[SECURITY] Fedora 8 Update: system-config-network-1.5.10-1.fc8

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-4633
2008-05-28 22:54:44
--------------------------------------------------------------------------------

Name        : system-config-network
Product     : Fedora 8
Version     : 1.5.10
Release     : 1.fc8
URL         : http://fedoraproject.org/wiki/SystemConfig/network
Summary     : The GUI of the Network Adminstration Tool
Description :
This is the GUI of the network configuration tool,
supporting Ethernet, Wireless, TokenRing, ADSL, ISDN and PPP.

--------------------------------------------------------------------------------
Update Information:

This security update fixes system-config-network-1.5.5-1.fc8, where the console
file from Fedora 9 was distributed. This bug enabled every console user to
change the network configuration.  Systems with system-config-
network-1.5.5-1.fc8 installed should install this update.
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 27 2008 Harald Hoyer  - 1.5.10
- fixed Makefile.am
* Tue May 27 2008 Harald Hoyer  - 1.5.9
- fixed console perms for Fedora <= 8
* Fri May 16 2008 Harald Hoyer  - 1.5.8
- copy info from DNS page into each ifcfg file (dcbw)
* Fri Apr 25 2008 Harald Hoyer  - 1.5.7
- NCisdnhardware.card -> NCisdnhardware._card (harald)
- Fixed pap-secret parsing. (#rhbz#443347) (jmoskovc)
* Tue Apr  8 2008 Harald Hoyer  - 1.5.6
- translation update
- check origLine for None (harald)
* Mon Mar 31 2008 Harald Hoyer  - 1.5.5
- fixed more rhbz#439718
* Mon Mar 31 2008 Harald Hoyer  - 1.5.4
- fixed typos in DialupDruid (harald)
- return None is nothing is selected (harald)
- fixed #438901: Network Device Control doesn't work unless s-c-n has been run once (harald)
- fixed #435041 and added UnitTest (harald)
- be case-independent in mode parsing rhbz#433748 (harald)
- fixed rhbz#429725 (harald)
- do not traceback on non-int Volume (harald)
- fixed rhbz#439718 (harald)
* Sat Mar 29 2008 Harald Hoyer  - 1.5.3
- readded DialupDruid (harald)
* Sat Mar 29 2008 Harald Hoyer  - 1.5.2
- devices which are controlled by NM cannot be activated/deactivated (rhbz#438902)
- use ". config-util" in console-apps config file (rhbz#428408) (harald)
- use xdg-open instead of htemlview (rhbz#415031) (harald)
- added sr@latin (rhbz#425845)
- update buttons on device edit change (harald)
- fixed some Alias handling (harald)
- removed Init2 string (clashes with UTMS) (harald)
- no activate/deactivate/delete NMControlled devices (harald)
- NCPluginDevTokenRing return None if no dialog (harald)
- BackendHal fix to use Factory classes, no kudzu hw import (harald)
- check if hostname is not None, before checking it (harald)
- added tui/NCPluginTokenRingInterface (harald)
- MTU moved to base device (rhbz#439202) (harald)
- fixed import for ParseError (harald)
* Thu Feb 28 2008 Harald Hoyer  - 1.5.1
- removed CIPE (harald)
- s/Devernet/Network/ (harald)
- Auto -> auto (harald)
- only append localhost to AliasList, if not already in (harald)
- show error dialog, if device loading failes (harald)
- moved MRU to Dialup only (harald)
- recognize qeth devices in kudzu lists (rhbz#184734) (harald)
- added MRU field (rhbz#221294) (harald)
- added TUI for QETH (harald)
- do not traceback, if we try to remove a device not in our active list (harald)
- added qeth support (harald)
- removed ctc and iucv devices (rhbz#219180) (harald)
- do not handle ifcfg-${parent_device}-range* rhbz#221292 (harald)
- Minor fix in hosts parser to make tui works. (jmoskovc)
- Stupid mode doesn't go away anymore.(rhbz#177931) (jmoskovc)
- Fixed crash when Baud=None (jmoskovc)
- Removing PPP option should work. NETWORKMANAGER -> NM_CONTROLLED (jmoskovc)
- Fixed problem with import rhbz#429725 (jmoskovc)
- Changed Clist in host editor to GtkTreeView, added checkbox to show loopbacks in hosts (jmoskovc)
- Minor fix in hosts parser - now it accepts trailing dot. (jmoskovc)
- Improved {pap|chap}-secrets parser, added checkbox to reveal password in dialup config (jmoskovc)
- Fixed crash when hostname is changed. (jmoskovc)
* Mon Dec  3 2007 Harald Hoyer  - 1.5.0
- v1.5.0
* Mon Dec  3 2007 Harald Hoyer , Jiri Moskovcak  - 1.4.7
- added HAL support
- fixed /etc/hosts parser
- added "Controlled by NetworkManager"
- do not fall into modified state for activate/deactivate (rhbz#377261)
* Mon Nov 12 2007 Harald Hoyer  - 1.4.6
- moved network.xpm to (pkgdatadir)/pixmaps (rhbz#377861)
* Mon Nov 12 2007 Harald Hoyer  - 1.4.5
- changed yelp to htmlview
* Wed Nov  7 2007 Stepan Kasal  - 1.4.4
- s/NEtwork/Network/ in the summary of -tui, to be consistent
  with the summary line of the main rpm (the neat acronym is no
  longer advertised anyway)
- Resolves: #239216
* Fri Oct 26 2007 Harald Hoyer  - 1.4.4
- removed not yet used NCBackendHal.py (rhbz#353771)
- fixed yelp dependency (rhbz#344981)
- moved %configure to %build (rhbz#353761)
- fixed type with getRoot (rhbz#368871)
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #448557 - CVE-2008-2359 system-config-network: network configuration change by the unprivileged user
        https://bugzilla.redhat.com/show_bug.cgi?id=448557
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update system-config-network' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------