[SECURITY] Fedora 10 Update: net-snmp-5.4.2.1-1.fc10
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-10451
2008-11-27 01:12:14
--------------------------------------------------------------------------------
Name : net-snmp
Product : Fedora 10
Version : 5.4.2.1
Release : 1.fc10
URL : http://net-snmp.sourceforge.net/
Summary : A collection of SNMP protocol tools and libraries
Description :
SNMP (Simple Network Management Protocol) is a protocol used for
network management. The NET-SNMP project includes various SNMP tools:
an extensible agent, an SNMP library, tools for requesting or setting
information from SNMP agents, tools for generating and handling SNMP
traps, a version of the netstat command which uses SNMP, and a Tk/Perl
mib browser. This package contains the snmpd and snmptrapd daemons,
documentation, etc.
You will probably also want to install the net-snmp-utils package,
which contains NET-SNMP utilities.
Building option:
--without tcp_wrappers : disable tcp_wrappers support
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 3 2008 Jan Safranek <jsafranek(a)redhat.com> 5.4.2.1-1
- explicitly require the right version and release of net-snmp and
net-snmp-libs
- update to net-snmp-5.4.2.1 to fix CVE-2008-4309
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #469349 - CVE-2008-4309 net-snmp: numresponses calculation integer overflow in snmp_agent.c
https://bugzilla.redhat.com/show_bug.cgi?id=469349
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update net-snmp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 4 months
Fedora 8 Update: systemtap-0.8-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9787
None
--------------------------------------------------------------------------------
Name : systemtap
Product : Fedora 8
Version : 0.8
Release : 1.fc8
URL : http://sourceware.org/systemtap/
Summary : Instrumentation System
Description :
SystemTap is an instrumentation system for systems running Linux 2.6.
Developers can write instrumentation to collect data on the operation
of the system.
--------------------------------------------------------------------------------
Update Information:
This update upgrades systemtap to version 0.8.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 13 2008 Frank Ch. Eigler <fche(a)redhat.com> - 0.8-1
- Upstream release.
* Tue Jul 15 2008 Frank Ch. Eigler <fche(a)redhat.com> - 0.7-1
- Upstream release.
* Fri Feb 1 2008 Frank Ch. Eigler <fche(a)redhat.com> - 0.6.1-3
- Add zlib-devel to buildreq; missing from crash-devel
- Process testsuite .stp files for #!stap->#!/usr/bin/stap
* Fri Jan 18 2008 Frank Ch. Eigler <fche(a)redhat.com> - 0.6.1-1
- Add crash-devel buildreq to build staplog.so crash(8) module.
- Many robustness & functionality improvements:
* Wed Dec 5 2007 Will Cohen <wcohen(a)redhat.com> - 0.6-2
- Correct Source to point to location contain code.
* Thu Aug 9 2007 David Smith <dsmith(a)redhat.com> - 0.6-1
- Bumped version, added libcap-devel BuildRequires.
* Wed Jul 11 2007 Will Cohen <wcohen(a)redhat.com> - 0.5.14-2
- Fix Requires and BuildRequires for sqlite.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update systemtap' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 4 months
Fedora 10 Update: perl-HTML-TokeParser-Simple-3.15-1.fc10
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-10449
2008-11-27 01:12:11
--------------------------------------------------------------------------------
Name : perl-HTML-TokeParser-Simple
Product : Fedora 10
Version : 3.15
Release : 1.fc10
URL : http://search.cpan.org/dist/HTML-TokeParser-Simple/
Summary : Easy to use HTML::TokeParser interface
Description :
HTML::TokeParser is an excellent module that's often used for parsing HTML.
However, the tokens returned are not exactly intuitive to parse. To simplify
this, HTML::TokeParser::Simple allows the user ask more intuitive (read: more
self-documenting) questions about the tokens returned.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #472664 - Review Request: perl-HTML-TokeParser-Simple - Easy to use HTML::TokeParser interface
https://bugzilla.redhat.com/show_bug.cgi?id=472664
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-HTML-TokeParser-Simple' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 4 months
Fedora 9 Update: ssmtp-2.61-11.7.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-10447
2008-11-27 01:12:10
--------------------------------------------------------------------------------
Name : ssmtp
Product : Fedora 9
Version : 2.61
Release : 11.7.fc9
URL : http://packages.debian.org/stable/mail/ssmtp
Summary : Extremely simple MTA to get mail off the system to a Mailhub
Description :
A secure, effective and simple way of getting mail off a system to your mail
hub. It contains no suid-binaries or other dangerous things - no mail spool
to poke around in, and no daemons running in the background. Mail is simply
forwarded to the configured mailhost. Extremely easy configuration.
WARNING: the above is all it does; it does not receive mail, expand aliases
or manage a queue. That belongs on a mail hub with a system administrator.
--------------------------------------------------------------------------------
Update Information:
fix by Andreas Dilger to correctly parse AuthPass password
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 26 2008 Manuel "lonely wolf" Wolfshant <wolfy(a)nobugconsulting.ro> 2.61-11.7
- integrate patch from Andreas Dilger, fixes https://bugzilla.redhat.com/show_bug.cgi?id=430608
* Fri Sep 12 2008 Manuel "lonely wolf" Wolfshant <wolfy(a)nobugconsulting.ro> 2.61-11.6.1
- use conditionals to consolidate specs for Fedora and EPEL
* Thu Sep 11 2008 Manuel "lonely wolf" Wolfshant <wolfy(a)nobugconsulting.ro> 2.61-11.6
- patch to fix CVE-2008-3962 (courtesy https://bugs.gentoo.org/127592)
- cleanup of other patches, make build with fuzz=0
* Sat Aug 2 2008 Manuel "lonely wolf" Wolfshant <wolfy(a)nobugconsulting.ro> 2.61-11.5.4
- work around rpmbuild more strict syntax checker
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #430608 - ssmtp cannot parse AuthPass with '=' or ':' in it
https://bugzilla.redhat.com/show_bug.cgi?id=430608
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ssmtp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 4 months
Fedora 10 Update: nettee-0.1.9-3.fc10
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-10177
None
--------------------------------------------------------------------------------
Name : nettee
Product : Fedora 10
Version : 0.1.9
Release : 3.fc10
URL : http://saf.bio.caltech.edu/nettee.html
Summary : Network "tee" program
Description :
nettee is a network "tee" program. It can typically transfer data between N
nodes at (nearly) the full bandwidth provided by the switch which connects
them. It is handy for cloning nodes or moving large database files.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #470140 - Review Request: nettee - Network "tee" program
https://bugzilla.redhat.com/show_bug.cgi?id=470140
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update nettee' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 4 months
Fedora 10 Update: cpuid-20060917-4.fc10
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9937
None
--------------------------------------------------------------------------------
Name : cpuid
Product : Fedora 10
Version : 20060917
Release : 4.fc10
URL : http://www.etallen.com/cpuid.html
Summary : Dumps information about the CPU(s)
Description :
cpuid dumps detailed information about x86 CPU(s) gathered from the CPUID
instruction, and also determines the exact model of CPU(s). It supports Intel,
AMD, and VIA CPUs, as well as older Transmeta, Cyrix, UMC, NexGen, and Rise
CPUs.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #469590 - Review Request: cpuid - Dumps information about the CPU(s)
https://bugzilla.redhat.com/show_bug.cgi?id=469590
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cpuid' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 4 months
Fedora 10 Update: perl-Check-ISA-0.04-2.fc10
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-10446
2008-11-27 01:12:10
--------------------------------------------------------------------------------
Name : perl-Check-ISA
Product : Fedora 10
Version : 0.04
Release : 2.fc10
URL : http://search.cpan.org/dist/Check-ISA
Summary : DWIM, correct checking of an object's class
Description :
This module provides several functions to assist in testing whether a value
is an object, and if so, ask about its class.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Check-ISA' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 4 months
Fedora 8 Update: mod_fcgid-2.2-7.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9632
None
--------------------------------------------------------------------------------
Name : mod_fcgid
Product : Fedora 8
Version : 2.2
Release : 7.fc8
URL : http://fastcgi.coremail.cn/
Summary : Apache2 module for high-performance server-side scripting
Description :
mod_fcgid is a binary-compatible alternative to the Apache module mod_fastcgi.
mod_fcgid has a new process management strategy, which concentrates on reducing
the number of fastcgi servers, and kicking out corrupt fastcgi servers as soon
as possible.
--------------------------------------------------------------------------------
Update Information:
This update removes the mod_fcgid-selinux subpackage, which is now obsoleted by
the main selinux-policy package.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 12 2008 Paul Howarth <paul(a)city-fan.org> 2.2-7
- SELinux policy module no longer built for Fedora 8 onwards as it is
obsoleted by the main selinux-policy package
- Conflicts for selinux-policy packages older than the releases where mod_fcgid
policy was incorporated have been added for Fedora 8, 9, and 10 versions, to
ensure that SELinux support will work if installed
* Tue Oct 21 2008 Paul Howarth <paul(a)city-fan.org> 2.2-6
- SELinux policy module rewritten to merge fastcgi and system script domains
in preparation for merge into main selinux-policy package (#462318)
- Try to determine supported SELinux policy types by reading /etc/selinux/config
* Thu Jul 24 2008 Paul Howarth <paul(a)city-fan.org> 2.2-5
- Tweak selinux-policy version detection macro to work with current Rawhide
* Thu Feb 14 2008 Paul Howarth <paul(a)city-fan.org> 2.2-4
- Rebuild with gcc 4.3.0 for Fedora 9
* Mon Jan 14 2008 Paul Howarth <paul(a)city-fan.org> 2.2-3
- Update SELinux policy to fix occasional failures on restarts
(move shared memory file into /var/run/mod_fcgid directory)
* Thu Jan 3 2008 Paul Howarth <paul(a)city-fan.org> 2.2-2
- Update SELinux policy to support file transition to httpd_tmp_t for
temporary files
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mod_fcgid' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 4 months
Fedora 9 Update: libtorrent-0.12.3-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-10444
2008-11-27 01:12:08
--------------------------------------------------------------------------------
Name : libtorrent
Product : Fedora 9
Version : 0.12.3
Release : 1.fc9
URL : http://libtorrent.rakshasa.no/
Summary : BitTorrent library with a focus on high performance & good code
Description :
LibTorrent is a BitTorrent library written in C++ for *nix, with a focus
on high performance and good code. The library differentiates itself
from other implementations by transfering directly from file pages to
the network stack. On high-bandwidth connections it is able to seed at
3 times the speed of the official client.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 18 2008 Conrad Meyer <konrad(a)tylerc.org> - 0.12.3-1
- Bump to 0.12.3.
* Thu Aug 7 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.11.8-5
- fix license tag
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libtorrent' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 4 months
Fedora 10 Update: perl-Net-SSH-Perl-1.33-2.fc10
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-10044
None
--------------------------------------------------------------------------------
Name : perl-Net-SSH-Perl
Product : Fedora 10
Version : 1.33
Release : 2.fc10
URL : http://search.cpan.org/dist/Net-SSH-Perl/
Summary : SSH (Secure Shell) client
Description :
Net::SSH::Perl is an all-Perl module implementing an SSH (Secure Shell)
client. It is compatible with both the SSH-1 and SSH-2 protocols.
--------------------------------------------------------------------------------
Update Information:
This update to the current upstream version fixes many problems reported in the
CPAN bug tracker: - Fix open() calls (rt.cpan.org #40020) - Fix non-shell
problem (rt.cpan.org #39980) - Allow full agent forwarding (rt.cpan.org
#32190) - Handle hashed known_hosts files (rt.cpan.org #25175) - Add
IO::Handle to Perl.pm (rt.cpan.org #40057, #35985) - ENV{HOME} is not set,
use getpwuid. If both fail and the dir is needed, we croak (rt.cpan.org #25174)
- Fix incorrect logical/bitwise AND mixup (rt.cpan.org #31490) - Allow empty
stdin for SSH2 (rt.cpan.org #32730) - Adjust terminal dimensions dynamically
if Term::ReadKey is available (rt.cpan.org #34874)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #469612 - Net::SSH::Perl is at 1.33
https://bugzilla.redhat.com/show_bug.cgi?id=469612
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Net-SSH-Perl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
15 years, 4 months