The following Fedora 18 Security updates need testing: Age URL 107 https://admin.fedoraproject.org/updates/FEDORA-2013-0416/fedora-business-cards-1-0.1.beta1.fc18 76 https://admin.fedoraproject.org/updates/FEDORA-2013-2131/rubygem-rdoc-3.12-6.fc18 72 https://admin.fedoraproject.org/updates/FEDORA-2013-2306/rubygem-rack-1.4.0-5.fc18 40 https://admin.fedoraproject.org/updates/FEDORA-2013-3935/puppet-3.1.1-1.fc18 34 https://admin.fedoraproject.org/updates/FEDORA-2013-4243/stunnel-4.55-1.fc18 26 https://admin.fedoraproject.org/updates/FEDORA-2013-4589/tomcat6-6.0.36-2.fc18 21 https://admin.fedoraproject.org/updates/FEDORA-2013-4807/haproxy-1.4.23-1.fc18 21 https://admin.fedoraproject.org/updates/FEDORA-2013-4823/microcode_ctl-2.0-3.fc18 14 https://admin.fedoraproject.org/updates/FEDORA-2013-5472/php-geshi-1.0.8.11-3.fc18 13 https://admin.fedoraproject.org/updates/FEDORA-2013-5548/plexus-archiver-2.3-1.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2-1.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-6114/php-twig-Twig-1.12.3-1.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-6171/mediawiki-1.19.5-1.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-6279/pdns-recursor-3.5-2.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-6417/owncloud-4.5.10-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-6537/kernel-3.8.8-203.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-6534/telepathy-idle-0.1.15-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6656/gogoc-1.2-24.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6641/xen-4.2.2-1.fc18 The following Fedora 18 Critical Path updates have yet to be approved: Age URL 193 https://admin.fedoraproject.org/updates/FEDORA-2012-16107/xorg-x11-drv-qxl-0.1.0-1.fc18 191 https://admin.fedoraproject.org/updates/FEDORA-2012-16207/thunderbird-lightning-1.8-1.fc18,thunderbird-16.0.1-2.fc18 75 https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5.fc18 51 https://admin.fedoraproject.org/updates/FEDORA-2013-3458/iproute-3.6.0-7.fc18,iptables-1.4.18-1.fc18 14 https://admin.fedoraproject.org/updates/FEDORA-2013-5350/abrt-2.1.3-2.fc18,libreport-2.1.3-1.fc18 13 https://admin.fedoraproject.org/updates/FEDORA-2013-5562/gdb-7.5.1-38.fc18 10 https://admin.fedoraproject.org/updates/FEDORA-2013-5758/openldap-2.4.35-3.fc18 9 https://admin.fedoraproject.org/updates/FEDORA-2013-5824/libwacom-0.7.1-1.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2013-6016/krb5-1.10.3-16.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2013-6024/parted-3.1-12.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-6207/sendmail-8.14.7-1.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-6209/ibus-1.5.2-2.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-6297/gcr-3.6.2-4.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-6537/kernel-3.8.8-203.fc18 The following builds have been pushed to Fedora 18 updates-testing amftools-0.0-2.20121220svn32.fc18 cmake-2.8.10.2-5.fc18 compiz-0.8.8-16.fc18 compiz-plugins-extra-0.8.8-9.fc18 compiz-plugins-main-0.8.8-8.fc18 compiz-plugins-unsupported-0.8.8-7.fc18 cura-13.03-1.fc18 drupal7-feeds-2.0-0.1.alpha8.fc18 eclipse-pydev-2.7.3-2.fc18 emerald-0.8.8-6.fc18 fetchmail-6.3.22-2.fc18 ginfo-1.0.1-1.fc18 gnucash-2.4.13-1.fc18 gogoc-1.2-24.fc18 libcompizconfig-0.8.8-7.fc18 libdxfrw-0.5.7-2.fc18 libuv-0.10.5-1.fc18 mirall-1.2.5-1.fc18 nodejs-0.10.5-1.fc18 nodejs-tap-0.4.1-2.fc18 olpc-utils-4.0.2-1.fc18 openscap-0.9.6-1.fc18 openstack-utils-2013.1-7.fc18 owncloud-csync-0.70.7-1.fc18 pcsc-cyberjack-3.99.5final.SP03-12.fc18 python-pymongo-2.5-4.fc18 quodlibet-2.5.1-1.fc18 spacefm-0.8.7-3.fc18 viewvc-1.1.20-1.fc18 xen-4.2.2-1.fc18 Details about builds: ================================================================================ amftools-0.0-2.20121220svn32.fc18 (FEDORA-2013-6627) AMF file library -------------------------------------------------------------------------------- Update Information: AMF file library -------------------------------------------------------------------------------- References: [ 1 ] Bug #907032 - Review Request: amftools - AMF file library https://bugzilla.redhat.com/show_bug.cgi?id=907032 -------------------------------------------------------------------------------- ================================================================================ cmake-2.8.10.2-5.fc18 (FEDORA-2013-6649) Cross-platform make system -------------------------------------------------------------------------------- Update Information: - Add patch from upstream to fix UsrMove handling (bug #917407) - Drop %config from rpm macros - Define FCFLAGS in cmake macro - Add patch to use ninja-build (bug #886184) -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 13 2013 Orion Poplawski <orion@xxxxxxxxxxxxx> - 2.8.10.2-5 - Add patch from upstream to fix UsrMove handling (bug #917407) - Drop %config from rpm macros - Define FCFLAGS in cmake macro * Fri Feb 8 2013 Orion Poplawski <orion@xxxxxxxxxxxxx> - 2.8.10.2-4 - Add patch to use ninja-build (bug #886184) -------------------------------------------------------------------------------- References: [ 1 ] Bug #917407 - cmake EXPORT generates relative paths which break under UsrMove https://bugzilla.redhat.com/show_bug.cgi?id=917407 [ 2 ] Bug #886184 - cmake should be patched to look for ninja-build as the ninjaCmd https://bugzilla.redhat.com/show_bug.cgi?id=886184 -------------------------------------------------------------------------------- ================================================================================ compiz-0.8.8-16.fc18 (FEDORA-2013-6647) OpenGL window and compositing manager -------------------------------------------------------------------------------- Update Information: This update do following things - enable gtk-windows-decorator based on marco (mate-window-manager) - using libmatewnck for gtk-windows-decorator - remove dbus usage - remove glib usage - add start scripts for gtk-windows-decorator - update start scripts for emerald -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1:0.8.8-16 - enable gtk-windows-decorator based on marco (mate-window-manager) - add compiz_disable_gdk_gtk_disable_deprecated patch - remove dbus - remove glib - remove mateconf - remove kde - remove keybindings - add start scripts for gtk-windows-decorator - update start scripts for emerald - add ldconfig scriptlet for mate subpackage - using libmatewnck instead of libwnck -------------------------------------------------------------------------------- References: [ 1 ] Bug #920411 - [abrt] compiz-0.8.8-17.fc17: Process /usr/bin/compiz was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=920411 -------------------------------------------------------------------------------- ================================================================================ compiz-plugins-extra-0.8.8-9.fc18 (FEDORA-2013-6648) Additional Compiz Fusion plugins for Compiz -------------------------------------------------------------------------------- Update Information: This update improve following things. - moved gnome magnifier image from Mate to Default folder - complete removal of mate-conf/gconf ussage -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1:0.8.8-9 - rework mate patch - remove gconf usage - switch to libnotify -------------------------------------------------------------------------------- ================================================================================ compiz-plugins-main-0.8.8-8.fc18 (FEDORA-2013-6639) Collection of Compiz Fusion plugins for Compiz -------------------------------------------------------------------------------- Update Information: This update improve following things. - moved gnome magnifier image from Mate to Default folder - complete removal of mate-conf/gconf ussage -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1:0.8.8-8 - remove gconf usage - move gnome magnifier image from Mate to Default folder - rework mate patch - add BR libtool -------------------------------------------------------------------------------- ================================================================================ compiz-plugins-unsupported-0.8.8-7.fc18 (FEDORA-2013-6634) Additional plugins for Compiz -------------------------------------------------------------------------------- Update Information: This update improve following things. - moved gnome magnifier image from Mate to Default folder - complete removal of mate-conf/gconf ussage -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1:0.8.8-7 - rework mate patch - remove gconf usage -------------------------------------------------------------------------------- ================================================================================ cura-13.03-1.fc18 (FEDORA-2013-6629) 3D printer control software -------------------------------------------------------------------------------- Update Information: 3D printer control software -------------------------------------------------------------------------------- References: [ 1 ] Bug #901659 - Review Request: cura - 3D printer control software https://bugzilla.redhat.com/show_bug.cgi?id=901659 -------------------------------------------------------------------------------- ================================================================================ drupal7-feeds-2.0-0.1.alpha8.fc18 (FEDORA-2013-6633) An import and aggregation framework for Drupal -------------------------------------------------------------------------------- Update Information: Update to upstream alpha8 release for bug fixes, see http://drupal.org/node/1978108 for list of fixed bugs -------------------------------------------------------------------------------- References: [ 1 ] Bug #955516 - drupal7-feeds-2.0-alpha8 is available https://bugzilla.redhat.com/show_bug.cgi?id=955516 -------------------------------------------------------------------------------- ================================================================================ eclipse-pydev-2.7.3-2.fc18 (FEDORA-2013-6640) Eclipse Python development plug-in -------------------------------------------------------------------------------- Update Information: Make org.junit an /optional/ requirement for org.eclipse.pydev.debug. -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Sami Wagiaalla <swagiaal@xxxxxxxxxx> 1:2.7.3-2 - Make junit an optional requirement for org.eclipse.pydev.debug - Use 'find' to find and link jars so that we don't have to specify the bundle version. -------------------------------------------------------------------------------- References: [ 1 ] Bug #953048 - no run configurations after pydev update https://bugzilla.redhat.com/show_bug.cgi?id=953048 -------------------------------------------------------------------------------- ================================================================================ emerald-0.8.8-6.fc18 (FEDORA-2013-6661) Themeable window decorator and compositing manager for Compiz -------------------------------------------------------------------------------- Update Information: This update has some improvements in the spec file -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1:0.8.8-6 - rework mate-patch -------------------------------------------------------------------------------- ================================================================================ fetchmail-6.3.22-2.fc18 (FEDORA-2013-6632) A remote mail retrieval and forwarding utility -------------------------------------------------------------------------------- Update Information: Critical bug fix: fetchmail loses last line of message if the non-default "mimedecode" option is enabled and if that line is not properly terminated. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Vitezslav Crhonek <vcrhonek@xxxxxxxxxx> - 6.3.22-2 - Fix fetchmail loses last line of message if the non-default "mimedecode" option is enabled and if that line is not properly terminated Resolves: #955814 -------------------------------------------------------------------------------- References: [ 1 ] Bug #955814 - data loss: fetchmail versions before and excluding 6.3.26 lose last line of message if the non-default "mimedecode" option is enabled and if that line is not properly terminated https://bugzilla.redhat.com/show_bug.cgi?id=955814 -------------------------------------------------------------------------------- ================================================================================ ginfo-1.0.1-1.fc18 (FEDORA-2013-6660) A versatile tool for discovering Grid services -------------------------------------------------------------------------------- Update Information: Refactored version enabling general GLUE 2.0 queries -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Laurence Field <laurence.field@xxxxxxx> - 1.0.1-1 - Refactored version enabling general GLUE 2.0 queries -------------------------------------------------------------------------------- ================================================================================ gnucash-2.4.13-1.fc18 (FEDORA-2013-6628) Finance management application -------------------------------------------------------------------------------- Update Information: This updates GnuCash to the latest upstream bugfix release, 2.4.13. For notes on what is changed there, see the upstream release notes at: http://www.gnucash.org/#n-130331-2.4.12.news http://www.gnucash.org/#n-130421-2.4.13.news -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 23 2013 Bill Nottingham <notting@xxxxxxxxxx> - 2.4.13-1 - update to 2.4.13 * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.4.11-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ gogoc-1.2-24.fc18 (FEDORA-2013-6656) IPv6 TSP client for gogo6 -------------------------------------------------------------------------------- Update Information: Fix PIE compilation -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Juan Orti Alcaine <j.orti.alcaine@xxxxxxxxx> - 1.2-24 - Fix PIE compilation. Closes bug #955282 -------------------------------------------------------------------------------- References: [ 1 ] Bug #955282 - gogoc package should be built with PIE flags https://bugzilla.redhat.com/show_bug.cgi?id=955282 -------------------------------------------------------------------------------- ================================================================================ libcompizconfig-0.8.8-7.fc18 (FEDORA-2013-6652) Configuration back end for compiz -------------------------------------------------------------------------------- Update Information: This update has some improvements in the spec file -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1:0.8.8-7 - rework mate patch -------------------------------------------------------------------------------- ================================================================================ libdxfrw-0.5.7-2.fc18 (FEDORA-2013-6665) Library to read/write DXF files -------------------------------------------------------------------------------- Update Information: New package: libdxfrw - Library to read/write DXF files -------------------------------------------------------------------------------- References: [ 1 ] Bug #950172 - Review Request:libdxfrw - Library to read/write DXF files https://bugzilla.redhat.com/show_bug.cgi?id=950172 -------------------------------------------------------------------------------- ================================================================================ libuv-0.10.5-1.fc18 (FEDORA-2013-6657) Platform layer for node.js -------------------------------------------------------------------------------- Update Information: 2013.04.23, Version 0.10.5 (Stable) * http: Don't try to destroy nonexistent sockets (isaacs) * crypto: LazyTransform on properties, not methods (isaacs) * assert: put info in err.message, not err.name (Ryan Doenges) * dgram: fix no address bind() (Ben Noordhuis) * handle_wrap: fix NULL pointer dereference (Ben Noordhuis) * os: fix unlikely buffer overflow in os.type() (Ben Noordhuis) * stream: Fix unshift() race conditions (isaacs) -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 1:0.10.5-1 - new upstream release 0.10.5 -------------------------------------------------------------------------------- ================================================================================ mirall-1.2.5-1.fc18 (FEDORA-2013-6663) The ownCloud Client -------------------------------------------------------------------------------- Update Information: Update to latest upstream version -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 23 2013 <jmarrero@xxxxxxxxxxxxxxxxx> 1.2.5-1 - Update to upstream version 1.2.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #953892 - [abrt] owncloud-client-1.2.1-2.fc18: memcpy: Process /usr/bin/owncloud was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=953892 -------------------------------------------------------------------------------- ================================================================================ nodejs-0.10.5-1.fc18 (FEDORA-2013-6657) JavaScript runtime -------------------------------------------------------------------------------- Update Information: 2013.04.23, Version 0.10.5 (Stable) * http: Don't try to destroy nonexistent sockets (isaacs) * crypto: LazyTransform on properties, not methods (isaacs) * assert: put info in err.message, not err.name (Ryan Doenges) * dgram: fix no address bind() (Ben Noordhuis) * handle_wrap: fix NULL pointer dereference (Ben Noordhuis) * os: fix unlikely buffer overflow in os.type() (Ben Noordhuis) * stream: Fix unshift() race conditions (isaacs) -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 0.10.5-1 - new upstream release 0.10.5 http://blog.nodejs.org/2013/04/23/node-v0-10-5-stable/ -------------------------------------------------------------------------------- ================================================================================ nodejs-tap-0.4.1-2.fc18 (FEDORA-2013-6650) A Test Anything Protocol library -------------------------------------------------------------------------------- Update Information: This update introduces the Node.js implementation of the Test Anything Protocol (TAP) to Fedora 18. -------------------------------------------------------------------------------- References: [ 1 ] Bug #894724 - Review Request: nodejs-tap - A Test Anything Protocol library https://bugzilla.redhat.com/show_bug.cgi?id=894724 -------------------------------------------------------------------------------- ================================================================================ olpc-utils-4.0.2-1.fc18 (FEDORA-2013-6659) OLPC utilities -------------------------------------------------------------------------------- Update Information: Add vmeta/ion support for XO-4. -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Daniel Drake <dsd@xxxxxxxxxx> - 4.0.2-2 - ion/vmeta support for XO-4 -------------------------------------------------------------------------------- ================================================================================ openscap-0.9.6-1.fc18 (FEDORA-2013-6651) Set of open source libraries enabling integration of the SCAP line of standards -------------------------------------------------------------------------------- Update Information: This is update to latest openscap-0.9.6 release, see http://open-scap.org/page/Download -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Petr Lautrbach <plautrba@xxxxxxxxxx> 0.9.6-1 - upgrade * Wed Mar 20 2013 Petr Lautrbach <plautrba@xxxxxxxxxx> 0.9.5-1 - upgrade -------------------------------------------------------------------------------- ================================================================================ openstack-utils-2013.1-7.fc18 (FEDORA-2013-6654) Helper utilities for OpenStack services -------------------------------------------------------------------------------- Update Information: - Fix detection of nova installation in openstack-status - Support systems with SELinux disabled in openstack-demo-install -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Pádraig Brady <P@xxxxxxxxxxxxxx> 2013.1-7 - Fix detection of nova installation in openstack-status * Tue Apr 9 2013 Pádraig Brady <P@xxxxxxxxxxxxxx> 2013.1-6 - Grizzly keystone sample credentials adjustments - Support systems with SELinux disabled - Improve handling of users in openstack-db --drop - Fix handling of cgroup service - Fix handling of passwords with mariadb * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2013.1-1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ owncloud-csync-0.70.7-1.fc18 (FEDORA-2013-6663) A user level bidirectional client only file synchronizer -------------------------------------------------------------------------------- Update Information: Update to latest upstream version -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 23 2013 <jmarrero@xxxxxxxxxxxxxxxxx> 0.70.7-1 - Update to 0.70.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #953892 - [abrt] owncloud-client-1.2.1-2.fc18: memcpy: Process /usr/bin/owncloud was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=953892 -------------------------------------------------------------------------------- ================================================================================ pcsc-cyberjack-3.99.5final.SP03-12.fc18 (FEDORA-2013-6668) PC/SC driver for REINER SCT cyberjack USB chip card reader -------------------------------------------------------------------------------- Update Information: removed %{_libdir}/cyberjack/pcscd_init.diff -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Patrick C. F. Ernzer <pcsc-cyberjack.spec@xxxxxxxx> 3.99.5final.SP03-12 - removed /usr/lib64/cyberjack/pcscd_init.diff (#956604) -------------------------------------------------------------------------------- References: [ 1 ] Bug #956604 - pcsc-cyberjack: strange files in /usr/lib64/cyberjack https://bugzilla.redhat.com/show_bug.cgi?id=956604 -------------------------------------------------------------------------------- ================================================================================ python-pymongo-2.5-4.fc18 (FEDORA-2013-6630) Python driver for MongoDB -------------------------------------------------------------------------------- Update Information: Update to pymongo 2.5 -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Andrew McNabb <amcnabb@xxxxxxxxxxx> - 2.5-4 - Fix the test running procedure * Wed Apr 24 2013 Andrew McNabb <amcnabb@xxxxxxxxxxx> - 2.5-3 - Exclude tests in pymongo 2.5 that depend on MongoDB * Mon Apr 22 2013 Andrew McNabb <amcnabb@xxxxxxxxxxx> - 2.5-1 - Update to PyMongo 2.5 (bug #954152) * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.3-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #954152 - pymongo 2.5 available upstream https://bugzilla.redhat.com/show_bug.cgi?id=954152 -------------------------------------------------------------------------------- ================================================================================ quodlibet-2.5.1-1.fc18 (FEDORA-2013-6662) A music management program -------------------------------------------------------------------------------- Update Information: - update to 2.5.1 - fixes various bugs in fedora - http://code.google.com/p/quodlibet/source/browse/quodlibet/NEWS?name=quodlibet-2.5 -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Johannes Lips <hannes@xxxxxxxxxxxxxxxxx> - 2.5.1-1 - update to recent upstream release 2.5.1 * Sat Feb 23 2013 Toshio Kuratomi <toshio@xxxxxxxxxxxxxxxxx> - 2.5-4 - Remove --vendor from desktop-file-install for F19 https://fedorahosted.org/fesco/ticket/107 * Sat Feb 23 2013 Johannes Lips <hannes@xxxxxxxxxxxxxxxxx> - 2.5-3 - add patch to fix bug #891776 -------------------------------------------------------------------------------- References: [ 1 ] Bug #923264 - [abrt] quodlibet-2.5-2.fc18: _id3.py:393:get_format_cover:IOError: [Errno 28] No space left on device https://bugzilla.redhat.com/show_bug.cgi?id=923264 [ 2 ] Bug #956023 - quodlibet-2.5.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=956023 [ 3 ] Bug #904770 - [abrt] quodlibet-2.5-1.fc18: brainz.py:378:__update_result:AttributeError: 'NoneType' object has no attribute 'set_sensitive' https://bugzilla.redhat.com/show_bug.cgi?id=904770 -------------------------------------------------------------------------------- ================================================================================ spacefm-0.8.7-3.fc18 (FEDORA-2013-6646) Multi-panel tabbed file and desktop manager -------------------------------------------------------------------------------- Update Information: This is a new package. -------------------------------------------------------------------------------- ================================================================================ viewvc-1.1.20-1.fc18 (FEDORA-2013-6446) Browser interface for CVS and SVN version control repositories -------------------------------------------------------------------------------- Update Information: Version 1.1.20 (released 24-Apr-2013) * fix tab-to-space handling regression in markup view * fix regression in root lookup handling (issue #526) Version 1.1.19 (released 22-Apr-2013) * improve root lookup performance (issue #523) * new 'max_filesize_kbytes' config option and handling (issue #524) * tarball generation improvements: - preserve Subversion symlinks in generated tarballs (issue #487) - reduce memory usage of tarball generation logic - fix double compression of generated tarballs (issue #525) * file content handling improvements: - expanded support for encoding detection and transcoding (issue #11) - fix tab-to-space conversion bugs in markup, annotate, and diff views - fix handling of trailing whitespace in diff view * add support for timestamp display in ISO8601 format (issue #46) -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Bojan Smojver <bojan@xxxxxxxxxxxxx> - 1.1.20-1 - bump up to 1.1.20 * Tue Apr 23 2013 Bojan Smojver <bojan@xxxxxxxxxxxxx> - 1.1.19-1 - bump up to 1.1.19 -------------------------------------------------------------------------------- ================================================================================ xen-4.2.2-1.fc18 (FEDORA-2013-6641) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information: update to xen-4.2.2 which includes security fixes, make xendomains work better with xl -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.2.2-1 - update to xen-4.2.2 includes fixes for [XSA-48, CVE-2013-1922] (Fedora doesn't use the affected code) passed through IRQs or PCI devices might allow denial of service attack [XSA-46, CVE-2013-1919] (#953568) SYSENTER in 32-bit PV guests on 64-bit xen can crash hypervisor [XSA-44, CVE-2013-1917] (#953569) - remove patches that are included in 4.2.2 - look for libxl-save-helper in the right place - fix xl list -l output when built with yajl2 - allow xendomains to work with xl saved images -------------------------------------------------------------------------------- References: [ 1 ] Bug #950686 - CVE-2013-1919 kernel: xen: Several access permission issues with IRQs for unprivileged guests https://bugzilla.redhat.com/show_bug.cgi?id=950686 [ 2 ] Bug #950668 - CVE-2013-1917 kernel: xen: Xen PV DoS vulnerability with SYSENTER https://bugzilla.redhat.com/show_bug.cgi?id=950668 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test