The following Fedora 18 Security updates need testing:
Age URL
6
https://admin.fedoraproject.org/updates/FEDORA-2012-14279/phpldapadmin-1....
13
https://admin.fedoraproject.org/updates/FEDORA-2012-13785/mediawiki119-1....
12
https://admin.fedoraproject.org/updates/FEDORA-2012-13871/libxslt-1.1.27-...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-14664/openjpeg-1.5.0-...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-14762/automake17-1.7....
The following builds have been pushed to Fedora 18 updates-testing
automake17-1.7.9-17.fc18
bdii-5.2.13-1.fc18
ceelog-0.1-1.fc18
ftp-0.17-60.fc18
libmatecomponentui-1.4.0-2.fc18
libsrtp-1.4.4-6.20101004cvs.fc18
libvirt-0.10.2-3.fc18
linux-firmware-20120925-0.1.git236367d.fc18
man-pages-ja-20120915-1.fc18
mate-window-manager-1.4.1-8.fc18
mcollective-2.2.0-1.fc18
mrpt-0.9.6-1.fc18
paps-0.6.8-22.fc18
pcl-1.6.0-2.fc18
php-pecl-memcache-3.0.7-3.fc18
python-django-horizon-2012.2-0.9.rc2.fc18
pytrainer-1.9.1-3.fc18
rng-tools-4-2.fc18
rusers-0.17-70.fc18
sssd-1.9.0-24.fc18
sudo-1.8.6p3-1.fc18
ypbind-1.36-6.fc18
ypserv-2.29-2.fc18
yum-langpacks-0.3.0-3.fc18
Details about builds:
================================================================================
automake17-1.7.9-17.fc18 (FEDORA-2012-14762)
A GNU tool for automatically creating Makefiles
--------------------------------------------------------------------------------
Update Information:
CVE-2012-3386 fix
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Pavel Raiskup <praiskup(a)redhat.com> - 1.7.9-17
- fix for CVE-2012-3386 (#838661)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #838661 - CVE-2012-3386 automake: locally exploitable "make
distcheck" bug [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=838661
--------------------------------------------------------------------------------
================================================================================
bdii-5.2.13-1.fc18 (FEDORA-2012-14764)
The Berkeley Database Information Index (BDII)
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 15 2012 Laurence Field <Laurence.Field(a)cern.ch> - 5.2.13-1
- Included Fedora patches upstream.
--------------------------------------------------------------------------------
================================================================================
ceelog-0.1-1.fc18 (FEDORA-2012-14761)
Tool for receiving, filtering and searching CEE/Lumberjack logs
--------------------------------------------------------------------------------
Update Information:
Initial build/import of package for f18
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #858613 - Review Request: ceelog - Tool for receiving, filtering and searching
CEE/Lumberjack logs
https://bugzilla.redhat.com/show_bug.cgi?id=858613
--------------------------------------------------------------------------------
================================================================================
ftp-0.17-60.fc18 (FEDORA-2012-14752)
The standard UNIX FTP (File Transfer Protocol) client
--------------------------------------------------------------------------------
Update Information:
Plug some leaks; add listening timeout
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Jan Synáček <jsynacek(a)redhat.com> - 0.17-60
- Plug leaks in "put", "send", "append"
- Add listening timeout
--------------------------------------------------------------------------------
================================================================================
libmatecomponentui-1.4.0-2.fc18 (FEDORA-2012-14753)
Libraries for MATE Desktop ui
--------------------------------------------------------------------------------
Update Information:
clean up spec file
libmatecomponentui for MATE Desktop
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #851975 - Review Request: libmatecomponentui - Libraries for MATE Desktop ui
components
https://bugzilla.redhat.com/show_bug.cgi?id=851975
--------------------------------------------------------------------------------
================================================================================
libsrtp-1.4.4-6.20101004cvs.fc18 (FEDORA-2012-14765)
An implementation of the Secure Real-time Transport Protocol (SRTP)
--------------------------------------------------------------------------------
Update Information:
An incorrect macro prevented building of dependent packages on 64 bit PPC machines.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Karsten Hopp <karsten(a)redhat.com> 1.4.4-6.20101004cvs
- use __PPC64__, not __ppc64__ which is undefined on PPC64 arch
--------------------------------------------------------------------------------
================================================================================
libvirt-0.10.2-3.fc18 (FEDORA-2012-14766)
Library providing a simple virtualization API
--------------------------------------------------------------------------------
Update Information:
Uptream release of 0.10.2
* Allow environment variables set through <qemu:env> to properly override ones
inherited by libvirtd when it starts.
* Allow libvirt to set SELinux labels on character devices.
* Re-add 0001-Use-qemu-system-i386-as-binary-instead-of-qemu.patch.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2012 Richard W.M. Jones <rjones(a)redhat.com> - 0.10.2-3
- Re-add 0001-Use-qemu-system-i386-as-binary-instead-of-qemu.patch
NB: This patch is Fedora-specific and not upstream.
- Add upstream patches: don't duplicate environment variables (RHBZ#859596).
* Mon Sep 24 2012 Daniel Veillard <veillard(a)redhat.com> - 0.10.2-1
- Upstream release 0.10.2
- network: define new API virNetworkUpdate
- add support for QEmu sandbox support
- blockjob: add virDomainBlockCommit
- New APIs to get/set Node memory parameters
- new API virConnectListAllSecrets
- new API virConnectListAllNWFilters
- new API virConnectListAllNodeDevices
- parallels: add support of containers to the driver
- new API virConnectListAllInterfaces
- new API virConnectListAllNetworks
- new API virStoragePoolListAllVolumes
- Add PMSUSPENDED life cycle event
- new API virStorageListAllStoragePools
- Add per-guest S3/S4 state configuration
- qemu: Support for Block Device IO Limits
- a lot of bug fixes, improvements and portability work
* Fri Sep 21 2012 Richard W.M. Jones <rjones(a)redhat.com> - 0.10.1-5
- Add (upstream) patches to label sockets for SELinux (RHBZ#853393).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #859596 - test-launch-race.pl sometimes fails when using the libvirt backend:
.../console.sock': No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=859596
[ 2 ] Bug #853393 - libvirt doesn't label console, serial sockets
https://bugzilla.redhat.com/show_bug.cgi?id=853393
--------------------------------------------------------------------------------
================================================================================
linux-firmware-20120925-0.1.git236367d.fc18 (FEDORA-2012-14754)
Firmware files used by the Linux kernel
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream firmware. Fixes some issues with rtlwifi firmware and adds new
marvell and bnx2 firmware.
Split libertas firmware into sub-packages for OLPC.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Josh Boyer <jwboyer(a)redhat.com>
- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)
* Tue Sep 18 2012 Josh Boyer <jwboyer(a)redhat.com>
- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #858388 - Update to latest upstream for marvell wifi updates
https://bugzilla.redhat.com/show_bug.cgi?id=858388
[ 2 ] Bug #853198 - Split marvell firmware into subpackages for OLPC
https://bugzilla.redhat.com/show_bug.cgi?id=853198
--------------------------------------------------------------------------------
================================================================================
man-pages-ja-20120915-1.fc18 (FEDORA-2012-14767)
Japanese man (manual) pages from the Japanese Manual Project
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Akira TAGOH <tagoh(a)redhat.com> - 20120915-1
- Updates to 20120915.
* Wed Aug 15 2012 Akira TAGOH <tagoh(a)redhat.com> - 20120815-1
- Updates to 20120815.
--------------------------------------------------------------------------------
================================================================================
mate-window-manager-1.4.1-8.fc18 (FEDORA-2012-14760)
MATE Desktop window manager
--------------------------------------------------------------------------------
Update Information:
bugfix release
update to latest git source of 1.4.1
update to latest git source of 1.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2012 Dan Mashal <dan.mashal(a)fedoraproject.org> 1.4.1-8
- rerefix mate-conf scriptlets. Add export line to REALLY not install schemas with make
install.
- comment out desktop-file-validate.
* Mon Sep 17 2012 Rex Dieter <rdieter(a)fedoraproject.org> 1.4.1-7
- fix/simplify dir ownership
- omit not-needed/broken Obsoletes
- (re)fix scriptlets :)
* Sat Sep 15 2012 Dan Mashal <dan.mashal(a)fedoraproject.org> 1.4.1-6
- Move post and postun scriptlets to proper location
* Sat Sep 15 2012 Dan Mashal <dan.mashal(a)fedoraproject.org> 1.4.1-5
- Remove onlyshowin since it is not needed any more with updated desktop-file-utils
* Sat Sep 15 2012 Dan Mashal <dan.mashal(a)fedoraproject.org> 1.4.1-4
Update source to note git version.
* Sun Sep 9 2012 Dan Mashal <dan.mashal(a)fedoraproject.org> 1.4.1-3
- Fix broken dependencies, update to latest github version which contains fixes for
desktop-file-utils
* Mon Sep 3 2012 Dan Mashal <dan.mashal(a)fedoraproject.org> 1.4.1-2
- Add environment variable to install section and further obsoletes to prevent dependency
breakage
* Sun Sep 2 2012 Dan Mashal <dan.mashal(a)fedoraproject.org> 1.4.1-1
- Upgrade to new upstream version.
* Mon Aug 27 2012 Rex Dieter <rdieter(a)fedoraproject.org> 1.4.0-5
- drop unneeded python-related build deps
- %configure --disable-schemas-install
- fix/simplify some parent-dir ownership
* Mon Aug 27 2012 Rex Dieter <rdieter(a)fedoraproject.org> 1.4.0-4
- main pkg Requires: %name-libs
- drop needless icon scriptlets
- s|MATE|X-MATE| .desktop Categories on < f18 only
- License: GPLv2+
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #859697 - [abrt] mate-window-manager-1.4.1-6.fc18:
meta_prefs_get_workspace_name: Process /usr/bin/marco was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=859697
--------------------------------------------------------------------------------
================================================================================
mcollective-2.2.0-1.fc18 (FEDORA-2012-14751)
A framework to build server orchestration or parallel job execution systems
--------------------------------------------------------------------------------
Update Information:
Updated version.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 22 2012 Steve Traylen <steve.traylen(a)cern.ch> - 2.2.0-1
- Update to 2.2.0, add plugin.d directory to package, add missing
.erb help files.
--------------------------------------------------------------------------------
================================================================================
mrpt-0.9.6-1.fc18 (FEDORA-2012-14749)
Libraries and programs for mobile robot SLAM and navigation
--------------------------------------------------------------------------------
Update Information:
Updated MRPT to upstream release 0.9.6. Removed dependencies on bundled libraries where
possible.
PCL has been updated to not define the -march=native flag for projects using
PCLConfig.cmake
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 26 2012 Rich Mattes <richmattes(a)gmail.com> - 0.9.6-1
- Added dependency on suitesparse
- Fixed resolution of libphidget and tbb
* Sat Aug 25 2012 Rich Mattes <richmattes(a)gmail.com> - 0.9.6-1
- Updated to 0.9.6
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.5-0.6.20110917svn2662
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jul 14 2012 Rich Mattes <richmattes(a)gmail.com> - 0.9.5-0.5.20110917svn2662
- Rebuild for new OpenCV
- Fix for zlib 1.2.7
- Fix for gcc 4.7
* Tue Feb 28 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.5-0.4.20110917svn2662
- Rebuilt for c++ ABI breakage
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.5-0.3.20110917svn2662
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
paps-0.6.8-22.fc18 (FEDORA-2012-14538)
Plain Text to PostScript converter
--------------------------------------------------------------------------------
Update Information:
Fix wrong tab width when enabling CPI (or being used as CUPS filter mode)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2012 Akira TAGOH <tagoh(a)redhat.com> - 0.6.8-22
- Ensure the latest version of paps-libs are installed.
* Fri Sep 21 2012 Akira TAGOH <tagoh(a)redhat.com> - 0.6.8-21
- Fix wrong width for whitespaces when enabling CPI feature. (#857592)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #857592 - ASCII text files are not printed the same as ASCII C++ text files:
tab characters and white space are not preserved.
https://bugzilla.redhat.com/show_bug.cgi?id=857592
--------------------------------------------------------------------------------
================================================================================
pcl-1.6.0-2.fc18 (FEDORA-2012-14749)
Library for point cloud processing
--------------------------------------------------------------------------------
Update Information:
Updated MRPT to upstream release 0.9.6. Removed dependencies on bundled libraries where
possible.
PCL has been updated to not define the -march=native flag for projects using
PCLConfig.cmake
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Rich Mattes <richmattes(a)gmail.com> - 1.6.0-2
- Disabled march=native flag in PCLConfig.cmake
--------------------------------------------------------------------------------
================================================================================
php-pecl-memcache-3.0.7-3.fc18 (FEDORA-2012-14632)
Extension to work with the Memcached caching daemon
--------------------------------------------------------------------------------
Update Information:
Upstream changelog:
- Fixed bug #62589 - missing "$" in memcache.php
- Fix php_stream_cast() usage.
- fixes for windows build and php 5.4 compat
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Remi Collet <remi(a)fedoraproject.org> - 3.0.7-3
- switch back to previous patch as possible memleak
more acceptable than certain segfault
* Sun Sep 23 2012 Remi Collet <remi(a)fedoraproject.org> - 3.0.7-2
- use upstream patch instead of our (memleak)
* Sun Sep 23 2012 Remi Collet <remi(a)fedoraproject.org> - 3.0.7-1
- update to 3.0.7
- drop patches merged upstream
- cleanup spec
--------------------------------------------------------------------------------
================================================================================
python-django-horizon-2012.2-0.9.rc2.fc18 (FEDORA-2012-14692)
Django application for talking to Openstack
--------------------------------------------------------------------------------
Update Information:
update to folsom-rc2
This is an update to Folsom-rc1
- also fixes bug 860120 (yum hangs on futex when installing the package after
openstack-dashboard)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Matthias Runge <mrunge(a)redhat.com> - 2012-2-0.9.rc2
- remove %post section
* Mon Sep 24 2012 Matthias Runge <mrunge(a)redhat.com> - 2012-2-0.8.rc2
- also require pytz
* Fri Sep 21 2012 Matthias Runge <mrunge(a)redhat.com> - 2012.2-0.7.rc2
- update to release folsom rc2
* Fri Sep 21 2012 Matthias Runge <mrunge(a)redhat.com> - 2012.2-0.6.rc1
- fix compressing issue
* Mon Sep 17 2012 Matthias Runge <mrunge(a)redhat.com> - 2012.2-0.5.rc1
- update to folsom rc1
- require python-django instead of Django
- add requirements to python-django-compressor, python-django-openstack-auth
- add requirements to python-swiftclient
- use compressed js, css files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #860120 - yum hangs on futex when installing the package after
openstack-dashboard
https://bugzilla.redhat.com/show_bug.cgi?id=860120
--------------------------------------------------------------------------------
================================================================================
pytrainer-1.9.1-3.fc18 (FEDORA-2012-14768)
A tool to log all your sport excursions
--------------------------------------------------------------------------------
Update Information:
Update to 1.9.1.
Uses pywebkitgtk rather than gnome-python2=gtkmozembed
Update to upstream 1.9.1
Update to upstream 1.9.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Brendan Jones <brendan.jones.it(a)gmail.com> 1.9.1-3
- Ad pywebkit-gtk requires
* Tue Sep 25 2012 Brendan Jones <brendan.jones.it(a)gmail.com> 1.9.1-2
- Removed requires gnome-python2-gtkmozembed
* Wed Sep 19 2012 Brendan Jones <brendan.jones.it(a)gmail.com> 1.9.1-1
- Update to version 1.9.1
--------------------------------------------------------------------------------
================================================================================
rng-tools-4-2.fc18 (FEDORA-2012-14758)
Random number generator related utilities
--------------------------------------------------------------------------------
Update Information:
Migration to new systemd macros
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Jaromir Capik <jcapik(a)redhat.com> - 4-2
- Migration to new systemd macros
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850296 - Introduce new systemd-rpm macros in rng-tools spec file
https://bugzilla.redhat.com/show_bug.cgi?id=850296
--------------------------------------------------------------------------------
================================================================================
rusers-0.17-70.fc18 (FEDORA-2012-14763)
Displays the users logged into machines on the local network
--------------------------------------------------------------------------------
Update Information:
This is an update that allows to use new systemd features.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 11 2012 Honza Horak <hhorak(a)redhat.com> - 0.17-70
- Minor spec file changes
- Use new systemd macros (Resolves: #850302)
- Use systemd notify messages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850302 - Introduce new systemd-rpm macros in rusers spec file
https://bugzilla.redhat.com/show_bug.cgi?id=850302
--------------------------------------------------------------------------------
================================================================================
sssd-1.9.0-24.fc18 (FEDORA-2012-14755)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Jakub Hrozek <jhrozek(a)redhat.com> - 1.9.0-24
- Use mcpath insted of mcachepath macro to be consistent with
upsteam spec file
* Tue Sep 25 2012 Jakub Hrozek <jhrozek(a)redhat.com> - 1.9.0-23
- New upstream release 1.9.0
--------------------------------------------------------------------------------
================================================================================
sudo-1.8.6p3-1.fc18 (FEDORA-2012-14759)
Allows restricted root access for specified users
--------------------------------------------------------------------------------
Update Information:
- update to 1.8.6p3
- dropped -pipelist patch (fixed in upstream)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Daniel Kopecek <dkopecek(a)redhat.com> - 1.8.6p3-1
- update to 1.8.6p3
- drop -pipelist patch (fixed in upstream)
--------------------------------------------------------------------------------
================================================================================
ypbind-1.36-6.fc18 (FEDORA-2012-14750)
The NIS daemon which binds NIS clients to an NIS domain
--------------------------------------------------------------------------------
Update Information:
This is an update that uses solve starting issues of ypbind daemon.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2012 Honza Horak <hhorak(a)redhat.com> - 3:1.36-6
- Use sdnotify to inform systemd that daemon is ready
- Minor spec file cleanup
- Use new systemd macros
Resolves: #850375
- Add After: NetworkManager-wait-online.service
Related: #846767
* Thu Aug 23 2012 Honza Horak <hhorak(a)redhat.com> - 3:1.36-5
- Enhance ypbind(8) with info about NISTIMEOUT
- Add suggestion about extending NISTIMEOUT if ypbind timeouts
* Mon Jul 23 2012 Honza Horak <hhorak(a)redhat.com> - 3:1.36-4
- Add SIGPIPE to proper signal set
Related: #842228
- Fixed sending TERM signal in ypbind-post-waitbind
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850375 - Introduce new systemd-rpm macros in ypbind spec file
https://bugzilla.redhat.com/show_bug.cgi?id=850375
--------------------------------------------------------------------------------
================================================================================
ypserv-2.29-2.fc18 (FEDORA-2012-14757)
The NIS (Network Information Service) server
--------------------------------------------------------------------------------
Update Information:
This is an update that uses new systemd macros allowing to use systemd's Preset
feature.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2012 Honza Horak <hhorak(a)redhat.com> - 2.29-2
- Use new systemd macros
Resolves: #850376
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850376 - Introduce new systemd-rpm macros in ypserv spec file
https://bugzilla.redhat.com/show_bug.cgi?id=850376
--------------------------------------------------------------------------------
================================================================================
yum-langpacks-0.3.0-3.fc18 (FEDORA-2012-14756)
Langpacks plugin for yum
--------------------------------------------------------------------------------
Update Information:
This fixes a traceback on yum groupremove.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2012 Bill Nottingham <notting(a)redhat.com> - 0.3.1-3
- fix traceback on groupremove (#858175)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #858175 - calltrace during yum groupremove
https://bugzilla.redhat.com/show_bug.cgi?id=858175
--------------------------------------------------------------------------------