Fedora 17 Update: highlight-3.9-1.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-8420
2012-05-26 03:17:31
--------------------------------------------------------------------------------
Name : highlight
Product : Fedora 17
Version : 3.9
Release : 1.fc17
URL : http://www.andre-simon.de/
Summary : Universal source code to formatted text converter
Description :
A utility that converts sourcecode to HTML, XHTML, RTF, LaTeX, TeX,
XSL-FO, XML or ANSI escape sequences with syntax highlighting.
It supports several programming and markup languages.
Language descriptions are configurable and support regular expressions.
The utility offers indentation and reformatting capabilities.
It is easily possible to create new language definitions and colour themes.
--------------------------------------------------------------------------------
Update Information:
Minor GUI bug fixes. Enhanced plugin infrastructure.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 24 2012 Jochen Schmitt <Jochen herr-schmitt de> 3.9-1
- New upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update highlight' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years
[SECURITY] Fedora 17 Update: python-crypto-2.6-1.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-8392
2012-05-26 03:16:03
--------------------------------------------------------------------------------
Name : python-crypto
Product : Fedora 17
Version : 2.6
Release : 1.fc17
URL : http://www.pycrypto.org/
Summary : Cryptography library for Python
Description :
PyCrypto is a collection of both secure hash functions (such as MD5 and
SHA), and various encryption algorithms (AES, DES, RSA, ElGamal, etc.).
--------------------------------------------------------------------------------
Update Information:
This update, to the current upstream pycrypto release, includes a number of regular bug fixes plus a security fix for CVE-2012-2417 (insecure ElGamal key generation). Anyone using ElGamal keys should generate new keys as soon as practical (any additional information about this bug will be tracked at https://bugs.launchpad.net/pycrypto/+bug/985164).
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 24 2012 Paul Howarth <paul(a)city-fan.org> - 2.6-1
- Update to 2.6
- Fix insecure ElGamal key generation (launchpad bug #985164, CVE-2012-2417)
- Huge documentation cleanup
- Added more tests, including test vectors from NIST 800-38A
- Remove broken MODE_PGP, which never actually worked properly
- A new mode, MODE_OPENPGP, has been added for people wishing to write
OpenPGP implementations (see also launchpad bug #996814)
- Fix: getPrime with invalid input causes Python to abort with fatal error
(launchpad bug #988431)
- Fix: Segfaults within error-handling paths (launchpad bug #934294)
- Fix: Block ciphers allow empty string as IV (launchpad bug #997464)
- Fix DevURandomRNG to work with Python3's new I/O stack
- Remove automagic dependencies on libgmp and libmpir; let the caller
disable them using args
- Many other minor bug fixes and improvements
- Drop upstream patches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #825162 - CVE-2012-2417 python-crypto: Insecure ElGamal key generation
https://bugzilla.redhat.com/show_bug.cgi?id=825162
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-crypto' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years
Fedora 17 Update: olpc-powerd-103-1.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-8408
2012-05-26 03:16:56
--------------------------------------------------------------------------------
Name : olpc-powerd
Product : Fedora 17
Version : 103
Release : 1.fc17
URL : http://dev.laptop.org/git/users/pgf/powerd/tree/powerd
Summary : OLPC XO power management
Description :
powerd is the user-level power management daemon for the XO family of
laptops. It is independent of X, and moderately independent of dbus. This
package provides the powerd and olpc-switchd daemons, and related
utilities.
--------------------------------------------------------------------------------
Update Information:
inhibit suspend when audio device is in use
- 102-1
- update internal documentation
- fix wakeup conditions which caused touchpad loss
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 23 2012 Paul Fox <pgf(a)laptop.org>
- 103-1
- inhibit suspend when audio device is in use
* Thu May 17 2012 Paul Fox <pgf(a)laptop.org>
- 102-1
- update internal documentation
- fix wakeup conditions which caused touchpad loss
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update olpc-powerd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years
[SECURITY] Fedora 16 Update: openssl-1.0.0j-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-8014
2012-05-18 10:00:50
--------------------------------------------------------------------------------
Name : openssl
Product : Fedora 16
Version : 1.0.0j
Release : 1.fc16
URL : http://www.openssl.org/
Summary : A general purpose cryptography library with TLS implementation
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.
--------------------------------------------------------------------------------
Update Information:
This is new minor upstream update fixing moderate security issue CVE-2012-2333.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 15 2012 Tomas Mraz <tmraz(a)redhat.com> 1.0.0j-1
- new upstream release fixing CVE-2012-2333 - improper record
length checking in DTLS
* Fri Apr 20 2012 Tomas Mraz <tmraz(a)redhat.com> 1.0.0i-1
- new upstream release fixing CVE-2012-2110 - memory corruption
when loading asn1 from BIO
* Fri Mar 23 2012 Tomas Mraz <tmraz(a)redhat.com> 1.0.0h-1
- new upstream release fixing CVE-2012-0884 - Bleichenbacher attack
against PKCS#7 and CMS (#802725) and CVE-2012-1165 mime_param_cmp
NULL dereference (#802489)
* Thu Jan 19 2012 Tomas Mraz <tmraz(a)redhat.com> 1.0.0g-1
- new upstream release fixing CVE-2012-0050 - DoS regression in
DTLS support introduced by the previous release (#782795)
* Thu Jan 5 2012 Tomas Mraz <tmraz(a)redhat.com> 1.0.0f-1
- new upstream release fixing multiple CVEs
* Tue Nov 22 2011 Tomas Mraz <tmraz(a)redhat.com> 1.0.0e-4
- move the libraries needed for static linking to Libs.private
* Thu Nov 3 2011 Tomas Mraz <tmraz(a)redhat.com> 1.0.0e-3
- do not use AVX instructions when osxsave bit not set
- add direct known answer tests for SHA2 algorithms
* Wed Sep 21 2011 Tomas Mraz <tmraz(a)redhat.com> 1.0.0e-2
- fix missing initialization of variable in CHIL engine
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #820686 - CVE-2012-2333 openssl: record length handling integer underflow
https://bugzilla.redhat.com/show_bug.cgi?id=820686
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openssl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years
Fedora 17 Update: sugar-portfolio-24-1.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-8423
2012-05-26 03:17:39
--------------------------------------------------------------------------------
Name : sugar-portfolio
Product : Fedora 17
Version : 24
Release : 1.fc17
URL : http://wiki.sugarlabs.org/go/Activities/Portfolio
Summary : A simple tool for generating slide show from starred Journal entries
Description :
Portfolio is a simple tool for generating a slide show from Journal
entries that have been starred. The title, description, and preview
image are used to auto-generate a slide. The slide show itself can be
saved as an HTML document that can be shared.
--------------------------------------------------------------------------------
Update Information:
Release v24
Version 23 release
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 24 2012 Kalpa Welivitigoda <callkalpa(a)gmail.com> - 24-1
- release v24
* Fri Mar 16 2012 Kalpa Welivitigoda <callkalpa(a)gmail.com> - 23-1
- release v23
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sugar-portfolio' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years
Fedora 17 Update: sks-1.1.3-2.fc17
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-8263
2012-05-24 15:02:20
--------------------------------------------------------------------------------
Name : sks
Product : Fedora 17
Version : 1.1.3
Release : 2.fc17
URL : http://code.google.com/p/sks-keyserver/
Summary : Synchronizing Key Server
Description :
SKS is a OpenPGP keyserver whose goal is to provide easy to
deploy, decentralized, and highly reliable synchronization.
--------------------------------------------------------------------------------
Update Information:
Fix ARM arch definition, update spec
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 23 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 1.1.3-2
- Fix ARM arch definition, update spec
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sks' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years
Fedora 16 Update: synfigstudio-0.63.05-3.1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-8698
2012-06-01 16:17:55
--------------------------------------------------------------------------------
Name : synfigstudio
Product : Fedora 16
Version : 0.63.05
Release : 3.1.fc16
URL : http://synfig.org/
Summary : Vector-based 2D animation studio
Description :
Synfig Animation Studio is a powerful, industrial-strength vector-based
2D animation software, designed from the ground-up for producing
feature-film quality animation with fewer people and resources.
It is designed to be capable of producing feature-film quality
animation. It eliminates the need for tweening, preventing the
need to hand-draw each frame. Synfig features spatial and temporal
resolution independence (sharp and smoothat any resolution or framerate),
high dynamic range images, and a flexible plugin system.
This package contains the GUI-based animation studio.
--------------------------------------------------------------------------------
Update Information:
This fix addresses an issue where Shared MIME-Info database cache gets overwritten causing a break of file type recognition in many applications.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #821740 - synfigstudio-0.63.05-1.fc16: package contains wrong files
https://bugzilla.redhat.com/show_bug.cgi?id=821740
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update synfigstudio' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years
Fedora 16 Update: erlang-gen_leader-1.0-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-8351
2012-05-24 23:34:22
--------------------------------------------------------------------------------
Name : erlang-gen_leader
Product : Fedora 16
Version : 1.0
Release : 1.fc16
URL : https://github.com/abecciu/gen_leader_revival
Summary : A leader election behavior modeled after gen_server
Description :
This application implements a leader election behavior modeled after gen_server.
This behavior intends to make it reasonably straightforward to implement a fully
distributed server with master-slave semantics.
--------------------------------------------------------------------------------
Update Information:
* First stable release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 22 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 1.0-1
- Ver. 1.0
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0-0.4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update erlang-gen_leader' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years
Fedora 15 Update: zeroinstall-injector-1.8-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-8350
2012-05-24 23:34:20
--------------------------------------------------------------------------------
Name : zeroinstall-injector
Product : Fedora 15
Version : 1.8
Release : 1.fc15
URL : http://0install.net
Summary : The Zero Install Injector (0launch)
Description :
The Zero Install Injector makes it easy for users to install software
without needing root privileges. It takes the URL of a program and
runs it (downloading it first if necessary). Any dependencies of the
program are fetched in the same way. The user controls which version
of the program and its dependencies to use.
Zero Install is a decentralized installation system (there is no
central repository; all packages are identified by URLs),
loosely-coupled (if different programs require different versions of a
library then both versions are installed in parallel, without
conflicts), and has an emphasis on security (all package descriptions
are GPG-signed, and contain cryptographic hashes of the contents of
each version). Each version of each program is stored in its own
sub-directory within the Zero Install cache (nothing is installed to
directories outside of the cache, such as /usr/bin) and no code from
the package is run during install or uninstall. The system can
automatically check for updates when software is run.
--------------------------------------------------------------------------------
Update Information:
Latest upstream release; see
http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/5866
for details.
New features:
- Warn about replaced interfaces in "0install update".
- Attempting to create an alias to a replaced interface uses the replacement.
- Allow <command> inside <package-implementation>.
Many bug fixes; see http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/5493 for details
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 23 2012 Michel Salim <salimma(a)fedoraproject.org> - 1.8-1
- Update to 1.8
* Tue Apr 24 2012 Michel Salim <salimma(a)fedoraproject.org> - 1.7-1
- Update to 1.7
* Thu Jan 26 2012 Michel Salim <salimma(a)fedoraproject.org> - 1.5-2
- Prune dependencies
* Thu Jan 26 2012 Michel Salim <salimma(a)fedoraproject.org> - 1.5-1
- Update to 1.5
* Mon Jul 25 2011 Michel Salim <salimma(a)fedoraproject.org> - 1.2-1
- Update to 1.2
* Sat Jul 2 2011 Michel Salim <salimma(a)fedoraproject.org> - 1.1-2
- Further launcher script clean-up
* Wed Jun 29 2011 Michel Salim <salimma(a)fedoraproject.org> - 1.1-1
- Update to 1.1
- Remove --versions option, obsoleted in favor of '0alias launcher'
* Wed Jun 22 2011 Michel Salim <salimma(a)fedoraproject.org> - 1.0-3
- Fix --versions handling of 0alias-generated launchers
* Wed Jun 15 2011 Michel Salim <salimma(a)fedoraproject.org> - 1.0-2
- Add main category "System" to desktop entries
* Tue Jun 14 2011 Michel Salim <salimma(a)fedoraproject.org> - 1.0-1
- Update to 1.0
* Tue May 3 2011 Michel Salim <salimma(a)fedoraproject.org> - 1.0-0.rc1.1
- Update to 1.0rc1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #789695 - zeroinstall-injector-1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=789695
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update zeroinstall-injector' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years
Fedora 16 Update: zeroinstall-injector-1.8-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-8335
2012-05-24 23:33:39
--------------------------------------------------------------------------------
Name : zeroinstall-injector
Product : Fedora 16
Version : 1.8
Release : 1.fc16
URL : http://0install.net
Summary : The Zero Install Injector (0launch)
Description :
The Zero Install Injector makes it easy for users to install software
without needing root privileges. It takes the URL of a program and
runs it (downloading it first if necessary). Any dependencies of the
program are fetched in the same way. The user controls which version
of the program and its dependencies to use.
Zero Install is a decentralized installation system (there is no
central repository; all packages are identified by URLs),
loosely-coupled (if different programs require different versions of a
library then both versions are installed in parallel, without
conflicts), and has an emphasis on security (all package descriptions
are GPG-signed, and contain cryptographic hashes of the contents of
each version). Each version of each program is stored in its own
sub-directory within the Zero Install cache (nothing is installed to
directories outside of the cache, such as /usr/bin) and no code from
the package is run during install or uninstall. The system can
automatically check for updates when software is run.
--------------------------------------------------------------------------------
Update Information:
Latest upstream release; see
http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/5866
for details.
New features:
- Warn about replaced interfaces in "0install update".
- Attempting to create an alias to a replaced interface uses the replacement.
- Allow <command> inside <package-implementation>.
Many bug fixes; see http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/5493 for details
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 23 2012 Michel Salim <salimma(a)fedoraproject.org> - 1.8-1
- Update to 1.8
* Tue Apr 24 2012 Michel Salim <salimma(a)fedoraproject.org> - 1.7-1
- Update to 1.7
* Thu Jan 26 2012 Michel Salim <salimma(a)fedoraproject.org> - 1.5-2
- Prune dependencies
* Thu Jan 26 2012 Michel Salim <salimma(a)fedoraproject.org> - 1.5-1
- Update to 1.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #789695 - zeroinstall-injector-1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=789695
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update zeroinstall-injector' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years