From announce-noreply at rpath.com Mon Apr 11 15:47:01 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Mon, 11 Apr 2011 19:47:01 -0000 Subject: rPSA-2011-0013-1 openssl openssl-scripts Message-ID: <4da35ab1.013FuxU1MIq9ll67%announce-noreply@rpath.com> rPath Security Advisory: 2011-0013-1 Published: 2011-04-11 Products: rPath Appliance Platform Linux Service 1 rPath Appliance Platform Linux Service 2 rPath Linux 1 rPath Linux 2 Rating: Major Exposure Level Classification: Remote System User Deterministic Denial of Service Updated Versions: openssl=conary.rpath.com at rpl:1/0.9.7f-10.20-1 openssl=conary.rpath.com at rpl:2/0.9.8g-7.7-1 openssl-scripts=conary.rpath.com at rpl:1/0.9.7f-10.13-1 openssl-scripts=conary.rpath.com at rpl:2/0.9.8g-7.7-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-3262 References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3245 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4180 Description: Previous versions of openssl, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG was enabled, were vulnerable to a ciphersuite downgrade attack, which could lead to a remote attacker to potentially forcing a client to use a weaker cipher. Additinally, previous versions of openssl did not check for a NULL return value from the bn_wexpand function, which could lead to a remote denial of service. http://wiki.rpath.com/Advisories:rPSA-2011-0013 Copyright 2011 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html From announce-noreply at rpath.com Mon Apr 11 15:50:28 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Mon, 11 Apr 2011 19:50:28 -0000 Subject: rPSA-2011-0014-1 httpd mod_ssl Message-ID: <4da35b81.3A17v0gL/UXNRY/A%announce-noreply@rpath.com> rPath Security Advisory: 2011-0014-1 Published: 2011-04-11 Products: rPath Appliance Platform Linux Service 1 rPath Linux 1 Rating: Minor Exposure Level Classification: Remote System User Non-deterministic Vulnerability Updated Versions: httpd=conary.rpath.com at rpl:1/2.0.63-0.10-1 mod_ssl=conary.rpath.com at rpl:1/2.0.63-0.10-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-3263 References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0434 http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0056 Description: Previous versions of the apache web server, when a multithreaded MPM is used, do not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request. This vulnerability was previous addressed for rPath Linux 2 and rPath Linux Service 2 through rPSA 2010-0056. http://wiki.rpath.com/Advisories:rPSA-2011-0014 Copyright 2011 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html From announce-noreply at rpath.com Mon Apr 11 15:52:22 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Mon, 11 Apr 2011 19:52:22 -0000 Subject: rPUA-2011-0015-1 initscripts Message-ID: <4da35bf5.BroDnDRyEYe1y7lc%announce-noreply@rpath.com> rPath Update Advisory: 2011-0015-1 Published: 2011-04-11 Products: rPath Appliance Platform Linux Service 1 rPath Appliance Platform Linux Service 2 rPath Linux 1 rPath Linux 2 Rating: Informational Updated Versions: initscripts=conary.rpath.com at rpl:1/8.12-8.25-1 initscripts=conary.rpath.com at rpl:2/8.56.18-0.2-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-3264 Description: The initscripts package has been rebuilt to add a file provides on /etc/init.d/functions in support of a feature added in conary-policy 1.0.28, which now requires %(initdir)s/functions instead of the initscripts package. http://wiki.rpath.com/Advisories:rPUA-2011-0015 Copyright 2011 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html From announce-noreply at rpath.com Mon Apr 11 15:55:24 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Mon, 11 Apr 2011 19:55:24 -0000 Subject: rPUA-2011-0016-1 conary conary-build conary-repository Message-ID: <4da35cac.s4iioiIigeuHdhbF%announce-noreply@rpath.com> rPath Update Advisory: 2011-0016-1 Published: 2011-04-11 Products: rPath Appliance Platform Linux Service 1 rPath Appliance Platform Linux Service 2 rPath Linux 1 rPath Linux 2 Rating: Informational Updated Versions: conary=conary.rpath.com at rpl:1/2.2.15-0.1-1 conary=conary.rpath.com at rpl:2/2.2.15-0.1-1 conary-build=conary.rpath.com at rpl:1/2.2.15-0.1-1 conary-build=conary.rpath.com at rpl:2/2.2.15-0.1-1 conary-repository=conary.rpath.com at rpl:1/2.2.15-0.1-1 conary-repository=conary.rpath.com at rpl:2/2.2.15-0.1-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-3265 References: http://blogs.conary.com/index.php/conarynews/2011/03/22/conary_2_2_15_released Description: Conary has been updated to 2.2.15, a maintenance release. Please see the blog post and rITS issues listed for more detailed information about this release. http://wiki.rpath.com/Advisories:rPUA-2011-0016 Copyright 2011 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html From announce-noreply at rpath.com Tue Apr 12 10:48:32 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Tue, 12 Apr 2011 14:48:32 -0000 Subject: Group Update Summary: group-rap-linux-service=1.0.7-17-47 Message-ID: <4da46640.pJUUwQo+30M0B+Hr%announce-noreply@rpath.com> Changes in group-rap-linux-service=rap.rpath.com at rpath:linux-1/1.0.7-17-47 ========================================================================== Packages changed: conary=rap.rpath.com at rpath:linux-1/2.2.11-1-1 From announce-noreply at rpath.com Tue Apr 12 10:48:54 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Tue, 12 Apr 2011 14:48:54 -0000 Subject: Group Update Summary: group-rap-linux-service=1.0.7-17-48 Message-ID: <4da46655.6Xx7tC6Euwua9zDn%announce-noreply@rpath.com> Changes in group-rap-linux-service=rap.rpath.com at rpath:linux-1/1.0.7-17-48 ========================================================================== Packages changed: conary=rap.rpath.com at rpath:linux-1/2.2.12-1-1 perl=rap.rpath.com at rpath:linux-1/5.8.7-11-1 From announce-noreply at rpath.com Tue Apr 12 10:49:14 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Tue, 12 Apr 2011 14:49:14 -0000 Subject: Group Update Summary: group-rap-linux-service=1.0.7-17-49 Message-ID: <4da4666a.kVdd6wP3fnDh282m%announce-noreply@rpath.com> Changes in group-rap-linux-service=rap.rpath.com at rpath:linux-1/1.0.7-17-49 ========================================================================== Packages changed: conary=rap.rpath.com at rpath:linux-1/2.2.15-1-1 http://wiki.rpath.com/Advisories:rPUA-2011-0016 httpd=rap.rpath.com at rpath:linux-1/2.0.63-5-1 http://wiki.rpath.com/Advisories:rPSA-2011-0014 initscripts=rap.rpath.com at rpath:linux-1/8.12-18-1 http://wiki.rpath.com/Advisories:rPUA-2011-0015 mod_ssl=rap.rpath.com at rpath:linux-1/2.0.63-5-1 http://wiki.rpath.com/Advisories:rPSA-2011-0014 openssl=rap.rpath.com at rpath:linux-1/0.9.7f-19-1 http://wiki.rpath.com/Advisories:rPSA-2011-0013 From announce-noreply at rpath.com Tue Apr 12 10:50:15 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Tue, 12 Apr 2011 14:50:15 -0000 Subject: Group Update Summary: group-rap-linux-service=2.0.2-1-4 Message-ID: <4da466a6.6IDiZ7RO6jHZHmHp%announce-noreply@rpath.com> Changes in group-rap-linux-service=rap.rpath.com at rpath:linux-2/2.0.2-1-4 ======================================================================== Packages changed: conary=rap.rpath.com at rpath:linux-2/2.2.11-1-1 From announce-noreply at rpath.com Tue Apr 12 10:50:32 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Tue, 12 Apr 2011 14:50:32 -0000 Subject: Group Update Summary: group-rap-linux-service=2.0.2-1-5 Message-ID: <4da466b7.x2dnYaQjBVLDCf9E%announce-noreply@rpath.com> Changes in group-rap-linux-service=rap.rpath.com at rpath:linux-2/2.0.2-1-5 ======================================================================== Packages changed: conary=rap.rpath.com at rpath:linux-2/2.2.12-1-1 From announce-noreply at rpath.com Tue Apr 12 10:50:50 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Tue, 12 Apr 2011 14:50:50 -0000 Subject: Group Update Summary: group-rap-linux-service=2.0.2-2-1 Message-ID: <4da466c9.v8/0XlfKtJ8+Nokq%announce-noreply@rpath.com> No changes introduced in group-rap-linux-service=/rap.rpath.com at rpath:linux-2/2.0.2-2-1 ======================================================================================= From announce-noreply at rpath.com Tue Apr 12 10:51:07 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Tue, 12 Apr 2011 14:51:07 -0000 Subject: Group Update Summary: group-rap-linux-service=2.0.2-2-2 Message-ID: <4da466da.YqpVl5b9oGtlkSTC%announce-noreply@rpath.com> Changes in group-rap-linux-service=rap.rpath.com at rpath:linux-2/2.0.2-2-2 ======================================================================== Packages changed: PyXML=rap.rpath.com at rpath:linux-2/0.8.4-5-1 apr-util=rap.rpath.com at rpath:linux-2/1.2.12-7-1 expat=rap.rpath.com at rpath:linux-2/2.0.0-3-1 From announce-noreply at rpath.com Tue Apr 12 10:51:25 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Tue, 12 Apr 2011 14:51:25 -0000 Subject: Group Update Summary: group-rap-linux-service=2.0.2-2-3 Message-ID: <4da466ec.TrMKgSfTVj1ywZLk%announce-noreply@rpath.com> Changes in group-rap-linux-service=rap.rpath.com at rpath:linux-2/2.0.2-2-3 ======================================================================== Packages changed: conary=rap.rpath.com at rpath:linux-2/2.2.15-1-1 http://wiki.rpath.com/Advisories:rPUA-2011-0016 initscripts=rap.rpath.com at rpath:linux-2/8.56.18-2-1 http://wiki.rpath.com/Advisories:rPUA-2011-0015 openssl=rap.rpath.com at rpath:linux-2/0.9.8g-11-1 http://wiki.rpath.com/Advisories:rPSA-2011-0013 From announce-noreply at rpath.com Tue Apr 12 10:51:39 2011 From: announce-noreply at rpath.com (rPath Update Announcements) Date: Tue, 12 Apr 2011 14:51:39 -0000 Subject: Group Update Summary: group-rap-linux-service=2.0.2-2-4 Message-ID: <4da466fa.3eE3S0bNS8b+mJU+%announce-noreply@rpath.com> No changes introduced in group-rap-linux-service=/rap.rpath.com at rpath:linux-2/2.0.2-2-4 =======================================================================================