ppc F-21 Branched report: 20141204 changes

ppc Fedora Branched Report rawhide at fedoraproject.org
Thu Dec 4 12:57:18 UTC 2014


Compose started at Thu Dec  4 11:10:03 UTC 2014
New package: octomap-1.6.8-1.fc21
             Efficient Probabilistic 3D Mapping Framework Based on Octrees


Updated Packages:

calligra-2.8.6-1.fc21
---------------------
* Mon Sep 22 2014 Rex Dieter <rdieter at fedoraproject.org> 2.8.6-1
- 2.8.6

* Tue Aug 26 2014 David Tardon <dtardon at redhat.com> - 2.8.5-6
- rebuild for ICU 53.1

* Fri Aug 15 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.8.5-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Fri Aug 15 2014 Rex Dieter <rdieter at fedoraproject.org> 2.8.5-4
- rebuild (okular)

* Wed Aug 06 2014 Rex Dieter <rdieter at fedoraproject.org> 2.8.5-3
- rebuild (kde-4.13.97)

* Mon Jul 14 2014 Rex Dieter <rdieter at fedoraproject.org> 2.8.5-2
- rebuild (marble)

* Sun Jul 06 2014 Rex Dieter <rdieter at fedoraproject.org> 2.8.5-1
- 2.8.5

* Thu Jul 03 2014 Rex Dieter <rdieter at fedoraproject.org> 2.8.4-2
- optimize mimeinfo scriptlet

* Tue Jun 24 2014 Rex Dieter <rdieter at fedoraproject.org> 2.8.4-1
- 2.8.4

* Sat Jun 07 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.8.3-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild


Size change: 28146 bytes

fedora-productimg-cloud-21-8.fc21
---------------------------------
* Mon Dec 01 2014 Stephen Gallagher <sgallagh at redhat.com> 21-8
- Manually merge the product CSS with the anaconda CSS
  This is a hacky workaround and needs to be fixed immediately after we
  release F21.

* Wed Nov 26 2014 Matthew Miller <mattdm at fedoraproject.org> 21-7
- correctly pregenerate product.img cpio archive


Size change: 2305 bytes

fedora-productimg-server-21-8.fc21
----------------------------------
* Mon Dec 01 2014 Stephen Gallagher <sgallagh at redhat.com> 21-8
- Manually merge the product CSS with the anaconda CSS
  This is a hacky workaround and needs to be fixed immediately after we
  release F21.

* Wed Nov 26 2014 Matthew Miller <mattdm at fedoraproject.org> 21-7
- correctly pregenerate product.img cpio archive


Size change: 2307 bytes

fedora-productimg-workstation-21-8.fc21
---------------------------------------
* Mon Dec 01 2014 Stephen Gallagher <sgallagh at redhat.com> 21-8
- Manually merge the product CSS with the anaconda CSS
  This is a hacky workaround and needs to be fixed immediately after we
  release F21.

* Wed Nov 26 2014 Matthew Miller <mattdm at fedoraproject.org> 21-7
- correctly pregenerate product.img cpio archive


Size change: 2285 bytes

kde-runtime-4.14.3-2.fc21
-------------------------
* Mon Nov 17 2014 Than Ngo <than at redhat.com> - 4.14.3-2
- fix bz#1164609, CVE-2014-8600, Insufficient Input Validation By IO Slaves


Size change: 798 bytes

kwebkitpart-1.3.4-5.fc21
------------------------
* Fri Nov 14 2014 Rex Dieter <rdieter at fedoraproject.org> 1.3.4-5
- CVE-2014-8600 Insufficient Input Validation (#1164293)

* Sun Aug 17 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.3.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild


Size change: 1550 bytes

selinux-policy-3.13.1-99.fc21
-----------------------------
* Thu Nov 20 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-99
- Allow NetworkManager stream connect on openvpn. BZ(1165110)

* Wed Nov 19 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-98
- Allow networkmanager manage also openvpn sock pid files.

* Wed Nov 19 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-97
- Allow login programs to write to processes at all levels.
- Fix seutil_dontaudit_access_check_semanage_read_lock()
- Fix audit_access interfaces to make it sense in seutils.if.
- Label sock file charon.vici as ipsec_var_run_t. BZ(1165065)
- Add seutil_access_check_module_store() interfaces.
- Add seutil_access_check_semanage_read_lock().
- Add seutil_access_check_setfiles() interface.
- Add additional interfaces for access checks on load_policy
- Allow sendmail to create dead.letter. BZ(1165443)
- Add support for /usr/bin/start-puppet-ca helper script.
- Allow rpm scripts to enable/disable transient systemd units.
- Allow openvpn to create uuid connections in /var/run/NetworkManager with NM labeling.
- Make kpropdas nsswitch domain
- Make all glance domain as nsswitch domains.
- Allow selinux_child running as sssd access check on /etc/selinux/targeted/modules/active.
- Allow access checks on setfiles/load_policy/semanage_lock for selinux_child running as sssd_t.

* Fri Nov 14 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-96
- Allow bumblebee to use nsswitch. BZ(1155339)
- Allow openvpn to stream connect to networkmanager. BZ(1164182)
- Allow smbd to create HOMEDIRS is pam_oddjob_mkhomedir in MLS.
- Allow cpuplug rw virtual memory sysctl. BZ (1077831)
- Docker needs to write to sysfs, needs back port to F20,F21, RHEL7

* Mon Nov 10 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-95
- Allow ifconfig to read/write inhertited kdumpctl pipes.
- Label /etc/strongimcv as ipsec_conf_file_t.
- Add dontaudit interfaces for audit_access in seutil.
- Fix seutil_dontaudit_access_check_load_policy()
- Dontaudit access check on setfiles/load_policy for sssd_t.
- Add kdump_rw_inherited_kdumpctl_tmp_pipes()
- Make linuxptp services as unconfined.
- Added new policy linuxptp.
- Label keystone cgi files as keystone_cgi_script_exec_t. BZ(1138424)
- Dontaudit policykit_auth_t to access to user home dirs. BZ (1157256)

* Fri Nov 07 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-94
- Added interface userdom_dontaudit_manage_user_home_dirs
- New interface dev_rw_uhid_dev
- Fix unconfined_server_dbus_chat() interface.
- Allow login domains to create kernel keyring with different level.
- Dontaudit policykit_auth_t to write to user home dirs. BZ (1157256)
- Make tuned as unconfined domain.
- Allow bluetooth read/write uhid devices. BZ (1161169)
- Add fixes for hypervkvp daemon
- make zoneminder as dbus client by default.
- Allow guest to connect to libvirt using unix_stream_socket.
- Allow all bus client domains to dbus chat with unconfined_service_t.
- Allow inetd service without own policy to run in inetd_child_t which is unconfined domain.
- Make opensm as nsswitch domain to make it working with sssd.
- Allow brctl to read meminfo.
- Allow winbind-helper to execute ntlm_auth in the caller domain.
- Make plymouthd as nsswitch domain to make it working with sssd.
- Make drbd as nsswitch domain to make it working with sssd
- Make conman as nsswitch domain to make ipmitool.exp runing as conman_t working.
- Add support for /var/lib/sntp directory.

* Mon Nov 03 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-93
- Add 15672 as amqp_port_t
- Add support for /dev/nvme controllerdevice nodes created by nvme driver.
- Label also logrotate.status.tmp as logrotate_var_lib_t. BZ(1158835)
- Allow dovecot to create user's home directory when they log into IMAP.
- Allow nslcd to read /dev/urandom.
- Allow snapperd to dbus chat with system cron jobs.
- Add suppor for keepalived unconfined scripts and allow keepalived to read all domain state and kill capability.
- Fix rhcs_signull_haproxy() interface.
- Allow nslcd to execute netstat.
- Allow abrt to read software raid state. BZ (1157770)


Size change: 7712 bytes

systemd-216-12.fc21
-------------------
* Thu Nov 27 2014 Jan Synáček <jsynacek at redhat.com> - 216-12
- unicode_start is not started on boot (#1150384)


Size change: 929 bytes


Summary:
Added Packages: 1
Removed Packages: 0
Modified Packages: 8
Size of added packages: 1600227 (1.5 M)
Size change of modified packages: 46032 (45 k)
Size of removed packages: 0 (0 )
Size change: 1646259 (1.6 M)
Compose finished at Thu Dec  4 12:54:47 UTC 2014



More information about the ppc mailing list