Fedora 19 Update: ghc-setlocale-0.0.3-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8273
2014-07-12 01:18:12
--------------------------------------------------------------------------------
Name : ghc-setlocale
Product : Fedora 19
Version : 0.0.3
Release : 1.fc19
URL : http://hackage.haskell.org/package/setlocale
Summary : A Haskell interface to setlocale
Description :
A Haskell interface to 'setlocale()'.
--------------------------------------------------------------------------------
Update Information:
spec file generated by cabal-rpm-0.8.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1115885 - Review Request: ghc-setlocale - A Haskell interface to setlocale()
https://bugzilla.redhat.com/show_bug.cgi?id=1115885
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ghc-setlocale' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
[SECURITY] Fedora 20 Update: openstack-keystone-2013.2.3-5.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-5497
2014-04-23 03:00:55
--------------------------------------------------------------------------------
Name : openstack-keystone
Product : Fedora 20
Version : 2013.2.3
Release : 5.fc20
URL : http://keystone.openstack.org/
Summary : OpenStack Identity Service
Description :
Keystone is a Python implementation of the OpenStack
(http://www.openstack.org) identity service API.
This package contains the Keystone daemon.
--------------------------------------------------------------------------------
Update Information:
* Sanitizes authentication methods received in requests CVE-2014-2828
* Privilege escalation through trust chained delegation CVE-2014-3476
* Keystone V2 trusts privilege escalation through user supplied project id CVE-2014-3520
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 9 2014 Alan Pevec <apevec(a)redhat.com> 2013.2.3-5
- Keystone V2 trusts privilege escalation through user supplied project id
CVE-2014-3520
* Fri Jun 13 2014 Alan Pevec <apevec(a)redhat.com> 2013.2.3-4
- privilege escalation through trust chained delegation CVE-2014-3476
* Mon Apr 21 2014 Alan Pevec <apevec(a)redhat.com> 2013.2.3-3
- Sanitizes authentication methods received in requests CVE-2014-2828
* Fri Apr 4 2014 Alan Pevec <apevec(a)redhat.com> 2013.2.3-2
- updated to stable havana 2013.2.3 release
- Trustee token revocation does not work with memcache backend CVE-2014-2237
* Fri Feb 14 2014 Alan Pevec <apevec(a)redhat.com> 2013.2.2-1
- updated to stable havana 2013.2.2 release
* Tue Dec 17 2013 Alan Pevec <apevec(a)redhat.com> 2013.2.1-1
- updated to stable havana 2013.2.1 release CVE-2013-6391
* Wed Oct 30 2013 Alan Pevec <apevec(a)redhat.com> 2013.2-2
- unintentional role granting with Keystone LDAP backend CVE-2013-4477
* Thu Oct 17 2013 Alan Pevec <apevec(a)redhat.com> - 2013.2-1
- Update to havana final
* Mon Oct 7 2013 Alan Pevec <apevec(a)redhat.com> - 2013.2-0.14.rc1
- rename HTTPD integration to keystone.wsgi
* Wed Oct 2 2013 Adam Young <ayoung@redhat> - 2013.2-0.11.rc1
- HTTPD integration files
* Wed Oct 2 2013 Alan Pevec <apevec(a)redhat.com> - 2013.2-0.10.rc1
- Havana release candidate
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1086211 - CVE-2014-2828 openstack-keystone: denial of service via V3 API authentication chaining
https://bugzilla.redhat.com/show_bug.cgi?id=1086211
[ 2 ] Bug #1104524 - CVE-2014-3476 openstack-keystone: privilege escalation through trust chained delegation
https://bugzilla.redhat.com/show_bug.cgi?id=1104524
[ 3 ] Bug #1112668 - CVE-2014-3520 openstack-keystone: Keystone V2 trusts privilege escalation through user supplied project id
https://bugzilla.redhat.com/show_bug.cgi?id=1112668
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openstack-keystone' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 19 Update: lua-cyrussasl-1.0.0-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9012
2014-07-30 06:18:10
--------------------------------------------------------------------------------
Name : lua-cyrussasl
Product : Fedora 19
Version : 1.0.0
Release : 1.fc19
URL : https://github.com/JorjBauer/lua-cyrussasl
Summary : Cyrus SASL library for Lua
Description :
Lua bindings for the Cyrus SASL APIs.
--------------------------------------------------------------------------------
Update Information:
Lua bindings for the Cyrus SASL APIs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1102098 - Review Request: lua-cyrussasl - Cyrus SASL library for Lua
https://bugzilla.redhat.com/show_bug.cgi?id=1102098
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update lua-cyrussasl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 20 Update: NetworkManager-vpnc-0.9.8.2-3.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8894
2014-07-26 15:02:11
--------------------------------------------------------------------------------
Name : NetworkManager-vpnc
Product : Fedora 20
Version : 0.9.8.2
Release : 3.fc20
URL : http://www.gnome.org/projects/NetworkManager/
Summary : NetworkManager VPN plugin for vpnc
Description :
This package contains software for integrating VPN capabilities with
the vpnc server with NetworkManager.
--------------------------------------------------------------------------------
Update Information:
Fix path to connection-editor plugin in service file
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2014 Thomas Haller <thaller(a)redhat.com> - 1:0.9.8.2-3
- Fix path to connection-editor plugin in service file
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update NetworkManager-vpnc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
[SECURITY] Fedora 20 Update: samba-4.1.9-4.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-9141
2014-08-03 01:18:16
--------------------------------------------------------------------------------
Name : samba
Product : Fedora 20
Version : 4.1.9
Release : 4.fc20
URL : http://www.samba.org/
Summary : Server and Client software to interoperate with Windows machines
Description :
Samba is the standard Windows interoperability suite of programs for Linux and Unix.
--------------------------------------------------------------------------------
Update Information:
resolves: #1126015 - Fix CVE-2014-3560
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 1 2014 - Jared Smith <jsmith(a)fedoraproject.org> - 4.1.9-4
- resolves: #1126015 - Fix CVE-2014-3560
* Mon Jun 23 2014 - Guenther Deschner <gdeschner(a)redhat.com> - 4.1.9-3
- Update to Samba 4.1.9.
- resolves: #1112251 - Fix CVE-2014-0244 and CVE-2014-3493.
* Wed Jun 11 2014 - Guenther Deschner <gdeschner(a)redhat.com> - 4.1.8-3
- Update to Samba 4.1.8.
- resolves: #1102528 - CVE-2014-0178.
* Thu Apr 3 2014 - Andreas Schneider <asn(a)redhat.com> - 4.1.6-3
- Add systemd integration to the service daemons.
* Tue Mar 18 2014 - Andreas Schneider <asn(a)redhat.com> - 4.1.6-2
- Created a samba-test-libs package.
* Tue Mar 11 2014 - Andreas Schneider <asn(a)redhat.com> - 4.1.6-1
- Fix CVE-2013-4496 and CVE-2013-6442.
- Fix installation of pidl.
* Fri Feb 21 2014 - Andreas Schneider <asn(a)redhat.com> - 4.1.5-1
- Update to Samba 4.1.5.
* Fri Feb 7 2014 - Andreas Schneider <asn(a)redhat.com> - 4.1.4-1
- Update to Samba 4.1.4.
* Tue Dec 10 2013 - Guenther Deschner <gdeschner(a)redhat.com> - 4.1.3-2
- resolves: #1019469 - Fix winbind debug message NULL pointer derreference.
* Mon Dec 9 2013 - Andreas Schneider <asn(a)redhat.com> - 4.1.3-1
- Update to Samba 4.1.3.
- resolves: #1039454 - CVE-2013-4408.
- resolves: #1039500 - CVE-2012-6150.
* Mon Nov 25 2013 - Andreas Schneider <asn(a)redhat.com> - 4.1.2-1
- Update to Samba 4.1.2.
* Mon Nov 18 2013 - Guenther Deschner <gdeschner(a)redhat.com> - 4.1.1-3
- resolves: #948509 - Fix manpage correctness.
* Fri Nov 15 2013 - Andreas Schneider <asn(a)redhat.com> - 4.1.1-2
- related: #884169 - Fix strict aliasing warnings.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1126015 - CVE-2014-3560 samba: remote code execution in nmbd [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1126015
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update samba' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 19 Update: python-voluptuous-0.8.5-2.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8794
2014-07-25 08:57:32
--------------------------------------------------------------------------------
Name : python-voluptuous
Product : Fedora 19
Version : 0.8.5
Release : 2.fc19
URL : http://github.com/alecthomas/voluptuous
Summary : A Python data validation library
Description :
Voluptuous, despite the name, is a Python data validation library. It is
primarily intended for validating data coming into Python as JSON, YAML, etc.
--------------------------------------------------------------------------------
Update Information:
Voluptuous is a Python data validation library. It is primarily intended for validating data coming into Python as JSON, YAML, etc.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-voluptuous' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 19 Update: ddd-3.3.12-18.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8785
2014-07-25 08:57:11
--------------------------------------------------------------------------------
Name : ddd
Product : Fedora 19
Version : 3.3.12
Release : 18.fc19
URL : http://www.gnu.org/software/ddd/
Summary : GUI for several command-line debuggers
Description :
The Data Display Debugger (DDD) is a popular GUI for command-line
debuggers like GDB, DBX, JDB, WDB, XDB, the Perl debugger, and the
Python debugger. DDD allows you to view source texts and provides an
interactive graphical data display, in which data structures are
displayed as graphs. You can use your mouse to dereference pointers
or view structure contents, which are updated every time the program
stops. DDD can debug programs written in Ada, C, C++, Chill, Fortran,
Java, Modula, Pascal, Perl, and Python. DDD provides machine-level
debugging; hypertext source navigation and lookup; breakpoint,
watchpoint, backtrace, and history editors; array plots; undo and
redo; preferences and settings editors; program execution in the
terminal emulation window, debugging on a remote host, an on-line
manual, extensive help on the Motif user interface, and a command-line
interface with full editing, history and completion capabilities.
--------------------------------------------------------------------------------
Update Information:
fix assembly viewer.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 24 2014 Andy Grover <agrover(a)redhat.com> - 3.3.12-18
- Add patch ddd-3.3.12-GDBAgent-fix.patch for rhbz #1108862
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.3.12-17
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu Jan 16 2014 Jon Ciesla <limburgher(a)gmail.com> - 3.3.12-16
- Switch from lesstif to motif, BZ 1042757,
* Fri Aug 9 2013 Jon Ciesla <limburgher(a)gmail.com> - 3.3.12-15
- Better debuginfo fix.
* Thu Aug 8 2013 Jon Ciesla <limburgher(a)gmail.com> - 3.3.12-14
- Fix debuginfo, BZ 994166.
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.3.12-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1108862 - DDD Source viewer does not show assembly
https://bugzilla.redhat.com/show_bug.cgi?id=1108862
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ddd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 20 Update: ghc-entropy-0.2.2.1-4.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8882
2014-07-25 22:54:56
--------------------------------------------------------------------------------
Name : ghc-entropy
Product : Fedora 20
Version : 0.2.2.1
Release : 4.fc20
URL : http://hackage.haskell.org/package/entropy
Summary : A platform independent entropy source
Description :
A platform independent method to obtain cryptographically strong entropy
(urandom on Linux, CryptAPI on Windows, patches welcome).
PRNGs should see the 'DRBG' package too.
--------------------------------------------------------------------------------
Update Information:
patch out TemplateHaskell from build Setup to allow building on all archs
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 11 2014 Jens Petersen <petersen(a)redhat.com> - 0.2.2.1-4
- drop use of TemplateHaskell from Setup with patch from 0.2.2.2
so no longer need to restrict arch's (#992363)
* Tue Jul 8 2014 Jens Petersen <petersen(a)redhat.com> - 0.2.2.1-3
- update to cblrpm-0.8.11
- exclude arm due to TH segfault
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.2.2.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ghc-entropy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 20 Update: gnome-robots-3.10.2-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8627
2014-07-22 02:51:20
--------------------------------------------------------------------------------
Name : gnome-robots
Product : Fedora 20
Version : 3.10.2
Release : 1.fc20
URL : https://live.gnome.org/Robots
Summary : GNOME Robots game
Description :
The classic game where you have to avoid a hoard of robots who are trying to
kill you. Each step you take brings them closer toward you. Fortunately they
aren't very smart and you also have a helpful teleportation gadget.
--------------------------------------------------------------------------------
Update Information:
New GNOME games releases with bug fixes and translation updates.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 21 2014 Kalev Lember <kalevlember(a)gmail.com> - 3.10.2-1
- Update to 3.10.2
* Mon Jan 20 2014 Richard Hughes <rhughes(a)redhat.com> - 3.10.1-1
- Update to 3.10.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gnome-robots' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months
Fedora 20 Update: gnome-sudoku-3.10.3-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8627
2014-07-22 02:51:20
--------------------------------------------------------------------------------
Name : gnome-sudoku
Product : Fedora 20
Version : 3.10.3
Release : 1.fc20
URL : http://projects.gnome.org/gnome-games/
Summary : GNOME Sudoku game
Description :
GNOME version of the popular Sudoku Japanese logic game.
--------------------------------------------------------------------------------
Update Information:
New GNOME games releases with bug fixes and translation updates.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 21 2014 Kalev Lember <kalevlember(a)gmail.com> - 3.10.3-1
- Update to 3.10.3
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gnome-sudoku' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 9 months