--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0477
2012-01-14 03:37:09
--------------------------------------------------------------------------------
Name : pure-ftpd
Product : Fedora 16
Version : 1.0.35
Release : 1.fc16
URL : http://www.pureftpd.org
Summary : Lightweight, fast and secure FTP server
Description :
Pure-FTPd is a fast, production-quality, standard-comformant FTP server,
based upon Troll-FTPd. Unlike other popular FTP servers, it has no known
security flaw, it is really trivial to set up and it is especially designed
for modern Linux and FreeBSD kernels (setfsuid, sendfile, capabilities) .
Features include PAM support, IPv6, chroot()ed home directories, virtual
domains, built-in LS, anti-warez system, bandwidth throttling, FXP, bounded
ports for passive downloads, UL/DL ratios, native LDAP and SQL support,
Apache log files and more.
Rebuild switches:
--without ldap disable ldap support
--without mysql disable mysql support
--without pgsql disable postgresql support
--without extauth disable external authentication
--without tls disable SSL/TLS
--------------------------------------------------------------------------------
Update Information:
* Version 1.0.35:
- Improve compatibility with the Intel and Ekopath compilers.
- Use more paranoid compiler options whenever possible, and preliminary
uncluttering of the autoconf script.
- Try to cache locale-related data at startup after tzset(), rather
than during a session.
- Fix quota computation after rename() overwrites an existing file.
Reported by Hiramoto Koujo, thanks!
* Version 1.0.34:
- Fix safe_write() inverted checks that broke uploads.
* Version 1.0.33:
- Sync built-in glob(3) code with OpenBSD-current, and remove code we
don't use instead of ifdef'ing it.
- Repair checkproc() on Linux when support for capabitilies is
compiled in. Reported by Eric Gouyer.
- Don't read /dev/*random every time we need a value. Just use
arc4random() everywhere and seed it before we possibly chroot().
- Add support for MFMT, with the same code as SITE UTIME.
- Support 2-arguments SITE UTIME.
- LDAP: Add LDAPDefaultHomeDirectory, suggested by Landry Breuil.
- Add SSL_OP_NO_SSLv3 to SSL options if the list of ciphers is
prefixed by -S: , needed by Brad.
- Remove the various safe_read() / safe_write() instances and
factorize them in safe_rw.c
- Call OpenSSL_add_all_algorithms(), suggested by Brad.
- Mention that WinSCP works fine with Pure-FTPd.
- On Linux, opening a named pipe that nobody reads with O_WRONLY yields ENXIO.
The workaround is to opens it O_RDWR. So, just do that.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 13 2012 Jaromir Capik <jcapik(a)redhat.com> - 1.0.35-1
- Update to 1.0.35
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #771064 - pls build rpm for latest pure-ftpd
https://bugzilla.redhat.com/show_bug.cgi?id=771064
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pure-ftpd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0440
2012-01-14 03:35:41
--------------------------------------------------------------------------------
Name : wireshark
Product : Fedora 15
Version : 1.4.11
Release : 1.fc15
URL : http://www.wireshark.org/
Summary : Network traffic analyzer
Description :
Wireshark is a network traffic analyzer for Unix-ish operating systems.
This package lays base for libpcap, a packet capture and filtering
library, contains command-line utilities, contains plugins and
documentation for wireshark. A graphical user interface is packaged
separately to GTK+ package.
--------------------------------------------------------------------------------
Update Information:
The following vulnerabilities have been fixed.
wnpa-sec-2012-01
Laurent Butti discovered that Wireshark failed to properly record sizes for many packet capture file formats.
wnpa-sec-2012-02
Wireshark could dereference a NULL pointer and crash
wnpa-sec-2012-03
The RLC dissector could overflow a buffer
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 11 2012 Jan Safranek <jsafrane(a)redhat.com> - 1.4.11-1
- upgrade to 1.4.11
- see http://www.wireshark.org/docs/relnotes/wireshark-1.4.11.html
* Fri Dec 2 2011 Jan Safranek <jsafrane(a)redhat.com> - 1.4.10-2
- fixed display of error message boxes on startup in gnome3 (#752559)
* Wed Nov 2 2011 Jan Safranek <jsafrane(a)redhat.com> - 1.4.10-1
- upgrade to 1.4.10
- see http://www.wireshark.org/docs/relnotes/wireshark-1.4.10.html
* Fri Sep 9 2011 Jan Safranek <jsafrane(a)redhat.com> - 1.4.9-1
- upgrade to 1.4.9
- see http://www.wireshark.org/docs/relnotes/wireshark-1.4.9.html
* Thu Jul 21 2011 Jan Safranek <jsafrane(a)redhat.com> - 1.4.8-1
- upgrade to 1.4.8
- see http://www.wireshark.org/docs/relnotes/wireshark-1.4.8.html
* Thu Jun 16 2011 Jan Safranek <jsafrane(a)redhat.com> - 1.4.7-2
- fixed Fedora-specific message when user is not part of 'wireshark' group
- now it does not contain '<' and '>' characters (#713545)
* Thu Jun 2 2011 Jan Safranek <jsafrane(a)redhat.com> - 1.4.7-1
- upgrade to 1.4.7
- see http://www.wireshark.org/docs/relnotes/wireshark-1.4.7.html
* Thu May 19 2011 Steve Dickson <steved(a)redhat.com> - 1.4.6-3
- Improved the NFS4.1 patcket dissectors
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #773726 - CVE-2012-0041 wireshark: multiple file parser vulnerabilities (wnpa-sec-2012-01)
https://bugzilla.redhat.com/show_bug.cgi?id=773726
[ 2 ] Bug #773728 - CVE-2012-0042 wireshark: NULL pointer vulnerabilities (wnpa-sec-2012-02)
https://bugzilla.redhat.com/show_bug.cgi?id=773728
[ 3 ] Bug #773729 - CVE-2012-0043 wireshark: RLC dissector buffer overflow (wnpa-sec-2012-03)
https://bugzilla.redhat.com/show_bug.cgi?id=773729
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update wireshark' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0135
2012-01-05 20:38:42
--------------------------------------------------------------------------------
Name : pptp
Product : Fedora 16
Version : 1.7.2
Release : 14.fc16
URL : http://pptpclient.sourceforge.net/
Summary : Point-to-Point Tunneling Protocol (PPTP) Client
Description :
Client for the proprietary Microsoft Point-to-Point Tunneling
Protocol, PPTP. Allows connection to a PPTP based VPN as used
by employers and some cable and ADSL service providers.
--------------------------------------------------------------------------------
Update Information:
This update is a bug-fix and enhancement for pptp, incorporating the latest upstream improvements:
* Support setting SO_MARK for the PPTP TCP control connection as well as on the GRE packets
* Implement the --nohostroute option
* Include a number of patches addressing compiler warnings, which appear to have a beneficial effect on stability (#749455)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 4 2012 Paul Howarth <paul(a)city-fan.org> 1.7.2-14
- Build with warning-fix patches to address occasional segfaults (#749455)
- Patches have all now been merged upstream
* Wed Nov 30 2011 Paul Howarth <paul(a)city-fan.org> 1.7.2-13.2
- Add patch to fix highly-parallel build (e.g. -j16)
- Add additional compiler warning flags to highlight questionable code
- Add patch to fix comparisons between signed and unsigned integers
- Add patch to fix const usage
- Add patch to fix missing field initializers
- Add patch to suppress warnings about possibly unused variables
- Add patch to fix declarations that are not prototypes
- Add patch to fix warnings about nested externs
- Add patch to fix dubious typecasts that violate strict-aliasing rules
- Update the FSF address references and GPLv2 license text
- Use default optimization level (-O2) again
* Fri Nov 11 2011 Paul Howarth <paul(a)city-fan.org> 1.7.2-13.1
- Drop compiler optimization level to -O0 as per upstream in attempt to
resolve occasional segfault in pptpcm (#749455)
- Add patch to fix highly-parallel build (e.g. -j16)
* Tue Nov 8 2011 Paul Howarth <paul(a)city-fan.org> 1.7.2-13
- Patch to fix broken Call-Disconnect-Notify code accepted upstream
- Add upstream patch to support setting SO_MARK for the PPTP TCP control
connection as well as on the GRE packets
- Add upstream patch to implement the --nohostroute option
- Nobody else likes macros for commands
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #749455 - pptpcm crashes with segfault sometimes
https://bugzilla.redhat.com/show_bug.cgi?id=749455
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pptp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0595
2012-01-16 21:05:52
--------------------------------------------------------------------------------
Name : proftpd
Product : Fedora 16
Version : 1.3.4a
Release : 3.fc16
URL : http://www.proftpd.org/
Summary : Flexible, stable and highly-configurable FTP server
Description :
ProFTPD is an enhanced FTP server with a focus toward simplicity, security,
and ease of configuration. It features a very Apache-like configuration
syntax, and a highly customizable server infrastructure, including support for
multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory
visibility.
This package defaults to the standalone behavior of ProFTPD, but all the
needed scripts to have it run by xinetd instead are included.
--------------------------------------------------------------------------------
Update Information:
This update makes the mod_vroot module, used to address a PAM issue, a loadable object rather than being compiled into the server. The module is still loaded by default though.
There are also two new sub-packages for the server:
* proftpd-devel, which contains files needed to build third-party modules for ProFTPD
* proftpd-utils, which contains many of the utility scripts that used to be included in the main proftpd package; moving them to a sub-package means that the main package no longer requires perl
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 16 2012 Paul Howarth <paul(a)city-fan.org> 1.3.4a-3
- Add -utils subpackage for support tools, which means the main package
no longer requires perl
* Tue Jan 10 2012 Paul Howarth <paul(a)city-fan.org> 1.3.4a-2
- Make mod_vroot a DSO, loaded by default (#772354)
- VRootAlias for /etc/security/pam_env.conf is redundant, so remove it
- Add BanMessage (#772354)
- Add -devel subpackage for building third-party modules
* Fri Nov 11 2011 Paul Howarth <paul(a)city-fan.org> 1.3.4a-1
- Update to 1.3.4a:
- Fixed mod_load/mod_wrap2 build issues
- Drop now-redundant workaround for building mod_load and mod_wrap2
- Drop upstreamed patch for xinetd config typo
* Thu Nov 10 2011 Paul Howarth <paul(a)city-fan.org> 1.3.4-1
- Update to 1.3.4, addressing the following bugs since 1.3.4rc3:
- ProFTPD with mod_sql_mysql dies of "Alarm clock" on FreeBSD (bug 3702)
- mod_sql_mysql.so: undefined symbol: make_scrambled_password with MySQL 5.5
on Fedora (bug 3669)
- PQescapeStringConn() needs a better check (bug 3192)
- Enable OpenSSL countermeasure against SSLv3/TLSv1 BEAST attacks (bug 3704);
to disable this countermeasure, which may cause interoperability issues
with some clients, use the NoEmptyFragments TLSOption
- Support SFTPOption for ignoring requests to modify timestamps (bug 3706)
- RPM build on CentOS 5.5 (64bit): "File not found by glob" (bug 3640)
- Response pool use-after-free memory corruption error
(bug 3711, #752812, ZDI-CAN-1420, CVE-2011-4130)
- Drop upstream patch for make_scrambled_password_323
- Use upstream SysV initscript rather than our own
- Use upstream systemd service file rather than our own
- Use upstream PAM configuration rather than our own
- Use upstream logrotate configuration rather than our own
- Use upstream tempfiles configuration rather than our own
- Use upstream xinetd configuration rather than our own
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #772354 - Proftpd packaging and configuration has some vroot-related issues
https://bugzilla.redhat.com/show_bug.cgi?id=772354
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update proftpd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0896
2012-01-24 19:21:02
--------------------------------------------------------------------------------
Name : bacula-docs
Product : Fedora 16
Version : 5.0.3
Release : 19.fc16
URL : http://www.bacula.org
Summary : Bacula documentation
Description :
Bacula is a set of programs that allow you to manage the backup,
recovery, and verification of computer data across a network of
different computers. It is based on a client/server architecture.
This package contains the documentation for most of the bacula-packages.
--------------------------------------------------------------------------------
Update Information:
Spinoff package from main bacula package. Added HTML docs and made the package "noarch".
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update bacula-docs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0578
2012-01-16 21:04:58
--------------------------------------------------------------------------------
Name : iptraf-ng
Product : Fedora 15
Version : 1.1.0
Release : 2.fc15
URL : https://fedorahosted.org/iptraf-ng/
Summary : A console-based network monitoring utility
Description :
IPTraf-ng is a console-based network monitoring utility. IPTraf gathers
data like TCP connection packet and byte counts, interface statistics
and activity indicators, TCP/UDP traffic breakdowns, and LAN station
packet and byte counts. IPTraf-ng features include an IP traffic monitor
which shows TCP flag information, packet and byte counts, ICMP
details, OSPF packet types, and oversized IP packet warnings;
interface statistics showing IP, TCP, UDP, ICMP, non-IP and other IP
packet counts, IP checksum errors, interface activity and packet size
counts; a TCP and UDP service monitor showing counts of incoming and
outgoing packets for common TCP and UDP application ports, a LAN
statistics module that discovers active hosts and displays statistics
about their activity; TCP, UDP and other protocol display filters so
you can view just the traffic you want; logging; support for Ethernet,
FDDI, ISDN, SLIP, PPP, and loopback interfaces; and utilization of the
built-in raw socket interface of the Linux kernel, so it can be used
on a wide variety of supported network cards.
--------------------------------------------------------------------------------
Update Information:
everyone must update
everyone must update
everyone must update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #781833 - broken DNS lookup
https://bugzilla.redhat.com/show_bug.cgi?id=781833
[ 2 ] Bug #769488 - Iptraf not available, Can NOT found the Network Interface.
https://bugzilla.redhat.com/show_bug.cgi?id=769488
[ 3 ] Bug #734019 - [iptraf] - Warning: unable to tag this process
https://bugzilla.redhat.com/show_bug.cgi?id=734019
[ 4 ] Bug #682348 - assumes network devices are named certain things
https://bugzilla.redhat.com/show_bug.cgi?id=682348
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update iptraf-ng' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0592
2012-01-16 21:05:46
--------------------------------------------------------------------------------
Name : epstool
Product : Fedora 15
Version : 3.08
Release : 2.fc15
URL : http://pages.cs.wisc.edu/~ghost/gsview/epstool.htm
Summary : A utility to create or extract preview images in EPS files
Description :
Epstool is a utility to create or extract preview images in EPS files,
fix bounding boxes and convert to bitmaps.
Features:
* Add EPSI, DOS EPS or Mac PICT previews.
* Extract PostScript from DOS EPS files.
* Uses Ghostscript to create preview bitmaps.
* Create a TIFF, WMF, PICT or Interchange preview from part of a
bitmap created by Ghostscript.
* works under Win32, Win64, OS/2 and Unix.
* works on little-endian machines (Intel) or big endian (Sun Sparc,
Motorola) machines.
--------------------------------------------------------------------------------
Update Information:
First release in Fedora.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #772616 - Review Request: epstool - A utility to create or extract preview images in EPS files
https://bugzilla.redhat.com/show_bug.cgi?id=772616
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update epstool' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0582
2012-01-16 21:05:07
--------------------------------------------------------------------------------
Name : epstool
Product : Fedora 16
Version : 3.08
Release : 2.fc16
URL : http://pages.cs.wisc.edu/~ghost/gsview/epstool.htm
Summary : A utility to create or extract preview images in EPS files
Description :
Epstool is a utility to create or extract preview images in EPS files,
fix bounding boxes and convert to bitmaps.
Features:
* Add EPSI, DOS EPS or Mac PICT previews.
* Extract PostScript from DOS EPS files.
* Uses Ghostscript to create preview bitmaps.
* Create a TIFF, WMF, PICT or Interchange preview from part of a
bitmap created by Ghostscript.
* works under Win32, Win64, OS/2 and Unix.
* works on little-endian machines (Intel) or big endian (Sun Sparc,
Motorola) machines.
--------------------------------------------------------------------------------
Update Information:
First release in Fedora.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #772616 - Review Request: epstool - A utility to create or extract preview images in EPS files
https://bugzilla.redhat.com/show_bug.cgi?id=772616
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update epstool' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0613
2012-01-16 21:06:34
--------------------------------------------------------------------------------
Name : procmail
Product : Fedora 16
Version : 3.22
Release : 29.fc16
URL : http://www.procmail.org
Summary : Mail processing program
Description :
Procmail can be used to create mail-servers, mailing lists, sort your
incoming mail into separate folders/files (real convenient when subscribing
to one or more mailing lists or for prioritising your mail), preprocess
your mail, start any programs upon mail arrival (e.g. to generate different
chimes on your workstation for different types of mail) or selectively
forward certain incoming mail automatically to someone.
--------------------------------------------------------------------------------
Update Information:
This is an update that workarounds problem with wrong timestamps that can occur with encfs or nfs.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 16 2012 Jaroslav Škarvada <jskarvad(a)redhat.com> - 3.22-29
- Rebuilt without NO_NFS_ATIME_HACK
Resolves: rhbz#666383
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.22-28
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Fri Nov 25 2011 Jaroslav Škarvada <jskarvad(a)redhat.com> - 3.22-27
- Defuzzification of ipv6 patch
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.22-26
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #666383 - Defining NO_NFS_ATIME_HACK breaks using mutt with encfs filesystems
https://bugzilla.redhat.com/show_bug.cgi?id=666383
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update procmail' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0604
2012-01-16 21:06:12
--------------------------------------------------------------------------------
Name : plowshare
Product : Fedora 15
Version : 0.9.4
Release : 0.25.20120115git.fc15
URL : http://plowshare.googlecode.com
Summary : Download and upload files from file-sharing websites
Description :
plowshare is a command-line downloader/uploader for some of the most popular
file-sharing websites. It works on UNIX-like systems and presently supports
Megaupload, Rapidshare, 2Shared, 4Shared, ZShare, Badongo, Depositfiles,
Mediafire, Netload.in, Storage.to, Uploaded.to, Uploading.com, Sendspace,
Usershare, X7.to and others.
--------------------------------------------------------------------------------
Update Information:
Update to new upstream snapshot.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 15 2012 Elder Marco <eldermarco(a)fedoraproject.org> - 0.9.4-0.25.20120115git
- New upstream snapshot
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.4-0.24.20111230git
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Fri Dec 30 2011 Elder Marco <eldermarco(a)fedoraproject.org> - 0.9.4-0.23.20111230git
- New upstream snapshot
* Tue Dec 6 2011 Elder Marco <eldermarco(a)fedoraproject.org> - 0.9.4-0.22.20111206git
- New upstream snapshot
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update plowshare' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------