Fedora 20 Update: system-config-language-2.3.0-2.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-15809
2014-11-27 07:25:00
--------------------------------------------------------------------------------
Name : system-config-language
Product : Fedora 20
Version : 2.3.0
Release : 2.fc20
URL : https://fedorahosted.org/system-config-language/
Summary : A graphical interface for modifying the system language
Description :
system-config-language is a graphical user interface that
allows the user to change the default language of the system.
--------------------------------------------------------------------------------
Update Information:
Resolves:rh#1165860: Add missing Requires: yum-langpacks
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 26 2014 Parag Nemade <pnemade AT redhat DOT com> - 2.3.0-2
- Resolves:rh#1165860: Add missing Requires: yum-langpacks
* Mon Jun 30 2014 Parag Nemade <pnemade AT redhat DOT com> - 2.3.0-1
- Update to 2.3.0 release
* Fri Jun 20 2014 Parag Nemade <pnemade AT redhat DOT com> - 2.2.0-3
- Resolves:rh#1111505:Temporary workaround is to remove icon file
* Mon Jun 16 2014 Parag Nemade <pnemade AT redhat DOT com> - 2.2.0-2
- bump the release for missing sources
* Mon Jun 16 2014 Parag Nemade <pnemade AT redhat DOT com> - 2.2.0-1
- Update to 2.2.0 release
* Tue May 27 2014 Parag Nemade <pnemade AT redhat DOT com> - 2.1.0-1
- Update to 2.1.0 release
* Wed May 21 2014 Parag Nemade <pnemade AT redhat DOT com> - 2.0.0-1
- Update to 2.0.0 release
* Mon Jan 27 2014 Parag Nemade <pnemade AT redhat DOT com> - 1.4.0-8
- Resolves:rh#1057681 - [abrt] gettext.py:93:c2py:ValueError: plural forms expression could be dangerous
* Thu Jan 16 2014 Parag Nemade <pnemade AT redhat DOT com> - 1.4.0-7
- Resolves:rh#920025 -[abrt] tui_install.py:395:is_group_installed:GroupsError: No Group named spanish-support exists
- Resolves:rh#1052331 - system-config-language traceback due to missing zulu-support package
- Resolves:rh#974743 - Group named german-support missing
- Resolves:rh#981968 - Georgian language (ka_GE) not available in Language selection
- Resolves:rh#1043569 - OK button should be disabled always for the default selected language
* Tue Dec 10 2013 Anish Patil <apatil(a)redhat.com> - 1.4.0-6
- Fixed bug-1039836.patch
* Thu Nov 21 2013 Anish Patil <apatil(a)redhat.com> - 1.4.0-5
- Fixed bug-1033050
* Thu Nov 7 2013 Anish Patil <apatil(a)redhat.com> - 1.4.0-4
- Added patch 858059 in specfile
* Thu Nov 7 2013 Anish Patil <apatil(a)redhat.com> - 1.4.0-3
- Resolves:#858059 - selectGroup:GroupsError: No Group named portuguese-support exists
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1165860 - [abrt] system-config-language: install_packages.py:133:read_installed_langpacks:IOError: [Errno 5] Erreur d'entrée/sortie
https://bugzilla.redhat.com/show_bug.cgi?id=1165860
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update system-config-language' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
Fedora 20 Update: python-docker-py-0.6.0-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-15534
2014-11-22 11:34:53
--------------------------------------------------------------------------------
Name : python-docker-py
Product : Fedora 20
Version : 0.6.0
Release : 1.fc20
URL : http://www.docker.com
Summary : An API client for docker written in Python
Description :
An API client for docker written in Python
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1160293 - update to 0.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 21 2014 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.6.0-1
- Resolves: rhbz#1160293 - update to 0.6.0
* Thu Oct 23 2014 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.5.3-2
- Resolves: rhbz#1145895
- versioned python-requests req only for f21+
* Wed Oct 22 2014 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.5.3-1
- Resolves: rhbz#1153991 - update to 0.5.3
* Tue Sep 23 2014 Tom Prince <tom.prince(a)clusterhq.com> - 0.5.0-2
- Specify depedencies to match those in setup.py
* Mon Sep 22 2014 Tom Prince <tom.prince(a)clusterhq.com> - 0.5.0-1
- Resolves: rhbz#1145511 - version bump to 0.5.0
* Tue Aug 26 2014 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.4.0-3
- correct bogus date
* Tue Aug 26 2014 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.4.0-2
- rewrite BR&R conditionals for docker/docker-io
* Thu Aug 21 2014 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.4.0-1
- update to 0.4.0
- Resolves: rhbz#1132604 (epel7 only)
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.3.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1160293 - python-docker-py-0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1160293
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-docker-py' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
[SECURITY] Fedora 20 Update: xen-4.3.3-5.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-15521
2014-11-22 11:34:02
--------------------------------------------------------------------------------
Name : xen
Product : Fedora 20
Version : 4.3.3
Release : 5.fc20
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor
--------------------------------------------------------------------------------
Update Information:
Guest effectable page reference leak in MMU_MACHPHYS_UPDATE handling
Insufficient restrictions on certain MMU update hypercalls,
Missing privilege level checks in x86 emulation of far branches,
Add fix for CVE-2014-0150 to qemu-dm, though it probably isn't
exploitable from xen
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 20 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.3-5
- Guest effectable page reference leak in MMU_MACHPHYS_UPDATE handling
[XSA-113] (#1166261)
* Wed Nov 19 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.3-4
- Insufficient restrictions on certain MMU update hypercalls [XSA-109,
CVE-2014-8594] (#1165205)
- Missing privilege level checks in x86 emulation of far branches [XSA-110,
CVE-2014-8595] (#1165204)
- Add fix for CVE-2014-0150 to qemu-dm, though it probably isn't
exploitable from xen (#1086776)
* Wed Oct 1 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.3-3
- Improper MSR range used for x2APIC emulation [XSA-108, CVE-2014-7188]
(#1148465)
* Tue Sep 23 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.3-2
- Race condition in HVMOP_track_dirty_vram [XSA-104, CVE-2014-7154] (#1145736)
- Missing privilege level checks in x86 HLT, LGDT, LIDT, and LMSW emulation
[XSA-105, CVE-2014-7155] (#1145737)
- Missing privilege level checks in x86 emulation of software interrupts
[XSA-106, CVE-2014-7156] (#1145738)
* Tue Sep 2 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.3-1
- update to xen-4.3.3
remove patches for fixes that are now included
* Wed Aug 13 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-7
- Long latency virtual-mmu operations are not preemptible
[XSA-97, CVE-2014-5146]
* Fri Jun 20 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-6
- Hypervisor heap contents leaked to guest [XSA-100, CVE-2014-4021]
(#1110316) with extra patch to avoid regression
* Sun Jun 15 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-5
- Fix %if line typo in the spec file
- Vulnerabilities in HVM MSI injection [XSA-96, CVE-2014-3967,CVE-2014-3968]
(#1104583)
* Sun May 11 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-4
- add systemd preset support (#1094938)
* Thu May 1 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-3
- HVMOP_set_mem_type allows invalid P2M entries to be created
[XSA-92, CVE-2014-3124] (#1093315)
* Wed Mar 26 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-2
- HVMOP_set_mem_access is not preemptible [XSA-89, CVE-2014-2599] (#1080425)
* Tue Feb 18 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-1
- update to xen-4.3.2
includes fix for "Excessive time to disable caching with HVM guests with
PCI passthrough" [XSA-60, CVE-2013-2212] (#987914)
- remove patches that are now included
* Wed Feb 12 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-10
- use-after-free in xc_cpupool_getinfo() under memory pressure [XSA-88,
CVE-2014-1950] (#1064491)
* Thu Feb 6 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-9
- integer overflow in several XSM/Flask hypercalls [XSA-84, CVE-2014-1891,
CVE-2014-1892, CVE-2014-1893, CVE-2014-1894]
Off-by-one error in FLASK_AVC_CACHESTAT hypercall [XSA-85, CVE-2014-1895]
libvchan failure handling malicious ring indexes [XSA-86, CVE-2014-1896]
(#1062335)
* Fri Jan 24 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-8
- PHYSDEVOP_{prepare,release}_msix exposed to unprivileged pv guests
[XSA-87, CVE-2014-1666] (#1058398)
* Thu Jan 23 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-7
- Out-of-memory condition yielding memory corruption during IRQ setup
[XSA-83, CVE-2014-1642] (#1057142)
* Wed Dec 11 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-6
- Disaggregated domain management security status update [XSA-77]
- IOMMU TLB flushing may be inadvertently suppressed [XSA-80, CVE-2013-6400]
(#1040024)
* Mon Dec 2 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-5
- HVM guest triggerable AMD CPU erratum may cause host hang
[XSA-82, CVE-2013-6885]
* Tue Nov 26 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-4
- Lock order reversal between page_alloc_lock and mm_rwlock
[XSA-74, CVE-2013-4553] (#1034925)
- Hypercalls exposed to privilege rings 1 and 2 of HVM guests
[XSA-76, CVE-2013-4554] (#1034923)
* Thu Nov 21 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-3
- Insufficient TLB flushing in VT-d (iommu) code
[XSA-78, CVE-2013-6375] (#1033149)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1166913 - CVE-2014-9030 kernel: xen: Guest effectable page reference leak in MMU_MACHPHYS_UPDATE handling
https://bugzilla.redhat.com/show_bug.cgi?id=1166913
[ 2 ] Bug #1160664 - CVE-2014-8594 kernel: xen: Insufficient restrictions on certain MMU update hypercalls (xsa109)
https://bugzilla.redhat.com/show_bug.cgi?id=1160664
[ 3 ] Bug #1160643 - CVE-2014-8595 kernel: xen: Missing privilege level checks in x86 emulation of far branches (xsa110)
https://bugzilla.redhat.com/show_bug.cgi?id=1160643
[ 4 ] Bug #1078846 - CVE-2014-0150 qemu: virtio-net: buffer overflow in virtio_net_handle_mac() function
https://bugzilla.redhat.com/show_bug.cgi?id=1078846
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xen' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
[SECURITY] Fedora 19 Update: xen-4.2.5-5.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-15503
2014-11-22 11:33:17
--------------------------------------------------------------------------------
Name : xen
Product : Fedora 19
Version : 4.2.5
Release : 5.fc19
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor
--------------------------------------------------------------------------------
Update Information:
Guest effectable page reference leak in MMU_MACHPHYS_UPDATE handling
Insufficient restrictions on certain MMU update hypercalls,
Missing privilege level checks in x86 emulation of far branches,
Add fix for CVE-2014-0150 to qemu-dm, though it probably isn't
exploitable from xen
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 20 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.5-5
- Guest effectable page reference leak in MMU_MACHPHYS_UPDATE handling
[XSA-113] (#1166261)
* Wed Nov 19 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.5-4
- Insufficient restrictions on certain MMU update hypercalls [XSA-109,
CVE-2014-8594] (#1165205)
- Missing privilege level checks in x86 emulation of far branches [XSA-110,
CVE-2014-8595] (#1165204)
- Add fix for CVE-2014-0150 to qemu-dm, though it probably isn't
exploitable from xen (#1086776)
* Wed Oct 1 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.5-3
- Improper MSR range used for x2APIC emulation [XSA-108, CVE-2014-7188]
(#1148465)
* Tue Sep 23 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.5-2
- Race condition in HVMOP_track_dirty_vram [XSA-104, CVE-2014-7154] (#1145736)
- Missing privilege level checks in x86 HLT, LGDT, LIDT, and LMSW emulation
[XSA-105, CVE-2014-7155] (#1145737)
- Missing privilege level checks in x86 emulation of software interrupts
[XSA-106, CVE-2014-7156] (#1145738)
* Tue Sep 2 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.5-1
- update to xen-4.2.5
remove patches for fixes that are now included
* Thu Aug 14 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-7
- Long latency virtual-mmu operations are not preemptible
[XSA-97, CVE-2014-5146]
* Fri Jun 20 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-6
- Hypervisor heap contents leaked to guest [XSA-100, CVE-2014-4021]
(#1110316) with extra patch to avoid regression
* Sun Jun 15 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-5
- Vulnerabilities in HVM MSI injection [XSA-96, CVE-2014-3967,CVE-2014-3968]
(#1104583)
* Thu May 1 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-4
- HVMOP_set_mem_type allows invalid P2M entries to be created
[XSA-92, CVE-2014-3124] (#1093315)
* Wed Mar 26 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-3
- HVMOP_set_mem_access is not preemptible [XSA-89, CVE-2014-2599] (#1080425)
* Wed Feb 19 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-2
- 32-bit fix for "Guest triggerable AMD CPU erratum may cause host hang"
[XSA-82, CVE-2013-6885]
* Tue Feb 18 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-1
- update to xen-4.2.4
includes fix for "Excessive time to disable caching with HVM guests with
PCI passthrough" [XSA-60, CVE-2013-2212] (#987914)
- remove patches that are now included
* Wed Feb 12 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-16
- use-after-free in xc_cpupool_getinfo() under memory pressure [XSA-88,
CVE-2014-1950] (#1064491)
* Thu Feb 6 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-15
- integer overflow in several XSM/Flask hypercalls [XSA-84, CVE-2014-1891,
CVE-2014-1892, CVE-2014-1893, CVE-2014-1894]
Off-by-one error in FLASK_AVC_CACHESTAT hypercall [XSA-85, CVE-2014-1895]
libvchan failure handling malicious ring indexes [XSA-86, CVE-2014-1896]
(#1062335)
* Fri Jan 24 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-14
- PHYSDEVOP_{prepare,release}_msix exposed to unprivileged pv guests
[XSA-87, CVE-2014-1666] (#1058398)
* Thu Jan 23 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-13
- Out-of-memory condition yielding memory corruption during IRQ setup
[XSA-83, CVE-2014-1642] (#1057142)
* Wed Dec 11 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-12
- IOMMU TLB flushing may be inadvertently suppressed [XSA-80, CVE-2013-6400]
(#1040024)
* Mon Dec 2 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-11
- HVM guest triggerable AMD CPU erratum may cause host hang
[XSA-82, CVE-2013-6885]
* Tue Nov 26 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-10
- Lock order reversal between page_alloc_lock and mm_rwlock
[XSA-74, CVE-2013-4553] (#1034925)
- Hypercalls exposed to privilege rings 1 and 2 of HVM guests
[XSA-76, CVE-2013-4554] (#1034923)
* Thu Nov 21 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-9
- Insufficient TLB flushing in VT-d (iommu) code
[XSA-78, CVE-2013-6375] (#1033149)
* Sat Nov 9 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-8
- Host crash due to HVM guest VMX instruction execution
[XSA-75, CVE-2013-4551] (#1029055)
* Fri Nov 1 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-7
- Lock order reversal between page allocation and grant table locks
[XSA-73, CVE-2013-4494] (#1026248)
* Tue Oct 29 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-6
- ocaml xenstored mishandles oversized message replies
[XSA-72, CVE-2013-4416] (#1024450)
* Fri Oct 25 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-5
- systemd changes to allow oxenstored to be used instead of xenstored (#1022640)
* Thu Oct 10 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-4
- security fixes (#1017843)
Information leak through outs instruction emulation in 64-bit PV guests
[XSA-67, CVE-2013-4368]
possible null dereference when parsing vif ratelimiting info
[XSA-68, CVE-2013-4369]
misplaced free in ocaml xc_vcpu_getaffinity stub
[XSA-69, CVE-2013-4370]
use-after-free in libxl_list_cpupool under memory pressure
[XSA-70, CVE-2013-4371]
qemu disk backend (qdisk) resource leak (Fedora doesn't build this qemu)
[XSA-71, CVE-2013-4375]
* Wed Oct 2 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-3
- Set "Domain-0" label in xenstored.service systemd file to match
xencommons init.d script.
- security fixes (#1013748)
Information leaks to HVM guests through I/O instruction emulation
[XSA-63, CVE-2013-4355]
Information leak to HVM guests through fbld instruction emulation
[XSA-66, CVE-2013-4361]
* Wed Sep 25 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-2
- Information leak on AVX and/or LWP capable CPUs [XSA-62, CVE-2013-1442]
(#1012056)
* Mon Sep 9 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-1
- update to xen-4.2.3
includes fix for [XSA-61, CVE-2013-4329] libxl partially sets up HVM
passthrough even with disabled iommu
- remove included or unnecessary patches
* Wed Jun 26 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.2-10
- XSA-45/CVE-2013-1918 breaks page reference counting [XSA-58,
CVE-2013-1432] (#978383)
- let pygrub handle set default="${next_entry}" line in F19 (#978036)
- libxl: Set vfb and vkb devid if not done so by the caller (#977987)
* Mon Jun 24 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.2-9
- add upstream patch for PCI passthrough problems after XSA-46 (#977310)
* Fri Jun 21 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.2-8
- xenstore permissions not set correctly by libxl [XSA-57,
CVE-2013-2211] (#976779)
* Fri Jun 14 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.2-7
- Revised fixes for [XSA-55, CVE-2013-2194 CVE-2013-2195
CVE-2013-2196] (#970640)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1166913 - CVE-2014-9030 kernel: xen: Guest effectable page reference leak in MMU_MACHPHYS_UPDATE handling
https://bugzilla.redhat.com/show_bug.cgi?id=1166913
[ 2 ] Bug #1160664 - CVE-2014-8594 kernel: xen: Insufficient restrictions on certain MMU update hypercalls (xsa109)
https://bugzilla.redhat.com/show_bug.cgi?id=1160664
[ 3 ] Bug #1160643 - CVE-2014-8595 kernel: xen: Missing privilege level checks in x86 emulation of far branches (xsa110)
https://bugzilla.redhat.com/show_bug.cgi?id=1160643
[ 4 ] Bug #1078846 - CVE-2014-0150 qemu: virtio-net: buffer overflow in virtio_net_handle_mac() function
https://bugzilla.redhat.com/show_bug.cgi?id=1078846
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xen' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
Fedora 20 Update: perl-Pod-Usage-1.64-2.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-15054
2014-11-14 11:05:18
--------------------------------------------------------------------------------
Name : perl-Pod-Usage
Product : Fedora 20
Version : 1.64
Release : 2.fc20
URL : http://search.cpan.org/dist/Pod-Usage/
Summary : Print a usage message from embedded POD documentation
Description :
pod2usage will print a usage message for the invoking script (using its
embedded POD documentation) and then exit the script with the desired exit
status. The usage message printed may have any one of three levels of
"verboseness": If the verbose level is 0, then only a synopsis is printed.
If the verbose level is 1, then the synopsis is printed along with a
description (if present) of the command line options and arguments. If the
verbose level is 2, then the entire manual page is printed.
--------------------------------------------------------------------------------
Update Information:
Increase package epoch value to compete with dual-living perl.spec's sub-packages properly.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 13 2014 Petr Pisar <ppisar(a)redhat.com> - 4:1.64-2
- Compete with perl.spec's epoch (bug #1163490)
* Tue Jul 1 2014 Petr Pisar <ppisar(a)redhat.com> - 1.64-1
- 1.64 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1163490 - Dual-lived perl-Pod-Usage needs to compete with perl.spec's epoch
https://bugzilla.redhat.com/show_bug.cgi?id=1163490
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Pod-Usage' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
Fedora 20 Update: perl-Pod-Checker-1.60-292.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-15054
2014-11-14 11:05:18
--------------------------------------------------------------------------------
Name : perl-Pod-Checker
Product : Fedora 20
Version : 1.60
Release : 292.fc20
URL : http://search.cpan.org/dist/Pod-Checker/
Summary : Check POD documents for syntax errors
Description :
Module and tools to verify POD documentation contents for compliance with the
Plain Old Documentation format specifications.
--------------------------------------------------------------------------------
Update Information:
Increase package epoch value to compete with dual-living perl.spec's sub-packages properly.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 13 2014 Petr Pisar <ppisar(a)redhat.com> - 4:1.60-292
- Compete with perl.spec's epoch (bug #1163490)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1163490 - Dual-lived perl-Pod-Usage needs to compete with perl.spec's epoch
https://bugzilla.redhat.com/show_bug.cgi?id=1163490
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Pod-Checker' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
Fedora 20 Update: salt-2014.7.0-3.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-14660
2014-11-10 04:56:31
--------------------------------------------------------------------------------
Name : salt
Product : Fedora 20
Version : 2014.7.0
Release : 3.fc20
URL : http://saltstack.org/
Summary : A parallel remote execution system
Description :
Salt is a distributed remote execution system used to execute commands and
query data. It was developed in order to bring the best solutions found in
the world of remote execution together and make them better, faster and more
malleable. Salt accomplishes this via its ability to handle larger loads of
information, and not just dozens, but hundreds or even thousands of individual
servers, handle them quickly and through a simple and manageable interface.
--------------------------------------------------------------------------------
Update Information:
Make salt-api its own package
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 7 2014 Erik Johnson <erik(a)saltstack.com> - 2014.7.0-3
- Make salt-api its own package
* Thu Nov 6 2014 Erik Johnson <erik(a)saltstack.com> - 2014.7.0-1
- Update to feature release 2014.7.0
* Fri Oct 17 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.13-1
- Update to bugfix release 2014.1.13
* Mon Sep 29 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.11-1
- Update to bugfix release 2014.1.11
* Sun Aug 10 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.10-4
- Fix incorrect conditional
* Tue Aug 5 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.10-2
- Deploy cachedir with package
* Mon Aug 4 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.10-1
- Update to bugfix release 2014.1.10
* Thu Jul 10 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.7-3
- Add logrotate script
* Thu Jul 10 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.7-1
- Update to bugfix release 2014.1.7
* Wed Jun 11 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.5-1
- Update to bugfix release 2014.1.5
* Tue May 6 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.4-1
- Update to bugfix release 2014.1.4
* Fri Apr 18 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.3-1
- Update to bugfix release 2014.1.3
* Fri Mar 21 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.1-1
- Update to bugfix release 2014.1.1
* Thu Feb 20 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.0-1
- Update to feature release 2014.1.0
* Mon Jan 27 2014 Erik Johnson <erik(a)saltstack.com> - 0.17.5-1
- Update to bugfix release 0.17.5
* Thu Dec 19 2013 Erik Johnson <erik(a)saltstack.com> - 0.17.4-1
- Update to bugfix release 0.17.4
* Tue Nov 19 2013 Erik Johnson <erik(a)saltstack.com> - 0.17.2-2
- Patched to fix pkgrepo.managed regression
* Mon Nov 18 2013 Erik Johnson <erik(a)saltstack.com> - 0.17.2-1
- Update to bugfix release 0.17.2
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update salt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
Fedora 19 Update: glusterfs-3.5.3-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-15460
2014-11-20 22:03:14
--------------------------------------------------------------------------------
Name : glusterfs
Product : Fedora 19
Version : 3.5.3
Release : 1.fc19
URL : http://www.gluster.org/docs/index.php/GlusterFS
Summary : Cluster File System
Description :
GlusterFS is a distributed file-system capable of scaling to several
petabytes. It aggregates various storage bricks over Infiniband RDMA
or TCP/IP interconnect into one large parallel network file
system. GlusterFS is one of the most sophisticated file systems in
terms of features and extensibility. It borrows a powerful concept
called Translators from GNU Hurd kernel. Much of the code in GlusterFS
is in user space and easily manageable.
This package includes the glusterfs binary, the glusterfsd daemon and the
gluster command line, libglusterfs and glusterfs translator modules common to
both GlusterFS server and client framework.
--------------------------------------------------------------------------------
Update Information:
Bug fix update for GlusterFS 3.5
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 19 2014 Lalatendu Mohanty <lmohanty(a)redhat.com>
- Changes to remove regression-tests RPM from Fedora
* Thu Nov 13 2014 Lalatendu Mohanty <lmohanty[at]redhat.com>
- glusterfs-3.5.3 GA release
* Tue Nov 4 2014 Lalatendu Mohanty <lmohanty[at]redhat.com>
- glusterfs-3.5.3beta2 release
* Mon Oct 6 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com>
- glusterfs-3.5.3beta1 release
* Wed Oct 1 2014 Humble Chirammal <hchiramm(a)redhat.com>
- glusterfs-3.6.0beta3 release
* Thu Sep 25 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com>
- add psmisc for -server
- add smarter logic to restart glusterd in %post server
* Thu Sep 25 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com>
- glusterfs-3.6.0beta2.tar.gz
* Wed Sep 24 2014 Balamurugan Arumugam <barumuga(a)redhat.com>
- remove /sbin/ldconfig as interpreter (#1145992)
* Mon Sep 22 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com>
- More make fedora master glusterfs spec compatible with upstream GlusterFS 3.6 spec
* Mon Sep 22 2014 Humble Chirammal <hchiramm(a)redhat.com>
- Make fedora master glusterfs spec compatible with upstream GlusterFS 3.6 spec
* Fri Sep 5 2014 Lalatendu Mohanty <lmohanty(a)redhat.com>
- Changed the description as "GlusterFS a distributed filesystem"
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.5.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Tue Aug 5 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com>
- use upstream logrotate files exclusively (#1126788)
* Thu Jul 31 2014 Lalatendu Mohanty <lmohanty[at]redhat.com> - 3.5.2-1
- GlusterFS 3.5.2 GA
* Mon Jul 21 2014 Lalatendu Mohanty <lmohanty[at]redhat.com> - 3.5.2-0.1.beta1
- GlusterFS 3.5.2 beta1
* Wed Jul 9 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.5.1-2
- glusterd.init, BZ 1073217
* Fri Jun 27 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com>
- killall --wait in %post server (#1113959, #1113745)
* Wed Jun 25 2014 Vikhyat Umrao <vumrao(a)redhat.com>
- add nfs-utils package dependency for server package (#1113007)
* Tue Jun 24 2014 Lalatendu Mohanty <lmohanty[at]redhat.com> - 3.5.1-1
- GlusterFS 3.5.1 GA
* Wed Jun 11 2014 Humble Chirammal <hchiramm(a)redhat.com> - 3.5.1-0.3.beta2
- GlusterFS 3.5.1 beta2
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.5.1-0.2.beta1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Mon May 26 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.5.1-0.1.beta1
- GlusterFS 3.5.1 beta1
* Thu May 1 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.5.0-3
- syslog deprecated in Fedora20 BZ #1093318
* Fri Apr 25 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com>
- sync with upstream glusterfs.spec.in BZ #1091392
* Wed Apr 23 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.5.0-2
- GlusterFS 3.5.0 GA, glusterfs-3.5.0-2, glusterfs.spec nits
* Thu Apr 17 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.5.0-1
- GlusterFS 3.5.0 GA
* Fri Apr 4 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.5.0-0.7.beta5
- GlusterFS 3.5.0 beta5
* Sat Mar 8 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.5.0-0.6.beta4
- GlusterFS 3.5.0 beta4
* Tue Feb 11 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.5.0-0.5.beta3
- GlusterFS 3.5.0 beta3
* Mon Jan 27 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.5.0-0.4.beta2
- GlusterFS 3.5.0 beta2
* Thu Jan 16 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.5.0-0.3.beta1
- GlusterFS 3.5.0 beta1
* Thu Jan 16 2014 Ville Skyttä <ville.skytta(a)iki.fi> - 3.5.0-0.2.beta1
- Drop unnecessary ldconfig calls, do remaining ones without shell.
- Drop INSTALL from docs.
* Wed Jan 15 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.5.0-0.1.beta1
- GlusterFS 3.5.0 beta1 , glusterfs-3.5.0-0.1beta1
* Fri Dec 6 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.5.0-0.1.qa3
- GlusterFS 3.5.0 QA3 , glusterfs-3.5.0-0.1qa3
* Wed Nov 6 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com>
- obsolete glusterfs-ufo (#1025059)
- ownership of /usr/share/doc/glusterfs(-x.y.z) (#846737)
- clear_xattrs.sh belongs in /usr/share/doc/glusterfs(-x.y.z), not
in /usr/share/doc/glusterfs-server(-x.y.z)
- remove defattr (per pkg review of another package)
- don't use %{__foo} macros (per package review of another package)
* Sun Oct 27 2013 Niels de Vos <ndevos(a)redhat.com> - 3.4.1-3
- Correctly start+stop glusterfsd.service (#1022542)
- fix "warning: File listed twice: .../glusterd.info" while building
* Sat Oct 26 2013 Niels de Vos <ndevos(a)redhat.com>
- add base-port config option to /etc/glusterd/glusterd.vol (#1023653)
* Wed Oct 9 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com>
- nit, sync with upstream spec
* Wed Oct 9 2013 Niels de Vos <ndevos(a)redhat.com>
- glusterfs-api-devel requires glusterfs-devel (#1016938, #1017094)
* Tue Oct 1 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.1-2
- resurrect /etc/init.d/glusterfsd, BUG 1014242
* Fri Sep 27 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.1-1
- GlusterFS 3.4.1 GA, glusterfs-3.4.1-1
* Thu Sep 26 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.1-0.2rc1
- scratch build for community
* Wed Sep 11 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.1-0.1qa1
- scratch build for community
* Fri Sep 6 2013 Niels de Vos <devos(a)fedoraproject.org>
- fix "warning: File listed twice: .../glusterd.info" while building
* Tue Aug 6 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.0-8
- glusterfs-server requires glusterfs-cli
* Mon Aug 5 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.0-7
- glusterfs requires glusterfs-libs
* Mon Aug 5 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.0-6
- glusterfs-cli RPM to simplify dependencies for vdsm
* Mon Aug 5 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.0-5
- there is no systemtap/dtrace support; don't even pretend
* Fri Aug 2 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.0-4
- sync changes from upstream glusterfs.spec.in, including addition of
glusterfs-libs RPM to simplify dependencies for qemu-kvm
* Thu Jul 25 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com>
- remove gsyncd from glusterfs, it's redundant with glusterfs-geo-rep
ready for next build
* Thu Jul 25 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.0-3
- sync changes from upstream glusterfs.spec.in, and esp. glusterd.service
from gluster w/o Wants=glusterfsd.service
* Thu Jul 18 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com>
- sync changes from upstream glusterfs.spec.in, ready for next build
* Tue Jul 16 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.0-2
- tag /var/lib/glusterd/glusterd.info as %config
* Tue Jul 16 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.2.2-2
- tag /var/lib/glusterd/glusterd.info as %config
* Fri Jul 12 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.0-1
- GlusterFS 3.4.0 GA, glusterfs-3.4.0-1
* Mon Jul 8 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.0-0.9.beta4
- add Obsolete: glusterfs-swift where we use openstack-swift
- prerelease 3.4.0beta4 for oVirt/vdsm dependencies in Fedora19
* Fri Jul 5 2013 Niels de Vos <devos(a)fedoraproject.org>
- include xlators/mount/api.so in the glusterfs-api package
* Wed Jul 3 2013 Niels de Vos <devos(a)fedoraproject.org>
- correct AutoRequires filtering on recent Fedora (#972465)
* Fri Jun 28 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.0-0.8.beta4
- prerelease 3.4.0beta4 for oVirt/vdsm dependencies in Fedora19
* Thu Jun 27 2013 Niels de Vos <devos(a)fedoraproject.org>
- correct trimming the ChangeLog, keep the recent messages (#963027)
- remove the umount.glusterfs helper (#640620)
* Wed Jun 26 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.0-0.7.beta3
- prerelease 3.4.0beta3 for oVirt/vdsm dependencies in Fedora19
- libgfapi and xlator/mount/api dependency fix
* Tue Jun 11 2013 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.0-0.6.beta3
- prerelease 3.4.0beta3 for oVirt/vdsm dependencies in Fedora19
* Wed May 29 2013 Niels de Vos <devos(a)fedoraproject.org>
- automatically load the fuse module on EL5
- there is no need to require the unused /usr/bin/fusermount
- fix building on EL5
* Mon May 27 2013 Niels de Vos <devos(a)fedoraproject.org>
- include glusterfs-api.pc in the -devel subpackage
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update glusterfs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
Fedora 19 Update: FoXlibf-4.1.2-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-14884
2014-11-13 16:57:50
--------------------------------------------------------------------------------
Name : FoXlibf
Product : Fedora 19
Version : 4.1.2
Release : 1.fc19
URL : http://www1.gly.bris.ac.uk/~walker/FoX/
Summary : A Fortran XML Library
Description :
FoX is an XML library written in Fortran 95. It allows software developers to
read, write and modify XML documents from Fortran applications without the
complications of dealing with multiple language development.
--------------------------------------------------------------------------------
Update Information:
FoXlibf-4.1.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1104289 - Review Request: FoXlibf - A Fortran XML Library
https://bugzilla.redhat.com/show_bug.cgi?id=1104289
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update FoXlibf' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months
[SECURITY] Fedora 20 Update: python-django14-1.4.16-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-15266
2014-11-18 11:08:18
--------------------------------------------------------------------------------
Name : python-django14
Product : Fedora 20
Version : 1.4.16
Release : 1.fc20
URL : http://www.djangoproject.com/
Summary : A high-level Python Web framework
Description :
Django is a high-level Python Web framework that encourages rapid
development and a clean, pragmatic design. It focuses on automating as
much as possible and adhering to the DRY (Don't Repeat Yourself)
principle.
--------------------------------------------------------------------------------
Update Information:
update to latest stable release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 17 2014 Matthias Runge <mrunge(a)redhat.com> - 1.4.16-1
- update to 1.4.16
* Mon Aug 25 2014 Matthias Runge <mrunge(a)redhat.com> - 1.4.14-1
- update to 1.4.14 fixing CVE-2014-0480 CVE-2014-0481 CVE-2014-0482,
CVE-2014-0483
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.13-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri May 16 2014 Matthias Runge <mrunge(a)redhat.com> - 1.4.13-1
- update to 1.4.13 fixing CVE-2014-1418 (rhbz#1097936)
* Tue Apr 22 2014 Matthias Runge <mrunge(a)redhat.com> - 1.4.11-1
- update to 1.4.11 fixing CVE-2014-0473 and CVE-2014-0474
* Thu Apr 3 2014 Matthias Runge <mrunge(a)redhat.com> - 1.4.8-3
- fix file conflicts with other django packages
* Thu Mar 27 2014 Matthias Runge <mrunge(a)redhat.com> - 1.4.8-2
- Parallel installable version based on Toshio Kuratomis contribution
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1129950 - CVE-2014-0480 Django: reverse() can generate URLs pointing to other hosts, leading to phishing attacks
https://bugzilla.redhat.com/show_bug.cgi?id=1129950
[ 2 ] Bug #1129952 - CVE-2014-0481 Django: file upload denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1129952
[ 3 ] Bug #1129954 - CVE-2014-0482 Django: RemoteUserMiddleware session hijacking
https://bugzilla.redhat.com/show_bug.cgi?id=1129954
[ 4 ] Bug #1129959 - CVE-2014-0483 Django: data leakage via querystring manipulation in admin
https://bugzilla.redhat.com/show_bug.cgi?id=1129959
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-django14' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 5 months