Fedora EPEL 5 Update: trytond-1.0.7-1.el5
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0910
2009-12-01 17:49:52
--------------------------------------------------------------------------------
Name : trytond
Product : Fedora EPEL 5
Version : 1.0.7
Release : 1.el5
URL : http://www.tryton.org
Summary : Server for the Tryton application framework
Description :
Tryton is a three-tiers high-level general purpose application framework
written in Python and use PostgreSQL as database engine. It is the core base
of an Open Source ERP. It provides modularity, scalability and security.
The core of Tryton (also called Tryton kernel) provides all the necessary
functionalities for a complete application framework: data persistence (i.e
an ORM with extensive modularity), users management (authentication, fine
grained control for data access, handling of concurrent access of resources),
workflow and report engines, web services and internationalisation. Thus
constituting a complete application platform which can be used for any
relevant purpose.
--------------------------------------------------------------------------------
Update Information:
bug fix releases in the 1.0 and 1.2 branches
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update trytond' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora EPEL 5 Update: xcircuit-3.6.164-1.el5
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0906
2009-12-01 17:49:43
--------------------------------------------------------------------------------
Name : xcircuit
Product : Fedora EPEL 5
Version : 3.6.164
Release : 1.el5
URL : http://opencircuitdesign.com/xcircuit
Summary : Electronic circuit schematic drawing program
Description :
Xcircuit is a general-purpose drawing program and also a specific-purpose
CAD program for circuit schematic drawing and schematic capture.
--------------------------------------------------------------------------------
Update Information:
Bugfix for make matching symbol.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xcircuit' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora EPEL 4 Update: lsscsi-0.22-3.el4
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0932
2009-12-01 17:50:52
--------------------------------------------------------------------------------
Name : lsscsi
Product : Fedora EPEL 4
Version : 0.22
Release : 3.el4
URL : http://sg.danny.cz/scsi/lsscsi.html
Summary : List SCSI devices (or hosts) and associated information
Description :
Uses information provided by the sysfs pseudo file system in Linux kernel
2.6 series to list SCSI devices or all SCSI hosts. Includes a "classic"
option to mimic the output of "cat /proc/scsi/scsi" that has been widely
used prior to the lk 2.6 series.
Author:
--------
Doug Gilbert <dgilbert(at)interlog(dot)com>
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lsscsi' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
[SECURITY] Fedora EPEL 5 Update: drupal-5.21-1.el5
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-1014
2009-12-17 23:17:16
--------------------------------------------------------------------------------
Name : drupal
Product : Fedora EPEL 5
Version : 5.21
Release : 1.el5
URL : http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
* Advisory ID: DRUPAL-SA-CORE-2009-009 * Project: Drupal core * Version:
5.x, 6.x * Date: 2009-December-16 * Security risk: Not critical *
Exploitable from: Remote * Vulnerability: Cross site scripting --------
DESCRIPTION ---------------------------------------------------------
Multiple vulnerabilities were discovered in Drupal. .... Contact category name
cross-site scripting The Contact module does not correctly handle certain
user input when displaying category information. Users privileged to create
contact categories can insert arbitrary HTML and script code into the contact
module administration page. Such a cross-site scripting attack may lead to the
malicious user gaining administrative access. Wikipedia has more information
about cross-site scripting [1] (XSS). This issue affects Drupal 6.x and Drupal
5.x. .... Menu description cross-site scripting The Menu module does not
correctly handle certain user input when displaying the menu administration
overview. Users privileged to create new menus can insert arbitrary HTML and
script code into the menu module administration page. Such a cross-site
scripting attack may lead to the malicious user gaining administrative access.
Wikipedia has more information about cross-site scripting [2] (XSS). This issue
affects Drupal 6.x only. -------- VERSIONS AFFECTED
--------------------------------------------------- * Drupal 5.x before
version 5.21. * Drupal 6.x before version 6.15. -------- SOLUTION
------------------------------------------------------------ Install the
latest version: * If you are running Drupal 6.x then upgrade to Drupal 6.15
[3]. * If you are running Drupal 5.x then upgrade to Drupal 5.21 [4]. If
you are unable to upgrade immediately, you can apply a patch to secure your
installation until you are able to do a proper upgrade. Theses patches fix the
security vulnerability, but do not contain other fixes which were released in
Drupal 5.21 or Drupal 6.15. * To patch Drupal 6.14 use SA-
CORE-2009-009-6.14.patch [5]. * To patch Drupal 5.20 use SA-
CORE-2009-009-5.20.patch [6]. -------- REPORTED BY
--------------------------------------------------------- The contact
category XSS issue was independently reported by mr.baileys and Justin Klein
Keane [7]. The menu description XSS issue was reported by mr.baileys [8].
-------- FIXED BY
------------------------------------------------------------ The contact
category XSS issue was fixed by Justin Klein Keane [9] and Dave Reid [10]. The
menu description XSS issue was fixed by Gábor Hojtsy [11] and Heine Deelstra
[12]. -------- CONTACT
------------------------------------------------------------- The security
team for Drupal can be reached at security at drupal.org or via the form at
http://drupal.org/contact. [1] http://en.wikipedia.org/wiki/Cross-
site_scripting [2] http://en.wikipedia.org/wiki/Cross-site_scripting [3]
http://ftp.drupal.org/files/projects/drupal-6.15.tar.gz [4]
http://ftp.drupal.org/files/projects/drupal-5.21.tar.gz [5]
http://drupal.org/files/sa-core-2009-009/SA-CORE-2009-009-6.14.patch [6]
http://drupal.org/files/sa-core-2009-009/SA-CORE-2009-009-5.20.patch [7]
http://drupal.org/user/302225 [8] http://drupal.org/user/383424 [9]
http://drupal.org/user/302225 [10] http://drupal.org/user/53892 [11]
http://drupal.org/user/4166 [12] http://drupal.org/user/17943
_______________________________________________ Security-news mailing list
Security-news(a)drupal.org http://lists.drupal.org/mailman/listinfo/security-news
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora EPEL 5 Update: perl-Verilog-Perl-3.222-1.el5
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0930
2009-12-01 17:50:46
--------------------------------------------------------------------------------
Name : perl-Verilog-Perl
Product : Fedora EPEL 5
Version : 3.222
Release : 1.el5
URL : http://www.veripool.org/wiki/verilog-perl
Summary : Verilog parsing routines
Description :
This package provides functions to support writing utilities
that use the Verilog language.
--------------------------------------------------------------------------------
Update Information:
new upstream release 3.222: * Fix missing ; in ContAssign::verilog_text,
bug177. [Nicolas Wilhelm] * Fix multi-dimensional arrayed typedefs, bug183.
[Vesselin Kavalov] * Fix “assert () else” action_blocks. [Vesselin Kavalov]
* Fix typedef scoping under anonymous begin blocks. * Fix `define argument
mis-replacing system task of same name, bug191. * Fix SystemPerl hitting
“undefined find_interface…” in 3.220. * Fix erroring on strings with
backslashed newlines, bug168. [Pete Nixon] * Fix compile error on RHEL3 with
gettext, bug169. [Marek Rouchal] * Fix line number miscounting with `pragma.
* Add parsing of “assign”, including SigParser::contassign callback,
Netlist::ContAssign object, and related accessors. * Several code speedups to
vhier, Verilog::Netlist, and the parsers. * Add Preproc::getall to fetch all
text instead of line-by-line. * Add Parser::new(use_cb_{name}=>0) option to
speed parsing. * Add SigParser/Netlist::new(use_vars=>0) option to speed
parsing. * Fix deep defines causing flex scanner overflows. [Brad Dobbie] *
Fix preprocessing commas in deep parameterized macros. [Brad Dobbie] * Fix
Preproc::defSubstitute not being called on parameterized macros. * Fix Perl
5.8.8 compile error, bug115. [Marek Rouchal]
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Verilog-Perl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora EPEL 5 Update: fbterm-1.6-1.el5
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0935
2009-12-01 17:50:58
--------------------------------------------------------------------------------
Name : fbterm
Product : Fedora EPEL 5
Version : 1.6
Release : 1.el5
URL : http://code.google.com/p/fbterm/
Summary : A frame buffer terminal emulator
Description :
FbTerm is a fast terminal emulator for linux with frame buffer device.
Features include:
- mostly as fast as terminal of linux kernel while accelerated scrolling
is enabled on framebuffer device
- select font with fontconfig and draw text with freetype2, same as
Qt/Gtk+ based GUI apps
- dynamicly create/destroy up to 10 windows initially running default
shell
- record scrollback history for every window
- auto-detect text encoding with current locale, support double width
scripts like Chinese, Japanese etc
- switch between configurable additional text encodings with hot keys
on the fly
- copy/past selected text between windows with mouse when gpm server
is running
--------------------------------------------------------------------------------
Update Information:
- Fixed [Bug 539186] FTBFS fbterm-1.5-2.fc12 - Upstream fixed [Bug 542284]
terminfo file for fbterm not included with fbterm package in fedora. - Patch
for EL-5 - Upstream update: 1. added VESA video card support 2. added
rendering messages for IM server development 3. fixed a bug where Ctrl+Space
is a shortcut even user run FbTerm without "input-method" option 4. fixed a
bug where user compile FbTerm without gpm mouse support but run it in a gpm
server enabled environment 5. fixed a IM program dead loop bug triggered by
FbTerm's crash 6. fixed several spelling errors in FbTerm's help message and
man-page
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #539186 - FTBFS fbterm-1.5-2.fc12
https://bugzilla.redhat.com/show_bug.cgi?id=539186
[ 2 ] Bug #542284 - terminfo file for fbterm not included with fbterm package in fedora.
https://bugzilla.redhat.com/show_bug.cgi?id=542284
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update fbterm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora EPEL 5 Update: mock-1.0.1-1.el5
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0928
2009-12-01 17:50:41
--------------------------------------------------------------------------------
Name : mock
Product : Fedora EPEL 5
Version : 1.0.1
Release : 1.el5
URL : http://fedoraproject.org/wiki/Projects/Mock
Summary : Builds packages inside chroots
Description :
Mock takes a srpm and builds it in a chroot
--------------------------------------------------------------------------------
Update Information:
Fix creation of root cache tarballs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #540997 - Intermittent errors creating mock root cache tarball
https://bugzilla.redhat.com/show_bug.cgi?id=540997
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mock' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora EPEL 5 Update: ocsinventory-agent-1.1-1.el5.1
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0831
2009-11-10 02:49:09
--------------------------------------------------------------------------------
Name : ocsinventory-agent
Product : Fedora EPEL 5
Version : 1.1
Release : 1.el5.1
URL : http://www.ocsinventory-ng.org/
Summary : Open Computer and Software Inventory Next Generation client
Description :
Open Computer and Software Inventory Next Generation is an application
designed to help a network or system administrator keep track of computer
configuration and software installed on the network.
It also allows deploying softwares, commands or files on Windows and
Linux client computers.
ocsinventory-agent provides the client for Linux (Unified Unix Agent).
--------------------------------------------------------------------------------
Update Information:
New upstream version See Changelog on https://launchpad.net/ocsinventory-
unix-agent/trunk/ocsinventory-unix-agent-1.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update ocsinventory-agent' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora EPEL 4 Update: globus-gram-job-manager-scripts-0.7-1.el4
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0956
2009-12-07 05:55:00
--------------------------------------------------------------------------------
Name : globus-gram-job-manager-scripts
Product : Fedora EPEL 4
Version : 0.7
Release : 1.el4
URL : http://www.globus.org/
Summary : Globus Toolkit - GRAM Job ManagerScripts
Description :
The Globus Toolkit is an open source software toolkit used for building Grid
systems and applications. It is being developed by the Globus Alliance and
many others all over the world. A growing number of projects and companies are
using the Globus Toolkit to unlock the potential of grids for their cause.
The globus-gram-job-manager-scripts package contains:
GRAM Job ManagerScripts
--------------------------------------------------------------------------------
Update Information:
The Globus Toolkit is an open source software toolkit used for building Grid
systems and applications. It is being developed by the Globus Alliance and many
others all over the world. A growing number of projects and companies are using
the Globus Toolkit to unlock the potential of grids for their cause. The
globus-gram-job-manager package contains: GRAM Job ManagerScripts
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #516535 - Review Request: globus-gram-job-manager-scripts - Globus Toolkit - GRAM Job ManagerScripts
https://bugzilla.redhat.com/show_bug.cgi?id=516535
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update globus-gram-job-manager-scripts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora EPEL 5 Update: rubygem-fastthread-1.0.7-1.el5
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2009-0125
2009-07-27 05:16:52
--------------------------------------------------------------------------------
Name : rubygem-fastthread
Product : Fedora EPEL 5
Version : 1.0.7
Release : 1.el5
URL : http://mongrel.rubyforge.org
Summary : Optimized replacement for thread.rb primitives
Description :
Optimized replacement for thread.rb primitives
--------------------------------------------------------------------------------
Update Information:
upgraded to upstream version 1.0.7
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rubygem-fastthread' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months