The following Fedora 18 Security updates need testing: Age URL 124 https://admin.fedoraproject.org/updates/FEDORA-2013-0416/fedora-business-cards-1-0.1.beta1.fc18 57 https://admin.fedoraproject.org/updates/FEDORA-2013-3935/puppet-3.1.1-1.fc18 51 https://admin.fedoraproject.org/updates/FEDORA-2013-4243/stunnel-4.55-1.fc18 43 https://admin.fedoraproject.org/updates/FEDORA-2013-4589/tomcat6-6.0.36-2.fc18 38 https://admin.fedoraproject.org/updates/FEDORA-2013-4823/microcode_ctl-2.0-3.fc18 31 https://admin.fedoraproject.org/updates/FEDORA-2013-5472/php-geshi-1.0.8.11-3.fc18 22 https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2-1.fc18 11 https://admin.fedoraproject.org/updates/FEDORA-2013-7135/xmp-3.5.0-3.fc18 11 https://admin.fedoraproject.org/updates/FEDORA-2013-7120/tinc-1.0.21-1.fc18 9 https://admin.fedoraproject.org/updates/FEDORA-2013-7309/gpsd-3.9-1.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-7426/xen-4.2.2-3.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-7531/openvpn-2.3.1-2.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-7714/mediawiki-1.19.6-1.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2013-7813/curl-7.27.0-10.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-7993/tomcat-7.0.40-1.fc18 The following Fedora 18 Critical Path updates have yet to be approved: Age URL 210 https://admin.fedoraproject.org/updates/FEDORA-2012-16107/xorg-x11-drv-qxl-0.1.0-1.fc18 208 https://admin.fedoraproject.org/updates/FEDORA-2012-16207/thunderbird-lightning-1.8-1.fc18,thunderbird-16.0.1-2.fc18 92 https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5.fc18 68 https://admin.fedoraproject.org/updates/FEDORA-2013-3458/iproute-3.6.0-7.fc18,iptables-1.4.18-1.fc18 10 https://admin.fedoraproject.org/updates/FEDORA-2013-7211/libwacom-0.7.1-2.fc18 10 https://admin.fedoraproject.org/updates/FEDORA-2013-6209/ibus-1.5.2-3.fc18 9 https://admin.fedoraproject.org/updates/FEDORA-2013-7131/perl-5.16.3-244.fc18,perl-Digest-1.17-244.fc18,perl-threads-1.86-243.fc18,perl-Version-Requirements-0.101022-243.fc18,perl-Test-Simple-0.98-243.fc18,perl-Carp-1.26-243.fc18,perl-ExtUtils-Manifest-1.61-243.fc18,perl-parent-0.225-243.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-7548/gphoto2-2.5.2-1.fc18,libgphoto2-2.5.2-1.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-7720/PackageKit-0.8.8-1.fc18,zif-0.3.6-1.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-7743/selinux-policy-3.11.1-94.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-7692/ntfs-3g-2013.1.13-4.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2013-7791/network-manager-applet-0.9.8.1-3.git20130430.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2013-7810/openldap-2.4.35-4.fc18.1 2 https://admin.fedoraproject.org/updates/FEDORA-2013-7822/dmidecode-2.12-3.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2013-7357/abrt-2.1.4-3.fc18,libreport-2.1.4-4.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-7716/soprano-2.9.2-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-7742/analitza-4.10.3-1.fc18,ark-4.10.3-1.fc18,audiocd-kio-4.10.3-1.fc18,blinken-4.10.3-1.fc18,bomber-4.10.3-1.fc18,bovo-4.10.3-1.fc18,cantor-4.10.3-1.fc18,dragon-4.10.3-1.fc18,filelight-4.10.3-1.fc18,granatier-4.10.3-1.fc18,gwenview-4.10.3-1.fc18,iris-1.0.0-0.14.20110904svn812.fc18,jovie-4.10.3-1.fc18,juk-4.10.3-1.fc18,kaccessible-4.10.3-1.fc18,kactivities-4.10.3-1.fc18,kajongg-4.10.3-1.fc18,kalgebra-4.10.3-1.fc18,kalzium-4.10.3-1.fc18,kamera-4.10.3-1.fc18,kanagram-4.10.3-1.fc18,kapman-4.10.3-1.fc18,kate-4.10.3-1.fc18,katomic-4.10.3-1.fc18,kblackbox-4.10.3-1.fc18,kblocks-4.10.3-1.fc18,kbounce-4.10.3-1.fc18,kbreakout-4.10.3-1.fc18,kbruch-4.10.3-1.fc18,kcalc-4.10.3-1.fc18,kcharselect-4.10.3-1.fc18,kcolorchooser-4.10.3-1.fc18,kdeaccessibility-4.10.3-1.fc18,kdeadmin-4.10.3-1.fc18,kdeartwork-4.10.3-1.fc18,kde-baseapps-4.10.3-1.fc18,kde-base-artwork-4.10.3-1.fc18,kdebindings-4.10.3-1.fc18,kdeedu-4.10.3-1.fc18,kdegames-4.10.3-1.fc18,kdegraphics-4.10.3-1.fc18,kdegraphics-mobipocket-4.10.3-1.fc18,kdegraphics-strigi-analyzer-4.10.3-1.fc18,kdegraphics-thumbnailers-4.10.3-1.fc18,kde-l10n-4.10.3-1.fc18,kdelibs-4.10.3-2.fc18,kdemultimedia-4.10.3-1.fc18,kdenetwork-4.10.3-1.fc18,kdepim-4.10.3-2.fc18,kdepimlibs-4.10.3-1.fc18,kdepim-runtime-4.10.3-2.fc18,kdeplasma-addons-4.10.3-1.fc18,kde-print-manager-4.10.3-1.fc18,kde-runtime-4.10.3-1.fc18,kdesdk-4.10.3-1.fc18,kdetoys-4.10.3-1.fc18,kdeutils-4.10.3-1.fc18,kde-wallpapers-4.10.3-1.fc18,kde-workspace-4.10.3-1.fc18,kdf-4.10.3-1.fc18,kdiamond-4.10.3-1.fc18,kfloppy-4.10.3-1.fc18,kfourinline-4.10.3-1.fc18,kgamma-4.10.3-1.fc18,kgeography-4.10.3-1.fc18,kgoldrunner-4.10.3-1.fc18,kgpg-4.10.3-1.fc18,khangman-4.10.3-1.fc18,kig-4.10.3-1.fc18,kigo-4.10.3-1.fc18,killbots-4.10.3-1.fc18,kimono-4.10.3-1.fc18,kiriki-4.10.3-1.fc18,kiten-4.10.3-1.fc18,kjumpingcube-4.10.3-1.fc18,klettres-4.10.3-1.fc18,klickety-4.10.3-1.fc18,klines-4.10.3-1.fc18,kmag-4.10.3-1.fc18,kmahjongg-4.10.3-1.fc18,kmines-4.10.3-1.fc18,kmix-4.10.3-1.fc18,kmousetool-4.10.3-1 .fc18,kmouth-4.10.3-1.fc18,kmplot-4.10.3-1.fc18,knavalbattle-4.10.3-1.fc18,knetwalk-4.10.3-1.fc18,kolf-4.10.3-1.fc18,kollision-4.10.3-1.fc18,kolourpaint-4.10.3-1.fc18,konquest-4.10.3-1.fc18,konsole-4.10.3-1.fc18,kpat-4.10.3-1.fc18,kremotecontrol-4.10.3-1.fc18,kreversi-4.10.3-1.fc18,kross-interpreters-4.10.3-1.fc18,kruler-4.10.3-1.fc18,ksaneplugin-4.10.3-1.fc18,kscd-4.10.3-1.fc18,kshisen-4.10.3-1.fc18,ksirk-4.10.3-1.fc18,ksnakeduel-4.10.3-1.fc18,ksnapshot-4.10.3-1.fc18,kspaceduel-4.10.3-1.fc18,ksquares-4.10.3-1.fc18,kstars-4.10.3-1.fc18,ksudoku-4.10.3-1.fc18,ktimer-4.10.3-1.fc18,ktouch-4.10.3-1.fc18,ktuberling-4.10.3-1.fc18,kturtle-4.10.3-1.fc18,kubrick-4.10.3-1.fc18,kwallet-4.10.3-1.fc18,kwordquiz-4.10.3-1.fc18,libkcddb-4.10.3-1.fc18,libkcompactdisc-4.10.3-1.fc18,libkdcraw-4.10.3-1.fc18,libkdeedu-4.10.3-1.fc18,libkdegames-4.10.3-1.fc18,libkexiv2-4.10.3-1.fc18,libkipi-4.10.3-1.fc18,libkmahjongg-4.10.3-1.fc18,libksane-4.10.3-1.fc18,lskat-4.10.3-1.fc18,marble-4.10.3-1.fc18,nepomuk-core-4.10.3-1.fc18,nepomuk-widgets-4.10.3-1.fc18,okular-4.10.3-1.fc18,oxygen-icon-theme-4.10.3-1.fc18,pairs-4.10.3-1.fc18,palapeli-4.10.3-1.fc18,parley-4.10.3-1.fc18,picmi-4.10.3-1.fc18,pykde4-4.10.3-1.fc18,qyoto-4.10.3-1.fc18,rocs-4.10.3-1.fc18,ruby-korundum-4.10.3-1.fc18,ruby-qt-4.10.3-1.fc18,smokegen-4.10.3-1.fc18,smokekde-4.10.3-1.fc18,smokeqt-4.10.3-1.fc18,step-4.10.3-1.fc18,superkaramba-4.10.3-1.fc18,svgpart-4.10.3-1.fc18,sweeper-4.10.3-1.fc18 The following builds have been pushed to Fedora 18 updates-testing aajohan-comfortaa-fonts-2.004-1.fc18 anjuta-3.6.2-2.fc18 apache-commons-math-3.2-1.fc18 kde-plasma-networkmanagement-0.9.0.8-2.fc18 ninja-ide-2.2-1.fc18 opendnssec-1.4.0-1.fc18 ptpd-2.2.0-2.fc18 python-hghooks-0.6.0-1.fc18 python-lxml-3.2.1-1.fc18 python-py-1.4.14-1.fc18 python-waitress-0.8.3-1.fc18 rubygem-sequel-3.47.0-1.fc18 sawfish-1.9.91-1.fc18 tomcat-7.0.40-1.fc18 Details about builds: ================================================================================ aajohan-comfortaa-fonts-2.004-1.fc18 (FEDORA-2013-7990) Modern style true type font -------------------------------------------------------------------------------- Update Information: Latest upstream release -------------------------------------------------------------------------------- ChangeLog: * Sat May 11 2013 Luya Tshimbalanga <luya@xxxxxxxxxxxxxxxxx> - 2.004-1 - Latest upstream release -------------------------------------------------------------------------------- ================================================================================ anjuta-3.6.2-2.fc18 (FEDORA-2013-7986) GNOME IDE for various programming languages (including C/C++, Python, Vala and JavaScript) -------------------------------------------------------------------------------- Update Information: Backported crasher fixes for autocompletion. -------------------------------------------------------------------------------- ChangeLog: * Sat May 11 2013 Kalev Lember <kalevlember@xxxxxxxxx> - 1:3.6.2-2 - Backport crasher fixes for autocompletion (#926884) -------------------------------------------------------------------------------- References: [ 1 ] Bug #926884 - [abrt] anjuta-3.6.2-1.fc18: gtk_source_completion_model_iter_last: Process /usr/bin/anjuta was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=926884 -------------------------------------------------------------------------------- ================================================================================ apache-commons-math-3.2-1.fc18 (FEDORA-2013-8000) Java library of lightweight mathematics and statistics components -------------------------------------------------------------------------------- Update Information: This is a minor release: It combines bug fixes and new features. Changes to existing features were made in a backwards-compatible way such as to allow drop-in replacement of the v3.1[.1] JAR file. Most notable among the new features are: Framework for automatic differentiation, Lévy distribution, prime numbers, enumerated distributions, real field allowing to use several algorithms (solvers, linear algebra, 3D geometry) with different real-like classes (high accuracy or automatic differentiation), spherical coordinates with gradients and Hessians, reorganized clustering package with different distance implementations. -------------------------------------------------------------------------------- ChangeLog: * Sat May 11 2013 Mohamed El Morabity <pikachu.2014@xxxxxxxxx> - 3.2-1 - Update to 3.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #949137 - apache-commons-math-3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=949137 -------------------------------------------------------------------------------- ================================================================================ kde-plasma-networkmanagement-0.9.0.8-2.fc18 (FEDORA-2013-7991) NetworkManager KDE 4 integration -------------------------------------------------------------------------------- Update Information: Update dependencies -------------------------------------------------------------------------------- ChangeLog: * Sun May 12 2013 Jan Grulich <jgrulich@xxxxxxxxxx> 0.9.0.8-2 - remove mobile-broadband-mobile-provider-devel as BR - add ModemManager as runtime dependency - add mobile-broadband-mobile-provider as runtime dependency -------------------------------------------------------------------------------- ================================================================================ ninja-ide-2.2-1.fc18 (FEDORA-2013-8003) Ninja IDE for Python development -------------------------------------------------------------------------------- Update Information: update to 2.2 -------------------------------------------------------------------------------- ChangeLog: * Sat May 11 2013 Nikos Roussos <comzeradd@xxxxxxxxxxxxxxxxx> - 2.2-1 - Update to 2.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #872136 - [abrt] ninja-ide-2.1.1-4.fc17: run_widget.py:300:go_to_error:ValueError: invalid literal for int() with base 10: '' https://bugzilla.redhat.com/show_bug.cgi?id=872136 [ 2 ] Bug #883153 - [abrt] ninja-ide-2.1.1-4.fc17: preferences.py:1783:showEvent:IOError: [Errno 2] No such file or directory: u'/home/rbarlow/.ninja_ide/addins/theme/Default.qss' https://bugzilla.redhat.com/show_bug.cgi?id=883153 [ 3 ] Bug #885484 - [abrt] ninja-ide-2.1.1-4.fc17: code_completion.py:96:_tokenize_text:IndexError: list index out of range https://bugzilla.redhat.com/show_bug.cgi?id=885484 [ 4 ] Bug #896562 - [abrt] ninja-ide-2.1.1-4.fc18: project_properties_widget.py:151:__init__:AttributeError: 'NoneType' object has no attribute 'name' https://bugzilla.redhat.com/show_bug.cgi?id=896562 [ 5 ] Bug #901911 - [abrt] ninja-ide-2.1.1-1: browser_widget.py:32:<module>:ImportError: libQtWebKit.so.4: cannot open shared object file: No such file or directory https://bugzilla.redhat.com/show_bug.cgi?id=901911 [ 6 ] Bug #917627 - [abrt] ninja-ide-2.1.1-4.fc18: find_in_files.py:466:find_occurrences:TypeError: arguments did not match any overloaded call: https://bugzilla.redhat.com/show_bug.cgi?id=917627 -------------------------------------------------------------------------------- ================================================================================ opendnssec-1.4.0-1.fc18 (FEDORA-2013-7987) DNSSEC key and zone management software -------------------------------------------------------------------------------- Update Information: Update from rc to stable release, fixes CKR_KEY_HANDLE_INVALID from spontanious key rollover -------------------------------------------------------------------------------- ChangeLog: * Sat May 11 2013 Paul Wouters <pwouters@xxxxxxxxxx> - 1.4.0-1 - Updated to 1.4.0 -------------------------------------------------------------------------------- ================================================================================ ptpd-2.2.0-2.fc18 (FEDORA-2013-7982) PTPd implements the Precision Time protocol (PTP) as defined by the IEEE 1588 -------------------------------------------------------------------------------- Update Information: Here is where you give an explanation of your update. -------------------------------------------------------------------------------- ChangeLog: * Fri May 10 2013 Jon Kent <jon.kent at, gmail.com> 2.2.0-2 - correct systemd script and init script to use ptpd2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #961493 - ptpd configuration file should be updated https://bugzilla.redhat.com/show_bug.cgi?id=961493 -------------------------------------------------------------------------------- ================================================================================ python-hghooks-0.6.0-1.fc18 (FEDORA-2013-7996) A set of useful hooks for Mercurial -------------------------------------------------------------------------------- Update Information: Update to upstream 0.6.0. -------------------------------------------------------------------------------- ChangeLog: * Sun May 12 2013 Lorenzo Gil Sanchez <lorenzo.gil.sanchez@xxxxxxxxx> - 0.6.0-1 - Update with upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #953421 - python-hghooks-0.6.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=953421 -------------------------------------------------------------------------------- ================================================================================ python-lxml-3.2.1-1.fc18 (FEDORA-2013-8002) ElementTree-like Python bindings for libxml2 and libxslt -------------------------------------------------------------------------------- Update Information: 3.2.1 (2013-05-11) ================== Features added -------------- * The methods ``apply_templates()`` and ``process_children()`` of XSLT extension elements have gained two new boolean options ``elements_only`` and ``remove_blank_text`` that discard either all strings or whitespace-only strings from the result list. Bugs fixed ---------- * When moving Elements to another tree, the namespace cleanup mechanism no longer drops namespace prefixes from attributes for which it finds a default namespace declaration, to prevent them from appearing as unnamespaced attributes after serialisation. * Returning non-type objects from a custom class lookup method could lead to a crash. * Instantiating and using subtypes of Comments and ProcessingInstructions crashed. 3.2.0 (2013-04-28) ================== Features added -------------- Bugs fixed ---------- * LP#690319: Leading whitespace could change the behaviour of the string parsing functions in ``lxml.html``. * LP#599318: The string parsing functions in ``lxml.html`` are more robust in the face of uncommon HTML content like framesets or missing body tags. Patch by Stefan Seelmann. * LP#712941: I/O errors while trying to access files with paths that contain non-ASCII characters could raise ``UnicodeDecodeError`` instead of properly reporting the ``IOError``. * LP#673205: Parsing from in-memory strings disabled network access in the default parser and made subsequent attempts to parse from a URL fail. * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead of overwriting the current value. * LP#715687: lxml.html.clean no longer discards scripts that are explicitly allowed by the user provided whitelist. Patch by Christine Koppelt. 3.1.2 (2013-04-12) ================== Bugs fixed ---------- * LP#1136509: Passing attributes through the namespace-unaware API of the sax bridge (i.e. the ``handler.startElement()`` method) failed with a ``TypeError``. Patch by Mike Bayer. * LP#1123074: Fix serialisation error in XSLT output when converting the result tree to a Unicode string. * GH#105: Replace illegal usage of ``xmlBufLength()`` in libxml2 2.9.0 by properly exported API function ``xmlBufUse()``. 3.1.1 (2013-03-29) ================== Features added -------------- Bugs fixed ---------- * LP#1160386: Write access to ``lxml.html.FormElement.fields`` raised an AttributeError in Py3. * Illegal memory access during cleanup in incremental xmlfile writer. Other changes ------------- * The externally useless class ``lxml.etree._BaseParser`` was removed from the module dict. 3.2.0 (2013-04-28) ================== Features added -------------- Bugs fixed ---------- * LP#690319: Leading whitespace could change the behaviour of the string parsing functions in ``lxml.html``. * LP#599318: The string parsing functions in ``lxml.html`` are more robust in the face of uncommon HTML content like framesets or missing body tags. Patch by Stefan Seelmann. * LP#712941: I/O errors while trying to access files with paths that contain non-ASCII characters could raise ``UnicodeDecodeError`` instead of properly reporting the ``IOError``. * LP#673205: Parsing from in-memory strings disabled network access in the default parser and made subsequent attempts to parse from a URL fail. * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead of overwriting the current value. * LP#715687: lxml.html.clean no longer discards scripts that are explicitly allowed by the user provided whitelist. Patch by Christine Koppelt. 3.1.2 (2013-04-12) ================== Bugs fixed ---------- * LP#1136509: Passing attributes through the namespace-unaware API of the sax bridge (i.e. the ``handler.startElement()`` method) failed with a ``TypeError``. Patch by Mike Bayer. * LP#1123074: Fix serialisation error in XSLT output when converting the result tree to a Unicode string. * GH#105: Replace illegal usage of ``xmlBufLength()`` in libxml2 2.9.0 by properly exported API function ``xmlBufUse()``. 3.1.1 (2013-03-29) ================== Features added -------------- Bugs fixed ---------- * LP#1160386: Write access to ``lxml.html.FormElement.fields`` raised an AttributeError in Py3. * Illegal memory access during cleanup in incremental xmlfile writer. Other changes ------------- * The externally useless class ``lxml.etree._BaseParser`` was removed from the module dict. 3.2.0 (2013-04-28) ================== Features added -------------- Bugs fixed ---------- * LP#690319: Leading whitespace could change the behaviour of the string parsing functions in ``lxml.html``. * LP#599318: The string parsing functions in ``lxml.html`` are more robust in the face of uncommon HTML content like framesets or missing body tags. Patch by Stefan Seelmann. * LP#712941: I/O errors while trying to access files with paths that contain non-ASCII characters could raise ``UnicodeDecodeError`` instead of properly reporting the ``IOError``. * LP#673205: Parsing from in-memory strings disabled network access in the default parser and made subsequent attempts to parse from a URL fail. * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead of overwriting the current value. * LP#715687: lxml.html.clean no longer discards scripts that are explicitly allowed by the user provided whitelist. Patch by Christine Koppelt. 3.1.2 (2013-04-12) ================== Bugs fixed ---------- * LP#1136509: Passing attributes through the namespace-unaware API of the sax bridge (i.e. the ``handler.startElement()`` method) failed with a ``TypeError``. Patch by Mike Bayer. * LP#1123074: Fix serialisation error in XSLT output when converting the result tree to a Unicode string. * GH#105: Replace illegal usage of ``xmlBufLength()`` in libxml2 2.9.0 by properly exported API function ``xmlBufUse()``. 3.1.1 (2013-03-29) ================== Features added -------------- Bugs fixed ---------- * LP#1160386: Write access to ``lxml.html.FormElement.fields`` raised an AttributeError in Py3. * Illegal memory access during cleanup in incremental xmlfile writer. Other changes ------------- * The externally useless class ``lxml.etree._BaseParser`` was removed from the module dict. -------------------------------------------------------------------------------- ChangeLog: * Sun May 12 2013 Jeffrey Ollie <jeff@xxxxxxxxxx> - 3.2.1-1 - 3.2.1 (2013-05-11) - ================== - - Features added - -------------- - - * The methods ``apply_templates()`` and ``process_children()`` of XSLT - extension elements have gained two new boolean options ``elements_only`` - and ``remove_blank_text`` that discard either all strings or - whitespace-only strings from the result list. - - Bugs fixed - ---------- - - * When moving Elements to another tree, the namespace cleanup mechanism - no longer drops namespace prefixes from attributes for which it finds - a default namespace declaration, to prevent them from appearing as - unnamespaced attributes after serialisation. - - * Returning non-type objects from a custom class lookup method could lead - to a crash. - - * Instantiating and using subtypes of Comments and ProcessingInstructions - crashed. * Fri May 10 2013 Jeffrey Ollie <jeff@xxxxxxxxxx> - 3.2.0-1 - 3.2.0 (2013-04-28) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * LP#690319: Leading whitespace could change the behaviour of the string - parsing functions in ``lxml.html``. - - * LP#599318: The string parsing functions in ``lxml.html`` are more robust - in the face of uncommon HTML content like framesets or missing body tags. - Patch by Stefan Seelmann. - - * LP#712941: I/O errors while trying to access files with paths that - contain non-ASCII characters could raise ``UnicodeDecodeError`` instead - of properly reporting the ``IOError``. - - * LP#673205: Parsing from in-memory strings disabled network access in the - default parser and made subsequent attempts to parse from a URL fail. - - * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead - of overwriting the current value. - - * LP#715687: lxml.html.clean no longer discards scripts that are explicitly - allowed by the user provided whitelist. Patch by Christine Koppelt. - - 3.1.2 (2013-04-12) - ================== - - Bugs fixed - ---------- - - * LP#1136509: Passing attributes through the namespace-unaware API of - the sax bridge (i.e. the ``handler.startElement()`` method) failed - with a ``TypeError``. Patch by Mike Bayer. - - * LP#1123074: Fix serialisation error in XSLT output when converting - the result tree to a Unicode string. - - * GH#105: Replace illegal usage of ``xmlBufLength()`` in libxml2 2.9.0 - by properly exported API function ``xmlBufUse()``. - - 3.1.1 (2013-03-29) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * LP#1160386: Write access to ``lxml.html.FormElement.fields`` raised - an AttributeError in Py3. - - * Illegal memory access during cleanup in incremental xmlfile writer. - - Other changes - ------------- - - * The externally useless class ``lxml.etree._BaseParser`` was removed - from the module dict. * Fri Mar 8 2013 Jeffrey Ollie <jeff@xxxxxxxxxx> - 3.1.0-1 - 3.1.0 (2013-02-10) - ================== - - Features added - -------------- - - * GH#89: lxml.html.clean allows overriding the set of attributes that it - considers 'safe'. Patch by Francis Devereux. - - Bugs fixed - ---------- - - * LP#1104370: ``copy.copy(el.attrib)`` raised an exception. It now returns - a copy of the attributes as a plain Python dict. - - * GH#95: When used with namespace prefixes, the ``el.find*()`` methods - always used the first namespace mapping that was provided for each - path expression instead of using the one that was actually passed - in for the current run. - - * LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled - without threading support. Patch by Ulrich Seidl. - - Other changes - ------------- - - - 3.1beta1 (2012-12-21) - ===================== - - Features added - -------------- - - * New build-time option ``--with-unicode-strings`` for Python 2 that - makes the API always return Unicode strings for names and text - instead of byte strings for plain ASCII content. - - * New incremental XML file writing API ``etree.xmlfile()``. - - * E factory in lxml.objectify is callable to simplify the creation of - tags with non-identifier names without having to resort to getattr(). - - Bugs fixed - ---------- - - * When starting from a non-namespaced element in lxml.objectify, searching - for a child without explicitly specifying a namespace incorrectly found - namespaced elements with the requested local name, instead of restricting - the search to non-namespaced children. - - * GH#85: Deprecation warnings were fixed for Python 3.x. - - * GH#33: lxml.html.fromstring() failed to accept bytes input in Py3. - - * LP#1080792: Static build of libxml2 2.9.0 failed due to missing file. - - Other changes - ------------- - - * The externally useless class ``_ObjectifyElementMakerCaller`` was - removed from the module API of lxml.objectify. - - * LP#1075622: lxml.builder is faster for adding text to elements with - many children. Patch by Anders Hammarquist. * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.0.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Mon Oct 15 2012 Jeffrey Ollie <jeff@xxxxxxxxxx> - 3.0.1-1 - 3.0.1 (2012-10-14) - Bugs fixed - - * LP#1065924: Element proxies could disappear during garbage collection - in PyPy without proper cleanup. - * GH#71: Failure to work with libxml2 2.6.x. - * LP#1065139: static MacOS-X build failed in Py3. * Wed Oct 10 2012 Jeffrey Ollie <jeff@xxxxxxxxxx> - 3.0-1 - 3.0 (2012-10-08) - ================ - - Features added - -------------- - - Bugs fixed - ---------- - - * End-of-file handling was incorrect in iterparse() when reading from - a low-level C file stream and failed in libxml2 2.9.0 due to its - improved consistency checks. - - Other changes - ------------- - - * The build no longer uses Cython by default unless the generated C files - are missing. To use Cython, pass the option "--with-cython". To ignore - the fatal build error when Cython is required but not available (e.g. to - run special setup.py commands that do not actually run a build), pass - "--without-cython". - - - 3.0beta1 (2012-09-26) - ===================== - - Features added - -------------- - - * Python level access to (optional) libxml2 memory debugging features - to simplify debugging of memory leaks etc. - - Bugs fixed - ---------- - - * Fix a memory leak in XPath by switching to Cython 0.17.1. - - * Some tests were adapted to work with PyPy. - - Other changes - ------------- - - * The code was adapted to work with the upcoming libxml2 2.9.0 release. - - - 3.0alpha2 (2012-08-23) - ====================== - - Features added - -------------- - - * The .iter() method of elements now accepts tag arguments like "{*}name" - to search for elements with a given local name in any namespace. With - this addition, all combinations of wildcards now work as expected: - "{ns}name", "{}name", "{*}name", "{ns}*", "{}*" and "{*}*". Note that - "name" is equivalent to "{}name", but "*" is "{*}*". The same change - applies to the .getiterator(), .itersiblings(), .iterancestors(), - .iterdescendants(), .iterchildren() and .itertext() methods, the - strip_attributes(), strip_elements() and strip_tags() functions as well - as the iterparse() function. - - * C14N allows specifying the inclusive prefixes to be promoted to - top-level during exclusive serialisation. - - Bugs fixed - ---------- - - * Passing long Unicode strings into the feed() parser interface failed to - read the entire string. - - Other changes - ------------- - - - 3.0alpha1 (2012-07-31) - ====================== - - Features added - -------------- - - * Initial support for building in PyPy (through cpyext). - - * DTD objects gained an API that allows read access to their - declarations. - - * xpathgrep.py gained support for parsing line-by-line (e.g. - from grep output) and for surrounding the output with a new root - tag. - - * E-factory in lxml.builder accepts subtypes of known data - types (such as string subtypes) when building elements around them. - - * Tree iteration and iterparse() with a selective tag - argument supports passing a set of tags. Tree nodes will be - returned by the iterators if they match any of the tags. - - Bugs fixed - ---------- - - * The .find*() methods in lxml.objectify no longer use XPath - internally, which makes them faster in many cases (especially when - short circuiting after a single or couple of elements) and fixes - some behavioural differences compared to lxml.etree. Note that - this means that they no longer support arbitrary XPath expressions - but only the subset that the ElementPath language supports. - The previous implementation was also redundant with the normal - XPath support, which can be used as a replacement. - - * el.find('*') could accidentally return a comment or processing - instruction that happened to be in the wrong spot. (Same for the - other .find*() methods.) - - * The error logging is less intrusive and avoids a global setup where - possible. - - * Fixed undefined names in html5lib parser. - - * xpathgrep.py did not work in Python 3. - - * Element.attrib.update() did not accept an attrib of - another Element as parameter. - - * For subtypes of ElementBase that make the .text or .tail - properties immutable (as in objectify, for example), inserting text - when creating Elements through the E-Factory feature of the class - constructor would fail with an exception, stating that the text - cannot be modified. - - Other changes - -------------- - - * The code base was overhauled to properly use 'const' where the API - of libxml2 and libxslt requests it. This also has an impact on the - public C-API of lxml itself, as defined in etreepublic.pxd, as - well as the provided declarations in the lxml/includes/ directory. - Code that uses these declarations may have to be adapted. On the - plus side, this fixes several C compiler warnings, also for user - code, thus making it easier to spot real problems again. - - * The functionality of "lxml.cssselect" was moved into a separate PyPI - package called "cssselect". To continue using it, you must install - that package separately. The "lxml.cssselect" module is still - available and provides the same interface, provided the "cssselect" - package can be imported at runtime. - - * Element attributes passed in as an attrib dict or as keyword - arguments are now sorted by (namespaced) name before being created - to make their order predictable for serialisation and iteration. - Note that adding or deleting attributes afterwards does not take - that order into account, i.e. setting a new attribute appends it - after the existing ones. - - * Several classes that are for internal use only were removed - from the lxml.etree module dict: - _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext, - _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext, - __ContentOnlyElement, _AttribIterator, _NamespaceRegistry, - _ClassNamespaceRegistry, _FunctionNamespaceRegistry, - _XPathFunctionNamespaceRegistry, _ParserDictionaryContext, - _FileReaderContext, _ParserContext, _PythonSaxParserTarget, - _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy, - _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper, - _OpaqueDocumentWrapper, _ModifyContentOnlyProxy, - _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy, - _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter, - _ParserSchemaValidationContext, _XPathContext, - _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam - - * Several internal classes can no longer be inherited from: - _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult, - _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry, - _XPathFunctionNamespaceRegistry, _ParserDictionaryContext, - _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext, - _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper, - _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy, - _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext, - _XPathContext, _XSLTResolverContext, _XSLTContext, - _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction -------------------------------------------------------------------------------- References: [ 1 ] Bug #962131 - python-lxml-3.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=962131 [ 2 ] Bug #874546 - Bad exception in etree.iterparse() https://bugzilla.redhat.com/show_bug.cgi?id=874546 [ 3 ] Bug #929417 - python-lxml-3.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=929417 -------------------------------------------------------------------------------- ================================================================================ python-py-1.4.14-1.fc18 (FEDORA-2013-7992) Library with cross-python path, ini-parsing, io, code, log facilities -------------------------------------------------------------------------------- Update Information: Update to the latest stable version. From the upstream changelog: * fix dupfile to work with files that don't carry a mode. Thanks Jason R. Coombs. -------------------------------------------------------------------------------- ChangeLog: * Sat May 11 2013 Thomas Moschny <thomas.moschny@xxxxxx> - 1.4.14-1 - Update to 1.4.14. -------------------------------------------------------------------------------- ================================================================================ python-waitress-0.8.3-1.fc18 (FEDORA-2013-7995) Waitress WSGI server -------------------------------------------------------------------------------- Update Information: Update to upstream 0.8.3. -------------------------------------------------------------------------------- ChangeLog: * Sun May 12 2013 Lorenzo Gil Sanchez <lorenzo.gil.sanchez@xxxxxxxxx> - 0.8.3-1 - Update to upstream * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.8.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #957659 - python-waitress-0.8.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=957659 -------------------------------------------------------------------------------- ================================================================================ rubygem-sequel-3.47.0-1.fc18 (FEDORA-2013-7997) The Database Toolkit for Ruby -------------------------------------------------------------------------------- Update Information: Updated to sequel 3.47.0 -------------------------------------------------------------------------------- ================================================================================ sawfish-1.9.91-1.fc18 (FEDORA-2013-7989) An extensible window manager for the X Window System -------------------------------------------------------------------------------- Update Information: Upstream update. -------------------------------------------------------------------------------- ChangeLog: * Sun May 12 2013 Kim B. Heino <b@xxxxxxxx> - 1.9.91-1 - Update to 1.9.91 * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.9.90-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ tomcat-7.0.40-1.fc18 (FEDORA-2013-7993) Apache Servlet/JSP Engine, RI for Servlet 3.0/JSP 2.2 API -------------------------------------------------------------------------------- Update Information: - Updated to 7.0.40 - Resolves: rhbz 956569 added missing commons-pool link -------------------------------------------------------------------------------- ChangeLog: * Sat May 11 2013 Ivan Afonichev <ivan.afonichev@xxxxxxxxx> 0:7.0.40-1 - Updated to 7.0.40 - Resolves: rhbz 956569 added missing commons-pool link -------------------------------------------------------------------------------- References: [ 1 ] Bug #928294 - tomcat-7.0.39 is available https://bugzilla.redhat.com/show_bug.cgi?id=928294 [ 2 ] Bug #956569 - Missing link creation for apache-commons-pool https://bugzilla.redhat.com/show_bug.cgi?id=956569 [ 3 ] Bug #961806 - CVE-2013-2071 tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=961806 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
