Fedora 9 Update: gambas2-2.9.0-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9314
2008-10-31 08:44:55
--------------------------------------------------------------------------------
Name : gambas2
Product : Fedora 9
Version : 2.9.0
Release : 1.fc9
URL : http://gambas.sourceforge.net/
Summary : IDE based on a basic interpreter with object extensions
Description :
Gambas2 is a free development environment based on a Basic interpreter
with object extensions, like Visual Basic (but it is NOT a clone !).
With Gambas2, you can quickly design your program GUI, access MySQL or
PostgreSQL databases, pilot KDE applications with DCOP, translate your
program into many languages, create network applications easily, and so
on...
--------------------------------------------------------------------------------
Update Information:
Many bugfixes, for the full list see:
http://gambas.sourceforge.net/changelog2.html#2.9
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 30 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> 2.9.0-1
- Update to 2.9.0
* Wed Sep 10 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> 2.8.2-1
- update to 2.8.2
- make gb-db-form subpackage (bz 461595)
* Thu Aug 21 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> 2.8.1-1
- update to 2.8.1
* Fri Jun 13 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> 2.7.0-1
- update to 2.7.0
* Wed May 28 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> 2.6.0-1
- update to 2.6.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gambas2' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
[SECURITY] Fedora 9 Update: openoffice.org-2.4.2-18.1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9313
2008-10-31 08:44:46
--------------------------------------------------------------------------------
Name : openoffice.org
Product : Fedora 9
Version : 2.4.2
Release : 18.1.fc9
URL : http://www.openoffice.org/
Summary : OpenOffice.org comprehensive office suite.
Description :
OpenOffice.org is an Open Source, community-developed, multi-platform
office productivity suite. It includes the key desktop applications,
such as a word processor, spreadsheet, presentation manager, formula
editor and drawing program, with a user interface and feature set
similar to other office suites. Sophisticated and flexible,
OpenOffice.org also works transparently with a variety of file
formats, including Microsoft Office.
Usage: Simply type "ooffice" to run OpenOffice.org or select the
requested component (Writer, Calc, Impress, etc.) from your
desktop menu. On first start a few files will be installed in the
user's home, if necessary.
--------------------------------------------------------------------------------
Update Information:
Security update to address - CVE-2008-2237: Manipulated WMF files -
CVE-2008-2238: Manipulated EMF files as described at
http://www.openoffice.org/security/bulletin.html
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 29 2008 Caolan McNamara <caolanm(a)redhat.com> - 1:2.4.2-18.1
- Resolves: ooo#94495 Toggle weblayout/normal layout and notes
- Resolves: rhbz#465792 openoffice.org-2.4.1.ooo81576.vcl.fixscale.patch
- Resolves: rhbz#468336 openoffice.org-3.0.0.ooo95533.sw.safertableexport.patch
- CVE-2008-2237: Manipulated WMF files
- CVE-2008-2238: Manipulated EMF files
* Tue Aug 26 2008 Caolan McNamara <caolanm(a)redhat.com> - 1:2.4.1-17.6
- Resolves: CVE-2008-3282 numeric truncation error in OOo memory allocator
- add openoffice.org-2.4.0.ooo93119.shell.echos.patch
* Wed Jul 23 2008 Caolan McNamara <caolanm(a)redhat.com> - 1:2.4.1-17.5
- Resolves: rhbz#452376 backport workspace.locdat30.patch for Serbian
- Resolves: rhbz#452376 update Serbian translations
- Resolves: rhbz#452379 extend Serbian translations
- Resolves: rhbz#452374 add openoffice.org-3.0.0.ooo86142.serbiannumbering.patch
- Resolves: rhbz#452385 add postgress-jdbc to default classpath
- Resolves: rhbz#456292 openoffice.org-3.0.0.ooo92026.sd.disposed_during_disposing.patch
- Resolves: rhbz#457193 openoffice.org-3.0.0.ooo92253.dbaccess.a11y.crash
- Resolves: rhbz#457303 notes related right click in empty space crash
- rhbz#455711 add openoffice.org-3.0.0.ooo92343.svtools.strangethrow.patch
* Fri Jun 13 2008 Caolan McNamara <caolanm(a)redhat.com> - 1:2.4.1-17.4
- Resolves: rhbz#451485 fix vertical glyphs
- Resolves: rhbz#450661 openoffice.org-3.0.0.ooo90306.sw.wrongprotection.patch
- Resolves: rhbz#448464 openoffice.org-3.0.0.ooo48400.svx.fixspelling.patch
- Resolves: rhbz#450930 openoffice.org-3.0.0.ooo90697.sd.a11ycrash.patch
* Fri Jun 6 2008 Caolan McNamara <caolanm(a)redhat.com> - 1:2.4.1-17.3
- remove pointless "register" dialog request
- Resolves: rhbz#450212 openoffice.org-3.0.0.ooo82545.np_sdk.x86_64.patch
* Tue Jun 3 2008 Caolan McNamara <caolanm(a)redhat.com> - 1:2.4.1-17.2
- filter out -fasynchronous-unwind-tables because it doesn't work with -Os
on i386
- Resolves: rhbz#448553 openoffice.org-3.0.0.ooo90037.vcl.cairotransforms.patch
* Sun Jun 1 2008 Caolan McNamara <caolanm(a)redhat.com> - 1:2.4.1-17.1
- Resolves: rhbz#445588 add openoffice.org-3.0.0.ooo87970.vcl.samenamesubs.patch
- drop integrated openoffice.org-2.3.1.ooo81307.sw.word2.patch
- drop integrated workspace.os114.patch
* Thu May 22 2008 Caolan McNamara <caolanm(a)redhat.com> - 1:2.4.0-12.10
- rebuild
- Resolves: rhbz#447199 add workspace.impress138.patch
- Resolves: rhbz#447212 nostrict-aliasing is broken gcc#36187
* Mon May 12 2008 Caolan McNamara <caolanm(a)redhat.com> - 1:2.4.0-12.9
- Resolves: rhbz#444571 add openoffice.org-3.0.0.ooo88090.chart2.negativecount.patch
- Resolves: rhbz#445318 fix notes related crash
- Resolves: rhbz#445953 backport 2.4.1 ww8 bidi digit fixes
- Resolves: rhbz#446005 there's something very wrong here, but every
attempt to isolate it makes it go away
- add openoffice.org-3.0.0.ooo89002.vcl.symbolfonts.patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #462639 - CVE-2008-2237 OpenOffice.org WMF integer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=462639
[ 2 ] Bug #466528 - CVE-2008-2238 OpenOffice.org multiple EMF buffer overflows
https://bugzilla.redhat.com/show_bug.cgi?id=466528
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openoffice.org' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora 9 Update: catfish-0.3.2-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9311
2008-10-31 08:44:31
--------------------------------------------------------------------------------
Name : catfish
Product : Fedora 9
Version : 0.3.2
Release : 1.fc9
URL : http://software.twotoasts.de/index.php?/pages/catfish_summary.html
Summary : A handy file search tool
Description :
A handy file search tool using different backends which is
configurable via the command line.
This program acts as a frontend for different file search engines.
The interface is intentionally lightweight and simple. But it takes
configuration options from the command line.
--------------------------------------------------------------------------------
Update Information:
New version 0.3.2 is released.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update catfish' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora 9 Update: libmirage-1.1.0-3.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8398
2008-10-31 08:44:22
--------------------------------------------------------------------------------
Name : libmirage
Product : Fedora 9
Version : 1.1.0
Release : 3.fc9
URL : http://cdemu.sourceforge.net/pkg_libmirage.php
Summary : A CD-ROM image access library
Description :
This is libMirage library, a CD-ROM image access library, and part of the
userspace-cdemu suite, a free, GPL CD/DVD-ROM device emulator for linux. It is
written in C and based on GLib.
The aim of libMirage is to provide uniform access to the data stored in
different image formats, by creating a representation of disc stored in image
file, which is based on GObjects.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libmirage' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora 8 Update: perl-CGI-SpeedyCGI-2.22-4.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9309
2008-10-31 08:44:16
--------------------------------------------------------------------------------
Name : perl-CGI-SpeedyCGI
Product : Fedora 8
Version : 2.22
Release : 4.fc8
URL : http://search.cpan.org/dist/CGI-SpeedyCGI/
Summary : Speed up perl scripts by running them persistently
Description :
SpeedyCGI is a way to run perl scripts persistently, which can make
them run much more quickly. After the script is initially run, instead
of exiting, the perl interpreter is kept running. During subsequent
runs, this interpreter is used to handle new executions instead of
starting a new perl interpreter each time. It is a very fast frontend
program, written in C, is executed for each request.
--------------------------------------------------------------------------------
Update Information:
Fixed default configuration file regarding LoadModule; otherwise httpd would
break down on the next httpd restart
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 30 2008 Robert Scheck <robert(a)fedoraproject.org> 2.22-4
- Fixed default configuration file reading loadmodule (#448320)
* Sun Oct 12 2008 Robert Scheck <robert(a)fedoraproject.org> 2.22-3
- Work around C99 inline issues caused by C99 inline support in
newer GCC versions (#464963, thanks to Andreas Thienemann)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #448320 - httpd: Syntax error on line 209; culprit = mod_speedycgi Can't locate API module structure `speedy_module'
https://bugzilla.redhat.com/show_bug.cgi?id=448320
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-CGI-SpeedyCGI' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora 9 Update: mksh-36-1.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9307
2008-10-30 11:51:19
--------------------------------------------------------------------------------
Name : mksh
Product : Fedora 9
Version : 36
Release : 1.fc9
URL : http://www.mirbsd.de/mksh/
Summary : MirBSD enhanced version of the Korn Shell
Description :
mksh is the MirBSD enhanced version of the Public Domain Korn shell (pdksh),
a bourne-compatible shell which is largely similar to the original AT&T Korn
shell. It includes bug fixes and feature improvements in order to produce a
modern, robust shell good for interactive and especially script use, being a
bourne shell replacement, pdksh successor and an alternative to the C shell.
--------------------------------------------------------------------------------
Update Information:
Work was done on both Emacs and Vi input line editing modes and on improving
command line history. Stack space usage was reduced and dead code was removed. A
bugfix sync was done with OpenBSD 4.4-current ksh.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 25 2008 Robert Scheck <robert(a)fedoraproject.org> 36-1
- Upgrade to 36
* Sat Jul 19 2008 Robert Scheck <robert(a)fedoraproject.org> 35b-1
- Upgrade to 35b
* Sun Jul 13 2008 Robert Scheck <robert(a)fedoraproject.org> 35-1
- Upgrade to 35
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mksh' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora 9 Update: libnfnetlink-0.0.39-3.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9306
2008-10-30 11:51:12
--------------------------------------------------------------------------------
Name : libnfnetlink
Product : Fedora 9
Version : 0.0.39
Release : 3.fc9
URL : http://netfilter.org
Summary : Netfilter netlink userspace library
Description :
libnfnetlink is a userspace library that provides some low-level
nfnetlink handling functions. It is used as a foundation for other, netfilter
subsystem specific libraries such as libnfnetlink_conntrack, libnfnetlink_log
and libnfnetlink_queue.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 21 2008 Ville Skyttä <ville.skytta at iki.fi> - 0.0.39-3
- Fix Patch0:/%patch mismatch.
* Thu Aug 7 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 0.0.39-2
- fix license tag
* Fri Jul 4 2008 Paul P. Komkoff Jr <i(a)stingr.net> - 0.0.39
- grab latest upstream release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libnfnetlink' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora 8 Update: smokeping-2.4.2-7.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9305
2008-10-30 11:51:06
--------------------------------------------------------------------------------
Name : smokeping
Product : Fedora 8
Version : 2.4.2
Release : 7.fc8
URL : http://oss.oetiker.ch/smokeping/
Summary : Latency Logging and Graphing System
Description :
SmokePing is a latency logging and graphing system. It consists of a
daemon process which organizes the latency measurements and a CGI
which presents the graphs.
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update smokeping' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora 9 Update: bmpx-0.40.14-8.fc9
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-8109
2008-10-30 11:50:58
--------------------------------------------------------------------------------
Name : bmpx
Product : Fedora 9
Version : 0.40.14
Release : 8.fc9
URL : http://bmpx.backtrace.info/
Summary : Beep Media Player eXperimental
Description :
BMPx is an audio player that features support for specifications like XDS DnD,
XSPF and DBus. BMPx is highly interoperable and integrates well with other
applications and a variety of desktop environments.
--------------------------------------------------------------------------------
Update Information:
needs some external testing as my own desktopsystem is too slow (p3 550mhz) to
extensive test that package. i switched from cdparanoia to libcdio
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 14 2008 josef radinger <cheese(a)nosuchhost.net> - 0.40.14-8
- fix typo
* Sun Sep 14 2008 josef radinger <cheese(a)nosuchhost.net> - 0.40.14-7
- forgot the actual patch
* Sun Sep 14 2008 josef radinger <cheese(a)nosuchhost.net> - 0.40.14-6
- fix patch libsoup
- add hostnotfound-patch
- remove cdparanoia, use libcdio (for now)
* Sat Jun 7 2008 Alexander Kahl <akahl(a)iconmobile.com> - 0.40.14-5
- explicitly added intltool build requirement
* Sat Jun 7 2008 Alexander Kahl <akahl(a)iconmobile.com> - 0.40.14-4
- explicitly added libtool build requirement
* Fri Jun 6 2008 Alexander Kahl <akahl(a)iconmobile.com> - 0.40.14-3
- disabled sid support for now, problems on ppc
* Sun May 18 2008 Alexander Kahl <akahl(a)iconmobile.com> - 0.40.14-2
- added explicit dbus-devel and dbus-glib-devel dependencies
- added explicit libSM-devel dependency
* Sun May 18 2008 Alexander Kahl <akahl(a)iconmobile.com> - 0.40.14-1
- update to 0.40.14
- removed patches for now-fixed issues
- removed empty ChangeLog
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449431 - FTBFS bmpx-0.40.13-11.fc9
https://bugzilla.redhat.com/show_bug.cgi?id=449431
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update bmpx' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months
Fedora 8 Update: selinux-policy-3.0.8-121.fc8
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9073
2008-10-30 11:50:45
--------------------------------------------------------------------------------
Name : selinux-policy
Product : Fedora 8
Version : 3.0.8
Release : 121.fc8
URL : http://serefpolicy.sourceforge.net
Summary : SELinux policy configuration
Description :
SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision 2393.
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 15 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-121
- Allow wine to mmap_zero
- Fix mapping for google/picasa/wine
* Tue Oct 14 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-120
- Backport networkmanager and ppp policy from f9
* Tue Oct 14 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-119
- Fix sendmail transition rules to postfix
* Wed Oct 8 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-118
- Add policykit policy
* Thu Sep 25 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-117
- Update networkmanager to latest upstream version
* Tue Sep 9 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-116
- add mimedefang to spamd
* Tue Aug 26 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-115
- Remove definition for /var/run/mod_fcgid(/.*)?
* Tue Aug 12 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-114
- Allow bluetooth to read hwdate
* Tue Aug 5 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-113
- dontaudit semanage config_tty
- Allow samba to share fusefs
* Thu Jul 24 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-112
- Change dhclient to be able to red networkmanager_var_run
* Wed Jul 2 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-111
- Handle updated NetworkManager
* Wed Jun 18 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-110
- Add cxoffice homedir context
* Thu May 29 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-109
- Remove extra context for dbus
* Tue May 20 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-106
- More fixes for network manager
* Tue May 20 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-105
- Fixes for new network
- Logs of fixes for networkmanager
* Mon May 19 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-104
- Dontaudit reading of nfs by consolekit
* Tue May 13 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-103
Fix labeling on /var/spool/fax and /var/spool/voice
* Wed May 7 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-102
- Allow pam_console to setattr on cpu_device_t
- Dontaudit pam_t writing homedir
- Add sys_nice for audispd
* Thu Apr 17 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-101
- Allow nfs to look at all filesystem directories
* Tue Apr 15 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-100
- Dontaudit validating context when using kerberos libraries
- Allow postfix_virtual write access to postfix_private sockets
* Tue Apr 8 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-99
- Allow privoxy to write to /etc/privoxy/default\.action
* Fri Apr 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-98
- dontaudit setfiles reading links
- allow semanage sys_resource
- add allow_httpd_mod_auth_ntlm_winbind boolean
- Allow privhome apps including dovecot read on nfs and cifs home
dirs if the boolean is set
- Allow fetchmail to manage sendmail_log
* Fri Mar 28 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-97
- Allow stunnel apps to r/w the stunnel socket
* Fri Mar 28 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-96
- Allow munin-node to bind to socket
* Tue Mar 18 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-95
- Allow rythmbox to talk to avahi
- Add prewikka policy
* Mon Mar 17 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-94
- Correct labeling on /var/run/dmevent.*
- Allow pam_t to read wtmp file
- Allow squid to run chkpwd
- Allow postfix_local to exec clamscan
- Allow munin to listen on munin_port
- Label /var/lib/cups-pdf correctly
- Allow fail2ban to read etc_runtime files and to connectto itself
- Label lustrefs and panfs as nfs_t
- Allow kismet to talk to the terminal
* Tue Mar 11 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-93
- Allow syslog to connect to mysql
- Allow lvm to manage its own fifo_files
- Allow bugzilla to use ldap
* Tue Mar 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-92
- Fix openoffice policy to allow it to run from firefox on xguest
* Tue Mar 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-92
- Fix openoffice policy to allow it to run from firefox on xguest
* Tue Mar 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-91
- Allow rpc.mountd to write to lvm_control_t chr_file
* Tue Mar 4 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-90
- Allow mozilla to auth_use_nsswitch
- Change location of mock
- Fix context on /usr/sbin/validate
- allow vbetool to map low kernel memory
- Allow fail2ban to connect to whois port
- Allow bitlbee to read locale files
- Allow clamd to execute shell
- dontaudit setroubleshoot reading cifs and nfs files
* Thu Feb 21 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-89
- Add jkubin changes for nx and groupadd
- Add isns port
* Wed Feb 20 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-88
- Add policy for /dev/autofs
* Mon Feb 18 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-87
- Allow apmd to talk to consolekit via dbus
* Fri Feb 15 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-86
- Add prelude/audisp policy
* Tue Feb 12 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-85
- Fix cups executables labeling
* Fri Feb 1 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-84
- Allow fail2ban to create sock_files in /var/run
* Tue Jan 22 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-83
- Make oddjob_mkhomedir work with confined login domains
* Tue Jan 22 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-82
- Allow xdm to sys_ptrace
* Tue Jan 22 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-81
- Allow zebra to listen on port 521
* Thu Jan 17 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-79
- Add procmail_log support
- Lots of fixes for munin
- fixes for dnsmasq
- Allow tmpreaper to delete aqmavis spool files
* Wed Jan 16 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-78
- Allow procmal to signal pyzor
* Tue Jan 15 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-77
- Allow daemons to write to cron fifo_files
* Mon Jan 14 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-76
- Fix filecontext for networkmanagerlog files
- Allow mount to read samba config
- Fix label of /var/lib/tftpboot
- Fix label of /usr/lib(64)?/xorg/modules/glesx.so
- Fix label on /etc/NetworkManager/dispatcher.d/*
- Allow httpd to send dbus messages
* Thu Jan 3 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-75
- Alow postgrey to read postfix_etc_t
- Lots of fixes to get javaplugin to run under xguest
* Thu Jan 3 2008 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-74
- Allow updatedb to getatt on fifo_files
* Mon Dec 31 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-73
- Fix specification for clamav and clamd log files
* Sat Dec 22 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-72
- Fixes to make confined mozilla work better
- Allow procmail to transition to spamd
* Fri Dec 21 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-71
- add file context for nspluginwrapper
* Fri Dec 21 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-70
- Allow mount.crypto to work
- Allow fsck to read file_t
* Wed Dec 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-69
- Allow ssh to read sym links in homedirs
* Mon Dec 10 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-68
- Allow ldconfig to manage files in the homedir
* Thu Dec 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-67
- Allow kdm to transition to bootloader_t through grub
* Thu Dec 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-66
- Allow depmod to read tmp files from rpm
- Dontaudit pam_timestamp_check access to ~.xsessions
- Allow postfix_local to transition to dovecot_deliver
- Allow postgrey to read postfix_spool
* Tue Dec 4 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-65
- Allow httpd_sys_script_t to search users homedirs
* Sun Dec 2 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-64
- Allow xdm to list all filesystem directories
* Wed Nov 28 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-63
- Change labeling on hpijs
- Fix unconfined_u defintion
- Set vmware to unconfiend domain, since policy is very good yet.
* Mon Nov 26 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-62
- Allow xend to create xend_var_log_t directories
- dontaudit setfiles relabel of /proc /sys caused by named-chroot
- Add rules for pam_keyinit (setkeycreate, ipc_lock)
- Allow mount to read unlabeled directorys for reiserfs
* Tue Nov 20 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-61
- Allow xguest to mount hal devices and read/write file systems
- that do not support extended attributes. Allows kiosk users to
- copy to usb media
* Tue Nov 20 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-60
- Allow cupsd to sigkill hplip_t
- Allow automount to create fifo files
* Tue Nov 20 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-59
- Allow logwatch to search all directories
- Allow sendmail to use sasl
- Allow system_mail_t to write to exim_log_t
* Fri Nov 16 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-58
- Allow nmbd to list inotifyfs_t
- Dontaudit consolekit access to user homedir
- dontaudit nscd getserv and shmemserv
- Allow rsync_t dac overrides
- Allow xfs_t to listen to sockets
* Fri Nov 16 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-57
- Allow lvm to search mnt
- Add booleans for xguest account
xguest_mount_media
xguest_connect_network
xguest_use_bluetooth
* Thu Nov 15 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-56
- Remove /usr/sbin/gdm label
- Label gstreamer codecs in homedir as textrel_shlib_t
* Wed Nov 14 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-55
- Allow spamd to manage razor files
* Mon Nov 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-54
- Allow cyrus to authenticate via sasl
- Allow sshd to work in tunnel mode
- Allow sshd to use -R
- Allow ssh to read user homedirs
- Add /var/lib/tftp to tftp.fc
- Add labels for /dev/dmmdi and /dev/admmdi
- Allow postmap to be run by unconfined_t
- Allow dictd to write pid file
- Allow bluetooth to connectto unix_stream_sockets
* Mon Nov 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-53
- Allow bugzilla policy to connect to postgresql and mysql on other machines
* Mon Nov 12 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-52
- Allow apache to read unconfined users content
* Sat Nov 10 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-51
- Allow login programs to run mount
- Dontaudit writes to user_home_t for semanage
- Allow sendmail to write to cyrus_stream
- Define /dev/dmmidi1 as a sound_device_t
- Allow saslauthd to use nis_authentication
* Fri Nov 9 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-50
- Allow login programs to delete user temp files
* Thu Nov 8 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-49
- Separate xguest from guest
- Allow confined domains to output to rpm pipes
* Wed Nov 7 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-48
- Add obsoletes selinux-policy-strict
- Run inetd unconfined
- dontaudit loadkeys looking at homedir
* Tue Nov 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-47
- Allow all dns_resolves to use avahi stream
- Don't transition from unconfined_t to ping_t
* Tue Nov 6 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-46
- Allow sendmail to interact with winbind
- Allow dovecot to write log files
* Fri Nov 2 2007 Dan Walsh <dwalsh(a)redhat.com> 3.0.8-45
- Allow system_mail_t to domtrans to exim_t
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update selinux-policy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
14 years, 4 months