[SECURITY] Fedora 12 Update: libtiff-3.9.4-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10333
2010-06-24 15:46:55
--------------------------------------------------------------------------------
Name : libtiff
Product : Fedora 12
Version : 3.9.4
Release : 1.fc12
URL : http://www.remotesensing.org/libtiff/
Summary : Library of functions for manipulating TIFF format image files
Description :
The libtiff package contains a library of functions for manipulating
TIFF (Tagged Image File Format) image format files. TIFF is a widely
used file format for bitmapped images. TIFF files usually end in the
.tif extension and they are often quite large.
The libtiff package should be installed if you need to manipulate TIFF
format image files.
--------------------------------------------------------------------------------
Update Information:
Fix numerous crashing bugs, including CVE-2010-1411, CVE-2010-2065,
CVE-2010-2067, and CVE-2010-2233
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 22 2010 Tom Lane <tgl(a)redhat.com> 3.9.4-1
- Update to libtiff 3.9.4, for numerous bug fixes including fixes for
CVE-2010-1411, CVE-2010-2065, CVE-2010-2067
Resolves: #554371
Related: #460653, #588784, #601274, #599576, #592361, #603024
- Add fixes for multiple SIGSEGV problems
Resolves: #583081
Related: #603081, #603699, #603703
* Tue Jan 5 2010 Tom Lane <tgl(a)redhat.com> 3.9.2-3
- Apply Adam Goode's fix for Warmerdam's fix
Resolves: #552360
Resolves: #533353
- Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
images; this isn't enough to make it really work correctly though
Related: #460322
* Wed Dec 16 2009 Tom Lane <tgl(a)redhat.com> 3.9.2-2
- Update to libtiff 3.9.2; stop carrying a lot of old patches
Resolves: #520734
Resolves: #543289
- Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
Related: #460322
- Use build system's libtool instead of what package contains;
among other cleanup this gets rid of unwanted rpath specs in executables
Related: #226049
- add sparc/sparc64 to multilib header support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #592361 - CVE-2010-1411 libtiff: integer overflows leading to heap overflow in Fax3SetupState
https://bugzilla.redhat.com/show_bug.cgi?id=592361
[ 2 ] Bug #601274 - CVE-2010-2065 libtiff: TIFFroundup() integer overflow in TIFFFillStrip()
https://bugzilla.redhat.com/show_bug.cgi?id=601274
[ 3 ] Bug #599576 - CVE-2010-2067 libtiff: SubjectDistance EXIF tag reading stack based buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=599576
[ 4 ] Bug #607198 - CVE-2010-2233 libtiff: incorrect type extension for negative toskew values on 64bit platforms
https://bugzilla.redhat.com/show_bug.cgi?id=607198
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libtiff' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 9 months
Fedora 13 Update: gzip-1.3.13-4.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10509
2010-06-28 23:24:39
--------------------------------------------------------------------------------
Name : gzip
Product : Fedora 13
Version : 1.3.13
Release : 4.fc13
URL : http://www.gzip.org/
Summary : The GNU data compression program
Description :
The gzip package contains the popular GNU gzip data compression
program. Gzipped files have a .gz extension.
Gzip should be installed on your system, because it is a
very commonly used data compression program.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 28 2010 Karel Klic <kklic(a)redhat.com> - 1.3.13-4
- Added a patch to fix CRC error on valid file (rhbz#588644)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #588644 - CRC error on valid file
https://bugzilla.redhat.com/show_bug.cgi?id=588644
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gzip' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 9 months
Fedora 12 Update: vim-perl-support-4.8-2.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10099
2010-06-21 11:50:19
--------------------------------------------------------------------------------
Name : vim-perl-support
Product : Fedora 12
Version : 4.8
Release : 2.fc12
URL : http://www.vim.org/scripts/script.php?script_id=556
Summary : Perl-IDE for VIM
Description :
Perl Support implements a Perl-IDE for Vim/gVim. It is written to considerably
speed up writing code in a consistent style. This is done by inserting
complete statements, comments, idioms, code snippets, templates, and POD
documentation. Reading perldoc is integrated. Syntax checking, running a
script, running perltidy, running perlcritics, starting a debugger and a
profiler can be done with a keystroke.
--------------------------------------------------------------------------------
Update Information:
This update fixes a packaging error in vim-perl-support-4.8-1 which actually
contained the files for version 4.7.1. The new version renames hotkeys \$x,
\@x and \%x to avoid conflicts when writing references.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 18 2010 Iain Arnell <iarnell(a)gmail.com> 4.8-2
- use version number in source0 filename
* Mon May 31 2010 Iain Arnell <iarnell(a)gmail.com> 4.8-1
- update to latest upstream version
* Tue Apr 13 2010 Iain Arnell <iarnell(a)gmail.com> 4.7.1-1
- update to latest upstream version
* Wed Mar 3 2010 Iain Arnell <iarnell(a)gmail.com> 4.7-1
- update to 4.7
* Mon Jan 25 2010 Iain Arnell <iarnell(a)gmail.com> 4.6.1-1
- update to 4.6.1 - fix screen refresh when using syntax check (Vim only, not
gVim)
* Tue Jan 5 2010 Iain Arnell <iarnell(a)gmail.com> 4.6-1
- update to latest upstream release
- update requires/provides filtering
* Mon Oct 5 2009 Iain Arnell <iarnell(a)gmail.com> 4.5-1
- update to 4.5
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update vim-perl-support' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 9 months
Fedora 12 Update: grimmer-proggy-tinysz-fonts-1.0-3.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10665
2010-07-01 18:09:26
--------------------------------------------------------------------------------
Name : grimmer-proggy-tinysz-fonts
Product : Fedora 12
Version : 1.0
Release : 3.fc12
URL : http://proggyfonts.com/
Summary : Proggy Tiny with slashed zero programming font
Description :
The proggy fonts are a set of fixed-width screen fonts that are designed for
code listings. Proggy Tiny Slashed Zero is identical to Proggy Tiny but has a
slashed zero instead of a dot.
--------------------------------------------------------------------------------
Update Information:
The proggy fonts are a set of fixed-width screen fonts that are designed for
code listings. Proggy Tiny Slashed Zero is identical to Proggy Tiny but has a
slashed zero instead of a dot.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update grimmer-proggy-tinysz-fonts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 9 months
Fedora 12 Update: kcm_touchpad-0.3.1-2.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-9595
2010-06-07 20:40:08
--------------------------------------------------------------------------------
Name : kcm_touchpad
Product : Fedora 12
Version : 0.3.1
Release : 2.fc12
URL : http://kde-apps.org/content/show.php/kcm_touchpad?content=113335
Summary : Synaptics driver based touchpads kcontrol module
Description :
A KDE System Settings module to to configure synaptics based touchpads.
--------------------------------------------------------------------------------
Update Information:
Adds a default configuration with tapping enabled by default once the user
checks the Enable Tapping button. To test: rm
~/.kde/share/config/kcmtouchpadrc log in to kde and open SystemSettings->Mouse
and Keyboard->Touchpad On the tapping tab, click the enable tapping checkbox
Tap-to-click should be available without having to fuss with the two lists at
the bottom of the configuration dialog
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 5 2010 Ryan Rix <ry(a)n.rix.si> - 0.3.1-2
- Ship a default config file For Greater Justice
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kcm_touchpad' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 9 months
Fedora 13 Update: openoffice.org-3.2.0-12.25.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10179
2010-06-21 21:02:49
--------------------------------------------------------------------------------
Name : openoffice.org
Product : Fedora 13
Version : 3.2.0
Release : 12.25.fc13
URL : http://www.openoffice.org/
Summary : OpenOffice.org comprehensive office suite
Description :
OpenOffice.org is an Open Source, community-developed, multi-platform
office productivity suite. It includes the key desktop applications,
such as a word processor, spreadsheet, presentation manager, formula
editor and drawing program, with a user interface and feature set
similar to other office suites. Sophisticated and flexible,
OpenOffice.org also works transparently with a variety of file
formats, including Microsoft Office.
Usage: Simply type "ooffice" to run OpenOffice.org or select the
requested component (Writer, Calc, Impress, etc.) from your
desktop menu. On first start a few files will be installed in the
user's home, if necessary.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 18 2010 Caolán McNamara <caolanm(a)redhat.com> - 1:3.2.0-12.25
- Resolves: rhbz#602631 dual head fixes add workspace.ooo321gsl05.patch
- Resolves: rhbz#603298 crash in ImplFontCharMap::GetGlyphIndex
- Resolves: rhbz#601890/ooo#112384 avoid crash on export to .doc
- Resolves: rhbz#603043/ooo#112386 improve gtk fpicker stability
- Resolves: rhbz#605594 openoffice.org-3.3.0.ooo112516.sw.avoid.divbyzero.patch
- Resolves: rhbz#604850 openoffice.org-3.3.0.ooo107490.cppu.lifecycle.patch
* Sat Jun 5 2010 Caolán McNamara <caolanm(a)redhat.com> - 1:3.2.0-12.24
- Resolves: CVE-2010-0395 openoffice.org-3.2.1.pyuno.patch
- Resolves: rhbz#596807 openoffice.org-3.2.0.ooo111886.sw.layout.workaround.patch
- Protect against broken samba servers (caolanm)
- Resolves: rhbz#597820 workspace.sw321bf01.patch (dtardon)
- Resolves: rhbz#598052 workspace.cmcfixes75.patch (caolanm)
- Resolves: rhbz#598582 openoffice.org-3.2.1.ooo112027.writerfilter.avoid.recursetodeath.patch (caolanm)
- Resolves: rhbz#599287 openoffice.org-3.3.0.ooo112059.sw.avoid-null-ptr-deref.patch (dtardon)
- Resolves: rhbz#599585 workspace.os140.patch (dtardon)
- Resolves: rhbz#596980 workspace.vcl112.patch (caolanm)
* Fri May 21 2010 Caolán McNamara <caolanm(a)redhat.com> - 1:3.2.0-12.23
- Resolves: rhbz#594035 openoffice.org-3.3.0.ooo111758.sd.xerror.patch
* Wed May 19 2010 Caolán McNamara <caolanm(a)redhat.com> - 1:3.2.0-12.22
- Resolves: rhbz#593561 openoffice.org-3.3.0.ooo111699.svx.nullfield.patch
* Fri May 7 2010 Caolán McNamara <caolanm(a)redhat.com> - 1:3.2.0-12.21
- Resolves: rhbz#589861 [abrt] crash in DomainMapper_Impl::finishParagraph
- Resolves: rhbz#589889 don't require exact zh fonts
* Thu May 6 2010 Caolán McNamara <caolanm(a)redhat.com> - 1:3.2.0-12.20
- Related: rhbz#587419 copy attributes correctly (dtardon)
* Fri Apr 30 2010 Caolán McNamara <caolanm(a)redhat.com> - 1:3.2.0-12.19
- Resolves: rhbz#587419 [abrt] crash in SwTxtFtn::CopyFtn (dtardon)
* Wed Apr 28 2010 Caolán McNamara <caolanm(a)redhat.com> - 1:3.2.0-12.18
- Resolves: rhbz#586446 openoffice.org-3.3.0.ooo93818.sw.postitprint.patch
- add openoffice.org-3.2.0.ooo101131.sw.size.mismatch.patch
* Sun Apr 25 2010 Caolán McNamara <caolanm(a)redhat.com> - 1:3.2.0-12.17
- Resolves: rhbz#583386 docx import crash
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #604850 - [abrt] crash in openoffice.org-core-1:3.2.0-12.24.fc13: getTypeName: nsplugin. (Calibre related ?)
https://bugzilla.redhat.com/show_bug.cgi?id=604850
[ 2 ] Bug #605594 - [abrt] crash in openoffice.org-writer-1:3.2.0-12.24.fc13: SwTxtFormatter::NewTabPortion: SIGFPE on 0 width default tab stop from .docx
https://bugzilla.redhat.com/show_bug.cgi?id=605594
[ 3 ] Bug #601890 - [abrt] crash in AttributeOutputBase::StartTOX
https://bugzilla.redhat.com/show_bug.cgi?id=601890
[ 4 ] Bug #603298 - [abrt] crash in ImplFontCharMap::GetGlyphIndex
https://bugzilla.redhat.com/show_bug.cgi?id=603298
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openoffice.org' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 9 months
Fedora 13 Update: libhbalinux-1.0.10-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-9009
2010-05-24 18:27:13
--------------------------------------------------------------------------------
Name : libhbalinux
Product : Fedora 13
Version : 1.0.10
Release : 1.fc13
URL : http://www.open-fcoe.org
Summary : FC-HBAAPI implementation using scsi_transport_fc interfaces
Description :
SNIA HBAAPI vendor library built on top of the scsi_transport_fc interfaces
--------------------------------------------------------------------------------
Update Information:
Rebase to version 1.0.10 (bug fixing release)
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 24 2010 Jan Zeleny <jzeleny(a)redhat.com> - 1.0.10-1
- rebased to 1.0.10, bugfix release (see git changelog for more info)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libhbalinux' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 9 months
Fedora 13 Update: grimmer-proggy-tinysz-fonts-1.0-3.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10658
2010-07-01 18:09:09
--------------------------------------------------------------------------------
Name : grimmer-proggy-tinysz-fonts
Product : Fedora 13
Version : 1.0
Release : 3.fc13
URL : http://proggyfonts.com/
Summary : Proggy Tiny with slashed zero programming font
Description :
The proggy fonts are a set of fixed-width screen fonts that are designed for
code listings. Proggy Tiny Slashed Zero is identical to Proggy Tiny but has a
slashed zero instead of a dot.
--------------------------------------------------------------------------------
Update Information:
The proggy fonts are a set of fixed-width screen fonts that are designed for
code listings. Proggy Tiny Slashed Zero is identical to Proggy Tiny but has a
slashed zero instead of a dot.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update grimmer-proggy-tinysz-fonts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 9 months
Fedora 12 Update: input-pad-0.1.0.20100630-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-9851
2010-06-14 16:40:53
--------------------------------------------------------------------------------
Name : input-pad
Product : Fedora 12
Version : 0.1.0.20100630
Release : 1.fc12
URL : http://code.google.com/p/input-pad/
Summary : On-screen Input Pad to Send Characters with Mouse
Description :
The input pad is a tool to send a character on button to text applications.
--------------------------------------------------------------------------------
Update Information:
Initial Implementation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #599316 - Review Request: input-pad - Input Pad
https://bugzilla.redhat.com/show_bug.cgi?id=599316
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update input-pad' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 9 months