The following Fedora 17 Security updates need testing:
Age URL
2
https://admin.fedoraproject.org/updates/FEDORA-2012-20620/inkscape-0.48.4...
2
https://admin.fedoraproject.org/updates/FEDORA-2012-20610/freeciv-2.3.3-1...
5
https://admin.fedoraproject.org/updates/FEDORA-2012-20446/libtiff-3.9.7-1...
12
https://admin.fedoraproject.org/updates/FEDORA-2012-20001/kde-filesystem-...
88
https://admin.fedoraproject.org/updates/FEDORA-2012-14650/tor-0.2.2.39-17...
16
https://admin.fedoraproject.org/updates/FEDORA-2012-19606/cups-1.5.4-16.fc17
168
https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4....
10
https://admin.fedoraproject.org/updates/FEDORA-2012-20092/libproxy-0.4.11...
10
https://admin.fedoraproject.org/updates/FEDORA-2012-20103/v8-3.13.7.5-1.fc17
3
https://admin.fedoraproject.org/updates/FEDORA-2012-20531/libvirt-0.9.11....
2
https://admin.fedoraproject.org/updates/FEDORA-2012-20619/fail2ban-0.8.8-...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-20766/drupal6-6.27-1....
The following Fedora 17 Critical Path updates have yet to be approved:
Age URL
0
https://admin.fedoraproject.org/updates/FEDORA-2012-20790/iproute-3.3.0-5...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-20782/caribou-0.4.2-2...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-20767/abrt-2.0.20-1.f...
1
https://admin.fedoraproject.org/updates/FEDORA-2012-20703/systemd-44-23.fc17
1
https://admin.fedoraproject.org/updates/FEDORA-2012-20697/system-config-u...
2
https://admin.fedoraproject.org/updates/FEDORA-2012-20609/policycoreutils...
2
https://admin.fedoraproject.org/updates/FEDORA-2012-20635/udisks2-1.94.0-...
3
https://admin.fedoraproject.org/updates/FEDORA-2012-20544/selinux-policy-...
5
https://admin.fedoraproject.org/updates/FEDORA-2012-20447/procps-3.2.8-28...
5
https://admin.fedoraproject.org/updates/FEDORA-2012-20403/xulrunner-17.0....
5
https://admin.fedoraproject.org/updates/FEDORA-2012-20446/libtiff-3.9.7-1...
8
https://admin.fedoraproject.org/updates/FEDORA-2012-20273/audit-2.2.2-1.fc17
9
https://admin.fedoraproject.org/updates/FEDORA-2012-20222/mdadm-3.2.6-7.fc17
5
https://admin.fedoraproject.org/updates/FEDORA-2012-20216/python-slip-0.2...
9
https://admin.fedoraproject.org/updates/FEDORA-2012-20233/mdadm-3.2.6-4.fc17
10
https://admin.fedoraproject.org/updates/FEDORA-2012-20105/unzip-6.0-6.fc17
10
https://admin.fedoraproject.org/updates/FEDORA-2012-20088/gnome-packageki...
10
https://admin.fedoraproject.org/updates/FEDORA-2012-20110/xmlrpc-c-1.29.3...
10
https://admin.fedoraproject.org/updates/FEDORA-2012-20092/libproxy-0.4.11...
12
https://admin.fedoraproject.org/updates/FEDORA-2012-20003/iputils-2010100...
12
https://admin.fedoraproject.org/updates/FEDORA-2012-20001/kde-filesystem-...
4
https://admin.fedoraproject.org/updates/FEDORA-2012-18542/dnsmasq-2.65-1....
The following builds have been pushed to Fedora 17 updates-testing
0ad-0.0.12-2.fc17
0ad-data-0.0.12-1.fc17
abrt-2.0.20-1.fc17
btparser-0.24-1.fc17
caribou-0.4.2-2.fc17
ccd2iso-0.3-10.fc17
darktable-1.1.1-1.fc17
drupal6-6.27-1.fc17
drupal7-7.18-1.fc17
fedup-0.7.2-1.fc17
fftw-3.3.3-3.fc17
globus-common-14.9-1.fc17
globus-core-8.9-2.fc17
globus-gram-job-manager-13.51-1.fc17
globus-gram-job-manager-condor-1.4-1.fc17
globus-gram-job-manager-pbs-1.6-1.fc17
globus-gram-job-manager-sge-1.5-2.fc17
globus-gridftp-server-6.16-1.fc17
globus-gsi-callback-4.4-1.fc17
globus-scheduler-event-generator-4.7-1.fc17
globus-simple-ca-3.2-1.fc17
grid-packaging-tools-3.6.3-1.fc17
iproute-3.3.0-5.fc17
libnetfilter_acct-1.0.0-2.fc17
libreport-2.0.20-1.fc17
mirall-1.1.4-1.fc17
nordugrid-arc-2.0.1-1.fc17
nvidia-texture-tools-2.0.8-3.fc17
owncloud-csync-0.60.4-1.fc17
phoronix-test-suite-4.2.0-1.fc17
php-5.4.10-1.fc17
php-horde-Horde-Browser-2.0.2-1.fc17
php-horde-Horde-Constraint-2.0.1-2.fc17
php-horde-Horde-Log-2.0.1-2.fc17
rubygem-cinch-2.0.3-2.1.fc17
rubygem-compass-0.12.2-2.fc17
rubygem-declarative_authorization-0.5.6-1.1.fc17
rubygem-foreigner-1.2.1-1.1.fc17
rubygem-mixlib-shellout-1.1.0-4.fc17
rubygem-sequel-3.42.0-1.fc17
salt-0.11.1-1.fc17
seam-conversation-3.1.0-1.fc17
vfrnav-20121212-1.fc17
voms-2.0.9-1.fc17
zanata-python-client-1.3.13-1.fc17
Details about builds:
================================================================================
0ad-0.0.12-2.fc17 (FEDORA-2012-20778)
Cross-Platform RTS Game of Ancient Warfare
--------------------------------------------------------------------------------
Update Information:
Update to latest 0ad and 0ad-data, and add new nvidia-texture-tools dependency.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 19 2012 pcpa <paulo.cesar.pereira.de.andrade(a)gmail.com> - 0.0.11-2
- Enable build with system nvtt as it is now approved in Fedora (#823096)
- Correct release date in manual page
- Minor consistency correction in manual page formatting
- Regenerate the licensecheck text file to match pristine tarball
* Tue Dec 18 2012 pcpa <paulo.cesar.pereira.de.andrade(a)gmail.com> - 0.0.11-1
- Update to latest upstream release
- Remove no longer required gamin patch
- Rediff rpath patch
- Remove libxml2 patch already applied upstream
- Update 0ad manpage for newer options and release information
- Add versioned requires to data files
- Add 0ad licensecheck text file to simplify checking changes
* Sat Nov 3 2012 pcpa <paulo.cesar.pereira.de.andrade(a)gmail.com> - 0.0.11-4
- Add %with_debug maintainer mode build
- Disable fcollada debug build if %with_debug is false
- Add patch to not crash and display helful messages in editor (#872801)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #823096 - Review Request: nvidia-texture-tools - Collection of image
processing and texture manipulation tools
https://bugzilla.redhat.com/show_bug.cgi?id=823096
[ 2 ] Bug #888438 - RFE: Alpha 12 is now available
https://bugzilla.redhat.com/show_bug.cgi?id=888438
--------------------------------------------------------------------------------
================================================================================
0ad-data-0.0.12-1.fc17 (FEDORA-2012-20778)
The Data Files for 0 AD
--------------------------------------------------------------------------------
Update Information:
Update to latest 0ad and 0ad-data, and add new nvidia-texture-tools dependency.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2012 pcpa <paulo.cesar.pereira.de.andrade(a)gmail.com> - 0.0.12-1
- Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #823096 - Review Request: nvidia-texture-tools - Collection of image
processing and texture manipulation tools
https://bugzilla.redhat.com/show_bug.cgi?id=823096
[ 2 ] Bug #888438 - RFE: Alpha 12 is now available
https://bugzilla.redhat.com/show_bug.cgi?id=888438
--------------------------------------------------------------------------------
================================================================================
abrt-2.0.20-1.fc17 (FEDORA-2012-20767)
Automatic bug detection and reporting tool
--------------------------------------------------------------------------------
Update Information:
Updated the latest ABRT stack to the latest upstream release
This update fixes bugs in internal IPC and introduces configurable bugzilla bug
formatting.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 20 2012 Jiri Moskovcak <jmoskovc(a)redhat.com> 2.0.20-1
- New version 2.0.20
- Fix typo: usefull->useful
- koops: generate core backtrace if missing
- udpated po files
- Cosmetic fixes in abrtd-inotify-flood test
- Hook up abrtd-inotify-flood to test infrastructure
- Add a testcase for inotify flood
- replace 'Start Autoreport' btn by a popup dialog
- dbus: NewProblem returns full path as problem_id
- abrt-action-analyze-xorg: fix /usr/include/paths.h -> paths.h
- abrtd: set inotify fd to non-blocking mode; ignore 0-sized inotify reads. Closes
rhbz#873815
- s/ABRT dump/problem directory/g
- abrt-applet: don't leak component name
- abrt-applet: alerts only not reported problems
- build system: Remove leftover of abrt-action-analyze-xorg shell script
- Rewrite abrt-action-analyze-xorg in C (partially)
- rework abrt-gui>Help>'Report problem with ABRT'
- abrt-action-analyze-oops: fix help text - we have no -s option
- Help text fix - using "problem directory" consistently
- abrt-dump-oops: add list of tainted modules to NOT_REPORTABLE string. Closes trac#821
- a-a-p-c-a: use ask_yes_no_yesforever() fn from reportclient
- abrt-dump-oops: save /proc/modules contents. Partially closes trac#821
- add ureporter wrapper sending ureport only once per problem dir
- introduce Desktop Session Autoreporting
- add Autoreporting configuration options
- abrt-action-analyze-xorg: robustify 'test "a" = "b"' against
bugs
- Collect ~/.xsession_errors from its new path, if it is there. Closes trac#791
- reflect recent libreport API changes .trac#822
- Indentation fix. No code changes.
- minor fix to previous commit realted to .trac#541
- don't use gtk_main* when using gtk_application .trac#890
- minor fix to quit button
- Make "Open problem data" open the expert mode GUI
- Teach kernel oops hash to ignore "<IRQ>" / "<EOI>"
prefixes. Closes rhbz#875852
- introduce DeleteElement D-Bus method
- introduce SetElement D-Bus method
- allow only one instance of gui trac#541
- runtests/bugzilla-comment-format: fix false positive AGAIN
- update translations
- a-a-p-c-a: use correct name in gettext initialization
- Fix build system so that make rpm works again
- runtests/bugzilla-comment-format: fix false positive
- Improve xorg post-create. closes trac#838
- Update po files
- fix problem occurrence counter updating algorithm
- abrt-dbus: immediately return an error if not-existing problem is requested
- bugzilla-comment-format: new test
- a-a-p-c-a: use event python API instead of abrt-handle-event
- doc: add dbus problems service specification
* Mon Nov 26 2012 Jakub Filak <jfilak(a)redhat.com> 2.0.19-2
- update translations
- Resolves: #879641
* Wed Nov 14 2012 Jakub Filak <jfilak(a)redhat.com> 2.0.19-1
- call g_type_init() only in GLib version < 2.35
- plugins/*_event.conf: use reporter-bz -F FMTFILE as appropriate
- repeat unchaged retrace status message only in verbose mode
- check the correct return value of yesforever answer
- abrt-handle-event: forward event process requests to parent
- don't leak optional retrace path and kernel tainted string
- enhance koops tainted flag parser
- Use "comment" element instead of "description"
- Resolves: #873488
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #738635 - scp upload ends with 'Error in the SSH layer'
https://bugzilla.redhat.com/show_bug.cgi?id=738635
[ 2 ] Bug #808018 - [abrt] abrt-addon-ccpp-2.0.9-1.fc17:
abrt-action-analyze-core:111:extract_info_from_core:IndexError: list index out of range
https://bugzilla.redhat.com/show_bug.cgi?id=808018
[ 3 ] Bug #808904 - Abrt reporting disabled because the backtrace is unusable
https://bugzilla.redhat.com/show_bug.cgi?id=808904
[ 4 ] Bug #810002 - bad library build: libreport_g_verbose unresolved from libabrt.so.0
https://bugzilla.redhat.com/show_bug.cgi?id=810002
[ 5 ] Bug #814628 - XML-RPC(-509): Unable to make sense of XML-RPC response from
server.
https://bugzilla.redhat.com/show_bug.cgi?id=814628
[ 6 ] Bug #815351 - root crashes are not visible
https://bugzilla.redhat.com/show_bug.cgi?id=815351
[ 7 ] Bug #816186 - abrt-gui inotify_add_watch failed
https://bugzilla.redhat.com/show_bug.cgi?id=816186
[ 8 ] Bug #822369 - Couldn't generate backtrace with gdb for processes running under
another user
https://bugzilla.redhat.com/show_bug.cgi?id=822369
[ 9 ] Bug #836771 - SELinux is preventing /usr/sbin/abrt-dbus from 'create'
accesses on the lnk_file .lock.
https://bugzilla.redhat.com/show_bug.cgi?id=836771
[ 10 ] Bug #852298 - abrt has grammatical errors
https://bugzilla.redhat.com/show_bug.cgi?id=852298
[ 11 ] Bug #858765 - Unexpected HTTP status code: 400
https://bugzilla.redhat.com/show_bug.cgi?id=858765
[ 12 ] Bug #861899 - [RFE] make possible re-entering BZ credentials if bug processing
fails due to bad BZ username/passwd
https://bugzilla.redhat.com/show_bug.cgi?id=861899
[ 13 ] Bug #861996 - abrt-retrace-client: checks for corrupted dump dir are
inconsistent
https://bugzilla.redhat.com/show_bug.cgi?id=861996
[ 14 ] Bug #867240 - RFE: don't file xserver backtraces when fglrx is loaded
https://bugzilla.redhat.com/show_bug.cgi?id=867240
[ 15 ] Bug #874882 - Fedora 18 (GNOME 3.6 ) uses ~/.cache/gdm/session.log
https://bugzilla.redhat.com/show_bug.cgi?id=874882
[ 16 ] Bug #875852 - Essential element 'global_uuid' is missing, can't
continue
https://bugzilla.redhat.com/show_bug.cgi?id=875852
[ 17 ] Bug #877437 - RFE: don't file xserver backtraces when vboxvideo is loaded
https://bugzilla.redhat.com/show_bug.cgi?id=877437
[ 18 ] Bug #884791 - report-gtk destroys global text cache twice
https://bugzilla.redhat.com/show_bug.cgi?id=884791
[ 19 ] Bug #884819 - abrt-applet alerts about already reported bugs if it wasn't
running at the time.
https://bugzilla.redhat.com/show_bug.cgi?id=884819
[ 20 ] Bug #888012 - abrt no longer allows reporting kernel crashes - uReport exited
with exit code 1
https://bugzilla.redhat.com/show_bug.cgi?id=888012
[ 21 ] Bug #888111 - can not fix bugzilla ID during install bug reporting
https://bugzilla.redhat.com/show_bug.cgi?id=888111
[ 22 ] Bug #888884 - Typo (pasword) and mistakingly c-formatted message
https://bugzilla.redhat.com/show_bug.cgi?id=888884
[ 23 ] Bug #888893 - Typo: usefull
https://bugzilla.redhat.com/show_bug.cgi?id=888893
[ 24 ] Bug #873488 - abrt hangs while generating upload archive
https://bugzilla.redhat.com/show_bug.cgi?id=873488
[ 25 ] Bug #879641 - core dump uploading broken under cs_CZ locale
https://bugzilla.redhat.com/show_bug.cgi?id=879641
[ 26 ] Bug #880228 - reporter-bugzilla crashes if bug summary template contains an
undefined variable
https://bugzilla.redhat.com/show_bug.cgi?id=880228
--------------------------------------------------------------------------------
================================================================================
btparser-0.24-1.fc17 (FEDORA-2012-20767)
Parser and analyzer for backtraces produced by GDB
--------------------------------------------------------------------------------
Update Information:
Updated the latest ABRT stack to the latest upstream release
This update fixes bugs in internal IPC and introduces configurable bugzilla bug
formatting.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 19 2012 Jiri Moskovcak <jfilak(a)redhat.com> - 0.24-1
- New upstream release
* Wed Nov 14 2012 Jakub Filak <jfilak(a)redhat.com> - 0.23-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #738635 - scp upload ends with 'Error in the SSH layer'
https://bugzilla.redhat.com/show_bug.cgi?id=738635
[ 2 ] Bug #808018 - [abrt] abrt-addon-ccpp-2.0.9-1.fc17:
abrt-action-analyze-core:111:extract_info_from_core:IndexError: list index out of range
https://bugzilla.redhat.com/show_bug.cgi?id=808018
[ 3 ] Bug #808904 - Abrt reporting disabled because the backtrace is unusable
https://bugzilla.redhat.com/show_bug.cgi?id=808904
[ 4 ] Bug #810002 - bad library build: libreport_g_verbose unresolved from libabrt.so.0
https://bugzilla.redhat.com/show_bug.cgi?id=810002
[ 5 ] Bug #814628 - XML-RPC(-509): Unable to make sense of XML-RPC response from
server.
https://bugzilla.redhat.com/show_bug.cgi?id=814628
[ 6 ] Bug #815351 - root crashes are not visible
https://bugzilla.redhat.com/show_bug.cgi?id=815351
[ 7 ] Bug #816186 - abrt-gui inotify_add_watch failed
https://bugzilla.redhat.com/show_bug.cgi?id=816186
[ 8 ] Bug #822369 - Couldn't generate backtrace with gdb for processes running under
another user
https://bugzilla.redhat.com/show_bug.cgi?id=822369
[ 9 ] Bug #836771 - SELinux is preventing /usr/sbin/abrt-dbus from 'create'
accesses on the lnk_file .lock.
https://bugzilla.redhat.com/show_bug.cgi?id=836771
[ 10 ] Bug #852298 - abrt has grammatical errors
https://bugzilla.redhat.com/show_bug.cgi?id=852298
[ 11 ] Bug #858765 - Unexpected HTTP status code: 400
https://bugzilla.redhat.com/show_bug.cgi?id=858765
[ 12 ] Bug #861899 - [RFE] make possible re-entering BZ credentials if bug processing
fails due to bad BZ username/passwd
https://bugzilla.redhat.com/show_bug.cgi?id=861899
[ 13 ] Bug #861996 - abrt-retrace-client: checks for corrupted dump dir are
inconsistent
https://bugzilla.redhat.com/show_bug.cgi?id=861996
[ 14 ] Bug #867240 - RFE: don't file xserver backtraces when fglrx is loaded
https://bugzilla.redhat.com/show_bug.cgi?id=867240
[ 15 ] Bug #874882 - Fedora 18 (GNOME 3.6 ) uses ~/.cache/gdm/session.log
https://bugzilla.redhat.com/show_bug.cgi?id=874882
[ 16 ] Bug #875852 - Essential element 'global_uuid' is missing, can't
continue
https://bugzilla.redhat.com/show_bug.cgi?id=875852
[ 17 ] Bug #877437 - RFE: don't file xserver backtraces when vboxvideo is loaded
https://bugzilla.redhat.com/show_bug.cgi?id=877437
[ 18 ] Bug #884791 - report-gtk destroys global text cache twice
https://bugzilla.redhat.com/show_bug.cgi?id=884791
[ 19 ] Bug #884819 - abrt-applet alerts about already reported bugs if it wasn't
running at the time.
https://bugzilla.redhat.com/show_bug.cgi?id=884819
[ 20 ] Bug #888012 - abrt no longer allows reporting kernel crashes - uReport exited
with exit code 1
https://bugzilla.redhat.com/show_bug.cgi?id=888012
[ 21 ] Bug #888111 - can not fix bugzilla ID during install bug reporting
https://bugzilla.redhat.com/show_bug.cgi?id=888111
[ 22 ] Bug #888884 - Typo (pasword) and mistakingly c-formatted message
https://bugzilla.redhat.com/show_bug.cgi?id=888884
[ 23 ] Bug #888893 - Typo: usefull
https://bugzilla.redhat.com/show_bug.cgi?id=888893
[ 24 ] Bug #873488 - abrt hangs while generating upload archive
https://bugzilla.redhat.com/show_bug.cgi?id=873488
[ 25 ] Bug #879641 - core dump uploading broken under cs_CZ locale
https://bugzilla.redhat.com/show_bug.cgi?id=879641
[ 26 ] Bug #880228 - reporter-bugzilla crashes if bug summary template contains an
undefined variable
https://bugzilla.redhat.com/show_bug.cgi?id=880228
--------------------------------------------------------------------------------
================================================================================
caribou-0.4.2-2.fc17 (FEDORA-2012-20782)
A simplified in-place on-screen keyboard
--------------------------------------------------------------------------------
Update Information:
Add missing gsettings schema for -antler in spec file
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 20 2012 Parag Nemade <pnemade AT redhat.com> - 0.4.2-2
- Add missing gsettings schema for -antler
- caribou will pull python-caribou
--------------------------------------------------------------------------------
================================================================================
ccd2iso-0.3-10.fc17 (FEDORA-2012-20774)
CloneCD image to ISO image file converter
--------------------------------------------------------------------------------
Update Information:
This is an update that just adds a manual page originally written for the debian package
of ccd2iso.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 20 2012 Mohammed El-Afifi <Mohammed_ElAfifi(a)yahoo.com> - 0.3-10
- Adding a manual page from debian distro
--------------------------------------------------------------------------------
================================================================================
darktable-1.1.1-1.fc17 (FEDORA-2012-20803)
Utility to organize and develop raw images
--------------------------------------------------------------------------------
Update Information:
upgrade to 1.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 28 2012 Edouard Bourguignon <madko(a)linuxed.net> - 1.1.1-1
- Upgrade to 1.1.1
* Sat Nov 24 2012 Edouard Bourguignon <madko(a)linuxed.net> - 1.1-1
- Upgrade to 1.1
* Wed Nov 14 2012 Edouard Bourguignon <madko(a)linuxed.net> - 1.1-0.1.rc2
- Upgrade to 1.1~rc2
* Wed Oct 31 2012 Edouard Bourguignon <madko(a)linuxed.net> - 1.1-0.1.rc1
- Upgrade to 1.1~rc1
--------------------------------------------------------------------------------
================================================================================
drupal6-6.27-1.fc17 (FEDORA-2012-20766)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
Upstream Drupal has reported SA-CORE-2012-004 [1] which corrects multiple
vulnerabilities:
1) Access bypass (User module search - Drupal 6 and 7)
2) Access bypass (Upload module - Drupal 6)
3) Arbitrary PHP code execution (File upload modules - Drupal 6 and 7)
CVEs have been requested and are not yet assigned.
These flaws have been fixed in Drupal 6.27 and 7.18.
[1]
http://drupal.org/SA-CORE-2012-004
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 20 2012 Jon Ciesla <limburgher(a)gmail.com> - 6.27-1
- 6.27.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #888990 - CVE-2012-5651 CVE-2012-5652 CVE-2012-5653 drupal: multiple flaws
fixed in 6.27/7.18 (SA-CORE-2012-004)
https://bugzilla.redhat.com/show_bug.cgi?id=888990
--------------------------------------------------------------------------------
================================================================================
drupal7-7.18-1.fc17 (FEDORA-2012-20766)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
Upstream Drupal has reported SA-CORE-2012-004 [1] which corrects multiple
vulnerabilities:
1) Access bypass (User module search - Drupal 6 and 7)
2) Access bypass (Upload module - Drupal 6)
3) Arbitrary PHP code execution (File upload modules - Drupal 6 and 7)
CVEs have been requested and are not yet assigned.
These flaws have been fixed in Drupal 6.27 and 7.18.
[1]
http://drupal.org/SA-CORE-2012-004
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 20 2012 Jon Ciesla <limburgher(a)gmail.com> - 7.18-1
- 7.18.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #888990 - CVE-2012-5651 CVE-2012-5652 CVE-2012-5653 drupal: multiple flaws
fixed in 6.27/7.18 (SA-CORE-2012-004)
https://bugzilla.redhat.com/show_bug.cgi?id=888990
--------------------------------------------------------------------------------
================================================================================
fedup-0.7.2-1.fc17 (FEDORA-2012-20801)
The Fedora Upgrade tool
--------------------------------------------------------------------------------
Update Information:
* `instrepo` is now autodetected for `--network` installs
* Fixed problems with boot progress screen
* Fixed bootloader problems on EFI systems
* Fixed `--iso` option
* Clean up after upgrade
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 6 2012 Will Woods <wwoods(a)redhat.com> 0.7.2-1
- Fix grubby traceback on EFI systems (#884696)
- Fix traceback if /var/tmp is a different filesystem from /var/lib (#883107)
- Disable SELinux during upgrade if system has SELinux disabled (#882549)
- Use new-kernel-pkg to set up bootloader (#872088, #879290, #881338)
- Remove boot option after upgrade (#873065)
- Fix running on minimal systems (#885990)
- Work around wrong/missing plymouth theme (#879295)
- Get instrepo automatically if available (#872899, #882141)
- Rename 'fedup-cli' to 'fedup'
- Rename '--repourl' to '--addrepo'
- Add mirrorlist support for --addrepo/--instrepo
- Clearer messages for most errors
- Fix --iso
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #884696 - fedup backtrace on F17 EFI live install: 'error opening
/boot/grub/grub.cfg for read: no such file or directory'
https://bugzilla.redhat.com/show_bug.cgi?id=884696
[ 2 ] Bug #883107 - "OSError: [Errno 18] Invalid cross-device link" if
cachedir if tmpfs
https://bugzilla.redhat.com/show_bug.cgi?id=883107
[ 3 ] Bug #882549 - AVC denials during upgrade
https://bugzilla.redhat.com/show_bug.cgi?id=882549
[ 4 ] Bug #872088 - fedup giving grubby backtrace
https://bugzilla.redhat.com/show_bug.cgi?id=872088
[ 5 ] Bug #879290 - fedup-prepared system does not boot System Upgrade by default
https://bugzilla.redhat.com/show_bug.cgi?id=879290
[ 6 ] Bug #881338 - TypeError: __new__() takes exactly 7 arguments (6 given)
https://bugzilla.redhat.com/show_bug.cgi?id=881338
[ 7 ] Bug #873065 - fedup should remove "System Upgrade" from grub before
rebooting at end of upgrade
https://bugzilla.redhat.com/show_bug.cgi?id=873065
[ 8 ] Bug #885990 - ImportError: No module named selinux
https://bugzilla.redhat.com/show_bug.cgi?id=885990
[ 9 ] Bug #879295 - upgrade has no progress indicator (missing/wrong plymouth theme)
https://bugzilla.redhat.com/show_bug.cgi?id=879295
[ 10 ] Bug #882141 - NotImplementedError - fedup should know net location of Alpha and
Beta upgrade files
https://bugzilla.redhat.com/show_bug.cgi?id=882141
--------------------------------------------------------------------------------
================================================================================
fftw-3.3.3-3.fc17 (FEDORA-2012-20770)
A Fast Fourier Transform library
--------------------------------------------------------------------------------
Update Information:
Enabled hardware acceleration features.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2012 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 3.3.3-3
- After consultation with upstream, enable SSE2 also on x86, altivec on ppc
and ppc64 and NEON on arm.
* Tue Dec 18 2012 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 3.3.3-2
- Enable SSE2 on x86_64.
--------------------------------------------------------------------------------
================================================================================
globus-common-14.9-1.fc17 (FEDORA-2012-20762)
Globus Toolkit - Common Library
--------------------------------------------------------------------------------
Update Information:
Update to Globus Toolkit 5.2.3.
See the release notes for details:
http://www.globus.org/toolkit/docs/5.2/5.2.3/rn/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 6 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 14.9-1
- Update to Globus Toolkit 5.2.3
--------------------------------------------------------------------------------
================================================================================
globus-core-8.9-2.fc17 (FEDORA-2012-20762)
Globus Toolkit - Globus Core
--------------------------------------------------------------------------------
Update Information:
Update to Globus Toolkit 5.2.3.
See the release notes for details:
http://www.globus.org/toolkit/docs/5.2/5.2.3/rn/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 6 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 8.9-2
- Fix globus-spec-creator for TexLive 2012 (Fedora 18+)
--------------------------------------------------------------------------------
================================================================================
globus-gram-job-manager-13.51-1.fc17 (FEDORA-2012-20762)
Globus Toolkit - GRAM Jobmanager
--------------------------------------------------------------------------------
Update Information:
Update to Globus Toolkit 5.2.3.
See the release notes for details:
http://www.globus.org/toolkit/docs/5.2/5.2.3/rn/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 6 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 13.51-1
- Update to Globus Toolkit 5.2.3
--------------------------------------------------------------------------------
================================================================================
globus-gram-job-manager-condor-1.4-1.fc17 (FEDORA-2012-20762)
Globus Toolkit - Condor Job Manager Support
--------------------------------------------------------------------------------
Update Information:
Update to Globus Toolkit 5.2.3.
See the release notes for details:
http://www.globus.org/toolkit/docs/5.2/5.2.3/rn/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 6 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 1.4-1
- Update to Globus Toolkit 5.2.3
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jun 8 2012 Petr Pisar <ppisar(a)redhat.com> - 1.3-2
- Perl 5.16 rebuild
--------------------------------------------------------------------------------
================================================================================
globus-gram-job-manager-pbs-1.6-1.fc17 (FEDORA-2012-20762)
Globus Toolkit - PBS Job Manager Support
--------------------------------------------------------------------------------
Update Information:
Update to Globus Toolkit 5.2.3.
See the release notes for details:
http://www.globus.org/toolkit/docs/5.2/5.2.3/rn/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 6 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 1.6-1
- Update to Globus Toolkit 5.2.3
--------------------------------------------------------------------------------
================================================================================
globus-gram-job-manager-sge-1.5-2.fc17 (FEDORA-2012-20762)
Globus Toolkit - Grid Engine Job Manager Support
--------------------------------------------------------------------------------
Update Information:
Update to Globus Toolkit 5.2.3.
See the release notes for details:
http://www.globus.org/toolkit/docs/5.2/5.2.3/rn/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 6 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 1.5-2
- Specfile clean-up
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-6.16-1.fc17 (FEDORA-2012-20762)
Globus Toolkit - Globus GridFTP Server
--------------------------------------------------------------------------------
Update Information:
Update to Globus Toolkit 5.2.3.
See the release notes for details:
http://www.globus.org/toolkit/docs/5.2/5.2.3/rn/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 6 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 6.16-1
- Update to Globus Toolkit 5.2.3
--------------------------------------------------------------------------------
================================================================================
globus-gsi-callback-4.4-1.fc17 (FEDORA-2012-20762)
Globus Toolkit - Globus GSI Callback Library
--------------------------------------------------------------------------------
Update Information:
Update to Globus Toolkit 5.2.3.
See the release notes for details:
http://www.globus.org/toolkit/docs/5.2/5.2.3/rn/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 6 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 4.4-1
- Update to Globus Toolkit 5.2.3
--------------------------------------------------------------------------------
================================================================================
globus-scheduler-event-generator-4.7-1.fc17 (FEDORA-2012-20762)
Globus Toolkit - Scheduler Event Generator
--------------------------------------------------------------------------------
Update Information:
Update to Globus Toolkit 5.2.3.
See the release notes for details:
http://www.globus.org/toolkit/docs/5.2/5.2.3/rn/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 6 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 4.7-1
- Update to Globus Toolkit 5.2.3
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
4.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
globus-simple-ca-3.2-1.fc17 (FEDORA-2012-20762)
Globus Toolkit - Simple CA Utility
--------------------------------------------------------------------------------
Update Information:
Update to Globus Toolkit 5.2.3.
See the release notes for details:
http://www.globus.org/toolkit/docs/5.2/5.2.3/rn/
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 7 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 3.2-1
- Update to Globus Toolkit 5.2.3
--------------------------------------------------------------------------------
================================================================================
grid-packaging-tools-3.6.3-1.fc17 (FEDORA-2012-20762)
Grid Packaging Tools (GPT)
--------------------------------------------------------------------------------
Update Information:
Update to Globus Toolkit 5.2.3.
See the release notes for details:
http://www.globus.org/toolkit/docs/5.2/5.2.3/rn/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 6 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 3.6.3-1
- Update to version 3.6.3
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.6.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jun 8 2012 Petr Pisar <ppisar(a)redhat.com> - 3.6.2-2
- Perl 5.16 rebuild
--------------------------------------------------------------------------------
================================================================================
iproute-3.3.0-5.fc17 (FEDORA-2012-20790)
Advanced IP routing and network device configuration tools
--------------------------------------------------------------------------------
Update Information:
"route"'s nexthop parameter now accepts IPv6 addresses.
"tc" now supports codel and fq_codel schedulers.
ss: list all, not just TCP sockets by default
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 20 2012 Petr Šabata <contyk(a)redhat.com> - 3.3.0-5
- Add support for fq_codel (#886958)
* Thu Dec 20 2012 Petr Šabata <contyk(a)redhat.com> - 3.3.0-4
- Support IPv6 addresses for route's nexthop
* Wed Dec 12 2012 Petr Šabata <contyk(a)redhat.com> - 3.3.0-3
- ss: list all, not just TCP sockets by default (#829630)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #886958 - Update iproute package to include support for fq_codel
https://bugzilla.redhat.com/show_bug.cgi?id=886958
[ 2 ] Bug #734697 - Impossible to set up an IPv6 multipath route
https://bugzilla.redhat.com/show_bug.cgi?id=734697
[ 3 ] Bug #829630 - ss -a lists only TCP sockets
https://bugzilla.redhat.com/show_bug.cgi?id=829630
--------------------------------------------------------------------------------
================================================================================
libnetfilter_acct-1.0.0-2.fc17 (FEDORA-2012-20784)
A library providing interface to extended accounting infrastructure
--------------------------------------------------------------------------------
Update Information:
New package: A library providing interface to extended netfilter accounting
infrastructure.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #848990 - Review Request: libnetfilter_acct - A library providing interface to
extended accounting infrastructure
https://bugzilla.redhat.com/show_bug.cgi?id=848990
--------------------------------------------------------------------------------
================================================================================
libreport-2.0.20-1.fc17 (FEDORA-2012-20767)
Generic library for reporting various problems
--------------------------------------------------------------------------------
Update Information:
Updated the latest ABRT stack to the latest upstream release
This update fixes bugs in internal IPC and introduces configurable bugzilla bug
formatting.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 19 2012 Jiri Moskovcak <jmoskovc(a)redhat.com> 2.0.20-1
- New version 2.0.20
- updated po files
- add abrt-screencast to POTFILES.in
- added screen casting support to the wizard
- fix memory leaks in workflow code
- report_problem_in_dir(): make LIBREPORT_DEL_DIR work
- add Yes/No dialog saving answer
- refactor: move ask_yes_no_save_result from wizard to libreport-gtk
- added anaconda workflows rhbz#885690
- report-python: export dd_delete_item too
- report-python: export DD_OPEN_READONLY too
- strtrimch: optimize it a bit
- show only workflows applicable to actual problem directory
- report-gtk: destroy global text cache only once
- change rules for FILENAME_NOT_REPORTABLE to always include trailing period.
- ask for BZ login/BZ pwd if Login attempt failed
- ask for BZ login/BZ password if not provided by conf
- remove new line from ask/ask_password responses
- add ask_yes_no_yesforever() to Python client API
- make client API independent on translation
- run_event: use client functions for the communication callbacks
- clean the workflow buttons when refreshing the event page
- Fix a bug - inverted check for failed rename() call
- wrap the not_reportable label .trac#908
- don't show events without configuration in preferences .trac#881
- - implemented saving/loading configuratio for workflows - related to trac#822
- reporter-bz: add AVC's description added to BZ comment
- add microseconds to dump dir name (problem ID)
- teach reporter-bugzilla to read BZ ID from reported_to element
- teach reporter-bugzilla to add reporter to CC
- introduce a function deleting dd's element
- introduce a function getting no. of Bytes of dd's element
- make event config name immutable
- fixed segv in the last commit
- made struct workflow private related to trac#822
- don't show the spinner if the problem is not reportable trac#852
- made the config_item_info structure private
- added workflows trac#822
- added x,--expert cmdline option to enable expert mode
- switch comment and event selector page
- use get_ and set_ functions to access event_config_t
- reporter-bz: don't return NULL on %non_existing_item% - use "" instead
- refactoring the xml and conf loader code related to trac#822
- reporter-bugzilla: add a --debug option
- reporter-bz: fix a summary line formatting bug
- let logging_callback and post_run_callback members be None
- expose make_run_event_state_forwarding() in Python API
- reporter-bz: change syntax of bugzilla_format_*.conf to require "text::", not
"text:"
- reporter-bz: add support for line continuation and simple text in bugzilla_format*.conf
* Mon Dec 3 2012 Jakub Filak <jfilak(a)redhat.com> 2.0.19-3
- add a description of AVC to bugzilla comment 0
* Mon Nov 26 2012 Jakub Filak <jfilak(a)redhat.com> 2.0.19-2
- fix bugzilla summary formatting
- Resolves: #880228
* Wed Nov 14 2012 Jakub Filak <jfilak(a)redhat.com> 2.0.19-1
- introduce a new formating feature for Bugzilla plugin
- use gtk_show_uri() instead of own launcher
- update kerneloops urls
- don't force the minimal rating trac#854
- add support for forwarding of report client requests
- fix i18n in event client communication protocol
- add event name to the error message - can't get secret item
- switch all load_conf_file() calls to use skipKeysWithoutValue=false
- hide the spinner when the event processing is finishes trac#852
- add a method for loading of configuration of a single event
- unlock secret collection only on meaningful demand
- fix secret item look up for gnome-keyring
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #738635 - scp upload ends with 'Error in the SSH layer'
https://bugzilla.redhat.com/show_bug.cgi?id=738635
[ 2 ] Bug #808018 - [abrt] abrt-addon-ccpp-2.0.9-1.fc17:
abrt-action-analyze-core:111:extract_info_from_core:IndexError: list index out of range
https://bugzilla.redhat.com/show_bug.cgi?id=808018
[ 3 ] Bug #808904 - Abrt reporting disabled because the backtrace is unusable
https://bugzilla.redhat.com/show_bug.cgi?id=808904
[ 4 ] Bug #810002 - bad library build: libreport_g_verbose unresolved from libabrt.so.0
https://bugzilla.redhat.com/show_bug.cgi?id=810002
[ 5 ] Bug #814628 - XML-RPC(-509): Unable to make sense of XML-RPC response from
server.
https://bugzilla.redhat.com/show_bug.cgi?id=814628
[ 6 ] Bug #815351 - root crashes are not visible
https://bugzilla.redhat.com/show_bug.cgi?id=815351
[ 7 ] Bug #816186 - abrt-gui inotify_add_watch failed
https://bugzilla.redhat.com/show_bug.cgi?id=816186
[ 8 ] Bug #822369 - Couldn't generate backtrace with gdb for processes running under
another user
https://bugzilla.redhat.com/show_bug.cgi?id=822369
[ 9 ] Bug #836771 - SELinux is preventing /usr/sbin/abrt-dbus from 'create'
accesses on the lnk_file .lock.
https://bugzilla.redhat.com/show_bug.cgi?id=836771
[ 10 ] Bug #852298 - abrt has grammatical errors
https://bugzilla.redhat.com/show_bug.cgi?id=852298
[ 11 ] Bug #858765 - Unexpected HTTP status code: 400
https://bugzilla.redhat.com/show_bug.cgi?id=858765
[ 12 ] Bug #861899 - [RFE] make possible re-entering BZ credentials if bug processing
fails due to bad BZ username/passwd
https://bugzilla.redhat.com/show_bug.cgi?id=861899
[ 13 ] Bug #861996 - abrt-retrace-client: checks for corrupted dump dir are
inconsistent
https://bugzilla.redhat.com/show_bug.cgi?id=861996
[ 14 ] Bug #867240 - RFE: don't file xserver backtraces when fglrx is loaded
https://bugzilla.redhat.com/show_bug.cgi?id=867240
[ 15 ] Bug #874882 - Fedora 18 (GNOME 3.6 ) uses ~/.cache/gdm/session.log
https://bugzilla.redhat.com/show_bug.cgi?id=874882
[ 16 ] Bug #875852 - Essential element 'global_uuid' is missing, can't
continue
https://bugzilla.redhat.com/show_bug.cgi?id=875852
[ 17 ] Bug #877437 - RFE: don't file xserver backtraces when vboxvideo is loaded
https://bugzilla.redhat.com/show_bug.cgi?id=877437
[ 18 ] Bug #884791 - report-gtk destroys global text cache twice
https://bugzilla.redhat.com/show_bug.cgi?id=884791
[ 19 ] Bug #884819 - abrt-applet alerts about already reported bugs if it wasn't
running at the time.
https://bugzilla.redhat.com/show_bug.cgi?id=884819
[ 20 ] Bug #888012 - abrt no longer allows reporting kernel crashes - uReport exited
with exit code 1
https://bugzilla.redhat.com/show_bug.cgi?id=888012
[ 21 ] Bug #888111 - can not fix bugzilla ID during install bug reporting
https://bugzilla.redhat.com/show_bug.cgi?id=888111
[ 22 ] Bug #888884 - Typo (pasword) and mistakingly c-formatted message
https://bugzilla.redhat.com/show_bug.cgi?id=888884
[ 23 ] Bug #888893 - Typo: usefull
https://bugzilla.redhat.com/show_bug.cgi?id=888893
[ 24 ] Bug #873488 - abrt hangs while generating upload archive
https://bugzilla.redhat.com/show_bug.cgi?id=873488
[ 25 ] Bug #879641 - core dump uploading broken under cs_CZ locale
https://bugzilla.redhat.com/show_bug.cgi?id=879641
[ 26 ] Bug #880228 - reporter-bugzilla crashes if bug summary template contains an
undefined variable
https://bugzilla.redhat.com/show_bug.cgi?id=880228
--------------------------------------------------------------------------------
================================================================================
mirall-1.1.4-1.fc17 (FEDORA-2012-20783)
The ownCloud Client
--------------------------------------------------------------------------------
Update Information:
This client only works for Owncloud Server 4.5 and up
New bug fix realease of the 1.1.x branch of the owncloud-client packages
** This branch only works with Owncloud Server 4.5 and above.
Update to owncloud-client, mirall, owncloud-csync
Please be advice this package now only works with Owncloud Server 4.5 or up. OwnClous
4.0.x and below are not supported in the new desktop client.
This update fixes, corrupted syncs, does faster sync and fixes Seg faults errors.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 20 2012 <jmarrero(a)fedoraproject.org> 1.1.4-1
- Update to 1.1.4
* Tue Dec 4 2012 <jmarrero(a)fedoraproject.org> 1.1.3-1
- Update to 1.1.3
* Fri Oct 19 2012 <jmarrero(a)fedoraproject.org> 1.1.1-1
- Update to 1.1.1
* Mon Oct 15 2012 <jmarrero(a)fedoraproject.org> 1.1.0-2
- fix mirall-common dependency problem
* Sun Oct 14 2012 <jmarrero(a)fedoraproject.org> 1.1.0-1
- Version Upgrade to 1.1.0
- Removed the need to look for occsync now mirall looks for ocsync the new name of
owncloud-csync
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #867083 - [abrt] owncloud-client-1.1.0-1.fc17: owncloud_open: Process
/usr/bin/owncloud was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=867083
[ 2 ] Bug #852146 - [abrt] owncloud-client-1.0.5-4.fc17: XFreeColormap: Process
/usr/bin/owncloud was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=852146
[ 3 ] Bug #859919 - [abrt] owncloud-client-1.0.5-5.fc17: __gconv: Process
/usr/bin/owncloud was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=859919
[ 4 ] Bug #862832 - [abrt] owncloud-client-1.0.5-5.fc17: QThreadStorageData::get:
Process /usr/bin/owncloud was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=862832
[ 5 ] Bug #865686 - [abrt] owncloud-client-1.0.5-5.fc17: QWidget::~QWidget: Process
/usr/bin/owncloud was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=865686
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-2.0.1-1.fc17 (FEDORA-2012-20764)
Advanced Resource Connector Grid Middleware
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.0.1-1
- 2.0.1 Final Release
- Drop patches accepted upstream: nordugrid-arc-unistd.patch,
nordugrid-arc-pypara.patch, nordugrid-arc-xmlns.patch,
nordugrid-arc-recursive.patch
* Fri Aug 3 2012 David Malcolm <dmalcolm(a)redhat.com> - 2.0.0-4
- rebuild for
https://fedoraproject.org/wiki/Features/Python_3.3
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nvidia-texture-tools-2.0.8-3.fc17 (FEDORA-2012-20778)
Collection of image processing and texture manipulation tools
--------------------------------------------------------------------------------
Update Information:
Update to latest 0ad and 0ad-data, and add new nvidia-texture-tools dependency.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #823096 - Review Request: nvidia-texture-tools - Collection of image
processing and texture manipulation tools
https://bugzilla.redhat.com/show_bug.cgi?id=823096
[ 2 ] Bug #888438 - RFE: Alpha 12 is now available
https://bugzilla.redhat.com/show_bug.cgi?id=888438
--------------------------------------------------------------------------------
================================================================================
owncloud-csync-0.60.4-1.fc17 (FEDORA-2012-20783)
A user level bidirectional client only file synchronizer
--------------------------------------------------------------------------------
Update Information:
This client only works for Owncloud Server 4.5 and up
New bug fix realease of the 1.1.x branch of the owncloud-client packages
** This branch only works with Owncloud Server 4.5 and above.
Update to owncloud-client, mirall, owncloud-csync
Please be advice this package now only works with Owncloud Server 4.5 or up. OwnClous
4.0.x and below are not supported in the new desktop client.
This update fixes, corrupted syncs, does faster sync and fixes Seg faults errors.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 20 2012 <jmarrero(a)fedoraproject.org> 0.60.4-1
- update to 0.60.4 on f17 for mirall 1.1.4
- fix changelog
* Fri Oct 19 2012 <jmarrero(a)fedoraproject.org> 0.60.1-1
- Version update to 0.60.1
* Sun Oct 14 2012 <jmarrero(a)fedoraproject.org> 0.60.0-1
- Version bump to 0.60.0
- removed renaming patches as uptream has renamed to ocsync
- fixed all refences from occsync and csync to ocsync
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #867083 - [abrt] owncloud-client-1.1.0-1.fc17: owncloud_open: Process
/usr/bin/owncloud was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=867083
[ 2 ] Bug #852146 - [abrt] owncloud-client-1.0.5-4.fc17: XFreeColormap: Process
/usr/bin/owncloud was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=852146
[ 3 ] Bug #859919 - [abrt] owncloud-client-1.0.5-5.fc17: __gconv: Process
/usr/bin/owncloud was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=859919
[ 4 ] Bug #862832 - [abrt] owncloud-client-1.0.5-5.fc17: QThreadStorageData::get:
Process /usr/bin/owncloud was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=862832
[ 5 ] Bug #865686 - [abrt] owncloud-client-1.0.5-5.fc17: QWidget::~QWidget: Process
/usr/bin/owncloud was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=865686
--------------------------------------------------------------------------------
================================================================================
phoronix-test-suite-4.2.0-1.fc17 (FEDORA-2012-20694)
An Automated, Open-Source Testing Framework
--------------------------------------------------------------------------------
Update Information:
- new upstream release
- do not install devel packages required by some test-suites
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 20 2012 Markus Mayer <lotharlutz(a)gmx.de> - 4.2.0-1
- new upstream
- Fix wrong day of week in changelog
* Mon Dec 17 2012 Markus Mayer <lotharlutz(a)gmx.de> - 4.0.1-1
- new upstream
- do not install devel packages required by some test-suites
* Mon Aug 13 2012 Markus Mayer <lotharlutz(a)gmx.de> - 4.0.0-1
- new upstream
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.8.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #886023 - Unable to install phoronix-test-suite on armv5tel
https://bugzilla.redhat.com/show_bug.cgi?id=886023
--------------------------------------------------------------------------------
================================================================================
php-5.4.10-1.fc17 (FEDORA-2012-20771)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
RPM change:
* "configure command" removed from phpinfo() output
Upstream changelog, 20 Dec 2012, PHP 5.4.10
Core:
* Fixed bug #63635 (Segfault in gc_collect_cycles). (Dmitry)
* Fixed bug #63512 (parse_ini_file() with INI_SCANNER_RAW removes quotes from value).
(Pierrick)
* Fixed bug #63468 (wrong called method as callback with inheritance). (Laruence)
* Fixed bug #61557 (Crasher in tt-rss backend.php). (i dot am dot jack dot mail at gmail
dot com)
* Fixed bug #61272 (ob_start callback gets passed empty string). (Mike, casper at
langemeijer dot eu)
Date:
* Fixed bug #63666 (Poor date() performance). (Paul Talborg).
* Fixed bug #63435 (Datetime::format('u') sometimes wrong by 1 microsecond).
(Remi)
Imap:
* Fixed bug #63126 (DISABLE_AUTHENTICATOR ignores array). (Remi)
Json:
* Fixed bug #63588 (use php_next_utf8_char and remove duplicate implementation). (Remi)
MySQLi:
* Fixed bug #63361 (missing header). (Remi)
MySQLnd:
* Fixed bug #63398 (Segfault when polling closed link). (Laruence)
FPM:
* Fixed bug #63581 Possible null dereference and buffer overflow (Remi)
Pdo_sqlite:
* Fixed Bug #63149 getColumnMeta should return the table name when system SQLite used.
(Remi)
Reflection:
* Fixed Bug #63614 (Fatal error on Reflection). (Laruence)
SOAP
* Fixed bug #63271 (SOAP wsdl cache is not enabled after initial requests). (John Jawed,
Dmitry)
Sockets
* Fixed bug #49341 (Add SO_REUSEPORT support for socket_set_option()). (Igor Wiedler,
Lars)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 19 2012 Remi Collet <rcollet(a)redhat.com> 5.4.10-1
- update to 5.4.10
- remove patches merged upstream
* Tue Dec 11 2012 Remi Collet <rcollet(a)redhat.com> 5.4.9-3
- drop "Configure Command" from phpinfo output
* Tue Dec 11 2012 Joe Orton <jorton(a)redhat.com> - 5.4.9-2
- prevent php_config.h changes across (otherwise identical) rebuilds
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Browser-2.0.2-1.fc17 (FEDORA-2012-20779)
Horde Browser API
--------------------------------------------------------------------------------
Update Information:
Update to latest Horde version
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Constraint-2.0.1-2.fc17 (FEDORA-2012-20779)
Horde Constraint library
--------------------------------------------------------------------------------
Update Information:
Update to latest Horde version
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Log-2.0.1-2.fc17 (FEDORA-2012-20779)
Horde Logging library
--------------------------------------------------------------------------------
Update Information:
Update to latest Horde version
--------------------------------------------------------------------------------
================================================================================
rubygem-cinch-2.0.3-2.1.fc17 (FEDORA-2012-20792)
An IRC Bot Building Framework
--------------------------------------------------------------------------------
Update Information:
Updated in to meet the Ruby packaging guidelines.
--------------------------------------------------------------------------------
================================================================================
rubygem-compass-0.12.2-2.fc17 (FEDORA-2012-20788)
A Sass-based CSS Meta-Framework
--------------------------------------------------------------------------------
Update Information:
Update to version 0.12.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 12 2012 Troy Dawson <tdawson(a)redhat.com> - 0.12.2-2
- Get tests to run on rawhide
* Tue Nov 13 2012 Mo Morsi <mmorsi(a)redhat.com> - 0.12.2-1
- update to latest upstream release
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.11.5-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rubygem-declarative_authorization-0.5.6-1.1.fc17 (FEDORA-2012-20781)
Provides readable authorization rules for Rails
--------------------------------------------------------------------------------
Update Information:
Updated the specfile to meet current Ruby packaging guidelines.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 20 2012 Darryl L. Pierce <dpierce(a)redhat.com> - 0.5.6-1.1
- Cleaned up the specfile to match current Ruby packaging guidelines.
--------------------------------------------------------------------------------
================================================================================
rubygem-foreigner-1.2.1-1.1.fc17 (FEDORA-2012-20780)
Foreign Keys for Rails
--------------------------------------------------------------------------------
Update Information:
Updated the specfile based on the current Ruby packaging guidelines.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 20 2012 Darryl L. Pierce <dpierce(a)redhat.com> - 1.2.1-1.1
- Updated the specfile to reflect current Ruby packaging guidelines.
--------------------------------------------------------------------------------
================================================================================
rubygem-mixlib-shellout-1.1.0-4.fc17 (FEDORA-2012-20791)
Run external commands on Unix or Windows
--------------------------------------------------------------------------------
Update Information:
New package: a Ruby mixin for running external commands
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #823337 - Review Request: rubygem-mixlib-shellout - mixin for running external
commands
https://bugzilla.redhat.com/show_bug.cgi?id=823337
--------------------------------------------------------------------------------
================================================================================
rubygem-sequel-3.42.0-1.fc17 (FEDORA-2012-20756)
The Database Toolkit for Ruby
--------------------------------------------------------------------------------
Update Information:
Updated rubygem-sequel to version 3.42
--------------------------------------------------------------------------------
================================================================================
salt-0.11.1-1.fc17 (FEDORA-2012-20797)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
updated to 0.11.1 for security vulnerability fix
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 14 2012 Clint Savage <herlo1(a)gmail.com> - 0.11.1-1
- Upstream patch release 0.11.1
- Fixes security vulnerability (
https://github.com/saltstack/salt/issues/2916)
* Fri Dec 14 2012 Clint Savage <herlo1(a)gmail.com> - 0.11.0-1
- Moved to upstream release 0.11.0
* Wed Dec 5 2012 Mike Chesnut <mchesnut(a)gmail.com> - 0.10.5-2
- moved to upstream release 0.10.5
- removing references to minion.template and master.template, as those files
have been removed from the repo
--------------------------------------------------------------------------------
================================================================================
seam-conversation-3.1.0-1.fc17 (FEDORA-2012-20799)
Conversation management logic
--------------------------------------------------------------------------------
Update Information:
Initial import (#877661).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #877661 - Review Request: seam-conversation - Conversation management logic
https://bugzilla.redhat.com/show_bug.cgi?id=877661
--------------------------------------------------------------------------------
================================================================================
vfrnav-20121212-1.fc17 (FEDORA-2012-20759)
VFR/IFR Navigation
--------------------------------------------------------------------------------
Update Information:
update to 20121212
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 16 2012 Thomas Sailer <t.sailer(a)alumni.ethz.ch> - 20121212-1
- update to 20121212
--------------------------------------------------------------------------------
================================================================================
voms-2.0.9-1.fc17 (FEDORA-2012-20758)
Virtual Organization Membership Service
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.9
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 27 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.0.9-1
- Update to version 2.0.9
- Add Build Requires for texlive 2012 (Fedora 18+)
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
zanata-python-client-1.3.13-1.fc17 (FEDORA-2012-20757)
Python Client for Zanata Server
--------------------------------------------------------------------------------
Update Information:
- Use dict instead of nested loop
- Ensure that msgstr_plural is always set for plural strings
- Rename message to poentry for consistency
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2012 Sean Flanigan <sflaniga(a)redhat.com> - 1.3.13-1
- Use dict instead of nested loop
- Ensure that msgstr_plural is always set for plural strings
- Rename message to poentry for consistency
--------------------------------------------------------------------------------