Fedora 16 Update: pylint-0.25.1-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4065
2012-03-17 23:00:32
--------------------------------------------------------------------------------
Name : pylint
Product : Fedora 16
Version : 0.25.1
Release : 1.fc16
URL : http://www.logilab.org/projects/pylint
Summary : Analyzes Python code looking for bugs and signs of poor quality
Description :
Pylint is a python tool that checks if a module satisfy a coding standard.
Pylint can be seen as another PyChecker since nearly all tests you can do
with PyChecker can also be done with Pylint. But Pylint offers some more
features, like checking line-code's length, checking if variable names are
well-formed according to your coding standard, or checking if declared
interfaces are truly implemented, and much more. The big advantage with
Pylint is that it is highly configurable, customizable, and you can easily
write a small plugin to add a personal feature.
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 15 2012 Brian C. Lane <bcl(a)redhat.com> 0.25.1-1
- Upstream 0.25.1
* Fri Nov 18 2011 Brian C. Lane <bcl(a)redhat.com> - 0.24.0-1
- Upstream 0.24.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update pylint' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 16 Update: krb5-1.9.3-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-3477
2012-03-10 00:03:01
--------------------------------------------------------------------------------
Name : krb5
Product : Fedora 16
Version : 1.9.3
Release : 1.fc16
URL : http://web.mit.edu/kerberos/www/
Summary : The Kerberos network authentication system
Description :
Kerberos V5 is a trusted-third-party network authentication system,
which can improve your network's security by eliminating the insecure
practice of cleartext passwords.
--------------------------------------------------------------------------------
Update Information:
This update updates the package from version 1.9.2 to 1.9.3, which incorporates the patches for the previously-issued security update and a bug encountered when computing hmac-md5 MAC values with certain cipher types. It also includes fixes for the removal scriptlet for the krb5-workstation subpackage and a fix which once again causes the key version number to be ignored when searching a keytab for a key which can decrypt an AP request, if the specified key version number is 0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 8 2012 Nalin Dahyabhai <nalin(a)redhat.com> 1.9.3-1
- update to 1.9.3
- drop patch for CVE-2011-1530, incorporated upstream
- drop patch for #756139, incorporated into 1.9 as RT#7007
- when removing -workstation, remove our files from the info index while
the file is still there, in %preun, rather than %postun, and use the
compressed file's name (#801035)
* Mon Jan 30 2012 Nalin Dahyabhai <nalin(a)redhat.com> 1.9.2-6
- add patch to accept keytab entries with vno==0 as matches when we're
searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)
* Tue Dec 13 2011 Nalin Dahyabhai <nalin(a)redhat.com> 1.9.2-5
- backport patch for RT#7046: tag a ccache containing credentials obtained via
S4U2Proxy with the principal name of the proxying principal (part of #761317)
so that the default principal name can be set to that of the client for which
it is proxying, which results in the ccache looking more normal to consumers
of the ccache that don't care that there's proxying going on
- pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
(more of #761317)
- backport patch for RT#7048: allow PAC verification to only bother trying to
verify the signature with keys that it's given (still more of #761317)
* Tue Dec 6 2011 Nalin Dahyabhai <nalin(a)redhat.com> 1.9.2-4
- apply upstream patch to fix a null pointer dereference when processing
TGS requests (CVE-2011-1530, #753748)
* Wed Nov 30 2011 Nalin Dahyabhai <nalin(a)redhat.com> 1.9.2-3
- correct a bug in the fix for #754001 so that the file creation context is
consistently reset
* Tue Nov 22 2011 Nalin Dahyabhai <nalin(a)redhat.com> 1.9.2-2
- pull patch from trunk so that when computing an HMAC, we don't assume that
the HMAC output size is the same as the input key length (RT#6994, #756139)
* Tue Nov 15 2011 Nalin Dahyabhai <nalin(a)redhat.com> 1.9.2-1
- update to 1.9.2, incorporating the recent security update and some of the
things we were previously backporting, among other fixes
* Tue Nov 15 2011 Nalin Dahyabhai <nalin(a)redhat.com> 1.9.1-19
- selinux: reset the creation context properly after expunging replay caches
if they were previously set to the default value (#754001)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #801035 - rpm -e krb5-workstation have an issue/warning
https://bugzilla.redhat.com/show_bug.cgi?id=801035
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update krb5' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 16 Update: qbittorrent-2.9.7-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4325
2012-03-21 01:56:29
--------------------------------------------------------------------------------
Name : qbittorrent
Product : Fedora 16
Version : 2.9.7
Release : 1.fc16
URL : http://sourceforge.net/projects/qbittorrent
Summary : A Bittorrent Client
Description :
A Bittorrent client using rb_libtorrent and a Qt4 Graphical User Interface.
It aims to be as fast as possible and to provide multi-OS, unicode support.
--------------------------------------------------------------------------------
Update Information:
* Sun Mar 18 2012 - Christophe Dumez <chris(a)qbittorrent.org> - v2.9.7
- BUGFIX: Fix important HTTP request parsing bug (Web UI)
* Sat Mar 17 2012 - Christophe Dumez <chris(a)qbittorrent.org> - v2.9.6
- BUGFIX: Fix download first/last pieces state reporting
- BUGFIX: Fix name of progress column in torrent content panel
- BUGFIX: Disable system tray icon on Mac OS X
- BUGFIX: RSS downloader should not ignore "Do not start automatically" rule (closes #946910)
- BUGFIX: Fix DHT port setting in Web UI (Closes #952182)
- BUGFIX: Fix possible Web UI authentication problem when using SSL (closes #941343)
- BUGFIX: Fix possible issues with folder removal when removing a torrent
- I18N: Add Basque translation
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 19 2012 leigh scott <leigh123linux(a)googlemail.com> - 1:2.9.7-1
- update to 2.9.7
* Sun Feb 19 2012 Leigh Scott <leigh123linux(a)googlemail.com> - 1:2.9.5-1
- update to 2.9.5
* Sun Feb 19 2012 Leigh Scott <leigh123linux(a)googlemail.com> - 1:2.9.4-1
- update to 2.9.4
* Thu Dec 29 2011 Leigh Scott <leigh123linux(a)googlemail.com> - 1:2.9.3-1
- update to 2.9.3
* Tue Nov 22 2011 Leigh Scott <leigh123linux(a)googlemail.com> - 1:2.9.2-1
- update to 2.9.2
* Sun Oct 23 2011 Leigh Scott <leigh123linux(a)googlemail.com> - 1:2.9.1-1
- update to 2.9.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qbittorrent' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 15 Update: sugar-paint-39-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4106
2012-03-17 23:02:24
--------------------------------------------------------------------------------
Name : sugar-paint
Product : Fedora 15
Version : 39
Release : 1.fc15
URL : http://wiki.sugarlabs.org/go/Activities/Paint
Summary : Paint activity for Sugar
Description :
Paint will provide a canvas for an individual or a group of children
to express themselves creatively through drawing.
--------------------------------------------------------------------------------
Update Information:
v39
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 10 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 39-1
- Release 39
* Thu Mar 8 2012 Tom Callaway <spot(a)fedoraproject.org> - 37-3
- fix build, do not strip .so file
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 37-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Thu Oct 13 2011 Peter Robinson <pbrobinson(a)fedoraproject.org> - 37-1
- Release 37
* Thu Jun 9 2011 Peter Robinson <pbrobinson(a)fedoraproject.org> - 34-1
- release 34
* Tue May 17 2011 Peter Robinson <pbrobinson(a)fedoraproject.org> - 33-1
- release 33
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sugar-paint' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 15 Update: im-chooser-1.5.2.1-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4281
2012-03-21 01:54:17
--------------------------------------------------------------------------------
Name : im-chooser
Product : Fedora 15
Version : 1.5.2.1
Release : 1.fc15
URL : http://fedorahosted.org/im-chooser/
Summary : Desktop Input Method configuration tool
Description :
im-chooser is a GUI configuration tool to choose the Input Method
to be used or disable Input Method usage on the desktop.
--------------------------------------------------------------------------------
Update Information:
translations updates
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 19 2012 Akira TAGOH <tagoh(a)redhat.com> - 1.5.2.1-1
- New upstream release.
* Fri Mar 2 2012 Akira TAGOH <tagoh(a)redhat.com> - 1.5.2-3
- Update po files.
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Wed Nov 16 2011 Akira TAGOH <tagoh(a)redhat.com> - 1.5.2-1
- New upstream release.
- Fix the logout button behaved shutting down on KDE. (#741497)
* Fri Sep 9 2011 Akira TAGOH <tagoh(a)redhat.com> - 1.5.1-1
- New upstream release.
* Tue Aug 2 2011 Akira TAGOH <tagoh(a)redhat.com> - 1.5.0.1-2
- Add some Obsoletes for upgrading path.
* Tue Aug 2 2011 Akira TAGOH <tagoh(a)redhat.com> - 1.5.0.1-1
- New upstream release.
- Add im-chooser-xfce subpackage.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update im-chooser' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
[SECURITY] Fedora 16 Update: nginx-1.0.14-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-3991
2012-03-17 22:56:33
--------------------------------------------------------------------------------
Name : nginx
Product : Fedora 16
Version : 1.0.14
Release : 1.fc16
URL : http://nginx.org/
Summary : A high performance web server and reverse proxy server
Description :
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and
IMAP protocols, with a strong focus on high concurrency, performance and low
memory usage.
--------------------------------------------------------------------------------
Update Information:
Update to upstream release 1.0.14 to fix: malformed HTTP response headers leads to information leak.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 15 2012 Jamie Nguyen <jamie(a)tomoyolinux.co.uk> - 1.0.14-1
- update to upstream release 1.0.14
- CVE-2012-1180 (#803856)
* Sat Mar 3 2012 Jamie Nguyen <jamie(a)tomoyolinux.co.uk> - 1.0.13-1
- update to upstream release 1.0.13
- general spec file cleanup to match rawhide (for easier diff), including:
- replace %define with %global
- amend %pre scriptlet to match with guidelines
- remove obsolete BuildRoot tag, %clean section and %defattr
- remove various unnecessary commands
* Sun Feb 19 2012 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.0.12-1
- Update to 1.0.12
* Thu Nov 17 2011 Keiran "Affix" Smith <fedora(a)affix.me> - 1.0.10-1
- Bugfix: a segmentation fault might occur in a worker process if resolver got a big DNS response. Thanks to Ben Hawkes.
- Bugfix: in cache key calculation if internal MD5 implementation wasused; the bug had appeared in 1.0.4.
- Bugfix: the module ngx_http_mp4_module sent incorrect "Content-Length" response header line if the "start" argument was used. Thanks to Piotr Sikora.
* Thu Oct 27 2011 Keiran "Affix" Smith <fedora(a)affix.me> - 1.0.8-1
- Update to new 1.0.8 stable release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #803856 - CVE-2012-1180 nginx: malformed HTTP response headers leads to information leak
https://bugzilla.redhat.com/show_bug.cgi?id=803856
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update nginx' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 16 Update: perl-B-Utils-0.19-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4283
2012-03-21 01:54:22
--------------------------------------------------------------------------------
Name : perl-B-Utils
Product : Fedora 16
Version : 0.19
Release : 1.fc16
URL : http://search.cpan.org/dist/B-Utils/
Summary : Helper functions for op tree manipulation
Description :
Helper functions for op tree manipulation.
--------------------------------------------------------------------------------
Update Information:
This update fixes a crash when using the walkallops_filtered method.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 12 2012 Iain Arnell <iarnell(a)gmail.com> 0.19-1
- update to latest upstream version
* Thu Jan 5 2012 Iain Arnell <iarnell(a)gmail.com> 0.17-1
- update to latest upstream version
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-B-Utils' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 16 Update: perl-Plack-0.9986-1.fc16
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4303
2012-03-21 01:55:19
--------------------------------------------------------------------------------
Name : perl-Plack
Product : Fedora 16
Version : 0.9986
Release : 1.fc16
URL : http://search.cpan.org/dist/Plack/
Summary : Perl Superglue for Web frameworks and Web Servers (PSGI toolkit)
Description :
Plack is a set of tools for using the PSGI stack. It contains middleware
components, a reference server and utilities for Web application
frameworks. Plack is like Ruby's Rack or Python's Paste for WSGI.
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 19 2012 Ralf Corsépius <corsepiu(a)fedoraproject.org> 0.9986-1
- Upstream update.
* Wed Jan 18 2012 Ralf Corsépius <corsepiu(a)fedoraproject.org> 0.9985-3
- Activate optional BR: perl(Devel::StackTrace::WithLexicals).
- Activate optional BR: perl(LWP::Protocol::http10).
* Sat Nov 26 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> 0.9985-1
- Upstream update.
* Fri Oct 14 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> 0.9984-2
- Add %bcond_with apache to work around building failures in koji.
* Thu Oct 13 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> 0.9984-1
- Upstream update.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-Plack' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 15 Update: zabbix-1.8.11-1.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4422
2012-03-22 01:27:31
--------------------------------------------------------------------------------
Name : zabbix
Product : Fedora 15
Version : 1.8.11
Release : 1.fc15
URL : http://www.zabbix.com/
Summary : Open-source monitoring solution for your IT infrastructure
Description :
ZABBIX is software that monitors numerous parameters of a network and
the health and integrity of servers. ZABBIX uses a flexible
notification mechanism that allows users to configure e-mail based
alerts for virtually any event. This allows a fast reaction to server
problems. ZABBIX offers excellent reporting and data visualisation
features based on the stored data. This makes ZABBIX ideal for
capacity planning.
ZABBIX supports both polling and trapping. All ZABBIX reports and
statistics, as well as configuration parameters are accessed through a
web-based front end. A web-based front end ensures that the status of
your network and the health of your servers can be assessed from any
location. Properly configured, ZABBIX can play an important role in
monitoring IT infrastructure. This is equally true for small
organisations with a few servers and for large companies with a
multitude of servers.
--------------------------------------------------------------------------------
Update Information:
- update to 1.8.11
- upstream changelog at http://www.zabbix.com/rn1.8.11.php
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 21 2012 Dan Horák <dan[at]danny.cz> - 1.8.11-1
- update to 1.8.11
* Wed Dec 28 2011 Dan Horák <dan[at]danny.cz> - 1.8.10-1
- update to 1.8.10 (fixes CVE-2011-4615)
* Fri Dec 2 2011 Dan Horák <dan[at]danny.cz> - 1.8.9-1
- updated to 1.8.9
* Wed Oct 5 2011 Dan Horák <dan[at]danny.cz> - 1.8.8-1
- Update for 1.8.8
- Drop the ZBX-4099 patch, that's now obsolete
- Remove two further htaccess files and put the configuration in
the main configuration file
- thanks to Volker Fröhlich for the changes above
- move zabbix_get to the server and proxy subpackages (#734512)
- remove prebuilt Windows binaries (#737341)
- remove flash clock applet (#737337)
* Fri Sep 9 2011 Dan Horák <dan[at]danny.cz> - 1.8.7-2
- fix server crash (ZBX-4099)
* Mon Sep 5 2011 Dan Horák <dan[at]danny.cz> - 1.8.7-1
- updated to 1.8.7
* Tue Aug 9 2011 Dan Horák <dan[at]danny.cz> - 1.8.6-1
- updated to 1.8.6 (#729164, #729165)
- updated user/group adding scriptlet
* Fri Jul 8 2011 Dan Horák <dan[at]danny.cz> - 1.8.5-5
- rebuilt with net-snmp 5.7
* Mon Jun 13 2011 Dan Horák <dan[at]danny.cz> - 1.8.5-4
- generalize the spec so creating packages like zabbix18 will be much easier
* Fri Jun 3 2011 Dan Horák <dan[at]danny.cz> - 1.8.5-3
- fix path to the traceroute utility
- add tmpfiles.d support for /var/run/zabbix (#656726)
* Mon May 23 2011 Dan Horák <dan[at]danny.cz> - 1.8.5-2
- include /var/lib/zabbix and /etc/zabbix/externalscripts dirs in package (#704181)
- add snmp trap receiver script in package (#705331)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update zabbix' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month
Fedora 15 Update: selinux-policy-3.9.16-52.fc15
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4286
2012-03-21 01:54:30
--------------------------------------------------------------------------------
Name : selinux-policy
Product : Fedora 15
Version : 3.9.16
Release : 52.fc15
URL : http://oss.tresys.com/repos/refpolicy/
Summary : SELinux policy configuration
Description :
SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision 2.20091117
--------------------------------------------------------------------------------
Update Information:
* Tue Mar 13 2012 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-52
- Fix livecd_run() interface
- Add labeling for /var/spool/postfix/dev/log
* support postfix chroot
- Allow sandbox_xserver_t to send signals
- These are needed with CRL fetching is enabled
- Razor labeling is not used no longer
- Add label for /sbin/xtables-multi
- Add support for winshadow port and allow iscsid to connect to this port
- Allow chrome_sandbox_t to send all signals to sandbox_nacl_t
- Allow sandbox_nacl to setsched on its process
- Dontaudit fail2ban looking at gnome content
- fix label for /usr/lib(64)/iscan/network
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 13 2012 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-52
- Fix livecd_run() interface
- Add labeling for /var/spool/postfix/dev/log
* support postfix chroot
- Allow sandbox_xserver_t to send signals
- These are needed with CRL fetching is enabled
- Razor labeling is not used no longer
- Add label for /sbin/xtables-multi
- Add support for winshadow port and allow iscsid to connect to this port
- Allow chrome_sandbox_t to send all signals to sandbox_nacl_t
- Allow sandbox_nacl to setsched on its process
- Dontaudit fail2ban looking at gnome content
- fix label for /usr/lib(64)/iscan/network
* Thu Jan 19 2012 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-51
- Fix BOINC bug
* Wed Dec 14 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-50
- BOinc fixes
- Allow mysqld_safe to delete the mysql_db_t sock_file
- Dovecot has a new fifo_file /var/run/stats-mail
* Fri Dec 2 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-49
- Allow gnomeclock to send system log msgs
- Users that use X and spice need to use the virtio device
- squashfs supports extended attributes
- Allow system_cronjob to dbus chat with NetworkManager
- Allow all postfix domains to use the fifo_file
- Allow squid to check the network state
- Allow spamd to send mail
* Wed Nov 16 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-48
- Fix typo in ssh.if
* Wed Nov 16 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-47
- Allow spamd and clamd to steam connect to each other
- Allow colord to execute ifconfig
- Allow smbcontrol to signal themselves
- Make faillog MLS trusted to make sudo_$1_t working
* Mon Nov 7 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-46
- Backport MCS fixes from F16
- Other chrome fixes from F16
* Wed Oct 26 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-45
- Backport chrome fixes
- Backport cloudform policy
* Fri Oct 21 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-44
- Fixes for systemd
- Add FIPS suppport for dirsrv
* Tue Oct 11 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-43
- Allow sa-update to update rules
- Allow sa-update to read spamd tmp file
- Allow screen to read all domain state
- Allow sa-update to execute shell
- More fixes for sa-update running out of cron job
- Allow initrc to manage cron system spool
- Fixes for collectd policy
- Fixes added during clean up bugzillas
- Dontaudit fail2ban_client_t sys_tty_config capability
- Fix for puppet which does execute check on passwd
- ricci_modservice send syslog msgs
- Fix dev_dontaudit_write_mtrr() interface
* Tue Sep 27 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-42
- Make mta_role() active
- Add additional gitweb file context labeling
- Allow asterisk to connect to jabber client port
- Allow sssd to read the contents of /sys/class/net/$IFACE_NAME
- Allow fsdaemon dac_override
* Thu Sep 22 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-41
- Add logging_syslogd_can_sendmail boolean
- Add support for exim and confined users
- support for ommail module to send logs via mail
- Add execmem_execmod() to execmem role
- Allow pptp to send generic signal to kernel threads
- Fix kerberos_manage_host_rcache() interface
* Mon Sep 12 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-40
- Fixes for mock
* Tue Sep 6 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-39
- Backport F16 fixes
- livecd fixes
- systemd fixes
* Thu Aug 11 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-38
- Allow hostname read network state
- Allow syslog to manage all log files
- Add use_fusefs_home_dirs boolean for chrome
- Make vdagent working with confined users
- Fix syslog port definition
- Allow openvpn to set its process priority when the nice parameter is used
- Restorecond should be able to watch and relabel devices in /dev
- Alow hddtemp to perform DNS name resolution
* Fri Aug 5 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-37
- Fixes for zarafa, postfix policy
- Backport collect policy
* Wed Jul 27 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-36
- Backport ABRT changes
- Make tmux working with scree policy
- Allow root cron jobs can't run without unconfined
- add interface to dontaudit writes to urand, needed by libra
- Add label for /var/cache/krb5rcache directory
* Wed Jul 20 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-35
- Allow jabberd_router_t to read system state
- Rename oracledb_port to oracle_port
- Allow rgmanager executes init script files in initrc_t domain which ensure proper transitions
- screen wants to manage sock file in screen home dirs
- Make screen working with confined users
- Allow gssd to search access on the directory /proc/fs/nfsd
* Fri Jul 15 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-34
- More fixes for postfix policy
- Allow virsh_t setsched
- Add mcelog_log_t type for mcelog log file
- Add virt_ptynode attribute
* Mon Jul 11 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-33
- Add l2tpd policy
- Fixes for abrt
- Backport fail2ban_client policy
* Fri Jul 1 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-32
- Allow getcap, setcap for syslogd
- Fix label for /usr/lib64/opera/opera
* Thu Jun 30 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-31
- Make mozilla_plugin_tmpfs_t as userdom_user_tmpfs_content()
- Allow init to delete all pid sockets
- Allow colord to read /proc/stat
- Add label for /var/www/html/wordpress/wp-content/plugins directory
- Allow pppd to search /var/lock dir
- puppetmaster use nsswitch: #711804
- Update abrt to match rawhide policy
- allow privoxy to read network data
- support gecko mozilla browser plugin
- Allow chrome_sandbox to execute content in nfs homedir
- postfix_qmgr needs to read /var/spool/postfix/deferred
- abrt_t needs fsetid
* Tue Jun 14 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-30
- Fixes for zarafa policy
- Other fixes for fail2ban
- Allow keyring to drop capabilities
- Allow cobblerd to send syslog messages
- Allow xserver to read/write the xserver_misk device
- ppp also installs /var/log/ppp and /var/run/ppp directories
* remove filetrans rules
- fix for pppd_lock
- Allow fail2ban run ldconfig
- Allow lvm to read/write pipes inherited from login programs
* Fri Jun 10 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-29
- Fix /var/lock labeling issue
* Mon Jun 6 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-28
- Allow ssh to execute systemctl
- fail2ban fixes related to /tmp directory
- Allow puppetmaster to create dirs in /var/run/puppet
* Thu Jun 2 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-27
- Add label for /var/lock/ppp
- Fixes for colord policy
- Allow sys_chroot for postfix domains
* Fri May 27 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-26
- Add label for dev/ati/card*
- Allowe secadm to manage selinux config files
* Thu May 26 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-25
- Add Dominicks patch for dccp_socket
- dnsmasq needs to read nm-dns-dnsmasq.conf in /var/run/
- Colord inherits open file descriptors from the users...'
- cgred needs auth_use_nsswitch()
- apcupsd lock file was missing file context specificatio...
- Make cron work
- Allow clamav to manage amavis spool files
- Use httpd_can_sendmail boolean also for httpd_suexec_t
- Add fenced_can_ssh boolean
- Add dev_dontaudit_read_generic_files() for hplip
- Allow xauthority to create shared memory
- Make postfix user domains application_domains
- Allow xend to sys_admin privs
- Allow mount to read usr files
- Allow logrotate to connect to init script using unix stream socket
- Allow nsplugin_t to getattr on gpmctl
* Tue May 17 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-24
- Allow logrotate to connect to init script using unix domain stream socket
- Allow shorewall read and write inherited user domain pty/tty
- virt will attempt to us another virtualizations pulsesaudio tmpfs_t, ignore error
- Allow colord to get the attributes of fixed disk device nodes
- Allow nsplugin_t to getattr on gpmctl
- Allow mozilla_plugin to connect to pcscd over an unix stream socket
- Allow logrotate to execute systemctl
- colord wants to read files in users homedir
- Remote login should create user_tmp_t content not its own tmp files
- Allow psad signal
- Fix cobbler_read_lib_files interface
- Allow rlogind to r/w user terminals
- Allow prelink_cron_system_t to relabel content and ignore obj_id
- Allow gnomeclock_systemctl_t to list init_var_run_t
- Dbus domains will inherit fds from the init system
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #729211 - SELinux is preventing /usr/bin/python from 'search' accesses on the directory /root/.local.
https://bugzilla.redhat.com/show_bug.cgi?id=729211
[ 2 ] Bug #735598 - avc: livecd-creator/python/ldconfig script/program/process transition
https://bugzilla.redhat.com/show_bug.cgi?id=735598
[ 3 ] Bug #795580 - various avcs in connection with Shorewall
https://bugzilla.redhat.com/show_bug.cgi?id=795580
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update selinux-policy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
12 years, 1 month