The following Fedora 15 Security updates need testing:
https://admin.fedoraproject.org/updates/scsi-target-utils-1.0.18-1.fc15
https://admin.fedoraproject.org/updates/feh-1.14.1-1.fc15
https://admin.fedoraproject.org/updates/nfs-utils-1.2.4-0.fc15
https://admin.fedoraproject.org/updates/drupal7-7.4-1.fc15
https://admin.fedoraproject.org/updates/pidgin-2.9.0-1.fc15
https://admin.fedoraproject.org/updates/PackageKit-0.6.15-2.fc15
https://admin.fedoraproject.org/updates/dokuwiki-0-0.9.20110525.a.fc15
https://admin.fedoraproject.org/updates/mingw32-libpng-1.4.3-3.fc15
https://admin.fedoraproject.org/updates/libpng10-1.0.54-3.fc15
https://admin.fedoraproject.org/updates/wordpress-3.1.4-1.fc15
https://admin.fedoraproject.org/updates/torque-3.0.1-4.fc15
https://admin.fedoraproject.org/updates/blender-2.49b-16.fc15
https://admin.fedoraproject.org/updates/oprofile-0.9.6-21.fc15
https://admin.fedoraproject.org/updates/libxml-1.8.17-27.fc15
https://admin.fedoraproject.org/updates/weechat-0.3.5-1.fc15
https://admin.fedoraproject.org/updates/rubygem-actionpack-3.0.5-3.fc15
The following Fedora 15 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/PackageKit-0.6.15-2.fc15
https://admin.fedoraproject.org/updates/xfce4-notifyd-0.2.1-3.fc15
https://admin.fedoraproject.org/updates/selinux-policy-3.9.16-32.fc15
https://admin.fedoraproject.org/updates/shadow-utils-4.1.4.2-12.fc15
https://admin.fedoraproject.org/updates/openldap-2.4.24-3.fc15
https://admin.fedoraproject.org/updates/mash-0.5.22-1.fc15
https://admin.fedoraproject.org/updates/libcap-ng-0.6.6-1.fc15
https://admin.fedoraproject.org/updates/xorg-x11-drv-wacom-0.11.1-1.fc15
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-1...
https://admin.fedoraproject.org/updates/lldpad-0.9.41-3.fc15
https://admin.fedoraproject.org/updates/libfprint-0.4.0-1.fc15,fprintd-0....
The following builds have been pushed to Fedora 15 updates-testing
389-admin-1.1.19-2.fc15
389-dsgw-1.1.7-2.fc15
PackageKit-0.6.15-2.fc15
beakerlib-1.4-1.fc15
cuetools-1.4.0-0.7.svn305.fc15
gdata-java-1.45.0-1.fc15
gedit-3.0.6-1.fc15
ghc-hamlet-0.8.2.1-2.fc15
gridsite-1.7.15-2.fc15
gtksourceview3-3.0.5-1.fc15
hunspell-ru-0.99f7-6.fc15
jettison-1.3-1.fc15
libsmbios-2.2.28-4.fc15
lohit-telugu-fonts-2.4.5-11.fc15
man-pages-ru-0.98-5.fc15
mingw32-filesystem-69-3.fc15
mingw32-sigar-1.6.5-0.5.git58097d9.fc15
nfs-utils-1.2.4-0.fc15
nitrogen-1.5.2-1.fc15
opencsv-2.3-1.fc15
petit-1.1.1-1.fc15
pidgin-2.9.0-1.fc15
poppler-0.16.7-1.fc15
portreserve-0.0.5-2.fc15
qlandkartegt-1.2.1-1.fc15
resource-agents-3.9.2-1.fc15
rubygem-polyglot-0.3.1-1.fc15
selinux-policy-3.9.16-32.fc15
sigar-1.6.5-0.3.git58097d9.fc15
sssd-1.5.10-1.fc15
toothchart-0.02.0-0.1beta.fc15
wlmproxy-0.2.0-0.1.20110630gite9e6af2.fc15
xfce4-notifyd-0.2.1-3.fc15
xnec2c-1.4-3.fc15
Details about builds:
================================================================================
389-admin-1.1.19-2.fc15 (FEDORA-2011-8942)
389 Administration Server (admin)
--------------------------------------------------------------------------------
Update Information:
Rebuild with 389-adminutil-1.1.14
look for separate openldap ldif library
skip rebranding current brand - add support for different skins
Explicitly disable the use of systemd in 389 initscripts
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.19-2
- bump rev to rebuild with 389-adminutil-1.1.14
* Tue Jun 28 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.19-1
- look for separate openldap ldif library
* Tue Jun 21 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.18-1
- skip rebranding current brand
- support for skins
* Fri May 13 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.17-1
- 1.1.17
- support "in-place" upgrade and rebranding from Red Hat to 389
- many fixes for coverity issues
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #699835 - service command is not fully backwards compatible with 389-ds-base
https://bugzilla.redhat.com/show_bug.cgi?id=699835
--------------------------------------------------------------------------------
================================================================================
389-dsgw-1.1.7-2.fc15 (FEDORA-2011-8954)
389 Directory Server Gateway (dsgw)
--------------------------------------------------------------------------------
Update Information:
Rebuild with 389-adminutil-1.1.14
look for separate openldap ldif library
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.7-2
- bump rel to rebuild with 389-adminutil-1.1.14
* Tue Jun 28 2011 Rich Megginson <rmeggins(a)redhat.com> - 1.1.7-1
- look for separate openldap ldif library
- remove old fedora-ds cruft
--------------------------------------------------------------------------------
================================================================================
PackageKit-0.6.15-2.fc15 (FEDORA-2011-8943)
Package management service
--------------------------------------------------------------------------------
Update Information:
- Upstream yum recently changed the behaviour when checking signatures on a package. The
commit added a new configuration key which only affects local packages, but the key was
set by default to False.
- This meant that an end user could install a local unsigned rpm package using PackageKit
without a GPG trust check, and the user would be told the untrusted package is itself
trusted.
- To exploit this low-impact vulnerability, a user would have to manually download an
unsigned package file and would still be required to authenticate to install the package.
- The CVE-ID for this bug is CVE-2011-2515
- See
https://bugzilla.redhat.com/show_bug.cgi?id=717566 for details.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Richard Hughes <rhughes(a)redhat.com> - 0.6.15-2
- Upstream yum recently changed the behaviour when checking signatures
on a package. The commit added a new configuration key which only
affects local packages, but the key was set by default to False.
- This meant that an end user could install a local unsigned rpm package
using PackageKit without a GPG trust check, and the user would be told
the untrusted package is itself trusted.
- To exploit this low-impact vulnerability, a user would have to
manually download an unsigned package file and would still be required
to authenticate to install the package.
- The CVE-ID for this bug is CVE-2011-2515
- See
https://bugzilla.redhat.com/show_bug.cgi?id=717566 for details.
- Resolves #718127
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #718127 - CVE-2011-2515 PackageKit: installs unsigned RPM packages as though
they were signed [fedora-15]
https://bugzilla.redhat.com/show_bug.cgi?id=718127
--------------------------------------------------------------------------------
================================================================================
beakerlib-1.4-1.fc15 (FEDORA-2011-8922)
A shell-level integration testing library
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version of beakerlib.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Petr Muller <pmuller(a)redhat.com> - 1.4-1
- update to new upstream version
--------------------------------------------------------------------------------
================================================================================
cuetools-1.4.0-0.7.svn305.fc15 (FEDORA-2011-8931)
Utilities to work with cue and TOC files
--------------------------------------------------------------------------------
Update Information:
Fix F15FTBFS, F16FTBFS
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 1.4.0-0.7.svn305
- Fix up timestamps on pre-generated sources (Fix FTBFS BZ#716187, BZ#660830).
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4.0-0.6.svn305
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gdata-java-1.45.0-1.fc15 (FEDORA-2011-8947)
Client libraries to write Google Data API client applications in Java
--------------------------------------------------------------------------------
Update Information:
- New upstream version 1.45.0
- Added Export-Package data to manifest files (OSGi)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Sandro Mathys <red at fedoraproject.org> - 1.45.0-1
- New upstream version 1.45.0
- Added Export-Package data to manifest files (OSGi)
* Wed Mar 16 2011 Alexander Kurtakov <akurtako(a)redhat.com> 1.41.2-3
- Build against servlet25.
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.41.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #714227 - Missing OSGi Dependency data
https://bugzilla.redhat.com/show_bug.cgi?id=714227
--------------------------------------------------------------------------------
================================================================================
gedit-3.0.6-1.fc15 (FEDORA-2011-8958)
Text editor for the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
update to stable upstream version 3.0.6
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Ignacio Casal Quinteiro <icq(a)gnome.org> 2:3.0.6-1
- Update to 3.0.6
--------------------------------------------------------------------------------
================================================================================
ghc-hamlet-0.8.2.1-2.fc15 (FEDORA-2011-8937)
Haml-like template files that are compile-time checked
--------------------------------------------------------------------------------
Update Information:
Update to hamlet-0.8.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Jens Petersen <petersen(a)redhat.com> - 0.8.2.1-2
- ghc_arches replaces ghc_excluded_archs (cabal2spec-0.23.2)
* Mon Jun 20 2011 Jens Petersen <petersen(a)redhat.com> - 0.8.2.1-1
- update to 0.8.2.1
- use ghc_exclude_archs
- cabal2spec-0.23
* Wed Apr 20 2011 Jens Petersen <petersen(a)redhat.com> - 0.6.1.2-4
- allow to build with blaze-builder-0.3
--------------------------------------------------------------------------------
================================================================================
gridsite-1.7.15-2.fc15 (FEDORA-2011-8941)
Grid Security for the Web, Web platforms for Grids
--------------------------------------------------------------------------------
Update Information:
Changes from 1.7.9 to 1.7.15.
* Fixing memleak in GRSTx509MakeProxyCert
* Not relying on hard-coded positions of certificates (fixes using VOMS .lsc files)
* Fixes from Mattias Ellert <mellert> (bugs #69632, #83449, and #83450):
* extern "C" declarations and include protections in public headers
* integer/pointer portability fix
* proper link ordering
* IPv6 portability
* Fix static declaration in public header, function GACLparseEntry() added into
gridsite-gacl.h
* Makefile distinguishes between -lgsoap and -lgsoapssl in cflags.
* Makefile: CFLAGS cleanup, HTTPD_FLAGS replaces httpd-specific cflags.
* Unresolved symbols from xml in _globus and _nossl library versions fixed.
* Compile and link flags of dependencies unified.
* Portability improvements
* Support for using IPv6
* Patch to grst_x509.c VOMS verification from Daniel Kouril
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Steve Traylen <steve.traylen(a)cern.ch> - 1.7.15-2
- Add a gridsite-compat-1.5 package on EPEL4 & EPEL5.
- Remove doc package requiring devel package.
* Thu Jun 30 2011 Steve Traylen <steve.traylen(a)cern.ch> - 1.7.15-1
- Upstream 1.7.15, drop gridsite-include-1.7.9.patch since upstream,
redo cgi-location patch.
* Mon Jun 27 2011 Steve Traylen <steve.traylen(a)cern.ch> - 1.7.13-1
- Upstream 1.7.13
* Wed Apr 6 2011 Steve Traylen <steve.traylen(a)cern.ch> - 1.7.12-1
- Upstream 1.7.12
--------------------------------------------------------------------------------
================================================================================
gtksourceview3-3.0.5-1.fc15 (FEDORA-2011-8957)
A library for viewing source files
--------------------------------------------------------------------------------
Update Information:
upgrade to latest upstream stable version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Ignacio Casal Quinteiro <icq(a)gnome.org> 3.0.5-1
- Update to 3.0.5
--------------------------------------------------------------------------------
================================================================================
hunspell-ru-0.99f7-6.fc15 (FEDORA-2011-8919)
Russian hunspell dictionaries
--------------------------------------------------------------------------------
Update Information:
Use Yo (Ё) spelling dictionary variant.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Caolán McNamar <caolanm(a)redhat.com> 1:0.99f7-6
- Resolves: rhbz#716594 use yo variant
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #716594 - Russian dictionary misses Ё-spelling
https://bugzilla.redhat.com/show_bug.cgi?id=716594
--------------------------------------------------------------------------------
================================================================================
jettison-1.3-1.fc15 (FEDORA-2011-8944)
A JSON StAX implementation
--------------------------------------------------------------------------------
Update Information:
- New upstream version 1.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Sandro Mathys <red at fedoraproject.org> - 1.3-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
libsmbios-2.2.28-4.fc15 (FEDORA-2011-8961)
Libsmbios C/C++ shared libraries
--------------------------------------------------------------------------------
Update Information:
Updated the sources.
The new sources adds support for the compiler version part of the f15.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Praveen K Paladugu <praveen_paladugu(a)dell.com> 2.2.28-4
- Adding the right tar ball, coz files were missing from the previous version.
* Thu Jun 30 2011 Praveen K Paladugu <praveen_paladugu(a)dell.com> - 2.2.28-3
- Fixing the build failure of version 2.2.26-4.
- The updated sources adds support for the compiler version available in F15 and other
fixes.
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.2.26-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
lohit-telugu-fonts-2.4.5-11.fc15 (FEDORA-2011-8955)
Free Telugu font
--------------------------------------------------------------------------------
Update Information:
This is an update that fixes problem with telugu syllable భ్రా positioning issues.
This is an update that fixes few telugu related rendering issues (ర్యక్రర్షక్రర్యఖ్ర య్ర
ర్యహ్రర్త జ్ర ర్యజ్ర ర్యడ్ర ర్యబ్ర ర్షడ్ర ర్షబ్ర
ర్షత్ర).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Pravin Satpute <psatpute(a)redhat.com> - 2.4.5-11
- fixes bug 714561
* Wed Jun 22 2011 Pravin Satpute <psatpute(a)redhat.com> - 2.4.5-10
- fixes bug 714562
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #714561 - [te_IN] Positioning is improper in భ్రా and similar combinations
https://bugzilla.redhat.com/show_bug.cgi?id=714561
[ 2 ] Bug #714562 - [te_IN] Kra part is merging with the previous consonant ర్యక్ర
https://bugzilla.redhat.com/show_bug.cgi?id=714562
--------------------------------------------------------------------------------
================================================================================
man-pages-ru-0.98-5.fc15 (FEDORA-2011-8928)
Russian man pages from the Linux Documentation Project
--------------------------------------------------------------------------------
Update Information:
man-pages-ru updated to 3.32-2087-1553-20110626
from
man-pages-ru.sourceforge.net project
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Alexey Kurov <nucleo(a)fedoraproject.org> - 0.98-5
- Man-pages-ru 3.32-2087-1553-20110626
- fix build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #716159 - FTBFS man-pages-ru-0.98-4.fc15
https://bugzilla.redhat.com/show_bug.cgi?id=716159
--------------------------------------------------------------------------------
================================================================================
mingw32-filesystem-69-3.fc15 (FEDORA-2011-8938)
MinGW base filesystem and environment
--------------------------------------------------------------------------------
Update Information:
The %{_mingw32_qmake_qt4} macro pointed to an invalid mkspecs name. Fixed
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 69-3
- The %{_mingw32_qmake_qt4} macro pointed to an invalid mkspecs name. Fixed
--------------------------------------------------------------------------------
================================================================================
mingw32-sigar-1.6.5-0.5.git58097d9.fc15 (FEDORA-2011-8967)
MinGW Windows sigar library
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Adam Stokes <astokes(a)fedoraproject.org> - 1.6.5-0.5.git58097d9
- New upstream release
--------------------------------------------------------------------------------
================================================================================
nfs-utils-1.2.4-0.fc15 (FEDORA-2011-8934)
NFS utilities and supporting clients and daemons for the kernel NFS server
--------------------------------------------------------------------------------
Update Information:
- Updated to latest upstream release: 1.2.4
* Fixes CVE-2011-2500 (bz 716950)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Steve Dickson <steved(a)redhat.com> 1.2.4-0
- Updated to latest upstream relase: 1.2.4
* Fixes CVE-2011-2500 (bz 716950)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #716950 - CVE-2011-2500 nfs-utils: Improper authentication of an incoming
request when an IP based authentication used [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=716950
--------------------------------------------------------------------------------
================================================================================
nitrogen-1.5.2-1.fc15 (FEDORA-2011-8926)
Background browser and setter for X windows
--------------------------------------------------------------------------------
Update Information:
- New upstream version 1.5.2
- DSO fix fixed
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Sandro Mathys <red at fedoraproject.org> - 1.5.2-1
- New upstream version 1.5.2
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.5.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
opencsv-2.3-1.fc15 (FEDORA-2011-8951)
A very simple csv (comma-separated values) parser library for Java
--------------------------------------------------------------------------------
Update Information:
- New upstream version 2.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Sandro Mathys <red at fedoraproject.org> - 2.3-1
- New upstream version 2.3
--------------------------------------------------------------------------------
================================================================================
petit-1.1.1-1.fc15 (FEDORA-2011-8950)
Log analysis tool for syslog, Apache and raw log files
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Sandro Mathys <red at fedoraproject.org> - 1.1.1-1
- New upstream version 1.1.1
--------------------------------------------------------------------------------
================================================================================
pidgin-2.9.0-1.fc15 (FEDORA-2011-8966)
A Gtk+ based multiprotocol instant messaging client
--------------------------------------------------------------------------------
Update Information:
New release 2.9.0
Full Upstream ChangeLog:
http://developer.pidgin.im/wiki/ChangeLog
New release 2.8.0
Full Upstream ChangeLog:
http://developer.pidgin.im/wiki/ChangeLog
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Stu Tomlinson <stu(a)nosnilmot.com> 2.8.0-3
- 2.9.0, includes security/DoS fix to work around gdk-pixbuf issue
CVE-2011-2485
* Mon Jun 20 2011 Milan Crha <mcrha(a)redhat.com> 2.8.0-3
- Rebuild against new evolution-data-server
* Fri Jun 17 2011 Marcela Mašláňová <mmaslano(a)redhat.com> - 2.8.0-2
- Perl mass rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #714754 - pidgin: DoS (excessive memory consumption) by processing certain GIF
images used as buddy icon
https://bugzilla.redhat.com/show_bug.cgi?id=714754
--------------------------------------------------------------------------------
================================================================================
poppler-0.16.7-1.fc15 (FEDORA-2011-8962)
PDF rendering library
--------------------------------------------------------------------------------
Update Information:
Update to stable release poppler-0.16.7
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Marek Kasik <mkasik(a)redhat.com> - 0.16.7-1
- Update to 0.16.7
--------------------------------------------------------------------------------
================================================================================
portreserve-0.0.5-2.fc15 (FEDORA-2011-8719)
TCP port reservation utility
--------------------------------------------------------------------------------
Update Information:
This update fixes a problem that would cause the portreserve daemon to exit too early when
several services are registered.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Tim Waugh <twaugh(a)redhat.com> 0.0.5-2
- Requires chkconfig (bug #718173).
* Fri Jun 24 2011 Tim Waugh <twaugh(a)redhat.com> 0.0.5-1
- 0.0.5 (bug #619089, bug #704567).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #704567 - Possible problems found by static analysis of code
https://bugzilla.redhat.com/show_bug.cgi?id=704567
[ 2 ] Bug #718173 - portreserve should depend on chkconfig
https://bugzilla.redhat.com/show_bug.cgi?id=718173
--------------------------------------------------------------------------------
================================================================================
qlandkartegt-1.2.1-1.fc15 (FEDORA-2011-8927)
GPS device mapping tool
--------------------------------------------------------------------------------
Update Information:
update to bugfix release 1.2.1
- Fix: Projection compare (map/dem) still fails
- Take over waypoint description for routepoint
- Fix: Crash on Garmin maps with POI labels
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Dan Horák <dan[at]danny.cz> 1.2.1-1
- update to 1.2.1
--------------------------------------------------------------------------------
================================================================================
resource-agents-3.9.2-1.fc15 (FEDORA-2011-8932)
Open Source HA Reusable Cluster Resource Scripts
--------------------------------------------------------------------------------
Update Information:
This update addresses 2 regressions in openiscsi and pgsql agents for linux-ha/pacemaker
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Fabio M. Di Nitto <fdinitto(a)redhat.com> - 3.9.2-1
- new upstream release
- fix 2 regressions from 3.9.1
--------------------------------------------------------------------------------
================================================================================
rubygem-polyglot-0.3.1-1.fc15 (FEDORA-2011-8935)
Allow hooking of language loaders for specified extensions into require
--------------------------------------------------------------------------------
Update Information:
* Updated to the latest upstream version.
* Tests enabled.
* Documentation moved into separate package.
* Remove unnecessary Hoe runtime dependency.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Vít Ondruch <vondruch(a)redhat.com> - 0.3.1-1
- Updated to the latest upstream version.
- Tests enabled.
- Documentation moved into separate package.
- Remove unnecessary Hoe runtime dependency.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #707937 - Polyglot 0.3.1 available
https://bugzilla.redhat.com/show_bug.cgi?id=707937
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.9.16-32.fc15 (FEDORA-2011-8929)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
- Make mozilla_plugin_tmpfs_t as userdom_user_tmpfs_content()
- Allow init to delete all pid sockets
- Allow colord to read /proc/stat
- Add label for /var/www/html/wordpress/wp-content/plugins directory
- Allow pppd to search /var/lock dir
- puppetmaster use nsswitch: #711804
- Update abrt to match rawhide policy
- allow privoxy to read network data
- support gecko mozilla browser plugin
- Allow chrome_sandbox to execute content in nfs homedir
- postfix_qmgr needs to read /var/spool/postfix/deferred
- abrt_t needs fsetid
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-32
- Allow getcap, setcap for syslogd
- Fix label for /usr/lib64/opera/opera
* Thu Jun 30 2011 Miroslav Grepl <mgrepl(a)redhat.com> 3.9.16-31
- Make mozilla_plugin_tmpfs_t as userdom_user_tmpfs_content()
- Allow init to delete all pid sockets
- Allow colord to read /proc/stat
- Add label for /var/www/html/wordpress/wp-content/plugins directory
- Allow pppd to search /var/lock dir
- puppetmaster use nsswitch: #711804
- Update abrt to match rawhide policy
- allow privoxy to read network data
- support gecko mozilla browser plugin
- Allow chrome_sandbox to execute content in nfs homedir
- postfix_qmgr needs to read /var/spool/postfix/deferred
- abrt_t needs fsetid
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #717907 - SELinux is preventing /bin/bash from 'execute_no_trans'
accesses on the file /usr/lib64/opera/opera.
https://bugzilla.redhat.com/show_bug.cgi?id=717907
[ 2 ] Bug #718161 - syslog-ng 3.x SELinux violations
https://bugzilla.redhat.com/show_bug.cgi?id=718161
[ 3 ] Bug #699465 - SELinux is preventing /bin/systemd-tty-ask-password-agent from
'read' accesses on the fifo_file 136:0.
https://bugzilla.redhat.com/show_bug.cgi?id=699465
[ 4 ] Bug #709246 - SELinux is preventing /usr/sbin/httpd from 'open' accesses
on the file /var/log/roundcubemail/sendmail.
https://bugzilla.redhat.com/show_bug.cgi?id=709246
[ 5 ] Bug #711605 - gecko-mediaplayer is blocked by selinux with xguest and firefox
https://bugzilla.redhat.com/show_bug.cgi?id=711605
[ 6 ] Bug #711804 - puppet: Could not find a default provider for user
https://bugzilla.redhat.com/show_bug.cgi?id=711804
[ 7 ] Bug #714000 - SELinux is preventing /bin/mount from 'mounton' accesses on
the arquivo /var/named/chroot/etc/rndc.key.
https://bugzilla.redhat.com/show_bug.cgi?id=714000
[ 8 ] Bug #714006 - SELinux is preventing abrtd from using the 'fsetid'
capabilities.
https://bugzilla.redhat.com/show_bug.cgi?id=714006
[ 9 ] Bug #714968 - SELinux is preventing /usr/sbin/privoxy from 'read' accesses
on the file unix.
https://bugzilla.redhat.com/show_bug.cgi?id=714968
[ 10 ] Bug #715178 - SELinux is preventing /bin/systemd-tmpfiles from 'getattr'
accesses on the fifo_file /var/run/lirc/lircm.
https://bugzilla.redhat.com/show_bug.cgi?id=715178
[ 11 ] Bug #716648 - postfix.te warning during compilation - 'unrecognized
character'
https://bugzilla.redhat.com/show_bug.cgi?id=716648
[ 12 ] Bug #717161 - SELinux is preventing /usr/sbin/pppd from 'search' accesses
on the directory /var/lock.
https://bugzilla.redhat.com/show_bug.cgi?id=717161
[ 13 ] Bug #717221 - SELinux is preventing /usr/libexec/colord from 'read'
accesses on the file stat.
https://bugzilla.redhat.com/show_bug.cgi?id=717221
--------------------------------------------------------------------------------
================================================================================
sigar-1.6.5-0.3.git58097d9.fc15 (FEDORA-2011-8963)
System Information Gatherer And Reporter
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
sssd-1.5.10-1.fc15 (FEDORA-2011-8923)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
* New Features
* Support for overriding home directory, shell and primary GID locally
* Properly honor TTL values from SRV record lookups
* Support non-POSIX groups in nested group chains (for RFC2307bis LDAP servers)
* Important Bugfixes
* Properly escape IPv6 addresses in the failover code
* Do not crash if inotify fails (e.g. resource exhaustion)
* Don't add multiple TGT renewal callbacks (too many log messages)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 1 2011 Stephen Gallagher <sgallagh(a)redhat.com> - 1.5.10-1
- New upstream release 1.5.10
-
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
- Fixed a regression introduced in 1.5.9 that could result in blocking calls
- to LDAP
* Thu Jun 30 2011 Stephen Gallagher <sgallagh(a)redhat.com> - 1.5.9-1
- New upstream release 1.5.9
-
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
- Support for overriding home directory, shell and primary GID locally
- Properly honor TTL values from SRV record lookups
- Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
- servers)
- Properly escape IPv6 addresses in the failover code
- Do not crash if inotify fails (e.g. resource exhaustion)
- Don't add multiple TGT renewal callbacks (too many log messages)
--------------------------------------------------------------------------------
================================================================================
toothchart-0.02.0-0.1beta.fc15 (FEDORA-2011-8924)
A PHP script which graphically shows how a baby's primary teeth have erupted
--------------------------------------------------------------------------------
Update Information:
* New package: toothchart
- A PHP script which graphically shows how a baby's primary teeth have erupted
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #716352 - Review Request: toothchart - A PHP script which graphically shows
how a baby's primary teeth have erupted
https://bugzilla.redhat.com/show_bug.cgi?id=716352
--------------------------------------------------------------------------------
================================================================================
wlmproxy-0.2.0-0.1.20110630gite9e6af2.fc15 (FEDORA-2011-8948)
An advanced proxy for the MSN Messenger protocol
--------------------------------------------------------------------------------
Update Information:
This release fixes a bug regarding use of strstr() on evbuffers.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 William Lima <wlima(a)primate.com.br> -
0.2.0-0.1.20110630gite9e6af2
- Update to snapshot 20110630gite9e6af2
--------------------------------------------------------------------------------
================================================================================
xfce4-notifyd-0.2.1-3.fc15 (FEDORA-2011-8956)
Simple notification daemon for Xfce
--------------------------------------------------------------------------------
Update Information:
This update fixes a crash caused by a race condition. It often happened when Firefox sent
notifications for completed downloads.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 31 2011 Christoph Wickert <cwickert(a)fedoraproject.org> - 0.2.1-3
- Fix crash in handle_error (#706677)
- Remove obsolete BuildRequires libglade2-devel
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #706677 - [abrt] xfce4-notifyd-0.2.1-2.fc15: handle_error: Process
/usr/lib64/xfce4/notifyd/xfce4-notifyd was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=706677
--------------------------------------------------------------------------------
================================================================================
xnec2c-1.4-3.fc15 (FEDORA-2011-8939)
GTK based graphical wrapper for nec2c
--------------------------------------------------------------------------------
Update Information:
Apply patch by Rik van Riel, fix the Front/Back gain calculations
Upstream update to 1.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2011 Randall J. Berry, N3LRX <dp67(a)fedoraproject.org> - 1.4-3
- Import and build for F15/master
* Thu Jun 30 2011 Randall J. Berry, N3LRX <dp67(a)fedoraproject.org> - 1.4-2
- Apply patch by Rik van Riel, fix the Front/Back gain calculations
* Mon Jun 20 2011 Randall J. Berry, N3LRX <dp67(a)fedoraproject.org> - 1.4-1
- Upstream update to 1.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #717954 - xnec2c cannot calculate F/B ratio when modeling over ground
https://bugzilla.redhat.com/show_bug.cgi?id=717954
--------------------------------------------------------------------------------