The following Fedora 18 Security updates need testing:
Age URL
5
https://admin.fedoraproject.org/updates/FEDORA-2012-12290/roundcubemail-0...
5
https://admin.fedoraproject.org/updates/FEDORA-2012-12333/GraphicsMagick-...
4
https://admin.fedoraproject.org/updates/FEDORA-2012-12392/ocaml-xml-light...
10
https://admin.fedoraproject.org/updates/FEDORA-2012-11962/phpMyAdmin-3.5....
9
https://admin.fedoraproject.org/updates/FEDORA-2012-11981/wireshark-1.8.2...
4
https://admin.fedoraproject.org/updates/FEDORA-2012-12418/jabberd-2.2.16-...
1
https://admin.fedoraproject.org/updates/FEDORA-2012-12293/gimp-2.8.2-1.fc18
0
https://admin.fedoraproject.org/updates/FEDORA-2012-12736/tor-0.2.2.38-18...
The following builds have been pushed to Fedora 18 updates-testing
amarok-2.6.0-3.fc18
apg-2.3.0b-18.fc18
byobu-5.21-4.fc18
cdlabelgen-4.2.0-1.fc18
dhcp-forwarder-0.10-1803.fc18
dircproxy-1.2.0-0.16.RC1.fc18
ip-sentinel-0.12-1801.fc18
kdepim-4.9.0-4.fc18
leafnode-1.11.8-8.fc18
milter-greylist-4.2.7-1801.fc18
mingw-SDL_image-1.2.12-7.fc18
mingw-cximage-600-7.fc18
mingw-libgeotiff-1.3.0-0.7.svn1664.fc18
mingw-libtiff-4.0.2-1.fc18
mingw-qt-4.8.2-3.fc18
mingw-wxWidgets-2.8.12-12.fc18
python-kombu-2.4.3-1.fc18
rosa-launcher-0.34.18-1.fc18
spamassassin-3.3.2-13.fc18
tor-0.2.2.38-1801.fc18
xorg-x11-drv-qxl-0.0.22-5.20120718gitde6620788.fc18
Details about builds:
================================================================================
amarok-2.6.0-3.fc18 (FEDORA-2012-12734)
Media player
--------------------------------------------------------------------------------
Update Information:
Add a dependency on kdemultimedia-kio_audiocd, to ensure proper audiocd-playing
capability.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Rex Dieter <rdieter(a)fedoraproject.org> 2.6.0-3
- Requires: kdemultimedia-kio_audiocd/audiocd-kio
* Wed Aug 22 2012 Rex Dieter <rdieter(a)fedoraproject.org> 2.6.0-2.1
- use liblastfm1 on f16/f17 too
--------------------------------------------------------------------------------
================================================================================
apg-2.3.0b-18.fc18 (FEDORA-2012-12724)
Automated Password Generator for random password generation
--------------------------------------------------------------------------------
Update Information:
Add systemd macros for presets.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Kevin Fenzi <kevin(a)scrye.com> 2.3.0b-18
- Add systemd preset macros. Fixes bug #850026
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850026 - Introduce new systemd-rpm macros in apg spec file
https://bugzilla.redhat.com/show_bug.cgi?id=850026
--------------------------------------------------------------------------------
================================================================================
byobu-5.21-4.fc18 (FEDORA-2012-12730)
Light-weight, configurable window manager built upon GNU screen
--------------------------------------------------------------------------------
Update Information:
fixed desktop file handling and documentation
new version released
updated to latest version
issue with missing help file fixed
updated to latest version
issue with missing help file fixed
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Jan Klepek <jan.klepek at, gmail.com> - 5.21-4
- desktop file handling fixed
* Sat Aug 25 2012 Jan Klepek <jan.klepek at, gmail.com> - 5.21-3
- another fix into documentation
* Sat Aug 18 2012 Jan Klepek <jan.klepek at, gmail.com> - 5.21-2
- fixed documentation
* Sat Aug 18 2012 Jan Klepek <jan.klepek at, gmail.com> - 5.21-1
- new minor release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #634542 - byobu-3.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=634542
[ 2 ] Bug #656852 - [abrt] byobu-3.4-2.fc14: byobu-config:377:writewindows:IOError:
[Errno 2] No such file or directory: '/home/costa/.byobu/windows'
https://bugzilla.redhat.com/show_bug.cgi?id=656852
[ 3 ] Bug #666845 - [abrt] byobu-3.4-2.fc14: byobu-config:340:writestatus:IOError:
[Errno 2] No existe el fichero o el directorio: '/home/bass/.byobu/status'
https://bugzilla.redhat.com/show_bug.cgi?id=666845
[ 4 ] Bug #797371 - [abrt] byobu-4.41-1.fc16: byobu-config:132:help:IOError: [Errno 2]
No such file or directory: '/home/pan/.byobu//usr/share/doc/byobu/help.txt'
https://bugzilla.redhat.com/show_bug.cgi?id=797371
[ 5 ] Bug #821130 - byobu-5.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=821130
--------------------------------------------------------------------------------
================================================================================
cdlabelgen-4.2.0-1.fc18 (FEDORA-2012-12732)
Generates frontcards and traycards for inserting in CD jewelcases
--------------------------------------------------------------------------------
Update Information:
* Support for double-depth slim DVD cases. --slim-double-case option added. Patch sent by
Dominique Dumont dod(a)debian.org
* Minor fixes: -y fixed to take arg -y [xoffset,]yoffset just like --page-offset
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Dominik 'Rathann' Mierzejewski <rpm(a)greysector.net>
4.2.0-1
- updated to 4.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #812811 - cdlabelgen-4.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=812811
--------------------------------------------------------------------------------
================================================================================
dhcp-forwarder-0.10-1803.fc18 (FEDORA-2012-12737)
DHCP relay agent
--------------------------------------------------------------------------------
Update Information:
.
.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 22 2012 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> -
0.10-1803
- fixed upgrade path by obsoleting -upstart
* Sun Aug 19 2012 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> -
0.10-1802
- disabled upstart
--------------------------------------------------------------------------------
================================================================================
dircproxy-1.2.0-0.16.RC1.fc18 (FEDORA-2012-12735)
IRC proxy server
--------------------------------------------------------------------------------
Update Information:
Add systemd macros for presets.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Kevin Fenzi <kevin(a)scrye.com> 1.2.0-0.16.RC1
- Add systemd macros for presets. Fixes bug #850091
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850091 - Introduce new systemd-rpm macros in dircproxy spec file
https://bugzilla.redhat.com/show_bug.cgi?id=850091
--------------------------------------------------------------------------------
================================================================================
ip-sentinel-0.12-1801.fc18 (FEDORA-2012-12727)
Tool to prevent unauthorized usage of IP addresses
--------------------------------------------------------------------------------
Update Information:
.
.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 22 2012 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> -
0.12-1801
- fixed upgrade path by obsoleting -upstart
* Sun Aug 19 2012 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> -
0.12-1800
- conditionalized upstart and disabled it by default
--------------------------------------------------------------------------------
================================================================================
kdepim-4.9.0-4.fc18 (FEDORA-2012-12731)
KDE PIM (Personal Information Manager) applications
--------------------------------------------------------------------------------
Update Information:
Includes
* upstream bugfix for "filtering removes email's content" (
http://bugs.kde.org/295484 )
* QR code support in kaddressbook
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Rex Dieter <rdieter(a)fedoraproject.org> 7:4.9.0-4
- BR: prison-devel
* Sat Aug 25 2012 Rex Dieter <rdieter(a)fedoraproject.org> 7:4.9.0-3
- filtering removes email's content (kde#295484)
* Fri Aug 17 2012 Lukas Tinkl <ltinkl(a)redhat.com> - 7:4.9.0-2
- Resolves: #813257 - Ktimetracker shows only an empty window
--------------------------------------------------------------------------------
================================================================================
leafnode-1.11.8-8.fc18 (FEDORA-2012-12725)
Leaf site offline NNTP server
--------------------------------------------------------------------------------
Update Information:
Add systemd macros for presets.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Kevin Fenzi <kevin(a)scrye.com> 1.11.8-8
- Add systemd macros for presets. Fixes bug #850182
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850182 - Introduce new systemd-rpm macros in leafnode spec file
https://bugzilla.redhat.com/show_bug.cgi?id=850182
--------------------------------------------------------------------------------
================================================================================
milter-greylist-4.2.7-1801.fc18 (FEDORA-2012-12738)
Milter for greylisting, the next step in the spam control war
--------------------------------------------------------------------------------
Update Information:
.
.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 22 2012 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> -
4.2.7-1801
- fixed upgrade path by obsoleting -upstart
* Sun Aug 19 2012 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> -
4.2.7-1800
- disabled upstart
--------------------------------------------------------------------------------
================================================================================
mingw-SDL_image-1.2.12-7.fc18 (FEDORA-2012-12733)
MinGW Windows port of the Image loading library for SDL
--------------------------------------------------------------------------------
Update Information:
Update to libtiff 4.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 1.2.12-7
- Rebuild against latest libtiff
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850919 - Please update mingw-libtiff to latest released version from
upstream
https://bugzilla.redhat.com/show_bug.cgi?id=850919
--------------------------------------------------------------------------------
================================================================================
mingw-cximage-600-7.fc18 (FEDORA-2012-12733)
MinGW Windows CxImage manipulation library
--------------------------------------------------------------------------------
Update Information:
Update to libtiff 4.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 6.0.0-7
- Rebuild against latest libtiff
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850919 - Please update mingw-libtiff to latest released version from
upstream
https://bugzilla.redhat.com/show_bug.cgi?id=850919
--------------------------------------------------------------------------------
================================================================================
mingw-libgeotiff-1.3.0-0.7.svn1664.fc18 (FEDORA-2012-12733)
GeoTIFF format library
--------------------------------------------------------------------------------
Update Information:
Update to libtiff 4.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Erik van Pienbroek <epienbro(a)fedoraproject.org> -
1.3.0-0.7.svn1664
- Rebuild against latest libtiff
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850919 - Please update mingw-libtiff to latest released version from
upstream
https://bugzilla.redhat.com/show_bug.cgi?id=850919
--------------------------------------------------------------------------------
================================================================================
mingw-libtiff-4.0.2-1.fc18 (FEDORA-2012-12733)
MinGW Windows port of the LibTIFF library
--------------------------------------------------------------------------------
Update Information:
Update to libtiff 4.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 4.0.2-1
- Update to 4.0.2 (RHBZ #850919)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850919 - Please update mingw-libtiff to latest released version from
upstream
https://bugzilla.redhat.com/show_bug.cgi?id=850919
--------------------------------------------------------------------------------
================================================================================
mingw-qt-4.8.2-3.fc18 (FEDORA-2012-12733)
Qt for Windows
--------------------------------------------------------------------------------
Update Information:
Update to libtiff 4.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 4.8.2-3
- Rebuild against latest libtiff
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850919 - Please update mingw-libtiff to latest released version from
upstream
https://bugzilla.redhat.com/show_bug.cgi?id=850919
--------------------------------------------------------------------------------
================================================================================
mingw-wxWidgets-2.8.12-12.fc18 (FEDORA-2012-12733)
MinGW port of the wxWidgets GUI library
--------------------------------------------------------------------------------
Update Information:
Update to libtiff 4.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 2.8.12-12
- Rebuild against latest libtiff
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850919 - Please update mingw-libtiff to latest released version from
upstream
https://bugzilla.redhat.com/show_bug.cgi?id=850919
--------------------------------------------------------------------------------
================================================================================
python-kombu-2.4.3-1.fc18 (FEDORA-2012-12729)
AMQP Messaging Framework for Python
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 26 2012 Matthias Runge <mrunge(a)matthias-runge.de> - 2.4.3-1
- update to new upstream version 2.4.3
* Thu Aug 23 2012 Matthias Runge <mrunge(a)matthias-runge.de> - 2.4.0-1
- update to new upstream version 2.4.0
--------------------------------------------------------------------------------
================================================================================
rosa-launcher-0.34.18-1.fc18 (FEDORA-2012-12726)
ROSA Desktop Application Launcher
--------------------------------------------------------------------------------
Update Information:
Updates to latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 26 2012 Joseph Marrero <jmarrero(a)fedoraproject.org> 0.34.18-1
- Update to rosa-launcher-0.34.18 and fix source.
--------------------------------------------------------------------------------
================================================================================
spamassassin-3.3.2-13.fc18 (FEDORA-2012-12728)
Spam filter for email which can be invoked from mail delivery agents
--------------------------------------------------------------------------------
Update Information:
Add systemd macros for presets.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 25 2012 Kevin Fenzi <kevin(a)scrye.com> 3.3.2-13
- Add systemd macros for presets. Fixes bug #850320
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850320 - Introduce new systemd-rpm macros in spamassassin spec file
https://bugzilla.redhat.com/show_bug.cgi?id=850320
--------------------------------------------------------------------------------
================================================================================
tor-0.2.2.38-1801.fc18 (FEDORA-2012-12736)
Anonymizing overlay network for TCP (The onion router)
--------------------------------------------------------------------------------
Update Information:
.
.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 22 2012 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> -
0.2.2.38-1801
- fixed upgrade path by obsoleting -upstart
* Sun Aug 19 2012 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> -
0.2.2.38-1800
- updated to 0.2.2.38
- CVE-2012-3517: Read from freed memory and double free by processing
failed DNS request
- conditionalized upstart and disabled it by default
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #849949 - CVE-2012-3517 tor: Read from freed memory and double free by
processing failed DNS request
https://bugzilla.redhat.com/show_bug.cgi?id=849949
--------------------------------------------------------------------------------
================================================================================
xorg-x11-drv-qxl-0.0.22-5.20120718gitde6620788.fc18 (FEDORA-2012-12739)
Xorg X11 qxl video driver
--------------------------------------------------------------------------------
Update Information:
fix crash after 10 minutes by updating an uxa method signature. Requires restart of guest
X server.
Fix breakage from xserver screen privates introduction.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 26 2012 Alon Levy <alevy(a)redhat.com>
- fix uxa_xorg_enable_disable_fb_access - 0.0.22-5.20120718gitde6620788 (#844463)
* Thu Aug 23 2012 Alon Levy <alevy(a)redhat.com>
- fix break from introduction of screen privates - 0.0.22-4.20120718gitde6620788
(#844463)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #844463 - Xorg blows assertion at startup: Xorg: privates.c:560:
dixPrivatesSize: Assertion `!screen_specific_private[type]' failed.
https://bugzilla.redhat.com/show_bug.cgi?id=844463
--------------------------------------------------------------------------------