The following Fedora 18 Security updates need testing:
Age URL
44
https://admin.fedoraproject.org/updates/FEDORA-2013-21875/389-ds-base-1.3...
18
https://admin.fedoraproject.org/updates/FEDORA-2013-23662/rubygem-actionp...
18
https://admin.fedoraproject.org/updates/FEDORA-2013-23663/ibus-chewing-1....
10
https://admin.fedoraproject.org/updates/FEDORA-2013-23988/varnish-3.0.5-1...
7
https://admin.fedoraproject.org/updates/FEDORA-2013-24142/asterisk-11.7.0...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-0025/goffice-0.10.9-1...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-0085/rubygem-will_pag...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-0159/python-libcloud-...
The following Fedora 18 Critical Path updates have yet to be approved:
Age URL
331
https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5...
The following builds have been pushed to Fedora 18 updates-testing
RBTools-0.5.3-1.fc18
SuperLU-4.3-8.fc18
labyrinth-0.6-4.fc18
mate-terminal-1.6.2-1.fc18
mate-utils-1.6.1-1.fc18
perl-Math-MatrixReal-2.11-1.fc18
scap-security-guide-0.1.4-2.fc18
tcpreplay-4.0.0-2.fc18
xosview-1.16-1.fc18
Details about builds:
================================================================================
RBTools-0.5.3-1.fc18 (FEDORA-2014-0346)
Tools for use with ReviewBoard
--------------------------------------------------------------------------------
Update Information:
http://www.reviewboard.org/docs/releasenotes/rbtools/0.5.3/
Upstream release 0.5.2
This version of RBTools is required in order to operate with recent (1.7+) versions of
Review Board.
Note that the modern Review Board server is not supported on EPEL5, but this client
component is.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 6 2014 Stephen Gallagher <sgallagh(a)redhat.com> - 0.5.3-1
- New upstream release 0.5.3
-
http://www.reviewboard.org/docs/releasenotes/rbtools/0.5.3/
--------------------------------------------------------------------------------
================================================================================
SuperLU-4.3-8.fc18 (FEDORA-2014-0304)
Subroutines to solve sparse linear systems
--------------------------------------------------------------------------------
Update Information:
devel-pkg must Requires: %{name}%{?_isa}, apply proper LDFLAGS, reenable testsuite
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 6 2014 Björn Esser <bjoern.esser(a)gmail.com> - 4.3-8
- fixed FTBFS if "-Werror=format-security" flag is used (#1037343)
- devel-pkg must Requires: %{name}%{?_isa}
- apply proper LDFLAGS
- added needed bits for el5
- reenable testsuite using Patch3
* Fri Oct 4 2013 Orion Poplawski <orion(a)cora.nwra.com> - 4.3-7
- Rebuild for atlas 3.10
- Handle UnversionedDocDirs change
* Fri Aug 2 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
4.3-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
labyrinth-0.6-4.fc18 (FEDORA-2014-0295)
A light weight mind mapping tool
--------------------------------------------------------------------------------
Update Information:
* Add appdata file and missing requires.
There should be no regression experienced after this update, and no change in behaviour at
all if it was already working for you. This is for non gnome users where the gconf python
binding is not already installed.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 6 2014 Ankur Sinha <ankursinha AT fedoraproject DOT org> 0.6-4
- Add appdata file. Been submitted upstream
- Add gconf requires: rhbz1048619
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1048619 - [abrt] labyrinth: Browser.py:32:<module>:ImportError: No
module named gconf
https://bugzilla.redhat.com/show_bug.cgi?id=1048619
--------------------------------------------------------------------------------
================================================================================
mate-terminal-1.6.2-1.fc18 (FEDORA-2014-0297)
Terminal emulator for MATE
--------------------------------------------------------------------------------
Update Information:
- update to 1.6.2 release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 6 2014 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.6.2-1
- update to 1.6.2 release
- use modern 'make install' macro
--------------------------------------------------------------------------------
================================================================================
mate-utils-1.6.1-1.fc18 (FEDORA-2014-0325)
MATE utility programs
--------------------------------------------------------------------------------
Update Information:
- update to 1.6.1 release
- removed upstreamed patches
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 6 2014 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.6.1-1
- update to 1.6.1 release
- use modern 'make install' macro
- removed upstreamed patches
- add gtk-doc dir to -devel subpackage
- mate-disk-usage-analyzer icons are renamed, moved to hicolor dir
--------------------------------------------------------------------------------
================================================================================
perl-Math-MatrixReal-2.11-1.fc18 (FEDORA-2014-0350)
Manipulate matrix of reals
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 6 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.11-1
- 2.11 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1048454 - perl-Math-MatrixReal-2.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1048454
--------------------------------------------------------------------------------
================================================================================
scap-security-guide-0.1.4-2.fc18 (FEDORA-2014-0331)
Security guidance and baselines in SCAP formats
--------------------------------------------------------------------------------
Update Information:
- Rebase to 0.1.4 upstream.
- Modify fix for RH BZ#1040335.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 6 2014 Jan iankko Lieskovsky <jlieskov(a)redhat.com> 0.1.4-2
- Drop -compat package, provide openscap-content directly (RH BZ#1040335#c14)
* Fri Dec 20 2013 Jan iankko Lieskovsky <jlieskov(a)redhat.com> 0.1.4-1
- Fix remediation for sshd set keepalive (ClientAliveCountMax) and move
it to /shared
- Add shared remediations for sshd disable empty passwords and
sshd set idle timeout
- Shared remediation for sshd disable root login
- Add empty -compat subpackage to ensure backward-compatibility with
openscap-content and firstaidkit-plugin-openscap packages (RH BZ#1040335)
- OVAL check for sshd disable root login
- Fix typo in OVAL check for sshd disable empty passwords
- OVAL check for sshd disable empty passwords
- Unselect no shelllogin for systemaccounts rule from being run by default
- Rename XCCDF rules
- Revert Set up Fedora release name and CPE based on build system properties
- Shared OVAL check for Verify that Shared Library Files Have Root Ownership
- Shared OVAL check for Verify that System Executables Have Restrictive Permissions
- Shared OVAL check for Verify that System Executables Have Root Ownership
- Shared OVAL check for Verify that Shared Library Files Have Restrictive
Permissions
- Fix remediation for Disable Prelinking rule
- OVAL check and remediation for sshd's ClientAliveCountMax rule
- OVAL check for sshd's ClientAliveInterval rule
- Include descriptions for permissions section, and rules for checking
permissions and ownership of shared library files and system executables
- Disable selected rules by default
- Add remediation for Disable Prelinking rule
- Adjust service-enable-macro, service-disable-macro XSLT transforms
definition to evaluate to proper systemd syntax
- Fix service_ntpd_enabled OVAL check make validate to pass again
- Include patch from Šimon Lukašík to obsolete openscap-content
package (RH BZ#1028706)
- Add OVAL check to test if there's is remote NTP server configured for
time data
- Add system settings section for the guide (to track system wide
hardening configurations)
- Include disable prelink rule and OVAL check for it
- Initial OVAL check if ntpd service is enabled. Add package_installed
OVAL templating directory structure and functionality.
- Include services section, and XCCDF description for selected ntpd's
sshd's service rules
- Include remediations for login.defs' based password minimum, maximum and
warning age rules
- Include directory structure to support remediations
- Add SCAP "replace or append pattern value in text file based on variable"
remediation script generator
- Add remediation for "Set Password Minimum Length in login.defs" rule
* Mon Nov 18 2013 Jan iankko Lieskovsky <jlieskov(a)redhat.com> 0.1.3-1
- Update versioning scheme - move fedorassgrelease to be part of
upstream version. Rename it to fedorassgversion to avoid name collision
with Fedora package release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1040335 - opescap should provide openscap-content and
firstaidkit-plugin-openscap in the package
https://bugzilla.redhat.com/show_bug.cgi?id=1040335
--------------------------------------------------------------------------------
================================================================================
tcpreplay-4.0.0-2.fc18 (FEDORA-2014-0272)
Replay captured network traffic
--------------------------------------------------------------------------------
Update Information:
Version 4.0.0 brings many new features and bug fixes:
- 10GigE wire-speed replay rates when using netmap
http://info.iet.unipi.it/~luigi/netmap/) network drivers
- IP Flow/NetFlow support
- Near-zero overhead option for generating unique flows every loop iteration
- High accuracy, high performance --mbps option
- Overhaul of timestamp methodology in main TX loop to maximize performance
- API for other Open Source projects
- Deprecation of redundant and obolete options
- ARM and PPC support including cross-compile support
- Juniper Encapsulated Ethernet DLT and PPP Serial DLT support
- Switch from BSD to GPLv3 license
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 6 2014 Bojan Smojver <bojan@rexursive com> - 4.0.0-2
- update licence: GPLv3
- update URL
* Mon Jan 6 2014 Bojan Smojver <bojan@rexursive com> - 4.0.0-1
- bump up to 4.0.0
* Wed Jan 1 2014 Bojan Smojver <bojan@rexursive com> - 4.0.0-0.beta2.1
- bump up to 4.0.0beta2
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.4.4-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.4.4-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
xosview-1.16-1.fc18 (FEDORA-2014-0327)
An X Window System utility for monitoring system resources
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release xsoview 1.16.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 5 2014 Terje Rosten <terje.rosten(a)ntnu.no> - 1.16-1
- 1.16
--------------------------------------------------------------------------------