Wednesday, November 7, 2012
[CentOS-announce] CESA-2012:1426 Moderate CentOS 6 kernel Update
Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-1426.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
aa500979ef80025fcaab323bf0ae7bca9f266d8a72232c24fd1033f0d923d9b5 kernel-2.6.32-279.14.1.el6.i686.rpm
56b520ec40d303ca37343521144d4cc531b6deb185a697d4a8fa9e69dd5634c0 kernel-debug-2.6.32-279.14.1.el6.i686.rpm
11b3832621c9527e6fe9ac587389584033b6c53abfb3212bab0d3cdd4fe034e9 kernel-debug-devel-2.6.32-279.14.1.el6.i686.rpm
46c934ce0a48c8a5f83fb085d518a4d35c4416ff2a66482f93fe3acb598ad24d kernel-devel-2.6.32-279.14.1.el6.i686.rpm
ca17df79d119fd259fcf7657ba40a74b39835d2b1a9eb0e47e13923449c3a1e9 kernel-doc-2.6.32-279.14.1.el6.noarch.rpm
4601c967297c0c902049b440b71ee6f1e5744fc0b2a0182a864a05cec79166ae kernel-firmware-2.6.32-279.14.1.el6.noarch.rpm
7864e121f92e1b3a73e91980c91e54999e78e4674109a31380c87a27f2153b03 kernel-headers-2.6.32-279.14.1.el6.i686.rpm
11894d32c8b8bc97d322d0202b7af64be5d96b7eb6492bc109e8629ab1d4907a perf-2.6.32-279.14.1.el6.i686.rpm
699c77cff73fd096cbef7412356269ce93852d98f6de54c8ee5fbbc6bd1adee9 python-perf-2.6.32-279.14.1.el6.i686.rpm
x86_64:
f4762486a9617a19dfcdd41b21c46a57025e30e306ca99b65044200b5a731cee kernel-2.6.32-279.14.1.el6.x86_64.rpm
b11b0e7c5739013a5228dbacd4b13615bbf3cedd7fb8eaa940cc948cd38784d6 kernel-debug-2.6.32-279.14.1.el6.x86_64.rpm
33944d04948e557b5c4c4344113b1676eddb69f4e948fea743708942c09fc768 kernel-debug-devel-2.6.32-279.14.1.el6.x86_64.rpm
6353c1917981b0b1988683fbab1b5ec2706c0f82d781ab313bbd568504847cb1 kernel-devel-2.6.32-279.14.1.el6.x86_64.rpm
5c07baf746413f725990ff3e6517c888466696300ec089601f2489764582832f kernel-doc-2.6.32-279.14.1.el6.noarch.rpm
e2503630209079a150527ce96a77daff11c60c24d35ca471fa97f22891b8f2cd kernel-firmware-2.6.32-279.14.1.el6.noarch.rpm
73d5da3aa317e566b261566ff5f96ac903b8b60e13e8a687452055b75752adc8 kernel-headers-2.6.32-279.14.1.el6.x86_64.rpm
0ae67923dda011924df8c40645aceb81790f2c285199c45e4978993537ae89f2 perf-2.6.32-279.14.1.el6.x86_64.rpm
336d2f268c543c7f6495009bc5131fa33503ce54acebde5f2cd8a2f6e7d9020c python-perf-2.6.32-279.14.1.el6.x86_64.rpm
Source:
0a39da580812f9f1c8031619681c3c4907221042ebc700c9835adae7b88939ee kernel-2.6.32-279.14.1.el6.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
[opensuse-announce] openSUSE Packaging Guidelines Update
that will take care of the packaging guidelines and introduced a
small process to change them:
http://en.opensuse.org/openSUSE:Packaging_guidelines_change_process
As part of that process, we're announcing regularly the changes to the
packaging guidelines. Since this is a first such announcement, it
is not a complete change but just points out a few things from the
past few months. In the future, we will send out this email once a
month.
The Packaging guidelines can be found at
http://en.opensuse.org/openSUSE:Packaging_guidelines .
List of changes
===============
1) New Lua Guidelines
2) Reworked font guidelines
3) Documenting changes in packages
4) Teams involved, contact
Details
=======
1) New Lua Guidelines
We now have guidelines for lua:
http://en.opensuse.org/openSUSE:Packaging_Lua.
2) Reworked font guidelines
The packaging of fonts has been completely changed, and is documented
at http://en.opensuse.org/openSUSE:Packaging_Fonts
3) Documenting changes in packages
The openSUSE review team is now also enforcing proper documenting
changes in packages:
First, the .changes entry (rpm changelog) surves two purposes:
- News for the user
- History tracking of packaging changes (often referenced in bugs to
verify if a user has the latest packaging bugfixes).
3.1) Information about updates
A simple "Update to version x.y.z" is, as before, not
accepted. There should be some buzz around the update for the user;
some major reasons to the upgrade should be listed.
Changes on the package itself should be mentioned in a way that any
other contributor to the same package can follow traces of why
something is the way it is. Commonly, Added (build)dependencies are
interesting to be seen, special hacks to make something work in a
particular way [..]: Always consider that package maintenance is a
distributed task and various contributors need to be able to step up
at will.
3.2) Documenting patch life cycle
The rules about patches are listed at
http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines .
Most prominent is likely the mentioning of the patches life cycle,
which forces you to mention additions and removals of patches in the
changelog. As history shows, this can be helpful if a patch got
removed, and later a regression is reported; finding out when a
patch was removed can be crucial in reconstructing feature sets
(including contacting the contributor that dropped it.. which is
easily extracted from the .changes if listed)
The main appeal is to the devel project maintainers / reviewers, to
keep out for those rules, to live according to them, as it is
frustrating for everybody if a package needs to be declined by the
openSUSE Factory Review team:
- The dev prj maintainer is the one getting the 'decline' (as it was
usually a forwarded request), which often leaves the 'fixing' to
the devel project maintainers, where the 'originator' of the fix
would have been willing to actually do that...
Note: The review team is not enforcing the usage of patch markup
unless the package already follows this convention.
4) Teams involved, contact
I mentioned two teams previously, these are the openSUSE review team
(details at http://en.opensuse.org/openSUSE:OpenSUSE_review_team) and
the team taking care of the guidelines (details at
http://en.opensuse.org/openSUSE:Packaging_guidelines_change_process#Team_members).
You
can reach both via the openSUSE-packaging mailing list.
On behalf of the teams,
Andreas
--
Andreas Jaeger aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi
SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany
GF: Jeff Hawn,Jennifer Guild,Felix Imendörffer,HRB16746 (AG Nürnberg)
GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126
--
To unsubscribe, e-mail: opensuse-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-announce+help@opensuse.org
Fedora Board, FAmSCo, FESCo Election Season, and Fedora Board Appointment.
FESCo (Fedora Engineering Steering Committee), and the Fedora Board is
now open, and will close on November 13, 2012, at 23:59:59 UTC.
This election cycle will fill the following seats for a one-year period:
* Fedora Board: 2 elected seats, as well as 2 appointed seats
* FESCo (Fedora Engineering Steering Committee): 4 elected seats
* FAmSCo (Fedora Ambassadors Steering Committee): 3 elected seats
Full information about the elections, including the elections schedule,
and links to where one may nominate, can be seen here:
https://fedoraproject.org/wiki/Elections
Running concurrently with the nomination period (and, hence, closing at
the end of the nomination period), the elections questionnaire is also
open for adding questions which will be posed to candidates. Following
the closing of the questionnaire, candidates will be asked to answer
questions relevant to the position for which they are seeking election.
Questions may be added here, and, again, will also close on November 13,
2012:
https://fedoraproject.org/wiki/F19_elections_questionnaire
As noted above, there are 2 seats on the Fedora Board that will be
appointed in this cycle, and I'm pleased as can be to announce that
Major Hayden as the first of these appointments. I'm sure that many of
you know Major from IRC (where you may know of him as rackerhacker), or
perhaps from his blog posts about security or OpenStack, or from the
Fedora Cloud SIG. He's enthusiastic, a fountain of knowledge,
passionate about Fedora, and an all-around awesome guy, and I'm certain
that he'll be able to bring some unique perspectives to the Board.
Welcome, Major!
Major will be taking the seat previously occupied by Toshio Kuratomi
(aka: abadger1999). Toshio has served two years in his appointed seat on
the Fedora Board, and I am incredibly grateful to him for
his efforts, dedication, and commitment to the Board, and Fedora in
general. You are a fantastic role model and contributor - thank you,
Toshio! :)
Further details regarding each body's election follows below. I
encourage everyone to consider running for an elected seat if they have
the interest and desire to do so, and to encourage others that they feel
would be ideal representatives for particular Fedora bodies.
Cheers!
-Robyn
== Fedora Board ==
This election cycle will fill two elected seats for the Board (seats
E1 and E2). Two appointed seats (A1 and A2) will also be filled this
cycle, the first of which is the aforementioned appointment of Major
Hayden; the remaining seat will be appointed following the election. For
more information on nominations, and the process refer to:
https://fedoraproject.org/wiki/Board_nominations
https://fedoraproject.org/wiki/Board/Elections
https://fedoraproject.org/wiki/Board/History
== FESCo ==
This cycle will see candidates elected to four open seats in the Fedora
Engineering Steering Committee. For information on the nominations and
elections:
https://fedoraproject.org/wiki/FESCo_election_policy
https://fedoraproject.org/wiki/Development/SteeringCommittee/Nominations
== FAmSCo ==
This election cycle will see candidates elected to fill three open seats
on the Fedora Ambassadors Steering Committee. For more information,
refer to:
https://fedoraproject.org/wiki/FAmSCo_election_rules
https://fedoraproject.org/wiki/FAmSCo_elections
https://fedoraproject.org/wiki/FAmSCo_nominations
_______________________________________________
devel-announce mailing list
devel-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel-announce
Tuesday, November 6, 2012
FUDCon Lawrence: Subsidy requests are open, and general travel reminders
There's no place like FUDCon, and you don't want to miss this one! The
2013 North American FUDCon will be held in Lawrence, Kansas, on the
campus of the University of Kansas. If you are planning on attending,
it's never too early to pre-register and start thinking about your
travel plans, and it's never too soon for us to remind you doing these
things! :)
FUDCon Lawrence will take place January 18-20, 2013.
http://fedoraproject.org/wiki/FUDCon:Lawrence_2013
A few travel-oriented notes:
HOTEL: Rooms at the FUDCon hotel can be booked now. We have a block of
rooms at the Springhill Suites in Lawrence; please book your room by
December 14 to take advantage of the rates, though sooner is always
better. Hotel booking information is on the wiki:
http://fedoraproject.org/wiki/FUDCon:Lawrence_2013#Lodging
AIRPORT TO LAWRENCE TRAVEL: If you need a ride to Lawrence from the
Kansas City airport, once you know your flight itinerary, add it to our
flights page:
http://fedoraproject.org/wiki/FUDCon:Lawrence_2013/Flights
Then click your heels three times and say, "There's no place like Spot's
SuperVan!" ... seriously, though, we will have various people organizing
rides to and from the airport.
* * *
We are now also officially accepting subsidy requests for travel to
Lawrence. Funding requests are accepted between now (November 6) and
November 13. If you are requesting a subsidy, we just have a few steps
that we ask you to follow:
1: Register on the FUDCon Lawrence pre-registration app at:
http://fudconlawrence-ianweller.rhcloud.com/
2: Check the "Need funding?" box.
3: Create a funding request ticket in the FUDCon trac at:
https://fedorahosted.org/fudcon-planning/wiki/FundingRequest
General information about being sponsored can be found at:
http://fedoraproject.org/wiki/Sponsoring_event_attendees.
Requests are processed in the order they are submitted, though generally
prioritization is giving to local travel over international travel
first. Requests will be reviewed by fellow Fedora community members at
FUDCon subsidy request meetings over the next few weeks.
The first subsidy meeting will take place on Thursday, November 15. The
time and IRC channel will be announced as we approach that day. If
necessary, a second meeting will take place Friday, November 16.
As always, participation both in planning as well as subsidy granting is
ALWAYS welcome. Please join us on the fudcon-planning mailing list for
information about planning meetings, as well as for general FUDCon updates.
Planning mailing list:
https://admin.fedoraproject.org/mailman/listinfo/fudcon-planning
Thanks, and I hope to see you in Kansas for FUDCon.
-Robyn
--
announce mailing list
announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/announce
[CentOS-announce] CEBA-2012:1429 CentOS 5 firefox Update
Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1429.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
5548c1a167b8ef50f3e3b84185ce367b02634630062e13927dd7850cd536ec55 firefox-10.0.10-2.el5.centos.i386.rpm
x86_64:
5548c1a167b8ef50f3e3b84185ce367b02634630062e13927dd7850cd536ec55 firefox-10.0.10-2.el5.centos.i386.rpm
9f645a7854908c2abd1a8b87ce1b9834accbe5cd83bf76990bd28411114493a9 firefox-10.0.10-2.el5.centos.x86_64.rpm
Source:
d56df4b1c3da3102942c1bdc085228c8900a5aa527c0c1463d07ede13b6d6cc2 firefox-10.0.10-2.el5.centos.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
[FreeBSD-Announce] Announcing Foundation Funded Project!
The FreeBSD Foundation is pleased to announce that Aleksandr Rybalko
has been awarded a grant to port FreeBSD to the Genesi Efika MX SmartBook
laptop and SmartTop nettop devices.
Both use the Freescale i.MX515, an ARM Cortex-A8 System-on-Chip (SoC).
These low power devices will provide convenient reference platforms
for FreeBSD on
ARM, as they are low-cost complete systems. The Smartbook includes a
10" display, 3G connectivity and a battery life of 6 to 8 hours for $199.
When this project is completed, it will be possible to run X11
applications on FreeBSD on the Efika, with full support for sound and
networking. It will also make it much easier to support other
devices, such as some Android tablets, that ship with the i.MX515 SoC.
This project will be completed by the end of 2012.
The FreeBSD Foundation
_______________________________________________
freebsd-announce@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-announce
To unsubscribe, send any mail to "freebsd-announce-unsubscribe@freebsd.org"
[opensuse-announce] openSUSE 11.4 has reached end of SUSE support - 11.4 Evergreen goes on
With the release of ruby on Monday 5th of November the SUSE sponsored
maintenance of openSUSE 11.4 has ended.
openSUSE 11.4 is now officially discontinued and out of support by SUSE.
openSUSE 11.4 was the first openSUSE distribution maintained using
OpenBuildService methods (known as "OBS Maintenance"), allowing full
community participation. We also migrated it from the old internal
SUSE method to the OBS method on the fly during the lifetime without any
interruption.
openSUSE 11.4 now will be continued to be maintained by the Evergreen
community team. Their wikipage is on http://en.opensuse.org/Evergreen ,
please check it out for more information.
Here are some statistics:
openSUSE 11.4 was released on March 4th 2011, making it 20 months
of security and bugfix support. (2 openSUSE releases + 2 months)
Some statistics on the released patches (compared to 11.3):
Total updates: 723 (+142)
Security: 416 (+58)
Recommended: 306 (+85)
Optional: 1 (-1)
Quite some increase on updates, both security and bugfix wise.
Some of this is due to the 2 months increased lifetime compared to
openSUSE 11.3, some of this is due to a more open community bugfix
involvement.
CVE Entries: 1113 (-99)
Top issues (compared to 11.3 for issues down to 5)
10 seamonkey (-4)
10 MozillaFirefox (-2)
9 php5 (+4)
9 MozillaThunderbird (-2)
8 flash-player (-4)
6 wireshark (+1)
6 opera (-4)
6 java-1_6_0-openjdk (-1)
6 bind ( 0)
5 openssl (-2)
5 libpng14 (new)
5 icedtea-web (new)
And top issues sorted by CVE (Common Vulnerability Enumeration) count down to 10)
(comparison to 11.3 for some ... but due to the OBS maintenance migration some
CVEs are not easily accounted for)
139 MozillaThunderbird (+26)
139 MozillaFirefox (+28)
135 seamonkey (-3)
67 kernel (-61)
56 java-1_6_0-openjdk
44 flash-player (+38)
41 mozilla-nspr
30 mysql-community-server
29 php5
26 mozilla-kde4-integration
21 mariadb
21 freetype2
20 java-1_6_0-sun
18 wireshark
18 mozilla-xulrunner192
17 mysql-cluster
13 rubygem-actionpack-2_3
12 xen
11 rubygem-activerecord-2_3
10 rubygem-activesupport-2_3
10 puppet
10 libpng14
--
Open Linux Security Engineer Position at SUSE: http://bit.ly/Li4RbS
Fedora 18 Beta Go/No-Go Meeting, Thursday, November 08 @ 19:00 UTC (2pm Eastern, 11am Pacific)
meeting, wherein we shall determine the readiness of the Fedora 18 Beta.
Thursday, November 08, 2012 @19:00 UTC (14:00 EST/11:00 PST/20:00 CET)
"Before each public release Development, QA and Release Engineering meet
to determine if the release criteria are met for a particular release.
This meeting is called the Go/No-Go Meeting."
"Verifying that the Release criteria are met is the responsibility of
the QA Team."
For more details about this meeting see:
https://fedoraproject.org/wiki/Go_No_Go_Meeting
In the meantime, keep an eye on the Fedora 18 Beta Blocker list:
http://qa.fedoraproject.org/blockerbugs/milestone/18/beta/buglist
Btw. please check time against UTC as we are in the daylight/standard
saving time change period...
_______________________________________________
devel-announce mailing list
devel-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel-announce
Monday, November 5, 2012
[USN-1624-1] Remote Login Service vulnerability
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/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=ENFi
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1624-1
November 05, 2012
remote-login-service vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.10
Summary:
Remote Login Service could be made to expose sensitive information.
Software Description:
- remote-login-service: Service to track the remote servers to use
Details:
It was discovered that Remote Login Service incorrectly purged account
information when switching users. A local attacker could use this issue to
possibly obtain sensitive information.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.10:
remote-login-service 1.0.0-0ubuntu1.1
After a standard system update you need to reboot your computer to make
all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-1624-1
CVE-2012-0959
Package Information:
https://launchpad.net/ubuntu/+source/remote-login-service/1.0.0-0ubuntu1.1
[CentOS-announce] CentOS Test Day, Friday Nov 9th 2012
Time: From 5:00 UTC to 23:00 UTC
We would like to invite everyone to come join us in #centos-devel on
irc.freenode.net this Friday Nov 9th, 2012 for a CentOS test day. The
aim of the exercise is to get more people looking at the tests we
already have, running them on their infrastructure and ultimately
joining the effort as contributors.
You will need a machine instance ( either physical machine, or a VPS or
a Cloud Instance or a VM on your machine ); need a VM image ? you can
download one from here as prep :
http://dev.centos.org/centos/test-images/ - being able to connect to the
internet from that machine instance is essential, and as there are quite
a few packages installed / uninstalled / cleaned out - a local CentOS
mirror would be handy if you are on a slow link to the internet.
The tests are mostly written in bash, but you can use any language you
like - just grab yourself a gitorious.org account in advance. Knowledge
of git helps, but isn't necessary.
The test day will run from 05:00 UTC till 23:00 UTC, and there will be a
couple of the CentOS QA guys and people who have contributed to the
tests already, to help you get started and join the effort. We will have
brief, clear instructions on :
- Getting a copy of the most current tests
- Set them up on your machine instance
- Run the tests
- Feedback results and recommendations
- Templates to write new tests with
- Submission process to contribute new tests
- Instructions on howto run the tests regularly in the future
The Test Day landing page is being setup here :
http://wiki.centos.org/QaWiki/TestDay and will be ready by Wednesday Nov
7th, 2012.
These tests are important : we run then every time there is a new iso,
new image, new updates etc ready to be released by the project. Getting
good and widespread coverage of these tests means that we all end up
getting more trustworthy updates.
See you then!
--
Karanbir Singh, The CentOS Project
+44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS
GnuPG Key : http://www.karan.org/publickey.asc
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
[USN-1623-1] Mesa vulnerability
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
iQIcBAEBCgAGBQJQl/eXAAoJEGVp2FWnRL6TgswP/1BI2CxqYo/Fniluh/70sNwi
UPtJFBCDWxdhTVbznxFF92fcgnHvt7QrA1b7rOodsCn1i677pKP0Zry+aJTl4Urh
6x4CHJ1viNpkv3xCgC4u6KGx34oiEy+Pv9Ov1LOnqsDZspa1kO7ZLTfmc8wY6SWV
hJkB1eX9FUZGslnlTUvAAnxYCixGW1JaizhuojLTi5z3+ZgFWcirJ/qhnGYIFX0T
SEIKaP/eIPBlrfbZ/KNthlnRcSoT/ugYUq4bUBZJVi8RShleJb1x0Da71N3ii6Ox
ni1g5O6Vu9eQUjESjHzzs4i+5ZaCY3R4XqRG9HitRQbOJSzAJAlk/OXjwdSDbF9t
9CY8J1RazH5PfCbUe9xQseOk9ZMbkASZhOPZsAJt+1KVis1OR/nos/11w4SIYsLT
l85o2tvFbF6B534X+osRLA1HESi9pS5za/65C9wlE3rWKescDP9nVv/fpEwLvF+O
Qa0XGFs6UoHgmZMc5pjgvEmcSvOqBc3ay9FbCXfkjuUS/HCTEMyjdGPaSKVQHgci
cO5sstac3f6mTkVRWDdMAT34BrM18GYA/Ar1aWlAqdYg/8cevGRkDtywaRK87BC5
baEblkfyR/SB9GZk/NDanOHgPU9dOxlJIIHOwmcfg3RiaFjqDn9fJI5BiigoqWzP
KfWwbwCCz0X6W0IcR9NO
=GOIN
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1623-1
November 05, 2012
mesa vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
Summary:
Mesa could be made to crash or run programs if it processed specially
crafted data.
Software Description:
- mesa: free implementation of the EGL API
Details:
It was discovered that Mesa incorrectly handled certain arrays. An attacker
could use this issue to cause Mesa to crash, resulting in a denial of
service, or possibly execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
libegl1-mesa 8.0.4-0ubuntu0.2
libgl1-mesa-dri 8.0.4-0ubuntu0.2
libgl1-mesa-glx 8.0.4-0ubuntu0.2
libglapi-mesa 8.0.4-0ubuntu0.2
libgles1-mesa 8.0.4-0ubuntu0.2
libgles2-mesa 8.0.4-0ubuntu0.2
libglu1-mesa 8.0.4-0ubuntu0.2
libopenvg1-mesa 8.0.4-0ubuntu0.2
libosmesa6 8.0.4-0ubuntu0.2
libxatracker1 8.0.4-0ubuntu0.2
After a standard system update you need to reboot your computer to make
all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-1623-1
CVE-2012-2864
Package Information:
https://launchpad.net/ubuntu/+source/mesa/8.0.4-0ubuntu0.2
[CentOS-announce] CEBA-2012:1427 CentOS 6 util-linux-ng Update
Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1427.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
dd7a5fd8bb775e27e343865d7a9110946382b1f49e295ba90ea84331fd7636f3 libblkid-2.17.2-12.7.el6_3.i686.rpm
b4005a1bc774bd66cc05df7cf364805efc109a28f1829c267e586611a43b5872 libblkid-devel-2.17.2-12.7.el6_3.i686.rpm
8424b15885f76f63f13aadc33c4c0272ea6d00a95495845fcfc3e3716030e603 libuuid-2.17.2-12.7.el6_3.i686.rpm
be69f072ff0e0117b91c2935828b256456fdf3418dd518b6191a01abd3e27b66 libuuid-devel-2.17.2-12.7.el6_3.i686.rpm
877c38619713a86c631d0c2fa1b1d216a502a0df228a05dcd6aaad1bd797102c util-linux-ng-2.17.2-12.7.el6_3.i686.rpm
d793420f8c03d1cc98ee797527e3f989151fd4c683d67d71fb57503db20e9fda uuidd-2.17.2-12.7.el6_3.i686.rpm
x86_64:
dd7a5fd8bb775e27e343865d7a9110946382b1f49e295ba90ea84331fd7636f3 libblkid-2.17.2-12.7.el6_3.i686.rpm
c0d1052c15e5a797e5b24096cab075c781aa4403f440fff1537f644384dc4479 libblkid-2.17.2-12.7.el6_3.x86_64.rpm
b4005a1bc774bd66cc05df7cf364805efc109a28f1829c267e586611a43b5872 libblkid-devel-2.17.2-12.7.el6_3.i686.rpm
33ce2412f436c434efd3515f135ea546207faa83ec4db162ff7d662dd0cb08d8 libblkid-devel-2.17.2-12.7.el6_3.x86_64.rpm
8424b15885f76f63f13aadc33c4c0272ea6d00a95495845fcfc3e3716030e603 libuuid-2.17.2-12.7.el6_3.i686.rpm
3596829dcc1d5f16406e69244c1741232516d336ff43354b2d2c169fae2813d5 libuuid-2.17.2-12.7.el6_3.x86_64.rpm
be69f072ff0e0117b91c2935828b256456fdf3418dd518b6191a01abd3e27b66 libuuid-devel-2.17.2-12.7.el6_3.i686.rpm
7b1a7796f8afcf4c2661c2c7c53fd7e16ec271aa63d17953fd36f2e34b1f4bab libuuid-devel-2.17.2-12.7.el6_3.x86_64.rpm
877c38619713a86c631d0c2fa1b1d216a502a0df228a05dcd6aaad1bd797102c util-linux-ng-2.17.2-12.7.el6_3.i686.rpm
39dda2f005352375f5d12c4064f117d3ef6dbd1b78a5ebe78418e513a144864f util-linux-ng-2.17.2-12.7.el6_3.x86_64.rpm
37bac3fd81a48610cf9df51f04ed1c48f0a4679e693ac5ba503a057a801c54ab uuidd-2.17.2-12.7.el6_3.x86_64.rpm
Source:
b11e72d9796cb0841aef84af8fb8bbadafd1902592be195254f153582e25635a util-linux-ng-2.17.2-12.7.el6_3.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce