Fedora 8 Update: dia-0.96.1-6.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1213
2008-02-25 22:15:42
--------------------------------------------------------------------------------
Name : dia
Product : Fedora 8
Version : 0.96.1
Release : 6.fc8
URL : http://www.gnome.org/projects/dia/
Summary : Diagram drawing program
Description :
The Dia drawing program is designed to be like the Windows(TM) Visio
program. Dia can be used to draw different types of diagrams, and
includes support for UML static structure diagrams (class diagrams),
entity relationship modeling, and network diagrams. Dia can load and
save diagrams to a custom file format, can load and save in .xml format,
and can export to PostScript(TM).
--------------------------------------------------------------------------------
Update Information:
-Fix way to large text in svg export (bug 431184)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 1 2008 Hans de Goede <j.w.r.degoede(a)hhs.nl> 1:0.96.1-6
- Fix svg export (bug 431184)
* Sun Dec 2 2007 Hans de Goede <j.w.r.degoede(a)hhs.nl> 1:0.96.1-5
- Do not put dia in both the Office and the Graphics application menus
(bz 408041)
* Tue Nov 27 2007 Hans de Goede <j.w.r.degoede(a)hhs.nl> 1:0.96.1-4
- Fix help not showing due to an encoding error (bz 401291)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #431184 - Export funtion works improperly for some formats
https://bugzilla.redhat.com/show_bug.cgi?id=431184
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update dia' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 8 Update: pam_mysql-0.7-0.4.rc1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1005
2008-02-25 22:15:37
--------------------------------------------------------------------------------
Name : pam_mysql
Product : Fedora 8
Version : 0.7
Release : 0.4.rc1.fc8
URL : http://sf.net/projects/pam-mysql/
Summary : PAM module for auth UNIX users using MySQL data base
Description :
Pam_mysql aims to provide a backend neutral means of authenticating
users against an MySQL database.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #374611 - Review Request: pam_mysql - PAM module for auth UNIX users using MySQL data base
https://bugzilla.redhat.com/show_bug.cgi?id=374611
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pam_mysql' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 8 Update: shorewall-4.0.8-3.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1840
2008-02-25 22:15:37
--------------------------------------------------------------------------------
Name : shorewall
Product : Fedora 8
Version : 4.0.8
Release : 3.fc8
URL : http://www.shorewall.net/
Summary : An iptables front end for firewall configuration
Description :
The Shoreline Firewall, more commonly known as "Shorewall", is a
Netfilter (iptables) based firewall that can be used on a dedicated
firewall system, a multi-function gateway/ router/server or on a
standalone GNU/Linux system.
--------------------------------------------------------------------------------
Update Information:
Added patch-perl-4.0.8-3.diff and patch-perl-4.0.8-4.diff patches from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 16 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.8-3
- Added patch-perl-4.0.8-3.diff and patch-perl-4.0.8-4.diff patches from
upstream
* Wed Feb 6 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.8-2
- Add upstream patches patch-perl-4.0.8-1.diff and patch-perl-4.0.8-2.diff
* Sun Jan 27 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.8-1
- Update to version 4.0.8
- Remove 4.0.7 patches
* Sun Jan 6 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.7-2
- Remove 4.0.7.1 patch as it seems that's already been applied to the tarball
contents
* Sun Jan 6 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.7-2
- Fix error in patching commands in spec file (change -p0 to -p1 for new patches)
* Sun Jan 6 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.7-1
- Update to version 4.0.7
- Added 4.0.7.1 patch and all parts of the 4.0.7.2 patch that are relevant
(i.e. not the parts working around the iproute2-2.23 bug, as we don't ship the
broken iproute2)
- Clarified notes about tarball and patch locations
* Sat Dec 8 2007 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.6-3
- Added patch-perl-4.0.6-2.diff and patch-perl-4.0.6-3.diff
- Fixed URLs for tarballs to match where upstream has moved them to
* Wed Nov 28 2007 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.6-2
- Add Requires for shorewall-common to shorewall-shell and shorewall-perl (Orion
Poplawski)
* Sat Nov 24 2007 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.6-1
- Update to 4.0.6 plus patch-perl-4.0.6-1.diff upstream errata
* Sat Oct 27 2007 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.5-1
- Update to 4.0.5 which removes the need for the buildports.pl functionality
* Mon Oct 8 2007 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.4-2
- Add ghost files for /var/lib/shorewall/.modules and /var/lib/shorewall/.modulesdir
- Fix ownership of /var/lib/shorewall-lite
* Sun Oct 7 2007 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 4.0.4-1
- Initial version 4 packaging based upon upstream specs by Tom Eastep and
version 3 spec by Robert Marcano
- Split into shorewall-common, shorewall-shell, shorewall-perl,
shorewall-lite subpackages
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update shorewall' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 8 Update: php-pear-Net-SMTP-1.2.11-1.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1808
2008-02-25 22:15:37
--------------------------------------------------------------------------------
Name : php-pear-Net-SMTP
Product : Fedora 8
Version : 1.2.11
Release : 1.fc8
URL : http://pear.php.net/package/Net_SMTP
Summary : Provides an implementation of the SMTP protocol
Description :
Provides an implementation of the SMTP protocol using PEAR's Net_Socket class.
php-pear-Net-SMTP can optionally use package "php-pear-Auth-SASL".
--------------------------------------------------------------------------------
Update Information:
Upstream Changelog: - We now use package.xml version 2 exclusively. - Skip
unit tests when the configuration file is not available. - Fixing a protocol
error when performing DIGEST-MD5 authentication. (Bug 12206)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-pear-Net-SMTP' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 8 Update: ktorrent-2.2.5-5.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1188
2008-02-25 22:15:33
--------------------------------------------------------------------------------
Name : ktorrent
Product : Fedora 8
Version : 2.2.5
Release : 5.fc8
URL : http://ktorrent.pwsp.net/
Summary : A BitTorrent program for KDE
Description :
KTorrent is a BitTorrent program for KDE. Its main features are native KDE
integration, download of torrent files, upload speed capping, internet
searching using various search engines, UDP Trackers and UPnP support.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 27 2008 Roland Wolters <wolters.liste(a)gmx.net> - 2.2.5-5
- updated to bugfix version 2.2.5
- fixed build-system-Qt problem in spec file
* Sat Dec 1 2007 Roland Wolters <wolters.liste(a)gmx.net> - 2.2.4-2
- changed build require from kdelibs-devel to kdelibs3-devel
* Wed Nov 21 2007 Roland Wolters <wolters.liste(a)gmx.net> - 2.2.4-1
- bugfix update to version 2.2.4
* Fri Nov 16 2007 Roland Wolters <wolters.liste(a)gmx.net> - 2.2.3-2
- fixed version number for libktorrent file (2.2.2 for now)
* Thu Nov 15 2007 Roland Wolters <wolters.liste(a)gmx.net> - 2.2.3-1
- features and bugfix update to version 2.2.3
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ktorrent' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
[SECURITY] Fedora 7 Update: cups-1.2.12-9.fc7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1976
2008-02-25 22:15:12
--------------------------------------------------------------------------------
Name : cups
Product : Fedora 7
Version : 1.2.12
Release : 9.fc7
URL : http://www.cups.org/
Summary : Common Unix Printing System
Description :
The Common UNIX Printing System provides a portable printing layer for
UNIX® operating systems. It has been developed by Easy Software Products
to promote a standard printing solution for all UNIX vendors and users.
CUPS provides the System V and Berkeley command-line interfaces.
--------------------------------------------------------------------------------
Update Information:
This update contains a back-ported fix for a security issue that may cause cups
daemon to crash via special browse requests (CVE-2008-0882, #433758, SA28994,
STR#2656).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 22 2008 Tim Waugh <twaugh(a)redhat.com> 1:1.2.12-9
- Prevent double-free when a browsed class has the same name as a printer
or vice versa (CVE-2008-0882, bug #433758, STR #2656).
* Mon Nov 12 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.12-8
- Fixed CVE-2007-4045 patch; has no effect with shipped packages since they
are linked with gnutls.
- LSPP fixes (cupsdSetString/ClearString).
* Wed Nov 7 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.12-7
- Applied patch to fix CVE-2007-4045 (bug #250161).
- Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
CVE-2007-5393 (bug #345101).
* Thu Nov 1 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.12-6
- Applied patch to fix CVE-2007-4351 (STR #2561, bug #361661).
* Wed Oct 10 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.12-5
- Use ppdev for parallel port Device ID retrieval (bug #311671).
* Thu Aug 9 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.12-4
- Applied patch to fix CVE-2007-3387 (bug #251518).
* Tue Jul 31 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.12-3
- Better buildroot tag.
- Moved LSPP access check and security attributes check in add_job() to
before allocation of the job structure (bug #231522).
* Mon Jul 23 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.12-2
- Use kernel support for USB paper-out detection, when available
(bug #249213).
* Fri Jul 13 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.12-1
- 1.2.12. No longer need adminutil or str2408 patches.
* Wed Jul 4 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.11-3
- Better paper-out detection patch still (bug #246222).
* Fri Jun 29 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.11-2
- Applied patch to fix group handling in PPDs (bug #186231, STR #2408).
* Wed Jun 27 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.11-1
- Fixed permissions on classes.conf in the file manifest (bug #245748).
- 1.2.11.
* Tue Jun 12 2007 Tim Waugh <twaugh(a)redhat.com>
- Make the initscript use start priority 56 (bug #213828).
* Mon Jun 11 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.10-12
- Better paper-out detection patch (bug #241589).
* Mon May 21 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.10-11
- Fixed _cupsAdminSetServerSettings() sharing/shared handling (bug #238057).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #433758 - CVE-2008-0882 cups: double free vulnerability in process_browse_data()
https://bugzilla.redhat.com/show_bug.cgi?id=433758
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cups' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 7 Update: vdrift-data-20071226-2.fc7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1974
2008-02-25 22:15:04
--------------------------------------------------------------------------------
Name : vdrift-data
Product : Fedora 7
Version : 20071226
Release : 2.fc7
URL : http://vdrift.net
Summary : VDrift data set
Description :
VDrift is a cross-platform, open source driving simulation made with drift
racing in mind. It's powered by the excellent Vamos physics engine. It is
released under the GNU General Public License (GPL) v2. It is currently
available for Linux, FreeBSD, Mac OS X and Windows (Cygwin).
This package provides the data set.
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update vdrift-data' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
[SECURITY] Fedora 7 Update: kvm-36-8.fc7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1973
2008-02-25 22:15:01
--------------------------------------------------------------------------------
Name : kvm
Product : Fedora 7
Version : 36
Release : 8.fc7
URL : http://kvm.sf.net
Summary : Kernel-based Virtual Machine
Description :
KVM (for Kernel-based Virtual Machine) is a full virtualization solution
for Linux on x86 hardware.
Using KVM, one can run multiple virtual machines running unmodified Linux
or Windows images. Each virtual machine has private virtualized hardware:
a network card, disk, graphics adapter, etc.
--------------------------------------------------------------------------------
Update Information:
Ian Jackson discovered that accesses beyond end of qemu emulated disk devices
can result in accesses to emulator's virtual memory space accesses and thus can
allow user with sufficient privilege in guest (root, as this would need
modification to kernel's driver) to break out of VM. http://marc.info/?l
=debian-security&m=120343592917055&w=2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 23 2008 Daniel P. Berrange <berrange(a)redhat.com> - 36-8.fc7
- Fix block device extents check (rhbz #433560)
* Mon Oct 15 2007 Daniel P. Berrange <berrange(a)redhat.com> - 36-7
- Fixed PXE boot when KVM is enabled (rhbz #331191)
* Wed Sep 26 2007 Daniel P. Berrange <berrange(a)redhat.com> - 36-6
- Fixed rtl8139 checksum calculation for Vista (rhbz #308201)
* Mon Sep 24 2007 Jeremy Katz <katzj(a)redhat.com> - 36-5
- fix build on x86_64
* Mon Sep 24 2007 Jeremy Katz <katzj(a)redhat.com> - 36-3
- add support for selecting boot device at runtime
* Tue Sep 4 2007 Jeremy Katz <katzj(a)redhat.com> - 36-2
- rebase vnc auth patch
* Tue Sep 4 2007 Jeremy Katz <katzj(a)redhat.com> - 36-1
- update to kvm-36
* Mon Aug 27 2007 Daniel P. Berrange <berrange(a)redhat.com> - 35-3
- Added patch for VNC password auth and TLS+x509 cert auth
* Mon Aug 20 2007 Jeremy Katz <katzj(a)redhat.com> - 35-2
- add fix for ATAPI from upstream qemu
* Mon Aug 20 2007 Jeremy Katz <katzj(a)redhat.com> - 35-1
- update to kvm-35
- patch to use -Wl,--build-id so that we get debuginfo
* Thu Jul 19 2007 Jeremy Katz <katzj(a)redhat.com> - 31-1
- update to kvm-31
* Mon Jul 16 2007 Jeremy Katz <katzj(a)redhat.com> - 28-2
- add patch from danpb to fix mac addrs of multiple 8139 nics (#247641)
* Wed Jun 13 2007 Jeremy Katz <katzj(a)redhat.com> - 28-1
- update to kvm-28
* Sat Jun 9 2007 Jeremy Katz <katzj(a)redhat.com> - 27-1
- update to kvm-27
* Tue May 29 2007 Jeremy Katz <katzj(a)redhat.com> - 26-1
- update to kvm-26
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #433560 - Qemu insufficient block device address range checking
https://bugzilla.redhat.com/show_bug.cgi?id=433560
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kvm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 8 Update: vdrift-20071226-3.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1968
2008-02-25 22:14:36
--------------------------------------------------------------------------------
Name : vdrift
Product : Fedora 8
Version : 20071226
Release : 3.fc8
URL : http://vdrift.net
Summary : VDrift is a cross-platform, open source driving/drift racing simulation
Description :
VDrift is a cross-platform, open source driving simulation made with drift
racing in mind. It's powered by the excellent Vamos physics engine. It is
released under the GNU General Public License (GPL) v2. It is currently
available for Linux, FreeBSD, Mac OS X and Windows (Cygwin).
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update vdrift' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months
Fedora 8 Update: php-pecl-xdebug-2.0.2-3.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1964
2008-02-25 22:14:20
--------------------------------------------------------------------------------
Name : php-pecl-xdebug
Product : Fedora 8
Version : 2.0.2
Release : 3.fc8
URL : http://pecl.php.net/package/xdebug
Summary : PECL package for debugging PHP scripts
Description :
The Xdebug extension helps you debugging your script by providing a lot
of valuable debug information.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 22 2008 Christopher Stone <chris.stone(a)gmail.com> 2.0.2-3
- %define %pecl_name to properly register package
- Install xml package description
- Add debugclient
- Many thanks to Edward Rudd (eddie(a)omegaware.com) (bz #432681)
* Wed Feb 20 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 2.0.2-2
- Autorebuild for GCC 4.3
* Sun Nov 25 2007 Christopher Stone <chris.stone(a)gmail.com> 2.0.2-1
- Upstream sync
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #432681 - package does not include "debugclient" binary, nor register itself with pecl
https://bugzilla.redhat.com/show_bug.cgi?id=432681
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-pecl-xdebug' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
16 years, 3 months