Fedora 20 Update: wine-1.7.22-4.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8416
2014-07-17 03:31:31
--------------------------------------------------------------------------------
Name : wine
Product : Fedora 20
Version : 1.7.22
Release : 4.fc20
URL : http://www.winehq.org/
Summary : A compatibility layer for windows applications
Description :
Wine as a compatibility layer for UNIX to run Windows applications. This
package includes a program loader, which allows unmodified Windows
3.x/9x/NT binaries to run on x86 and x86_64 Unixes. Wine can use native system
.dll files if they are available.
In Fedora wine is a meta-package which will install everything needed for wine
to work smoothly. Smaller setups can be achieved by installing some of the
wine-* sub packages.
--------------------------------------------------------------------------------
Update Information:
Wine
----
* added compholio-patchset to provide compatibilty for pipelight
* built --with-xattr for playing DRM-protected content with Silverlight
pipelight
---------
* initial rpm release -- NPAPI Wrapper Plugin for using Windows plugins in Linux browsers
pipelight-selinux
-----------------
* initial rpm release -- SELinux-policy-module for pipelight
* * *
How to test
-----------
1. install this update `yum --enablerepo=updates-testing install pipelight`
2. test Wine with your previously installed Windows-apps as usual
3. test pipelight with e.g. flash: pipelight-plugin --enable flash (for x86_64: x64-flash)
4. remove other installed flash-plugins, e.g. `yum erase flash-plugin`
5. restart your browser, wait for pipelight to setup the plugin and load serveral flash-based websites
6. watch for possible AVC-denials and report them on bugzilla against pipelight-selinux
7. try other plugins supported by pipelight, e.g. silverlight or (x64-)unity3d -- have a look at [the pipelight website](http://pipelight.net/) which plugins are supported and how to enable / activate them.
8. report problems on bugzilla
9. give karma, please =)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 17 2014 Björn Esser <bjoern.esser(a)gmail.com> - 1.7.22-4
- prevent accidential build with compholio-patchset on EPEL
- rebuild for pulseaudio (bug #1117683)
* Mon Jul 14 2014 Björn Esser <bjoern.esser(a)gmail.com> - 1.7.22-3
- dropped virtual Provides: %{name}(compholio)
* Sat Jul 12 2014 Björn Esser <bjoern.esser(a)gmail.com> - 1.7.22-2
- added conditionalized option to build with compholio-patchset for pipelight
Source900 -- compholio-patchset, wine-arial-fonts sub-package,
BR: libattr-devel and configure --with-xattr for Silverlight DRM-stuff
* Fri Jul 11 2014 Michael Cronenworth <mike(a)cchtml.com>
- 1.7.22-1
- version upgrade
* Wed Jul 9 2014 Michael Cronenworth <mike(a)cchtml.com>
- 1.7.21-2
- Fixes for EPEL7 (rhbz#1117422)
* Tue Jul 1 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.21-1
- version upgrade
* Thu Jun 19 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.20-1
- version upgrade
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.7.19-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sun May 18 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.19-1
- version upgrade
* Sat May 10 2014 Michael Cronenworth <mike(a)cchtml.com>
- 1.7.18-1
- version upgrade
* Fri Apr 25 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.17-2
- fix systemd binfmt location (rhbz#1090170)
* Tue Apr 22 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.17-1
- version upgrade
* Mon Apr 7 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.16-2
- explicitly require libpng (fixes rhbz#1085075)
* Mon Apr 7 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.16-1
- version upgrade
* Mon Mar 24 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.15-1
- version upgrade
* Sat Mar 8 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.14-1
- version upgrade
* Sun Feb 23 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.13-1
- version upgrade
- upgraded winepulse
* Sat Feb 8 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.12-1
- version upgrade
* Sun Jan 26 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.11-1
- version upgrade
* Thu Jan 9 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.10-1
- version upgrade
- upgraded winepulse
* Sun Dec 8 2013 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.8-1
- version upgrade
- wine mono 4.5.2
- upgraded winepulse
* Sat Nov 23 2013 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.7-1
- version upgrade
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1117403 - Review Request: pipelight - NPAPI Wrapper Plugin for using Windows plugins in Linux browsers
https://bugzilla.redhat.com/show_bug.cgi?id=1117403
[ 2 ] Bug #1119288 - Review Request: pipelight-selinux - SELinux-policy-module for pipelight
https://bugzilla.redhat.com/show_bug.cgi?id=1119288
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update wine' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 20 Update: pipelight-0.2.7.3-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8416
2014-07-17 03:31:31
--------------------------------------------------------------------------------
Name : pipelight
Product : Fedora 20
Version : 0.2.7.3
Release : 1.fc20
URL : http://pipelight.net/
Summary : NPAPI Wrapper Plugin for using Windows plugins in Linux browsers
Description :
Pipelight is a NPAPI wrapper plugin for using Windows plugins in Linux
browsers and therefore giving you the possibility to access services
which are otherwise not available for Linux users. Typical examples of
such services are Netflix and Amazon Instant, which both use the
proprietary browser plugin Silverlight. These services cannot normally
be used on Linux since this plugin is only available for Windows.
Pipelight helps you access these services by using the original
Silverlight plugin directly in your browser, all while giving you a
better hardware acceleration and performance than a virtual machine.
Besides Silverlight, you can also use a variety of other plugins that
are supported by Pipelight.
Pipelight will take care of installing, configuring and updating all
supported plugins. From the perspective of the browser these plugins
will behave just like any other normal Linux plugin after you have
enabled them.
For further information about all supported plugins, their installation,
configuration and usage, please visit http://pipelight.net/.
--------------------------------------------------------------------------------
Update Information:
Wine
----
* added compholio-patchset to provide compatibilty for pipelight
* built --with-xattr for playing DRM-protected content with Silverlight
pipelight
---------
* initial rpm release -- NPAPI Wrapper Plugin for using Windows plugins in Linux browsers
pipelight-selinux
-----------------
* initial rpm release -- SELinux-policy-module for pipelight
* * *
How to test
-----------
1. install this update `yum --enablerepo=updates-testing install pipelight`
2. test Wine with your previously installed Windows-apps as usual
3. test pipelight with e.g. flash: pipelight-plugin --enable flash (for x86_64: x64-flash)
4. remove other installed flash-plugins, e.g. `yum erase flash-plugin`
5. restart your browser, wait for pipelight to setup the plugin and load serveral flash-based websites
6. watch for possible AVC-denials and report them on bugzilla against pipelight-selinux
7. try other plugins supported by pipelight, e.g. silverlight or (x64-)unity3d -- have a look at [the pipelight website](http://pipelight.net/) which plugins are supported and how to enable / activate them.
8. report problems on bugzilla
9. give karma, please =)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1117403 - Review Request: pipelight - NPAPI Wrapper Plugin for using Windows plugins in Linux browsers
https://bugzilla.redhat.com/show_bug.cgi?id=1117403
[ 2 ] Bug #1119288 - Review Request: pipelight-selinux - SELinux-policy-module for pipelight
https://bugzilla.redhat.com/show_bug.cgi?id=1119288
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pipelight' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 20 Update: pipelight-selinux-0.2.1-2.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8416
2014-07-17 03:31:31
--------------------------------------------------------------------------------
Name : pipelight-selinux
Product : Fedora 20
Version : 0.2.1
Release : 2.fc20
URL : https://github.com/besser82/pipelight-selinux
Summary : SELinux-policy-module for pipelight
Description :
This package contains the
SELinux-policy-module for pipelight.
--------------------------------------------------------------------------------
Update Information:
Wine
----
* added compholio-patchset to provide compatibilty for pipelight
* built --with-xattr for playing DRM-protected content with Silverlight
pipelight
---------
* initial rpm release -- NPAPI Wrapper Plugin for using Windows plugins in Linux browsers
pipelight-selinux
-----------------
* initial rpm release -- SELinux-policy-module for pipelight
* * *
How to test
-----------
1. install this update `yum --enablerepo=updates-testing install pipelight`
2. test Wine with your previously installed Windows-apps as usual
3. test pipelight with e.g. flash: pipelight-plugin --enable flash (for x86_64: x64-flash)
4. remove other installed flash-plugins, e.g. `yum erase flash-plugin`
5. restart your browser, wait for pipelight to setup the plugin and load serveral flash-based websites
6. watch for possible AVC-denials and report them on bugzilla against pipelight-selinux
7. try other plugins supported by pipelight, e.g. silverlight or (x64-)unity3d -- have a look at [the pipelight website](http://pipelight.net/) which plugins are supported and how to enable / activate them.
8. report problems on bugzilla
9. give karma, please =)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1117403 - Review Request: pipelight - NPAPI Wrapper Plugin for using Windows plugins in Linux browsers
https://bugzilla.redhat.com/show_bug.cgi?id=1117403
[ 2 ] Bug #1119288 - Review Request: pipelight-selinux - SELinux-policy-module for pipelight
https://bugzilla.redhat.com/show_bug.cgi?id=1119288
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pipelight-selinux' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 20 Update: python-tahrir-api-0.7.0-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8370
2014-07-17 03:28:05
--------------------------------------------------------------------------------
Name : python-tahrir-api
Product : Fedora 20
Version : 0.7.0
Release : 1.fc20
URL : http://pypi.python.org/pypi/tahrir-api
Summary : An API for interacting with the Tahrir database
Description :
API for interacting with the Tahrir database Based on the `Tahrir
<https://github.com/fedora-infra/tahrir>`_ database model.
There are two classes that can be used in this module. The first is
TahrirDatabase class located in tahrir_api.dbapi and the second is the database
model located in tahrir_api.model. The TahrirDatabase class is a high level way
to interact with the database. The model is used for a slightly more low level
way of interacting with the database. It allows for custom interactions with
the database without having to use the TahrirDatabase class.
--------------------------------------------------------------------------------
Update Information:
Support STLs.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 14 2014 Ralph Bean <rbean(a)redhat.com> - 0.7.0-1
- Add new column supporting STLs.
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.6.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue Mar 4 2014 Ralph Bean <rbean(a)redhat.com> - 0.6.0-2
- Disable tests for rhel6.
* Tue Mar 4 2014 Ralph Bean <rbean(a)redhat.com> - 0.6.0-1
- Add the ability to track events that trigger a badge.
* Mon Feb 24 2014 Ralph Bean <rbean(a)redhat.com> - 0.5.1-2
- Bump spec.
* Mon Feb 24 2014 Ralph Bean <rbean(a)redhat.com> - 0.5.1-1
- Standardize arguments to the add_invitation api.
* Tue Dec 17 2013 Ralph Bean <rbean(a)redhat.com> - 0.5.0-4
- Convert awk to sed to fight weirdness.
* Tue Dec 17 2013 Ralph Bean <rbean(a)redhat.com> - 0.5.0-3
- Adjust setuptools line in prep section.
* Tue Dec 17 2013 Ralph Bean <rbean(a)redhat.com> - 0.5.0-2
- Add temporary requires to get around broken python-arrow.
* Tue Dec 17 2013 Ralph Bean <rbean(a)redhat.com> - 0.5.0-1
- Latest upstream with new authorization table.
- Use UTC time everywhere.
- New invitation manipulation API methods.
- New dep on python-arrow
* Mon Nov 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.4.2-2
- Direct requires on python-alembic.
* Mon Nov 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.4.2-1
- Latest upstream with packaging bugfixes.
* Mon Nov 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.4.1-2
- Add BR on python-alembic.
* Mon Nov 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.4.1-1
- Latest upstream
- Correct fedmsg schema.
- New calculation of tied rank.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-tahrir-api' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 19 Update: httpry-0.1.8-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8902
2014-07-26 15:02:28
--------------------------------------------------------------------------------
Name : httpry
Product : Fedora 19
Version : 0.1.8
Release : 1.fc19
URL : http://dumpsterventures.com/jason/httpry/
Summary : A specialized packet sniffer designed for displaying and logging HTTP traffic
Description :
httpry is a specialized packet sniffer designed for displaying and logging
HTTP traffic. It is not intended to perform analysis itself, but to capture,
parse, and log the traffic for later analysis. It can be run in real-time
displaying the traffic as it is parsed, or as a daemon process that logs to
an output file. It is written to be as lightweight and flexible as possible,
so that it can be easily adaptable to different applications.
--------------------------------------------------------------------------------
Update Information:
Upstream version 0.1.8 released.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2014 Major Hayden <major(a)mhtx.net> - 0.1.8-1
- Upstream version 0.1.8 released.
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.1.7-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.1.7-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update httpry' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 20 Update: php-doctrine-dbal-2.4.2-4.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8784
2014-07-25 08:57:09
--------------------------------------------------------------------------------
Name : php-doctrine-dbal
Product : Fedora 20
Version : 2.4.2
Release : 4.fc20
URL : http://www.doctrine-project.org/projects/dbal.html
Summary : Doctrine Database Abstraction Layer (DBAL)
Description :
The Doctrine database abstraction & access layer (DBAL) offers a lightweight
and thin runtime layer around a PDO-like API and a lot of additional, horizontal
features like database schema introspection and manipulation through an OO API.
The fact that the Doctrine DBAL abstracts the concrete PDO API away through the
use of interfaces that closely resemble the existing PDO API makes it possible
to implement custom drivers that may use existing native or self-made APIs. For
example, the DBAL ships with a driver for Oracle databases that uses the oci8
extension under the hood.
--------------------------------------------------------------------------------
Update Information:
RPM-only release:
* Added `php-composer(doctrine/dbal)` virtual provide
* Updated Doctrine dependencies to use php-composer virtual provides
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-doctrine-dbal' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
[SECURITY] Fedora 19 Update: krb5-1.11.3-24.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8176
2014-07-09 01:27:31
--------------------------------------------------------------------------------
Name : krb5
Product : Fedora 19
Version : 1.11.3
Release : 24.fc19
URL : http://web.mit.edu/kerberos/www/
Summary : The Kerberos network authentication system
Description :
Kerberos V5 is a trusted-third-party network authentication system,
which can improve your network's security by eliminating the insecure
practice of sending passwords over the network in unencrypted form.
--------------------------------------------------------------------------------
Update Information:
This update incorporates backported upstream fixes for potential crashes caused by attempts to process malformed GSSAPI messages (CVE-2014-4341, CVE-2014-4342). It also incorporates fexes for a possible double-free (CVE-2014-4343) and a possible NULL pointer dereference (CVE-2014-4344) in GSSAPI clients.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 21 2014 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-24
- gssapi: pull in upstream fix for a possible NULL dereference
in spnego (CVE-2014-4344)
* Wed Jul 16 2014 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-23
- gssapi: pull in proposed fix for a double free in initiators (David
Woodhouse, CVE-2014-4343, #1117963)
* Mon Jul 7 2014 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-22
- pull in fix for denial of service by injection of malformed GSSAPI tokens
(CVE-2014-4341, CVE-2014-4342, #1116181)
* Mon Feb 17 2014 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-21
- spnego: pull in patch from master to restore preserving the OID of the
mechanism the initiator requested when we have multiple OIDs for the same
mechanism, so that we reply using the same mechanism OID and the initiator
doesn't get confused (#1066000, RT#7858)
* Fri Jan 31 2014 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-20
- add currently-proposed changes to teach ksu about credential cache
collections and the default_ccache_name setting (#1015559,#1026099)
* Fri Jan 31 2014 Nalin Dahyabhai <nalin(a)redhat.com>
- drop patch to add additional access() checks to ksu - they add to breakage
when non-FILE: caches are in use (#1026099), shouldn't be resulting in any
benefit, and clash with proposed changes to fix its cache handling
* Tue Jan 21 2014 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-19
- pull in and backport multiple changes to allow replay caches to be added to
a GSS credential store as "rcache"-type credentials (RT#7818/#7819/#7836,
* Thu Dec 19 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-18
- pull in fix from master to make reporting of errors encountered by
the SPNEGO mechanism work better (RT#7045, part of #1043962)
* Thu Dec 19 2013 Nalin Dahyabhai <nalin(a)redhat.com>
- update a test wrapper to properly handle things that the new libkrad does,
and add python-pyrad as a build requirement so that we can run its tests
* Wed Dec 18 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-17
- backport fixes to krb5_copy_context (RT#7807, #1044735/#1044739)
* Wed Dec 18 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-16
- backport fix to avoid double-freeing in the client when we're configured
to use a clpreauth module that isn't actually a clpreauth module (#1035203)
* Wed Dec 18 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-15
- pull in fix from master to return a NULL pointer rather than allocating
zero bytes of memory if we read a zero-length input token (RT#7794, part
of #1043962)
- pull in fix from master to ignore an empty token from an acceptor if
we've already finished authenticating (RT#7797, part of #1043962)
- pull in fix from master to avoid a memory leak when a mechanism's
init_sec_context function fails (RT#7803, part of #1043962)
- pull in fix from master to avoid a memory leak in a couple of error
cases which could occur while obtaining acceptor credentials (RT#7805,
part of #1043962)
* Tue Dec 17 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-14
- backport additional changes to libkrad to make it function more like
the version in upstream 1.12, and a few things in the OTP plugin as well
(most visibly, that the secret that's shared with the RADIUS server is read
from a file rather than used directly) (#1040056)
* Mon Nov 18 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-13
- backport fix to not spin on a short read when reading the length of a
response over TCP (RT#7508, #1029674)
* Fri Nov 15 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-12
- incorporate fix for a KDC NULL pointer dereference while handling referrals
(CVE-2013-1417, #1030744)
* Tue Nov 5 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-11
- incorporate upstream patch for remote crash of KDCs which serve multiple
realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,
* Thu Oct 24 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 1.11.3-10
- add some minimal description to the top of the wrapper scripts we use
when starting krb5kdc and kadmind to describe why they exist (tooling)
- create and own /etc/gss (#1019937)
- pull up fix for importing previously-exported credential caches in the
gssapi library (RT# 7706, #1019420)
- backport the callback to use the libkrb5 prompter when we can't load PEM
files for PKINIT (RT#7590, includes part of #965721/#1016690)
- extract the rest of the fix #965721/#1016690 from the changes for RT#7680
- pull up fix for not calling a kdb plugin's check-transited-path
method before calling the library's default version, which only knows
how to read what's in the configuration file (RT#7709, #1013664)
- configure --without-krb5-config so that we don't pull in the old default
ccache name when we want to stop setting a default ccache name at configure-
time
* Fri Aug 23 2013 Nalin Dahyabhai <nalin(a)redhat.com> 1.11.3-9
- take another stab at accounting for UnversionedDocdirs for the -libs
subpackage (spotted by ssorce)
- switch to just the snapshot of nss_wrapper we were using, since we
no longer need to carry anything that isn't in the cwrap.org repository
(ssorce)
* Thu Aug 15 2013 Nalin Dahyabhai <nalin(a)redhat.com> 1.11.3-8
- drop a patch we weren't not applying (build tooling)
- wrap kadmind and kpropd in scripts which check for the presence/absence
of files which dictate particular exit codes before exec'ing the actual
binaries, instead of trying to use ConditionPathExists in the unit files
to accomplish that, so that we exit with failure properly when what we
expect isn't actually in effect on the system (#800343)
* Mon Jul 29 2013 Nalin Dahyabhai <nalin(a)redhat.com> 1.11.3-7
- attempt to account for UnversionedDocdirs for the -libs subpackage
* Fri Jul 26 2013 Nalin Dahyabhai <nalin(a)redhat.com> 1.11.3-6
- tweak configuration files used during tests to try to reduce the number
of conflicts encountered when builds for multiple arches land on the same
builder
* Mon Jul 22 2013 Nalin Dahyabhai <nalin(a)redhat.com> 1.11.3-5
- pull up changes to allow GSSAPI modules to provide more functions
(RT#7682, #986564/#986565)
* Fri Jul 19 2013 Nalin Dahyabhai <nalin(a)redhat.com> 1.11.3-4
- use (a bundled, for now, copy of) nss_wrapper to let us run some of the
self-tests at build-time in more places than we could previously (#978756)
- cover inconsistencies in whether or not there's a local caching nameserver
that's willing to answer when the build environment doesn't have a
resolver configuration, so that nss_wrapper's faking of the local
hostname can be complete
* Mon Jul 1 2013 Nalin Dahyabhai <nalin(a)redhat.com> 1.11.3-3
- specify dependencies on the same arch of krb5-libs by using the %{?_isa}
suffix, to avoid dragging 32-bit libraries onto 64-bit systems (#980155)
* Thu Jun 13 2013 Nalin Dahyabhai <nalin(a)redhat.com> 1.11.3-2
- special-case /run/user/0, attempting to create it when resolving a
directory cache below it fails due to ENOENT and we find that it doesn't
already exist, either, before attempting to create the directory cache
(maybe helping, maybe just making things more confusing for #961235)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1116180 - CVE-2014-4341 krb5: denial of service flaws when handling padding length longer than the plaintext
https://bugzilla.redhat.com/show_bug.cgi?id=1116180
[ 2 ] Bug #1121876 - CVE-2014-4343 krb5: double-free flaw in SPNEGO initiators
https://bugzilla.redhat.com/show_bug.cgi?id=1121876
[ 3 ] Bug #1121877 - CVE-2014-4344 krb5: NULL pointer dereference flaw in SPNEGO acceptor for continuation tokens
https://bugzilla.redhat.com/show_bug.cgi?id=1121877
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update krb5' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
[SECURITY] Fedora 19 Update: ansible-1.6.10-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8904
2014-07-26 15:02:32
--------------------------------------------------------------------------------
Name : ansible
Product : Fedora 19
Version : 1.6.10
Release : 1.fc19
URL : http://ansible.com
Summary : SSH-based configuration management, deployment, and task execution system
Description :
Ansible is a radically simple model-driven configuration management,
multi-node deployment, and remote task execution system. Ansible works
over SSH and does not require any software or daemons to be installed
on remote nodes. Extension modules can be written in any language and
are transferred to managed machines automatically.
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.10
Update to 1.6.9 with more shell quoting fixes.
Update to 1.6.7 Fixes CVE-2014-4966 and CVE-2014-4967
Update to 1.6.8 with fixes for shell quoting from previous release.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2014 Kevin Fenzi <kevin(a)scrye.com> 1.6.10-1
- Update to 1.6.10
* Thu Jul 24 2014 Kevin Fenzi <kevin(a)scrye.com> 1.6.9-1
- Update to 1.6.9 with more shell quoting fixes.
* Tue Jul 22 2014 Kevin Fenzi <kevin(a)scrye.com> 1.6.8-1
- Update to 1.6.8 with fixes for shell quoting from previous release.
- Fixes bugs #1122060 #1122061 #1122062
* Mon Jul 21 2014 Kevin Fenzi <kevin(a)scrye.com> 1.6.7-1
- Update to 1.6.7
- Fixes CVE-2014-4966 and CVE-2014-4967
* Tue Jul 1 2014 Kevin Fenzi <kevin(a)scrye.com> 1.6.6-1
- Update to 1.6.6
* Wed Jun 25 2014 Kevin Fenzi <kevin(a)scrye.com> 1.6.5-1
- Update to 1.6.5
* Wed Jun 25 2014 Kevin Fenzi <kevin(a)scrye.com> 1.6.4-1
- Update to 1.6.4
* Mon Jun 9 2014 Kevin Fenzi <kevin(a)scrye.com> 1.6.3-1
- Update to 1.6.3
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.6.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri May 23 2014 Kevin Fenzi <kevin(a)scrye.com> 1.6.2-1
- Update to 1.6.2 release
* Wed May 7 2014 Toshio Kuratomi <toshio(a)fedoraproject.org> - 1.6.1-1
- Bugfix 1.6.1 release
* Mon May 5 2014 Toshio Kuratomi <toshio(a)fedoraproject.org> - 1.6-1
- Update to 1.6
- Drop accelerate fix, merged upstream
- Refresh RHEL6 pycrypto patch. It was half-merged upstream.
* Fri Apr 18 2014 Kevin Fenzi <kevin(a)scrye.com> 1.5.5-1
- Update to 1.5.5
* Mon Apr 7 2014 Toshio Kuratomi <toshio(a)fedoraproject.org> - 1.5.4-2
- Fix setuptools requirement to apply to rhel=6, not rhel<6
* Wed Apr 2 2014 Toshio Kuratomi <toshio(a)fedoraproject.org> - 1.5.4-1
- Update to 1.5.4
- Add upstream patch to fix accelerator mode
- Merge fedora and el6 spec files
* Fri Mar 14 2014 Kevin Fenzi <kevin(a)scrye.com> 1.5.3-2
- Update to NEW 1.5.3 upstream release.
- Add missing dependency on python-setuptools (el6 build)
* Thu Mar 13 2014 Kevin Fenzi <kevin(a)scrye.com> 1.5.3-1
- Update to 1.5.3
- Fix ansible-vault for newer python-crypto dependency (el6 build)
* Tue Mar 11 2014 Kevin Fenzi <kevin(a)scrye.com> 1.5.2-2
- Update to redone 1.5.2 release
* Tue Mar 11 2014 Kevin Fenzi <kevin(a)scrye.com> 1.5.2-1
- Update to 1.5.2
* Mon Mar 10 2014 Kevin Fenzi <kevin(a)scrye.com> 1.5.1-1
- Update to 1.5.1
* Fri Feb 28 2014 Kevin Fenzi <kevin(a)scrye.com> 1.5-1
- Update to 1.5
* Wed Feb 12 2014 Kevin Fenzi <kevin(a)scrye.com> 1.4.5-1
- Update to 1.4.5
* Sat Dec 28 2013 Kevin Fenzi <kevin(a)scrye.com> 1.4.3-1
- Update to 1.4.3 with ansible galaxy commands.
- Adds python-httplib2 to requires
* Wed Nov 27 2013 Kevin Fenzi <kevin(a)scrye.com> 1.4.1-1
- Update to upstream 1.4.1 bugfix release
* Thu Nov 21 2013 Kevin Fenzi <kevin(a)scrye.com> 1.4-1
- Update to 1.4
* Tue Oct 29 2013 Kevin Fenzi <kevin(a)scrye.com> 1.3.4-1
- Update to 1.3.4
* Tue Oct 8 2013 Kevin Fenzi <kevin(a)scrye.com> 1.3.3-1
- Update to 1.3.3
* Thu Sep 19 2013 Kevin Fenzi <kevin(a)scrye.com> 1.3.2-1
- Update to 1.3.2 with minor upstream fixes
* Mon Sep 16 2013 Kevin Fenzi <kevin(a)scrye.com> 1.3.1-1
- Update to 1.3.1
* Sat Sep 14 2013 Kevin Fenzi <kevin(a)scrye.com> 1.3.0-2
- Merge upstream spec changes to support EPEL5
- (Still needs python26-keyczar and deps added to EPEL)
* Thu Sep 12 2013 Kevin Fenzi <kevin(a)scrye.com> 1.3.0-1
- Update to 1.3.0
- Drop node-fireball subpackage entirely.
- Obsolete/provide fireball subpackage.
- Add Requires python-keyczar on main package for accelerated mode.
* Wed Aug 21 2013 Kevin Fenzi <kevin(a)scrye.com> 1.2.3-2
- Update to 1.2.3
- Fixes CVE-2013-4260 and CVE-2013-4259
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.2.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Sat Jul 6 2013 Kevin Fenzi <kevin(a)scrye.com> 1.2.2-1
- Update to 1.2.2 with minor fixes
* Fri Jul 5 2013 Kevin Fenzi <kevin(a)scrye.com> 1.2.1-2
- Update to newer upstream re-release to fix a syntax error
* Thu Jul 4 2013 Kevin Fenzi <kevin(a)scrye.com> 1.2.1-1
- Update to 1.2.1
- Fixes CVE-2013-2233
* Mon Jun 10 2013 Kevin Fenzi <kevin(a)scrye.com> 1.2-1
- Update to 1.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1122060 - CVE-2014-4966 CVE-2014-4967 ansible: multiple flaws
https://bugzilla.redhat.com/show_bug.cgi?id=1122060
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ansible' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 20 Update: radicale-0.8-10.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8483
2014-07-19 05:12:27
--------------------------------------------------------------------------------
Name : radicale
Product : Fedora 20
Version : 0.8
Release : 10.fc20
URL : http://radicale.org
Summary : A simple CalDAV (calendar) and CardDAV (contact) server
Description :
The Radicale Project is a CalDAV (calendar) and CardDAV (contact) server. It
aims to be a light solution, easy to use, easy to install, easy to configure.
As a consequence, it requires few software dependencies and is pre-configured
to work out-of-the-box.
The Radicale Project runs on most of the UNIX-like platforms (Linux, BSD,
MacOS X) and Windows. It is known to work with Evolution, Lightning, iPhone
and Android clients. It is free and open-source software, released under GPL
version 3.
For further information, please visit the Radicale Website
http://www.radicale.org
--------------------------------------------------------------------------------
Update Information:
Add network-online.target dependency.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 17 2014 Juan Orti Alcaine <jorti(a)fedoraproject.org> - 0.8-10
- Add network-online.target dependency. Bug #1119818
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.8-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue Apr 29 2014 Juan Orti Alcaine <jorti(a)fedoraproject.org> - 0.8-8
- Add PrivateDevices to unit file
* Wed Dec 25 2013 Juan Orti Alcaine <jorti(a)fedoraproject.org> - 0.8-7
- SELinux policy 1.0.2
* Fri Nov 29 2013 Juan Orti Alcaine <jorti(a)fedoraproject.org> - 0.8-6
- SELinux policy 1.0.1 fix bug #1035925
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1119818 - radicale needs network-online.target instead of network.target
https://bugzilla.redhat.com/show_bug.cgi?id=1119818
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update radicale' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 20 Update: postgresql-9.3.5-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8864
2014-07-25 09:00:11
--------------------------------------------------------------------------------
Name : postgresql
Product : Fedora 20
Version : 9.3.5
Release : 1.fc20
URL : http://www.postgresql.org/
Summary : PostgreSQL client programs
Description :
PostgreSQL is an advanced Object-Relational database management system (DBMS).
The base postgresql package contains the client programs that you'll need to
access a PostgreSQL DBMS server, as well as HTML documentation for the whole
system. These client programs can be located on the same machine as the
PostgreSQL server, or on a remote machine that accesses a PostgreSQL server
over a network connection. The PostgreSQL server can be found in the
postgresql-server sub-package.
--------------------------------------------------------------------------------
Update Information:
update to 9.3.5 per release notes http://www.postgresql.org/docs/9.3/static/release-9-3-5.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 22 2014 Pavel Raiskup <praiskup(a)redhat.com> - 9.3.5-1
- update to 9.3.5 per release notes
http://www.postgresql.org/docs/9.3/static/release-9-3-5.html
* Thu Mar 20 2014 Jozef Mlich <jmlich(a)redhat.com> - 9.3.4-1
- update to 9.3.4 minor version per release notes:
http://www.postgresql.org/docs/9.3/static/release-9-3-4.html
* Thu Mar 13 2014 Jozef Mlich <jmlich(a)redhat.com> - 9.3.3-2
- Fix WAL replay of locking an updated tuple
kudos to Alvaro Herrera
* Thu Feb 20 2014 Jozef Mlich <jmlich(a)redhat.com> - 9.3.3-1
- update to 9.3.3 minor version per release notes:
http://www.postgresql.org/docs/9.3/static/release-9-3-3.html
* Thu Jan 23 2014 Pavel Raiskup <praiskup(a)redhat.com> - 9.3.2-7
- postgresql-setup: typos
* Tue Jan 21 2014 Pavel Raiskup <praiskup(a)redhat.com> - 9.3.2-6
- add PGSETUP_PGUPGRADE_OPTIONS env var for postgresql-setup
* Mon Jan 20 2014 Pavel Raiskup <praiskup(a)redhat.com> - 9.3.2-5
- fix the postgresql-setup --version option
* Mon Jan 20 2014 Pavel Raiskup <praiskup(a)redhat.com> - 9.3.2-4
- postgresql-setup(upgrade): don't stop old server when it can not be started
- postgresql-setup(initdb, upgrade): add $PGSETUP_INITDB_OPTIONS
- postgresql-setup: do not pretend 'sh' compatibility
- move script generation to proper place
- postgresql-setup: document a little and genrate manual page
* Fri Jan 10 2014 Pavel Raiskup <praiskup(a)redhat.com> - 9.3.2-3
- build with -O3 on ppc64 (private #1051075)
* Fri Dec 13 2013 Pavel Raiskup <praiskup(a)redhat.com> - 9.3.2-2
- lint the postgresql-setup script
* Thu Dec 12 2013 Jozef Mlich <jmlich(a)redhat.com> - 9.3.2-2
- don't fail if user has badly configure 'postgres' user access (#1040364)
* Thu Dec 5 2013 Jozef Mlich <jmlich(a)redhat.com> - 9.3.2-1
- update to 9.3.2 minor version per release notes:
http://www.postgresql.org/docs/9.3/static/release-9-3-2.html
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update postgresql' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months