The following Fedora 15 Security updates need testing:
https://admin.fedoraproject.org/updates/viewvc-1.1.11-1.fc15
https://admin.fedoraproject.org/updates/syslog-ng-3.2.4-3.fc15
https://admin.fedoraproject.org/updates/mumble-1.2.3-2.fc15
https://admin.fedoraproject.org/updates/tigervnc-1.0.90-4.fc15
https://admin.fedoraproject.org/updates/wordpress-3.1.2-1.fc15
https://admin.fedoraproject.org/updates/postfix-2.8.3-1.fc15
https://admin.fedoraproject.org/updates/apr-1.4.4-2.fc15
The following Fedora 15 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/filesystem-2.4.41-1.fc15
https://admin.fedoraproject.org/updates/sendmail-8.14.5-1.fc15
https://admin.fedoraproject.org/updates/selinux-policy-3.9.16-24.fc15
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-14.fc15.1
https://admin.fedoraproject.org/updates/lldpad-0.9.41-3.fc15
https://admin.fedoraproject.org/updates/mtools-4.0.16-1.fc15
https://admin.fedoraproject.org/updates/xorg-x11-drv-wacom-0.11.0-1.fc15
https://admin.fedoraproject.org/updates/libfprint-0.4.0-1.fc15,fprintd-0.4.1-1.fc15
The following builds have been pushed to Fedora 15 updates-testing
BibTool-2.51-1.fc15
UpTools-8.5.5-3.fc15
dhcp-4.2.1-9.P1.fc15
filesystem-2.4.41-1.fc15
glibc-2.13.90-13
gtranslator-2.90.4-1.fc15
gyachi-1.2.10-5.fc15
icoutils-0.29.1-3.fc15
libguestfs-1.10.3-1.fc15
monodevelop-boo-2.4-6.fc15
mumble-1.2.3-2.fc15
opensc-0.12.1-1.fc15
openscada-0.7.1-4.fc15
perl-DateTime-Format-Natural-0.95-1.fc15
perl-Ouch-0.0401-1.fc15
perl-Perl-PrereqScanner-1.003-1.fc15
perl-SOAP-Lite-0.712-4.fc15
proftpd-1.3.4-0.9.rc2.fc15
rubygem-boxgrinder-build-0.9.2-1.fc15
rubygem-boxgrinder-core-0.3.2-1.fc15
rubygem-deltacloud-client-0.3.0-1.fc15
selinux-policy-3.9.16-24.fc15
sendmail-8.14.5-1.fc15
spin-kickstarts-0.15.6-1.fc15
sugar-0.92.1-4.fc15
syslog-ng-3.2.4-3.fc15
transifex-client-0.5-1.fc15
viewvc-1.1.11-1.fc15
virt-v2v-0.8.1-2.fc15
yash-2.27-1.fc15
zint-2.4.3-1.fc15
Details about builds:
================================================================================
BibTool-2.51-1.fc15 (FEDORA-2011-7166)
A Tool for manipulating BibTeX data bases
--------------------------------------------------------------------------------
Update Information:
rebase to BibTool 2.51
remove DESTDIR part of regex_DESTDIR patch (use INSTALLPREFIX from 2.51)
fix Doc/Makefile
follow switch from dvi doc to pdf doc
remove exec bit for installed man
convert latin1 file to UTF-8
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Michael J Gruber <mjg@xxxxxxxxxxxxxxxxx> 2.51-1
- rebase to BibTool 2.51
- remove DESTDIR part of regex_DESTDIR patch (use INSTALLPREFIX from 2.51)
- fix Doc/Makefile
- follow switch from dvi doc to pdf doc
- remove exec bit for installed man
- convert latin1 file to UTF-8
--------------------------------------------------------------------------------
================================================================================
UpTools-8.5.5-3.fc15 (FEDORA-2011-7164)
C++ library for HPC, parallel processing, networking, DB, memory, etc
--------------------------------------------------------------------------------
Update Information:
- UpTimerManager extension to report on pending timers of each type, and new flexibility in timer setup parameters. Method now() of UpTimerManager is fortified.
- One of the operators for UpSmartLinkPtr's is removed to help g++ resolve compilation ambiguity
- Many fixes to tarball
- Fixed tag License that was wrongly labeled as "BSD with advertising" is replaced by "BSD with attribution"
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 16 2011 Sergio Belkin <sebelk@xxxxxxxxxxxxxxxxx> - 8.5.5-3
- UpTimerManager extension to report on pending timers of each type, and new
flexibility in timer setup parameters. Method now() of UpTimerManager is
fortified.
- One of the operators for UpSmartLinkPtr's is removed to help g++ resolve
compilation ambiguity.
- Disable silent rules and gcc warning flags of configure.ac
- Get rid of ugly macro AX_EXT_HAVE_LIB
- Dropped --as-needed and -O3 flags in order to be more generic and simple build
- Loop to search mysqlclient with proper LDFLAGS
- Removed test for old glibc and prevent libdir harcoding
- Remove -no-install LDFLAG
- Not it uses
- Fixed license, it was tagged wrongly as "BSD with advertisement", has been
replaced by the recently accepted "BSD with attribution"
- Polished the test for old glibc
* Fri Mar 25 2011 Dan HorÃk <dan@xxxxxxxx> - 8.5.4-13
- fix build on 64-bit platforms (don't fiddle with libdir in configure)
- fix build on s390 where size_t is unsigned long
--------------------------------------------------------------------------------
================================================================================
dhcp-4.2.1-9.P1.fc15 (FEDORA-2011-7105)
Dynamic host configuration protocol software
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Jiri Popelka <jpopelka@xxxxxxxxxx> - 12:4.2.1-9.P1
- Fix typo in triggerun scriptlet (#705417)
* Mon May 16 2011 Jiri Popelka <jpopelka@xxxxxxxxxx> - 12:4.2.1-8.P1
- Packages dhcp/dhclient/dhcp-common explicitly require the libs sub-package
with the same version and release (bug #705037).
- Fix triggerun scriptlet
* Mon May 9 2011 Jiri Popelka <jpopelka@xxxxxxxxxx> - 12:4.2.1-7.P1
- Fix 11-dhclient to export variables (#702735)
* Fri Apr 29 2011 Jiri Popelka <jpopelka@xxxxxxxxxx> - 12:4.2.1-6.P1
- Comply with guidelines for systemd services
* Wed Apr 27 2011 Jiri Popelka <jpopelka@xxxxxxxxxx> - 12:4.2.1-5.P1
- Fix NetworkManager dispatcher script for dhcpd to support arbitrary interface names
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #705037 - dhcp-libs not updated
https://bugzilla.redhat.com/show_bug.cgi?id=705037
[ 2 ] Bug #705417 - typo in %triggerun systemd scriptlet: s/dhpd/dhcpd/
https://bugzilla.redhat.com/show_bug.cgi?id=705417
--------------------------------------------------------------------------------
================================================================================
filesystem-2.4.41-1.fc15 (FEDORA-2011-7177)
The basic directory layout for a Linux system
--------------------------------------------------------------------------------
Update Information:
- Pre: require setup again
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Ondrej Vasik <ovasik@xxxxxxxxxx> 2.4.41-1
- Pre: require setup again (#705443)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #705443 - Group id of /var/spool/mail not set properly at install
https://bugzilla.redhat.com/show_bug.cgi?id=705443
--------------------------------------------------------------------------------
================================================================================
glibc-2.13.90-13 (FEDORA-2011-6471)
The GNU libc libraries
--------------------------------------------------------------------------------
Update Information:
Update from master
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Andreas Schwab <schwab@xxxxxxxxxx> - 2.13.90-13
- Update from master
- Update GB18030 to 2005 version (BZ#11837)
- Update RE_SYNTAX*_AWK constants in regex.h
- Handle long variable names in putenv (BZ#11892)
- Fix test for error_one_per_line mode in error (BZ#12766)
- Cleanup x86-64 sys/user.h (BZ#11820)
- Several locale data updates (BZ#11987, BZ#9732, BZ#9730, BZ#4357,
BZ#12582)
- Avoid potential deadlock in mtrace (BZ#6420)
- Fix a few problems in fopen and freopen
- Provide more helpful error message in getopt (BZ#7101)
- Make stack canary value harder to read through read overflow (BZ#10149)
- Use mmap for allocation of buffers used for __abort_msg (BZ#11901)
- Fix handling of static TLS in dlopen'ed objects (BZ#12453)
- Fix initialization of optimization values for AIO (BZ#12083)
- Fix handling of conversion problem in CP932 module (BZ#12601)
- Fix potential problem with out-of-scope buffer (BZ#12626)
- Handle recursive calls in backtrace better (BZ#12432)
- Fix handling of incomplete character storage in state
- Fix file descriptor position after fclose (BZ#12724)
- Reinstall NIS RPC headers
* Fri May 13 2011 Andreas Schwab <schwab@xxxxxxxxxx> - 2.13.90-12
- Update from master
- Fix resizing table for unique symbols when adding symbol for copy
relocation (BZ#12511)
- Fix sched_setscheduler call in spawn implementation (BZ#12052)
- Report write error in addmnt even for cached streams (BZ#12625)
- Translate kernel error into what pthread_create should return
(BZ#386)
- More configurability for secondary group lookup (BZ#11257)
- Several locale data updates (BZ#11258, BZ#11487, BZ#11532,
BZ#11578, BZ#11653, BZ#11668, BZ#11945, BZ#11947, BZ#12158,
BZ#12200, BZ#12178, BZ#12178, BZ#12346, BZ#12449, BZ#12545,
BZ#12551, BZ#12611, BZ#12660, BZ#12681, BZ#12541, BZ#12711,
BZ#12738)
- Fix Linux getcwd for long paths (BZ#12713)
- static tls memory leak on TLS_DTV_AT_TP archs
- Actually undefine ARG_MAX from <linux/limits.h>
- Backport BIND code to query name as TLD (BZ#12734)
- Allow $ORIGIN to reference trusted directoreis in SUID binaries
(BZ #12393)
- Add missing {__BEGIN,__END}_DECLS to sys/sysmacros.h
- Report if no record is found by initgroups in nss_files
- Never leave $ORIGIN unexpanded
- Revert "Ignore origin of privileged program"
- Reexport RPC interface
* Thu May 5 2011 Andreas Schwab <schwab@xxxxxxxxxx> - 2.13.90-11
- Update from master
- Don't use removed rpc headers
- Install rpc/netdb.h again
* Wed May 4 2011 Andreas Schwab <schwab@xxxxxxxxxx> - 2.13.90-10
- Update from master
- ldconfig: don't crash on empty path in config file (#699784)
- getaddrinfo(AF_INET6) does not return scope_id info provided by
NSS modules (BZ#12714)
- Fix pathconf(_PC_BUF_SIZE) (BZ#12723)
- Fix getnameinfo flags parameter type (BZ#12717)
- Add finer grained control for initgroups lookups to NSS
- Use all possible bytes from fopen mode string (BZ#12685, #698025)
- Define initgroups callback for nss_files
- elf.h: Define R_ARM_IRELATIVE reloc type
- Fix static linking with checking x86/x86-64 memcpy (BZ#12653)
- Fix POWER4/POWER7 optimized strncmp to not read past differing bytes
- Fix FPU context handling in getcontext on x86-64 (BZ#12420)
- Skip extra zeroes when searching auxv on s390
- Obsolete RPC implementation in libc
- Fix memory leak in TLS of loaded objects (BZ#12650)
- Don't leave empty element in rpath when skipping an element
- Make ppc sync_file_range cancelable
- Maintain stack alignment in ____longjmp_chk on x86_64
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #699784 - [abrt] glibc-2.13-1: add_dir: Process /sbin/ldconfig was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=699784
[ 2 ] Bug #698025 - fopen doesn't honor last byte of valid modes
https://bugzilla.redhat.com/show_bug.cgi?id=698025
[ 3 ] Bug #702354 - /usr/include/netdb.h:33:24: fatal error: rpc/netdb.h: No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=702354
--------------------------------------------------------------------------------
================================================================================
gtranslator-2.90.4-1.fc15 (FEDORA-2011-7170)
Gettext po file editor for GNOME
--------------------------------------------------------------------------------
Update Information:
Rebase to latest upstream release which fixes several important bugs.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Tomas Bzatek <tbzatek@xxxxxxxxxx> - 2.90.4-1
- Update to 2.90.4
--------------------------------------------------------------------------------
================================================================================
gyachi-1.2.10-5.fc15 (FEDORA-2011-7187)
A Yahoo! chat client with Webcam and voice support
--------------------------------------------------------------------------------
Update Information:
* use libv4l1 header instead of obsolete kernel header
* fix gtk compile issues
* support notify 0.7
* cleanup desktop file (bz 616122)
* resolve broken dependencies
* fix FTBFS
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.2.10-5
- use libv4l1 header instead of obsolete kernel header
- fix gtk compile issues
- support notify 0.7
- cleanup desktop file (bz 616122)
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2.10-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #616122 - .desktop menu entry has wrong/missing categories
https://bugzilla.redhat.com/show_bug.cgi?id=616122
[ 2 ] Bug #660956 - FTBFS gyachi-1.2.10-3.fc14
https://bugzilla.redhat.com/show_bug.cgi?id=660956
--------------------------------------------------------------------------------
================================================================================
icoutils-0.29.1-3.fc15 (FEDORA-2011-7188)
Utility for extracting and converting Microsoft icon and cursor files
--------------------------------------------------------------------------------
Update Information:
This update fixes a memory issue that could lead to a segfault in case of corrupted resource tables.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 16 2011 Martin Gieseking <martin.gieseking@xxxxxx> - 0.29.1-3
- fixed http://bugzilla.redhat.com/show_bug.cgi?id=701855
- minor spec cleanup
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #701855 - [abrt] icoutils-0.29.1-1.fc14: memcpy: Process /usr/bin/wrestool was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=701855
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.10.3-1.fc15 (FEDORA-2011-7186)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
New upstream stable branch version 1.10.3.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Richard W.M. Jones <rjones@xxxxxxxxxx> - 1:1.10.3-1
- New upstream stable branch 1.10.3.
--------------------------------------------------------------------------------
================================================================================
monodevelop-boo-2.4-6.fc15 (FEDORA-2011-7173)
MonoDevelop Boo Add-in
--------------------------------------------------------------------------------
Update Information:
Fix broken deps, FTBFS.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 2.4-6
- fix code against newer boo
* Thu May 5 2011 Christian Krause <chkr@xxxxxxxxxxxxxxxxx> - 2.4-5
- Rebuilt against mono 2.10.1
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Tue Oct 26 2010 Paul F. Johnson <paul@xxxxxxxxxxxxxxxxxxxxxx> 2.4-3
- Rebuild against newer boo
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #660923 - FTBFS monodevelop-boo-2.4-1.fc14
https://bugzilla.redhat.com/show_bug.cgi?id=660923
--------------------------------------------------------------------------------
================================================================================
mumble-1.2.3-2.fc15 (FEDORA-2011-7183)
Voice chat suite aimed at gamers
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.3 addressing a security issue and fixing the codec issue
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Andreas Osowski <th0br0@xxxxxxxxxx> - 1.2.3-2
- Added celt071 functionality
- Fixed the qmake args
* Wed Mar 30 2011 Andreas Osowski <th0br0@xxxxxxxxxx> - 1.2.3-1
- Update to 1.2.3
- Fixes vulnerability #610845
- Added patch to make it compile with Ice 3.4.0
- Added tmpfile.d config file for murmur
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #610845 - Mumble: Remotely exploitable DoS (murmur server termination) due QueryUsers Qt SQLite database bug
https://bugzilla.redhat.com/show_bug.cgi?id=610845
--------------------------------------------------------------------------------
================================================================================
opensc-0.12.1-1.fc15 (FEDORA-2011-7180)
Smart card library and applications
--------------------------------------------------------------------------------
Update Information:
This is an update to OpenSC 0.12.1 release.
Upstream release notes include:
* New card driver: IAS/ECC 1.0.1
* rutoken-tool has been deprecated and removed.
* eidenv and piv-tool utilities now have manual pages.
* pkcs11-tool now requires the use of --module parameter.
* All tools can now use an ATR as an argument to --reader, to skip to the card with given ATR.
* opensc-tool -l with -v now shows information about the inserted cards.
* Creating files have an enforced upper size limit, 64K
* Support for multiple PKCS#15 applications with different AID-s. PKCS#15 applications can be listed with pkcs15-tool --list-applications. Binding to a specific AID with PKCS#15 tools can be done with --aid.
* Hex strings (like card ATR or APDU-s) can now be separated by space, in addition to colons.
* Pinpad readers known to be bogus are now ignored by OpenSC. At the moment only "HP USB Smart Card Keyboard" is disabled.
* Numerous compiler warnings, unused code and internal bugs have been eliminated.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Kalev Lember <kalev@xxxxxxxxxxxx> - 0.12.1-1
- Update to 0.12.1 (#705743)
- Removed BR libtool-ltdl-devel to build with glibc's libdl instead
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #705743 - opensc-0.12.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=705743
--------------------------------------------------------------------------------
================================================================================
openscada-0.7.1-4.fc15 (FEDORA-2011-7167)
Open SCADA system project
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Aleksey Popkov <aleksey@xxxxxxxxxx> - 0.7.1-4
- Adding of autoreconf command.
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-Format-Natural-0.95-1.fc15 (FEDORA-2011-7163)
Create machine readable date/time with natural parsing logic
--------------------------------------------------------------------------------
Update Information:
This month's DateTime-Format-Natural update includes:
* New supported format: <monthday> <month> <year> <time am/pm>.
* Conditionally rewrite date strings, currently ones with an 'at' followed by a time or daytime (e.g., noon).
* Rename the aliases class to the more generic name rewrite.
* Parse times with AM/PM at word boundary separated by a space (through removing the space before parsing).
* Parse and document formatted dates with an abbreviated month name in the middle.
* Extend the format regex accordingly and fix partly broken checking for a formatted date boundary.
* Remove commas from date string now before rewriting aliases.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Iain Arnell <iarnell@xxxxxxxxx> 0.95-1
- update to latest upstream version
--------------------------------------------------------------------------------
================================================================================
perl-Ouch-0.0401-1.fc15 (FEDORA-2011-7182)
Exceptions that don't hurt
--------------------------------------------------------------------------------
Update Information:
A new version of Ouch, 0.0401, is available.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #701119 - perl-Ouch-0.0401 is available
https://bugzilla.redhat.com/show_bug.cgi?id=701119
--------------------------------------------------------------------------------
================================================================================
perl-Perl-PrereqScanner-1.003-1.fc15 (FEDORA-2011-7179)
Tool to scan your Perl code for its prerequisites
--------------------------------------------------------------------------------
Update Information:
This update fixes a bug that caused things like "within" and "extends" to trigger the Moose scanner.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Iain Arnell <iarnell@xxxxxxxxx> 1.003-1
- update to latest upstream version
--------------------------------------------------------------------------------
================================================================================
perl-SOAP-Lite-0.712-4.fc15 (FEDORA-2011-7175)
Client and server side SOAP implementation
--------------------------------------------------------------------------------
Update Information:
A Fedora bugfix release of SOAP::Lite is available.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Petr Sabata <psabata@xxxxxxxxxx> - 0.712-4
- Do not require Apache2::*; this introduces mod_perl/httpd dependencies
This is optional and needed only when running under mod_perl which provides
those modules. (#705084)
- Use read() instead of sysread() under mod_perl (#663931), mod_perl patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #663931 - regression from 0.710.08 soap:Client,Application failed during request deserialization
https://bugzilla.redhat.com/show_bug.cgi?id=663931
[ 2 ] Bug #705084 - perl-SOAP-Lite: do not depend on mod_perl
https://bugzilla.redhat.com/show_bug.cgi?id=705084
--------------------------------------------------------------------------------
================================================================================
proftpd-1.3.4-0.9.rc2.fc15 (FEDORA-2011-7172)
Flexible, stable and highly-configurable FTP server
--------------------------------------------------------------------------------
Update Information:
This update includes a number of patches fixing bugs reported upstream:
* Avoid spinning proftpd process if read(2) returns EAGAIN (http://bugs.proftpd.org/3639)
* SITE CPFR/CPTO does not update quota tally (http://bugs.proftpd.org/3641)
* Segfault in mod_sql_mysql if "SQLAuthenticate groupsetfast" used (http://bugs.proftpd.org/3642)
* Disable signal handling for exiting session processes (http://bugs.proftpd.org/3644)
* Ensure that SQLNamedConnectInfos with PERSESSION connection policies are opened before chroot (http://bugs.proftpd.org/3645)
* MaxStoreFileSize can be bypassed using REST/APPE (http://bugs.proftpd.org/3649)
* Fix TCPAccessSyslogLevel directive (http://bugs.proftpd.org/3652)
* Segfault with "DefaultServer off" and no matching server for incoming IP address (http://bugs.proftpd.org/3653)
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Paul Howarth <paul@xxxxxxxxxxxx> 1.3.4-0.9.rc2
- Add a number of fixes for bugs reported upstream:
- Avoid spinning proftpd process if read(2) returns EAGAIN (bug 3639)
- SITE CPFR/CPTO does not update quota tally (bug 3641)
- Segfault in mod_sql_mysql if "SQLAuthenticate groupsetfast" used (bug 3642)
- Disable signal handling for exiting session processes (bug 3644)
- Ensure that SQLNamedConnectInfos with PERSESSION connection policies are
opened before chroot (bug 3645)
- MaxStoreFileSize can be bypassed using REST/APPE (bug 3649)
- Fix TCPAccessSyslogLevel directive (bug 3652)
- Segfault with "DefaultServer off" and no matching server for incoming IP
address (bug 3653)
--------------------------------------------------------------------------------
================================================================================
rubygem-boxgrinder-build-0.9.2-1.fc15 (FEDORA-2011-7168)
A tool for creating appliances from simple plain text files
--------------------------------------------------------------------------------
Update Information:
* [BGBUILD-148] Add support for building CentOS/RHEL images on Fedora
* [BGBUILD-204] Fedora 15 appliance networking start on boot failed
* [BGBUILD-208] Kickstart files not working with 0.9.1
* [BGBUILD-205] Error while converting to EC2 when guest OS is CentOS/RHEL 5
* [BGBUILD-213] CloudSigma support
* [BGBUILD-209] Wrong /etc/mtab on Fedora 15 appliances causes errors
* [BGBUILD-203] Vmware vmdk disk size is wrong when installing via kickstart files
* [BGBUILD-207] Guestfs dies on Fedora 15 with 'KVM not supported for this target' message
* [BGBUILD-83] Enable libguestfs log callback to redirect guestfs output to logger
* [BGBUILD-218] Incorrect error messages since revision of parser/validator
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Marek Goldmann <mgoldman@xxxxxxxxxx> - 0.9.2-1
- Upstream release: 0.9.2
- [BGBUILD-148] Add support for building CentOS/RHEL images on Fedora
- [BGBUILD-204] Fedora 15 appliance networking start on boot failed
- [BGBUILD-208] Kickstart files not working with 0.9.1
- [BGBUILD-205] Error while converting to EC2 when guest OS is CentOS/RHEL 5
- [BGBUILD-213] CloudSigma support
- [BGBUILD-209] Wrong /etc/mtab on Fedora 15 appliances causes errors
- [BGBUILD-203] Vmware vmdk disk size is wrong when installing via kickstart files
- [BGBUILD-207] Guestfs dies on Fedora 15 with 'KVM not supported for this target' message
- [BGBUILD-83] Enable libguestfs log callback to redirect guestfs output to logger
--------------------------------------------------------------------------------
================================================================================
rubygem-boxgrinder-core-0.3.2-1.fc15 (FEDORA-2011-7168)
Core library for BoxGrinder
--------------------------------------------------------------------------------
Update Information:
* [BGBUILD-148] Add support for building CentOS/RHEL images on Fedora
* [BGBUILD-204] Fedora 15 appliance networking start on boot failed
* [BGBUILD-208] Kickstart files not working with 0.9.1
* [BGBUILD-205] Error while converting to EC2 when guest OS is CentOS/RHEL 5
* [BGBUILD-213] CloudSigma support
* [BGBUILD-209] Wrong /etc/mtab on Fedora 15 appliances causes errors
* [BGBUILD-203] Vmware vmdk disk size is wrong when installing via kickstart files
* [BGBUILD-207] Guestfs dies on Fedora 15 with 'KVM not supported for this target' message
* [BGBUILD-83] Enable libguestfs log callback to redirect guestfs output to logger
* [BGBUILD-218] Incorrect error messages since revision of parser/validator
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 10 2011 Marek Goldmann <mgoldman@xxxxxxxxxx> - 0.3.2-1
- Upstream release: 0.3.2
- [BGBUILD-210] In Fedora 14 parameters are not being expanded, and cause early string truncation.
- [BGBUILD-208] Kickstart files not working with 0.9.1
- [BGBUILD-218] Incorrect error messages since revision of parser/validator
--------------------------------------------------------------------------------
================================================================================
rubygem-deltacloud-client-0.3.0-1.fc15 (FEDORA-2011-7181)
Deltacloud REST Client
--------------------------------------------------------------------------------
Update Information:
Version bump (0.3.0)
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 5 2011 Michal Fojtik <mfojtik@xxxxxxxxxx> - 0.3.0-1
- Version bump
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.9.16-24.fc15 (FEDORA-2011-7161)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
- Allow logrotate to connect to init script using unix domain stream socket
- Allow shorewall read and write inherited user domain pty/tty
- virt will attempt to us another virtualizations pulsesaudio tmpfs_t, ignore error
- Allow colord to get the attributes of fixed disk device nodes
- Allow nsplugin_t to getattr on gpmctl
- Allow mozilla_plugin to connect to pcscd over an unix stream socket
- Allow logrotate to execute systemctl
- colord wants to read files in users homedir
- Remote login should create user_tmp_t content not its own tmp files
- Allow psad signal
- Fix cobbler_read_lib_files interface
- Allow rlogind to r/w user terminals
- Allow prelink_cron_system_t to relabel content and ignore obj_id
- Allow gnomeclock_systemctl_t to list init_var_run_t
- Dbus domains will inherit fds from the init system
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.9.16-24
- Allow logrotate to connect to init script using unix domain stream socket
- Allow shorewall read and write inherited user domain pty/tty
- virt will attempt to us another virtualizations pulsesaudio tmpfs_t, ignore error
- Allow colord to get the attributes of fixed disk device nodes
- Allow nsplugin_t to getattr on gpmctl
- Allow mozilla_plugin to connect to pcscd over an unix stream socket
- Allow logrotate to execute systemctl
- colord wants to read files in users homedir
- Remote login should create user_tmp_t content not its own tmp files
- Allow psad signal
- Fix cobbler_read_lib_files interface
- Allow rlogind to r/w user terminals
- Allow prelink_cron_system_t to relabel content and ignore obj_id
- Allow gnomeclock_systemctl_t to list init_var_run_t
- Dbus domains will inherit fds from the init system
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #702291 - SELinux is preventing /sbin/ip from using the 'sys_module' capabilities.
https://bugzilla.redhat.com/show_bug.cgi?id=702291
[ 2 ] Bug #702889 - SELinux is preventing /bin/systemctl from 'read' accesses on the directory system.
https://bugzilla.redhat.com/show_bug.cgi?id=702889
[ 3 ] Bug #702931 - SELinux is preventing /bin/bash from 'read' accesses on the file /bin/systemctl.
https://bugzilla.redhat.com/show_bug.cgi?id=702931
[ 4 ] Bug #702945 - SELinux is preventing /usr/libexec/fprintd from 'use' accesses on the fd /dev/null.
https://bugzilla.redhat.com/show_bug.cgi?id=702945
[ 5 ] Bug #703043 - SELinux is preventing /bin/systemd-tmpfiles from 'unlink' accesses on the file .pam-systemd-lock.
https://bugzilla.redhat.com/show_bug.cgi?id=703043
[ 6 ] Bug #704152 - SELinux is preventing /usr/sbin/userhelper from 'search' accesses on the directory /dev/pts.
https://bugzilla.redhat.com/show_bug.cgi?id=704152
[ 7 ] Bug #704591 - SELinux is preventing /opt/google/talkplugin/GoogleTalkPlugin from 'getattr' accesses on the sock_file /dev/gpmctl.
https://bugzilla.redhat.com/show_bug.cgi?id=704591
[ 8 ] Bug #704808 - SELinux is preventing /usr/libexec/colord from 'getattr' accesses on the blk_file /dev/dm-0.
https://bugzilla.redhat.com/show_bug.cgi?id=704808
[ 9 ] Bug #704870 - SELinux is preventing /bin/bash from 'execute' accesses on the file /bin/systemctl.
https://bugzilla.redhat.com/show_bug.cgi?id=704870
[ 10 ] Bug #705279 - SELinux is preventing /usr/bin/who from 'read' accesses on the file utmp.
https://bugzilla.redhat.com/show_bug.cgi?id=705279
--------------------------------------------------------------------------------
================================================================================
sendmail-8.14.5-1.fc15 (FEDORA-2011-7171)
A widely used Mail Transport Agent (MTA)
--------------------------------------------------------------------------------
Update Information:
This is a new version of sendmail that fixes several bugs. For original annoucement with full list of bugs fixed see: http://www.sendmail.com/sm/open_source/download/8.14.5/?show_rs=1
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Jaroslav Åkarvada <jskarvad@xxxxxxxxxx> - 8.14.5-1
- New version 8.14.5
- Removed m4-ldap-routing, milter-fix-negativeid, man-i-option-fix
patches (upstreamed)
* Thu Mar 3 2011 Jaroslav Åkarvada <jskarvad@xxxxxxxxxx> - 8.14.4-21
- fix negative ctx_id in milter debug output (#577558)
- fix incomplete description of the -i option in man page (#676824)
--------------------------------------------------------------------------------
================================================================================
spin-kickstarts-0.15.6-1.fc15 (FEDORA-2011-7184)
Kickstart files and templates for creating your own Fedora Spins
--------------------------------------------------------------------------------
Update Information:
Version of spin-kickstarts with the state used for RC3.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Bruno Wolff III <bruno@xxxxxxxx> 0.15.6-1
- Build package with state used for RC3.
--------------------------------------------------------------------------------
================================================================================
sugar-0.92.1-4.fc15 (FEDORA-2011-7165)
Constructionist learning platform
--------------------------------------------------------------------------------
Update Information:
Drop problematic patch causing a "XO Disco"
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Peter Robinson <pbrobinson@xxxxxxxxx> - 0.92.1-4
- Drop previous patch, in wider testing it breaks more than it fixes
--------------------------------------------------------------------------------
================================================================================
syslog-ng-3.2.4-3.fc15 (FEDORA-2011-7176)
Next-generation syslog server
--------------------------------------------------------------------------------
Update Information:
Fixes a PCRE-bug, cf. http://www.securityfocus.com/bid/47800
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 16 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.4-3
- Updated the homepage URL
- Syslog-ng data directory in %{_datadir}/%{name}
- Include the main library header files in the devel subpackage
* Thu May 12 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.4-2
- No need to create the directory /etc/syslog-ng in the install section
- Enable the test suite (but excluding the SQL and SSL tests)
* Wed May 11 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.4-1
- Update to 3.2.4
* Mon May 9 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.3-5
- Overrided the default _localstatedir value (configure --localstatedir)
(value hardcoded in update-patterndb)
- Manually created the patterndb.d configuration directory (update-patterndb)
(see also https://bugzilla.balabit.com/show_bug.cgi?id=119 comments >= 4)
- Dropped support for Vim 7.0 and 7.1
* Mon May 9 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.3-4
- Dropped the bison and flex build requirements
- Corrected a couple of macro references in changelog entries (rpmlint)
* Mon May 9 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.3-3
- Added the build requirement systemd-units (macro %_unitdir)
https://fedoraproject.org/wiki/Packaging:Guidelines:Systemd
- Dropped the redefinition of the %_localstatedir macro
- Use %global instead of %define
- Minor modifications of the %post, %preun and %postun scripts
https://fedoraproject.org/wiki/Packaging:ScriptletSnippets#Systemd
- Expanded tabs to spaces (also added a vim modeline)
* Fri May 6 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.3-2
- Fix systemd-related scriptlets (Bill Nottingham)
- Explicitly add --enable-systemd to configure's command line
* Mon May 2 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.3-1
- updated to 3.2.3 final
- cleaned the sysconfig file
* Thu Apr 28 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.3-0.20110424.4
- downgrade the pcre minimal required version from 7.3 to 6.1 (#651823#c26)
- better compliance with the package guidelines
(https://fedoraproject.org/wiki/Packaging:ScriptletSnippets#Systemd)
* Thu Apr 28 2011 Matthias Runge <mrunge@xxxxxxxxxxxxxxxxx> - 3.2.3-0.20110424.3
- honor pidfile
- disable ssl
- disable sql
* Tue Apr 26 2011 Matthias Runge <mrunge@xxxxxxxxxxxxxxxxx> - 3.2.3-0.20110424.2
- drop support for fedora without systemd
* Mon Apr 25 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.3-0.20110424.1
- change NVR to alert users that we have been using a syslog-ng v3.2 git snapshot
(for systemd support)
* Mon Apr 25 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.2-4
- re-introduces the "Provides: syslog" (#651823 comments 13, 15 and 21)
- rename the logrotate.d file back to syslog (#651823 comments 12, 15, 16 and 21)
- cleans the sysconfig and logrotate file mess (#651823 comments 17, 20 and 21)
- spec code cleanup (#651823 comments 10 and 11)
- dropped duplicated eventlog-devel BR
* Thu Apr 21 2011 Matthias Runge <mrunge@xxxxxxxxxxxxxxxxx> - 3.2.2-3
- systemd fixup
- more spec file cleanup,
- incorporate fixes from Jose Pedro Oliveira (#651823 comments 7 and 8)
* Wed Apr 20 2011 Matthias Runge <mrunge@xxxxxxxxxxxxxxxxx> - 3.2.2-2
- spec cleanup
* Wed Apr 13 2011 Matthias Runge <mrunge@xxxxxxxxxxxxxxxxx> - 3.2.2-1
- update to 3.2.2
- built from git snapshot
* Wed Apr 6 2011 Matthias Runge <mrunge@xxxxxxxxxxxxxxxxx> - 3.2.1-3
- install to /sbin
- native systemd start script
* Thu Mar 17 2011 Matthias Runge <mrunge@xxxxxxxxxxxxxxxxx> - 3.2.1-2
- finally move libs to correct place
- split out -devel subpackage
* Fri Mar 4 2011 Matthias Runge <mrunge@xxxxxxxxxxxxxxxxx> - 3.2.1-1
- update to syslog-ng 3.2.1
--------------------------------------------------------------------------------
================================================================================
transifex-client-0.5-1.fc15 (FEDORA-2011-7169)
Command line tool for Transifex translation management
--------------------------------------------------------------------------------
Update Information:
New administrative options.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Domingo Becker <domingobecker@xxxxxxxxx> - 0.5-1
- New upstream version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #678680 - Review Request: transifex-client - Command line tool for Transifex translation management
https://bugzilla.redhat.com/show_bug.cgi?id=678680
--------------------------------------------------------------------------------
================================================================================
viewvc-1.1.11-1.fc15 (FEDORA-2011-7185)
Browser interface for CVS and SVN version control repositories
--------------------------------------------------------------------------------
Update Information:
* security fix: remove user-reachable override of cvsdb row limit
* fix broken standalone.py -c and -d options handling
* add --help option to standalone.py
* fix stack trace when asked to checkout a directory (issue #478)
* improve memory usage and speed of revision log markup (issue #477)
* fix broken annotation view in CVS keyword-bearing files (issue #479)
* warn users when query results are incomplete (issue #443)
* avoid parsing errors on RCS newphrases in the admin section (issue #483)
* make rlog parsing code more robust in certain error cases (issue #444)
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Bojan Smojver <bojan@xxxxxxxxxxxxx> - 1.1.11-1
- bump up to 1.1.11
--------------------------------------------------------------------------------
================================================================================
virt-v2v-0.8.1-2.fc15 (FEDORA-2011-7174)
Convert a virtual machine to run on KVM
--------------------------------------------------------------------------------
Update Information:
Introduce virt-p2v.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Matthew Booth <mbooth@xxxxxxxxxx> - 0.8.1-2
- Remove echoe build dependency
- Fix YAML error during P2V (RHBZ#705113)
* Tue Apr 26 2011 Matthew Booth <mbooth@xxxxxxxxxx> - 0.8.1-1
- Update to release 0.8.1
* Tue Apr 19 2011 Matthew Booth <mbooth@xxxxxxxxxx> - 0.8.0-1
- Update to release 0.8.0
- Include virt-p2v
--------------------------------------------------------------------------------
================================================================================
yash-2.27-1.fc15 (FEDORA-2011-7178)
Yet Another SHell
--------------------------------------------------------------------------------
Update Information:
2.27 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 2.27-1
- 2.27
--------------------------------------------------------------------------------
================================================================================
zint-2.4.3-1.fc15 (FEDORA-2011-7162)
Barcode generator library
--------------------------------------------------------------------------------
Update Information:
This release corrects the computation of the ISBN13 check digit.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Martin Gieseking <martin.gieseking@xxxxxx> 2.4.3-1
- updated to release 2.4.3
* Thu May 5 2011 Martin Gieseking <martin.gieseking@xxxxxx> 2.4.2-1
- updated to release 2.4.2
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
