[SECURITY] Fedora 12 Update: Miro-2.5.4-3.fc12
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-5506
2010-04-01 00:18:40
--------------------------------------------------------------------------------
Name : Miro
Product : Fedora 12
Version : 2.5.4
Release : 3.fc12
URL : http://www.getmiro.com/
Summary : Miro - Internet TV Player
Description :
Miro is a free application that turns your computer into an
internet TV video player. This release is still a beta version, which means
that there are some bugs, but we're moving quickly to fix them and will be
releasing bug fixes on a regular basis.
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.5.9 / XULRunner version 1.9.1.9, fixing
multiple security issues detailed in the upstream advisories:
http://www.mozilla.org/security/known-
vulnerabilities/firefox35.html#firefox3.5.9 Update also includes all packages
depending on gecko-libs rebuilt against new version of Firefox / XULRunner.
CVE-2010-0173 CVE-2010-0174 CVE-2010-0175 CVE-2010-0176 CVE-2010-0177
CVE-2010-0178 CVE-2010-0181
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 30 2010 Jan Horak <jhorak(a)redhat.com> - 2.5.4-3
- Rebuild against newer gecko
* Thu Feb 18 2010 Jan Horak <jhorak(a)redhat.com> - 2.5.4-2
- Rebuild against newer gecko
* Thu Dec 17 2009 Alex Lancaster <alexlan[AT]fedoraproject org> - 2.5.4-1
- Update to upstream 2.5.4.
- Hopefully fixes a whole slew of crashes (#540301, #540535, #540543)
(#544047, #545681, #546141, #528036, #540207, #544889, #547062)
- Tarball renamed Miro -> miro
* Wed Dec 16 2009 Jan Horak <jhorak(a)redhat.com> - 2.5.2-7
- Rebuild against newer gecko
* Thu Nov 5 2009 Jan Horak <jhorak(a)redhat.com> - 2.5.2-6
- Rebuild against newer gecko
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #578147 - CVE-2010-0174 Mozilla crashes with evidence of memory corruption
https://bugzilla.redhat.com/show_bug.cgi?id=578147
[ 2 ] Bug #578149 - CVE-2010-0175 Mozilla remote code execution with use-after-free in nsTreeSelection
https://bugzilla.redhat.com/show_bug.cgi?id=578149
[ 3 ] Bug #578150 - CVE-2010-0176 Mozilla Dangling pointer vulnerability in nsTreeContentView
https://bugzilla.redhat.com/show_bug.cgi?id=578150
[ 4 ] Bug #578152 - CVE-2010-0177 Mozilla Dangling pointer vulnerability in nsPluginArray
https://bugzilla.redhat.com/show_bug.cgi?id=578152
[ 5 ] Bug #578154 - CVE-2010-0178 Firefox Chrome privilege escalation via forced URL drag and drop
https://bugzilla.redhat.com/show_bug.cgi?id=578154
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update Miro' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 1 month
Fedora 12 Update: perl-String-RewritePrefix-0.005-1.fc12
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-4566
2010-03-15 23:41:04
--------------------------------------------------------------------------------
Name : perl-String-RewritePrefix
Product : Fedora 12
Version : 0.005
Release : 1.fc12
URL : http://search.cpan.org/dist/String-RewritePrefix
Summary : Rewrite strings based on a set of known prefixes
Description :
Rewrite strings based on a set of known prefixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 14 2010 Chris Weyl <cweyl(a)alumni.drew.edu> 0.005-1
- update by Fedora::App::MaintainerTools 0.006
- PERL_INSTALL_ROOT => DESTDIR
- updating to latest GA CPAN version (0.005)
- added a new br on perl(Sub::Exporter) (version 0)
- added a new req on perl(Sub::Exporter) (version 0)
* Mon Dec 7 2009 Stepan Kasal <skasal(a)redhat.com> - 0.004-3
- rebuild against perl 5.10.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-String-RewritePrefix' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 1 month
Fedora 12 Update: rubygem-mixlib-authentication-1.1.2-2.fc12
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-5503
2010-04-01 00:18:36
--------------------------------------------------------------------------------
Name : rubygem-mixlib-authentication
Product : Fedora 12
Version : 1.1.2
Release : 2.fc12
URL : http://github.com/opscode/mixlib-authentication
Summary : Simple per-request authentication
Description :
Mixlib::Authentication provides a class-based header signing authentication
object.
--------------------------------------------------------------------------------
Update Information:
Mixlib::Authentication provides a class-based header signing authentication
object.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #576469 - Review Request: rubygem-mixlib-authentication - Simple per-request authentication
https://bugzilla.redhat.com/show_bug.cgi?id=576469
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-mixlib-authentication' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 1 month
Fedora 11 Update: python-suds-0.3.9-1.fc11
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-4308
2010-03-12 03:08:24
--------------------------------------------------------------------------------
Name : python-suds
Product : Fedora 11
Version : 0.3.9
Release : 1.fc11
URL : https://fedorahosted.org/suds
Summary : A python SOAP client
Description :
The suds project is a python soap web services client lib. Suds leverages
python meta programming to provide an intuative API for consuming web
services. Objectification of types defined in the WSDL is provided
without class generation. Programmers rarely need to read the WSDL since
services and WSDL based objects can be easily inspected. Supports
pluggable soap bindings.
--------------------------------------------------------------------------------
Update Information:
Released new features and bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 17 2009 jortel <jortel(a)redhat.com> - 0.3.9-1
- Bumped python requires to 2.4
- Replaced stream-based caching in the transport package with document-based caching.
- Caches pickled Document objects instead of XML text. 2x Faster!
- No more SAX parsing exceptions on damaged or incomplete cached files.
- Cached WSDL objects. Entire Definitions object including contained Schema object cached via pickle.
- Copy of soap encoding schema packaged with suds.
- Refactor Transports to use ProxyHandler instead of urllib2.Request.set_proxy().
- Added WSSE enhancements <Timestamp/> and <Expires/> support. See: Timestamp token.
- Fixed Tickets: #256, #291, #294, #295, #296
* Wed Dec 9 2009 jortel <jortel(a)redhat.com> - 0.3.8-1
- Includeds Windows NTLM Transport.
- Add missing self.messages in Client.clone().
- Changed default behavior for WSDL PartElement to be optional.
- Add support for services/ports defined without <address/> element in WSDL.
- Fix sax.attribute.Element.attrib() to find by name only when ns is not specified; renamed to Element.getAttribute().
- Update HttpTransport to pass timeout parameter to urllib2 open() methods when supported by urllib2.
- Add null class to pass explicit NULL values for parameters and optional elements.
- Soap encoded array (soap-enc:Array) enhancement for rpc/encoded.
Arrays passed as python arrays - works like document/literal now.
No more using the factory to create the Array.
Automatically includes arrayType attribute. Eg: soap-enc:arrayType="Array[2]".
Reintroduced ability to pass complex (objects) using python dict instead of suds object via factory.
- Fixed tickets: #84, #261, #262, #263, #265, #266, #278, #280, #282.
* Fri Oct 16 2009 jortel <jortel(a)redhat.com> - 0.3.7-1
- Better soap header support
- Added new transport HttpAuthenticated for active (not passive) basic authentication.
- New options (prefixes, timeout, retxml)
- WSDL processing enhancements.
- Expanded builtin XSD type support.
- Fixed <xs:iniclude/>
- Better XML date/datetime conversion.
- Client.clone() method added for lightweight copy of client object.
- XSD processing fixes/enhancements.
- Better <simpleType/> by <xs:restriction/> support.
- Performance enhancements.
- Fixed tickets: #65, #232, #233, #235, #241, #242, #244, #247, #254, #254, #256, #257, #258
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.3.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Fri May 1 2009 jortel <jortel(a)redhat.com> - 0.3.6-1
- Change hard coded /tmp/suds to tempfile.gettempdir() and create suds/ on demand.
- Fix return type for Any.get_attribute().
- Update http caching to ignore file:// urls.
- Better logging of messages when only the reply is injected.
- Fix XInteger and XFloat types to translate returned arrays properly.
- Fix xs:import schema with same namespace.
- Update parser to not load external references and add Import.bind() for XMLSchema.xsd location.
- Add schema doctor - used to patch XSDs at runtime. (See Options.doctor)
- Fix deprecation warnings in python 2.6.
- Add behavior for @default defined on <element/>.
- Change @xsi:type value to always be qualified for doc/literal.
- Add Option.xstq option to control when @xsi:type is qualified.
- Fixed Tickets: #64, #129, #205, #206, #217, #221, #222, #224, #225, #228, #229, #230
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-suds' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 1 month
Fedora 12 Update: perl-Text-CSV-1.16-1.fc12
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-4990
2010-03-23 01:43:59
--------------------------------------------------------------------------------
Name : perl-Text-CSV
Product : Fedora 12
Version : 1.16
Release : 1.fc12
URL : http://search.cpan.org/dist/Text-CSV/
Summary : Comma-separated values manipulator
Description :
Text::CSV provides facilities for the composition and decomposition of
comma-separated values. An instance of the Text::CSV class can combine
fields into a CSV string and parse a CSV string into fields.
The module accepts either strings or files as input and can utilize any
user-specified characters as delimiters, separators, and escapes so it is
perhaps better called ASV (anything separated values) rather than just CSV.
--------------------------------------------------------------------------------
Update Information:
This is an enhancement update to bring these packages up to the version required
by the latest DBIx::Class.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 17 2010 Chris Weyl <cweyl(a)alumni.drew.edu> 1.16-1
- PERL_INSTALL_ROOT => DESTDIR, add perl_default_filter
- auto-update to 1.16 (by cpan-spec-update 0.01) (for DBIx::Class)
- added a new br on perl(Test::Harness) (version 0)
* Fri Dec 4 2009 Stepan Kasal <skasal(a)redhat.com> - 1.10-3
- rebuild against perl 5.10.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Text-CSV' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 1 month
Fedora 12 Update: perl-Text-CSV_XS-0.72-1.fc12
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-4990
2010-03-23 01:43:59
--------------------------------------------------------------------------------
Name : perl-Text-CSV_XS
Product : Fedora 12
Version : 0.72
Release : 1.fc12
URL : http://search.cpan.org/dist/Text-CSV_XS/
Summary : Comma-separated values manipulation routines
Description :
Text::CSV provides facilities for the composition and decomposition of
comma-separated values. An instance of the Text::CSV class can combine
fields into a CSV string and parse a CSV string into fields.
--------------------------------------------------------------------------------
Update Information:
This is an enhancement update to bring these packages up to the version required
by the latest DBIx::Class.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 17 2010 Chris Weyl <cweyl(a)alumni.drew.edu> 0.72-1
- PERL_INSTALL_ROOT => DESTDIR, add perl_default_filter (XS module)
- auto-update to 0.72 (by cpan-spec-update 0.01) (DBIx::Class needed a newer
Text::CSV, which in turn can only leverage Text::CSV_XS >= 0.70)
- added a new br on perl(ExtUtils::MakeMaker) (version 0)
- added a new br on perl(IO::Handle) (version 0)
- added a new br on perl(Test::Harness) (version 0)
- added a new br on perl(Test::More) (version 0)
- added a new br on perl(Tie::Scalar) (version 0)
* Fri Dec 4 2009 Stepan Kasal <skasal(a)redhat.com> - 0.69-2
- rebuild against perl 5.10.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Text-CSV_XS' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 1 month
Fedora 12 Update: enca-1.13-1.fc12
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-5500
2010-04-01 00:18:33
--------------------------------------------------------------------------------
Name : enca
Product : Fedora 12
Version : 1.13
Release : 1.fc12
URL : http://gitorious.org/enca
Summary : Character set analyzer and detector
Description :
Enca is an Extremely Naive Charset Analyser. It detects character set and
encoding of text files and can also convert them to other encodings using
either a built-in converter or external libraries and tools like libiconv,
librecode, or cstocs.
Currently, it has support for Belarussian, Bulgarian, Croatian, Czech,
Estonian, Latvian, Lithuanian, Polish, Russian, Slovak, Slovene, Ukrainian,
Chinese and some multibyte encodings (mostly variants of Unicode)
independent on the language.
This package also contains shared Enca library other programs can make use of.
Install enca if you need to cope with text files of dubious origin
and unknown encoding and convert them to some reasonable encoding.
--------------------------------------------------------------------------------
Update Information:
Update to the latest version 1.13
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 29 2010 Dmitry Butskoy <Dmitry(a)Butskoy.name> - 1.13-1
- update to 1.13
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update enca' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 1 month
Fedora 12 Update: perl-App-Cache-0.37-1.fc12
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-4996
2010-03-23 01:44:11
--------------------------------------------------------------------------------
Name : perl-App-Cache
Product : Fedora 12
Version : 0.37
Release : 1.fc12
URL : http://search.cpan.org/dist/App-Cache
Summary : Easy application-level caching
Description :
The App::Cache module lets an application cache data locally. There are a
few times an application would need to cache data: when it is retrieving
information from the network or when it has to complete a large calculation.
For example, the Parse::BACKPAN::Packages module downloads a file off the
net and parses it, creating a data structure. Only then can it actually
provide any useful information for the programmer. Parse::BACKPAN::Packages
uses App::Cache to cache both the file download and data structures,
providing much faster use when the data is cached. This module stores data
in the home directory of the user, in a dot directory. For example, the
Parse::BACKPAN::Packages cache is actually stored underneath
"~/.parse_backpan_packages/cache/". This is so that permisssions are not a
problem -- it is a per-user, per-application cache.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 27 2010 Chris Weyl <cweyl(a)alumni.drew.edu> 0.37-1
- update by Fedora::App::MaintainerTools 0.004
- PERL_INSTALL_ROOT => DESTDIR
- dropped old BR on perl(Test::Pod::Coverage)
* Mon Dec 7 2009 Stepan Kasal <skasal(a)redhat.com> - 0.36-2
- rebuild against perl 5.10.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-App-Cache' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 1 month
Fedora 12 Update: perl-Data-OptList-0.106-1.fc12
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-4575
2010-03-15 23:41:16
--------------------------------------------------------------------------------
Name : perl-Data-OptList
Product : Fedora 12
Version : 0.106
Release : 1.fc12
URL : http://search.cpan.org/dist/Data-OptList/
Summary : Parse and validate simple name/value option pairs
Description :
Hashes are great for storing named data, but if you want more than one
entry for a name, you have to use a list of pairs. Even then, this is
really boring to write:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 8 2010 Chris Weyl <cweyl(a)alumni.drew.edu> 0.106-1
- update by Fedora::App::MaintainerTools 0.004
- PERL_INSTALL_ROOT => DESTDIR
- updating to latest GA CPAN version (0.106)
- added a new br on perl(ExtUtils::MakeMaker) (version 6.42)
- added a new br on perl(List::Util) (version 0)
- altered br on perl(Sub::Install) (0.92 => 0.921)
- added a new req on perl(List::Util) (version 0)
- added a new req on perl(Params::Util) (version 0.14)
- added a new req on perl(Sub::Install) (version 0.921)
* Mon Dec 7 2009 Stepan Kasal <skasal(a)redhat.com> - 0.104-4
- rebuild against perl 5.10.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Data-OptList' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 1 month
Fedora 11 Update: wxPython-2.8.10.1-2.fc11
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-4795
2010-03-18 02:15:27
--------------------------------------------------------------------------------
Name : wxPython
Product : Fedora 11
Version : 2.8.10.1
Release : 2.fc11
URL : http://www.wxpython.org/
Summary : GUI toolkit for the Python programming language
Description :
wxPython is a GUI toolkit for the Python programming language. It allows
Python programmers to create programs with a robust, highly functional
graphical user interface, simply and easily. It is implemented as a Python
extension module (native code) that wraps the popular wxWindows cross
platform GUI library, which is written in C++.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 17 2010 Dan Horák <dan[at]danny.cz> - 2.8.10.1-2
- add missing module (#573961)
* Sat Jan 16 2010 Dan Horák <dan[at]danny.cz> - 2.8.10.1-1
- update to 2.8.10.1
- backport to wxGTK 2.8.10 API
- cleaned up BRs
* Thu Jan 7 2010 Hans de Goede <hdegoede(a)redhat.com> - 2.8.9.2-4
- Change python_foo macros to use %global as the new rpm will break
using %define here, see:
https://www.redhat.com/archives/fedora-devel-list/2010-January/msg00093.html
* Mon Jul 27 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.8.9.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #573961 - [abrt] crash in wxPython-2.8.10.1-1.fc12: util.py:38:<module>:ImportError: No module named ebmlib
https://bugzilla.redhat.com/show_bug.cgi?id=573961
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update wxPython' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 1 month