Fedora 12 Update: php-symfony-YAML-1.0.3-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-6064
2010-04-09 00:18:36
--------------------------------------------------------------------------------
Name : php-symfony-YAML
Product : Fedora 12
Version : 1.0.3
Release : 1.fc12
URL : http://components.symfony-project.org/yaml/
Summary : The Symfony YAML Component
Description :
The Symfony YAML Component.
Symfony YAML is a PHP library that parses YAML strings and converts them to
PHP arrays. It can also converts PHP arrays to YAML strings.
--------------------------------------------------------------------------------
Update Information:
Upstream changelog: * fixed YAML parser when mbstring.func_overload is used
with an mbstring.internal_encoding different from ASCII * fixed offset when the
document use --- or the %YAML element * added ? in the list of characters that
trigger quoting (for compatibility with libyaml) * added backtick to the list
of characters that trigger quotes as it is reserved for future use * fixed
missing newline in sfYamlParser when parsing certain symfony core files *
removed the unused value property from Parser * changed Exception to
InvalidArgumentException * fixed YAML dump when a string contains a \r without
a \n
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update php-symfony-YAML' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora 12 Update: mathomatic-15.0.7-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-7770
2010-05-01 10:43:14
--------------------------------------------------------------------------------
Name : mathomatic
Product : Fedora 12
Version : 15.0.7
Release : 1.fc12
URL : http://www.mathomatic.org/
Summary : Small, portable symbolic math program
Description :
Mathomatic is a small, portable symbolic math program that can
automatically solve, simplify, differentiate, combine, and compare
algebraic equations, perform polynomial and complex arithmetic,
etc. It was written by George Gesslein II and has been under
development since 1986.
--------------------------------------------------------------------------------
Update Information:
Update to latest stable release mathomatic 15.0.7 as recommended by the upstream
author.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2010 Terje Rosten <terje.rosten(a)ntnu.no> - 15.0.7-1
- 15.0.7
* Sat Dec 5 2009 Terje Rosten <terje.rosten(a)ntnu.no> - 15.0.0-1
- 15.0.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mathomatic' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
[SECURITY] Fedora 11 Update: sudo-1.7.2p6-1.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-6749
2010-04-16 23:17:38
--------------------------------------------------------------------------------
Name : sudo
Product : Fedora 11
Version : 1.7.2p6
Release : 1.fc11
URL : http://www.courtesan.com/sudo/
Summary : Allows restricted root access for specified users
Description :
Sudo (superuser do) allows a system administrator to give certain
users (or groups of users) the ability to run some (or all) commands
as root while logging all commands and arguments. Sudo operates on a
per-command basis. It is not a replacement for the shell. Features
include: the ability to restrict what commands a user may run on a
per-host basis, copious logging of each command (providing a clear
audit trail of who did what), a configurable timeout of the sudo
command, and the ability to use the same configuration file (sudoers)
on many different machines.
--------------------------------------------------------------------------------
Update Information:
- update to new upstream version - merged .audit and .libaudit patch - added
sudoers.ldap.5* to files - http://sudo.ws/sudo/alerts/sudoedit_escalate2.html
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 14 2010 Daniel Kopecek <dkopecek(a)redhat.com> - 1.7.2p6-1
- update to new upstream version
- merged .audit and .libaudit patch
- added sudoers.ldap.5* to files
* Mon Mar 1 2010 Daniel Kopecek <dkopecek(a)redhat.com> 1.7.2p5-1
- update to new upstream version
- backport changes from F-12
* Thu Jul 9 2009 Daniel Kopecek <dkopecek(a)redhat.com> 1.7.1-4
- moved the closefrom() call before audit_help_open() (sudo-1.7.1-auditfix.patch)
* Wed Jul 8 2009 Daniel Kopecek <dkopecek(a)redhat.com> 1.7.1-3
- epoch number sync
* Mon Jun 22 2009 Daniel Kopecek <dkopecek(a)redhat.com> 1.7.1-2
- fixed small bug in configure.in (sudo-1.7.1-conffix.patch)
- sudo-1.7.1-audit.patch rediff because of missing code
* Tue May 12 2009 Daniel Kopecek <dkopecek(a)redhat.com> 1.7.1-1
- updated sudo to version 1.7.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #580441 - sudo: incomplete fix for the sudoedit privilege escalation issue CVE-2010-0426
https://bugzilla.redhat.com/show_bug.cgi?id=580441
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sudo' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora 11 Update: ejabberd-2.1.3-6.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-7351
2010-04-27 00:39:21
--------------------------------------------------------------------------------
Name : ejabberd
Product : Fedora 11
Version : 2.1.3
Release : 6.fc11
URL : http://www.ejabberd.im/
Summary : A distributed, fault-tolerant Jabber/XMPP server
Description :
ejabberd is a Free and Open Source distributed fault-tolerant
Jabber/XMPP server. It is mostly written in Erlang, and runs on many
platforms (tested on Linux, FreeBSD, NetBSD, Solaris, Mac OS X and
Windows NT/2000/XP).
--------------------------------------------------------------------------------
Update Information:
Fixed permissions for captcha.sh
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 29 2010 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.3-6
- File permissions for captcha.sh were fixed
* Thu Mar 18 2010 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.3-5
- Init-script fixed
* Thu Mar 18 2010 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.3-4
- Really fix issue with "File operation error: eacces".
* Thu Mar 18 2010 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.3-3
- Relax access rights of /usr/sbin/ejabberdctl (from 0550 to 0755)
- Invoke symlinked consolehelper instead of /usr/sbin/ejabberdctl
in init-script
- Fixed "File operation error: eacces" issue. See rhbz #564686.
* Thu Mar 18 2010 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.3-2
- Init-script enhancements
* Fri Mar 12 2010 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.3-1
- Ver. 2.1.3
- Patches rebased
* Fri Mar 5 2010 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.2-4
- Fixed issue with {erorr,nxdomain}
* Tue Feb 16 2010 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.2-3
- Do not try to backup DB on every fresh install
- Do not force copying old erlang cookie file
- Add missing release notes for ver. 2.1.2
- Require erlang-esasl for krb5 support
- No such %configure option - --enable-debug
- Patches were rebased and renumbered
- Add new BR util-linux(-ng)
* Fri Jan 29 2010 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.2-2
- Fixed BZ #559925 (EJAB-1173)
- Changed order of rpmbuild targets in this spec to more natural one.
* Mon Jan 18 2010 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.2-1
- Ver. 2.1.2
* Thu Dec 24 2009 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.1-1
- Ver. 2.1.1
- Dropped patches 9,11,12,13 (accepted upstream)
* Thu Dec 10 2009 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.0-2
- DB backups are made on every upgrade/uninstall
- Fixed installation of captcha.sh example helper
- Added patches 9,10,11,12,13 from Debian's package
* Fri Nov 20 2009 Peter Lemenkov <lemenkov(a)gmail.com> 2.1.0-1
- Ver. 2.1.0
- Upstream no longer providing ChangeLog
- Dropped ejabberd-build.patch (upstreamed)
- Dropped ejabberd-captcha.patch (upstreamed)
- Dropped ejabberd-decrease_buffers_in_mod_proxy65.patch (upstreamed)
- Dropped ejabberd-dynamic_compile_loglevel.patch (upstreamed)
- Dropped ejabberd-turn_off_error_messages_in_mod_caps.patch (upstreamed)
- Docs reorganized and added ability to rebuild them if possible
- Added back ppc64 target
- SQL-scripts moved to %{_datadir}/%{name} from %doc
* Thu Nov 5 2009 Peter Lemenkov <lemenkov(a)gmail.com> 2.0.5-10
- mod_ctlextra was updated from r873 to r1020
- Fix for BZ# 533021
* Wed Sep 16 2009 Tomas Mraz <tmraz(a)redhat.com> - 2.0.5-9
- Use password-auth common PAM configuration instead of system-auth
* Wed Sep 9 2009 Peter Lemenkov <lemenkov(a)gmail.com> 2.0.5-8
- Fixed possible issue in the config file for logrotate
- Fixed possible issue while creating dummy certificate
- Added patches #5,6,7,8 from Debian
* Thu Aug 27 2009 Tomas Mraz <tmraz(a)redhat.com> - 2.0.5-7
- rebuilt with new openssl
* Tue Aug 25 2009 Peter Lemenkov <lemenkov(a)gmail.com> 2.0.5-6
- Since now, we using only ejabberdctl in the init-script (bz# 502361)
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.0.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Tue Apr 21 2009 Peter Lemenkov <lemenkov(a)gmail.com> 2.0.5-3
- CAPTCHA is back - let's test it.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ejabberd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora 11 Update: xscreensaver-5.11-2.fc11
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-7764
2010-05-01 10:43:05
--------------------------------------------------------------------------------
Name : xscreensaver
Product : Fedora 11
Version : 5.11
Release : 2.fc11
URL : http://www.jwz.org/xscreensaver/
Summary : X screen saver and locker
Description :
A modular screen saver and locker for the X Window System.
More than 200 display modes are included in this package.
This is a metapackage for installing all default packages
related to XScreenSaver.
--------------------------------------------------------------------------------
Update Information:
A bug is reported by abrt that xscreensaver hacks crash without "pair" option
when some signal from X sent is caught by the hacks. This new rpm should fix
the issue.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 1 2010 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.11-2
- Fix crash when not using "pair" mode and when MappingNotify
or so is received (bug 587537)
* Mon Apr 12 2010 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.11-1
- Update to 5.11
- All patches sent to the upstream now applied in the tarball
- 2 new patches, one for autoconf, one for po
- Preserve 5.10 tarball for now for translation
* Sat Feb 27 2010 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp>
- F-12: rebuild with newer gcc
* Fri Feb 5 2010 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.10-6.1
- A bit more memleak fix
* Fri Feb 5 2010 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.10-6
- Fix memleak on analogtv based hacks, especially on apple2
* Wed Feb 3 2010 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.10-5
- Fix crash on noseguy when X resource is no longer available (bug 560614)
* Fri Dec 11 2009 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.10-4
- Fix occasional crash on substrate (bug 545847)
- Fix initialization process on apple2, hopefully fix bug 540790??
* Thu Oct 8 2009 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.10-2
- F-12+: Restrict Autostart effect to GNOME session only (bug 517391)
- F-12+: Use planet.fedoraproject.org for textURL (still the default textMode
is "file", i.e. no net connection)
* Tue Sep 8 2009 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.10-1
- Update to 5.10
- All non Fedora-specific patches applied upstream
* Thu Sep 3 2009 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.09-1
- Update to 5.09
- Drop patches applied by upstream (1 patch still pending on upstream
+ 2 Fedora specific patches left)
- Add one patch to generate missing header files
- Suppress compilation warnings with -std=c89
* Fri Aug 28 2009 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.08-13
- Another case of hack's crash when window size is too small
(Ubuntu bug 418419)
* Thu Jul 30 2009 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.08-12
- Install desktop application autostart stuff on F-12+
* Sat Jul 25 2009 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.08-11
- Build fix for new xextproto (libXext 1.0.99.3)
- Fix for breaking strict aliasing rule
- Again change %default_text
* Thu Jun 11 2009 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:5.08-10
- Fix crash on startup when randr reports no rroi->ncrtc
(bug 504912), patch from gentoo
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #587537 - [abrt] crash in xscreensaver-extras-1:5.11-1.fc12: Process /usr/libexec/xscreensaver/fontglide was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=587537
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xscreensaver' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora 12 Update: gdb-7.0.1-45.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-7365
2010-04-27 00:39:50
--------------------------------------------------------------------------------
Name : gdb
Product : Fedora 12
Version : 7.0.1
Release : 45.fc12
URL : http://gnu.org/software/gdb/
Summary : A GNU source-level debugger for C, C++, Java and other languages
Description :
GDB, the GNU debugger, allows you to debug programs written in C, C++,
Java, and other languages, by executing them in a controlled fashion
and printing their data.
--------------------------------------------------------------------------------
Update Information:
Fix crash on some uses of GNU IFUNC call from breakpoint condition.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-45.fc12
- Fix crash when using GNU IFUNC call from breakpoint condition.
* Wed Apr 14 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-44.fc12
- Fix pretty printers regression in 7.0.1-40.fc12 (Phil Muldoon, BZ 582052).
* Wed Apr 7 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-43.fc12
- Fix gstack to print even the frame #0. New gdb.base/gstack.exp. (BZ 579793)
* Wed Apr 7 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-42.fc12
- Merge gdb-6.3-gstack-without-path-20060414.p* into gdb-6.3-gstack-20050411.p*,
no real code change.
* Mon Apr 5 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-41.fc12
- Fix also false warning: section .dynbss not found in ...
* Sun Apr 4 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-40.fc12
- Upgrade libstdc++ Python pretty printers to r155978 (Phil Muldoon, BZ 561541).
* Sat Apr 3 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-39.fc12
- Fix dangling displays in separate debuginfo (BZ 574483).
* Fri Apr 2 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-38.fc12
- [expr-cumulative] Fix using-directive memory leak (Sami Wagiaalla, BZ 578351).
* Wed Mar 31 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-37.fc12
- Fix crash due to gdb-readline-6.0-signal.patch (BZ 575516)
* Fri Mar 26 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-36.fc12
- Fix incorrect relocation of sections with duplicate name (BZ 575737).
* Fri Mar 26 2010 Dennis Gilmore <dennis(a)ausil.us> - 7.0.1-35.1
- dont apply gdb-bz539590-gnu-ifunc.patch on sparc
- we dont yet have the support in glibc
* Mon Mar 15 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-35.fc12
- Drop gdb-6.5-bz218379-ppc-solib-trampoline-fix.patch having false symbols
resolving (related to BZ 573277).
* Fri Mar 12 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-34.fc12
- Fix parsing of gcc -feliminate-dwarf2-dups binaries (Tom Tromey, BZ 552619).
- Fix crash on pretty printed object by MI (Tom Tromey, BZ 560034).
- [delayed-symfile] Fix crash on failed reading psymtab (Tom Tromey, BZ 561784).
- Fix double-free on std::terminate handler (Tom Tromey, BZ 562975).
* Sun Feb 28 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-33.fc12
- [delayed-symfile] Backport fix of reread_symbols (Tom Tromey, BZ 562517).
- Fix false warning: section .gnu.liblist not found in ...
* Fri Feb 26 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-32.fc12
- Fix gdb.ada/* regressions (Keith Seitz).
- Disable addon (finish) due to inline-cmds.exp: up from outer_inline2 assert.
- Fix i386+x86_64 rwatch+awatch before run, regression against 6.8 (BZ 541866).
- Fix crash on stale addrinfo->sectindex (more sensitive due to the PIE patch).
- Remove false gdb_assert on $sp underflow.
- Workaround ia64 inferior calls clearing SP.
- testsuite: Fix long timeout on arches with failing gdb.base/interrupt.exp.
- Fix ia64 part of the bt-clone-stop.exp fix.
* Wed Feb 3 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-31.fc12
- Fortran: Fix regression on setting breakpoint at toplevel symbols (BZ 559291).
* Sun Jan 31 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-30.fc12
- Fix failed gdb_assert due to the PIE patchset (BZ 559414).
* Fri Jan 22 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-29.fc12
- Disable break-by-name on inlined functions due to a regression on parameters
of inlined functions falsely <optimized out> (BZ 556975 Comment 8).
* Thu Jan 21 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-28.fc12
- GNU IFUNCs compilation fixup for ppc*.
* Thu Jan 21 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-27.fc12
- Fix GNU IFUNCs - indirect functions - support (BZ 539590).
* Thu Jan 14 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-26.fc12
- Fix crash while executing python code.
* Tue Jan 12 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-25.fc12
- non-librpm missing debuginfo yumcommand now prints also --disablerepo='*'
to save some bandwidth by yum (Robin Green, BZ 554152).
* Sun Jan 10 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-24.fc12
- testsuite: BuildRequires also valgrind.
* Fri Jan 8 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-23.fc12
- Workaround missing libstdc++%{bits_other} in Koji.
* Fri Jan 8 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-22.fc12
- Comply with new package review:
- Fix .spec Source as this is not a snapshot now.
- Convert all spaces to tabs.
- Fix missing %defattr at %files for gdbserver.
- Replace all hardcoded-library-path by variants of %{_isa}.
- Include %{_isa} for appropriate Requires and BuildRequires.
* Thu Jan 7 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-21.fc12
- [vla] Fix regression on fields of structs in internal vars (BZ 553338).
- archer-jankratochvil-fedora12 commit: 6e73988f653ba986e8742f208f17ec084292cbd5
* Thu Jan 7 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-20.fc12
- Fix crash reading broken stabs (it377671).
* Sun Jan 3 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-19.fc12
- testsuite: Fixup false FAILs for gdb.cp/constructortest.exp.
* Sat Jan 2 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-18.fc12
- Fix regression of gdb-7.0 (from 6.8) crashing on typedefed bitfields.
- Fix related_breakpoint stale ref crash.
* Fri Jan 1 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0.1-17.fc12
- Formal upgrade to the FSF GDB release gdb-7.0.1.
- Fix regression of gdb-7.0.1 not preserving typedef of a field.
* Fri Jan 1 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-16.fc12
- More RHEL-5 compatibility updates.
- Disable the build-id support by default.
- Bundle back gdbserver to the base gdb package.
- Remove bundled pstack.
- Drop the BuildRequires of rpm-devel.
* Fri Jan 1 2010 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-15.fc12
- Fix error on a sw watchpoint active at function epilogue (hit on s390x).
- testsuite: Fix false MI "unknown output after running" regression.
- testsuite: Update ia64-sigtramp.exp for recent GDB.
- Implement bt-clone-stop.exp fix also for ia64.
- testsuite: Upstream condbreak.exp results stability fix (Daniel Jacobowitz).
* Thu Dec 24 2009 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-14.fc12
- testsuite: Fix constructortest.exp and expand-sals.exp for gcc-4.4.2-20.fc12.
* Mon Dec 21 2009 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-13.fc12
- [pie] Fix a race in testcase gdb.base/valgrind-db-attach.exp.
- Fix regression by python on ia64 due to stale current frame.
- Disable python iff RHEL-5 && (Brew || ppc64).
* Mon Dec 21 2009 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-12.fc12
- Workaround build on native ppc64 host.
- More RHEL-5 compatibility updates.
- Disable warning messages new for gdb-6.8+ for RHEL-5 backward compatibility.
- Workaround RHEL-5 kernels for detaching SIGSTOPped processes (BZ 498595).
- Serialize the testsuite output to keep the order for regression checks.
- Re-enable python for all non-ppc* arches.
- More gcc44 stack exceptions when running the testsuite on RHEL-5.
- Fix backward compatibility with G++ 4.1 namespaces "::".
- Fix regression on re-setting the single ppc watchpoint slot.
- Update snapshot of FSF gdb-7.0.x branch.
- Backport fix of dcache invalidation locking up GDB on ppc64 targets.
* Fri Dec 18 2009 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-11.fc12
- [pie] Fix general ppc64 regression due to a function descriptors bug.
- [pie] Fix also keeping breakpoints disabled in PIE mode.
- Import upstream <tab>-completion crash fix.
- Drop some unused patches from the repository.
- More RHEL-5 build compatibility updates.
- Use gfortran44 when running the testsuite on RHEL-5.
- Disable python there due to insufficient ppc multilib.
- Fix orphanripper hangs and thus enable it again.
* Mon Dec 14 2009 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-10.fc12
- Make gdb-6.3-rh-testversion-20041202.patch to accept both RHEL and Fedora GDB.
- Adjust BuildRequires for Fedora-12, RHEL-6 and RHEL-5 builds.
- [vla] Fix compatibility of dynamic arrays with iFort (BZ 514287).
- Fix stepping through OMP parallel Fortran sections (BZ 533176).
- New fix of bp conditionals [bp_location-accel] regression (BZ 538626).
* Mon Dec 7 2009 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-9.fc12
- Replace the PIE (Position Indepdent Executable) support patch by a new one.
- Drop gdb-6.3-nonthreaded-wp-20050117.patch as fuzzy + redundant.
- Fix callback-mode readline-6.0 regression for CTRL-C.
- Fix syscall restarts for amd64->i386 biarch.
- Various testsuite results stability fixes.
- Fix crash on reading stabs on 64bit (BZ 537837).
- archer-jankratochvil-fedora12 commit: 16276c1aad1366b92e687c72cab30192280e1906
- archer-jankratochvil-pie-fedora12 ct: 2ae60b5156d43aabfe5757940eaf7b4370fb05d2
* Thu Dec 3 2009 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-8.fc12
- Fix slowness/hang when printing some variables (Sami Wagiaalla, BZ 541093).
- archer-jankratochvil-fedora12 commit: 6817a81cd411acc9579f04dcc105e9bce72859ff
* Wed Nov 25 2009 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-7.fc12
- Support GNU IFUNCs - indirect functions (BZ 539590).
- Fix bp conditionals [bp_location-accel] regression (Phil Muldoon, BZ 538626).
- Fix missed breakpoint location [bp_location-accel] regression (upstream).
* Fri Oct 30 2009 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-6
- Fix missing zlib-devel BuildRequires to support compressed DWARF sections.
- Include post-7.0 FSF GDB fixes.
* Fri Oct 23 2009 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-5
- Make the package buildable on RHEL-5/CentOS-5 (without librpm there).
- archer-jankratochvil-fedora12 commit: 5b73ea6a0f74e63db3b504792fc1d37f548bdf5c
* Fri Oct 23 2009 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.0-4
- Fix rpm --excludedocs (BZ 515998).
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gdb' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora 12 Update: setroubleshoot-plugins-2.1.50-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-7497
2010-04-28 00:21:17
--------------------------------------------------------------------------------
Name : setroubleshoot-plugins
Product : Fedora 12
Version : 2.1.50
Release : 1.fc12
URL : https://fedorahosted.org/setroubleshoot
Summary : Analysis plugins for use with setroubleshoot
Description :
This package provides a set of analysis plugins for use with
setroubleshoot. Each plugin has the capacity to analyze SELinux AVC
data and system data to provide user friendly reports describing how
to interpret SELinux AVC denials.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 26 2010 <dwalsh(a)redhat.com> - 2.1.50-1
- Change use_nfs_home_dirs priority to happen after catchall_boolean
- Update translations
* Tue Apr 6 2010 <dwalsh(a)redhat.com> - 2.1.49-1
- Update translations
* Wed Mar 24 2010 <dwalsh(a)redhat.com> - 2.1.47-1
- Fix disable_ipv6 and update po
* Tue Mar 23 2010 <dwalsh(a)redhat.com> - 2.1.46-1
- add restorecon_source_context.py
- add sys_resource.py
* Mon Mar 15 2010 <dwalsh(a)redhat.com> - 2.1.45-1
- Add disable_ipv6 plugin
- Update translations
* Mon Mar 8 2010 <dwalsh(a)redhat.com> - 2.1.43-1
- Change priority on httpd_bad_labels
* Fri Mar 5 2010 <dwalsh(a)redhat.com> - 2.1.42-1
- Update translations
- Add sshd_root plugin
* Mon Feb 22 2010 <dwalsh(a)redhat.com> - 2.1.41-1
- Update translations
* Thu Feb 4 2010 <dwalsh(a)redhat.com> - 2.1.40-1
- Update translations
* Fri Jan 29 2010 <dwalsh(a)redhat.com> - 2.1.39-1
- Add Fuzzy translations
* Wed Jan 27 2010 <dwalsh(a)redhat.com> - 2.1.38-1
- Remove audit2why from catchall_booleans
* Mon Jan 18 2010 <dwalsh(a)redhat.com> - 2.1.37-1
- Fix FAQ pointer
- Fix handling of translations
* Mon Nov 30 2009 <dwalsh(a)redhat.com> - 2.1.35-1
- Remove plugin httpd_unified and httpd_tmp_bad_labels.
- Change priority on restorecon plugin
* Fri Nov 20 2009 <dwalsh(a)redhat.com> - 2.1.33-1
- Remove report bugzilla button on lots of sealerts where there is a boolean to set.
* Tue Nov 17 2009 <dwalsh(a)redhat.com> - 2.1.32-1
- Remove httpd_connect_all plugin
* Mon Nov 9 2009 <dwalsh(a)redhat.com> - 2.1.30-1
- Update-po
- Add privoxy_connect_any plugin
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #585014 - incorrect hint for fixing NFS denials
https://bugzilla.redhat.com/show_bug.cgi?id=585014
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update setroubleshoot-plugins' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora 12 Update: qterm-0.5.10-2.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-7397
2010-04-27 00:40:50
--------------------------------------------------------------------------------
Name : qterm
Product : Fedora 12
Version : 0.5.10
Release : 2.fc12
URL : http://qterm.sourceforge.net
Summary : BBS client for X Window System written in Qt
Description :
QTerm is a BBS client for X Window System. It supports telnet,ssh1 and ssh2
protocols. It also supports zmodem, URL detect, mouse action.
It also supports detecting location from ip address, but you need do some
extra work, see README.package.
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qterm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora 12 Update: qdevelop-0.28-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-7120
2010-04-21 21:41:57
--------------------------------------------------------------------------------
Name : qdevelop
Product : Fedora 12
Version : 0.28
Release : 1.fc12
URL : http://biord-software.org/fr/qdevelop/
Summary : Development environment dedicated to Qt4
Description :
QDevelop is a development environment entirely dedicated to Qt4,
which requires Qt4, gcc under Linux or MinGW under Windows,
possibly gdb for program debugging and ctags for code completion.
--------------------------------------------------------------------------------
Update Information:
Update to 0.28
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 18 2010 Nicoleau Fabien <nicoleau.fabien(a)gmail.com> - 0.28-1
- Update to 0.28
- Patch for qt 4.5.1 no more required
- New plugins package
- Using translation files
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qdevelop' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years
Fedora 12 Update: selinux-policy-3.6.32-113.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-7376
2010-04-27 00:40:12
--------------------------------------------------------------------------------
Name : selinux-policy
Product : Fedora 12
Version : 3.6.32
Release : 113.fc12
URL : http://oss.tresys.com/repos/refpolicy/
Summary : SELinux policy configuration
Description :
SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision 2.20090730
--------------------------------------------------------------------------------
Update Information:
* Thu Apr 22 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-113 - Allow
pulseaudio to read udev process state. - Dontaudit hal leaks * Fri Apr 16
2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-112 - Fix label for /usr/share
/system-config-services/gui.py - Allow snort to read network state information
- Fix reserved port desination from Dan Walsh * Tue Apr 13 2010 Miroslav
Grepl <mgrepl(a)redhat.com> 3.6.32-111 - Allow shorewall to execute hostname -
Allow gpg-agent to read symbolic links in bin directories - Allow vmware-host
to read and write generic character device files - Add munin plugin policy
from F13 - Add denyhosts policy from F13
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 22 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-113
- Allow pulseaudio to read udev process state.
- Dontaudit hal leaks
* Fri Apr 16 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-112
- Fix label for /usr/share/system-config-services/gui.py
- Allow snort to read network state information
- Fix reserved port desination from Dan Walsh
* Tue Apr 13 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-111
- Allow shorewall to execute hostname
- Allow gpg-agent to read symbolic links in bin directories
- Allow vmware-host to read and write generic character device files
- Add munin plugin policy from F13
- Add denyhosts polict from F13
* Thu Apr 8 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-110
- Add label for /opt/google/chrome/chrome-sandbox
- Allow asterisk to bind and connect to sip tcp ports
* Fri Apr 2 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-109
- Allow hald to manage block device files
* Tue Mar 30 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-108
- Add label for libgpac library
- Fixes for openvpn
* Fri Mar 26 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-107
- Allow pppd to read and write to modem devices
* Tue Mar 23 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-106
- Allow mysqld_safe setsched, getsched
- Allow logrotate to transition to sssd
- Allow snort to read and write generic USB devices
- Add label for piranha log files
- Add qpidd policy from rawhide
* Fri Mar 19 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-105
- Fixes for nagios
* Thu Mar 18 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-104
- Allow logrotate to transition to asterisk
- Allow xdm to transition to shutdown
- Allow shutdown dac_override
- Allow samba sys_chroot
* Mon Mar 15 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-103
- Add sosreport policy
* Mon Mar 15 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-102
- Allow bluetooth sys_admin capability
- Fix label for libADM libraries
- Allow libvirt to set svrit_image_t label on sysfs
- Add shutdown policy from Dan Walsh
* Wed Mar 10 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-101
- Allow nsplugin to manage pulseaudio homedir content
* Tue Mar 9 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-100
- Allow pulseaudio sys_tty_config capability
- Add label for cman_tool
- Fixes for corosync policy
- Allow abrt to get the attributes of all domains
- Allow abrt to read symbolic links on a NFS filesystem
* Fri Mar 5 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-99
- Add back etcfile attribute
* Fri Mar 5 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-98
- Allow modcluster to call getpwnam
- Allow useradd sys_ptrace capability
- Fixes for pulseaudio from Dan Walsh
- Allow swat to signal winbind
- Add label for mssql and allow apache to connect to this database port if boolean set
* Wed Mar 3 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-97
- Fixes for xserver from Dan Walsh
* Mon Mar 1 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-96
- Add cachefilesfd policy
- Update cobbler policy from F13
- Allow hald connect to usbmuxd over a unix domain
- Allow staff_t to read semanage module store
* Fri Feb 26 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-95
- Add fixes from Dan Walsh
* Fri Feb 26 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-94
- Fixes for MLS booting from Dan Walsh
* Thu Feb 25 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-93
- Fix wine dontaudit mmap_zero
- Add vbetool_mmap_zero_ignore boolean
- dontaudit acct using console
* Tue Feb 23 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-92
- Fixes for cluster policy
- Fixes for rgmanager
- Add label for /etc/pki dir in bind-chroot
- Allow system-config-firewall to send system log messages
- Remove label for Directory Server
* Wed Feb 17 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-91
- Add label for /opt/zimbra/log directory
- Add label for /usr/local/centreon/log directory
- Add label for /var/spool/bacula/log directory
- Add nagios_mail_plugin type for nagios mail plugins
- Do not audit attempts to search the network state directory for locate
- Allow ping read and write the console, all ttys and all ptys
- Allow pppd to send audit messages
- Allow modemmanager net_admin capability
- Fixes for cluster policy
* Fri Feb 12 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-90
- Allow dnsmasq to create log file
* Thu Feb 11 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-89
- Allow rpcd to read files with default file type
* Thu Feb 11 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-88
- Fixes for sandbox
- Allow quota to set priority of kernel threads
- Fixes for svirt
* Wed Feb 10 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-87
- Fixes for ipsec policy
- Allow pppd to get attributes of the modem devices
- Add label for /usr/share/e16/misc directory
* Tue Feb 9 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-86
- Allow mysql ipc_lock capability
- Allow passwd sys_nice capability
- Allow plymouth to read network config files
- Fixes for git
- Add label for /usr/sbin/ns-slapd
- Allow munin to list mail queue
- Add label for shorewall compiler
- Fixes for nagios plugin policy
- Allow auditctl to set priority of kernel threads
* Fri Feb 5 2010 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-85
- Cleanup spec file
* Thu Feb 4 2010 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-84
- Fix /var/lib labeling in post install
* Thu Feb 4 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-83
- Fixes for cluster policy
* Wed Feb 3 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-82
- Add label for /root/.Xdefaults
- Allow xauth to read symbolic links on a NFS filesystem
- Add label for /var/run/slim.lock
- Add mcelog policy
* Tue Feb 2 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-81
- Allow policykit-auth to set attributes on fonts cache directory
- Add label for RealPlayer plugins
- Add label for /usr/sbin/xrdp
- Allow chrome-sandbox to read gnome homedir content
- Allow rsyslogd to connect to MySQL using a unix domain stream socket
- Allow apache to list inotifyfs filesystem
- Add label for /dev/pps device
- Fixes for chronyd policy
* Mon Feb 1 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-80
- Allow xdm to execute octave
- Add label for var/run/lxdm.auth
- Allow pppd sys_admin capability
- Allow cups-pdf fowner capability
- Fix path for cluster binaries
- Fixes for pulseaudio
- Add label for /var/webmin directory
- Allow prelink execmod on files in home directory
- Allow cups-config to read process state of all user domains.
- Fixes for vmware policy
- Fixes for lirc policy
- Allow amavis to read utmp
* Fri Jan 29 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-79
- Fix rpm_dontaudit_leaks
- Fix typo in rgmanager.if
- Fixes for nis policy
* Wed Jan 27 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-78
- Allow to openvpn to read utmp
- Allow xdm to read the video4linux devices
- Add label for /etc/openldap/slapd.d directory
- Allow tgtd to manage fixed disk device nodes
- Allow chsh to execute nxserver
- Allow abrt_helper to send system log messages
- Add label for /etc/zabbix/web directory
- Add label for /sbin/mke4fs
* Mon Jan 25 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-77
- Allow xenstored to manage files on on a XENFS filesystem
- Allow cupsd to setattr on a fonts cache directory
- Allot smolt-client to send system log messages
* Fri Jan 22 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-76
- Add labeling for gitweb
- Allow plymouth to read and write the /dev/ptmx
- Fixes for sanbox
- Allow nagios_services_plugin_t to read snmpd libraries
* Thu Jan 21 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-75
- Allow sulogin to talk to console and tty_device_t
* Wed Jan 20 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-74
- Fixes for afs
- Remove transtion from system_cronjob to gpg domain
* Tue Jan 19 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-73
- Add labeling for /var/lib/avahi-autoipd directory
* Tue Jan 19 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-72
- Fixes for memcached from Dan Walsh
- Allow podsleuth to read user tmpfs files
- Allow tftpd to read system state information in proc
- Fixes for sssd from Dan Walsh
- Allow snmpd chown capability
* Fri Jan 15 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-71
- Allow hotplug to transition to brctl domain
- Fixes for sftpd
* Tue Jan 12 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-70
- Move users file to selection by spec file.
- Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t
* Mon Jan 11 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-69
- Fixes for iscsid
- Allow openvpn to bind to http port
- Add wine_mmap_zero_ignore boolean
* Fri Jan 8 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-68
- Fixes for xenconsoled
- Allow xauth to connectto xserver_t unix_stream_socket
- Add textrel_shlib_t fixes
- Add labeling for LXDM
- Allow cupsd_lpd_t to setattr fontconfig directory
- Allow abrt to getattr on all character file device nodes.
- Add labeling for the rest nagios plugins
* Wed Jan 6 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-67
- Allow snmbd to send itself signal
- Allow virt_domain to read /dev/random
- Allow apcupsd to send itself signull
- Allow swat to transition to nmbd
- Add textrel_shlib_t label for /usr/local/lib/codecs/
* Mon Jan 4 2010 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-66
- Allow lircd to use tcp_socket and connect/bind to port 8675
* Wed Dec 30 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-65
- Allow traceroute to use all terms
- Fix mgetty use for faxes
- Dontaudit xdm listing fusefs
- Allow xguest to resolve host names
- Allow abrt to read noxattr filesystems (cdrom)
- Allow abrt_helper to send itself signals
- Allow amavis to read certs
- Allow apache to bind to port 3000 (Ruby on rails)
- Asterist uses mysql and snmp
- Allow consolekit to write wtmp file for shutdown
- Allow cups ipc_lock
- Allow hal to transition to ppp
- Fix mailman labels for 64 bit systems
- dontaudit system_mail access to leaked terminals
- Allow mysqld_safe_t to unlink mysqld pid files
- nrpe_t uses getpw calls
- Allow NetworkManager to delete ppp pid files
- Allow pptp_t to sens userdomain signals
- Allow prelude to connect to mysql
- Allow swat to start winbind server
- Fixes for snort
- Allow telnetd to setattr user terminals
- Allow qemu to read fusefs
- Allow domains that have telinit to connectto upstart unix_stream_socket
- Dontaudit ipsec_mgmt sys_tty_config
- Fix labels for postgrestgres test suite
- Other textrel_shlib_t fixes
* Wed Dec 23 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-64
- Update to Rawhide filesystem.if file
- Allow abrt to read nfs
- Allow cups to search fusefs
- Allow dovecot_auth to search var_log
- Fix label on ksmtuned.pid
- Dontaudit policykit looking at mount points
- Allow xdm to manage /var/cache/fontconfig
- Allow xenstored to search xenfs
* Tue Dec 22 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-63
- Allow sendmail setpgid
- Allow dovecot to read nfs homedirs
* Mon Dec 21 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-62
- Add label for /var/ekpd
- Allow portreserve to look at bin files
- Allow gssd to ask the kernel to load modules
- If you can run mount you can run fusermount
* Mon Dec 21 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-61
- Fixes for sandbox_x_server
- Fix ntop policy
- Sandbox fixes
* Fri Dec 18 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-60
- Fixs for cluster policy
- mysql_safe fixes
- Fixes for sssd
- Cgroup access for virtd
- Dontaudit fail2ban leaks
* Tue Dec 15 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-59
- Dontaudit udp_socket leaks for xauth_t
- Dontaudit rules for iceauth_t
- Let locate read symlinks on noxattr file systems
- Remove wine from unconfined domain if unconfined pp removed
- Add labels for vhostmd
- Add port 546 as a dhcpc port
- Add labeled for /dev/dahdi
- Add certmonger policy
- Allow sysadm to communicate with racoon and zebra
- Allow dbus service dbus_chat with unconfined_t
- Fixes for xguest
- Add dontaudits for abrt
- file contexts for mythtv
- Lots of fixes for asterisk
- Fix file context for certmaster
- Add log dir for dovecot
- Policy for ksmtuned
- File labeling and fixes for mysql and mysql_safe
- New plugin infrstructure for nagios
- Allow nut_upsd_t dac_override
- File context fixes for nx
- Allow oddjob_mkhomedir to create homedir
- Add pcscd_pub interfaces to be used by xdm
- Add stream connect from fenced to corosync
- Fixes for swat
- Allow fsdaemon to manage scsi devices
- Policy for tgtd
- Policy for vhostmd
- Allow ipsec to create tmp files
- Change label on fusermount
* Thu Dec 10 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-58
- Dontaudit udp_socket leaks for xauth_t
* Wed Dec 9 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-57
- Allow unconfined_t to send dbus messages to setroubleshoot
- Allow confined screen app to setattr on user ttys
- remove wine_t from unconfined domain when unconfined.pp disabled
- Allow sysadm_t to communicate with racoon
- Allow xauth to be run from all unconfined user types
- Fix labeling on all /var/cache/mod_* apps
- Allow asterisk to communicate with postgresql
- Fix labeling for /var/lib/certmaster
- Add policy for ksmtuned and tgtd
- Fixes fro vhostmd
* Mon Dec 7 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-56
- Dontaudit exec of fusermount from xguest
- Allow licrd to use mouse_device
- Allow sysadm_t to connect to zebra stream socket
- Dontaudit policykit_auth trying to config terminal
- Allow logrotate and asterisk to execute asterisk
- Allow logrotate to read var_lib files (zope) and connect to fail2ban stream
- Allow firewallgui to communicate with unconfined_t
- Allow podsleuth to ask the kernel to load modules
- Fix labeling on vhostmd scripts
- Remove transition from unconfined_t to windbind_helper_t
- Allow abrt_helper to look at inotify
- Fix labels for mythtv
- Allow apache to signal sendmail
- allow asterisk to send mail
- Allow rpcd to get and setcap
- Add tor_bind_all_unreserved_ports boolean
- Add policy for vhostmd
- MOre textrel_shlib_t files
- Add rw_herited_term_perms
* Thu Dec 3 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-55
- Add fprintd_chat(unconfined_t) to fix su timeout problem
- Make xguest follow allow_execstack boolean
- Dontaudit dbus looking at nfs
* Thu Dec 3 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-54
- Require selinux-policy from selinux-policy-TYPE
- Add labeling to /usr/lib/win32 textrel_shlib_t
- dontaudit all leaks for abrt_helper
- Fix labeling for mythtv
- Dontaudit setroubleshoot_fix leaks
- Allow xauth_t to read usr_t
- Allow iptables to use fifo files
- Fix labeling on /var/lib/wifiroamd
* Tue Dec 1 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-53
- Remove transition from dhcpc_t to consoletype_t, just allow exec
- Fixes for prelink cron job
- Fix label on yumex backend
- Allow unconfined_java_t to communicate with iptables
- Allow abrt to read /tmp files
- Fix nut/ups policy
* Tue Dec 1 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-52
- Major fixup of ntop policy
- Fix label on /usr/lib/xorg/modules/extensions/libglx.so.195.22
- Allow xdm to signal session bus
- Allow modemmanager to use generic ptys, and sys_tty_config capability
- Allow abrt_helper chown access, dontaudit leaks
- Allow logwatch to list cifs and nfs file systems
- Allow kismet to read network state
- Allow cupsd_config_t to connecto unconfined unix_stream
- Fix avahi labeling and allow avahi to manage /etc/resolv.conf
- Allow sshd to read usr_t files
- Allow login programs to manage pcscd_var_run_t files
- Allow tor to read usr_t files
* Wed Nov 25 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-51
- Mark google shared libraries as requiring textrel_shlib
- Allow svirt to bind/connect to network ports
- Add label for .libvirt directory.
* Tue Nov 24 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-50
- Allow modemmanager sys_admin
* Mon Nov 23 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-49
- Allow sssd to read all processes domain
* Mon Nov 23 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-48
- Abrt connect to any port
- Dontaudit chrome-sandbox trying to getattr on all processes
- Allow passwd to execute gnome-keyring
- Allow chrome_sandbox_t to read home content inherited from the parent
- Fix eclipse labeling
- Allow mozilla to connect to flash port
- Allow pulseaudio to connect to unix_streams
- Allow sambagui to read secrets file
- Allow mount to mount unlabeled files
- ALlow abrt to use ypbind, send kill signals
- Allow arpwatch to create socket class
- Allow asterisk to read urand
- Allow corosync to communicate with user tmpfs
- Allow devicedisk to read virt images block devices
- Allow gpsd to sys_tty_config
- Fix nagios interfaces
- Policy for nagios plugins
- Fixes for nx
- Allow rtkit_daemon to read locale file
- Allow snort to create socket
- Additional perms for xauth
- lots of textrel_lib_t file context
* Tue Nov 17 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-47
- Make mozilla call in execmem.if optional to fix build of minimum install
- Allow uucpd to execute shells and send mail
- Fix label on libtfmessbsp.so
* Mon Nov 16 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-46
- abrt needs more access to rpm pid files
- Abrt wants to execute its own tmp files
- abrt needs to write sysfs
- abrt needs to search all file system dirs
- logrotate and tmpreaper need to be able to manage abrt cache
- rtkit_daemon needs to be able to setsched on lots of user apps
- networkmanager creates dirs in /var/lib
- plymouth executes lvm tools
* Fri Nov 13 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-45
- Allow mount on dos file systems
- fixes for upsmon and upsd to be able to retrieve pwnam and resolve addresses
* Thu Nov 12 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-44
- Add lighttpd file context to apache.fc
- Allow tmpreaper to read /var/cache/yum
- Allow kdump_t sys_rawio
- Add execmem_exec_t context for /usr/bin/aticonfig
- Allow dovecot-deliver to signull dovecot
- Add textrel_shlib_t to /usr/lib/libADM5avcodec.so
* Tue Nov 10 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-43
- Fix transition so unconfined_exemem_t creates user_tmp_t
- Allow chrome_sandbox_t to write to user_tmp_t when printing
- Allow corosync to connect to port 5404 and to interact with user_tmpfs_t files
- Allow execmem_t to execmod files in mozilla_home_t
- Allow firewallgui to communicate with nscd
* Mon Nov 9 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-42
- Allow kdump to read the kernel core interface
- Dontaudit abrt read all files in home dir
- Allow kismet client to write to .kismet dir in homedir
- Turn on asterisk policy and allow logrotate to communicate with it
- Allow abrt to manage rpm cache files
- Rules to allow sysadm_t to install a kernel
- Allow local_login to read console_device_t to Z series logins
- Allow automount and devicekit_disk to search all filesystem dirs
- Allow corosync to setrlimit
- Allow hal to read modules.dep
- Fix xdm using pcscd
- Dontaudit gssd trying to write user_tmp_t, kerberos libary problem.
- Eliminate transition from unconifned_t to loadkeys_t
- Dontaudit several leaks to xauth_t
- Allow xdm_t to search for man pages
- Allow xdm_dbus to append to xdm log
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #569085 - SELinux is preventing /usr/lib/news/bin/innd "sendto" access on /var/run/news/ctlinnd1N09cI.
https://bugzilla.redhat.com/show_bug.cgi?id=569085
[ 2 ] Bug #573001 - SELinux is preventing /usr/sbin/afsd "read" access on current.
https://bugzilla.redhat.com/show_bug.cgi?id=573001
[ 3 ] Bug #576770 - SELinux is preventing /usr/sbin/tzdata-update access to a leaked /tmp/tmpRWqqk1 file descriptor.
https://bugzilla.redhat.com/show_bug.cgi?id=576770
[ 4 ] Bug #579940 - SELinux is preventing /sbin/consoletype access to a leaked fifo_file file descriptor.
https://bugzilla.redhat.com/show_bug.cgi?id=579940
[ 5 ] Bug #581117 - SELinux is preventing /usr/bin/vmnet-bridge "read write" access to device vmnet0.
https://bugzilla.redhat.com/show_bug.cgi?id=581117
[ 6 ] Bug #581118 - SELinux is preventing /usr/bin/vmnet-natd "execute_no_trans" access on /usr/bin/vmnet-natd.
https://bugzilla.redhat.com/show_bug.cgi?id=581118
[ 7 ] Bug #581203 - SELinux is preventing /usr/bin/gpg-agent access to a leaked /bin/sh file descriptor.
https://bugzilla.redhat.com/show_bug.cgi?id=581203
[ 8 ] Bug #581257 - SELinux is preventing /usr/bin/perl "getattr" access on /usr/bin/lpstat.cups.
https://bugzilla.redhat.com/show_bug.cgi?id=581257
[ 9 ] Bug #581265 - SELinux is preventing /usr/bin/perl "getattr" access on /dev/mapper/control.
https://bugzilla.redhat.com/show_bug.cgi?id=581265
[ 10 ] Bug #581303 - SELinux is preventing /bin/bash "getattr" access on /bin/hostname.
https://bugzilla.redhat.com/show_bug.cgi?id=581303
[ 11 ] Bug #581457 - SELinux is preventing /opt/google/chrome/chrome "read" access on /opt/google/chrome/chrome.pak.
https://bugzilla.redhat.com/show_bug.cgi?id=581457
[ 12 ] Bug #581529 - SELinux is preventing /usr/bin/python "write" access on /etc/hosts.deny.purge.bak.
https://bugzilla.redhat.com/show_bug.cgi?id=581529
[ 13 ] Bug #581634 - SELinux is preventing /usr/libexec/vino-server "name_bind" access .
https://bugzilla.redhat.com/show_bug.cgi?id=581634
[ 14 ] Bug #581640 - SELinux is preventing /usr/bin/mono from executing /usr/share/system-config-services/gui.py.
https://bugzilla.redhat.com/show_bug.cgi?id=581640
[ 15 ] Bug #582056 - [abrt] crash in system-config-services-0.99.43-1.fc12: polkit.py:143:_enable_proxy:DBusException: org.freedesktop.DBus.Error.AccessDenied: An SELinux policy prevents this sender from sending this message to this recipient (rejected message had sender ":1.
https://bugzilla.redhat.com/show_bug.cgi?id=582056
[ 16 ] Bug #582060 - SELinux is preventing /usr/sbin/snort-plain "read" access on dev.
https://bugzilla.redhat.com/show_bug.cgi?id=582060
[ 17 ] Bug #582063 - SELinux is preventing /usr/bin/gpg "write" access on S.gpg-agent.
https://bugzilla.redhat.com/show_bug.cgi?id=582063
[ 18 ] Bug #582258 - SELinux is preventing /usr/sbin/mcelog "read" access on mem.
https://bugzilla.redhat.com/show_bug.cgi?id=582258
[ 19 ] Bug #582453 - SELinux is preventing /bin/rpm "sys_nice" access .
https://bugzilla.redhat.com/show_bug.cgi?id=582453
[ 20 ] Bug #582608 - SELinux is preventing /usr/bin/nautilus "setattr" access on fd.
https://bugzilla.redhat.com/show_bug.cgi?id=582608
[ 21 ] Bug #582836 - SELinux is preventing /usr/bin/perl access to a leaked tcp_socket file descriptor.
https://bugzilla.redhat.com/show_bug.cgi?id=582836
[ 22 ] Bug #583297 - SELinux is preventing /usr/bin/pulseaudio "search" access on !a.
https://bugzilla.redhat.com/show_bug.cgi?id=583297
[ 23 ] Bug #583638 - SELinux is preventing /usr/sbin/openvpn "getattr" access on /home/bbaetz/.pki/vpn01_cacert.pem.
https://bugzilla.redhat.com/show_bug.cgi?id=583638
[ 24 ] Bug #583936 - SELinux is preventing /sbin/ip "read" access on /var/run/pm-utils/network/dhclient.suspend.
https://bugzilla.redhat.com/show_bug.cgi?id=583936
[ 25 ] Bug #584764 - SELinux is preventing /usr/libexec/polkit-1/polkit-agent-helper-1 "search" access .
https://bugzilla.redhat.com/show_bug.cgi?id=584764
[ 26 ] Bug #582450 - munin_t: Constraints are defined in the policy sources in policy/constraints (general), policy/mcs (MCS), and policy/mls (MLS).
https://bugzilla.redhat.com/show_bug.cgi?id=582450
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update selinux-policy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years