Fedora 15 Update: perl-Devel-PatchPerl-0.36-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7601
2011-05-27 19:56:32
--------------------------------------------------------------------------------
Name : perl-Devel-PatchPerl
Product : Fedora 15
Version : 0.36
Release : 1.fc15
URL : http://search.cpan.org/dist/Devel-PatchPerl/
Summary : Patch perl source à la Devel::PPPort's buildperl.pl
Description :
Devel::PatchPerl is a modularisation of the patching code contained in
Devel::PPPort's buildperl.pl.
--------------------------------------------------------------------------------
Update Information:
This update fixes chmod of hints files, making it only set 644 instead of 755 (the 5.13.x branch of perls introduced 'porting/exec-bit.t' which is failing when files that shouldn't have execute bit in the source tree do).
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Devel-PatchPerl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
[SECURITY] Fedora 15 Update: drupal7-7.2-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7575
2011-05-26 21:14:39
--------------------------------------------------------------------------------
Name : drupal7
Product : Fedora 15
Version : 7.2
Release : 1.fc15
URL : http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
* Advisory ID: DRUPAL-SA-CORE-2011-001
* Project: Drupal core [1]
* Version: 6.x, 7.x
* Date: 2011-May-25
* Security risk: Critical [2]
* Exploitable from: Remote
* Vulnerability: Access bypass, Cross Site Scripting
-------- DESCRIPTION
---------------------------------------------------------
Multiple vulnerabilities and weaknesses were discovered in Drupal.
.... Reflected cross site scripting vulnerability in error handler
A reflected cross site scripting vulnerability was discovered in Drupal's
error handler. Drupal displays PHP errors in the messages area, and a
specially crafted URL can cause malicious scripts to be injected into the
message. The issue can be mitigated by disabling on-screen error display at
admin/settings/error-reporting. This is the recommended setting for
production sites.
This issue affects Drupal 6.x only.
.... Cross site scripting vulnerability in Color module
When using re-colorable themes, color inputs are not sanitized. Malicious
color values can be used to insert arbitrary CSS and script code. Successful
exploitation requires the "Administer themes" permission.
This issue affects Drupal 6.x and 7.x.
.... Access bypass in File module
When using private files in combination with a node access module, the File
module allows unrestricted access to private files.
This issue affects Drupal 7.x only.
-------- VERSIONS AFFECTED
---------------------------------------------------
* Drupal 7.x before version 7.1.
* Drupal 6.x before version 6.21.
-------- SOLUTION
------------------------------------------------------------
Install the latest version:
* If you are running Drupal 7.x then upgrade to Drupal 7.1 [3] or 7.2 [4].
* If you are running Drupal 6.x then upgrade to Drupal 6.21 [5] or 6.22. [6]
The Security Team has released both a pure security update without other bug
fixes and a security update combined with other bug fixes and improvements.
You can choose to either only include the security update for an immediate
fix (which might require less quality assurance and testing) or more fixes
and improvements alongside the security fixes by choosing between Drupal 7.1
[7] and Drupal 7.2 [8] or Drupal 6.21 [9] and Drupal 6.22 [10].
See the release announcement [11] for more information.
See also the Drupal core [12] project page.
-------- REPORTED BY
---------------------------------------------------------
* The reflected cross site scripting vulnerability was reported by Heine
Deelstra [13] (*).
* The Color module cross site scripting vulnerability was reported by Kasper
Lindgaard, Secunia Research.
* The File access bypass was reported by Hubert Lecorche, and Peter Bex
[14].
-------- FIXED BY
------------------------------------------------------------
* The reflected cross site scripting vulnerability was fixed by Alan
Smithee.
* The Color module cross site scripting vulnerability was fixed by Stéphane
Corlosquet [15] (*), Heine Deelstra [16] (*), and Peter Wolanin [17] (*).
* The File access bypass was fixed by Heine Deelstra [18] (*).
(*) Member of the Drupal security team.
-------- CONTACT AND MORE INFORMATION
----------------------------------------
The Drupal security team can be reached at security at drupal.org or via the
contact form at http://drupal.org/contact [19].
Learn more about the Drupal Security team and their policies [20], writing
secure code for Drupal [21], and securing your site [22].
[1] http://drupal.org/project/drupal
[2] http://drupal.org/security-team/risk-levels
[3] http://drupal.org/node/1168910
[4] http://drupal.org/node/1168946
[5] http://drupal.org/node/1168908
[6] http://drupal.org/node/1168950
[7] http://drupal.org/node/1168910
[8] http://drupal.org/node/1168946
[9] http://drupal.org/node/1168908
[10] http://drupal.org/node/1168950
[11] http://drupal.org/drupal-7.2
[12] http://drupal.org/project/drupal
[13] http://drupal.org/user/17943
[14] https://drupal.org/user/309898
[15] http://drupal.org/user/52142
[16] http://drupal.org/user/17943
[17] http://drupal.org/user/49851
[18] http://drupal.org/user/17943
[19] http://drupal.org/contact
[20] http://drupal.org/security-team
[21] http://drupal.org/writing-secure-code
[22] http://drupal.org/security/secure-configuration
_______________________________________________
Security-news mailing list
Security-news(a)drupal.org
http://lists.drupal.org/mailman/listinfo/security-news
Require php 5.3.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 26 2011 Jon Ciesla <limb(a)jcomserv.net> - 7.2-1
- New upstream, SA-CORE-2011-001.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #704319 - drupal7 should require php53 instead of php (including php sub-packages)
https://bugzilla.redhat.com/show_bug.cgi?id=704319
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update drupal7' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora 13 Update: spyder-2.0.11-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7452
2011-05-25 01:57:32
--------------------------------------------------------------------------------
Name : spyder
Product : Fedora 13
Version : 2.0.11
Release : 1.fc13
URL : http://spyderlib.googlecode.com
Summary : Scientific Python Development Environment
Description :
Spyder is a Python development environment with advanced editing, interactive
testing, debugging and introspection features. It is especially recommended
for scientific computing thanks to NumPy (linear algebra), SciPy (signal and
image processing), matplotlib (interactive 2D/3D plotting), MayaVi’s mlab
(interactive 3D visualization) and -of course- IPython support.
Spyder may also be used as a library providing powerful console-related PyQt4
widgets.
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.11
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2011 Chen Lei <supercyper(a)163.com> - 2.0.11-1
- Update to 2.0.11
* Sun Dec 19 2010 Chen Lei <supercyper(a)163.com> - 2.0.5-1
- Update to 2.0.5
* Wed Dec 8 2010 Chen Lei <supercyper(a)163.com> - 2.0.3-1
- Update to 2.0.3
* Wed Dec 1 2010 Chen Lei <supercyper(a)163.com> - 2.0.1-1
- Update to 2.0.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update spyder' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora 15 Update: shotwell-0.9.3-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7562
2011-05-26 21:14:05
--------------------------------------------------------------------------------
Name : shotwell
Product : Fedora 15
Version : 0.9.3
Release : 1.fc15
URL : http://www.yorba.org/shotwell/
Summary : A photo organizer for the GNOME desktop
Description :
Shotwell is a new open source photo organizer designed for the GNOME desktop
environment. It allows you to import photos from your camera, view and edit
them, and share them with others.
--------------------------------------------------------------------------------
Update Information:
This release fixes issues with desktop integration and RAW file storage, and includes translation updates.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 26 2011 Michel Salim <salimma(a)fedoraproject.org> - 0.9.3-1
- Update to 0.9.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #700057 - shotwell-0.9.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=700057
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update shotwell' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora 14 Update: gourmet-0.15.9-1.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-6717
2011-05-09 01:24:19
--------------------------------------------------------------------------------
Name : gourmet
Product : Fedora 14
Version : 0.15.9
Release : 1.fc14
URL : http://grecipe-manager.sourceforge.net
Summary : Recipe Manager for the GNOME desktop environment
Description :
Gourmet Recipe Manager is a recipe-organizer for GNOME that generates shopping
lists and allows rapid searching of recipes. It imports mealmaster & mastercook
files and exports webpages & other formats.
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2011 Jeff Raber <jeff.raber(a)gmail.com> - 0.15.9-1
- New upstream release
* Fri Dec 3 2010 Jef Spaleta <jspaleta AT fedoraproject DOT org> - 0.15.6-4
- Additional database compatibility issue found and fixed as part of updates-testing
* Wed Nov 24 2010 Jef Spaleta <jspaleta AT fedoraproject DOT org> - 0.15.6-3
- Apply upstream patch for old db comptability
* Wed Nov 24 2010 Jef Spaleta <jspaleta AT fedoraproject DOT org> - 0.15.6-2
- Apply upstream patch for old db comptability
* Mon Nov 15 2010 Jeff Raber <jeff.raber(a)gmail.com> - 0.15.6-1
- New upstream point release, bug fixes
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gourmet' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora 15 Update: libcgroup-0.37.1-3.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7685
2011-05-30 21:45:45
--------------------------------------------------------------------------------
Name : libcgroup
Product : Fedora 15
Version : 0.37.1
Release : 3.fc15
URL : http://libcg.sourceforge.net/
Summary : Tools and libraries to control and monitor control groups
Description :
Control groups infrastructure. The tools and library help manipulate, control,
administrate and monitor control groups and the associated controllers.
--------------------------------------------------------------------------------
Update Information:
In this update the cgconfig service and its sample configuration file has been fixed so it is usable on systems with systemd.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 30 2011 Jan Safranek <jsafrane(a)redhat.com> 0.37.1-4
- fixed cgconfig service not to unmount stuff it did not mount
- added better sample cgconfig.conf file to reflect systemd
mounting all controllers during boot (#702111)
* Fri Apr 8 2011 Jan Safranek <jsafrane(a)redhat.com> 0.37.1-2
- Remove /cgroup directory, groups are created in /sys/fs/cgroup (#694687)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #702111 - Starting LSB: start and stop the WLM configuration failed
https://bugzilla.redhat.com/show_bug.cgi?id=702111
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libcgroup' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora 14 Update: kde-plasma-activitymanager-0.5-2.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7401
2011-05-25 01:55:19
--------------------------------------------------------------------------------
Name : kde-plasma-activitymanager
Product : Fedora 14
Version : 0.5
Release : 2.fc14
URL : http://kde-apps.org/content/show.php?content=136278
Summary : KDE plasma activity manager applet
Description :
Lightweight plasmoid to manage your activities effectively.
Can start, stop, switch between, clone, edit and remove activities.
--------------------------------------------------------------------------------
Update Information:
Initial commit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #678910 - Review Request: kde-plasma-activitymanager - KDE plasma activity manager applet
https://bugzilla.redhat.com/show_bug.cgi?id=678910
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kde-plasma-activitymanager' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora 15 Update: vidalia-0.2.12-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7486
2011-05-25 01:58:54
--------------------------------------------------------------------------------
Name : vidalia
Product : Fedora 15
Version : 0.2.12
Release : 1.fc15
URL : http://www.torproject.org/vidalia/
Summary : GUI controller for the Tor Onion Routing Network
Description :
Vidalia is a cross-platform controller GUI for Tor, built using the Qt
framework. Vidalia allows you to start and stop Tor, view the status of
Tor at a glance, and monitor Tor's bandwidth usage. Vidalia also makes
it easy to contribute to the Tor network by helping you setup a Tor server,
if you wish.
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.12
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2011 Chen Lei <supercyper(a)163.com> - 0.2.12-1
- New upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update vidalia' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora 13 Update: recoll-1.15.8-2.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7437
2011-05-25 01:56:52
--------------------------------------------------------------------------------
Name : recoll
Product : Fedora 13
Version : 1.15.8
Release : 2.fc13
URL : http://www.lesbonscomptes.com/recoll/
Summary : Desktop full text search tool with Qt GUI
Description :
Recoll is a personal full text search package for Linux, FreeBSD and
other Unix systems. It is based on a very strong back end (Xapian), for
which it provides an easy to use, feature-rich, easy administration
interface.
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release recoll 1.15.8.
Also includes additional fix from upstream to fix a post release issue.
Update to latest upstream release recoll 1.15.8.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 24 2011 Terje Rosten <terje.rosten(a)ntnu.no> - 1.15.8-2
- add patch from upstream to fix crash.
* Sun May 8 2011 Terje Rosten <terje.rosten(a)ntnu.no> - 1.15.8-1
- 1.15.8
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.14.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Fri Jan 28 2011 Terje Rosten <terje.rosten(a)ntnu.no> - 1.14.4-1
- 1.14.4
* Mon Nov 15 2010 Terje Rosten <terje.rosten(a)ntnu.no> - 1.14.2-2
- Add patch to fix #631704
* Sun Nov 7 2010 Terje Rosten <terje.rosten(a)ntnu.no> - 1.14.2-1
- 1.14.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #702046 - Update recoll to 1.15.8
https://bugzilla.redhat.com/show_bug.cgi?id=702046
[ 2 ] Bug #704439 - [abrt] recoll-1.15.8-1.fc15: _M_grab: Process /usr/bin/recoll was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=704439
[ 3 ] Bug #703710 - Recoll won't start because of a segmentation fault
https://bugzilla.redhat.com/show_bug.cgi?id=703710
[ 4 ] Bug #700321 - [abrt] recoll-1.14.4-1.fc14: re.py:151:sub:UnicodeDecodeError: 'ascii' codec can't decode byte 0xc9 in position 0: ordinal not in range(128)
https://bugzilla.redhat.com/show_bug.cgi?id=700321
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update recoll' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months
Fedora 14 Update: quvi-0.2.16-1.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7432
2011-05-25 01:56:38
--------------------------------------------------------------------------------
Name : quvi
Product : Fedora 14
Version : 0.2.16
Release : 1.fc14
URL : http://sourceforge.net/projects/quvi/
Summary : Command line tool for parsing video download links
Description :
quvi is a command line tool for parsing video download links.
It supports Youtube and other similar video websites.
libquvi is a library for parsing video download links with C API.
It is written in C and intended to be a cross-platform library.
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.16
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2011 Nicoleau Fabien <nicoleau.fabien(a)gmail.com> 0.2.16-1
- Update to 0.2.16
- enable-smut option changed to enable-nsfw
* Sat Apr 23 2011 Nicoleau Fabien <nicoleau.fabien(a)gmail.com> 0.2.15-1
- Update to 0.2.15
* Sun Mar 13 2011 Nicoleau Fabien <nicoleau.fabien(a)gmail.com> 0.2.14-1
- Update to 0.2.14
* Thu Feb 17 2011 Nicoleau Fabien <nicoleau.fabien(a)gmail.com> 0.2.13-1
- Update to 0.2.13
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.2.12-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sun Jan 23 2011 Nicoleau Fabien <nicoleau.fabien(a)gmail.com> 0.2.12-1
- Update to 0.2.12
- Licence changed to LGPLv2+
* Tue Dec 14 2010 Nicoleau Fabien <nicoleau.fabien(a)gmail.com> 0.2.10-1
- Update to 0.2.10
* Sun Nov 14 2010 Nicoleau Fabien <nicoleau.fabien(a)gmail.com> 0.2.8-1
- Update to 0.2.8
* Thu Oct 28 2010 Nicoleau Fabien <nicoleau.fabien(a)gmail.com> 0.2.7-1
- Update to 0.2.7
* Tue Oct 12 2010 Nicoleau Fabien <nicoleau.fabien(a)gmail.com> 0.2.6-1
- Update to 0.2.6
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update quvi' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 11 months