-gtk2-1.1.0-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-2678
2010-02-23 16:01:42
--------------------------------------------------------------------------------
Name : qtcurve-gtk2
Product : Fedora 13
Version : 1.1.0
Release : 1.fc13
URL : http://www.kde-look.org/content/show.php?content=40492
Summary : This is a set of widget styles for Gtk2 based apps
Description :
QtCurve is a desktop theme for the GTK+ and Qt widget toolkits,
allowing users to achieve a uniform look between these widget toolkits.
--------------------------------------------------------------------------------
Update Information:
1. Add option to not embolden progressbar text. 2. Add option to allow coloured
mouse over for toolbar buttons. 3. Add option to border selection. 4. Add
option to draw square rings on background.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qtcurve-gtk2' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 2 months
Fedora 12 Update: xorg-x11-drv-vesa-2.3.0-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-0164
2010-01-05 22:28:57
--------------------------------------------------------------------------------
Name : xorg-x11-drv-vesa
Product : Fedora 12
Version : 2.3.0
Release : 1.fc12
URL : http://www.x.org
Summary : Xorg X11 vesa video driver
Description :
X.Org X11 vesa video driver.
--------------------------------------------------------------------------------
Update Information:
Various bugfixes from upstream 2.3.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 4 2010 Adam Jackson <ajax(a)redhat.com> 2.3.0-1
- vesa 2.3.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xorg-x11-drv-vesa' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 2 months
Fedora 12 Update: zarafa-webaccess-6.30.10-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-3053
2010-02-27 02:57:46
--------------------------------------------------------------------------------
Name : zarafa-webaccess
Product : Fedora 12
Version : 6.30.10
Release : 1.fc12
URL : http://www.zarafa.com/
Summary : Zarafa Webaccess featuring a 'Look & Feel' similar to Outlook
Description :
Zarafa Webaccess features the familiar Outlook 'Look & Feel' interface
and you can keep using the features in Outlook that have always allowed
you to work efficiently. View your e-mail, calendar and contacts via a
web browser. And opening your colleagues calendar or sending a meeting
request is only a piece of cake. The Zarafa Webaccess is using the ajax
technology to give a more interactive feeling to the users.
--------------------------------------------------------------------------------
Update Information:
Zarafa Webaccess features the familiar Outlook 'Look & Feel' interface and you
can keep using the features in Outlook that have always allowed you to work
efficiently. View your e-mail, calendar and contacts via a web browser. And
opening your colleagues calendar or sending a meeting request is only a piece of
cake. The Zarafa Webaccess is using the ajax technology to give a more
interactive feeling to the users.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #498195 - Review Request: zarafa-webaccess - Zarafa Webaccess featuring a 'Look & Feel' similar to Outlook
https://bugzilla.redhat.com/show_bug.cgi?id=498195
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update zarafa-webaccess' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 2 months
Fedora 12 Update: NetworkManager-0.7.998-2.git20100106.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-0660
2010-01-15 21:22:29
--------------------------------------------------------------------------------
Name : NetworkManager
Product : Fedora 12
Version : 0.7.998
Release : 2.git20100106.fc12
URL : http://www.gnome.org/projects/NetworkManager/
Summary : Network connection manager and user applications
Description :
NetworkManager attempts to keep an active network connection available at all
times. It is intended only for the desktop use-case, and is not intended for
usage on servers. The point of NetworkManager is to make networking
configuration and setup as painless and automatic as possible. If using DHCP,
NetworkManager is _intended_ to replace default routes, obtain IP addresses
from a DHCP server, and change nameservers whenever it sees fit.
--------------------------------------------------------------------------------
Update Information:
This update also adds IPv6 addressing and routes support for system settings (rh
#523288) and provides support for ppp-2.4.5.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 13 2010 Dan Williams <dcbw(a)redhat.com> - 0.7.998-2.git20100106
- build: build against new pppd from updates-testing (rh #548520)
* Wed Jan 6 2010 Dan Williams <dcbw(a)redhat.com> - 0.7.998-1.git20100106
- build: fix for new pppd (rh #548520)
- core: add WWAN enable/disable functionality
- ifcfg-rh: IPv6 addressing and routes support (rh #523288)
- ifcfg-rh: ensure connection is updated when route/key files change
- applet: fix crash when active AP isn't found (rh #546901)
- editor: fix crash when editing connections (rh #549579)
* Mon Dec 14 2009 Dan Williams <dcbw(a)redhat.com> - 0.7.997-2.git20091214
- core: fix recognition of standalone 802.1x private keys
- applet: clean notification text to ensure it passes libnotify validation
* Mon Dec 7 2009 Dan Williams <dcbw(a)redhat.com> - 0.7.997-1
- core: remove haldaemon from initscript dependencies (rh #542078)
- core: handle PEM certificates without an ending newline (rh #507315)
- core: fix rfkill reporting for ipw2x00 devices
- core: increase PPPoE timeout to 30 seconds
- core: fix re-activating system connections with secrets
- core: fix crash when deleting automatically created wired connections
- core: ensure that a VPN's DNS servers are used when sharing the VPN connection
- ifcfg-rh: support routes files (rh #507307)
- ifcfg-rh: warn when device will be managed due to missing HWADDR (rh #545003)
- ifcfg-rh: interpret DEFROUTE as never-default (rh #528281)
- ifcfg-rh: handle MODE=Auto correctly
- rpm: fix rpmlint errors
- applet: don't crash on various D-Bus and other errors (rh #545011) (rh #542617)
- editor: fix various PolicyKit-related crashes (rh #462944)
- applet+editor: notify user that private keys must be protected
* Fri Nov 13 2009 Dan Williams <dcbw(a)redhat.com> - 0.7.996-7.git20091113
- nm: better pidfile handing (rh #517362)
- nm: save WiFi and Networking enabled/disabled states across reboot
- nm: fix crash with missing VPN secrets (rh #532084)
- applet: fix system connection usage from the "Connect to hidden..." dialog
- applet: show Bluetooth connections when no other devices are available (rh #532049)
- applet: don't die when autoconfigured connections can't be made (rh #532680)
- applet: allow system administrators to disable the "Create new wireless network..." menu item
- applet: fix missing username connecting to VPNs the second time
- applet: really fix animation stuttering
- editor: fix IP config widget tooltips
- editor: allow unlisted countries in the mobile broadband wizard (rh #530981)
- ifcfg-rh: ignore .rpmnew files (rh #509621)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #548520 - NetworkManager pppd plugin does not work with latest pppd
https://bugzilla.redhat.com/show_bug.cgi?id=548520
[ 2 ] Bug #546901 - [abrt] crash detected in NetworkManager-gnome-1:0.7.996-7.git20091113.fc12
https://bugzilla.redhat.com/show_bug.cgi?id=546901
[ 3 ] Bug #549579 - [editor] crash on invalid CEPolkitButton
https://bugzilla.redhat.com/show_bug.cgi?id=549579
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update NetworkManager' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 2 months
Fedora 12 Update: jamin-0.95.0-8.20100210cvs.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-3051
2010-02-27 02:57:44
--------------------------------------------------------------------------------
Name : jamin
Product : Fedora 12
Version : 0.95.0
Release : 8.20100210cvs.fc12
URL : http://jamin.sourceforge.net
Summary : JACK Audio Connection Kit (JACK) Audio Mastering interface
Description :
JAMin is the JACK Audio Connection Kit (JACK) Audio Mastering interface. JAMin
is designed to perform professional audio mastering of any number of input
streams. It uses LADSPA for its backend DSP work, specifically the swh plugins.
--------------------------------------------------------------------------------
Update Information:
* Fix: Save/Load Crossover type to/from JAMin session file. * Fix: Refresh
preferences dialog properties when session file is loaded. * Spectrum views
enhancement & small eq fixes * Fix: Segfault on undo/redo
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 10 2010 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> - 0.95.0-8.20100210cvs
- Update to the latest cvs
- Fix DSO-linking failure
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update jamin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 2 months
Fedora 13 Update: heartbeat-3.0.0-0.6.0daab7da36a8.hg.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-2705
2010-02-23 16:02:45
--------------------------------------------------------------------------------
Name : heartbeat
Product : Fedora 13
Version : 3.0.0
Release : 0.6.0daab7da36a8.hg.fc13
URL : http://linux-ha.org/
Summary : Messaging and membership subsystem for High-Availability Linux
Description :
heartbeat is a basic high-availability subsystem for Linux-HA.
It will run scripts at initialization, and when machines go up or down.
This version will also perform IP address takeover using gratuitous ARPs.
Heartbeat contains a cluster membership layer, fencing, and local and
clusterwide resource management functionality.
When used with Pacemaker, it supports "n-node" clusters with significant
capabilities for managing resources and dependencies.
In addition it continues to support the older release 1 style of
2-node clustering.
It implements the following kinds of heartbeats:
- Serial ports
- UDP/IP multicast (ethernet, etc)
- UDP/IP broadcast (ethernet, etc)
- UDP/IP heartbeats
- "ping" heartbeats (for routers, switches, etc.)
(to be used for breaking ties in 2-node systems)
--------------------------------------------------------------------------------
Update Information:
Fix build after changes to Fedora DSO policy
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update heartbeat' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 2 months
Fedora 11 Update: jamin-0.95.0-8.20100210cvs.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-3049
2010-02-27 02:57:42
--------------------------------------------------------------------------------
Name : jamin
Product : Fedora 11
Version : 0.95.0
Release : 8.20100210cvs.fc11
URL : http://jamin.sourceforge.net
Summary : JACK Audio Connection Kit (JACK) Audio Mastering interface
Description :
JAMin is the JACK Audio Connection Kit (JACK) Audio Mastering interface. JAMin
is designed to perform professional audio mastering of any number of input
streams. It uses LADSPA for its backend DSP work, specifically the swh plugins.
--------------------------------------------------------------------------------
Update Information:
* Fix: Save/Load Crossover type to/from JAMin session file. * Fix: Refresh
preferences dialog properties when session file is loaded. * Spectrum views
enhancement & small eq fixes * Fix: Segfault on undo/redo
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 10 2010 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> - 0.95.0-8.20100210cvs
- Update to the latest cvs
- Fix DSO-linking failure
* Wed Aug 5 2009 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> 0.95.0-7
- Update .desktop file
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.95.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update jamin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 2 months
Fedora 13 Update: fedora-release-13-0.6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-1740
2010-02-21 20:45:39
--------------------------------------------------------------------------------
Name : fedora-release
Product : Fedora 13
Version : 13
Release : 0.6
URL : http://fedoraproject.org
Summary : Fedora release files
Description :
Fedora release files such as yum configs and various /etc/ files that
define the release.
--------------------------------------------------------------------------------
Update Information:
fix -rawhide requires; fix gpg key path in updates-testing repo
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #566483 - nothing provides fedora-release-13-0.4
https://bugzilla.redhat.com/show_bug.cgi?id=566483
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update fedora-release' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 2 months