[SECURITY] Fedora 9 Update: python-fedora-0.3.9-1.fc9

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-1519
2009-02-12 18:57:36
--------------------------------------------------------------------------------

Name        : python-fedora
Product     : Fedora 9
Version     : 0.3.9
Release     : 1.fc9
URL         : https://fedorahosted.org/python-fedora/
Summary     : Python modules for talking to Fedora Infrastructure Services
Description :
Python modules that help with building Fedora Services.  This includes a JSON
based auth provider for authenticating against FAS2 over the network and a
client that handles communication with the servers.  The client module can
be used to build programs that communicate with Fedora Infrastructure's
TurboGears Applications such as Bodhi, PackageDB, MirrorManager, and FAS2.

--------------------------------------------------------------------------------
Update Information:

This release includes a bugfix to the
fedora.client.AccountSystem().verify_password() method.  verify_password() was
incorrectly returning True (username, password combination was correct) for any
input.  Although no known code is using this method to verify a user's account
with the Fedora Account System, the existence of the method and the fact that
anyone using this would be allowing users due to the bug makes this a high
priority bug to fix.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Feb  8 2009 Toshio Kuratomi <toshio at fedoraproject.org> - 0.3.9-1
- New upstream with important bugfixes.
* Sat Nov 29 2008 Ignacio Vazquez-Abrams <ivazqueznet+rpm at gmail.com> - 0.3.8-2
- Rebuild for Python 2.6
* Thu Nov 20 2008 Toshio Kuratomi <toshio at fedoraproject.org> - 0.3.8-1
- New upstream with pycurl client backend, more fas methods, and bodhi bugfix.
* Thu Oct 30 2008 Toshio Kuratomi <toshio at fedoraproject.org> - 0.3.7-1
- New upstream has more complete pkgdb integration.
* Mon Sep 15 2008 Toshio Kuratomi <toshio at fedoraproject.org> - 0.3.6-2
- Add python-sphinx to the buildrequires.
* Mon Sep 15 2008 Toshio Kuratomi <toshio at fedoraproject.org> - 0.3.6-1
- New upstream.  No longer deps on koji.
* Mon Aug 25 2008 Luke Macken <lmacken at redhat.com> - 0.3.5-1
- New upstream release
* Mon Jul 28 2008 Toshio Kuratomi <toshio at fedoraproject.org> - 0.3.4-1
- Small fix to proxyclient.send_request() for sequence types.
* Wed Jul 23 2008 Toshio Kuratomi <toshio at fedoraproject.org> - 0.3.3-1
- A few fixes for the new fas release.
* Sun Jul 20 2008 Luke Macken <lmacken at redhat.com> - 0.3.2-1
- Latest upstream release
- Add koji to the Requires
* Mon Jul 14 2008 Luke Macken <lmacken at redhat.com> - 0.3.1-1
- New upstream bugfix release
* Wed Jul  2 2008 Luke Macken <lmacken at redhat.com> - 0.3-1
- New upstream release.
* Wed Apr 23 2008 Toshio Kuratomi <toshio at fedoraproject.org> - 0.2.99.11.1-1
- Fix a crasher bug.
* Wed Apr 23 2008 Toshio Kuratomi <toshio at fedoraproject.org> - 0.2.99.11-1
- New upstream release.
* Wed Apr 23 2008 Toshio Kuratomi <toshio at fedoraproject.org> - 0.2.99.10-1
- New upstream release.
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update python-fedora' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------