[SECURITY] Fedora 15 Update: php-pear-CAS-1.3.0-2.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4077
2012-03-17 23:01:04
--------------------------------------------------------------------------------
Name : php-pear-CAS
Product : Fedora 15
Version : 1.3.0
Release : 2.fc15
URL : https://wiki.jasig.org/display/CASC/phpCAS
Summary : Central Authentication Service client library in php
Description :
This package is a PEAR library for using a Central Authentication Service.
--------------------------------------------------------------------------------
Update Information:
Upstream changelog
Changes in version 1.3.0
Bug Fixes:
* the saml logout url should be parsed urlencoded [#24] (dlineate)
* fix a proxy mode bug introduced in a previous comitt [#16] (Adam Franco)
* Fix include_path order so that the phpCAS path takes precedence [#13] (Adam Franco)
* fix invalid characters in the php session naming [#17] (Joachim Fritschi)
* fix an initialisation problem introduced in the PGT storage [18] (Daniel Frett)
* make sure the PGTStorage object is initialized if a user is utilizing the createTable method [#4] (Daniel Frett)
* Fix error message in phpCAS::setCacheTimesForAuthRecheck() [PHPCAS-132/#1] (Bradley Froehle)
* Always return attributes in utf8 [PHPCAS-102]
* Fix warning during debugging if debug is set to false [PHPCAS-123] (Sean Watkins)
New Features:
* Add a script to create the PGT db table in proxy mode [#11] (Joachim Fritschi)
* Switch to the Apache License [#5] (Adam Franco, Joachim Fritschi)
* Move to github and add all necessary file to package [#12] (Adam Franco)
* New build process for github [#12] (Adam Franco)
* Update unit tests to work with the lastest phpunit version [PHPCAS-128] (Adam Franco)
* Refacatoring of the protocol decision making to allow validation of proxied usage [PHPCAS-69] (Joachim Fritschi, Adam Franco)
* Rebroadcast of logout and pgtiou to support clustered phpcas [PHPCAS-100] (Matthew Selwood, Adam Franco)
Improvements:
* Improved cookie handling [] (Adam Franco
* Indent, format and user name guidelines of PEAR [#14] (Joachim Fritschi)
* Add a class autoloading feature [PHPCAS-125/#8] (Joachim Fritschi)
* Remove global variables [PHPCAS-126] (Adam Franco)
* Implementation of an exception framework to allow gracefull termination [PHPCAS-109] (Joachim Fritschi)
* enable single sign-out when session has already started [#29] (Benvii)
Security Fixes:
* CVE-2012-1104 validate proxied usage of a service [PHPCAS-69] (Joachim Fritschi, Adam Franco)
* CVE-2012-1105 change the default PGT save path to the session storage path and set proper permissions [#22] (Joachim Fritschi)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 14 2012 Remi Collet <remi(a)fedoraproject.org> - 1.3.0-2
- License is ASL 2.0, https://github.com/Jasig/phpCAS/issues/32
- New sources, https://github.com/Jasig/phpCAS/issues/31
- update to Version 1.3.0
* Sat Jun 11 2011 Remi Collet <Fedora(a)FamilleCollet.com> - 1.2.2-1
- update to Version 1.2.2 (stable) - API 1.2.2 (stable)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #801343 - CVE-2012-1104 php-pear-CAS: Improper management of service proxying
https://bugzilla.redhat.com/show_bug.cgi?id=801343
[ 2 ] Bug #801347 - CVE-2012-1105 php-pear-CAS: Debug log and proxy configuration session data stored in /tmp without proper protection
https://bugzilla.redhat.com/show_bug.cgi?id=801347
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-pear-CAS' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 15 Update: piklab-0.15.12-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4036
2012-03-17 22:59:01
--------------------------------------------------------------------------------
Name : piklab
Product : Fedora 15
Version : 0.15.12
Release : 1.fc15
URL : http://piklab.sourceforge.net
Summary : Development environment for applications based on PIC & dsPIC microcontrollers
Description :
Piklab is a graphic development environment for PIC and dsPIC microcontrollers.
It interfaces with various toolchains for compiling and assembling and it
supports several Microchip and direct programmers.
WARNING: Administrator have to see the README.Fedora file locate
in the /usr/share/doc/piklab-0.15.12 directory
to complete full feature installation.
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 15 2012 Alain Portal <alain.portal[AT]univ-montp2[DOT]fr> 0.15.12-1
- New upstream version
- Add PolicyKit support
* Wed Feb 1 2012 Alain Portal <alain.portal[AT]univ-montp2[DOT]fr> 0.15.10-5
- Remove stupid previous idea
* Mon Jan 30 2012 Alain Portal <alain.portal[AT]univ-montp2[DOT]fr> 0.15.10-4
- Add new defaut sdcc 3.0.0 switch (BZ#750096)
- Change default sdcc unix name to match the sdcc Fedora package
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update piklab' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 16 Update: stellarium-0.11.2-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4014
2012-03-17 22:57:48
--------------------------------------------------------------------------------
Name : stellarium
Product : Fedora 16
Version : 0.11.2
Release : 1.fc16
URL : http://stellarium.free.fr/
Summary : Photo-realistic nightsky renderer
Description :
Stellarium is a real-time 3D photo-realistic nightsky renderer. It can
generate images of the sky as seen through the Earth's atmosphere with
more than one hundred thousand stars from the Hipparcos Catalogue,
constellations, planets, major satellites and nebulas.
--------------------------------------------------------------------------------
Update Information:
Improvement of translations. Enhancement on differents plugins.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 13 2012 Jochen Schmitt <Jochen herr-schmitt de> 0.11.2-1
- New upstream release
* Tue Nov 8 2011 Jochen Schmitt <Jochen herr-schmitt de> 0.11.1-1
- New upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update stellarium' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 16 Update: seahorse-3.2.2-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4315
2012-03-21 01:55:56
--------------------------------------------------------------------------------
Name : seahorse
Product : Fedora 16
Version : 3.2.2
Release : 1.fc16
URL : http://projects.gnome.org/seahorse/
Summary : A GNOME application for managing encryption keys
Description :
Seahorse is a graphical interface for managing and using encryption keys.
It also integrates with nautilus, gedit and other places for encryption
operations. It is a keyring manager.
--------------------------------------------------------------------------------
Update Information:
Fixes problems reported in https://bugzilla.gnome.org/661683 and https://bugzilla.gnome.org/662088
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 20 2012 Debarshi Ray <rishi(a)fedorapeople.org> - 3.2.2-1
- Update to 3.2.2
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update seahorse' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 16 Update: perl-XML-DTDParser-2.01-3.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4253
2012-03-21 01:52:54
--------------------------------------------------------------------------------
Name : perl-XML-DTDParser
Product : Fedora 16
Version : 2.01
Release : 3.fc16
URL : http://search.cpan.org/dist/XML-DTDParser/
Summary : Quick and dirty DTD parser
Description :
This module parses a DTD file and creates a data structure containing info
about all tags, their allowed parameters, children, parents, optionality,
and others.
--------------------------------------------------------------------------------
Update Information:
Quick and dirty DTD parser
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #791363 - Review Request: perl-XML-DTDParser - Quick and dirty DTD parser
https://bugzilla.redhat.com/show_bug.cgi?id=791363
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-XML-DTDParser' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 16 Update: perl-Socket-2.000-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4027
2012-03-17 22:58:31
--------------------------------------------------------------------------------
Name : perl-Socket
Product : Fedora 16
Version : 2.000
Release : 1.fc16
URL : http://search.cpan.org/dist/Socket/
Summary : C socket.h defines and structure manipulators
Description :
This module is just a translation of the C socket.h file. Unlike the old
mechanism of requiring a translated socket.ph file, this uses the h2xs program
(see the Perl source distribution) and your native C compiler. This means
that it has a far more likely chance of getting the numbers right. This
includes all of the commonly used pound-defines like AF_INET, SOCK_STREAM, etc.
--------------------------------------------------------------------------------
Update Information:
Fix a buffer overflow.
The new Socket 1.99 module for Fedora 16. This is required for IO::Socket::IP.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #803000 - perl-Socket-2.000 is available
https://bugzilla.redhat.com/show_bug.cgi?id=803000
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Socket' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 15 Update: foobillard-3.0a-18.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4305
2012-03-21 01:55:24
--------------------------------------------------------------------------------
Name : foobillard
Product : Fedora 15
Version : 3.0a
Release : 18.fc15
URL : http://foobillard.sunsite.dk/
Summary : OpenGL billard game
Description :
FooBillard is an attempt to create a free OpenGL-billard for Linux.
FooBillard is still under development but the main physics is implemented.
--------------------------------------------------------------------------------
Update Information:
Restore sound.
Fix table cloth texture.
Fix table cloth texture.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 12 2012 Jon Ciesla <limburgher(a)gmail.com> - 3.0a-18
- Build with SDL to fix sound, BZ 801588.
* Wed Mar 7 2012 Jon Ciesla <limburgher(a)gmail.com> - 3.0a-17
- Patch to fix cloth texture, BZ 709202.
- Build with glut.
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.0a-16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Mon Nov 7 2011 Miloslav Trmač <mitr(a)redhat.com> - 3.0a-15
- Add dist tag
- Rebuild with newer libpng
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #801588 - No sound
https://bugzilla.redhat.com/show_bug.cgi?id=801588
[ 2 ] Bug #709202 - Table has noticeable shading/colouring bug
https://bugzilla.redhat.com/show_bug.cgi?id=709202
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update foobillard' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 16 Update: libqb-0.11.1-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4996
2012-03-31 02:13:10
--------------------------------------------------------------------------------
Name : libqb
Product : Fedora 16
Version : 0.11.1
Release : 1.fc16
URL : http://www.libqb.org
Summary : An IPC library for high performance servers
Description :
libqb provides high performance client server reusable features.
Initially these are IPC and poll.
--------------------------------------------------------------------------------
Update Information:
Rebase to 0.11.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 11 2012 Angus Salkeld <asalkeld(a)redhat.com> - 0.11.1-1
- configue libqb to not use epoll as it seems broken (#800865)
- LOOP: remove some old timerfd code.
- TEST: add a test to check the order of the jobs
- LOOP: when new jobs are added they are added to the head instead of the tail.
- LOG: Now the array is self locking we can make the lookup array dynamic
- Add locking to the array when growing.
- IPC: make the _request_q_len_get() function more obvious.
- IPC: fix multiple receives from qb_ipc_us_recv()
- IPC: make sure that the wrong union member is not written to.
- TIMER: check for null timer handle
Wed Mar 7 2012 Angus Salkeld <asalkeld(a)redhat.com> - 0.11.0-1
- ARRAY: cleanup the pointer sizeof()
- LOG: turn off __attribute__(section) for powerpc (not working)
- TESTS: move the util tests into "slow-tests" (i.e. optional)
- TEST: make the test_priority the same type as in the callsite
- LOG: make the log arrays manually grow-able since we need to lock the calls.
- RB: fix test failure on ppc
- RB: change the name of the size to word_size to be more clear
- TEST: add some more signal tests.
- LOOP: fix deletion of signal handlers when they are pending
- LOOP: signal handlers were always added as high priority.
- TEST: deal with mac's limited sed
- check: add debugging to the configure options and remove unused options
- TEST: properly clear the filters
- LOG: expose the mechanism to get a dynamic callsite.
- Revert part of my COARSE grained timer commit
- Remove timerfd usage and go back to timelist.
- UTIL: if possible use COARSE resolution clocks - they are much faster.
- ARRAY: save memory (in the bins array) and allow holes in the array
- LOOP: add qb_loop_timer_is_running()
- LOOP: allow stop() and run() to be called with NULL loop instance.
- LOOP: fix doxygen parameter comment
- LOG: add stdout target
- LOOP: add a function to delete jobs
- LOG: remove debug printf's
- LOG: remove an old/incorrect doxygen comment.
- LOG: add a hostname %H format specifier.
- LOG: Add qb_log_filter_fn_set()
* Tue Feb 14 2012 Angus Salkeld <asalkeld(a)redhat.com> - 0.10.1-1
- Fix "make distcheck" add include path to AM_CPPFLAGS
- Bump the version to 0.10.1
- clang: Remove unused code
- TEST: make the ipc failure test closer to corosync's case.
- RB: add a debug message if trying to read a message of the wrong size
- IPC: split up the recv into chuncks of 2 seconds. (#788742)
- Be more consistent with the internal logs.
- LOOP: make it possible to pass in NULL as the default loop instance
- RB: use the proper struct not the typedef in the implementation.
- RB: Fix potential mem leak
- Don't mix enums (QB_TRUE/TRUE)
- use random() not rand()
- Remove dead code
- set umask before calling mkstemp()
- Use safer versions of string functions (strcpy -> strlcpy)
- Increase the coverity aggressiveness
- TEST: make the loop ratelimit test more forgiving.
* Tue Feb 7 2012 Angus Salkeld <asalkeld(a)redhat.com> - 0.10.0-1
- LOOP: handle errors from the poll function
- LOOP: make the item type applicable to jobs too.
- LOOP: fix the todo calculations.
- TEST: check for a single job causing a cpu spin
- LOOP: prevent jobs from consuming too much cpu.
- Get coverity to ignore this warning.
- Change example code to use fgets instead of gets
- LOG: pass the result of qb_log_thread_start() back to the user
- Fix some issues found by clang
- Add clang-analyzer check
- Add a split timer to the stopwatch.
- IPC: merge common code into new function
- IPC: better handle a disconnect been called from within connection_created()
- IPC: fix scary typo
- IPC: fix server error handling
* Mon Feb 6 2012 Angus Salkeld <asalkeld(a)redhat.com> - 0.9.0-2
- Fix a spin in the mainloop when a timer or poll gets removed
When in the job queue (#787196).
* Fri Jan 27 2012 Angus Salkeld <asalkeld(a)redhat.com> - 0.9.0-1
- Rebased to 0.9.0
* Tue Jan 10 2012 Angus Salkeld <asalkeld(a)redhat.com> - 0.8.1-2
- fix qb_timespec_add_ms()
* Thu Jan 5 2012 Angus Salkeld <asalkeld(a)redhat.com> - 0.8.1-1
- Rebased to 0.8.1 (#771914)
* Thu Nov 17 2011 Angus Salkeld <asalkeld(a)redhat.com> - 0.7.0-1
- Rebased to 0.7.0 (#754610)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libqb' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 16 Update: quodlibet-2.4-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4146
2012-03-19 02:47:37
--------------------------------------------------------------------------------
Name : quodlibet
Product : Fedora 16
Version : 2.4
Release : 1.fc16
URL : http://code.google.com/p/quodlibet/
Summary : A music management program
Description :
Quod Libet is a music management program. It provides several different ways
to view your audio library, as well as support for Internet radio and
audio feeds. It has extremely flexible metadata tag editing and searching
capabilities.
Supported file formats include Ogg Vorbis, MP3, FLAC, MOD/XM/IT, Musepack,
Wavpack, and MPEG-4 AAC.
--------------------------------------------------------------------------------
Update Information:
Update to recent upstream release which should also fix some bugs.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 18 2012 Johannes Lips <hannes(a)fedoraproject.org> - 2.4-1
- Update to recent upstream release
* Tue Jan 17 2012 Johannes Lips <hannes(a)fedoraproject.org> - 2.3.92-1
- Update to recent upstream release
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.3.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Tue Oct 18 2011 Johannes Lips <hannes(a)fedoraproject.org> - 2.3.2-1
- Update to recent upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #804422 - quodlibet-2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=804422
[ 2 ] Bug #802001 - [abrt] quodlibet-2.3.2-1.fc16: sem_wait: Process /usr/bin/python was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=802001
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update quodlibet' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 16 Update: perl-Geo-IPfree-1.1.2.0.4.6.0-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4339
2012-03-21 01:57:14
--------------------------------------------------------------------------------
Name : perl-Geo-IPfree
Product : Fedora 16
Version : 1.1.2.0.4.6.0
Release : 1.fc16
URL : http://search.cpan.org/dist/Geo-IPfree/
Summary : Look up the country of an IPv4 Address
Description :
This package comes with it's own database to look up the IPv4's country, and
is totally free.
--------------------------------------------------------------------------------
Update Information:
IP database updated.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 20 2012 Petr Pisar <ppisar(a)redhat.com> - 1.1.2.0.4.6.0-1
- 1.1.2.0.4.6.0 bump
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Geo-IPfree' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month