The following Fedora 18 Security updates need testing: Age URL 195 https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2-1.... 41 https://admin.fedoraproject.org/updates/FEDORA-2013-17195/spice-gtk-0.18-3.f... 38 https://admin.fedoraproject.org/updates/FEDORA-2013-17431/thunderbird-17.0.9... 35 https://admin.fedoraproject.org/updates/FEDORA-2013-17635/wireshark-1.10.2-4... 34 https://admin.fedoraproject.org/updates/FEDORA-2013-17853/davfs2-1.4.7-3.fc1... 33 https://admin.fedoraproject.org/updates/FEDORA-2013-17912/chicken-4.8.0.4-4.... 22 https://admin.fedoraproject.org/updates/FEDORA-2013-18647/gnupg-1.4.15-1.fc1... 21 https://admin.fedoraproject.org/updates/FEDORA-2013-18802/phpMyAdmin-3.5.8.2... 13 https://admin.fedoraproject.org/updates/FEDORA-2013-19307/GraphicsMagick-1.3... 9 https://admin.fedoraproject.org/updates/FEDORA-2013-19648/mysql-5.5.34-1.fc1... 6 https://admin.fedoraproject.org/updates/FEDORA-2013-19976/mod_nss-1.0.8-24.f... 3 https://admin.fedoraproject.org/updates/FEDORA-2013-20200/python-backports-s... 3 https://admin.fedoraproject.org/updates/FEDORA-2013-20176/mantis-1.2.15-3.fc... 1 https://admin.fedoraproject.org/updates/FEDORA-2013-20354/xen-4.2.3-6.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-20360/spice-0.12.4-3.fc1... 0 https://admin.fedoraproject.org/updates/FEDORA-2013-20410/poppler-0.20.2-17.... 0 https://admin.fedoraproject.org/updates/FEDORA-2013-20429/xulrunner-25.0-2.f...
The following Fedora 18 Critical Path updates have yet to be approved: Age URL 264 https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5.fc... 13 https://admin.fedoraproject.org/updates/FEDORA-2013-19289/gdisk-0.8.8-1.fc18 13 https://admin.fedoraproject.org/updates/FEDORA-2013-19292/usbmuxd-1.0.8-10.f... 13 https://admin.fedoraproject.org/updates/FEDORA-2013-19268/qtwebkit-2.3.3-1.f... 12 https://admin.fedoraproject.org/updates/FEDORA-2013-19456/device-mapper-pers... 3 https://admin.fedoraproject.org/updates/FEDORA-2013-20150/nss-util-3.15.2-2.... 2 https://admin.fedoraproject.org/updates/FEDORA-2013-20263/openssl-1.0.1e-30.... 2 https://admin.fedoraproject.org/updates/FEDORA-2013-20268/sane-backends-1.0.... 2 https://admin.fedoraproject.org/updates/FEDORA-2013-20279/gnome-abrt-0.3.3-1... 0 https://admin.fedoraproject.org/updates/FEDORA-2013-20434/thunderbird-24.1.0... 0 https://admin.fedoraproject.org/updates/FEDORA-2013-20422/bind-9.9.3-7.P2.fc... 0 https://admin.fedoraproject.org/updates/FEDORA-2013-20410/poppler-0.20.2-17.... 0 https://admin.fedoraproject.org/updates/FEDORA-2013-20429/xulrunner-25.0-2.f...
The following builds have been pushed to Fedora 18 updates-testing
alpine-2.10-4.fc18 bind-9.9.3-7.P2.fc18 ctstream-9-1.fc18 firefox-25.0-3.fc18 kdevelop-4.5.2-1.fc18 kdevelop-php-1.5.2-1.fc18 kdevplatform-1.5.2-1.fc18 libetonyek-0.0.0-1.fc18 libxdg-basedir-1.2.0-5.fc18 orthanc-0.7.1-1.fc18 perl-Types-Serialiser-0.03-2.fc18 poppler-0.20.2-17.fc18 python-offtrac-0.1.0-1.fc18 thunderbird-24.1.0-1.fc18 thunderbird-lightning-2.6.2-2.fc18 tzdata-2013h-1.fc18 xulrunner-25.0-2.fc18 youtube-dl-2013.10.30-1.fc18
Details about builds:
================================================================================ alpine-2.10-4.fc18 (FEDORA-2013-20442) powerful, easy to use console email client -------------------------------------------------------------------------------- Update Information:
new 2.10 bugfix release. -------------------------------------------------------------------------------- ChangeLog:
* Thu Oct 31 2013 Rex Dieter rdieter@fedoraproject.org 2.10-4 - re-add README.fedora * Sat Aug 3 2013 Dennis Gilmore dennis@ausil.us - 2.10-3 - remove refrences to non existant README.fedora file * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Fri Mar 15 2013 Paul Wouters pwouters@redhat.com - 2.10-1 - Build from new upstream for 2.10, fixes rhbz#838359 * Wed Feb 13 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.03-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #838359 - alpine crashes when suspending in password prompt mode https://bugzilla.redhat.com/show_bug.cgi?id=838359 --------------------------------------------------------------------------------
================================================================================ bind-9.9.3-7.P2.fc18 (FEDORA-2013-20422) The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server -------------------------------------------------------------------------------- Update Information:
One bug fixed. -------------------------------------------------------------------------------- ChangeLog:
* Thu Oct 31 2013 Tomas Hozza thozza@redhat.com 32:9.9.3-7.P2 - Correct the upstream patch for #794940 * Wed Oct 30 2013 Tomas Hozza thozza@redhat.com 32:9.9.3-6.P2 - Use upstream version of patch for previously fixed #794940 * Fri Oct 18 2013 Tomas Hozza thozza@redhat.com 32:9.9.3-5.P2 - Fix race condition on send buffers in dighost.c (#794940) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #794940 - 'host' dies with SEGV. https://bugzilla.redhat.com/show_bug.cgi?id=794940 --------------------------------------------------------------------------------
================================================================================ ctstream-9-1.fc18 (FEDORA-2013-20431) Get URLs of Czech Television video streams -------------------------------------------------------------------------------- Update Information:
This release fixes locating JSON structure. -------------------------------------------------------------------------------- ChangeLog:
* Thu Oct 31 2013 Petr Pisar ppisar@redhat.com - 9-1 - Version 9 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1024821 - ctstream-9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1024821 --------------------------------------------------------------------------------
================================================================================ firefox-25.0-3.fc18 (FEDORA-2013-20429) Mozilla Firefox Web browser -------------------------------------------------------------------------------- Update Information:
Upstream update to Firefox 25 -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 30 2013 Martin Stransky stransky@redhat.com - 25.0-3 - Update to 25.0 Build 3 * Thu Oct 24 2013 Martin Stransky stransky@redhat.com - 25.0-2 - Fixed xulrunner dependency * Thu Oct 24 2013 Martin Stransky stransky@redhat.com - 25.0-1 - Update to 25.0 Build 2 * Thu Oct 17 2013 Martin Stransky stransky@redhat.com - 24.0-2 - Fixed rhbz#1005611 - BEAST workaround not enabled in Firefox --------------------------------------------------------------------------------
================================================================================ kdevelop-4.5.2-1.fc18 (FEDORA-2013-20413) Integrated Development Environment for C++/C -------------------------------------------------------------------------------- Update Information:
KDevelop 4.5.2 release. -------------------------------------------------------------------------------- ChangeLog:
* Thu Oct 31 2013 Jan Grulich jgrulich@redhat.com - 9:4.5.2-1 - Update to 4.5.2 * Wed Aug 7 2013 Jan Grulich jgrulich@redhat.com - 9:4.5.1-4 - Not necessary to require the latest version of okteta * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 9:4.5.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Tue Jul 30 2013 Petr Machata pmachata@redhat.com - 9:4.5.1-2 - Rebuild for boost 1.54.0 --------------------------------------------------------------------------------
================================================================================ kdevelop-php-1.5.2-1.fc18 (FEDORA-2013-20413) Php language and documentation plugins for KDevelop -------------------------------------------------------------------------------- Update Information:
KDevelop 4.5.2 release. -------------------------------------------------------------------------------- ChangeLog:
* Thu Oct 31 2013 Jan Grulich jgrulich@redhat.com - 1.5.2-1 - Update to 1.5.2 * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.5.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ kdevplatform-1.5.2-1.fc18 (FEDORA-2013-20413) Libraries for use by KDE development tools -------------------------------------------------------------------------------- Update Information:
KDevelop 4.5.2 release. -------------------------------------------------------------------------------- ChangeLog:
* Thu Oct 31 2013 Jan Grulich jgrulich@redhat.com - 1.5.2-1 - Update to 1.5.2 * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.5.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Tue Jul 30 2013 Petr Machata pmachata@redhat.com - 1.5.1-2 - Rebuild for boost 1.54.0 --------------------------------------------------------------------------------
================================================================================ libetonyek-0.0.0-1.fc18 (FEDORA-2013-20439) A library for import of Apple Keynote presentations -------------------------------------------------------------------------------- Update Information:
A new package. --------------------------------------------------------------------------------
================================================================================ libxdg-basedir-1.2.0-5.fc18 (FEDORA-2013-20424) Implementation of the XDG Base Directory Specifications -------------------------------------------------------------------------------- Update Information:
Small patch that frees cache->runtimeDirectory in xdgFreeData() -------------------------------------------------------------------------------- ChangeLog:
* Thu Oct 31 2013 Jon Ciesla limburgher@gmail.com - 1.2.0-5 - Patch for memory leak, BZ 1018527. * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.2.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1018527 - memory leak in libxdg-basedir 1.2.0 (xdgFreeData() does not free cache->runtimeDirectory) https://bugzilla.redhat.com/show_bug.cgi?id=1018527 --------------------------------------------------------------------------------
================================================================================ orthanc-0.7.1-1.fc18 (FEDORA-2013-20433) RESTful DICOM server for healthcare and medical research -------------------------------------------------------------------------------- Update Information:
New upstream version of Orthanc and packaging of Orthanc Client -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 30 2013 Sebastien Jodogne s.jodogne@gmail.com 0.7.1-1 - New upstream version - Fix for big endian architectures (bug #985748) - Packaging of the Orthanc Client library -------------------------------------------------------------------------------- References:
[ 1 ] Bug #985748 - 2 tests failing on big endian platforms https://bugzilla.redhat.com/show_bug.cgi?id=985748 --------------------------------------------------------------------------------
================================================================================ perl-Types-Serialiser-0.03-2.fc18 (FEDORA-2013-20441) Simple data types for common serialization formats -------------------------------------------------------------------------------- Update Information:
This is the first Fedora / EPEL release of perl-Types-Serialiser. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1024913 - Review Request: perl-Types-Serialiser - Simple data types for common serialization formats https://bugzilla.redhat.com/show_bug.cgi?id=1024913 --------------------------------------------------------------------------------
================================================================================ poppler-0.20.2-17.fc18 (FEDORA-2013-20410) PDF rendering library -------------------------------------------------------------------------------- Update Information:
This update fixes several security issues of pdfseparate. -------------------------------------------------------------------------------- ChangeLog:
* Thu Oct 31 2013 Marek Kasik mkasik@redhat.com 0.20.2-17 - Fixes CVE-2013-4473 (Limit length of output to pathName buffer) - Fixes CVE-2013-4474 (Check file pattern) - Resolves: #1024765 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1024753 - CVE-2013-4473 poppler: stack-based buffer overflow in pdfseparate utility https://bugzilla.redhat.com/show_bug.cgi?id=1024753 [ 2 ] Bug #1024762 - CVE-2013-4474 poppler: format string flaw in pdfseparate utility https://bugzilla.redhat.com/show_bug.cgi?id=1024762 --------------------------------------------------------------------------------
================================================================================ python-offtrac-0.1.0-1.fc18 (FEDORA-2013-20437) Trac xmlrpc library -------------------------------------------------------------------------------- Update Information:
Latest upstream with python3 support. -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 30 2013 Ralph Bean rbean@redhat.com - 0.1.0-1 - Python3 support * Sun Aug 4 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.0.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1024819 - python-offtrac: Support Python 3 https://bugzilla.redhat.com/show_bug.cgi?id=1024819 --------------------------------------------------------------------------------
================================================================================ thunderbird-24.1.0-1.fc18 (FEDORA-2013-20434) Mozilla Thunderbird mail/newsgroup client -------------------------------------------------------------------------------- Update Information:
For changes see: http://www.mozilla.org/en-US/thunderbird/24.1.0/releasenotes/ -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 30 2013 Jan Horak jhorak@redhat.com - 24.1.0-1 - Update to 24.1.0 * Thu Oct 17 2013 Martin Stransky stransky@redhat.com - 24.0-4 - Fixed rhbz#1005611 - BEAST workaround not enabled in Firefox * Wed Sep 25 2013 Jan Horak jhorak@redhat.com - 24.0-3 - Update to 24.0 * Mon Sep 23 2013 Jan Horak jhorak@redhat.com - 17.0.9-1 - Update to 17.0.9 ESR --------------------------------------------------------------------------------
================================================================================ thunderbird-lightning-2.6.2-2.fc18 (FEDORA-2013-20434) The calendar extension to Thunderbird -------------------------------------------------------------------------------- Update Information:
For changes see: http://www.mozilla.org/en-US/thunderbird/24.1.0/releasenotes/ -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 30 2013 Jan Horak jhorak@redhat.com - 2.6.2-2 - Update to 2.6.2 * Fri Sep 20 2013 Orion Poplawski orion@cora.nwra.com - 2.6-1 - Drop alarm patch - Drop -fpermissive - Update to 2.6 - Exclude arm architecture * Sat Aug 17 2013 Orion Poplawski orion@cora.nwra.com - 1.9.1-5 - Fix up gdata lightning version dependency * Fri Aug 16 2013 Orion Poplawski orion@cora.nwra.com - 1.9.1-4 - Split Google data provider into a sub-package (bug #554113) * Sun Aug 4 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.9.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ tzdata-2013h-1.fc18 (FEDORA-2013-20435) Timezone data -------------------------------------------------------------------------------- Update Information:
tzdata-2013h update -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 30 2013 Patsy Franklin pfrankli@redhat.com 2013h-1 - Rebase to 2013h - Lybia switched to using UTC+2 without DST - Western Sahara (Africa/ElAaiun) uses Morocco's DST rules - Acres and Amazon swithc to UTC-4 and UTC-5 on 2013-11-10 - Add entries for DST transition in Morocco in the year 2038 --------------------------------------------------------------------------------
================================================================================ xulrunner-25.0-2.fc18 (FEDORA-2013-20429) XUL Runtime for Gecko Applications -------------------------------------------------------------------------------- Update Information:
Upstream update to Firefox 25 -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 30 2013 Martin Stransky stransky@redhat.com - 25.0-2 - Update to 25.0 Build 3 * Wed Oct 23 2013 Martin Stransky stransky@redhat.com - 25.0-1 - Update to 25.0 Build 2 * Tue Oct 15 2013 Karsten Hopp karsten@redhat.com 24.0-3 - drop PPC-only rhbz-911314.patch, fixed upstream --------------------------------------------------------------------------------
================================================================================ youtube-dl-2013.10.30-1.fc18 (FEDORA-2013-20445) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information:
New RPM. New version. -------------------------------------------------------------------------------- ChangeLog:
* Thu Oct 31 2013 Christopher Meng rpm@cicku.me - 2013.10.30-1 - Update to new release(BZ#1024948). * Mon Oct 28 2013 Christopher Meng rpm@cicku.me - 2013.10.28-1 - Update to new release(BZ#1022706). * Wed Oct 23 2013 Christopher Meng rpm@cicku.me - 2013.10.23-1 - Update to new release. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1024948 - youtube-dl-2013.10.30 is available https://bugzilla.redhat.com/show_bug.cgi?id=1024948 [ 2 ] Bug #1022706 - youtube-dl-2013.10.28 is available https://bugzilla.redhat.com/show_bug.cgi?id=1022706 --------------------------------------------------------------------------------