The following Fedora 18 Security updates need testing:
Age URL
13
https://admin.fedoraproject.org/updates/FEDORA-2012-20117/v8-3.13.7.5-1.fc18
3
https://admin.fedoraproject.org/updates/FEDORA-2012-20746/drupal6-6.27-1....
13
https://admin.fedoraproject.org/updates/FEDORA-2012-20179/python-django-1...
6
https://admin.fedoraproject.org/updates/FEDORA-2012-20572/freeciv-2.3.3-1...
13
https://admin.fedoraproject.org/updates/FEDORA-2012-20125/webkitgtk-1.10....
4
https://admin.fedoraproject.org/updates/FEDORA-2012-20661/exempi-2.2.0-4....
14
https://admin.fedoraproject.org/updates/FEDORA-2012-20032/libvirt-0.10.2....
18
https://admin.fedoraproject.org/updates/FEDORA-2012-19879/libproxy-0.4.11...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-20904/php-symfony2-Ht...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-20923/ndjbdns-1.05.5-...
45
https://admin.fedoraproject.org/updates/FEDORA-2012-17834/cumin-0.1.5522-...
6
https://admin.fedoraproject.org/updates/FEDORA-2012-20589/fail2ban-0.8.8-...
The following Fedora 18 Critical Path updates have yet to be approved:
Age URL
The following builds have been pushed to Fedora 18 updates-testing
calligra-2.5.3-2.fc18
fftw-3.3.3-4.fc18
kdelibs-4.9.4-5.fc18
link-grammar-4.7.9-1.fc18
mingw-harfbuzz-0.9.9-1.fc18
ndjbdns-1.05.5-1.fc18
python-pandas-0.10.0-1.fc18
queuegraph-1.1-15.fc18
rosa-launcher-2.0.0-1.fc18
routino-2.4.1-1.fc18
sevmgr-1.00.0-2.fc18
stdair-1.00.1-2.fc18
trademgen-1.00.0-1.fc18
wxpdfdoc-0.9.3-1.fc18
wxsqlite3-3.0.1-3.fc18
xfce4-embed-plugin-1.2.0-1.fc18
z88dk-1.10.1-1.fc18
Details about builds:
================================================================================
calligra-2.5.3-2.fc18 (FEDORA-2012-20932)
An integrated office suite
--------------------------------------------------------------------------------
Update Information:
Fix ftbfs on ARM
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 2 2012 Rex Dieter <rdieter(a)fedoraproject.org> 2.5.3-2
- fix FTBFS on arm
--------------------------------------------------------------------------------
================================================================================
fftw-3.3.3-4.fc18 (FEDORA-2012-20713)
A Fast Fourier Transform library
--------------------------------------------------------------------------------
Update Information:
Enabled hardware acceleration features.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 24 2012 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 3.3.3-4
- Fix typo: should be %ix86 instead of %x86. Now should have SSE2 support
on x86 as well.
* Tue Dec 18 2012 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 3.3.3-3
- After consultation with upstream, enable SSE2 also on x86, altivec on ppc
and ppc64 and NEON on arm.
* Tue Dec 18 2012 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 3.3.3-2
- Enable SSE2 on x86_64.
--------------------------------------------------------------------------------
================================================================================
kdelibs-4.9.4-5.fc18 (FEDORA-2012-20918)
KDE Libraries
--------------------------------------------------------------------------------
Update Information:
This build:
* silences unwanted debugging output from Solid (udisks2 backend),
* fixes the upgrade path from Fedora 17 updates.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 11 2012 Rex Dieter <rdieter(a)fedoraproject.org> 6:4.9.4-5
- Debug output in kdelibs-udisks2-backend.patch should be disabled (#882731)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #882731 - Debug output in kdelibs-udisks2-backend.patch should be disabled
https://bugzilla.redhat.com/show_bug.cgi?id=882731
--------------------------------------------------------------------------------
================================================================================
link-grammar-4.7.9-1.fc18 (FEDORA-2012-20926)
A Grammar Checking library
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 24 2012 Johannes Lips <Johannes.Lips(a)googlemail.com> - 4.7.9-1
- Update to recent upstream version
--------------------------------------------------------------------------------
================================================================================
mingw-harfbuzz-0.9.9-1.fc18 (FEDORA-2012-20930)
MinGW Windows Harfbuzz library
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.9 and fixed Windows XP compatibility
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 24 2012 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 0.9.9-1
- Update to 0.9.9
- Fix compatibility with WinXP (FreeDesktop Bug #55494)
--------------------------------------------------------------------------------
================================================================================
ndjbdns-1.05.5-1.fc18 (FEDORA-2012-20923)
New djbdns: usable djbdns
--------------------------------------------------------------------------------
Update Information:
This fixes two of the cache poisoning issue in the DNS resolver - dnscache.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 23 2012 pjp <pj.pandit(a)yahoo.co.in> - 1.05.5-1
- Applied patch to make SOA responses cache-able.
- Applied patch to merge identical outgoing requests.
- Applied patch to install Sys-V init scripts for RHEL and systemd
unit files for latest fedora and RHEL-7 distributions.
patch from: Simone Caronni <negativo17(a)gmail.com>
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #838965 - ndjbdns is vulnerable to CVE-2008-4392 (cache poisoning attack)
https://bugzilla.redhat.com/show_bug.cgi?id=838965
--------------------------------------------------------------------------------
================================================================================
python-pandas-0.10.0-1.fc18 (FEDORA-2012-20920)
Python library providing high-performance data analysis tools
--------------------------------------------------------------------------------
Update Information:
New release of Pandas
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 24 2012 Kushal Das <kushal(a)fedoraproject.org> 0.10.0-1
- New release of pandas 0.10.0
--------------------------------------------------------------------------------
================================================================================
queuegraph-1.1-15.fc18 (FEDORA-2012-20921)
A RRDtool frontend for Mail statistics
--------------------------------------------------------------------------------
Update Information:
updated httpd configuration for apache 2.4 (bz #871472)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 24 2012 Bernard Johnson <bjohnson(a)symetrix.com> - 1.1-15
- updated httpd configuration for apache 2.4 (bz #871472)
* Fri Nov 23 2012 Marcela Mašláňová <mmaslano(a)redhat.com> - 1.1-14
- The requirement on vixie-cron is not correct anymore. The dailyjobs will be
used as virtual requirement since now. #879550
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #871472 - Broken configuration for httpd 2.4
https://bugzilla.redhat.com/show_bug.cgi?id=871472
--------------------------------------------------------------------------------
================================================================================
rosa-launcher-2.0.0-1.fc18 (FEDORA-2012-20931)
ROSA Desktop Application Launcher
--------------------------------------------------------------------------------
Update Information:
New version update
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 23 2012 Joseph Marrero <jmarrero(a)fedoraproject.org> 2.0.0-1
- Update to rosa-launcher-2.0.0
--------------------------------------------------------------------------------
================================================================================
routino-2.4.1-1.fc18 (FEDORA-2012-20929)
Router for OpenStreetMap Data
--------------------------------------------------------------------------------
Update Information:
An update of Routino to the latest upstream version, version 2.4.1:
http://www.routino.org/software/NEWS.txt
Note: This version is not compatible with databases from versions prior to 2.4.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 24 2012 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 2.4.1-1
- Update to 2.4.1 (#885455)
- README-MARBLE.txt: update: data files from 2.2.x/2.3.x versions no longer work
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #885455 - routino-2.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=885455
--------------------------------------------------------------------------------
================================================================================
sevmgr-1.00.0-2.fc18 (FEDORA-2012-20919)
C++ Simulation-Oriented Discrete Event Management Library
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 23 2012 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 1.00.0-2
- Bump the version to create a new build-root override
* Sun Dec 23 2012 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 1.00.0-1
- Upstream update
--------------------------------------------------------------------------------
================================================================================
stdair-1.00.1-2.fc18 (FEDORA-2012-20927)
C++ Standard Airline IT Object Library
--------------------------------------------------------------------------------
Update Information:
Upstream update
Upstream update
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 23 2012 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.1-2
- Bump the version to create a new build-root override
* Sun Dec 23 2012 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.1-1
- Upstream update
* Sat Dec 22 2012 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.0-1
- Upstream update
--------------------------------------------------------------------------------
================================================================================
trademgen-1.00.0-1.fc18 (FEDORA-2012-20924)
C++ Simulated Travel Demand Generation Library
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 23 2012 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 1.00.0-1
- Upstream update
--------------------------------------------------------------------------------
================================================================================
wxpdfdoc-0.9.3-1.fc18 (FEDORA-2012-20928)
A library for creating PDF documents in C++ with wxWidgets
--------------------------------------------------------------------------------
Update Information:
Updated to new upstream version and fixed bug 889889.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 24 2012 Domingo Becker <domingobecker(a)gmail.com> - 0.9.3-1
- Updated to latest upstream version.
- Moved Readme.txt and docs/html to -devel package (Bug #889889).
- Removed Doxyfile from installed package (Bug #889889).
- Updated patch for build/GNUmakefile for the new version and to fix a missing library
problem with samples/pdfdc/printing.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #889889 - Large development documentation in run-time package
https://bugzilla.redhat.com/show_bug.cgi?id=889889
--------------------------------------------------------------------------------
================================================================================
wxsqlite3-3.0.1-3.fc18 (FEDORA-2012-20922)
C++ wrapper around the SQLite 3.x database
--------------------------------------------------------------------------------
Update Information:
* Mon Dec 24 2012 Martin Gansser <martinkg(a)fedoraproject.org> 3.0.1-3
- added %wx-config to determine wx version
- moved wx header files to corresponding wx-version
- removed requirement in doc section
* Sun Dec 23 2012 Martin Gansser <martinkg(a)fedoraproject.org> 3.0.1-2
- added wxsqlite3.pc patch for pkgconf
added wxsqlite3.pc patch for pkgconfig
added wxsqlite3.pc patch for pkgconfig
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 24 2012 Martin Gansser <martinkg(a)fedoraproject.org> 3.0.1-3
- added %wx-config to determine wx version
- moved wx header files to corresponding wx-version
- removed requirement in doc section
* Sun Dec 23 2012 Martin Gansser <martinkg(a)fedoraproject.org> 3.0.1-2
- added wxsqlite3.pc patch for pkgconfig
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #858998 - wxsqlite3 - C++ wrapper around the SQLite 3.x database
https://bugzilla.redhat.com/show_bug.cgi?id=858998
--------------------------------------------------------------------------------
================================================================================
xfce4-embed-plugin-1.2.0-1.fc18 (FEDORA-2012-20925)
Xfce panel plugin to embed various applications
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 24 2012 Johannes Lips <hannes(a)fedoraproject.org> - 1.2.0-1
- Update to upstream version 1.2.0
--------------------------------------------------------------------------------
================================================================================
z88dk-1.10.1-1.fc18 (FEDORA-2012-20933)
A Z80 cross compiler
--------------------------------------------------------------------------------
Update Information:
An update of z88dk to the latest upstream bugfix release, version 1.10.1, which includes a
fix for a bug in CPP preventing the inline assembler from working correctly plus a few
minor target-specific corrections (ZX81 and MTX among others).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 24 2012 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 1.10.1-1
- update to 1.10.1 (#888202, bugfix release)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #888202 - z88dk-1.10.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=888202
--------------------------------------------------------------------------------