Fedora 20 Update: nodejs-shelljs-0.3.0-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-6549
2014-05-21 22:39:14
--------------------------------------------------------------------------------
Name : nodejs-shelljs
Product : Fedora 20
Version : 0.3.0
Release : 1.fc20
URL : http://github.com/arturadib/shelljs
Summary : Portable Unix shell commands for Node.js
Description :
Portable Unix shell commands for Node.js.
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update nodejs-shelljs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 12 months
Fedora 20 Update: ColPack-1.0.9-3.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7475
2014-06-18 21:30:44
--------------------------------------------------------------------------------
Name : ColPack
Product : Fedora 20
Version : 1.0.9
Release : 3.fc20
URL : http://cscapes.cs.purdue.edu
Summary : Algorithms for specialized vertex coloring problems
Description :
ColPack is a package comprising of implementation of algorithms for
specialized vertex coloring problems that arise in sparse derivative
computation. It is written in an object-oriented fashion heavily using
the Standard Template Library (STL). It is designed to be simple,
modular, extendable and efficient.
This build has openMP-support enabled.
--------------------------------------------------------------------------------
Update Information:
* added Patch0 to fix syntax for openMP
* preserve GPLv3-file
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 18 2014 Björn Esser <bjoern.esser(a)gmail.com> - 1.0.9-3
- added Patch0 to fix build with openMP on GCC >= 4.9
- restructured spec
- preserve GPLv3-file
* Fri Jun 6 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.0.9-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1105912 - ColPack: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1105912
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ColPack' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 12 months
Fedora 20 Update: wt-3.3.3-2.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7280
2014-06-12 05:42:04
--------------------------------------------------------------------------------
Name : wt
Product : Fedora 20
Version : 3.3.3
Release : 2.fc20
URL : http://www.webtoolkit.eu/wt
Summary : C++ library for developing web applications
Description :
Web C++ library with widget oriented API that uses well-tested patterns of
desktop GUI development tailored to the web. To the developer, it offers
abstraction of web-specific implementation details, including client-server
protocols, event handling, graphics support, graceful degradation (or
progressive enhancement), and URL handling.
--------------------------------------------------------------------------------
Update Information:
New upstream version 3.3.3.
Reenabled raster image support.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 13 2014 Michal Minar <miminar(a)redhat.com> 3.3.3-2
- Reenabled raster image support.
* Wed Jun 11 2014 Michal Minar <miminar(a)redhat.com> 3.3.3-1
- New upstream version 3.3.3.
* Fri Mar 21 2014 Michal Minar <miminar(a)redhat.com> 3.3.2-2
- Got rid of bundled sqlite libraries.
* Fri Mar 14 2014 Michal Minar <miminar(a)redhat.com> 3.3.2-1
- Update to 3.3.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1108929 - WRasterImage support is not included
https://bugzilla.redhat.com/show_bug.cgi?id=1108929
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update wt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 12 months
Fedora 19 Update: packagedb-cli-2.3.1-2.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7451
2014-06-17 22:44:42
--------------------------------------------------------------------------------
Name : packagedb-cli
Product : Fedora 19
Version : 2.3.1
Release : 2.fc19
URL : https://fedorahosted.org/packagedb-cli/
Summary : A CLI for pkgdb
Description :
packagedb-cli is a command line interface of the well-known
packagedb of the Fedora project.
It allows you to manage the ACL for your packages as well
as requesting new ACL for new packages.
It also allows you to orphan and/or retire your package(s).
--------------------------------------------------------------------------------
Update Information:
Add missing dep on python-setuptools
Update to 2.3.1
* Fixes to bugs reported on bugzilla
* Add to pkgdb2client a method to retrieve the version of the pkgdb API
* Add to pgkdb2client a method to retrieve a packager's packages
* Have pkgdb-cli list --user rely on the new pkgdb2 API endpoint (if present)
* pkgdb-cli list --user returns all the packages unless asked otherwise (which
is what it used to do w/ pkgdb1)
* Add the pkgdb2client the possibility to save the session to a file
~/.cache/pkgdb-session.pickle by default
* Add a login_callback method to pkgdb2client
* Fix asking for password only if required (ie: not provided via --password)
* Add support for on-demand authentication
* Order the user in the ACL output
* Order the ACL output per branch
Update to 2.3.1
* Fixes to bugs reported on bugzilla
* Add to pkgdb2client a method to retrieve the version of the pkgdb API
* Add to pgkdb2client a method to retrieve a packager's packages
* Have pkgdb-cli list --user rely on the new pkgdb2 API endpoint (if present)
* pkgdb-cli list --user returns all the packages unless asked otherwise (which
is what it used to do w/ pkgdb1)
* Add the pkgdb2client the possibility to save the session to a file
~/.cache/pkgdb-session.pickle by default
* Add a login_callback method to pkgdb2client
* Fix asking for password only if required (ie: not provided via --password)
* Add support for on-demand authentication
* Order the user in the ACL output
* Order the ACL output per branch
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 16 2014 Luke Macken <lmacken(a)redhat.com> - 2.3.1-2
- Require python-setuptools (#1108974)
* Thu Jun 12 2014 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 2.3.1-1
- Update to 2.3.1
- Fixes https://bugzilla.redhat.com/1108634 (orphaned branches may have no ACLs
registered at all)
* Tue Jun 10 2014 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 2.3-1
- Update to 2.3
- Add to pkgdb2client a method to retrieve the version of the pkgdb API
- Add to pgkdb2client a method to retrieve a packager's packages
- Have pkgdb-cli list --user rely on the new pkgdb2 API endpoint (if present)
- pkgdb-cli list --user returns all the packages unless asked otherwise (which
is what it used to do w/ pkgdb1)
- Add the pkgdb2client the possibility to save the session to a file
~/.cache/pkgdb-session.pickle by default
- Add a login_callback method to pkgdb2client
- Fix asking for password only if required (ie: not provided via --password)
- Add support for on-demand authentication
- Order the user in the ACL output
- Order the ACL output per branch
* Fri Jun 6 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri May 23 2014 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 2.2-2
- Add missing requires on python-beautifulsoup4 RHBZ#1100496
* Thu May 15 2014 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 2.2-1
- Update to 2.2
- Replaces `devel` by `master`
- Fix layout for groups
- Rely on /api/critpath for the get_critpath_packages method
- Log URLs before calling them rather than after
* Thu May 15 2014 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 2.1-1
- Update to 2.1
- Adds supports to pkgdb2client for the critpath filtering or querying
* Wed May 14 2014 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 2.0-1
- Update to 2.0 for pkgdb2
- Adjust spec to rely on the newly included setup.py
- Add BR on python-setuptools (and explicitely on python-requests)
- Adjust the BR now that we use setup.py, all R are also BR
* Mon Mar 10 2014 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 1.7.0-1
- Update to 1.7.0
- Add the branches command
- Fix the --branch filter in the list command
* Sat Sep 7 2013 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 1.6.0-1
- Update to 1.6.0
- Fixes RHBZ#1002694 (rework the retire process, remove toggling)
* Thu Sep 5 2013 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 1.5.1-1
- Update to 1.5.1
- Fixes RHBZ#995430 and RHBZ#970120
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1108974 - [abrt] packagedb-cli-2.3.1-1.fc20: pkgdb-cli:5:<module>:ImportError: No module named pkg_resources
https://bugzilla.redhat.com/show_bug.cgi?id=1108974
[ 2 ] Bug #1100497 - Prompted for password when using --password argument
https://bugzilla.redhat.com/show_bug.cgi?id=1100497
[ 3 ] Bug #1108634 - packagedb-cli: KeyError: 'acls'
https://bugzilla.redhat.com/show_bug.cgi?id=1108634
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update packagedb-cli' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 12 months
Fedora 20 Update: hplip-3.14.6-2.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-6291
2014-05-13 04:00:27
--------------------------------------------------------------------------------
Name : hplip
Product : Fedora 20
Version : 3.14.6
Release : 2.fc20
URL : http://hplip.sourceforge.net/
Summary : HP Linux Imaging and Printing Project
Description :
The Hewlett-Packard Linux Imaging and Printing Project provides
drivers for HP printers and multi-function peripherals.
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 17 2014 Jiri Popelka <jpopelka(a)redhat.com> - 3.14.6-2
- Fix parsing of avahi-daemon output (bug #1096939).
* Thu Jun 5 2014 Jiri Popelka <jpopelka(a)redhat.com> - 3.14.6-1
- 3.14.6
* Thu May 22 2014 Jiri Popelka <jpopelka(a)redhat.com> - 3.14.4-5
- Treat logging before importing of logger module (bug #984699).
* Tue Apr 29 2014 Tim Waugh <twaugh(a)redhat.com> - 3.14.4-4
- Fixed scan-tmp patch (bug #1076954).
* Tue Apr 22 2014 Tim Waugh <twaugh(a)redhat.com> - 3.14.4-3
- Fix for last fix (bug #984167).
* Wed Apr 16 2014 Tim Waugh <twaugh(a)redhat.com> - 3.14.4-2
- Fixed codec issue (bug #984167).
* Wed Apr 9 2014 Jiri Popelka <jpopelka(a)redhat.com> - 3.14.4-1
- 3.14.4
* Fri Apr 4 2014 Tim Waugh <twaugh(a)redhat.com> - 3.14.3-3
- Scan to /var/tmp instead of /tmp (bug #1076954).
* Mon Mar 10 2014 Jiri Popelka <jpopelka(a)redhat.com> - 3.14.3-2
- BuildRequires: pkgconfig(dbus-1) instead of dbus-devel
* Fri Mar 7 2014 Jiri Popelka <jpopelka(a)redhat.com> - 3.14.3-1
- 3.14.3
- --enable-udev-acl-rules configure flag has been removed upstream
* Thu Jan 9 2014 Jiri Popelka <jpopelka(a)redhat.com> - 3.14.1-1
- 3.14.1
* Wed Nov 27 2013 Jiri Popelka <jpopelka(a)redhat.com> - 3.13.11-4
- do not %ghost /run/hplip (bug #1034928)
* Mon Nov 25 2013 Tim Waugh <twaugh(a)redhat.com> - 3.13.11-3
- Moved hp-doctor to gui sub-package as it requires check module
(bug #1015441).
* Thu Nov 21 2013 Jiri Popelka <jpopelka(a)redhat.com> - 3.13.11-2
- create /usr/lib/tmpfiles.d/hplip.conf (bug #1015831).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1096485 - hplip is outdated : please upgrade to 3.14.4
https://bugzilla.redhat.com/show_bug.cgi?id=1096485
[ 2 ] Bug #1076954 - segfault and core dump in hp-scan
https://bugzilla.redhat.com/show_bug.cgi?id=1076954
[ 3 ] Bug #984699 - [abrt] hplip-3.13.6-2.fc19: hpfax:55:bug:NameError: global name 'log' is not defined
https://bugzilla.redhat.com/show_bug.cgi?id=984699
[ 4 ] Bug #1096939 - [abrt] hplip: avahi.py:64:detectNetworkDevices:ValueError: need more than 1 value to unpack
https://bugzilla.redhat.com/show_bug.cgi?id=1096939
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update hplip' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 12 months
Fedora 20 Update: ibus-handwrite-2.1.4-11.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7465
2014-06-17 22:45:13
--------------------------------------------------------------------------------
Name : ibus-handwrite
Product : Fedora 20
Version : 2.1.4
Release : 11.fc20
URL : http://code.google.com/p/ibus-handwrite/
Summary : IBus handwrite project
Description :
IBus handwrite project.
--------------------------------------------------------------------------------
Update Information:
Fixes keyboard shortcut
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 17 2014 Peng Wu <pwu(a)redhat.com> - 2.1.4-11
- Fixes keyboard shortcut
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.1.4-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1108707 - After clearing the drawing area using ESC, the next commit is inserted as garbage
https://bugzilla.redhat.com/show_bug.cgi?id=1108707
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ibus-handwrite' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 12 months
[SECURITY] Fedora 20 Update: openstack-neutron-2013.2.3-9.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7446
2014-06-17 22:44:31
--------------------------------------------------------------------------------
Name : openstack-neutron
Product : Fedora 20
Version : 2013.2.3
Release : 9.fc20
URL : http://launchpad.net/neutron/
Summary : OpenStack Networking Service
Description :
Neutron is a virtual network service for Openstack. Just like
OpenStack Nova provides an API to dynamically request and configure
virtual servers, Neutron provides an API to dynamically request and
configure virtual networks. These networks connect "interfaces" from
other OpenStack services (e.g., virtual NICs from Nova VMs). The
Neutron API supports extensions to provide advanced network
capabilities (e.g., QoS, ACLs, network monitoring, etc.)
--------------------------------------------------------------------------------
Update Information:
Fixed a security issue that allowed an authorised user to break Neutron L3-agent using a IPv6 subnet.
This is an update that fixes problems communicating with the latest upstream stable Qpid >= 0.28.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 17 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-9
- Install SNAT rules for ipv4 only, bz#1110142
* Wed Jun 11 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-8
- Ensure routing key is specified in the address for a direct producer, bz#1108025
* Mon May 19 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-7
- netaddr<=0.7.10 raises ValueError instead of AddrFormatError, bz#1090137
* Mon May 19 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-6
- Validate CIDR given as ip-prefix in security-group-rule-create, bz#1090137
* Thu May 15 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-5
- Make neutron-vpn-agent read fwaas_driver.ini, bz#1098121
* Mon Apr 28 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-4
- Removed signing_dir from neutron.conf (bz#1050842)
- Sync service and systemd modules from oslo-incubator (bz#1063427)
* Thu Apr 10 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-2
- Remove signing_dir from neutron-dist.conf, bz#1050842
* Thu Apr 10 2014 Miguel Angel Ajo <mangelajo(a)redhat.com> 2013.2.3-1
- Update to upstream 2013.2.3
* Wed Feb 19 2014 Pádraig Brady <pbrady(a)redhat.com> - 2013.2.2-2
- Update to havana stable release 2013.2.2
- Sync up Quantum renaming changes from el6 branch
* Fri Jan 24 2014 Terry Wilson <twilson(a)redhat.com> - 2013.2.1-3
- Remove requirements.txt, bz#1057615
* Tue Jan 7 2014 Terry Wilson <twilson(a)redhat.com> - 2013.2.1-1
- Add python-psutil requirement for openvswitch agent, bz#1049235
* Wed Dec 18 2013 Pádraig Brady <pbrady(a)redhat.com> - 2013.2.1-1
- Update to havana stable release 2013.2.1
* Tue Dec 10 2013 Terry Wilson <twilson(a)redhat.com> - 2013.2-6
- Add rootwrap.conf limitation to sudoers.d/neutron, bz#984097
- neutron-server-setup: support mariadb
* Wed Dec 4 2013 Terry Wilson <twilson(a)redhat.com> - 2013.2-5
- Add missing debug and vpnaas rootwrap filters, bz#1034207
* Mon Dec 2 2013 Terry Wilson <twilson(a)redhat.com> - 2013.2-4
- Replace quantum references in neutron-dist.conf
* Wed Nov 13 2013 Terry Wilson <twilson(a)redhat.com> - 2013.2-3
- Add dnsmasq-utils dependency
* Wed Oct 30 2013 Terry Wilson <twilson(a)redaht.com> - 2013.2-2
- Better support for upgrading from grizzly to havana
- Update dependencies on python-{babel,keystoneclient,oslo-config}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1110139 - CVE-2014-4167 openstack-neutron: L3-agent denial of service through IPv6 subnet
https://bugzilla.redhat.com/show_bug.cgi?id=1110139
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openstack-neutron' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 12 months
[SECURITY] Fedora 19 Update: xen-4.2.4-5.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7408
2014-06-16 22:26:42
--------------------------------------------------------------------------------
Name : xen
Product : Fedora 19
Version : 4.2.4
Release : 5.fc19
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor
--------------------------------------------------------------------------------
Update Information:
Vulnerabilities in HVM MSI injection
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 15 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-5
- Vulnerabilities in HVM MSI injection [XSA-96, CVE-2014-3967,CVE-2014-3968]
(#1104583)
* Thu May 1 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-4
- HVMOP_set_mem_type allows invalid P2M entries to be created
[XSA-92, CVE-2014-3124] (#1093315)
* Wed Mar 26 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-3
- HVMOP_set_mem_access is not preemptible [XSA-89, CVE-2014-2599] (#1080425)
* Wed Feb 19 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-2
- 32-bit fix for "Guest triggerable AMD CPU erratum may cause host hang"
[XSA-82, CVE-2013-6885]
* Tue Feb 18 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-1
- update to xen-4.2.4
includes fix for "Excessive time to disable caching with HVM guests with
PCI passthrough" [XSA-60, CVE-2013-2212] (#987914)
- remove patches that are now included
* Wed Feb 12 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-16
- use-after-free in xc_cpupool_getinfo() under memory pressure [XSA-88,
CVE-2014-1950] (#1064491)
* Thu Feb 6 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-15
- integer overflow in several XSM/Flask hypercalls [XSA-84, CVE-2014-1891,
CVE-2014-1892, CVE-2014-1893, CVE-2014-1894]
Off-by-one error in FLASK_AVC_CACHESTAT hypercall [XSA-85, CVE-2014-1895]
libvchan failure handling malicious ring indexes [XSA-86, CVE-2014-1896]
(#1062335)
* Fri Jan 24 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-14
- PHYSDEVOP_{prepare,release}_msix exposed to unprivileged pv guests
[XSA-87, CVE-2014-1666] (#1058398)
* Thu Jan 23 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-13
- Out-of-memory condition yielding memory corruption during IRQ setup
[XSA-83, CVE-2014-1642] (#1057142)
* Wed Dec 11 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-12
- IOMMU TLB flushing may be inadvertently suppressed [XSA-80, CVE-2013-6400]
(#1040024)
* Mon Dec 2 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-11
- HVM guest triggerable AMD CPU erratum may cause host hang
[XSA-82, CVE-2013-6885]
* Tue Nov 26 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-10
- Lock order reversal between page_alloc_lock and mm_rwlock
[XSA-74, CVE-2013-4553] (#1034925)
- Hypercalls exposed to privilege rings 1 and 2 of HVM guests
[XSA-76, CVE-2013-4554] (#1034923)
* Thu Nov 21 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-9
- Insufficient TLB flushing in VT-d (iommu) code
[XSA-78, CVE-2013-6375] (#1033149)
* Sat Nov 9 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-8
- Host crash due to HVM guest VMX instruction execution
[XSA-75, CVE-2013-4551] (#1029055)
* Fri Nov 1 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-7
- Lock order reversal between page allocation and grant table locks
[XSA-73, CVE-2013-4494] (#1026248)
* Tue Oct 29 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-6
- ocaml xenstored mishandles oversized message replies
[XSA-72, CVE-2013-4416] (#1024450)
* Fri Oct 25 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-5
- systemd changes to allow oxenstored to be used instead of xenstored (#1022640)
* Thu Oct 10 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-4
- security fixes (#1017843)
Information leak through outs instruction emulation in 64-bit PV guests
[XSA-67, CVE-2013-4368]
possible null dereference when parsing vif ratelimiting info
[XSA-68, CVE-2013-4369]
misplaced free in ocaml xc_vcpu_getaffinity stub
[XSA-69, CVE-2013-4370]
use-after-free in libxl_list_cpupool under memory pressure
[XSA-70, CVE-2013-4371]
qemu disk backend (qdisk) resource leak (Fedora doesn't build this qemu)
[XSA-71, CVE-2013-4375]
* Wed Oct 2 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-3
- Set "Domain-0" label in xenstored.service systemd file to match
xencommons init.d script.
- security fixes (#1013748)
Information leaks to HVM guests through I/O instruction emulation
[XSA-63, CVE-2013-4355]
Information leak to HVM guests through fbld instruction emulation
[XSA-66, CVE-2013-4361]
* Wed Sep 25 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-2
- Information leak on AVX and/or LWP capable CPUs [XSA-62, CVE-2013-1442]
(#1012056)
* Mon Sep 9 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-1
- update to xen-4.2.3
includes fix for [XSA-61, CVE-2013-4329] libxl partially sets up HVM
passthrough even with disabled iommu
- remove included or unnecessary patches
* Wed Jun 26 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.2-10
- XSA-45/CVE-2013-1918 breaks page reference counting [XSA-58,
CVE-2013-1432] (#978383)
- let pygrub handle set default="${next_entry}" line in F19 (#978036)
- libxl: Set vfb and vkb devid if not done so by the caller (#977987)
* Mon Jun 24 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.2-9
- add upstream patch for PCI passthrough problems after XSA-46 (#977310)
* Fri Jun 21 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.2-8
- xenstore permissions not set correctly by libxl [XSA-57,
CVE-2013-2211] (#976779)
* Fri Jun 14 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.2-7
- Revised fixes for [XSA-55, CVE-2013-2194 CVE-2013-2195
CVE-2013-2196] (#970640)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1102254 - CVE-2014-3967 CVE-2014-3968 xen: Vulnerabilities in HVM MSI injection (XSA-96)
https://bugzilla.redhat.com/show_bug.cgi?id=1102254
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xen' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 12 months
Fedora 20 Update: java-1.7.0-openjdk-1.7.0.60-2.5.0.1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7558
2014-06-21 02:05:12
--------------------------------------------------------------------------------
Name : java-1.7.0-openjdk
Product : Fedora 20
Version : 1.7.0.60
Release : 2.5.0.1.fc20
URL : http://openjdk.java.net/
Summary : OpenJDK Runtime Environment
Description :
The OpenJDK runtime environment.
--------------------------------------------------------------------------------
Update Information:
Updated to u60b30
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2014-June/028187.html
This release have reverted controversial fix of http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=729
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 19 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.60-2.5.0.1.f20
- added and applied as reverted patch404 gtk3ToBeReverted.patch
- reverting controversial fix of http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=729
* Wed Jun 18 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.60-2.5.0.f20
- updated to icedtea7-forest 2.5.0
- removed icedtea_version_presuffix
- removed hardcoded 60
- removed upstreamed patch412 add-final-location-rpaths.patch
- removed upstreamed patch413 rh1064383-prelink_fix.patch
* Thu May 22 2014 Andrew Hughes <gnu.andrew(a)redhat.com - 1.7.0.51-2.4.7.4.fc20
- Fix jinfo behaviour when prelink cache is present
- Resolves: rhbz#1064383
* Thu May 22 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.51-2.4.7.3.fc20
- debug turned off (0)
- python added to line /builddir/build/SOURCES/remove-origin-from-rpaths $files to preven access denied
- added build requires for python
* Thu May 22 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.51-2.4.7.2.fc20
- bumped release
- changed buildoutputdir to contains "-debug" in case of debug on
- rewritten (long unmaintained) java-1.7.0-openjdk-debugdocs.patch and
java-1.7.0-openjdk-debuginfo.patch
- debug turned on (1)
* Tue Apr 22 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.55-2.4.7.1.fc20
- Added Omair's fix for RH1059925
- added and used Source14, remove-origin-from-rpaths
- added and applied patch412 add-final-location-rpaths.patch
- added build requires chrpath
- adde INSTALL_LOCATION=_jvmdir/sdkdir to make swithces
- added missing OrderWithRequires (sync with master)
- removed rhino requires (sync with master)
- added libattr-devel build requires (sync with master)
- added conditional chmod on sa-jdi.jar (sync with master)
- added comment to fiels about lua (sync with master)
- added few more owned dirs (sync with master)
* Mon Apr 7 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.55-2.4.7.0.fc20
- Added check to lua according to already exisitng same jvm
- bumped to future icedtea-forest 2.4.7
- updatever set to 55, buildver se to 13, release reset to 0
- removed upstreamed patch402 gstackbounds.patch
- included config(norepalce) lua script
* Wed Mar 26 2014 Omair Majid <omajid(a)redhat.com> - 1.7.0.60-2.4.5.2.fc20
- Switch to a new tapset tarball without trailing space in file name
* Thu Jan 30 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.51-2.4.5.1.f20
- removed or cleaning alternatives remove in posts
* Thu Jan 30 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.51-2.4.5.0.f20
- removed buildRequires: pulseaudio >= 0.9.11, as not neccessary
- but kept libs-devel
- updated to icedtea 2.4.5
- http://blog.fuseyism.com/index.php/2014/01/29/icedtea-2-4-5-released/
- removed upstreamed or unwonted patches (thanx to gnu_andrew to pointing them out)
- patch410 1015432.patch (upstreamed)
- patch411 1029588.patch
- patch412 zero-x32.diff
- patch104 java-1.7.0-ppc-zero-jdk.patch
- patch105 java-1.7.0-ppc-zero-hotspot.patch
- patch402 gstackbounds.patch and patch403 PStack-808293.patch applied always
(again thanx to gnu_andrew)
- merged other gnu_andrew's changes
- FT2_CFLAGS and FT2_LIBS hardoced values replaced by correct pkg-config calls
- buildver bumbed to 31
- added build requires nss-devel
- removed build requires mercurial
- added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS into make call
* Fri Jan 17 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.51-2.4.4.1.f20
- removed 2.3 tarball due to security issues
- this causes zero arm32 jit to not exists eny more (aprox 30% slowdown)
- removed declarations:
- global icedtea_version_arm32 2.3.13
- source100 openjdk-icedtea-%{icedtea_version_arm32}.tar.xz
- removed:
- patch30 java-1.7.0-openjdk-java-access-bridge-security-2.3.patch
- patch1000 rhino-2.3.patch
- patch4020 gstackbounds-2.3.patch
- patch4110 1029588-2.3.patch
- patch302 systemtap.patch
- patch401 657854-openjdk7.patch
- with all follwing ifarch arm calls
- patch410 and TestCryptoLevel are now used always
- US_export_policy.jar and local_policy.jar are now listed always
- make:
- always used DISABLE_INTREE_EC, UNLIMITED_CRYPTO
- removed arm32 specific DISTRO_PACKAGE_VERSION JDK_UPDATE_VERSION JDK_BUILD_NUMBER
- added patch412 zero-x32.diff to try to fix zero builds build
* Fri Jan 10 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.51-2.4.4.0.f20
- updated to security icedtea 2.4.4
- and arm tarball updated to security icedtea 2.3.13
- icedtea_version set to 2.4.4
- updatever bumped to 51
- release reset to 0
* Mon Jan 6 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.40-2.4.3.4.f19
- added and applied patch411 1029588.patch (for 2.4)
- added and applied patch4110 1029588-2.3.patch (for 2.3)
- resolves rhbz#1029588
* Mon Jan 6 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.40-2.4.3.3.f19
- added and applied for icedtea 2.4 patch410, 1015432.patch
- resolves rhbz#1015432
* Mon Jan 6 2014 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.40-2.4.3.2.f20
- changed Provides: jre-headless = 1.7.0
to Provides: jre-headless = 1:1.7.0
- resolves rhbz#1046050
* Fri Oct 18 2013 Jiri Vanek <jvanek(a)redhat.com> - 1.7.0.40-2.4.3.1.f20
- arm tarball updated to new CPU sources 2.3.13
- removed upstreamed patch 501 callerclass-01.patch
- removed upstreamed patch 502 callerclass-02.patch
- removed upstreamed patch 503 callerclass-02.patch
- removed upstreamed patch 504 callerclass-02.patch
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update java-1.7.0-openjdk' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 12 months
Fedora 20 Update: grub2-2.00-26.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7750
2014-06-26 00:52:31
--------------------------------------------------------------------------------
Name : grub2
Product : Fedora 20
Version : 2.00
Release : 26.fc20
URL : http://www.gnu.org/software/grub/
Summary : Bootloader with support for Linux, Multiboot and more
Description :
The GRand Unified Bootloader (GRUB) is a highly configurable and customizable
bootloader with modular architecture. It support rich varietyof kernel formats,
file systems, computer architectures and hardware devices. This subpackage
provides support for PC BIOS systems.
--------------------------------------------------------------------------------
Update Information:
Don't require password to boot normally - #840204
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 23 2014 Adam Williamson <awilliam(a)redhat.com> - 2.00-26
- Don't require password to boot normally - #840204
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #840204 - grub2 ask for the password at each boot
https://bugzilla.redhat.com/show_bug.cgi?id=840204
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update grub2' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 12 months