The following Fedora 18 Security updates need testing: Age URL 228 https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2-1.fc18 74 https://admin.fedoraproject.org/updates/FEDORA-2013-17195/spice-gtk-0.18-3.fc18 71 https://admin.fedoraproject.org/updates/FEDORA-2013-17431/thunderbird-17.0.9-1.fc18 69 https://admin.fedoraproject.org/updates/FEDORA-2013-17635/wireshark-1.10.2-4.fc18 67 https://admin.fedoraproject.org/updates/FEDORA-2013-17853/davfs2-1.4.7-3.fc18 10 https://admin.fedoraproject.org/updates/FEDORA-2013-21875/389-ds-base-1.3.0.9-1.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-22312/xen-4.2.3-10.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-22315/ruby-1.9.3.484-32.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-22313/subversion-1.7.14-1.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2013-22422/php-symfony2-Security-2.2.10-1.fc18,php-symfony2-Yaml-2.2.10-1.fc18,php-symfony2-Translation-2.2.10-1.fc18,php-symfony2-Finder-2.2.10-1.fc18,php-symfony2-Routing-2.2.10-1.fc18,php-symfony2-Console-2.2.10-1.fc18,php-symfony2-HttpFoundation-2.2.10-1.fc18,php-symfony2-Config-2.2.10-1.fc18,php-symfony2-Validator-2.2.10-1.fc18,php-symfony2-ClassLoader-2.2.10-1.fc18,php-symfony2-PropertyAccess-2.2.10-1.fc18,php-symfony2-Filesystem-2.2.10-1.fc18,php-symfony2-Templating-2.2.10-1.fc18,php-symfony2-DependencyInjection-2.2.10-1.fc18,php-symfony2-HttpKernel-2.2.10-1.fc18,php-symfony2-BrowserKit-2.2.10-1.fc18,php-symfony2-DomCrawler-2.2.10-1.fc18,php-symfony2-EventDispatcher-2.2.10-1.fc18,php-symfony2-Form-2.2.10-1.fc18,php-symfony2-CssSelector-2.2.10-1.fc18,php-symfony2-OptionsResolver-2.2.10-1.fc18,php-symfony2-Process-2.2.10-1.fc18,php-symfony2-Serializer-2.2.10-1.fc18,php-symfony2-Locale-2.2.10-1.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2013-22456/seamonkey-2.22.1-1.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2013-22497/ganglia-3.6.0-3.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-22686/tuxcut-5.0-15.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-22607/nbd-3.5-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-22606/maradns-2.0.07d-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-22695/kernel-3.11.10-100.fc18 The following Fedora 18 Critical Path updates have yet to be approved: Age URL 297 https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5.fc18 13 https://admin.fedoraproject.org/updates/FEDORA-2013-21783/unzip-6.0-11.fc18 13 https://admin.fedoraproject.org/updates/FEDORA-2013-21776/soprano-2.9.4-2.fc18 10 https://admin.fedoraproject.org/updates/FEDORA-2013-21825/gvfs-1.14.2-5.fc18 10 https://admin.fedoraproject.org/updates/FEDORA-2013-21847/sane-backends-1.0.24-7.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-22215/taglib-1.9.1-2.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-22253/kde-settings-4.9-22.fc18 5 https://admin.fedoraproject.org/updates/FEDORA-2013-22299/fedora-bookmarks-15-4.fc18 2 https://admin.fedoraproject.org/updates/FEDORA-2013-22457/libbluray-0.4.0-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-22690/libfm-1.1.3-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-22695/kernel-3.11.10-100.fc18 The following builds have been pushed to Fedora 18 updates-testing google-crosextra-caladea-fonts-1.002-0.2.20130214.fc18 google-crosextra-carlito-fonts-1.103-0.1.20130920.fc18 gromacs-4.6.5-1.fc18 hg-git-0.4.0-4.fc18 kernel-3.11.10-100.fc18 libfm-1.1.3-1.fc18 perl-Date-Manip-6.42-1.fc18 tuxcut-5.0-15.fc18 Details about builds: ================================================================================ google-crosextra-caladea-fonts-1.002-0.2.20130214.fc18 (FEDORA-2013-22696) Sans-serif font metric-compatible with Cambria font -------------------------------------------------------------------------------- Update Information: new font package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1037629 - Add Google crosextra Caladea font in F18 https://bugzilla.redhat.com/show_bug.cgi?id=1037629 -------------------------------------------------------------------------------- ================================================================================ google-crosextra-carlito-fonts-1.103-0.1.20130920.fc18 (FEDORA-2013-22687) Sans-serif font metric-compatible with Calibri font -------------------------------------------------------------------------------- Update Information: New font package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1037291 - Add Google crosextra Carlito font in F18 https://bugzilla.redhat.com/show_bug.cgi?id=1037291 -------------------------------------------------------------------------------- ================================================================================ gromacs-4.6.5-1.fc18 (FEDORA-2013-22683) Fast, Free and Flexible Molecular Dynamics -------------------------------------------------------------------------------- Update Information: Update to 4.6.5. See changelog at http://www.gromacs.org/About_Gromacs/Release_Notes/Versions_4.6.x . -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 3 2013 Susi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 4.6.5-1 - Update to 4.6.5. * Thu Nov 14 2013 Susi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 4.6.4-1 - Update to 4.6.4. * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 4.6.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #969153 - gromacs-4.6.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=969153 -------------------------------------------------------------------------------- ================================================================================ hg-git-0.4.0-4.fc18 (FEDORA-2013-22674) Mercurial Plugin for Communicating with Git Servers -------------------------------------------------------------------------------- Update Information: Remove aggresive dep workingaround. -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 2 2013 Matěj Cepl <mcepl@xxxxxxxxxx> - 0.4.0-4 - We only need python-ordereddict on EPEL<=6. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1036831 - ordered dict is required only with python <= 2.6 (i.e., only EPEL-6) https://bugzilla.redhat.com/show_bug.cgi?id=1036831 -------------------------------------------------------------------------------- ================================================================================ kernel-3.11.10-100.fc18 (FEDORA-2013-22695) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 3.11.10 stable update contains a number of important fixes across the tree -------------------------------------------------------------------------------- ChangeLog: * Sat Nov 30 2013 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - CVE-2013-6405 net: leak of uninited mem to userspace via recv syscalls (rhbz 1035875 1035887) * Fri Nov 29 2013 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - 3.11.10-100 - Linux v3.11.10 - Fix memory leak in qxl (from Dave Airlie) * Tue Nov 26 2013 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - Add patch to fix usbnet URB handling (rhbz 998342) - Fix crash in via-velocity driver (rhbz 1022733) - CVE-2013-6382 xfs: missing check for ZERO_SIZE_PTR (rhbz 1033603 1034670) * Mon Nov 25 2013 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - CVE-2013-6380 aacraid: invalid pointer dereference (rhbz 1033593 1034304) - CVE-2013-6378 libertas: potential oops in debugfs (rhbz 1033578 1034183) * Fri Nov 22 2013 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - Add patches from Jeff Layton to fix 15sec NFS mount hang -------------------------------------------------------------------------------- References: [ 1 ] Bug #1035875 - CVE-2013-6405 Kernel: net: leakage of uninitialized memory to user-space via recv syscalls https://bugzilla.redhat.com/show_bug.cgi?id=1035875 [ 2 ] Bug #1033603 - CVE-2013-6382 Kernel: fs: xfs: missing check for ZERO_SIZE_PTR https://bugzilla.redhat.com/show_bug.cgi?id=1033603 [ 3 ] Bug #1033593 - CVE-2013-6380 Kernel: aacraid: invalid pointer dereference https://bugzilla.redhat.com/show_bug.cgi?id=1033593 [ 4 ] Bug #1033578 - CVE-2013-6378 Kernel: drivers: libertas: potential oops in debugfs https://bugzilla.redhat.com/show_bug.cgi?id=1033578 -------------------------------------------------------------------------------- ================================================================================ libfm-1.1.3-1.fc18 (FEDORA-2013-22690) GIO-based library for file manager-like programs -------------------------------------------------------------------------------- Update Information: New version 1.1.3 is released. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 3 2013 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.3-1 - 1.1.3 * Mon Nov 11 2013 Christoph Wickert <wickert@xxxxxxxxxxxx> - 1.1.2.2-3 - Rebuild for new menu-cache 0.5.x -------------------------------------------------------------------------------- ================================================================================ perl-Date-Manip-6.42-1.fc18 (FEDORA-2013-22681) Date manipulation routines -------------------------------------------------------------------------------- Update Information: This release completes DM6 functional interface with ParseDateFormat() function, it adds support for the Apache date format, it updates zone data to 2013h. It fixes date in delta with a time zone format and it silents a warning when no events were applied. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 3 2013 Petr Pisar <ppisar@xxxxxxxxxx> - 6.42-1 - 6.42 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1037520 - perl-Date-Manip-6.42 is available https://bugzilla.redhat.com/show_bug.cgi?id=1037520 -------------------------------------------------------------------------------- ================================================================================ tuxcut-5.0-15.fc18 (FEDORA-2013-22686) Arpspoof attacks protector -------------------------------------------------------------------------------- Update Information: TuxCut is a utility that protect linux computers againest arpspoof attacks Features: - Hide your machine (ip/MAC) from arp scanner utilities. - list all the live host in your LAN. - cut the connection between any live host and the gateway. - use wondershaper to limit your upload or download speed. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1015775 - Review Request: tuxcut - Arpspoof attacks protector https://bugzilla.redhat.com/show_bug.cgi?id=1015775 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test