The following Fedora 18 Security updates need testing: Age URL 79 https://admin.fedoraproject.org/updates/FEDORA-2013-0416/fedora-business-cards-1-0.1.beta1.fc18 48 https://admin.fedoraproject.org/updates/FEDORA-2013-2131/rubygem-rdoc-3.12-6.fc18 44 https://admin.fedoraproject.org/updates/FEDORA-2013-2306/rubygem-rack-1.4.0-5.fc18 13 https://admin.fedoraproject.org/updates/FEDORA-2013-3891/php-5.4.13-1.fc18 13 https://admin.fedoraproject.org/updates/FEDORA-2013-3894/tomcat6-6.0.36-1.fc18 12 https://admin.fedoraproject.org/updates/FEDORA-2013-3935/puppet-3.1.1-1.fc18 8 https://admin.fedoraproject.org/updates/FEDORA-2013-4050/squid-3.2.9-1.fc18 8 https://admin.fedoraproject.org/updates/FEDORA-2013-4100/glibc-2.16-30.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-4193/sssd-1.9.4-7.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-4215/drupal7-views-3.6-1.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-4198/rubygem-activesupport-3.2.8-3.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-4139/rubygem-activerecord-3.2.8-5.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-4214/rubygem-actionpack-3.2.8-3.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-4205/gajim-0.15.3-1.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2013-4243/stunnel-4.55-1.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2012-20578/nodejs-0.10.1-1.fc18,libuv-0.10.0-2.git5462dab.fc18,v8-3.14.5.8-1.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-4319/mantis-1.2.14-1.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-4403/mingw-openssl-1.0.1e-1.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-4387/moodle-2.3.6-1.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2013-4447/py-bcrypt-0.3-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-4507/libxslt-1.1.28-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-4525/bind-9.9.2-10.P2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-4564/roundcubemail-0.8.6-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-4539/mongodb-2.2.3-4.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-4532/drupal7-rules-2.3-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-4537/libarchive-3.0.4-4.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-4566/asterisk-11.2.2-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-4541/httpd-2.4.4-2.fc18 The following Fedora 18 Critical Path updates have yet to be approved: Age URL 165 https://admin.fedoraproject.org/updates/FEDORA-2012-16107/xorg-x11-drv-qxl-0.1.0-1.fc18 163 https://admin.fedoraproject.org/updates/FEDORA-2012-16207/thunderbird-lightning-1.8-1.fc18,thunderbird-16.0.1-2.fc18 78 https://admin.fedoraproject.org/updates/FEDORA-2013-0541/mdadm-3.2.6-11.fc18 47 https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5.fc18 36 https://admin.fedoraproject.org/updates/FEDORA-2013-2726/pulseaudio-2.1-7.fc18 23 https://admin.fedoraproject.org/updates/FEDORA-2013-3458/iproute-3.6.0-7.fc18,iptables-1.4.18-1.fc18 12 https://admin.fedoraproject.org/updates/FEDORA-2013-3950/libgsf-1.14.24-3.fc18 9 https://admin.fedoraproject.org/updates/FEDORA-2013-4006/dnsmasq-2.65-5.fc18 8 https://admin.fedoraproject.org/updates/FEDORA-2013-4100/glibc-2.16-30.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-4219/audit-2.2.3-2.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-4159/docbook-style-xsl-1.78.1-1.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-4221/python-slip-0.4.0-1.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2013-4269/gdb-7.5.1-37.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2013-4251/selinux-policy-3.11.1-87.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-4295/libnotify-0.7.5-5.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-4406/yum-3.4.3-53.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2013-4429/redland-1.0.15-3.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2013-4425/libosinfo-0.2.6-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-4507/libxslt-1.1.28-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-4493/perl-5.16.3-241.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-4485/bind-dyndb-ldap-2.6-1.fc18,bind-9.9.2-9.P1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-4537/libarchive-3.0.4-4.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-4568/udisks2-2.0.1-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-4555/policycoreutils-2.1.13-59.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-4549/network-manager-applet-0.9.8.1-1.git20130327.fc18,NetworkManager-0.9.8.1-1.git20130327.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-4525/bind-9.9.2-10.P2.fc18 The following builds have been pushed to Fedora 18 updates-testing NetworkManager-0.9.8.1-1.git20130327.fc18 asterisk-11.2.2-1.fc18 bind-9.9.2-10.P2.fc18 drupal7-mediawiki_api-1.0-0.7.beta2.fc18 drupal7-rules-2.3-1.fc18 drupal7-theme-adaptivetheme-3.1-1.fc18 ettercap-0.7.6-1.fc18 farstream02-0.2.2-2.fc18 freeipa-3.1.3-2.fc18 gdal-1.9.1-16.fc18.1 gitolite3-3.5.1-1.fc18 httpd-2.4.4-2.fc18 httpie-0.4.1-2.fc18 jersey-1.17.1-2.fc18 kismet-0.0.2013.03.R1-1.fc18 kscreen-0.0.81-1.fc18 libarchive-3.0.4-4.fc18 libkscreen-0.0.81-1.fc18 matreshka-0.3.0-3.fc18 mesa-demos-8.1.0-3.fc18 mongodb-2.2.3-4.fc18 network-manager-applet-0.9.8.1-1.git20130327.fc18 osm2pgsql-0.70.5-0.11.20121021svn.fc18 php-horde-Horde-Crypt-2.1.3-1.fc18 player-3.0.2-25.fc18 policycoreutils-2.1.13-59.fc18 postgis-2.0.3-1.fc18 privoxy-3.0.21-2.fc18 python-basemap-1.0.6-2.fc18 python-django-flash-1.8-4.fc18 python-glanceclient-0.8.0-2.fc18 python-moksha-hub-1.2.0-1.fc18 python-txzmq-0.6.1-5.fc18 qpid-proton-0.4-2.fc18 roundcubemail-0.8.6-1.fc18 rubygem-nokogiri-1.5.9-1.fc18 sip-4.14.5-1.fc18 smem-1.3-1.fc18 sugar-browse-149.1-1.fc18 sugar-paint-57-1.fc18 system-config-printer-1.3.13-1.fc18 texlive-2012-20.20130321_r29448.fc18 tzdata-2013b-2.fc18 udisks2-2.0.1-2.fc18 valyriatear-0.5.0-4.fc18 xorg-x11-drv-openchrome-0.3.2-1.fc18 Details about builds: ================================================================================ NetworkManager-0.9.8.1-1.git20130327.fc18 (FEDORA-2013-4549) Network connection manager and user applications -------------------------------------------------------------------------------- Update Information: This update fixes issues with netbooting, bridge, VLAN, and PPP configuration settings, requests static routes from DHCP servers, and updates translations. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Dan Williams <dcbw@xxxxxxxxxx> - 0.9.8.1-1.git20130327 - Update to 0.9.8.2 snapshot - core: fix VLAN parent handling when identified by UUID - core: quiet warning about invalid interface index (rh #920145) - core: request 'static-routes' from DHCP servers (rh #922558) - core: fix crash when dbus-daemon is restarted (rh #918273) - core: copy leasefiles from /var/lib/dhclient to fix netboot (rh #916233) - core: memory leak and potential crash fixes - ifcfg-rh: ensure missing STP property is interpreted as off (rh #922702) -------------------------------------------------------------------------------- References: [ 1 ] Bug #922702 - [bridge] wrong default for STP https://bugzilla.redhat.com/show_bug.cgi?id=922702 [ 2 ] Bug #916233 - latest upgrade breaks netboot https://bugzilla.redhat.com/show_bug.cgi?id=916233 [ 3 ] Bug #918273 - [abrt] NetworkManager-0.9.8.0-1.fc18: _dbus_abort: Process /usr/sbin/NetworkManager was killed by signal 6 (SIGABRT) https://bugzilla.redhat.com/show_bug.cgi?id=918273 [ 4 ] Bug #920145 - nm_system_iface_set_up: assertion `ifindex > 0' failed https://bugzilla.redhat.com/show_bug.cgi?id=920145 [ 5 ] Bug #906133 - Test case failure: nm-connection-editor - wireless - set BSSID https://bugzilla.redhat.com/show_bug.cgi?id=906133 -------------------------------------------------------------------------------- ================================================================================ asterisk-11.2.2-1.fc18 (FEDORA-2013-4566) The Open Source PBX -------------------------------------------------------------------------------- Update Information: The Asterisk Development Team has announced security releases for Certified Asterisk 1.8.15 and Asterisk 1.8, 10, and 11. The available security releases are released as versions 1.8.15-cert2, 1.8.20.2, 10.12.2, 10.12.2-digiumphones, and 11.2.2. These releases are available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/releases The release of these versions resolve the following issues: * A possible buffer overflow during H.264 format negotiation. The format attribute resource for H.264 video performs an unsafe read against a media attribute when parsing the SDP. This vulnerability only affected Asterisk 11. * A denial of service exists in Asterisk's HTTP server. AST-2012-014, fixed in January of this year, contained a fix for Asterisk's HTTP server for a remotely-triggered crash. While the fix prevented the crash from being triggered, a denial of service vector still exists with that solution if an attacker sends one or more HTTP POST requests with very large Content-Length values. This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11 * A potential username disclosure exists in the SIP channel driver. When authenticating a SIP request with alwaysauthreject enabled, allowguest disabled, and autocreatepeer disabled, Asterisk discloses whether a user exists for INVITE, SUBSCRIBE, and REGISTER transactions in multiple ways. This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11 These issues and their resolutions are described in the security advisories. For more information about the details of these vulnerabilities, please read security advisories AST-2013-001, AST-2013-002, and AST-2013-003, which were released at the same time as this announcement. For a full list of changes in the current releases, please see the ChangeLogs: http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.15-cert2 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.20.2 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.2 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.2-digiumphones http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.2.2 The security advisories are available at: * http://downloads.asterisk.org/pub/security/AST-2013-001.pdf * http://downloads.asterisk.org/pub/security/AST-2013-002.pdf * http://downloads.asterisk.org/pub/security/AST-2013-003.pdf -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Jeffrey Ollie <jeff@xxxxxxxxxx> - 11.2.2-1: - The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.15 and Asterisk 1.8, 10, and 11. The available security releases - are released as versions 1.8.15-cert2, 1.8.20.2, 10.12.2, 10.12.2-digiumphones, - and 11.2.2. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolve the following issues: - - * A possible buffer overflow during H.264 format negotiation. The format - attribute resource for H.264 video performs an unsafe read against a media - attribute when parsing the SDP. - - This vulnerability only affected Asterisk 11. - - * A denial of service exists in Asterisk's HTTP server. AST-2012-014, fixed - in January of this year, contained a fix for Asterisk's HTTP server for a - remotely-triggered crash. While the fix prevented the crash from being - triggered, a denial of service vector still exists with that solution if an - attacker sends one or more HTTP POST requests with very large Content-Length - values. - - This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11 - - * A potential username disclosure exists in the SIP channel driver. When - authenticating a SIP request with alwaysauthreject enabled, allowguest - disabled, and autocreatepeer disabled, Asterisk discloses whether a user - exists for INVITE, SUBSCRIBE, and REGISTER transactions in multiple ways. - - This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11 - - These issues and their resolutions are described in the security advisories. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2013-001, AST-2013-002, and AST-2013-003, which were - released at the same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.15-cert2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.20.2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.2 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.2-digiumphones - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.2.2 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2013-001.pdf - * http://downloads.asterisk.org/pub/security/AST-2013-002.pdf - * http://downloads.asterisk.org/pub/security/AST-2013-003.pdf -------------------------------------------------------------------------------- References: [ 1 ] Bug #928550 - CVE-2013-2685 asterisk: buffer overflow via SIP SDP header (AST-2013-001) https://bugzilla.redhat.com/show_bug.cgi?id=928550 -------------------------------------------------------------------------------- ================================================================================ bind-9.9.2-10.P2.fc18 (FEDORA-2013-4525) The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server -------------------------------------------------------------------------------- Update Information: New upstream patch version fixing CVE-2013-2266. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Tomas Hozza <thozza@xxxxxxxxxx> 32:9.9.2-10.P2 - New upstream patch version fixing CVE-2013-2266 (#928032) * Wed Mar 6 2013 Tomas Hozza <thozza@xxxxxxxxxx> 32:9.9.2-9.P1 - Fix Makefile.in to include header added by rate limiting patch (#918330) -------------------------------------------------------------------------------- References: [ 1 ] Bug #928027 - CVE-2013-2266 bind: libdns regular expressions excessive resource consumption DoS https://bugzilla.redhat.com/show_bug.cgi?id=928027 -------------------------------------------------------------------------------- ================================================================================ drupal7-mediawiki_api-1.0-0.7.beta2.fc18 (FEDORA-2013-4538) Provides a MediaWiki syntax to html conversion input filter -------------------------------------------------------------------------------- Update Information: New upstream version, http://drupal.org/node/1954400. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Peter Borsa <peter.borsa@xxxxxxxxx> - 1.0-0.7.beta2 - New upstream version. * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0-0.6.beta1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #928693 - drupal7-mediawiki_api-1.0-beta2 is available https://bugzilla.redhat.com/show_bug.cgi?id=928693 -------------------------------------------------------------------------------- ================================================================================ drupal7-rules-2.3-1.fc18 (FEDORA-2013-4532) It allows site administrators to define conditionally executed actions -------------------------------------------------------------------------------- Update Information: New upstream version, http://drupal.org/node/1954508 and http://drupal.org/node/1954592. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Peter Borsa <peter.borsa@xxxxxxxxx> - 2.3-1 - New upstream version * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Sat Aug 4 2012 Peter Borsa <peter.borsa@xxxxxxxxx> - 2.2-1 - New upstream version. -------------------------------------------------------------------------------- References: [ 1 ] Bug #928694 - drupal7-rules-2.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=928694 -------------------------------------------------------------------------------- ================================================================================ drupal7-theme-adaptivetheme-3.1-1.fc18 (FEDORA-2013-4550) Adaptivetheme is a powerful theme framework -------------------------------------------------------------------------------- Update Information: New upstream version, http://drupal.org/node/1761946. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Peter Borsa <peter.borsa@xxxxxxxxx> - 3.1-1 - Updated to 3.1 * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Fri Aug 10 2012 Peter Borsa <peter.borsa@xxxxxxxxx> - 3.0-1 - Updated to 3.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #928430 - please update package https://bugzilla.redhat.com/show_bug.cgi?id=928430 -------------------------------------------------------------------------------- ================================================================================ ettercap-0.7.6-1.fc18 (FEDORA-2013-4556) Network traffic sniffer/analyser, NCURSES interface version -------------------------------------------------------------------------------- Update Information: Latest upstream. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 0.7.6-1 - Enable ipv6. - 0.7.6, BZ 928245. * Mon Feb 11 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 0.7.5.3-2 - Drop desktop vendor tag. -------------------------------------------------------------------------------- ================================================================================ farstream02-0.2.2-2.fc18 (FEDORA-2013-4540) Libraries for videoconferencing -------------------------------------------------------------------------------- Update Information: Pull some patches from upstream that fix serveral leaks. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Brian Pepple <bpepple@xxxxxxxxxxxxxxxxx> - 0.2.2-2 - Pull some patches from upstream that fix serveral leaks. -------------------------------------------------------------------------------- ================================================================================ freeipa-3.1.3-2.fc18 (FEDORA-2013-4460) The Identity, Policy and Audit system -------------------------------------------------------------------------------- Update Information: Update to upstream 3.1.3. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Martin Kosek <mkosek@xxxxxxxxxx> - 3.1.3-2 - Avoid running ipa-ldap-updater twice * Tue Mar 26 2013 Martin Kosek <mkosek@xxxxxxxxxx> - 3.1.3-1 - Update to upstream 3.1.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #905312 - freeipa-server-strict requirements cause conflicts in clean F18 install https://bugzilla.redhat.com/show_bug.cgi?id=905312 [ 2 ] Bug #904720 - ipa-adtrust-install fails unexpectedly https://bugzilla.redhat.com/show_bug.cgi?id=904720 [ 3 ] Bug #910245 - [abrt] freeipa-client-3.1.2-1.fc18: ipautil.py:838:get_ipa_basedn:KeyError: 'namingcontexts' https://bugzilla.redhat.com/show_bug.cgi?id=910245 [ 4 ] Bug #911891 - ipa service couldn't be restarted https://bugzilla.redhat.com/show_bug.cgi?id=911891 [ 5 ] Bug #916399 - CRITICAL Failed to load upload-cacert.ldif: https://bugzilla.redhat.com/show_bug.cgi?id=916399 [ 6 ] Bug #920716 - ipa-client-install cannot obtain CA certificate https://bugzilla.redhat.com/show_bug.cgi?id=920716 -------------------------------------------------------------------------------- ================================================================================ gdal-1.9.1-16.fc18.1 (FEDORA-2013-4517) GIS file format library -------------------------------------------------------------------------------- Update Information: Update GEOS to 3.3.8, and PostGIS to 2.0.3. This also requires player, osm2pgsql, gdal and python-basemap to be rebuilt against new GEOS. This update fixes upgrade problems to f18. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Devrim GÜNDÜZ <devrim@xxxxxxxxxx> - 1.9.1-16.1 - Rebuild with geos 3.3.8. * Fri Jan 25 2013 Devrim GÜNDÜZ <devrim@xxxxxxxxxx> - 1.9.1-15.1 - Rebuild with geos 3.3.7. -------------------------------------------------------------------------------- References: [ 1 ] Bug #872710 - PostGIS needs to be updated and recompiled for PostgreSQL 9.2 https://bugzilla.redhat.com/show_bug.cgi?id=872710 -------------------------------------------------------------------------------- ================================================================================ gitolite3-3.5.1-1.fc18 (FEDORA-2013-4530) Highly flexible server for git directory version tracker -------------------------------------------------------------------------------- Update Information: Minor for for gitweb. Latest upstream. Latest upstream. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 1:3.5.1-1 - Latest upstream. \* Mon Mar 25 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 1:3.5-1 - Latest upstream. -------------------------------------------------------------------------------- ================================================================================ httpd-2.4.4-2.fc18 (FEDORA-2013-4541) Apache HTTP Server -------------------------------------------------------------------------------- Update Information: This update contains the latest release of the Apache HTTP Server, version 2.4.4. Two security issues are resolved in this update: * Various XSS flaws due to unescaped hostnames and URIs HTML output in mod_info, mod_status, mod_imagemap, mod_ldap, and mod_proxy_ftp. (CVE-2012-3499) * An Cross-Site-Scripting attack against the mod_proxy_balancer manager interface. (CVE-2012-4558) Numerous bug fixes and minor enhancements are also included; for more information see: http://www.apache.org/dist/httpd/CHANGES_2.4.4 -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 26 2013 Joe Orton <jorton@xxxxxxxxxx> - 2.4.4-2 - really package mod_auth_form in mod_session (#915438) * Tue Feb 26 2013 Joe Orton <jorton@xxxxxxxxxx> - 2.4.4-1 - update to 2.4.4 - fix duplicate ownership of mod_session config (#914901) * Fri Feb 22 2013 Joe Orton <jorton@xxxxxxxxxx> - 2.4.3-17 - add mod_session subpackage, move mod_auth_form there (#894500) * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.4.3-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #915883 - CVE-2012-3499 httpd: multiple XSS flaws due to unescaped hostnames https://bugzilla.redhat.com/show_bug.cgi?id=915883 [ 2 ] Bug #915884 - CVE-2012-4558 httpd: XSS flaw in mod_proxy_balancer manager interface https://bugzilla.redhat.com/show_bug.cgi?id=915884 -------------------------------------------------------------------------------- ================================================================================ httpie-0.4.1-2.fc18 (FEDORA-2013-4570) A Curl-like tool for humans -------------------------------------------------------------------------------- Update Information: Initial Import -------------------------------------------------------------------------------- References: [ 1 ] Bug #927457 - Review Request: httpie - A Curl-like tool for humans https://bugzilla.redhat.com/show_bug.cgi?id=927457 -------------------------------------------------------------------------------- ================================================================================ jersey-1.17.1-2.fc18 (FEDORA-2013-4515) JAX-RS (JSR 311) production quality Reference Implementation -------------------------------------------------------------------------------- Update Information: Initial import (#825347). -------------------------------------------------------------------------------- References: [ 1 ] Bug #825347 - Review Request: jersey - JAX-RS (JSR 311) production quality Reference Implementation https://bugzilla.redhat.com/show_bug.cgi?id=825347 -------------------------------------------------------------------------------- ================================================================================ kismet-0.0.2013.03.R1-1.fc18 (FEDORA-2013-4514) WLAN detector, sniffer and IDS -------------------------------------------------------------------------------- Update Information: Latest upstream, multiple bugfixes. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 0.0.2013.03.R1-1 - Latest stable upstream. - Changed to libnl3 -------------------------------------------------------------------------------- ================================================================================ kscreen-0.0.81-1.fc18 (FEDORA-2013-4535) KDE Display Management software -------------------------------------------------------------------------------- Update Information: Update to 0.0.81 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Dan Vrátil <dvratil@xxxxxxxxxx> 1:0.0.81-1 - Update to 1:0.0.81-1 -------------------------------------------------------------------------------- ================================================================================ libarchive-3.0.4-4.fc18 (FEDORA-2013-4537) A library for handling streaming archive formats -------------------------------------------------------------------------------- Update Information: This update fixes CVE-2013-0211 libarchive: read buffer overflow on 64-bit systems -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Tomas Bzatek <tbzatek@xxxxxxxxxx> - 3.0.4-4 - Fix CVE-2013-0211: read buffer overflow on 64-bit systems (#927105) -------------------------------------------------------------------------------- References: [ 1 ] Bug #902998 - CVE-2013-0211 libarchive: read buffer overflow on 64-bit systems https://bugzilla.redhat.com/show_bug.cgi?id=902998 -------------------------------------------------------------------------------- ================================================================================ libkscreen-0.0.81-1.fc18 (FEDORA-2013-4535) Display configuration library -------------------------------------------------------------------------------- Update Information: Update to 0.0.81 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Dan Vrátil <dvratil@xxxxxxxxxx> - 1:0.0.81-1 - libkscreen 0.0.81 * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1:0.0.71-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ matreshka-0.3.0-3.fc18 (FEDORA-2013-4565) Set of Ada libraries to help to develop information systems -------------------------------------------------------------------------------- Update Information: Fix gptnames -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Pavel Zhukov <landgraf@xxxxxxxxxxxxxxxxx> - 0.3.0.3 - Fix league gpr path -------------------------------------------------------------------------------- References: [ 1 ] Bug #895231 - Incorrect filenames in matreshka_sql gprs https://bugzilla.redhat.com/show_bug.cgi?id=895231 -------------------------------------------------------------------------------- ================================================================================ mesa-demos-8.1.0-3.fc18 (FEDORA-2013-4545) Mesa demos -------------------------------------------------------------------------------- Update Information: Fix linking to not drag glew in for just glx-utils -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Adam Jackson <ajax@xxxxxxxxxx> 8.1.0-3 - Build with --as-needed so glxinfo doesn't needlessly drag in GLEW -------------------------------------------------------------------------------- ================================================================================ mongodb-2.2.3-4.fc18 (FEDORA-2013-4539) High-performance, schema-free document-oriented database -------------------------------------------------------------------------------- Update Information: Fix for CVE-2013-1892 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Troy Dawson <tdawson@xxxxxxxxxx> - 2.2.3-4 - Fix for CVE-2013-1892 * Sun Feb 10 2013 Denis Arnaud <denis.arnaud_fedora@xxxxxxx> - 2.2.3-3 - Rebuild for Boost-1.53.0 * Sat Feb 9 2013 Denis Arnaud <denis.arnaud_fedora@xxxxxxx> - 2.2.3-2 - Rebuild for Boost-1.53.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #928193 - CVE-2013-1892 MongoDB: Server Side JavaScript Includes allow Remote Code Execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=928193 -------------------------------------------------------------------------------- ================================================================================ network-manager-applet-0.9.8.1-1.git20130327.fc18 (FEDORA-2013-4549) A network control and status applet for NetworkManager -------------------------------------------------------------------------------- Update Information: This update fixes issues with netbooting, bridge, VLAN, and PPP configuration settings, requests static routes from DHCP servers, and updates translations. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Dan Williams <dcbw@xxxxxxxxxx> - 0.9.8.1-1.git20130327 - Update to 0.9.8.2 snapshot - Updated translations - editor: don't overwrite bridge/bond master interface name with UUID - applet: fix WWAN PIN dialog invalid "label1" entry widget - editor: fix allowed values for VLAN ID and MTU - editor: preserve existing PPP connection LCP echo failure and reply values - editor: ensure changes to the STP checkbox are saved - editor: hide BSSID for AdHoc connection (rh #906133) - editor: fix random data sneaking into IPv6 route gateway fields - editor: fix handling of initial entry for MAC address widgets -------------------------------------------------------------------------------- References: [ 1 ] Bug #922702 - [bridge] wrong default for STP https://bugzilla.redhat.com/show_bug.cgi?id=922702 [ 2 ] Bug #916233 - latest upgrade breaks netboot https://bugzilla.redhat.com/show_bug.cgi?id=916233 [ 3 ] Bug #918273 - [abrt] NetworkManager-0.9.8.0-1.fc18: _dbus_abort: Process /usr/sbin/NetworkManager was killed by signal 6 (SIGABRT) https://bugzilla.redhat.com/show_bug.cgi?id=918273 [ 4 ] Bug #920145 - nm_system_iface_set_up: assertion `ifindex > 0' failed https://bugzilla.redhat.com/show_bug.cgi?id=920145 [ 5 ] Bug #906133 - Test case failure: nm-connection-editor - wireless - set BSSID https://bugzilla.redhat.com/show_bug.cgi?id=906133 -------------------------------------------------------------------------------- ================================================================================ osm2pgsql-0.70.5-0.11.20121021svn.fc18 (FEDORA-2013-4517) Imports map data from OpenStreetMap to a PostgreSQL database -------------------------------------------------------------------------------- Update Information: Update GEOS to 3.3.8, and PostGIS to 2.0.3. This also requires player, osm2pgsql, gdal and python-basemap to be rebuilt against new GEOS. This update fixes upgrade problems to f18. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Devrim GÜNDÜZ <devrim@xxxxxxxxxx> - 0.70.5-0.11.20121021svn - Rebuild with geos 3.3.8. * Mon Nov 19 2012 Devrim GÜNDÜZ <devrim@xxxxxxxxxx> - 0.70.5-0.10.20121021svn - Rebuild with new geos. -------------------------------------------------------------------------------- References: [ 1 ] Bug #872710 - PostGIS needs to be updated and recompiled for PostgreSQL 9.2 https://bugzilla.redhat.com/show_bug.cgi?id=872710 -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Crypt-2.1.3-1.fc18 (FEDORA-2013-4548) Horde Cryptography API -------------------------------------------------------------------------------- Update Information: The Horde_Crypt package class provides an API for various cryptographic systems. -------------------------------------------------------------------------------- References: [ 1 ] Bug #909907 - Review Request: php-horde-Horde-Crypt - Horde Cryptography API https://bugzilla.redhat.com/show_bug.cgi?id=909907 -------------------------------------------------------------------------------- ================================================================================ player-3.0.2-25.fc18 (FEDORA-2013-4517) Cross-platform robot device interface and server -------------------------------------------------------------------------------- Update Information: Update GEOS to 3.3.8, and PostGIS to 2.0.3. This also requires player, osm2pgsql, gdal and python-basemap to be rebuilt against new GEOS. This update fixes upgrade problems to f18. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Devrim GÜNDÜZ <devrim@xxxxxxxxxx> - 3.0.2-25 - Rebuild with geos 3.3.8. * Fri Jan 25 2013 Devrim GÜNDÜZ <devrim@xxxxxxxxxx> - 3.0.2-24 - Rebuild against geos 3.3.7. * Mon Jan 21 2013 Adam Tkac <atkac redhat com> - 3.0.2-23 - rebuild due to "jpeg8-ABI" feature drop -------------------------------------------------------------------------------- References: [ 1 ] Bug #872710 - PostGIS needs to be updated and recompiled for PostgreSQL 9.2 https://bugzilla.redhat.com/show_bug.cgi?id=872710 -------------------------------------------------------------------------------- ================================================================================ policycoreutils-2.1.13-59.fc18 (FEDORA-2013-4555) SELinux policy core utilities -------------------------------------------------------------------------------- Update Information: - Can not unshare IPC in sandbox, since it blows up Xephyr - Remove bogus error message sandbox about reseting setfsuid - Allow sandbox to mount on symboliclinked homedirs -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 25 2013 Dan Walsh <dwalsh@xxxxxxxxxx> - 2.1.12-59 - Can not unshare IPC in sandbox, since it blows up Xephyr - Remove bogus error message sandbox about reseting setfsuid - Allow sandbox to mount on symboliclinked homedirs -------------------------------------------------------------------------------- References: [ 1 ] Bug #901908 - [abrt] policycoreutils-gui-2.1.13-49.fc18: statusPage.py:180:read_selinux_config:OSError: [Errno 2] No such file or directory https://bugzilla.redhat.com/show_bug.cgi?id=901908 [ 2 ] Bug #919531 - [abrt] policycoreutils-gui-2.1.13-56.fc18: __init__.py:78:get_all_entrypoint_domains:NameError: global name 're' is not defined https://bugzilla.redhat.com/show_bug.cgi?id=919531 [ 3 ] Bug #922263 - [abrt] policycoreutils-devel-2.1.13-55.fc18: __init__.py:22:swig_import_helper:ImportError: /usr/lib64/python2.7/site-packages/selinux/_selinux.so: undefined symbol: selinux_binary_policy_path_min_max https://bugzilla.redhat.com/show_bug.cgi?id=922263 [ 4 ] Bug #926054 - SELinux Sandbox broken: "Unable to switch to root to clear tmp dir" https://bugzilla.redhat.com/show_bug.cgi?id=926054 -------------------------------------------------------------------------------- ================================================================================ postgis-2.0.3-1.fc18 (FEDORA-2013-4517) Geographic Information Systems Extensions to PostgreSQL -------------------------------------------------------------------------------- Update Information: Update GEOS to 3.3.8, and PostGIS to 2.0.3. This also requires player, osm2pgsql, gdal and python-basemap to be rebuilt against new GEOS. This update fixes upgrade problems to f18. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 6 2013 Devrim GÜNDÜZ <devrim@xxxxxxxxxx> - 2.0.3-1 - Update to 2.0.3, and build against GeOS 3.3.8. - Update all URLs. * Fri Jan 25 2013 Devrim GÜNDÜZ <devrim@xxxxxxxxxx> - 2.0.2-2 - Rebuilt against geos 3.3.7. - Apply changes for PostgreSQL 9.2 and extensions. * Wed Jan 16 2013 Devrim GÜNDÜZ <devrim@xxxxxxxxxx> - 2.0.2-1 - Update to 2.0.2, for various changes described at: http://www.postgis.org/news/20121203/ * Tue Nov 13 2012 Devrim GÜNDÜZ <devrim@xxxxxxxxxx> - 2.0.1-1 - Update to 2.0.1, so it works against PostgreSQL 9.2, which also fixes #872710. - Add deps for gdal. - Don't build JDBC portions. I have already disabled it in upstream packaging 8 months ago. -------------------------------------------------------------------------------- References: [ 1 ] Bug #872710 - PostGIS needs to be updated and recompiled for PostgreSQL 9.2 https://bugzilla.redhat.com/show_bug.cgi?id=872710 -------------------------------------------------------------------------------- ================================================================================ privoxy-3.0.21-2.fc18 (FEDORA-2013-4519) Privacy enhancing proxy -------------------------------------------------------------------------------- Update Information: Ad user.filter only if missing. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 3.0.21-2 - Create user.filter if it doesn't exist, BZ 926019. -------------------------------------------------------------------------------- References: [ 1 ] Bug #926019 - fails to start https://bugzilla.redhat.com/show_bug.cgi?id=926019 -------------------------------------------------------------------------------- ================================================================================ python-basemap-1.0.6-2.fc18 (FEDORA-2013-4517) Plots data on map projections (with continental and political boundaries) -------------------------------------------------------------------------------- Update Information: Update GEOS to 3.3.8, and PostGIS to 2.0.3. This also requires player, osm2pgsql, gdal and python-basemap to be rebuilt against new GEOS. This update fixes upgrade problems to f18. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Devrim GÜNDÜZ <devrim@xxxxxxxxxx> - 1.0.6-2 - Rebuild with geos 3.3.8. -------------------------------------------------------------------------------- References: [ 1 ] Bug #872710 - PostGIS needs to be updated and recompiled for PostgreSQL 9.2 https://bugzilla.redhat.com/show_bug.cgi?id=872710 -------------------------------------------------------------------------------- ================================================================================ python-django-flash-1.8-4.fc18 (FEDORA-2013-4542) A Django extension to provide support for Rails-like flash -------------------------------------------------------------------------------- Update Information: A Django extension to provide support for Rails-like flash -------------------------------------------------------------------------------- References: [ 1 ] Bug #844721 - Review request: python-django-flash - A Django extension to provide support for Rails-like flash https://bugzilla.redhat.com/show_bug.cgi?id=844721 [ 2 ] Bug #839880 - please rename django-flash to python-django-flash https://bugzilla.redhat.com/show_bug.cgi?id=839880 -------------------------------------------------------------------------------- ================================================================================ python-glanceclient-0.8.0-2.fc18 (FEDORA-2013-4512) Python API and CLI for OpenStack Glance -------------------------------------------------------------------------------- Update Information: - Add a dependency on pyOpenSSL -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Pádraig Brady <P@xxxxxxxxxxxxxx> - 1:0.8.0-2 - Add a dependency on pyOpenSSL -------------------------------------------------------------------------------- ================================================================================ python-moksha-hub-1.2.0-1.fc18 (FEDORA-2013-4510) Hub components for Moksha -------------------------------------------------------------------------------- Update Information: Latest upstream with cleaning and reorganization. Update to latest upstream. -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 26 2013 Ralph Bean <rbean@xxxxxxxxxx> - 1.2.0-1 - Latest upstream. - Removed websocket tests until this review is complete: https://bugzilla.redhat.com/show_bug.cgi?id=909644 * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #928759 - [abrt] fedmsg-notify-0.5.0-1.fc18: hub.py:42:<module>:ImportError: cannot import name trace https://bugzilla.redhat.com/show_bug.cgi?id=928759 -------------------------------------------------------------------------------- ================================================================================ python-txzmq-0.6.1-5.fc18 (FEDORA-2013-4567) Twisted bindings for ZeroMQ -------------------------------------------------------------------------------- Update Information: Patches to support the latest pyzmq when it arrives. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Ralph Bean <rbean@xxxxxxxxxx> - 0.6.1-5 - Added three patches to support old and new pyzmq. - More explicit file ownership in %{python_sitelib}. - Removed some trailing whitespace. * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.6.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ qpid-proton-0.4-2.fc18 (FEDORA-2013-4524) A high performance, lightweight messaging library -------------------------------------------------------------------------------- Update Information: Moved the C code to the qpid-proton-c subpackage. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Darryl L. Pierce <dpierce@xxxxxxxxxx> - 0.4-2 - Moved all C libraries to the new qpid-proton-c subpackage. -------------------------------------------------------------------------------- ================================================================================ roundcubemail-0.8.6-1.fc18 (FEDORA-2013-4564) Round Cube Webmail is a browser-based multilingual IMAP client -------------------------------------------------------------------------------- Update Information: Fix for local file inclusion via web UI modification of certain config options. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 0.8.6-1 - Latest upstream, fixes local file inclusion via web UI - modification of certain config options. -------------------------------------------------------------------------------- References: [ 1 ] Bug #928836 - roundcubemail: Local file inclusion via web UI modification of certain config options [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=928836 [ 2 ] Bug #928837 - roundcubemail: Local file inclusion via web UI modification of certain config options [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=928837 -------------------------------------------------------------------------------- ================================================================================ rubygem-nokogiri-1.5.9-1.fc18 (FEDORA-2013-4553) An HTML, XML, SAX, and Reader parser -------------------------------------------------------------------------------- Update Information: New version 1.5.9 is released. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1.5.9-1 - 1.5.9 * Tue Mar 26 2013 Vít Ondruch <vondruch@xxxxxxxxxx> - 1.5.6-3 - Use %{gem_extdir_mri} instead of %{gem_extdir}. * Sat Feb 23 2013 Vít Ondruch <vondruch@xxxxxxxxxx> - 1.5.6-2 - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0 * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.5.6-1.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ sip-4.14.5-1.fc18 (FEDORA-2013-4559) SIP - Python/C++ Bindings Generator -------------------------------------------------------------------------------- Update Information: new bugfix release, fixes building newer qgis. -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 26 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.14.5-1 - sip-4.14.5 (#928340) -------------------------------------------------------------------------------- References: [ 1 ] Bug #928340 - Update sip to 4.14.5 https://bugzilla.redhat.com/show_bug.cgi?id=928340 -------------------------------------------------------------------------------- ================================================================================ smem-1.3-1.fc18 (FEDORA-2013-4520) Report application memory usage in a meaningful way -------------------------------------------------------------------------------- Update Information: Update to 1.3 release (minor bugfixes) -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Matthew Miller <mattdm@xxxxxxxxxx> - 1.3-1 - update to 1.3 (small bugfixes) - resolves bz #892223 (valueerror with smem -u) - resolves bz #919463 (indexerror with smem --pie) - fix source file location -------------------------------------------------------------------------------- References: [ 1 ] Bug #892223 - [abrt] smem-1.2-1.fc18: smem:153:pidmaps:ValueError: need more than 1 value to unpack https://bugzilla.redhat.com/show_bug.cgi?id=892223 [ 2 ] Bug #919463 - [abrt] smem-1.2-1.fc18: smem:542:showpie:IndexError: list index out of range https://bugzilla.redhat.com/show_bug.cgi?id=919463 [ 3 ] Bug #928730 - smem-1.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=928730 -------------------------------------------------------------------------------- ================================================================================ sugar-browse-149.1-1.fc18 (FEDORA-2013-4544) Browse activity for Sugar -------------------------------------------------------------------------------- Update Information: Stable bugfix release -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 149.1-1 - New 149.1 release * Fri Feb 15 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 149-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ sugar-paint-57-1.fc18 (FEDORA-2013-4554) Paint activity for Sugar -------------------------------------------------------------------------------- Update Information: Stable bugfix release -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 57-1 - Release 57 * Fri Feb 15 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 55-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ system-config-printer-1.3.13-1.fc18 (FEDORA-2013-4511) A printer administration tool -------------------------------------------------------------------------------- Update Information: This update fixes several bugs that could lead to tracebacks and ABRT reports. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Tim Waugh <twaugh@xxxxxxxxxx> 1.3.13-1 - 1.3.13. * Tue Mar 19 2013 Tim Waugh <twaugh@xxxxxxxxxx> 1.3.12-9 - The libs sub-package is now noarch (bug #921514). -------------------------------------------------------------------------------- References: [ 1 ] Bug #859760 - [abrt] system-config-printer-libs-1.3.9-1.fc17: jobviewer.py:949:update_job:IOError https://bugzilla.redhat.com/show_bug.cgi?id=859760 [ 2 ] Bug #862381 - [abrt] system-config-printer-1.3.8-4.fc16: cupspk.py:146:_call_with_pk_and_fallback:RuntimeError: Printer already in class https://bugzilla.redhat.com/show_bug.cgi?id=862381 [ 3 ] Bug #872227 - [abrt] system-config-printer-1.3.9-1.fc17: jobviewer.py:2259:_set_job_status_icon:GError: Icon 'gtk-media-pause' not present in theme https://bugzilla.redhat.com/show_bug.cgi?id=872227 [ 4 ] Bug #890153 - [abrt] system-config-printer-1.3.9-1.fc17: system-config-printer.py:1537:delete_selected_printer_queues:ValueError: invalid tree path https://bugzilla.redhat.com/show_bug.cgi?id=890153 [ 5 ] Bug #905618 - [abrt] system-config-printer-libs-1.3.9-1.fc17: jobviewer.py:949:update_job:CancelledError https://bugzilla.redhat.com/show_bug.cgi?id=905618 -------------------------------------------------------------------------------- ================================================================================ texlive-2012-20.20130321_r29448.fc18 (FEDORA-2013-4523) TeX formatting system -------------------------------------------------------------------------------- Update Information: Bugfix update -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Jindrich Novy <novyjindrich@xxxxxxxxx> - 2012-20-20130321 - bring chkweb back to life - fix context script (#924918) - prefer scripts installed from sources than from CTAN - BR: ghostscript-devel because of dvisvgm (#924662) * Tue Mar 19 2013 Jindrich Novy <novyjindrich@xxxxxxxxx> - 2012-19-20130318 - fix wrapper for context, remove chkweb man page (#910952) * Mon Mar 11 2013 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 2012-18-20130310 - Remove %config from %{_sysconfdir}/rpm/macros.* (https://fedorahosted.org/fpc/ticket/259). -------------------------------------------------------------------------------- References: [ 1 ] Bug #924918 - texlive has a broken /usr/bin/context "wrapper" script https://bugzilla.redhat.com/show_bug.cgi?id=924918 [ 2 ] Bug #924662 - please build texlive with option --with-system-libgs https://bugzilla.redhat.com/show_bug.cgi?id=924662 -------------------------------------------------------------------------------- ================================================================================ tzdata-2013b-2.fc18 (FEDORA-2013-4543) Timezone data -------------------------------------------------------------------------------- Update Information: - Palestine starts Daylight Saving Time on March 29, 2013 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Petr Machata <pmachata@xxxxxxxxxx> - 2013b-2 - Palestine starts Daylight Saving Time on March 29, 2013 (tzdata-2013b-gaza.patch) -------------------------------------------------------------------------------- ================================================================================ udisks2-2.0.1-2.fc18 (FEDORA-2013-4568) Disk Manager -------------------------------------------------------------------------------- Update Information: This update fixes identification of Firewire drives. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Tomas Bzatek <tbzatek@xxxxxxxxxx> - 2.0.1-2.fc18 - Fix firewire drives identification (#909010) -------------------------------------------------------------------------------- References: [ 1 ] Bug #909010 - Cannot mount external firewire hard drive or usb thumb drive as normal user, root required https://bugzilla.redhat.com/show_bug.cgi?id=909010 -------------------------------------------------------------------------------- ================================================================================ valyriatear-0.5.0-4.fc18 (FEDORA-2013-4558) Valyria Tear is a free 2D J-RPG based on the Hero of Allacrost engine -------------------------------------------------------------------------------- Update Information: Fixed a crash in the inventory window -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2013 Erik Schilling <ablu.erikschilling@xxxxxxxxxxxxxx> 0.5.0-4 - Fixed serious crash in the inventory (redhat bug: #928608) -------------------------------------------------------------------------------- References: [ 1 ] Bug #928608 - The game valyriatear gets segmentation fault when shopping. https://bugzilla.redhat.com/show_bug.cgi?id=928608 -------------------------------------------------------------------------------- ================================================================================ xorg-x11-drv-openchrome-0.3.2-1.fc18 (FEDORA-2013-4546) Xorg X11 openchrome video driver -------------------------------------------------------------------------------- Update Information: Update to latest upstream release. For details, see http://cgit.freedesktop.org/openchrome/xf86-video-openchrome/tree/NEWS?id=release_0_3_2 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 27 2013 Xavier Bachelot <xavier@xxxxxxxxxxxx> - 0.3.2-1 - Update to 0.3.2. - Remove old --enable-dri configure switch. - Change Source0 URL to fd.o. * Thu Mar 7 2013 Peter Hutterer <peter.hutterer@xxxxxxxxxx> - 0.3.1-5 - ABI rebuild * Fri Feb 15 2013 Peter Hutterer <peter.hutterer@xxxxxxxxxx> - 0.3.1-4 - ABI rebuild * Fri Feb 15 2013 Peter Hutterer <peter.hutterer@xxxxxxxxxx> - 0.3.1-3 - ABI rebuild * Thu Jan 10 2013 Adam Jackson <ajax@xxxxxxxxxx> - 0.3.1-2 - ABI rebuild -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
