The following Fedora 18 Security updates need testing:
Age URL
165
https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2...
61
https://admin.fedoraproject.org/updates/FEDORA-2013-14005/zabbix-2.0.6-3....
13
https://admin.fedoraproject.org/updates/FEDORA-2013-17112/hplip-3.13.9-2....
13
https://admin.fedoraproject.org/updates/FEDORA-2013-17016/icedtea-web-1.4...
11
https://admin.fedoraproject.org/updates/FEDORA-2013-17195/spice-gtk-0.18-...
10
https://admin.fedoraproject.org/updates/FEDORA-2013-17366/seamonkey-2.21-...
8
https://admin.fedoraproject.org/updates/FEDORA-2013-17431/thunderbird-17....
7
https://admin.fedoraproject.org/updates/FEDORA-2013-17583/rtkit-0.11-7.fc18
6
https://admin.fedoraproject.org/updates/FEDORA-2013-17635/wireshark-1.10....
6
https://admin.fedoraproject.org/updates/FEDORA-2013-17649/rubygems-1.8.25...
5
https://admin.fedoraproject.org/updates/FEDORA-2013-17689/xen-4.2.3-2.fc18
4
https://admin.fedoraproject.org/updates/FEDORA-2013-17853/davfs2-1.4.7-3....
3
https://admin.fedoraproject.org/updates/FEDORA-2013-17912/chicken-4.8.0.4...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-17904/fedmsg-0.7.1-2....
2
https://admin.fedoraproject.org/updates/FEDORA-2013-17942/kernel-3.10.13-...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-18049/php-pecl-xhprof...
The following Fedora 18 Critical Path updates have yet to be approved:
Age URL
234
https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5...
13
https://admin.fedoraproject.org/updates/FEDORA-2013-17013/device-mapper-p...
10
https://admin.fedoraproject.org/updates/FEDORA-2013-17371/ibus-1.5.4-1.fc18
8
https://admin.fedoraproject.org/updates/FEDORA-2013-17431/thunderbird-17....
7
https://admin.fedoraproject.org/updates/FEDORA-2013-17583/rtkit-0.11-7.fc18
2
https://admin.fedoraproject.org/updates/FEDORA-2013-17942/kernel-3.10.13-...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-18050/gdb-7.5.1-43.fc18
The following builds have been pushed to Fedora 18 updates-testing
bluebird-0.9-1.fc18
drumkv1-0.3.5-1.fc18
fmtools-2.0.7-1.fc18
gdb-7.5.1-43.fc18
kde-plasma-nm-0.9.3.0-7.fc18
libuv-0.10.17-1.fc18
libvirt-sandbox-0.1.1-3.fc18
nodejs-0.10.20-1.fc18
openvswitch-1.11.0-3.fc18
php-pecl-xhprof-0.9.4-1.fc18
python-sgutils-0.2.1-3.fc18
python-sockjs-tornado-1.0.0-2.fc18
salt-0.17.0-1.fc18
samplv1-0.3.5-1.fc18
slapi-nis-0.50-1.fc18
synthv1-0.3.5-1.fc18
unicode-ucd-6.3.0-1.fc18
Details about builds:
================================================================================
bluebird-0.9-1.fc18 (FEDORA-2013-18133)
A clean minimalistic theme for Xfce, GTK+ 2 and 3
--------------------------------------------------------------------------------
Update Information:
Various upstream bugfixes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2013 Miro Hrončok <mhroncok(a)redhat.com> - 0.9-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
drumkv1-0.3.5-1.fc18 (FEDORA-2013-18130)
An old-school drum-kit sampler
--------------------------------------------------------------------------------
Update Information:
This is a minor update to 0.3.5 of the V1 audio plugin suite. Refer to changelog for
details.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2013 Brendan Jones <brendan.jones.it(a)gmail.com> 0.3.5-1
- Update to 0.3.5
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.3.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fmtools-2.0.7-1.fc18 (FEDORA-2013-18062)
Simple Video for Linux radio card programs
--------------------------------------------------------------------------------
Update Information:
Updated to 2.0.7
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 30 2013 Paulo Roma <roma(a)lcg.ufrj.br> 2.0.7-1
- Updated to 2.0.7
* Sun Sep 15 2013 Paulo Roma <roma(a)lcg.ufrj.br> 2.0.6-1
- Updated to latest git.
* Sun Sep 8 2013 Paulo Roma <roma(a)lcg.ufrj.br> 2.0.2-1
- Updated to latest git.
* Wed Sep 4 2013 Paulo Roma <roma(a)lcg.ufrj.br> 2.0.1-14
- Applied patch volume for working in kernels >= 3.10
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.1-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.1-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gdb-7.5.1-43.fc18 (FEDORA-2013-18050)
A GNU source-level debugger for C, C++, Fortran, Go and other languages
--------------------------------------------------------------------------------
Update Information:
Fix the case when GDB leaks memory because value_struct_elt does not call check_typedef.
(Doug Evans, BZ 15695, filed as RH BZ 1013453).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 30 2013 Sergio Durigan Junior <sergiodj(a)redhat.com> - 7.5.1-43.fc18
- Fix the case when GDB leaks memory because value_struct_elt does not call
check_typedef. (Doug Evans, BZ 15695, filed as RH BZ 1013453).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1013453 - gdb eats gigabytes of memory very fast
https://bugzilla.redhat.com/show_bug.cgi?id=1013453
--------------------------------------------------------------------------------
================================================================================
kde-plasma-nm-0.9.3.0-7.fc18 (FEDORA-2013-18147)
Plasma applet written in QML for managing network connections
--------------------------------------------------------------------------------
Update Information:
Make ModemManager as runtime dependency
#1013838 - Request: Please drop dependancy on ModemManager
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2013 Jan Grulich <jgrulich(a)redhat.com> - 0.9.3.0-7
- Make ModemManager as runtime dependency installed with -mobile subpkg
- Resolves #1013838
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1013838 - Request: Please drop dependancy on ModemManager
https://bugzilla.redhat.com/show_bug.cgi?id=1013838
--------------------------------------------------------------------------------
================================================================================
libuv-0.10.17-1.fc18 (FEDORA-2013-17654)
Platform layer for node.js
--------------------------------------------------------------------------------
Update Information:
2013.09.24, node.js Version 0.10.19 (Stable)
* readline: handle input starting with control chars (Eric Schrock)
* configure: add mips-float-abi (soft, hard) option (Andrei Sedoi)
* stream: objectMode transforms allow falsey values (isaacs)
* tls: prevent duplicate values returned from read (Nathan Rajlich)
* tls: NPN protocols are now local to connections (Fedor Indutny)
2013.09.25, libuv Version 0.10.17 (Stable)
* build: remove GCC_WARN_ABOUT_MISSING_NEWLINE (Ben Noordhuis)
* darwin: fix 10.6 build error in fsevents.c (Ben Noordhuis)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 1:0.10.17-1
- new upstream release 0.10.17
https://github.com/joyent/libuv/blob/v0.10.17/ChangeLog
--------------------------------------------------------------------------------
================================================================================
libvirt-sandbox-0.1.1-3.fc18 (FEDORA-2013-18108)
libvirt application sandbox framework
--------------------------------------------------------------------------------
Update Information:
Fix compat with Linux 3.11 kernels & other minor bugs
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2013 Daniel P. Berrange <berrange(a)redhat.com> - 0.1.1-3
- Fix booting QEMU sandboxes with Linux 3.11 kernel
* Tue Oct 1 2013 Daniel P. Berrange <berrange(a)redhat.com> - 0.1.1-2
- Fix docs about mount args to virt-sandbox (rhbz #909652)
- Clarify message about console escape key (rhbz #887676)
- Add missing deps on pygobject3-base & libselinux-python (rhbz #887657)
- Fix dep on glib-devel to be a BuildRequires only (rhbz #885427)
* Mon Dec 10 2012 Daniel P. Berrange <berrange(a)redhat.com> - 0.1.1-1
- Update to 0.1.1 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #909652 - Sandbox options to use --host-bind broken / no replacement
https://bugzilla.redhat.com/show_bug.cgi?id=909652
[ 2 ] Bug #887676 - Cannot exit the console of the container
https://bugzilla.redhat.com/show_bug.cgi?id=887676
[ 3 ] Bug #887657 - Missing Requires on pygobject3-base and libselinux-python
https://bugzilla.redhat.com/show_bug.cgi?id=887657
[ 4 ] Bug #885427 - unusual requires on glib2-devel
https://bugzilla.redhat.com/show_bug.cgi?id=885427
--------------------------------------------------------------------------------
================================================================================
nodejs-0.10.20-1.fc18 (FEDORA-2013-17654)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
2013.09.24, node.js Version 0.10.19 (Stable)
* readline: handle input starting with control chars (Eric Schrock)
* configure: add mips-float-abi (soft, hard) option (Andrei Sedoi)
* stream: objectMode transforms allow falsey values (isaacs)
* tls: prevent duplicate values returned from read (Nathan Rajlich)
* tls: NPN protocols are now local to connections (Fedor Indutny)
2013.09.25, libuv Version 0.10.17 (Stable)
* build: remove GCC_WARN_ABOUT_MISSING_NEWLINE (Ben Noordhuis)
* darwin: fix 10.6 build error in fsevents.c (Ben Noordhuis)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2013 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 0.10.20-1
- new upstream release 0.10.20
http://blog.nodejs.org/2013/09/30/node-v0-10-20-stable/
* Wed Sep 25 2013 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 0.10.19-1
- new upstream release 0.10.19
http://blog.nodejs.org/2013/09/24/node-v0-10-19-stable/
--------------------------------------------------------------------------------
================================================================================
openvswitch-1.11.0-3.fc18 (FEDORA-2013-18057)
Open vSwitch daemon/database/utilities
--------------------------------------------------------------------------------
Update Information:
stop using /var/lock/subsys with systemd.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2013 Flavio Leitner <fbl(a)redhat.com> - 1.11.0-3
- don't use /var/lock/subsys with systemd (#1006412)
* Thu Sep 19 2013 Flavio Leitner <fbl(a)redhat.com> - 1.11.0-2
- ovsdbmonitor package is optional
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1006412 - openvswitch fails to start
https://bugzilla.redhat.com/show_bug.cgi?id=1006412
--------------------------------------------------------------------------------
================================================================================
php-pecl-xhprof-0.9.4-1.fc18 (FEDORA-2013-18049)
PHP extension for XHProf, a Hierarchical Profiler
--------------------------------------------------------------------------------
Update Information:
From Release notes:
* Fix reflected XSS with run parameter. PR#20 and #29
* Change graph edge colour. PR#23
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2013 Remi Collet <remi(a)fedoraproject.org> - 0.9.4-1
- update to 0.9.4
--------------------------------------------------------------------------------
================================================================================
python-sgutils-0.2.1-3.fc18 (FEDORA-2013-18109)
Python support for sg3_utils
--------------------------------------------------------------------------------
Update Information:
initial version.
--------------------------------------------------------------------------------
================================================================================
python-sockjs-tornado-1.0.0-2.fc18 (FEDORA-2013-18082)
SockJS server implementation for Tornado
--------------------------------------------------------------------------------
Update Information:
This new package provides the sockjs.tornado python library.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1009178 - Review Request: python-sockjs-tornado - SockJS server
implementation for Tornado
https://bugzilla.redhat.com/show_bug.cgi?id=1009178
--------------------------------------------------------------------------------
================================================================================
salt-0.17.0-1.fc18 (FEDORA-2013-18149)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to feature release 0.17.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 30 2013 Erik Johnson <erik(a)saltstack.com> - 0.17.0-1
- Update to feature release 0.17.0
* Wed Sep 11 2013 David Anderson <dave(a)dubkat.com>
- Change sourcing order of init functions and salt default file
--------------------------------------------------------------------------------
================================================================================
samplv1-0.3.5-1.fc18 (FEDORA-2013-18130)
A polyphonic sampler synthesizer with stereo fx
--------------------------------------------------------------------------------
Update Information:
This is a minor update to 0.3.5 of the V1 audio plugin suite. Refer to changelog for
details.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2013 Brendan Jones <brendan.jones.it(a)gmail.com> 0.3.5-1
- Update to 0.3.5
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.3.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
slapi-nis-0.50-1.fc18 (FEDORA-2013-18093)
NIS Server and Schema Compatibility plugins for Directory Server
--------------------------------------------------------------------------------
Update Information:
This update incorporates fixes to the NIS Server plugin which allow it to reconnect to
rpcbind when rpcbind drops the plugin's connection before the plugin can properly
register itself with rpcbind.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 0.50-1
- if we get an EPIPE while registering with rpcbind, try to reconnect and
retransmit before giving up
* Thu Sep 19 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 0.49-1
- add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
which should let us avoid deadlocks when tasks are modifying data in
the backend database (#1007451)
* Mon Aug 12 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 0.48-1
- try to gracefully handle failures obtaining internal locks
- fix locating-by-name of entries with names that require escaping
- add self-tests for nsswitch and PAM functionality
- make nsswitch mode properly handle user and group names with commas in them
- handle attempts to PAM authenticate to compat groups (i.e., with failure)
- drop the "schema-compat-origin" attribute
* Wed Aug 7 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 0.47.7-1
- fix building against versions of directory server older than 1.3.0, which
first introduced slapi_escape_filter_value()
* Wed Aug 7 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 0.47.6-1
- only buildrequire libsss_nss_idmap-devel on releases that included SSSD
version 1.10 or later, where it first appeared
* Wed Aug 7 2013 Nalin Dahyabhai <nalin(a)redhat.com> - 0.47.5-1
- merge Alexander Bokovoy's patches to
- teach the schema compatibility plugin to optionally serve user and group
information retrieved from libc as part of a set of compat entries
- handle simple bind requests for those entries by calling out to PAM
- to rewrite the DN of incoming bind requests to compat entries to point
at the source entries, instead of returning a referral which most clients
won't handle
- include IPA-specific docs as docs
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.47-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
synthv1-0.3.5-1.fc18 (FEDORA-2013-18130)
A 4-oscillator subtractive polyphonic synthesizer
--------------------------------------------------------------------------------
Update Information:
This is a minor update to 0.3.5 of the V1 audio plugin suite. Refer to changelog for
details.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2013 Brendan Jones <brendan.jones.it(a)gmail.com> 0.3.5-1
- Update to 0.3.5
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.3.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
unicode-ucd-6.3.0-1.fc18 (FEDORA-2013-18129)
Unicode Character Database
--------------------------------------------------------------------------------
Update Information:
Unicode 6.3.0
-
http://www.unicode.org/versions/Unicode6.3.0/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 30 2013 Jens Petersen <petersen(a)redhat.com> - 6.3.0-1
- update to 6.3
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
6.2.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
6.2.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1013256 - unicode-ucd-6.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1013256
--------------------------------------------------------------------------------