Fedora 14 Update: man-pages-zh-CN-1.5.1-3.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19020
2010-12-17 19:58:06
--------------------------------------------------------------------------------
Name : man-pages-zh-CN
Product : Fedora 14
Version : 1.5.1
Release : 3.fc14
URL : http://code.google.com/p/manpages-zh/
Summary : Chinese Man Pages from Chinese Man Pages Project
Description :
manpages-zh is a sub-project from i18n-zh, from the Chinese Man Pages
Project (CMPP). However, the original CMPP seems inactive, nor can the
original home page (cmpp.linuxforum.net) be visited.
This project revives and maintains the remains of CMPP.
So far the simplified Chinese is packed.
--------------------------------------------------------------------------------
Update Information:
Initial package for manpages-zh
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #661193 - Review Request: man-pages-zh-CN - Chinese man pages
https://bugzilla.redhat.com/show_bug.cgi?id=661193
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update man-pages-zh-CN' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 5 months
Fedora 14 Update: vlgothic-fonts-20101218-1.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19198
2010-12-22 19:33:50
--------------------------------------------------------------------------------
Name : vlgothic-fonts
Product : Fedora 14
Version : 20101218
Release : 1.fc14
URL : http://dicey.org/vlgothic
Summary : Japanese TrueType font
Description :
VLGothic provides Japanese TrueType fonts from the Vine Linux project.
Most of the glyphs are taken from the M+ and Sazanami Gothic fonts,
but some have also been improved by the project.
This package provides the monospace VLGothic font.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2010 Akira TAGOH <tagoh(a)redhat.com> - 20101218-1
- New upstream release.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update vlgothic-fonts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 5 months
Fedora 13 Update: orafce-3.0.3-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19262
2010-12-27 20:12:29
--------------------------------------------------------------------------------
Name : orafce
Product : Fedora 13
Version : 3.0.3
Release : 1.fc13
URL : http://pgfoundry.org/projects/orafce/
Summary : Implementation of some Oracle functions into PostgreSQL
Description :
The goal of this project is implementation some functions from Oracle database.
Some date functions (next_day, last_day, trunc, round, ...) are implemented
now. Functionality was verified on Oracle 10g and module is useful
for production work.
--------------------------------------------------------------------------------
Update Information:
Update to the new upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 24 2010 - Jean-Francois Saucier <jsaucier(a)gmail.com> - 3.0.3-1
- Update to the new upstream version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update orafce' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 5 months
[SECURITY] Fedora 14 Update: libwmf-0.2.8.4-27.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19033
2010-12-17 19:58:37
--------------------------------------------------------------------------------
Name : libwmf
Product : Fedora 14
Version : 0.2.8.4
Release : 27.fc14
URL : http://wvware.sourceforge.net/libwmf.html
Summary : Windows MetaFile Library
Description :
A library for reading and converting Windows MetaFile vector graphics (WMF).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 6 2010 Caolán McNamara <caolanm(a)redhat.com> - 0.2.8.4-27
- Resolves: rhbz#660161 security issues
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #660161 - Embeds vulnerable version of gd prone to many CVEs
https://bugzilla.redhat.com/show_bug.cgi?id=660161
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libwmf' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 5 months
Fedora 13 Update: vlgothic-fonts-20101218-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-19181
2010-12-22 19:33:15
--------------------------------------------------------------------------------
Name : vlgothic-fonts
Product : Fedora 13
Version : 20101218
Release : 1.fc13
URL : http://dicey.org/vlgothic
Summary : Japanese TrueType font
Description :
VLGothic provides Japanese TrueType fonts from the Vine Linux project.
Most of the glyphs are taken from the M+ and Sazanami Gothic fonts,
but some have also been improved by the project.
This package provides the monospace VLGothic font.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2010 Akira TAGOH <tagoh(a)redhat.com> - 20101218-1
- New upstream release.
* Thu Aug 19 2010 Akira TAGOH <tagoh(a)redhat.com> - 20100818-1
- New upstream release.
* Wed May 26 2010 Akira TAGOH <tagoh(a)redhat.com> - 20100416-3
- Improve the fontconfig config file to match ja as well.
* Mon Apr 19 2010 Akira TAGOH <tagoh(a)redhat.com> - 20100416-2
- Get rid of compare="contains" again.
* Mon Apr 19 2010 Akira TAGOH <tagoh(a)redhat.com> - 20100416-1
- New upstream release.
- Get rid of binding="same" from the fontconfig config file. (#578048)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update vlgothic-fonts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 5 months
Fedora 13 Update: qmmp-0.4.3-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-18948
2010-12-17 07:51:00
--------------------------------------------------------------------------------
Name : qmmp
Product : Fedora 13
Version : 0.4.3
Release : 1.fc13
URL : http://qmmp.ylsoftware.com/index_en.html
Summary : Qt-based multimedia player
Description :
This program is an audio-player, written with help of Qt library.
The user interface is similar to winamp or xmms.
Main opportunities:
* Winamp and xmms skins support
* plugins support
* Ogg Vorbis support
* native FLAC support
* Musepack support
* WavePack support
* ModPlug support
* PCM WAVE support
* CD Audio support
* CUE sheet support
* ALSA sound output
* JACK sound output
* OSS sound output
* PulseAudio output
* Last.fm/Libre.fm scrobbler
* D-Bus support
* Spectrum Analyzer
* projectM visualization
* sample rate conversion
* bs2b dsp effect
* streaming support
* removable device detection
* MPRIS support
* global hotkey support
* lyrics support
--------------------------------------------------------------------------------
Update Information:
New version, fixes some problems (which may include some crashes caught by abrt).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 15 2010 Karel Volný <kvolny(a)redhat.com> 0.4.3-1
- new version
- adds dvd autodetection
- lot of fixes
* Mon Sep 13 2010 Karel Volný <kvolny(a)redhat.com> 0.4.2-1
- new version
- adds Japanese and Spanish translations
- lot of fixes (should fix bug #634527)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #650466 - qmmp-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=650466
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qmmp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 5 months
[SECURITY] Fedora 14 Update: maniadrive-1.2-23.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-18976
2010-12-17 07:51:56
--------------------------------------------------------------------------------
Name : maniadrive
Product : Fedora 14
Version : 1.2
Release : 23.fc14
URL : http://maniadrive.raydium.org/
Summary : 3D stunt driving game
Description :
ManiaDrive is an arcade car game on acrobatic tracks, with a quick and nervous
gameplay (tracks almost never exceed one minute). Features: Complex car
physics, Challenging "story mode", LAN and Internet mode, Live scores,
Track editor, Dedicated server with HTTP interface and More than 30 blocks.
--------------------------------------------------------------------------------
Update Information:
Security Enhancements and Fixes in PHP 5.3.4:
* Fixed crash in zip extract method (possible CWE-170).
* Paths with NULL in them (foo\0bar.txt) are now considered as invalid (CVE-2006-7243).
* Fixed a possible double free in imap extension (Identified by Mateusz Kocielski). (CVE-2010-4150).
* Fixed NULL pointer dereference in ZipArchive::getArchiveComment. (CVE-2010-3709).
* Fixed possible flaw in open_basedir (CVE-2010-3436).
* Fixed MOPS-2010-24, fix string validation. (CVE-2010-2950).
* Fixed symbolic resolution support when the target is a DFS share.
* Fixed bug #52929 (Segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data) (CVE-2010-3710).
Key Bug Fixes in PHP 5.3.4 include:
* Added stat support for zip stream.
* Added follow_location (enabled by default) option for the http stream support.
* Added a 3rd parameter to get_html_translation_table. It now takes a charset hint, like htmlentities et al.
* Implemented FR #52348, added new constant ZEND_MULTIBYTE to detect zend multibyte at runtime.
Full upstream Changelog : http://www.php.net/ChangeLog-5.php#5.3.4
This update also provides php-eaccelerator and maniadrive packages rebuild against update php.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 12 2010 Remi Collet <Fedora(a)famillecollet.com> 1.2-23
- Rebuild for new php 5.3.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #649056 - CVE-2010-3870 php: XSS mitigation bypass via utf8_decode()
https://bugzilla.redhat.com/show_bug.cgi?id=649056
[ 2 ] Bug #651206 - CVE-2010-3709 php: NULL pointer dereference in ZipArchive::getArchiveComment
https://bugzilla.redhat.com/show_bug.cgi?id=651206
[ 3 ] Bug #651682 - CVE-2010-4156 php information disclosure via mb_strcut()
https://bugzilla.redhat.com/show_bug.cgi?id=651682
[ 4 ] Bug #652836 - CVE-2009-5016 php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string
https://bugzilla.redhat.com/show_bug.cgi?id=652836
[ 5 ] Bug #660382 - CVE-2010-4409 php: getSymbol() integer overflow vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=660382
[ 6 ] Bug #656917 - CVE-2010-4150 php: Double free in the imap extension
https://bugzilla.redhat.com/show_bug.cgi?id=656917
[ 7 ] Bug #646684 - CVE-2010-3710 php: DoS in filter_var() via long email string
https://bugzilla.redhat.com/show_bug.cgi?id=646684
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update maniadrive' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 5 months
[SECURITY] Fedora 14 Update: php-eaccelerator-0.9.6.1-3.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-18976
2010-12-17 07:51:56
--------------------------------------------------------------------------------
Name : php-eaccelerator
Product : Fedora 14
Version : 0.9.6.1
Release : 3.fc14
URL : http://eaccelerator.net/
Summary : PHP accelerator, optimizer, encoder and dynamic content cacher
Description :
eAccelerator is a further development of the MMCache PHP Accelerator & Encoder.
It increases performance of PHP scripts by caching them in compiled state, so
that the overhead of compiling is almost completely eliminated.
--------------------------------------------------------------------------------
Update Information:
Security Enhancements and Fixes in PHP 5.3.4:
* Fixed crash in zip extract method (possible CWE-170).
* Paths with NULL in them (foo\0bar.txt) are now considered as invalid (CVE-2006-7243).
* Fixed a possible double free in imap extension (Identified by Mateusz Kocielski). (CVE-2010-4150).
* Fixed NULL pointer dereference in ZipArchive::getArchiveComment. (CVE-2010-3709).
* Fixed possible flaw in open_basedir (CVE-2010-3436).
* Fixed MOPS-2010-24, fix string validation. (CVE-2010-2950).
* Fixed symbolic resolution support when the target is a DFS share.
* Fixed bug #52929 (Segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data) (CVE-2010-3710).
Key Bug Fixes in PHP 5.3.4 include:
* Added stat support for zip stream.
* Added follow_location (enabled by default) option for the http stream support.
* Added a 3rd parameter to get_html_translation_table. It now takes a charset hint, like htmlentities et al.
* Implemented FR #52348, added new constant ZEND_MULTIBYTE to detect zend multibyte at runtime.
Full upstream Changelog : http://www.php.net/ChangeLog-5.php#5.3.4
This update also provides php-eaccelerator and maniadrive packages rebuild against update php.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #649056 - CVE-2010-3870 php: XSS mitigation bypass via utf8_decode()
https://bugzilla.redhat.com/show_bug.cgi?id=649056
[ 2 ] Bug #651206 - CVE-2010-3709 php: NULL pointer dereference in ZipArchive::getArchiveComment
https://bugzilla.redhat.com/show_bug.cgi?id=651206
[ 3 ] Bug #651682 - CVE-2010-4156 php information disclosure via mb_strcut()
https://bugzilla.redhat.com/show_bug.cgi?id=651682
[ 4 ] Bug #652836 - CVE-2009-5016 php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string
https://bugzilla.redhat.com/show_bug.cgi?id=652836
[ 5 ] Bug #660382 - CVE-2010-4409 php: getSymbol() integer overflow vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=660382
[ 6 ] Bug #656917 - CVE-2010-4150 php: Double free in the imap extension
https://bugzilla.redhat.com/show_bug.cgi?id=656917
[ 7 ] Bug #646684 - CVE-2010-3710 php: DoS in filter_var() via long email string
https://bugzilla.redhat.com/show_bug.cgi?id=646684
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-eaccelerator' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 5 months
[SECURITY] Fedora 14 Update: php-5.3.4-1.fc14.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-18976
2010-12-17 07:51:56
--------------------------------------------------------------------------------
Name : php
Product : Fedora 14
Version : 5.3.4
Release : 1.fc14.1
URL : http://www.php.net/
Summary : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.
The php package contains the module which adds support for the PHP
language to Apache HTTP Server.
--------------------------------------------------------------------------------
Update Information:
Security Enhancements and Fixes in PHP 5.3.4:
* Fixed crash in zip extract method (possible CWE-170).
* Paths with NULL in them (foo\0bar.txt) are now considered as invalid (CVE-2006-7243).
* Fixed a possible double free in imap extension (Identified by Mateusz Kocielski). (CVE-2010-4150).
* Fixed NULL pointer dereference in ZipArchive::getArchiveComment. (CVE-2010-3709).
* Fixed possible flaw in open_basedir (CVE-2010-3436).
* Fixed MOPS-2010-24, fix string validation. (CVE-2010-2950).
* Fixed symbolic resolution support when the target is a DFS share.
* Fixed bug #52929 (Segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data) (CVE-2010-3710).
Key Bug Fixes in PHP 5.3.4 include:
* Added stat support for zip stream.
* Added follow_location (enabled by default) option for the http stream support.
* Added a 3rd parameter to get_html_translation_table. It now takes a charset hint, like htmlentities et al.
* Implemented FR #52348, added new constant ZEND_MULTIBYTE to detect zend multibyte at runtime.
Full upstream Changelog : http://www.php.net/ChangeLog-5.php#5.3.4
This update also provides php-eaccelerator and maniadrive packages rebuild against update php.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 12 2010 Remi Collet <rpms(a)famillecollet.com> 5.3.4-1.1
- security patch from upstream for #660517
* Sat Dec 11 2010 Remi Collet <Fedora(a)famillecollet.com> 5.3.4-1
- update to 5.3.4
http://www.php.net/ChangeLog-5.php#5.3.4
- move phpize to php-cli (see #657812)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #649056 - CVE-2010-3870 php: XSS mitigation bypass via utf8_decode()
https://bugzilla.redhat.com/show_bug.cgi?id=649056
[ 2 ] Bug #651206 - CVE-2010-3709 php: NULL pointer dereference in ZipArchive::getArchiveComment
https://bugzilla.redhat.com/show_bug.cgi?id=651206
[ 3 ] Bug #651682 - CVE-2010-4156 php information disclosure via mb_strcut()
https://bugzilla.redhat.com/show_bug.cgi?id=651682
[ 4 ] Bug #652836 - CVE-2009-5016 php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string
https://bugzilla.redhat.com/show_bug.cgi?id=652836
[ 5 ] Bug #660382 - CVE-2010-4409 php: getSymbol() integer overflow vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=660382
[ 6 ] Bug #656917 - CVE-2010-4150 php: Double free in the imap extension
https://bugzilla.redhat.com/show_bug.cgi?id=656917
[ 7 ] Bug #646684 - CVE-2010-3710 php: DoS in filter_var() via long email string
https://bugzilla.redhat.com/show_bug.cgi?id=646684
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 5 months
Fedora 13 Update: eclipse-nls-3.5.0.v20100814074441-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-18803
2010-12-10 20:08:20
--------------------------------------------------------------------------------
Name : eclipse-nls
Product : Fedora 13
Version : 3.5.0.v20100814074441
Release : 1.fc13
URL : http://babel.eclipse.org/
Summary : Babel language packs for the Eclipse platform and various plugins
Description :
Babel language packs include translations for the Eclipse platform and other
Eclipse-related packages.
--------------------------------------------------------------------------------
Update Information:
Updated to Babel langpack R0.8.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Sean Flanigan <sflaniga(a)redhat.com> - 3.5.0.v20100814074441-1
- Updated from upstream to 0.8.0 (3.5.0.v20100814074441)
- Added locales ca, en_CA, fa and id
- Marked eclipse-nls as not having debuginfo
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update eclipse-nls' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 5 months