[SECURITY] Fedora 17 Update: python-docs-2.7.3-1.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-5892
2012-04-14 01:41:11
--------------------------------------------------------------------------------
Name : python-docs
Product : Fedora 17
Version : 2.7.3
Release : 1.fc17
URL : http://www.python.org/
Summary : Documentation for the Python programming language
Description :
The python-docs package contains documentation on the Python
programming language and interpreter.
Install the python-docs package if you'd like to use the documentation
for the Python language.
--------------------------------------------------------------------------------
Update Information:
Rebase of Python 2 ("python") from 2.7.2 to 2.7.3, bringing in security fixes, along with numerous other bugfixes.
See http://python.org/download/releases/2.7.3/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #750555 - CVE-2012-1150 python: hash table collisions CPU usage DoS (oCERT-2011-003)
https://bugzilla.redhat.com/show_bug.cgi?id=750555
[ 2 ] Bug #789790 - CVE-2012-0845 python: SimpleXMLRPCServer CPU usage DoS via malformed XML-RPC request
https://bugzilla.redhat.com/show_bug.cgi?id=789790
[ 3 ] Bug #812068 - python: SSL CBC IV vulnerability (CVE-2011-3389, BEAST)
https://bugzilla.redhat.com/show_bug.cgi?id=812068
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-docs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 17 Update: sugar-getiabooks-11-1.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-6499
2012-04-24 03:11:15
--------------------------------------------------------------------------------
Name : sugar-getiabooks
Product : Fedora 17
Version : 11
Release : 1.fc17
URL : http://wiki.sugarlabs.org/go/Activities/Get_Internet_Archive_Books
Summary : Internet Archive Books receiver for Sugar
Description :
This Activity will use the Advanced Search capabilities of the
Internet Archive website to enable browsing the website's catalog,
getting information on the books therein, and downloading these
books to the Journal. Its user interface is similar to the offline
catalog search of Read Etexts, but where that Activity is used for
both getting books and reading them this one will concern itself
only with getting the books, so they may be read with the Read
Activity.
--------------------------------------------------------------------------------
Update Information:
Update to new version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sugar-getiabooks' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 17 Update: perl-Log-Any-0.11-7.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-6427
2012-04-23 01:19:48
--------------------------------------------------------------------------------
Name : perl-Log-Any
Product : Fedora 17
Version : 0.11
Release : 7.fc17
URL : http://search.cpan.org/dist/Log-Any/
Summary : Bringing loggers and listeners together
Description :
Log::Any allows CPAN modules to safely and efficiently log messages, while
letting the application choose (or decline to choose) a logging mechanism
such as Log::Dispatch or Log::Log4perl.
--------------------------------------------------------------------------------
Update Information:
Fix FTBFS reported on Peter Robinson's blog.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Log-Any' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
[SECURITY] Fedora 17 Update: phpMyAdmin-3.5.0-1.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-5599
2012-04-10 20:09:04
--------------------------------------------------------------------------------
Name : phpMyAdmin
Product : Fedora 17
Version : 3.5.0
Release : 1.fc17
URL : http://www.phpmyadmin.net/
Summary : Handle the administration of MySQL over the World Wide Web
Description :
phpMyAdmin is a tool written in PHP intended to handle the administration of
MySQL over the World Wide Web. Most frequently used operations are supported
by the user interface (managing databases, tables, fields, relations, indexes,
users, permissions), while you still have the ability to directly execute any
SQL statement.
Features include an intuitive web interface, support for most MySQL features
(browse and drop databases, tables, views, fields and indexes, create, copy,
drop, rename and alter databases, tables, fields and indexes, maintenance
server, databases and tables, with proposals on server configuration, execute,
edit and bookmark any SQL-statement, even batch-queries, manage MySQL users
and privileges, manage stored procedures and triggers), import data from CSV
and SQL, export data to various formats: CSV, SQL, XML, PDF, OpenDocument Text
and Spreadsheet, Word, Excel, LATEX and others, administering multiple servers,
creating PDF graphics of your database layout, creating complex queries using
Query-by-example (QBE), searching globally in a database or a subset of it,
transforming stored data into any format using a set of predefined functions,
like displaying BLOB-data as image or download-link and much more...
--------------------------------------------------------------------------------
Update Information:
Changes for 3.5.0.0 (2012-04-07):
- [interface] Add support for mass prefix change.
- [display] "up to date" message on main page when current version is up to date
- [feature] Update to jQuery 1.6.2
- [search] Show/hide db search results
- [patch] Add gettext wrappers around a message
- [cleanup] Remove deprecated function PMA_DBI_get_fields
- [feature] Remember recent tables
- [feature] Remember the last sort order for each table
- [ajax] for Create table in navigation panel
- [feature] Wording about Column
- [ajax] AJAX for Add a user in Database privileges
- [feature] new DisableMultiTableMaintenance directive
- [interface] Reorganised server status page.
- [interface] Changed way of generating charts.
- [interface] Flexible column width
- [interface] Mouse-based column reordering in query results
- [ajax] AJAX for Insert to a table from database Structure page
- [patch] PMA_ajaxShowMessage() does not respect timeout
- [ajax] AJAX for Change on multiple rows in table Browse
- [interface] Improved support for stored routines
- [display] More options for browsing GIS data
- [interface] Support for spatial indexes
- [display] GIS data visualization
- [ajax] AJAX for table structure multiple-column change
- [ajax] AJAX for table structure index edit
- [feature] Show/hide indexes in table Structure
- [display] More compact navigation bar
- [display] Display direction (horizontal/vertical) no longer displayed by default
- [feature] Shift/click support in database Structure
- [display] Show/hide column in table Browse
- [ajax] AJAX dialogs use wrong font-size
- [interface] Timepicker does not work in AJAX dialogs
- [ajax] AJAX for table Structure Indexes Edit
- [ajax] AJAX for table Structure column Change
- [interface] Improved support for events
- [interface] Improved support for triggers
- [interface] Improved server monitoring
- [ajax] AJAX for table Structure column Add
- [ajax] AJAX for table Operations copy table
- [export] no uid Query result export (Suhosin limit)
- [feature] Grid editing in browse mode (replaces row inline edit)
- [feature] Zoom-search in table Search
- [interface] Editor for GIS data
- [import] Import GIS data from ESRI Shapefiles
- [interface] 'Function based search' for GIS data
- [database] Support Drizzle database
- [interface] Interface problems for queries having LIMIT clauses
- [interface] Remove DefaultPropDisplay feature
- [prettyprint] Order By in a query containing comment character
- [interface] Improved ENUM/SET editor
- [pmadb] pmadb on a different MySQL server
- [interface] Improving field size for character columns
- [usability] Removed an unnecessary AJAX request from database search
- [navi] Tabs break when squeezing page
- [navi] Stick table tools to top of page on scroll
- [interface] Improved error handling
- [interface] Add useful intermediate pages to pageselector
- [interface] Improved index editor
- [display] View editing via a generated ALTER VIEW
- [interface] Deleting table from the DB does not change the table counter
- [designer] Toggle for relation lines
- [ajax] database list not updated after adding/deleting a user + database
- [edit] Sort by key generates wrong sql with limit clause
- [structure] Error dropping index of non-existing column
- [display] Page through rows returned from a view
- [interface] Checkbox to have SQL input remain
- [export] Fixed CSV escape for the export
- [import] Fixed CSV escape for the import
- [interface] No warning on syntax error in search form
- [core] Improved detection of SSL connection
- [feature] FULLTEXT support for InnoDB, starting with MySQL 5.6.4
- [interface] Duplicate inline query edit box
- [mime] Description of the transformation missing in the tooltip
Changes for 3.4.11.0 (not yet released):
- [import] Exception on XML import
- [navi] $cfg['ShowTooltipAliasTB'] and blank names in navigation
Changes for 3.4.10.2 (2012-03-28):
- [security] Fixed local path disclosure vulnerability, see PMASA-2012-2
Changes for 3.4.10.1 (2012-02-18):
- [security] XSS in replication setup, see PMASA-2012-1
Changes for 3.4.10.0 (2012-02-14):
- [interface] TextareaAutoSelect feature broken
- [export] PHP Array export might generate invalid php code
- [import] Import from ODS ignores cell that is the same as cell before
- [display] SELECT DISTINCT displays wrong total records found
- [operations] copy table data missing SET SQL_MODE='NO_AUTO_VALUE_ON_ZERO'
- [edit] Setting data to NULL and drop-downs
- [edit] Missing set fields and values in generated INSERT query
- [libraries] license issue with TCPDF (updated to 5.9.145)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #795020 - CVE-2012-1190 phpMyAdmin: XSS in replication setup (PMASA-2012-1)
https://bugzilla.redhat.com/show_bug.cgi?id=795020
[ 2 ] Bug #809146 - CVE-2012-1902 phpMyAdmin: path disclosure flaw (PMASA-2012-2)
https://bugzilla.redhat.com/show_bug.cgi?id=809146
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update phpMyAdmin' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 17 Update: gnome-shell-extension-cpu-temperature-0-0.7.gite1777e6.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-6276
2012-04-20 05:57:30
--------------------------------------------------------------------------------
Name : gnome-shell-extension-cpu-temperature
Product : Fedora 17
Version : 0
Release : 0.7.gite1777e6.fc17
URL : https://github.com/xtranophilist/gnome-shell-extension-cpu-temperature/
Summary : A gnome-shell extension to show the current temperature of CPU
Description :
Gnome Shell Extensions that adds an applet on the panel which reveals
current CPU temperature in Degree Celsius and Fahrenheit.
--------------------------------------------------------------------------------
Update Information:
* Fri Apr 13 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 0-0.7.gite1777e6
- Make it work with Gnome Shell 3.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #808827 - update gnome-shell-extension-cpu-temperature to gnome 3.4
https://bugzilla.redhat.com/show_bug.cgi?id=808827
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gnome-shell-extension-cpu-temperature' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 17 Update: perl-MD5-2.03-12.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-6444
2012-04-23 01:20:46
--------------------------------------------------------------------------------
Name : perl-MD5
Product : Fedora 17
Version : 2.03
Release : 12.fc17
URL : http://search.cpan.org/dist/MD5/
Summary : Perl interface to the MD5 Message-Digest Algorithm
Description :
This module (MD5.pm) is just a thin wrapper around the Digest::MD5
module. It is provided so that legacy code that rely on the old
interface continue to work with the speed benefit of the new module.
--------------------------------------------------------------------------------
Update Information:
Fix FTBFS reported on Peter Robinson's blog.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-MD5' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 17 Update: eclipse-mylyn-fedora-integration-1.0.1-0.1.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-7052
2012-05-02 04:37:22
--------------------------------------------------------------------------------
Name : eclipse-mylyn-fedora-integration
Product : Fedora 17
Version : 1.0.1
Release : 0.1.fc17
URL : https://fedorahosted.org/Eclipse-Mylyn-Fedora-Integration/
Summary : Eclipse Mylyn Fedora Integration
Description :
Integrates Eclipse Mylyn with Fedora ecosystem by providing possibility to
report bugs and enhancements directly from within Eclipse.
--------------------------------------------------------------------------------
Update Information:
Fedora bugzilla informations for Eclipse-Mylyn.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #812867 - Fedora support provider would be nice
https://bugzilla.redhat.com/show_bug.cgi?id=812867
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update eclipse-mylyn-fedora-integration' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 17 Update: qemu-1.0-17.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-6457
2012-04-24 03:09:01
--------------------------------------------------------------------------------
Name : qemu
Product : Fedora 17
Version : 1.0
Release : 17.fc17
URL : http://www.qemu.org/
Summary : QEMU is a FAST! processor emulator
Description :
QEMU is a generic and open source processor emulator which achieves a good
emulation speed by using dynamic translation. QEMU has two operating modes:
* Full system emulation. In this mode, QEMU emulates a full system (for
example a PC), including a processor and various peripherials. It can be
used to launch different Operating Systems without rebooting the PC or
to debug system code.
* User mode emulation. In this mode, QEMU can launch Linux processes compiled
for one CPU on another CPU.
As QEMU requires no host kernel patches to run, it is safe and easy to use.
--------------------------------------------------------------------------------
Update Information:
This update fixes the following problems:
- Fix kvm.modules to exit successfully on non-KVM capable systems (BZ#814932)
- Add a couple of backported QXL/Spice bugfixes
- Volume control in guests now works
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #814932 - Non-fatal POSTIN scriptlet failure
https://bugzilla.redhat.com/show_bug.cgi?id=814932
[ 2 ] Bug #815272 - qemu test suite fails on ARM
https://bugzilla.redhat.com/show_bug.cgi?id=815272
[ 3 ] Bug #810226 - Cursor invisible in X in a KVM when using qxl video driver but VNC viewer
https://bugzilla.redhat.com/show_bug.cgi?id=810226
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qemu' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
[SECURITY] Fedora 17 Update: cifs-utils-5.4-1.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-6257
2012-04-20 02:22:47
--------------------------------------------------------------------------------
Name : cifs-utils
Product : Fedora 17
Version : 5.4
Release : 1.fc17
URL : http://linux-cifs.samba.org/cifs-utils/
Summary : Utilities for mounting and managing CIFS mounts
Description :
The SMB/CIFS protocol is a standard file sharing protocol widely deployed
on Microsoft Windows machines. This package contains tools for mounting
shares on Linux using the SMB/CIFS protocol. The tools in this package
work in conjunction with support in the kernel to allow one to mount a
SMB/CIFS share onto a client and use it as if it were a standard Linux
file system.
--------------------------------------------------------------------------------
Update Information:
This updates the cifs-utils package to version 5.4, which contains a number of bugfixes and enhancements. Highlights include:
* mount.cifs now supports the -s option by passing "sloppy" to the kernel in the options string
* cifs.upcall now properly respects the domain_realm section in krb5.conf
* unprivileged users can no longer mount onto dirs into which they can't chdir (fixes CVE-2012-1586)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #807252 - CVE-2012-1586 samba, samba3x, cifs-utils: mount.cifs file existence disclosure vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=807252
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cifs-utils' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 17 Update: gridsite-1.7.19-1.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-6126
2012-04-18 22:02:56
--------------------------------------------------------------------------------
Name : gridsite
Product : Fedora 17
Version : 1.7.19
Release : 1.fc17
URL : http://www.gridsite.org
Summary : Grid Security for the Web, Web platforms for Grids
Description :
GridSite was originally a web application developed for managing and formatting
the content of the http://www.gridpp.ac.uk/ website. Over the past years it
has grown into a set of extensions to the Apache web server and a toolkit for
Grid credentials, GACL access control lists and HTTP(S) protocol operations.
This package gridsite contains apache httpd modules for enabling
mod_gridsite.
--------------------------------------------------------------------------------
Update Information:
Gridsite update 1.7.19.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #803062 - Missing Requires: httpd-mmn
https://bugzilla.redhat.com/show_bug.cgi?id=803062
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gridsite' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month