The following Fedora 18 Security updates need testing:
Age URL
213
https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2...
59
https://admin.fedoraproject.org/updates/FEDORA-2013-17195/spice-gtk-0.18-...
56
https://admin.fedoraproject.org/updates/FEDORA-2013-17431/thunderbird-17....
53
https://admin.fedoraproject.org/updates/FEDORA-2013-17635/wireshark-1.10....
52
https://admin.fedoraproject.org/updates/FEDORA-2013-17853/davfs2-1.4.7-3....
51
https://admin.fedoraproject.org/updates/FEDORA-2013-17912/chicken-4.8.0.4...
21
https://admin.fedoraproject.org/updates/FEDORA-2013-20176/mantis-1.2.15-3...
10
https://admin.fedoraproject.org/updates/FEDORA-2013-20976/drupal7-context...
8
https://admin.fedoraproject.org/updates/FEDORA-2013-21057/xen-4.2.3-8.fc18
8
https://admin.fedoraproject.org/updates/FEDORA-2013-21018/bip-0.8.9-1.fc18
6
https://admin.fedoraproject.org/updates/FEDORA-2013-21207/samba-4.0.11-1....
5
https://admin.fedoraproject.org/updates/FEDORA-2013-21298/drupal6-context...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-21415/python3-3.3.0-5...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-21354/moodle-2.3.10-1...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-20817/python-djblets-...
The following Fedora 18 Critical Path updates have yet to be approved:
Age URL
282
https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5...
12
https://admin.fedoraproject.org/updates/FEDORA-2013-20797/libbluray-0.4.0...
11
https://admin.fedoraproject.org/updates/FEDORA-2013-20919/sane-backends-1...
11
https://admin.fedoraproject.org/updates/FEDORA-2013-20908/libxfce4ui-4.10...
7
https://admin.fedoraproject.org/updates/FEDORA-2013-21084/perl-5.16.3-245...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-21375/kernel-3.11.8-1...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-21677/openssh-6.1p1-1...
The following builds have been pushed to Fedora 18 updates-testing
afuse-0.4.1-1.fc18
babeld-1.3.8-2.fc18
freecol-0.10.7-3.fc18
gitifyhg-0.8.4-1.fc18
gq-1.3.4-18.fc18
kwooty-1.1.0-1.fc18
kyotocabinet-1.2.76-5.fc18
librcd-0.1.14-2.fc18
openssh-6.1p1-10.fc18
perl-Email-Send-2.199-2.fc18
puddletag-1.0.2-1.fc18
python-audioread-1.0.1-1.fc18
python-fn-0.2.13-1.fc18
python-ipdb-0.8-4.fc18
python-rhsm-1.10.7-1.fc18
python-tahrir-0.4.4-1.fc18
python-tahrir-0.4.5-1.fc18
python-tahrir-api-0.4.2-2.fc18
subscription-manager-1.10.7-1.fc18
Details about builds:
================================================================================
afuse-0.4.1-1.fc18 (FEDORA-2013-21671)
An automounter implemented with FUSE
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.1 (fixes crashing bug).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2013 Tom Callaway <spot(a)fedoraproject.org> - 0.4.1-1
- update to 0.4.1
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1030128 - afuse-0.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1030128
--------------------------------------------------------------------------------
================================================================================
babeld-1.3.8-2.fc18 (FEDORA-2013-21636)
Ad-hoc network routing daemon
--------------------------------------------------------------------------------
Update Information:
19 June 2013: babeld-1.3.8
* Fix a bug in the configuration parser that could give wrong values
to some exotic interface parameters (channel and faraway).
* Fix a bug that could cause some extra traffic at shutdown. Thanks
to Matthieu Boutier.
* Under Linux, set rp_filter explicitly for all interfaces. This
avoids mysterious routing failures on distributions that set
rp_filter by default. Reported by Baptiste Jonglez.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2013 Jon Ciesla <limburgher(a)gmail.com> - 1.3.8-2
- BR systemd.
* Mon Nov 18 2013 Jon Ciesla <limburgher(a)gmail.com> - 1.3.8-1
- 1.3.8.
--------------------------------------------------------------------------------
================================================================================
freecol-0.10.7-3.fc18 (FEDORA-2013-21643)
Turn-based multi-player strategy game
--------------------------------------------------------------------------------
Update Information:
- Add a patch from upstream fixing crash on intro vid (rhbz#1031621)
- Add an appdata file (rhbz#1031611)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2013 Hans de Goede <hdegoede(a)redhat.com> - 0.10.7-3
- Add a patch from upstream fixing crash on intro vid (rhbz#1031621)
- Add an appdata file (rhbz#1031611)
* Sat Aug 10 2013 Hans de Goede <hdegoede(a)redhat.com> - 0.10.7-2
- Drop vorbisspi and tritonus Requires, since 0.10.7 freecol no longer needs
these
- Re-add html version to -manual sub-package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1031621 - Freecol hangs after video
https://bugzilla.redhat.com/show_bug.cgi?id=1031621
[ 2 ] Bug #1031611 - Please add an appdata file for freecol
https://bugzilla.redhat.com/show_bug.cgi?id=1031611
--------------------------------------------------------------------------------
================================================================================
gitifyhg-0.8.4-1.fc18 (FEDORA-2013-21646)
Use git as a client for Mercurial repos
--------------------------------------------------------------------------------
Update Information:
Upstream bug fix release 0.8.4.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2013 Dan Callaghan <dcallagh(a)redhat.com> - 0.8.4-1
- upstream bug fix release 0.8.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1030863 - gitifyhg-0.8.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1030863
--------------------------------------------------------------------------------
================================================================================
gq-1.3.4-18.fc18 (FEDORA-2013-21651)
Graphical LDAP directory browser and editor
--------------------------------------------------------------------------------
Update Information:
Add patch to fix crashing issue due to bug in error chain code.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 11 2013 Terje Røsten <terje.rosten(a)ntnu.no> - 1.34-18
- Add errorchain patch
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3.4-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Fri Apr 12 2013 Jon Ciesla <limburgher(a)gmail.com> - 1.3.4-16
- Drop desktop vendor tag.
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3.4-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #520342 - crash when browsing LDAP server
https://bugzilla.redhat.com/show_bug.cgi?id=520342
[ 2 ] Bug #1028771 - [abrt] gq-1.3.4-16.fc19: vsnprintf: Process /usr/bin/gq was killed
by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=1028771
[ 3 ] Bug #925484 - gq: Does not support aarch64 in f19 and rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=925484
--------------------------------------------------------------------------------
================================================================================
kwooty-1.1.0-1.fc18 (FEDORA-2013-21650)
A friendly nzb usenet binary download application
--------------------------------------------------------------------------------
Update Information:
update to version 1.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 17 2013 Gregor Tätzner <brummbq(a)fedoraproject.org> - 1.1.0-1
- 1.1.0
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #947229 - kwooty-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=947229
--------------------------------------------------------------------------------
================================================================================
kyotocabinet-1.2.76-5.fc18 (FEDORA-2013-21638)
A straightforward implementation of DBM
--------------------------------------------------------------------------------
Update Information:
- Corrected wrong dependency of -devel from main to -libs package
- Always enable 8 byte atomics patch e.g. for ppc32 (#1007732 #c5)
- Fixed previously added patch for building under RHEL 5 (#915123)
- Added dependencies to enable lzo and lzma/xz compression support
- Enabled the built-in test suite (with limitations at RHEL 5 ppc)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 17 2013 Robert Scheck <robert(a)fedoraproject.org> 1.2.76-5
- Corrected wrong dependency of -devel from main to -libs package
- Always enable 8 byte atomics patch e.g. for ppc32 (#1007732 #c5)
- Fixed previously added patch for building under RHEL 5 (#915123)
- Added dependencies to enable lzo and lzma/xz compression support
- Enabled the built-in test suite (with limitations at RHEL 5 ppc)
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.76-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
librcd-0.1.14-2.fc18 (FEDORA-2013-21678)
Library for autodetection charset of Russian and Ukrainian text
--------------------------------------------------------------------------------
Update Information:
Library for autodetection charset of Russian and Ukrainian text
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1031250 - Review Request: librcd - Library for autodetection charset of
Russian and Ukrainian text
https://bugzilla.redhat.com/show_bug.cgi?id=1031250
--------------------------------------------------------------------------------
================================================================================
openssh-6.1p1-10.fc18 (FEDORA-2013-21677)
An open source implementation of SSH protocol versions 1 and 2
--------------------------------------------------------------------------------
Update Information:
sshd-keygen now generates also ECDSA keys if AUTOCREATE_SERVER_KEYS=YES is set in
/etc/sysconfig/sshd. The size of the Diffie-Hellman groups requested for a each symmetric
key size was increased according to NIST 800-57 and RFC4419.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2013 Petr Lautrbach <plautrba(a)redhat.com> 6.1p1-10 + 0.9.3-3
- increase the size of the Diffie-Hellman groups (#1010607)
- sshd-keygen to generate ECDSA keys <i.grok(a)comcast.net> (#1019222)
- don't show Success for EAI_SYSTEM (#985964)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1010607 - security provided by openssh seems questionable
https://bugzilla.redhat.com/show_bug.cgi?id=1010607
[ 2 ] Bug #1019222 - Re-enable elliptic curve cryptography (ecc) in openssh
https://bugzilla.redhat.com/show_bug.cgi?id=1019222
[ 3 ] Bug #985964 - success on failing to connect to a non-existing host
https://bugzilla.redhat.com/show_bug.cgi?id=985964
--------------------------------------------------------------------------------
================================================================================
perl-Email-Send-2.199-2.fc18 (FEDORA-2013-21663)
Module for sending email
--------------------------------------------------------------------------------
Update Information:
Add additional explicit Requires: perl(Return::Value)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2013 Tom Callaway <spot(a)fedoraproject.org> - 2.199-2
- add another explicit Requires: perl(Return::Value)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1031298 - Missing "perl(Return::Value)" needed by the
perl-Email-Send module-check
https://bugzilla.redhat.com/show_bug.cgi?id=1031298
--------------------------------------------------------------------------------
================================================================================
puddletag-1.0.2-1.fc18 (FEDORA-2013-21660)
Feature rich, easy to use tag editor
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release puddletag 1.0.2.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2013 Terje Rosten <terje.rosten(a)ntnu.no> - 1.0.2-1
- 1.0.2
--------------------------------------------------------------------------------
================================================================================
python-audioread-1.0.1-1.fc18 (FEDORA-2013-21661)
Multi-library, cross-platform audio decoding in Python
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release audioread 1.0.1, adding Python 3 support.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-fn-0.2.13-1.fc18 (FEDORA-2013-21641)
Features to allow functional programming in Python
--------------------------------------------------------------------------------
Update Information:
Latest upstream releaes
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2013 Ricky Elrod <codeblock(a)fedoraproject.org> 0.2.13-1
- Latest upstream release.
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.2.12-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Jul 17 2013 Ricky Elrod <codeblock(a)fedoraproject.org> - 0.2.12-6
- Move the description block of the python3 subpackage to within the conditional.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1031276 - python-fn-0.2.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1031276
--------------------------------------------------------------------------------
================================================================================
python-ipdb-0.8-4.fc18 (FEDORA-2013-21674)
IPython enabled Python debugger
--------------------------------------------------------------------------------
Update Information:
Initial release of python-ipdb
--------------------------------------------------------------------------------
================================================================================
python-rhsm-1.10.7-1.fc18 (FEDORA-2013-21680)
A Python library to communicate with a Red Hat Unified Entitlement Platform
--------------------------------------------------------------------------------
Update Information:
Numerous bug fixes and the addition of an ability to override properties of content
repos.
Multiple bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 14 2013 ckozak <ckozak(a)redhat.com> 1.10.7-1
- getOwnerInfo introduced (vitty(a)redhat.com)
* Thu Nov 7 2013 ckozak <ckozak(a)redhat.com> 1.10.6-1
- Fix a crash that occurs when rhsm.conf is missing (ckozak(a)redhat.com)
- Correct implementation of __eq__ for Content objects. (awood(a)redhat.com)
- Log ca_dir and loaded ca pems on one line. (alikins(a)redhat.com)
- Add default full_refresh_on_yum option. (awood(a)redhat.com)
- Send empty JSON list when deleting all overrides. (awood(a)redhat.com)
- Add __hash__ method to Content classes. (awood(a)redhat.com)
- Add method to get all content overrides for a consumer (mstead(a)redhat.com)
- Add methods to set and delete content overrides. (awood(a)redhat.com)
- 1008808: json ValueErrors have no .msg attribute (alikins(a)redhat.com)
* Fri Oct 25 2013 ckozak <ckozak(a)redhat.com> 1.10.5-1
- 1006748: replace simplejson with 'ourjson' (alikins(a)redhat.com)
- Log the new requestUuid from candlepin if it is present in the response.
(dgoodwin(a)redhat.com)
* Fri Oct 25 2013 ckozak <ckozak(a)redhat.com>
- 1006748: replace simplejson with 'ourjson' (alikins(a)redhat.com)
- Log the new requestUuid from candlepin if it is present in the response.
(dgoodwin(a)redhat.com)
--------------------------------------------------------------------------------
================================================================================
python-tahrir-0.4.4-1.fc18 (FEDORA-2013-21645)
A pyramid app for issuing your own Open Badges
--------------------------------------------------------------------------------
Update Information:
Latest upstream optimizations, new features, and css cleanups.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.4.4-1
- Latest upstream
- Optimized json leaderboard.
- Fixed profile typeerror.
- Re-add description to the badge tooltip.
- Tweaks to the admin panel.
- New RSS feed for latest badges.
- Various css fixups.
--------------------------------------------------------------------------------
================================================================================
python-tahrir-0.4.5-1.fc18 (FEDORA-2013-21659)
A pyramid app for issuing your own Open Badges
--------------------------------------------------------------------------------
Update Information:
Added hearbeat url for haproxy.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.4.5-1
- Added a heartbeat url for haproxy.
* Mon Nov 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.4.4-1
- Latest upstream
- Optimized json leaderboard.
- Fixed profile typeerror.
- Re-add description to the badge tooltip.
- Tweaks to the admin panel.
- New RSS feed for latest badges.
- Various css fixups.
--------------------------------------------------------------------------------
================================================================================
python-tahrir-api-0.4.2-2.fc18 (FEDORA-2013-21655)
An API for interacting with the Tahrir database
--------------------------------------------------------------------------------
Update Information:
Latest upstream with adjusted rank calculation.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.4.2-2
- Direct requires on python-alembic.
* Mon Nov 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.4.2-1
- Latest upstream with packaging bugfixes.
* Mon Nov 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.4.1-2
- Add BR on python-alembic.
* Mon Nov 18 2013 Ralph Bean <rbean(a)redhat.com> - 0.4.1-1
- Latest upstream
- Correct fedmsg schema.
- New calculation of tied rank.
--------------------------------------------------------------------------------
================================================================================
subscription-manager-1.10.7-1.fc18 (FEDORA-2013-21680)
Tools and libraries for subscription and repository management
--------------------------------------------------------------------------------
Update Information:
Numerous bug fixes and the addition of an ability to override properties of content
repos.
Multiple bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 14 2013 ckozak <ckozak(a)redhat.com> 1.10.7-1
- 998033: Handle Unauthorized/Forbidden exceptions in CLI/GUI
(mstead(a)redhat.com)
- Remove unnecessary network calls after clean command (ckozak(a)redhat.com)
- Bumping the python-rhsm required version (mstead(a)redhat.com)
- Latest translations. (awood(a)redhat.com)
- Introduced an Override model object to OverrideLib (mstead(a)redhat.com)
- Use injected Identity instead of ConsumerIdentity in repolib
(mstead(a)redhat.com)
- Catch ValueError when determining boolean value (mstead(a)redhat.com)
- Use a simplier method to compare two lists of dictionaries.
(awood(a)redhat.com)
- Hide item when server does not support overrides. (mstead(a)redhat.com)
- Show message instead of repo table when no repos exist. (mstead(a)redhat.com)
- Made Repository Details resemble Subscription Details (mstead(a)redhat.com)
- Created an overrides module (mstead(a)redhat.com)
- Created Repository Management Dialog (mstead(a)redhat.com)
- Add 'repo-override' command to alter content repositories server-side.
(awood(a)redhat.com)
* Thu Nov 7 2013 ckozak <ckozak(a)redhat.com> 1.10.6-1
- 985502: Use yum.i18n utf8_width function for string length in CLI
(ckozak(a)redhat.com)
- 916666: Displayed 'Next System Check-In' is inaccuarate (wpoteat(a)redhat.com)
- Change wording for identity in CLI command. (dgoodwin(a)redhat.com)
- 1019753: Stop including a fake consumer UUID fact. (dgoodwin(a)redhat.com)
- 1022198: Display highest suggested quantity in contract selection
(ckozak(a)redhat.com)
- Hook up the 'why register' dialog from old rhn-client-tools.
(dgoodwin(a)redhat.com)
- Add screen to describe and skip registration in Fedora/EL7 firstboot.
(dgoodwin(a)redhat.com)
- Fix firstboot on Fedora 19. (dgoodwin(a)redhat.com)
- Report distribution.version.modifier fact. ex 'beta' (ckozak(a)redhat.com)
- Center filter dialog on parent window when opened (mstead(a)redhat.com)
- Sort owner list in org selection screen (mstead(a)redhat.com)
- 1004318: Bash completion for rct was not handing options and file lists
correctly. (bkearney(a)redhat.com)
- 1023166: Strip leading and trailing whitespaces from all usernames and
passwords provided on the cli (bkearney(a)redhat.com)
- 963579: Stop hiding the Library environment. (dgoodwin(a)redhat.com)
- Fix layout issues with select sla screen in firstboot. (alikins(a)redhat.com)
- Fix the layout for "Confirm Subscriptions" screen. (alikins(a)redhat.com)
* Fri Oct 25 2013 ckozak <ckozak(a)redhat.com> 1.10.5-1
- 1021581: account/contract display nothing when no data exists
(ckozak(a)redhat.com)
- Swap heading of selectsla/confirmsubs widgets. (alikins(a)redhat.com)
- 1006748: replace simplejson with 'ourjson' (alikins(a)redhat.com)
* Thu Oct 17 2013 ckozak <ckozak(a)redhat.com> 1.10.4-1
- 1017351: ignore dbus failures on show_window (alikins(a)redhat.com)
- 1016643: Fix firstboot issues with new firstboot. (alikins(a)redhat.com)
- 1005420: adding --ondate to manpage (dlackey(a)redhat.com.com)
- 1007580: Add contract number to the output of list --available
(bkearney(a)redhat.com)
- 1017299: handle dmidecode module not installed (alikins(a)redhat.com)
- 846331: Add tooltips to the filters page (bkearney(a)redhat.com)
- 1015553: fix help message for no-overlap. display usage requirement
(ckozak(a)redhat.com)
--------------------------------------------------------------------------------