The following Fedora 18 Security updates need testing: Age URL 182 https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2-1.fc18 28 https://admin.fedoraproject.org/updates/FEDORA-2013-17195/spice-gtk-0.18-3.fc18 25 https://admin.fedoraproject.org/updates/FEDORA-2013-17431/thunderbird-17.0.9-1.fc18 23 https://admin.fedoraproject.org/updates/FEDORA-2013-17635/wireshark-1.10.2-4.fc18 21 https://admin.fedoraproject.org/updates/FEDORA-2013-17853/davfs2-1.4.7-3.fc18 20 https://admin.fedoraproject.org/updates/FEDORA-2013-17912/chicken-4.8.0.4-4.fc18 13 https://admin.fedoraproject.org/updates/FEDORA-2013-18401/fping-3.5-3.fc18 9 https://admin.fedoraproject.org/updates/FEDORA-2013-18647/gnupg-1.4.15-1.fc18 8 https://admin.fedoraproject.org/updates/FEDORA-2013-18802/phpMyAdmin-3.5.8.2-1.fc18 8 https://admin.fedoraproject.org/updates/FEDORA-2013-18774/icu-49.1.1-12.fc18 8 https://admin.fedoraproject.org/updates/FEDORA-2013-18814/gnupg2-2.0.22-1.fc18,libgpg-error-1.11-1.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-19053/xen-4.2.3-4.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19307/GraphicsMagick-1.3.18-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19354/salt-0.17.1-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19458/bugzilla-4.2.7-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19452/libguestfs-1.20.12-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19472/python-crypto-2.6.1-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19271/scipy-0.12.1-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-18911/ReviewBoard-1.7.16-2.fc18,python-djblets-0.7.21-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19491/libuv-0.10.18-1.fc18,nodejs-0.10.21-1.fc18 The following Fedora 18 Critical Path updates have yet to be approved: Age URL 251 https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5.fc18 13 https://admin.fedoraproject.org/updates/FEDORA-2013-18402/keyutils-1.5.8-1.fc18 13 https://admin.fedoraproject.org/updates/FEDORA-2013-18380/ibus-1.5.4-2.fc18 9 https://admin.fedoraproject.org/updates/FEDORA-2013-18607/libxklavier-5.4-1.fc18 9 https://admin.fedoraproject.org/updates/FEDORA-2013-18622/selinux-policy-3.11.1-106.fc18 8 https://admin.fedoraproject.org/updates/FEDORA-2013-18814/gnupg2-2.0.22-1.fc18,libgpg-error-1.11-1.fc18 8 https://admin.fedoraproject.org/updates/FEDORA-2013-18774/icu-49.1.1-12.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-19021/taglib-1.9.1-1.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-19026/python-markupsafe-0.18-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19456/device-mapper-persistent-data-0.2.8-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19289/gdisk-0.8.8-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19249/sane-backends-1.0.24-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19292/usbmuxd-1.0.8-10.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19376/openssl-1.0.1e-28.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19232/gnome-abrt-0.3.2-1.fc18,abrt-2.1.8-1.fc18,libreport-2.1.8-2.fc18,satyr-0.10-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-19268/qtwebkit-2.3.3-1.fc18 The following builds have been pushed to Fedora 18 updates-testing R-3.0.2-1.fc18 bugzilla-4.2.7-1.fc18 collectl-3.6.8-1.fc18 device-mapper-persistent-data-0.2.8-1.fc18 ebook-tools-0.2.2-1.fc18 ffgtk-0.8.6-1.fc18 imapsync-1.569-1.fc18 libguestfs-1.20.12-1.fc18 libuv-0.10.18-1.fc18 lirc-0.9.0-17.fc18 liveusb-creator-3.12.0-1.fc18 malaga-suomi-voikko-1.14-1.fc18 mate-character-map-1.6.1-0.1.git2464a6c.fc18 nodejs-0.10.21-1.fc18 pcp-3.8.5-1.fc18 perl-Archive-Peek-0.35-2.fc18 perl-File-SearchPath-0.06-2.fc18 perl-Mail-IMAPClient-3.34-1.fc18 php-bartlett-PHP-CompatInfo-2.24.0-1.fc18 php-bartlett-PHP-Reflect-1.9.0-1.fc18 python-crypto-2.6.1-1.fc18 python-mygpoclient-1.7-1.fc18 python-pymtp-0.0.6-1.fc18 python-sgutils-0.2.1-4.fc18 rkward-0.6.1-4.fc18 rpy-2.3.8-1.fc18 sddm-0.2.0-0.16.20130914git50ca5b20.fc18 youtube-dl-2013.10.17-1.fc18 Details about builds: ================================================================================ R-3.0.2-1.fc18 (FEDORA-2013-19468) A language for data analysis and graphics -------------------------------------------------------------------------------- Update Information: Update R to 3.0.2. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 15 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 3.0.2-1 - update to 3.0.2 * Mon Aug 12 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 3.0.1-4 - add support for unversioned docdir in F20+ - fix compile on arm (thanks Debian, wish you'd upstreamed that patch) * Fri Aug 2 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.0.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1020588 - R and friends need an update https://bugzilla.redhat.com/show_bug.cgi?id=1020588 -------------------------------------------------------------------------------- ================================================================================ bugzilla-4.2.7-1.fc18 (FEDORA-2013-19458) Bug tracking system -------------------------------------------------------------------------------- Update Information: The following security issues have been discovered in Bugzilla 4.2.6: * A CSRF vulnerability in attachment.cgi can lead to an attachment being edited without the user consent. * Several unfiltered parameters when editing flagtypes can lead to XSS. * Due to an incomplete fix for CVE-2012-4189, some incorrectly filtered field values in tabular reports can lead to XSS. Version 4.2.7 (this one) fixes all these issues. -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 Emmanuel Seyman <emmanuel@xxxxxxxxx> - 4.2.7-1 - Update to 4.2.7 (security updates) - Patch bugzilla to write compiled templates under /var (#949130) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1020452 - CVE-2013-1734 CVE-2013-1742 CVE-2013-1743 bugzilla: multiple flaws corrected in upstream 4.0.11, 4.2.7, 4.4.1 https://bugzilla.redhat.com/show_bug.cgi?id=1020452 -------------------------------------------------------------------------------- ================================================================================ collectl-3.6.8-1.fc18 (FEDORA-2013-19500) A utility to collect various Linux performance data -------------------------------------------------------------------------------- Update Information: - update to upstream version 3.6.8 - upstream changelog at http://collectl.sourceforge.net/Releases.html -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 Dan Horák <dan[at]danny.cz> - 3.6.8-1 - upgrade to upstream version 3.6.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1020247 - collectl-3.6.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1020247 -------------------------------------------------------------------------------- ================================================================================ device-mapper-persistent-data-0.2.8-1.fc18 (FEDORA-2013-19456) Device-mapper thin provisioning tools -------------------------------------------------------------------------------- Update Information: New upstream version 0.2.8 introducing cache_{check,dump,repair,restore} New upstream version 0.2.7 New upstream release 0.2.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 Heinz Mauelshagen <heinzm@xxxxxxxxxx> - 0.2.8-1 - New upstream version 0.2.8 introducing cache_{check,dump,repair,restore} * Tue Sep 17 2013 Heinz Mauelshagen <heinzm@xxxxxxxxxx> - 0.2.7-1 - New upstream version 0.2.7 * Wed Jul 31 2013 Heinz Mauelshagen <heinzm@xxxxxxxxxx> - 0.2.3-1 - New upstream version -------------------------------------------------------------------------------- ================================================================================ ebook-tools-0.2.2-1.fc18 (FEDORA-2013-19466) Tools for accessing and converting various ebook file formats -------------------------------------------------------------------------------- Update Information: New upstream release. Fixes a bug causing a segmentation fault when opening invalid/corrupt epub documents. -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 John5342 <john5342 at, fedoraproject.org> 0.2.2-1 - New upstream release (fixes rhbz:1014443) - Drop rmhardcoded (-DLIB_SUFFIX now supported directly) * Wed Aug 21 2013 Remi Collet <rcollet@xxxxxxxxxx> - 0.2.1-5 - rebuild for new libzip * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.2.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1014443 - [abrt] nepomuk-core-4.11.1-1.fc19: __strlen_sse2: Process /usr/bin/nepomukindexer was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=1014443 -------------------------------------------------------------------------------- ================================================================================ ffgtk-0.8.6-1.fc18 (FEDORA-2013-19463) A solution for controlling Fritz!Box or compatible routers -------------------------------------------------------------------------------- Update Information: new upstream release Fixes BZ 737977 and BZ 948028 Adds support for latest international firware version More bugfixes -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 Louis Lagendijk <louis.lagendijk@xxxxxxxxx> 0.8.6-1 - New upstream release - Call monitor now has a menubar. Program will be closed if no trayicon is available and embedded - Fixes BZ 948028 - Fixes BZ 737977 - Fix crash when cancel is clicked in assistent (no profile) - Add support for international version of the 05.5x FRITZ!box firmware - Fixes issue where with new FW certain calltypes were not stored in calllist - Fix trayicon out of sync with open call monitor window - 2 fixes not yet in upstream 0.8.6: One for starting call monitor after the configuration assistant One for detection of trayicon visibility for starting call monitor * Mon Aug 19 2013 Milan Crha <mcrha@xxxxxxxxxx> - 0.8.5-5 - Rebuild for newer evolution-data-server * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.8.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Wed Jul 10 2013 Milan Crha <mcrha@xxxxxxxxxx> - 0.8.5-3 - Rebuild for new evolution-data-server * Sat Jun 22 2013 Louis Lagendijk <louis.lagendijk@xxxxxxxxx> 0.8.5-2 - Rebuilt for new libeshell/ libeutil -------------------------------------------------------------------------------- References: [ 1 ] Bug #737977 - [abrt] ffgtk-0.7.94-2.fc15: Process /usr/bin/ffgtk was killed by signal 6 (SIGABRT) https://bugzilla.redhat.com/show_bug.cgi?id=737977 [ 2 ] Bug #948028 - [abrt] ffgtk-0.8.5-1.fc18: strcmp: Process /usr/bin/ffgtk was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=948028 -------------------------------------------------------------------------------- ================================================================================ imapsync-1.569-1.fc18 (FEDORA-2013-19461) Tool to migrate email between IMAP servers -------------------------------------------------------------------------------- Update Information: Update to latest versions -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 17 2013 Nick Bebout <nb@xxxxxxxxxxxxxxxxx> - 1.569-1 - Upgrade to 1.569 -------------------------------------------------------------------------------- ================================================================================ libguestfs-1.20.12-1.fc18 (FEDORA-2013-19452) Access and modify virtual machine disk images -------------------------------------------------------------------------------- Update Information: New upstream stable branch version 1.20.12, fixing CVE-2013-4419. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 17 2013 Richard W.M. Jones <rjones@xxxxxxxxxx> - 1:1.20.12-1 - New upstream version 1.20.12. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1016960 - CVE-2013-4419 libguestfs: insecure temporary directory handling for guestfish's network socket https://bugzilla.redhat.com/show_bug.cgi?id=1016960 -------------------------------------------------------------------------------- ================================================================================ libuv-0.10.18-1.fc18 (FEDORA-2013-19491) Platform layer for node.js -------------------------------------------------------------------------------- Update Information: This release contains a security fix for the http server implementation, please upgrade as soon as possible. For more information, see <http://ur1.ca/fwrj8>. 2013.10.18, node.js Version 0.10.21 (Stable) * crypto: clear errors from verify failure (Timothy J Fontaine) * dtrace: interpret two byte strings (Dave Pacheco) * fs: fix fs.truncate() file content zeroing bug (Ben Noordhuis) * http: provide backpressure for pipeline flood (isaacs) * tls: fix premature connection termination (Ben Noordhuis) 2013.10.19, libuv Version 0.10.18 (Stable) * unix: fix uv_spawn() NULL pointer deref on ENOMEM (Ben Noordhuis) * unix: don't close inherited fds on uv_spawn() fail (Ben Noordhuis) * unix: revert recent FSEvent changes (Ben Noordhuis) * unix: fix non-synchronized access in signal.c (Ben Noordhuis) -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 1:0.10.18-1 - new upstream release 0.10.18 https://github.com/joyent/libuv/blob/v0.10.18/ChangeLog -------------------------------------------------------------------------------- ================================================================================ lirc-0.9.0-17.fc18 (FEDORA-2013-19467) The Linux Infrared Remote Control package -------------------------------------------------------------------------------- Update Information: Major update, changelog > 20 lines. See README.fedora -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 17 2013 Alec Leamas <leamas.alec@xxxxxxxxxxx> - 0.9.0-17 - Add a udev "Only use lirc" subpackage. - Revise enabling of lirc protocol. - Documenting upstream merge request. - Resurrect contrib/lircs, use systemctl. - Force creation of /run/lirc after installation. - Use /lib/tmpfiles.d, not /etc/tmpfiles.d with _tmpfilesdir macro. * Tue Oct 15 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 0.9.0-16 - fix build for f18 - remove BR perl, already called in build system - fix bogus in changelog date * Thu Oct 10 2013 Alec Leamas <leamas.alec@xxxxxxxxxxx> - 0.9.0-15 - Actually use sysconfig files (881976). - Modify lirc.service to not fork. - Add support for iguanaIR driver (#954146). - Add hardened build flag (955144). - Use actual systemd macros (850191). - Clean up some nowadays not used directives. - Run autoreconf by default (926082). - Cleanup some obsoleted autotools usage, two new patches. - Deactivate other decoders on start (923978). - Filter away docdir dependencies. - Remove obsolete F8 upgrade Obsoletes: (sic!). - Fix inconsistent/duplicate /usr/share/lirc in %files. - Add %doc (notably COPYING) to remotes subpackage. - Claim /etc/lirc. - Update to latest upstream (10 patches). - Use /var and /etc instead of %{_sysconfdir} and %{localstatedir}. - Removed obsolete code to move config files to /etc/lirc in %post. - Renamed main systemd service: lirc.service -> lircd.service. - Added socket activation support. - Don't claim temporary files in /run/lirc, they are just transient. - Initiate lircd.conf, lircmd.conf from external template. - Bumping release, 14 is published. * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.9.0-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #881976 - The lirc package installs /etc/sysconfig/lirc but does not seem to use it https://bugzilla.redhat.com/show_bug.cgi?id=881976 [ 2 ] Bug #954146 - RFE: please add iguanaIR driver support https://bugzilla.redhat.com/show_bug.cgi?id=954146 [ 3 ] Bug #955144 - lirc package should be built with PIE flags https://bugzilla.redhat.com/show_bug.cgi?id=955144 [ 4 ] Bug #850191 - Introduce new systemd-rpm macros in lirc spec file https://bugzilla.redhat.com/show_bug.cgi?id=850191 [ 5 ] Bug #926082 - lirc: Does not support aarch64 in f19 and rawhide https://bugzilla.redhat.com/show_bug.cgi?id=926082 [ 6 ] Bug #923978 - Starting lirc with the native systemd service does not deactivate other decoders https://bugzilla.redhat.com/show_bug.cgi?id=923978 -------------------------------------------------------------------------------- ================================================================================ liveusb-creator-3.12.0-1.fc18 (FEDORA-2013-19476) A liveusb creator -------------------------------------------------------------------------------- Update Information: - Fix quote chars in the ku.po (lmacken) - Bump the spec (lmacken) - Version bump (lmacken) - Display the actual error in the gui (lmacken) - Fix a bug in the release downloader (fixes #5) (lmacken) - Add SoaS v7 to the releases list (lmacken) - Merge pull request #4 from havalabdulkarim/patch-1 (lmacken) - Create ku.po (haval.abdulkarim) - Add mswsock.dll to the py2exe dll_excludes to fix an error (lmacken) - Revert "Update our win32 syslinux binary to 5.01". (lmacken) - Generate a fresh windows_dialog.py with the new release refresher button (lmacken) - Bump the version in our nsi configs (lmacken) - Update our win32 syslinux binary to 5.01 (lmacken) - Change our overlay restriciton warnings to debug messages (lmacken) - Show warnings in the gui (lmacken) - Stop our progress thread before unmounting (lmacken) - Enable verbose logging during our tests (lmacken) - Log exceptions when trying to clean up our processes (lmacken) - whitespace tweaks and move an import around (lmacken) - Update the copyright (lmacken) - More improvements to the maximum overlay size code (lmacken) - Get persistent overlays working with F18 (#908120) (lmacken) - Handle devices without any free space (lmacken) - Fix another bug with non-ascii device labels (#863064) (lmacken) - Handle integers in LiveUSBDialog.status (#820809) (lmacken) - Don't display unnecessary warnings (#804) (lmacken) - Handle non-ascii mount paths (#802) (lmacken) - Limit the overlay size to 3999MB for FAT32 (#619) (lmacken) - Change isolinux to syslinux in the grub.cfg (#810112) (lmacken) - Always refer to the label LIVE instead of the device UUID (#809) (lmacken) - /EFI/boot/grub.conf has been renamed to /EFI/BOOT/grub.cfg (lmacken) - whitespace fixes (lmacken) - Update the copyright (lmacken) - Don't call sys.exit in our __init__ (rhbz#842878) (lmacken) - Change the arch order (#811) (lmacken) - Support non-ascii mount points (#660603) (lmacken) - Wrap more of our strings for i18n (lmacken) -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 16 2013 Luke Macken <lmacken@xxxxxxxxxx> 3.12.0-1 - Update to 3.12.0 * Wed Aug 14 2013 Luke Macken <lmacken@xxxxxxxxxx> 3.11.8-6 - Fix the ExcludeArch for arm * Sat Aug 10 2013 Luke Macken <lmacken@xxxxxxxxxx> 3.11.8-5 - Exclude building for armhfp, since syslinux is not available. * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.11.8-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Wed Jun 26 2013 Adam Williamson <awilliam@xxxxxxxxxx> - 3.11.8-3 - require usermode-gtk (or else it doesn't run from menus): #976415 * Fri Apr 26 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 3.11.8-2 - Drop desktop vendor tag. -------------------------------------------------------------------------------- References: [ 1 ] Bug #981039 - [abrt] liveusb-creator-3.11.8-1.fc18: gui.py:80:__init__:LiveUSBError: Unknown release: Fedora Desktop x86_64 19 1 https://bugzilla.redhat.com/show_bug.cgi?id=981039 [ 2 ] Bug #908120 - Persistent storage on USB flash not mounted, changes don't persist https://bugzilla.redhat.com/show_bug.cgi?id=908120 [ 3 ] Bug #863064 - [abrt] liveusb-creator-3.11.7-1.fc17: gui.py:372:on_driveBox_currentIndexChanged:UnicodeEncodeError: 'ascii' codec can't encode character u'\xfd' in position 14: ordinal not in range(128) https://bugzilla.redhat.com/show_bug.cgi?id=863064 [ 4 ] Bug #820809 - [abrt] liveusb-creator-3.11.6-3.fc17: gui.py:431:status:TypeError: QTextEdit.append(QString): argument 1 has unexpected type 'int' https://bugzilla.redhat.com/show_bug.cgi?id=820809 [ 5 ] Bug #810112 - liveusb-creator-written LiveCDs are not UEFI bootable https://bugzilla.redhat.com/show_bug.cgi?id=810112 [ 6 ] Bug #842878 - Remove sys.exit(1) from liveusb/__init__.py https://bugzilla.redhat.com/show_bug.cgi?id=842878 [ 7 ] Bug #660603 - I see onion peeling in submarine in your future https://bugzilla.redhat.com/show_bug.cgi?id=660603 -------------------------------------------------------------------------------- ================================================================================ malaga-suomi-voikko-1.14-1.fc18 (FEDORA-2013-19470) A description of Finnish morphology written in Malaga (Voikko edition) -------------------------------------------------------------------------------- Update Information: New upstream release: - New words have been added and various small bugs have been fixed. -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 Ville-Pekka Vainio <vpvainio AT iki.fi> - 1.14-1 - Suomi-malaga 1.14 * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.12-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.12-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ mate-character-map-1.6.1-0.1.git2464a6c.fc18 (FEDORA-2013-19440) Unicode character picker and font browser -------------------------------------------------------------------------------- Update Information: - update to latest git snapshot - fix crash on search, rhbz (#1020980) -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1.6.1-0.1.git2464a6c - update to latest git snapshot - fix crash on search, rhbz (#1020980) * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.6.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1020980 - [abrt] mate-character-map-1.6.0-4.fc19: _mucharmap_search_dialog_fire_search: Process /usr/bin/mucharmap was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=1020980 -------------------------------------------------------------------------------- ================================================================================ nodejs-0.10.21-1.fc18 (FEDORA-2013-19491) JavaScript runtime -------------------------------------------------------------------------------- Update Information: This release contains a security fix for the http server implementation, please upgrade as soon as possible. For more information, see <http://ur1.ca/fwrj8>. 2013.10.18, node.js Version 0.10.21 (Stable) * crypto: clear errors from verify failure (Timothy J Fontaine) * dtrace: interpret two byte strings (Dave Pacheco) * fs: fix fs.truncate() file content zeroing bug (Ben Noordhuis) * http: provide backpressure for pipeline flood (isaacs) * tls: fix premature connection termination (Ben Noordhuis) 2013.10.19, libuv Version 0.10.18 (Stable) * unix: fix uv_spawn() NULL pointer deref on ENOMEM (Ben Noordhuis) * unix: don't close inherited fds on uv_spawn() fail (Ben Noordhuis) * unix: revert recent FSEvent changes (Ben Noordhuis) * unix: fix non-synchronized access in signal.c (Ben Noordhuis) -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 0.10.21-1 - new upstream release 0.10.21 http://blog.nodejs.org/2013/10/18/node-v0-10-21-stable/ - resolves an undisclosed security vulnerability in the http module -------------------------------------------------------------------------------- ================================================================================ pcp-3.8.5-1.fc18 (FEDORA-2013-19454) System-level performance monitoring and performance management -------------------------------------------------------------------------------- Update Information: Update to upstream bugfix release. -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 Nathan Scott <nathans@xxxxxxxxxx> - 3.8.5-1 - Update to latest PCP sources. - Disable pcp-pmda-infiniband sub-package on RHEL5 (BZ 1016368) -------------------------------------------------------------------------------- ================================================================================ perl-Archive-Peek-0.35-2.fc18 (FEDORA-2013-19485) Peek into archives without extracting them -------------------------------------------------------------------------------- Update Information: This is the first Fedora/EPEL release of perl-Archive-Peek. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1020404 - Review Request: perl-Archive-Peek - Peek into archives without extracting them https://bugzilla.redhat.com/show_bug.cgi?id=1020404 -------------------------------------------------------------------------------- ================================================================================ perl-File-SearchPath-0.06-2.fc18 (FEDORA-2013-19475) Search for a file in an environment variable path -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- ================================================================================ perl-Mail-IMAPClient-3.34-1.fc18 (FEDORA-2013-19461) An IMAP Client API -------------------------------------------------------------------------------- Update Information: Update to latest versions -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 17 2013 Nick Bebout <nb@xxxxxxxxxxxxxxxxx> - 3.34-1 - Upgrade to 3.34 * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.33-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Mon Jul 22 2013 Petr Pisar <ppisar@xxxxxxxxxx> - 3.33-2 - Perl 5.18 rebuild -------------------------------------------------------------------------------- ================================================================================ php-bartlett-PHP-CompatInfo-2.24.0-1.fc18 (FEDORA-2013-19016) Find out version and the extensions required for a piece of code to run -------------------------------------------------------------------------------- Update Information: PHP_Reflect Version 1.9.0 (2013-10-12) Additions and changes: * drop support of PHP 5.2 * add Composer support Bug fixes: * avoid wrong trait detection if source code used a class property named trait: $this->trait PHP_CompatInfo Version 2.24.0 (2013-10-17) Additions and changes: * add both support to PHP 5.4.21 and 5.5.5 * update imagick reference to 3.1.2 * update mongo reference to 1.4.4 * update xhprof reference to 0.9.4 * update varnish reference to 1.1.0 * update zip reference to 1.12.1 * update xcache reference to 3.1.0 * update zend opcache reference to 7.0.3-dev bundled in PHP 5.5.5 * convert test case classes from standard fixtures to shared fixtures * DYN (lazy loader) is now rules completed. May be used in production * tests suites may be now run with default memory limit * extension not available message is received by all PHPUnit test listeners * add a new PHPUnit test listener useful to know what reference is loaded and tested * add composer support (GH-102 request) * raise PHP_Reflect dependency to 1.9.0 * detect more constants (when used as argument in function signature/call) -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.24.0-1 - update to 2.24.0 - raise dependency, PHP_Reflect 1.9.0 -------------------------------------------------------------------------------- ================================================================================ php-bartlett-PHP-Reflect-1.9.0-1.fc18 (FEDORA-2013-19016) Adds the ability to reverse-engineer PHP -------------------------------------------------------------------------------- Update Information: PHP_Reflect Version 1.9.0 (2013-10-12) Additions and changes: * drop support of PHP 5.2 * add Composer support Bug fixes: * avoid wrong trait detection if source code used a class property named trait: $this->trait PHP_CompatInfo Version 2.24.0 (2013-10-17) Additions and changes: * add both support to PHP 5.4.21 and 5.5.5 * update imagick reference to 3.1.2 * update mongo reference to 1.4.4 * update xhprof reference to 0.9.4 * update varnish reference to 1.1.0 * update zip reference to 1.12.1 * update xcache reference to 3.1.0 * update zend opcache reference to 7.0.3-dev bundled in PHP 5.5.5 * convert test case classes from standard fixtures to shared fixtures * DYN (lazy loader) is now rules completed. May be used in production * tests suites may be now run with default memory limit * extension not available message is received by all PHPUnit test listeners * add a new PHPUnit test listener useful to know what reference is loaded and tested * add composer support (GH-102 request) * raise PHP_Reflect dependency to 1.9.0 * detect more constants (when used as argument in function signature/call) -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 12 2013 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 1.9.0-1 - Update to 1.9.0 - raise dependency on PHP >= 5.3 -------------------------------------------------------------------------------- ================================================================================ python-crypto-2.6.1-1.fc18 (FEDORA-2013-19472) Cryptography library for Python -------------------------------------------------------------------------------- Update Information: In previous versions of PyCrypto, the Crypto.Random PRNG exhibits a race condition that may cause forked processes to generate identical sequences of 'random' numbers. This release fixes the problem by resetting the rate-limiter when Crypto.Random.atfork() is invoked. -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 Paul Howarth <paul@xxxxxxxxxxxx> - 2.6.1-1 - Update to 2.6.1 - Fix PRNG not correctly reseeded in some situations (CVE-2013-1445) * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.6-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.6-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1020814 - CVE-2013-1445 python-crypto: PRNG not correctly reseeded in some situations https://bugzilla.redhat.com/show_bug.cgi?id=1020814 -------------------------------------------------------------------------------- ================================================================================ python-mygpoclient-1.7-1.fc18 (FEDORA-2013-19455) Python module to connect to the my.gpodder.org webservice -------------------------------------------------------------------------------- Update Information: New upstream release, see http://thp.io/2010/mygpoclient/ -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 18 2013 Ville-Pekka Vainio <vpvainio AT iki.fi> 1.7-1 - New upstream release * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.6-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.6-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #961094 - python-mygpoclient 1.7 available https://bugzilla.redhat.com/show_bug.cgi?id=961094 -------------------------------------------------------------------------------- ================================================================================ python-pymtp-0.0.6-1.fc18 (FEDORA-2013-19444) A Pythonic wrapper around libmtp -------------------------------------------------------------------------------- Update Information: New upstream version -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 17 2013 Abel Luck <abel@xxxxxxxxxxxxxxxxx> - 0.0.6-1 - Update to latest version - Remove uneeded patch * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.0.4-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.0.4-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1020351 - new version of pymtp available https://bugzilla.redhat.com/show_bug.cgi?id=1020351 -------------------------------------------------------------------------------- ================================================================================ python-sgutils-0.2.1-4.fc18 (FEDORA-2013-19483) Python support for sg3_utils -------------------------------------------------------------------------------- Update Information: fix improper chmod of sgutils.so -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ rkward-0.6.1-4.fc18 (FEDORA-2013-19468) Graphical frontend for R language -------------------------------------------------------------------------------- Update Information: Update R to 3.0.2. -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 16 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 0.6.1-4 - update for R 3.0.2 * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.6.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1020588 - R and friends need an update https://bugzilla.redhat.com/show_bug.cgi?id=1020588 -------------------------------------------------------------------------------- ================================================================================ rpy-2.3.8-1.fc18 (FEDORA-2013-19468) Python interface to the R language -------------------------------------------------------------------------------- Update Information: Update R to 3.0.2. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 15 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 2.3.8-1 - update to 2.3.8, rebuild for R 3.0.2 * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.3.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1020588 - R and friends need an update https://bugzilla.redhat.com/show_bug.cgi?id=1020588 -------------------------------------------------------------------------------- ================================================================================ sddm-0.2.0-0.16.20130914git50ca5b20.fc18 (FEDORA-2013-19245) QML based X11 desktop manager -------------------------------------------------------------------------------- Update Information: Improved session selection, and use basic fedora (non-userlist) theme by default. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 15 2013 Martin Briza <mbriza@xxxxxxxxxx> - 0.2.0-0.16.20130914git50ca5b20 - Fixed the Fedora theme wallpaper path * Tue Oct 15 2013 Martin Briza <mbriza@xxxxxxxxxx> - 0.2.0-0.15.20130914git50ca5b20 - Added XDMCP support patch - Modified the config to reflect the added XDMCP support (disabled by default) * Tue Oct 15 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 0.2.0-0.14.20130914git50ca5b20 - sddm.conf: CurrentTheme=fedora * Mon Oct 14 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 0.2.0-0.13.20130914git50ca5b20 - include standard theme/config here, Obsoletes: kde-settings-sddm - sddm.conf: SessionCommand=/etc/X11/xinit/Xsession * Mon Oct 14 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 0.2.0-0.12.20130914git50ca5b20 - -themes: Obsoletes: sddm ... for upgrade path * Mon Oct 14 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 0.2.0-0.11.20130914git50ca5b20 - -themes subpkg * Sat Sep 21 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 0.2.0-0.10.20130914git50ca5b20 - use %_qt4_importdir, %systemd_requires macros - own %_datadir/apps/sddm - fix Release - drop explicit Requires: pam (let rpm autodeps handle it) * Mon Sep 16 2013 Martin Briza <mbriza@xxxxxxxxxx> - 0.2.0-0.9.20130914git50ca5b20 - Requires: kde-settings-sddm * Mon Sep 16 2013 Martin Briza <mbriza@xxxxxxxxxx> - 0.2.0-0.8.20130914git50ca5b20 - Moved the config to the kde-settings-sddm package * Sat Sep 14 2013 Martin Briza <mbriza@xxxxxxxxxx> - 0.2.0-0.7.20130914git50ca5b20 - Removed the nonfree font from the package, replaced with "Sans" - Temporarily set my own repository as the origin to avoid having the font in the srpm - Changing the source also brings us a few new commits and removes Patch1 for PAM * Mon Sep 9 2013 Martin Briza <mbriza@xxxxxxxxxx> - 0.2.0-0.6.20130821gite707e229 - Added the patch, forgot to apply it, now it's okay * Mon Sep 9 2013 Martin Briza <mbriza@xxxxxxxxxx> - 0.2.0-0.5.20130821gite707e229 - Set a better order of the X sessions selection and hidden the Custom one (#1004902) -------------------------------------------------------------------------------- ================================================================================ youtube-dl-2013.10.17-1.fc18 (FEDORA-2013-19493) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information: New version New version. New version. New version. New version. New version. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 17 2013 Christopher Meng <rpm@xxxxxxxx> - 2013.10.17-1 - Update to new release(BZ#1019694). * Thu Oct 10 2013 Christopher Meng <rpm@xxxxxxxx> - 2013.10.09-1 - Update to new release(BZ#1017630). * Mon Oct 7 2013 Christopher Meng <rpm@xxxxxxxx> - 2013.10.07-1 - Update to new release(BZ#1014266). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1019694 - youtube-dl-2013.10.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1019694 [ 2 ] Bug #1014266 - youtube-dl-2013.10.01.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1014266 [ 3 ] Bug #1013394 - youtube-dl-2013.09.29 is available https://bugzilla.redhat.com/show_bug.cgi?id=1013394 [ 4 ] Bug #1017630 - youtube-dl-2013.10.09 is available https://bugzilla.redhat.com/show_bug.cgi?id=1017630 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
