The following Fedora 15 Security updates need testing:
https://admin.fedoraproject.org/updates/scsi-target-utils-1.0.18-1.fc15
https://admin.fedoraproject.org/updates/feh-1.14.1-1.fc15
https://admin.fedoraproject.org/updates/drupal7-7.4-1.fc15
https://admin.fedoraproject.org/updates/dokuwiki-0-0.9.20110525.a.fc15
https://admin.fedoraproject.org/updates/mingw32-libpng-1.4.3-3.fc15
https://admin.fedoraproject.org/updates/libpng10-1.0.54-3.fc15
https://admin.fedoraproject.org/updates/wordpress-3.1.4-1.fc15
https://admin.fedoraproject.org/updates/asterisk-1.8.4.4-1.fc15
https://admin.fedoraproject.org/updates/torque-3.0.1-4.fc15
https://admin.fedoraproject.org/updates/blender-2.49b-16.fc15
https://admin.fedoraproject.org/updates/oprofile-0.9.6-21.fc15
https://admin.fedoraproject.org/updates/libxml-1.8.17-27.fc15
https://admin.fedoraproject.org/updates/weechat-0.3.5-1.fc15
https://admin.fedoraproject.org/updates/rubygem-actionpack-3.0.5-3.fc15
The following Fedora 15 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/shadow-utils-4.1.4.2-12.fc15
https://admin.fedoraproject.org/updates/cronie-1.4.8-2.fc15
https://admin.fedoraproject.org/updates/openldap-2.4.24-3.fc15
https://admin.fedoraproject.org/updates/mash-0.5.22-1.fc15
https://admin.fedoraproject.org/updates/libcap-ng-0.6.6-1.fc15
https://admin.fedoraproject.org/updates/xorg-x11-drv-wacom-0.11.1-1.fc15
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-14.fc15.1
https://admin.fedoraproject.org/updates/lldpad-0.9.41-3.fc15
https://admin.fedoraproject.org/updates/libfprint-0.4.0-1.fc15,fprintd-0.4.1-1.fc15
The following builds have been pushed to Fedora 15 updates-testing
R-AnnotationDbi-1.14.1-1.fc15
R-Biobase-2.12.1-1.fc15
R-BufferedMatrix-1.16.0-1.fc15
R-DynDoc-1.30.0-1.fc15
R-GeneR-2.22.0-1.fc15
R-IRanges-1.10.4-1.fc15
R-affy-1.30.0-1.fc15
R-affyio-1.20.0-1.fc15
R-caTools-1.12-1.fc15
R-multtest-2.8.0-1.fc15
R-preprocessCore-1.14.0-1.fc15
R-qvalue-1.26.0-1.fc15
R-tkWidgets-1.30.0-1.fc15
R-widgetTools-1.30.0-1.fc15
asterisk-1.8.4.4-1.fc15
audacious-2.5.2-3.fc15
audacious-plugin-fc-0.6-6.fc15
audacious-plugins-2.5.2-2.fc15
bootchart-0.14.0-1.3.git20110630.fc15
bullet-2.78-1.fc15
cppunit-1.12.1-5.fc15
dosbox-0.74-3.fc15
drupal6-6.22-3.fc15
drupal6-feeds-1.0-0.6.beta11.fc15
drupal7-7.4-1.fc15
gnome-tweak-tool-3.0.5-1.fc15
gphotoframe-1.4-0.2.rc1.fc15
ibus-1.3.99.20110419-7.fc15
imgtarget-0.1.4-7.fc15
libgssglue-0.3-0.fc15
libmowgli-0.9.50-1.fc15
libphidget-2.1.8.20110615-1.fc15
mediatomb-0.12.1-12.fc15
microcode_ctl-1.17-15.fc15
python-msgpack-0.1.9-2.fc15
python-taboot-0.3.0-1.fc15
rubygem-gem2rpm-0.7.1-1.fc15
scap-workbench-0.4.0-1.fc15
scsi-target-utils-1.0.18-1.fc15
snakeyaml-1.8-6.fc15
supybot-gribble-0.83.4.1-5.fc15
syslog-ng-3.2.4-6.fc15
tgif-4.2.5-1.fc15
wordpress-3.1.4-1.fc15
xmp-3.3.0-7.fc15
Details about builds:
================================================================================
R-AnnotationDbi-1.14.1-1.fc15 (FEDORA-2011-8885)
Annotation Database Interface
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 1.14.1-1
- Update to version 1.14.1
--------------------------------------------------------------------------------
================================================================================
R-Biobase-2.12.1-1.fc15 (FEDORA-2011-8885)
Base functions for Bioconductor
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 2.12.1-1
- Update to version 2.12.1
--------------------------------------------------------------------------------
================================================================================
R-BufferedMatrix-1.16.0-1.fc15 (FEDORA-2011-8885)
A matrix data storage object method from bioconductor
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 1.16.0-1
- Update to version 1.16.0
--------------------------------------------------------------------------------
================================================================================
R-DynDoc-1.30.0-1.fc15 (FEDORA-2011-8885)
Functions for dynamic documents
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 1.30.0-1
- Update to version 1.30.0
--------------------------------------------------------------------------------
================================================================================
R-GeneR-2.22.0-1.fc15 (FEDORA-2011-8885)
R for genes and sequences analysis
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 2.22.0-1
- Update to version 2.22.0
--------------------------------------------------------------------------------
================================================================================
R-IRanges-1.10.4-1.fc15 (FEDORA-2011-8885)
Low-level containers for storing sets of integer ranges
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 1.10.4-1
- Update to version 1.10.4
* Tue Mar 15 2011 pingou <pingou@xxxxxxxxxxxx> 1.8.9-1
- Update to version 1.8.9
--------------------------------------------------------------------------------
================================================================================
R-affy-1.30.0-1.fc15 (FEDORA-2011-8885)
Methods for Affymetrix Oligonucleotide Arrays
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 1.30.0-1
- Update to version 1.30.0
--------------------------------------------------------------------------------
================================================================================
R-affyio-1.20.0-1.fc15 (FEDORA-2011-8885)
Tools for parsing Affymetrix data files
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 1.20.0-1
- Update to version 1.20.0
--------------------------------------------------------------------------------
================================================================================
R-caTools-1.12-1.fc15 (FEDORA-2011-8885)
Tools: moving window statistics, gif, base64, roc auc...
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 1.12-1
- Update to version 1.12
--------------------------------------------------------------------------------
================================================================================
R-multtest-2.8.0-1.fc15 (FEDORA-2011-8885)
Multiple hypothesis testing library from Bioconductor
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 2.8.0-1
- Update to version 2.8.0
--------------------------------------------------------------------------------
================================================================================
R-preprocessCore-1.14.0-1.fc15 (FEDORA-2011-8885)
A collection of pre-processing functions
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 1.14.0-1
- Update to version 1.14.0
--------------------------------------------------------------------------------
================================================================================
R-qvalue-1.26.0-1.fc15 (FEDORA-2011-8885)
Q-value estimation for false discovery rate control
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 1.26.0-1
- Update to version 1.26.0
--------------------------------------------------------------------------------
================================================================================
R-tkWidgets-1.30.0-1.fc15 (FEDORA-2011-8885)
Widgets to provide user interfaces from bioconductor
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 1.30.0-1
- Update to version 1.30.0
--------------------------------------------------------------------------------
================================================================================
R-widgetTools-1.30.0-1.fc15 (FEDORA-2011-8885)
Bioconductor tools to support tcltk widgets
--------------------------------------------------------------------------------
Update Information:
Update to new Bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 1.30.0-1
- Update to version 1.30.0
--------------------------------------------------------------------------------
================================================================================
asterisk-1.8.4.4-1.fc15 (FEDORA-2011-8903)
The Open Source PBX
--------------------------------------------------------------------------------
Update Information:
The Asterisk Development Team has announced the release of Asterisk versions
1.4.41.2, 1.6.2.18.2, and 1.8.4.4, which are security releases.
These releases are available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/releases
The release of Asterisk 1.4.41.2, 1.6.2.18.2, and 1.8.4.4 resolves the
following issue:
AST-2011-011: Asterisk may respond differently to SIP requests from an
invalid SIP user than it does to a user configured on the system, even when the
alwaysauthreject option is set in the configuration. This can leak information
about what SIP users are valid on the Asterisk system.
For more information about the details of this vulnerability, please read
the security advisory AST-2011-011, which was released at the same time as this
announcement.
For a full list of changes in the current releases, please see the ChangeLog:
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.41.2
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.18.2
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.4
Security advisory AST-2011-011 is available at:
http://downloads.asterisk.org/pub/security/AST-2011-011.pdf
The Asterisk Development Team has announced the release of Asterisk versions
1.4.41.1, 1.6.2.18.1, and 1.8.4.3, which are security releases.
These releases are available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/releases
The release of Asterisk 1.4.41.1, 1.6.2.18, and 1.8.4.3 resolves several issues
as outlined below:
* AST-2011-008: If a remote user sends a SIP packet containing a null,
Asterisk assumes available data extends past the null to the
end of the packet when the buffer is actually truncated when
copied. This causes SIP header parsing to modify data past
the end of the buffer altering unrelated memory structures.
This vulnerability does not affect TCP/TLS connections.
-- Resolved in 1.6.2.18.1 and 1.8.4.3
* AST-2011-009: A remote user sending a SIP packet containing a Contact header
with a missing left angle bracket (<) causes Asterisk to
access a null pointer.
-- Resolved in 1.8.4.3
* AST-2011-010: A memory address was inadvertently transmitted over the
network via IAX2 via an option control frame and the remote party would try
to access it.
-- Resolved in 1.4.41.1, 1.6.2.18.1, and 1.8.4.3
The issues and resolutions are described in the AST-2011-008, AST-2011-009, and
AST-2011-010 security advisories.
For more information about the details of these vulnerabilities, please read
the security advisories AST-2011-008, AST-2011-009, and AST-2011-010, which were
released at the same time as this announcement.
For a full list of changes in the current releases, please see the ChangeLog:
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.41.1
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.18.1
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.3
Security advisories AST-2011-008, AST-2011-009, and AST-2011-010 are available
at:
http://downloads.asterisk.org/pub/security/AST-2011-008.pdf
http://downloads.asterisk.org/pub/security/AST-2011-009.pdf
http://downloads.asterisk.org/pub/security/AST-2011-010.pdf
The Asterisk Development Team has announced the release of Asterisk
version 1.8.4.2, which is a security release for Asterisk 1.8.
This release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/releases
The release of Asterisk 1.8.4.2 resolves an issue with SIP URI
parsing which can lead to a remotely exploitable crash:
Remote Crash Vulnerability in SIP channel driver (AST-2011-007)
The issue and resolution is described in the AST-2011-007 security
advisory.
For more information about the details of this vulnerability, please
read the security advisory AST-2011-007, which was released at the
same time as this announcement.
For a full list of changes in the current release, please see the ChangeLog:
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.2
Security advisory AST-2011-007 is available at:
http://downloads.asterisk.org/pub/security/AST-2011-007.pdf
The Asterisk Development Team has announced the release of Asterisk 1.8.4.1.
This release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/
The release of Asterisk 1.8.4.1 resolves several issues reported by the
community. Without your help this release would not have been possible.
Thank you!
Below is a list of issues resolved in this release:
* Fix our compliance with RFC 3261 section 18.2.2. (aka Cisco phone fix)
(Closes issue #18951. Reported by jmls. Patched by wdoekes)
* Resolve a change in IPv6 header parsing due to the Cisco phone fix issue.
This issue was found and reported by the Asterisk test suite.
(Closes issue #18951. Patched by mnicholson)
* Resolve potential crash when using SIP TLS support.
(Closes issue #19192. Reported by stknob. Patched by Chainsaw. Tested by
vois, Chainsaw)
* Improve reliability when using SIP TLS.
(Closes issue #19182. Reported by st. Patched by mnicholson)
For a full list of changes in this release candidate, please see the ChangeLog:
http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.4.1
The Asterisk Development Team has announced the release of Asterisk 1.8.4. This
release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/
The release of Asterisk 1.8.4 resolves several issues reported by the community.
Without your help this release would not have been possible. Thank you!
Below is a sample of the issues resolved in this release:
* Use SSLv23_client_method instead of old SSLv2 only.
(Closes issue #19095, #19138. Reported, patched by tzafrir. Tested by russell
and chazzam.
* Resolve crash in ast_mutex_init()
(Patched by twilson)
* Resolution of several DTMF based attended transfer issues.
(Closes issue #17999, #17096, #18395, #17273. Reported by iskatel, gelo,
shihchuan, grecco. Patched by rmudgett)
NOTE: Be sure to read the ChangeLog for more information about these changes.
* Resolve deadlocks related to device states in chan_sip
(Closes issue #18310. Reported, patched by one47. Patched by jpeeler)
* Resolve an issue with the Asterisk manager interface leaking memory when
disabled.
(Reported internally by kmorgan. Patched by russellb)
* Support greetingsfolder as documented in voicemail.conf.sample.
(Closes issue #17870. Reported by edhorton. Patched by seanbright)
* Fix channel redirect out of MeetMe() and other issues with channel softhangup
(Closes issue #18585. Reported by oej. Tested by oej, wedhorn, russellb.
Patched by russellb)
* Fix voicemail sequencing for file based storage.
(Closes issue #18498, #18486. Reported by JJCinAZ, bluefox. Patched by
jpeeler)
* Set hangup cause in local_hangup so the proper return code of 486 instead of
503 when using Local channels when the far sides returns a busy. Also affects
CCSS in Asterisk 1.8+.
(Patched by twilson)
* Fix issues with verbose messages not being output to the console.
(Closes issue #18580. Reported by pabelanger. Patched by qwell)
* Fix Deadlock with attended transfer of SIP call
(Closes issue #18837. Reported, patched by alecdavis. Tested by
alecdavid, Irontec, ZX81, cmaj)
Includes changes per AST-2011-005 and AST-2011-006
For a full list of changes in this release candidate, please see the ChangeLog:
http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.4
Information about the security releases are available at:
http://downloads.asterisk.org/pub/security/AST-2011-005.pdf
http://downloads.asterisk.org/pub/security/AST-2011-006.pdf
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 29 2011 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 1.8.4.4-1
- The Asterisk Development Team has announced the release of Asterisk
- versions 1.4.41.2, 1.6.2.18.2, and 1.8.4.4, which are security
- releases.
-
- These releases are available for immediate download at
- http://downloads.asterisk.org/pub/telephony/asterisk/releases
-
- The release of Asterisk 1.4.41.2, 1.6.2.18.2, and 1.8.4.4 resolves the
- following issue:
-
- AST-2011-011: Asterisk may respond differently to SIP requests from an
- invalid SIP user than it does to a user configured on the system, even
- when the alwaysauthreject option is set in the configuration. This can
- leak information about what SIP users are valid on the Asterisk
- system.
-
- For more information about the details of this vulnerability, please
- read the security advisory AST-2011-011, which was released at the
- same time as this announcement.
-
- For a full list of changes in the current releases, please see the ChangeLog:
-
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.41.2
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.18.2
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.4
-
- Security advisory AST-2011-011 is available at:
-
- http://downloads.asterisk.org/pub/security/AST-2011-011.pdf
* Mon Jun 27 2011 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 1.8.4.3-3
- Don't forget stereorize
* Mon Jun 27 2011 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 1.8.4.3-2
- Move /var/run/asterisk to /run/asterisk
- Add comments to systemd service file on how to mimic safe_asterisk functionality
- Build more of the optional binaries
- Install the tmpfiles.d configuration on Fedora 15
* Fri Jun 24 2011 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 1.8.4.3-1
- The Asterisk Development Team has announced the release of Asterisk versions
- 1.4.41.1, 1.6.2.18.1, and 1.8.4.3, which are security releases.
-
- These releases are available for immediate download at
- http://downloads.asterisk.org/pub/telephony/asterisk/releases
-
- The release of Asterisk 1.4.41.1, 1.6.2.18, and 1.8.4.3 resolves several issues
- as outlined below:
-
- * AST-2011-008: If a remote user sends a SIP packet containing a null,
- Asterisk assumes available data extends past the null to the
- end of the packet when the buffer is actually truncated when
- copied. This causes SIP header parsing to modify data past
- the end of the buffer altering unrelated memory structures.
- This vulnerability does not affect TCP/TLS connections.
- -- Resolved in 1.6.2.18.1 and 1.8.4.3
-
- * AST-2011-009: A remote user sending a SIP packet containing a Contact header
- with a missing left angle bracket (<) causes Asterisk to
- access a null pointer.
- -- Resolved in 1.8.4.3
-
- * AST-2011-010: A memory address was inadvertently transmitted over the
- network via IAX2 via an option control frame and the remote party would try
- to access it.
- -- Resolved in 1.4.41.1, 1.6.2.18.1, and 1.8.4.3
-
- The issues and resolutions are described in the AST-2011-008, AST-2011-009, and
- AST-2011-010 security advisories.
-
- For more information about the details of these vulnerabilities, please read
- the security advisories AST-2011-008, AST-2011-009, and AST-2011-010, which were
- released at the same time as this announcement.
-
- For a full list of changes in the current releases, please see the ChangeLog:
-
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.41.1
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.18.1
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.3
-
- Security advisories AST-2011-008, AST-2011-009, and AST-2011-010 are available
- at:
-
- http://downloads.asterisk.org/pub/security/AST-2011-008.pdf
- http://downloads.asterisk.org/pub/security/AST-2011-009.pdf
- http://downloads.asterisk.org/pub/security/AST-2011-010.pdf
* Tue Jun 21 2011 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 1.8.4.2-2
- Convert to systemd
* Fri Jun 17 2011 Marcela Mašláňová <mmaslano@xxxxxxxxxx> - 1.8.4.2-1.2
- Perl mass rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #710441 - CVE-2011-2216 Asterisk: Remote DoS (crash) in SIP channel driver (AST-2011-007)
https://bugzilla.redhat.com/show_bug.cgi?id=710441
--------------------------------------------------------------------------------
================================================================================
audacious-2.5.2-3.fc15 (FEDORA-2011-8399)
Advanced audio player
--------------------------------------------------------------------------------
Update Information:
This is an upgrade from Audacious 2.4.5 to the current stable release 2.5.2 in order to benefit from improvements and additional bug-fixes not limited to the linked ticket numbers.
Due to a Generic Plugin ABI/API change in the 2.5 series, all plugin packages need an update as well.
If you use Audacious in conjunction with 3rd party plugin packages, you won't be able to install this upgrade as long as any of your installed plugin packages have not been updated appropriately. There will be RPM dependency errors if you try to. Please don't complain about that. They are a good thing.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 29 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 2.5.2-3
- Add audtool2/audacious2 symlinks for compatibility with 2.4.x
and older. These are deprecated and will be gone with Audacious 3.
- Merge some post-2.5.2 fixes from git.
* Fri Jun 24 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 2.5.2-2
- Rename also the built-in desktop file path.
* Tue Jun 21 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 2.5.2-1
- Move audacious(plugin-api) Provides to the audacious-libs package.
- Update to 2.5.2.
* Fri Jun 17 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 2.5.1-3
- Keep audacious2.desktop for compatibility with 2.4.x in Fedora 15.
* Tue Jun 14 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 2.5.1-2
- Explicitly require libmowgli >= 0.9.
* Thu May 19 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 2.5.1-1
- Update to 2.5.1.
* Sat Apr 23 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 2.5.0-3
- Merge fix for skinned ui track next/prev (AUD-331).
* Fri Apr 22 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 2.5.0-2
- Only --disable-sse2 for %ix86.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #712809 - audacious-plugin-xmp fails with FileWriter output
https://bugzilla.redhat.com/show_bug.cgi?id=712809
--------------------------------------------------------------------------------
================================================================================
audacious-plugin-fc-0.6-6.fc15 (FEDORA-2011-8399)
Future Composer input plugin for Audacious
--------------------------------------------------------------------------------
Update Information:
This is an upgrade from Audacious 2.4.5 to the current stable release 2.5.2 in order to benefit from improvements and additional bug-fixes not limited to the linked ticket numbers.
Due to a Generic Plugin ABI/API change in the 2.5 series, all plugin packages need an update as well.
If you use Audacious in conjunction with 3rd party plugin packages, you won't be able to install this upgrade as long as any of your installed plugin packages have not been updated appropriately. There will be RPM dependency errors if you try to. Please don't complain about that. They are a good thing.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 23 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 0.6-6
- Update the audacious(plugin-api) stuff in the spec file, so the new
_AUD_PLUGIN_VERSION_MIN is not taken by mistake.
- Merge from 0.6-3.0.1:
- Patch and rebuild for Audacious 2.5-alpha1 generic plugin API bump.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #712809 - audacious-plugin-xmp fails with FileWriter output
https://bugzilla.redhat.com/show_bug.cgi?id=712809
--------------------------------------------------------------------------------
================================================================================
audacious-plugins-2.5.2-2.fc15 (FEDORA-2011-8399)
Plugins for the Audacious audio player
--------------------------------------------------------------------------------
Update Information:
This is an upgrade from Audacious 2.4.5 to the current stable release 2.5.2 in order to benefit from improvements and additional bug-fixes not limited to the linked ticket numbers.
Due to a Generic Plugin ABI/API change in the 2.5 series, all plugin packages need an update as well.
If you use Audacious in conjunction with 3rd party plugin packages, you won't be able to install this upgrade as long as any of your installed plugin packages have not been updated appropriately. There will be RPM dependency errors if you try to. Please don't complain about that. They are a good thing.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 29 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 2.5.2-2
- Merge cue playlist load fix from git.
* Tue Jun 21 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 2.5.2-1
- Update to 2.5.2.
* Tue Jun 14 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 2.5.1-4
- Merge ui_playlist.c fix for 2.5.2.
* Thu Jun 9 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 2.5.1-3
- Rebuild for libmtp SONAME bump.
- Drop old audacious-plugins-metronome subpackage Obsoletes/Provides.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #712809 - audacious-plugin-xmp fails with FileWriter output
https://bugzilla.redhat.com/show_bug.cgi?id=712809
--------------------------------------------------------------------------------
================================================================================
bootchart-0.14.0-1.3.git20110630.fc15 (FEDORA-2011-8884)
Boot Process Performance Visualization
--------------------------------------------------------------------------------
Update Information:
fixed "Can't write to bootchart.png"
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Harald Hoyer <harald@xxxxxxxxxx> 0.14.0-1.3.git20110630
- update to latest git
- fixed write bug
Resolves: rhbz#699934
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #699934 - Bootchart can't write graph file
https://bugzilla.redhat.com/show_bug.cgi?id=699934
--------------------------------------------------------------------------------
================================================================================
bullet-2.78-1.fc15 (FEDORA-2011-8895)
3D Collision Detection and Rigid Body Dynamics Library
--------------------------------------------------------------------------------
Update Information:
Update to bullet-2.78
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 11 2011 Rich Mattes <richmattes@xxxxxxxxx> - 2.78-1
- Update to version 2.78
- Remove upstreamed patches
* Sat Feb 19 2011 Rich Mattes <richmattes@xxxxxxxxx> - 2.77-4
- Fix gcc 4.6 build error
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.77-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
cppunit-1.12.1-5.fc15 (FEDORA-2011-8913)
C++ unit testing framework
--------------------------------------------------------------------------------
Update Information:
Fixes Bug 641350 - implicit destructor of CppUnit::Message causes segfault when test is built with debug.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 28 2011 Steven M. Parrish <smparrish@xxxxxxxxx> - 1.12.1-5
- Fix for bug 452340
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #641350 - implicit destructor of CppUnit::Message causes segfault when test is built with debug. STL
https://bugzilla.redhat.com/show_bug.cgi?id=641350
--------------------------------------------------------------------------------
================================================================================
dosbox-0.74-3.fc15 (FEDORA-2011-8886)
x86/DOS emulator with sound and graphics
--------------------------------------------------------------------------------
Update Information:
FTBFS15
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 0.74-3
- Adopt openSUSE's gcc46.patch (Fix FTBFS BZ#715677).
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.74-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
drupal6-6.22-3.fc15 (FEDORA-2011-8915)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
Removes spurious dirs in /etc/drupal6 to avoid confusion.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Jon Ciesla <limb@xxxxxxxxxxxx> - 6.22-3
- Drop unneeded dirs in /etc/drupal6, BZ 706735.
* Fri Jun 17 2011 Jon Ciesla <limb@xxxxxxxxxxxx> - 6.22-2
- Bump and rebuild for BZ 712251.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #706735 - Put modules and themes directories under /etc/drupal6/all/
https://bugzilla.redhat.com/show_bug.cgi?id=706735
--------------------------------------------------------------------------------
================================================================================
drupal6-feeds-1.0-0.6.beta11.fc15 (FEDORA-2011-8911)
An import and aggregation framework for Drupal
--------------------------------------------------------------------------------
Update Information:
New upstream version, updated to 1.0-beta11.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Peter Borsa <peter.borsa@xxxxxxxxx> - 1.0-0.6.beta11
- Fixed release number in the spec file.
* Thu Jun 30 2011 Peter Borsa <peter.borsa@xxxxxxxxx> - 1.0-0.1.beta11
- New upstream version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #717587 - drupal6-feeds-1.0-beta11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=717587
--------------------------------------------------------------------------------
================================================================================
drupal7-7.4-1.fc15 (FEDORA-2011-8878)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
Remember to log in as user 1 prior to the RPM update, to perform the DB upgrade via http://yoursite/update.php.
* Advisory ID: DRUPAL-SA-CORE-2011-002
* Project: Drupal core [1]
* Version: 7.x
* Date: 2011-JUNE-29
* Security risk: Highly critical [2]
* Exploitable from: Remote
* Vulnerability: Access bypass
-------- DESCRIPTION
---------------------------------------------------------
.... Access bypass in node listings
Listings showing nodes but not JOINing the node table show all nodes
regardless of restrictions imposed by the node_access system. In core, this
affects the taxonomy and the forum subsystem.
Note that fixing this issue in contributed modules requires a
backwards-compatible API change for modules listing nodes. See
http://drupal.org/node/1204572 [3] for more details.
This issue affects Drupal 7.x only.
-------- VERSIONS AFFECTED
---------------------------------------------------
* Drupal 7.0, 7.1 and 7.2.
-------- SOLUTION
------------------------------------------------------------
Install the latest version:
* If you are running Drupal 7.x then upgrade to Drupal 7.3 or 7.4.
The Security Team has released both a pure security update without other bug
fixes and a security update combined with other bug fixes and improvements.
You can choose to either only include the security update for an immediate
fix (which might require less quality assurance and testing) or more fixes
and improvements alongside the security fixes by choosing between Drupal 7.3
and Drupal 7.4. Read the announcement [4] for more information.
See also the Drupal core [5] project page.
-------- REPORTED BY
---------------------------------------------------------
* The access bypass was reported independently by numerous people, including
Sascha Grossenbacher [6], Khaled Alhourani [7], and Ben Ford [8].
-------- FIXED BY
------------------------------------------------------------
* The access bypass was fixed by Károly Négyesi [9], member of the Drupal
security team
-------- CONTACT AND MORE INFORMATION
----------------------------------------
The Drupal security team can be reached at security at drupal.org or via the
contact form at http://drupal.org/contact [10].
Learn more about the Drupal Security team and their policies [11], writing
secure code for Drupal [12], and securing your site [13].
[1] http://drupal.org/project/drupal
[2] http://drupal.org/security-team/risk-levels
[3] http://drupal.org/node/1204572
[4] http://drupal.org/drupal-7.4
[5] http://drupal.org/project/drupal
[6] http://drupal.org/user/214652
[7] http://drupal.org/user/265439
[8] http://drupal.org/user/12534
[9] http://drupal.org/user/9446
[10] http://drupal.org/contact
[11] http://drupal.org/security-team
[12] http://drupal.org/writing-secure-code
[13] http://drupal.org/security/secure-configuration
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Jon Ciesla <limb@xxxxxxxxxxxx> - 7.4-1
- New upstream, SA-CORE-2011-002, BZ 717874.
- Dropped unused dirs in /etc/drupal7/, BZ 703736.
* Fri Jun 17 2011 Jon Ciesla <limb@xxxxxxxxxxxx> - 7.2-2
- Bump and rebuild for BZ 712251.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #717874 - Remote access bypass vulnerability in Drupal 7
https://bugzilla.redhat.com/show_bug.cgi?id=717874
[ 2 ] Bug #706736 - Put modules and themes directories under /etc/drupal7/all/
https://bugzilla.redhat.com/show_bug.cgi?id=706736
--------------------------------------------------------------------------------
================================================================================
gnome-tweak-tool-3.0.5-1.fc15 (FEDORA-2011-8904)
A tool to customize advanced GNOME 3 options
--------------------------------------------------------------------------------
Update Information:
- Update to 3.0.5
- upstream news:
http://ftp.gnome.org/pub/GNOME/sources/gnome-tweak-tool/3.0/gnome-tweak-tool-3.0.5.news
* autostart fixes
* appearance improvements
* focus follow mouse mode
* finer-grained desktop item visibility
* streamlined shell restart offer when enabling extensions
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Michel Salim <salimma@xxxxxxxxxxxxxxxxx> - 3.0.5-1
- Update to 3.0.5
- upstream news:
http://ftp.gnome.org/pub/GNOME/sources/gnome-tweak-tool/3.0/gnome-tweak-tool-3.0.5.news
* autostart fixes
* appearance improvements
* focus follow mouse mode
* finer-grained desktop item visibility
* streamlined shell restart offer when enabling extensions
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #706683 - gnome-tweak-tool-3.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=706683
[ 2 ] Bug #704598 - [abrt] gnome-tweak-tool-3.0.3-1.fc15: utils.py:68:update_start_at_login:IOError: [Errno 2] No such file or directory: '/home/rakesh/.config/autostart/nautilus.desktop'
https://bugzilla.redhat.com/show_bug.cgi?id=704598
--------------------------------------------------------------------------------
================================================================================
gphotoframe-1.4-0.2.rc1.fc15 (FEDORA-2011-8906)
Photo Frame Gadget for the GNOME Desktop
--------------------------------------------------------------------------------
Update Information:
New version 1.4 rc1 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.4-0.2.rc1
- 1.4 rc1
* Sun Jun 12 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.4-0.1.b2
- 1.4 b2
--------------------------------------------------------------------------------
================================================================================
ibus-1.3.99.20110419-7.fc15 (FEDORA-2011-8535)
Intelligent Input Bus for Linux OS
--------------------------------------------------------------------------------
Update Information:
The previous ibus could not get the latest list of input method engines when users uncheck 'Custom active input methods' check box in 'ibus-setup' command.
This fix can update the list immediately and also launch the info dialog.
Also this release changes the definition of Control+Space.
The previous release use 'Control+Space' as IME on/off.
This fix use 'Control+Space' as switching the previous and current engines.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 20 2011 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.3.99.20110419-7
- Updated ibus-HEAD.patch for upstream.
- Removed ibus-435880-surrounding-text.patch as upstream.
- Added ibus-711632-fedora-fallback-icon.patch
Fixed SEGV with no icon in oxygen-gtk icon theme.
- Added ibus-xx-icon-symbol.patch
- Added ibus-xx-bridge-hotkey.patch
- Added transitional ibus-gnome3 package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #712307 - ibus losing preference on customize + restart
https://bugzilla.redhat.com/show_bug.cgi?id=712307
--------------------------------------------------------------------------------
================================================================================
imgtarget-0.1.4-7.fc15 (FEDORA-2011-8876)
Front-end to functionality provided by ArgyllCMS
--------------------------------------------------------------------------------
Update Information:
F14FTBFS, F16FTBFS
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 0.1.4-7
- Fix up broken spec-changelog entry.
* Thu Jun 30 2011 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 0.1.4-6
- Append INCLUDES="-I/usr/include/netpbm" and LIBS="-lX11" to %configure
(Fix FTBFS BZ#599895, BZ#715981).
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.1.4-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libgssglue-0.3-0.fc15 (FEDORA-2011-8912)
Generic Security Services Application Programming Interface Library
--------------------------------------------------------------------------------
Update Information:
* Add new typedefs defined in RFC 5587 and used in newer versions
of MIT Kerberos. Fixes a compile error in nfs-utils which uses
gssapi.h from this package and other gss headers from the
Kerberos distribution.
The original bug report #629553 is available at
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629553
and bug report #629692 (which has build logs) is available at
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629692
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Steve Dickson <steved@xxxxxxxxxx> 0.3-0
- Update latest upstream version: 0.3
* Add new typedefs defined in RFC 5587 and used
in newer versions of MIT Kerberos. Fixes a
compile error in nfs-utils which uses gssapi.h
from this package and other gss headers from the
Kerberos distribution.
--------------------------------------------------------------------------------
================================================================================
libmowgli-0.9.50-1.fc15 (FEDORA-2011-8399)
Library of many utility functions and classes
--------------------------------------------------------------------------------
Update Information:
This is an upgrade from Audacious 2.4.5 to the current stable release 2.5.2 in order to benefit from improvements and additional bug-fixes not limited to the linked ticket numbers.
Due to a Generic Plugin ABI/API change in the 2.5 series, all plugin packages need an update as well.
If you use Audacious in conjunction with 3rd party plugin packages, you won't be able to install this upgrade as long as any of your installed plugin packages have not been updated appropriately. There will be RPM dependency errors if you try to. Please don't complain about that. They are a good thing.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 31 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 0.9.50-1
- Upgrade to 0.9.50.
- mowgli_dictionary is deprecated and pending removal in Mowgli 1.0 series.
Please use mowgli_patricia instead.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #712809 - audacious-plugin-xmp fails with FileWriter output
https://bugzilla.redhat.com/show_bug.cgi?id=712809
--------------------------------------------------------------------------------
================================================================================
libphidget-2.1.8.20110615-1.fc15 (FEDORA-2011-8909)
Drivers and API for Phidget devices
--------------------------------------------------------------------------------
Update Information:
Update to version 2.1.8.20110615
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 29 2011 Rich Mattes <richmattes@xxxxxxxxx> - 2.1.8.20110615-1
- Update to 2.1.8.20110615
* Wed May 11 2011 Rich Mattes <richmattes@xxxxxxxxx> - 2.1.8.20110322-1
- Update to 2.1.8.20110322
--------------------------------------------------------------------------------
================================================================================
mediatomb-0.12.1-12.fc15 (FEDORA-2011-8905)
MediaTomb - UPnP AV Mediaserver for Linux
--------------------------------------------------------------------------------
Update Information:
This update fixes residual errors from the js-1.8 update. Custom js parsing scripts (import.js & playlists.js) should now work correctly, and the javascript printing routines should render correctly in the mediatomb logs.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 29 2011 Rich Mattes <richmattes@xxxxxxxxx> - 0.12.1-12
- Update to fix js printing routine
* Tue Jun 28 2011 Rich Mattes <richmattes@xxxxxxxxx> - 0.12.1-11
- Added fix for custom JS parsing failure (#714466)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #714466 - Mediatomb fails to categorize media files
https://bugzilla.redhat.com/show_bug.cgi?id=714466
--------------------------------------------------------------------------------
================================================================================
microcode_ctl-1.17-15.fc15 (FEDORA-2011-8892)
Tool to update x86/x86-64 CPU microcode.
--------------------------------------------------------------------------------
Update Information:
Fix udev rules (Dave Jones ) [#690930]
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Anton Arapov <anton@xxxxxxxxxx> 1.17-15
- Fix udev rules (Dave Jones ) [#690930]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #690930 - microcode_ctl loops, impossible to boot
https://bugzilla.redhat.com/show_bug.cgi?id=690930
--------------------------------------------------------------------------------
================================================================================
python-msgpack-0.1.9-2.fc15 (FEDORA-2011-8907)
A Python MessagePack (de)serializer
--------------------------------------------------------------------------------
Update Information:
MessagePack is a binary-based efficient data interchange format that is
focused on high performance. It is like JSON, but very fast and small.
This is a Python (de)serializer for MessagePack.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #691114 - Review Request: python-msgpack - A MessagePack (de)serializer
https://bugzilla.redhat.com/show_bug.cgi?id=691114
--------------------------------------------------------------------------------
================================================================================
python-taboot-0.3.0-1.fc15 (FEDORA-2011-8889)
Client utility for scripted multi-system administration over Func
--------------------------------------------------------------------------------
Update Information:
Fixed #13 - Generate HTML versions of the man pages
Fixed #6, #7, #11, #12 - Updated the Nagios task completely to use the native Func Nagios module
Fixed #17 - sleep.Minutes not printing correct status message
Fixed #20 - Be more helpful when YAML fails to load
Fixed #22 - Taboots not processing YAML files with multiple documents inside
Fixed #15 - Die gracefully when processing bad CLI options
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2011 Tim Bielawa <tbielawa@xxxxxxxxxx> 0.3.0-1
- Update version. 0.3.0. If Linux can do it -- so can we. (tbielawa@xxxxxxxxxx)
- Now included in EPEL and Fedora. Fixes #9 (tbielawa@xxxxxxxxxx)
- Correct a lot of spelling errors. Fixes #23 (Taboot maintainer has atrocious
spelling) (tbielawa@xxxxxxxxxx)
- Correctly handle YAML files with multiple YAML documents inside. Fixes #22
(tbielawa@xxxxxxxxxx)
- Better YAML loading debugging. Fixes #20 (tbielawa@xxxxxxxxxx)
- Handle bad CLI options gracefully. Fixes #15 (tbielawa@xxxxxxxxxx)
- Modify patch from jdetiber. Fixes #17 - sleep.Minutes not printing correct
status message (tbielawa@xxxxxxxxxx)
- Updated output for sleep.Minutes (jason.detiberus@xxxxxxxxxx)
- Update man page (tbielawa@xxxxxxxxxx)
- Update taboot-tasks manpage (tbielawa@xxxxxxxxxx)
- Make HOST the default for downtime scheduling again (tbielawa@xxxxxxxxxx)
- Updating Nagios task docs (tbielawa@xxxxxxxxxx)
- Rewrite the Nagios task to use the new Func Nagios module instead of CURL.
Fixes #6, #7, #11, #12 (tbielawa@xxxxxxxxxx)
- Adding HTML versions of the man pages to the HTML docs. Fixes #13
(tbielawa@xxxxxxxxxx)
--------------------------------------------------------------------------------
================================================================================
rubygem-gem2rpm-0.7.1-1.fc15 (FEDORA-2011-8902)
Generate rpm specfiles from gems
--------------------------------------------------------------------------------
Update Information:
Updated to the 0.7.1 version.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Vít Ondruch <vondruch@xxxxxxxxxx> - 0.7.1-1
- Updated to the 0.7.1 version.
--------------------------------------------------------------------------------
================================================================================
scap-workbench-0.4.0-1.fc15 (FEDORA-2011-8881)
Scanning, tailoring, editing and validation tool for SCAP content
--------------------------------------------------------------------------------
Update Information:
New release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Maros Barabas <xbarry@xxxxxxxxx> 0.4.0-1
- Redesign of abstract classes in editor
- New dialog module
- New preview dialog
- UI improvements
- Added documentation
- Fixed bugs
--------------------------------------------------------------------------------
================================================================================
scsi-target-utils-1.0.18-1.fc15 (FEDORA-2011-8890)
The SCSI target daemon and utility programs
--------------------------------------------------------------------------------
Update Information:
fix double-free vulnerability leads to pre-authenticated crash
fix iscsi target outgoing user binding broken unexpectedly
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 29 2011 Andy Grover <agrover@xxxxxxxxxx> - 1.0.18-1
- Update to new upstream release
- Remove git-sync patch
* Fri Apr 29 2011 Dan Horák <dan[at]danny.cz> - 1.0.14-3
- no InfiniBand on s390(x)
* Thu Mar 17 2011 Andy Grover <agrover@xxxxxxxxxx> - 1.0.14-2
- Add git-sync patch to get up to 9c1cd78.
* Thu Mar 17 2011 Andy Grover <agrover@xxxxxxxxxx> - 1.0.14-1
- Update to new upstream release
* Tue Feb 22 2011 Andy Grover <agrover@xxxxxxxxxx> - 1.0.13-1
- Update to new upstream release
- Drop merged snprintf-fix and fix-isns-of patches
- Update dynamic-link-iser patch for new iser module
- Small fixes to redhatify-docs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #667261 - CVE-2011-0001 scsi-target-utils: double-free vulnerability leads to pre-authenticated crash
https://bugzilla.redhat.com/show_bug.cgi?id=667261
--------------------------------------------------------------------------------
================================================================================
snakeyaml-1.8-6.fc15 (FEDORA-2011-8887)
YAML parser and emitter for the Java programming language
--------------------------------------------------------------------------------
Update Information:
YAML parser and emitter for the Java programming language
SnakeYAML features:
* a complete YAML 1.1 parser. In particular,
SnakeYAML can parse all examples from the specification.
* Unicode support including UTF-8/UTF-16 input/output.
* high-level API for serializing and deserializing
native Java objects.
* support for all types from the YAML types repository.
* relatively sensible error messages.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #713933 - Request for a F15 version of snakeyaml
https://bugzilla.redhat.com/show_bug.cgi?id=713933
--------------------------------------------------------------------------------
================================================================================
supybot-gribble-0.83.4.1-5.fc15 (FEDORA-2011-8893)
Cross-platform support bot based on supybot
--------------------------------------------------------------------------------
Update Information:
Here is where you
give an explanation of
your update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #693664 - Review Request: supybot-gribble - Cross-platform support bot based on supybot
https://bugzilla.redhat.com/show_bug.cgi?id=693664
--------------------------------------------------------------------------------
================================================================================
syslog-ng-3.2.4-6.fc15 (FEDORA-2011-8897)
Next-generation syslog server
--------------------------------------------------------------------------------
Update Information:
Bugreport against EPEL 6, true for F15, too. https://bugzilla.redhat.com/show_bug.cgi?id=713965
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 27 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.4-6
- Patch syslog-ng-3.2.4-chain-hostnames-processing.patch (#713965)
* Mon Jun 20 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.4-5
- Enabled support for capability management (--enable-linux-caps)
* Tue May 17 2011 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.2.4-4
- Enabled SQL support (subpackage syslog-ng-libdbi)
--------------------------------------------------------------------------------
================================================================================
tgif-4.2.5-1.fc15 (FEDORA-2011-8882)
2-D drawing tool
--------------------------------------------------------------------------------
Update Information:
New version 4.2.5 is released.
New version 4.2.4 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 4.2.5-1
- 4.2.5
* Sun Jun 26 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 4.2.4-1
- 4.2.4
--------------------------------------------------------------------------------
================================================================================
wordpress-3.1.4-1.fc15 (FEDORA-2011-8877)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
Upstream security release. Details at
http://wordpress.org/news/2011/06/wordpress-3-1-4/
Fix old FSF address and Summary to make rpmlint happy.
Make wp-content directory owned by apache:apache.
Correctly Provides/Obsoletes (with versions).
Upgrade to the latest upstream version (security fixes and enhancements, BZ 707772).
Move wp-content directory to /var/www/wordpress/ (BZ 522897).
Simplify overly detailed files list.
Actually, we just don't need gettext.php at all, it is provided by
php itself. Just remove the file, don't make a symlink.
Revert back to wp-content in /usr/share/wordpress, I am not able to make it
work. Not fixing BZ 522897.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 29 2011 Matěj Cepl <mcepl@xxxxxxxxxx> - 3.1.4-1
- New upstream security release.
* Thu Jun 2 2011 Matěj Cepl <mcepl@xxxxxxxxxx> - 3.1.3-3
- Actually, we just don't need gettext.php at all, it is provided by
php itself. Just remove the file, don't make a symlink.
- revert back to wp-content in /usr/share/wordpress, I am not able to make it
work. Not fixing BZ 522897.
* Wed Jun 1 2011 Matěj Cepl <mcepl@xxxxxxxxxx> - 3.1.3-2
- Fix old FSF address and Summary to make rpmlint happy.
- Make wp-content directory owned by apache:apache
- Correctly Provides/Obsoletes (with versions)
* Wed May 25 2011 Matěj Cepl <mcepl@xxxxxxxxxx> - 3.1.3-1
- Upgrade to the latest upstream version (security fixes and enhancements, BZ 707772)
- Move wp-content directory to /var/www/wordpress/ (BZ 522897)
- Simplify overly detailed %files
* Sun May 1 2011 Matěj Cepl <mcepl@xxxxxxxxxx> - 3.1.2-1
- New upstream release.
* Tue Apr 12 2011 Matěj Cepl <mcepl@xxxxxxxxxx> - 3.1.1-1
- 3.1.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #707772 - New upstream version 3.1.3 has been released
https://bugzilla.redhat.com/show_bug.cgi?id=707772
[ 2 ] Bug #522897 - Unable To Upload Images To /usr/share/wordpress/wp-content/uploads/
https://bugzilla.redhat.com/show_bug.cgi?id=522897
--------------------------------------------------------------------------------
================================================================================
xmp-3.3.0-7.fc15 (FEDORA-2011-8399)
A multi-format module player
--------------------------------------------------------------------------------
Update Information:
This is an upgrade from Audacious 2.4.5 to the current stable release 2.5.2 in order to benefit from improvements and additional bug-fixes not limited to the linked ticket numbers.
Due to a Generic Plugin ABI/API change in the 2.5 series, all plugin packages need an update as well.
If you use Audacious in conjunction with 3rd party plugin packages, you won't be able to install this upgrade as long as any of your installed plugin packages have not been updated appropriately. There will be RPM dependency errors if you try to. Please don't complain about that. They are a good thing.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 27 2011 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 3.3.0-7
- Rewrite the Audacious plugin for Audacious 2.5.
- Verbose build log with V=1 make.
- Update the audacious(plugin-api) stuff in the spec file for Audacious 2.5.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #712809 - audacious-plugin-xmp fails with FileWriter output
https://bugzilla.redhat.com/show_bug.cgi?id=712809
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
