The following Fedora 18 Security updates need testing:
Age URL
188
https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2...
35
https://admin.fedoraproject.org/updates/FEDORA-2013-17195/spice-gtk-0.18-...
32
https://admin.fedoraproject.org/updates/FEDORA-2013-17431/thunderbird-17....
29
https://admin.fedoraproject.org/updates/FEDORA-2013-17635/wireshark-1.10....
28
https://admin.fedoraproject.org/updates/FEDORA-2013-17853/davfs2-1.4.7-3....
26
https://admin.fedoraproject.org/updates/FEDORA-2013-17912/chicken-4.8.0.4...
15
https://admin.fedoraproject.org/updates/FEDORA-2013-18647/gnupg-1.4.15-1....
14
https://admin.fedoraproject.org/updates/FEDORA-2013-18802/phpMyAdmin-3.5....
7
https://admin.fedoraproject.org/updates/FEDORA-2013-19307/GraphicsMagick-...
7
https://admin.fedoraproject.org/updates/FEDORA-2013-19271/scipy-0.12.1-1....
7
https://admin.fedoraproject.org/updates/FEDORA-2013-18911/ReviewBoard-1.7...
6
https://admin.fedoraproject.org/updates/FEDORA-2013-19458/bugzilla-4.2.7-...
6
https://admin.fedoraproject.org/updates/FEDORA-2013-19452/libguestfs-1.20...
6
https://admin.fedoraproject.org/updates/FEDORA-2013-19472/python-crypto-2...
6
https://admin.fedoraproject.org/updates/FEDORA-2013-19491/libuv-0.10.18-1...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-19648/mysql-5.5.34-1....
2
https://admin.fedoraproject.org/updates/FEDORA-2013-19745/roundcubemail-0...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-19976/mod_nss-1.0.8-2...
The following Fedora 18 Critical Path updates have yet to be approved:
Age URL
258
https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5...
11
https://admin.fedoraproject.org/updates/FEDORA-2013-19021/taglib-1.9.1-1....
11
https://admin.fedoraproject.org/updates/FEDORA-2013-19026/python-markupsa...
7
https://admin.fedoraproject.org/updates/FEDORA-2013-19289/gdisk-0.8.8-1.fc18
7
https://admin.fedoraproject.org/updates/FEDORA-2013-19292/usbmuxd-1.0.8-1...
7
https://admin.fedoraproject.org/updates/FEDORA-2013-19232/gnome-abrt-0.3....
7
https://admin.fedoraproject.org/updates/FEDORA-2013-19268/qtwebkit-2.3.3-...
6
https://admin.fedoraproject.org/updates/FEDORA-2013-19456/device-mapper-p...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-19677/kernel-3.11.6-1...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-19998/sane-backends-1...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-19903/openssl-1.0.1e-...
The following builds have been pushed to Fedora 18 updates-testing
ghc-rpm-macros-0.95.14-2.fc18
graphite-web-0.9.12-5.fc18
kde-plasma-applicationname-1.9-1.fc18
kde-plasma-nm-0.9.3.1-5.fc18
libnm-qt-0.9.0.1-1.fc18
libpgf-6.12.27-0.1.svn119.fc18
mate-doc-utils-1.6.2-1.fc18
mate-notification-daemon-1.6.1-1.fc18
mod_nss-1.0.8-24.fc18
otf2-1.2.1-4.fc18
php-zmq-1.0.8-2.fc18
pragha-1.1.2.2-1.fc18
python-carbon-0.9.12-3.fc18
sane-backends-1.0.24-3.fc18
skeinforge-12.03.14-16.fc18
wordpress-3.7-1.fc18
Details about builds:
================================================================================
ghc-rpm-macros-0.95.14-2.fc18 (FEDORA-2013-19990)
RPM macros for building packages for GHC
--------------------------------------------------------------------------------
Update Information:
- Add %ghcpkgdocdir macro, use %_pkgdocdir
- Drop redundant prelink requires
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 25 2013 Jens Petersen <petersen(a)redhat.com> - 0.95.14-2
- remove redundant prelink requires
* Fri Oct 25 2013 Jens Petersen <petersen(a)redhat.com> - 0.95.14-1
- add ghcpkgdocdir
- use _pkgdocdir
--------------------------------------------------------------------------------
================================================================================
graphite-web-0.9.12-5.fc18 (FEDORA-2013-19991)
A Django webapp for enterprise scalable realtime graphing
--------------------------------------------------------------------------------
Update Information:
Patch for fix loading dashboards by name (RHBZ#1014349)
Patch for log name of metric that throws exception for CarbonLink (RHBZ#1014349)
Add deque to the PICKLE_SAFE filter (RHBZ#1014356)
Merge in EL5 conditionals for single spec
Remove logrotate configuration as it conflicts with internal log rotation (RHBZ#1008616)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 1 2013 Jonathan Steffan <jsteffan(a)fedoraproject.org> - 0.9.12-5
- Patch for fix loading dashboards by name (RHBZ#1014349)
- Patch for log name of metric that throws exception for CarbonLink (RHBZ#1014349)
- Add deque to the PICKLE_SAFE filter (RHBZ#1014356)
- Merge in EL5 conditionals for single spec
* Mon Sep 30 2013 Jonathan Steffan <jsteffan(a)fedoraproject.org> - 0.9.12-4
- Remove logrotate configuration as it conflicts with internal
log rotation (RHBZ#1008616)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1008616 - graphite-web cannot use logrotate; conflicts with internal log
rotation
https://bugzilla.redhat.com/show_bug.cgi?id=1008616
[ 2 ] Bug #1014349 - Backport fixes to graphite-web 0.9.12
https://bugzilla.redhat.com/show_bug.cgi?id=1014349
[ 3 ] Bug #1014356 - graphite-web CarbonLink error: UnpicklingError: Attempting to
unpickle unsafe module collections
https://bugzilla.redhat.com/show_bug.cgi?id=1014356
--------------------------------------------------------------------------------
================================================================================
kde-plasma-applicationname-1.9-1.fc18 (FEDORA-2013-19974)
QML plasmoid to display the application title of the focused window
--------------------------------------------------------------------------------
Update Information:
New upstream version.
Note, if you was already using this applet, the configuration from v1.7 cannot be used.
Please remove the applet from your panel and re-add it. This way a new configuration will
be created which you can customize to match your needs.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 23 2013 Mario Blättermann <mariobl(a)fedoraproject.org> - 1.9-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
kde-plasma-nm-0.9.3.1-5.fc18 (FEDORA-2013-19989)
Plasma applet written in QML for managing network connections
--------------------------------------------------------------------------------
Update Information:
Plasma-nm 0.9.3.1 release + upstream bugfixes. This update obsoletes the old
kde-plasma-networkmanagement applet.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 23 2013 Jan Grulich <jgrulich(a)redhat.com> - 0.9.3.1-5
- pickup some upstream fixes
* Mon Oct 14 2013 Jan Grulich <jgrulich(a)redhat.com> - 0.9.3.1-4
- Update to 0.9.3.1
* Mon Oct 14 2013 Jan Grulich <jgrulich(a)redhat.com> - 0.9.3.1-3.20131009git82dab6e
- Fix obsoletes
* Thu Oct 10 2013 Jan Grulich <jgrulich(a)redhat.com> - 0.9.3.1-2.20131009git82dab6e
- Add obsoletes for kde-plasma-networkmanagement
- Add rename script
* Wed Oct 9 2013 Jan Grulich <jgrulich(a)redhat.com> - 0.9.3.1-1.20131009git82dab6e
- Update to current git snapshot
* Tue Oct 1 2013 Jan Grulich <jgrulich(a)redhat.com> - 0.9.3.0-7
- Make ModemManager as runtime dependency installed with -mobile subpkg
- Resolves #1013838
--------------------------------------------------------------------------------
================================================================================
libnm-qt-0.9.0.1-1.fc18 (FEDORA-2013-19989)
Qt-only wrapper for NetworkManager DBus API
--------------------------------------------------------------------------------
Update Information:
Plasma-nm 0.9.3.1 release + upstream bugfixes. This update obsoletes the old
kde-plasma-networkmanagement applet.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 22 2013 Lukáš Tinkl <ltinkl(a)redhat.com> - 1:0.9.0.1-1
- update to the latest upstream release 0.9.0.1
--------------------------------------------------------------------------------
================================================================================
libpgf-6.12.27-0.1.svn119.fc18 (FEDORA-2013-19999)
PGF (Progressive Graphics File) library
--------------------------------------------------------------------------------
Update Information:
libpgf 6.12.27
- fixed memory stream returning incorrect number of written bytes
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 25 2013 Alexey Kurov <nucleo(a)fedoraproject.org> - 6.12.27-0.1.svn119
- libpgf-6.12.27 r119 snapshot
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
6.12.24-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
6.12.24-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1023241 - digikam Memory leak while updating thumbnails (libPGF - bug)
https://bugzilla.redhat.com/show_bug.cgi?id=1023241
--------------------------------------------------------------------------------
================================================================================
mate-doc-utils-1.6.2-1.fc18 (FEDORA-2013-19972)
MATE Desktop doc utils
--------------------------------------------------------------------------------
Update Information:
- update to 1.6.2 release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 25 2013 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.6.2-1
- update to 1.6.2 release
- sort spec file
- use modern 'make install' macro
- clean up BR's
- remove debian sript removal, no need anymore
- fix %{buildroot} vs $RPM_BUILD_ROOT mismatch
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.6.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mate-notification-daemon-1.6.1-1.fc18 (FEDORA-2013-19968)
Notification daemon for MATE Desktop
--------------------------------------------------------------------------------
Update Information:
- update to 1.6.1 release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 25 2013 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.6.1-1
- update to 1.6.1 release
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.6.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mod_nss-1.0.8-24.fc18 (FEDORA-2013-19976)
SSL/TLS module for the Apache HTTP server
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #961471 - Port Downstream Patches Upstream
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 21 2013 Matthew Harmsen <mharmsen(a)redhat.com> - 1.0.8-24
- Bugzilla Bug #961471 - Port Downstream Patches Upstream (mharmsen)
- Add '--enable-ecc' option to '
CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions
-fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic}" ; export CFLAGS ;
CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions
-fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic}" ; export CXXFLAGS
;
FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions
-fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic
-I/usr/lib64/gfortran/modules}" ; export FFLAGS ;
LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS;
./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
--program-prefix= \
--disable-dependency-tracking \
--prefix=/usr \
--exec-prefix=/usr \
--bindir=/usr/bin \
--sbindir=/usr/sbin \
--sysconfdir=/etc \
--datadir=/usr/share \
--includedir=/usr/include \
--libdir=/usr/lib64 \
--libexecdir=/usr/libexec \
--localstatedir=/var \
--sharedstatedir=/var/lib \
--mandir=/usr/share/man \
--infodir=/usr/share/info' line under '%build' section of
this spec file (mharmsen)
- Bumped version build/runtime requirements for NSPR and NSS (mharmsen)
- [mod_nss-PK11_ListCerts_2.patch]
- Bugzilla Bug #767802 - PK11_ListCerts called to retrieve all user
certificates for every server (rcritten)
- [mod_nss-array_overrun.patch]
- Bugzilla Bug #1022717 - overrunning array when executing nss_pcache
(rcritten)
- [mod_nss-clientauth.patch]
- Bugzilla Bug #1017675 - mod_nss: FakeBasicAuth authentication bypass
[fedora-all] (rcritten)
- [mod_nss-no_shutdown_if_not_init_2.patch]
- Bugzilla Bug #1022722 - File descriptor leak after "service httpd reload"
or httpd doesn't reload (rrelyea)
- [mod_nss-proxyvariables.patch]
- Bugzilla Bug #1022726 - mod_nss insists on Required value NSSCipherSuite
not set. (mharmsen)
- [mod_nss-tlsv1_1.patch]
- Bugzilla Bug #979798 - current nss support TLS 1.1 so mod_nss should pick
it up (mharmsen)
- Bugzilla Bug #979718 - mod_nss documentation should mention TLS 1.1
(mharmsen)
- [mod_nss-sslmultiproxy_2.patch]
- Fixes Bugzilla Bug #1021469 - [RFE] Support ability to share mod_proxy with
other SSL providers (jorton, mharmsen, nkinder, & rcritten)
* Tue Jul 30 2013 Joe Orton <jorton(a)redhat.com> - 1.0.8-23
- add dependency on httpd-mmn
* Wed Jul 3 2013 Matthew Harmsen <mharmsen(a)redhat.com> - 1.0.8-22
- Moved 'nss_pcache' from %sbindir to %libexecdir
(provided compatibility link)
* Tue Jul 2 2013 Matthew Harmsen <mharmsen(a)redhat.com> - 1.0.8-21.1
- rpmlint mod_nss.spec
0 packages and 1 specfiles checked; 0 errors, 0 warnings.
- rpmlint mod_nss-1.0.8-21.1 (SRPM)
W: spelling-error %description -l en_US nss -> ass, nos, nus
1 packages and 0 specfiles checked; 0 errors, 1 warnings.
- rpmlint mod_nss-1.0.8-21.1 (RPM)
W: spelling-error %description -l en_US nss -> ass, nos, nus
E: non-readable /etc/httpd/alias/cert8.db 0640L
E: non-readable /etc/httpd/alias/secmod.db 0640L
E: non-readable /etc/httpd/alias/key3.db 0640L
1 packages and 0 specfiles checked; 3 errors, 1 warnings.
- rpmlint mod_nss-debuginfo-1.0.8-21.1 (RPM)
W: spelling-error Summary(en_US) nss -> ass, nos, nus
W: spelling-error %description -l en_US nss -> ass, nos, nus
1 packages and 0 specfiles checked; 0 errors, 2 warnings.
* Tue Jun 25 2013 Matthew Harmsen <mharmsen(a)redhat.com> - 1.0.8-21
- Bugzilla Bug #884115 - Package mod_nss-1.0.8-18.1.el7 failed RHEL7 RPMdiff
testing
- Bugzilla Bug #906082 - mod_nss requires manpages for gencert and nss_pcache
- Bugzilla Bug #906089 - Fix dangling symlinks in mod_nss
- Bugzilla Bug #906097 - Correct RPM Parse Warning in mod_nss.spec
- Bugzilla Bug #948601 - Man page scan results for mod_nss
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #961471 - Port Downstream Patches Upstream
https://bugzilla.redhat.com/show_bug.cgi?id=961471
[ 2 ] Bug #767802 - PK11_ListCerts called to retrieve all user certificates for every
server
https://bugzilla.redhat.com/show_bug.cgi?id=767802
[ 3 ] Bug #1022717 - overrunning array when executing nss_pcache
https://bugzilla.redhat.com/show_bug.cgi?id=1022717
[ 4 ] Bug #1017675 - mod_nss: FakeBasicAuth authentication bypass [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1017675
[ 5 ] Bug #979798 - current nss support TLS 1.1 so mod_nss should pick it up
https://bugzilla.redhat.com/show_bug.cgi?id=979798
[ 6 ] Bug #979718 - mod_nss documentation should mention TLS 1.1
https://bugzilla.redhat.com/show_bug.cgi?id=979718
[ 7 ] Bug #1021469 - [RFE] Support ability to share mod_proxy with other SSL providers
https://bugzilla.redhat.com/show_bug.cgi?id=1021469
--------------------------------------------------------------------------------
================================================================================
otf2-1.2.1-4.fc18 (FEDORA-2013-19971)
Open Trace Format 2 library
--------------------------------------------------------------------------------
Update Information:
The Open Trace Format 2 (OTF2) is a highly scalable, memory efficient event trace data
format plus support library.
--------------------------------------------------------------------------------
================================================================================
php-zmq-1.0.8-2.fc18 (FEDORA-2013-19986)
ZeroMQ messaging
--------------------------------------------------------------------------------
Update Information:
Latest upstream; see
https://github.com/mkoppanen/php-zmq/blob/master/ChangeLog and
http://pecl.php.net/package-changelog.php?package=zmq.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 25 2013 Remi Collet <remi(a)fedoraproject.org> - 1.0.8-2
- cleanups
* Thu Oct 24 2013 Remi Collet <remi(a)fedoraproject.org> - 1.0.8-1
- Update to 1.0.8
- run upstream test suite during build
- install tests in pecl test_dir
* Thu Oct 24 2013 Remi Collet <remi(a)fedoraproject.org> - 1.0.7-1
- initial package, version 1.0.7 (beta)
- open
https://github.com/mkoppanen/php-zmq/pull/108
to fix build warnings and include tests
- rewrite spec file.
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.6.0-11.20120613git516bd6f
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Fri Mar 22 2013 Remi Collet <rcollet(a)redhat.com> - 0.6.0-10.20120613git516bd6f
- rebuild for
http://fedoraproject.org/wiki/Features/Php55
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.6.0-9.20120613git516bd6f
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1022832 - zmq extension version 1.0.7 released on PECL
https://bugzilla.redhat.com/show_bug.cgi?id=1022832
--------------------------------------------------------------------------------
================================================================================
pragha-1.1.2.2-1.fc18 (FEDORA-2013-19962)
Lightweight GTK+ music manager
--------------------------------------------------------------------------------
Update Information:
This update fixes last-fm scrobbling in pragha.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 21 2013 Christoph Wickert <cwickert(a)fedoraproject.org> - 1.1.2.2-1
- Update to 1.1.2.2 (fixes #1016264)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1016264 - Last.fm scrobbling not working in pragha-1.1.2.1-2.fc19.x86_64
https://bugzilla.redhat.com/show_bug.cgi?id=1016264
--------------------------------------------------------------------------------
================================================================================
python-carbon-0.9.12-3.fc18 (FEDORA-2013-19965)
Back-end data caching and persistence daemon for Graphite
--------------------------------------------------------------------------------
Update Information:
Update default runtime user to carbon for carbon-aggregator and carbon-relay
(RHBZ#1013813)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 30 2013 Jonathan Steffan <jsteffan(a)fedoraproject.org> - 0.9.12-3
- Update default runtime user to carbon for carbon-aggregator and
carbon-relay (RHBZ#1013813)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1013813 - carbon-aggregator and carbon-relay run as root in default config,
should run as user "carbon"
https://bugzilla.redhat.com/show_bug.cgi?id=1013813
--------------------------------------------------------------------------------
================================================================================
sane-backends-1.0.24-3.fc18 (FEDORA-2013-19998)
Scanner access software
--------------------------------------------------------------------------------
Update Information:
New upstream version with these changes:
* Significant enhancements to pixma, genesys, kodakaio, fujitsu, canon_dr.
* Minor updates, bugfixes or scanners added in several backends.
* 51 new scanner models supported.
* USB support improvements.
* Documentation updates.
* Bugfixes.
Additionally, this update configures USB devices through udev hwdb instead of individual
rules which should speed up device recognition.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 24 2013 Nils Philippsen <nils(a)redhat.com> - 1.0.24-3
- generate hwdb files correctly (#1018565)
* Wed Oct 16 2013 Nils Philippsen <nils(a)redhat.com> - 1.0.24-2
- update udev hwdb on installation/removal
* Wed Oct 9 2013 Nils Philippsen <nils(a)redhat.com> - 1.0.24-1
- version 1.0.24
- use (hopefully stable) Alioth download URL
- update udev patch, remove obsolete patches
- use udev hwdb instead of huge rulesets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1018565 - scanimage detects sm3840 only for root
https://bugzilla.redhat.com/show_bug.cgi?id=1018565
--------------------------------------------------------------------------------
================================================================================
skeinforge-12.03.14-16.fc18 (FEDORA-2013-19988)
Converts 3D model into G-Code for RepRap
--------------------------------------------------------------------------------
Update Information:
Fix bug in Comb, add features to Cool
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 23 2013 Miro Hrončok <mhroncok(a)redhat.com> - 12.03.14-16
- Add patches by Neil Darlow
- Modify launchers a bit
--------------------------------------------------------------------------------
================================================================================
wordpress-3.7-1.fc18 (FEDORA-2013-19978)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
* Upstream annoucement:
http://wordpress.org/news/2013/10/basie/
* Changes:
http://codex.wordpress.org/Version_3.7
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 25 2013 Remi Collet <rcollet(a)redhat.com> - 3.7-1
- update to 3.7
- requires ca-certificates for ca-bundle.crt
--------------------------------------------------------------------------------