You are here
Home > Preporuke > Ranjivost programskog paketa PulseAudio

Ranjivost programskog paketa PulseAudio

  • Detalji os-a: FED
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : speech-dispatcher
Product : Fedora 20
Version : 0.8
Release : 9.fc20
URL : http://devel.freebsoft.org/speechd
Summary : To provide a high-level device independent layer for speech synthesis
Description :
* Common interface to different TTS engines
* Handling concurrent synthesis requests – requests may come
asynchronously from multiple sources within an application
and/or from more different applications.
* Subsequent serialization, resolution of conflicts and
priorities of incoming requests
* Context switching – state is maintained for each client
connection independently, event for connections from
within one application.
* High-level client interfaces for popular programming languages
* Common sound output handling – audio playback is handled by
Speech Dispatcher rather than the TTS engine, since most engines
have limited sound output capabilities.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Sun Jun 8 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 0.8-9
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue May 27 2014 Kalev Lember <kalevlember@gmail.com> – 0.8-8
– Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4
* Thu Mar 27 2014 Peter Robinson <pbrobinson@fedoraproject.org> 0.8-7
– Rebuild
* Fri Nov 1 2013 Matthias Clasen <mclasen@redhat.com> 0.8-6
– Avoid a crash in the festival module (#995639)
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update speech-dispatcher’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : spice-gtk
Product : Fedora 20
Version : 0.23
Release : 3.fc20
URL : http://spice-space.org/page/Spice-Gtk
Summary : A GTK+ widget for SPICE clients
Description :
Client libraries for SPICE desktop servers.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> 0.23-3
– rebuild (for pulseaudio, bug #1117683)
* Tue Feb 25 2014 Marc-André Lureau <marcandre.lureau@redhat.com> – 0.23-2
– Fix crash on finishing display rhbz#1069546
* Mon Feb 10 2014 Marc-André Lureau <marcandre.lureau@redhat.com> – 0.23-1
– Update to spice-gtk 0.23
* Wed Nov 27 2013 Marc-André Lureau <marcandre.lureau@redhat.com> – 0.22-1
– Update to spice-gtk 0.22
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update spice-gtk’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : qt-mobility
Product : Fedora 20
Version : 1.2.2
Release : 0.16.20140317git169da60c.fc20
URL : http://qt.digia.com/Product/Qt-Add-Ons/
Summary : Qt Mobility Framework
Description :
Qt Mobility Project delivers a set of new APIs to Qt with features that are well
known from the mobile device world, in particular phones. However, these APIs
allow the developer to use these features with ease from one framework and apply
them to phones, netbooks and non-mobile personal computers. The framework not
only improves many aspects of a mobile experience, because it improves the use
of these technologies, but has applicability beyond the mobile device arena.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Sun Jun 8 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 1.2.2-0.16.20140317git169da60c
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sat Jun 7 2014 Rex Dieter <rdieter@fedoraproject.org> 1.2.2-0.15.20140317git169da60c
– revert proj workaround, postinstaller’s google-earth packaging is fixed
* Wed Jun 4 2014 Rex Dieter <rdieter@fedoraproject.org> 1.2.2-0.14.20140317git169da60c
– update no_rpath patch for -examples too (which isn’t enabled by default yet)
* Wed Jun 4 2014 Rex Dieter <rdieter@fedoraproject.org> 1.2.2-0.13.20140317git169da60c
– -location: add explicit ‘Requires: proj’ to workaround google-earth packaging bug (kde#335751)
* Fri May 2 2014 Rex Dieter <rdieter@fedoraproject.org> 1.2.2-0.12.20140317git169da60c
– update URL
* Mon Apr 28 2014 Rex Dieter <rdieter@fedoraproject.org> – 1.2.2-0.11.20140317git169da60c
– split packaging
– (re)enable translations
– better rpath handling
* Mon Apr 28 2014 Rex Dieter <rdieter@fedoraproject.org> 1.2.2-0.10.20140317git169da60c
– fresh snapshot
* Mon Apr 28 2014 Rex Dieter <rdieter@fedoraproject.org> 1.2.2-0.9.20120224git
– .spec cleanup, pkgconfig: +Requires.private: QtCore
* Wed Mar 19 2014 Ville Skyttä <ville.skytta@iki.fi> – 1.2.2-0.8.20120224git
– Use system proj instead of bundled one
* Sat Mar 8 2014 Kevin Kofler <Kevin@tigcc.ticalc.org> 1.2.2-0.7.20120224git
– rebuild against fixed qt to fix -debuginfo (#1074041)
* Fri Oct 25 2013 Rex Dieter <rdieter@fedoraproject.org> 1.2.2-0.6.20120224git
– BR: pkgconfig(QtNetwork) >= 4.7
– omit udev support on el6 (ftbfs)
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update qt-mobility’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : fluidsynth
Product : Fedora 20
Version : 1.1.6
Release : 4.fc20
URL : http://www.fluidsynth.org/
Summary : Real-time software synthesizer
Description :
FluidSynth is a real-time software synthesizer based on the SoundFont 2
specifications. It is a “software synthesizer”. FluidSynth can read MIDI events
from the MIDI input device and render them to the audio device. It features
real-time effect modulation using SoundFont 2.01 modulators, and a built-in
command line shell. It can also play MIDI files (note: FluidSynth was previously
called IIWU Synth).

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 1.1.6-4
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update fluidsynth’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : cinnamon
Product : Fedora 20
Version : 2.2.14
Release : 5.fc20
URL : http://cinnamon.linuxmint.com
Summary : Window management and application launching for GNOME
Description :
Cinnamon is a Linux desktop which provides advanced
innovative features and a traditional user experience.

The desktop layout is similar to Gnome 2.
The underlying technology is forked from Gnome Shell.
The emphasis is put on making users feel at home and providing
them with an easy to use and comfortable desktop experience.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> 2.2.14-5
– rebuild (for pulseaudio, bug #1117683)
* Wed Jul 16 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.14-4
– fix power applet with upower-0.99
* Tue Jul 8 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.14-3
– backport some menu fixes
* Wed Jul 2 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.14-2
– add network applet patch for nm-applet changes
* Fri Jun 27 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.14-1
– update to 2.2.14
– Touchpad support: Added support for two and three finger clicks
* Fri Jun 6 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.13-5
– modify set_wheel patch
* Tue Jun 3 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.13-4
– fix files from being listed twice
* Tue Jun 3 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.13-3
– rebuilt
* Fri May 30 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.13-2
– add logout sound to schema override
* Mon May 26 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.13-1
– update to 2.2.13
– give cinnamon a rpmlint birthday
* Tue May 20 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.10-1
– update to 2.2.10
* Sun May 11 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.7-1
– update to 2.2.7
* Sat May 10 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.6-1
– update to 2.2.6
* Sat May 3 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.5-1
– update to 2.2.5
– validate all the cinnamon-settings desktop files
* Fri May 2 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.4-1
– update to 2.2.4
* Mon Apr 21 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.3-3
– add requires mintlocale
* Tue Apr 15 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.3-2
– add requires gucharmap
– add required network packages for network applet
– change to gstreamer1
* Mon Apr 14 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.3-1
– update to 2.2.3
* Sat Apr 12 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.0-1
– update to 2.2.0
* Wed Apr 2 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-16
– add patch to disable xinput for cinnamon only (bz 873434)
* Wed Mar 5 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-15
– Fix desktop file editor
* Thu Feb 20 2014 Kalev Lember <kalevlember@gmail.com> – 2.0.14-14
– Rebuilt for cogl soname bump
* Mon Feb 10 2014 Peter Hutterer <peter.hutterer@redhat.com> – 2.0.14-13
– Rebuild for libevdev soname bump
* Sun Feb 9 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-12
– cinnamon-settings-users: set wheel instead of sudo
* Fri Feb 7 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-11
– rebuilt for new cogl .so version
* Wed Jan 22 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-10
– use autosetup for prep
– trim spec file changelog
* Tue Jan 14 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-9
– change pexpect requires for epel7
* Tue Jan 14 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-8
– Add conditionals for epel7
– Add redhat overrides schema file
* Sun Dec 22 2013 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-7
– Remove bluetooth for F20 as well
* Sun Dec 22 2013 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-6
– Patch calendar applet for upower changes
– Remove bluetooth
* Sat Dec 7 2013 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-5
– readd requires python-pexpect for ARM
* Tue Dec 3 2013 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-4
– add requires gnome-themes
* Mon Dec 2 2013 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-3
– tweak gschema override again
* Tue Nov 26 2013 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-2
– add compile fix for F21
* Tue Nov 26 2013 Leigh Scott <leigh123linux@googlemail.com> – 2.0.14-1
– update to 2.0.14
– remove conflicts wallpapoz (bz 1029554)
– remove nm-applet from autostart (bz 1034887)
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update cinnamon’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : mumble
Product : Fedora 20
Version : 1.2.6
Release : 1.fc20.1
URL : http://mumble.sourceforge.net/
Summary : Voice chat suite aimed at gamers
Description :
Mumble provides low-latency, high-quality voice communication for gamers.
It includes game linking, so voice from other players comes
from the direction of their characters, and has echo
cancellation so that the sound from your loudspeakers
won’t be audible to other players.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> 1.2.6-1.1
– rebuild (for pulseaudio, bug #1117683)
* Sat May 17 2014 Christian Krause <chkr@fedoraproject.org> – 1.2.6-1
– Update 1.2.6
– Update fixes CVE-2014-3755 (BZ 1098231) and CVE-2014-3756 (BZ 1098233)
* Fri Apr 25 2014 Christian Krause <chkr@fedoraproject.org> – 1.2.5-1
– Update 1.2.5 (BZ 1062209)
– Update fixes CVE-2014-0044 (BZ 1061857) and CVE-2014-0045 (BZ 1061858)
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update mumble’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : guacamole-server
Product : Fedora 20
Version : 0.8.4
Release : 3.fc20
URL : http://guac-dev.org/
Summary : Server-side native components that form the Guacamole proxy
Description :
Guacamole is an HTML5 remote desktop gateway.

Guacamole provides access to desktop environments using remote desktop protocols
like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing
access to multiple desktops through a web browser.

No browser plugins are needed, and no client software needs to be installed. The
client requires nothing more than a web browser supporting HTML5 and AJAX.

The main web application is provided by the “guacamole-client” package.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> 0.8.4-3
– rebuild (for pulseaudio, bug #1117683)
* Mon May 26 2014 Simone Caronni <negativo17@gmail.com> – 0.8.4-2
– There is no VNC support (libvncserver) in EPEL 7 ppc/ppc64.
* Mon May 26 2014 Simone Caronni <negativo17@gmail.com> – 0.8.4-1
– Update to 0.8.4.
* Mon Nov 18 2013 Simone Caronni <negativo17@gmail.com> – 0.8.3-5
– Update patch for new autoconf.
* Mon Nov 18 2013 Simone Caronni <negativo17@gmail.com> – 0.8.3-4
– Require FreeRDP version >= 1.0.2 to avoid RDP refresh problems.
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update guacamole-server’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : sidplayfp
Product : Fedora 20
Version : 1.2.0
Release : 2.fc20
URL : http://sourceforge.net/projects/sidplay-residfp/
Summary : SID chip music module player
Description :
A player for playing SID music modules originally created on the Commodore 64
and compatibles.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Sun Jun 8 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 1.2.0-2
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sun Apr 6 2014 Hans de Goede <hdegoede@redhat.com> – 1.2.0-1
– New upstream release 1.2.0
– Drop our patches (merged upstream)
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update sidplayfp’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : gnome-settings-daemon
Product : Fedora 20
Version : 3.10.3
Release : 2.fc20
URL : http://download.gnome.org/sources/gnome-settings-daemon
Summary : The daemon sharing settings from GNOME to GTK+/KDE applications
Description :
A daemon to share settings from GNOME to other applications. It also
handles global keybindings, as well as a number of desktop-wide settings.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> 3.10.3-2
– rebuild (for pulseaudio, bug #1117683)
* Tue Jun 3 2014 Rui Matos <rmatos@redhat.com> – 3.10.3-1
– Update to 3.10.3
* Tue Nov 26 2013 Matthias Clasen <mclasen@redhat.com> – 3.10.2-3
– Export a shell-shows-desktop xsetting
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update gnome-settings-daemon’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : qt
Product : Fedora 20
Version : 4.8.6
Release : 9.fc20.1
URL : http://qt-project.org/
Summary : Qt toolkit
Description :
Qt is a software toolkit for developing applications.

This package contains base tools, like string, xml, and network
handling.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.6-9.1
– rebuild (for pulseaudio, bug #1117683)
* Sat Jun 7 2014 Kevin Kofler <Kevin@tigcc.ticalc.org> 4.8.6-9
– apply proposed fixes for QTBUG-34614,37380,38585 for LibreOffice (#1105422)
* Tue Jun 3 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.6-8
– backport selected upstream commits…
– Fix visual index lookup (QTBUG-37813)
– RGB30 fix (QTBUG-25998,#1018566)
– QDBus comparison
* Wed May 7 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.6-7
– gcc should be fixed, drop workaround (#1091482)
* Mon May 5 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.6-6
– try -fno-devirtualize workaround fc21+ (#1091482, gcc #60965)
* Mon May 5 2014 Rex Dieter <rdieter@fedoraproject.org> – 4.8.6-5
– drop f21 gcc-4.9 workarounds (they didn’t work)
– omit qt-cupsEnumDests.patch, again, pending more testing (#980952)
* Fri Apr 25 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.6-4
– -fno-tree-vrp (#1091482)
* Fri Apr 25 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.6-3
– try -fno-delete-null-pointer-checks to workaround bug #1091482
* Thu Apr 24 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.6-2
– DoS vulnerability in the GIF image handler (QTBUG-38367)
* Thu Apr 24 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.6-1
– 4.8.6 (final)
* Tue Apr 15 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.6-0.2.rc2
– 4.8.6-rc2
* Tue Apr 1 2014 Rex Dieter <rdieter@fedoraproject.org> – 4.8.6-0.1.rc1
– 4.8.6-rc1
* Wed Mar 26 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.5-24
– support ppc64le arch (#1081216)
* Sat Mar 8 2014 Kevin Kofler <Kevin@tigcc.ticalc.org> 4.8.5-23
– fix QMAKE_STRIP handling (#1074041)
* Fri Mar 7 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.5-22
– respin mysql_config patch
* Fri Mar 7 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.5-21
– restore qt-cupsEnumDests.patch (#980952)
* Thu Mar 6 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.5-20
– systemtrayicon plugin support (from kubuntu)
* Tue Feb 18 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.5-19
– cleanup QMAKE_STRIP handling
* Wed Feb 12 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.5-18
– rebuild (libicu)
* Sat Feb 1 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.5-17
– better %rpm_macros_dir handling
* Sun Jan 26 2014 Rex Dieter <rdieter@fedoraproject.org> 4.8.5-16
– macros.qt4: ++%_qt4_examplesdir (keep %_qt4_examples around for compatibility)
* Fri Jan 17 2014 Kevin Kofler <Kevin@tigcc.ticalc.org> – 4.8.5-15
– drop “Discover printers shared by CUPS 1.6 (#980952)” (#1054312, #980952#c18)
* Mon Jan 13 2014 Kevin Kofler <Kevin@tigcc.ticalc.org> – 4.8.5-14
– fix QTBUG-35459 (too low entityCharacterLimit=1024 for CVE-2013-4549)
– fix QTBUG-35460 (error message for CVE-2013-4549 is misspelled)
* Mon Dec 23 2013 Peter Robinson <pbrobinson@fedoraproject.org> 4.8.5-13
– Add support for aarch64 (#1046360)
* Thu Dec 5 2013 Rex Dieter <rdieter@fedoraproject.org> 4.8.5-12
– XML Entity Expansion Denial of Service (CVE-2013-4549)
* Wed Oct 9 2013 Rex Dieter <rdieter@fedoraproject.org> 4.8.5-11
– Discover printers shared by CUPS 1.6 (#980952)
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update qt’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : libmikmod
Product : Fedora 20
Version : 3.3.6
Release : 3.fc20
URL : http://mikmod.sourceforge.net/
Summary : A MOD music file player library
Description :
libmikmod is a library used by the mikmod MOD music file player for
UNIX-like systems. Supported file formats include MOD, STM, S3M, MTM,
XM, ULT and IT.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 3.3.6-3
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu Mar 27 2014 Hans de Goede <hdegoede@redhat.com> – 3.3.6-2
– Add missing requires pulseaudio-libs-devel to the -devel pkg (rhbz#1081142)
* Sat Mar 22 2014 Hans de Goede <hdegoede@redhat.com> – 3.3.6-1
– New upstream release 3.3.6
– Fixes alsa output not working when alsa-devel is not installes (rhbz#1076966)
– Add BR pulseaudio-libs-devel to enable building of pa output (rhbz#1079527)
* Sat Mar 8 2014 Hans de Goede <hdegoede@redhat.com> – 3.3.5-1
– New upstream release 3.3.5
* Wed Dec 25 2013 Hans de Goede <hdegoede@redhat.com> – 3.3.4-1
– New upstream release 3.3.4
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update libmikmod’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : paprefs
Product : Fedora 20
Version : 0.9.10
Release : 7.fc20
URL : http://freedesktop.org/software/pulseaudio/paprefs
Summary : Management tool for PulseAudio
Description :
PulseAudio Preferences (paprefs) is a simple GTK based configuration dialog
for the PulseAudio sound server.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Fri Jun 6 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 0.9.10-7
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sat Mar 1 2014 Julian Sikorski <belegdol@fedoraproject.org> – 0.9.10-6
– Use module-combine-sink instead of module-combine
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update paprefs’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : qmmp
Product : Fedora 20
Version : 0.7.7
Release : 1.fc20.1
URL : http://qmmp.ylsoftware.com/
Summary : Qt-based multimedia player
Description :
This program is an audio-player, written with help of Qt library.
The user interface is similar to winamp or xmms.
Main opportunities:

* Winamp and xmms skins support
* plugins support
* Ogg Vorbis support
* native FLAC support
* Musepack support
* WavePack support
* ModPlug support
* PCM WAVE support
* CD Audio support
* CUE sheet support
* ALSA sound output
* JACK sound output
* OSS sound output
* PulseAudio output
* Last.fm/Libre.fm scrobbler
* D-Bus support
* Spectrum Analyzer
* projectM visualization
* sample rate conversion
* bs2b dsp effect
* streaming support
* removable device detection
* MPRIS support
* global hotkey support
* lyrics support

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> 0.7.7-1.1
– rebuild (for pulseaudio, bug #1117683)
* Mon Jun 9 2014 Karel Volný <kvolny@redhat.com> 0.7.7-1
– new version
– see the upstream changelog at http://qmmp.ylsoftware.com/
* Fri Jan 17 2014 Karel Volný <kvolny@redhat.com> 0.7.4-1
– new version
– see the upstream changelog at http://qmmp.ylsoftware.com/
– should fix bug #1049267
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update qmmp’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : minimodem
Product : Fedora 20
Version : 0.19
Release : 3.fc20
URL : http://www.whence.com/minimodem/
Summary : General-purpose software audio FSK modem
Description :
Minimodem is a command-line program which decodes (or generates) audio modem
tones at any specified baud rate, using various framing protocols. It acts a
general-purpose software FSK modem, and includes support for various standard
FSK protocols such as Bell103, Bell202, RTTY, NOAA SAME, and Caller-ID.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 0.19-3
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed Oct 2 2013 Jimmy Carter <kg4sgp@gmail.com> – 0.19-2
– Rebuilding.
* Wed Oct 2 2013 Jimmy Carter <kg4sgp@gmail.com> – 0.19-1
– Latest upstream release.
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update minimodem’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : empathy
Product : Fedora 20
Version : 3.10.3
Release : 2.fc20
URL : http://live.gnome.org/Empathy
Summary : Instant Messaging Client for GNOME
Description :
Empathy is powerful multi-protocol instant messaging client which
supports Jabber, GTalk, MSN, IRC, Salut, and other protocols.
It is built on top of the Telepathy framework.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> 3.10.3-2
– rebuild (for pulseaudio, bug #1117683)
* Tue Jan 7 2014 Brian Pepple <bpepple@fedoraproject.org> – 3.10.3-1
– Update to 3.10.3. (#1042697)
– Drop patch for Remove_empathy_create_individual_from_tp_contact. Fixed upstream.
* Mon Nov 25 2013 Brian Pepple <bpepple@fedoraproject.org> – 3.10.2-2
– Pull upstream patch to use empathy_ensure_individual_from_tp_contact().
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update empathy’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : xmp
Product : Fedora 20
Version : 4.0.7
Release : 2.fc20
URL : http://xmp.sourceforge.net/
Summary : A multi-format module player
Description :
This is the Extended Module Player, a portable module player that plays
over 90 mainstream and obscure module formats, including Protracker MOD,
Fasttracker II XM, Scream Tracker 3 S3M and Impulse Tracker IT files.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Sun Jun 8 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 4.0.7-2
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue Feb 25 2014 Dominik Mierzejewski <rpm@greysector.net> – 4.0.7-1
– update to 4.0.7
– remove obsolete specfile parts
* Wed Oct 30 2013 Dominik Mierzejewski <rpm@greysector.net> – 4.0.6-1
– update to 4.0.6
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update xmp’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : cinnamon-settings-daemon
Product : Fedora 20
Version : 2.2.4
Release : 2.fc20
URL : http://cinnamon.linuxmint.com
Summary : The daemon sharing settings from CINNAMON to GTK+/KDE applications
Description :
A daemon to share settings from CINNAMON to other applications. It also
handles global keybindings, and many of desktop-wide settings.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Mon Jul 14 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.4-2
– Fix lid action with external monitor (upower-0.99)
* Fri Jun 27 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.4-1
– update to 2.2.4
– Touchpad support: Added support for two and three finger clicks
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 2.2.3-3
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri May 30 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.3-2
– add fedora support to datetime
* Tue May 20 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.3-1
– update to 2.2.3
* Mon May 5 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.2-2
– add patch to add support for upower critical action
* Fri May 2 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.2-1
– update to 2.2.2
* Fri Apr 18 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.1-3
– fix lid suspend action
* Fri Apr 18 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.1-2
– add mpris pause fix
* Mon Apr 14 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.1-1
– update to 2.2.1
* Sat Apr 12 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.0-1
– update to 2.2.0
* Thu Mar 6 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.8-5
– Fix DPMS issue with Xorg 1.14
* Sat Feb 15 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.8-4
– more logind changes
* Mon Jan 13 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.8-3
– rebuilt
* Mon Jan 13 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.8-2
– rebuilt
* Mon Dec 2 2013 Leigh Scott <leigh123linux@googlemail.com> – 2.0.8-1
– update to 2.0.8
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update cinnamon-settings-daemon’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : pulseaudio
Product : Fedora 20
Version : 5.0
Release : 7.fc20
URL : http://www.freedesktop.org/wiki/Software/PulseAudio
Summary : Improved Linux Sound Server
Description :
PulseAudio is a sound server for Linux and other Unix like operating
systems. It is intended to be an improved drop-in replacement for the
Enlightened Sound Daemon (ESOUND).

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Wed Jul 16 2014 Rex Dieter <rdieter@fedoraproject.org> 5.0-7
– Provide padsp-32, /usr/bin/padsp is native arch only (#856146)
* Mon Jul 7 2014 Rex Dieter <rdieter@fedoraproject.org> – 5.0-6
– rtp-recv: fix crash on empty UDP packets (CVE-2014-3970,#1104835,#1108011)
– name HDMI outputs uniquely
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 5.0-5
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue May 13 2014 Dan Horák <dan[at]danny.cz> 5.0-4
– always run tests, but don’t fail the build on big endian arches (relates #1067470)
* Sat Apr 12 2014 Rex Dieter <rdieter@fedoraproject.org> 5.0-3
– Pulse Audio settings lost after reboot / HDMI is set as default (#1035025)
* Tue Mar 11 2014 Rex Dieter <rdieter@fedoraproject.org> 5.0-2
– drop Requires: kernel (per recent -devel ml thread)
* Tue Mar 4 2014 Rex Dieter <rdieter@fedoraproject.org> 5.0-1
– 5.0 (#1072259)
* Wed Feb 26 2014 Karsten Hopp <karsten@redhat.com> 4.99.4-3
– disable make check on PPC* (rhbz #1067470)
* Mon Feb 17 2014 Rex Dieter <rdieter@fedoraproject.org> 4.99.4-2
– -qpaeq subpkg (#1002585)
* Sat Feb 15 2014 Rex Dieter <rdieter@fedoraproject.org> 4.99.4-1
– 4.99.4
* Wed Jan 29 2014 Rex Dieter <rdieter@fedoraproject.org> 4.99.3-1
– 4.99.3
* Mon Jan 27 2014 Wim Taymans <wtaymans@redhat.com> – 4.99.2-2
– don’t mark .desktop and dbus configurations as %config
* Fri Jan 24 2014 Rex Dieter <rdieter@fedoraproject.org> – 4.99.2-1
– 4.99.2 (#1057528)
* Wed Jan 22 2014 Wim Taymans <wtaymans@redhat.com> – 4.0-12.gitf81e3
– Use the statically allocated UID and GID from /usr/share/doc/setup/uidgid (#1056656)
– The pulse-rt group doesn’t exist (#885020)
* Wed Jan 22 2014 Rex Dieter <rdieter@fedoraproject.org> – 4.0-11.gitf81e3
– handle jack/lirc modules better (#1056619)
– -libs-devel: own some dirs to avoid deps on cmake/vala
– -module-bluetooth: make dep arch’d for consistency
* Fri Jan 10 2014 Rex Dieter <rdieter@fedoraproject.org> – 4.0-10.gitf81e3
– enable hardened build (#983606)
* Sat Dec 7 2013 Rex Dieter <rdieter@fedoraproject.org> – 4.0-9.gitf81e3
– X-KDE-autostart-phase=1
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update pulseaudio’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : gstreamer1-plugins-good
Product : Fedora 20
Version : 1.2.4
Release : 2.fc20
URL : http://gstreamer.freedesktop.org/
Summary : GStreamer plugins with good code and licensing
Description :
GStreamer is a streaming media framework, based on graphs of filters which
operate on media data. Applications using this library can do anything
from real-time sound processing to playing videos, and just about anything
else media-related. Its plugin-based architecture means that new data
types or processing capabilities can be added simply by installing new
plugins.

GStreamer Good Plugins is a collection of well-supported plugins of
good quality and under the LGPL license.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> 1.2.4-2
– rebuild (for pulseaudio, bug #1117683)
* Tue Jun 17 2014 Wim Taymans <wtaymans@redhat.com> – 1.2.4-1
– Update to 1.2.4.
– Drop old patches
* Thu Mar 13 2014 Wim Taymans <wtaymans@redhat.com> – 1.2.3-2
– Rebuild for libvpx ABI break. See #1068664
– fix doc build
* Mon Feb 10 2014 Brian Pepple <bpepple@fedoraproject.org> – 1.2.3-1
– Update to 1.2.3.
* Tue Jan 14 2014 Wim Taymans <wtaymans@redhat.com> – 1.2.2-2
– Disable the cairo plugin, we don’t package it.
* Fri Dec 27 2013 Brian Pepple <bpepple@fedoraproject.org> – 1.2.2-1
– Update to 1.2.2.
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update gstreamer1-plugins-good’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : gqrx
Product : Fedora 20
Version : 2.2.0
Release : 6.fc20
URL : http://gqrx.dk/
Summary : Software defined radio receiver powered by GNU Radio and Qt
Description :
Gqrx is a software defined radio receiver powered by the GNU Radio SDR
framework and the Qt graphical toolkit.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update gqrx’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : qemu
Product : Fedora 20
Version : 1.6.2
Release : 7.fc20
URL : http://www.qemu.org/
Summary : QEMU is a FAST! processor emulator
Description :
QEMU is a generic and open source processor emulator which achieves a good
emulation speed by using dynamic translation. QEMU has two operating modes:

* Full system emulation. In this mode, QEMU emulates a full system (for
example a PC), including a processor and various peripherials. It can be
used to launch different Operating Systems without rebooting the PC or
to debug system code.
* User mode emulation. In this mode, QEMU can launch Linux processes compiled
for one CPU on another CPU.

As QEMU requires no host kernel patches to run, it is safe and easy to use.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> – 2:1.6.2-7
– rebuild (for pulseaudio, bug #1117683)
* Sat May 31 2014 Cole Robinson <crobinso@redhat.com> – 2:1.6.2-6
– QCOW1 validation CVEs: CVE-2014-0222, CVE-2014-0223 (bz #1097232, bz
– CVE-2014-3461: Issues in USB post load checks (bz #1097260, bz #1096821)
* Sun May 11 2014 Cole Robinson <crobinso@redhat.com> – 2:1.6.2-5
– Migration CVEs: CVE-2014-0182 etc.
* Tue Apr 29 2014 Cole Robinson <crobinso@redhat.com> – 2:1.6.2-4
– Fix arm sd warnings with latest kernel (bz #1091548)
– Fix regression in CVE backport that affects openstack (thanks lbezdick)
* Fri Apr 25 2014 Cole Robinson <crobinso@redhat.com> – 2:1.6.2-3
– Fix guest startup crashes from autotest (bz #1081610)
* Thu Apr 24 2014 Cole Robinson <crobinso@redhat.com> – 2:1.6.2-2
– Block/image format validation CVE-2014-0142 – 2014-0148 (bz #1078201, bz
– CVE-2014-0150: virtio-net: buffer overflow in virtio_net_handle_mac()
function (bz #1086775, bz #1078846)
– CVE-2013-4544: vmxnet3: bounds checking buffer overrun (bz #1087513, bz
– CVE-2014-2894: out of bounds buffer accesses, guest triggerable via IDE
SMART (bz #1087981, bz #1087971)
* Wed Mar 19 2014 Cole Robinson <crobinso@redhat.com> – 2:1.6.2-1
– Fix bogus libcacard dep on gluster (bz #987441)
– Fix mouse with -display gtk -vga qxl (bz #1051724)
– Change gtk quit accelerator to ctrl+shift+q (bz #1062393)
– Fix crash during virtio-scsi hotplug (bz #1051611)
* Wed Dec 18 2013 Cole Robinson <crobinso@redhat.com> – 2:1.6.1-3
– Add kill() to seccomp whitelist, fix AC97 with -sandbox on (bz #1043521)
– Changing streaming mode default to off for spice (bz #1038336)
– Fix guest scsi verify command (bz #1001617)
– Fix performance regression after save/restore (bz #917723)
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update qemu’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : ffgtk
Product : Fedora 20
Version : 0.8.6
Release : 7.fc20
URL : None
Summary : A solution for controlling Fritz!Box or compatible routers
Description :
Fritz Fun (ffgtk) is a clean solution for controlling the FRITZ!Box or
compatible router with Linux. It offers a rich feature list, including caller
monitor and fax support. It offers integration with the KDE, evolution and
Thurderbird address books.
Some plug-ins are packaged separately.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 0.8.6-7
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sat Apr 19 2014 Louis Lagendijk <louis.lagendijk@gmail.com> 0.8.6-6
– Rebuilt for new google-addressbook
* Mon Feb 3 2014 Milan Crha <mcrha@redhat.com> – 0.8.6-5
– Rebuild for newer evolution-data-server
* Tue Jan 14 2014 Milan Crha <mcrha@redhat.com> – 0.8.6-4
– Rebuild for newer evolution-data-server
* Tue Nov 19 2013 Milan Crha <mcrha@redhat.com> – 0.8.6-3
– Rebuild for newer evolution-data-server
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update ffgtk’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : phonon
Product : Fedora 20
Version : 4.7.2
Release : 1.fc20.1
URL : http://phonon.kde.org/
Summary : Multimedia framework api
Description :
Multimedia framework api.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> 4.7.2-1.1
– rebuild (for pulseaudio, bug #1117683)
* Mon Jun 23 2014 Rex Dieter <rdieter@fedoraproject.org> 4.7.2-1
– phonon-4.7.2
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 4.7.1-4
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed May 28 2014 Rex Dieter <rdieter@fedoraproject.org> 4.7.1-3
– use better upstream fix for rootDir issue
* Wed Mar 26 2014 Rex Dieter <rdieter@fedoraproject.org> 4.7.1-2
– backport some upstream fixes, one that fixes building with cmake-3 particularly
* Fri Dec 6 2013 Rex Dieter <rdieter@fedoraproject.org> 4.7.1-1
– phonon-4.7.1
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update phonon’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : sphinxtrain
Product : Fedora 20
Version : 1.0.8
Release : 13.fc20
URL : http://cmusphinx.sourceforge.net/
Summary : Acoustic model trainer for CMU’s Sphinx tools
Description :
SphinxTrain is Carnegie Mellon University’s open source acoustic model
trainer. It contains the scripts and instructions necessary for building
models for the CMU Sphinx Recognizer.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Sun Jun 8 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 1.0.8-13
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu May 1 2014 Jerry James <loganjerry@gmail.com> – 1.0.8-12
– Rebuild for openfst 1.4.1 and opengrm-ngram 1.2.1
* Tue Feb 4 2014 Jerry James <loganjerry@gmail.com> – 1.0.8-11
– Add openfst-tools and sphinxbase Requires
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update sphinxtrain’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : fldigi
Product : Fedora 20
Version : 3.21.83
Release : 2.fc20
URL : http://www.w1hkj.com/Fldigi.html
Summary : Digital modem program for Linux
Description :
Fldigi is a modem program which supports most of the digital modes used by
ham radio operators today. You can also use the program for calibrating your
sound card to WWV or doing a frequency measurement test. The program also comes
with a CW decoder. fldigi is written with the help of the Fast Light Toolkit X
GUI. Fldigi is a fast moving project many added features with each update.

Flarq (Fast Light Automatic Repeat Request) is a file transfer application
that is based on the ARQ specification developed by Paul Schmidt, K9PS.
It is capable of transmitting and receiving frames of ARQ data via fldigi.

The fldigi-shell program controls fldigi over HTTP via XML-encoded
remote procedure calls (XML-RPC). It can call any XML-RPC method
exported by fldigi, and also defines some useful commands of its own.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> – 3.21.83-2
– rebuild (for pulseaudio, bug #1117683)
* Sun Jun 29 2014 Richard Shaw <hobbes1069@gmail.com> – 3.21.83-1
– Update to latest upstream release.
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 3.21.82-2
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed Apr 30 2014 Richard Shaw <hobbes1069@gmail.com> – 3.21.82-1
– Update to latest upstream release.
* Sun Mar 30 2014 Richard Shaw <hobbes1069@gmail.com> – 3.21.81-1
– Update to latest upstream release.
* Tue Mar 11 2014 Richard Shaw <hobbes1069@gmail.com> – 3.21-79-1
– Update to latest upstream release.
* Tue Mar 4 2014 Richard Shaw <hobbes1069@gmail.com> – 3.21.78-1
– Update to latest upstream release.
* Wed Oct 30 2013 Richard Shaw <hobbes1069@gmail.com> – 3.21.77-1
– Update to latest bugfix release.
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update fldigi’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : gnome-shell
Product : Fedora 20
Version : 3.10.4
Release : 7.fc20
URL : http://live.gnome.org/GnomeShell
Summary : Window management and application launching for GNOME
Description :
GNOME Shell provides core user interface functions for the GNOME 3 desktop,
like switching to windows and launching applications. GNOME Shell takes
advantage of the capabilities of modern graphics hardware and introduces
innovative user interface concepts to provide a visually attractive and
easy to use experience.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> – 3.10.4-7
– rebuild (for pulseaudio, bug #1117683)
* Thu Jul 10 2014 Florian Müllner <fmuellner@redhat.com> – 3.10.4-6
– Revert last patches again – the performance regression is still present
* Fri Jun 27 2014 Florian Müllner <fmuellner@redhat.com> – 3.10.4-6
– Add back crosshairs fix plus upstream workaround for the reported
performance regressions (RH #1083500)
* Mon Jun 2 2014 Florian Müllner <fmuellner@redhat.com> – 3.10.4-5
– Remove crosshairs fix again – the update was redrawn due to performance
regressions, 3.10.4-4 re-introduced it accidentally
* Fri May 23 2014 Adam Williamson <awilliam@redhat.com> – 3.10.4-4
– make OSK work with modal dialogs (backport, BGO #719451, RHBZ #1071907)
* Wed Apr 2 2014 Javier Hernández <jhernandez@emergya.com> – 3.10.4-3
– Fix gnome shell magnifier’s crosshairs (RH #1083500)
* Mon Mar 17 2014 Adel Gadllah <adel.gadllah@gmail.com> – 3.10.4-2
– Backport fix for RH #1076981
* Wed Feb 19 2014 Florian Müllner <fmuellner@redhat.com> – 3.10.4-1
– Update to 3.10.4, drop upstreamed patches
* Tue Feb 18 2014 Adel Gadllah <adel.gadllah@gmail.com> – 3.10.3-8
– Don’t duplicate gsd code and just use the xsetting it
exports
* Mon Feb 17 2014 Adel Gadllah <adel.gadllah@gmail.com> – 3.10.3-7
– Don’t enable high dpi scaling for vnc / xrdp
– Fixes RH #1065563
* Wed Feb 12 2014 Adel Gadllah <adel.gadllah@gmail.com> – 3.10.3-6
– Replace patch with one that does not hang gdm
* Wed Feb 12 2014 Adel Gadllah <adel.gadllah@gmail.com> – 3.10.3-5
– Backport high dpi support patches from upstream
* Thu Feb 6 2014 Florian Müllner <fmuellner@redhat.com> – 3.10.3-4
– Backport fix for crash when using some Java applications (#1058314)
* Fri Jan 31 2014 Florian Müllner <fmuellner@redhat.com> – 3.10.3-3
– Backport upstream fixes:
– Fix app-menu regression (#1057517)
– Fix window tracking regression (#1057933)
* Thu Jan 23 2014 Florian Müllner <fmuellner@redhat.com> – 3.10.3-2
– Fix app-switcher regressions introduced by the last update
* Thu Jan 16 2014 Florian Müllner <fmuellner@redhat.com> – 3.10.3-1
– Update to 3.10.3, drop downstream patches
* Thu Nov 28 2013 Florian Müllner <fmuellner@redhat.com> – 3.10.2.1-3
– Backport upstream fix for catching more extension errors
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update gnome-shell’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : qt5-qtmultimedia
Product : Fedora 20
Version : 5.3.1
Release : 1.fc20.1
URL : http://qt-project.org/
Summary : Qt5 – Multimedia support
Description :
The Qt Multimedia module provides a rich feature set that enables you to
easily take advantage of a platforms multimedia capabilites and hardware.
This ranges from the playback and recording of audio and video content to
the use of available devices like cameras and radios.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> 5.3.1-1.1
– rebuild (for pulseaudio, bug #1117683)
* Tue Jun 17 2014 Jan Grulich <jgrulich@redhat.com> – 5.3.1-1
– 5.3.1
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 5.3.0-2
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed May 21 2014 Jan Grulich <jgrulich@redhat.com> 5.3.0-1
– 5.3.0
* Mon May 5 2014 Rex Dieter <rdieter@fedoraproject.org> 5.2.1-2
– use standard (same as qtbase) .prl sanitation
* Wed Feb 5 2014 Rex Dieter <rdieter@fedoraproject.org> 5.2.1-1
– 5.2.1
* Mon Jan 27 2014 Rex Dieter <rdieter@fedoraproject.org> 5.2.0-3
– build -examples only if supported
* Sun Jan 26 2014 Rex Dieter <rdieter@fedoraproject.org> 5.2.0-2
– -examples subpkg
* Thu Dec 12 2013 Rex Dieter <rdieter@fedoraproject.org> 5.2.0-1
– 5.2.0
* Mon Dec 2 2013 Rex Dieter <rdieter@fedoraproject.org> 5.2.0-0.10.rc1
– 5.2.0-rc1
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update qt5-qtmultimedia’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : cinnamon-control-center
Product : Fedora 20
Version : 2.2.10
Release : 1.fc20.1
URL : http://cinnamon.linuxmint.com
Summary : Utilities to configure the Cinnamon desktop
Description :
This package contains configuration utilities for the Cinnamon desktop, which
allow to configure accessibility options, desktop fonts, keyboard and mouse
properties, sound setup, desktop theme and background, user interface
properties, screen resolution, and other settings.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> 2.2.10-1.1
– rebuild (for pulseaudio, bug #1117683)
* Fri Jun 27 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.10-1
– update to 2.2.10
– add requires gnome-color-manager (don’t rely on gnome-packagekit to do it)
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 2.2.9-2
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed May 28 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.9-1
– update to 2.2.9
* Tue May 20 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.8-1
– update to 2.2.8
* Sun May 11 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.7-1
– update to 2.2.7
* Fri May 9 2014 Peter Robinson <pbrobinson@fedoraproject.org> 2.2.4-2
– Should be using clutter-gst2 in Fedora too, not just RHEL-7
* Fri May 2 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.4-1
– update to 2.2.4
* Mon Apr 14 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.3-1
– update to 2.2.3
* Sat Apr 12 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.2.1-1
– update to 2.2.1
* Fri Jan 17 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.9-4
– add log out dialogue for language change in region panel
* Mon Jan 13 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.9-3
– make changes for epel7
* Tue Jan 7 2014 Leigh Scott <leigh123linux@googlemail.com> – 2.0.9-2
– cleanup region panel
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update cinnamon-control-center’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : control-center
Product : Fedora 20
Version : 3.10.3
Release : 2.fc20
URL : http://www.gnome.org
Summary : Utilities to configure the GNOME desktop
Description :
This package contains configuration utilities for the GNOME desktop, which
allow to configure accessibility options, desktop fonts, keyboard and mouse
properties, sound setup, desktop theme and background, user interface
properties, screen resolution, and other settings.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> – 1:3.10.3-2
– rebuild (for pulseaudio, bug #1117683)
* Mon Mar 3 2014 Debarshi Ray <rishi@fedoraproject.org> – 1:3.10.3-1
– Update to 3.10.3
* Fri Jan 10 2014 Matthias Clasen <mclasen@redhat.com> – 1:3.10.2-4
– Improve the user deletion dialog
* Tue Nov 26 2013 Matthias Clasen <mclasen@redhat.com> – 1:3.10.2-3
– Fix the icon views to 6 columns
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update control-center’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : audacious-plugins
Product : Fedora 20
Version : 3.4.3
Release : 2.fc20
URL : http://audacious-media-player.org/
Summary : Plugins for the Audacious audio player
Description :
This package provides essential plugins for the Audacious audio player.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter 3.4.3-2
– rebuild (for pulseaudio, bug #1117683)
* Wed Jan 8 2014 Michael Schwendt – 3.4.3-1
– Merge post-3.4.3 patch for fixing a font rendering problem in the
skinned ui.
– Update to 3.4.3 (a few bug-fixes and translation updates). An update
of 3rd party plugin packages to 3.4.3 is needed to get all fixes.
* Mon Dec 16 2013 Adrian Reber – 3.4.2-2
– Rebuilt for libcdio-0.92
* Sun Nov 3 2013 Dan Fruehauf – 3.4.2-1
– Update to 3.4.2 final (fixes bugs 340, 346, 347, 356, 360, and 362).
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update audacious-plugins’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

 

 

 ——————————————————————————–
Fedora Update Notification
FEDORA-2014-8183
2014-07-09 01:27:45
——————————————————————————–

Name : java-1.7.0-openjdk
Product : Fedora 20
Version : 1.7.0.65
Release : 2.5.1.3.fc20
URL : http://openjdk.java.net/
Summary : OpenJDK Runtime Environment
Description :
The OpenJDK runtime environment.

——————————————————————————–
Update Information:

Rebase current post-4.0 snapshot to 5.0 release, see also:
http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/

This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages.
——————————————————————————–
ChangeLog:

* Thu Jul 17 2014 Rex Dieter <rdieter@fedoraproject.org> – 1.7.0.65-2.5.1.3
– rebuild (for pulseaudio, bug #1117683)
* Mon Jul 14 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.65-2.5.1.2
– added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
* Mon Jul 7 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.65-2.5.1.1
– updated to security patched icedtea7-forest-2.5.1
* Wed Jul 2 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.60-2.5.0.3
– Added arrch64 support
* Tue Jul 1 2014 Andrew Hughes <gnu.andrew@redhat.com> – 1.7.0.60-2.5.0.2
– Add nss-softokn dependency for SunEC provider
– Add support for ppc64le
– Enable SunEC provider with system NSS support.
– Ensure java-1.7.0-openjdk is used to build, not 8
– Set INSTALL_LOCATION so it can be used in the rpath.
* Thu Jun 19 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.60-2.5.0.1.f20
– added and applied as reverted patch404 gtk3ToBeReverted.patch
– reverting controversial fix of http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=729
* Wed Jun 18 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.60-2.5.0.f20
– updated to icedtea7-forest 2.5.0
– removed icedtea_version_presuffix
– removed hardcoded 60
– removed upstreamed patch412 add-final-location-rpaths.patch
– removed upstreamed patch413 rh1064383-prelink_fix.patch
* Thu May 22 2014 Andrew Hughes <gnu.andrew@redhat.com – 1.7.0.51-2.4.7.4.fc20
– Fix jinfo behaviour when prelink cache is present
– Resolves: rhbz#1064383
* Thu May 22 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.51-2.4.7.3.fc20
– debug turned off (0)
– python added to line /builddir/build/SOURCES/remove-origin-from-rpaths $files to preven access denied
– added build requires for python
* Thu May 22 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.51-2.4.7.2.fc20
– bumped release
– changed buildoutputdir to contains “-debug” in case of debug on
– rewritten (long unmaintained) java-1.7.0-openjdk-debugdocs.patch and
java-1.7.0-openjdk-debuginfo.patch
– debug turned on (1)
* Tue Apr 22 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.55-2.4.7.1.fc20
– Added Omair’s fix for RH1059925
– added and used Source14, remove-origin-from-rpaths
– added and applied patch412 add-final-location-rpaths.patch
– added build requires chrpath
– adde INSTALL_LOCATION=_jvmdir/sdkdir to make swithces
– added missing OrderWithRequires (sync with master)
– removed rhino requires (sync with master)
– added libattr-devel build requires (sync with master)
– added conditional chmod on sa-jdi.jar (sync with master)
– added comment to fiels about lua (sync with master)
– added few more owned dirs (sync with master)
* Mon Apr 7 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.55-2.4.7.0.fc20
– Added check to lua according to already exisitng same jvm
– bumped to future icedtea-forest 2.4.7
– updatever set to 55, buildver se to 13, release reset to 0
– removed upstreamed patch402 gstackbounds.patch
– included config(norepalce) lua script
* Wed Mar 26 2014 Omair Majid <omajid@redhat.com> – 1.7.0.60-2.4.5.2.fc20
– Switch to a new tapset tarball without trailing space in file name
* Thu Jan 30 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.51-2.4.5.1.f20
– removed or cleaning alternatives remove in posts
* Thu Jan 30 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.51-2.4.5.0.f20
– removed buildRequires: pulseaudio >= 0.9.11, as not neccessary
– but kept libs-devel
– updated to icedtea 2.4.5
– http://blog.fuseyism.com/index.php/2014/01/29/icedtea-2-4-5-released/
– removed upstreamed or unwonted patches (thanx to gnu_andrew to pointing them out)
– patch410 1015432.patch (upstreamed)
– patch411 1029588.patch
– patch412 zero-x32.diff
– patch104 java-1.7.0-ppc-zero-jdk.patch
– patch105 java-1.7.0-ppc-zero-hotspot.patch
– patch402 gstackbounds.patch and patch403 PStack-808293.patch applied always
(again thanx to gnu_andrew)
– merged other gnu_andrew’s changes
– FT2_CFLAGS and FT2_LIBS hardoced values replaced by correct pkg-config calls
– buildver bumbed to 31
– added build requires nss-devel
– removed build requires mercurial
– added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS into make call
* Fri Jan 17 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.51-2.4.4.1.f20
– removed 2.3 tarball due to security issues
– this causes zero arm32 jit to not exists eny more (aprox 30% slowdown)
– removed declarations:
– global icedtea_version_arm32 2.3.13
– source100 openjdk-icedtea-%{icedtea_version_arm32}.tar.xz
– removed:
– patch30 java-1.7.0-openjdk-java-access-bridge-security-2.3.patch
– patch1000 rhino-2.3.patch
– patch4020 gstackbounds-2.3.patch
– patch4110 1029588-2.3.patch
– patch302 systemtap.patch
– patch401 657854-openjdk7.patch
– with all follwing ifarch arm calls
– patch410 and TestCryptoLevel are now used always
– US_export_policy.jar and local_policy.jar are now listed always
– make:
– always used DISABLE_INTREE_EC, UNLIMITED_CRYPTO
– removed arm32 specific DISTRO_PACKAGE_VERSION JDK_UPDATE_VERSION JDK_BUILD_NUMBER
– added patch412 zero-x32.diff to try to fix zero builds build
* Fri Jan 10 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.51-2.4.4.0.f20
– updated to security icedtea 2.4.4
– and arm tarball updated to security icedtea 2.3.13
– icedtea_version set to 2.4.4
– updatever bumped to 51
– release reset to 0
* Mon Jan 6 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.40-2.4.3.4.f19
– added and applied patch411 1029588.patch (for 2.4)
– added and applied patch4110 1029588-2.3.patch (for 2.3)
– resolves rhbz#1029588
* Mon Jan 6 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.40-2.4.3.3.f19
– added and applied for icedtea 2.4 patch410, 1015432.patch
– resolves rhbz#1015432
* Mon Jan 6 2014 Jiri Vanek <jvanek@redhat.com> – 1.7.0.40-2.4.3.2.f20
– changed Provides: jre-headless = 1.7.0
to Provides: jre-headless = 1:1.7.0
– resolves rhbz#1046050
* Fri Oct 18 2013 Jiri Vanek <jvanek@redhat.com> – 1.7.0.40-2.4.3.1.f20
– arm tarball updated to new CPU sources 2.3.13
– removed upstreamed patch 501 callerclass-01.patch
– removed upstreamed patch 502 callerclass-02.patch
– removed upstreamed patch 503 callerclass-02.patch
– removed upstreamed patch 504 callerclass-02.patch
——————————————————————————–
References:

[ 1 ] Bug #1104835 – CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv
https://bugzilla.redhat.com/show_bug.cgi?id=1104835
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update java-1.7.0-openjdk’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

 

AutorTomislav Protega
Cert idNCERT-REF-2014-07-0006-ADV
CveCVE-2014-3970 CVE-2014-3755 CVE-2014-3756 CVE-2014-0044 CVE-2014-0045 CVE-2013-4549 CVE-2014-0222 CVE-2014-0223 CVE-2014-3461 CVE-2014-0182 CVE-2014-0142 CVE-2014-0150 CVE-2013-4544 CVE-2014-2894
ID izvornikaFEDORA-2014-8183
Proizvodspeech spice qt fluidsynth cinnamon mumble guacamole sidplayfp gnome libmikmod paprefs qmmp minimodem empathy xmp pulseaudio gstreamer1 gqrx qemu ffgtk phonon sphinxtrain fldigi qt5 control
Izvorhttp://www.redhat.com
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa firefox

Otkriveni su sigurnosni nedostaci od kojih su neki kritični u programskom paketu firefox za Fedoru 19. Otkriveni nedostaci potencijalnim napadačima...

Close