The following Fedora 16 Security updates need testing:
https://admin.fedoraproject.org/updates/seamonkey-2.3.3-1.fc16
https://admin.fedoraproject.org/updates/stunnel-4.42-1.fc16
https://admin.fedoraproject.org/updates/roundcubemail-0.5.4-1.fc16
https://admin.fedoraproject.org/updates/mantis-1.2.8-1.fc16
https://admin.fedoraproject.org/updates/audacious-plugins-3.0.2-2.fc16
https://admin.fedoraproject.org/updates/wireshark-1.6.2-1.fc16
https://admin.fedoraproject.org/updates/cyrus-imapd-2.4.11-1.fc16
https://admin.fedoraproject.org/updates/zabbix-1.8.7-2.fc16
https://admin.fedoraproject.org/updates/Django-1.3.1-2.fc16
https://admin.fedoraproject.org/updates/quassel-0.7.3-1.fc16
https://admin.fedoraproject.org/updates/httpd-2.2.21-1.fc16
https://admin.fedoraproject.org/updates/cherokee-1.2.99-1.fc16
The following Fedora 16 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/xorg-x11-drv-geode-2.11.12-2.fc16
https://admin.fedoraproject.org/updates/xorg-x11-drv-qxl-0.0.21-5.fc16
https://admin.fedoraproject.org/updates/lldpad-0.9.43-3.fc16
https://admin.fedoraproject.org/updates/libxfce4util-4.8.2-1.fc16
https://admin.fedoraproject.org/updates/libselinux-2.1.5-4.fc16
https://admin.fedoraproject.org/updates/authconfig-6.1.16-1.fc16
https://admin.fedoraproject.org/updates/openldap-2.4.26-3.fc16
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-1...
https://admin.fedoraproject.org/updates/wpa_supplicant-0.7.3-11.fc16
https://admin.fedoraproject.org/updates/firstboot-16.3-1.fc16
https://admin.fedoraproject.org/updates/iso-codes-3.28-1.fc16
https://admin.fedoraproject.org/updates/PackageKit-0.6.18-1.fc16
https://admin.fedoraproject.org/updates/upower-0.9.13-1.fc16
https://admin.fedoraproject.org/updates/libarchive-2.8.5-1.fc16
https://admin.fedoraproject.org/updates/xorg-x11-drv-synaptics-1.5.0-1.fc16
https://admin.fedoraproject.org/updates/livecd-tools-16.5-1.fc16
https://admin.fedoraproject.org/updates/sendmail-8.14.5-8.fc16
https://admin.fedoraproject.org/updates/gvfs-1.9.4-1.fc16
https://admin.fedoraproject.org/updates/dnsmasq-2.58-1.fc16
https://admin.fedoraproject.org/updates/udev-173-2.fc16
https://admin.fedoraproject.org/updates/evolution-data-server-3.1.5-2.fc16
https://admin.fedoraproject.org/updates/system-config-date-1.9.65-1.fc16
https://admin.fedoraproject.org/updates/pm-utils-1.4.1-12.fc16
https://admin.fedoraproject.org/updates/perl-threads-1.83-4.fc16
https://admin.fedoraproject.org/updates/libconfig-1.4.8-1.fc16
The following builds have been pushed to Fedora 16 updates-testing
ReviewBoard-1.6.1-1.fc16
abrt-2.0.4-5.fc16
apache-parent-10-2.fc16
awn-extras-applets-0.4.2-0.5.bzr1537.fc16
bluedevil-1.2-1.fc16
btm-2.1.1-3.fc16
btrfs-progs-0.19-16.fc16
cgdb-0.6.6-1.fc16
cherokee-1.2.99-1.fc16
dogtag-pki-9.0.0-6.fc16
dogtag-pki-theme-9.0.8-1.fc16
dovecot-2.0.14-2.fc16
evolution-rss-0.2.90-30.20110818git.fc16
exaile-0.3.2.2-2.fc16
ghc-rpm-macros-0.13.10-1.fc16
httpd-2.2.21-1.fc16
ibus-1.3.99.20110817-5.fc16
java-uuid-generator-3.1.2-2.fc16
jss-4.2.6-19.1.fc16
lldpad-0.9.43-3.fc16
logcheck-1.3.14-1.fc16
mod_pubcookie-3.3.4a-5.fc16
mt-daapd-0.2.4.2-11.fc16
nss-gui-0.3.10-1.fc16
openconnect-3.12-1.fc16
osutil-2.0.1-2.fc16
php-5.3.8-2.fc16
pki-console-9.0.4-1.fc16
pki-core-9.0.14-1.fc16
pki-kra-9.0.7-1.fc16
pki-ocsp-9.0.6-1.fc16
pki-ra-9.0.3-1.fc16
pki-tks-9.0.6-1.fc16
pki-tps-9.0.6-1.fc16
python-djblets-0.6.11-1.fc16
qemu-0.15.0-4.fc16
rabbitvcs-0.14.2.1-2.fc16
rubygem-rack-restful_submit-1.2.1-1.fc16
selinux-policy-3.10.0-28.fc16
spamassassin-3.3.2-7.fc16
sysstat-10.0.2-2.fc16
tomcatjss-6.0.1-1.fc16
tracker-0.12.0-1.fc16
ukij-tuz-fonts-3.10-1.fc16
uucp-1.07-26.fc16
xorg-x11-drv-geode-2.11.12-2.fc16
xorg-x11-drv-qxl-0.0.21-5.fc16
Details about builds:
================================================================================
ReviewBoard-1.6.1-1.fc16 (FEDORA-2011-12650)
Web-based code review tool
--------------------------------------------------------------------------------
Update Information:
* ReviewBoard
- Security Updates:
* Review Board 1.6.1 now requires Django 1.3.1. Django 1.3.1 contains a number of
important security fixes.
* Bug Fixes:
* Fixed the Dashboard counters showing up as 0 or negative numbers
* python-djblets:
- djblets.testing:
* Added a new TestCase class and @add_fixtures decorator for
having fixtures specific to text functions.
- djblets.util:
* Fixed defaults on counter fields on new model instances.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Stephen Gallagher <sgallagh(a)redhat.com> - 1.6.1-1
- Security Updates:
* Review Board 1.6.1 now requires Django 1.3.1. Django 1.3.1 contains a
number of important security fixes.
- Bug Fixes:
* Fixed the Dashboard counters showing up as 0 or negative numbers
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #737254 - ReviewBoard-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=737254
--------------------------------------------------------------------------------
================================================================================
abrt-2.0.4-5.fc16 (FEDORA-2011-12643)
Automatic bug detection and reporting tool
--------------------------------------------------------------------------------
Update Information:
Fixed free space checking and catching python crashes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Jiri Moskovcak <jmoskovc(a)redhat.com> - 2.0.4-5
- minor spec file fix
* Tue Sep 13 2011 Jiri Moskovcak <jmoskovc(a)redhat.com> - 2.0.4-4
- fixed sigsegv in a-a-save-package-data rhbz#737961
- fixed privs for /var/run/abrt rhbz#725974
- fixed segv in free space check
- Resolves: #737961 #725974
* Tue Aug 30 2011 Jiri Moskovcak <jmoskovc(a)redhat.com> - 2.0.4-3
- fixed abrt1-abrt2 update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #737961 - abrt unable to catch crash of python
https://bugzilla.redhat.com/show_bug.cgi?id=737961
[ 2 ] Bug #725974 - Broken /var/run/abrt permissions
https://bugzilla.redhat.com/show_bug.cgi?id=725974
--------------------------------------------------------------------------------
================================================================================
apache-parent-10-2.fc16 (FEDORA-2011-12632)
Parent pom file for Apache projects
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #736069 - Review Request: apache-parent
https://bugzilla.redhat.com/show_bug.cgi?id=736069
--------------------------------------------------------------------------------
================================================================================
awn-extras-applets-0.4.2-0.5.bzr1537.fc16 (FEDORA-2011-12637)
Extras applets for avant window navigator
--------------------------------------------------------------------------------
Update Information:
reduce the requirement because of gnome2 requirements, no longer available, so menu applet
no longer builds with gnome3
Updated to latest upstream snapshot.
Had to remove menu applets (mainmeny, cairomenu & yama, because the need gnome-menus
2.0 and is not compatible with gnome-menus 3.0.
awnterm is removed too, because of build problems
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 Tim Lauridsen <timlau(a)fedoraproject.org> - 0.4.2-0.5.bzr1537
- Added --without-mozilla to configure (gtkmozembed is being retiered)
- Cleanup requirers
* Fri Sep 2 2011 Tim Lauridsen <timlau(a)fedoraproject.org> - 0.4.2-0.4.bzr1537
- New upstream bzr snapshot # 1537
- Added --without-gnome to configure (Problem by gnome-menues requirement)
- Added patch to disable build awnterm (build problem)
* Tue Aug 30 2011 Tim Lauridsen <timlau(a)fedoraproject.org> - 0.4.2-0.3.bzr1523
- rebuild
* Fri Jul 15 2011 Tim Lauridsen <timlau(a)fedoraproject.org> - 0.4.2-0.2.bzr1523
- remove BR: libsexy-devel, because it is not needed any more.
--------------------------------------------------------------------------------
================================================================================
bluedevil-1.2-1.fc16 (FEDORA-2011-12627)
Bluetooth stack for KDE
--------------------------------------------------------------------------------
Update Information:
Update to final 1.2
Changelog:
Action Plugins
* Added support for DUN
* Added support for PANU
* A few description changed
* Fixed the Category mess we had in the .desktop
kio_bluetooth
* Show known devices first
* Perform discovery in the background
* Fixed the mimetype mess we had
* Will work when started without Bluetooth activated
Wizard
* Added another OUI for Apple Wireless Mice
* Auto select Mouse’s
Agent
* Be able to use Return or Enter to introduce PIN
Monolithic
* Use Configure icon on the configure option
KCM
* Use KMessageWidget if compiled against 4.7
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Jaroslav Reznik <jreznik(a)redhat.com> - 1.2-1
- update to 1.2 final
* Mon Sep 5 2011 Jaroslav Reznik <jreznik(a)redhat.com> - 1.2-0.2.rc2
- update to 1.2-rc2
* Fri Aug 19 2011 Jaroslav Reznik <jreznik(a)redhat.com> - 1.2-0.1.rc1
- update to 1.2-rc1
--------------------------------------------------------------------------------
================================================================================
btm-2.1.1-3.fc16 (FEDORA-2011-12625)
Bitronix Transaction Manager
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #732150 - Review Request: btm - Bitronix Transaction Manager
https://bugzilla.redhat.com/show_bug.cgi?id=732150
--------------------------------------------------------------------------------
================================================================================
btrfs-progs-0.19-16.fc16 (FEDORA-2011-12658)
Userspace programs for btrfs
--------------------------------------------------------------------------------
Update Information:
Builds the btrfs-zero-log tool for recovering from bad tree logs.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
cgdb-0.6.6-1.fc16 (FEDORA-2011-12624)
CGDB is a curses-based interface to the GNU Debugger (GDB)
--------------------------------------------------------------------------------
Update Information:
- Version upgrade to 0.6.6 (bug fix release).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Gilboa Davara <gilboad [AT] gmail.com> - 0.6.6-1
- Version upgrade to 0.6.6 (Bug fix release).
--------------------------------------------------------------------------------
================================================================================
cherokee-1.2.99-1.fc16 (FEDORA-2011-12657)
Flexible and Fast Webserver
--------------------------------------------------------------------------------
Update Information:
Latest 1.2.x upstream release and bugzilla resolving
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 10 2011 Pavel Lisý <pali(a)fedoraproject.org> - 1.2.99-1
- Latest 1.2.x upstream release
- Resolves bz 713306
- Resolves bz 710473
- Resolves bz 728741
- Resolves bz 720515
- Resolves bz 701196
- Resolves bz 712555
* Wed Aug 10 2011 Pavel Lisý <pali(a)fedoraproject.org> - 1.2.98-1
- Latest 1.2.x upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #713306 - CVE-2011-2190 CVE-2011-2191 cherokee: multiple vulnerabilities
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=713306
[ 2 ] Bug #710473 - cherokee: A weakness in Cherokee’s administrative interface random
administrator password generation [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=710473
[ 3 ] Bug #728741 - Cherokee package is very old
https://bugzilla.redhat.com/show_bug.cgi?id=728741
[ 4 ] Bug #720515 - Provide native systemd unit file
https://bugzilla.redhat.com/show_bug.cgi?id=720515
[ 5 ] Bug #701196 - Cherokee not automatically started when installed
https://bugzilla.redhat.com/show_bug.cgi?id=701196
[ 6 ] Bug #712555 - Cherokee dies at boot time
https://bugzilla.redhat.com/show_bug.cgi?id=712555
--------------------------------------------------------------------------------
================================================================================
dogtag-pki-9.0.0-6.fc16 (FEDORA-2011-12661)
Dogtag Public Key Infrastructure (PKI) Suite
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
Established MINIMUM package versions based upon platform
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.0-6
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
- Established MINIMUM package versions based upon platform
* Thu Jul 14 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.0-5
- Bugzilla Bug #669226 - Remove Legacy Build System
- Updated release of 'tomcatjss' for Fedora 15
* Wed Jul 13 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.0-4
- Updated release of 'osutil' for Fedora 15
- Updated release of 'jss' and 'jss-javadoc'
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
https://bugzilla.redhat.com/show_bug.cgi?id=734590
--------------------------------------------------------------------------------
================================================================================
dogtag-pki-theme-9.0.8-1.fc16 (FEDORA-2011-12644)
Certificate System - Dogtag PKI Theme Components
--------------------------------------------------------------------------------
Update Information:
'dogtag-pki-ca-theme'
'dogtag-pki-common-theme'
'dogtag-pki-console-theme'
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
'dogtag-pki-kra-theme'
'dogtag-pki-ocsp-theme'
'dogtag-pki-ra-theme'
'dogtag-pki-tks-theme'
'dogtag-pki-tps-theme'
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.8-1
- 'dogtag-pki-ca-theme'
- 'dogtag-pki-common-theme'
- 'dogtag-pki-console-theme'
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
- 'dogtag-pki-kra-theme'
- 'dogtag-pki-ocsp-theme'
- 'dogtag-pki-ra-theme'
- 'dogtag-pki-tks-theme'
- 'dogtag-pki-tps-theme'
* Tue Aug 23 2011 Ade Lee <alee(a)redhat.com> 9.0.7-1
- 'dogtag-pki-ca-theme'
- Bugzilla Bug #712931 - CS requires too many ports
to be open in the FW
- 'dogtag-pki-common-theme'
- 'dogtag-pki-console-theme'
- 'dogtag-pki-kra-theme'
- Bugzilla Bug #712931 - CS requires too many ports
to be open in the FW
- 'dogtag-pki-ocsp-theme'
- Bugzilla Bug #712931 - CS requires too many ports
to be open in the FW
- 'dogtag-pki-ra-theme'
- 'dogtag-pki-tks-theme'
- Bugzilla Bug #712931 - CS requires too many ports
to be open in the FW
- 'dogtag-pki-tps-theme'
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
https://bugzilla.redhat.com/show_bug.cgi?id=734590
--------------------------------------------------------------------------------
================================================================================
dovecot-2.0.14-2.fc16 (FEDORA-2011-12666)
Secure imap and pop3 server
--------------------------------------------------------------------------------
Update Information:
- do not enable insecure connections by default
- userdb extra fields can now return name+=value to append to an existing name -
script-login attempted an unnecessary config lookup, which usually failed with
"Permission denied".
- lmtp: Fixed parsing quoted strings with spaces as local-part for MAIL FROM and RCPT TO.
- imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not returned all data
sometimes.
- ldap: Fixed random assert-crashing with with sasl_bind=yes.
- Fixes to handling mail chroots
- Fixed renaming mailboxes under different parent with FS layout when using separate ALT,
INDEX or CONTROL paths.
- zlib: Fixed reading concatenated .gz files.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.0.14-2
- do not enable insecure connections by default
* Mon Aug 29 2011 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.0.14-1
- dovecot updated to 2.0.14
- userdb extra fields can now return name+=value to append to an
existing name
- script-login attempted an unnecessary config lookup, which usually
failed with "Permission denied".
- lmtp: Fixed parsing quoted strings with spaces as local-part for
MAIL FROM and RCPT TO.
- imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not
returned all data sometimes.
- ldap: Fixed random assert-crashing with with sasl_bind=yes.
- Fixes to handling mail chroots
- Fixed renaming mailboxes under different parent with FS layout when
using separate ALT, INDEX or CONTROL paths.
- zlib: Fixed reading concatenated .gz files.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #737416 - Upgrade to Fedora 15 enabled insecure login
https://bugzilla.redhat.com/show_bug.cgi?id=737416
--------------------------------------------------------------------------------
================================================================================
evolution-rss-0.2.90-30.20110818git.fc16 (FEDORA-2011-12652)
Evolution RSS Reader
--------------------------------------------------------------------------------
Update Information:
Rebuilt against newer evolution-data-server.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 cooly(a)gnome.eu.org - 0.2.90-30.20110818git
- rebuilt against newer e-d-s
* Tue Aug 30 2011 Milan Crha <mcrha(a)redhat.com> - 0.2.90-29.20110818git
- Rebuild against newer evolution-data-server (once again)
* Mon Aug 29 2011 Milan Crha <mcrha(a)redhat.com> - 0.2.90-28.20110818git
- Rebuild against newer evolution-data-server
--------------------------------------------------------------------------------
================================================================================
exaile-0.3.2.2-2.fc16 (FEDORA-2011-12642)
A music player
--------------------------------------------------------------------------------
Update Information:
- Update to 0.3.2.2
- Removes hal dependency
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 Deji Akingunola <dakingun(a)gmail.com> - 0.3.2.2-2
- Place exaile's private modules in %datadir
- Trim (un-necessary?) requires
* Wed Aug 31 2011 Deji Akingunola <dakingun(a)gmail.com> - 0.3.2.2-1
- Update to 0.3.2.2
- Drop hal. Apply patch to support udisk from upstream bzr's udisk branch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #698667 - Broken dependency on deprecated hal
https://bugzilla.redhat.com/show_bug.cgi?id=698667
--------------------------------------------------------------------------------
================================================================================
ghc-rpm-macros-0.13.10-1.fc16 (FEDORA-2011-12639)
Macros for building packages for GHC
--------------------------------------------------------------------------------
Update Information:
Bootstrapping improvements
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Jens Petersen <petersen(a)redhat.com> - 0.13.10-1
- do not setup ghc-deps.sh when ghc_bootstrapping
- add ghc_test build config
* Wed Aug 3 2011 Jens Petersen <petersen(a)redhat.com> - 0.13.9-1
- drop without_testsuite from ghc_bootstrap since it breaks koji
--------------------------------------------------------------------------------
================================================================================
httpd-2.2.21-1.fc16 (FEDORA-2011-12667)
Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
This update contains the latest stable release of the Apache HTTP Server.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Joe Orton <jorton(a)redhat.com> - 2.2.21-1
- update to 2.2.21
* Mon Sep 5 2011 Joe Orton <jorton(a)redhat.com> - 2.2.20-1
- update to 2.2.20
- fix MPM stub man page generation
* Wed Aug 10 2011 Jan Kaluza <jkaluza(a)redhat.com> - 2.2.19-5
- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #733217 - CVE-2011-3192 httpd: multiple ranges DoS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=733217
--------------------------------------------------------------------------------
================================================================================
ibus-1.3.99.20110817-5.fc16 (FEDORA-2011-12662)
Intelligent Input Bus for Linux OS
--------------------------------------------------------------------------------
Update Information:
ibus-gnome3 work with gnome-shell 3.1.91.
Now gsettings is needed to enable ibus-gnome3.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.3.99.20110817-5
- Updated ibus-gjs 3.1.91.20110913 for f16.
* Thu Sep 8 2011 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.3.99.20110817-4
- Updated ibus-gjs 3.1.91.20110908 and 3.0.2.20110908 for gnome-shell.
Fixed preedit active segments on gnome-shell and X11 apps.
- Added ibus-xx-g-s-disable-preedit.patch
Disabled preedit on gnome-shell for a workaround.
- Updated ibus.spec
Fixed Bug 735879 pre/postun scripts
--------------------------------------------------------------------------------
================================================================================
java-uuid-generator-3.1.2-2.fc16 (FEDORA-2011-12641)
A pure Java UUID Generator
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #735454 - Review Request: java-uuid-generator - a pure java UUID generator
https://bugzilla.redhat.com/show_bug.cgi?id=735454
--------------------------------------------------------------------------------
================================================================================
jss-4.2.6-19.1.fc16 (FEDORA-2011-12623)
Java Security Services (JSS)
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2011 Matthew Harmsen <mharmsen(a)redhat.com> - 4.2.6-19.1
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
* Mon Aug 15 2011 Christina Fu <cfu(a)redhat.com> - 4.2.6-19
- Bugzilla Bug 733550 - DRM failed to recovery keys when in FIPS mode
(HSM + NSS)
* Fri Aug 12 2011 Matthew Harmsen <mharmsen(a)redhat.com> - 4.2.6-18
- Bugzilla Bug #660436 - Warnings should be cleaned up in JSS build
(jdennis, mharmsen)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
https://bugzilla.redhat.com/show_bug.cgi?id=734590
--------------------------------------------------------------------------------
================================================================================
lldpad-0.9.43-3.fc16 (FEDORA-2011-12640)
Intel LLDP Agent
--------------------------------------------------------------------------------
Update Information:
Mute systemd output.
Fix lldpad frequent wakeups consuming a considerable amount of resources.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Petr Sabata <contyk(a)redhat.com> - 0.9.43-3
- Mute systemd output (#737897)
* Tue Aug 30 2011 Petr Sabata <contyk(a)redhat.com> - 0.9.43-2
- Apply various upstream 0.9.43 bugfixes
- Include not yet accepted Jens Osterkamp's patch to fix bug #720080
- Whitespace cleanup, phew
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #737897 - Package too verbose on installation.
https://bugzilla.redhat.com/show_bug.cgi?id=737897
[ 2 ] Bug #701943 - lldpad has frequent timeouts on selects
https://bugzilla.redhat.com/show_bug.cgi?id=701943
--------------------------------------------------------------------------------
================================================================================
logcheck-1.3.14-1.fc16 (FEDORA-2011-12634)
Analyzes log files and sends noticeable events as email
--------------------------------------------------------------------------------
Update Information:
Update to version 1.3.14, including updated filters and patterns.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 Matthias Runge <mrunge(a)matthias-runge.de> 1.3.14-1
- new version
--------------------------------------------------------------------------------
================================================================================
mod_pubcookie-3.3.4a-5.fc16 (FEDORA-2011-12638)
A solution for single sign-on authentication to websites
--------------------------------------------------------------------------------
Update Information:
server startup switched from xinetd to systemd (#737692)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 Gabriel Somlo <somlo at cmu.edu> 3.3.4a-5
- server startup switched from xinetd to systemd (#737692)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #737692 - Provide native systemd services
https://bugzilla.redhat.com/show_bug.cgi?id=737692
--------------------------------------------------------------------------------
================================================================================
mt-daapd-0.2.4.2-11.fc16 (FEDORA-2011-12653)
An iTunes-compatible media server
--------------------------------------------------------------------------------
Update Information:
Improve systemd service file (forking, Wants avahi-daemon, After avahi-daemon)
Fix systemd scriptlets.
Convert sysv initscript to systemd
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Tom Callaway <spot(a)fedoraproject.org> - 1:0.2.4.2-11
- improve systemd service (forking, wants avahi, order after avahi)
* Fri Sep 9 2011 Tom Callaway <spot(a)fedoraproject.org> - 1:0.2.4.2-10
- fix systemd scriptlets
* Thu Sep 8 2011 Tom Callaway <spot(a)fedoraproject.org> - 1:0.2.4.2-9
- convert to systemd
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #657494 - Providing native systemd file for upcoming F15 Feature Systemd
https://bugzilla.redhat.com/show_bug.cgi?id=657494
--------------------------------------------------------------------------------
================================================================================
nss-gui-0.3.10-1.fc16 (FEDORA-2011-12636)
GUI to manage contents of an NSS database
--------------------------------------------------------------------------------
Update Information:
Ensure compatibility with most recent Xulrunner packages.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Kai Engert <kaie(a)redhat.com> 0.3.10-1
- Update to 0.3.10 which is compatible with Xulrunner 6.*
--------------------------------------------------------------------------------
================================================================================
openconnect-3.12-1.fc16 (FEDORA-2011-12629)
Open client for Cisco AnyConnect VPN
--------------------------------------------------------------------------------
Update Information:
This update fixes a DTLS compatibility issue with the latest Cisco ASA firmware.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 David Woodhouse <David.Woodhouse(a)intel.com> - 3.12-1
* Update to 3.12. (Fix DTLS compatibility issue with new ASA firmware)
--------------------------------------------------------------------------------
================================================================================
osutil-2.0.1-2.fc16 (FEDORA-2011-12633)
Operating System Utilities JNI Package
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2011 Matthew Harmsen <mharmsen(a)redhat.com> 2.0.1-2
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
https://bugzilla.redhat.com/show_bug.cgi?id=734590
--------------------------------------------------------------------------------
================================================================================
php-5.3.8-2.fc16 (FEDORA-2011-12635)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
Provides MySQL Native Driver in new php-mysqlnd package.
Upstream documentation:
http://www.php.net/manual/en/mysqlnd.overview.php
This is a drop-in replacement of MySQL Client Library used by php-mysql package
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Remi Collet <remi(a)fedoraproject.org> 5.3.8-2
- add mysqlnd sub-package
- drop patch4, use --libdir to use /usr/lib*/php/build
- add patch to redirect mysql.sock (in mysqlnd)
--------------------------------------------------------------------------------
================================================================================
pki-console-9.0.4-1.fc16 (FEDORA-2011-12660)
Certificate System - PKI Console
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.4-1
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
https://bugzilla.redhat.com/show_bug.cgi?id=734590
--------------------------------------------------------------------------------
================================================================================
pki-core-9.0.14-1.fc16 (FEDORA-2011-12645)
Certificate System - PKI Core Components
--------------------------------------------------------------------------------
Update Information:
'pki-setup'
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
'pki-symkey'
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
'pki-native-tools'
'pki-util'
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
'pki-java-tools'
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
'pki-common'
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
'pki-selinux'
'pki-ca'
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
Bugzilla Bug #699809 - Convert CS to use systemd (alee)
'pki-silent'
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 9 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.14-1
- 'pki-setup'
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
- 'pki-symkey'
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
- 'pki-native-tools'
- 'pki-util'
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
- 'pki-java-tools'
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
- 'pki-common'
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
- 'pki-selinux'
- 'pki-ca'
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
- Bugzilla Bug #699809 - Convert CS to use systemd (alee)
- 'pki-silent'
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
* Tue Sep 6 2011 Ade Lee <alee(a)redhat.com> 9.0.13-1
- 'pki-setup'
- Bugzilla Bug #699809 - Convert CS to use systemd (alee)
- 'pki-ca'
- Bugzilla Bug #699809 - Convert CS to use systemd (alee)
- 'pki-common'
- Bugzilla Bug #699809 - Convert CS to use systemd (alee)
* Tue Aug 23 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.12-1
- 'pki-setup'
- Bugzilla Bug #712931 - CS requires too many ports
to be open in the FW (alee)
- 'pki-symkey'
- 'pki-native-tools'
- Bugzilla Bug #717643 - Fopen without NULL check and other Coverity
issues (awnuk)
- Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk)
- 'pki-util'
- 'pki-java-tools'
- 'pki-common'
- Bugzilla Bug #700522 - pki tomcat6 instances currently running
unconfined, allow server to come up when selinux disabled (alee)
- Bugzilla Bug #731741 - some CS.cfg nickname parameters not updated
correctly when subsystem cloned (using hsm) (alee)
- Bugzilla Bug #712931 - CS requires too many ports
to be open in the FW (alee)
- 'pki-selinux'
- Bugzilla Bug #712931 - CS requires too many ports
to be open in the FW (alee)
- 'pki-ca'
- Bugzilla Bug #712931 - CS requires too many ports
to be open in the FW (alee)
- 'pki-silent'
* Wed Aug 10 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.11-1
- 'pki-setup'
- Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
time - remove the inefficient sleeps (alee)
- 'pki-symkey'
- 'pki-native-tools'
- 'pki-util'
- 'pki-java-tools'
- Bugzilla Bug #724861 - DRMTool: fix duplicate "dn:" records by
renumbering "cn=<value>" (mharmsen)
- 'pki-common'
- Bugzilla Bug #717041 - Improve escaping of some enrollment inputs like
(jmagne, awnuk)
- Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
time - remove the inefficient sleeps (alee)
- Bugzilla Bug #708075 - Clone installation does not work over NAT
(alee)
- Bugzilla Bug #726785 - If replication fails while setting up a clone
it will wait forever (alee)
- Bugzilla Bug #728332 - xml output has changed on cert requests (awnuk)
- Bugzilla Bug #700505 - pki tomcat6 instances currently running
unconfined (alee)
- 'pki-selinux'
- Bugzilla Bug #700505 - pki tomcat6 instances currently running
unconfined (alee)
- 'pki-ca'
- Bugzilla Bug #728605 - RFE: increase default validity from 6mo to 2yrs
in IPA profile (awnuk)
- 'pki-silent'
- Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
time - remove the inefficient sleeps (alee)
* Fri Jul 22 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.10-1
- 'pki-setup'
- 'pki-symkey'
- 'pki-native-tools'
- 'pki-util'
- Bugzilla Bug #719007 - Key Constraint keyParameter being ignored
using an ECC CA to generate ECC certs from CRMF. (jmagne)
- Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding
for any component value which is equal to its default value (alee)
- 'pki-java-tools'
- 'pki-common'
- Bugzilla Bug #720510 - Console: Adding a certificate into nethsm
throws Token not found error. (jmagne)
- Bugzilla Bug #719007 - Key Constraint keyParameter being ignored
using an ECC CA to generate ECC certs from CRMF. (jmagne)
- Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding
for any component value which is equal to its default value (alee)
- Bugzilla Bug #722989 - Registering an agent when a subsystem is
created - does not log AUTHZ_SUCCESS event. (alee)
- 'pki-selinux'
- 'pki-ca'
- Bugzilla Bug #719113 - Add client usage flag to caIPAserviceCert
(awnuk)
- 'pki-silent'
* Thu Jul 14 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.9-1
- Updated release of 'jss'
- Updated release of 'tomcatjss' for Fedora 15
- 'pki-setup'
- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
(mharmsen)
- Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
(jdennis)
- Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
- 'pki-symkey'
- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
(mharmsen)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
- 'pki-native-tools'
- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
(mharmsen)
- Bugzilla Bug #717765 - TPS configuration: logging into security domain
from tps does not work with clientauth=want. (alee)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
- 'pki-util'
- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
(mharmsen)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
- 'pki-java-tools'
- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
(mharmsen)
- Bugzilla Bug #532548 - Tool to do DRM re-key (mharmsen)
- Bugzilla Bug #532548 - Tool to do DRM re-key (config file and record
processing) (mharmsen)
- Bugzilla Bug #532548 - Tool to do DRM re-key (tweaks) (mharmsen)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
- 'pki-common'
- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
(mharmsen)
- Bugzilla Bug #695403 - Editing signedaudit or transaction, system
logs throws 'Invalid protocol' for OCSP subsystems (alee)
- Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
- Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
populated in the CA signedAudit messages (alee)
- Bugzilla Bug #694143 - CA Agent not returning specified request (awnuk)
- Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
populated in the CA signedAudit messages (jmagne)
- Bugzilla Bug #698885 - Race conditions during IPA installation (alee)
- Bugzilla Bug #704792 - CC_LAB_EVAL: CA agent interface:
SubjectID=$Unidentified$ fails audit evaluation (jmagne)
- Bugzilla Bug #705914 - SCEP mishandles nicknames when processing
subsequent SCEP requests. (awnuk)
- Bugzilla Bug #661142 - Verification should fail when a revoked
certificate is added. (jmagne)
- Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs
for modify/add (alee)
- Bugzilla Bug #707416 - additional audit messages for GetCookie (alee)
- Bugzilla Bug #707607 - Published certificate summary has list of
non-published certificates with succeeded status (jmagne)
- Bugzilla Bug #717813 - EV_AUDIT_LOG_SHUTDOWN audit log not generated
for tps and ca on server shutdown (jmagne)
- Bugzilla Bug #697939 - DRM signed audit log message - operation should
be read instead of modify (jmagne)
- Bugzilla Bug #718427 - When audit log is full, server continue to
function. (alee)
- Bugzilla Bug #718607 - CC_LAB_EVAL: No AUTH message is generated in
CA's signedaudit log when a directory based user enrollment is
performed (jmagne)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
- 'pki-selinux'
- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
(mharmsen)
- Bugzilla Bug #720503 - RA and TPS require additional SELinux
permissions to run in "Enforcing" mode (alee)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
- 'pki-ca'
- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
(mharmsen)
- Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
(jdennis)
- Bugzilla Bug #699837 - service command is not fully backwards
compatible with Dogtag pki subsystems (mharmsen)
- Bugzilla Bug #649910 - Console: an auditor or agent can be added to an
administrator group. (jmagne)
- Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs
for modify/add (alee)
- Bugzilla Bug #716269 - make ra authenticated profiles non-visible on ee
pages (alee)
- Bugzilla Bug #718621 - CC_LAB_EVAL: PRIVATE_KEY_ARCHIVE_REQUEST occurs
for a revocation invoked by EE user (awnuk)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
- 'pki-silent'
- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
(mharmsen)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
* Wed May 25 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.8-2
- 'pki-setup'
- 'pki-symkey'
- 'pki-native-tools'
- 'pki-util'
- 'pki-java-tools'
- Added 'DRMTool.cfg' configuration file to inventory
- 'pki-common'
- 'pki-selinux'
- 'pki-ca'
- 'pki-silent'
* Wed May 25 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.8-1
- 'pki-setup'
- 'pki-symkey'
- 'pki-native-tools'
- 'pki-util'
- 'pki-java-tools'
- Bugzilla Bug #532548 - Tool to do DRM re-key
- 'pki-common'
- 'pki-selinux'
- 'pki-ca'
- 'pki-silent'
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #699809 - Convert certificate system to use systemd
https://bugzilla.redhat.com/show_bug.cgi?id=699809
[ 2 ] Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
https://bugzilla.redhat.com/show_bug.cgi?id=734590
--------------------------------------------------------------------------------
================================================================================
pki-kra-9.0.7-1.fc16 (FEDORA-2011-12628)
Certificate System - Data Recovery Manager
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
Bugzilla Bug #699809 - Convert CS to use systemd (alee)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.7-1
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
- Bugzilla Bug #699809 - Convert CS to use systemd (alee)
* Tue Sep 6 2011 Ade Lee <alee(a)redhat.com> 9.0.6-1
- Bugzilla Bug #699809 - Convert CS to use systemd (alee)
* Tue Aug 23 2011 Ade Lee <alee(a)redhat.com> 9.0.5-1
- Bugzilla Bug #712931 - CS requires too many ports
to be open in the FW
* Thu Jul 14 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.4-1
- Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
(jdennis)
- Bugzilla Bug #699837 - service command is not fully backwards
compatible with Dogtag pki subsystems (mharmsen)
- Bugzilla Bug #649910 - Console: an auditor or agent can be added to an
administrator group. (jmagne)
- Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs
for modify/add (alee)
- Bugzilla Bug #714068 - KRA: remove monitor servlet from kra (alee)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
- Updated release of 'jss'
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #699809 - Convert certificate system to use systemd
https://bugzilla.redhat.com/show_bug.cgi?id=699809
[ 2 ] Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
https://bugzilla.redhat.com/show_bug.cgi?id=734590
--------------------------------------------------------------------------------
================================================================================
pki-ocsp-9.0.6-1.fc16 (FEDORA-2011-12663)
Certificate System - Online Certificate Status Protocol Manager
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
Bugzilla Bug #699809 - Convert CS to use systemd (alee)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.6-1
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
- Bugzilla Bug #699809 - Convert CS to use systemd (alee)
* Tue Sep 6 2011 Ade Lee <alee(a)redhat.com> 9.0.5-1
- Bugzilla Bug #699809 - Convert CS to use systemd (alee)
* Tue Aug 23 2011 Ade Lee <alee(a)redhat.com> 9.0.4-1
- Bugzilla Bug #712931 - CS requires too many ports
to be open in the FW
* Thu Jul 14 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.3-1
- Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
(jdennis)
- Bugzilla Bug #699837 - service command is not fully backwards
compatible with Dogtag pki subsystems (mharmsen)
- Bugzilla Bug #649910 - Console: an auditor or agent can be added to an
administrator group. (jmagne)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
- Updated release of 'jss'
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #699809 - Convert certificate system to use systemd
https://bugzilla.redhat.com/show_bug.cgi?id=699809
[ 2 ] Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
https://bugzilla.redhat.com/show_bug.cgi?id=734590
--------------------------------------------------------------------------------
================================================================================
pki-ra-9.0.3-1.fc16 (FEDORA-2011-12654)
Certificate System - Registration Authority
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
Bugzilla Bug #699364 - PKI-RA instance not created successfully (alee)
Bugzilla Bug #699837 - service command is not fully backwards
compatible with Dogtag pki subsystems (mharmsen)
Bugzilla Bug #717765 - TPS configuration: logging into security domain
from tps does not work with clientauth=want. (alee)
Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 14 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.3-1
- Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
- Bugzilla Bug #699364 - PKI-RA instance not created successfully (alee)
- Bugzilla Bug #699837 - service command is not fully backwards
compatible with Dogtag pki subsystems (mharmsen)
- Bugzilla Bug #717765 - TPS configuration: logging into security domain
from tps does not work with clientauth=want. (alee)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #669226 - Remove Legacy Build System
https://bugzilla.redhat.com/show_bug.cgi?id=669226
[ 2 ] Bug #694569 - parameter used by pkiremove not updated
https://bugzilla.redhat.com/show_bug.cgi?id=694569
--------------------------------------------------------------------------------
================================================================================
pki-tks-9.0.6-1.fc16 (FEDORA-2011-12659)
Certificate System - Token Key Service
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
Bugzilla Bug #699809 - Convert CS to use systemd (alee)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.6-1
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
- Bugzilla Bug #699809 - Convert CS to use systemd (alee)
* Tue Sep 6 2011 Ade Lee <alee(a)redhat.com> 9.0.5-1
- Bugzilla Bug #699809 - Convert CS to use systemd
* Tue Aug 23 2011 Ade Lee <alee(a)redhat.com> 9.0.4-1
- Bugzilla Bug #712931 - CS requires too many ports
to be open in the FW
* Thu Jul 14 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.3-1
- Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
(jdennis)
- Bugzilla Bug #699837 - service command is not fully backwards
compatible with Dogtag pki subsystems (mharmsen)
- Bugzilla Bug #649910 - Console: an auditor or agent can be added to an
administrator group. (jmagne)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
- Updated release of 'jss'
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #699809 - Convert certificate system to use systemd
https://bugzilla.redhat.com/show_bug.cgi?id=699809
[ 2 ] Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
https://bugzilla.redhat.com/show_bug.cgi?id=734590
--------------------------------------------------------------------------------
================================================================================
pki-tps-9.0.6-1.fc16 (FEDORA-2011-12626)
Certificate System - Token Processing System
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #725572 - Starting TPS subsystem with no pre-existing audit
log file does not write audit messages.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 10 2011 Jack Magne <jmagne(a)redhat.com> 9.0.6-1
- Bugzilla Bug #725572 - Starting TPS subsystem with no pre-existing audit
log file does not write audit messages.
* Thu Jul 14 2011 Matthew Harmsen <mharmsen(a)redhat.com> 9.0.5-1
- Bugzilla Bug #697035 - TPS database schema not populated correctly
(alee)
- Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
- Bugzilla Bug #696851 - TPS crashes that cause AuditVerify on TPS audit
logs - some of the signatures are failing. (jmagne)
- Bugzilla Bug #699837 - service command is not fully backwards
compatible with Dogtag pki subsystems (mharmsen)
- Bugzilla Bug #696443 - ESC display Smartcard renewal operation success
for a failed renewal operation. (jmagne)
- Bugzilla Bug #707095 - tps delete user operation should check for roles
(not have them passed in) (alee)
- Bugzilla Bug #717813 - EV_AUDIT_LOG_SHUTDOWN audit log not generated
for tps and ca on server shutdown (alee)
- Bugzilla Bug #717765 - TPS configuration: logging into security domain
from tps does not work with clientauth=want. (alee)
- Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
--------------------------------------------------------------------------------
================================================================================
python-djblets-0.6.11-1.fc16 (FEDORA-2011-12650)
A collection of useful classes and functions for Django
--------------------------------------------------------------------------------
Update Information:
* ReviewBoard
- Security Updates:
* Review Board 1.6.1 now requires Django 1.3.1. Django 1.3.1 contains a number of
important security fixes.
* Bug Fixes:
* Fixed the Dashboard counters showing up as 0 or negative numbers
* python-djblets:
- djblets.testing:
* Added a new TestCase class and @add_fixtures decorator for
having fixtures specific to text functions.
- djblets.util:
* Fixed defaults on counter fields on new model instances.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Stephen Gallagher <sgallagh(a)redhat.com> - 0.6.11-1
- djblets.testing:
* Added a new TestCase class and @add_fixtures decorator for
having fixtures specific to text functions.
- djblets.util:
* Fixed defaults on counter fields on new model instances.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #737254 - ReviewBoard-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=737254
--------------------------------------------------------------------------------
================================================================================
qemu-0.15.0-4.fc16 (FEDORA-2011-12656)
QEMU is a FAST! processor emulator
--------------------------------------------------------------------------------
Update Information:
Enable QEMU tracing with SystemTAP/DTrace and CURL block devices
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Daniel P. Berrange <berrange(a)redhat.com> - 2:0.15.0-4
- Enable DTrace tracing backend for SystemTAP (rhbz #737763)
- Enable build with curl (rhbz #737006)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #737763 - [Fedora FEAT] QEMU static tracing framework
https://bugzilla.redhat.com/show_bug.cgi?id=737763
[ 2 ] Bug #737006 - Enable curl support.
https://bugzilla.redhat.com/show_bug.cgi?id=737006
--------------------------------------------------------------------------------
================================================================================
rabbitvcs-0.14.2.1-2.fc16 (FEDORA-2011-12651)
Graphical user interface to version control systems
--------------------------------------------------------------------------------
Update Information:
Updates to RabbitVCS 0.14.2.1, removes nautilus dependency on rabbitvcs-core, adds thunar
support
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Juan Rodriguez <nushio(a)fedoraproject.org> - 0.14.2.1-2
- Removes Nautilus dependency on rabbitvcs-core
* Tue Sep 13 2011 Juan Rodriguez <nushio(a)fedoraproject.org> - 0.14.2.1-1
- Updated package to 0.14.2.1
- Added Thunar Plugin
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #717485 - Dependencies to Nautilus
https://bugzilla.redhat.com/show_bug.cgi?id=717485
[ 2 ] Bug #717799 - Update Version to 0.14.2.1
https://bugzilla.redhat.com/show_bug.cgi?id=717799
[ 3 ] Bug #732741 - Adding rabbitvcs-thunar
https://bugzilla.redhat.com/show_bug.cgi?id=732741
--------------------------------------------------------------------------------
================================================================================
rubygem-rack-restful_submit-1.2.1-1.fc16 (FEDORA-2011-12649)
Allows RESTful routing without Javascript and multiple submit buttons
--------------------------------------------------------------------------------
Update Information:
Updated to rack-restful_submit 1.2.1.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 29 2011 Vít Ondruch <vondruch(a)redhat.com> - 1.2.1-1
- Updated to rack-restful_submit 1.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #733641 - rubygem-rack-restful_submit-1.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=733641
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.10.0-28.fc16 (FEDORA-2011-12631)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
- Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files
- We want any file type that is created in /tmp by a process running as initrc_t to be
labeled initrc_tmp_t
- Allow collectd to read hardware state information
- Add loop_control_device_t
- Allow mdadm to request kernel to load module
- Allow domains that start other domains via systemctl to search unit dir
- systemd_tmpfiles, needs to list any file systems mounted on /tmp
- Label content unde /var/run/user/NAME/dconf as config_home_t
- Allow sa-update to execute shell
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.10.0-28
- Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files
- We want any file type that is created in /tmp by a process running as initrc_t to be
labeled initrc_tmp_t
* Tue Sep 13 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.10.0-27
- Allow collectd to read hardware state information
- Add loop_control_device_t
- Allow mdadm to request kernel to load module
- Allow domains that start other domains via systemctl to search unit dir
- systemd_tmpfiles, needs to list any file systems mounted on /tmp
- No one can explain why radius is listing the contents of /tmp, so we will dontaudit
- If I can manage etc_runtime files, I should be able to read the links
- Dontaudit hostname writing to mock library chr_files
- Have gdm_t setup labeling correctly in users home dir
- Label content unde /var/run/user/NAME/dconf as config_home_t
- Allow sa-update to execute shell
- Make ssh-keygen working with fips_enabled
- Make mock work for staff_t user
- Tighten security on mock_t
* Fri Sep 9 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.10.0-26
- removing unconfined_notrans_t no longer necessary
- Clean up handling of secure_mode_insmod and secure_mode_policyload
- Remove unconfined_mount_t
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #734928 - certmaster fails to start on f16 (selinux denial)
https://bugzilla.redhat.com/show_bug.cgi?id=734928
[ 2 ] Bug #736530 - mdadm fails to auto-start md arrays on f16-beta.tc1 live media due
to avc denials
https://bugzilla.redhat.com/show_bug.cgi?id=736530
[ 3 ] Bug #737382 - SELinux is preventing ssh-keygen from 'read' accesses on the
file fips_enabled.
https://bugzilla.redhat.com/show_bug.cgi?id=737382
[ 4 ] Bug #737837 - systemd-tmpfiles: Failed to set security context ... for /var:
Permission denied
https://bugzilla.redhat.com/show_bug.cgi?id=737837
--------------------------------------------------------------------------------
================================================================================
spamassassin-3.3.2-7.fc16 (FEDORA-2011-12655)
Spam filter for email which can be invoked from mail delivery agents
--------------------------------------------------------------------------------
Update Information:
Fix init
Use systemd for init in f16 and higher, use sysvinit for f15 and lower
Add systemd unit file
Use systemd for init in f16 and higher, use sysvinit for f15 and lower
Add systemd unit file
Use systemd for init in f16 and higher, use sysvinit for f15 and lower
Add systemd unit file
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 Nick Bebout <nb(a)fedoraproject.org> - 3.3.2-7
- Use sysvinit on F15, not systemd
* Thu Sep 8 2011 Nick Bebout <nb(a)fedoraproject.org> - 3.3.2-6
- Don't install sysvinit script if using systemd
* Wed Sep 7 2011 Jesse Keating <jkeating(a)redhat.com> - 3.3.2-5
- Add details for RHEL 7
* Sat Aug 13 2011 Nick Bebout <nb(a)fedoraproject.org> - 3.3.2-4
- Build with systemd unit file for f16 and f17
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #656911 - provide native spamd.service systemd file
https://bugzilla.redhat.com/show_bug.cgi?id=656911
--------------------------------------------------------------------------------
================================================================================
sysstat-10.0.2-2.fc16 (FEDORA-2011-12646)
The sar and iostat system monitoring commands
--------------------------------------------------------------------------------
Update Information:
Fix libdir pathing in systemd service file to always be correct.
Convert sysv initscript to systemd.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Tom Callaway <spot(a)fedoraproject.org> - 10.0.2-2
- fix libdir pathing in systemd service file
* Mon Sep 12 2011 Tom Callaway <spot(a)fedoraproject.org> - 10.0.2-1
- update to 10.0.2
- convert to systemd
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #719637 - Provide native systemd unit file
https://bugzilla.redhat.com/show_bug.cgi?id=719637
--------------------------------------------------------------------------------
================================================================================
tomcatjss-6.0.1-1.fc16 (FEDORA-2011-12630)
JSSE implementation using JSS for Tomcat
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 Matthew Harmsen <mharmsen(a)redhat.com> 6.0.1-1
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
https://bugzilla.redhat.com/show_bug.cgi?id=734590
--------------------------------------------------------------------------------
================================================================================
tracker-0.12.0-1.fc16 (FEDORA-2011-11668)
Desktop-neutral search tool and indexer
--------------------------------------------------------------------------------
Update Information:
Update to 0.12.0 stable release.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 9 2011 Deji Akingunola <dakingun(a)gmail.com> - 0.12.0-1
- Update to 0.12.0 stable release
- Re-enable the evolution plugin
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #737262 - [abrt] tracker-0.11.2-1.fc16: Process /usr/libexec/tracker-miner-fs
was killed by signal 5 (SIGTRAP)
https://bugzilla.redhat.com/show_bug.cgi?id=737262
[ 2 ] Bug #736956 - [abrt] tracker-0.11.2-1.fc16: discoverer_init_and_run: Process
/usr/libexec/tracker-extract was killed by signal 8 (SIGFPE)
https://bugzilla.redhat.com/show_bug.cgi?id=736956
[ 3 ] Bug #736598 - [abrt] tracker-0.11.2-1.fc16: Process /usr/libexec/tracker-extract
was killed by signal 8 (SIGFPE)
https://bugzilla.redhat.com/show_bug.cgi?id=736598
--------------------------------------------------------------------------------
================================================================================
ukij-tuz-fonts-3.10-1.fc16 (FEDORA-2011-12664)
Uyghur Computer Science Association (UKIJ) Unicode fonts
--------------------------------------------------------------------------------
Update Information:
Update to 3.10
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Peng Wu <pwu(a)redhat.com> - 3.10-1
- Update to 3.10
--------------------------------------------------------------------------------
================================================================================
uucp-1.07-26.fc16 (FEDORA-2011-12665)
A set of utilities for operations between systems
--------------------------------------------------------------------------------
Update Information:
- provide native systemd services (#737730)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Ondrej Vasik <ovasik(a)redhat.com> - 1.07-26
- provide native systemd services (#737730)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #737730 - Provide native systemd services
https://bugzilla.redhat.com/show_bug.cgi?id=737730
--------------------------------------------------------------------------------
================================================================================
xorg-x11-drv-geode-2.11.12-2.fc16 (FEDORA-2011-12648)
Xorg X11 AMD Geode video driver
--------------------------------------------------------------------------------
Update Information:
Rebuild for Xorg server 1.11
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 13 2011 Daniel Drake <dsd(a)laptop.org> - 2.11.12-2
- rebuild for Xorg ABI version 11
--------------------------------------------------------------------------------
================================================================================
xorg-x11-drv-qxl-0.0.21-5.fc16 (FEDORA-2011-12647)
Xorg X11 qxl video driver
--------------------------------------------------------------------------------
Update Information:
- Rebase to latest upstream release
- Enable building of the Xspice X-server and put it in its own xorg-x11-server-Xspice
package
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 12 2011 Hans de Goede <hdegoede(a)redhat.com> - 0.0.21-5
- Rebase to latest upstream release
- Enable building of the Xspice X-server and put it in its own
xorg-x11-server-Xspice package
--------------------------------------------------------------------------------