The following Fedora 14 Security updates need testing: https://admin.fedoraproject.org/updates/bind-9.7.4-0.2.b1.fc14 https://admin.fedoraproject.org/updates/couchdb-1.0.2-4.fc14 https://admin.fedoraproject.org/updates/avahi-0.6.27-6.fc14 https://admin.fedoraproject.org/updates/pure-ftpd-1.0.32-1.fc14 https://admin.fedoraproject.org/updates/apr-1.4.5-1.fc14 https://admin.fedoraproject.org/updates/unbound-1.4.8-2.fc14 https://admin.fedoraproject.org/updates/drupal7-7.2-1.fc14 https://admin.fedoraproject.org/updates/drupal-6.22-1.fc14 https://admin.fedoraproject.org/updates/tomcat6-6.0.26-21.fc14 https://admin.fedoraproject.org/updates/cyrus-imapd-2.3.16-8.fc14 https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14 https://admin.fedoraproject.org/updates/kernel-2.6.35.13-92.fc14 https://admin.fedoraproject.org/updates/phpMyAdmin-3.4.1-1.fc14 https://admin.fedoraproject.org/updates/mutt-1.5.21-5.fc14 https://admin.fedoraproject.org/updates/rdesktop-1.6.0-11.fc14 https://admin.fedoraproject.org/updates/mumble-1.2.3-2.fc14 https://admin.fedoraproject.org/updates/gimp-2.6.11-14.fc14 The following Fedora 14 Critical Path updates have yet to be approved: https://admin.fedoraproject.org/updates/yum-3.2.28-7.fc14 https://admin.fedoraproject.org/updates/module-init-tools-3.11.1-6.fc14 https://admin.fedoraproject.org/updates/metacity-2.30.3-2.fc14 https://admin.fedoraproject.org/updates/selinux-policy-3.9.7-42.fc14 https://admin.fedoraproject.org/updates/libcdio-0.82-4.fc14 https://admin.fedoraproject.org/updates/libcgroup-0.36.2-7.fc14 https://admin.fedoraproject.org/updates/dash-0.5.6-4.fc14 https://admin.fedoraproject.org/updates/PackageKit-0.6.12-3.fc14 https://admin.fedoraproject.org/updates/pcre-8.10-2.fc14 https://admin.fedoraproject.org/updates/libedit-3.0-3.20090923cvs.fc14 https://admin.fedoraproject.org/updates/libpcap-1.1.1-3.fc14 https://admin.fedoraproject.org/updates/xorg-x11-drv-qxl-0.0.21-3.fc14 https://admin.fedoraproject.org/updates/evolution-exchange-2.32.3-1.fc14,evolution-data-server-2.32.3-1.fc14,evolution-2.32.3-1.fc14 https://admin.fedoraproject.org/updates/xorg-x11-drv-nouveau-0.0.16-14.20101010git8c8f15c.fc14 https://admin.fedoraproject.org/updates/dosfstools-3.0.9-6.fc14 https://admin.fedoraproject.org/updates/libimobiledevice-1.0.6-1.fc14 https://admin.fedoraproject.org/updates/libconcord-0.23-5.fc14,udev-161-9.fc14,concordance-0.23-2.fc14 https://admin.fedoraproject.org/updates/usbmuxd-1.0.7-1.fc14 https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14 https://admin.fedoraproject.org/updates/avahi-0.6.27-6.fc14 https://admin.fedoraproject.org/updates/xorg-x11-drv-geode-2.11.11-4.fc14 The following builds have been pushed to Fedora 14 updates-testing OpenSceneGraph-2.8.4-2.fc14 bfast-0.6.5a-1.fc14 bitfrost-1.0.14-1.fc14 dracut-modules-olpc-0.5.10-1.fc14 dvisvgm-1.0.8-1.fc14 emacs-common-riece-8.0.0-1.fc14 epdfview-0.1.8-1.fc14 gcl-2.6.8-0.8.20110516cvs.fc14 getmail-4.20.3-1.fc14 groonga-1.2.2-1.fc14 kamoso-2.0.2-1.fc14 kde-plasma-quickaccess-0.8.1-5.fc14 module-init-tools-3.11.1-6.fc14 mozc-1.1.717.102-2.fc14 mutt-1.5.21-5.fc14 perl-Devel-StackTrace-1.27-2.fc14 perl-Params-Validate-0.99-1.fc14 perl-SOAP-Lite-0.712-5.fc14 voms-2.0.2-1.fc14 voms-mysql-plugin-3.1.5.1-1.fc14 wallpapoz-0.5-8.fc14 yum-3.2.28-7.fc14 Details about builds: ================================================================================ OpenSceneGraph-2.8.4-2.fc14 (FEDORA-2011-7728) High performance real-time graphics toolkit -------------------------------------------------------------------------------- ChangeLog: * Mon May 30 2011 Ralf CorsÃpius <corsepiu@xxxxxxxxxxxxxxxxx> - 2.8.4-2 - Reflect fltk-include paths having changed incompatibly. -------------------------------------------------------------------------------- ================================================================================ bfast-0.6.5a-1.fc14 (FEDORA-2011-7737) Blat-like Fast Accurate Search Tool -------------------------------------------------------------------------------- ChangeLog: * Fri May 27 2011 Adam Huffman <bloch@xxxxxxxxxxxx> - 0.6.5a-1 - new upstream release - remove obsolete file deletion * Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.6.4e-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ bitfrost-1.0.14-1.fc14 (FEDORA-2011-7736) OLPC bitfrost security modules -------------------------------------------------------------------------------- Update Information: Fix HTTP etag handling Minor improvements to update module -------------------------------------------------------------------------------- ChangeLog: * Mon May 30 2011 Daniel Drake <dsd@xxxxxxxxxx> - 1.0.14-1 - Fix HTTP etag handling * Fri May 20 2011 Daniel Drake <dsd@xxxxxxxxxx> - 1.0.13-1 - Misc improvements to update module -------------------------------------------------------------------------------- ================================================================================ dracut-modules-olpc-0.5.10-1.fc14 (FEDORA-2011-7761) OLPC modules for dracut initramfs -------------------------------------------------------------------------------- Update Information: Fix purging of unpartitioned boot configs Start boot animation during version purging -------------------------------------------------------------------------------- ChangeLog: * Mon May 30 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.10-1 - Fix purging of unpartitioned boot configs * Tue May 17 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.9-1 - Start boot animation while purging old versions -------------------------------------------------------------------------------- ================================================================================ dvisvgm-1.0.8-1.fc14 (FEDORA-2011-7772) DVI to SVG converter -------------------------------------------------------------------------------- Update Information: This maintenance release fixes a couple of PostScript-related positioning issues. The most important changes are: * Evaluation of PS operators save, restore, and grestoreall has been added. * A potential memory issue triggered by invisible zero-length PS paths has been fixed. * The computation of the current drawing position influenced by PS and DVI actions has been improved. * Metafont no longer stops the conversions on errors in order to finish the convertion of buggy MF fonts properly. For further information see http://dvisvgm.sourceforge.net -------------------------------------------------------------------------------- ChangeLog: * Tue May 31 2011 Martin Gieseking <martin.gieseking@xxxxxx> 1.0.8-1 - updated to upstream release 1.0.8 * Fri May 6 2011 Martin Gieseking <martin.gieseking@xxxxxx> - 1.0.7-1 - updated to upstream release 1.0.7 -------------------------------------------------------------------------------- ================================================================================ emacs-common-riece-8.0.0-1.fc14 (FEDORA-2011-7726) Yet Another IRC Client for Emacs and XEmacs -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ChangeLog: * Tue May 31 2011 Daiki Ueno <dueno@xxxxxxxxxx> - 8.0.0-1 - new upstream release - remove riece-xemacs.patch since it is upstreamed -------------------------------------------------------------------------------- ================================================================================ epdfview-0.1.8-1.fc14 (FEDORA-2011-7768) Lightweight PDF document viewer -------------------------------------------------------------------------------- Update Information: Upstream release 0.1.8. Several bugfixes and small improvements. For details see the upstream changelog: http://trac.emma-soft.com/epdfview/wiki/ChangeLog#Version0.1.82011-05-28 -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 2 2011 Michal Schmidt <mschmidt@xxxxxxxxxx> - 0.1.8-1 - Update to the offical 0.1.8 release. - Remove buildroot cleaning. * Wed May 18 2011 Michal Schmidt <mschmidt@xxxxxxxxxx> - 0.1.8-0.2.20110504svn - Don't forget to package the man page. * Wed May 4 2011 Michal Schmidt <mschmidt@xxxxxxxxxx> - 0.1.8-0.1.20110504svn - Take the latest SVN rev for compatibility with poppler 0.17 (RHBZ#698156) - Drop epdfview-poppler-0.15.patch. - A new upstream release is coming soon, use 0.1.8 for Version already. - Use xz instead of bz2. * Sun Mar 13 2011 Marek Kasik <mkasik@xxxxxxxxxx> - 0.1.7-13.20100621svn - Rebuild (poppler-0.16.3) * Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.1.7-12.20100621svn - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Sun Jan 2 2011 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 0.1.7-11.20100621svn - rebuild (poppler) * Wed Dec 15 2010 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 0.1.7-10.20100621svn - rebuild (poppler) * Sat Nov 6 2010 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 0.1.7-9.20100621svn - rebuilt (poppler) * Fri Oct 1 2010 Michal Schmidt <mschmidt@xxxxxxxxxx> 0.1.7-8.20100621svn - Add support for poppler >= 0.15.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #709704 - [abrt] epdfview-0.1.7-13.20100621svn.fc15: strlen: Process /usr/bin/epdfview was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=709704 [ 2 ] Bug #709823 - RFE: need update for epdfview https://bugzilla.redhat.com/show_bug.cgi?id=709823 -------------------------------------------------------------------------------- ================================================================================ gcl-2.6.8-0.8.20110516cvs.fc14 (FEDORA-2011-7731) GNU Common Lisp -------------------------------------------------------------------------------- Update Information: This update fixes the SELinux labeling of GCL-compiled Maxima files, as well as introducing a few minor bug fixes from upstream. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 1 2011 Jerry James <loganjerry@xxxxxxxxx> - 2.6.8-0.8.20110516cvs - Update to 20110516 CVS snapshot for more bug fixes - Fix SELinux policy for maxima (bz 650279) - Drop upstreamed volatile patch * Thu Dec 30 2010 Jerry James <loganjerry@xxxxxxxxx> - 2.6.8-0.7.20101115cvs - Update to 20101115 CVS snapshot for more bug fixes - Drop upstreamed loginname patch - Add man page patch - Add license file to -selinux package - Don't force dynamic BFD so we can use custreloc instead -------------------------------------------------------------------------------- References: [ 1 ] Bug #650279 - SELinux is preventing /usr/lib64/maxima/5.22.1/binary-gcl/maxima from changing the access protection of memory on the heap. https://bugzilla.redhat.com/show_bug.cgi?id=650279 -------------------------------------------------------------------------------- ================================================================================ getmail-4.20.3-1.fc14 (FEDORA-2011-7748) POP3, IMAP4 and SDPS mail retriever with Maildir delivery -------------------------------------------------------------------------------- Update Information: 4.20.3 bugfix release -------------------------------------------------------------------------------- ChangeLog: * Tue May 31 2011 Ricky Zhou <ricky@xxxxxxxxxxxxxxxxx> - 4.20.3-1 - Upstream 4.20.3 release. -------------------------------------------------------------------------------- ================================================================================ groonga-1.2.2-1.fc14 (FEDORA-2011-7723) An Embeddable Fulltext Search Engine -------------------------------------------------------------------------------- Update Information: new upstream release; split -server subpackage -------------------------------------------------------------------------------- ChangeLog: * Tue May 31 2011 Daiki Ueno <dueno@xxxxxxxxxx> - 1.2.2-1 - build in fedora * Sun May 29 2011 Kouhei Sutou <kou@xxxxxxxxxxxxxx> - 1.2.2-0 - new upstream release. - split server files into groonga-server package. -------------------------------------------------------------------------------- ================================================================================ kamoso-2.0.2-1.fc14 (FEDORA-2011-7767) Application for taking pictures and videos from a webcam -------------------------------------------------------------------------------- Update Information: Kamoso is an application to take pictures and videos out of your webcam. -------------------------------------------------------------------------------- References: [ 1 ] Bug #674738 - Review Request: kamoso - Application for taking pictures and videos from a webcam https://bugzilla.redhat.com/show_bug.cgi?id=674738 -------------------------------------------------------------------------------- ================================================================================ kde-plasma-quickaccess-0.8.1-5.fc14 (FEDORA-2011-7708) Plasma applet for quick access to the most used folders -------------------------------------------------------------------------------- Update Information: Fix crash for right-click on selected file item. -------------------------------------------------------------------------------- ChangeLog: * Tue May 31 2011 Jaroslav Reznik <jreznik@xxxxxxxxxx> - 0.8.1-5 - rebuild due to NewMenu -> NewFileMenu change * Tue Feb 15 2011 Jaroslav Reznik <jreznik@xxxxxxxxxx> - 0.8.1-4 - fix "taking address of temporary object" build error (with -fpermissive) * Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.8.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ module-init-tools-3.11.1-6.fc14 (FEDORA-2011-7709) Kernel module management utilities. -------------------------------------------------------------------------------- Update Information: Existing releases of module-init-tools cannot handle Linux kernel version numbering in which x.y.z releases are replaced with x.y releases. This update contains a fix for such version number handling. -------------------------------------------------------------------------------- ChangeLog: * Tue May 31 2011 Jon Masters <jcm@xxxxxxxxxxxxxx> - 3.11.1-6 - Add patch supporting kernel x.y versions in depmod. - Update autotools bits to newer build versions. -------------------------------------------------------------------------------- References: [ 1 ] Bug #709231 - depmod cannot handle kernel versions without x.y.z components https://bugzilla.redhat.com/show_bug.cgi?id=709231 -------------------------------------------------------------------------------- ================================================================================ mozc-1.1.717.102-2.fc14 (FEDORA-2011-7399) Open-sourced Google Japanese Input -------------------------------------------------------------------------------- Update Information: Correct the installation path in emacs-mozc package -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 1 2011 Akira TAGOH <tagoh@xxxxxxxxxx> - 1.1.717.102-2 - Fix broken emacs-mozc package. * Mon May 23 2011 Akira TAGOH <tagoh@xxxxxxxxxx> - 1.1.717.102-1 - New upstream release. -------------------------------------------------------------------------------- ================================================================================ mutt-1.5.21-5.fc14 (FEDORA-2011-7751) A text mode mail user agent -------------------------------------------------------------------------------- Update Information: This is an update that fixes a hostname verification of x.509 certificates and a segmentation fault during reading message headers. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 15 2011 Honza Horak <hhorak@xxxxxxxxxx> - 5:1.5.21-5 - Fixed hostname verification of x.509 certificates. (rhbz#688756, CVE-2011-1429) * Tue Mar 29 2011 Honza Horak <hhorak@xxxxxxxxxx> - 5:1.5.21-4 - Fixed segmentation faults during reading message headers (rhbz#676074) * Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 5:1.5.21-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #688755 - CVE-2011-1429 mutt: improper verification of X.509 certificates can lead to MITM attacks on SMTP SSL connections https://bugzilla.redhat.com/show_bug.cgi?id=688755 -------------------------------------------------------------------------------- ================================================================================ perl-Devel-StackTrace-1.27-2.fc14 (FEDORA-2011-7754) Perl module implementing stack trace and stack trace frame objects -------------------------------------------------------------------------------- ChangeLog: * Tue May 31 2011 Ralf CorsÃpius <corsepiu@xxxxxxxxxxxxxxxxx> - 1:1.27-1 - Upstream update. -------------------------------------------------------------------------------- ================================================================================ perl-Params-Validate-0.99-1.fc14 (FEDORA-2011-7741) Params-Validate Perl module -------------------------------------------------------------------------------- ChangeLog: * Tue May 31 2011 Ralf CorsÃpius <corsepiu@xxxxxxxxxxxxxxxxx> - 0.99-1 - Upstream update. - Rebase patch (Params-Validate-0.99.diff). -------------------------------------------------------------------------------- ================================================================================ perl-SOAP-Lite-0.712-5.fc14 (FEDORA-2011-7770) Client and server side SOAP implementation -------------------------------------------------------------------------------- Update Information: SOAP::Lite should not provide perl(LWP::Protocol). -------------------------------------------------------------------------------- ChangeLog: * Tue May 31 2011 Petr Sabata <contyk@xxxxxxxxxx> - 0.712-5 - Filter LWP::Protocol from Provides (#709269) -------------------------------------------------------------------------------- References: [ 1 ] Bug #709269 - perl-SOAP-Lite provides bogus "perl(LWP::Protocol)" https://bugzilla.redhat.com/show_bug.cgi?id=709269 -------------------------------------------------------------------------------- ================================================================================ voms-2.0.2-1.fc14 (FEDORA-2011-7732) Virtual Organization Membership Service -------------------------------------------------------------------------------- Update Information: Update to voms version 2.0.2. Add compat package for old releases containing the obsoleted libraries. Drop Java ahead-of-time compilation for new releases. -------------------------------------------------------------------------------- ChangeLog: * Fri May 27 2011 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 2.0.2-1 - Update to version 2.0.2 - Add compat package for older releases - Drop Java AOT compilation for newer releases * Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.9.19.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Sun Dec 26 2010 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 1.9.19.2-2 - Make vomsjapi-javadoc arch depenent on EPEL -------------------------------------------------------------------------------- References: [ 1 ] Bug #693276 - voms is incompatible with bouncycastle-1.46-1.el6 https://bugzilla.redhat.com/show_bug.cgi?id=693276 -------------------------------------------------------------------------------- ================================================================================ voms-mysql-plugin-3.1.5.1-1.fc14 (FEDORA-2011-7732) VOMS server plugin for MySQL -------------------------------------------------------------------------------- Update Information: Update to voms version 2.0.2. Add compat package for old releases containing the obsoleted libraries. Drop Java ahead-of-time compilation for new releases. -------------------------------------------------------------------------------- ChangeLog: * Tue May 31 2011 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 3.1.5.1-1 - Update to version 3.1.5.1 * Wed Mar 23 2011 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 3.1.3.2-3 - Rebuild for mysql 5.5.10 * Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.1.3.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #693276 - voms is incompatible with bouncycastle-1.46-1.el6 https://bugzilla.redhat.com/show_bug.cgi?id=693276 -------------------------------------------------------------------------------- ================================================================================ wallpapoz-0.5-8.fc14 (FEDORA-2011-7774) Gnome Multi Backgrounds and Wallpapers Configuration Tool -------------------------------------------------------------------------------- Update Information: A bug is reported that wallpapoz configuration GUI raises backtrace when changing XML configuration file from "Desktop" style to "Workspace" type on some occasion. This new rpm will fix this issue. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 1 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 0.5-8 - Fix crash witching from desktop style XML to workspace style one with workspace number increased (bug 708769) -------------------------------------------------------------------------------- References: [ 1 ] Bug #708769 - [abrt] wallpapoz-0.5-6.fc15: wallpapoz:727:load_treeview:IndexError: list index out of range https://bugzilla.redhat.com/show_bug.cgi?id=708769 -------------------------------------------------------------------------------- ================================================================================ yum-3.2.28-7.fc14 (FEDORA-2011-7749) RPM installer/updater -------------------------------------------------------------------------------- Update Information: Make "arm" the basearch for arm*. -------------------------------------------------------------------------------- ChangeLog: * Tue May 31 2011 James Antill <james at fedoraproject.org> - 3.2.28-7 - Change arm basearch to arm -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test