The following Fedora 18 Security updates need testing: Age URL 6 https://admin.fedoraproject.org/updates/FEDORA-2012-14279/phpldapadmin-1.2.2-3.gitbbedf1.fc18 13 https://admin.fedoraproject.org/updates/FEDORA-2012-13785/mediawiki119-1.19.2-1.fc18 12 https://admin.fedoraproject.org/updates/FEDORA-2012-13871/libxslt-1.1.27-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-14664/openjpeg-1.5.0-5.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-14762/automake17-1.7.9-17.fc18 The following builds have been pushed to Fedora 18 updates-testing automake17-1.7.9-17.fc18 bdii-5.2.13-1.fc18 ceelog-0.1-1.fc18 ftp-0.17-60.fc18 libmatecomponentui-1.4.0-2.fc18 libsrtp-1.4.4-6.20101004cvs.fc18 libvirt-0.10.2-3.fc18 linux-firmware-20120925-0.1.git236367d.fc18 man-pages-ja-20120915-1.fc18 mate-window-manager-1.4.1-8.fc18 mcollective-2.2.0-1.fc18 mrpt-0.9.6-1.fc18 paps-0.6.8-22.fc18 pcl-1.6.0-2.fc18 php-pecl-memcache-3.0.7-3.fc18 python-django-horizon-2012.2-0.9.rc2.fc18 pytrainer-1.9.1-3.fc18 rng-tools-4-2.fc18 rusers-0.17-70.fc18 sssd-1.9.0-24.fc18 sudo-1.8.6p3-1.fc18 ypbind-1.36-6.fc18 ypserv-2.29-2.fc18 yum-langpacks-0.3.0-3.fc18 Details about builds: ================================================================================ automake17-1.7.9-17.fc18 (FEDORA-2012-14762) A GNU tool for automatically creating Makefiles -------------------------------------------------------------------------------- Update Information: CVE-2012-3386 fix -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Pavel Raiskup <praiskup@xxxxxxxxxx> - 1.7.9-17 - fix for CVE-2012-3386 (#838661) -------------------------------------------------------------------------------- References: [ 1 ] Bug #838661 - CVE-2012-3386 automake: locally exploitable "make distcheck" bug [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=838661 -------------------------------------------------------------------------------- ================================================================================ bdii-5.2.13-1.fc18 (FEDORA-2012-14764) The Berkeley Database Information Index (BDII) -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 15 2012 Laurence Field <Laurence.Field@xxxxxxx> - 5.2.13-1 - Included Fedora patches upstream. -------------------------------------------------------------------------------- ================================================================================ ceelog-0.1-1.fc18 (FEDORA-2012-14761) Tool for receiving, filtering and searching CEE/Lumberjack logs -------------------------------------------------------------------------------- Update Information: Initial build/import of package for f18 -------------------------------------------------------------------------------- References: [ 1 ] Bug #858613 - Review Request: ceelog - Tool for receiving, filtering and searching CEE/Lumberjack logs https://bugzilla.redhat.com/show_bug.cgi?id=858613 -------------------------------------------------------------------------------- ================================================================================ ftp-0.17-60.fc18 (FEDORA-2012-14752) The standard UNIX FTP (File Transfer Protocol) client -------------------------------------------------------------------------------- Update Information: Plug some leaks; add listening timeout -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Jan Synáček <jsynacek@xxxxxxxxxx> - 0.17-60 - Plug leaks in "put", "send", "append" - Add listening timeout -------------------------------------------------------------------------------- ================================================================================ libmatecomponentui-1.4.0-2.fc18 (FEDORA-2012-14753) Libraries for MATE Desktop ui -------------------------------------------------------------------------------- Update Information: clean up spec file libmatecomponentui for MATE Desktop -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #851975 - Review Request: libmatecomponentui - Libraries for MATE Desktop ui components https://bugzilla.redhat.com/show_bug.cgi?id=851975 -------------------------------------------------------------------------------- ================================================================================ libsrtp-1.4.4-6.20101004cvs.fc18 (FEDORA-2012-14765) An implementation of the Secure Real-time Transport Protocol (SRTP) -------------------------------------------------------------------------------- Update Information: An incorrect macro prevented building of dependent packages on 64 bit PPC machines. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Karsten Hopp <karsten@xxxxxxxxxx> 1.4.4-6.20101004cvs - use __PPC64__, not __ppc64__ which is undefined on PPC64 arch -------------------------------------------------------------------------------- ================================================================================ libvirt-0.10.2-3.fc18 (FEDORA-2012-14766) Library providing a simple virtualization API -------------------------------------------------------------------------------- Update Information: Uptream release of 0.10.2 * Allow environment variables set through <qemu:env> to properly override ones inherited by libvirtd when it starts. * Allow libvirt to set SELinux labels on character devices. * Re-add 0001-Use-qemu-system-i386-as-binary-instead-of-qemu.patch. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 24 2012 Richard W.M. Jones <rjones@xxxxxxxxxx> - 0.10.2-3 - Re-add 0001-Use-qemu-system-i386-as-binary-instead-of-qemu.patch NB: This patch is Fedora-specific and not upstream. - Add upstream patches: don't duplicate environment variables (RHBZ#859596). * Mon Sep 24 2012 Daniel Veillard <veillard@xxxxxxxxxx> - 0.10.2-1 - Upstream release 0.10.2 - network: define new API virNetworkUpdate - add support for QEmu sandbox support - blockjob: add virDomainBlockCommit - New APIs to get/set Node memory parameters - new API virConnectListAllSecrets - new API virConnectListAllNWFilters - new API virConnectListAllNodeDevices - parallels: add support of containers to the driver - new API virConnectListAllInterfaces - new API virConnectListAllNetworks - new API virStoragePoolListAllVolumes - Add PMSUSPENDED life cycle event - new API virStorageListAllStoragePools - Add per-guest S3/S4 state configuration - qemu: Support for Block Device IO Limits - a lot of bug fixes, improvements and portability work * Fri Sep 21 2012 Richard W.M. Jones <rjones@xxxxxxxxxx> - 0.10.1-5 - Add (upstream) patches to label sockets for SELinux (RHBZ#853393). -------------------------------------------------------------------------------- References: [ 1 ] Bug #859596 - test-launch-race.pl sometimes fails when using the libvirt backend: .../console.sock': No such file or directory https://bugzilla.redhat.com/show_bug.cgi?id=859596 [ 2 ] Bug #853393 - libvirt doesn't label console, serial sockets https://bugzilla.redhat.com/show_bug.cgi?id=853393 -------------------------------------------------------------------------------- ================================================================================ linux-firmware-20120925-0.1.git236367d.fc18 (FEDORA-2012-14754) Firmware files used by the Linux kernel -------------------------------------------------------------------------------- Update Information: Update to latest upstream firmware. Fixes some issues with rtlwifi firmware and adds new marvell and bnx2 firmware. Split libertas firmware into sub-packages for OLPC. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Josh Boyer <jwboyer@xxxxxxxxxx> - Update to latest upstream. Adds marvell wifi updates (rhbz 858388) * Tue Sep 18 2012 Josh Boyer <jwboyer@xxxxxxxxxx> - Add patch to create libertas subpackages from Daniel Drake (rhbz 853198) -------------------------------------------------------------------------------- References: [ 1 ] Bug #858388 - Update to latest upstream for marvell wifi updates https://bugzilla.redhat.com/show_bug.cgi?id=858388 [ 2 ] Bug #853198 - Split marvell firmware into subpackages for OLPC https://bugzilla.redhat.com/show_bug.cgi?id=853198 -------------------------------------------------------------------------------- ================================================================================ man-pages-ja-20120915-1.fc18 (FEDORA-2012-14767) Japanese man (manual) pages from the Japanese Manual Project -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Akira TAGOH <tagoh@xxxxxxxxxx> - 20120915-1 - Updates to 20120915. * Wed Aug 15 2012 Akira TAGOH <tagoh@xxxxxxxxxx> - 20120815-1 - Updates to 20120815. -------------------------------------------------------------------------------- ================================================================================ mate-window-manager-1.4.1-8.fc18 (FEDORA-2012-14760) MATE Desktop window manager -------------------------------------------------------------------------------- Update Information: bugfix release update to latest git source of 1.4.1 update to latest git source of 1.4.1 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 24 2012 Dan Mashal <dan.mashal@xxxxxxxxxxxxxxxxx> 1.4.1-8 - rerefix mate-conf scriptlets. Add export line to REALLY not install schemas with make install. - comment out desktop-file-validate. * Mon Sep 17 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.4.1-7 - fix/simplify dir ownership - omit not-needed/broken Obsoletes - (re)fix scriptlets :) * Sat Sep 15 2012 Dan Mashal <dan.mashal@xxxxxxxxxxxxxxxxx> 1.4.1-6 - Move post and postun scriptlets to proper location * Sat Sep 15 2012 Dan Mashal <dan.mashal@xxxxxxxxxxxxxxxxx> 1.4.1-5 - Remove onlyshowin since it is not needed any more with updated desktop-file-utils * Sat Sep 15 2012 Dan Mashal <dan.mashal@xxxxxxxxxxxxxxxxx> 1.4.1-4 Update source to note git version. * Sun Sep 9 2012 Dan Mashal <dan.mashal@xxxxxxxxxxxxxxxxx> 1.4.1-3 - Fix broken dependencies, update to latest github version which contains fixes for desktop-file-utils * Mon Sep 3 2012 Dan Mashal <dan.mashal@xxxxxxxxxxxxxxxxx> 1.4.1-2 - Add environment variable to install section and further obsoletes to prevent dependency breakage * Sun Sep 2 2012 Dan Mashal <dan.mashal@xxxxxxxxxxxxxxxxx> 1.4.1-1 - Upgrade to new upstream version. * Mon Aug 27 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.4.0-5 - drop unneeded python-related build deps - %configure --disable-schemas-install - fix/simplify some parent-dir ownership * Mon Aug 27 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.4.0-4 - main pkg Requires: %name-libs - drop needless icon scriptlets - s|MATE|X-MATE| .desktop Categories on < f18 only - License: GPLv2+ -------------------------------------------------------------------------------- References: [ 1 ] Bug #859697 - [abrt] mate-window-manager-1.4.1-6.fc18: meta_prefs_get_workspace_name: Process /usr/bin/marco was killed by signal 6 (SIGABRT) https://bugzilla.redhat.com/show_bug.cgi?id=859697 -------------------------------------------------------------------------------- ================================================================================ mcollective-2.2.0-1.fc18 (FEDORA-2012-14751) A framework to build server orchestration or parallel job execution systems -------------------------------------------------------------------------------- Update Information: Updated version. -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 22 2012 Steve Traylen <steve.traylen@xxxxxxx> - 2.2.0-1 - Update to 2.2.0, add plugin.d directory to package, add missing .erb help files. -------------------------------------------------------------------------------- ================================================================================ mrpt-0.9.6-1.fc18 (FEDORA-2012-14749) Libraries and programs for mobile robot SLAM and navigation -------------------------------------------------------------------------------- Update Information: Updated MRPT to upstream release 0.9.6. Removed dependencies on bundled libraries where possible. PCL has been updated to not define the -march=native flag for projects using PCLConfig.cmake -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 26 2012 Rich Mattes <richmattes@xxxxxxxxx> - 0.9.6-1 - Added dependency on suitesparse - Fixed resolution of libphidget and tbb * Sat Aug 25 2012 Rich Mattes <richmattes@xxxxxxxxx> - 0.9.6-1 - Updated to 0.9.6 * Fri Jul 20 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.9.5-0.6.20110917svn2662 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sat Jul 14 2012 Rich Mattes <richmattes@xxxxxxxxx> - 0.9.5-0.5.20110917svn2662 - Rebuild for new OpenCV - Fix for zlib 1.2.7 - Fix for gcc 4.7 * Tue Feb 28 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.9.5-0.4.20110917svn2662 - Rebuilt for c++ ABI breakage * Fri Jan 13 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.9.5-0.3.20110917svn2662 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ paps-0.6.8-22.fc18 (FEDORA-2012-14538) Plain Text to PostScript converter -------------------------------------------------------------------------------- Update Information: Fix wrong tab width when enabling CPI (or being used as CUPS filter mode) -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 24 2012 Akira TAGOH <tagoh@xxxxxxxxxx> - 0.6.8-22 - Ensure the latest version of paps-libs are installed. * Fri Sep 21 2012 Akira TAGOH <tagoh@xxxxxxxxxx> - 0.6.8-21 - Fix wrong width for whitespaces when enabling CPI feature. (#857592) -------------------------------------------------------------------------------- References: [ 1 ] Bug #857592 - ASCII text files are not printed the same as ASCII C++ text files: tab characters and white space are not preserved. https://bugzilla.redhat.com/show_bug.cgi?id=857592 -------------------------------------------------------------------------------- ================================================================================ pcl-1.6.0-2.fc18 (FEDORA-2012-14749) Library for point cloud processing -------------------------------------------------------------------------------- Update Information: Updated MRPT to upstream release 0.9.6. Removed dependencies on bundled libraries where possible. PCL has been updated to not define the -march=native flag for projects using PCLConfig.cmake -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Rich Mattes <richmattes@xxxxxxxxx> - 1.6.0-2 - Disabled march=native flag in PCLConfig.cmake -------------------------------------------------------------------------------- ================================================================================ php-pecl-memcache-3.0.7-3.fc18 (FEDORA-2012-14632) Extension to work with the Memcached caching daemon -------------------------------------------------------------------------------- Update Information: Upstream changelog: - Fixed bug #62589 - missing "$" in memcache.php - Fix php_stream_cast() usage. - fixes for windows build and php 5.4 compat -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 3.0.7-3 - switch back to previous patch as possible memleak more acceptable than certain segfault * Sun Sep 23 2012 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 3.0.7-2 - use upstream patch instead of our (memleak) * Sun Sep 23 2012 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 3.0.7-1 - update to 3.0.7 - drop patches merged upstream - cleanup spec -------------------------------------------------------------------------------- ================================================================================ python-django-horizon-2012.2-0.9.rc2.fc18 (FEDORA-2012-14692) Django application for talking to Openstack -------------------------------------------------------------------------------- Update Information: update to folsom-rc2 This is an update to Folsom-rc1 - also fixes bug 860120 (yum hangs on futex when installing the package after openstack-dashboard) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Matthias Runge <mrunge@xxxxxxxxxx> - 2012-2-0.9.rc2 - remove %post section * Mon Sep 24 2012 Matthias Runge <mrunge@xxxxxxxxxx> - 2012-2-0.8.rc2 - also require pytz * Fri Sep 21 2012 Matthias Runge <mrunge@xxxxxxxxxx> - 2012.2-0.7.rc2 - update to release folsom rc2 * Fri Sep 21 2012 Matthias Runge <mrunge@xxxxxxxxxx> - 2012.2-0.6.rc1 - fix compressing issue * Mon Sep 17 2012 Matthias Runge <mrunge@xxxxxxxxxx> - 2012.2-0.5.rc1 - update to folsom rc1 - require python-django instead of Django - add requirements to python-django-compressor, python-django-openstack-auth - add requirements to python-swiftclient - use compressed js, css files -------------------------------------------------------------------------------- References: [ 1 ] Bug #860120 - yum hangs on futex when installing the package after openstack-dashboard https://bugzilla.redhat.com/show_bug.cgi?id=860120 -------------------------------------------------------------------------------- ================================================================================ pytrainer-1.9.1-3.fc18 (FEDORA-2012-14768) A tool to log all your sport excursions -------------------------------------------------------------------------------- Update Information: Update to 1.9.1. Uses pywebkitgtk rather than gnome-python2=gtkmozembed Update to upstream 1.9.1 Update to upstream 1.9.1 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Brendan Jones <brendan.jones.it@xxxxxxxxx> 1.9.1-3 - Ad pywebkit-gtk requires * Tue Sep 25 2012 Brendan Jones <brendan.jones.it@xxxxxxxxx> 1.9.1-2 - Removed requires gnome-python2-gtkmozembed * Wed Sep 19 2012 Brendan Jones <brendan.jones.it@xxxxxxxxx> 1.9.1-1 - Update to version 1.9.1 -------------------------------------------------------------------------------- ================================================================================ rng-tools-4-2.fc18 (FEDORA-2012-14758) Random number generator related utilities -------------------------------------------------------------------------------- Update Information: Migration to new systemd macros -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Jaromir Capik <jcapik@xxxxxxxxxx> - 4-2 - Migration to new systemd macros -------------------------------------------------------------------------------- References: [ 1 ] Bug #850296 - Introduce new systemd-rpm macros in rng-tools spec file https://bugzilla.redhat.com/show_bug.cgi?id=850296 -------------------------------------------------------------------------------- ================================================================================ rusers-0.17-70.fc18 (FEDORA-2012-14763) Displays the users logged into machines on the local network -------------------------------------------------------------------------------- Update Information: This is an update that allows to use new systemd features. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 11 2012 Honza Horak <hhorak@xxxxxxxxxx> - 0.17-70 - Minor spec file changes - Use new systemd macros (Resolves: #850302) - Use systemd notify messages -------------------------------------------------------------------------------- References: [ 1 ] Bug #850302 - Introduce new systemd-rpm macros in rusers spec file https://bugzilla.redhat.com/show_bug.cgi?id=850302 -------------------------------------------------------------------------------- ================================================================================ sssd-1.9.0-24.fc18 (FEDORA-2012-14755) System Security Services Daemon -------------------------------------------------------------------------------- Update Information: New upstream release 1.9.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Jakub Hrozek <jhrozek@xxxxxxxxxx> - 1.9.0-24 - Use mcpath insted of mcachepath macro to be consistent with upsteam spec file * Tue Sep 25 2012 Jakub Hrozek <jhrozek@xxxxxxxxxx> - 1.9.0-23 - New upstream release 1.9.0 -------------------------------------------------------------------------------- ================================================================================ sudo-1.8.6p3-1.fc18 (FEDORA-2012-14759) Allows restricted root access for specified users -------------------------------------------------------------------------------- Update Information: - update to 1.8.6p3 - dropped -pipelist patch (fixed in upstream) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Daniel Kopecek <dkopecek@xxxxxxxxxx> - 1.8.6p3-1 - update to 1.8.6p3 - drop -pipelist patch (fixed in upstream) -------------------------------------------------------------------------------- ================================================================================ ypbind-1.36-6.fc18 (FEDORA-2012-14750) The NIS daemon which binds NIS clients to an NIS domain -------------------------------------------------------------------------------- Update Information: This is an update that uses solve starting issues of ypbind daemon. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 24 2012 Honza Horak <hhorak@xxxxxxxxxx> - 3:1.36-6 - Use sdnotify to inform systemd that daemon is ready - Minor spec file cleanup - Use new systemd macros Resolves: #850375 - Add After: NetworkManager-wait-online.service Related: #846767 * Thu Aug 23 2012 Honza Horak <hhorak@xxxxxxxxxx> - 3:1.36-5 - Enhance ypbind(8) with info about NISTIMEOUT - Add suggestion about extending NISTIMEOUT if ypbind timeouts * Mon Jul 23 2012 Honza Horak <hhorak@xxxxxxxxxx> - 3:1.36-4 - Add SIGPIPE to proper signal set Related: #842228 - Fixed sending TERM signal in ypbind-post-waitbind -------------------------------------------------------------------------------- References: [ 1 ] Bug #850375 - Introduce new systemd-rpm macros in ypbind spec file https://bugzilla.redhat.com/show_bug.cgi?id=850375 -------------------------------------------------------------------------------- ================================================================================ ypserv-2.29-2.fc18 (FEDORA-2012-14757) The NIS (Network Information Service) server -------------------------------------------------------------------------------- Update Information: This is an update that uses new systemd macros allowing to use systemd's Preset feature. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 24 2012 Honza Horak <hhorak@xxxxxxxxxx> - 2.29-2 - Use new systemd macros Resolves: #850376 -------------------------------------------------------------------------------- References: [ 1 ] Bug #850376 - Introduce new systemd-rpm macros in ypserv spec file https://bugzilla.redhat.com/show_bug.cgi?id=850376 -------------------------------------------------------------------------------- ================================================================================ yum-langpacks-0.3.0-3.fc18 (FEDORA-2012-14756) Langpacks plugin for yum -------------------------------------------------------------------------------- Update Information: This fixes a traceback on yum groupremove. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 25 2012 Bill Nottingham <notting@xxxxxxxxxx> - 0.3.1-3 - fix traceback on groupremove (#858175) -------------------------------------------------------------------------------- References: [ 1 ] Bug #858175 - calltrace during yum groupremove https://bugzilla.redhat.com/show_bug.cgi?id=858175 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test