The following Fedora 18 Security updates need testing:
Age URL
186
https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2...
32
https://admin.fedoraproject.org/updates/FEDORA-2013-17195/spice-gtk-0.18-...
29
https://admin.fedoraproject.org/updates/FEDORA-2013-17431/thunderbird-17....
26
https://admin.fedoraproject.org/updates/FEDORA-2013-17635/wireshark-1.10....
25
https://admin.fedoraproject.org/updates/FEDORA-2013-17853/davfs2-1.4.7-3....
24
https://admin.fedoraproject.org/updates/FEDORA-2013-17912/chicken-4.8.0.4...
13
https://admin.fedoraproject.org/updates/FEDORA-2013-18647/gnupg-1.4.15-1....
12
https://admin.fedoraproject.org/updates/FEDORA-2013-18802/phpMyAdmin-3.5....
12
https://admin.fedoraproject.org/updates/FEDORA-2013-18774/icu-49.1.1-12.fc18
12
https://admin.fedoraproject.org/updates/FEDORA-2013-18814/gnupg2-2.0.22-1...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-19307/GraphicsMagick-...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-19354/salt-0.17.1-1.fc18
4
https://admin.fedoraproject.org/updates/FEDORA-2013-19271/scipy-0.12.1-1....
4
https://admin.fedoraproject.org/updates/FEDORA-2013-18911/ReviewBoard-1.7...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-19458/bugzilla-4.2.7-...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-19452/libguestfs-1.20...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-19472/python-crypto-2...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-19491/libuv-0.10.18-1...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-19648/mysql-5.5.34-1....
0
https://admin.fedoraproject.org/updates/FEDORA-2013-19745/roundcubemail-0...
The following Fedora 18 Critical Path updates have yet to be approved:
Age URL
255
https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5...
13
https://admin.fedoraproject.org/updates/FEDORA-2013-18607/libxklavier-5.4...
12
https://admin.fedoraproject.org/updates/FEDORA-2013-18814/gnupg2-2.0.22-1...
12
https://admin.fedoraproject.org/updates/FEDORA-2013-18774/icu-49.1.1-12.fc18
8
https://admin.fedoraproject.org/updates/FEDORA-2013-19021/taglib-1.9.1-1....
8
https://admin.fedoraproject.org/updates/FEDORA-2013-19026/python-markupsa...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-19289/gdisk-0.8.8-1.fc18
4
https://admin.fedoraproject.org/updates/FEDORA-2013-19249/sane-backends-1...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-19292/usbmuxd-1.0.8-1...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-19232/gnome-abrt-0.3....
4
https://admin.fedoraproject.org/updates/FEDORA-2013-19268/qtwebkit-2.3.3-...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-19456/device-mapper-p...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-19677/kernel-3.11.6-1...
The following builds have been pushed to Fedora 18 updates-testing
gnome-colors-icon-theme-5.5.1-6.fc18
gpaste-3.2.2-1.fc18
hyperv-daemons-0-0.3.20131022git.fc18
nsca-2.9.1-8.fc18
python-pkgwat-api-0.10-1.fc18
python-sphinxcontrib-cheeseshop-0.2-1.fc18
roundcubemail-0.9.5-1.fc18
scap-security-guide-0.1-3.fc18
sparse-0.4.5.rc1-2.fc18
tcpcopy-0.9.5-1.fc18
Details about builds:
================================================================================
gnome-colors-icon-theme-5.5.1-6.fc18 (FEDORA-2013-19732)
GNOME-Colors icon theme
--------------------------------------------------------------------------------
Update Information:
GNOME-Colors icon theme
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1003009 - Review Request: gnome-colors-icon-theme - GNOME-Colors icon theme
https://bugzilla.redhat.com/show_bug.cgi?id=1003009
--------------------------------------------------------------------------------
================================================================================
gpaste-3.2.2-1.fc18 (FEDORA-2013-19734)
Clipboard management system
--------------------------------------------------------------------------------
Update Information:
** 3.2.2 **
* “Paste and Pop” is now only “Pop”
* Fix SEGV at startup
* Fix SEGV when deleting last item of history
** 3.2.1 **
* Performance improvements
* Daemon now fully evenmential (no more polling, less power consuption)
* GPasteClipboard now has a “owner-change” signal similar to GtkClipboard’s one
* Misc. bugfixes
* New setting to set the maximum amount of memory used by data in history
* FIFO mode has been dropped (lacking design)
* g_paste_history_add is now transfer full
* Update translations
* Fix build with old glib
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 22 2013 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.2.2-1
- Update to 3.2.2
* Sat Oct 19 2013 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.2.1-1
- Update to 3.2.1
--------------------------------------------------------------------------------
================================================================================
hyperv-daemons-0-0.3.20131022git.fc18 (FEDORA-2013-19740)
HyperV daemons suite
--------------------------------------------------------------------------------
Update Information:
- rebase to the latest git snapshot next-20130927 (obtained 2013-10-22)
- KVP, VSS: daemon use single buffer for send/recv
- KVP: FQDN is obtained on start and cached
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 22 2013 Tomas Hozza <thozza(a)redhat.com> - 0-0.3.20131022git
- rebase to the latest git snapshot next-20130927 (obtained 2013-10-22)
- KVP, VSS: daemon use single buffer for send/recv
- KVP: FQDN is obtained on start and cached
--------------------------------------------------------------------------------
================================================================================
nsca-2.9.1-8.fc18 (FEDORA-2013-19725)
Nagios Service Check Acceptor
--------------------------------------------------------------------------------
Update Information:
Fix systemd unit file.
Fix a file conflict between nsca-client and nagios-common.
- Rewrite initscript
- Add sysconfig file support
- Add systemd support (F18+ only)
This is the latest release of nsca. This release increases the maximum message size from
512 characters to 4096 characters. The server is backward compatible with older nsca
clients (pre 2.9.1) using the 512 characters messages as well as new nsca client (2.9.1+)
using the 4096 characters messages. However, please make sure to update the server before
updating the clients as the older server cannot handled messages from the newer clients.
This is the latest release of nsca. This release increases the maximum message size from
512 characters to 4096 characters. The server is backward compatible with older nsca
clients (pre 2.9.1) using the 512 characters messages as well as new nsca client (2.9.1+)
using the 4096 characters messages. However, please make sure to update the server before
updating the clients as the older server cannot handled messages from the newer clients.
This is the latest release of nsca. This release increases the maximum message size from
512 characters to 4096 characters. The server is backward compatible with older nsca
clients (pre 2.9.1) using the 512 characters messages as well as new nsca client (2.9.1+)
using the 4096 characters messages. However, please make sure to update the server before
updating the clients as the older server cannot handled messages from the newer clients.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 10 2013 Xavier Bachelot <xavier(a)bachelot.org> - 2.9.1-8
- Fix systemd unit file (RHBZ#928248).
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.9.1-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Mon Jun 24 2013 Xavier Bachelot <xavier(a)bachelot.org> - 2.9.1-6
- Let nsca-client require nagios-common rather than own /etc/nagios (RHBZ#977438).
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.9.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #977438 - nsca-client-2.9.1-4 conflicts with nagios-common-3.5.0-3
https://bugzilla.redhat.com/show_bug.cgi?id=977438
[ 2 ] Bug #928248 - NSCA Daemon can't be started by systemd
https://bugzilla.redhat.com/show_bug.cgi?id=928248
--------------------------------------------------------------------------------
================================================================================
python-pkgwat-api-0.10-1.fc18 (FEDORA-2013-19723)
Python API for querying the fedora packages webapp
--------------------------------------------------------------------------------
Update Information:
Handle exception when stripping xml tags.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 22 2013 Ralph Bean <rbean(a)redhat.com> - 0.10-1
- Latest upstream with some bugfixes.
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-sphinxcontrib-cheeseshop-0.2-1.fc18 (FEDORA-2013-19743)
Sphinx extension cheeseshop
--------------------------------------------------------------------------------
Update Information:
This package adds "Cheese Shop"-functionality to python-sphinx.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1021994 - Review Request: python-sphinxcontrib-cheeseshop - Sphinx extension
cheeseshop
https://bugzilla.redhat.com/show_bug.cgi?id=1021994
--------------------------------------------------------------------------------
================================================================================
roundcubemail-0.9.5-1.fc18 (FEDORA-2013-19745)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
Roundcubemail just released new 0.9.5 version with fixes for VCE2013-6172(will be
available soon).
Hotfix:
https://github.com/roundcube/roundcubemail/commit/4109bb26ce.diff
Full announcement:
--------
We just published new releases which fix a recently reported
vulnerability that allows an attacker to overwrite configuration
settings using user preferences. This can result in random file
access, manipulated SQL queries and even code execution. The latter
one only affects versions 0.8.6 and older.
Beside the security fix, the 0.9.5 release also includes other minor
bug fixes and improvements. Most notably it brings the default spell
checker back after Google suspended their public spell checking
service.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 22 2013 Jon Ciesla <limburgher(a)gmail.com> - 0.9.5-1
- Fix for CVE-2013-6172, BZ 1021735, 1021965.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1021735 - CVE-2013-6172: Vulnerability in handling _session argument of
utils/save-prefs [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1021735
[ 2 ] Bug #1021965 - CVE-2013-6172 roundcubemail: vulnerability in handling _session
argument of utils/save-prefs [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1021965
--------------------------------------------------------------------------------
================================================================================
scap-security-guide-0.1-3.fc18 (FEDORA-2013-19752)
Security guidance and baselines in SCAP formats
--------------------------------------------------------------------------------
Update Information:
The scap-security-guide project provides a guide for configuration of the system from the
final system's security point of view. The guidance is specified in the Security
Content Automation Protocol (SCAP) format and constitutes a catalog of practical hardening
advice, linked to government requirements where applicable. The project bridges the gap
between generalized policy requirements and specific implementation guidelines. The Fedora
system administrator can use the oscap CLI tool from openscap-utils package, or the
scap-workbench GUI tool from scap-workbench package to verify that the system conforms to
provided guideline. Refer to scap-security-guide(8) manual page for further information.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1018905 - Review Request: scap-security-guide - Security guidance and
baselines in SCAP formats
https://bugzilla.redhat.com/show_bug.cgi?id=1018905
--------------------------------------------------------------------------------
================================================================================
sparse-0.4.5.rc1-2.fc18 (FEDORA-2013-19719)
A semantic parser of source files
--------------------------------------------------------------------------------
Update Information:
This update brings sparse up to the latest upstream rc release. It also makes sparse
ignore the 'leaf' attribute, silencing warnings like this:
/usr/include/stdlib.h:594:28: error: attribute '__leaf__': unknown attribute
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 19 2013 Jeff Layton <jlayton(a)redhat.com> - 0.4.5.rc1-2
- add test patch to silence warnings about __builtin_va_arg_pack() and
__builtin_va_arg_pack_len()
* Tue Jul 9 2013 Jeff Layton <jlayton(a)redhat.com> - 0.4.5.rc1-1
- update to upstream rc1 release
--------------------------------------------------------------------------------
================================================================================
tcpcopy-0.9.5-1.fc18 (FEDORA-2013-19748)
An online request replication tool
--------------------------------------------------------------------------------
Update Information:
New version.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 22 2013 Christopher Meng <rpm(a)cicku.me> - 0.9.5-1
- New version.
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------