--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-8681
2013-05-21 06:57:56
--------------------------------------------------------------------------------
Name : libvirt
Product : Fedora 18
Version : 0.10.2.5
Release : 1.fc18
URL : http://libvirt.org/
Summary : Library providing a simple virtualization API
Description :
Libvirt is a C toolkit to interact with the virtualization capabilities
of recent versions of Linux (and other OSes). The main package includes
the libvirtd server exporting the virtualization support.
--------------------------------------------------------------------------------
Update Information:
* Rebased to version 0.10.2.5
* Fix creating snapshot on lvm pool (bz #955371)
* Properly escape audit paths (bz #922186)
* Follow updated packaging guidelines for user alloc (bz #924501)
* CVE-2013-1962 Open files DoS (bz #963789, bz #953107)
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 19 2013 Cole Robinson <crobinso(a)redhat.com> - 0.10.2.5-1
- Rebased to version 0.10.2.5
- Fix creating snapshot on lvm pool (bz #955371)
- Properly escape audit paths (bz #922186)
- Follow updated packaging guidelines for user alloc (bz #924501)
- CVE-2013-1962 Open files DoS (bz #963789, bz #953107)
* Mon Apr 1 2013 Cole Robinson <crobinso(a)redhat.com> - 0.10.2.4-1
- Rebased to version 0.10.2.4
- Fix 'Cannot parse sensitivity level in s0' error (bz #902103)
- Fix updating NIC that has boot order set (bz #906446)
- Fix virsh list for vmware ESX (bz #910702)
- Fix libxl disk backend default (bz #912488)
* Mon Jan 28 2013 Cole Robinson <crobinso(a)redhat.com> - 0.10.2.3-1
- Rebased to version 0.10.2.3
- Fix libxl driver to build against xen 4.2 (bz #870689)
- Fix possible crash when destroying guests (bz #877110)
- Fix loading sysctl file (bz #887017)
- Fix svirt memory leak (bz #890039)
- Fix attaching PCI netdev to VM (bz #893131)
- Fix libvirtd segfault on shutdown (bz #903194)
- Raise mem limit to stop qemu processes from getting OOM killed (bz #903432)
- CVE-2013-0170 libvirt: use-after-free in virNetMessageFree() (bz #893450, bz
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #953107 - CVE-2013-1962 libvirt: DoS (max count of open files exhaustion) due sockets leak in the storage pool
https://bugzilla.redhat.com/show_bug.cgi?id=953107
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libvirt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-8723
2013-05-21 07:05:08
--------------------------------------------------------------------------------
Name : qtractor
Product : Fedora 18
Version : 0.5.8
Release : 2.fc18
URL : http://qtractor.sourceforge.net/
Summary : Audio/MIDI multi-track sequencer
Description :
Qtractor is an Audio/MIDI multi-track sequencer application written in C++
around the Qt4 toolkit using Qt Designer. The initial target platform will be
Linux, where the Jack Audio Connection Kit (JACK) for audio, and the Advanced
Linux Sound Architecture (ALSA) for MIDI, are the main infrastructures to
evolve as a fairly-featured Linux Desktop Audio Workstation GUI, specially
dedicated to the personal home-studio.
--------------------------------------------------------------------------------
Update Information:
This minor update fixes a bug in installing the desktop fle
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 19 2013 Brendan Jones <brendan.jones.it(a)gmail.com> 0.5.8-2
- Remove no longer required sed on desktop file
* Mon Apr 22 2013 Brendan Jones <brendan.jones.it(a)gmail.com> 0.5.8-1
- Update to 0.5.8
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.5.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sat Jan 5 2013 Brendan Jones <brendan.jones.it(a)gmail.com> 0.5.7-1
- Update to 0.5.7
* Thu Oct 4 2012 Brendan Jones <brendan.jones.it(a)gmail.com> 0.5.6-1
- Update to 0.5.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #964364 - Error in file "/usr/share/applications/qtractor.desktop"
https://bugzilla.redhat.com/show_bug.cgi?id=964364
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qtractor' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-8687
2013-05-21 06:58:08
--------------------------------------------------------------------------------
Name : gypsy
Product : Fedora 18
Version : 0.9
Release : 1.fc18
URL : http://gypsy.freedesktop.org/
Summary : A GPS multiplexing daemon
Description :
Gypsy is a GPS multiplexing daemon which allows multiple clients to
access GPS data from multiple GPS sources concurrently.
--------------------------------------------------------------------------------
Update Information:
* New upstream 0.9 release
* add patch to fix FTBSF due to deprecated g_type_init
* Fix CVE-2011-0523 - read arbitrary files as the root user on behalf of a regular user
* Fix CVE-2011-0524 - buffer overflow in nmea device input handling (code no longer in existence)
* aarch64 support
* Fix segfault
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 19 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 0.9-1
- New upstream 0.9 release
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.8-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.8-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #674129 - CVE-2011-0523 CVE-2011-0524 gypsy: multiple vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=674129
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gypsy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-7987
2013-05-13 00:02:35
--------------------------------------------------------------------------------
Name : opendnssec
Product : Fedora 18
Version : 1.4.0
Release : 1.fc18
URL : http://www.opendnssec.org/
Summary : DNSSEC key and zone management software
Description :
OpenDNSSEC was created as an open-source turn-key solution for DNSSEC.
It secures zone data just before it is published in an authoritative
name server. It requires a PKCS#11 crypto module library, such as softhsm
--------------------------------------------------------------------------------
Update Information:
Update from rc to stable release, fixes CKR_KEY_HANDLE_INVALID from spontanious key rollover
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 11 2013 Paul Wouters <pwouters(a)redhat.com> - 1.4.0-1
- Updated to 1.4.0
* Fri Apr 12 2013 Paul Wouters <pwouters(a)redhat.com> - 1.4.20-0.8.rc3
- Updated to 1.4.0rc3
- Enabled hardened compile, full relzo/pie
* Fri Jan 25 2013 Patrick Uiterwijk <puiterwijk(a)gmail.com> - 1.4.0-0.7.rc2
- Updated to 1.4.0rc2, which includes svn r6952
* Fri Jan 18 2013 Patrick Uiterwijk <puiterwijk(a)gmail.com> - 1.4.0-0.6.rc1
- Updated to 1.4.0rc1
- Applied opendnssec-ksk-premature-retirement.patch (svn r6952)
* Tue Dec 18 2012 Paul Wouters <pwouters(a)redhat.com> - 1.4.0-0.5.b2
- Updated to 1.4.0b2
- All patches have been merged upstream
- cron job should be marked as config file
* Tue Oct 30 2012 Paul Wouters <pwouters(a)redhat.com> - 1.4.0-0.4.b1
- Added BuildRequires: procps-ng for bug OPENDNSSEC-345
- Change RRSIG inception offset to -2h to avoid possible
daylight saving issues on resolvers
- Patch to prevent removal of occluded data
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update opendnssec' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-3849
2013-03-14 00:58:29
--------------------------------------------------------------------------------
Name : rubygem-openshift-origin-common
Product : Fedora 18
Version : 1.5.1
Release : 2.fc18
URL : http://openshift.redhat.com
Summary : Cloud Development Common
Description :
This contains the Cloud Development Common packaged as a rubygem.
--------------------------------------------------------------------------------
Update Information:
Update to latest release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 12 2013 Troy Dawson <tdawson(a)redhat.com> 1.5.1-2
- Change the source from a tar to gem
* Thu Mar 7 2013 Adam Miller <admiller(a)redhat.com> 1.5.1-1
- bump_minor_versions for sprint 25 (admiller(a)redhat.com)
* Thu Feb 28 2013 Adam Miller <admiller(a)redhat.com> 1.4.6-1
- reverted US2448 (lnader(a)redhat.com)
* Wed Feb 27 2013 Adam Miller <admiller(a)redhat.com> 1.4.5-1
- Added validation for SSL certificate and private key (lnader(a)redhat.com)
* Wed Feb 20 2013 Adam Miller <admiller(a)redhat.com> 1.4.4-1
- fix rubygem sources (tdawson(a)redhat.com)
* Tue Feb 19 2013 Adam Miller <admiller(a)redhat.com> 1.4.3-1
- Fixes for ruby193 (john(a)ibiblio.org)
- providing stub for usage_rates and changing rest response field to
usage_rates from usage_rate_usd (abhgupta(a)redhat.com)
* Fri Feb 8 2013 Adam Miller <admiller(a)redhat.com> 1.4.2-1
- change %define to %global (tdawson(a)redhat.com)
* Thu Feb 7 2013 Adam Miller <admiller(a)redhat.com> 1.4.1-1
- bump_minor_versions for sprint 24 (admiller(a)redhat.com)
* Wed Jan 30 2013 Troy Dawson <tdawson(a)redhat.com> 1.3.1-3
- Added ownership of common directories
* Tue Jan 29 2013 Troy Dawson <tdawson(a)redhat.com> 1.3.1-2
- Change the source from a tar to gem
- Remove scl for Fedora standards
* Wed Dec 12 2012 Adam Miller <admiller(a)redhat.com> 1.3.1-1
- bump_minor_versions for sprint 22 (admiller(a)redhat.com)
* Wed Dec 5 2012 Adam Miller <admiller(a)redhat.com> 1.2.3-1
- updated gemspecs so they work with scl rpm spec files. (tdawson(a)redhat.com)
* Thu Nov 29 2012 Adam Miller <admiller(a)redhat.com> 1.2.2-1
- fix require for fedora (dmcphers(a)redhat.com)
- add util package for oo-ruby (dmcphers(a)redhat.com)
* Sat Nov 17 2012 Adam Miller <admiller(a)redhat.com> 1.2.1-1
- bump_minor_versions for sprint 21 (admiller(a)redhat.com)
* Thu Nov 15 2012 Adam Miller <admiller(a)redhat.com> 1.1.4-1
- Fix for bug# 876516 (rpenta(a)redhat.com)
- Fix bug# 876124: caused due to ruby 1.8 to 1.9 upgrade (rpenta(a)redhat.com)
* Wed Nov 14 2012 Adam Miller <admiller(a)redhat.com> 1.1.3-1
- remove %prep steps that add gem pre-processing since we're using a .tar.gz
(admiller(a)redhat.com)
* Wed Nov 14 2012 Adam Miller <admiller(a)redhat.com> 1.1.2-1
- getting specs up to 1.9 sclized (dmcphers(a)redhat.com)
* Thu Nov 8 2012 Adam Miller <admiller(a)redhat.com> 1.1.1-1
- Bumping specs to at least 1.1 (dmcphers(a)redhat.com)
* Tue Oct 30 2012 Adam Miller <admiller(a)redhat.com> 1.0.1-1
- bumping specs to at least 1.0.0 (dmcphers(a)redhat.com)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rubygem-openshift-origin-common' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-7721
2013-05-09 09:04:05
--------------------------------------------------------------------------------
Name : tog-pegasus
Product : Fedora 18
Version : 2.12.0
Release : 7.fc18
URL : http://www.openpegasus.org
Summary : OpenPegasus WBEM Services for Linux
Description :
OpenPegasus WBEM Services for Linux enables management solutions that deliver
increased control of enterprise resources. WBEM is a platform and resource
independent DMTF standard that defines a common information model and
communication protocol for monitoring and controlling resources from diverse
sources.
--------------------------------------------------------------------------------
Update Information:
Fixes atomic operations on ARM.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 7 2013 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 2:2.12.0-7
- Fix atomic operations on ARM (patch by D. Marlin)
Resolves: #922770
* Mon Feb 18 2013 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 2:2.12.0-6
- Fix /usr/lib/systemd* unintentionally included in -libs subpackage
* Thu Jan 17 2013 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 2:2.12.0-5
- Use Experimental DMTF CIM schema version 2.33.0
* Tue Jan 8 2013 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 2:2.12.0-4
- Fix getPropertyAt() returns Null instead of empty array (patch by Jan Safranek)
- Add cimprovagt wrapper for possibility of confining providers in SELinux,
update README.RedHat.Security accordingly, add provider specific wrapper
example
* Thu Dec 6 2012 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 2:2.12.0-3
- Fix tracing of CMPI messages with CMPI_DEV_DEBUG severity
Resolves: #883395
- Add %check section and run unit tests
- Enable -test subpackage
- Scriptlets replaced with new systemd macros
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update tog-pegasus' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-8543
2013-05-19 01:38:19
--------------------------------------------------------------------------------
Name : mozilla-adblockplus
Product : Fedora 17
Version : 2.2.4
Release : 1.fc17
URL : https://adblockplus.org/
Summary : Adblocking extension for Mozilla Firefox, Thunderbird, and Seamonkey
Description :
Adblock Plus is a content-filtering extension for the Mozilla Firefox- and
Mozilla Application Suite-based web browsers. Adblock Plus allows users to
prevent page elements, such as advertisements, from being downloaded and
displayed.
It features improvements to the user interface, filter subscriptions, and
element hiding over the original Adblock extension.
--------------------------------------------------------------------------------
Update Information:
- Fixed: Server names with a trailing dot were mistakenly treated as typos.
- Fixed a Firefox 22 compatibility issue (no colors/imaages in filters list and list of blockable items).
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 9 2013 Russell Golden <niveusluna(a)niveusluna.org - 2.2.4-1
- Fixed: Server names with a trailing dot were mistakenly treated as typos.
- Fixed a Firefox 22 compatibility issue (no colors/imaages in filters list and list of blockable items).
* Thu Feb 14 2013 Russell Golden <niveusluna(a)niveusluna.org> - 2.2.3-1
- (Does not apply to Linux) Worked around AVG Security Toolbar
14.0.3.* breaking Adblock Plus among other things.
- Made sure that first-run page always opens is the current browser
window (bug 819561).
* Sat Feb 2 2013 Russell Golden <niveusluna(a)niveusluna.org> - 2.2.2-1
- Worked around regression in Firefox 18 causing entries on the
blockable items list to disappear and preventing context menu
from working reliably.
- Issue reporter now encourages users to enter an email address when
submitting issue reports.
- Fixed various compatibility problems with future Firefox releases.
* Wed Dec 19 2012 Russell Golden <niveusluna(a)niveusluna.org> - 2.2.1-3
- Fix typo in the license section
* Wed Dec 19 2012 Russell Golden <niveusluna(a)niveusluna.org> - 2.2.1-2
- Fix incorrect license information
* Fri Nov 23 2012 Russell Golden <niveusluna(a)niveusluna.org> - 2.2.1-1
- Update to upstream 2.2.1, which fixes a major bug in Firefox
versions 9-13.
* Wed Nov 21 2012 Russell Golden <niveusluna(a)niveusluna.org> - 2.2-1
- Update to upstream 2.2
- Take note of the auto-correct feature for URLs.
- Re-enable safe ads for Fedora 18 and rawhide.
* Sat Jul 7 2012 Russell Golden <niveusluna(a)niveusluna.org> - 2.1.1-1
- update to upstream 2.1.1
* Mon Jul 2 2012 Russell Golden <niveusluna(a)niveusluna.org> - 2.1-2
- update to upstream 2.1
- add changelog
* Fri Jan 20 2012 Russell Golden <niveusluna(a)niveusluna.org> - 2.0.3-3
- build release build, not debug build
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mozilla-adblockplus' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-6305
2013-04-22 23:40:07
--------------------------------------------------------------------------------
Name : openstack-cinder
Product : Fedora 18
Version : 2012.2.4
Release : 1.fc18
URL : http://www.openstack.org/software/openstack-storage/
Summary : OpenStack Volume service
Description :
OpenStack Volume (codename Cinder) provides services to manage and
access block storage volumes for use by Virtual Machine instances.
--------------------------------------------------------------------------------
Update Information:
Update to Folsom stable release 2012.2.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2013 Eric Harney <eharney(a)redhat.com> - 2012.2.4-1
- Update to Folsom stable release 4
* Mon Feb 18 2013 Eric Harney <eharney(a)redhat.com> - 2012.2.3-1
- Update to Folsom stable release 3
* Wed Jan 23 2013 Martin Magr <mmagr(a)redhat.com> - 2012.2.1-1
- Added python-keystone requirement
* Mon Dec 3 2012 Eric Harney <eharney(a)redhat.com> - 2012.2.1-1
- Update to Folsom stable release 1
* Wed Nov 14 2012 Eric Harney <eharney(a)redhat.com> - 2012.2-2
- Remove unused dependency on python-daemon
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openstack-cinder' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-9046
2013-05-24 19:28:46
--------------------------------------------------------------------------------
Name : libXi
Product : Fedora 19
Version : 1.7.1
Release : 4.20130524git661c45ca1.fc19
URL : http://www.x.org
Summary : X.Org X11 libXi runtime library
Description :
X.Org X11 libXi runtime library
--------------------------------------------------------------------------------
Update Information:
Udpate to git snapshot to fix CVE-2013-1984, CVE-2013-1995, CVE-2013-1998
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #959049 - CVE-2013-1984 libXi: Multiple integer overflows leading to heap-based buffer-overflows
https://bugzilla.redhat.com/show_bug.cgi?id=959049
[ 2 ] Bug #960346 - CVE-2013-1998 libXi: Multiple Array Index error leading to heap-based OOB write
https://bugzilla.redhat.com/show_bug.cgi?id=960346
[ 3 ] Bug #960357 - CVE-2013-1995 libXi: Sign extension issues resulting in heap-based buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=960357
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libXi' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-8413
2013-05-17 21:59:37
--------------------------------------------------------------------------------
Name : asymptote
Product : Fedora 19
Version : 2.22
Release : 1.fc19
URL : http://asymptote.sourceforge.net/
Summary : Descriptive vector graphics language
Description :
Asymptote is a powerful descriptive vector graphics language for technical
drawings, inspired by MetaPost but with an improved C++-like syntax.
Asymptote provides for figures the same high-quality level of typesetting
that LaTeX does for scientific text.
--------------------------------------------------------------------------------
Update Information:
PIL fix integrated. Update to 2.22.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update asymptote' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------