[SECURITY] Fedora EPEL 5 Update: drupal6-6.27-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13816
2012-12-20 23:53:52
--------------------------------------------------------------------------------
Name : drupal6
Product : Fedora EPEL 5
Version : 6.27
Release : 1.el5
URL : http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
Upstream Drupal has reported SA-CORE-2012-004 [1] which corrects multiple vulnerabilities:
1) Access bypass (User module search - Drupal 6 and 7)
2) Access bypass (Upload module - Drupal 6)
3) Arbitrary PHP code execution (File upload modules - Drupal 6 and 7)
CVEs have been requested and are not yet assigned.
These flaws have been fixed in Drupal 6.27 and 7.18.
[1] http://drupal.org/SA-CORE-2012-004
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #888990 - CVE-2012-5651 CVE-2012-5652 CVE-2012-5653 drupal: multiple flaws fixed in 6.27/7.18 (SA-CORE-2012-004)
https://bugzilla.redhat.com/show_bug.cgi?id=888990
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal6' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 4 months
[SECURITY] Fedora EPEL 5 Update: drupal7-7.18-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13816
2012-12-20 23:53:52
--------------------------------------------------------------------------------
Name : drupal7
Product : Fedora EPEL 5
Version : 7.18
Release : 1.el5
URL : http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
Upstream Drupal has reported SA-CORE-2012-004 [1] which corrects multiple vulnerabilities:
1) Access bypass (User module search - Drupal 6 and 7)
2) Access bypass (Upload module - Drupal 6)
3) Arbitrary PHP code execution (File upload modules - Drupal 6 and 7)
CVEs have been requested and are not yet assigned.
These flaws have been fixed in Drupal 6.27 and 7.18.
[1] http://drupal.org/SA-CORE-2012-004
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #888990 - CVE-2012-5651 CVE-2012-5652 CVE-2012-5653 drupal: multiple flaws fixed in 6.27/7.18 (SA-CORE-2012-004)
https://bugzilla.redhat.com/show_bug.cgi?id=888990
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal7' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 4 months
Fedora EPEL 6 Update: znc-infobot-1.0-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13799
2012-12-19 17:43:19
--------------------------------------------------------------------------------
Name : znc-infobot
Product : Fedora EPEL 6
Version : 1.0
Release : 2.el6
URL : http://znc-msvc.googlecode.com
Summary : infobot module for ZNC IRC Bouncer
Description :
This is a user module for ZNC that provides joined
channels with a multitude of bot commands
--------------------------------------------------------------------------------
Update Information:
Build against latest ZNC
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update znc-infobot' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 4 months
Fedora EPEL 5 Update: znc-infobot-1.0-2.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13810
2012-12-19 17:44:16
--------------------------------------------------------------------------------
Name : znc-infobot
Product : Fedora EPEL 5
Version : 1.0
Release : 2.el5
URL : http://znc-msvc.googlecode.com
Summary : infobot module for ZNC IRC Bouncer
Description :
This is a user module for ZNC that provides joined
channels with a multitude of bot commands
--------------------------------------------------------------------------------
Update Information:
Build against latest ZNC
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update znc-infobot' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 4 months
[SECURITY] Fedora EPEL 6 Update: pcp-3.6.10-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13740
2012-12-11 20:11:01
--------------------------------------------------------------------------------
Name : pcp
Product : Fedora EPEL 6
Version : 3.6.10
Release : 2.el6
URL : http://oss.sgi.com/projects/pcp
Summary : System-level performance monitoring and performance management
Description :
Performance Co-Pilot (PCP) provides a framework and services to support
system-level performance monitoring and performance management.
The PCP open source release provides a unifying abstraction for all of
the interesting performance data in a system, and allows client
applications to easily retrieve and process any subset of that data.
--------------------------------------------------------------------------------
Update Information:
Fix functional regressions from recent tmpfile security fixes
Resolve insecure temporary file use flaw in PCP shell scripts.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #875842 - CVE-2012-5530 pcp: Insecure temporary file use flaws
https://bugzilla.redhat.com/show_bug.cgi?id=875842
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update pcp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 4 months
Fedora EPEL 6 Update: abi-compliance-checker-1.98.7-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13674
2012-12-05 21:06:01
--------------------------------------------------------------------------------
Name : abi-compliance-checker
Product : Fedora EPEL 6
Version : 1.98.7
Release : 1.el6
URL : http://ispras.linuxbase.org/index.php/ABI_compliance_checker
Summary : An ABI Compliance Checker
Description :
A tool for checking backward binary compatibility of a shared C/C++ library. It
checks for changes in calling stack, changes in v-table, removed symbols, etc.
--------------------------------------------------------------------------------
Update Information:
Version 1.98.7 (December 14, 2012)
Improvements
Extended extra info dumped by -extra-info option
Extended additional info dumped by -extra-dump option
Added specifiers for structs, unions and enums in the report and ABI dump
Improved support for old ABI dumps
Bug Fixes
Corrected -debug option
Corrected creating of archives with ABI dumps
Corrected parsing of includes in header files
Corrected processing of undefined symbols
Corrected -app option
Corrected processing of default paths to system libraries
Version 1.98.6 (December 04, 2012)
Improvements
Extended -extra-info and -extra-dump options
Bug Fixes
Corrected processing of input XML descriptor
Corrected "Parameter_Default_Value_Removed" rule
Other fixes
Version 1.98.5 (November 30, 2012)
This is a bug-fix release with a few new features.
Improvements
Added "throw" and "weak" attributes of methods to ABI dump
New Options
-extra-info
-extra-dump
-force
Bug Fixes
Corrected order of user-defined include paths
Corrected internal C++ mangler
Removed false positives of the "Parameter_Type_Format" rule
Other fixes
Other
Extended test suite
Code cleaning
Docs cleaning
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update abi-compliance-checker' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 4 months
Fedora EPEL 5 Update: salt-0.11.1-1.el5
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13829
2012-12-20 23:55:10
--------------------------------------------------------------------------------
Name : salt
Product : Fedora EPEL 5
Version : 0.11.1
Release : 1.el5
URL : http://saltstack.org/
Summary : A parallel remote execution system
Description :
Salt is a distributed remote execution system used to execute commands and
query data. It was developed in order to bring the best solutions found in
the world of remote execution together and make them better, faster and more
malleable. Salt accomplishes this via its ability to handle larger loads of
information, and not just dozens, but hundreds or even thousands of individual
servers, handle them quickly and through a simple and manageable interface.
--------------------------------------------------------------------------------
Update Information:
updated to 0.11.1 for security vulnerability fix
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update salt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 4 months
Fedora EPEL 6 Update: python-repoze-lru-0.4-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13690
2012-12-06 21:03:50
--------------------------------------------------------------------------------
Name : python-repoze-lru
Product : Fedora EPEL 6
Version : 0.4
Release : 2.el6
URL : http://pypi.python.org/pypi/repoze.lru
Summary : A tiny LRU cache implementation and decorator
Description :
repoze.lru is a LRU (least recently used) cache implementation. Keys and values
that are not used frequently will be evicted from the cache faster than keys
and values that are used frequently.
--------------------------------------------------------------------------------
Update Information:
0.4
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-repoze-lru' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 4 months
Fedora EPEL 6 Update: php-horde-Horde-Http-2.0.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13806
2012-12-19 17:43:49
--------------------------------------------------------------------------------
Name : php-horde-Horde-Http
Product : Fedora EPEL 6
Version : 2.0.1
Release : 1.el6
URL : http://pear.horde.org
Summary : Horde HTTP libraries
Description :
This package provides a set of classes for making HTTP requests.
--------------------------------------------------------------------------------
Update Information:
Update to latest Horde version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-Http' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 4 months
Fedora EPEL 6 Update: php-horde-Horde-Stream-Wrapper-2.0.1-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13806
2012-12-19 17:43:49
--------------------------------------------------------------------------------
Name : php-horde-Horde-Stream-Wrapper
Product : Fedora EPEL 6
Version : 2.0.1
Release : 1.el6
URL : http://pear.horde.org
Summary : Horde Stream wrappers
Description :
This package provides various stream wrappers.
--------------------------------------------------------------------------------
Update Information:
Update to latest Horde version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-Horde-Stream-Wrapper' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 4 months