The following Fedora 18 Security updates need testing: Age URL 108 https://admin.fedoraproject.org/updates/FEDORA-2013-0416/fedora-business-cards-1-0.1.beta1.fc18 77 https://admin.fedoraproject.org/updates/FEDORA-2013-2131/rubygem-rdoc-3.12-6.fc18 73 https://admin.fedoraproject.org/updates/FEDORA-2013-2306/rubygem-rack-1.4.0-5.fc18 41 https://admin.fedoraproject.org/updates/FEDORA-2013-3935/puppet-3.1.1-1.fc18 35 https://admin.fedoraproject.org/updates/FEDORA-2013-4243/stunnel-4.55-1.fc18 27 https://admin.fedoraproject.org/updates/FEDORA-2013-4589/tomcat6-6.0.36-2.fc18 22 https://admin.fedoraproject.org/updates/FEDORA-2013-4823/microcode_ctl-2.0-3.fc18 15 https://admin.fedoraproject.org/updates/FEDORA-2013-5472/php-geshi-1.0.8.11-3.fc18 14 https://admin.fedoraproject.org/updates/FEDORA-2013-5548/plexus-archiver-2.3-1.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2-1.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2013-6114/php-twig-Twig-1.12.3-1.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-6171/mediawiki-1.19.5-1.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-6279/pdns-recursor-3.5-2.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2013-6417/owncloud-4.5.10-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-6534/telepathy-idle-0.1.15-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6656/gogoc-1.2-24.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6641/xen-4.2.2-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6721/openstack-keystone-2012.2.4-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6762/python-pip-1.3.1-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6766/curl-7.27.0-9.fc18 The following Fedora 18 Critical Path updates have yet to be approved: Age URL 194 https://admin.fedoraproject.org/updates/FEDORA-2012-16107/xorg-x11-drv-qxl-0.1.0-1.fc18 192 https://admin.fedoraproject.org/updates/FEDORA-2012-16207/thunderbird-lightning-1.8-1.fc18,thunderbird-16.0.1-2.fc18 76 https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5.fc18 52 https://admin.fedoraproject.org/updates/FEDORA-2013-3458/iproute-3.6.0-7.fc18,iptables-1.4.18-1.fc18 15 https://admin.fedoraproject.org/updates/FEDORA-2013-5350/abrt-2.1.3-2.fc18,libreport-2.1.3-1.fc18 11 https://admin.fedoraproject.org/updates/FEDORA-2013-5758/openldap-2.4.35-3.fc18 9 https://admin.fedoraproject.org/updates/FEDORA-2013-5824/libwacom-0.7.1-1.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-6016/krb5-1.10.3-16.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-6207/sendmail-8.14.7-1.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-6209/ibus-1.5.2-2.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-6297/gcr-3.6.2-4.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6766/curl-7.27.0-9.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6746/kde-workspace-4.10.2-8.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6728/kernel-3.8.9-200.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6769/selinux-policy-3.11.1-92.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6742/dmidecode-2.12-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6761/xorg-x11-drv-synaptics-1.6.3-3.fc18 The following builds have been pushed to Fedora 18 updates-testing R-abind-1.4.0-6.fc18 R-multcomp-1.2.17-1.fc18 arc-gui-clients-0.4.3-2.fc18 bibletime-2.9.1-6.fc18 coccinelle-1.0.0-0.rc17.1.fc18 curl-7.27.0-9.fc18 dmidecode-2.12-2.fc18 drupal6-messaging-2.4-1.fc18 drupal6-notifications-2.3-1.fc18 drupal6-stringoverrides-1.8-1.fc18 drupal6-vertical_tabs-1.0-0.1.rc2.fc18 drupal6-views_customfield-1.0-1.fc18 drupal6-views_datasource-1.0-0.1.beta2.fc18 drupal6-vote_up_down-3.2-1.fc18 drupal6-wikitools-1.3-1.fc18 groonga-3.0.3-1.fc18 gtkspellmm30-3.0.1-1.fc18 ibus-m17n-1.3.4-8.fc18 ike-2.2.0-4.fc18 kde-workspace-4.10.2-8.fc18 kdevelop-4.5.0-1.fc18 kdevelop-php-1.5.0-1.fc18 kdevplatform-1.5.0-1.fc18 kernel-3.8.9-200.fc18 lfsc-0.20120321-3.fc18 lohit-oriya-fonts-2.5.3-3.fc18 open-vm-tools-9.2.3-1.fc18 openstack-keystone-2012.2.4-2.fc18 python-pip-1.3.1-1.fc18 python-simplevisor-0.8-1.fc18 python-tw2-jqplugins-jqplot-2.0.3-1.fc18 python-tw2-slideymenu-2.2-1.fc18 selinux-policy-3.11.1-92.fc18 springlobby-0.169-3.fc18 tomoe-gtk-0.6.0-18.fc18 xorg-x11-drv-synaptics-1.6.3-3.fc18 yawn-0-0.14.20130426svn620.fc18 zanata-api-2.2.0-6.fc18 Details about builds: ================================================================================ R-abind-1.4.0-6.fc18 (FEDORA-2013-6759) Combine multi-dimensional arrays -------------------------------------------------------------------------------- Update Information: Drop unnecessary scriptlets. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.4.0-6 - drop unnecessary scriptlets * Thu Apr 11 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.4.0-5 - rebuild for R3 * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.4.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #956835 - R-make-search-index.sh needs to be updated for version 3 https://bugzilla.redhat.com/show_bug.cgi?id=956835 -------------------------------------------------------------------------------- ================================================================================ R-multcomp-1.2.17-1.fc18 (FEDORA-2013-6759) Simultaneous inference for general linear hypotheses R Package -------------------------------------------------------------------------------- Update Information: Drop unnecessary scriptlets. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 11 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.2.17-1 - update to 1.2-17 * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #956835 - R-make-search-index.sh needs to be updated for version 3 https://bugzilla.redhat.com/show_bug.cgi?id=956835 -------------------------------------------------------------------------------- ================================================================================ arc-gui-clients-0.4.3-2.fc18 (FEDORA-2013-6767) ARC Graphical Clients -------------------------------------------------------------------------------- Update Information: Provides graphical clients to the NorduGrid ARC middleware. -------------------------------------------------------------------------------- References: [ 1 ] Bug #851267 - Review Request: arc-gui-clients - ARC Graphical Clients https://bugzilla.redhat.com/show_bug.cgi?id=851267 -------------------------------------------------------------------------------- ================================================================================ bibletime-2.9.1-6.fc18 (FEDORA-2013-6771) An easy to use Bible study tool -------------------------------------------------------------------------------- Update Information: Omit extraneous dependencies (curl, icu, zlib), and backport fix for proper display on newer qt/qtwebkit releases. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 19 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.9.1-6 - No text visible in main window when using qtwebkit-2.3 (#952390) * Thu Apr 18 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 2.9.1-5 - clean .spec of deprecated tags (Group, %clean, %defattr) - use %cmake macro - drop extraneous explicit sword-related deps (curl, zlib) - bibletime.desktop: don't remove Qt category, patch to pass validation - fix unowned dirs %_datadir/bibletime/docs/{handbook,howto} * Sun Feb 3 2013 Kevin Fenzi <kevin@xxxxxxxxx> - 2.9.1-4 - Rebuild for broken deps in rawhide -------------------------------------------------------------------------------- References: [ 1 ] Bug #952390 - No text visible in main window when using qtwebkit-2.3 https://bugzilla.redhat.com/show_bug.cgi?id=952390 -------------------------------------------------------------------------------- ================================================================================ coccinelle-1.0.0-0.rc17.1.fc18 (FEDORA-2013-6741) Semantic patching for Linux (spatch) -------------------------------------------------------------------------------- Update Information: New upstream version 1.0.0-rc17. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Richard W.M. Jones <rjones@xxxxxxxxxx> - 1.0.0-0.rc17.1 - New upstream version 1.0.0-rc17. * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.0-0.rc14.6.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #957169 - Junk "left" and "right" outputs from spatch https://bugzilla.redhat.com/show_bug.cgi?id=957169 -------------------------------------------------------------------------------- ================================================================================ curl-7.27.0-9.fc18 (FEDORA-2013-6766) A utility for getting files from remote servers (FTP, HTTP, and others) -------------------------------------------------------------------------------- Update Information: - prevent an artificial timeout event due to stale speed-check data (#906031) - show proper host name on failed resolve (#957173) fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944) -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Kamil Dudka <kdudka@xxxxxxxxxx> 7.27.0-9 - prevent an artificial timeout event due to stale speed-check data (#906031) - show proper host name on failed resolve (#957173) -------------------------------------------------------------------------------- References: [ 1 ] Bug #950577 - CVE-2013-1944 curl: Cookie domain suffix match vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=950577 -------------------------------------------------------------------------------- ================================================================================ dmidecode-2.12-2.fc18 (FEDORA-2013-6742) Tool to analyse BIOS DMI data -------------------------------------------------------------------------------- Update Information: minor code fix. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Anton Arapov <anton@xxxxxxxxxx> - 1:2.12-2 - Fixup, so that it actually read SMBIOS 2.8.0 table. * Wed Apr 17 2013 Anton Arapov <anton@xxxxxxxxxx> - 1:2.12-1 - Update to upstream 2.12 release. * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1:2.11-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ drupal6-messaging-2.4-1.fc18 (FEDORA-2013-6756) Messaging Framework to allow message sending in an independent way -------------------------------------------------------------------------------- Update Information: This is a Messaging Framework to allow message sending in a channel independent way. It will provide a common API for message composition and sending while allowing plug-ins for multiple messaging methods. When using this framework, you won't send e-mails to users anymore. You will send them 'messages' and they will decide how they want to get them delivered, that may be by mail, IM, SMS, depending on user's preferences. This package provides the following Drupal modules: * messaging * messaging_debug * messaging_mail * messaging_mime_mail (NOTE: Requires manual install of the mimemail module) * messaging_phpmailer * messaging_privatemsg (NOTE: Requires manual install of the privatemsg module) * messaging_simple * messaging_sms (NOTE: Requires manual install of the smsframework module) * messaging_twitter (NOTE: Requires manual install of the twitter module) * messaging_xmpp (NOTE: Requires manual install of the xmppframework module) -------------------------------------------------------------------------------- References: [ 1 ] Bug #925991 - Review Request: drupal6-messaging - Messaging Framework to allow message sending in an independent way https://bugzilla.redhat.com/show_bug.cgi?id=925991 -------------------------------------------------------------------------------- ================================================================================ drupal6-notifications-2.3-1.fc18 (FEDORA-2013-6748) This is a complete Subscriptions/Notifications Framework -------------------------------------------------------------------------------- Update Information: This is a complete Subscriptions/Notifications Framework aiming at extendability and scalability. It allows any number of plug-ins defining new event types or subscription types or a different user interface. This package provides the following Drupal modules: * notifications * notifications_autosubscribe * notifications_content * notifications_lite * notifications_tags * notifications_ui * notifications_views -------------------------------------------------------------------------------- References: [ 1 ] Bug #925995 - Review Request: drupal6-notifications - This is a complete Subscriptions/Notifications Framework https://bugzilla.redhat.com/show_bug.cgi?id=925995 -------------------------------------------------------------------------------- ================================================================================ drupal6-stringoverrides-1.8-1.fc18 (FEDORA-2013-6755) Provides a quick and easy way of replacing text -------------------------------------------------------------------------------- Update Information: Provides a quick and easy way to replace any text on a site. Features: * Easily replace anything that's passed through t() * Locale support, allowing you to override strings in any language * Ability to import/export *.po files, for easy migration from the Locale module * Note that this is not a replacement to Locale as having thousands of overrides can cause more pain then benefit. Use this only if you need a few easy text changes. This package provides the following Drupal modules: * stringoverrides -------------------------------------------------------------------------------- References: [ 1 ] Bug #925972 - Review Request: drupal6-stringoverrides - Provides a quick and easy way of replacing text https://bugzilla.redhat.com/show_bug.cgi?id=925972 -------------------------------------------------------------------------------- ================================================================================ drupal6-vertical_tabs-1.0-0.1.rc2.fc18 (FEDORA-2013-6753) Provides vertical tabs for supported forms like the node edit page -------------------------------------------------------------------------------- Update Information: Provides vertical tabs like the node add form here: http://drupal.geek.nz/static/node-form/default/summaries2.html This module provides the following features: * Vertical tabifying all node forms * Vertical tabifying the content type forms * Vertical tabifying the block forms * Specialized CSS for Garland, as well as generic CSS for other themes * Color module support when both Garland and color.module are used * Vertical tabbed forms and fieldsets are over-ridable by using your site's settings.php and $conf * When used in combination with Form module allows you to configure vertical tabs on all possible forms This package provides the following Drupal module: * vertical_tabs -------------------------------------------------------------------------------- References: [ 1 ] Bug #925978 - Review Request: drupal6-vertical_tabs - Provides vertical tabs for supported forms like the node edit page https://bugzilla.redhat.com/show_bug.cgi?id=925978 -------------------------------------------------------------------------------- ================================================================================ drupal6-views_customfield-1.0-1.fc18 (FEDORA-2013-6725) Provides a number of custom views fields (rownumber, phpcode, ...) -------------------------------------------------------------------------------- Update Information: This module provides some useful views fields. Available views fields: * Markup: Field that allows usage of custom text and the input filter system. * PHP code: Field that allows usage of custom PHP code (with access to view's database result) * Rownumber: Field containing rownumber (respects pagers). This package provides the following Drupal module: * views_customfield -------------------------------------------------------------------------------- References: [ 1 ] Bug #925979 - Review Request: drupal6-views_customfield - Provides a number of custom views fields (rownumber, phpcode, ...) https://bugzilla.redhat.com/show_bug.cgi?id=925979 -------------------------------------------------------------------------------- ================================================================================ drupal6-views_datasource-1.0-0.1.beta2.fc18 (FEDORA-2013-6736) Plugins for Drupal Views for rendering content in a number formats -------------------------------------------------------------------------------- Update Information: Views Datasource is a set of plugins for Drupal Views for rendering content in a number of shareable, reusable formats based on XML, JSON and XHTML. These formats allow content in a Drupal site to be easily used as data sources for Semantic Web clients and web mash-ups. Views Datasource plugins output content from node lists created in the Drupal Views interface in a variety of formats - XML data documents using schemas like OPML and Atom, RDF data documents using a vocabulary like FOAF, JSON data documents in a format like Exhibit JSON, and XHTML data documents using a microformat like hCard. Views Datasource can be thought of as a userland complement to the work going on in the Services and RDF APIs as a site operator only needs to know Views to be able to create datasources in the different formats. The project consists of 4 Views style plugins (and related row plugins): * views_xml - Output as raw XML, OPML, and Atom; * views_json - Output as Simile/Exhibit JSON, Canonical JSON, JSONP/JSON in script; * views_rdf- Output as FOAF, SIOC, and DOAP; * views_xhtml - Output as hCard, hCalendar, and Geo. This package provides the following Drupal modules: * views_json * views_rdf * views_xhtml * views_xml -------------------------------------------------------------------------------- References: [ 1 ] Bug #925980 - Review Request: drupal6-views_datasource - Plugins for Drupal Views for rendering content in a number formats https://bugzilla.redhat.com/show_bug.cgi?id=925980 -------------------------------------------------------------------------------- ================================================================================ drupal6-vote_up_down-3.2-1.fc18 (FEDORA-2013-6735) Provides a configurable up/down voting widget for other modules -------------------------------------------------------------------------------- Update Information: Allows votes on some drupal entities and provides the base for implementing votes on other entities. Features: * Vote on nodes, comments and taxonomy terms on a node * Interchangeable voting widget themes * Code voting support for your own objects * Make your own widgets using ctools plugins * And more! This package provides the following Drupal modules: * vud * vud_comment * vud_node * vud_term -------------------------------------------------------------------------------- References: [ 1 ] Bug #925982 - Review Request: drupal6-vote_up_down - Provides a configurable up/down voting widget for other modules https://bugzilla.redhat.com/show_bug.cgi?id=925982 -------------------------------------------------------------------------------- ================================================================================ drupal6-wikitools-1.3-1.fc18 (FEDORA-2013-6730) Provides helper functionality to have wiki-like behavior -------------------------------------------------------------------------------- Update Information: The wikitools module provides some settings to get a more wiki-like behavior. It aims to be lightweight; all features are optional, and it provides no database tables of its own. Some of the features of this module are: * Node Creation: Let users create new nodes when they type in a node name which does not exist. * Node Search: Let users search for nodes when they type in a node name which does not exist. * Automatic Redirect: If a title of a moved page is entered, redirect automatically. * Unique Titles: Enforce that titles are unique over all wiki node types * Move Protection: Disallow change of node titles for users without administer nodes permission. * Underscore as Space: Treat underscores as spaces when doing a node-lookup by title. * Dash as Space: Treat dashes as spaces when doing a node-lookup by title. * Custom wiki 404 pages: pick and choose from links to create, links to search, and an inline node add form. The module can be used in conjunction with the flexifilter module (of course), the freelinking module by hijacking freelinking links, or together with the pearwiki filter module for various wiki formats. This package provides the following Drupal module: * wikitools -------------------------------------------------------------------------------- References: [ 1 ] Bug #925984 - Review Request: drupal6-wikitools - Provides helper functionality to have wiki-like behavior https://bugzilla.redhat.com/show_bug.cgi?id=925984 -------------------------------------------------------------------------------- ================================================================================ groonga-3.0.3-1.fc18 (FEDORA-2013-6738) An Embeddable Fulltext Search Engine -------------------------------------------------------------------------------- Update Information: Update to 3.0.3. See changes at http://groonga.org/docs/news.html#release-3-0-3-2013-04-29 -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 29 2013 HAYASHI Kentaro <hayashi@xxxxxxxxxxxxxx> - 3.0.3-1 - new upstream release. - enable the PIE compiler flags. -------------------------------------------------------------------------------- ================================================================================ gtkspellmm30-3.0.1-1.fc18 (FEDORA-2013-6757) On-the-fly spell checking for GtkTextView widgets - C++ bindings -------------------------------------------------------------------------------- Update Information: Provides C++ bindings for GtkSpell3. -------------------------------------------------------------------------------- References: [ 1 ] Bug #919260 - Review Request: gtkspellmm30 - C++ bindings for gtkspell3 https://bugzilla.redhat.com/show_bug.cgi?id=919260 -------------------------------------------------------------------------------- ================================================================================ ibus-m17n-1.3.4-8.fc18 (FEDORA-2013-6733) The M17N engine for IBus platform -------------------------------------------------------------------------------- Update Information: update to the latest upstream master; remove unnecessary patches and drop osk feature -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Daiki Ueno <deno@xxxxxxxxxx> - 1.3.4-8 - Update ibus-m17n-HEAD.patch to the latest upstream master - Remove unnecessary and not upstreamable patches - Use gtk3 always - Fix bug 912592 - ibus-m17n should use default keyboard in most cases * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.3.4-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #912592 - ibus-m17n should use default keyboard in most cases https://bugzilla.redhat.com/show_bug.cgi?id=912592 -------------------------------------------------------------------------------- ================================================================================ ike-2.2.0-4.fc18 (FEDORA-2013-6751) Shrew Soft VPN Client For Linux -------------------------------------------------------------------------------- Update Information: update to latest upstream version (2.2.0) fix systemd .service file -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Marcel Wysocki <maci@xxxxxxxxxx> - 2.2.0-4 - fix bug that occurs when no pid is given at the command line * Wed Apr 24 2013 root - 2.2.0-3 - fix logrotate script * Wed Apr 24 2013 Marcel Wysocki <maci@xxxxxxxxxx> - 2.2.0-2 - fix .service file * Wed Apr 24 2013 Marcel Wysocki <maci@xxxxxxxxxx> - 2.2.0-1 - Update to 2.2.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #904782 - iked service dies immediately after starting https://bugzilla.redhat.com/show_bug.cgi?id=904782 -------------------------------------------------------------------------------- ================================================================================ kde-workspace-4.10.2-8.fc18 (FEDORA-2013-6746) KDE Workspace -------------------------------------------------------------------------------- Update Information: Backport a few upstream fixes, as well as drop LD_BIND_NOW hack from startkde -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.10.2-8 - avoid/revert commit to avoid plasma crash on wallpaper change (kde#318806) * Mon Apr 22 2013 Than Ngo <than@xxxxxxxxxx> - 4.10.2-7 - fedora/rhel condition * Sun Apr 21 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.10.2-6 - sync to latest 4.10 branch commits * Thu Apr 18 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.10.2-5 - drop LD_BIND_NOW from startkde (#908380) - fold all startkde-related patches into redhat_startkde.patch -------------------------------------------------------------------------------- References: [ 1 ] Bug #908380 - qt-at-spi module doesn't load due to kdeinit4 startup module linking issues https://bugzilla.redhat.com/show_bug.cgi?id=908380 [ 2 ] Bug #928285 - r600_dri.so crashes KWin when logging in https://bugzilla.redhat.com/show_bug.cgi?id=928285 -------------------------------------------------------------------------------- ================================================================================ kdevelop-4.5.0-1.fc18 (FEDORA-2013-6732) Integrated Development Environment for C++/C -------------------------------------------------------------------------------- Update Information: KDevelop 4.5.0 release -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 9:4.5.0-1 - Update to 4.5.0 * Fri Apr 26 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 9:4.4.90-2 - Add previusly removed rpath patch * Thu Apr 25 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 9:4.4.90-1 - Update to 4.4.90 (RC1) * Mon Apr 1 2013 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> - 9:4.4.1-4 - Requires: cmake (as per discussion of kde#274246) * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 9:4.4.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ kdevelop-php-1.5.0-1.fc18 (FEDORA-2013-6732) Php language and documentation plugins for KDevelop -------------------------------------------------------------------------------- Update Information: KDevelop 4.5.0 release -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jan Grulich <jgrulich@xxxxxxxxxx> 1.5.0-1 - Update to 1.5.0 * Thu Apr 25 2013 Jan Grulich <jgrulich@xxxxxxxxxx> 1.4.90-1 - Update to 1.4.90 (RC1) * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.4.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ kdevplatform-1.5.0-1.fc18 (FEDORA-2013-6732) Libraries for use by KDE development tools -------------------------------------------------------------------------------- Update Information: KDevelop 4.5.0 release -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 1.5.0-1 - Update to 1.5.0 * Thu Apr 25 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 1.4.90-1 - Update to 1.4.90 (RC1) * Sun Feb 10 2013 Denis Arnaud <denis.arnaud_fedora@xxxxxxx> - 1.4.1-5 - Rebuild for Boost-1.53.0 * Sat Feb 9 2013 Denis Arnaud <denis.arnaud_fedora@xxxxxxx> - 1.4.1-4 - Rebuild for Boost-1.53.0 * Tue Nov 27 2012 Jan Grulich <jgrulich@xxxxxxxxxx> 1.4.1-3 - Rebuild (qjson) * Fri Nov 23 2012 Jan Grulich <jgrulich@xxxxxxxxxx> 1.4.1-2 - Rebuild for qjson 0.8.0 -------------------------------------------------------------------------------- ================================================================================ kernel-3.8.9-200.fc18 (FEDORA-2013-6728) The Linux kernel -------------------------------------------------------------------------------- Update Information: Update to latest upstream stable release, Linux v3.8.9. A variety of fixes across the tree. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Josh Boyer <jwboyer@xxxxxxxxxx> - 3.8.9-200 - Linux v3.8.9 -------------------------------------------------------------------------------- ================================================================================ lfsc-0.20120321-3.fc18 (FEDORA-2013-6307) SMT proof checker -------------------------------------------------------------------------------- Update Information: This package contains an SMT proof checker, for use with SMT solvers such as CVC4. -------------------------------------------------------------------------------- References: [ 1 ] Bug #903428 - Review Request: lfsc - SMT proof checker https://bugzilla.redhat.com/show_bug.cgi?id=903428 [ 2 ] Bug #956160 - lsfc enters end-less loop when running checks on big-endian arches https://bugzilla.redhat.com/show_bug.cgi?id=956160 -------------------------------------------------------------------------------- ================================================================================ lohit-oriya-fonts-2.5.3-3.fc18 (FEDORA-2013-6724) Free Oriya Font -------------------------------------------------------------------------------- Update Information: This is an update with resolving Oriya script rendering problems with Harfbuzz. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Pravin Satpute <psatpute@xxxxxxxxxx> - 2.5.3-3 - Resolved #923215: UTRRS 123 GSub combination and other ligature * Fri Apr 12 2013 Pravin Satpute <psatpute@xxxxxxxxxx> - 2.5.3-2 - Resolved #950520 -------------------------------------------------------------------------------- References: [ 1 ] Bug #923215 - Odia rendering is broken while editing through firefox browser. https://bugzilla.redhat.com/show_bug.cgi?id=923215 -------------------------------------------------------------------------------- ================================================================================ open-vm-tools-9.2.3-1.fc18 (FEDORA-2013-6754) Open VMware Tools for virtual machines hosted on VMware -------------------------------------------------------------------------------- Update Information: Open Virtual Machine Tools for VMware environments Open Virtual Machine Tools for VMware environments -------------------------------------------------------------------------------- References: [ 1 ] Bug #905255 - Review Request: open-vm-tools - Open Virtual Machine Tools https://bugzilla.redhat.com/show_bug.cgi?id=905255 -------------------------------------------------------------------------------- ================================================================================ openstack-keystone-2012.2.4-2.fc18 (FEDORA-2013-6721) OpenStack Identity Service -------------------------------------------------------------------------------- Update Information: avoid potential disclosure in log files and restrict /var/log/keystone/ -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Alan Pevec <apevec@xxxxxxxxxx> 2012.2.4-2 - avoid potential disclosure in log files CVE-2013-2006 - restrict /var/log/keystone/ rhbz#956814 * Thu Apr 11 2013 Alan Pevec <apevec@xxxxxxxxxx> 2012.2.4-1 - updated to stable folsom release 2012.2.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #956474 - OpenStack keystone: /var/log/keystone/ is world readable https://bugzilla.redhat.com/show_bug.cgi?id=956474 [ 2 ] Bug #956007 - CVE-2013-2006 OpenStack keystone: DEBUG level LDAP password disclosure in log files https://bugzilla.redhat.com/show_bug.cgi?id=956007 -------------------------------------------------------------------------------- ================================================================================ python-pip-1.3.1-1.fc18 (FEDORA-2013-6762) Pip installs packages. Python3 packages. An easy_install replacement -------------------------------------------------------------------------------- Update Information: 1.3.1, fix for CVE-2013-1888, insecure tempdir usage. Update of python-pip to 1.1 from upstream -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 1.3.1-1 - Update to 1.3.1, fix for CVE-2013-1888. * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-simplevisor-0.8-1.fc18 (FEDORA-2013-6745) Python simple daemons supervisor -------------------------------------------------------------------------------- Update Information: Updating to upstream version 0.8. Updating to latest upstream 0.7. Updating to latest upstream 0.7. Updating to latest upstream 0.7. Updating to latest upstream 0.7. -------------------------------------------------------------------------------- ================================================================================ python-tw2-jqplugins-jqplot-2.0.3-1.fc18 (FEDORA-2013-6726) Toscawidgets2 wrapper for the jqPlot jQuery plugin -------------------------------------------------------------------------------- Update Information: Initial import (#916431). -------------------------------------------------------------------------------- References: [ 1 ] Bug #916431 - Review Request: python-tw2-jqplugins-jqplot - Toscawidgets2 wrapper for the jqPlot jQuery plugin https://bugzilla.redhat.com/show_bug.cgi?id=916431 -------------------------------------------------------------------------------- ================================================================================ python-tw2-slideymenu-2.2-1.fc18 (FEDORA-2013-6744) Toscawidgets2 wrapper for a "slidey" menu -------------------------------------------------------------------------------- Update Information: Initial import (#916436). -------------------------------------------------------------------------------- References: [ 1 ] Bug #916436 - Review Request: python-narcissus-app - WSGI components for Narcissus, realtime log visualization https://bugzilla.redhat.com/show_bug.cgi?id=916436 -------------------------------------------------------------------------------- ================================================================================ selinux-policy-3.11.1-92.fc18 (FEDORA-2013-6769) SELinux policy configuration -------------------------------------------------------------------------------- Update Information: Here is where you give an explanation of your update. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.11.1-92 - Eliminate dontaudit rules so setroubleshoot and audit2allow can tell user what to do if apache attempts to use the terminal - Add transition from cupsd_config_t to cupsd_t - Fix chrome_role_notrans() to allow also append to stream socket - Allow gkeyring_domain to create /var/run/UID/config/dbus file - system dbus seems to be blocking suspend - Label aliases db files with correct label - Allow setroubleshootd to read var_lib_t to make email_alert working - Dontaudit attemps to sys_ptrace, which I believe gpsd does not need - Allow mpd getattr on file system directories - Add rsync_etc_filetrans_config() - Label /var/lib/sepolgen as selinux_config_t so that setroubleshoot can read it - Add filetrans rules for tw devices - Allow systemd-tty-ask to write kmsg - label shared libraries in /opt/google/chrome as testrel_shlib_t -------------------------------------------------------------------------------- References: [ 1 ] Bug #834432 - cannot login to cobbler web-ui https://bugzilla.redhat.com/show_bug.cgi?id=834432 [ 2 ] Bug #953264 - SELinux is preventing chrome from 'execmod' accesses on the file /opt/google/chrome/libffmpegsumo.so. https://bugzilla.redhat.com/show_bug.cgi?id=953264 [ 3 ] Bug #953882 - SELinux is preventing /usr/bin/pulseaudio from 'getattr' accesses on the directory /sys/fs/cgroup. https://bugzilla.redhat.com/show_bug.cgi?id=953882 [ 4 ] Bug #954073 - SELinux is preventing /usr/sbin/gpsd from using the sys_ptrace capability. https://bugzilla.redhat.com/show_bug.cgi?id=954073 [ 5 ] Bug #954075 - audit2allow generating AVC's , but are not being reported https://bugzilla.redhat.com/show_bug.cgi?id=954075 [ 6 ] Bug #955386 - SELinux is preventing /usr/bin/systemd-tty-ask-password-agent from 'write' accesses on the chr_file kmsg. https://bugzilla.redhat.com/show_bug.cgi?id=955386 [ 7 ] Bug #955819 - SELinux is preventing /opt/google/chrome/chrome-sandbox from 'append' accesses on the unix_stream_socket unix_stream_socket. https://bugzilla.redhat.com/show_bug.cgi?id=955819 [ 8 ] Bug #956623 - SELinux dontaudit bug https://bugzilla.redhat.com/show_bug.cgi?id=956623 [ 9 ] Bug #956754 - SELinux is preventing /usr/bin/python2.7 from 'execute' accesses on the file /usr/bin/hpijs. https://bugzilla.redhat.com/show_bug.cgi?id=956754 -------------------------------------------------------------------------------- ================================================================================ springlobby-0.169-3.fc18 (FEDORA-2013-6749) A lobby client for the spring RTS game engine -------------------------------------------------------------------------------- Update Information: - Fix package breakage due to %libdir pulling debug symbols. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Gilboa Davara <gilboad [AT] gmail [DOT] com> - 0.169-3 - Fix package breakage due to %libdir pulling debug symbols. -------------------------------------------------------------------------------- ================================================================================ tomoe-gtk-0.6.0-18.fc18 (FEDORA-2013-6747) Gtk library for tomoe for Japanese and Chinese handwritten input -------------------------------------------------------------------------------- Update Information: Fixed Bug 926646 - tomoe-gtk: Does not support aarch64 in f19 and rawhide -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Ding-Yi Chen - 0.6.0-18 - Fixed Bug 926646 - tomoe-gtk: Does not support aarch64 in f19 and rawhide * Fri Feb 15 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.6.0-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #926646 - tomoe-gtk: Does not support aarch64 in f19 and rawhide https://bugzilla.redhat.com/show_bug.cgi?id=926646 -------------------------------------------------------------------------------- ================================================================================ xorg-x11-drv-synaptics-1.6.3-3.fc18 (FEDORA-2013-6761) Xorg X11 Synaptics touchpad input driver -------------------------------------------------------------------------------- Update Information: fix stack corruption for apple magic trackpads -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Peter Hutterer <peter.hutterer@xxxxxxxxxx> 1.6.3-3 - Fix stack smash on apple touchpads (#877464) -------------------------------------------------------------------------------- References: [ 1 ] Bug #952221 - Apple Bluetooth "Magic" Trackpad - two-finger click kills kde session https://bugzilla.redhat.com/show_bug.cgi?id=952221 -------------------------------------------------------------------------------- ================================================================================ yawn-0-0.14.20130426svn620.fc18 (FEDORA-2013-6770) Yet Another WBEM Navigator -------------------------------------------------------------------------------- Update Information: Bugfix release. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Michal Minar <miminar@xxxxxxxxxx> 0-0.15.20130426svn620 - Updated to latest upstream version -------------------------------------------------------------------------------- ================================================================================ zanata-api-2.2.0-6.fc18 (FEDORA-2013-6765) Zanata API modules -------------------------------------------------------------------------------- Update Information: Zanata API modules. Shared between client and server. -------------------------------------------------------------------------------- References: [ 1 ] Bug #924513 - Review Request: zanata-api - Zanata API modules https://bugzilla.redhat.com/show_bug.cgi?id=924513 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
