Fedora 12 Update: libguestfs-1.2.7-1.fc12.1
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10048
2010-06-21 11:48:40
--------------------------------------------------------------------------------
Name : libguestfs
Product : Fedora 12
Version : 1.2.7
Release : 1.fc12.1
URL : http://libguestfs.org/
Summary : Access and modify virtual machine disk images
Description :
Libguestfs is a library for accessing and modifying guest disk images.
Amongst the things this is good for: making batch configuration
changes to guests, getting disk used/free statistics (see also:
virt-df), migrating between virtualization systems (see also:
virt-p2v), performing partial backups, performing partial guest
clones, cloning guests and changing registry/UUID/hostname info, and
much else besides.
Libguestfs uses Linux kernel and qemu code, and can access any type of
guest filesystem that Linux and qemu can, including but not limited
to: ext2/3/4, btrfs, FAT and NTFS, LVM, many different disk partition
schemes, qcow, qcow2, vmdk.
Libguestfs provides ways to enumerate guest storage (eg. partitions,
LVs, what filesystem is in each LV, etc.). It can also run commands
in the context of the guest.
Libguestfs is a library that can be linked with C and C++ management
programs.
See also the 'guestfish' package for shell scripting and command line
access, and 'libguestfs-mount' for mounting guest filesystems on the
host using FUSE.
For Perl bindings, see 'perl-libguestfs'.
For OCaml bindings, see 'ocaml-libguestfs-devel'.
For Python bindings, see 'python-libguestfs'.
For Ruby bindings, see 'ruby-libguestfs'.
For Java bindings, see 'libguestfs-java-devel'.
--------------------------------------------------------------------------------
Update Information:
Updated for renamed openssl files.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 17 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.7-1.1
- Bump and rebuild.
* Mon May 17 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.7-1
- New upstream stable branch version 1.2.7.
- Add BUGS file to documentation section.
* Wed Apr 21 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.3-1.fc12.6
- Patch appliance so it doesn't call hwclock (causes qemu to segfault).
- Disable checks because qemu-kvm in F-12 keeps segfaulting.
* Tue Apr 20 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.3-1.fc12.2
- Try rebuild.
* Tue Apr 20 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.3-1
- New upstream stable branch version 1.2.3.
- Fixes: 582548, 583554, 582948, 582901, 582929, 582899, 582953,
578407.
* Thu Apr 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.2-1
- New upstream stable branch version 1.2.2.
- Fixes RHBZ#580016.
- Fixes several important bugs in virt-resize.
* Thu Apr 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.2.1-1
- New upstream stable branch version 1.2.1.
- Includes the new tools virt-list-partitions, virt-resize, and
updated virt-rescue and virt-win-reg (with regedit support).
- Reenable tests.
- Fixes bugs: 580650, 579155, 580246, 579664, 578123, 509597,
505329, 576876, 576688, 576689, 569757, 567567, 570181.
* Fri Mar 12 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.85-2.4
- Backport upstream patch to remove dependency on /lib/libntfs-3g.so.N.
- The above depends on the bash quoting patch, so apply that first.
* Mon Mar 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.85-2.3
- Rebuild against latest plymouth in F-13 updates-testing.
* Mon Mar 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.85-2.2
- Bump and rebuild.
* Fri Mar 5 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.85-2.1
- Bump and rebuild.
* Wed Mar 3 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.85-2
- Bump and rebuild.
* Mon Mar 1 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.85-1
- New upstream version 1.0.85.
- Remove hivex, now a separate upstream project and package.
- Remove supermin quoting patch, now upstream.
* Mon Mar 1 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.84-6
- Fix quoting in supermin-split script (RHBZ#566511).
- Don't include bogus './builddir' entries in supermin hostfiles
(RHBZ#566512).
* Mon Feb 22 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.84-4
- Don't include generator.ml in rpm. It's 400K and almost no one will need it.
- Add comments to spec file about how repo building works.
- Whitespace changes in the spec file.
* Mon Feb 22 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.84-3
- Bump and rebuild.
* Tue Feb 16 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.84-2
- Bump and rebuild.
* Fri Feb 12 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.84-1
- New upstream version 1.0.84.
* Fri Feb 12 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.83-8
- Bump and rebuild.
* Thu Feb 11 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.83-7
- Disable tests. These fail in Koji (on RHEL 5 kernel) because of a
bug in preadv/pwritev emulation in glibc (RHBZ#563103).
* Tue Feb 9 2010 Matthew Booth <mbooth(a)redhat.com> - 1.0.83-6
- Change buildnonet to buildnet
- Allow buildnet, mirror, updates, virtio and runtests to be configured by user
macros.
* Mon Feb 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.83-5
- libguestfs-tools should require perl-XML-Writer (RHBZ#562858).
* Mon Feb 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.83-4
- Use virtio for block device access (RHBZ#509383 is fixed).
* Fri Feb 5 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.83-3
- Rebuild: possible timing-related build problem in Koji.
* Fri Feb 5 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.83-2
- New upstream release 1.0.83.
- This release fixes:
Add Marathi translations (RHBZ#561671).
Polish translations (RHBZ#502533).
Add Gujarti translations (Sweta Kothari) (RHBZ#560918).
Update Oriya translations (thanks Manoj Kumar Giri) (RHBZ#559498).
Set locale in C programs so l10n works (RHBZ#559962).
Add Tamil translation (RHBZ#559877) (thanks to I.Felix)
Update Punjabi translation (RHBZ#559480) (thanks Jaswinder Singh)
- There are significant fixes to hive file handling.
- Add hivexsh and manual page.
- Remove two patches, now upstream.
* Sun Jan 31 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.0.82-7
- Bump and rebuild.
* Fri Jan 29 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.82-6
- Backport a better fix for RHBZ557655 test from upstream.
- Backport fix for unreadable yum.log from upstream.
* Thu Jan 28 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.82-3
- Backport RHBZ557655 test fix from upstream.
* Thu Jan 28 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.82-1
- New upstream version 1.0.82. This includes the two patches
we were carrying, so those are now removed.
- This release fixes:
RHBZ#559498 (Oriya translation).
RHBZ#559480 (Punjabi translation).
RHBZ#558593 (Should prevent corruption by multilib).
RHBZ#559237 (Telugu translation).
RHBZ#557655 (Use xstrtol/xstrtoll to parse integers in guestfish).
RHBZ#557195 (Missing crc kernel modules for recent Linux).
- In addition this contains numerous fixes to the hivex library
for parsing Windows Registry files, making hivex* and virt-win-reg
more robust.
- New API call 'filesize'.
* Thu Jan 28 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.81-8
- Backport special handling of libgcc_s.so.
- Backport unreadable files patch from RHEL 6 / upstream.
* Fri Jan 22 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.81-5
- Require febootstrap >= 2.6 (RHBZ#557262).
* Thu Jan 21 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.81-4
- Rebuild for unannounced soname bump (libntfs-3g.so).
* Fri Jan 15 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.81-3
- Rebuild for unannounced soname bump (libplybootsplash.so).
* Thu Jan 14 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.81-2
- Rebuild for broken dependency (iptables soname bump).
* Wed Jan 13 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.81-1
- New upstream version 1.0.81.
- Remove two upstream patches.
- virt-inspector: Make RPM application data more specific (RHBZ#552718).
* Tue Jan 12 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-14
- Reenable tests because RHBZ#553689 is fixed.
* Tue Jan 12 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-13
- Rebuild because of libparted soname bump (1.9 -> 2.1).
* Fri Jan 8 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-12
- qemu in Rawhide is totally broken (RHBZ#553689). Disable tests.
* Thu Jan 7 2010 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-11
- Remove gfs-utils (deprecated and removed from Fedora 13 by the
upstream Cluster Suite developers).
- Include patch to fix regression in qemu -serial stdio option.
* Tue Dec 29 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-10
- Remove some debugging statements which were left in the requires
script by accident.
* Mon Dec 21 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-9
- Generate additional requires for supermin (RHBZ#547496).
* Fri Dec 18 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-3
- Work around udevsettle command problem (RHBZ#548121).
- Enable tests.
* Wed Dec 16 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-2
- Disable tests because of RHBZ#548121.
* Wed Dec 16 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.80-1
- New upstream release 1.0.80.
- New Polish translations (RHBZ#502533).
- Give a meaningful error if no usable kernels are found (RHBZ#539746).
- New tool: virt-list-filesystems
* Fri Dec 4 2009 Stepan Kasal <skasal(a)redhat.com> - 1:1.0.79-3
- rebuild against perl 5.10.1
* Wed Nov 18 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.79-2
- New upstream release 1.0.79.
- Adds FUSE test script and multiple fixes for FUSE (RHBZ#538069).
- Fix virt-df in Xen (RHBZ#538041).
- Improve speed of supermin appliance.
- Disable FUSE-related tests because Koji doesn't currently allow them.
fuse: device not found, try 'modprobe fuse' first
* Tue Nov 10 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.78-2
- New upstream release 1.0.78.
- Many more filesystem types supported by this release - add them
as dependencies.
* Tue Nov 3 2009 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.77-1
- New upstream release 1.0.77.
- Support for mounting guest in host using FUSE (guestmount command).
- hivex*(1) man pages should be in main package, not -devel, since
they are user commands.
- libguestfs-tools: Fix "self-obsoletion" issue raised by rpmlint.
- perl: Remove bogus script Sys/bindtests.pl.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #604307 - dependency problem with latest update?
https://bugzilla.redhat.com/show_bug.cgi?id=604307
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libguestfs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 12 Update: haproxy-1.3.25-1.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10206
2010-06-21 21:03:40
--------------------------------------------------------------------------------
Name : haproxy
Product : Fedora 12
Version : 1.3.25
Release : 1.fc12
URL : http://haproxy.1wt.eu/
Summary : HA-Proxy is a TCP/HTTP reverse proxy for high availability environments
Description :
HA-Proxy is a TCP/HTTP reverse proxy which is particularly suited for high
availability environments. Indeed, it can:
- route HTTP requests depending on statically assigned cookies
- spread the load among several servers while assuring server persistence
through the use of HTTP cookies
- switch to backup servers in the event a main one fails
- accept connections to special ports dedicated to service monitoring
- stop accepting connections without breaking existing ones
- add/modify/delete HTTP headers both ways
- block requests matching a particular pattern
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 20 2010 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.25-1
- update to 1.3.25
* Thu Feb 18 2010 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.23-1
- update to 1.3.23
* Thu Dec 10 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.22-2
- release bump
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update haproxy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
[SECURITY] Fedora 12 Update: rpm-4.7.2-2.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10617
2010-07-01 18:07:36
--------------------------------------------------------------------------------
Name : rpm
Product : Fedora 12
Version : 4.7.2
Release : 2.fc12
URL : http://www.rpm.org/
Summary : The RPM package management system
Description :
The RPM Package Manager (RPM) is a powerful command line driven
package management system capable of installing, uninstalling,
verifying, querying, and updating software packages. Each software
package consists of an archive of files along with information about
the package like its version, a description, etc.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2010 Panu Matilainen <pmatilai(a)redhat.com> - 4.7.2-2
- Fix CVE-2010-2059 (#598775) and CVE-2010-2198 (#601955)
* Tue Dec 8 2009 Panu Matilainen <pmatilai(a)redhat.com> - 4.7.2-1
- update to 4.7.2 (http://rpm.org/wiki/Releases/4.7.2)
- fix posix chmod test to unbreak %fixperms macro (#543035)
- avoid looking into OpenPGP subkeys (#436812)
- dont fail build on unrecognized non-executable files (#532489)
- fix password check result when gpg is missing (#496754)
- permit python to handle 64bit integer types from headers
- all header integer types are unsigned, match this in python too
- return python long objects where ints are not sufficient (#531243)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #598775 - CVE-2010-2059 rpm: fails to drop SUID/SGID bits on package upgrade or removal
https://bugzilla.redhat.com/show_bug.cgi?id=598775
[ 2 ] Bug #601955 - CVE-2010-2198 rpm: fails to drop POSIX file capabilities/SELinux context information on package upgrade or removal
https://bugzilla.redhat.com/show_bug.cgi?id=601955
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rpm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 13 Update: sparsehash-1.7-3.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10718
2010-07-06 16:21:03
--------------------------------------------------------------------------------
Name : sparsehash
Product : Fedora 13
Version : 1.7
Release : 3.fc13
URL : http://code.google.com/p/google-sparsehash
Summary : Extremely memory-efficient C++ hash_map implementation
Description :
The Google SparseHash project contains several C++ template hash-map
implementations with different performance characteristics, including
an implementation that optimizes for space and one that optimizes for
speed.
--------------------------------------------------------------------------------
Update Information:
The Google SparseHash project contains several C++ template hash-map
implementations with different performance characteristics, including an
implementation that optimizes for space and one that optimizes for speed.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #609728 - Review Request: sparsehash - Extremely memory-efficient C++ hash_map implementation
https://bugzilla.redhat.com/show_bug.cgi?id=609728
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sparsehash' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 13 Update: gtkpod-0.99.16-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10007
2010-06-16 16:59:29
--------------------------------------------------------------------------------
Name : gtkpod
Product : Fedora 13
Version : 0.99.16
Release : 1.fc13
URL : http://www.gtkpod.org
Summary : Graphical song management program for Apple's iPod
Description :
gtkpod is a platform independent Graphical User Interface for Apple's
iPod using GTK2. It supports all current iPod models, including
the Mini, Photo, Shuffle, Nano, Video, Classic, Touch, and iPhone.
--------------------------------------------------------------------------------
Update Information:
This is a minor upstream release. See the release notes for more details: ht
tp://gtkpod.git.sourceforge.net/git/gitweb.cgi?p=gtkpod/gtkpod;a=blob_pla...
WS;hb=HEAD
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 15 2010 Todd Zullinger <tmz(a)pobox.com> - 0.99.16-1
- Update to 0.99.16
- Link with libdl
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gtkpod' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 13 Update: selinux-policy-3.7.19-33.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10641
2010-07-01 18:08:32
--------------------------------------------------------------------------------
Name : selinux-policy
Product : Fedora 13
Version : 3.7.19
Release : 33.fc13
URL : http://oss.tresys.com/repos/refpolicy/
Summary : SELinux policy configuration
Description :
SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision 2.20091117
--------------------------------------------------------------------------------
Update Information:
* Wed Jun 30 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-33 - Fix label for
/var/lib/git - Fix labels for conflicted files - Fix cgroup_admin interface
* Mon Jun 28 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-32 - Allow sectool
to connect to users over unix stream socket - Add label for /var/spool/abrt-
upload - Add audio_home_t type for homedir/Music files - Allow aiccu to read
network config files - Allow qpidd to setsched - Allow virt domains to
manage svirt_image_t fifo files - Fixes for NM-openswan - Fixes for admin
interfaces * Mon Jun 21 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-31
- Remove daemons dontaudit to search all dirs - Add support for epylog - All
all domains to read lib files - Allow denyhosts to send syslog messages -
Allow mysql-safe setrlimit - Allow rpm to execute rpm_tmp_t - Allow dmesg to
appen abrt_var_cache files - Fixed label for abrt.socket * Wed Jun 16 2010
Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-30 - Allow sysadm to run ncftool -
Fixes for cobbler policy - Allow Network Manager to transition to ipsec_mgmt
domain - Add label for /usr/libexec/nm-openswan-service - Add label for /dev
* Tue Jun 15 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-29 - Allow abrt
sigkill - Add ncftool policy - Add cluster fixes - Fixes for audisp-remote
* Thu May 6 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-13 - Allow boinc to send
mail - Fixes for MLS Xserver - Dontaudit leaked apache tmp file to sendmail
* Wed May 5 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-12 - Allow initrc_t to
remove dhcpc_state_t - Fix label on sa-update.cron - Allow dhcpc to restart
chrony initrc - Fix transition from unconfined_t -> unconfined_mount_t ->
rpcd_t Resolves: #589136 * Mon May 3 2010 Dan Walsh <dwalsh(a)redhat.com>
3.7.19-11 - Fix location of oddjob_mkhomedir Resolves: #587385 - fix labeling
on /root/.shosts and ~/.shosts - Allow ipsec_mgmt_t to manage net_conf_t
Resolves: #586760
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-33
- Fix label for /var/lib/git
- Fix labels for conflicted files
- Fix cgroup_admin interface
* Mon Jun 28 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-32
- Allow sectool to connect to users over unix stream socket
- Add label for /var/spool/abrt-upload
- Add audio_home_t type for homedir/Music files
- Allow aiccu to read network config files
- Allow qpidd to setsched
- Allow virt domains to manage svirt_image_t fifo files
- Fixes for NM-openswan
- Fixes for admin interfaces
* Mon Jun 21 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-31
- Remove daemons dontaudit to search all dirs
- Add support for epylog
- All all domains to read lib files
- Allow denyhosts to send syslog messages
- Allow mysql-safe setrlimit
- Allow rpm to execute rpm_tmp_t
- Allow dmesg to appen abrt_var_cache files
- Fixed label for abrt.socket
* Wed Jun 16 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-30
- Allow sysadm to run ncftool
- Fixes for cobbler policy
- Allow Network Manager to transition to ipsec_mgmt domain
- Add label for /usr/libexec/nm-openswan-service
- Add label for /dev
* Tue Jun 15 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-29
- Allow abrt sigkill
- Add ncftool policy
- Add cluster fixes
- Fixes for audisp-remote
* Mon Jun 14 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-28
- Fixes for netutils
- Cleanup of aiccu policy
- Add mpd policy
* Wed Jun 9 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-27
- Allow ftpd ipc_lock capability
- Allow audisp-remote to getcap and setcap
- Allow iscsid to read and write raw memory devices
- Fixes for bitlbee policy
* Wed Jun 9 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-26
- Allow krb5kdc to write krb5kdc_principal_t file
- Allow hald to send generic signal to dhcp client
- Fix dev_rw_vhost interface
- Add /var/run/abrt.socket label
* Tue Jun 8 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-25
- Fixes for cmirrord policy
- Dontaudit xauth to list inotifyfs filesystem.
- Allow xserver to translate contexts.
- Allow kdumpgui domain sys_admin capability
- Allow vpnc to relabelfrom tun_socket
- Allow prelink_cron_system_t to signal
- Fixes for gitolite
- Allow virt domain to read symbolic links in device directories
* Thu Jun 3 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-24
- Add support for /dev/vhost-net
- Allow psad to read files in /usr
- Allow systat to use nscd socket
- Fixes for boinc policy
* Tue Jun 1 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-23
- Add cmirrord policy
- Fixes for accountsd policy
- Fixes for boinc policy
- Allow cups-pdf to set attributes on fonts cache directory
- Allow radiusd to setrlimit
- Allow nscd sys_ptrace capability
* Tue May 25 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-22
- Allow procmail to execute scripts in the users home dir that are labeled home_bin_t
- Fix /var/run/abrtd.lock label
* Mon May 24 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-21
- Allow login programs to read krb5_home_t
Resolves: 594833
- Add obsoletes for cachefilesfd-selinux package
Resolves: #575084
* Thu May 20 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-20
- Allow mount to r/w abrt fifo file
- Allow svirt_t to getattr on hugetlbfs
- Allow abrt to create a directory under /var/spool
* Wed May 19 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-19
- Add labels for /sys
- Allow sshd to getattr on shutdown
- Fixes for munin
- Allow sssd to use the kernel key ring
- Allow tor to send syslog messages
- Allow iptabels to read usr files
- allow policykit to read all domains state
* Thu May 13 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-17
- Fix path for /var/spool/abrt
- Allow nfs_t as an entrypoint for http_sys_script_t
- Add policy for piranha
- Lots of fixes for sosreport
* Wed May 12 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-16
- Allow xm_t to read network state and get and set capabilities
- Allow policykit to getattr all processes
- Allow denyhosts to connect to tcp port 9911
- Allow pyranha to use raw ip sockets and ptrace itself
- Allow unconfined_execmem_t and gconfsd mechanism to dbus
- Allow staff to kill ping process
- Add additional MLS rules
* Mon May 10 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-15
- Allow gdm to edit ~/.gconf dir
Resolves: #590677
- Allow dovecot to create directories in /var/lib/dovecot
Partially resolves 590224
- Allow avahi to dbus chat with NetworkManager
- Fix cobbler labels
- Dontaudit iceauth_t leaks
- fix /var/lib/lxdm file context
- Allow aiccu to use tun tap devices
- Dontaudit shutdown using xserver.log
* Thu May 6 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-14
- Fixes for sandbox_x_net_t to match access for sandbox_web_t ++
- Add xdm_etc_t for /etc/gdm directory, allow accountsd to manage this directory
- Add dontaudit interface for bluetooth dbus
- Add chronyd_read_keys, append_keys for initrc_t
- Add log support for ksmtuned
Resolves: #586663
* Thu May 6 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-13
- Allow boinc to send mail
* Wed May 5 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-12
- Allow initrc_t to remove dhcpc_state_t
- Fix label on sa-update.cron
- Allow dhcpc to restart chrony initrc
- Don't allow sandbox to send signals to its parent processes
- Fix transition from unconfined_t -> unconfined_mount_t -> rpcd_t
Resolves: #589136
* Mon May 3 2010 Dan Walsh <dwalsh(a)redhat.com> 3.7.19-11
- Fix location of oddjob_mkhomedir
Resolves: #587385
- fix labeling on /root/.shosts and ~/.shosts
- Allow ipsec_mgmt_t to manage net_conf_t
Resolves: #586760
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #603449 - SELinux is preventing /bin/bash "ioctl" access on /var/run/pm-utils/network/dhclient.suspend.
https://bugzilla.redhat.com/show_bug.cgi?id=603449
[ 2 ] Bug #590298 - SELinux is preventing /sbin/dhclient "read" access on /var/run/pm-utils/network/dhclient.suspend.
https://bugzilla.redhat.com/show_bug.cgi?id=590298
[ 3 ] Bug #603450 - SELinux is preventing /sbin/consoletype "read" access on /var/run/pm-utils/network/dhclient.suspend.
https://bugzilla.redhat.com/show_bug.cgi?id=603450
[ 4 ] Bug #603499 - nrpe check_mailq AVC's
https://bugzilla.redhat.com/show_bug.cgi?id=603499
[ 5 ] Bug #604247 - SELinux is preventing /usr/bin/perl access to a leaked /tmp/.NSPR-AFM-3516-247da78.0 (deleted) file descriptor.
https://bugzilla.redhat.com/show_bug.cgi?id=604247
[ 6 ] Bug #596444 - SELinux empêche /usr/sbin/prelink d'"read" au périphérique /etc/pki/tls/certs/Makefile.
https://bugzilla.redhat.com/show_bug.cgi?id=596444
[ 7 ] Bug #603993 - SELinux is preventing /usr/libexec/gvfs-fuse-daemon "read write" access on fuse.
https://bugzilla.redhat.com/show_bug.cgi?id=603993
[ 8 ] Bug #603387 - SELinux is preventing /sbin/iptables-multi access to a leaked /var/log/psad/psad.iptout file descriptor.
https://bugzilla.redhat.com/show_bug.cgi?id=603387
[ 9 ] Bug #603198 - SELinux AVC denials with lirc irman
https://bugzilla.redhat.com/show_bug.cgi?id=603198
[ 10 ] Bug #604495 - SELinux preventing autofs mount of home directory over NFSv4 from Solaris Server
https://bugzilla.redhat.com/show_bug.cgi?id=604495
[ 11 ] Bug #604885 - SELinux is preventing /usr/sbin/sendmail.sendmail access to a leaked /var/spool/fcron/fcr-yw0ZTm (deleted) file descriptor.
https://bugzilla.redhat.com/show_bug.cgi?id=604885
[ 12 ] Bug #604902 - SELinux is preventing sendmail "write" access on /var/spool/fcron/fcr-8yxZH1 (deleted).
https://bugzilla.redhat.com/show_bug.cgi?id=604902
[ 13 ] Bug #606581 - SELinux is preventing /usr/bin/python "sendto" access on /tmp/sectool/519a5c5417977630c8b5c4004b8d1b34630a1576.
https://bugzilla.redhat.com/show_bug.cgi?id=606581
[ 14 ] Bug #606529 - SELinux is preventing /usr/bin/perl "read" access on /root.
https://bugzilla.redhat.com/show_bug.cgi?id=606529
[ 15 ] Bug #558402 - SELinux is preventing /usr/sbin/openvpn "[open|lock|read]" access on /var/run/utmp
https://bugzilla.redhat.com/show_bug.cgi?id=558402
[ 16 ] Bug #607983 - SELinux is preventing /usr/bin/mpd "read" access on /home/wlan/Music.
https://bugzilla.redhat.com/show_bug.cgi?id=607983
[ 17 ] Bug #607514 - SELinux is preventing /usr/bin/nautilus "getattr" access on /proc/mdstat.
https://bugzilla.redhat.com/show_bug.cgi?id=607514
[ 18 ] Bug #605890 - SELinux is preventing /usr/sbin/aiccu "write" access .
https://bugzilla.redhat.com/show_bug.cgi?id=605890
[ 19 ] Bug #605235 - SELinux is preventing /usr/sbin/qpidd "setsched" access .
https://bugzilla.redhat.com/show_bug.cgi?id=605235
[ 20 ] Bug #607897 - ClamAV freshclam leaked fd
https://bugzilla.redhat.com/show_bug.cgi?id=607897
[ 21 ] Bug #608504 - SELinux is preventing /var/lib/boinc/projects/wuprop.boinc-af.org/data_collect_1.33_x86_64-pc-linux-gnu__nci "name_connect" access to <Unknown>.
https://bugzilla.redhat.com/show_bug.cgi?id=608504
[ 22 ] Bug #608483 - SELinux is preventing /usr/libexec/git-core/git-daemon "getattr" access on /var/lib/git.
https://bugzilla.redhat.com/show_bug.cgi?id=608483
[ 23 ] Bug #587473 - SELinux is preventing /sbin/shutdown "signull" access .
https://bugzilla.redhat.com/show_bug.cgi?id=587473
[ 24 ] Bug #588715 - O SELinux está impedindo que o /sbin/ip acesse um descritor de arquivo vazado do /var/log/pm-suspend.log.
https://bugzilla.redhat.com/show_bug.cgi?id=588715
[ 25 ] Bug #589336 - SELinux is preventing /usr/bin/file "getattr" access on /usr/sbin/sendmail.sendmail.
https://bugzilla.redhat.com/show_bug.cgi?id=589336
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update selinux-policy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 12 Update: yash-2.22-0.3.b0.fc12
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10716
2010-07-06 16:21:00
--------------------------------------------------------------------------------
Name : yash
Product : Fedora 12
Version : 2.22
Release : 0.3.b0.fc12
URL : http://yash.sourceforge.jp/
Summary : Yet Another SHell
Description :
Yash is a command line shell that conforms to the POSIX.1 (IEEE Std
1003.1, 2008 Edition) standard for the most part.
Yash also has its own features beyond POSIX, such as:
* global aliases
* random numbers
* socket redirections and other special redirections
* right prompt
--------------------------------------------------------------------------------
Update Information:
Yash is a command line shell that conforms to the POSIX.1 (IEEE Std 1003.1, 2008
Edition) standard for the most part.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update yash' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 13 Update: pipviewer-0.3.9-7.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10413
2010-06-25 17:06:19
--------------------------------------------------------------------------------
Name : pipviewer
Product : Fedora 13
Version : 0.3.9
Release : 7.fc13
URL : http://ygingras.net/bioinfo
Summary : Visualizer for multiple alignments of genomic sequences
Description :
Pipviewer is a visualizer for multiple alignements of genomic
sequences. It highlights conserved regions and allows basic
anotations. Its main goal is to find conserved probes for the
construction of gene order data sets. Selected regions marked as
'probes' can be expoxted to fasta format. It can also retreive gene
annotations form the NBCI and display this information along the
alignement.
Pipviewer is not an aligner. You must compute the alignment with
another tool like Clustal or Multi PIP Maker.
--------------------------------------------------------------------------------
Update Information:
* Sat Jun 19 2010 Fabian Affolter <fabian(a)bernewireless.net> - 0.3.9-7 - Fixed
BZ # 579521
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 19 2010 Fabian Affolter <fabian(a)bernewireless.net> - 0.3.9-7
- Fixed BZ # 579521
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #579521 - [abrt] crash in pipviewer-0.3.9-6.fc12: pkg_resources.py:524:resolve:DistributionNotFound: OpenGL>=2.0
https://bugzilla.redhat.com/show_bug.cgi?id=579521
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pipviewer' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 13 Update: getmail-4.20.0-1.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10714
2010-07-06 16:20:56
--------------------------------------------------------------------------------
Name : getmail
Product : Fedora 13
Version : 4.20.0
Release : 1.fc13
URL : http://pyropus.ca/software/getmail/
Summary : POP3, IMAP4 and SDPS mail retriever with Maildir delivery
Description :
getmail is a secure, flexible, reliable and easy-to-use
mail retriever for POP3, IMAP4 and SDPS.
It delivers mail into a Maildir or mbox file.
It is designed to replace other mail retrievers such as fetchmail.
Getmail is written entirely in python.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 3 2010 Dean Mander <knolderpoor(a)gmail.com> - 4.20.0-1
- update to release 4.20.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update getmail' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months
Fedora 13 Update: python-snpp-1.1.2-2.fc13
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10712
2010-07-06 16:20:53
--------------------------------------------------------------------------------
Name : python-snpp
Product : Fedora 13
Version : 1.1.2
Release : 2.fc13
URL : http://launchpad.net/python-snpp
Summary : Simple Network Paging Protocol
Description :
Libraries implementing RFC 1861 - Simple Network Paging Protocol
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-snpp' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
13 years, 10 months