[SECURITY] Fedora 14 Update: syslog-ng-3.1.4-4.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-8405
2011-06-21 16:09:02
--------------------------------------------------------------------------------
Name : syslog-ng
Product : Fedora 14
Version : 3.1.4
Release : 4.fc14
URL : http://www.balabit.com/products/syslog_ng/
Summary : Next-generation syslog server
Description :
syslog-ng, as the name shows, is a syslogd replacement, but with new
functionality for the new generation. The original syslogd allows
messages only to be sorted based on priority/facility pairs; syslog-ng
adds the possibility to filter based on message contents using regular
expressions. The new configuration scheme is intuitive and powerful.
Forwarding logs over TCP and remembering all forwarding hops makes it
ideal for firewalled environments.
--------------------------------------------------------------------------------
Update Information:
Patch for CVE-2011-1951
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.1.4-4
- Patch for CVE-2011-1951: syslog-ng-3.1.4-pcre-dos.patch (#709088)
- Enabled the test suite
* Mon May 9 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.1.4-3
- Bumped the eventlog version to match the latest upstream version (0.2.12)
- Overrided the default _localstatedir value (configure --localstatedir)
(value hardcoded in update-patterndb)
- Manually created the patterndb.d configuration directory (update-patterndb)
(see also https://bugzilla.balabit.com/show_bug.cgi?id=119 comments >= 4)
- Minor modifications of the %post, %preun and %postun scripts
- Corrected a couple of macro references in changelog entries (rpmlint)
- Expanded tabs to spaces (also added a vim modeline)
* Mon Apr 25 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.1.4-2
- cleans the sysconfig and logrotate file mess (#651823 comments 17, 20 and 21)
- add support for vim versions 72 and 73; drop support for versions 6.2 and 6.3
- clean the spoofsource conditional logical: libnet resides in /lib{,64}
since 2009
* Wed Apr 13 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.1.4-1
- update for syslog-ng 3.1.4
- updated the source URL
- versioned some of the build requirements
- dropped the libnet patch (syslog-ng-2.1.4-libnet.patch)
- dropped support for EPEL-4 and EPEL-5 (syslog-ng 3.x requires pcre >= 7.3)
- new file: update-patterndb
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #709088 - CVE-2011-1951 syslog-ng: DoS (excessive memory use) by processing certain pcre patterns
https://bugzilla.redhat.com/show_bug.cgi?id=709088
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update syslog-ng' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 10 months
Fedora 14 Update: bucardo-4.4.5-1.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-8456
2011-06-21 16:11:17
--------------------------------------------------------------------------------
Name : bucardo
Product : Fedora 14
Version : 4.4.5
Release : 1.fc14
URL : http://bucardo.org/
Summary : Postgres replication system for both multi-master and multi-slave operations
Description :
Bucardo is an asynchronous PostgreSQL replication system, allowing for both
multi-master and multi-slave operations.It was developed at Backcountry.com
primarily by Greg Sabino Mullane of End Point Corporation.
--------------------------------------------------------------------------------
Update Information:
new release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 19 2011 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> - 4.4.5-1
- New version 4.4.5 fix truncate bug
* Sun May 15 2011 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> - 4.4.4-1
- New version 4.4.4 fix backslash bug
* Thu Apr 21 2011 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> - 4.4.3-1
- New version 4.4.3
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 4.4.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update bucardo' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 10 months
Fedora 15 Update: enblend-4.0-7.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-8412
2011-06-21 16:09:17
--------------------------------------------------------------------------------
Name : enblend
Product : Fedora 15
Version : 4.0
Release : 7.fc15
URL : http://enblend.sourceforge.net/
Summary : Image Blending with Multiresolution Splines
Description :
Enblend is a tool for compositing images, given a set of images that overlap in
some irregular way, Enblend overlays them in such a way that the seam between
the images is invisible, or at least very difficult to see. Enfuse combines
multiple images of the same subject into a single image with good exposure and
good focus. Enblend and Enfuse do not line up the images for you, use a tool
like Hugin to do that.
--------------------------------------------------------------------------------
Update Information:
Workaround a bug revealed by libjpeg-turbo in f15 that resulted in Hugin/enblend always producing 'arithmetic coded' JPEG files instead of the more portable Huffman coding.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2011 Bruno Postle <bruno(a)postle.net> - 4.0-7
- workaround vigra bug where arithmetic coded JPEG is always created with libjpeg-turbo
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update enblend' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 10 months
Fedora 14 Update: rubygem-factory_girl-1.3.2-3.fc14
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-8530
2011-06-21 23:21:10
--------------------------------------------------------------------------------
Name : rubygem-factory_girl
Product : Fedora 14
Version : 1.3.2
Release : 3.fc14
URL : http://thoughtbot.com/projects/factory_girl
Summary : Framework and DSL for defining and using model instance factories
Description :
Framework and DSL for defining and using factories - less error-prone,
more explicit, and all-around easier to work with than fixtures.
--------------------------------------------------------------------------------
Update Information:
factory_girl allows you to quickly define prototypes for each of your models and ask for instances with properties that are important to the test at hand.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-factory_girl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 10 months
Fedora 15 Update: gedit-plugins-3.0.4-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-8480
2011-06-21 16:12:20
--------------------------------------------------------------------------------
Name : gedit-plugins
Product : Fedora 15
Version : 3.0.4
Release : 1.fc15
URL : http://live.gnome.org/GeditPlugins
Summary : Plugins for gedit
Description :
A collection of plugins for gedit.
--------------------------------------------------------------------------------
Update Information:
rebase to latests upstream stable release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2011 Ignacio Casal Quinteiro <icq(a)gnome.org> - 3.0.4-1
- Update to 3.0.4
* Wed May 18 2011 Ignacio Casal Quinteiro <icq(a)gnome.org> - 3.0.2-2
- Remove useless deps
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gedit-plugins' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 10 months
Fedora 15 Update: soundconverter-1.5.4-4.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-8538
2011-06-21 23:21:33
--------------------------------------------------------------------------------
Name : soundconverter
Product : Fedora 15
Version : 1.5.4
Release : 4.fc15
URL : http://soundconverter.berlios.de/
Summary : Simple sound converter application for GNOME
Description :
A simple sound converter application for the GNOME environment. It reads and
writes anything the GStreamer library can.
--------------------------------------------------------------------------------
Update Information:
As a test-case, configure SoundConverter to use a GNOME Audio Profile, then restart it after changing the system locale.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.4-4
- Fix crash when GNOME Audio Profile description changes translation (#714454).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #714454 - [abrt] soundconverter-1.5.4-3.fc15: soundconverter:1982:generate_filename:KeyError: 'Voice, Lossless'
https://bugzilla.redhat.com/show_bug.cgi?id=714454
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update soundconverter' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 10 months
Fedora 15 Update: openpts-0.2.4-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-8040
2011-06-08 23:33:58
--------------------------------------------------------------------------------
Name : openpts
Product : Fedora 15
Version : 0.2.4
Release : 1.fc15
URL : http://sourceforge.jp/projects/openpts/
Summary : TCG Platform Trust Service (PTS) for embedded devices
Description :
OpenPTS is an open-source package of Platform Trust Service (PTS)
defined by Trusted Computing Group (TCG). Trusted Computing is a set of
specifications set forth by the Trusted Computing Group (TCG).
--------------------------------------------------------------------------------
Update Information:
New package openpts
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openpts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 10 months
Fedora 15 Update: beacon-0.5-5.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-8436
2011-06-21 16:10:24
--------------------------------------------------------------------------------
Name : beacon
Product : Fedora 15
Version : 0.5
Release : 5.fc15
URL : http://fedoraproject.org/wiki/DocBook_Editor
Summary : WYSIWYG editor for docbook xml
Description :
Beacon is an XSLT based plug-able WYSIWYG editor for DocBook xml. It
is intended to serve as an easy to use tool which will attract new
contributors who would otherwise be discouraged by the steep learning
curve involved with DocBook and will also provide a convenient
alternative to those who are old-timers. More information is available
at https://fedoraproject.org/wiki/DocBook_Editor_Documentation and
https://fedoraproject.org/wiki/DocBook_Editor_Feature.
--------------------------------------------------------------------------------
Update Information:
Updated to include new upstream changes. Merged the two sources to one.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2011 P J P <pj.pandit(a)yahoo.co.in> 0.5-5
- Updated source to include upstream bug fixes.
- included httpd-beacon.conf into the source tarball.
* Tue May 10 2011 Satya Komaragiri <satyak(a)fedoraproject.org> 0.5-4
- Added dependency on php-mysql.
- Made mysql login as default.
- Handled file names with spaces.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update beacon' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 10 months
[SECURITY] Fedora 15 Update: ejabberd-2.1.8-2.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-8415
2011-06-21 16:09:24
--------------------------------------------------------------------------------
Name : ejabberd
Product : Fedora 15
Version : 2.1.8
Release : 2.fc15
URL : http://www.ejabberd.im/
Summary : A distributed, fault-tolerant Jabber/XMPP server
Description :
ejabberd is a Free and Open Source distributed fault-tolerant
Jabber/XMPP server. It is mostly written in Erlang, and runs on many
platforms (tested on Linux, FreeBSD, NetBSD, Solaris, Mac OS X and
Windows NT/2000/XP).
--------------------------------------------------------------------------------
Update Information:
- Fixed issue with ejabberdctl (failed to connect)
- Ver. 2.1.8
- Ver. 2.1.8
- Ver. 2.1.8
- Ver. 2.1.8
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2011 Peter Lemenkov <lemenkov(a)gmail.com> - 2.1.8-2
- Fix ejabberdctl again
* Fri Jun 3 2011 Peter Lemenkov <lemenkov(a)gmail.com> - 2.1.8-1
- Ver. 2.1.8 (very urgent bugfix for 2.1.7)
* Wed Jun 1 2011 Peter Lemenkov <lemenkov(a)gmail.com> - 2.1.7-1
- Ver. 2.1.7 (bugfixes and security)
* Wed Jun 1 2011 Paul Whalen <paul.whalen(a)senecac.on.ca> - 2.1.6-5
- Added arm to conditional to build without hevea.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #700454 - CVE-2011-1753 ejabberd: DoS via the XML "billion laughs attack"
https://bugzilla.redhat.com/show_bug.cgi?id=700454
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ejabberd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 10 months
Fedora 15 Update: fence-virt-0.2.3-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-8839
2011-06-29 21:22:56
--------------------------------------------------------------------------------
Name : fence-virt
Product : Fedora 15
Version : 0.2.3
Release : 1.fc15
URL : http://voxel.dl.sourceforge.net/project/fence-virt/fence-virt-0.2.3.tar.gz
Summary : A pluggable fencing framework for virtual machines
Description :
Fencing agent for virtual machines.
--------------------------------------------------------------------------------
Update Information:
Fix regression in fence_xvm compatibility mode
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 29 2011 Fabio M. Di Nitto <fdinitto(a)redhat.com> 0.2.3-1
- new upstream release fix compat regression
* Mon Jun 27 2011 Fabio M. Di Nitto <fdinitto(a)redhat.com> 0.2.2-1
- new upstream release
* Mon May 9 2011 Fabio M. Di Nitto <fdinitto(a)redhat.com> 0.2.1-5
- Rebuilt for libqmfconsole soname change
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update fence-virt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 10 months