[SECURITY] Fedora 17 Update: ssmtp-2.61-19.fc17
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-16163
2012-10-15 22:48:14
--------------------------------------------------------------------------------
Name : ssmtp
Product : Fedora 17
Version : 2.61
Release : 19.fc17
URL : http://packages.debian.org/stable/mail/ssmtp
Summary : Extremely simple MTA to get mail off the system to a Mailhub
Description :
A secure, effective and simple way of getting mail off a system to your mail
hub. It contains no suid-binaries or other dangerous things - no mail spool
to poke around in, and no daemons running in the background. Mail is simply
forwarded to the configured mailhost. Extremely easy configuration.
WARNING: the above is all it does; it does not receive mail nor manage queues.
That belongs on a mail hub with a system administrator.
--------------------------------------------------------------------------------
Update Information:
This version adds to sSMTP the ability to validate the TLS servers it connects to.
It also enables use of separate files for client key and certificate files.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 14 2012 Manuel "lonely wolf" Wolfshant <wolfy(a)fedoraproject.org> - 2.61-19
- Optional separation of TLS client key and certificate files
- Add patch enabling verification of TLS server ( #864894 )
- Correct %description and the source in order to reflect that sSMTP expands aliases
which are read from a plain text file
* Sat Jun 30 2012 Manuel "lonely wolf" Wolfshant <wolfy(a)fedoraproject.org> - 2.61-18
- Apply patch to fix addition of garbage at end of attachments
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #864894 - ssmtp: Does not validate server certificates when using TLS connection
https://bugzilla.redhat.com/show_bug.cgi?id=864894
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ssmtp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 6 months
Fedora 17 Update: yum-langpacks-0.3.0-3.fc17
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-14796
2012-09-26 08:10:38
--------------------------------------------------------------------------------
Name : yum-langpacks
Product : Fedora 17
Version : 0.3.0
Release : 3.fc17
URL : https://fedoraproject.org/wiki/Features/YumLangpackPlugin
Summary : Langpacks plugin for yum
Description :
Yum-langpacks is a plugin for YUM that looks for langpacks for your native
language for packages you install.
--------------------------------------------------------------------------------
Update Information:
This fixes a traceback on yum groupremove.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Bill Nottingham <notting(a)redhat.com> - 0.3.1-3
- fix traceback on groupremove (#858175)
* Mon Aug 13 2012 Bill Nottingham <notting(a)redhat.com> - 0.3.1-1
- fix groupinstall of langonly groups (#840885)
- fix plugin type for use in yumex, elsewhere (#847502)
* Wed Aug 8 2012 Bill Nottingham <notting(a)redhat.com> - 0.3.0-1
- add langinstall/langremove/langlist commands (#840885)
* Thu Jun 21 2012 Bill Nottingham <notting(a)redhat.com> - 0.2.5-1
- don't exit on XML errors (#825811, #830739, <zpavlas(a)redhat.com>)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #858175 - calltrace during yum groupremove
https://bugzilla.redhat.com/show_bug.cgi?id=858175
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update yum-langpacks' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 6 months
Fedora 17 Update: ht-alegreya-fonts-1.004-1.fc17
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-16767
2012-10-24 02:20:13
--------------------------------------------------------------------------------
Name : ht-alegreya-fonts
Product : Fedora 17
Version : 1.004
Release : 1.fc17
URL : http://www.huertatipografica.com.ar/tipografias/alegreya/ejemplos.html
Summary : A Serif typeface originally intended for literature
Description :
Alegreya was chosen as one of 53 "Fonts of the Decade" at the ATypI Letter2
competition in September 2011, and one of the top 14 text type systems. It
was also selected in the 2nd Bienal Iberoamericana de Diseño, competition
held in Madrid in 2010. Alegreya is a typeface originally intended for
literature. Among its crowning characteristics, it conveys a dynamic and
varied rhythm which facilitates the reading of long texts. Also, it
provides freshness to the page while referring to the calligraphic letter,
not as a literal interpretation, but rather in a contemporary typographic
language. The italic has just as much care and attention to detail in the
design as the roman. The bold weights are strong, and the Black weights are
really experimental for the genre. Not only does Alegreya provide great
performance, but also achieves a strong and harmonious text by means of
elements designed in an atmosphere of diversity.
--------------------------------------------------------------------------------
Update Information:
New package: ht-alegreya-fonts
Alegreya was chosen as one of 53 "Fonts of the Decade" at the ATypI Letter2 competition in September 2011, and one of the top 14 text type systems. It was also selected in the 2nd Bienal Iberoamericana de Diseño, competition held in Madrid in 2010.
Alegreya is a typeface originally intended for literature. Among its crowning characteristics, it conveys a dynamic and varied rhythm which facilitates the reading of long texts. Also, it provides freshness to the page while referring to the calligraphic letter, not as a literal interpretation, but rather in a contemporary typographic language.
The italic has just as much care and attention to detail in the design as the roman. The bold weights are strong, and the Black weights are really experimental for the genre. There is also a Small Caps sister family.
Not only does Alegreya provide great performance, but also achieves a strong and harmonious text by means of elements designed in an atmosphere of diversity.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #857487 - Review Request: ht-alegreya-fonts - A Serif typeface originally intended for literature
https://bugzilla.redhat.com/show_bug.cgi?id=857487
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ht-alegreya-fonts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 6 months
Fedora 17 Update: mate-media-1.4.0-3.fc17
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-16768
2012-10-24 02:20:16
--------------------------------------------------------------------------------
Name : mate-media
Product : Fedora 17
Version : 1.4.0
Release : 3.fc17
URL : http://mate-desktop.org
Summary : MATE media programs
Description :
This package contains a few media utilities for the MATE desktop,
including a volume control and a configuration utility for audio profiles.
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #869026 - Review Request: mate-media - MATE media programs
https://bugzilla.redhat.com/show_bug.cgi?id=869026
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mate-media' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 6 months
Fedora 16 Update: perl-5.14.3-202.fc16
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-16251
2012-10-17 00:01:39
--------------------------------------------------------------------------------
Name : perl
Product : Fedora 16
Version : 5.14.3
Release : 202.fc16
URL : http://www.perl.org/
Summary : Practical Extraction and Report Language
Description :
Perl is a high-level programming language with roots in C, sed, awk and shell
scripting. Perl is good at handling processes and files, and is especially
good at handling text. Perl's hallmarks are practicality and efficiency.
While it is used to do a lot of different things, Perl's most common
applications are system administration utilities and web programming. A large
proportion of the CGI scripts on the web are written in Perl. You need the
perl package installed on your system so that your system can handle Perl
scripts.
Install this package if you want to program in Perl or enable your system to
handle Perl scripts.
--------------------------------------------------------------------------------
Update Information:
Update to Perl 5.14.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 16 2012 Jitka Plesnikova <jplesnik(a)redhat.com> - 4:5.14.3-202
- 5.14.3 bump (see
https://metacpan.org/module/DOM/perl-5.14.3/pod/perldelta.pod for release
notes).
* Fri Sep 14 2012 Petr Pisar <ppisar(a)redhat.com> - 4:5.14.2-201
- Override the Pod::Simple::parse_file to set output to STDOUT by default
(bug #826872)
* Tue Sep 11 2012 Petr Pisar <ppisar(a)redhat.com> - 4:5.14.2-200
- Clear $@ before `do' I/O error (bug #834226)
- Do not truncate syscall() return value to 32 bits (bug #838551)
- Match starting byte in non-UTF-8 mode (bug #801739)
- Free hash entries before values on delete (bug #771303)
* Wed Sep 5 2012 Petr Pisar <ppisar(a)redhat.com> - 4:5.14.2-199
- Remove perl-devel dependency from perl-Test-Harness and perl-Test-Simple
- Move App::Cpan from perl-Test-Harness to perl-CPAN (bug #854577)
* Tue May 29 2012 Jitka Plesnikova <jplesnik(a)redhat.com> - 4:5.14.2-198
- Fix find2perl to translate ? glob properly (bug #825701)
* Thu Feb 23 2012 Paul Howarth <paul(a)city-fan.org> - 4:5.14.2-197
- Add %exclude entries for Socket sub-package so as not to duplicate its
files in the main perl package
* Thu Feb 23 2012 Paul Howarth <paul(a)city-fan.org> - 4:5.14.2-196
- Move %files list for Socket to correct place so as retain proper %exclude
entries for main perl package (#549306)
* Mon Feb 6 2012 Petr Pisar <ppisar(a)redhat.com> - 4:5.14.2-195
- Fix searching for Unicode::Collate::Locale data (bug #756118)
- Run safe signal handlers before returning from sigsuspend() and pause()
(bug #771228)
- Correct perl-Scalar-List-Utils files list
- Stop !$^V from leaking (bug #787613)
* Thu Feb 2 2012 Petr Šabata <contyk(a)redhat.com> - 4:5.14.2-194
- Sub-package Socket for IO::Socket::IP
* Tue Dec 20 2011 Petr Pisar <ppisar(a)redhat.com> - 4:5.14.2-193
- Fix interrupted reading. Thanks to Šimon Lukašík for reporting this issue
and thanks to Marcela Mašláňová for finding fix. (bug #767931)
* Wed Dec 14 2011 Petr Pisar <ppisar(a)redhat.com> - 4:5.14.2-192
- Fix leak with non-matching named captures (bug #767597)
* Fri Nov 18 2011 Petr Pisar <ppisar(a)redhat.com> - 4:5.14.2-191
- Increase epoch of perl-Module-CoreList to overcome version regression in
upstream (bug #754641)
* Thu Nov 3 2011 Petr Pisar <ppisar(a)redhat.com> - 4:5.14.2-190
- Provide perl(DB) by perl
* Wed Nov 2 2011 Petr Pisar <ppisar(a)redhat.com> - 4:5.14.2-189
- Correct perl-CGI list of Provides
- Make tests optional
- Correct perl-ExtUtils-ParseXS Provides
- Correct perl-Locale-Codes Provides
- Correct perl-Module-CoreList version
- Automate perl-Test-Simple-tests Requires version
- 5.14.2 bump (see
https://metacpan.org/module/FLORA/perl-5.14.2/pod/perldelta.pod for release
notes).
- Fixes panics when processing regular expression with \b class and /aa
modifier (bug #731062)
- Fixes CVE-2011-2728 (File::Glob bsd_glob() crash with certain glob flags)
(bug #742987)
- Filter false perl(DynaLoader) provide from perl-ExtUtils-MakeMaker
(bug #736714)
- Change Perl_repeatcpy() prototype to allow repeat count above 2^31
(bug #720610)
- Do not own site directories located in /usr/local (bug #732799)
- cleaned spec (thanks to Grigory Batalov)
- Module-Metadata sub-package contained perl_privlib instead of privlib
- %files parent section was repeated twice
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 6 months
Fedora 16 Update: wicd-1.7.0-15.fc16
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-16757
2012-10-24 02:19:34
--------------------------------------------------------------------------------
Name : wicd
Product : Fedora 16
Version : 1.7.0
Release : 15.fc16
URL : http://wicd.sourceforge.net/
Summary : Wireless and wired network connection manager
Description :
Wicd is designed to give the user as much control over behavior of network
connections as possible. Every network, both wired and wireless, has its
own profile with its own configuration options and connection behavior.
Wicd will try to automatically connect only to networks the user specifies
it should try, with a preference first to a wired network, then to wireless.
This package provides the architecture-dependent components of wicd.
--------------------------------------------------------------------------------
Update Information:
This is an update to the fix for CVE-2012-2095, which first appeared in wicd-1.7.0-13.fc16.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 23 2012 David Cantrell <dcantrell(a)redhat.com> - 1.7.0-15
- Rebuild (#820166)
* Thu Aug 2 2012 David Cantrell <dcantrell(a)redhat.com> - 1.7.0-14
- Fix CVE-2012-2095 property handling (#820166)
* Fri Apr 13 2012 David Cantrell <dcantrell(a)redhat.com> - 1.7.0-13
- Fix CVE-2012-2095 (#811763)
* Mon Mar 26 2012 David Cantrell <dcantrell(a)redhat.com> - 1.7.0-12
- Ensure wpath.etc is set to /etc/wicd, not /etc/dhcp (#754412)
- Initialize child_pid to None in wicd-daemon.py (#798692)
- Make wicd-gtk subpackage require notify-python (#748258)
- Work around no-op problem in DaemonClosing calls (#740317)
- dhclient.conf.template is now in /etc/wicd, correct %files (#754412)
* Wed Mar 21 2012 David Cantrell <dcantrell(a)redhat.com> - 1.7.0-11
- Fix usage of is_mouse_event() in wicd-curses (#800617)
- Make wicd-common require pygobject2 (#799537)
* Fri Jan 27 2012 David Cantrell <dcantrell(a)redhat.com> - 1.7.0-10
- Fix CVS-2012-0813 (#785147)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #820166 - Fix for CVE-2012-2095 invalidates all templates that use 'ca_cert', 'password' and other fields.
https://bugzilla.redhat.com/show_bug.cgi?id=820166
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update wicd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 6 months
Fedora 16 Update: ccrypt-1.10-1.fc16
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-16595
2012-10-22 01:16:59
--------------------------------------------------------------------------------
Name : ccrypt
Product : Fedora 16
Version : 1.10
Release : 1.fc16
URL : http://ccrypt.sourceforge.net/
Summary : Secure encryption and decryption of files and streams
Description :
ccrypt is a utility for encrypting and decrypting files and streams.
It was designed as a replacement for the standard unix crypt utility,
which is notorious for using a very weak encryption algorithm.
--------------------------------------------------------------------------------
Update Information:
* Sun Oct 21 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.10-1
- Updated to new upstream version 1.10
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 21 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.10-1
- Updated to new upstream version 1.10
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.9-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.9-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Sat Nov 26 2011 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.9-3
- Rebuilt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #868607 - ccrypt 1.10 available
https://bugzilla.redhat.com/show_bug.cgi?id=868607
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ccrypt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 6 months
Fedora 17 Update: ccrypt-1.10-1.fc17
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-16597
2012-10-22 01:17:05
--------------------------------------------------------------------------------
Name : ccrypt
Product : Fedora 17
Version : 1.10
Release : 1.fc17
URL : http://ccrypt.sourceforge.net/
Summary : Secure encryption and decryption of files and streams
Description :
ccrypt is a utility for encrypting and decrypting files and streams.
It was designed as a replacement for the standard unix crypt utility,
which is notorious for using a very weak encryption algorithm.
--------------------------------------------------------------------------------
Update Information:
* Sun Oct 21 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.10-1
- Updated to new upstream version 1.10
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 21 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.10-1
- Updated to new upstream version 1.10
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.9-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #868607 - ccrypt 1.10 available
https://bugzilla.redhat.com/show_bug.cgi?id=868607
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ccrypt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 6 months
Fedora 17 Update: android-opengl-api-1.1-3.fc17
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-16770
2012-10-24 02:20:23
--------------------------------------------------------------------------------
Name : android-opengl-api
Product : Fedora 17
Version : 1.1
Release : 3.fc17
URL : http://developer.android.com/guide/topics/graphics/opengl.html
Summary : Google Android Java ME Library (Khronos)
Description :
The Android implementation of Khronos OpenGL Spec
for the Google Android SDK.
--------------------------------------------------------------------------------
Update Information:
Initial import.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #837446 - Review Request: android-opengl-api - Google Android Java ME Library (Khronos)
https://bugzilla.redhat.com/show_bug.cgi?id=837446
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update android-opengl-api' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 6 months
Fedora 16 Update: ht-alegreya-fonts-1.004-1.fc16
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-16771
2012-10-24 02:20:28
--------------------------------------------------------------------------------
Name : ht-alegreya-fonts
Product : Fedora 16
Version : 1.004
Release : 1.fc16
URL : http://www.huertatipografica.com.ar/tipografias/alegreya/ejemplos.html
Summary : A Serif typeface originally intended for literature
Description :
Alegreya was chosen as one of 53 "Fonts of the Decade" at the ATypI Letter2
competition in September 2011, and one of the top 14 text type systems. It
was also selected in the 2nd Bienal Iberoamericana de Diseño, competition
held in Madrid in 2010. Alegreya is a typeface originally intended for
literature. Among its crowning characteristics, it conveys a dynamic and
varied rhythm which facilitates the reading of long texts. Also, it
provides freshness to the page while referring to the calligraphic letter,
not as a literal interpretation, but rather in a contemporary typographic
language. The italic has just as much care and attention to detail in the
design as the roman. The bold weights are strong, and the Black weights are
really experimental for the genre. Not only does Alegreya provide great
performance, but also achieves a strong and harmonious text by means of
elements designed in an atmosphere of diversity.
--------------------------------------------------------------------------------
Update Information:
New package: ht-alegreya-fonts
Alegreya was chosen as one of 53 "Fonts of the Decade" at the ATypI Letter2 competition in September 2011, and one of the top 14 text type systems. It was also selected in the 2nd Bienal Iberoamericana de Diseño, competition held in Madrid in 2010.
Alegreya is a typeface originally intended for literature. Among its crowning characteristics, it conveys a dynamic and varied rhythm which facilitates the reading of long texts. Also, it provides freshness to the page while referring to the calligraphic letter, not as a literal interpretation, but rather in a contemporary typographic language.
The italic has just as much care and attention to detail in the design as the roman. The bold weights are strong, and the Black weights are really experimental for the genre. There is also a Small Caps sister family.
Not only does Alegreya provide great performance, but also achieves a strong and harmonious text by means of elements designed in an atmosphere of diversity.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #857487 - Review Request: ht-alegreya-fonts - A Serif typeface originally intended for literature
https://bugzilla.redhat.com/show_bug.cgi?id=857487
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ht-alegreya-fonts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
11 years, 6 months