The following Fedora 18 Security updates need testing: Age URL 1 https://admin.fedoraproject.org/updates/FEDORA-2012-12418/jabberd-2.2.17-1.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2012-13110/munin-2.0.6-1.fc18 9 https://admin.fedoraproject.org/updates/FEDORA-2012-12736/tor-0.2.2.38-1801.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2012-13162/bugzilla-4.2.3-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-13215/pnp4nagios-0.6.16-4.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-13225/ypserv-2.29-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-13208/rpmdevtools-8.3-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-13276/libguestfs-1.19.38-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-13286/asterisk-10.7.1-2.fc18 The following builds have been pushed to Fedora 18 updates-testing OpenSceneGraph-3.0.1-13.fc18 adcli-0.2-1.fc18 asterisk-10.7.1-2.fc18 audacity-2.0.2-2.fc18 babeld-1.3.4-3.fc18 bochs-2.6-1.fc18 clutter-1.11.14-1.fc18 cogl-1.11.4-1.fc18 cura-storage-0.2.1-1.fc18 fuelmanager-0.3.8.1-1.fc18 glm-0.9.3.4-2.fc18 gthumb-3.0.2-1.fc18 gtk-vnc-0.5.1-4.fc18 ilmbase-1.0.3-2.fc18 ipmitool-1.8.12-3.fc18 jack-audio-connection-kit-1.9.8-11.fc18 jomolhari-fonts-0.003-14.fc18 katello-cli-1.1.5-1.fc18 kde-settings-4.9-9.fc18 libosinfo-0.2.0-1.fc18 librep-0.92.2-6.fc18 libteam-0.1-14.20120904gitbdcf72c.fc18 mingw-gmp-5.0.5-1.fc18 nacl-20110221-2.fc18 netsniff-ng-0.5.7-7.fc18 network-manager-applet-0.9.7.0-2.git20120820.fc18 pango-1.31.0-2.fc18 pangox-compat-0.0.1-1.fc18 perl-Log-Dispatch-Configurator-Any-1.110690-5.fc18 perl-Net-Appliance-Session-3.122100-2.fc18 perl-Net-CLI-Interact-1.122100-2.fc18 perl-PDL-2.4.10-4.fc18 perl-PDL-Graphics-PLplot-0.59-3.fc18 perl-RPC-XML-0.77-1.fc18 perl-SQL-ReservedWords-0.8-1.fc18 php-pecl-apc-3.1.13-1.fc18 procmail-3.22-31.fc18 python-ropemacs-0.7-1.fc18 sane-backends-1.0.23-2.fc18 vala-compat-0.16.1-1.fc18 xcb-proto-1.7-3.fc18 xorg-x11-drv-intel-2.20.6-1.fc18 Details about builds: ================================================================================ OpenSceneGraph-3.0.1-13.fc18 (FEDORA-2012-13298) High performance real-time graphics toolkit -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 3 2012 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 3.0.1-13 - BR: libvncserver.devel, ship osgvnc (RHBZ 853755). -------------------------------------------------------------------------------- References: [ 1 ] Bug #853755 - FTBFS - installed but unpackaged file https://bugzilla.redhat.com/show_bug.cgi?id=853755 -------------------------------------------------------------------------------- ================================================================================ adcli-0.2-1.fc18 (FEDORA-2012-13305) Active Directory enrollment -------------------------------------------------------------------------------- Update Information: This is a part of the realmd package which has been split out into a library and separate tool. -------------------------------------------------------------------------------- ================================================================================ asterisk-10.7.1-2.fc18 (FEDORA-2012-13286) The Open Source PBX -------------------------------------------------------------------------------- Update Information: fix build on s390 The Asterisk Development Team has announced security releases for Certified Asterisk 1.8.11 and Asterisk 1.8 and 10. The available security releases are released as versions 1.8.11-cert7, 1.8.15.1, 10.7.1, and 10.7.1-digiumphones. These releases are available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/releases The release of Asterisk 1.8.11-cert7, 1.8.15.1, 10.7.1, and 10.7.1-digiumphones resolve the following two issues: * A permission escalation vulnerability in Asterisk Manager Interface. This would potentially allow remote authenticated users the ability to execute commands on the system shell with the privileges of the user running the Asterisk application. Please note that the README-SERIOUSLY.bestpractices.txt file delivered with Asterisk has been updated due to this and other related vulnerabilities fixed in previous versions of Asterisk. * When an IAX2 call is made using the credentials of a peer defined in a dynamic Asterisk Realtime Architecture (ARA) backend, the ACL rules for that peer are not applied to the call attempt. This allows for a remote attacker who is aware of a peer's credentials to bypass the ACL rules set for that peer. These issues and their resolutions are described in the security advisories. For more information about the details of these vulnerabilities, please read security advisories AST-2012-012 and AST-2012-013, which were released at the same time as this announcement. For a full list of changes in the current releases, please see the ChangeLogs: http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.11-cert7 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.15.1 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.7.1 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.7.1-digiumphones The security advisories are available at: * http://downloads.asterisk.org/pub/security/AST-2012-012.pdf * http://downloads.asterisk.org/pub/security/AST-2012-013.pdf -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Dan Horák <dan[at]danny.cz> - 10.7.1-2 - fix build on s390 * Thu Aug 30 2012 Jeffrey Ollie <jeff@xxxxxxxxxx> - 10.7.1-1 - The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.11 and Asterisk 1.8 and 10. The available security releases are - released as versions 1.8.11-cert7, 1.8.15.1, 10.7.1, and 10.7.1-digiumphones. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of Asterisk 1.8.11-cert7, 1.8.15.1, 10.7.1, and 10.7.1-digiumphones - resolve the following two issues: - - * A permission escalation vulnerability in Asterisk Manager Interface. This - would potentially allow remote authenticated users the ability to execute - commands on the system shell with the privileges of the user running the - Asterisk application. Please note that the README-SERIOUSLY.bestpractices.txt - file delivered with Asterisk has been updated due to this and other related - vulnerabilities fixed in previous versions of Asterisk. - - * When an IAX2 call is made using the credentials of a peer defined in a - dynamic Asterisk Realtime Architecture (ARA) backend, the ACL rules for that - peer are not applied to the call attempt. This allows for a remote attacker - who is aware of a peer's credentials to bypass the ACL rules set for that - peer. - - These issues and their resolutions are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2012-012 and AST-2012-013, which were released at the - same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.11-cert7 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.15.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.7.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.7.1-digiumphones - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2012-012.pdf - * http://downloads.asterisk.org/pub/security/AST-2012-013.pdf * Thu Aug 30 2012 Jeffrey Ollie <jeff@xxxxxxxxxx> - 10.7.0-1 - The Asterisk Development Team has announced the release of Asterisk 10.7.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 10.7.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- Fix deadlock potential with ast_set_hangupsource() calls. - (Closes issue ASTERISK-19801. Reported by Alec Davis) - - * --- Fix request routing issue when outboundproxy is used. - (Closes issue ASTERISK-20008. Reported by Marcus Hunger) - - * --- Set the Caller ID "tag" on peers even if remote party - information is present. - (Closes issue ASTERISK-19859. Reported by Thomas Arimont) - - * --- Fix NULL pointer segfault in ast_sockaddr_parse() - (Closes issue ASTERISK-20006. Reported by Michael L. Young) - - * --- Do not perform install on existing directories - (Closes issue ASTERISK-19492. Reported by Karl Fife) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.7.0 * Thu Aug 30 2012 Jeffrey Ollie <jeff@xxxxxxxxxx> - 10.6.1-1 - The Asterisk Development Team has announced the release of Asterisk 10.6.1. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 10.6.1 resolves an issue reported by the - community and would have not been possible without your participation. - Thank you! - - The following is the issue resolved in this release: - - * --- Remove a superfluous and dangerous freeing of an SSL_CTX. - (Closes issue ASTERISK-20074. Reported by Trevor Helmsley) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.6.1 * Thu Aug 30 2012 Jeffrey Ollie <jeff@xxxxxxxxxx> - 10.6.0-1 - The Asterisk Development Team has announced the release of Asterisk 10.6.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 10.6.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following is a sample of the issues resolved in this release: - - * --- format_mp3: Fix a possible crash in mp3_read(). - (Closes issue ASTERISK-19761. Reported by Chris Maciejewsk) - - * --- Fix local channel chains optimizing themselves out of a call. - (Closes issue ASTERISK-16711. Reported by Alec Davis) - - * --- Re-add LastMsgsSent value for SIP peers - (Closes issue ASTERISK-17866. Reported by Steve Davies) - - * --- Prevent sip_pvt refleak when an ast_channel outlasts its - corresponding sip_pvt. - (Closes issue ASTERISK-19425. Reported by David Cunningham) - - * --- Send more accurate identification information in dialog-info SIP - NOTIFYs. - (Closes issue ASTERISK-16735. Reported by Maciej Krajewski) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.6.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #853541 - CVE-2012-2186 Asterisk: Asterisk Manager User Unauthorized Shell Access https://bugzilla.redhat.com/show_bug.cgi?id=853541 -------------------------------------------------------------------------------- ================================================================================ audacity-2.0.2-2.fc18 (FEDORA-2012-13302) Multitrack audio editor -------------------------------------------------------------------------------- Update Information: fix build on non-x86 arches Bug fix upgrade of 2.0.0 to 2.0.2. Full release notes available at: http://wiki.audacityteam.org/wiki/Release_Notes_2.0.2 Bug fix upgrade of 2.0.0 to 2.0.2. Full release notes available at: http://wiki.audacityteam.org/wiki/Release_Notes_2.0.2 Bug fix upgrade of 2.0.0 to 2.0.2. Full release notes available at: http://wiki.audacityteam.org/wiki/Release_Notes_2.0.2 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Dan Horák <dan[at]danny.cz> - 2.0.2-2 - fix build on non-x86 arches * Mon Aug 27 2012 David Timms <iinet.net.au@dtimms> - 2.0.2-1 - update to 2.0.2 final - update to manual-2.0.2 - adjust manual extract path to suit changes to manual.zip * Thu Jul 19 2012 David Timms <iinet.net.au@dtimms> - 2.0.1-1 - update to 2.0.1 final - rebase libmp3lame-default.patch - rebase desktop.in.patch -------------------------------------------------------------------------------- References: [ 1 ] Bug #815052 - [abrt] audacity-2.0.0-1.fc16: Process /usr/bin/audacity was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=815052 [ 2 ] Bug #825401 - [abrt] audacity-2.0.0-1.fc16: __GI_raise: Process /usr/bin/audacity was killed by signal 6 (SIGABRT) https://bugzilla.redhat.com/show_bug.cgi?id=825401 -------------------------------------------------------------------------------- ================================================================================ babeld-1.3.4-3.fc18 (FEDORA-2012-13306) Ad-hoc network routing daemon -------------------------------------------------------------------------------- Update Information: Add Conflicts with quagga. -------------------------------------------------------------------------------- ================================================================================ bochs-2.6-1.fc18 (FEDORA-2012-13312) Portable x86 PC emulator -------------------------------------------------------------------------------- Update Information: 2.6. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Jon Ciesla <limburgher@xxxxxxxxx> - 2.6-1 - Update to 2.6. - eh_frame patch upstreamed. -------------------------------------------------------------------------------- ================================================================================ clutter-1.11.14-1.fc18 (FEDORA-2012-13314) Open Source software library for creating rich graphical user interfaces -------------------------------------------------------------------------------- Update Information: New clutter/cogl devel release -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 3 2012 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 1.11.14-1 - Update to 1.11.12 * Tue Aug 28 2012 Matthias Clasen <mclasen@xxxxxxxxxx> - 1.11.12-3 - Rebuild against new cogl * Tue Aug 21 2012 Richard Hughes <hughsient@xxxxxxxxx> - 1.11.12-1 - Update to 1.11.12 -------------------------------------------------------------------------------- ================================================================================ cogl-1.11.4-1.fc18 (FEDORA-2012-13314) A library for using 3D graphics hardware to draw pretty pictures -------------------------------------------------------------------------------- Update Information: New clutter/cogl devel release -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 3 2012 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 1.11.4-1 - Update to 1.11.4 * Tue Aug 21 2012 Richard Hughes <hughsient@xxxxxxxxx> - 1.11.2-1 - Update to 1.11.2 -------------------------------------------------------------------------------- ================================================================================ cura-storage-0.2.1-1.fc18 (FEDORA-2012-13284) CIM providers for storage management -------------------------------------------------------------------------------- Update Information: Update to 0.2.1. This update fixes integration with Anaconda and changes prefix of all classes from Cura_ to LMI_. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Jan Safranek <jsafrane@xxxxxxxxxx> - 0.2.1-1 - Update to 0.2.1 * Tue Sep 4 2012 Jan Safranek <jsafrane@xxxxxxxxxx> - 0.2-1 - Update to 0.2 - renamed Cura_ to LMI_ -------------------------------------------------------------------------------- ================================================================================ fuelmanager-0.3.8.1-1.fc18 (FEDORA-2012-13303) Manage fuel mileage -------------------------------------------------------------------------------- Update Information: the help files actually work now. added the icon, license and authors files as resources -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 31 2012 Charles Amey <kc8hfi@xxxxxxxxx> - 0.3.8.1-1 - added the documentation file to the files macro -------------------------------------------------------------------------------- ================================================================================ glm-0.9.3.4-2.fc18 (FEDORA-2012-13283) C++ mathematics library for graphics programming -------------------------------------------------------------------------------- Update Information: fix build on non-x86 arches Initial released version of glm for Fedora 18 -------------------------------------------------------------------------------- ================================================================================ gthumb-3.0.2-1.fc18 (FEDORA-2012-13310) Image viewer, editor, organizer -------------------------------------------------------------------------------- Update Information: - New upstream release 3.0.2 (rhbz#849882) - Rebuild for new cogl (rhbz#825507) - Drop the obsolete unique BR (rhbz#852407) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Hans de Goede <hdegoede@xxxxxxxxxx> - 3.0.2-1 - New upstream release 3.0.2 (rhbz#849882) - Rebuild for new cogl (rhbz#825507) - Drop the obsolete unique BR (rhbz#852407) -------------------------------------------------------------------------------- References: [ 1 ] Bug #849882 - gthumb-3.0.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=849882 [ 2 ] Bug #825507 - Software update error https://bugzilla.redhat.com/show_bug.cgi?id=825507 [ 3 ] Bug #852407 - Drop the unique BR https://bugzilla.redhat.com/show_bug.cgi?id=852407 -------------------------------------------------------------------------------- ================================================================================ gtk-vnc-0.5.1-4.fc18 (FEDORA-2012-13311) A GTK2 widget for VNC clients -------------------------------------------------------------------------------- Update Information: Add missing deps between sub-RPMs -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Daniel P. Berrange <berrange@xxxxxxxxxx> - 0.5.1-4 - Add missing deps on gvnc (rhbz #852053) -------------------------------------------------------------------------------- References: [ 1 ] Bug #852053 - virt-manager does not work with the latest gtk-vnc https://bugzilla.redhat.com/show_bug.cgi?id=852053 -------------------------------------------------------------------------------- ================================================================================ ilmbase-1.0.3-2.fc18 (FEDORA-2012-13291) Abstraction/convenience libraries -------------------------------------------------------------------------------- Update Information: fix build on non-x86 arches -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Dan Horák <dan[at]danny.cz> 1.0.3-2 - fix build on non-x86 arches * Sun Aug 5 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.0.3-1 - ilmbase-1.0.3 - ix86 fix courtesy of Nicolas Chauvet <kwizart@xxxxxxxxx> -------------------------------------------------------------------------------- ================================================================================ ipmitool-1.8.12-3.fc18 (FEDORA-2012-13315) Utility for IPMI control -------------------------------------------------------------------------------- Update Information: fix build on big endian arches -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Dan Horák <dan[at]danny.cz> - 1.8.12-3 - fix build on big endian arches * Mon Aug 27 2012 Jan Safranek <jsafrane@xxxxxxxxxx> - 1.8.12-2 - Fixed starting ipmievd under systemd (#819234). - Updated RPM scriplets with latest systemd-rpm macros (#850161) * Fri Aug 10 2012 Jan Safranek <jsafrane@xxxxxxxxxx> - 1.8.12-1 - update to ipmitool-1.8.12 -------------------------------------------------------------------------------- ================================================================================ jack-audio-connection-kit-1.9.8-11.fc18 (FEDORA-2012-13308) The Jack Audio Connection Kit -------------------------------------------------------------------------------- Update Information: rebuilt without the libfreebob dependency -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.9.8-11 - Removed libfreebob dependency as this package is retired -------------------------------------------------------------------------------- ================================================================================ jomolhari-fonts-0.003-14.fc18 (FEDORA-2012-13282) Jomolhari a Bhutanese style font for Tibetan and Dzongkha -------------------------------------------------------------------------------- Update Information: Fixes Malformed fontconfig config file -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 16 2012 Parag <pnemade AT redhat DOT com> - 0.003-14 - Resolves:rh#847627 - Malformed fontconfig config file -------------------------------------------------------------------------------- References: [ 1 ] Bug #847627 - Malformed fontconfig config file https://bugzilla.redhat.com/show_bug.cgi?id=847627 -------------------------------------------------------------------------------- ================================================================================ katello-cli-1.1.5-1.fc18 (FEDORA-2012-13287) Client package for managing application life-cycle for Linux systems -------------------------------------------------------------------------------- Update Information: Client package for Katello cloud management. -------------------------------------------------------------------------------- References: [ 1 ] Bug #822926 - Review Request: katello-cli - client package for Katello https://bugzilla.redhat.com/show_bug.cgi?id=822926 -------------------------------------------------------------------------------- ================================================================================ kde-settings-4.9-9.fc18 (FEDORA-2012-13304) Config files for kde -------------------------------------------------------------------------------- Update Information: Start kdm.service after livesys-late.service. Fix kdm gnome-keyring pam configuration and add systemd preset for kdm. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Dan Vratil <dvratil@xxxxxxxxxx> 4.9-9 - start kdm.service after livesys-late.service * Wed Aug 29 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.9-8 - add 81-fedora-kdm.preset (#852844) * Wed Aug 29 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.9-7 - kdm.pam: pam_gnome_keyring.so should be loaded after pam_systemd.so (#852723) -------------------------------------------------------------------------------- References: [ 1 ] Bug #853985 - KDM autologin does not work on Live https://bugzilla.redhat.com/show_bug.cgi?id=853985 [ 2 ] Bug #852723 - kdm.pam: pam_gnome_keyring.so should be loaded after pam_systemd.so https://bugzilla.redhat.com/show_bug.cgi?id=852723 [ 3 ] Bug #852844 - ship systemd preset for kdm https://bugzilla.redhat.com/show_bug.cgi?id=852844 -------------------------------------------------------------------------------- ================================================================================ libosinfo-0.2.0-1.fc18 (FEDORA-2012-13313) A library for managing OS information for virtualization -------------------------------------------------------------------------------- Update Information: libosinfo 0.2.0 (needed by GNOME Boxes) -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 3 2012 Christophe Fergeau <cfergeau@xxxxxxxxxx> - 0.2.0-1 - Update to 0.2.0 release. -------------------------------------------------------------------------------- ================================================================================ librep-0.92.2-6.fc18 (FEDORA-2012-13294) A lightweight Lisp environment -------------------------------------------------------------------------------- Update Information: fix build on s390(x) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Dan Horák <dan[at]danny.cz> 0.92.2-6 - fix stack direction on s390(x) -------------------------------------------------------------------------------- ================================================================================ libteam-0.1-14.20120904gitbdcf72c.fc18 (FEDORA-2012-12531) Library for controlling team network device -------------------------------------------------------------------------------- Update Information: Rebase to git commit bdcf72c -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Jiri Pirko <jpirko@xxxxxxxxxx> - 0.1-14.20120904gitbdcf72c - Rebase to git commit bdcf72c * Wed Aug 22 2012 Jiri Pirko <jpirko@xxxxxxxxxx> - 0.1-13.20120822gitc0d943d - Rebase to git commit c0d943d -------------------------------------------------------------------------------- ================================================================================ mingw-gmp-5.0.5-1.fc18 (FEDORA-2012-13299) Cross-compiled GNU arbitrary precision library -------------------------------------------------------------------------------- Update Information: New package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #833622 - Review Request: mingw-gmp - Cross-compiled GNU arbitrary precision library https://bugzilla.redhat.com/show_bug.cgi?id=833622 -------------------------------------------------------------------------------- ================================================================================ nacl-20110221-2.fc18 (FEDORA-2012-13290) Networking and Cryptography library -------------------------------------------------------------------------------- Update Information: This is new package, networking and cryptography library. For more details see http://nacl.cace-project.eu/ -------------------------------------------------------------------------------- ================================================================================ netsniff-ng-0.5.7-7.fc18 (FEDORA-2012-13296) Packet sniffing beast -------------------------------------------------------------------------------- Update Information: This is new version of package that adds curvetun and changes package description to be in sync with upstream. Fixed license field, the license of the package is GPLv2, not GPLv2+. Updated summary & description to be in sync with upstream. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 0.5.7-7 - Build with NaCl, i.e. build curvetun * Mon Sep 3 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 0.5.7-6 - Extended package description according to upstream requirements * Mon Sep 3 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 0.5.7-5 - Fixed license field, the package is licensed under GPLv2, not GPLv2+ - Updated summary & description to be in sync with upstream -------------------------------------------------------------------------------- ================================================================================ network-manager-applet-0.9.7.0-2.git20120820.fc18 (FEDORA-2012-13293) A network control and status applet for NetworkManager -------------------------------------------------------------------------------- Update Information: Updates network-manager-applet to 0.9.7.0 snapshot and fixes bug #852792 - not running glib-compile-schemas in %post scriptlet -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 30 2012 Jiří Klimeš <jklimes@xxxxxxxxxx> - 0.9.7.0-2.git20120820 - run glib-compile-schemas in %post scriplet (rh #852792) * Tue Aug 21 2012 Dan Winship <danw@xxxxxxxxxx> - 0.9.7.0-1.git20120820 - Update to 0.9.7.0 snapshot -------------------------------------------------------------------------------- References: [ 1 ] Bug #852792 - [Configure] button in network spoke doesn't work (nm-c-e fails to run) https://bugzilla.redhat.com/show_bug.cgi?id=852792 -------------------------------------------------------------------------------- ================================================================================ pango-1.31.0-2.fc18 (FEDORA-2012-13192) System for layout and rendering of internationalized text -------------------------------------------------------------------------------- Update Information: We badly need this update to start testing harfbuzz rendering engine to make sure whichever products it will pull they will have less bugs. Because of these builds missed in gnome update 3.5.90, we had to forcefully moved i18n test day as it was scheduled on 6th sept. Hope to see this at least in testing the same day f18 Alpha gets released. I see its of no use to give old pango builds in 3.5.90 update as its next build provides new and better update. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Parag Nemade <paragn AT fedoraproject DOT org> - 1.31.0-2 - Add missing BR:harfbuzz-devel - Remove file pangox.aliases as pangox support is now removed * Tue Aug 21 2012 Richard Hughes <hughsient@xxxxxxxxx> - 1.31.0-1 - Update to 1.31.0 -------------------------------------------------------------------------------- ================================================================================ pangox-compat-0.0.1-1.fc18 (FEDORA-2012-13192) Compatibility library for pangox -------------------------------------------------------------------------------- Update Information: We badly need this update to start testing harfbuzz rendering engine to make sure whichever products it will pull they will have less bugs. Because of these builds missed in gnome update 3.5.90, we had to forcefully moved i18n test day as it was scheduled on 6th sept. Hope to see this at least in testing the same day f18 Alpha gets released. I see its of no use to give old pango builds in 3.5.90 update as its next build provides new and better update. -------------------------------------------------------------------------------- ================================================================================ perl-Log-Dispatch-Configurator-Any-1.110690-5.fc18 (FEDORA-2012-13289) Configurator implementation with Config::Any -------------------------------------------------------------------------------- Update Information: Net::Appliance::Session and required modules -------------------------------------------------------------------------------- References: [ 1 ] Bug #853380 - Review Request: perl-Net-Appliance-Session - Run command-line sessions to network appliances https://bugzilla.redhat.com/show_bug.cgi?id=853380 [ 2 ] Bug #853379 - Review Request: perl-Net-CLI-Interact - Toolkit for CLI Automation https://bugzilla.redhat.com/show_bug.cgi?id=853379 [ 3 ] Bug #853378 - Review Request: perl-Log-Dispatch-Configurator-Any - Configurator implementation with Config::Any https://bugzilla.redhat.com/show_bug.cgi?id=853378 -------------------------------------------------------------------------------- ================================================================================ perl-Net-Appliance-Session-3.122100-2.fc18 (FEDORA-2012-13289) Run command-line sessions to network appliances -------------------------------------------------------------------------------- Update Information: Net::Appliance::Session and required modules -------------------------------------------------------------------------------- References: [ 1 ] Bug #853380 - Review Request: perl-Net-Appliance-Session - Run command-line sessions to network appliances https://bugzilla.redhat.com/show_bug.cgi?id=853380 [ 2 ] Bug #853379 - Review Request: perl-Net-CLI-Interact - Toolkit for CLI Automation https://bugzilla.redhat.com/show_bug.cgi?id=853379 [ 3 ] Bug #853378 - Review Request: perl-Log-Dispatch-Configurator-Any - Configurator implementation with Config::Any https://bugzilla.redhat.com/show_bug.cgi?id=853378 -------------------------------------------------------------------------------- ================================================================================ perl-Net-CLI-Interact-1.122100-2.fc18 (FEDORA-2012-13289) Toolkit for CLI Automation -------------------------------------------------------------------------------- Update Information: Net::Appliance::Session and required modules -------------------------------------------------------------------------------- References: [ 1 ] Bug #853380 - Review Request: perl-Net-Appliance-Session - Run command-line sessions to network appliances https://bugzilla.redhat.com/show_bug.cgi?id=853380 [ 2 ] Bug #853379 - Review Request: perl-Net-CLI-Interact - Toolkit for CLI Automation https://bugzilla.redhat.com/show_bug.cgi?id=853379 [ 3 ] Bug #853378 - Review Request: perl-Log-Dispatch-Configurator-Any - Configurator implementation with Config::Any https://bugzilla.redhat.com/show_bug.cgi?id=853378 -------------------------------------------------------------------------------- ================================================================================ perl-PDL-2.4.10-4.fc18 (FEDORA-2012-13292) The Perl Data Language -------------------------------------------------------------------------------- Update Information: Disable Proj support in perl-PDL because proj package became incompatible in version 4.8.0. Rebuild against perl 5.16. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Petr Pisar <ppisar@xxxxxxxxxx> - 2.4.10-4 - Disable Proj support (bug #839651) * Fri Jul 20 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.4.10-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sat Jun 16 2012 Petr Pisar <ppisar@xxxxxxxxxx> - 2.4.10-2 - Perl 5.16 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #839651 - FTBFS perl-PDL-2.4.10-2.fc18 https://bugzilla.redhat.com/show_bug.cgi?id=839651 -------------------------------------------------------------------------------- ================================================================================ perl-PDL-Graphics-PLplot-0.59-3.fc18 (FEDORA-2012-13292) Object-oriented interface from perl/PDL to the PLPLOT plotting library -------------------------------------------------------------------------------- Update Information: Disable Proj support in perl-PDL because proj package became incompatible in version 4.8.0. Rebuild against perl 5.16. -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 20 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.59-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #839651 - FTBFS perl-PDL-2.4.10-2.fc18 https://bugzilla.redhat.com/show_bug.cgi?id=839651 -------------------------------------------------------------------------------- ================================================================================ perl-RPC-XML-0.77-1.fc18 (FEDORA-2012-13301) Set of classes for core data, message and XML handling -------------------------------------------------------------------------------- Update Information: Upgrade to 0.77 version fixes various bugs: Spelling in manual page, port number in Host HTTP header, message_file_thresh requiring File::Temp, handling of DateTime parameters, RPC::XML::Server works with Net::Server. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Petr Pisar <ppisar@xxxxxxxxxx> - 0.77-1 - 0.77 bump - Specify all dependencies - Modernize spec file - Do not package tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #854138 - perl-RPC-XML-0.77 is available https://bugzilla.redhat.com/show_bug.cgi?id=854138 -------------------------------------------------------------------------------- ================================================================================ perl-SQL-ReservedWords-0.8-1.fc18 (FEDORA-2012-13309) Determine if words are reserved by ANSI/ISO SQL standard -------------------------------------------------------------------------------- Update Information: Update to version 0.8 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Bill Pemberton <wfp5p@xxxxxxxxxxxx> - 0.8-1 - update to version 0.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #853366 - perl-SQL-ReservedWords-0.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=853366 -------------------------------------------------------------------------------- ================================================================================ php-pecl-apc-3.1.13-1.fc18 (FEDORA-2012-13300) APC caches and optimizes PHP intermediate code -------------------------------------------------------------------------------- Update Information: Upstream Changelog: * Fixed bug (apc_bin_dump doesn't swizzle bucket arKey in HashTable) (Laruence) * Fixed bug #62825 (php carshed OR return PHP Fatal error when used apc_bin_dump after apc_store) (Laruence) * Fixed bug due to Conditional "jump or move depends on uninitialised value(s)" in apc_op_ZEND_INCLUDE_OR_EVAL and apc_bin_dump (Laruence) * Fixed bug #62802 (Crash when use apc_bin_dump/load) (Laruence) * Fixed bug #62757 (php-fpm carshed when used apc_bin_dumpfile with apc.serializer) (Laruence) * Fixed bug #62765 (apc_bin_dumpfile report Fatal error when there is "goto" in function) (Laruence) * Fixed bug #61133 (segfault in tests/apc_bin_002.phpt) (Laruence) * Fixed handling of userspace stream wrappers simulating file inclusion/requiring (Anatoliy, Rasmus) * Fixed bug #62699 trait aliases and precedences handling (Anatoliy) * Added cli built-in server tests (Anatoliy) * Fixed filter regex freeing on request shutdown (Anatoliy) * Fixed interned strings storage freeing on module shutdown (Anatoily) * Fixed bug #61742 preload_path does not work due to incorrect string length (Anatoliy) * Fixed several memory leaks it APCIterator (Anatoliy) * Fixed potential overflows in bin dumps (Anatoliy) * fix num. segfaults by revert rev. 326820 and issue reported in bug #69972 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 3 2012 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 3.1.13-1 - Version 3.1.13 (beta) - API 3.1.0 (stable) - add patches from upstream (fixes some tests) - change serveur port for tests (allow 32/64 bits build) * Mon Aug 27 2012 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 3.1.12-2 - add patches from upstream - delete tests which fail because of missing dom extension * Thu Aug 16 2012 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 3.1.12-1 - Version 3.1.12 (beta) - API 3.1.0 (stable) - spec cleanups -------------------------------------------------------------------------------- ================================================================================ procmail-3.22-31.fc18 (FEDORA-2012-13316) Mail processing program -------------------------------------------------------------------------------- Update Information: Hardened build with PIE and full RELRO. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 3.22-31 - Hardened build with PIE and full RELRO Resolves: rhbz#853186 -------------------------------------------------------------------------------- References: [ 1 ] Bug #853186 - setgid programs should have full RELRO https://bugzilla.redhat.com/show_bug.cgi?id=853186 -------------------------------------------------------------------------------- ================================================================================ python-ropemacs-0.7-1.fc18 (FEDORA-2012-13285) Plugin for performing python refactorings in emacs -------------------------------------------------------------------------------- Update Information: New plugin for performing python refactorings in emacs -------------------------------------------------------------------------------- References: [ 1 ] Bug #701996 - Review Request: python-ropemacs - Plugin for performing python refactorings in emacs https://bugzilla.redhat.com/show_bug.cgi?id=701996 -------------------------------------------------------------------------------- ================================================================================ sane-backends-1.0.23-2.fc18 (FEDORA-2012-13297) Scanner access software -------------------------------------------------------------------------------- Update Information: New upstream version: Changes since 1.0.22 ==================== * New backends: kvs40xx (Panasonic KV-S40xx), kodakaio (Kodak AiO ESP and Hero) * Significant enhancements to several backends * 30 new scanner models supported * V4L support improvements * Improvements for builds on multiple platforms * Improved udev rules * Updated software deskew algorithm * Documentation updates * Bugfixes -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Nils Philippsen <nils@xxxxxxxxxx> - 1.0.23-2 - make installed sane-config multi-lib aware again * Fri Aug 31 2012 Nils Philippsen <nils@xxxxxxxxxx> - 1.0.23-1 - version 1.0.23 - update udev patch, remove obsolete patches - use %_hardened_build macro from F-16 on instead of tweaking flags manually - don't use the same SONAME for backend libs and main lib -------------------------------------------------------------------------------- References: [ 1 ] Bug #740990 - sane-backends-drivers- is providing libsane.so.1, this seems wrong https://bugzilla.redhat.com/show_bug.cgi?id=740990 -------------------------------------------------------------------------------- ================================================================================ vala-compat-0.16.1-1.fc18 (FEDORA-2012-13307) A modern programming language for GNOME -------------------------------------------------------------------------------- Update Information: Bug fixes and binding updates -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Michel Salim <salimma@xxxxxxxxxxxxxxxxx> - 0.16.1-1 - Update to 0.16.1 -------------------------------------------------------------------------------- ================================================================================ xcb-proto-1.7-3.fc18 (FEDORA-2012-13295) XCB protocol descriptions -------------------------------------------------------------------------------- Update Information: Updates to DRI2 and XKB protocol. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Adam Jackson <ajax@xxxxxxxxxx> 1.7-3 - Backport 5a4e42f3 and d42d7918 to fix DRI2 and XKB, respectively. -------------------------------------------------------------------------------- ================================================================================ xorg-x11-drv-intel-2.20.6-1.fc18 (FEDORA-2012-13288) Xorg X11 Intel video driver -------------------------------------------------------------------------------- Update Information: Upstream 2.20.6 release. Upstream 2.20.5 release Upstream 2.20.4 stable release, plus some backports to avoid binding to PowerVR-style intel chips. Upstream 2.20.3 stable release. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Adam Jackson <ajax@xxxxxxxxxx> 2.20.6-1 - intel 2.20.6 (#853783) * Thu Aug 30 2012 Adam Jackson <ajax@xxxxxxxxxx> 2.20.5-2 - Don't package I810XvMC when not building legacy i810 * Mon Aug 27 2012 Adam Jackson <ajax@xxxxxxxxxx> 2.20.5-1 - intel 2.20.5 * Mon Aug 20 2012 Adam Jackson <ajax@xxxxxxxxxx> 2.20.4-3 - Rebuild for new xcb-util soname * Mon Aug 20 2012 Adam Jackson <ajax@xxxxxxxxxx> 2.20.4-2 - Backport some patches to avoid binding to non-i915.ko-driven Intel GPUs, like Cedarview and friends (#849475) * Mon Aug 20 2012 Adam Jackson <ajax@xxxxxxxxxx> 2.20.4-1 - intel 2.20.4 * Thu Aug 16 2012 Dave Airlie <airlied@xxxxxxxxxx> 2.20.3-3 - fix vmap flush to correct upstream version in prime patch * Thu Aug 16 2012 Dave Airlie <airlied@xxxxxxxxxx> 2.20.3-2 - snapshot upstream + add prime support for now * Wed Aug 15 2012 Adam Jackson <ajax@xxxxxxxxxx> 2.20.3-1 - intel 2.20.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #853783 - xorg-x11-drv-intel-2.20.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=853783 [ 2 ] Bug #849475 - GMA3600 doesn't work with xorg-x11-drv-intel 2.20.1-1.fc17 https://bugzilla.redhat.com/show_bug.cgi?id=849475 [ 3 ] Bug #843905 - xorg-x11-drv-intel-2.20.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=843905 [ 4 ] Bug #851881 - xorg-x11-drv-intel-2.20.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=851881 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
