Fedora 18 Update: GitPython-0.3.2-0.6.RC1.fc18
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23018
2013-12-09 01:11:57
--------------------------------------------------------------------------------
Name : GitPython
Product : Fedora 18
Version : 0.3.2
Release : 0.6.RC1.fc18
URL : http://pypi.python.org/pypi/GitPython/
Summary : Python Git Library
Description :
GitPython is a python library used to interact with Git repositories.
GitPython provides object model access to your git repository. Once you have
created a repository object, you can traverse it to find parent commit(s),
trees, blobs, etc.
GitPython is a port of the grit library in Ruby created by Tom Preston-Werner
and Chris Wanstrath.
--------------------------------------------------------------------------------
Update Information:
add support for gpg signed commits
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 7 2013 Dennis Gilmore <dennis(a)ausil.us> - 0.3.2-0.6-RC1
- apply patch from Igor Gnatenko for bz#1010706
* Fri Aug 2 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.3.2-0.5.RC1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.3.2-0.4.RC1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1010706 - [PATCH] Work with GPG signed git commits
https://bugzilla.redhat.com/show_bug.cgi?id=1010706
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update GitPython' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 19 Update: NLopt-2.4.1-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23803
2013-12-22 04:25:38
--------------------------------------------------------------------------------
Name : NLopt
Product : Fedora 19
Version : 2.4.1
Release : 1.fc19
URL : http://ab-initio.mit.edu/nlopt
Summary : Open-Source library for nonlinear optimization
Description :
NLopt is a library for nonlinear local and global optimization, for
functions with and without gradient information. It is designed as
as simple, unified interface and packaging of several free/open-source
nonlinear optimization libraries.
It features bindings for GNU Guile, Octave and Python. This build has
been made with C++-support enabled.
--------------------------------------------------------------------------------
Update Information:
new upstream release: v2.4.1
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update NLopt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 20 Update: sugar-infoslicer-22-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23545
2013-12-19 05:38:35
--------------------------------------------------------------------------------
Name : sugar-infoslicer
Product : Fedora 20
Version : 22
Release : 1.fc20
URL : http://sugarlabs.org/go/Activities/InfoSlicer
Summary : Downloader for articles from Wikipedia
Description :
InfoSlicer downloads articles from Wikipedia so that you can create new
documents by dragging and dropping content from the Wikipedia articles.
You can then publish the articles as a mini website.
--------------------------------------------------------------------------------
Update Information:
New and updated translations
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 16 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 22-1
- Release 22
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sugar-infoslicer' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 20 Update: glite-lb-common-9.0.8-2.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23782
2013-12-22 04:24:56
--------------------------------------------------------------------------------
Name : glite-lb-common
Product : Fedora 20
Version : 9.0.8
Release : 2.fc20
URL : http://glite.cern.ch
Summary : gLite Logging and Bookkeeping common headers and library
Description :
glite-lb-common is a package containing gLite LB common files shared by client
and daemons. This package contains the LB common library.
--------------------------------------------------------------------------------
Update Information:
Fix context initialization and failing unittests on 32-bit PowerPC platform.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2013 František Dvořák <valtri(a)civ.zcu.cz> - 9.0.8-2
- Patch to fix build on 32-bit PPC (#1040396)
* Fri Nov 22 2013 František Dvořák <valtri(a)civ.zcu.cz> - 9.0.8-1
- New release 9.0.8 (L&B 4.0.12)
- Parallel build and pkg-config patches not needed anymore
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1040396 - FTBFS: self checks failing on PPC
https://bugzilla.redhat.com/show_bug.cgi?id=1040396
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update glite-lb-common' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 20 Update: oxygen-gtk2-1.4.1-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23178
2013-12-11 16:30:07
--------------------------------------------------------------------------------
Name : oxygen-gtk2
Product : Fedora 20
Version : 1.4.1
Release : 1.fc20
URL : https://projects.kde.org/projects/playground/artwork/oxygen-gtk
Summary : Oxygen GTK+2 theme
Description :
Oxygen-Gtk is a port of the default KDE widget theme (Oxygen), to gtk.
It's primary goal is to ensure visual consistency between gtk-based and
qt-based applications running under KDE. A secondary objective is to also
have a stand-alone nice looking gtk theme that would behave well on other
Desktop Environments.
Unlike other attempts made to port the KDE oxygen theme to gtk, this
attempt does not depend on Qt (via some Qt to Gtk conversion engine),
nor does render the widget appearance via hard-coded pixmaps, which
otherwise breaks every time some setting is changed in KDE.
--------------------------------------------------------------------------------
Update Information:
oxygen-gtk2-1.4.1
- mark zotero as XUL application
- fix some antialias issue on sliders
oxygen-gtk3-1.3.0
It is tragetted to users that have gtk3 version > 3.9.
This gtk3 version has many new widgets, and have obsoleted a lot of function calls. Hence this release.
We cannot guarantee that it works flowlessly with older gtk3 versions.
Support to the 1.2 series will be discontinued when gtk3-3.10 gets sufficiently spread.
- some improvement on inner-shadows
- some extra checks on widgets validity to prevent runtime warnings
- some rendering improvements for instance regarding scrollbars and textviews
See https://projects.kde.org/news/244
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 10 2013 Alexey Kurov <nucleo(a)fedoraproject.org> - 1.4.1-1
- oxygen-gtk2-1.4.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update oxygen-gtk2' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 20 Update: oxygen-gtk3-1.3.1-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23178
2013-12-11 16:30:07
--------------------------------------------------------------------------------
Name : oxygen-gtk3
Product : Fedora 20
Version : 1.3.1
Release : 1.fc20
URL : https://projects.kde.org/projects/playground/artwork/oxygen-gtk
Summary : Oxygen GTK+3 theme
Description :
Oxygen-Gtk is a port of the default KDE widget theme (Oxygen), to gtk.
It's primary goal is to ensure visual consistency between gtk-based and
qt-based applications running under KDE. A secondary objective is to also
have a stand-alone nice looking gtk theme that would behave well on other
Desktop Environments.
Unlike other attempts made to port the KDE oxygen theme to gtk, this
attempt does not depend on Qt (via some Qt to Gtk conversion engine),
nor does render the widget appearance via hard-coded pixmaps, which
otherwise breaks every time some setting is changed in KDE.
--------------------------------------------------------------------------------
Update Information:
oxygen-gtk2-1.4.1
- mark zotero as XUL application
- fix some antialias issue on sliders
oxygen-gtk3-1.3.0
It is tragetted to users that have gtk3 version > 3.9.
This gtk3 version has many new widgets, and have obsoleted a lot of function calls. Hence this release.
We cannot guarantee that it works flowlessly with older gtk3 versions.
Support to the 1.2 series will be discontinued when gtk3-3.10 gets sufficiently spread.
- some improvement on inner-shadows
- some extra checks on widgets validity to prevent runtime warnings
- some rendering improvements for instance regarding scrollbars and textviews
See https://projects.kde.org/news/244
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 12 2013 Alexey Kurov <nucleo(a)fedoraproject.org> - 1:1.3.1-1
- oxygen-gtk3-1.3.1
* Wed Dec 11 2013 Alexey Kurov <nucleo(a)fedoraproject.org> - 1:1.3.0-1
- oxygen-gtk3-1.3.0 (for gtk3 3.10+)
* Tue Dec 10 2013 Alexey Kurov <nucleo(a)fedoraproject.org> - 1:1.2.1-1
- oxygen-gtk3-1.2.1
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update oxygen-gtk3' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
[SECURITY] Fedora 19 Update: gnupg-1.4.16-2.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23615
2013-12-20 00:28:16
--------------------------------------------------------------------------------
Name : gnupg
Product : Fedora 19
Version : 1.4.16
Release : 2.fc19
URL : http://www.gnupg.org/
Summary : A GNU utility for secure communication and data storage
Description :
GnuPG (GNU Privacy Guard) is a GNU utility for encrypting data and
creating digital signatures. GnuPG has advanced key management
capabilities and is compliant with the proposed OpenPGP Internet
standard described in RFC2440. Since GnuPG doesn't use any patented
algorithm, it is not compatible with any version of PGP2 (PGP2.x uses
only IDEA for symmetric-key encryption, which is patented worldwide).
--------------------------------------------------------------------------------
Update Information:
What's New
===========
* Fixed the RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis attack as described by Genkin, Shamir, and Tromer.
See <http://www.cs.tau.ac.il/~tromer/acoustic/>.[CVE-2013-4576]
* Put only the major version number by default into armored output.
* Do not create a trustdb file if --trust-model=always is used.
* Print the keyid for key packets with --list-packets.
* Changed modular exponentiation algorithm to recover from a small performance loss due to a change in 1.4.14.
Impact of the security problem
==============================
CVE-2013-4576 has been assigned to this security bug.
The paper describes two attacks.The first attack allows to distinguish keys: An attacker is able to notice which key is currently used for decryption.This is in general not a problem but may be used to reveal the information that a message, encrypted to a commonly not used key, has been received by the targeted machine.We do not have a software solution to mitigate this attack.
The second attack is more serious. It is an adaptive chosen ciphertext attack to reveal the private key. A possible scenario is that the attacker places a sensor (for example a standard smartphone) in the vicinity of the targeted machine. That machine is assumed to do unattended RSA decryption of received mails, for example by using a mail client which speeds up browsing by opportunistically decrypting mails expected to be read soon.While listening to the acoustic emanations of the targeted machine, the smartphone will send new encrypted messages to that machine and re-construct the private key bit by bit.A 4096 bit RSA key used on a laptop can be revealed within an hour.
GnuPG 1.4.16 avoids this attack by employing RSA blinding during decryption.GnuPG 2.x and current Gpg4win versions make use of Libgcrypt which employs RSA blinding anyway and are thus not vulnerable.
For the highly interesting research on acoustic cryptanalysis and the details of the attack see http://www.cs.tau.ac.il/~tromer/acoustic/ .
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 18 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.4.16-2
- New upstream v1.4.16
fixes for CVE-2013-4576
* Mon Oct 7 2013 Brian C. Lane <bcl(a)redhat.com> 1.4.15-1
- New upstream v1.4.15
fixes for CVE-2013-4402 (#1015967)
fixes for CVE-2013-4351 (#1010140)
* Mon Jul 29 2013 Brian C. Lane <bcl(a)redhat.com> 1.4.14-1
- New upstream v1.4.14
fixes for CVE-2013-4242 (#988592)
includes fix for build on big-endian arches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1043327 - CVE-2013-4576 gnupg: RSA secret key recovery via acoustic cryptanalysis
https://bugzilla.redhat.com/show_bug.cgi?id=1043327
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update gnupg' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 20 Update: metrics-3.0.1-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23792
2013-12-22 04:25:18
--------------------------------------------------------------------------------
Name : metrics
Product : Fedora 20
Version : 3.0.1
Release : 1.fc20
URL : http://metrics.codahale.com/
Summary : Java library which gives you what your code does in production
Description :
Metrics is a Java library which gives you unparalleled insight
into what your code does in production.
Developed by Yammer to instrument their JVM-based back-end services,
Metrics provides a powerful toolkit of ways to measure the behavior
of critical components in your production environment.
With modules for common libraries like Jetty, Logback, Log4j,
Apache HttpClient, Ehcache, JDBI, Jersey and reporting back-ends like
Ganglia and Graphite, Metrics provides you with full-stack visibility.
For more information, please see the documentation.
This package provides the Metrics Core Library.
--------------------------------------------------------------------------------
Update Information:
Initial import (#861502).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #861502 - Review Request: metrics - Java library which gives you what your code does in production
https://bugzilla.redhat.com/show_bug.cgi?id=861502
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update metrics' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 20 Update: dbus-1.6.12-8.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-24022
2013-12-28 00:59:07
--------------------------------------------------------------------------------
Name : dbus
Product : Fedora 20
Version : 1.6.12
Release : 8.fc20
URL : http://www.freedesktop.org/software/dbus/
Summary : D-BUS message bus
Description :
D-BUS is a system for sending messages between applications. It is
used both for the system-wide message bus service, and as a
per-user-login-session messaging facility.
--------------------------------------------------------------------------------
Update Information:
valgrind is available on selected arches, fixes build on secondary arches
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 26 2013 Dan Horák <dan[at]danny.cz> - 1:1.6.12-8
- valgrind is available only on selected arches
* Fri Dec 20 2013 Colin Walters <walters(a)redhat.com> - 1:1.6.12-7
- Disable -Werror for now; the alignment code is right, but I
do not want to adjust the code right now to fix the warning.
Just get a build going with the previous code to
Resolves: #1044726
* Wed Dec 18 2013 Colin Walters <walters(a)redhat.com> - 1:1.6.12-6
- BR valgrind; was probably not intended to be a dependency by default,
but there's really no reason why not to use it.
* Mon Nov 11 2013 Dan Williams <dcbw(a)redhat.com> - 1:1.6.12-5
- Fix infinite loop in _dbus_babysitter_unref() (fdo#68945) (rh#1016446)
* Wed Jul 24 2013 Colin Walters <walters(a)verbum.org> - 1:1.6.12-4
- Add patch to fix test-marshal on s390.
* Thu Jul 18 2013 Colin Walters <walters(a)verbum.org> - 1:1.6.12-3
- Find all logs automake has hidden and cat them for visibility
into the mock logs.
* Thu Jul 18 2013 Colin Walters <walters(a)verbum.org> - 1:1.6.12-2
- Enable all upstream tests
Resolves: #955532
This is fairly hacky; a much better replacement would be
something like the InstalledTests system. But we have to live
with rpm and stuff for now...
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update dbus' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months
Fedora 18 Update: mate-power-manager-1.6.3-1.fc18
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23833
2013-12-22 04:26:41
--------------------------------------------------------------------------------
Name : mate-power-manager
Product : Fedora 18
Version : 1.6.3
Release : 1.fc18
URL : http://pub.mate-desktop.org
Summary : MATE power management service
Description :
MATE Power Manager uses the information and facilities provided by UPower
displaying icons and handling user callbacks in an interactive MATE session.
--------------------------------------------------------------------------------
Update Information:
- updated to 1.6.3 release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2013 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.6.3-1
- updated to 1.6.3 release
- fix build, add mate-power-manager_set-DISABLE_DEPRECATED-to-an-empty-string.patch
- remove BR mate-keyring-devel
- fix bogus date in %changelog
* Sun Nov 10 2013 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.6.3-0.4.gitbc54d96
- support for upower-1.0
* Sat Oct 19 2013 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.6.3-0.3.gitbc54d96
- switch to gnome-keyring for > f19
* Mon Oct 14 2013 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.6.3-0.2.gitbc54d96
- fix mouse click on brightness applet, rhbz (#1018915)
* Sun Oct 13 2013 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.6.3-0.1.gitbc54d96
- update to latest snapshot
- removed upstreamed patches, already in snapshot
- add DBUS interface to kbdbacklight control patch, rhbz (#964678)
* Sun Sep 29 2013 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.6.2-4
- fix suspend on lid close, fix rhbz (#1012718)
* Fri Aug 9 2013 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.6.2-3
- fix display-to-sleep-when-inactive, rhbz #994232
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.6.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Jul 24 2013 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.6.2-1
- update to 1.6.2 release
- fix systemd-login1 support, (#972881)
- remove runtime require ConsoleKit-x11
- remove gsettings convert file
- remove runtime require ConsoleKit-x11
- remove BR systemd-devel
- remove systemd configure flags
- remove NOCONFIGURE=1 ./autogen.sh
* Thu Jun 20 2013 Rex Dieter <rdieter(a)fedoraproject.org> 1.6.1-3
- Requires: ConsoleKit-x11 (#972881)
* Tue Jun 18 2013 Dan Mashal <dan.mashal(a)fedoraproject.org> 1.6.1-2
- Add patch to fix suspend on lid close
* Fri May 10 2013 Dan Mashal <dan.mashal(a)fedoraproject.org> 1.6.1-1
- Update to latest upstream release
- Add systemd sleep configure flag
* Sun Apr 21 2013 Dan Mashal <dan.mashal(a)fedoraproject.org> - 1.6.0-2
- Add upstream patch to fix suspend on lid close
* Mon Apr 8 2013 Dan Mashal <dan.mashal(a)fedoraproject.org> - 1.6.0-1
- Update to 1.6.0 stable release
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5.1-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Fri Dec 21 2012 Dan Mashal <dan.mashal(a)fedoraproject.org> 1.5.1-5
- Rework specfile to make it easier to read and pretty.
- Drop duplicate BRs
* Thu Nov 29 2012 Nelson Marques <nmo.marques(a)gmail.com> - 1.5.1-4
- Add %name-1.5.1-add_systemd_checks.patch - fixes crasher,
systemd inhibit requires systemd >= 195, merged upstream
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mate-power-manager' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 3 months