Fedora 18 updates-testing report

Fri Jan 25 21:48:50 UTC 2013

The following Fedora 18 Security updates need testing:
 Age  URL
   7  https://admin.fedoraproject.org/updates/FEDORA-2013-0907/moodle-2.3.4-1.fc18
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-1176/ndjbdns-1.05.6-1.fc18
   5  https://admin.fedoraproject.org/updates/FEDORA-2013-1169/drupal7-7.19-1.fc18
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-1203/jakarta-commons-httpclient-3.1-12.fc18
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-1222/axis-1.4-19.fc18
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-1243/rhncfg-5.10.36-1.fc18
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-1277/python-tw2-jquery-2.0.3-5.fc18
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-1371/tinymce-spellchecker-2.0.5-8.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1460/Zim-0.59-1.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1492/freetype-2.4.10-3.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1455/coreutils-8.17-8.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1375/couchdb-1.2.1-2.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1407/libssh-0.5.4-1.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1434/xen-4.2.1-5.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1445/freeipa-3.1.2-1.fc18
  77  https://admin.fedoraproject.org/updates/FEDORA-2012-17834/cumin-0.1.5522-4.fc18
  13  https://admin.fedoraproject.org/updates/FEDORA-2013-0659/perl-5.16.2-237.fc18
  17  https://admin.fedoraproject.org/updates/FEDORA-2013-0416/fedora-business-cards-1-0.1.beta1.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1490/leptonica-1.69-5.fc18,gdal-1.9.1-14.fc18.1,OpenImageIO-1.0.11-2.fc18,libwebp-0.2.1-1.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1357/dnsmasq-2.65-3.fc18
   5  https://admin.fedoraproject.org/updates/FEDORA-2013-0437/proftpd-1.3.4b-5.fc18
   5  https://admin.fedoraproject.org/updates/FEDORA-2013-1034/drupal6-6.28-1.fc18
   9  https://admin.fedoraproject.org/updates/FEDORA-2013-0899/ettercap-0.7.5.1-1.fc18
   5  https://admin.fedoraproject.org/updates/FEDORA-2013-1082/zabbix-2.0.4-3.fc18
   7  https://admin.fedoraproject.org/updates/FEDORA-2013-0965/qemu-1.2.2-2.fc18
   5  https://admin.fedoraproject.org/updates/FEDORA-2013-1001/corosync-2.3.0-1.fc18
   5  https://admin.fedoraproject.org/updates/FEDORA-2013-1003/asterisk-11.2.0-1.fc18
   5  https://admin.fedoraproject.org/updates/FEDORA-2013-1167/php-symfony2-Yaml-2.1.7-1.fc18

The following Fedora 18 Critical Path updates have yet to be approved:
 Age URL
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1455/coreutils-8.17-8.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1459/gstreamer1-plugins-base-1.0.5-3.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1475/linux-firmware-20121218-0.2.gitbda53ca.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1492/freetype-2.4.10-3.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1482/kmod-12-1.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1464/dosfstools-3.0.14-1.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1479/tigervnc-1.2.80-0.8.20130124svn5036.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1467/qtwebkit-2.2.2-8.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-1446/js-1.8.5-12.fc18
The following builds have been pushed to Fedora 18 updates-testing

    GMT-4.5.9-1.fc18
    GMT-coastlines-2.2.2-1.fc18
    OpenImageIO-1.0.11-2.fc18
    Zim-0.59-1.fc18
    calligra-2.5.5-1.fc18
    calligra-l10n-2.5.5-1.fc18
    coreutils-8.17-8.fc18
    dnsmasq-2.65-3.fc18
    dosfstools-3.0.14-1.fc18
    eclipse-m2e-core-1.2.0-3.fc18
    eclipse-nls-4.2.0.v20121120043402-1.fc18
    empathy-3.6.3-2.fc18
    evolution-3.6.3-2.fc18
    evolution-data-server-3.6.3-1.fc18
    evolution-ews-3.6.3-1.fc18
    evolution-mapi-3.6.3-1.fc18
    freenx-server-0.7.3-30.fc18
    freetype-2.4.10-3.fc18
    gdal-1.9.1-14.fc18.1
    greybird-1.0.8-1.fc18
    gstreamer1-plugins-base-1.0.5-3.fc18
    gtkhtml3-4.6.2-1.fc18
    kmod-12-1.fc18
    leptonica-1.69-5.fc18
    libwebp-0.2.1-1.fc18
    linux-firmware-20121218-0.2.gitbda53ca.fc18
    mfiler4-1.1.1-1.fc18
    mingw-spice-gtk-0.16-2.fc18
    node-gyp-0.8.2-3.fc18
    nodejs-abbrev-1.0.4-2.fc18
    nodejs-ansi-0.1.2-4.fc18
    nodejs-archy-0.0.2-5.fc18
    nodejs-async-0.1.22-3.fc18
    nodejs-block-stream-0.0.6-4.fc18
    nodejs-charm-0.1.0-1.fc18
    nodejs-chownr-0.0.1-6.fc18
    nodejs-config-chain-1.1.3-3.fc18
    nodejs-couch-login-0.1.15-2.fc18
    nodejs-delayed-stream-0.0.5-2.fc18
    nodejs-form-data-0.0.6-2.fc18
    nodejs-fstream-0.1.21-3.fc18
    nodejs-fstream-npm-0.1.3-2.fc18
    nodejs-glob-3.1.14-2.fc18
    nodejs-graceful-fs-1.1.14-2.fc18
    nodejs-inherits-1.0.0-6.fc18
    nodejs-ini-1.0.5-2.fc18
    nodejs-init-package-json-0.0.7-3.fc18
    nodejs-lockfile-0.2.1-2.fc18
    nodejs-lru-cache-2.2.1-2.fc18
    nodejs-mime-1.2.7-2.fc18
    nodejs-minimatch-0.2.9-2.fc18
    nodejs-mkdirp-0.3.4-2.fc18
    nodejs-mute-stream-0.0.3-3.fc18
    nodejs-nopt-2.0.0-3.fc18
    nodejs-npm-registry-client-0.2.11-2.fc18
    nodejs-npmconf-0.0.16-3.fc18
    nodejs-npmlog-0.0.2-2.fc18
    nodejs-once-1.1.1-2.fc18
    nodejs-opener-1.3.0-4.fc18
    nodejs-opts-1.2.2-2.fc18
    nodejs-osenv-0.0.3-2.fc18
    nodejs-proto-list-1.2.2-2.fc18
    nodejs-read-1.0.4-4.fc18
    nodejs-read-installed-0.0.4-2.fc18
    nodejs-read-package-json-0.1.12-2.fc18
    nodejs-retry-0.6.0-2.fc18
    nodejs-rimraf-2.1.1-2.fc18
    nodejs-semver-1.1.2-1.fc18
    nodejs-sigmund-1.0.0-2.fc18
    nodejs-slide-1.1.3-4.fc18
    nodejs-tar-0.1.14-3.fc18
    nodejs-uid-number-0.0.3-4.fc18
    nodejs-which-1.0.5-4.fc18
    nodejs-yamlish-0.0.5-1.fc18
    npm-1.2.1-2.fc18
    nss-pam-ldapd-0.8.12-2.fc18
    olpc-powerd-108-1.fc18
    openvswitch-1.7.3-6.fc18
    perl-Locale-SubCountry-1.59-1.fc18
    pg_journal-0.1.1-2.fc18
    proguard-4.8-2.fc18
    python-django-1.4.3-3.fc18
    python-fedora-0.3.32.1-1.fc18
    python-rhsm-1.8.1-1.fc18
    qpid-cpp-0.20-1.fc18
    qtwebkit-2.2.2-8.fc18
    rubygem-gettext-2.3.7-1.fc18
    rubygem-rake-compiler-0.8.2-1.fc18
    subscription-manager-1.8.1-1.fc18
    sugar-artwork-0.98.3-1.fc18
    sugar-toolkit-gtk3-0.98.4-1.fc18
    telepathy-mission-control-5.14.0-2.fc18
    tigervnc-1.2.80-0.8.20130124svn5036.fc18
    tomahawk-0.6.0-1.fc18
    trac-CGit-plugin-1.0.5-1.fc18
    trac-doxygen-plugin-0.4-0.12.r2892.fc18
    xyzsh-1.3.2-1.fc18
    yourls-1.5.1-1.fc18

Details about builds:

================================================================================
 GMT-4.5.9-1.fc18 (FEDORA-2013-1456)
 Generic Mapping Tools
--------------------------------------------------------------------------------
Update Information:

This stable release fixes several bugs only and is recommended
for all GMT users.  For a complete list of corrections see http://gmt.soest.hawaii.edu/gmt/html/GMT_Docs.html#x1-110001.1.1

At the same time we release GSHHG version 2.2.2. This version removes Sandy Island, improves the accuracy of Society Islands, and removes 50 duplicate, lower-quality islands deriving from WDBII (such as the Agalega islands); most of these were in
the Red Sea, Persian Gulf, and the Cook-Austral area.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 22 2013 Orion Poplawski <orion at cora.nwra.com> 4.5.9-1
- Update to 4.5.9
- Add patch to add needed includes
--------------------------------------------------------------------------------

================================================================================
 GMT-coastlines-2.2.2-1.fc18 (FEDORA-2013-1456)
 Coastline data for GMT
--------------------------------------------------------------------------------
Update Information:

This stable release fixes several bugs only and is recommended
for all GMT users.  For a complete list of corrections see http://gmt.soest.hawaii.edu/gmt/html/GMT_Docs.html#x1-110001.1.1

At the same time we release GSHHG version 2.2.2. This version removes Sandy Island, improves the accuracy of Society Islands, and removes 50 duplicate, lower-quality islands deriving from WDBII (such as the Agalega islands); most of these were in
the Red Sea, Persian Gulf, and the Cook-Austral area.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 22 2013 Orion Poplawski <orion at cora.nwra.com> 2.2.2-1
- Update to 2.2.2
--------------------------------------------------------------------------------

================================================================================
 OpenImageIO-1.0.11-2.fc18 (FEDORA-2013-1490)
 Library for reading and writing images
--------------------------------------------------------------------------------
Update Information:

Security libwebp release, where an integer overflow allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted WebP image.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jan 23 2013 Rex Dieter <rdieter at fedoraproject.org> 1.0.11-2
- rebuild (libwebp)
* Thu Jan 17 2013 Richard Shaw <hobbes1069 at gmail.com> - 1.0.11-1
- Update to latest upstream patch release.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #875071 - CVE-2012-5127 libwebp: Integer overflow when processing crafted WebP image
        https://bugzilla.redhat.com/show_bug.cgi?id=875071
--------------------------------------------------------------------------------

================================================================================
 Zim-0.59-1.fc18 (FEDORA-2013-1460)
 Desktop wiki & notekeeper
--------------------------------------------------------------------------------
Update Information:

New upstream release
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Robin Lee <cheeselee at fedoraproject.org> - 0.59-1
- Update to 0.59 (#903621, #841803, #857820, #858250, #871030, #875776)
--------------------------------------------------------------------------------

================================================================================
 calligra-2.5.5-1.fc18 (FEDORA-2013-1468)
 An integrated office suite
--------------------------------------------------------------------------------
Update Information:

New stable bugfix release, includes fixes for two major bugs in the Sheets application which made recalculations of spreadsheet contents go wrong under certain conditions. 

See also: http://www.calligra.org/news/calligra-2-4-4-and-2-5-5-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 22 2013 Rex Dieter <rdieter at fedoraproject.org> 2.5.5-1
- 2.5.5
--------------------------------------------------------------------------------

================================================================================
 calligra-l10n-2.5.5-1.fc18 (FEDORA-2013-1468)
 Language files for calligra
--------------------------------------------------------------------------------
Update Information:

New stable bugfix release, includes fixes for two major bugs in the Sheets application which made recalculations of spreadsheet contents go wrong under certain conditions. 

See also: http://www.calligra.org/news/calligra-2-4-4-and-2-5-5-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 22 2013 Rex Dieter <rdieter at fedoraproject.org> 2.5.5-1
- 2.5.5
--------------------------------------------------------------------------------

================================================================================
 coreutils-8.17-8.fc18 (FEDORA-2013-1455)
 A set of basic GNU tools commonly used in shell scripts
--------------------------------------------------------------------------------
Update Information:

- fix multiple segmantation faults in i18n patch (by SUSE) (#869442, #902917)- CVE2013-0223/CVE2013-0221/CVE2013-0222
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Ondrej Vasik <ovasik at redhat.com> 8.17-8
- fix multiple segmantation faults in i18n patch (by SUSE)
  (#869442, #902917)- CVE2013-0223/CVE2013-0221/CVE2013-0222
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #903464 - CVE-2013-0221 coreutils: segfault in "sort -d" and "sort -M" with long line input
        https://bugzilla.redhat.com/show_bug.cgi?id=903464
  [ 2 ] Bug #903465 - CVE-2013-0222 coreutils: segfault in uniq with long line input
        https://bugzilla.redhat.com/show_bug.cgi?id=903465
  [ 3 ] Bug #903466 - CVE-2013-0223 coreutils: segfault in "join -i" with long line input
        https://bugzilla.redhat.com/show_bug.cgi?id=903466
--------------------------------------------------------------------------------

================================================================================
 dnsmasq-2.65-3.fc18 (FEDORA-2013-1357)
 A lightweight DHCP/caching DNS server
--------------------------------------------------------------------------------
Update Information:

From dnsmasq's CHANGELOG:

Add code to make behaviour for TCP DNS requests that same
as for UDP requests, when a request arrives for an allowed 
address, but via a banned interface. This change is only
active on Linux, since the relevant API is missing (AFAIK)
on other platforms.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Tomas Hozza <thozza at redhat.com> - 2.65-3
- build dnsmasq with $RPM_OPT_FLAGS, $RPM_LD_FLAGS explicitly (#903362)
* Tue Jan 22 2013 Tomas Hozza <thozza at redhat.com> - 2.65-2
- Fix for CVE-2013-0198 (checking of TCP connection interfaces) (#901555)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #894486 - CVE-2013-0198 dnsmasq: Incomplete fix for the CVE-2012-3411 issue
        https://bugzilla.redhat.com/show_bug.cgi?id=894486
--------------------------------------------------------------------------------

================================================================================
 dosfstools-3.0.14-1.fc18 (FEDORA-2013-1464)
 Utilities for making and checking MS-DOS FAT filesystems on Linux
--------------------------------------------------------------------------------
Update Information:

This is new version of dosfstools that fixes several bugs. For more details see project page: http://www.daniel-baumann.ch/software/dosfstools/
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Jaroslav Škarvada <jskarvad at redhat.com> - 3.0.14-1
- New version
  Resolves: rhbz#903581
- Switched to xz compressed sources
- Dropped dosfslabel-fat32 patch (upstreamed)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #903581 - dosfstools-3.0.14 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=903581
--------------------------------------------------------------------------------

================================================================================
 eclipse-m2e-core-1.2.0-3.fc18 (FEDORA-2013-1463)
 Maven integration for Eclipse
--------------------------------------------------------------------------------
Update Information:

Maven integration for Eclipse
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #847160 - Review Request: eclipse-m2e-core - Maven integration for Eclipse
        https://bugzilla.redhat.com/show_bug.cgi?id=847160
--------------------------------------------------------------------------------

================================================================================
 eclipse-nls-4.2.0.v20121120043402-1.fc18 (FEDORA-2013-1513)
 Babel language packs for the Eclipse platform and various plug-ins
--------------------------------------------------------------------------------
Update Information:

Updated to Babel langpack R0.10.1 to remove erroneously translated text.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Sean Flanigan <sflaniga at redhat.com> - 4.2.0.v20121120043402-1
- Updated from upstream to R0.10.1 (4.2.0.v20121120043402)
* Tue Sep 11 2012 Sean Flanigan <sflaniga at redhat.com> - 4.2.0.v20120721043402-2
- Switched to zipped p2 update site instead of using fetch-babel.sh
* Fri Sep  7 2012 Sean Flanigan <sflaniga at redhat.com> - 4.2.0.v20120721043402-1
- Updated from upstream to R0.10.0 (4.2.0.v20120721043402)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #504757 - Bad translation in German language pack
        https://bugzilla.redhat.com/show_bug.cgi?id=504757
--------------------------------------------------------------------------------

================================================================================
 empathy-3.6.3-2.fc18 (FEDORA-2013-1509)
 Instant Messaging Client for GNOME
--------------------------------------------------------------------------------
Update Information:

Pull upstream patch to fix saving favorite rooms.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Brian Pepple <bpepple at fedoraproject.org> - 3.6.3-2
- Pull upstream patch to fix empathy not saving favorite rooms. (#835805)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #835805 - Favorite rooms are not saved
        https://bugzilla.redhat.com/show_bug.cgi?id=835805
--------------------------------------------------------------------------------

================================================================================
 evolution-3.6.3-2.fc18 (FEDORA-2013-1340)
 Mail and calendar client for GNOME
--------------------------------------------------------------------------------
Update Information:

Update to 3.6.3

--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Milan Crha <mcrha at redhat.com> - 3.6.3-2
- Add patch for Red Hat bug #475117 (Reply in multipart/digest)
- Add patch for Red Hat bug #903469 (Formatting of text/* parts)
* Tue Jan 22 2013 Milan Crha <mcrha at redhat.com> - 3.6.3-1
- Update to 3.6.3
- Remove patch for Red Hat bug #875109 (fixed upstream)
- Remove patch for Red Hat bug #877562 (fixed upstream)
- Correct help-context patch test path (Red Hat bug #901341)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #475117 - Reply to digest message doesn't quote the body
        https://bugzilla.redhat.com/show_bug.cgi?id=475117
  [ 2 ] Bug #903469 - Evolution displays patches in a non-plain text format
        https://bugzilla.redhat.com/show_bug.cgi?id=903469
--------------------------------------------------------------------------------

================================================================================
 evolution-data-server-3.6.3-1.fc18 (FEDORA-2013-1340)
 Backend data server for Evolution
--------------------------------------------------------------------------------
Update Information:

Update to 3.6.3

--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 22 2013 Milan Crha <mcrha at redhat.com> - 3.6.3-1
- Update to 3.6.3
- Remove patch for Red Hat bug #877562 (fixed upstream)
- Remove patch for Red Hat bug #883410 (fixed upstream)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #475117 - Reply to digest message doesn't quote the body
        https://bugzilla.redhat.com/show_bug.cgi?id=475117
  [ 2 ] Bug #903469 - Evolution displays patches in a non-plain text format
        https://bugzilla.redhat.com/show_bug.cgi?id=903469
--------------------------------------------------------------------------------

================================================================================
 evolution-ews-3.6.3-1.fc18 (FEDORA-2013-1340)
 Evolution extension for Exchange Web Services
--------------------------------------------------------------------------------
Update Information:

Update to 3.6.3

--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 22 2013 Milan Crha <mcrha at redhat.com> - 3.6.3-1
- Update to 3.6.3
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #475117 - Reply to digest message doesn't quote the body
        https://bugzilla.redhat.com/show_bug.cgi?id=475117
  [ 2 ] Bug #903469 - Evolution displays patches in a non-plain text format
        https://bugzilla.redhat.com/show_bug.cgi?id=903469
--------------------------------------------------------------------------------

================================================================================
 evolution-mapi-3.6.3-1.fc18 (FEDORA-2013-1340)
 Evolution extension for MS Exchange 2007 servers
--------------------------------------------------------------------------------
Update Information:

Update to 3.6.3

--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 22 2013 Milan Crha <mcrha at redhat.com> - 3.6.3-1
- Update to 3.6.3
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #475117 - Reply to digest message doesn't quote the body
        https://bugzilla.redhat.com/show_bug.cgi?id=475117
  [ 2 ] Bug #903469 - Evolution displays patches in a non-plain text format
        https://bugzilla.redhat.com/show_bug.cgi?id=903469
--------------------------------------------------------------------------------

================================================================================
 freenx-server-0.7.3-30.fc18 (FEDORA-2013-1477)
 Free Software (GPL) Implementation of the NX Server
--------------------------------------------------------------------------------
Update Information:

Hush output from ncat to avoid issues with NoMachine NX client.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Ville Skyttä <ville.skytta at iki.fi> - 0.7.3-30
- Hush ncat output that confuses NoMachine NX client (#903186, Rok Mandeljc).
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #903186 - Cannot connect to freenx session on fedora 18 system
        https://bugzilla.redhat.com/show_bug.cgi?id=903186
--------------------------------------------------------------------------------

================================================================================
 freetype-2.4.10-3.fc18 (FEDORA-2013-1492)
 A free and portable font rendering engine
--------------------------------------------------------------------------------
Update Information:

This update fixes CVE-2012-5669.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Marek Kasik <mkasik at redhat.com> 2.4.10-3
- Fixes CVE-2012-5669
- Resolves: #903554
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #890088 - CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)
        https://bugzilla.redhat.com/show_bug.cgi?id=890088
--------------------------------------------------------------------------------

================================================================================
 gdal-1.9.1-14.fc18.1 (FEDORA-2013-1490)
 GIS file format library
--------------------------------------------------------------------------------
Update Information:

Security libwebp release, where an integer overflow allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted WebP image.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jan 23 2013 Rex Dieter <rdieter at fedoraproject.org> 1.9.1-14.1
- rebuild (libwebp)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #875071 - CVE-2012-5127 libwebp: Integer overflow when processing crafted WebP image
        https://bugzilla.redhat.com/show_bug.cgi?id=875071
--------------------------------------------------------------------------------

================================================================================
 greybird-1.0.8-1.fc18 (FEDORA-2013-1458)
 A clean minimalistic theme for Xfce, GTK+ 2 and 3
--------------------------------------------------------------------------------
Update Information:

Update to 1.0.8 (contains various enhancements and fixes)
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Athmane Madjoudj <athmane at fedoraproject.org> 1.0.8-1
- Update to 1.0.8
--------------------------------------------------------------------------------

================================================================================
 gstreamer1-plugins-base-1.0.5-3.fc18 (FEDORA-2013-1459)
 GStreamer streaming media framework base plugins
--------------------------------------------------------------------------------
Update Information:

Fix alsasink 100% CPU usage preventing video playback on OLPC XO-1.75.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Daniel Drake <dsd at laptop.org> - 1.0.5-3
- Add upstream fix for excessive alsasink CPU usage
--------------------------------------------------------------------------------

================================================================================
 gtkhtml3-4.6.2-1.fc18 (FEDORA-2013-1340)
 GtkHTML library
--------------------------------------------------------------------------------
Update Information:

Update to 3.6.3

--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 14 2013 Milan Crha <mcrha at redhat.com> - 4.6.2-1
- Update to 4.6.2
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #475117 - Reply to digest message doesn't quote the body
        https://bugzilla.redhat.com/show_bug.cgi?id=475117
  [ 2 ] Bug #903469 - Evolution displays patches in a non-plain text format
        https://bugzilla.redhat.com/show_bug.cgi?id=903469
--------------------------------------------------------------------------------

================================================================================
 kmod-12-1.fc18 (FEDORA-2013-1482)
 Linux kernel module management utilities
--------------------------------------------------------------------------------
Update Information:

Update to kmod 12.  Fixes a command line option parsing bug.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Dec  6 2012 Josh Boyer <jwboyer at redhat.com>
- Update to version 12
* Thu Nov  8 2012 Josh Boyer <jwboyer at redhat.com>
- Update to version 11
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #901899 - kernel command line parameter parsing is broken at drm_kms_helper.edid_firmware
        https://bugzilla.redhat.com/show_bug.cgi?id=901899
--------------------------------------------------------------------------------

================================================================================
 leptonica-1.69-5.fc18 (FEDORA-2013-1490)
 C library for efficient image processing and image analysis operations
--------------------------------------------------------------------------------
Update Information:

Security libwebp release, where an integer overflow allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted WebP image.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jan 18 2013 Adam Tkac <atkac redhat com> - 1.69-5
- rebuild due to "jpeg8-ABI" feature drop
* Fri Dec 28 2012 Richard W.M. Jones <rjones at redhat.com> - 1.69-4
- Rebuild, see
  http://lists.fedoraproject.org/pipermail/devel/2012-December/175685.html
* Fri Dec 21 2012 Adam Tkac <atkac redhat com> - 1.69-3
- rebuild against new libjpeg
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #875071 - CVE-2012-5127 libwebp: Integer overflow when processing crafted WebP image
        https://bugzilla.redhat.com/show_bug.cgi?id=875071
--------------------------------------------------------------------------------

================================================================================
 libwebp-0.2.1-1.fc18 (FEDORA-2013-1490)
 Library and tools for the WebP graphics format
--------------------------------------------------------------------------------
Update Information:

Security libwebp release, where an integer overflow allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted WebP image.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Dec 27 2012 Rahul Sundaram <sundaram at fedoraproject.org> - 0.2.1-1
- new upstream release 0.2.1
* Fri Dec 21 2012 Adam Tkac <atkac redhat com> - 0.1.3-3
- rebuild against new libjpeg
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #875071 - CVE-2012-5127 libwebp: Integer overflow when processing crafted WebP image
        https://bugzilla.redhat.com/show_bug.cgi?id=875071
--------------------------------------------------------------------------------

================================================================================
 linux-firmware-20121218-0.2.gitbda53ca.fc18 (FEDORA-2013-1475)
 Firmware files used by the Linux kernel
--------------------------------------------------------------------------------
Update Information:

Fix some packaging issues.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jan 23 2013 Ville Skyttä <ville.skytta at iki.fi> - 20121218-0.2.gitbda53ca
- Own subdirs created in /lib/firmware (rhbz 902005)
* Wed Jan 23 2013 Josh Boyer <jwboyer at redhat.com>
- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #902005 - [PATCH] Own subdirs created in /lib/firmware
        https://bugzilla.redhat.com/show_bug.cgi?id=902005
  [ 2 ] Bug #902265 - linux-firmware subpackage does not obsolete libertas-usb8388-firmware on upgrade
        https://bugzilla.redhat.com/show_bug.cgi?id=902265
--------------------------------------------------------------------------------

================================================================================
 mfiler4-1.1.1-1.fc18 (FEDORA-2013-1493)
 2 pane file manager with a embedded shell
--------------------------------------------------------------------------------
Update Information:

New version 1.1.1 is released.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Mamoru TASAKA <mtasaka at fedoraproject.org> - 1.1.1-1
- 1.1.1
* Fri Jan 18 2013 Mamoru TASAKA <mtasaka at fedoraproject.org> - 1.1.0-1
- 1.1.0
- Fix typo on summary (bug 896226)
--------------------------------------------------------------------------------

================================================================================
 mingw-spice-gtk-0.16-2.fc18 (FEDORA-2013-1457)
 A GTK+ widget for SPICE clients
--------------------------------------------------------------------------------
Update Information:

Add missing Requires
Update to spice-gtk 0.16
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 24 2013 Christophe Fergeau <cfergeau at redhat.com> - 0.16-2
- Add missing Requires (spice-protocol is required by
  spice-client-glib-2.0.pc)
* Tue Jan 22 2013 Christophe Fergeau <cfergeau at redhat.com> - 0.16-1
- Update to spice-gtk 0.16
--------------------------------------------------------------------------------

================================================================================
 node-gyp-0.8.2-3.fc18 (FEDORA-2013-0775)
 Node.js native addon build tool
--------------------------------------------------------------------------------
Update Information: