--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-18177
2010-11-26 00:21:25
--------------------------------------------------------------------------------
Name : psad
Product : Fedora 14
Version : 2.1.7
Release : 1.fc14
URL : http://www.cipherdyne.org/psad/
Summary : Port Scan Attack Detector (psad) watches for suspect traffic
Description :
Port Scan Attack Detector (psad) is a collection of three lightweight
system daemons written in Perl and in C that are designed to work with Linux
iptables firewalling code to detect port scans and other suspect traffic. It
features a set of highly configurable danger thresholds (with sensible
defaults provided), verbose alert messages that include the source,
destination, scanned port range, begin and end times, tcp flags and
corresponding nmap options, reverse DNS info, email and syslog alerting,
automatic blocking of offending ip addresses via dynamic configuration of
iptables rulesets, and passive operating system fingerprinting. In addition,
psad incorporates many of the tcp, udp, and icmp signatures included in the
snort intrusion detection system (http://www.snort.org) to detect highly
suspect scans for various backdoor programs (e.g. EvilFTP, GirlFriend,
SubSeven), DDoS tools (mstream, shaft), and advanced port scans (syn, fin,
xmas) which are easily leveraged against a machine via nmap. psad can also
alert on snort signatures that are logged via fwsnort
(http://www.cipherdyne.org/fwsnort/), which makes use of the
iptables string match module to detect application layer signatures.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 25 2010 Peter Vrabec <pvrabec(a)redhat.com> 2.1.7-1
- upgrade
* Tue Aug 11 2009 Ville Skyttä <ville.skytta(a)iki.fi> - 2.1.3-4
- Use bzipped upstream tarball.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #609756 - SELinux is preventing /usr/bin/perl "write" access on psad.
https://bugzilla.redhat.com/show_bug.cgi?id=609756
[ 2 ] Bug #583538 - psad has a few issues - I attached a selinux policy which may help
https://bugzilla.redhat.com/show_bug.cgi?id=583538
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update psad' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-0063
2011-01-03 19:39:04
--------------------------------------------------------------------------------
Name : less
Product : Fedora 14
Version : 436
Release : 9.fc14
URL : http://www.greenwoodsoftware.com/less/
Summary : A text file browser similar to more, but better
Description :
The less utility is a text file browser that resembles more, but has
more capabilities. Less allows you to move backwards in the file as
well as forwards. Since less doesn't have to read the entire input file
before it starts, less starts up more quickly than text editors (for
example, vi).
You should install less because it is a basic utility for viewing text
files, and you'll use it frequently.
--------------------------------------------------------------------------------
Update Information:
Fix regression in lesspipe.sh script - reading *.gz files etc.
See Comment #9 of Bug #615303.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 3 2011 Vojtech Vitek (V-Teq) <vvitek(a)redhat.com> - 436-9
- Fix regression in lesspipe.sh script (*.gz files etc.)
Resolves #615303 (comment #9)
* Thu Dec 23 2010 Vojtech Vitek (V-Teq) <vvitek(a)redhat.com> - 436-8
- Fix lesspipe.sh to return valid exit statuses
Resolves: #579251, #615303
* Wed Dec 22 2010 Vojtech Vitek (V-Teq) <vvitek(a)redhat.com> - 436-7
- Fix for valid empty LESSOPEN pipe output
Resolves: #579251, #615303
- The new "--old-bot" option is not documented in the man page
Resolves: #510724
- Fix descriptions of some options in online help
Resolves: #578289 (Jeff Bastian <jbastian(a)redhat.com>)[IT603793]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #615303 - less fails to decompress empty files that have been gzipped
https://bugzilla.redhat.com/show_bug.cgi?id=615303
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update less' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19040
2010-12-18 22:35:49
--------------------------------------------------------------------------------
Name : tomcatjss
Product : Fedora 14
Version : 2.0.0
Release : 1.fc14
URL : http://pki.fedoraproject.org/
Summary : JSSE implementation using JSS for Tomcat
Description :
A Java Secure Socket Extension (JSSE) implementation
using Java Security Services (JSS) for Tomcat 6.
NOTE: The 'tomcatjss' package conflicts with the 'tomcat-native' package
because it uses an underlying NSS security model rather than the
OpenSSL security model, so these two packages may not co-exist.
--------------------------------------------------------------------------------
Update Information:
use tomcat6 for tomcatjss
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #658188 - remove remaining references to tomcat5
https://bugzilla.redhat.com/show_bug.cgi?id=658188
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update tomcatjss' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19041
2010-12-18 22:35:51
--------------------------------------------------------------------------------
Name : tomcatjss
Product : Fedora 13
Version : 2.0.0
Release : 1.fc13
URL : http://pki.fedoraproject.org/
Summary : JSSE implementation using JSS for Tomcat
Description :
A Java Secure Socket Extension (JSSE) implementation
using Java Security Services (JSS) for Tomcat 6.
NOTE: The 'tomcatjss' package conflicts with the 'tomcat-native' package
because it uses an underlying NSS security model rather than the
OpenSSL security model, so these two packages may not co-exist.
--------------------------------------------------------------------------------
Update Information:
use tomcat6 for tomcatjss
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #658188 - remove remaining references to tomcat5
https://bugzilla.redhat.com/show_bug.cgi?id=658188
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update tomcatjss' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-17844
2010-11-17 22:31:12
--------------------------------------------------------------------------------
Name : bfast
Product : Fedora 14
Version : 0.6.4e
Release : 1.fc14
URL : http://bfast.sourceforge.net
Summary : Blat-like Fast Accurate Search Tool
Description :
BFAST facilitates the fast and accurate mapping of short reads to
reference sequences. Some advantages of BFAST include:
Speed: enables billions of short reads to be mapped quickly.
Accuracy: A priori probabilities for mapping reads with defined set of variants.
An easy way to measurably tune accuracy at the expense of speed.
Specifically, BFAST was designed to facilitate whole-genome
resequencing, where mapping billions of short reads with variants is
of utmost importance.
BFAST supports both Illumina and ABI SOLiD data, as well as any other
Next-Generation Sequencing Technology (454, Helicos), with particular
emphasis on sensitivity towards errors, SNPs and especially
indels. Other algorithms take short-cuts by ignoring errors, certain
types of variants (indels), and even require further alignment, all to
be the "fastest" (but still not complete). BFAST is able to be tuned
to find variants regardless of the error-rate, polymorphism rate, or
other factors.
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 14 2010 Adam Huffman <bloch(a)verdurin.com> - 0.6.4e-1
- new upstream bugfix release
- solid2fastq.pl removed upstream
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update bfast' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19274
2010-12-28 20:38:29
--------------------------------------------------------------------------------
Name : mingw32-pangomm
Product : Fedora 14
Version : 2.26.2
Release : 1.fc14
URL : http://gtkmm.sourceforge.net/
Summary : MinGW Windows C++ interface for Pango
Description :
pangomm provides a C++ interface to the Pango library. Highlights
include typesafe callbacks, widgets extensible via inheritance and a
comprehensive set of widget classes that can be freely combined to
quickly create complex user interfaces.
%{_mingw32_debug_package}
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 6 2010 Thomas Sailer <t.sailer(a)alumni.ethz.ch> - 2.26.2-1
- update to 2.26.2
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mingw32-pangomm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19246
2010-12-25 21:47:30
--------------------------------------------------------------------------------
Name : ruby
Product : Fedora 14
Version : 1.8.7.330
Release : 1.fc14
URL : http://www.ruby-lang.org/
Summary : An interpreter of object-oriented scripting language
Description :
Ruby is the interpreted scripting language for quick and easy
object-oriented programming. It has many features to process text
files and to do system management tasks (as in Perl). It is simple,
straight-forward, and extensible.
--------------------------------------------------------------------------------
Update Information:
New version 1.8.7 p330 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 26 2010 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.8.7.330-1
- Update to 1.8.7 p330
- ext/tk updated to the newest header
* Thu Nov 4 2010 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1.8.7.302-2
- Avoid multilib conflict on -libs subpackage (bug 649174)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ruby' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-0089
2011-01-04 20:15:10
--------------------------------------------------------------------------------
Name : perl-XML-TreeBuilder
Product : Fedora 14
Version : 4.0
Release : 3.fc14
URL : http://search.cpan.org/dist/XML-TreeBuilder/
Summary : Parser that builds a tree of XML::Element objects
Description :
perl-XML-TreeBuilder is a Perl module that implements a parser
that builds a tree of XML::Element objects.
--------------------------------------------------------------------------------
Update Information:
Rebase on new upstream
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 4 2011 Rüdiger Landmann <r.landmann(a)redhat.com> - 4.0-3
- Add Test::More to build requires
* Thu Dec 23 2010 Marcela Maslanova <mmaslano(a)redhat.com> - 4.0-2
- 661697 rebuild for fixing problems with vendorach/lib
* Thu Dec 2 2010 Jeff Fearn <jfearn(a)redhat.com> - 4.0-1
- New upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #664360 - Rebase on upstream version 4.0
https://bugzilla.redhat.com/show_bug.cgi?id=664360
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-XML-TreeBuilder' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-0019
2011-01-02 19:32:31
--------------------------------------------------------------------------------
Name : amsn
Product : Fedora 14
Version : 0.98.4
Release : 1.fc14
URL : http://www.amsn-project.net/
Summary : MSN Messenger clone for Linux, Mac and Windows
Description :
This is an MSN Messenger clone for Unix, Windows, and Macintosh.
It is written in tcl/tk and supports filetransfers, webcam, etc.
--------------------------------------------------------------------------------
Update Information:
Update to upstream bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 2 2011 Sander Hoentjen <sander(a)hoentjen.eu> - 0.98.4-1
- Update to bugfix release 0.98.4, this fixes reading OIM's
- drop upstream tktray patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #666070 - amsn version bump to 0.98.4
https://bugzilla.redhat.com/show_bug.cgi?id=666070
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update amsn' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19314
2010-12-30 19:54:18
--------------------------------------------------------------------------------
Name : pidgin
Product : Fedora 14
Version : 2.7.9
Release : 1.fc14
URL : http://pidgin.im/
Summary : A Gtk+ based multiprotocol instant messaging client
Description :
Pidgin allows you to talk to anyone using a variety of messaging
protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu,
ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and
Zephyr. These protocols are implemented using a modular, easy to
use design. To use a protocol, just add an account using the
account editor.
Pidgin supports many common features of other clients, as well as many
unique features, such as perl scripting, TCL scripting and C plugins.
Pidgin is not affiliated with or endorsed by America Online, Inc.,
Microsoft Corporation, Yahoo! Inc., or ICQ Inc.
--------------------------------------------------------------------------------
Update Information:
New release 2.7.9
Upstream ChangeLog:
http://developer.pidgin.im/wiki/ChangeLog
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 27 2010 Stu Tomlinson <stu(a)nosnilmot.com> 2.7.9-1
- 2.7.9, includes security/DoS fix in the MSN protocol (#665856)
* Mon Nov 29 2010 Stu Tomlinson <stu(a)nosnilmot.com> 2.7.7-1
- 2.7.7
- Disable MSNP16 due to regressions interacting with official client
* Fri Nov 19 2010 Stu Tomlinson <stu(a)nosnilmot.com> 2.7.5-2
- Add additional intermediate CA certificates to fix MSN
* Mon Nov 1 2010 Stu Tomlinson <stu(a)nosnilmot.com> 2.7.5-1
- 2.7.5
* Fri Oct 22 2010 Stu Tomlinson <stu(a)nosnilmot.com> 2.7.4-1
- 2.7.4, includes security fix for CVE-2010-3711
* Tue Oct 12 2010 Milan Crha <mcrha(a)redhat.com> - 2.7.3-6
- Rebuild against newer evolution-data-server
* Wed Sep 29 2010 jkeating - 2.7.3-5
- Rebuilt for gcc bug 634757
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #665421 - Pidgin: MSN DirectConnect DoS (crash) after receiving a short P2P message
https://bugzilla.redhat.com/show_bug.cgi?id=665421
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pidgin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------