[SECURITY] Fedora 15 Update: php-eaccelerator-0.9.6.1-9.fc15.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0420
2012-01-14 03:34:45
--------------------------------------------------------------------------------
Name : php-eaccelerator
Product : Fedora 15
Version : 0.9.6.1
Release : 9.fc15.1
URL : http://eaccelerator.net/
Summary : PHP accelerator, optimizer, encoder and dynamic content cacher
Description :
eAccelerator is a further development of the MMCache PHP Accelerator & Encoder.
It increases performance of PHP scripts by caching them in compiled state, so
that the overhead of compiling is almost completely eliminated.
--------------------------------------------------------------------------------
Update Information:
Security Enhancements and Fixes in PHP 5.3.9:
* Added max_input_vars directive to prevent attacks based on hash collisions. (CVE-2011-4885)
* Fixed bug #60150 (Integer overflow during the parsing of invalid exif header). (CVE-2011-4566)
Full upstream changelog : http://www.php.net/ChangeLog-5.php#5.3.9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 11 2012 Remi Collet <remi(a)fedoraproject.org> - 1:0.9.6.1-9.1
- rebuild against PHP 5.3.9
* Tue Aug 23 2011 Remi Collet <remi(a)fedoraproject.org> - 1:0.9.6.1-9
- rebuild against PHP 5.3.8
* Thu Aug 18 2011 Remi Collet <remi(a)fedoraproject.org> - 1:0.9.6.1-8
- rebuild against PHP 5.3.7
- add filter (to avoid private-shared-object-provides)
* Wed Jul 13 2011 Matthias Saou <http://freshrpms.net/> 1:0.9.6.1-7
- Add missing tmpwatch requirement (#711236).
- Stop using macros for simple commands, following recent guidelines changes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #770823 - CVE-2011-4885 php: hash table collisions CPU usage DoS (oCERT-2011-003) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=770823
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-eaccelerator' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 4 months
[SECURITY] Fedora 15 Update: php-5.3.9-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0420
2012-01-14 03:34:45
--------------------------------------------------------------------------------
Name : php
Product : Fedora 15
Version : 5.3.9
Release : 1.fc15
URL : http://www.php.net/
Summary : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.
The php package contains the module which adds support for the PHP
language to Apache HTTP Server.
--------------------------------------------------------------------------------
Update Information:
Security Enhancements and Fixes in PHP 5.3.9:
* Added max_input_vars directive to prevent attacks based on hash collisions. (CVE-2011-4885)
* Fixed bug #60150 (Integer overflow during the parsing of invalid exif header). (CVE-2011-4566)
Full upstream changelog : http://www.php.net/ChangeLog-5.php#5.3.9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 11 2012 Remi Collet <remi(a)fedoraproject.org> 5.3.9-1
- update to 5.3.9
http://www.php.net/ChangeLog-5.php#5.3.9
- fix owner of /var/log/php-fpm (bug #773077)
- add max_input_vars, max_file_uploads, zend.enable_gc to php.ini
- drop patch4, use --libdir to use /usr/lib*/php/build
* Wed Sep 28 2011 Remi Collet <remi(a)fedoraproject.org> 5.3.8-3
- revert is_a() to php <= 5.3.6 behavior (from upstream)
with new option (allow_string) for new behavior
* Tue Aug 23 2011 Remi Collet <remi(a)fedoraproject.org> 5.3.8-1
- update to 5.3.8
http://www.php.net/ChangeLog-5.php#5.3.8
* Thu Aug 18 2011 Remi Collet <remi(a)fedoraproject.org> 5.3.7-1
- update to 5.3.7
http://www.php.net/ChangeLog-5.php#5.3.7
- enable mhash extension (emulated by hash extension)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #770823 - CVE-2011-4885 php: hash table collisions CPU usage DoS (oCERT-2011-003) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=770823
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 4 months
[SECURITY] Fedora 15 Update: maniadrive-1.2-32.fc15.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0420
2012-01-14 03:34:45
--------------------------------------------------------------------------------
Name : maniadrive
Product : Fedora 15
Version : 1.2
Release : 32.fc15.1
URL : http://maniadrive.raydium.org/
Summary : 3D stunt driving game
Description :
ManiaDrive is an arcade car game on acrobatic tracks, with a quick and nervous
gameplay (tracks almost never exceed one minute). Features: Complex car
physics, Challenging "story mode", LAN and Internet mode, Live scores,
Track editor, Dedicated server with HTTP interface and More than 30 blocks.
--------------------------------------------------------------------------------
Update Information:
Security Enhancements and Fixes in PHP 5.3.9:
* Added max_input_vars directive to prevent attacks based on hash collisions. (CVE-2011-4885)
* Fixed bug #60150 (Integer overflow during the parsing of invalid exif header). (CVE-2011-4566)
Full upstream changelog : http://www.php.net/ChangeLog-5.php#5.3.9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 11 2012 Remi Collet <remi(a)fedoraproject.org> - 1.2-32.1
- rebuild against PHP 5.3.9
* Tue Aug 23 2011 Remi Collet <remi(a)fedoraproject.org> - 1.2-32
- rebuild against PHP 5.3.8
* Fri Aug 19 2011 Remi Collet <remi(a)fedoraproject.org> - 1.2-31
- rebuild against PHP 5.3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #770823 - CVE-2011-4885 php: hash table collisions CPU usage DoS (oCERT-2011-003) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=770823
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update maniadrive' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 4 months
Fedora 16 Update: focuswriter-1.3.5.1-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0467
2012-01-14 03:36:43
--------------------------------------------------------------------------------
Name : focuswriter
Product : Fedora 16
Version : 1.3.5.1
Release : 1.fc16
URL : http://gottcode.org/focuswriter/
Summary : A fullscreen, distraction-free writing program
Description :
A fullscreen, distraction-free writing program. You can customize your
environment by changing the font, colors, and background image to add ambiance
as you type. FocusWriter features an on-the-fly updating word count, optional
auto-save, optional daily goals, and an interface that hides away to allow you
to focus more clearly; additionally, when you open the program your current
work-in-progress will automatically load and position you at the end of your
document, so that you can immediately jump back in.
--------------------------------------------------------------------------------
Update Information:
Update to the new upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 11 2012 Jean-Francois Saucier <jsaucier(a)gmail.com> - 1.3.5.1-1
- Update to the new upstream version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update focuswriter' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 4 months
Fedora 15 Update: focuswriter-1.3.5.1-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0442
2012-01-14 03:35:46
--------------------------------------------------------------------------------
Name : focuswriter
Product : Fedora 15
Version : 1.3.5.1
Release : 1.fc15
URL : http://gottcode.org/focuswriter/
Summary : A fullscreen, distraction-free writing program
Description :
A fullscreen, distraction-free writing program. You can customize your
environment by changing the font, colors, and background image to add ambiance
as you type. FocusWriter features an on-the-fly updating word count, optional
auto-save, optional daily goals, and an interface that hides away to allow you
to focus more clearly; additionally, when you open the program your current
work-in-progress will automatically load and position you at the end of your
document, so that you can immediately jump back in.
--------------------------------------------------------------------------------
Update Information:
Update to the new upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 11 2012 Jean-Francois Saucier <jsaucier(a)gmail.com> - 1.3.5.1-1
- Update to the new upstream version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update focuswriter' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 4 months
Fedora 16 Update: perl-LWP-Protocol-http10-6.02-3.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0667
2012-01-19 00:36:29
--------------------------------------------------------------------------------
Name : perl-LWP-Protocol-http10
Product : Fedora 16
Version : 6.02
Release : 3.fc16
URL : http://search.cpan.org/dist/LWP-Protocol-http10/
Summary : Legacy HTTP/1.0 support for LWP
Description :
The LWP::Protocol::http10 module provides support for using HTTP/1.0
protocol with LWP. To use it you need to call LWP::Protocol::implementor()
to override the standard handler for http URLs.
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #709290 - Review Request: perl-LWP-Protocol-http10 - Legacy HTTP/1.0 support for LWP
https://bugzilla.redhat.com/show_bug.cgi?id=709290
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-LWP-Protocol-http10' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 4 months
Fedora 16 Update: TeXamator-1.7.5-0.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0606
2012-01-16 21:06:17
--------------------------------------------------------------------------------
Name : TeXamator
Product : Fedora 16
Version : 1.7.5
Release : 0.fc16
URL : http://snouffy.free.fr/blog-en/index.php/category/TeXamator
Summary : Helping you making your exercise sheets
Description :
TeXamator is written in Python/Qt4. It is aimed at helping you making your
exercise sheets. Basically, it browses a specified directory, looks for .tex
files containing exercises and builds a tree with all your exercises in it. You
can click on an element of the tree to have a preview of the exercise and add
it to a list if you wish to. Then you can save your work to a .tex file or you
can generate a .dvi file.
--------------------------------------------------------------------------------
Update Information:
TeXamator Helping you making your exercise sheets
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #772709 - Review Request: TeXamator - Helping you making your exercise sheets
https://bugzilla.redhat.com/show_bug.cgi?id=772709
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update TeXamator' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 4 months
Fedora 15 Update: perl-HTML-Selector-XPath-0.14-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0686
2012-01-19 00:44:49
--------------------------------------------------------------------------------
Name : perl-HTML-Selector-XPath
Product : Fedora 15
Version : 0.14
Release : 1.fc15
URL : http://search.cpan.org/dist/HTML-Selector-XPath/
Summary : CSS Selector to XPath compiler
Description :
HTML::Selector::XPath is a utility function to compile CSS2 selector to the
equivalent XPath expression.
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 18 2012 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 0.14-1
- Upstream update.
* Fri Nov 25 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> 0.12-1
- Upstream update.
* Sat Oct 22 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> 0.09-1
- Upstream update.
* Mon Sep 19 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> 0.08-1
- Upstream update.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-HTML-Selector-XPath' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 4 months
Fedora 16 Update: salt-0.9.4-7.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0676
2012-01-19 00:36:59
--------------------------------------------------------------------------------
Name : salt
Product : Fedora 16
Version : 0.9.4
Release : 7.fc16
URL : http://saltstack.org/
Summary : A parallel remote execution system
Description :
Salt is a distributed remote execution system used to execute commands and
query data. It was developed in order to bring the best solutions found in
the world of remote execution together and make them better, faster and more
malleable. Salt accomplishes this via its ability to handle larger loads of
information, and not just dozens, but hundreds or even thousands of individual
servers, handle them quickly and through a simple and manageable interface.
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #737286 - Review Request: salt - A parallel remote execution system
https://bugzilla.redhat.com/show_bug.cgi?id=737286
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update salt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 4 months
Fedora 16 Update: srm-ifce-1.12-5.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0680
2012-01-19 00:37:20
--------------------------------------------------------------------------------
Name : srm-ifce
Product : Fedora 16
Version : 1.12
Release : 5.fc16
URL : https://svnweb.cern.ch/trac/lcgutil
Summary : SRM client side library
Description :
srm-ifce is a client side implementation of the SRMv1 and SRMv2 specification
for GFAL1/2 and FTS. SRM means Storage Resource Manager Interface, it is a
specification of a SOAP interface providing a generic way to manage
distributed storage systems.
--------------------------------------------------------------------------------
Update Information:
New package inclusion
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #768174 - Review Request: srm-ifce - Storage Resources Manager client implementation
https://bugzilla.redhat.com/show_bug.cgi?id=768174
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update srm-ifce' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 4 months