Fedora 9 : emacspeak-28.0-3.fc9 (2008-8379)

Fri Sep 26 2008 Jens Petersen - 28.0-3 - CVE-2008-4191 fix tmpfile vulnerability in extract-table.pl with emacspeak-28.0-tmpfile.patch from upstream svn 463820 - Fri Sep 26 2008 Jens Petersen - 28.0-2 - fix broken generated deps reported by mtasaka 463899 - script the replacement of tcl with...

[SECURITY] Fedora 9 Update: evolution-rss-0.1.0-3.fc9

This is an evolution plugin which enables evolution to read rss feeds...

Fedora 9 : viewvc-1.0.6-1.fc9 (2008-8252)

Security fix: ignore arbitrary user-provided MIME types ViewVC issue 354: http://viewvc.tigris.org/issues/showbug.cgi?id=354 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean an...

Fedora 9 : ipa-1.1.0-7.fc9 (2008-8003)

Security update to address Kerberos master password disclosure flaw CVE-2008-3274. A simple update is not sufficient to resolve the security issue. Please carefully follow the upgrade instructions at: http://freeipa.org/page/CVE-2008-3274 Note that Tenable Network Security has extracted the...

Fedora 9 : poppler-0.8.1-2.fc9 (2008-7012)

Security fix: Add upstream patch for CVE-2008-2950 / oCERT-2008-007 - use of an uninitialized pointer to call free in Page::Page 454277 http://www.ocert.org/advisories/ocert-2008-007.html Bug fixes: Fix crash when reading QuadPoints 448516 Use static FTLibrary in CairoOutputDev, as dynamic may...

[SECURITY] Fedora 9 Update: libHX-1.23-1.fc9

A library for: - rbtree with key-value pair extension - deques double-ended queues Stacks LIFO / Queues FIFOs - platform independent opendir-style directory access - platform independent dlopen-style shared library access - auto-storage strings with direct access - command line option argv parser...

[SECURITY] Fedora 9 Update: libxml2-2.6.32-3.fc9

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

[SECURITY] Fedora 9 Update: R-2.7.2-1.fc9

A language and environment for statistical computing and graphics. R is similar to the award-winning S system, which was developed at Bell Laboratories by John Chambers et al. It provides a wide variety of statistical and graphical techniques linear and nonlinear modelling, statistical tests, tim...

[SECURITY] Fedora 9 Update: rpy-1.0.3-3.fc9

RPy provides a robust Python interface to the R programming language. It can manage all kinds of R objects and can execute arbitrary R functions. All the errors from the R language are converted to Python exceptions...

Fedora 9 : xine-lib-1.1.15-1.fc9 (2008-7512)

This release fixes multiple bugs and security issues: - DoS via corrupted Ogg files CVE-2008-3231 - multiple possible buffer overflows detailed in oCERT-2008-008 For more details, see: http://sourceforge.net/project/shownotes.php?releaseid=619869&groupi d=9655...

Fedora 9 : adminutil-1.1.7-1.fc9 (2008-7339)

Fixes these bugs: - CVE-2008-2928 - buffer overflow in Accept-Language parsing 413531 Web browser accepted languages configuration causes dsgw CGI binaries to segfault - improved fix for CVE-2008-2929 XSS issues originally addressed in 1.1.6, that does not introduce heap overflow in parsing...

[SECURITY] Fedora 9 Update: httpd-2.2.9-1.fc9

The Apache HTTP Server is a powerful, efficient, and extensible web server...

Fedora 9 : trac-0.10.5-1.fc9 (2008-6833)

Update to 0.10.5 to fix two non-critical security issues: CVE-2008-2951: Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL in the q parameter. CVE-2008-3328: Cross-site...

Fedora 9 : pdns-recursor-3.1.7-2.fc9 (2008-6893)

Fri Jul 25 2008 Ruben Kerkhof - 3.1.7-2 - Exclude ppc and ppc64 for now, the build fails randomly - Fri Jul 25 2008 Ruben Kerkhof - 3.1.7-1 - Upstream released new version, now with Lua support Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 9 : asterisk-1.6.0-0.19.beta9.fc9 (2008-6853)

Security fixes for CVE-2008-3263 / AST-2008-010 and CVE-2008-3264 / AST-2008-011: AST-2008-010: Asterisk IAX 'POKE' resource exhaustion - http://downloads.digium.com/pub/security/AST-2008-010.html AST-2008-011: Traffic amplification in IAX2 firmware provisioning system -...

[SECURITY] Fedora 9 Update: pdns-recursor-3.1.7-2.fc9

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

[SECURITY] Fedora 9 Update: licq-1.3.5-2.fc9

Licq is a ICQ Client for the common ICQ network. It provides a graphical user interface based on QT and is enhanceable with many powerful plugins. For more information visit Licq's Homepage http://www.licq.org...

Fedora 9 : mantis-1.1.2-1.fc9 (2008-6647)

Update to upstream version 1.1.2, fixing following security issues: - 0008974: XSS Vulnerability in filters - 0008975: CSRF Vulnerabilities in usercreate CVE-2008-2276 - 0008976: Remote Code Execution in admconfig - 0009154: arbitrary file inclusion through user preferences page See upstream...

Fedora 9 : python-formencode-1.0.1-1.fc9 (2008-6312)

The formencode package helps create validators that can check and manipulate user input before passing it to the rest of the program. Version 1.0 silently ignored one class of validators chainedvalidators that run over a set of user input rather than individual pieces. Version 1.0.1 fixes that so...

Fedora 9 : clamav-0.93.3-1.fc9 (2008-6338)

Update to upstream version 0.93.3, fixing previously incomplete fix for CVE-2008-2713. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...