[SECURITY] Fedora 13 Update: libtiff-3.9.4-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10334
2010-06-24 15:46:57
--------------------------------------------------------------------------------
Name : libtiff
Product : Fedora 13
Version : 3.9.4
Release : 1.fc13
URL : http://www.remotesensing.org/libtiff/
Summary : Library of functions for manipulating TIFF format image files
Description :
The libtiff package contains a library of functions for manipulating
TIFF (Tagged Image File Format) image format files. TIFF is a widely
used file format for bitmapped images. TIFF files usually end in the
.tif extension and they are often quite large.
The libtiff package should be installed if you need to manipulate TIFF
format image files.
--------------------------------------------------------------------------------
Update Information:
Fix numerous crashing bugs, including CVE-2010-1411, CVE-2010-2065,
CVE-2010-2067, and CVE-2010-2233
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 22 2010 Tom Lane <tgl(a)redhat.com> 3.9.4-1
- Update to libtiff 3.9.4, for numerous bug fixes including fixes for
CVE-2010-1411, CVE-2010-2065, CVE-2010-2067
Resolves: #554371
Related: #460653, #588784, #601274, #599576, #592361, #603024
- Add fixes for multiple SIGSEGV problems
Resolves: #583081
Related: #603081, #603699, #603703
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #592361 - CVE-2010-1411 libtiff: integer overflows leading to heap overflow in Fax3SetupState
https://bugzilla.redhat.com/show_bug.cgi?id=592361
[ 2 ] Bug #601274 - CVE-2010-2065 libtiff: TIFFroundup() integer overflow in TIFFFillStrip()
https://bugzilla.redhat.com/show_bug.cgi?id=601274
[ 3 ] Bug #599576 - CVE-2010-2067 libtiff: SubjectDistance EXIF tag reading stack based buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=599576
[ 4 ] Bug #607198 - CVE-2010-2233 libtiff: incorrect type extension for negative toskew values on 64bit platforms
https://bugzilla.redhat.com/show_bug.cgi?id=607198
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libtiff' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 12 Update: mscore-0.9.6-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10031
2010-06-16 17:00:16
--------------------------------------------------------------------------------
Name : mscore
Product : Fedora 12
Version : 0.9.6
Release : 1.fc12
URL : http://musescore.org/en
Summary : Music Composition & Notation Software
Description :
MuseScore is a free cross platform WYSIWYG music notation program. Some
highlights:
* WYSIWYG, notes are entered on a "virtual note sheet"
* Unlimited number of staves
* Up to four voices per staff
* Easy and fast note entry with mouse, keyboard or MIDI
* Integrated sequencer and FluidSynth software synthesizer
* Import and export of MusicXML and Standard MIDI Files (SMF)
* Translated in 26 languages
--------------------------------------------------------------------------------
Update Information:
New version with large amount of bug fixes and enhancements. The release notes
can be found at http://musescore.org/node/4697
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 14 2010 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> 0.9.6-1
- Update to 0.9.6
- Split documentation into its own package
- Move some gcc warning fixes into a patch
* Tue Dec 22 2009 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> 0.9.5-3
- Fix build flags on F-11
* Tue Dec 22 2009 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> 0.9.5-2
- Add default soundfont support for exported audio files
- Rebuild against new libsndfile for additional functionality
- Drop F-10 related bits from specfile
- Make fonts subpackage noarch
- Fix build failure on arm architecture
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mscore' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 12 Update: ghemical-2.99.2-15.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10577
2010-06-30 14:46:17
--------------------------------------------------------------------------------
Name : ghemical
Product : Fedora 12
Version : 2.99.2
Release : 15.fc12
URL : http://www.uku.fi/~thassine/ghemical/
Summary : Molecular mechanics and quantum mechanics front end for GNOME
Description :
Ghemical is a computational chemistry application. Ghemical is
written in C++. It has a graphical user interface (in fact, a couple
of them), and it supports both quantum-mechanics (semi-empirical and
ab initio) models and molecular mechanics models (there is an
experimental Tripos 5.2-like force field for organic molecules). Also
a tool for reduced protein models is included. Geometry optimization,
molecular dynamics and a large set of visualization tools are
currently available.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ghemical' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 13 Update: perl-PAR-Packer-1.005-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-9906
2010-06-14 16:42:27
--------------------------------------------------------------------------------
Name : perl-PAR-Packer
Product : Fedora 13
Version : 1.005
Release : 1.fc13
URL : http://search.cpan.org/dist/PAR-Packer/
Summary : PAR Packager
Description :
This module implements the App::Packer::Backend interface, for generating
stand-alone executables, perl scripts and PAR files.
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release; fixing bug #602993
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 11 2010 Petr Sabata <psabata(a)redhat.com> - 1.005-1
- Update to the latest release, fixing #602933
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #602993 - pp (perl packager) doesn't work from non-root user
https://bugzilla.redhat.com/show_bug.cgi?id=602993
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-PAR-Packer' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 12 Update: perl-Verilog-Perl-3.251-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10627
2010-07-01 18:08:00
--------------------------------------------------------------------------------
Name : perl-Verilog-Perl
Product : Fedora 12
Version : 3.251
Release : 1.fc12
URL : http://www.veripool.org/wiki/verilog-perl
Summary : Verilog parsing routines
Description :
This package provides functions to support writing utilities
that use the Verilog language.
--------------------------------------------------------------------------------
Update Information:
* New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 29 2010 Chitlesh Goorah <chitlesh [AT] fedoraproject DOT org> 3.251-1
- New upstream release
- Shakthimaan: fix for rpmlint warning
* Sun Jun 27 2010 Chitlesh Goorah <chitlesh [AT] fedoraproject DOT org> 3.250-1
- New upstream release and now supporting EL-6
* Fri May 7 2010 Marcela Maslanova <mmaslano(a)redhat.com> - 3.223-2
- Mass rebuild with perl-5.12.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Verilog-Perl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 13 Update: alsa-utils-1.0.23-3.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10424
2010-06-28 16:26:41
--------------------------------------------------------------------------------
Name : alsa-utils
Product : Fedora 13
Version : 1.0.23
Release : 3.fc13
URL : http://www.alsa-project.org/
Summary : Advanced Linux Sound Architecture (ALSA) utilities
Description :
This package contains command line utilities for the Advanced Linux Sound
Architecture (ALSA).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 28 2010 Jaroslav Kysela <jkysela(a)redhat.com> 1.0.23-3
- add requires line (bug#526492) for specific alsa-lib package
- add requires line for dialog package (bug#561988)
- added man page for alsaunmute (bug#526174)
- updated alsa-info.sh script to 0.4.59
* Mon Jun 28 2010 Jaroslav Kysela <jkysela(a)redhat.com> 1.0.23-1
- updated to 1.0.23 final
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #526492 - alsa-utils should require a particular version of alsa-lib
https://bugzilla.redhat.com/show_bug.cgi?id=526492
[ 2 ] Bug #561988 - alsa-utils dependency on dialog missing
https://bugzilla.redhat.com/show_bug.cgi?id=561988
[ 3 ] Bug #526174 - Missing man-pages
https://bugzilla.redhat.com/show_bug.cgi?id=526174
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update alsa-utils' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 13 Update: sysfsutils-2.1.0-8.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10068
2010-06-21 11:49:18
--------------------------------------------------------------------------------
Name : sysfsutils
Product : Fedora 13
Version : 2.1.0
Release : 8.fc13
URL : http://sourceforge.net/projects/linux-diag/
Summary : Utilities for interfacing with sysfs
Description :
This package's purpose is to provide a set of utilities for interfacing
with sysfs.
--------------------------------------------------------------------------------
Update Information:
move the /usr/lib to /lib of the package.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 17 2010 Anton Arapov <anton(a)redhat.com> - 2.1.0-8
- Move libraries from /usr/lib to /lib since we need them
during the system boot. (#605546)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #605546 - sysfsutils : does not adhere to Static Library Packaging Guidelines
https://bugzilla.redhat.com/show_bug.cgi?id=605546
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sysfsutils' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 13 Update: perl-HTML-Defang-1.03-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-9982
2010-06-15 15:37:20
--------------------------------------------------------------------------------
Name : perl-HTML-Defang
Product : Fedora 13
Version : 1.03
Release : 1.fc13
URL : http://search.cpan.org/dist/HTML-Defang/
Summary : Cleans HTML and CSS of executable contents
Description :
This module accepts an input HTML and/or CSS string and removes any
executable code including scripting, embedded objects, applets, etc., and
neutralises any XSS attacks. A whitelist based approach is used which means
only HTML known to be safe is allowed through.
--------------------------------------------------------------------------------
Update Information:
Various fixes: * fix incorrect tag closing when "/" appears as attribute key *
handle deep span nests with the same attrs, not just no attrs * we might not
find the tag if we hit one that stops further breaking out, that's not an error
to report * track noscript mismatched tags * more nested table tags fixes *
unicode fixes on attribute/style entity expansions * more deep nested span/div
hacks * avoid undef error * optimisation for nested inline tags within block
tags * massive speedup on deeply nested tags * defang tweaks on large sets of
style rules * use /\G..../gc matching on style rather than s/// * close/re-
open inline tags across block tags * only convert \u sequences in stripped
values * track mismatched <p> tags, and defang -- in a tag as well * need to
strip -- in defanged tags because --'s in comments are bad
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 15 2010 Iain Arnell <iarnell(a)gmail.com> 1.03-1
- update to latest upstream
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-HTML-Defang' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 13 Update: tracker-0.8.13-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10008
2010-06-16 16:59:31
--------------------------------------------------------------------------------
Name : tracker
Product : Fedora 13
Version : 0.8.13
Release : 1.fc13
URL : http://projects.gnome.org/tracker/
Summary : An object database, tag/metadata database, search tool and indexer
Description :
Tracker is a powerful desktop-neutral first class object database,
tag/metadata database, search tool and indexer.
It consists of a common object database that allows entities to have an
almost infinte number of properties, metadata (both embedded/harvested as
well as user definable), a comprehensive database of keywords/tags and
links to other entities.
It provides additional features for file based objects including context
linking and audit trails for a file object.
It has the ability to index, store, harvest metadata. retrieve and search
all types of files and other first class objects
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream stable release and split off evolution-plugin
subpackage
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 28 2010 Deji Akingunola <dakingun(a)gmail.com> - 0.8.13-1
- Update to 0.8.13 release
* Tue Jun 15 2010 Deji Akingunola <dakingun(a)gmail.com> - 0.8.11-1
- Update to 0.8.11 release
* Wed Jun 2 2010 Deji Akingunola <dakingun(a)gmail.com> - 0.8.9-1
- Update to 0.8.9 release
- Split off an evolution-plugin sub-package
* Sun May 2 2010 Deji Akingunola <dakingun(a)gmail.com> - 0.8.4-1
- Provide an upgrade path for paperbox (make ~-search-tool obsolete it) on F-13.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #597584 - Remove tracker dependency on evolution email
https://bugzilla.redhat.com/show_bug.cgi?id=597584
[ 2 ] Bug #596839 - [abrt] crash in tracker-0.8.4-1.fc13: ____strtol_l_internal: Process /usr/libexec/tracker-extract was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=596839
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update tracker' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 12 Update: valide-0.6.1-0.22.20103003svn511.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-5533
2010-04-01 00:19:16
--------------------------------------------------------------------------------
Name : valide
Product : Fedora 12
Version : 0.6.1
Release : 0.22.20103003svn511.fc12
URL : http://www.valaide.org
Summary : An integrated development environment (IDE) for the Vala programming language
Description :
Val(a)IDE is an Integrated Development Environment for the Vala programming
language.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 31 2010 Jonathan MERCIER <bioinfornatics at gmail.com> 0.6.1-0.22.20103003svn511
- Allow plugins configuration
- Update castillan language
- Update french language
- Add advanced search plugins
- Fix crash with vala 7.10
- And other minor bug fixed
* Fri Jan 15 2010 Jonathan MERCIER <bioinfornatics at gmail.com> 0.6.1-0.21.20093012svn488
- Update to the new version 0.6.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update valide' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months