The following Fedora 18 Security updates need testing: Age URL 0 https://admin.fedoraproject.org/updates/FEDORA-2012-15680/hostapd-1.0-3.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-15709/gitolite3-3.04-4.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-15716/libxslt-1.1.27-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-15691/phpMyAdmin-3.5.3-1.fc18 14 https://admin.fedoraproject.org/updates/FEDORA-2012-14664/openjpeg-1.5.0-5.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2012-15342/freeradius-2.2.0-0.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2012-15592/mingw-libpng-1.5.13-1.fc18 The following Fedora 18 Critical Path updates have yet to be approved: Age URL 0 https://admin.fedoraproject.org/updates/FEDORA-2012-15701/pulseaudio-2.1-2.fc18,webrtc-audio-processing-0.1-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-15711/gnome-settings-daemon-3.6.1-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-15716/libxslt-1.1.27-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-15684/psmisc-22.20-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-15670/gnome-settings-daemon-3.6.1-1.fc18,control-center-3.6.1-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-15682/pyxdg-0.23-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-15666/policycoreutils-2.1.13-8.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2012-15617/pyOpenSSL-0.13-3.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2012-15622/totem-3.6.0-2.fc18,gstreamer1-plugins-bad-free-1.0.1-1.fc18,gstreamer1-plugins-good-1.0.1-1.fc18,gstreamer1-plugins-base-1.0.1-1.fc18,gstreamer1-1.0.1-1.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2012-15577/xfce4-settings-4.10.0-3.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2012-15574/NetworkManager-0.9.7.0-4.git20121004.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2012-15534/webkitgtk3-1.10.0-2.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2012-15547/ibus-1.4.99.20121006-1.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2012-15543/kdelibs-4.9.2-5.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2012-15517/nss-util-3.13.6-1.fc18,nss-softokn-3.13.6-1.fc18,nss-3.13.6-1.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2012-15526/xorg-x11-drv-intel-2.20.9-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2012-15530/initscripts-9.41-2.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2012-15528/gdb-7.5.0.20120926-25.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2012-15368/cdrkit-1.1.11-14.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2012-15353/dbus-1.6.8-2.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2012-15291/libarchive-3.0.4-3.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2012-15306/device-mapper-multipath-0.4.9-32.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2012-15303/udisks2-2.0.0-1.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2012-15298/livecd-tools-18.12-1.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2012-15272/grubby-8.20-1.fc18 11 https://admin.fedoraproject.org/updates/FEDORA-2012-15008/kde-settings-4.9-11.fc18 The following builds have been pushed to Fedora 18 updates-testing Zim-0.57-1.fc18 anaconda-18.14-1.fc18 asterisk-11.0.0-0.6.rc1.fc18 bind-dyndb-ldap-2.0-0.2.20121009git6a86b1.fc18 cinnamon-1.6.1-2.fc18 eurephia-1.1.0-3.fc18 ghc-arrows-0.4.4.0-1.fc18 ghc-data-memocombinators-0.4.3-1.fc18 ghc-rpm-macros-0.95.8-1.fc18 ghostscript-9.06-3.fc18 gitolite3-3.04-4.fc18 gnome-settings-daemon-3.6.1-2.fc18 gpodder-2.20.2-1.fc18 inkscape-0.48.3.1-1.fc18 jbossws-api-1.0.0-3.fc18 jbossws-parent-1.1.0-1.fc18 jbossws-spi-2.0.3-4.fc18 libcommuni-1.2.0-1.fc18 libmongo-client-0.1.5-6.fc18 libxml2-2.9.0-1.fc18 libxslt-1.1.27-2.fc18 nemo-1.0.3-2.fc18 nemo-open-terminal-1.0.0-1.fc18 openvswitch-1.7.1-2.fc18 phpMyAdmin-3.5.3-1.fc18 pki-core-10.0.0-0.43.b1.fc18 pulseaudio-2.1-2.fc18 python-django-bootstrap-toolkit-2.5.9-1.fc18 qpdf-3.0.2-1.fc18 rubygem-simple_form-2.0.3-1.fc18 sugar-calculator-41-1.fc18 syncevolution-1.3.1-1.fc18 system-config-printer-1.3.12-1.fc18 webrtc-audio-processing-0.1-1.fc18 Details about builds: ================================================================================ Zim-0.57-1.fc18 (FEDORA-2012-15710) Desktop wiki & notekeeper -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 9 2012 Robin Lee <cheeselee@xxxxxxxxxxxxxxxxx> - 0.57-1 - Update to 0.57 (#807149, #826886) -------------------------------------------------------------------------------- ================================================================================ anaconda-18.14-1.fc18 (FEDORA-2012-15707) Graphical system installer -------------------------------------------------------------------------------- Update Information: More fixes. This update largely fixes a variety of partitioning bugs. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 8 2012 Brian C. Lane <bcl@xxxxxxxxxx> - 18.14-1 - Add UI support for encrypted automatic partitioning. (dlehman) - Add support to the custom spoke for encrypted block devices. (dlehman) - Add a page for decrypting existing LUKS devices. (dlehman) - Add a dialog for collecting a passphrase for newly encrypted devices. (dlehman) - Add a property that provides a list of all selectors in the accordion. (dlehman) - Handle luks formats during populate if they have a passphrase set. (dlehman) - Add encryption support to the device factory classes. (dlehman) - s/dev/disk in the disk shopping cart. (clumens) - Set a default payload in InstallOptions1Dialog (#863582). (clumens) - Pass disks into the SelectedDisksDialog (#863588). (clumens) * Fri Oct 5 2012 Chris Lumens <clumens@xxxxxxxxxx> - 18.13-1 - Make sure packages anaconda requires are installed. (clumens) - Add method returning current activated X layout (vpodzime) - Fix a deadlock when trying to add a keyboard layout (#862612). (clumens) - ntfsresize uses SI (MB) while the rest of us use IEC (MiB). (#862109) (dlehman) - Remove empty extended partitions after removing a logical partition. (dlehman) - Handle all logical/extended partitions in unusedDevices. (dlehman) - Update autopart/custom setting before moving to reclaim dialog. (#863225) (dlehman) - Raise an exception early in newDevice if no disks were specified. (#858139) (dlehman) - Fix a regression in BTRFSVolumeDevice.listSubVolumes. (#862742) (dlehman) - Fix behavior of resolveDevice when devspec is a device name. (dlehman) - Prevent BTRFS volumes from ever having the name None. (dlehman) - Prevent negative free value for filesystems. (#861812) (dlehman) - Don't show extended partitions that contain logical partitions. (#862971) (dlehman) - Delete ts data instead of trying to undo dep installs. (#851114) (dlehman) - Change the manglings for a couple locales (petersen). (clumens) - Hook up the "Modify Software Selection" button on install opts dialogs. (clumens) - More TODO list updates. (clumens) - Add a label to the resize dialog for how much space is required. (clumens) - Add a column to the disk shopping cart for setting the boot device (#860430). (clumens) - Rework the disk shopping cart link a little bit. (clumens) - Do not use constant value in SoftwareSpoke's completed property (vpodzime) - Pull in existing swaps and bootloader devices whenever there are mounts. (dlehman) - Revert broken logic for newly formatted devices in unusedDevices. (dlehman) - Add an apply button to the device/mountpoint configuration options. (dlehman) - Don't base StorageSpoke.ready on storage execute thread presence. (#861574) (dlehman) - Prevent systemd timeout waiting for encryption passphrase. (#861123) (dlehman) - Fix traceback when switching device type to lvm. (#860990) (dlehman) - Fix error handling in the add mountpoint dialog. (#860992) (dlehman) - Allow xfs /boot. (dlehman) - Fix makeupdates to work for glade files in subdirs of spokes/ or hubs/. (dlehman) - Fix parsing of NFS method strings (#860966) (jkeating) - Make the URL entry sensitive for NFS installs, too (#863014). (clumens) - Add in a locale mapping to avoid incorrect system settings (#858591). (clumens) -------------------------------------------------------------------------------- References: [ 1 ] Bug #863582 - KeyError: 'payload' https://bugzilla.redhat.com/show_bug.cgi?id=863582 [ 2 ] Bug #863588 - NameError: global name 'disks' is not defined https://bugzilla.redhat.com/show_bug.cgi?id=863588 [ 3 ] Bug #862612 - anaconda freezes after clicking on "+" in keyboard layout settings https://bugzilla.redhat.com/show_bug.cgi?id=862612 [ 4 ] Bug #862109 - convert ntfsresize sizes in SI to IEC for use by the installer https://bugzilla.redhat.com/show_bug.cgi?id=862109 [ 5 ] Bug #863225 - Reclaim path to resize leads to LVM autopart by default. https://bugzilla.redhat.com/show_bug.cgi?id=863225 [ 6 ] Bug #858139 - IndexError: list index out of range https://bugzilla.redhat.com/show_bug.cgi?id=858139 [ 7 ] Bug #862742 - TypeError: coercing to Unicode: need string or buffer, NoneType found https://bugzilla.redhat.com/show_bug.cgi?id=862742 [ 8 ] Bug #861812 - ValueError: ('invalid size specification', '-150.000000 mb') https://bugzilla.redhat.com/show_bug.cgi?id=861812 [ 9 ] Bug #862971 - ValueError: Cannot remove extended partition sda4. Logical partitions present. https://bugzilla.redhat.com/show_bug.cgi?id=862971 [ 10 ] Bug #851114 - RepoError: SQLite objects created in a thread can only be used in that same thread https://bugzilla.redhat.com/show_bug.cgi?id=851114 [ 11 ] Bug #860430 - RFE: dual boot support in newui https://bugzilla.redhat.com/show_bug.cgi?id=860430 [ 12 ] Bug #861574 - Cannot complete disk partitioning after returning to hub without making any customized changes https://bugzilla.redhat.com/show_bug.cgi?id=861574 [ 13 ] Bug #861123 - Please add x-systemd.device-timeout=0 to mount options for encrypted file systems that need a passphrase from the user https://bugzilla.redhat.com/show_bug.cgi?id=861123 [ 14 ] Bug #863014 - Fedora18:Alpha:Due to NFS url box is insensitive, NFS type installation is blocked https://bugzilla.redhat.com/show_bug.cgi?id=863014 [ 15 ] Bug #858591 - anaconda setting invalid system locale xx.UTF-8 not xx_YY.UTF-8 https://bugzilla.redhat.com/show_bug.cgi?id=858591 -------------------------------------------------------------------------------- ================================================================================ asterisk-11.0.0-0.6.rc1.fc18 (FEDORA-2012-15704) The Open Source PBX -------------------------------------------------------------------------------- Update Information: The Asterisk Development Team is pleased to announce the first release candidate of Asterisk 11.0.0. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/releases All interested users of Asterisk are encouraged to participate in the Asterisk 11 testing process. Please report any issues found to the issue tracker, https://issues.asterisk.org/jira. It is also very useful to see successful test reports. Please post those to the asterisk-dev mailing list. All Asterisk users are invited to participate in the #asterisk-testing channel on IRC to work together in testing the many parts of Asterisk. Asterisk 11 is the next major release series of Asterisk. It will be a Long Term Support (LTS) release, similar to Asterisk 1.8. For more information about support time lines for Asterisk releases, see the Asterisk versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions For important information regarding upgrading to Asterisk 11, please see the Asterisk wiki: https://wiki.asterisk.org/wiki/display/AST/Upgrading+to+Asterisk+11 A short list of new features includes: * A new channel driver named chan_motif has been added which provides support for Google Talk and Jingle in a single channel driver. This new channel driver includes support for both audio and video, RFC2833 DTMF, all codecs supported by Asterisk, hold, unhold, and ringing notification. It is also compliant with the current Jingle specification, current Google Jingle specification, and the original Google Talk protocol. * Support for the WebSocket transport for chan_sip. * SIP peers can now be configured to support negotiation of ICE candidates. * The app_page application now no longer depends on DAHDI or app_meetme. It has been re-architected to use app_confbridge internally. * Hangup handlers can be attached to channels using the CHANNEL() function. Hangup handlers will run when the channel is hung up similar to the h extension; however, unlike an h extension, a hangup handler is associated with the actual channel and will execute anytime that channel is hung up, regardless of where it is in the dialplan. * Added pre-dial handlers for the Dial and Follow-Me applications. Pre-dial allows you to execute a dialplan subroutine on a channel before a call is placed but after the application performing a dial action is invoked. This means that the handlers are executed after the creation of the callee channels, but before any actions have been taken to actually dial the callee channels. * Log messages can now be easily associated with a certain call by looking at a new unique identifier, "Call Id". Call ids are attached to log messages for just about any case where it can be determined that the message is related to a particular call. * Introduced Named ACLs as a new way to define Access Control Lists (ACLs) in Asterisk. Unlike traditional ACLs defined in specific module configuration files, Named ACLs can be shared across multiple modules. * The Hangup Cause family of functions and dialplan applications allow for inspection of the hangup cause codes for each channel involved in a call. This allows a dialplan writer to determine, for each channel, who hung up and for what reason(s). * Two new functions have been added: FEATURE() and FEATUREMAP(). FEATURE() lets you set some of the configuration options from the general section of features.conf on a per-channel basis. FEATUREMAP() lets you customize the key sequence used to activate built-in features, such as blindxfer, and automon. * Support for DTLS-SRTP in chan_sip. * Support for named pickupgroups/callgroups, allowing any number of pickupgroups and callgroups to be defined for several channel drivers. * IPv6 Support for AMI, AGI, ExternalIVR, and the SIP Security Event Framework. More information about the new features can be found on the Asterisk wiki: https://wiki.asterisk.org/wiki/display/AST/Asterisk+11+Documentation A full list of all new features can also be found in the CHANGES file. http://svnview.digium.com/svn/asterisk/branches/11/CHANGES For a full list of changes in the current release, please see the ChangeLog. http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.0.0-rc1 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 9 2012 Jeffrey Ollie <jeff@xxxxxxxxxx> - 11.0.0-0.6.rc1 - The Asterisk Development Team is pleased to announce the first release candidate - of Asterisk 11.0.0. This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - All interested users of Asterisk are encouraged to participate in the - Asterisk 11 testing process. Please report any issues found to the issue - tracker, https://issues.asterisk.org/jira. It is also very useful to see - successful test reports. Please post those to the asterisk-dev mailing list. - All Asterisk users are invited to participate in the #asterisk-testing channel - on IRC to work together in testing the many parts of Asterisk. - - Asterisk 11 is the next major release series of Asterisk. It will be a Long - Term Support (LTS) release, similar to Asterisk 1.8. For more information about - support time lines for Asterisk releases, see the Asterisk versions page: - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions - - For important information regarding upgrading to Asterisk 11, please see the - Asterisk wiki: - - https://wiki.asterisk.org/wiki/display/AST/Upgrading+to+Asterisk+11 - - A short list of new features includes: - - * A new channel driver named chan_motif has been added which provides support - for Google Talk and Jingle in a single channel driver. This new channel - driver includes support for both audio and video, RFC2833 DTMF, all codecs - supported by Asterisk, hold, unhold, and ringing notification. It is also - compliant with the current Jingle specification, current Google Jingle - specification, and the original Google Talk protocol. - - * Support for the WebSocket transport for chan_sip. - - * SIP peers can now be configured to support negotiation of ICE candidates. - - * The app_page application now no longer depends on DAHDI or app_meetme. It - has been re-architected to use app_confbridge internally. - - * Hangup handlers can be attached to channels using the CHANNEL() function. - Hangup handlers will run when the channel is hung up similar to the h - extension; however, unlike an h extension, a hangup handler is associated with - the actual channel and will execute anytime that channel is hung up, - regardless of where it is in the dialplan. - - * Added pre-dial handlers for the Dial and Follow-Me applications. Pre-dial - allows you to execute a dialplan subroutine on a channel before a call is - placed but after the application performing a dial action is invoked. This - means that the handlers are executed after the creation of the callee - channels, but before any actions have been taken to actually dial the callee - channels. - - * Log messages can now be easily associated with a certain call by looking at - a new unique identifier, "Call Id". Call ids are attached to log messages for - just about any case where it can be determined that the message is related - to a particular call. - - * Introduced Named ACLs as a new way to define Access Control Lists (ACLs) in - Asterisk. Unlike traditional ACLs defined in specific module configuration - files, Named ACLs can be shared across multiple modules. - - * The Hangup Cause family of functions and dialplan applications allow for - inspection of the hangup cause codes for each channel involved in a call. - This allows a dialplan writer to determine, for each channel, who hung up and - for what reason(s). - - * Two new functions have been added: FEATURE() and FEATUREMAP(). FEATURE() - lets you set some of the configuration options from the general section - of features.conf on a per-channel basis. FEATUREMAP() lets you customize - the key sequence used to activate built-in features, such as blindxfer, - and automon. - - * Support for DTLS-SRTP in chan_sip. - - * Support for named pickupgroups/callgroups, allowing any number of pickupgroups - and callgroups to be defined for several channel drivers. - - * IPv6 Support for AMI, AGI, ExternalIVR, and the SIP Security Event Framework. - - More information about the new features can be found on the Asterisk wiki: - - https://wiki.asterisk.org/wiki/display/AST/Asterisk+11+Documentation - - A full list of all new features can also be found in the CHANGES file. - - http://svnview.digium.com/svn/asterisk/branches/11/CHANGES - - For a full list of changes in the current release, please see the ChangeLog. - - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.0.0-rc1 -------------------------------------------------------------------------------- ================================================================================ bind-dyndb-ldap-2.0-0.2.20121009git6a86b1.fc18 (FEDORA-2012-15690) LDAP back-end plug-in for BIND -------------------------------------------------------------------------------- Update Information: Update to the latest master. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 9 2012 Petr Spacek <pspacek redhat com> 2.0-0.2.20121009git6a86b1 - update to the latest master -------------------------------------------------------------------------------- ================================================================================ cinnamon-1.6.1-2.fc18 (FEDORA-2012-15692) Window management and application launching for GNOME -------------------------------------------------------------------------------- Update Information: - fix settings applet icons - patch font size (Bzr 864050) -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 9 2012 Leigh Scott <leigh123linux@xxxxxxxxxxxxxx> - 1.6.1-2 - fix settings applet icons - patch font size (Bzr 864050) -------------------------------------------------------------------------------- References: [ 1 ] Bug #864050 - Cinnamon panel fonts are very small https://bugzilla.redhat.com/show_bug.cgi?id=864050 -------------------------------------------------------------------------------- ================================================================================ eurephia-1.1.0-3.fc18 (FEDORA-2012-15703) An advanced and flexible OpenVPN user authentication plug-in -------------------------------------------------------------------------------- Update Information: Updated against upstream v1.1.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 9 2012 David Sommerseth <dazo@xxxxxxxxxxxxxxxxxxxxx> - 1.1.0-3 - Hack to make it build on Fedora 17 and 18 * Tue Oct 9 2012 David Sommerseth <dazo@xxxxxxxxxxxxxxxxxxxxx> - 1.1.0-2 - Corrected wrong download URL for eurephia v1.1 source code * Tue Oct 9 2012 David Sommerseth <dazo@xxxxxxxxxxxxxxxxxxxxx> - 1.1.0-1 - Corrected wrong download URL for eurephia v1.1 source code * Tue Oct 9 2012 David Sommerseth <dazo@xxxxxxxxxxxxxxxxxxxxx> - 1.1.0-1 - Updated to upstream v1.1.0 -------------------------------------------------------------------------------- ================================================================================ ghc-arrows-0.4.4.0-1.fc18 (FEDORA-2012-15708) Classes that extend the Arrow class -------------------------------------------------------------------------------- Update Information: Classes that extend the Arrow class -------------------------------------------------------------------------------- References: [ 1 ] Bug #841746 - Review Request: ghc-arrows - Classes that extend the Arrow class https://bugzilla.redhat.com/show_bug.cgi?id=841746 -------------------------------------------------------------------------------- ================================================================================ ghc-data-memocombinators-0.4.3-1.fc18 (FEDORA-2012-15714) Haskell data-memocombinators library -------------------------------------------------------------------------------- Update Information: Combinators for building memo tables -------------------------------------------------------------------------------- References: [ 1 ] Bug #859032 - Review Request: ghc-data-memocombinators - Combinators for building memo tables https://bugzilla.redhat.com/show_bug.cgi?id=859032 -------------------------------------------------------------------------------- ================================================================================ ghc-rpm-macros-0.95.8-1.fc18 (FEDORA-2012-15698) Macros for building packages for GHC -------------------------------------------------------------------------------- Update Information: Make sure that haddock html is generated in addition to new hoogle output. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 9 2012 Jens Petersen <petersen@xxxxxxxxxx> - 0.95.8-1 - "cabal haddock" needs --html option with --hoogle to output html -------------------------------------------------------------------------------- ================================================================================ ghostscript-9.06-3.fc18 (FEDORA-2012-15695) A PostScript interpreter and renderer -------------------------------------------------------------------------------- Update Information: This update provides the latest upstream release, fixing problems with font artifacts when using the x11alpha device. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 27 2012 Tim Waugh <twaugh@xxxxxxxxxx> - 9.06-3 - Remove cups/libs to avoid bundling, although it isn't built in any case. * Tue Sep 4 2012 Tim Waugh <twaugh@xxxxxxxxxx> - 9.06-2 - Fixed encoding of German ps2pdf man page (bug #853764). * Wed Aug 8 2012 Tim Waugh <twaugh@xxxxxxxxxx> - 9.06-1 - 9.06. -------------------------------------------------------------------------------- References: [ 1 ] Bug #840606 - font artifacts with 9.05 and x11alpha https://bugzilla.redhat.com/show_bug.cgi?id=840606 -------------------------------------------------------------------------------- ================================================================================ gitolite3-3.04-4.fc18 (FEDORA-2012-15709) Highly flexible server for git directory version tracker -------------------------------------------------------------------------------- Update Information: Fix for path traversal vulnerability. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 9 2012 Jon Ciesla <limburgher@xxxxxxxxx> - 3.04-4 - Patch for directory traversal bug. -------------------------------------------------------------------------------- ================================================================================ gnome-settings-daemon-3.6.1-2.fc18 (FEDORA-2012-15711) The daemon sharing settings from GNOME to GTK+/KDE applications -------------------------------------------------------------------------------- Update Information: fix build on s390(x) This update makes gnome-settings-daemon handle lid-close properly with systemd >= 191. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 8 2012 Dan Horák <dan[at]danny.cz> - 3.6.1-2 - fix build on s390(x) * Mon Oct 8 2012 Bastien Nocera <bnocera@xxxxxxxxxx> 3.6.1-1 - Update to 3.6.1 * Fri Oct 5 2012 Olivier Fourdan <mclasen@xxxxxxxxxx> - 3.6.0-5 - Adds Wacom OSD window from upstream bug #679062 * Wed Oct 3 2012 Matthias Clasen <mclasen@xxxxxxxxxx> - 3.6.0-4 - Fix an inhibitor leak in the previous patch * Tue Oct 2 2012 Matthias Clasen <mclasen@xxxxxxxxxx> - 3.6.0-3 - Fix lid close handling with new systemd -------------------------------------------------------------------------------- References: [ 1 ] Bug #859224 - Please take systemd-logind's handle-power-key/handle-suspend-key/handle-hibernate-key/handle-lid-switch inhibitor locks if GNOME wants to handle the respective keys on its own https://bugzilla.redhat.com/show_bug.cgi?id=859224 -------------------------------------------------------------------------------- ================================================================================ gpodder-2.20.2-1.fc18 (FEDORA-2012-15713) Podcast receiver/catcher written in Python -------------------------------------------------------------------------------- Update Information: This update should fix Youtube downloads -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 9 2012 Ville-Pekka Vainio <vpvainio AT iki.fi> - 2.20.2-1 - New upstream release - Add patch from git master to fix Youtube feeds -------------------------------------------------------------------------------- ================================================================================ inkscape-0.48.3.1-1.fc18 (FEDORA-2012-15696) Vector-based drawing program using SVG -------------------------------------------------------------------------------- Update Information: Latest upstream release. -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 5 2012 Jon Ciesla <limburgher@xxxxxxxxx> - 0.48.3.1-1 - Lastest upstream. * Thu Oct 4 2012 Jon Ciesla <limburgher@xxxxxxxxx> - 0.48.2-13 - Added dep on uniconvertor, BZ 796424. -------------------------------------------------------------------------------- References: [ 1 ] Bug #812620 - inkscape 0.48.3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=812620 -------------------------------------------------------------------------------- ================================================================================ jbossws-api-1.0.0-3.fc18 (FEDORA-2012-15712) JBossWS API -------------------------------------------------------------------------------- Update Information: Initial import -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 2 2012 Marek Goldmann <mgoldman@xxxxxxxxxx> - 1.0.0-3 - Use POM macros - Add jbossws-parent BR -------------------------------------------------------------------------------- References: [ 1 ] Bug #862531 - Review Request: jbossws-parent - JBossWS Parent https://bugzilla.redhat.com/show_bug.cgi?id=862531 -------------------------------------------------------------------------------- ================================================================================ jbossws-parent-1.1.0-1.fc18 (FEDORA-2012-15712) JBossWS Parent -------------------------------------------------------------------------------- Update Information: Initial import -------------------------------------------------------------------------------- References: [ 1 ] Bug #862531 - Review Request: jbossws-parent - JBossWS Parent https://bugzilla.redhat.com/show_bug.cgi?id=862531 -------------------------------------------------------------------------------- ================================================================================ jbossws-spi-2.0.3-4.fc18 (FEDORA-2012-15712) JBossWS SPI -------------------------------------------------------------------------------- Update Information: Initial import -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 2 2012 Marek Goldmann <mgoldman@xxxxxxxxxx> - 2.0.3-4 - Add jbossws-parent BR - Use POM macros instead of patch - Enable tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #862531 - Review Request: jbossws-parent - JBossWS Parent https://bugzilla.redhat.com/show_bug.cgi?id=862531 -------------------------------------------------------------------------------- ================================================================================ libcommuni-1.2.0-1.fc18 (FEDORA-2012-15702) Cross-platform IRC client library written with Qt 4 -------------------------------------------------------------------------------- Update Information: Adding libcommuni IRC library and communi IRC client. -------------------------------------------------------------------------------- References: [ 1 ] Bug #846913 - Review Request: libcommuni - Communi is a cross-platform IRC client library written with Qt 4 https://bugzilla.redhat.com/show_bug.cgi?id=846913 -------------------------------------------------------------------------------- ================================================================================ libmongo-client-0.1.5-6.fc18 (FEDORA-2012-15717) Alternative C driver for MongoDB -------------------------------------------------------------------------------- Update Information: Initial import of libmongo-client for f18 -------------------------------------------------------------------------------- References: [ 1 ] Bug #861893 - Review Request: libmongo-client - Alternative C driver for MongoDB https://bugzilla.redhat.com/show_bug.cgi?id=861893 -------------------------------------------------------------------------------- ================================================================================ libxml2-2.9.0-1.fc18 (FEDORA-2012-15706) Library providing XML and HTML support -------------------------------------------------------------------------------- Update Information: - upstream release of 2.9.0 - A few new API entry points - More resilient push parser mode - A lot of portability improvement - Faster XPath evaluation - a lot of bug fixes and smaller improvement -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 11 2012 Daniel Veillard <veillard@xxxxxxxxxx> - 2.9.0-1 - upstream release of 2.9.0 - A few new API entry points - More resilient push parser mode - A lot of portability improvement - Faster XPath evaluation - a lot of bug fixes and smaller improvement -------------------------------------------------------------------------------- ================================================================================ libxslt-1.1.27-2.fc18 (FEDORA-2012-15716) Library providing the Gnome XSLT engine -------------------------------------------------------------------------------- Update Information: Fix a default namespace regression in 1.1.27 Upstream new release also including a number of security fixes -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 9 2012 Daniel Veillard <veillard@xxxxxxxxxx> - 1.1.27-2 - fix a regression in default namespace handling * Wed Sep 12 2012 Daniel Veillard <veillard@xxxxxxxxxx> - 1.1.27-1 - upstream release of libxslt-1.1.27 - a lot of bug fixes and improvements -------------------------------------------------------------------------------- References: [ 1 ] Bug #684386 - CVE-2011-1202 libxslt: Heap address leak in XLST https://bugzilla.redhat.com/show_bug.cgi?id=684386 [ 2 ] Bug #788826 - CVE-2011-3970 libxslt: Out-of-bounds read when parsing certain patterns https://bugzilla.redhat.com/show_bug.cgi?id=788826 [ 3 ] Bug #835982 - CVE-2012-2825 libxslt: DoS when reading unexpected DTD nodes in XSLT https://bugzilla.redhat.com/show_bug.cgi?id=835982 [ 4 ] Bug #852935 - CVE-2012-2871 libxslt: Heap-buffer overflow caused by bad cast in XSL transforms https://bugzilla.redhat.com/show_bug.cgi?id=852935 [ 5 ] Bug #852937 - CVE-2012-2870 libxslt: Use-after-free when processing an invalid XPath expression https://bugzilla.redhat.com/show_bug.cgi?id=852937 -------------------------------------------------------------------------------- ================================================================================ nemo-1.0.3-2.fc18 (FEDORA-2012-15692) File manager for Cinnamon -------------------------------------------------------------------------------- Update Information: - fix settings applet icons - patch font size (Bzr 864050) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 8 2012 Leigh Scott <leigh123linux@xxxxxxxxxxxxxx> - 1.0.3-2 - remove requires gnome-terminal - patch to remove "open in terminal" * Mon Oct 1 2012 Leigh Scott <leigh123linux@xxxxxxxxxxxxxx> - 1.0.3-1 - update to 1.0.3 release -------------------------------------------------------------------------------- References: [ 1 ] Bug #864050 - Cinnamon panel fonts are very small https://bugzilla.redhat.com/show_bug.cgi?id=864050 -------------------------------------------------------------------------------- ================================================================================ nemo-open-terminal-1.0.0-1.fc18 (FEDORA-2012-15692) Nemo extension for an open terminal shortcut -------------------------------------------------------------------------------- Update Information: - fix settings applet icons - patch font size (Bzr 864050) -------------------------------------------------------------------------------- References: [ 1 ] Bug #864050 - Cinnamon panel fonts are very small https://bugzilla.redhat.com/show_bug.cgi?id=864050 -------------------------------------------------------------------------------- ================================================================================ openvswitch-1.7.1-2.fc18 (FEDORA-2012-15694) Open vSwitch daemon/database/utilities -------------------------------------------------------------------------------- Update Information: Timeout ovs-vsctl if ovs daemon is not available -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 9 2012 Thomas Graf <tgraf@xxxxxxxxxx> - 1.7.1-2 - make ovs-vsctl timeout if daemon is not running (#858722) -------------------------------------------------------------------------------- References: [ 1 ] Bug #858722 - ifup hangs if openvswitch service is not running https://bugzilla.redhat.com/show_bug.cgi?id=858722 -------------------------------------------------------------------------------- ================================================================================ phpMyAdmin-3.5.3-1.fc18 (FEDORA-2012-15691) Handle the administration of MySQL over the World Wide Web -------------------------------------------------------------------------------- Update Information: phpMyAdmin 3.5.3.0 (2012-10-08) =============================== - [interface] Browse mode "Show" button gives blank page if no results anymore - [interface] Copy Database Ajax feedback vanishes long before copying is done - [interface] GC-maxlifetime warning incorrectly displayed - [interface] Search fails with JS error when tooltips disabled - [interface] Event comments not saved - [edit] Can't enter date directly when editing inline - [interface] Inline query editor doesn't work from search results - [edit] BLOB download no longer works - [config] Error in generated configuration arrray - [GUI] Invalid HTML code in multi submits confirmation form - [interface] Designer sometimes places tables on the top menu - [core] Call to undefined function __() when config file has wrong permissions - [edit] Error searching table with many fields - [edit] Cannot copy a DB with table and views - [privileges] Incorrect updating of the list of users - [edit] cell edit date field with empty date fills in current date - [edit] current_date from function drop down fails on update - [compatibility] add support for Solaris and FreeBSD system load and memory display in server status - [import] Table import from XML file fails - [display] replace Highcharts with jqplot for Display chart - [edit] Pasting value doesn't clear null checkbox - [edit] Datepicker for date and datetime fields is broken - [security] Unspecified minor security fix by upstream, see PMASA-2012-6 (http://www.phpmyadmin.net/home_page/security/PMASA-2012-6.php) - [security] Unspecified minor security fix by upstream, see PMASA-2012-7 (http://www.phpmyadmin.net/home_page/security/PMASA-2012-7.php) -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 9 2012 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 3.5.3-1 - Upgrade to 3.5.3 -------------------------------------------------------------------------------- ================================================================================ pki-core-10.0.0-0.43.b1.fc18 (FEDORA-2012-15697) Certificate System - PKI Core Components -------------------------------------------------------------------------------- Update Information: Resolves Dogtag Trac Ticket #359 - Create builds for beta 1 Resolves Dogtag Trac Ticket #359 - Create builds for beta 1 Resolves Dogtag Trac Ticket 349 - Create official alpha2 builds for dogtag 10 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 8 2012 Ade Lee <alee@xxxxxxxxxx> 10.0.0-0.43.b1 - Update selinux-policy version to fix error from latest policy changes * Mon Oct 8 2012 Ade Lee <alee@xxxxxxxxxx> 10.0.0-0.42.b1 - Fix typo in selinux policy versions * Mon Oct 8 2012 Ade Lee <alee@xxxxxxxxxx> 10.0.0-0.41.b1 - Added build requires for correct version of selinux-policy-devel * Mon Oct 8 2012 Ade Lee <alee@xxxxxxxxxx> 10.0.0-0.40.b1 - Update release to b1 * Fri Oct 5 2012 Endi S. Dewata <edewata@xxxxxxxxxx> 10.0.0-0.40.a2 - Merged pki-silent into pki-server. * Fri Oct 5 2012 Endi S. Dewata <edewata@xxxxxxxxxx> 10.0.0-0.39.a2 - Renamed "shared" folder to "server". * Fri Oct 5 2012 Ade Lee <alee@xxxxxxxxxx> 10.0.0-0.38.a2 - Added required selinux versions for new policy. * Tue Oct 2 2012 Endi S. Dewata <edewata@xxxxxxxxxx> 10.0.0-0.37.a2 - Added Provides to packages replacing obsolete packages. * Mon Oct 1 2012 Ade Lee <alee@xxxxxxxxxx> 10.0.0-0.36.a2 - Update release to a2 * Sun Sep 30 2012 Endi S. Dewata <edewata@xxxxxxxxxx> 10.0.0-0.36.a1 - Modified CMake to use RPM version number * Tue Sep 25 2012 Endi S. Dewata <edewata@xxxxxxxxxx> 10.0.0-0.35.a1 - Added VERSION file * Mon Sep 24 2012 Endi S. Dewata <edewata@xxxxxxxxxx> 10.0.0-0.34.a1 - Merged pki-setup into pki-server -------------------------------------------------------------------------------- ================================================================================ pulseaudio-2.1-2.fc18 (FEDORA-2012-15701) Improved Linux Sound Server -------------------------------------------------------------------------------- Update Information: Pulseaudio with better echo cancellation. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 8 2012 Debarshi Ray <rishi@xxxxxxxxxxxxxxxxx> 2.1-2 - Enable webrtc-aec -------------------------------------------------------------------------------- ================================================================================ python-django-bootstrap-toolkit-2.5.9-1.fc18 (FEDORA-2012-15715) Bootstrap support for Django projects -------------------------------------------------------------------------------- Update Information: Update to latest upstream minor release Update to latest upstream minor release -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ qpdf-3.0.2-1.fc18 (FEDORA-2012-15700) Command-line tools and library for transforming PDF files -------------------------------------------------------------------------------- Update Information: Initial build. -------------------------------------------------------------------------------- References: [ 1 ] Bug #863816 - QPDF isn't built for Fedora 17 https://bugzilla.redhat.com/show_bug.cgi?id=863816 -------------------------------------------------------------------------------- ================================================================================ rubygem-simple_form-2.0.3-1.fc18 (FEDORA-2012-15699) Flexible and powerful components to create forms -------------------------------------------------------------------------------- Update Information: SimpleForm aims to be as flexible as possible while helping you with powerful components to create your forms. The basic goal of SimpleForm is to not touch your way of defining the layout, letting you find the better design for your eyes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #859994 - Review Request: rubygem-simple_form - Flexible and powerful components to create forms https://bugzilla.redhat.com/show_bug.cgi?id=859994 -------------------------------------------------------------------------------- ================================================================================ sugar-calculator-41-1.fc18 (FEDORA-2012-15718) Calculator for Sugar -------------------------------------------------------------------------------- Update Information: Bugfix release -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 8 2012 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 41-1 - Release 41 -------------------------------------------------------------------------------- ================================================================================ syncevolution-1.3.1-1.fc18 (FEDORA-2012-15693) SyncML client for evolution -------------------------------------------------------------------------------- Update Information: New upstream stable bugfix release. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 8 2012 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 1:1.3.1-1 - 1.3.1 stable release * Tue Sep 18 2012 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 1:1.3-2 - Add patch to fix build detecting gio -------------------------------------------------------------------------------- References: [ 1 ] Bug #861720 - [abrt] syncevolution-gtk-1.3-1.fc17: do_pre_parse_initialization: Process /usr/bin/sync-ui was killed by signal 5 (SIGTRAP) https://bugzilla.redhat.com/show_bug.cgi?id=861720 [ 2 ] Bug #862028 - [abrt] syncevolution-gtk-1.3-1.fc17: g_logv: Process /usr/bin/sync-ui was killed by signal 5 (SIGTRAP) https://bugzilla.redhat.com/show_bug.cgi?id=862028 [ 3 ] Bug #863094 - [abrt] syncevolution-1.3-1.fc17: __cxxabiv1::__unexpected: Process /usr/libexec/syncevo-dbus-server was killed by signal 6 (SIGABRT) https://bugzilla.redhat.com/show_bug.cgi?id=863094 -------------------------------------------------------------------------------- ================================================================================ system-config-printer-1.3.12-1.fc18 (FEDORA-2012-15705) A printer administration tool -------------------------------------------------------------------------------- Update Information: This update fixes automatic USB printer configuration. This update adds support for FirewallD. -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 5 2012 Tim Waugh <twaugh@xxxxxxxxxx> 1.3.12-1 - 1.3.12. * Fri Sep 21 2012 Jiri Popelka <jpopelka@xxxxxxxxxx> 1.3.11-5 - FirewallD support once again (use D-Bus instead of FirewallD client module) * Tue Sep 18 2012 Jiri Popelka <jpopelka@xxxxxxxxxx> 1.3.11-4 - revert previous change for now, the patch needs more work * Thu Sep 6 2012 Jiri Popelka <jpopelka@xxxxxxxxxx> 1.3.11-3 - FirewallD support * Wed Aug 22 2012 Jiri Popelka <jpopelka@xxxxxxxxxx> 1.3.11-2 - use new systemd-rpm macros (#850334) -------------------------------------------------------------------------------- References: [ 1 ] Bug #862186 - No automatic printer configuration https://bugzilla.redhat.com/show_bug.cgi?id=862186 [ 2 ] Bug #858312 - [abrt] system-config-printer-1.3.11-3.fc18: system-config-printer.py:89:<module>:ImportError: No module named firewall https://bugzilla.redhat.com/show_bug.cgi?id=858312 -------------------------------------------------------------------------------- ================================================================================ webrtc-audio-processing-0.1-1.fc18 (FEDORA-2012-15701) Library for echo cancellation -------------------------------------------------------------------------------- Update Information: Pulseaudio with better echo cancellation. -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
