package-announce December 2013

package-announce@lists.fedoraproject.org

1 participants
2522 discussions

Fedora 20 Update: kde-runtime-4.11.3-2.fc20
by updates＠fedoraproject.org 04 Dec '13

04 Dec '13

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-21747 2013-11-19 21:20:47 -------------------------------------------------------------------------------- Name : kde-runtime Product : Fedora 20 Version : 4.11.3 Release : 2.fc20 URL : http://www.kde.org/ Summary : KDE Runtime Description : Core runtime for KDE 4. -------------------------------------------------------------------------------- Update Information: Borrow code/patch from Mageia to support playing notifications via libcanberra, which avoids notification volume regressions ( see http://bugs.kde.org/324975 ). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1035066 - Volume gets restored to 100% after each knotify event https://bugzilla.redhat.com/show_bug.cgi?id=1035066 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update kde-runtime' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 20 Update: fedora-release-20-1
by updates＠fedoraproject.org 04 Dec '13

04 Dec '13

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-22350 2013-11-29 15:43:15 -------------------------------------------------------------------------------- Name : fedora-release Product : Fedora 20 Version : 20 Release : 1 URL : http://fedoraproject.org Summary : Fedora release files Description : Fedora release files such as yum configs and various /etc/ files that define the release. -------------------------------------------------------------------------------- Update Information: disable updates-testing and enable fedora repo 7 day metadata caching in preperation for final -------------------------------------------------------------------------------- References: [ 1 ] Bug #1035533 - Fedora 20 final fedora-release and generic-release packages required for GA https://bugzilla.redhat.com/show_bug.cgi?id=1035533 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update fedora-release' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 20 Update: glib2-2.38.2-2.fc20
by updates＠fedoraproject.org 04 Dec '13

04 Dec '13

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-22340 2013-11-29 15:42:56 -------------------------------------------------------------------------------- Name : glib2 Product : Fedora 20 Version : 2.38.2 Release : 2.fc20 URL : http://www.gtk.org Summary : A library of handy utility functions Description : GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system. -------------------------------------------------------------------------------- Update Information: Resolves: rhbz#1035423 - Use after free causes critical warnings in g-s-d, potential crasher -------------------------------------------------------------------------------- References: [ 1 ] Bug #1035423 - Use after free causes critical warnings in g-s-d, potential crasher https://bugzilla.redhat.com/show_bug.cgi?id=1035423 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update glib2' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 20 Update: kernel-3.11.10-300.fc20
by updates＠fedoraproject.org 04 Dec '13

04 Dec '13

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-22531 2013-12-01 17:28:10 -------------------------------------------------------------------------------- Name : kernel Product : Fedora 20 Version : 3.11.10 Release : 300.fc20 URL : http://www.kernel.org/ Summary : The Linux kernel Description : The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc. -------------------------------------------------------------------------------- Update Information: Update to last upstream 3.11 stable release, 3.11.10. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1033578 - CVE-2013-6378 Kernel: drivers: libertas: potential oops in debugfs https://bugzilla.redhat.com/show_bug.cgi?id=1033578 [ 2 ] Bug #1033593 - CVE-2013-6380 Kernel: aacraid: invalid pointer dereference https://bugzilla.redhat.com/show_bug.cgi?id=1033593 [ 3 ] Bug #1033603 - CVE-2013-6382 Kernel: fs: xfs: missing check for ZERO_SIZE_PTR https://bugzilla.redhat.com/show_bug.cgi?id=1033603 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update kernel' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 20 Update: NetworkManager-0.9.9.0-20.git20131003.fc20
by updates＠fedoraproject.org 04 Dec '13

04 Dec '13

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-22654 2013-12-03 18:07:04 -------------------------------------------------------------------------------- Name : NetworkManager Product : Fedora 20 Version : 0.9.9.0 Release : 20.git20131003.fc20 URL : http://www.gnome.org/projects/NetworkManager/ Summary : Network connection manager and user applications Description : NetworkManager is a system network service that manages your network devices and connections, attempting to keep active network connectivity when available. It manages ethernet, WiFi, mobile broadband (WWAN), and PPPoE devices, and provides VPN integration with a variety of different VPN services. -------------------------------------------------------------------------------- Update Information: Fixes a problem with some OpenVPN configurations -------------------------------------------------------------------------------- References: [ 1 ] Bug #1018317 - Network Manager can't connect to OpenVPN network in F20 https://bugzilla.redhat.com/show_bug.cgi?id=1018317 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update NetworkManager' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 19 Update: python-TornadIO2-0.0.4-4.fc19
by updates＠fedoraproject.org 03 Dec '13

03 Dec '13

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-19276 2013-10-18 18:06:24 -------------------------------------------------------------------------------- Name : python-TornadIO2 Product : Fedora 19 Version : 0.0.4 Release : 4.fc19 URL : http://github.com/MrJoes/tornadio2/ Summary : Socket.io server on top of Tornado framework Description : This is python server implementation of the Socket.IO real-time transport library on top of the Tornado framework. TornadIO2 is compatible with 0.7+ version of the Socket.IO and implements most of the features found in original Socket.IO server software. -------------------------------------------------------------------------------- Update Information: New package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #980168 - Review Request: python-TornadIO2 - Socket.io server on top of Tornado framework https://bugzilla.redhat.com/show_bug.cgi?id=980168 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update python-TornadIO2' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 19 Update: xorg-x11-drv-geode-2.11.15-1.fc19
by updates＠fedoraproject.org 03 Dec '13

03 Dec '13

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-22096 2013-11-26 03:05:12 -------------------------------------------------------------------------------- Name : xorg-x11-drv-geode Product : Fedora 19 Version : 2.11.15 Release : 1.fc19 URL : http://www.x.org/wiki/AMDGeodeDriver Summary : Xorg X11 AMD Geode video driver Description : X.Org X11 AMD Geode video driver. -------------------------------------------------------------------------------- Update Information: New upstream bugfix release -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 24 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 2.11.15-1 - New upstream release * Wed Nov 20 2013 Adam Jackson <ajax(a)redhat.com> - 2.11.14-11 - 1.15RC2 ABI rebuild * Wed Nov 6 2013 Adam Jackson <ajax(a)redhat.com> - 2.11.14-10 - 1.15RC1 ABI rebuild * Fri Oct 25 2013 Adam Jackson <ajax(a)redhat.com> 2.11.14-9 - Fix FTBFS against 1.15 * Fri Oct 25 2013 Adam Jackson <ajax(a)redhat.com> - 2.11.14-8 - ABI rebuild * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.11.14-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update xorg-x11-drv-geode' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 19 Update: ruby-2.0.0.353-16.fc19
by updates＠fedoraproject.org 03 Dec '13

03 Dec '13

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-22423 2013-12-01 08:09:56 -------------------------------------------------------------------------------- Name : ruby Product : Fedora 19 Version : 2.0.0.353 Release : 16.fc19 URL : http://ruby-lang.org/ Summary : An interpreter of object-oriented scripting language Description : Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. -------------------------------------------------------------------------------- Update Information: Update to Ruby 2.0.0-p353. This includes fix to an overflow in floating point number parsing found in Ruby currently being shipped on Fedora 20. This vulnerability has been assigned the CVE identifier CVE-2013-4164. This new rpm should fix this issue. -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 25 2013 Vít Ondruch <vondruch(a)redhat.com> - 2.0.0.353-16 - Update to Ruby 2.0.0-p353. - Fix heap overflow in floating point parsing (CVE-2013-4164). * Tue Jul 30 2013 Vít Ondruch <vondruch(a)redhat.com> - 2.0.0.247-15 - Move Psych symlinks to vendor dir, to prevent F18 -> F19 upgrade issues (rhbz#988490). * Mon Jul 15 2013 Vít Ondruch <vondruch(a)redhat.com> - 2.0.0.247-14 - Add forgotten psych.rb link into rubygem-psych to fix "private method `load' called for Psych:Moduler" error (rhbz#979133). * Thu Jul 11 2013 Vít Ondruch <vondruch(a)redhat.com> - 2.0.0.247-13 - Fixes multilib conlicts of .gemspec files. - Make symlinks for psych gem to ruby stdlib dirs (rhbz#979133). - Use system-wide cert.pem. * Thu Jul 4 2013 Vít Ondruch <vondruch(a)redhat.com> - 2.0.0.247-12 - Fix RubyGems search paths when building gems with native extension (rhbz#979133). * Tue Jul 2 2013 Vít Ondruch <vondruch(a)redhat.com> - 2.0.0.247-11 - Fix RubyGems version. * Tue Jul 2 2013 Vít Ondruch <vondruch(a)redhat.com> - 2.0.0.247-10 - Better support for build without configuration (rhbz#977941). * Mon Jul 1 2013 Vít Ondruch <vondruch(a)redhat.com> - 2.0.0.247-9 - Update to Ruby 2.0.0-p247 (rhbz#979605). - Fix CVE-2013-4073. - Fix for wrong makefiles created by mkmf (rhbz#921650). - Add support for ABRT autoloading. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1034122 - ruby-2.0.0.353 is available https://bugzilla.redhat.com/show_bug.cgi?id=1034122 [ 2 ] Bug #1033546 - CVE-2013-4164 ruby: heap overflow in floating point parsing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1033546 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ruby' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 19 Update: powertop-2.5-1.fc19
by updates＠fedoraproject.org 03 Dec '13

03 Dec '13

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-22118 2013-11-26 03:06:21 -------------------------------------------------------------------------------- Name : powertop Product : Fedora 19 Version : 2.5 Release : 1.fc19 URL : http://01.org/powertop/ Summary : Power consumption monitor Description : PowerTOP is a tool that finds the software component(s) that make your computer use more power than necessary while it is idle. -------------------------------------------------------------------------------- Update Information: This is new version that fixes several bugs and adds new features, for details see upstream announcement: https://01.org/powertop/downloads/2013/powertop-v2.5 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 25 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 2.5-1 - New version Resolves: rhbz#1034113 - Dropped unlimit-fds, fd-limit-err, reg-net-params patches (all upstreamed) * Tue Oct 29 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 2.4-6 - Fixed some possible unregistered parameters errors Resolves: rhbz#947425 * Thu Oct 10 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 2.4-5 - New version of unlimit-fds patch - Fixed error message if FDs limit is reached (by fd-limit-err patch) * Fri Sep 20 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 2.4-4 - Unlimit FDs (by unlimit-fds patch) and dropped the fd-limit-err patch * Thu Sep 19 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 2.4-3 - Printed friendly error message if the system is running out of FDs (by fd-limit-err patch) * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Tue Jul 23 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 2.4-1 - New version Resolves: rhbz#987404 * Fri Jun 28 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 2.3-4 - Added check if ondemand governor is applicable (by ondemand-check patch) Resolves: rhbz#697273 * Tue Jun 25 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 2.3-3 - Added workload option to the man page * Wed Apr 10 2013 Jaroslav Škarvada <jskarvad(a)redhat.com> - 2.3-2 - Added post requirements for coreutils -------------------------------------------------------------------------------- References: [ 1 ] Bug #1034113 - powertop-2.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1034113 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update powertop' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 19 Update: python-keyring-3.3-1.fc19
by updates＠fedoraproject.org 03 Dec '13

03 Dec '13

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-22694 2013-12-04 06:15:26 -------------------------------------------------------------------------------- Name : python-keyring Product : Fedora 19 Version : 3.3 Release : 1.fc19 URL : http://bitbucket.org/kang/python-keyring-lib/ Summary : Python 2.x library to store and access passwords safely Description : The Python keyring lib provides a easy way to access the system keyring service from python. It can be used in any application that needs safe password storage. The keyring services supported by the Python keyring lib: * **OSXKeychain**: supports the Keychain service in Mac OS X. * **KDEKWallet**: supports the KDE's Kwallet service. * **GnomeKeyring**: for Gnome 2 environment. * **SecretServiceKeyring**: for newer GNOME and KDE environments. * **WinVaultKeyring**: supports the Windows Credential Vault Besides these native password storing services provided by operating systems. Python keyring lib also provides following build-in keyrings. * **Win32CryptoKeyring**: for Windows 2k+. * **CryptedFileKeyring**: a command line interface keyring base on PyCrypto. * **UncryptedFileKeyring**: a keyring which leaves passwords directly in file. -------------------------------------------------------------------------------- Update Information: ======= CHANGES ======= --- 3.3 --- * Pull request #40: KWallet backend will now honor the ``KDE_FULL_SESSION`` environment variable as found on openSUSE. ----- 3.2.1 ----- * SecretService backend: use a different function to check that the backend is functional. The default collection may not exist, but the collection will remain usable in that case. Also, make the error message more verbose. Resolves https://bugs.launchpad.net/bugs/1242412. --- 3.2 --- * Issue #120: Invoke KeyringBackend.priority during load_keyring to ensure that any keyring loaded is actually viable (or raises an informative exception). * File keyring: - Issue #123: fix removing items. - Correctly escape item name when removing. - Use with statement when working with files. * Add a test for removing one item in group. * Issue #81: Added experimental support for third-party backends. See `keyring.core._load_library_extensions` for information on supplying a third-party backend. --- 3.1 --- * All code now runs natively on both Python 2 and Python 3, no 2to3 conversion is required. * Testsuite: clean up, and make more use of unittest2 methods. ----- 3.0.5 ----- * Issue #114: Fix logic in pyfs detection. ----- 3.0.4 ----- * Issue #114: Fix detection of pyfs under Mercurial Demand Import. ----- 3.0.3 ----- * Simplified the implementation of ``keyring.core.load_keyring``. It now uses ``__import__`` instead of loading modules explicitly. The ``keyring_path`` parameter to ``load_keyring`` is now deprecated. Callers should instead ensure their module is available on ``sys.path`` before calling ``load_keyring``. Keyring still honors ``keyring-path``. This change fixes Issue #113 in which the explicit module loading of keyring modules was breaking package-relative imports. ----- 3.0.2 ----- * Renamed ``keyring.util.platform`` to ``keyring.util.platform_``. As reported in Issue #112 and `mercurial_keyring #31 <https://bitbucket.org/Mekk/mercurial_keyring/issue/31>`_ and in `Mercurial itself <http://bz.selenic.com/show_bug.cgi?id=4029>`_, Mercurial's Demand Import does not honor ``absolute_import`` directives, so it's not possible to have a module with the same name as another top-level module. A patch is in place to fix this issue upstream, but to support older Mercurial versions, this patch will remain for some time. ----- 3.0.1 ----- * Ensure that modules are actually imported even in Mercurial's Demand Import environment. --- 3.0 --- * Removed support for Python 2.5. * Removed names in ``keyring.backend`` moved in 1.1 and previously retained for compatibilty. ----- 2.1.1 ----- * Restored Python 2.5 compatibility (lost in 2.0). --- 2.1 --- * Issue #10: Added a 'store' attribute to the OS X Keyring, enabling custom instances of the KeyringBackend to use another store, such as the 'internet' store. For example:: keys = keyring.backends.OS_X.Keyring() keys.store = 'internet' keys.set_password(system, user, password) keys.get_password(system, user) The default for all instances can be set in the class:: keyring.backends.OS_X.Keyring.store = 'internet' * GnomeKeyring: fix availability checks, and make sure the warning message from pygobject is not printed. * Fixes to GnomeKeyring and SecretService tests. ----- 2.0.3 ----- * Issue #112: Backend viability/priority checks now are more aggressive about module presence checking, requesting ``__name__`` from imported modules to force the demand importer to actually attempt the import. ----- 2.0.2 ----- * Issue #111: Windows backend isn't viable on non-Windows platforms. ----- 2.0.1 ----- * Issue #110: Fix issues with ``Windows.RegistryKeyring``. --- 2.0 --- * Prioritized backend support. The primary interface for Keyring backend classes has been refactored to now emit a 'priority' based on the current environment (operating system, libraries available, etc). These priorities provide an indication of the applicability of that backend for the current environment. Users are still welcome to specify a particular backend in configuration, but the default behavior should now be to select the most appropriate backend by default. ----- 1.6.1 ----- * Only include pytest-runner in 'setup requirements' when ptr invocation is indicated in the command-line (Issue #105). --- 1.6 --- * GNOME Keyring backend: - Use the same attributes (``username`` / ``service``) as the SecretService backend uses, allow searching for old ones for compatibility. - Also set ``application`` attribute. - Correctly handle all types of errors, not only ``CANCELLED`` and ``NO_MATCH``. - Avoid printing warnings to stderr when GnomeKeyring is not available. * Secret Service backend: - Use a better label for passwords, the same as GNOME Keyring backend uses. --- 1.5 --- * SecretService: allow deleting items created using previous python-keyring versions. Before the switch to secretstorage, python-keyring didn't set "application" attribute. Now in addition to supporting searching for items without that attribute, python-keyring also supports deleting them. * Use ``secretstorage.get_default_collection`` if it's available. On secretstorage 1.0 or later, python-keyring now tries to create the default collection if it doesn't exist, instead of just raising the error. * Improvements for tests, including fix for Issue #102. --- 1.4 --- * Switch GnomeKeyring backend to use native libgnome-keyring via GObject Introspection, not the obsolete python-gnomekeyring module. --- 1.3 --- * Use the `SecretStorage library <https://pypi.python.org/pypi/SecretStorage>`_ to implement the Secret Service backend (instead of using dbus directly). Now the keyring supports prompting for and deleting passwords. Fixes #69, #77, and #93. * Catch `gnomekeyring.IOError` per the issue `reported in Nova client <https://bugs.launchpad.net/python-novaclient/+bug/1116302>`_. * Issue #92 Added support for delete_password on Mac OS X Keychain. ----- 1.2.3 ----- * Fix for Encrypted File backend on Python 3. * Issue #97 Improved support for PyPy. ----- 1.2.2 ----- * Fixed handling situations when user cancels kwallet dialog or denies access for the app. ----- 1.2.1 ----- * Fix for kwallet delete. * Fix for OS X backend on Python 3. * Issue #84: Fix for Google backend on Python 3 (use of raw_input not caught by 2to3). --- 1.2 --- * Implemented delete_password on most keyrings. Keyring 2.0 will require delete_password to implement a Keyring. Fixes #79. ----- 1.1.2 ----- * Issue #78: pyfilesystem backend now works on Windows. ----- 1.1.1 ----- * Fixed MANIFEST.in so .rst files are included. --- 1.1 --- This is the last build that will support installation in a pure-distutils mode. Subsequent releases will require setuptools/distribute to install. Python 3 installs have always had this requirement (for 2to3 install support), but starting with the next minor release (1.2+), setuptools will be required. Additionally, this release has made some substantial refactoring in an attempt to modularize the backends. An attempt has been made to maintain 100% backward-compatibility, although if your library does anything fancy with module structure or clasess, some tweaking may be necessary. The backward-compatible references will be removed in 2.0, so the 1.1+ releases represent a transitional implementation which should work with both legacy and updated module structure. * Added a console-script 'keyring' invoking the command-line interface. * Deprecated _ExtensionKeyring. * Moved PasswordSetError and InitError to an `errors` module (references kept for backward-compatibility). * Moved concrete backend implementations into their own modules (references kept for backward compatibility): - OSXKeychain -> backends.OS_X.Keyring - GnomeKeyring -> backends.Gnome.Keyring - SecretServiceKeyring -> backends.SecretService.Keyring - KDEKWallet -> backends.kwallet.Keyring - BasicFileKeyring -> backends.file.BaseKeyring - CryptedFileKeyring -> backends.file.EncryptedKeyring - UncryptedFileKeyring -> backends.file.PlaintextKeyring - Win32CryptoKeyring -> backends.Windows.EncryptedKeyring - WinVaultKeyring -> backends.Windows.WinVaultKeyring - Win32CryptoRegistry -> backends.Windows.RegistryKeyring - select_windows_backend -> backends.Windows.select_windows_backend - GoogleDocsKeyring -> backends.Google.DocsKeyring - Credential -> keyring.credentials.Credential - BaseCredential -> keyring.credentials.SimpleCredential - EnvironCredential -> keyring.credentials.EnvironCredential - GoogleEnvironCredential -> backends.Google.EnvironCredential - BaseKeyczarCrypter -> backends.keyczar.BaseCrypter - KeyczarCrypter -> backends.keyczar.Crypter - EnvironKeyczarCrypter -> backends.keyczar.EnvironCrypter - EnvironGoogleDocsKeyring -> backends.Google.KeyczarDocsKeyring - BasicPyfilesystemKeyring -> backends.pyfs.BasicKeyring - UnencryptedPyfilesystemKeyring -> backends.pyfs.PlaintextKeyring - EncryptedPyfilesystemKeyring -> backends.pyfs.EncryptedKeyring - EnvironEncryptedPyfilesystemKeyring -> backends.pyfs.KeyczarKeyring - MultipartKeyringWrapper -> backends.multi.MultipartKeyringWrapper * Officially require Python 2.5 or greater (although unofficially, this requirement has been in place since 0.10). --- 1.0 --- This backward-incompatible release attempts to remove some cruft from the codebase that's accumulated over the versions. * Removed legacy file relocation support. `keyring` no longer supports loading configuration or file-based backends from ~. If upgrading from 0.8 or later, the files should already have been migrated to their new proper locations. If upgrading from 0.7.x or earlier, the files will have to be migrated manually. * Removed CryptedFileKeyring migration support. To maintain an existing CryptedFileKeyring, one must first upgrade to 0.9.2 or later and access the keyring before upgrading to 1.0 to retain the existing keyring. * File System backends now create files without group and world permissions. Fixes #67. ------ 0.10.1 ------ * Merged 0.9.3 to include fix for #75. ---- 0.10 ---- * Add support for using `Keyczar <http://www.keyczar.org/>`_ to encrypt keyrings. Keyczar is "an open source cryptographic toolkit designed to make it easier and safer for developers to use cryptography in their applications." * Added support for storing keyrings on Google Docs or any other filesystem supported by pyfilesystem. * Fixed issue in Gnome Keyring when unicode is passed as the service name, username, or password. * Tweaked SecretService code to pass unicode to DBus, as unicode is the preferred format. * Issue #71 - Fixed logic in CryptedFileKeyring. * Unencrypted keyring file will be saved with user read/write (and not group or world read/write). ----- 0.9.3 ----- * Ensure migration is run when get_password is called. Fixes #75. Thanks to Marc Deslauriers for reporting the bug and supplying the patch. ----- 0.9.2 ----- * Keyring 0.9.1 introduced a whole different storage format for the CryptedFileKeyring, but this introduced some potential compatibility issues. This release incorporates the security updates but reverts to the INI file format for storage, only encrypting the passwords and leaving the service and usernames in plaintext. Subsequent releases may incorporate a new keyring to implement a whole-file encrypted version. Fixes #64. * The CryptedFileKeyring now requires simplejson for Python 2.5 clients. ----- 0.9.1 ----- * Fix for issue where SecretServiceBackend.set_password would raise a UnicodeError on Python 3 or when a unicode password was provided on Python 2. * CryptedFileKeyring now uses PBKDF2 to derive the key from the user's password and a random hash. The IV is chosen randomly as well. All the stored passwords are encrypted at once. Any keyrings using the old format will be automatically converted to the new format (but will no longer be compatible with 0.9 and earlier). The user's password is no longer limited to 32 characters. PyCrypto 2.5 or greater is now required for this keyring. --- 0.9 --- * Add support for GTK 3 and secret service D-Bus. Fixes #52. * Issue #60 - Use correct method for decoding. ----- 0.8.1 ----- * Fix regression in keyring lib on Windows XP where the LOCALAPPDATA environment variable is not present. --- 0.8 --- * Mac OS X keyring backend now uses subprocess calls to the `security` command instead of calling the API, which with the latest updates, no longer allows Python to invoke from a virtualenv. Fixes issue #13. * When using file-based storage, the keyring files are no longer stored in the user's home directory, but are instead stored in platform-friendly locations (`%localappdata%\Python Keyring` on Windows and according to the freedesktop.org Base Dir Specification (`$XDG_DATA_HOME/python_keyring` or `$HOME/.local/share/python_keyring`) on other operating systems). This fixes #21. *Backward Compatibility Notice* Due to the new storage location for file-based keyrings, keyring 0.8 supports backward compatibility by automatically moving the password files to the updated location. In general, users can upgrade to 0.8 and continue to operate normally. Any applications that customize the storage location or make assumptions about the storage location will need to take this change into consideration. Additionally, after upgrading to 0.8, it is not possible to downgrade to 0.7 without manually moving configuration files. In 1.0, the backward compatibilty will be removed. ----- 0.7.1 ----- * Removed non-ASCII characters from README and CHANGES docs (required by distutils if we're to include them in the long_description). Fixes #55. --- 0.7 --- * Python 3 is now supported. All tests now pass under Python 3.2 on Windows and Linux (although Linux backend support is limited). Fixes #28. * Extension modules on Mac and Windows replaced by pure-Python ctypes implementations. Thanks to Jerome Laheurte. * WinVaultKeyring now supports multiple passwords for the same service. Fixes #47. * Most of the tests don't require user interaction anymore. * Entries stored in Gnome Keyring appears now with a meaningful name if you try to browser your keyring (for ex. with Seahorse) * Tests from Gnome Keyring no longer pollute the user own keyring. * `keyring.util.escape` now accepts only unicode strings. Don't try to encode strings passed to it. ----- 0.6.2 ----- * fix compiling on OSX with XCode 4.0 ----- 0.6.1 ----- * Gnome keyring should not be used if there is no DISPLAY or if the dbus is not around (https://bugs.launchpad.net/launchpadlib/+bug/752282). --- 0.6 --- * Added `keyring.http` for facilitating HTTP Auth using keyring. * Add a utility to access the keyring from the command line. ----- 0.5.1 ----- * Remove a spurious KDE debug message when using KWallet * Fix a bug that caused an exception if the user canceled the KWallet dialog (https://bitbucket.org/kang/python-keyring-lib/issue/37/user-canceling-of-kd…). --- 0.5 --- * Now using the existing Gnome and KDE python libs instead of custom C++ code. * Using the getpass module instead of custom code --- 0.4 --- * Fixed the setup script (some subdirs were not included in the release.) --- 0.3 --- * Fixed keyring.core when the user doesn't have a cfg, or is not properly configured. * Fixed escaping issues for usernames with non-ascii characters --- 0.2 --- * Add support for Python 2.4+ http://bitbucket.org/kang/python-keyring-lib/issue/2 * Fix the bug in KDE Kwallet extension compiling http://bitbucket.org/kang/python-keyring-lib/issue/3 Update to version 3.1 Update to version 3.1 -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 2 2013 Christopher Meng <rpm(a)cicku.me> - 3.3-1 - Update to 3.3(BZ#1007354,BZ#872262) - Cleanup dependencies mess(BZ#1030944). - Optimize the %changelog section of the spec. * Tue Oct 22 2013 Ratnadeep Debnath <rtnpro(a)gmail.com> - 3.1-1 - Bump to version 3.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #872260 - CVE-2012-4571 python-keyring: weak encryption in keyring https://bugzilla.redhat.com/show_bug.cgi?id=872260 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update python-keyring' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce December 2013