The following Fedora 14 Security updates need testing:
https://admin.fedoraproject.org/updates/couchdb-1.0.2-1.fc14
https://admin.fedoraproject.org/updates/kdenetwork-4.6.2-2.fc14
https://admin.fedoraproject.org/updates/avahi-0.6.27-6.fc14
https://admin.fedoraproject.org/updates/libmodplug-0.8.8.3-3.fc14
https://admin.fedoraproject.org/updates/feh-1.10.1-1.fc14
https://admin.fedoraproject.org/updates/tomcat6-6.0.26-21.fc14
https://admin.fedoraproject.org/updates/cyrus-imapd-2.3.16-8.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
https://admin.fedoraproject.org/updates/xen-4.0.1-11.fc14
https://admin.fedoraproject.org/updates/mediawiki-1.16.5-59.fc14
https://admin.fedoraproject.org/updates/viewvc-1.1.11-1.fc14
https://admin.fedoraproject.org/updates/mumble-1.2.3-2.fc14
The following Fedora 14 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/nspr-4.8.8-1.fc14,nss-util-3.12.10-1.fc14,nss-softokn-3.12.10-1.fc14,nss-3.12.10-1.fc14
https://admin.fedoraproject.org/updates/grep-2.8-1.fc14
https://admin.fedoraproject.org/updates/pcre-8.10-2.fc14
https://admin.fedoraproject.org/updates/lvm2-2.02.84-2.fc14
https://admin.fedoraproject.org/updates/libedit-3.0-3.20090923cvs.fc14
https://admin.fedoraproject.org/updates/libpcap-1.1.1-3.fc14
https://admin.fedoraproject.org/updates/binutils-2.20.51.0.7-8.fc14
https://admin.fedoraproject.org/updates/tar-1.23-9.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-qxl-0.0.21-3.fc14
https://admin.fedoraproject.org/updates/evolution-exchange-2.32.3-1.fc14,evolution-data-server-2.32.3-1.fc14,evolution-2.32.3-1.fc14
https://admin.fedoraproject.org/updates/pygtk2-2.17.0-9.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-nouveau-0.0.16-14.20101010git8c8f15c.fc14
https://admin.fedoraproject.org/updates/dosfstools-3.0.9-6.fc14
https://admin.fedoraproject.org/updates/libimobiledevice-1.0.6-1.fc14
https://admin.fedoraproject.org/updates/libconcord-0.23-5.fc14,udev-161-9.fc14,concordance-0.23-2.fc14
https://admin.fedoraproject.org/updates/usbmuxd-1.0.7-1.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
https://admin.fedoraproject.org/updates/avahi-0.6.27-6.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-geode-2.11.11-4.fc14
The following builds have been pushed to Fedora 14 updates-testing
BibTool-2.51-1.fc14
cifs-utils-4.8.1-5.fc14
cyrus-imapd-2.3.16-8.fc14
dracut-modules-olpc-0.5.9-1.fc14
icoutils-0.29.1-2.fc14
libguestfs-1.8.7-1.fc14
mumble-1.2.3-2.fc14
nss_db-2.2.3-0.5.pre1.fc14
openscada-0.7.1-4.fc14
perl-DateTime-Format-Natural-0.95-1.fc14
perl-Ouch-0.0401-1.fc14
perl-Perl-PrereqScanner-1.003-1.fc14
pychess-0.10-1.fc14
python-shapely-1.2.7-3.fc14
transifex-client-0.5-1.fc14
viewvc-1.1.11-1.fc14
yash-2.27-1.fc14
zint-2.4.3-1.fc14
Details about builds:
================================================================================
BibTool-2.51-1.fc14 (FEDORA-2011-7201)
A Tool for manipulating BibTeX data bases
--------------------------------------------------------------------------------
Update Information:
rebase to BibTool 2.51
remove DESTDIR part of regex_DESTDIR patch (use INSTALLPREFIX from 2.51)
fix Doc/Makefile
follow switch from dvi doc to pdf doc
remove exec bit for installed man
convert latin1 file to UTF-8
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Michael J Gruber <mjg@xxxxxxxxxxxxxxxxx> 2.51-1
- rebase to BibTool 2.51
- remove DESTDIR part of regex_DESTDIR patch (use INSTALLPREFIX from 2.51)
- fix Doc/Makefile
- follow switch from dvi doc to pdf doc
- remove exec bit for installed man
- convert latin1 file to UTF-8
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.48-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
cifs-utils-4.8.1-5.fc14 (FEDORA-2011-7200)
Utilities for mounting and managing CIFS mounts
--------------------------------------------------------------------------------
Update Information:
This is an update that fixes an issue with unmounting as an unprivileged user.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 16 2011 Jeff Layton <jlayton@xxxxxxxxxx> 4.8.1-5
- mount.cifs: pass unadulterated device string to kernel (bz# 702664)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #705477 - Umount not possible
https://bugzilla.redhat.com/show_bug.cgi?id=705477
--------------------------------------------------------------------------------
================================================================================
cyrus-imapd-2.3.16-8.fc14 (FEDORA-2011-7217)
A high-performance mail server with IMAP, POP3, NNTP and SIEVE support
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Michal Hlavinka <mhlavink@xxxxxxxxxx> - 2.3.16-8
- fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #705288 - CVE-2011-1926 cyrus-imapd: STARTTLS plaintext command injection
https://bugzilla.redhat.com/show_bug.cgi?id=705288
--------------------------------------------------------------------------------
================================================================================
dracut-modules-olpc-0.5.9-1.fc14 (FEDORA-2011-7208)
OLPC modules for dracut initramfs
--------------------------------------------------------------------------------
Update Information:
Start boot animation during version purging
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.9-1
- Start boot animation while purging old versions
--------------------------------------------------------------------------------
================================================================================
icoutils-0.29.1-2.fc14 (FEDORA-2011-7218)
Utility for extracting and converting Microsoft icon and cursor files
--------------------------------------------------------------------------------
Update Information:
This update fixes a memory issue that could lead to a segfault in case of corrupted resource tables.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 16 2011 Martin Gieseking <martin.gieseking@xxxxxx> - 0.29.1-2
- fixed http://bugzilla.redhat.com/show_bug.cgi?id=701855
- minor spec cleanup
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #701855 - [abrt] icoutils-0.29.1-1.fc14: memcpy: Process /usr/bin/wrestool was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=701855
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.8.7-1.fc14 (FEDORA-2011-7205)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
- New upstream stable branch version 1.8.7.
- This just includes safe stable bugfixes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Richard W.M. Jones <rjones@xxxxxxxxxx> - 1:1.8.7-1
- New upstream stable branch version 1.8.7.
--------------------------------------------------------------------------------
================================================================================
mumble-1.2.3-2.fc14 (FEDORA-2011-7194)
Voice chat suite aimed at gamers
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.3 addressing a security issue and fixing the codec issue
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Andreas Osowski <th0br0@xxxxxxxxxx> - 1.2.3-2
- Added celt071 functionality
- Fixed the qmake args
* Wed Mar 30 2011 Andreas Osowski <th0br0@xxxxxxxxxx> - 1.2.3-1
- Update to 1.2.3
- Fixes vulnerability #610845
- Added patch to make it compile with Ice 3.4.0
- Added tmpfile.d config file for murmur
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2.2-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #610845 - Mumble: Remotely exploitable DoS (murmur server termination) due QueryUsers Qt SQLite database bug
https://bugzilla.redhat.com/show_bug.cgi?id=610845
--------------------------------------------------------------------------------
================================================================================
nss_db-2.2.3-0.5.pre1.fc14 (FEDORA-2011-7206)
An NSS library for the Berkeley DB
--------------------------------------------------------------------------------
Update Information:
This update incorporates a counterpart patch for an issue fixed in glibc which could cause applications which called getgrouplist() or initgroups() from multiple threads to receive an incomplete list of group memberships.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Nalin Dahyabhai <nalin@xxxxxxxxxx> - 2.2.3-0.5.pre1
- import patch to handle initgroups directly rather than forcing libc to
use the enumeration interfaces, which could result in two threads calling
initgroups() at the same time to both get a subset of the right answers
(#705466)
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.2.3-0.4.pre1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
openscada-0.7.1-4.fc14 (FEDORA-2011-7196)
Open SCADA system project
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Aleksey Popkov <aleksey@xxxxxxxxxx> - 0.7.1-4
- Adding of autoreconf command.
* Mon Apr 18 2011 Aleksey Popkov <aleksey@xxxxxxxxxx> - 0.7.1-3
- Updated for noarch packages enable.
* Fri Apr 15 2011 Aleksey Popkov <aleksey@xxxxxxxxxx> - 0.7.1-2
- Cosmetics of file name.
* Thu Apr 14 2011 Aleksey Popkov <aleksey@xxxxxxxxxx> - 0.7.1-1
- New source packages implementation is released.
- Documentation separated by languages.
- Libraries DB packages is added for *-LibDB-Main and *-LibDB-VCA.
- Instead DemoDB package added Model's packages for "AGLKS" and "Boiler".
- Adding the BFN module to self package.
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-Format-Natural-0.95-1.fc14 (FEDORA-2011-7213)
Create machine readable date/time with natural parsing logic
--------------------------------------------------------------------------------
Update Information:
This month's DateTime-Format-Natural update includes:
* New supported format: <monthday> <month> <year> <time am/pm>.
* Conditionally rewrite date strings, currently ones with an 'at' followed by a time or daytime (e.g., noon).
* Rename the aliases class to the more generic name rewrite.
* Parse times with AM/PM at word boundary separated by a space (through removing the space before parsing).
* Parse and document formatted dates with an abbreviated month name in the middle.
* Extend the format regex accordingly and fix partly broken checking for a formatted date boundary.
* Remove commas from date string now before rewriting aliases.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Iain Arnell <iarnell@xxxxxxxxx> 0.95-1
- update to latest upstream version
--------------------------------------------------------------------------------
================================================================================
perl-Ouch-0.0401-1.fc14 (FEDORA-2011-7199)
Exceptions that don't hurt
--------------------------------------------------------------------------------
Update Information:
A new version of Ouch, 0.0401, is available.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #701119 - perl-Ouch-0.0401 is available
https://bugzilla.redhat.com/show_bug.cgi?id=701119
--------------------------------------------------------------------------------
================================================================================
perl-Perl-PrereqScanner-1.003-1.fc14 (FEDORA-2011-7207)
Tool to scan your Perl code for its prerequisites
--------------------------------------------------------------------------------
Update Information:
This update fixes a bug that caused things like "within" and "extends" to trigger the Moose scanner.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Iain Arnell <iarnell@xxxxxxxxx> 1.003-1
- update to latest upstream version
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.002-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Fri Feb 4 2011 Iain Arnell <iarnell@xxxxxxxxx> 1.002-1
- update to latest upstream version
--------------------------------------------------------------------------------
================================================================================
pychess-0.10-1.fc14 (FEDORA-2011-7226)
Chess game for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 0.10 (Staunton) final release, with various bug fixes and translation updates since RC1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Christopher Aillon <caillon@xxxxxxxxxx> - 0.10-1
- Update to 0.10
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.10-0.9.rc1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-shapely-1.2.7-3.fc14 (FEDORA-2011-7210)
Geometric objects, predicates, and operations
--------------------------------------------------------------------------------
Update Information:
First build for F14
--------------------------------------------------------------------------------
================================================================================
transifex-client-0.5-1.fc14 (FEDORA-2011-7197)
Command line tool for Transifex translation management
--------------------------------------------------------------------------------
Update Information:
New administrative options.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Domingo Becker <domingobecker@xxxxxxxxx> - 0.5-1
- New upstream version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #678680 - Review Request: transifex-client - Command line tool for Transifex translation management
https://bugzilla.redhat.com/show_bug.cgi?id=678680
--------------------------------------------------------------------------------
================================================================================
viewvc-1.1.11-1.fc14 (FEDORA-2011-7222)
Browser interface for CVS and SVN version control repositories
--------------------------------------------------------------------------------
Update Information:
* security fix: remove user-reachable override of cvsdb row limit
* fix broken standalone.py -c and -d options handling
* add --help option to standalone.py
* fix stack trace when asked to checkout a directory (issue #478)
* improve memory usage and speed of revision log markup (issue #477)
* fix broken annotation view in CVS keyword-bearing files (issue #479)
* warn users when query results are incomplete (issue #443)
* avoid parsing errors on RCS newphrases in the admin section (issue #483)
* make rlog parsing code more robust in certain error cases (issue #444)
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Bojan Smojver <bojan@xxxxxxxxxxxxx> - 1.1.11-1
- bump up to 1.1.11
--------------------------------------------------------------------------------
================================================================================
yash-2.27-1.fc14 (FEDORA-2011-7191)
Yet Another SHell
--------------------------------------------------------------------------------
Update Information:
2.27 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 2.27-1
- 2.27
--------------------------------------------------------------------------------
================================================================================
zint-2.4.3-1.fc14 (FEDORA-2011-7209)
Barcode generator library
--------------------------------------------------------------------------------
Update Information:
This release corrects the computation of the ISBN13 check digit.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2011 Martin Gieseking <martin.gieseking@xxxxxx> 2.4.3-1
- updated to release 2.4.3
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
