[SECURITY] Fedora 12 Update: bogofilter-1.2.2-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-13154
2010-08-20 00:58:50
--------------------------------------------------------------------------------
Name : bogofilter
Product : Fedora 12
Version : 1.2.2
Release : 1.fc12
URL : http://bogofilter.sourceforge.net/
Summary : Fast anti-spam filtering by Bayesian statistical analysis
Description :
Bogofilter is a Bayesian spam filter. In its normal mode of
operation, it takes an email message or other text on standard input,
does a statistical check against lists of "good" and "bad" words, and
returns a status code indicating whether or not the message is spam.
Bogofilter is designed with fast algorithms (including Berkeley DB system),
coded directly in C, and tuned for speed, so it can be used for production
by sites that process a lot of mail.
--------------------------------------------------------------------------------
Update Information:
Fixes CVE-2010-2494
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 16 2010 Adrian Reber <adrian(a)lisas.de> - 1.2.2-1
- updated to 1.2.2 (fixes #611511, CVE-2010-2494)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #611551 - CVE-2010-2494 bogofilter: array index underflow/OOB write via invalid input
https://bugzilla.redhat.com/show_bug.cgi?id=611551
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update bogofilter' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 7 months
Fedora 13 Update: python-dns-1.8.0-3.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-13120
2010-08-20 00:57:31
--------------------------------------------------------------------------------
Name : python-dns
Product : Fedora 13
Version : 1.8.0
Release : 3.fc13
URL : http://www.dnspython.org/
Summary : DNS toolkit for Python
Description :
dnspython is a DNS toolkit for Python. It supports almost all record
types. It can be used for queries, zone transfers, and dynamic
updates. It supports TSIG authenticated messages and EDNS0.
dnspython provides both high and low level access to DNS. The high
level classes perform queries for data of a given name, type, and
class, and return an answer set. The low level classes allow direct
manipulation of DNS zones, messages, names, and records.
--------------------------------------------------------------------------------
Update Information:
Fix a bug with TSIG signatures on recent releases of Python
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 13 2010 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 1.8.0-3
- Add a patch from upstream to fix a Python 2.7 issue.
* Thu Jul 22 2010 David Malcolm <dmalcolm(a)redhat.com> - 1.8.0-2.1
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-dns' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 7 months
Fedora 12 Update: libguestfs-1.2.11-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-13081
2010-08-20 00:56:02
--------------------------------------------------------------------------------
Name : libguestfs
Product : Fedora 12
Version : 1.2.11
Release : 1.fc12
URL : http://libguestfs.org/
Summary : Access and modify virtual machine disk images
Description :
Libguestfs is a library for accessing and modifying guest disk images.
Amongst the things this is good for: making batch configuration
changes to guests, getting disk used/free statistics (see also:
virt-df), migrating between virtualization systems (see also:
virt-p2v), performing partial backups, performing partial guest
clones, cloning guests and changing registry/UUID/hostname info, and
much else besides.
Libguestfs uses Linux kernel and qemu code, and can access any type of
guest filesystem that Linux and qemu can, including but not limited
to: ext2/3/4, btrfs, FAT and NTFS, LVM, many different disk partition
schemes, qcow, qcow2, vmdk.
Libguestfs provides ways to enumerate guest storage (eg. partitions,
LVs, what filesystem is in each LV, etc.). It can also run commands
in the context of the guest.
Libguestfs is a library that can be linked with C and C++ management
programs.
See also the 'guestfish' package for shell scripting and command line
access, and 'libguestfs-mount' for mounting guest filesystems on the
host using FUSE.
For Perl bindings, see 'perl-libguestfs'.
For OCaml bindings, see 'ocaml-libguestfs-devel'.
For Python bindings, see 'python-libguestfs'.
For Ruby bindings, see 'ruby-libguestfs'.
For Java bindings, see 'libguestfs-java-devel'.
--------------------------------------------------------------------------------
Update Information:
Update to new stable version. Missing Requires binutils. New stable branch
version 1.2.10. New stable branch release. New stable version 1.2.7.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 17 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.11-1
- New stable branch version 1.2.11.
* Tue Jul 20 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.10-1.1
- Requires binutils (RHBZ#616437).
* Mon Jul 12 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.10-1
- New stable branch version 1.2.10.
* Thu Jun 17 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.7-1.1
- Bump and rebuild.
* Mon May 17 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.7-1
- New upstream stable branch version 1.2.7.
- Add BUGS file to documentation section.
* Wed Apr 21 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.3-1.fc12.6
- Patch appliance so it doesn't call hwclock (causes qemu to segfault).
- Disable checks because qemu-kvm in F-12 keeps segfaulting.
* Tue Apr 20 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.3-1.fc12.2
- Try rebuild.
* Tue Apr 20 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.3-1
- New upstream stable branch version 1.2.3.
- Fixes: 582548, 583554, 582948, 582901, 582929, 582899, 582953,
578407.
* Thu Apr 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.2-1
- New upstream stable branch version 1.2.2.
- Fixes RHBZ#580016.
- Fixes several important bugs in virt-resize.
* Thu Apr 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.1-1
- New upstream stable branch version 1.2.1.
- Includes the new tools virt-list-partitions, virt-resize, and
updated virt-rescue and virt-win-reg (with regedit support).
- Reenable tests.
- Fixes bugs: 580650, 579155, 580246, 579664, 578123, 509597,
505329, 576876, 576688, 576689, 569757, 567567, 570181.
* Fri Mar 12 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.85-2.4
- Backport upstream patch to remove dependency on /lib/libntfs-3g.so.N.
- The above depends on the bash quoting patch, so apply that first.
* Mon Mar 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.85-2.3
- Rebuild against latest plymouth in F-13 updates-testing.
* Mon Mar 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.85-2.2
- Bump and rebuild.
* Fri Mar 5 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.85-2.1
- Bump and rebuild.
* Wed Mar 3 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.85-2
- Bump and rebuild.
* Mon Mar 1 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.85-1
- New upstream version 1.0.85.
- Remove hivex, now a separate upstream project and package.
- Remove supermin quoting patch, now upstream.
* Mon Mar 1 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.84-6
- Fix quoting in supermin-split script (RHBZ#566511).
- Don't include bogus './builddir' entries in supermin hostfiles
(RHBZ#566512).
* Mon Feb 22 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.84-4
- Don't include generator.ml in rpm. It's 400K and almost no one will need it.
- Add comments to spec file about how repo building works.
- Whitespace changes in the spec file.
* Mon Feb 22 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.84-3
- Bump and rebuild.
* Tue Feb 16 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.84-2
- Bump and rebuild.
* Fri Feb 12 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.84-1
- New upstream version 1.0.84.
* Fri Feb 12 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.83-8
- Bump and rebuild.
* Thu Feb 11 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.83-7
- Disable tests. These fail in Koji (on RHEL 5 kernel) because of a
bug in preadv/pwritev emulation in glibc (RHBZ#563103).
* Tue Feb 9 2010 Matthew Booth <mbooth(a)redhat.com> - 1.0.83-6
- Change buildnonet to buildnet
- Allow buildnet, mirror, updates, virtio and runtests to be configured by user
macros.
* Mon Feb 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.83-5
- libguestfs-tools should require perl-XML-Writer (RHBZ#562858).
* Mon Feb 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.83-4
- Use virtio for block device access (RHBZ#509383 is fixed).
* Fri Feb 5 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.83-3
- Rebuild: possible timing-related build problem in Koji.
* Fri Feb 5 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.83-2
- New upstream release 1.0.83.
- This release fixes:
Add Marathi translations (RHBZ#561671).
Polish translations (RHBZ#502533).
Add Gujarti translations (Sweta Kothari) (RHBZ#560918).
Update Oriya translations (thanks Manoj Kumar Giri) (RHBZ#559498).
Set locale in C programs so l10n works (RHBZ#559962).
Add Tamil translation (RHBZ#559877) (thanks to I.Felix)
Update Punjabi translation (RHBZ#559480) (thanks Jaswinder Singh)
- There are significant fixes to hive file handling.
- Add hivexsh and manual page.
- Remove two patches, now upstream.
* Sun Jan 31 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.82-7
- Bump and rebuild.
* Fri Jan 29 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.82-6
- Backport a better fix for RHBZ557655 test from upstream.
- Backport fix for unreadable yum.log from upstream.
* Thu Jan 28 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.82-3
- Backport RHBZ557655 test fix from upstream.
* Thu Jan 28 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.82-1
- New upstream version 1.0.82. This includes the two patches
we were carrying, so those are now removed.
- This release fixes:
RHBZ#559498 (Oriya translation).
RHBZ#559480 (Punjabi translation).
RHBZ#558593 (Should prevent corruption by multilib).
RHBZ#559237 (Telugu translation).
RHBZ#557655 (Use xstrtol/xstrtoll to parse integers in guestfish).
RHBZ#557195 (Missing crc kernel modules for recent Linux).
- In addition this contains numerous fixes to the hivex library
for parsing Windows Registry files, making hivex* and virt-win-reg
more robust.
- New API call 'filesize'.
* Thu Jan 28 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.81-8
- Backport special handling of libgcc_s.so.
- Backport unreadable files patch from RHEL 6 / upstream.
* Fri Jan 22 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.81-5
- Require febootstrap >= 2.6 (RHBZ#557262).
* Thu Jan 21 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.81-4
- Rebuild for unannounced soname bump (libntfs-3g.so).
* Fri Jan 15 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.81-3
- Rebuild for unannounced soname bump (libplybootsplash.so).
* Thu Jan 14 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.81-2
- Rebuild for broken dependency (iptables soname bump).
* Wed Jan 13 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.81-1
- New upstream version 1.0.81.
- Remove two upstream patches.
- virt-inspector: Make RPM application data more specific (RHBZ#552718).
* Tue Jan 12 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-14
- Reenable tests because RHBZ#553689 is fixed.
* Tue Jan 12 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-13
- Rebuild because of libparted soname bump (1.9 -> 2.1).
* Fri Jan 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-12
- qemu in Rawhide is totally broken (RHBZ#553689). Disable tests.
* Thu Jan 7 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-11
- Remove gfs-utils (deprecated and removed from Fedora 13 by the
upstream Cluster Suite developers).
- Include patch to fix regression in qemu -serial stdio option.
* Tue Dec 29 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-10
- Remove some debugging statements which were left in the requires
script by accident.
* Mon Dec 21 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-9
- Generate additional requires for supermin (RHBZ#547496).
* Fri Dec 18 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-3
- Work around udevsettle command problem (RHBZ#548121).
- Enable tests.
* Wed Dec 16 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-2
- Disable tests because of RHBZ#548121.
* Wed Dec 16 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-1
- New upstream release 1.0.80.
- New Polish translations (RHBZ#502533).
- Give a meaningful error if no usable kernels are found (RHBZ#539746).
- New tool: virt-list-filesystems
* Fri Dec 4 2009 Stepan Kasal <skasal(a)redhat.com> - 1:1.0.79-3
- rebuild against perl 5.10.1
* Wed Nov 18 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.79-2
- New upstream release 1.0.79.
- Adds FUSE test script and multiple fixes for FUSE (RHBZ#538069).
- Fix virt-df in Xen (RHBZ#538041).
- Improve speed of supermin appliance.
- Disable FUSE-related tests because Koji doesn't currently allow them.
fuse: device not found, try 'modprobe fuse' first
* Tue Nov 10 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.78-2
- New upstream release 1.0.78.
- Many more filesystem types supported by this release - add them
as dependencies.
* Tue Nov 3 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.77-1
- New upstream release 1.0.77.
- Support for mounting guest in host using FUSE (guestmount command).
- hivex*(1) man pages should be in main package, not -devel, since
they are user commands.
- libguestfs-tools: Fix "self-obsoletion" issue raised by rpmlint.
- perl: Remove bogus script Sys/bindtests.pl.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #616437 - libguestfs missing runtime Requires: binutils
https://bugzilla.redhat.com/show_bug.cgi?id=616437
[ 2 ] Bug #582548 - [mknod] umask shouldn't take effect when mode is set explicitly
https://bugzilla.redhat.com/show_bug.cgi?id=582548
[ 3 ] Bug #583554 - [FEAT] mknod-mode command is needed to set mode explicitly
https://bugzilla.redhat.com/show_bug.cgi?id=583554
[ 4 ] Bug #582948 - mknod command doesn't make block, character or FIFO devices
https://bugzilla.redhat.com/show_bug.cgi?id=582948
[ 5 ] Bug #582901 - guestfish chmod/umask commands do not check invalid mode value
https://bugzilla.redhat.com/show_bug.cgi?id=582901
[ 6 ] Bug #582929 - mknod doesn't check for invalid mode
https://bugzilla.redhat.com/show_bug.cgi?id=582929
[ 7 ] Bug #582899 - guestfish:sparse is missed from command autocomplete list
https://bugzilla.redhat.com/show_bug.cgi?id=582899
[ 8 ] Bug #582953 - Misleading help information about lvcreate command
https://bugzilla.redhat.com/show_bug.cgi?id=582953
[ 9 ] Bug #578407 - the prefix '-' in sub-command isn't handled by guestfish in remote control mode
https://bugzilla.redhat.com/show_bug.cgi?id=578407
[ 10 ] Bug #588651 - guestfish 'strings-e' cmd does not give proper error message or hint
https://bugzilla.redhat.com/show_bug.cgi?id=588651
[ 11 ] Bug #516096 - Race condition in test_swapon_label_0: /sbin/blockdev: BLKRRPART: Device or resource busy
https://bugzilla.redhat.com/show_bug.cgi?id=516096
[ 12 ] Bug #591142 - virt-inspector should give an error for unrecognized disk images
https://bugzilla.redhat.com/show_bug.cgi?id=591142
[ 13 ] Bug #588851 - guestfs_launch() returns -1, but guestfs_last_error() == NULL
https://bugzilla.redhat.com/show_bug.cgi?id=588851
[ 14 ] Bug #589039 - guestfish read-file cmd will cause daemon hang when read large files
https://bugzilla.redhat.com/show_bug.cgi?id=589039
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libguestfs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 7 months
Fedora 12 Update: kaffeine-1.0-4.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-13099
2010-08-20 00:56:44
--------------------------------------------------------------------------------
Name : kaffeine
Product : Fedora 12
Version : 1.0
Release : 4.fc12
URL : http://kaffeine.kde.org/
Summary : KDE media player
Description :
Kaffeine is a KDE media player.
--------------------------------------------------------------------------------
Update Information:
added kaffeine.png into hicolor and Requires kdebase-runtime fixes #611273
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 17 2010 Thomas Janssen <thomasj(a)fedoraproject.org> 1.0-4
- added Requires kdebase-runtime
- added kaffeine.png to fix #611273
* Mon Jun 21 2010 Rex Dieter <rdieter(a)fedoraproject.org> 1.0-3
- Unexpanded macro in kdelibs4 dependency (#606134)
- remove old/unused patches
* Tue Jun 1 2010 Thomas Janssen <thomasj(a)fedoraproject.org> 1.0-2
- removed Require libXss, added BR libXss-devel
* Tue Jun 1 2010 Thomas Janssen <thomasj(a)fedoraproject.org> 1.0-1
- kaffeine 1.0
- new dep libXss
- lots of improvements and bugfixes
* Thu Apr 15 2010 Thomas Janssen <thomasj(a)fedoraproject.org> 1.0-0.5.pre3
- deinterlace-optional patch thanks to Kevin Kofler
* Mon Feb 8 2010 Rex Dieter <rdieter(a)fedoraproject.org> - 1.0-0.4.pre3
- kaffeine-1.0-pre3
- adjust summary/description: no longer phonon based (uses xine-lib)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #611273 - Missing icon of kaffeine
https://bugzilla.redhat.com/show_bug.cgi?id=611273
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kaffeine' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 7 months
Fedora 13 Update: cagibi-0.1.1-2.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-12469
2010-08-11 06:59:29
--------------------------------------------------------------------------------
Name : cagibi
Product : Fedora 13
Version : 0.1.1
Release : 2.fc13
URL : http://www.kde.org/
Summary : SSDP (UPnP discovery) cache/proxy daemon
Description :
Cagibi is a cache/proxy daemon for SSDP (the discovery part of UPnP).
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.1. Cagibi is a cache/proxy daemon for SSDP (the discovery part
of UPnP).
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #619012 - Review Request: cagibi - SSDP (UPnP discovery) cache/proxy daemon
https://bugzilla.redhat.com/show_bug.cgi?id=619012
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cagibi' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 7 months
Fedora 13 Update: python-tornado-1.0.1-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-13095
2010-08-20 00:56:36
--------------------------------------------------------------------------------
Name : python-tornado
Product : Fedora 13
Version : 1.0.1
Release : 1.fc13
URL : http://www.tornadoweb.org
Summary : Scalable, non-blocking web server and tools
Description :
Tornado is an open source version of the scalable, non-blocking web server and
and tools.
The framework is distinct from most mainstream web server frameworks (and
certainly most Python frameworks) because it is non-blocking and reasonably
fast. Because it is non-blocking and uses epoll, it can handle thousands of
simultaneous standing connections, which means it is ideal for real-time web
services.
--------------------------------------------------------------------------------
Update Information:
This release fixes a small security hole in RequestHandler.get_secure_cookie
that under some circumstances would allow an attacker to tamper with the signed
data.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 17 2010 Ionuț Arțăriși <mapleoin(a)fedoraproject.org> - 1.0.1-1
- new upstream bugfix release: 1.0.1
* Wed Aug 4 2010 Ionuț C. Arțăriși <mapleoin(a)fedoraproject.org> - 1.0-2
- changed upstream source url
* Wed Aug 4 2010 Ionuț C. Arțăriși <mapleoin(a)fedoraproject.org> - 1.0-1
- new upstream release 1.0
- there's no longer a problem with spurious permissions, so remove that fix
* Thu Jul 22 2010 David Malcolm <dmalcolm(a)redhat.com> - 0.2-4
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-tornado' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 7 months
[SECURITY] Fedora 12 Update: php-pear-CAS-1.1.2-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-12247
2010-08-07 22:45:29
--------------------------------------------------------------------------------
Name : php-pear-CAS
Product : Fedora 12
Version : 1.1.2
Release : 1.fc12
URL : http://www.ja-sig.org/wiki/display/CASC/phpCAS
Summary : Central Authentication Service client library in php
Description :
This package is a PEAR library for using a Central Authentication Service.
--------------------------------------------------------------------------------
Update Information:
Security fixes * Fix a session hijacking hole CVE-2010-2795 [PHPCAS-61] *
callbackurl in proxy mode should be urlencoded, possible XSS CVE-2010-2796
[PHPCAS-67] Bug fixes * Fix warnings for SAML responses without attributes
[PHPCAS-59] * Fix duplicate SAML debug output [PHPCAS-64] * Providing a new
ST/PT/SA during an authenticated session will be ignored and a warning will be
issued to the debug log. [PHPCAS-61] * fix 2 undefinded variable notices in
serviceWeb() [PHPCAS-68] * Prevent domxml-php4-to-php5 to be inclueded twice
[PHPCAS-48] Improvement * Debuglog now contains phpCAS version information
[PHPCAS-62]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #620743 - CVE-2010-2795 php-pear-CAS: authenticated session hijack by providing new well formed ticket (PHPCAS-61)
https://bugzilla.redhat.com/show_bug.cgi?id=620743
[ 2 ] Bug #620751 - CVE-2010-2796 php-pear-CAS: XSS in proxy mode (PHPCAS-67)
https://bugzilla.redhat.com/show_bug.cgi?id=620751
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-pear-CAS' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 7 months
Fedora 13 Update: py-bcrypt-0.2-4.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-13107
2010-08-20 00:57:06
--------------------------------------------------------------------------------
Name : py-bcrypt
Product : Fedora 13
Version : 0.2
Release : 4.fc13
URL : http://www.mindrot.org/projects/py-bcrypt/
Summary : Python bindings for OpenBSD's Blowfish password hashing code
Description :
python-bcrypt is a Python wrapper of OpenBSD's Blowfish password hashing
code, as described in "A Future-Adaptable Password Scheme" by Niels
Provos and David Mazières.
This system hashes passwords using a version of Bruce Schneier's Blowfish
block cipher with modifications designed to raise the cost of off-line
password cracking and frustrate fast hardware implementation. The
computation cost of the algorithm is parametised, so it can be increased
as computers get faster. The intent is to make a compromise of a password
database less likely to result in an attacker gaining knowledge of the
plaintext passwords (e.g. using John the Ripper).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update py-bcrypt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 7 months
Fedora 13 Update: mozilla-noscript-2.0.2.1-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-13160
2010-08-20 00:59:02
--------------------------------------------------------------------------------
Name : mozilla-noscript
Product : Fedora 13
Version : 2.0.2.1
Release : 1.fc13
URL : http://noscript.net/
Summary : JavaScript white list extension for Mozilla Firefox
Description :
The NoScript Firefox extension provides extra protection for Firefox.
It allows JavaScript, Java, Flash and other plug-ins to be executed only by
trusted web sites of your choice (e.g. your online bank) and additionally
provides Anti-XSS protection.
--------------------------------------------------------------------------------
Update Information:
This update introduces some new features and closes many bugs since the last
version. For a full changelog see: http://noscript.net/changelog
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 18 2010 Thomas Spura <tomspur(a)fedoraproject.org> - 2.0.2.1-1
- update to new version
* Sun Jul 18 2010 Thomas Spura <tomspur(a)fedoraproject.org> - 1.10-1
- new version
- renew preferences patch
* Wed Jun 30 2010 Thomas Spura <tomspur(a)fedoraproject.org> - 1.9.9.97-1
- new version
* Sat Jun 12 2010 Thomas Spura <tomspur(a)fedoraproject.org> - 1.9.9.87-1
- new version
* Fri May 28 2010 Thomas Spura <tomspur(a)fedoraproject.org> - 1.9.9.81-1
- new version
* Mon May 24 2010 Thomas Spura <tomspur(a)fedoraproject.org> - 1.9.9.79-1
- new version
* Sun May 16 2010 Thomas Spura <tomspur(a)fedoraproject.org> - 1.9.9.74-1
- new version
- renew patch
* Thu Apr 22 2010 Thomas Spura <tomspur(a)fedoraproject.org> - 1.9.9.69-1
- new version
* Mon Apr 19 2010 Thomas Spura <tomspur(a)fedoraproject.org> - 1.9.9.66-1
- new version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #624635 - mozilla-noscript-2.0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=624635
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mozilla-noscript' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 7 months
Fedora 13 Update: eblook-1.6.1-10.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-13062
2010-08-20 00:55:08
--------------------------------------------------------------------------------
Name : eblook
Product : Fedora 13
Version : 1.6.1
Release : 10.fc13
URL : http://openlab.ring.gr.jp/edict/eblook/
Summary : Command-line EB and EPWING dictionary search program
Description :
Command-line EB and EPWING dictionary search program.
--------------------------------------------------------------------------------
Update Information:
apply a patch for ssize_t and int confusion, provided by Tatsuya Kinoshita apply
a patch for size_t and int confusion, provided by Kazuhiro Ito apply a patch for
size_t and int confusion, provided by Kazuhiro Ito apply a patch for size_t and
int confusion, provided by Kazuhiro Ito
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 18 2010 Daiki Ueno <dueno(a)redhat.com> - 1.6.1-10
- apply a patch for ssize_t and int confusion, provided by Tatsuya Kinoshita.
* Tue Aug 17 2010 Daiki Ueno <dueno(a)redhat.com> - 1.6.1-9
- apply a patch for size_t and int confusion, provided by Kazuhiro Ito.
* Fri Apr 16 2010 Daiki Ueno <dueno(a)redhat.com> - 1.6.1-8
- don't use tabs in this spec.
- change the encoding of Japanese docs to UTF-8.
* Fri Apr 16 2010 Daiki Ueno <dueno(a)redhat.com> - 1.6.1-7
- fix wrong usage of strcpy (closes #579610).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update eblook' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 7 months