Fedora 20 Update: perl-Hash-MoreUtils-0.05-1.fc20
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23830
2013-12-22 04:26:34
--------------------------------------------------------------------------------
Name : perl-Hash-MoreUtils
Product : Fedora 20
Version : 0.05
Release : 1.fc20
URL : http://search.cpan.org/dist/Hash-MoreUtils/
Summary : Provide the stuff missing in Hash::Util
Description :
Similar to List::MoreUtils, Hash::MoreUtils contains trivial but commonly-
used functionality for hashes.
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 21 2013 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 0.05-1
- Upstream update.
- Reduce unnecessary high requirements on Module::Build
(Add Hash-MoreUtils-0.05.diff).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Hash-MoreUtils' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 20 Update: jacoco-0.6.4-1.fc20
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23652
2013-12-20 00:29:40
--------------------------------------------------------------------------------
Name : jacoco
Product : Fedora 20
Version : 0.6.4
Release : 1.fc20
URL : http://www.eclemma.org/jacoco/
Summary : Java Code Coverage for Eclipse
Description :
JaCoCo is a free code coverage library for Java,
which has been created by the EclEmma team based on the lessons learned
from using and integration existing libraries over the last five years.
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.4 upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2013 Alexander Kurtakov <akurtako(a)redhat.com> 0.6.4-1
- Update to 0.6.4 upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1044412 - jacoco-0.6.4.201312101107 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1044412
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update jacoco' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 18 Update: libfm-1.1.4-1.fc18
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23297
2013-12-13 03:53:45
--------------------------------------------------------------------------------
Name : libfm
Product : Fedora 18
Version : 1.1.4
Release : 1.fc18
URL : http://pcmanfm.sourceforge.net/
Summary : GIO-based library for file manager-like programs
Description :
LibFM is a GIO-based library used to develop file manager-like programs. It is
developed as the core of next generation PCManFM and takes care of all file-
related operations such as copy & paste, drag & drop, file associations or
thumbnails support. By utilizing glib/gio and gvfs, libfm can access remote
file systems supported by gvfs.
This package contains the generic non-gui functions of libfm.
--------------------------------------------------------------------------------
Update Information:
New version 1.1.4 is released.
New version 1.1.3 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 10 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.1.4-1
- 1.1.4
* Tue Dec 3 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.1.3-1
- 1.1.3
* Mon Nov 11 2013 Christoph Wickert <wickert(a)kolabsys.com> - 1.1.2.2-3
- Rebuild for new menu-cache 0.5.x
* Fri Aug 30 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.1.2.2-2
- Workaround for column collapse issue when double-clicking separator
* Wed Aug 21 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.1.2.2-1
- 1.1.2.2
* Wed Aug 21 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.1.2.1-1
- 1.1.2.1
* Thu Aug 15 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.1.2-1
- 1.1.2
* Sun Aug 11 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.1.1-2
- Regenerate desktop file from .in file using intltool
* Thu Aug 8 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.1.1-1
- 1.1.1
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.1.0-2.2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.1.0-2.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sun Nov 25 2012 Christoph Wickert <cwickert(a)fedoraproject.org> - 1.1.0-2
- Rebuild against menu-cache 0.4.x
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libfm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 19 Update: sugar-turtleart-194-1.fc19
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23576
2013-12-19 05:39:50
--------------------------------------------------------------------------------
Name : sugar-turtleart
Product : Fedora 19
Version : 194
Release : 1.fc19
URL : http://sugarlabs.org/go/Activities/Turtle_Art
Summary : Turtle Art activity for sugar
Description :
The Turtle Art activity is an Logo-inspired graphical "turtle" that
draws colorful art based on Scratch-like snap-together visual
programming elements.
--------------------------------------------------------------------------------
Update Information:
ENHANCEMENTS:
* Save/restore palette settings in GConf
* Add confirmation when emptying trash in GNONE version (Alan Aguiar)
* Add load/save plugin dialog to GNOME version (Daniel Francis)
* Add busy cursor when projects are being prepared to run
* Reworked Duplicate Blocks warning graphic to reflect current block shapes
* Refactor until block shape to better reflect flow logic
* Enabled load file to heap/save heap to file to use the Sugar journal
* New translations
BUG FIX:
* Fixed shade block dock settings (Alan Aguiar)
* Fixed bug in empty trash (Alan Aguiar)
* Set active turtle after 'clean' in exported Python code
* Execute 'until' body once before entering loop in exported Python code
* Fixed problem with running_blocks flag not being cleared (cause of spurious
"hit stop button" messages.
* Fixed problem with errant text entry widget on run.
* Fixed problem with text wrap of SVG output #1856 (Jorge Alberto Gómez López)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 16 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 194-1
- release 194
* Tue Nov 12 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 193-1
- release 193
* Sun Oct 20 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 192-1
- release 192
* Tue Oct 8 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 191-1
- release 191
* Thu Aug 29 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 189-1
- release 189
* Mon Aug 26 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 187-1
- release 187
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 182-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Mon Jun 24 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 182-1
- release 182
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sugar-turtleart' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 19 Update: ngrep-1.45-15.git20131221.16ba99a.fc19
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23809
2013-12-22 04:25:49
--------------------------------------------------------------------------------
Name : ngrep
Product : Fedora 19
Version : 1.45
Release : 15.git20131221.16ba99a.fc19
URL : http://ngrep.sourceforge.net
Summary : Network layer grep tool
Description :
ngrep strives to provide most of GNU grep's common features, applying them
to the network layer. ngrep is a pcap-aware tool that will allow you to
specify extended regular or hexadecimal expressions to match against data
payloads of packets. It currently recognizes TCP, UDP, ICMP, IGMP and Raw
protocols across Ethernet, PPP, SLIP, FDDI, Token Ring, 802.11 and null
interfaces, and understands bpf filter logic in the same fashion as more
common packet sniffing tools, such as tcpdump and snoop.
--------------------------------------------------------------------------------
Update Information:
- Checkout from official repo(BZ#1044630).
- Remove patch for system pcre as configure script can handle it now.
- Add format security check fix due to dumb GCC.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 21 2013 Christopher Meng <rpm(a)cicku.me> - 1.45-15.git20131221.16ba99a
- Checkout from official repo(BZ#1044630).
- Remove patch for system pcre as configure script can handle it now.
- Add format security check fix due to dumb GCC.
* Mon Aug 26 2013 Christopher Meng <rpm(a)cicku.me> - 1.45-14
- SPEC Cleanup.
- AArch64 support(BZ#926232).
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.45-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1044630 - ngrep completely broken with latest libpcap 1.5 snapshot
https://bugzilla.redhat.com/show_bug.cgi?id=1044630
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ngrep' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 19 Update: tomcat-7.0.47-1.fc19
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-20743
2013-11-06 06:18:49
--------------------------------------------------------------------------------
Name : tomcat
Product : Fedora 19
Version : 7.0.47
Release : 1.fc19
URL : http://tomcat.apache.org/
Summary : Apache Servlet/JSP Engine, RI for Servlet 3.0/JSP 2.2 API
Description :
Tomcat is the servlet container that is used in the official Reference
Implementation for the Java Servlet and JavaServer Pages technologies.
The Java Servlet and JavaServer Pages specifications are developed by
Sun under the Java Community Process.
Tomcat is developed in an open and participatory environment and
released under the Apache Software License version 2.0. Tomcat is intended
to be a collaboration of the best-of-breed developers from around the world.
--------------------------------------------------------------------------------
Update Information:
Updated to 7.0.47
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 3 2013 Ivan Afonichev <ivan.afonichev(a)gmail.com> 0:7.0.47-1
- Updated to 7.0.47
* Thu Jul 11 2013 Dmitry Tikhonov <squall.sama(a)gmail.com> 0:7.0.42-1
- Updated to 7.0.42
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1023427 - tomcat-7.0.47 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1023427
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update tomcat' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
[SECURITY] Fedora 18 Update: gnupg-1.4.16-2.fc18
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23678
2013-12-20 00:30:39
--------------------------------------------------------------------------------
Name : gnupg
Product : Fedora 18
Version : 1.4.16
Release : 2.fc18
URL : http://www.gnupg.org/
Summary : A GNU utility for secure communication and data storage
Description :
GnuPG (GNU Privacy Guard) is a GNU utility for encrypting data and
creating digital signatures. GnuPG has advanced key management
capabilities and is compliant with the proposed OpenPGP Internet
standard described in RFC2440. Since GnuPG doesn't use any patented
algorithm, it is not compatible with any version of PGP2 (PGP2.x uses
only IDEA for symmetric-key encryption, which is patented worldwide).
--------------------------------------------------------------------------------
Update Information:
What's New
===========
* Fixed the RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis attack as described by Genkin, Shamir, and Tromer.
See <http://www.cs.tau.ac.il/~tromer/acoustic/>.[CVE-2013-4576]
* Put only the major version number by default into armored output.
* Do not create a trustdb file if --trust-model=always is used.
* Print the keyid for key packets with --list-packets.
* Changed modular exponentiation algorithm to recover from a small performance loss due to a change in 1.4.14.
Impact of the security problem
==============================
CVE-2013-4576 has been assigned to this security bug.
The paper describes two attacks.The first attack allows to distinguish keys: An attacker is able to notice which key is currently used for decryption.This is in general not a problem but may be used to reveal the information that a message, encrypted to a commonly not used key, has been received by the targeted machine.We do not have a software solution to mitigate this attack.
The second attack is more serious. It is an adaptive chosen ciphertext attack to reveal the private key. A possible scenario is that the attacker places a sensor (for example a standard smartphone) in the vicinity of the targeted machine. That machine is assumed to do unattended RSA decryption of received mails, for example by using a mail client which speeds up browsing by opportunistically decrypting mails expected to be read soon.While listening to the acoustic emanations of the targeted machine, the smartphone will send new encrypted messages to that machine and re-construct the private key bit by bit.A 4096 bit RSA key used on a laptop can be revealed within an hour.
GnuPG 1.4.16 avoids this attack by employing RSA blinding during decryption.GnuPG 2.x and current Gpg4win versions make use of Libgcrypt which employs RSA blinding anyway and are thus not vulnerable.
For the highly interesting research on acoustic cryptanalysis and the details of the attack see http://www.cs.tau.ac.il/~tromer/acoustic/ .
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 18 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.4.16-2
- New upstream v1.4.16
fixes for CVE-2013-4576
* Mon Oct 7 2013 Brian C. Lane <bcl(a)redhat.com> 1.4.15-1
- New upstream v1.4.15
fixes for CVE-2013-4402 (#1015967)
fixes for CVE-2013-4351 (#1010140)
* Mon Jul 29 2013 Brian C. Lane <bcl(a)redhat.com> 1.4.14-1
- New upstream v1.4.14
fixes for CVE-2013-4242 (#988592)
includes fix for build on big-endian arches
* Sat Jan 26 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.4.13-3
- Add -vif to autoreconf to fix build failure
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1044402 - gnupg-1.4.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1044402
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gnupg' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 20 Update: proftpd-1.3.4d-5.fc20
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23769
2013-12-22 04:24:28
--------------------------------------------------------------------------------
Name : proftpd
Product : Fedora 20
Version : 1.3.4d
Release : 5.fc20
URL : http://www.proftpd.org/
Summary : Flexible, stable and highly-configurable FTP server
Description :
ProFTPD is an enhanced FTP server with a focus toward simplicity, security,
and ease of configuration. It features a very Apache-like configuration
syntax, and a highly customizable server infrastructure, including support for
multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory
visibility.
This package defaults to the standalone behavior of ProFTPD, but all the
needed scripts to have it run by xinetd instead are included.
--------------------------------------------------------------------------------
Update Information:
This update adds 3072-bit, 7680-bit and 8192-bit Diffie-Hellman group parameters, needed for support of some ciphers such as aes-256-ctr.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2013 Paul Howarth <paul(a)city-fan.org> 1.3.4d-5
- Fix support for 8192-bit DH parameters (#1044586)
- Add 3072-bit and 7680-bit DH parameters (upstream bug 4002)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1044586 - proftpd does not ship 8192 bit dh parameter
https://bugzilla.redhat.com/show_bug.cgi?id=1044586
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update proftpd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 19 Update: proftpd-1.3.4d-5.fc19
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23826
2013-12-22 04:26:28
--------------------------------------------------------------------------------
Name : proftpd
Product : Fedora 19
Version : 1.3.4d
Release : 5.fc19
URL : http://www.proftpd.org/
Summary : Flexible, stable and highly-configurable FTP server
Description :
ProFTPD is an enhanced FTP server with a focus toward simplicity, security,
and ease of configuration. It features a very Apache-like configuration
syntax, and a highly customizable server infrastructure, including support for
multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory
visibility.
This package defaults to the standalone behavior of ProFTPD, but all the
needed scripts to have it run by xinetd instead are included.
--------------------------------------------------------------------------------
Update Information:
This update adds 3072-bit, 7680-bit and 8192-bit Diffie-Hellman group parameters, needed for support of some ciphers such as aes-256-ctr.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2013 Paul Howarth <paul(a)city-fan.org> 1.3.4d-5
- Fix support for 8192-bit DH parameters (#1044586)
- Add 3072-bit and 7680-bit DH parameters (upstream bug 4002)
* Sat Sep 14 2013 Paul Howarth <paul(a)city-fan.org> 1.3.4d-4
- Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint authentication
(#1007678, upstream bug #3973, CVE-2013-4359)
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> 1.3.4d-2.2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Jul 17 2013 Petr Pisar <ppisar(a)redhat.com> 1.3.4d-2.1
- Perl 5.18 rebuild
* Mon Jun 17 2013 Paul Howarth <paul(a)city-fan.org> 1.3.4d-2
- Fix spurious log messages at session close (upstream bug #3945)
* Sat Jun 15 2013 Paul Howarth <paul(a)city-fan.org> 1.3.4d-1
- Update to 1.3.4d
- Fixed broken build when using --disable-ipv6 configure option
- Fixed mod_sql "SQLAuthType Backend" MySQL issues
- Various other bugs fixed - see NEWS for details
- Drop upstreamed patch for PAM session closing
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1044586 - proftpd does not ship 8192 bit dh parameter
https://bugzilla.redhat.com/show_bug.cgi?id=1044586
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update proftpd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 20 Update: libfm-1.1.4-1.fc20
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23243
2013-12-12 16:13:38
--------------------------------------------------------------------------------
Name : libfm
Product : Fedora 20
Version : 1.1.4
Release : 1.fc20
URL : http://pcmanfm.sourceforge.net/
Summary : GIO-based library for file manager-like programs
Description :
LibFM is a GIO-based library used to develop file manager-like programs. It is
developed as the core of next generation PCManFM and takes care of all file-
related operations such as copy & paste, drag & drop, file associations or
thumbnails support. By utilizing glib/gio and gvfs, libfm can access remote
file systems supported by gvfs.
This package contains the generic non-gui functions of libfm.
--------------------------------------------------------------------------------
Update Information:
New version 1.1.4 is released.
New version 1.1.3 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 10 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.1.4-1
- 1.1.4
* Tue Dec 3 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.1.3-1
- 1.1.3
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libfm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months