The following Fedora 18 Security updates need testing: Age URL 0 https://admin.fedoraproject.org/updates/FEDORA-2012-13510/xen-4.1.3-3.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-13557/blender-2.63a-9.fc18 12 https://admin.fedoraproject.org/updates/FEDORA-2012-12736/tor-0.2.2.38-1801.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2012-13225/ypserv-2.29-1.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2012-13286/asterisk-10.7.1-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-13528/moin-1.9.4-3.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-13536/xen-4.1.3-4.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-13575/wordpress-3.4.2-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-13523/blender-2.63a-8.fc18 The following builds have been pushed to Fedora 18 updates-testing ModemManager-0.6.0.0-1.fc18 PackageKit-0.8.3-2.fc18 alsa-lib-1.0.26-1.fc18 alsa-plugins-1.0.26-2.fc18 alsa-tools-1.0.26.1-1.fc18 alsa-utils-1.0.26-1.fc18 ansible-0.7-0.git201209061851.fc18 avoision-1.1-1.fc18 bfa-firmware-3.0.3.1-1.fc18 bitfrost-1.0.16-1.fc18 blender-2.63a-8.fc18 blender-2.63a-9.fc18 brainfuck-0.1-3.fc18 chromaprint-0.7-1.fc18 cp2k-2.3-1.fc18 cqrlog-1.5.1-1.fc18 cronie-1.4.8-13.fc18 desktop-file-utils-0.20-4.fc18 easymock3-3.1-7.fc18 emacs-evil-0.1-0.3.20120902gitc13b90e.fc18 entangle-0.4.1-1.fc18 erlang-lager-1.2.0-1.fc18 erlang-protobuffs-0.7.0-1.fc18 ettercap-0.7.5-0.fc18.20120906gitc796e5 evolution-rss-0.3.92-1.fc18 fbg2-0.4-4.fc18 fedora-gnat-project-common-3.5-1.fc18 fedora-logos-17.0.2-6.fc18 firewalld-0.2.8-1.fc18 freeipa-3.0.0-0.5.fc18 ghc-HSH-2.0.4-2.fc18 ghc-MonadRandom-0.1.6-1.fc18 ghc-show-0.4.1.2-2.fc18 gnome-shell-extensions-3.5.91-1.fc18 gthumb-3.0.2-3.fc18 hplip-3.12.9-1.fc18 hyena-0.5-5.fc18 ibus-1.4.99.20120822-2.fc18 ibus-table-1.3.9.20110827-4.fc18 ibus-table-chinese-1.4.0-1.fc18 ibus-table-others-1.3.0.20100907-12.fc18 kdevelop-4.3.90-1.fc18 kdevplatform-1.3.90-1.fc18 libgee-0.7.90-1.fc18 libpipeline-1.2.1-2.fc18 libreoffice-3.6.1.2-2.fc18 libvdpau-0.5-1.fc18 libvirt-snmp-0.0.3-1.fc18 livecd-tools-18.10-1.fc18 mate-conf-1.4.0-17.fc18 mcollective-2.0.0-6.fc18 mercurial-2.3.1-1.fc18 milter-regex-1.9-5.fc18 moin-1.9.4-3.fc18 mozilla-https-everywhere-2.2.2-1.fc18 mysql-connector-python-1.0.6-1.b1.fc18 nacl-20110221-3.fc18 nhn-nanum-gothic-light-fonts-1.000-2.fc18 octave-3.6.3-2.fc18 olpc-update-2.26-1.fc18 paps-0.6.8-20.fc18 pcs-0.9.19-1.fc18 perl-CPAN-Perl-Releases-0.68-1.fc18 perl-Devel-PatchPerl-0.76-1.fc18 perl-IO-All-0.46-1.fc18 perlbrew-0.50-1.fc18 pinfo-0.6.10-6.fc18 postfix-2.9.4-3.fc18 python-alsa-1.0.26-1.fc18 python-django-tagging-0.3.1-6.fc18 python-moksha-common-1.0.0-4.fc18 python-rtslib-2.1.fb22-1.fc18 quota-4.00-6.fc18 radius-engine-1.1-1.fc18 rpmlint-1.4-10.fc18 ruby-1.9.3.194-17.fc18 rubygem-atk-1.1.5-1.fc18 rubygem-cairo-1.12.2-1.fc18 rubygem-gdk_pixbuf2-1.1.5-1.fc18 rubygem-gio2-1.1.5-1.fc18 rubygem-glib2-1.1.5-1.fc18 rubygem-goocanvas-1.1.5-1.fc18 rubygem-gstreamer-1.1.5-1.fc18 rubygem-gtk2-1.1.5-1.fc18 rubygem-gtksourceview2-1.1.5-1.fc18 rubygem-pango-1.1.5-1.fc18 rubygem-poppler-1.1.5-1.fc18 rubygem-progressbar-0.11.0-1.fc18 rubygem-rdoc-3.12-5.fc18 rubygem-rsvg2-1.1.5-1.fc18 rubygem-vte-1.1.5-1.fc18 rubygems-1.8.24-3.fc18 selinux-policy-3.11.1-16.fc18 smokeping-2.6.8-1.fc18 spice-0.11.3-1.fc18 spice-protocol-0.12.1-1.fc18 sssd-1.9.0-21.fc18.beta7 sudo-1.8.6-1.fc18 system-config-printer-1.3.11-3.fc18 telepathy-mission-control-5.13.1-1.fc18 tigervnc-1.2.80-0.1.20120905svn4996.fc18 time-1.7-42.fc18 tortoisehg-2.5-1.fc18 uget-1.10-1.respin2.fc18 util-linux-2.22-1.fc18 vlgothic-fonts-20120905-1.fc18 wordpress-3.4.2-2.fc18 wso2-wsf-cpp-2.1.0-14.fc18 xen-4.1.3-3.fc18 xen-4.1.3-4.fc18 xnoise-0.2.9-1.fc18 xorg-x11-server-1.13.0-1.fc18 Details about builds: ================================================================================ ModemManager-0.6.0.0-1.fc18 (FEDORA-2012-13520) Mobile broadband modem management service -------------------------------------------------------------------------------- Update Information: Fix SMS notifications on many Qualcomm devices, use SMS PDU mode by default (more compatible), fix Novatel CDMA roaming detection, more support for ZTE devices and the Ericsson H5321, and better handling of the Sierra AT&T Lightning/USB 305. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Dan Williams <dcbw@xxxxxxxxxx> - 0.6.0.0-1 - Update to 0.6.0 - core: fix SMS notifications on many Qualcomm devices - core: use SMS PDU mode by default (more compatible) - novatel: fix CDMA roaming indication - zte: support more devices - zte: power down modems when disabled - mbm: power down modems when disabled - mbm: add support for Ericsson H5321 - sierra: fix detection of secondary ports - sierra: more reliable connections with USB 305/AT&T Lightning * Fri Jul 20 2012 Dan Williams <dcbw@xxxxxxxxxx> - 0.5.3.96-1 - Update to 0.5.3.96 (0.5.4-rc2) - core: fix SMS handling on a number of devices - zte: support for devices that use Icera chipsets - core: ignore unsupported QMI WWAN ports (rh #835153) -------------------------------------------------------------------------------- ================================================================================ PackageKit-0.8.3-2.fc18 (FEDORA-2012-13559) Package management service -------------------------------------------------------------------------------- Update Information: - Work around a yum API break so that resolving still works -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Richard Hughes <rhughes@xxxxxxxxxx> - 0.8.3-2 - Work around a yum API break so that resolving still works - In e42ea3dc0b02ba73a11211de4062e87abfb77a6a yum changed the public API so that str(repo) returned 'fedora/18/i386' rather than just 'fedora'. -------------------------------------------------------------------------------- References: [ 1 ] Bug #854209 - The remote software origin name was not found https://bugzilla.redhat.com/show_bug.cgi?id=854209 -------------------------------------------------------------------------------- ================================================================================ alsa-lib-1.0.26-1.fc18 (FEDORA-2012-13533) The Advanced Linux Sound Architecture (ALSA) library -------------------------------------------------------------------------------- Update Information: ALSA user space packages updated to 1.0.26 version. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Jaroslav Kysela <jkysela@xxxxxxxxxx> - 1.0.26-1 - Updated to 1.0.26 -------------------------------------------------------------------------------- ================================================================================ alsa-plugins-1.0.26-2.fc18 (FEDORA-2012-13533) The Advanced Linux Sound Architecture (ALSA) Plugins -------------------------------------------------------------------------------- Update Information: ALSA user space packages updated to 1.0.26 version. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Jaroslav Kysela <jkysela@xxxxxxxxxx> - 1.0.26-2 - Changed dependency on pulseaudio-lib-devel to pulseaudio-libs-devel * Thu Sep 6 2012 Jaroslav Kysela <jkysela@xxxxxxxxxx> - 1.0.26-1 - Updated to 1.0.26 * Wed Jul 18 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.25-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ alsa-tools-1.0.26.1-1.fc18 (FEDORA-2012-13533) Specialist tools for ALSA -------------------------------------------------------------------------------- Update Information: ALSA user space packages updated to 1.0.26 version. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Jaroslav Kysela <jkysela@xxxxxxxxxx> - 1.0.26.1-1 - Fixed gtk3-devel dependency (hdajackretask) - Added description for hda-verb and hdajackretask - Added hda-verb and hdajackretask tools - Updated to 1.0.26.1 * Thu Sep 6 2012 Jaroslav Kysela <jkysela@xxxxxxxxxx> - 1.0.26-1 - Updated to 1.0.26 * Wed Aug 29 2012 Tim Jackson <rpm@xxxxxxxxxx> - 1.0.25-4 - Move udev rules to /lib/udev/rules.d (rhbz #748206) - remove %BuildRoot and %clean sections; no longer required -------------------------------------------------------------------------------- ================================================================================ alsa-utils-1.0.26-1.fc18 (FEDORA-2012-13533) Advanced Linux Sound Architecture (ALSA) utilities -------------------------------------------------------------------------------- Update Information: ALSA user space packages updated to 1.0.26 version. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Jaroslav Kysela <jkysela@xxxxxxxxxx> - 1.0.26-1 - Updated to 1.0.26 -------------------------------------------------------------------------------- ================================================================================ ansible-0.7-0.git201209061851.fc18 (FEDORA-2012-13577) SSH-based configuration management, deployment, and task execution system -------------------------------------------------------------------------------- Update Information: Update to Ansible-0.7 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 6 2012 Michael DeHaan <michael.dehaan@xxxxxxxxx> - 0.7-0 - Release of 0.7 * Mon Aug 6 2012 Michael DeHaan <michael.dehaan@xxxxxxxxx> - 0.6-0 - Release of 0.6 -------------------------------------------------------------------------------- ================================================================================ avoision-1.1-1.fc18 (FEDORA-2012-13558) Arcade style game of evade and capture -------------------------------------------------------------------------------- Update Information: Update radius-engine and avoision to 1.1 (rebuild fbg2 for new radius-engine). Fixes issue where avoision would not start. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.1-1 - update to 1.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #853879 - Avoision does not start https://bugzilla.redhat.com/show_bug.cgi?id=853879 -------------------------------------------------------------------------------- ================================================================================ bfa-firmware-3.0.3.1-1.fc18 (FEDORA-2012-13529) Brocade Fibre Channel HBA Firmware -------------------------------------------------------------------------------- Update Information: Update bfa-firmware to 3.0.3.1. In the absence of any real release notes or any information on what this package updates, I provide some lyrics: There is a flower within my heart, Daisy, Daisy, Planted one day by a glancing dart, Planted by Daisy Bell. Whether she loves me or loves me not Sometimes it's hard to tell, And yet I am longing to share the lot Of beautiful Daisy Bell. Daisy, Daisy, give me your answer, do, I'm half crazy all for the love of you. It won't be a stylish marriage -- I can't afford a carriage, But you'd look sweet upon the seat Of a bicycle built for two. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> 3.0.3.1-1 - update to 3.0.3.1 -------------------------------------------------------------------------------- ================================================================================ bitfrost-1.0.16-1.fc18 (FEDORA-2012-13524) OLPC bitfrost security modules -------------------------------------------------------------------------------- Update Information: Don't assume a corrupt lease has infinite duration. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Daniel Drake <dsd@xxxxxxxxxx> - 1.0.16-1 - New version -------------------------------------------------------------------------------- ================================================================================ blender-2.63a-8.fc18 (FEDORA-2012-13523) 3D modeling, animation, rendering and post-production -------------------------------------------------------------------------------- Update Information: Fix insucury file usage reported as CVE-2008-1103 -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Jochen Schmitt <JOchen herr-schmitt de> - 1:2.63a-8 - Porting blender-2.49b-cve.patch (#855092, CVE-2008-1103) -------------------------------------------------------------------------------- References: [ 1 ] Bug #855092 - CVE-2012-4410 blender: Insecure temporary file use by creating file string in undo save quit Blender kernel routine https://bugzilla.redhat.com/show_bug.cgi?id=855092 [ 2 ] Bug #444535 - CVE-2008-1103 Blender insecure temporary file usage https://bugzilla.redhat.com/show_bug.cgi?id=444535 -------------------------------------------------------------------------------- ================================================================================ blender-2.63a-9.fc18 (FEDORA-2012-13557) 3D modeling, animation, rendering and post-production -------------------------------------------------------------------------------- Update Information: Fix security flaw on insecure file creation. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Jochen Schmitt <JOchen herr-schmitt de> - 1:2.63a-9 - Add forgotten O_EXCL to CVE-patch * Thu Sep 6 2012 Jochen Schmitt <JOchen herr-schmitt de> - 1:2.63a-8 - Porting blender-2.49b-cve.patch (#855092, CVE-2008-1103) -------------------------------------------------------------------------------- References: [ 1 ] Bug #855092 - CVE-2012-4410 blender: Insecure temporary file use by creating file string in undo save quit Blender kernel routine https://bugzilla.redhat.com/show_bug.cgi?id=855092 [ 2 ] Bug #444535 - CVE-2008-1103 Blender insecure temporary file usage https://bugzilla.redhat.com/show_bug.cgi?id=444535 -------------------------------------------------------------------------------- ================================================================================ brainfuck-0.1-3.fc18 (FEDORA-2012-13539) Haskell brainfuck -------------------------------------------------------------------------------- Update Information: Haskell brainfuck library -------------------------------------------------------------------------------- References: [ 1 ] Bug #828720 - Review Request: brainfuck - An interpreter of the brainf*ck language https://bugzilla.redhat.com/show_bug.cgi?id=828720 -------------------------------------------------------------------------------- ================================================================================ chromaprint-0.7-1.fc18 (FEDORA-2012-13517) Library implementing the AcoustID fingerprinting -------------------------------------------------------------------------------- Update Information: update -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Ismael Olea <ismael@xxxxxxxx> - 0.7-1 - update to 0.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #855052 - chromaprint-0.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=855052 -------------------------------------------------------------------------------- ================================================================================ cp2k-2.3-1.fc18 (FEDORA-2012-13502) A molecular dynamics engine capable of classical and Car-Parrinello simulations -------------------------------------------------------------------------------- Update Information: Numerous bug-fixes and enhancements. Upstream change log: http://people.web.psi.ch/krack/cp2k/regtest/ChangeLog -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> - 2.3-1 - updated to 2.3 release * Sun Aug 26 2012 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> - 2.3-0.20120825 - updated to current 2.3 branch (trunk) - added snapshot creator script - moved new files out of -rpm patch and into separate SourceN entries - dropped non-standard compiler flags from MPI builds -------------------------------------------------------------------------------- ================================================================================ cqrlog-1.5.1-1.fc18 (FEDORA-2012-13551) An amateur radio contact logging program -------------------------------------------------------------------------------- Update Information: New package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #848213 - Review Request: cqrlog - An amateur radio contact logging program https://bugzilla.redhat.com/show_bug.cgi?id=848213 -------------------------------------------------------------------------------- ================================================================================ cronie-1.4.8-13.fc18 (FEDORA-2012-13563) Cron daemon for executing programs at set times -------------------------------------------------------------------------------- Update Information: Introduce new systemd-rpm macros in cronie spec file -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Václav Pavlín <vpavlin@xxxxxxxxxx> - 1.4.8-13 - Scriptlets replaced with new systemd macros (#850070) -------------------------------------------------------------------------------- References: [ 1 ] Bug #850070 - Introduce new systemd-rpm macros in cronie spec file https://bugzilla.redhat.com/show_bug.cgi?id=850070 -------------------------------------------------------------------------------- ================================================================================ desktop-file-utils-0.20-4.fc18 (FEDORA-2012-13534) Utilities for manipulating .desktop files -------------------------------------------------------------------------------- Update Information: merge with master and f17 -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Dan Mashal <dan.mashal@xxxxxxxxxxxxxxxxx> 0.20-4 - Update F17 to 0.20 (#847097). * Sat Aug 11 2012 Ville Skyttä <ville.skytta@xxxxxx> - 0.20-3 - Fold emacs-* subpackages into main (#690264). -------------------------------------------------------------------------------- References: [ 1 ] Bug #847097 - Update to upstream 0.20 for MATE Desktop if possible? https://bugzilla.redhat.com/show_bug.cgi?id=847097 -------------------------------------------------------------------------------- ================================================================================ easymock3-3.1-7.fc18 (FEDORA-2012-13584) Easy mock objects -------------------------------------------------------------------------------- Update Information: Fixed ownership of _mavenpomdir -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Tomas Radej <tradej@xxxxxxxxxx> - 3.1-7 - Fixed ownership of _mavenpomdir -------------------------------------------------------------------------------- References: [ 1 ] Bug #850418 - easymock3 - Should not own /usr/share/maven-poms https://bugzilla.redhat.com/show_bug.cgi?id=850418 -------------------------------------------------------------------------------- ================================================================================ emacs-evil-0.1-0.3.20120902gitc13b90e.fc18 (FEDORA-2012-13500) Extensible vi layer for Emacs -------------------------------------------------------------------------------- Update Information: emacs-evil is an extensible vi layer for GNU Emacs. It provides Vim features like Visual selection and text objects, and is the successor of Vimpulse and vim-mode. -------------------------------------------------------------------------------- References: [ 1 ] Bug #844173 - Review Request: emacs-evil - Extensible vi layer for Emacs https://bugzilla.redhat.com/show_bug.cgi?id=844173 -------------------------------------------------------------------------------- ================================================================================ entangle-0.4.1-1.fc18 (FEDORA-2012-13583) Tethered shooting & control of digital cameras -------------------------------------------------------------------------------- Update Information: Update to 0.4.1 release to fix multiple memory leak and crash bugs -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Daniel P. Berrange <berrange@xxxxxxxxxx> - 0.4.1-1 - Update to 0.4.1 release -------------------------------------------------------------------------------- ================================================================================ erlang-lager-1.2.0-1.fc18 (FEDORA-2012-13509) A logging framework for Erlang/OTP -------------------------------------------------------------------------------- Update Information: - Ver. 1.2.0 (API/ABI compatible) - Dropped upstreamed patches -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Peter Lemenkov <lemenkov@xxxxxxxxx> - 1.2.0-1 - Ver. 1.2.0 (API/ABI compatible) - Dropped upstreamed patches -------------------------------------------------------------------------------- References: [ 1 ] Bug #854529 - Upgrade erlang-lager to the version 1.2.0 https://bugzilla.redhat.com/show_bug.cgi?id=854529 -------------------------------------------------------------------------------- ================================================================================ erlang-protobuffs-0.7.0-1.fc18 (FEDORA-2012-13564) A set of Protocol Buffers tools and modules for Erlang applications -------------------------------------------------------------------------------- Update Information: - Upstream is switched to Basho - Ver. 0.7.0 - Dropped all Basho's patches -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Peter Lemenkov <lemenkov@xxxxxxxxx> - 0.7.0-1 - Upstream is switched to Basho - Ver. 0.7.0 - Dropped all Basho's patches -------------------------------------------------------------------------------- References: [ 1 ] Bug #854442 - Upgrade erlang-protobuffs to ver. 0.7.0 https://bugzilla.redhat.com/show_bug.cgi?id=854442 -------------------------------------------------------------------------------- ================================================================================ ettercap-0.7.5-0.fc18.20120906gitc796e5 (FEDORA-2012-13544) Network traffic sniffer/analyser, NCURSES interface version -------------------------------------------------------------------------------- Update Information: Fix Obsoletes. Fix gtk crash. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Jon Ciesla <limburgher@xxxxxxxxx> - 0.7.5-0.20120906gitc796e5 - Fixed Obsoletes, BZ 855067. * Tue Sep 4 2012 Jon Ciesla <limburgher@xxxxxxxxx> - 0.7.5-0.20120905gitc796e5 - Switch to git ettercap_rc branch for gtk crash, BZ 853791. - Dropped UI and daemon patches. - Merged subpackages, in part due to buildsystem change. - Spec cleanup. -------------------------------------------------------------------------------- References: [ 1 ] Bug #855067 - ettercap should probably obsolete ettercap-gtk and ettercap-common https://bugzilla.redhat.com/show_bug.cgi?id=855067 [ 2 ] Bug #853791 - ettercap-gtk segmentation fault after host scan https://bugzilla.redhat.com/show_bug.cgi?id=853791 -------------------------------------------------------------------------------- ================================================================================ evolution-rss-0.3.92-1.fc18 (FEDORA-2012-13585) Evolution RSS Reader -------------------------------------------------------------------------------- Update Information: New upstream release, fixes long time broken dependency. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Lucian Langa <cooly@xxxxxxxxxxxx> - 1:0.3.92-1 - add gsettings files - add new evolution rss module - new upstream release * Thu Jul 19 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1:0.3.91-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ fbg2-0.4-4.fc18 (FEDORA-2012-13558) A falling block stacking game -------------------------------------------------------------------------------- Update Information: Update radius-engine and avoision to 1.1 (rebuild fbg2 for new radius-engine). Fixes issue where avoision would not start. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 0.4-4 - rebuild for new radius-engine -------------------------------------------------------------------------------- References: [ 1 ] Bug #853879 - Avoision does not start https://bugzilla.redhat.com/show_bug.cgi?id=853879 -------------------------------------------------------------------------------- ================================================================================ fedora-gnat-project-common-3.5-1.fc18 (FEDORA-2012-13571) Files shared by Ada libraries -------------------------------------------------------------------------------- Update Information: What's new in version 3.5 is that Gnatmake and GPRbuild will be allowed to include a runpath in the built binaries if the RPM macro GNAT_add_rpath is defined. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Björn Persson <bjorn@rombobjörn.se> - 3.5-1 - Upgraded to version 3.5. - Inclusion of runpaths can be controlled with GNAT_add_rpath. -------------------------------------------------------------------------------- ================================================================================ fedora-logos-17.0.2-6.fc18 (FEDORA-2012-13530) Fedora-related icons and pictures -------------------------------------------------------------------------------- Update Information: Kill off old and unused grub1 splash art. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 17.0.2-6 - drop grub1 art (nothing uses it anymore) -------------------------------------------------------------------------------- References: [ 1 ] Bug #751340 - fedora-logos contains /boot/grub/splash.xpm.gz, which is obsolete https://bugzilla.redhat.com/show_bug.cgi?id=751340 -------------------------------------------------------------------------------- ================================================================================ firewalld-0.2.8-1.fc18 (FEDORA-2012-13545) A firewall daemon with D-BUS interface providing a dynamic firewall -------------------------------------------------------------------------------- Update Information: New version 0.2.8: - Do not apply old settings to zones after reload - FirewallClient: Added callback structure for firewalld signals - New firewall-config with full zone, service and icmptype support - Added Shields Up/Down configuration dialog to firewall-applet - Name attribute of main tag deprecated for zones, services and icmptypes, will be ignored if present - Fixed wrong references in firewalld man page - Unregister DBus interfaces after sending out the Removed signal - Use proper DBus signature in addIcmpType, addService and addZone - New builtin property for config interfaces - New test case for Config interface - spec: use new systemd-rpm macros (rhbz#850110) - More config file verifications - Lots of smaller fixes and enhancements * Make sure that firewalld gets restarted after updating. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Thomas Woerner <twoerner@xxxxxxxxxx> 0.2.8-1 - Do not apply old settings to zones after reload - FirewallClient: Added callback structure for firewalld signals - New firewall-config with full zone, service and icmptype support - Added Shields Up/Down configuration dialog to firewall-applet - Name attribute of main tag deprecated for zones, services and icmptypes, will be ignored if present - Fixed wrong references in firewalld man page - Unregister DBus interfaces after sending out the Removed signal - Use proper DBus signature in addIcmpType, addService and addZone - New builtin property for config interfaces - New test case for Config interface - spec: use new systemd-rpm macros (rhbz#850110) - More config file verifications - Lots of smaller fixes and enhancements * Tue Aug 21 2012 Jiri Popelka <jpopelka@xxxxxxxxxx> 0.2.7-2 - use new systemd-rpm macros (rhbz#850110) -------------------------------------------------------------------------------- References: [ 1 ] Bug #854954 - [abrt] firewall-config-0.2.7-1.fc18: connection.py:651:call_blocking:DBusException: org.freedesktop.DBus.Error.ServiceUnknown: The name org.fedoraproject.FirewallD1 was not provided by any .service files https://bugzilla.redhat.com/show_bug.cgi?id=854954 -------------------------------------------------------------------------------- ================================================================================ freeipa-3.0.0-0.5.fc18 (FEDORA-2012-12551) The Identity, Policy and Audit system -------------------------------------------------------------------------------- Update Information: Rebuild against samba4 beta6 Also updating default credential cache location as per https://fedoraproject.org/wiki/Features/KRB5DirCache and https://fedoraproject.org/wiki/Features/KRB5CacheMove -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Alexander Bokovoy <abokovoy@xxxxxxxxxx> - 3.0.0-0.5 - Adopt to samba4 beta6 (libsecurity -> libsamba-security) - Add dependency to samba4-winbind * Fri Aug 17 2012 Rob Crittenden <rcritten@xxxxxxxxxx> - 3.0.0-0.4 - Updated to upstream 3.0.0 beta 2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #851304 - SSSD's default ccache location needs to be updated (again), and the man pages should reflect it https://bugzilla.redhat.com/show_bug.cgi?id=851304 -------------------------------------------------------------------------------- ================================================================================ ghc-HSH-2.0.4-2.fc18 (FEDORA-2012-13568) Haskell library to run shell commands with Haskell programs -------------------------------------------------------------------------------- Update Information: Haskell library to run shell commands with Haskell programs -------------------------------------------------------------------------------- References: [ 1 ] Bug #850489 - Review Request: ghc-HSH - Haskell HSH library https://bugzilla.redhat.com/show_bug.cgi?id=850489 -------------------------------------------------------------------------------- ================================================================================ ghc-MonadRandom-0.1.6-1.fc18 (FEDORA-2012-13527) A random number generation monad -------------------------------------------------------------------------------- Update Information: A random number generation monad -------------------------------------------------------------------------------- References: [ 1 ] Bug #831116 - Review Request: ghc-MonadRandom - A random number generation Monad https://bugzilla.redhat.com/show_bug.cgi?id=831116 -------------------------------------------------------------------------------- ================================================================================ ghc-show-0.4.1.2-2.fc18 (FEDORA-2012-13567) Show library that provides ShowQ, ShowFun, and SimpleReflect -------------------------------------------------------------------------------- Update Information: Show library that provides ShowQ, ShowFun, and SimpleReflect -------------------------------------------------------------------------------- References: [ 1 ] Bug #854132 - Review Request: ghc-show - Haskell show library https://bugzilla.redhat.com/show_bug.cgi?id=854132 -------------------------------------------------------------------------------- ================================================================================ gnome-shell-extensions-3.5.91-1.fc18 (FEDORA-2012-13581) Modify and extend GNOME Shell functionality and behavior -------------------------------------------------------------------------------- Update Information: 3.5.91 ====== * various crashers were fixed in alternative-tab * auto-move-windows now can be made to work with static workspaces * place-menu is now on the left and uses symbolic icons like Files * StIconType usage was removed from all extensions, after it was removed in core * systemMonitor, xrandr-indicator, apps-menu, places-menu, alternative-status-menu were updated for the newer shell * updated translations (es, gl, it, pl, sl) -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Mohamed El Morabity <melmorabity@xxxxxxxxxxxxxxxx> - 3.5.91-1 - Update to 3.5.91 * Wed Aug 29 2012 Mohamed El Morabity <melmorabity@xxxxxxxxxxxxxxxx> - 3.5.90-1 - Update to 3.5.90 -------------------------------------------------------------------------------- ================================================================================ gthumb-3.0.2-3.fc18 (FEDORA-2012-13547) Image viewer, editor, organizer -------------------------------------------------------------------------------- Update Information: - New upstream release 3.0.2 (rhbz#849882) - Rebuild for new cogl (rhbz#825507) - Drop the obsolete unique BR (rhbz#852407) -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Hans de Goede <hdegoede@xxxxxxxxxx> - 3.0.2-3 - Really rebuild for new cogl (buildroot override was missing) * Tue Sep 4 2012 Hans de Goede <hdegoede@xxxxxxxxxx> - 3.0.2-1 - New upstream release 3.0.2 (rhbz#849882) - Rebuild for new cogl (rhbz#825507) - Drop the obsolete unique BR (rhbz#852407) -------------------------------------------------------------------------------- References: [ 1 ] Bug #849882 - gthumb-3.0.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=849882 [ 2 ] Bug #825507 - Software update error https://bugzilla.redhat.com/show_bug.cgi?id=825507 [ 3 ] Bug #852407 - Drop the unique BR https://bugzilla.redhat.com/show_bug.cgi?id=852407 -------------------------------------------------------------------------------- ================================================================================ hplip-3.12.9-1.fc18 (FEDORA-2012-13532) HP Linux Imaging and Printing Project -------------------------------------------------------------------------------- Update Information: http://hplipopensource.com/hplip-web/release_notes.html -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Jiri Popelka <jpopelka@xxxxxxxxxx> 3.12.9-1 - 3.12.9 -- no longer needed: fax-ppd.patch -------------------------------------------------------------------------------- ================================================================================ hyena-0.5-5.fc18 (FEDORA-2012-13578) A library of GUI and non-GUI C sharp code -------------------------------------------------------------------------------- Update Information: fix build on secondary arches -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Dan Horák <dan[at]danny.cz> - 0.5-5 - set ExclusiveArch -------------------------------------------------------------------------------- ================================================================================ ibus-1.4.99.20120822-2.fc18 (FEDORA-2012-13542) Intelligent Input Bus for Linux OS -------------------------------------------------------------------------------- Update Information: This update fixes ibus-setup -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.4.99.20120822-2 - Updated ibus-530711-preload-sys.patch - Updated ibus-541492-xkb.patch - Updated ibus-xx-no-use.diff Fixed Bug 854161 - not able to add keymap with ibus-setup * Wed Aug 22 2012 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.4.99.20120822-1 - Bumped to 1.4.99.20120822 - Bumped to ibus-gjs 3.4.1.20120815 Fixed Bug 845956 - ibus backward trigger key is not customized Fixed Bug 844580 - ibus-dconf does not load the system gvdb - Separated ibus-810211-no-switch-by-no-trigger.patch from ibus-HEAD.patch -------------------------------------------------------------------------------- References: [ 1 ] Bug #854161 - not able to add keymap with ibus-setup https://bugzilla.redhat.com/show_bug.cgi?id=854161 -------------------------------------------------------------------------------- ================================================================================ ibus-table-1.3.9.20110827-4.fc18 (FEDORA-2012-13519) The Table engine for IBus platform -------------------------------------------------------------------------------- Update Information: Here is where you give an explanation of your update. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mike FABIAN <mfabian@xxxxxxxxxx> - 1.3.9.20110827-4 - Resolves: #845798 - add ibus-table-1.3.9.20110827-add-some-keys-for-translit.patch (from Yuwei YU, upstream) - add ibus-table-1.3.9.20110827-enable-non-ascii.patch (from Yuwei YU, upstream) - add ibus-table-1.3.9.20110827-uppercase-umlauts.patch to allow uppercase as well in translit -------------------------------------------------------------------------------- References: [ 1 ] Bug #845798 - translit table gives KeyError https://bugzilla.redhat.com/show_bug.cgi?id=845798 -------------------------------------------------------------------------------- ================================================================================ ibus-table-chinese-1.4.0-1.fc18 (FEDORA-2012-13541) Chinese input tables for IBus -------------------------------------------------------------------------------- Update Information: - Table build scripts has been refactored. - cmake-fedora is added as submodule. - Fixed Bug 855250 - Change the default filtering for Quick and Cangjie by merging maxiaojun's repository - Fixed Google Issue 1405: failed to build ibus-table-chinese due to missing db files -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Ding-Yi Chen <dchen@xxxxxxxxxx> - 1.4.0-1 - Table build scripts has been refactored. - cmake-fedora is added as submodule. - Fixed Bug 855250 - Change the default filtering for Quick and Cangjie by merging maxiaojun's repository - Fixed Google Issue 1405: failed to build ibus-table-chinese due to missing db files * Thu Jul 19 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.3.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #855250 - Change the default filtering for Quick and Cangjie https://bugzilla.redhat.com/show_bug.cgi?id=855250 -------------------------------------------------------------------------------- ================================================================================ ibus-table-others-1.3.0.20100907-12.fc18 (FEDORA-2012-13579) Various tables for IBus-Table -------------------------------------------------------------------------------- Update Information: Here is where you give an explanation of your update. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Mike FABIAN <mfabian@xxxxxxxxxx> - 1.3.0.20100907-13 - Resolves: #855098 - Correct the filename of the ipa-x-sampa icon and replace it with a nicer .svg version. * Thu Sep 6 2012 Mike FABIAN <mfabian@xxxxxxxxxx> - 1.3.0.20100907-12 - Resolves: #855102 - Supported languages should not be left empty in a table. For an input method which has LANGUAGES set to an empty string, nothing at all is shown by ibus when trying to change to that input method using the trigger key which makes the input method hard to select. * Thu Sep 6 2012 Mike FABIAN <mfabian@xxxxxxxxxx> - 1.3.0.20100907-11 - Related: #845798, #854539 - enable build of Russian transliteration table again, should work now because of the fix for ibus-table, see #845798 - improvements for the Russian and Ukrainian transliteration tables translit.txt and translit-ua.txt by the original author Daniil Ivanov <daniil.ivanov@xxxxxxxxx> * Wed Aug 29 2012 Mike FABIAN <mfabian@xxxxxxxxxx> - 1.3.0.20100907-10 - Fix build for emoji-table and enable it again. - Resolves: #845797 -------------------------------------------------------------------------------- References: [ 1 ] Bug #855098 - The ipa-x-sampa input method shows no icon in the panel https://bugzilla.redhat.com/show_bug.cgi?id=855098 [ 2 ] Bug #855102 - The compose and the latex input method show nothing at all in the popup when switching input methods with the trigger key https://bugzilla.redhat.com/show_bug.cgi?id=855102 -------------------------------------------------------------------------------- ================================================================================ kdevelop-4.3.90-1.fc18 (FEDORA-2012-13535) Integrated Development Environment for C++/C -------------------------------------------------------------------------------- Update Information: Update KDevelop to latest RC version -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Radek Novacek <rnovacek@xxxxxxxxxx> 9:4.3.90-1 - Update to 4.3.90 (RC 1) -------------------------------------------------------------------------------- ================================================================================ kdevplatform-1.3.90-1.fc18 (FEDORA-2012-13535) Libraries for use by KDE development tools -------------------------------------------------------------------------------- Update Information: Update KDevelop to latest RC version -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Radek Novacek <rnovacek@xxxxxxxxxx> 1.3.90-1 - Update to 1.3.90 (RC1) -------------------------------------------------------------------------------- ================================================================================ libgee-0.7.90-1.fc18 (FEDORA-2012-13549) GObject collection library -------------------------------------------------------------------------------- Update Information: * Don't notify when constructor property is set * Use views instead of copies in MultiMap as in rest of libgee * Allow early termination in Traversable.foreach -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Michel Salim <salimma@xxxxxxxxxxxxxxxxx> - 0.7.90-1 - Update to 0.7.90 -------------------------------------------------------------------------------- References: [ 1 ] Bug #846060 - libgee-0.7.90 is available https://bugzilla.redhat.com/show_bug.cgi?id=846060 -------------------------------------------------------------------------------- ================================================================================ libpipeline-1.2.1-2.fc18 (FEDORA-2012-13498) A pipeline manipulation library -------------------------------------------------------------------------------- Update Information: Enabled test suite at the build time, cleaned .spec file. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Peter Schiffer <pschiffe@xxxxxxxxxx> - 1.2.1-2 - enabled test suite at build time - cleaned .spec file -------------------------------------------------------------------------------- ================================================================================ libreoffice-3.6.1.2-2.fc18 (FEDORA-2012-13566) Free Software Productivity Suite -------------------------------------------------------------------------------- Update Information: make use of split out hunspell-en-US, en-GB subpackages -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 29 2012 Caolán McNamara <caolanm@xxxxxxxxxx> - 1:3.6.1.2-2 - Related: rhbz#850709 hunspell en-US available standalone so make English langpack require hunspell-en and core just bare bones hunspell-en-US * Sun Aug 26 2012 David Tardon <dtardon@xxxxxxxxxx> - 1:3.6.1.2-1 - 3.6.1 rc2 * Wed Aug 22 2012 Caolán McNamara <caolanm@xxxxxxxxxx> - 1:3.6.1.1-2 - Resolves: rhbz#846775 Clipboard must be disposed before selection - Resolves: rhbz#842292 crash in scrolling multiselection in draw * Wed Aug 15 2012 David Tardon <dtardon@xxxxxxxxxx> - 1:3.6.1.1-1 - 3.6.1 rc1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #850709 - Avoid installation of strange flavors of english https://bugzilla.redhat.com/show_bug.cgi?id=850709 -------------------------------------------------------------------------------- ================================================================================ libvdpau-0.5-1.fc18 (FEDORA-2012-13546) Wrapper library for the Video Decode and Presentation API -------------------------------------------------------------------------------- Update Information: This version of libvdpau includes workarounds for two bugs in the Adobe® Flash® Player: * Flash swaps the Cb and Cr arguments when it calls VdpVideoSurfacePutBitsYCbCr. This generally makes videos that use this method of uploading images have a slightly bluish tinge, especially on skin tones. The workaround simply swaps the Cb and Cr arguments to this function. This workaround is applied if "libflashplayer" is found in /proc/self/cmdline and the string "enable_flash_uv_swap=1" is found in /etc/vdpau_wrapper.cfg. * Even though it does not depend on a specific color key color, Flash sets the color to pure black or pure white, which causes video to bleed through into other windows when those colors are used. The workaround simply ignores requests to change the color key value. This workaround is applied if "libflashplayer" is found in /proc/self/cmdline and the string "disable_flash_pq_bg_color=1" is found in /etc/vdpau_wrapper.cfg. This release also contains a fix for a memory leak that occurs hen libvdpau is unloaded. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Nicolas Chauvet <kwizart@xxxxxxxxx> - 0.5-1 - Update to 0.5 * Sun Aug 19 2012 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 0.4.1-9 - Added flash workarounds -------------------------------------------------------------------------------- ================================================================================ libvirt-snmp-0.0.3-1.fc18 (FEDORA-2012-13565) SNMP functionality for libvirt -------------------------------------------------------------------------------- Update Information: New libvirt-snmp-0.0.3 package released upstream. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Michal Privoznik <mprivozn@xxxxxxxxxx> 0.0.3-1 - various bug fixes and improvements -------------------------------------------------------------------------------- ================================================================================ livecd-tools-18.10-1.fc18 (FEDORA-2012-13538) Tools for building live CDs -------------------------------------------------------------------------------- Update Information: Add support for F18 images to livecd-iso-to-disk -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Brian C. Lane <bcl@xxxxxxxxxx> 18.9-1 - Version 18.10 (bcl) - use cp -r instead of -a (bcl) * Thu Sep 6 2012 Brian C. Lane <bcl@xxxxxxxxxx> 18.9-1 - Version 18.9 (bcl) - fix extra-kernel-args (#853570) (bcl) - New location for GRUB2 config on UEFI (#851220) (bcl) - Add nocleanup option to retain temp files (bcl) - Update imgcreate for UEFI Secure Boot (bcl) -------------------------------------------------------------------------------- ================================================================================ mate-conf-1.4.0-17.fc18 (FEDORA-2012-13562) MATE Desktop configuration files -------------------------------------------------------------------------------- Update Information: rebuild with new desktop-file-utils 0.20 see changelog. see changelog. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Dan Mashal <dan.mashal@xxxxxxxxxxxxxxxxx> 1.4.0-17 - Rebuild entire spec from scratch * Sun Sep 2 2012 Dan Mashal <dan.mashal@xxxxxxxxxxxxxxxxx> 1.4.0-16 - Drop the useless gtk package, and specific version requirements for buildrequires field. - Move mateconf-sanity-check-2 to the main package where it's needed * Sun Aug 26 2012 Dan Mashal <dan.mashal@xxxxxxxxxxxxxxxxx 1.4.0-15 - Bump release for repush -------------------------------------------------------------------------------- References: [ 1 ] Bug #849449 - mate-conf doesn't update packages with old rpm scriplet style https://bugzilla.redhat.com/show_bug.cgi?id=849449 -------------------------------------------------------------------------------- ================================================================================ mcollective-2.0.0-6.fc18 (FEDORA-2012-13503) A framework to build server orchestration or parallel job execution systems -------------------------------------------------------------------------------- Update Information: Changes permissions of client.cfg to 0644. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Steve Traylen <steve.traylen@xxxxxxx> - 2.0.0-6 - Fix rhbz#853574 in different way. 0644 client.cfg. * Wed Sep 5 2012 Steve Traylen <steve.traylen@xxxxxxx> - 2.0.0-5 - Add mco unix group who can read client.cfg rhbz#853574 -------------------------------------------------------------------------------- References: [ 1 ] Bug #853574 - RFE - please change default permissions for client.cfg to 0644 https://bugzilla.redhat.com/show_bug.cgi?id=853574 -------------------------------------------------------------------------------- ================================================================================ mercurial-2.3.1-1.fc18 (FEDORA-2012-13522) Mercurial -- a distributed SCM -------------------------------------------------------------------------------- Update Information: see: http://http://mercurial.selenic.com/wiki/WhatsNew -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Neal Becker <ndbecker2@xxxxxxxxx> - 2.3.1-1 - Update to 2.3.1 * Mon Aug 13 2012 Neal Becker <ndbecker2@xxxxxxxxx> - 2.3-1 - Update to 2.3 -------------------------------------------------------------------------------- ================================================================================ milter-regex-1.9-5.fc18 (FEDORA-2012-13582) Milter plug-in for regular expression filtering -------------------------------------------------------------------------------- Update Information: This update drops support for migration from SysV initscripts (added in F-16) and adds support for systemd presets. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Paul Howarth <paul@xxxxxxxxxxxx> - 1.9-5 - drop SysV-to-systemd migration support from F-18 onwards - use systemd scriptlet macros for preset support (#850207) -------------------------------------------------------------------------------- References: [ 1 ] Bug #850207 - Introduce new systemd-rpm macros in milter-regex spec file https://bugzilla.redhat.com/show_bug.cgi?id=850207 -------------------------------------------------------------------------------- ================================================================================ moin-1.9.4-3.fc18 (FEDORA-2012-13528) MoinMoin is a WikiEngine to collaborate on easily editable web pages -------------------------------------------------------------------------------- Update Information: Fix CVE-2012-4404 -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Ville-Pekka Vainio <vpvainio AT iki.fi> - 1.9.4-3 - Fix CVE-2012-4404 -------------------------------------------------------------------------------- References: [ 1 ] Bug #854730 - CVE-2012-4404 moin: Improper ACL rules enforcement due to a bug in the way virtual groups were handled previously during ACL evaluation https://bugzilla.redhat.com/show_bug.cgi?id=854730 -------------------------------------------------------------------------------- ================================================================================ mozilla-https-everywhere-2.2.2-1.fc18 (FEDORA-2012-13504) HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey -------------------------------------------------------------------------------- Update Information: - Fix a bug that was preventing settings from persisting: https://trac.torproject.org/projects/tor/ticket/6653 - Fixes and improvements: Lenovo, YahooNew, Pirate Party, OpenDNS, Wordpress https://trac.torproject.org/projects/tor/ticket/6604 https://mail1.eff.org/pipermail/https-everywhere-rules/2012-August/001267.html - Disable broken rulesets: FAZ, Playboy, Mapquest, Imgur, F-Secure -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Russell Golden <niveusluna@xxxxxxxxxxxxxx> - 2.2.2-1 - Fix a bug that was preventing settings from persisting: https://trac.torproject.org/projects/tor/ticket/6653 - Fixes and improvements: Lenovo, YahooNew, Pirate Party, OpenDNS, Wordpress https://trac.torproject.org/projects/tor/ticket/6604 https://mail1.eff.org/pipermail/https-everywhere-rules/2012-August/001267.html - Disable broken rulesets: FAZ, Playboy, Mapquest, Imgur, F-Secure * Fri Aug 17 2012 Russell Golden <niveusluna@xxxxxxxxxxxxxx> - 2.2.1-1 - Update to upstream 2.2.1. Hopefully this one will actually work. * Fri Aug 17 2012 Russell Golden <niveusluna@xxxxxxxxxxxxxx> - 2.1-5 - Add appManaged flag to prevent update in user profile directories - prompted by release of badly broken 2.2 upstream * Fri Aug 17 2012 Russell Golden <niveusluna@xxxxxxxxxxxxxx> - 2.2-2 - Prevent ruleset bugs from crashing the UI -- https://trac.torproject.org/projects/tor/ticket/6280 - Fix the enable/disable button in Firefox 14 -- https://trac.torproject.org/projects/tor/ticket/6212 - Fix a nasty bug in the optional "Search www.google.com" ruleset: -- https://gitweb.torproject.org/https-everywhere.git/commitdiff/50ca41a1e189ef8383781f803e51ec7a06688a3b - Disable buggy/broken: ZDNet, Globe and Mail, Blip.tv, Governo Portugês, -- Alton Towers, McAfee :( :( :( - Fixes: Yandex, Wikipedia, PirateParty, JBoss, Gentoo - Hopefully the last 2.x release before 3.0 stable -------------------------------------------------------------------------------- ================================================================================ mysql-connector-python-1.0.6-1.b1.fc18 (FEDORA-2012-13526) MySQL Connector for Python 2 -------------------------------------------------------------------------------- Update Information: Upstream changelog for 1.0.6-beta (2012-08-28) ----------------------------------------------------------------------- * Fixed Python v3 code so it works with Python v3.3. (BUG#14524942) * Fixed MySQLCursorRaw.fetchall() to not raise when results are available. This was only a problem in the Python v3 code. (BUG#14517262, BUG#66465) * Changed name and version of distributions to align with other MySQL projects (WL#6450) * The version now includes the suffix 'b' for beta and 'a' for alpha followed by a number. This version is used in the source and built distributions. GA versions will have no suffix. * The RPM spec files have been updated to create packages which names are aligned with RPMs from other MySQL projects. * Fixed installation of version.py on OS X. (BUG#14483142) * version.py is now correctly installed on OS X in the mysql.connector package. Previously it was installed through data_files, and version.py ended up in the system wide package location of Python from where it could not be imported. * data_files is not used any longer in setup.py and is removed. Extra files like version.py are now copied in the custom Distutils commands. * Fixed SSL unit testing for source distributions. (BUG#14402737) * The SSL keys and certificates were missing and have been added to the source distribution. Now SSL testing works properly. * Additionally for the Windows platform, forward slashes had to be added to the option file creation so the MySQL server can pickup the needed SSL files. * Timeout for unit tests has been set to 10 seconds. Test cases can individually adjust it to be higher or lower. (BUG#14487502) * Fixed test cases in test_mysql_database.py which failed when using using YEAR(2) with MySQL v5.6.6 and greater. (BUG#14460680) * Changed how MySQL server errors are mapped to Python exceptions. We now use the SQLState (when available) to raise a better error. (WL#6412) * Incompatibility: some server errors are now raised with a different exception. * It is possible to override how errors are raised using the mysql.connector.custom_error_exception() function, defined in the mysql.connector.errors module. This can be useful for certain frameworks to align with other database drivers. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 1.0.6-1.b1 - version 1.0.6 (beta) - remove non GPL documentation - disable test_network and test_connection on EL-5 * Fri Aug 10 2012 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 1.0.5-2 - disable test_bugs with MySQL 5.1 (EL-6) -------------------------------------------------------------------------------- ================================================================================ nacl-20110221-3.fc18 (FEDORA-2012-13543) Networking and Cryptography library -------------------------------------------------------------------------------- Update Information: This is an update that fixes build on secondary architectures. This is new package, networking and cryptography library. For more details see http://nacl.cace-project.eu/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #837050 - Review Request: nacl - Networking and Cryptography library https://bugzilla.redhat.com/show_bug.cgi?id=837050 -------------------------------------------------------------------------------- ================================================================================ nhn-nanum-gothic-light-fonts-1.000-2.fc18 (FEDORA-2012-13516) Nanum Gothic Light family of Korean TrueType fonts -------------------------------------------------------------------------------- Update Information: Nanum Gothic Light is an addition to Korean "Nanum Gothic" font family. It provides very thin glyphs which are useful for graphic designs in some cases. -------------------------------------------------------------------------------- References: [ 1 ] Bug #847182 - Review Request: nhn-nanum-gothic-light-fonts - Nanum Gothic Light family of Korean TrueType fonts https://bugzilla.redhat.com/show_bug.cgi?id=847182 -------------------------------------------------------------------------------- ================================================================================ octave-3.6.3-2.fc18 (FEDORA-2012-13555) A high-level language for numerical computations -------------------------------------------------------------------------------- Update Information: Update to 3.6.3 bugfix relesae. See http://www.gnu.org/software/octave/NEWS-3.6.html for details. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Orion Poplawski <orion[AT]cora.nwra com> - 6:3.6.3-2 - Add upstream patch to fix sparse matrix test crash * Wed Sep 5 2012 Orion Poplawski <orion[AT]cora.nwra com> - 6:3.6.3-1 - Update to 3.6.3 - Drop gets patch fixed upstream -------------------------------------------------------------------------------- ================================================================================ olpc-update-2.26-1.fc18 (FEDORA-2012-13524) OLPC system update tools -------------------------------------------------------------------------------- Update Information: Don't assume a corrupt lease has infinite duration. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Daniel Drake <dsd@xxxxxxxxxx> - 2.26-1 - New version for better error handling and lease verification -------------------------------------------------------------------------------- ================================================================================ paps-0.6.8-20.fc18 (FEDORA-2012-13569) Plain Text to PostScript converter -------------------------------------------------------------------------------- Update Information: Add a missing description of --encoding in manpage. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Akira TAGOH <tagoh@xxxxxxxxxx> - 0.6.8-20 - Add a missing description of --encoding in manpage. (#854897) -------------------------------------------------------------------------------- References: [ 1 ] Bug #854897 - paps - Inconsistency between man page and help https://bugzilla.redhat.com/show_bug.cgi?id=854897 -------------------------------------------------------------------------------- ================================================================================ pcs-0.9.19-1.fc18 (FEDORA-2012-13556) Pacemaker Configuration System -------------------------------------------------------------------------------- Update Information: Resync to latest version -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Chris Feist <cfeist@xxxxxxxxxx> - 0.9.19-1 - Resync to latest version of pcs -------------------------------------------------------------------------------- ================================================================================ perl-CPAN-Perl-Releases-0.68-1.fc18 (FEDORA-2012-13514) Mapping Perl releases on CPAN to the location of the tarballs -------------------------------------------------------------------------------- Update Information: The perlbrew update includes * properly remove perlbrew-related PERL5LIB entries. GH #197 * Fix the build for perl-5.12 and 5.14 -- userelocatableinc are not working properly. * The build log output "build.log" is now named after the installation name for eaiser reference. * Fix the invokation configure command to actually contains -Duserelocatableinc * Experimental: bash/zsh users may put this to shell init instead: eval "$(~/perl5/perlbrew/bin/perlbrew init -)" * A few output message updates * New command: download. * New env var: PERLBREW_CONFIGURE_FLAGS * userelocatableinc is enabled by default when the installing perl version is greater than or equals to 5.8.9. It should make some use cases eaiser. In particular, you can move PERLBREW_ROOT directory to another place. * fix https://github.com/gugod/App-perlbrew/issues/216 for bash users and zsh users -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Iain Arnell <iarnell@xxxxxxxxx> 0.68-1 - update to latest upstream version * Sat Aug 18 2012 Iain Arnell <iarnell@xxxxxxxxx> 0.66-1 - update to latest upstream version -------------------------------------------------------------------------------- ================================================================================ perl-Devel-PatchPerl-0.76-1.fc18 (FEDORA-2012-13514) Patch perl source à la Devel::PPPort's buildperl.pl -------------------------------------------------------------------------------- Update Information: The perlbrew update includes * properly remove perlbrew-related PERL5LIB entries. GH #197 * Fix the build for perl-5.12 and 5.14 -- userelocatableinc are not working properly. * The build log output "build.log" is now named after the installation name for eaiser reference. * Fix the invokation configure command to actually contains -Duserelocatableinc * Experimental: bash/zsh users may put this to shell init instead: eval "$(~/perl5/perlbrew/bin/perlbrew init -)" * A few output message updates * New command: download. * New env var: PERLBREW_CONFIGURE_FLAGS * userelocatableinc is enabled by default when the installing perl version is greater than or equals to 5.8.9. It should make some use cases eaiser. In particular, you can move PERLBREW_ROOT directory to another place. * fix https://github.com/gugod/App-perlbrew/issues/216 for bash users and zsh users -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Iain Arnell <iarnell@xxxxxxxxx> 0.76-1 - update to latest upstream version -------------------------------------------------------------------------------- ================================================================================ perl-IO-All-0.46-1.fc18 (FEDORA-2012-13505) IO::All Perl module -------------------------------------------------------------------------------- Update Information: This update fixes a warning under perl 5.16 -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Iain Arnell <iarnell@xxxxxxxxx> 0.46-1 - update to latest upstream version - clean up spec for modern rpmbuild -------------------------------------------------------------------------------- ================================================================================ perlbrew-0.50-1.fc18 (FEDORA-2012-13514) Manage perl installations in your $HOME -------------------------------------------------------------------------------- Update Information: The perlbrew update includes * properly remove perlbrew-related PERL5LIB entries. GH #197 * Fix the build for perl-5.12 and 5.14 -- userelocatableinc are not working properly. * The build log output "build.log" is now named after the installation name for eaiser reference. * Fix the invokation configure command to actually contains -Duserelocatableinc * Experimental: bash/zsh users may put this to shell init instead: eval "$(~/perl5/perlbrew/bin/perlbrew init -)" * A few output message updates * New command: download. * New env var: PERLBREW_CONFIGURE_FLAGS * userelocatableinc is enabled by default when the installing perl version is greater than or equals to 5.8.9. It should make some use cases eaiser. In particular, you can move PERLBREW_ROOT directory to another place. * fix https://github.com/gugod/App-perlbrew/issues/216 for bash users and zsh users -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ pinfo-0.6.10-6.fc18 (FEDORA-2012-13521) An info file viewer -------------------------------------------------------------------------------- Update Information: Add -p and -d to manpage. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Lukáš Nykrýn <lnykryn@xxxxxxxxxx> - 0.6.10-6 - Add -p and -d to manpage (#854900) -------------------------------------------------------------------------------- References: [ 1 ] Bug #854900 - pinfo - Inconsistency between man page and help https://bugzilla.redhat.com/show_bug.cgi?id=854900 -------------------------------------------------------------------------------- ================================================================================ postfix-2.9.4-3.fc18 (FEDORA-2012-13552) Postfix Mail Transport Agent -------------------------------------------------------------------------------- Update Information: This is an update that fixes systemd error about missing chroot-update. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 2:2.9.4-3 - Fixed systemd error message about missing chroot-update Resolves: rhbz#832742 -------------------------------------------------------------------------------- References: [ 1 ] Bug #832742 - missing /etc/postfix/chroot-update https://bugzilla.redhat.com/show_bug.cgi?id=832742 -------------------------------------------------------------------------------- ================================================================================ python-alsa-1.0.26-1.fc18 (FEDORA-2012-13533) Python binding for the ALSA library -------------------------------------------------------------------------------- Update Information: ALSA user space packages updated to 1.0.26 version. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Jaroslav Kysela <jkysela@xxxxxxxxxx> - 1.0.26-1 - Updated to 1.0.26 -------------------------------------------------------------------------------- ================================================================================ python-django-tagging-0.3.1-6.fc18 (FEDORA-2012-13580) A generic tagging application for Django projects -------------------------------------------------------------------------------- Update Information: Correct obsoletes to fix upgrade from f17 -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Matthias Runge <mrunge@xxxxxxxxxx> - 0.3.1-6 - correct wrong obsoletes - requires python-django -------------------------------------------------------------------------------- References: [ 1 ] Bug #854873 - python-django-tagging does not Obsolete / Provide django-tagging https://bugzilla.redhat.com/show_bug.cgi?id=854873 -------------------------------------------------------------------------------- ================================================================================ python-moksha-common-1.0.0-4.fc18 (FEDORA-2012-13531) Common components for Moksha -------------------------------------------------------------------------------- Update Information: Initial import (#854605). -------------------------------------------------------------------------------- ================================================================================ python-rtslib-2.1.fb22-1.fc18 (FEDORA-2012-13553) API for RisingTide Systems generic SCSI target -------------------------------------------------------------------------------- Update Information: fix a bug and update f17 to f18 parity. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Andy Grover <agrover@xxxxxxxxxx> - 2.1.fb22-1 - New upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #854403 - Using the sessions command when using tcm_fc results in error messages https://bugzilla.redhat.com/show_bug.cgi?id=854403 -------------------------------------------------------------------------------- ================================================================================ quota-4.00-6.fc18 (FEDORA-2012-13561) System administration tools for monitoring users' disk usage -------------------------------------------------------------------------------- Update Information: Fix reporting for NFSv3 mount points. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Petr Pisar <ppisar@xxxxxxxxxx> - 1:4.00-6 - Fix reporting for NFSv3 mount points -------------------------------------------------------------------------------- ================================================================================ radius-engine-1.1-1.fc18 (FEDORA-2012-13558) A Lua based real-time 2D graphics game engine -------------------------------------------------------------------------------- Update Information: Update radius-engine and avoision to 1.1 (rebuild fbg2 for new radius-engine). Fixes issue where avoision would not start. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 4 2012 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.1-1 - update to 1.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #853879 - Avoision does not start https://bugzilla.redhat.com/show_bug.cgi?id=853879 -------------------------------------------------------------------------------- ================================================================================ rpmlint-1.4-10.fc18 (FEDORA-2012-13573) Tool for checking common errors in RPM packages -------------------------------------------------------------------------------- Update Information: Add fixes to improve rpmlint checking of ruby packages. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.4-10 - fix handling of ruby RI files as text files (they are binary files) - apply upstream fix for macro regexp * Tue Sep 4 2012 Thomas Woerner <twoerner@xxxxxxxxxx> - 1.4-9 - fix build for RHEL: no bash-completion -------------------------------------------------------------------------------- References: [ 1 ] Bug #850786 - rpmlint doesn't work properly with RI files (unexpanded-macro, file-not-utf8, wrong-file-end-of-line-encoding) https://bugzilla.redhat.com/show_bug.cgi?id=850786 -------------------------------------------------------------------------------- ================================================================================ ruby-1.9.3.194-17.fc18 (FEDORA-2012-13501) An interpreter of object-oriented scripting language -------------------------------------------------------------------------------- Update Information: Split documentation into -doc subpackage to let it installed, when rubygem-rdoc gets updated. Fix the search path of RI documentation. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Vít Ondruch <vondruch@xxxxxxxxxx> - 1.9.3.194-17 - Split documentation into -doc subpackage. -------------------------------------------------------------------------------- References: [ 1 ] Bug #854418 - rubygem-rdoc doesn't provide Ruby documentation https://bugzilla.redhat.com/show_bug.cgi?id=854418 -------------------------------------------------------------------------------- ================================================================================ rubygem-atk-1.1.5-1.fc18 (FEDORA-2012-13499) Ruby binding of ATK-1.0.x -------------------------------------------------------------------------------- Update Information: ruby-gnome2 suite 1.1.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.5-1 - 1.1.5 -------------------------------------------------------------------------------- ================================================================================ rubygem-cairo-1.12.2-1.fc18 (FEDORA-2012-13550) Ruby bindings for cairo -------------------------------------------------------------------------------- Update Information: rubygem-cairo 1.12.2 is released. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.12.2-1 - Update to 1.12.2 formal -------------------------------------------------------------------------------- ================================================================================ rubygem-gdk_pixbuf2-1.1.5-1.fc18 (FEDORA-2012-13499) Ruby binding of GdkPixbuf-2.x -------------------------------------------------------------------------------- Update Information: ruby-gnome2 suite 1.1.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.5-1 - 1.1.5 -------------------------------------------------------------------------------- ================================================================================ rubygem-gio2-1.1.5-1.fc18 (FEDORA-2012-13499) Ruby binding of gio-2.0.x -------------------------------------------------------------------------------- Update Information: ruby-gnome2 suite 1.1.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.5-1 - 1.1.5 -------------------------------------------------------------------------------- ================================================================================ rubygem-glib2-1.1.5-1.fc18 (FEDORA-2012-13499) Ruby binding of GLib-2.x -------------------------------------------------------------------------------- Update Information: ruby-gnome2 suite 1.1.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.5-1 - 1.1.5 -------------------------------------------------------------------------------- ================================================================================ rubygem-goocanvas-1.1.5-1.fc18 (FEDORA-2012-13499) Ruby binding of GooCanvas -------------------------------------------------------------------------------- Update Information: ruby-gnome2 suite 1.1.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.5-1 - 1.1.5 -------------------------------------------------------------------------------- ================================================================================ rubygem-gstreamer-1.1.5-1.fc18 (FEDORA-2012-13499) Ruby binding of GStreamer -------------------------------------------------------------------------------- Update Information: ruby-gnome2 suite 1.1.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.5-1 - 1.1.5 -------------------------------------------------------------------------------- ================================================================================ rubygem-gtk2-1.1.5-1.fc18 (FEDORA-2012-13499) Ruby binding of GTK+-2.x -------------------------------------------------------------------------------- Update Information: ruby-gnome2 suite 1.1.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.5-1 - 1.1.5 -------------------------------------------------------------------------------- ================================================================================ rubygem-gtksourceview2-1.1.5-1.fc18 (FEDORA-2012-13499) Ruby binding of gtksourceview-2.x -------------------------------------------------------------------------------- Update Information: ruby-gnome2 suite 1.1.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.5-1 - 1.1.5 -------------------------------------------------------------------------------- ================================================================================ rubygem-pango-1.1.5-1.fc18 (FEDORA-2012-13499) Ruby binding of pango-1.x -------------------------------------------------------------------------------- Update Information: ruby-gnome2 suite 1.1.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.5-1 - 1.1.5 -------------------------------------------------------------------------------- ================================================================================ rubygem-poppler-1.1.5-1.fc18 (FEDORA-2012-13499) Ruby binding of poppler-glib -------------------------------------------------------------------------------- Update Information: ruby-gnome2 suite 1.1.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.5-1 - 1.1.5 -------------------------------------------------------------------------------- ================================================================================ rubygem-progressbar-0.11.0-1.fc18 (FEDORA-2012-13572) Ruby text progress bar generator library -------------------------------------------------------------------------------- Update Information: Update to progressbar 0.11.0. Fixes F18 mass rebuild issue (rhbz#847783). -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Vít Ondruch <vondruch@xxxxxxxxxx> - 0.11.0-1 - Update to progressbar 0.11.0. * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.9.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #847783 - Build failure due to rdoc incompatibility https://bugzilla.redhat.com/show_bug.cgi?id=847783 -------------------------------------------------------------------------------- ================================================================================ rubygem-rdoc-3.12-5.fc18 (FEDORA-2012-13501) RDoc produces HTML and command-line documentation for Ruby projects -------------------------------------------------------------------------------- Update Information: Split documentation into -doc subpackage to let it installed, when rubygem-rdoc gets updated. Fix the search path of RI documentation. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Vít Ondruch <vondruch@xxxxxxxxxx> - 3.12-5 - Fix the location of Ruby documentation. -------------------------------------------------------------------------------- References: [ 1 ] Bug #854418 - rubygem-rdoc doesn't provide Ruby documentation https://bugzilla.redhat.com/show_bug.cgi?id=854418 -------------------------------------------------------------------------------- ================================================================================ rubygem-rsvg2-1.1.5-1.fc18 (FEDORA-2012-13499) Ruby binding of librsvg-2.x -------------------------------------------------------------------------------- Update Information: ruby-gnome2 suite 1.1.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.5-1 - 1.1.5 -------------------------------------------------------------------------------- ================================================================================ rubygem-vte-1.1.5-1.fc18 (FEDORA-2012-13499) Ruby binding of vte -------------------------------------------------------------------------------- Update Information: ruby-gnome2 suite 1.1.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.5-1 - 1.1.5 -------------------------------------------------------------------------------- ================================================================================ rubygems-1.8.24-3.fc18 (FEDORA-2012-13525) The Ruby standard for packaging ruby libraries -------------------------------------------------------------------------------- Update Information: Fixed Fedora 18 mass rebuild issue. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Vít Ondruch <vondruch@xxxxxxxxxx> - 1.8.24-3 - Fixed Fedora 18 mass rebuild issue. * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.8.24-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ selinux-policy-3.11.1-16.fc18 (FEDORA-2012-13554) SELinux policy configuration -------------------------------------------------------------------------------- Update Information: - nmbd wants to create /var/nmbd - Stop transitioning out of anaconda and firstboot, just causes AVC messages - Allow clamscan to read /etc files - Allow bcfg2 to bind cyphesis port - heartbeat should be run as rgmanager_t instead of corosync_t - Add labeling for /etc/openldap/certs - Add labeling for /opt/sartest directory - Make crontab_t as userdom home reader - Allow tmpreaper to list admin_home dir - Add defition for imap_0 replay cache file - Add support for gitolite3 - Allow virsh_t to send syslog messages - allow domains that can read samba content to be able to list the directories also - Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd - Separate out sandbox from sandboxX policy so we can disable it by default - Run dmeventd as lvm_t - Mounting on any directory requires setattr and write permissions - Fix use_nfs_home_dirs() boolean - New labels for pam_krb5 - Allow init and initrc domains to sys_ptrace since this is needed to look at processes not owned by uid 0 - Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Miroslav Grepl <mgreplh@xxxxxxxxxx> 3.11.1-16 - nmbd wants to create /var/nmbd - Stop transitioning out of anaconda and firstboot, just causes AVC messages - Allow clamscan to read /etc files - Allow bcfg2 to bind cyphesis port - heartbeat should be run as rgmanager_t instead of corosync_t - Add labeling for /etc/openldap/certs - Add labeling for /opt/sartest directory - Make crontab_t as userdom home reader - Allow tmpreaper to list admin_home dir - Add defition for imap_0 replay cache file - Add support for gitolite3 - Allow virsh_t to send syslog messages - allow domains that can read samba content to be able to list the directories also - Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd - Separate out sandbox from sandboxX policy so we can disable it by default - Run dmeventd as lvm_t - Mounting on any directory requires setattr and write permissions - Fix use_nfs_home_dirs() boolean - New labels for pam_krb5 - Allow init and initrc domains to sys_ptrace since this is needed to look at processes not owned by uid 0 - Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd * Fri Aug 31 2012 Dan Walsh <dwalsh@xxxxxxxxxx> 3.11.1-15 - Separate sandbox policy into sandbox and sandboxX, and disable sandbox by default on fresh installs - Allow domains that can read etc_t to read etc_runtime_t - Allow all domains to use inherited tmpfiles * Wed Aug 29 2012 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.11.1-14 - Allow realmd to read resolv.conf - Add pegasus_cache_t type - Label /usr/sbin/fence_virtd as virsh_exec_t - Add policy for pkcsslotd - Add support for cpglockd - Allow polkit-agent-helper to read system-auth-ac - telepathy-idle wants to read gschemas.compiled - Allow plymouthd to getattr on fs_t - Add slpd policy - Allow ksysguardproces to read/write config_usr_t * Sat Aug 25 2012 Dan Walsh <dwalsh@xxxxxxxxxx> 3.11.1-13 - Fix labeling substitution so rpm will label /lib/systemd content correctly * Fri Aug 24 2012 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.11.1-12 - Add file name transitions for ttyACM0 - spice-vdagent(d)'s are going to log over to syslog - Add sensord policy - Add more fixes for passenger policy related to puppet - Allow wdmd to create wdmd_tmpfs_t - Fix labeling for /var/run/cachefilesd\.pid - Add thumb_tmpfs_t files type * Mon Aug 20 2012 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.11.1-11 - Allow svirt domains to manage the network since this is containerized - Allow svirt_lxc_net_t to send audit messages * Mon Aug 20 2012 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.11.1-10 - Make "snmpwalk -mREDHAT-CLUSTER-MIB ...." working - Allow dlm_controld to execute dlm_stonith labeled as bin_t - Allow GFS2 working on F17 - Abrt needs to execute dmesg - Allow jockey to list the contents of modeprobe.d - Add policy for lightsquid as squid_cron_t - Mailscanner is creating files and directories in /tmp - dmesg is now reading /dev/kmsg - Allow xserver to communicate with secure_firmware - Allow fsadm tools (fsck) to read /run/mount contnet - Allow sysadm types to read /dev/kmsg - * Thu Aug 16 2012 Dan Walsh <dwalsh@xxxxxxxxxx> 3.11.1-9 - Allow postfix, sssd, rpcd to block_suspend - udev seems to need secure_firmware capability - Allow virtd to send dbus messages to firewalld so it can configure the firewall * Thu Aug 16 2012 Dan Walsh <dwalsh@xxxxxxxxxx> 3.11.1-8 - Fix labeling of content in /run created by virsh_t - Allow condor domains to read kernel sysctls - Allow condor_master to connect to amqp - Allow thumb drives to create shared memory and semaphores - Allow abrt to read mozilla_plugin config files - Add labels for lightsquid - Default files in /opt and /usr that end in .cgi as httpd_sys_script_t, allow - dovecot_auth_t uses ldap for user auth - Allow domains that can read dhcp_etc_t to read lnk_files - Add more then one watchdog device - Allow useradd_t to manage etc_t files so it can rename it and edit them - Fix invalid class dir should be fifo_file - Move /run/blkid to fsadm and make sure labeling is correct -------------------------------------------------------------------------------- References: [ 1 ] Bug #853671 - SELinux is preventing /usr/lib64/realmd/realmd from 'read' accesses on the directory samba. https://bugzilla.redhat.com/show_bug.cgi?id=853671 [ 2 ] Bug #853732 - AVC messages from hplip after turning on my hp psc-1350 printer https://bugzilla.redhat.com/show_bug.cgi?id=853732 [ 3 ] Bug #853733 - AVC messages from vbetool https://bugzilla.redhat.com/show_bug.cgi?id=853733 [ 4 ] Bug #853736 - AVC messages when mounting lvm lv on /home/hans/Music https://bugzilla.redhat.com/show_bug.cgi?id=853736 [ 5 ] Bug #854366 - will need to label /lib/security/pam_krb5/pam_krb5_cchelper as bin_t https://bugzilla.redhat.com/show_bug.cgi?id=854366 [ 6 ] Bug #854507 - SELinux is preventing pwconv from read, write access on the file /tmp/ffihk0dG8 (deleted). https://bugzilla.redhat.com/show_bug.cgi?id=854507 -------------------------------------------------------------------------------- ================================================================================ smokeping-2.6.8-1.fc18 (FEDORA-2012-13560) Latency Logging and Graphing System -------------------------------------------------------------------------------- Update Information: Update to 2.6.8 and fix various bugs. Introduce presets support for smokeping. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Terje Rosten <terje.rosten@xxxxxxx> - 2.6.8-1 - 2.6.8 - Fix fping issue (bz #854572) - Explicit dep on httpd (not just webserver) (bz #854804) * Tue Aug 28 2012 Terje Rosten <terje.rosten@xxxxxxx> - 2.6.7-4 - Convert to new set of macros for scripts -------------------------------------------------------------------------------- References: [ 1 ] Bug #850317 - Introduce new systemd-rpm macros in smokeping spec file https://bugzilla.redhat.com/show_bug.cgi?id=850317 [ 2 ] Bug #854572 - fping-3.3-2.fc16.x86_64 breaks smokeping https://bugzilla.redhat.com/show_bug.cgi?id=854572 [ 3 ] Bug #854804 - incorrect permissions on /var/lib/smokeping/images if smokeping installed before httpd https://bugzilla.redhat.com/show_bug.cgi?id=854804 -------------------------------------------------------------------------------- ================================================================================ spice-0.11.3-1.fc18 (FEDORA-2012-13513) Implements the SPICE protocol -------------------------------------------------------------------------------- Update Information: A new version of spice with various improvements: - Seamless migration - Render -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Soren Sandmann <ssp@xxxxxxxxxx> - 0.11.3-1 - BuildRequire pyparsing * Thu Sep 6 2012 Soren Sandmann <ssp@xxxxxxxxxx> - 0.11.3-1 - Add capability patches - Add capability patches to the included copy of spice-protocol Please see the comment above Patch6 and Patch7 regarding this situation. * Thu Sep 6 2012 Soren Sandmann <ssp@xxxxxxxxxx> - 0.11.3-1 - Update to 0.11.3 and drop upstreamed patches - BuildRequire spice-protocol 0.12.1 -------------------------------------------------------------------------------- ================================================================================ spice-protocol-0.12.1-1.fc18 (FEDORA-2012-13507) Spice protocol header files -------------------------------------------------------------------------------- Update Information: Update to new version of spice protocol -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Soren Sandmann <ssp@xxxxxxxxxx> - 0.12.1-1 - Add patch1 and patch2 to support capability bits * Thu Sep 6 2012 Soren Sandmann <ssp@xxxxxxxxxx> - 0.12.1-1 - Update to 0.12.1 -------------------------------------------------------------------------------- ================================================================================ sssd-1.9.0-21.fc18.beta7 (FEDORA-2012-12551) System Security Services Daemon -------------------------------------------------------------------------------- Update Information: Rebuild against samba4 beta6 Also updating default credential cache location as per https://fedoraproject.org/wiki/Features/KRB5DirCache and https://fedoraproject.org/wiki/Features/KRB5CacheMove -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Jakub Hrozek <jhrozek@xxxxxxxxxx> - 1.9.0-21.beta7 - New upstream release 1.9.0 beta7 - obsoletes patches #1-#3 * Mon Sep 3 2012 Jakub Hrozek <jhrozek@xxxxxxxxxx> - 1.9.0-20.beta6 - Rebuild against libldb 1.12 * Tue Aug 28 2012 Jakub Hrozek <jhrozek@xxxxxxxxxx> - 1.9.0-19.beta6 - Rebuild against libldb 1.11 * Fri Aug 24 2012 Jakub Hrozek <jhrozek@xxxxxxxxxx> - 1.9.0-18.beta6 - Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304 * Mon Aug 20 2012 Jakub Hrozek <jhrozek@xxxxxxxxxx> - 1.9.0-17.beta6 - Rebuild against libldb 1.10 * Fri Aug 17 2012 Jakub Hrozek <jhrozek@xxxxxxxxxx> - 1.9.0-16.beta6 - Only create the SELinux login file if there are SELinux mappings on the IPA server -------------------------------------------------------------------------------- References: [ 1 ] Bug #851304 - SSSD's default ccache location needs to be updated (again), and the man pages should reflect it https://bugzilla.redhat.com/show_bug.cgi?id=851304 -------------------------------------------------------------------------------- ================================================================================ sudo-1.8.6-1.fc18 (FEDORA-2012-13576) Allows restricted root access for specified users -------------------------------------------------------------------------------- Update Information: - Update to 1.8.6 -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Daniel Kopecek <dkopecek@xxxxxxxxxx> - 1.8.6-1 - update to 1.8.6 -------------------------------------------------------------------------------- ================================================================================ system-config-printer-1.3.11-3.fc18 (FEDORA-2012-13540) A printer administration tool -------------------------------------------------------------------------------- Update Information: This update adds support for FirewallD. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Jiri Popelka <jpopelka@xxxxxxxxxx> 1.3.11-3 - FirewallD support * Wed Aug 22 2012 Jiri Popelka <jpopelka@xxxxxxxxxx> 1.3.11-2 - use new systemd-rpm macros (#850334) -------------------------------------------------------------------------------- ================================================================================ telepathy-mission-control-5.13.1-1.fc18 (FEDORA-2012-13537) Central control for Telepathy connection manager -------------------------------------------------------------------------------- Update Information: Latest release. Changes include: * On Unix platforms, umask() is now required. * If a connection manager announces two or more channels in the same NewChannels signal, behave as if it had announced each channel separately. Simplify things that previously had to cope with multiple channels at a time. (fd.o #52305) * Improve mc-tool: display Account.Storage settings, add Supersedes, add "dump" subcommand (fd.o #53202) * More internal reorganisation (fd.o #54151) * Passwords are now deleted from gnome-keyring correctly (fd.o #42088) * When migrating Butterfly accounts to Haze, do the migration even if Butterfly isn't installed, and copy the password as well as the username (Debian #686835) * If compiled with UPower support, do not attempt to connect while going to sleep * Set up the altered-one signal for account storage backends correctly (fd.o #52231) * If service-activated under both names o.fd.Telepathy.MissionControl5 and o.fd.Telepathy.AccountManager simultaneously, avoid one or both failing to activate due to a race condition (fd.o #53220) -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Brian Pepple <bpepple@xxxxxxxxxxxxxxxxx> - 1:5.13.1-1 - Update to 5.13.1. -------------------------------------------------------------------------------- ================================================================================ tigervnc-1.2.80-0.1.20120905svn4996.fc18 (FEDORA-2012-13512) A TigerVNC remote display system -------------------------------------------------------------------------------- Update Information: Update to the latest pre-release. The biggest change is rewritten vncviewer which should be more user-friendly. -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 17 2012 Adam Tkac <atkac redhat com> 1.2.80-0.1.20120905svn4996 - update to 1.2.80 - remove deprecated patches - tigervnc-102434.patch - tigervnc-viewer-reparent.patch - tigervnc11-java7.patch - patches merged - tigervnc11-xorg111.patch - tigervnc11-xorg112.patch * Fri Aug 10 2012 Dave Airlie <airlied@xxxxxxxxxx> 1.1.0-10 - fix build against newer X server -------------------------------------------------------------------------------- ================================================================================ time-1.7-42.fc18 (FEDORA-2012-13506) A GNU utility for monitoring a program's use of system resources -------------------------------------------------------------------------------- Update Information: Package AUTHORS and ChangeLog as documentation. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Petr Pisar <ppisar@xxxxxxxxxx> - 1.7-42 - Package AUTHORS and ChangeLog -------------------------------------------------------------------------------- ================================================================================ tortoisehg-2.5-1.fc18 (FEDORA-2012-13508) Mercurial GUI command line tool thg -------------------------------------------------------------------------------- Update Information: Update for Mercurial 2.3. See https://bitbucket.org/tortoisehg/thg/wiki/ReleaseNotes#!tortoisehg-25 -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Mads Kiilerich <mads@xxxxxxxxxxxxx> - 2.5-1 - tortoisehg-2.5 * Tue Aug 21 2012 Mads Kiilerich <mads@xxxxxxxxxxxxx> - 2.4.3-1 - tortoisehg-2.4.3 * Sun Aug 19 2012 Mads Kiilerich <mads@xxxxxxxxxxxxx> - 2.4.2-3 - update nautilus-python extension directory - make the package noarch - accept mercurial 2.3 while waiting for a new thg release -------------------------------------------------------------------------------- References: [ 1 ] Bug #855090 - tortoisehg-2.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=855090 -------------------------------------------------------------------------------- ================================================================================ uget-1.10-1.respin2.fc18 (FEDORA-2012-13570) Download manager using GTK+ and libcurl -------------------------------------------------------------------------------- Update Information: New version 1.10 is released. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.10-1.respin2 - Update to 1.10-2 -------------------------------------------------------------------------------- ================================================================================ util-linux-2.22-1.fc18 (FEDORA-2012-13515) A collection of basic system utilities -------------------------------------------------------------------------------- Update Information: - minor bugfixes - upgrade to stable upstream - retire eject package -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Karel Zak <kzak@xxxxxxxxxx> 2.22-1 - upgrade to the release 2.22 - enable eject(1) from util-linux, obsolete original eject package - fix #853164 - setuid program should have full RELRO - fix #851230 - probe_ntfs: /usr/sbin/blkid was killed by SIGSEGV * Thu Aug 16 2012 Karel Zak <kzak@xxxxxxxxxx> 2.22-0.1 - upgrade to the release 2.22-rc2 ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.22/v2.22-ReleaseNotes - add sulogin, utmpdump, lslocks, wdctl -------------------------------------------------------------------------------- References: [ 1 ] Bug #853164 - setuid program should have full RELRO https://bugzilla.redhat.com/show_bug.cgi?id=853164 [ 2 ] Bug #851230 - [abrt] util-linux-2.21.2-2.fc17: probe_ntfs: Process /usr/sbin/blkid was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=851230 [ 3 ] Bug #850965 - /usr/sbin/fsck triggers automounts, which easily cause deadlocks https://bugzilla.redhat.com/show_bug.cgi?id=850965 -------------------------------------------------------------------------------- ================================================================================ vlgothic-fonts-20120905-1.fc18 (FEDORA-2012-13548) Japanese TrueType font -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Akira TAGOH <tagoh@xxxxxxxxxx> - 20120905-1 - New upstream release. (#854525) * Wed Aug 29 2012 Akira TAGOH <tagoh@xxxxxxxxxx> - 20120829-1 - New upstream release. (#852673) * Mon Aug 27 2012 Akira TAGOH <tagoh@xxxxxxxxxx> - 20120827-1 - New upstream release. (#851879) -------------------------------------------------------------------------------- References: [ 1 ] Bug #854525 - vlgothic-fonts-20120905 is available https://bugzilla.redhat.com/show_bug.cgi?id=854525 -------------------------------------------------------------------------------- ================================================================================ wordpress-3.4.2-2.fc18 (FEDORA-2012-13575) Blog tool and publishing platform -------------------------------------------------------------------------------- Update Information: Upstream security update -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Matej Cepl <mcepl@xxxxxxxxxx> - 3.4.2-2 - Upstream security update. -------------------------------------------------------------------------------- ================================================================================ wso2-wsf-cpp-2.1.0-14.fc18 (FEDORA-2012-13511) WSO2 Web Services Framework for C++ -------------------------------------------------------------------------------- Update Information: Patches added to support Eucalyptus project. -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 24 2012 Peter MacKinnon <pmackinn@xxxxxxxxxx> - 2.1.0-14 - Added rampartc-timestamp.patch - Added rampartc-c14n-new.patch * Fri Aug 24 2012 Peter MacKinnon <pmackinn@xxxxxxxxxx> - 2.1.0-13 - Assigned modules dir to package - Added RPM_OPT_FLAGS - Added axis2c_initBuffer_curl.patch - Added axis2c_useENV_as_repopath.patch - Added axis2c_respectConst_sslCTX.patch -------------------------------------------------------------------------------- ================================================================================ xen-4.1.3-3.fc18 (FEDORA-2012-13510) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information: a malicious 64-bit PV guest can crash the dom0 [XSA-12, CVE-2012-3494] (#854585) a malicious crash might be able to crash the dom0 or escalate privileges [XSA-13, CVE-2012-3495] (#854589) a malicious PV guest can crash the dom0 [XSA-14, CVE-2012-3496] (#854590) a malicious HVM guest can crash the dom0 and might be able to read hypervisor or guest memory [XSA-16, CVE-2012-3498] (#854593) an HVM guest could use VT100 escape sequences to escalate privileges to that of the qemu process [XSA-17, CVE-2012-3515] (#854599) -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 5 2012 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.1.3-3 - 5 security fixes a malicious 64-bit PV guest can crash the dom0 [XSA-12, CVE-2012-3494] (#854585) a malicious crash might be able to crash the dom0 or escalate privileges [XSA-13, CVE-2012-3495] (#854589) a malicious PV guest can crash the dom0 [XSA-14, CVE-2012-3496] (#854590) a malicious HVM guest can crash the dom0 and might be able to read hypervisor or guest memory [XSA-16, CVE-2012-3498] (#854593) an HVM guest could use VT100 escape sequences to escalate privileges to that of the qemu process [XSA-17, CVE-2012-3515] (#854599) -------------------------------------------------------------------------------- References: [ 1 ] Bug #851139 - CVE-2012-3494 kernel: xen: hypercall set_debugreg vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=851139 [ 2 ] Bug #851165 - CVE-2012-3495 kernel: xen: hypercall physdev_get_free_pirq vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=851165 [ 3 ] Bug #851172 - CVE-2012-3496 kernel: xen: XENMEM_populate_physmap DoS vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=851172 [ 4 ] Bug #851193 - CVE-2012-3498 kernel: xen: PHYSDEVOP_map_pirq index vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=851193 [ 5 ] Bug #851252 - CVE-2012-3515 qemu: VT100 emulation vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=851252 -------------------------------------------------------------------------------- ================================================================================ xen-4.1.3-4.fc18 (FEDORA-2012-13536) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information: disable qemu monitor by default [XSA-19, CVE-2012-4411] (#855141) -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 6 2012 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.1.3-4 - disable qemu monitor by default [XSA-19, CVE-2012-4411] (#855141) * Wed Sep 5 2012 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.1.3-3 - 5 security fixes a malicious 64-bit PV guest can crash the dom0 [XSA-12, CVE-2012-3494] (#854585) a malicious crash might be able to crash the dom0 or escalate privileges [XSA-13, CVE-2012-3495] (#854589) a malicious PV guest can crash the dom0 [XSA-14, CVE-2012-3496] (#854590) a malicious HVM guest can crash the dom0 and might be able to read hypervisor or guest memory [XSA-16, CVE-2012-3498] (#854593) an HVM guest could use VT100 escape sequences to escalate privileges to that of the qemu process [XSA-17, CVE-2012-3515] (#854599) -------------------------------------------------------------------------------- References: [ 1 ] Bug #855140 - CVE-2012-4411 xen: qemu: guest administrator can access qemu monitor console https://bugzilla.redhat.com/show_bug.cgi?id=855140 -------------------------------------------------------------------------------- ================================================================================ xnoise-0.2.9-1.fc18 (FEDORA-2012-13518) Tracklist-centric Media Player -------------------------------------------------------------------------------- Update Information: Many new features; see NEWS file -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 3 2012 Michel Salim <salimma@xxxxxxxxxxxxxxxxx> - 0.2.8-1 - Update to 0.2.9 -------------------------------------------------------------------------------- References: [ 1 ] Bug #844061 - xnoise-0.2.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=844061 -------------------------------------------------------------------------------- ================================================================================ xorg-x11-server-1.13.0-1.fc18 (FEDORA-2012-13574) X.Org X11 X server -------------------------------------------------------------------------------- Update Information: Upstream 1.13.0 release Latest snapshot for what will be the 1.13 X server -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 7 2012 Dave Airlie <airlied@xxxxxxxxxx> 1.13.0-1 - rebase to upstream 1.13.0 release tarball * Fri Sep 7 2012 Dave Airlie <airlied@xxxxxxxxxx> 1.12.99.905-5 - fix prime offload with DRI2 compositors * Mon Sep 3 2012 Dave Airlie <airlied@xxxxxxxxxx> 1.12.99.905-4 - fix multi-gpu after VT switch * Mon Aug 27 2012 Dave Airlie <airlied@xxxxxxxxxx> 1.12.99.905-3 - port multi-seat video fixes from upstream * Fri Aug 24 2012 Dave Airlie <airlied@xxxxxxxxxx> 1.12.99.905-2 - reintroduce auto config but working this time - fix two recycle/exit crashes * Wed Aug 22 2012 Dave Airlie <airlied@xxxxxxxxxx> 1.12.99.905-1 - rebase to 1.12.99.905 snapshot * Fri Aug 17 2012 Dave Airlie <airlied@xxxxxxxxxx> 1.12.99.904-4 - autobind was horribly broken on unplug - drop it like its hotplug. * Fri Aug 17 2012 Dave Airlie <airlied@xxxxxxxxxx> 1.12.99.904-3 - add git fixes + autobind to gpu devices. * Wed Aug 15 2012 Adam Jackson <ajax@xxxxxxxxxx> 1.12.99.904-2 - Always install int10 and vbe sdk headers -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
