The following Fedora 14 Security updates need testing:
https://admin.fedoraproject.org/updates/libvoikko-3.0-3.fc14
https://admin.fedoraproject.org/updates/subversion-1.6.17-1.fc14
https://admin.fedoraproject.org/updates/tomcat6-6.0.26-21.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
https://admin.fedoraproject.org/updates/xen-4.0.2-1.fc14
https://admin.fedoraproject.org/updates/oprofile-0.9.6-21.fc14
https://admin.fedoraproject.org/updates/ejabberd-2.1.8-2.fc14
https://admin.fedoraproject.org/updates/blender-2.49b-14.fc14
https://admin.fedoraproject.org/updates/curl-7.21.0-8.fc14
https://admin.fedoraproject.org/updates/weechat-0.3.5-1.fc14
https://admin.fedoraproject.org/updates/libxml-1.8.17-27.fc14
https://admin.fedoraproject.org/updates/syslog-ng-3.1.4-4.fc14
https://admin.fedoraproject.org/updates/NetworkManager-0.8.4-2.git20110622.fc14
https://admin.fedoraproject.org/updates/xulrunner-1.9.2.18-1.fc14,firefox-3.6.18-1.fc14,mozvoikko-1.0-22.fc14.1,perl-Gtk2-MozEmbed-0.08-6.fc14.27,gnome-web-photo-0.9-21.fc14.1,galeon-2.0.7-41.fc14.1,gnome-python2-extras-2.25.3-31.fc14.1,thunderbird-3.1.11-1.fc14
The following Fedora 14 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/curl-7.21.0-8.fc14
https://admin.fedoraproject.org/updates/NetworkManager-0.8.4-2.git20110622.fc14
https://admin.fedoraproject.org/updates/bash-4.1.7-4.fc14
https://admin.fedoraproject.org/updates/perl-5.12.4-145.fc14
https://admin.fedoraproject.org/updates/redhat-rpm-config-9.1.0-8.fc14
https://admin.fedoraproject.org/updates/python-slip-0.2.16-1.fc14
https://admin.fedoraproject.org/updates/policycoreutils-2.0.85-30.1.fc14
https://admin.fedoraproject.org/updates/system-config-keyboard-1.3.1-5.fc14
https://admin.fedoraproject.org/updates/fedora-logos-14.0.2-1.fc14
https://admin.fedoraproject.org/updates/gtk2-2.22.0-2.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-8.fc14.2
https://admin.fedoraproject.org/updates/pygobject2-2.21.5-4.fc14
https://admin.fedoraproject.org/updates/pcre-8.10-2.fc14
https://admin.fedoraproject.org/updates/libpcap-1.1.1-3.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-qxl-0.0.21-3.fc14
https://admin.fedoraproject.org/updates/evolution-exchange-2.32.3-1.fc14,evolution-data-server-2.32.3-1.fc14,evolution-2.32.3-1.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-nouveau-0.0.16-14.20101010git8c8f15c.fc14
https://admin.fedoraproject.org/updates/libconcord-0.23-5.fc14,udev-161-9.fc14,concordance-0.23-2.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
The following builds have been pushed to Fedora 14 updates-testing
389-admin-1.1.18-1.fc14
389-adminutil-1.1.14-1.fc14
389-console-1.1.7-1.fc14
389-ds-1.2.2-1.fc14
389-ds-console-1.2.6-1.fc14
NetworkManager-0.8.4-2.git20110622.fc14
R-ROC-1.28.0-1.fc14
R-affydata-1.11.11-1.fc14
R-hgu133acdf-2.8.0-1.fc14
R-hgu95av2cdf-2.8.0-1.fc14
R-statmod-1.4.10-1.fc14
R-timeDate-2130.93-1.fc14
bash-4.1.7-4.fc14
berusky-1.2-2.fc14
curl-7.21.0-8.fc14
firefox-3.6.18-1.fc14
freeradius-2.1.11-1.fc14
gajim-0.14.3-1.fc14
galeon-2.0.7-41.fc14.1
ghc-rpm-macros-0.10.57-1.fc14
gnome-paint-0.4.0-4.fc14
gnome-python2-extras-2.25.3-31.fc14.1
gnome-web-photo-0.9-21.fc14.1
idm-console-framework-1.1.7-2.fc14
libdeltacloud-0.9-1.fc14
libmtp-1.0.6-3.fc14
mediawiki-openid-0.9.0-2.fc14
mock-1.1.11-1.fc14
mozvoikko-1.0-22.fc14.1
nco-4.0.8-2.fc14
perl-5.12.4-145.fc14
perl-Gtk2-MozEmbed-0.08-6.fc14.27
perl-Gtk2-Unique-0.05-2.fc14
perl-Net-DNS-SEC-0.16-4.fc14
poppler-0.14.5-3.fc14
publican-jboss-2.8-1.fc14
python-cvxopt-1.1.3-2.fc14
python-xgoogle-1.4-3.fc14
qterm-0.5.12-1.fc14
quagga-0.99.18-2.fc14
sonic-visualiser-1.8-1.fc14
thunderbird-3.1.11-1.fc14
xulrunner-1.9.2.18-1.fc14
Details about builds:
================================================================================
389-admin-1.1.18-1.fc14 (FEDORA-2011-8559)
389 Administration Server (admin)
--------------------------------------------------------------------------------
Update Information:
skip rebranding current brand - add support for different skins
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Rich Megginson <rmeggins@xxxxxxxxxx> - 1.1.18-1
- skip rebranding current brand
- support for skins
* Fri May 13 2011 Rich Megginson <rmeggins@xxxxxxxxxx> - 1.1.17-1
- 1.1.17
- support "in-place" upgrade and rebranding from Red Hat to 389
- many fixes for coverity issues
--------------------------------------------------------------------------------
================================================================================
389-adminutil-1.1.14-1.fc14 (FEDORA-2011-8569)
Utility library for 389 administration
--------------------------------------------------------------------------------
Update Information:
Many fixes for coverity issues
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Rich Megginson <rmeggins@xxxxxxxxxx> - 1.1.14-1
- many fixes for coverity issues
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #697641 - Fix Coverity NULL pointer dereferences
https://bugzilla.redhat.com/show_bug.cgi?id=697641
[ 2 ] Bug #697106 - (cov#10770) Need to call va_end() after calling va_start()
https://bugzilla.redhat.com/show_bug.cgi?id=697106
[ 3 ] Bug #697116 - Need to check if admldapGetISIEDN() returns NULL
https://bugzilla.redhat.com/show_bug.cgi?id=697116
[ 4 ] Bug #697110 - (cov#10757) Remove unused variable in psetRootModAttrList()
https://bugzilla.redhat.com/show_bug.cgi?id=697110
--------------------------------------------------------------------------------
================================================================================
389-console-1.1.7-1.fc14 (FEDORA-2011-8614)
389 Management Console
--------------------------------------------------------------------------------
Update Information:
Support skins - use jpackage_script instead of separate shell script
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 14 2011 Rich Megginson <rmeggins@xxxxxxxxxx> - 1.1.7-1
- use jpackage_script instead of packaging our own shell script
- support "skins" package for other brands/versions
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.1.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
389-ds-1.2.2-1.fc14 (FEDORA-2011-8651)
389 Directory, Administration, and Console Suite
--------------------------------------------------------------------------------
Update Information:
Get rid of old fedora-ds cruft
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 1 2011 Rich Megginson <rmeggins@xxxxxxxxxx> 1.2.2-1
- get rid of old fedora-ds stuff
--------------------------------------------------------------------------------
================================================================================
389-ds-console-1.2.6-1.fc14 (FEDORA-2011-8583)
389 Directory Server Management Console
--------------------------------------------------------------------------------
Update Information:
Some bug fixes - added skin support
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2011 Rich Megginson <rmeggins@xxxxxxxxxx> 1.2.6-1
- git tag 389-ds-console-1.2.6
- added skins support
- Bug 700908 - Validate matching rules when creating a new attribute
- Bug 705753 - Refresh problem in Console directory browser
--------------------------------------------------------------------------------
================================================================================
NetworkManager-0.8.4-2.git20110622.fc14 (FEDORA-2011-8612)
Network connection manager and user applications
--------------------------------------------------------------------------------
Update Information:
This update fixes the security issue for creating shared WiFi networks.
It's been tracked by #709662 - CVE-2011-2176.
Before this update, NetworkManager didn't respect PolicyKit policies for
creating shared WiFi networks: actions org.freedesktop.network-manager-settings.system.wifi.share.open
and org.freedesktop.network-manager-settings.system.wifi.share.protected in
/usr/share/polkit-1/actions/org.freedesktop.network-manager-settings.system.policy file.
Thus, users could create shared WiFi networks even if it was disabled via the PolicyKit setting.
This update fixes this issue. Be aware, that the default policies still allow creating shared WiFi
networks. You should modify <allow_active>yes</allow_active> to <allow_active>auth_admin</allow_active>
if you require authorization with root password, or to <allow_active>no</allow_active> to disallow
creating the networks altogether through the above PolicyKit actions.
In addition, this update fixes other bugs by updating NetworkManager to git snaphot as of 2011-06-22.
- core: fix up checks for s390 CTC device type (bgo #649025)
- core: recognize platform 'gadget' devices
- core: only send hostname without domain as host-name option (rh #694758)
- core: clear 'invalid' connection tag when cable is re-plugged
- core: fix crash requesting system VPN secrets (bgo #651710)
- core: add MAC address blacklisting feature for WiFi and ethernet connections
- core: allow _ as a valid character for GSM APNs
- wifi: always fix up Ad-Hoc frequency when connecting (rh #699203)
- keyfile: better handle cert/key files that don't exist (bgo #649807)
- keyfile: ignore .pem and .der file changes
- editor: improve usability for entering manual IP addresses and routes (rh #698199) (bgo #607678)
- editor: don't crash in edit_done_cb() when connection is invalid (rh #704848)
- editor: don't allow inserting 0.0.0.0 as destination and netmask for IPv4 routes
- editor: allow _ as a valid character for GSM APNs
- applet: ensure entries activate default button if Enter is pressed (rh #622487)
- applet: add gsm registration status notification
- applet: filter APN entry characters in mobile-wizard
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 Jiří Klimeš <jklimes@xxxxxxxxxx> - 0.8.4-2.git20110622
- core: respect PolicyKit permissions for creating shared WiFi networks (rh #709662)
- core: fix up checks for s390 CTC device type (bgo #649025)
- core: recognize platform 'gadget' devices
- core: only send hostname without domain as host-name option (rh #694758)
- core: clear 'invalid' connection tag when cable is re-plugged
- core: fix crash requesting system VPN secrets (bgo #651710)
- core: add MAC address blacklisting feature for WiFi and ethernet connections
- core: allow _ as a valid character for GSM APNs
- wifi: always fix up Ad-Hoc frequency when connecting (rh #699203)
- keyfile: better handle cert/key files that don't exist (bgo #649807)
- keyfile: ignore .pem and .der file changes
- editor: improve usability for entering manual IP addresses and routes (rh #698199) (bgo #607678)
- editor: don't crash in edit_done_cb() when connection is invalid (rh #704848)
- editor: don't allow inserting 0.0.0.0 as destination and netmask for IPv4 routes
- editor: allow _ as a valid character for GSM APNs
- applet: ensure entries activate default button if Enter is pressed (rh #622487)
- applet: add gsm registration status notification
- applet: filter APN entry characters in mobile-wizard
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #709662 - CVE-2011-2176 NetworkManager: Did not honour PolicyKit auth_admin action element by creation of Ad-Hoc wireless networks
https://bugzilla.redhat.com/show_bug.cgi?id=709662
--------------------------------------------------------------------------------
================================================================================
R-ROC-1.28.0-1.fc14 (FEDORA-2011-8643)
Utilities for ROC
--------------------------------------------------------------------------------
Update Information:
Update of bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 1.28.0-1
- Update to version 1.28.0
--------------------------------------------------------------------------------
================================================================================
R-affydata-1.11.11-1.fc14 (FEDORA-2011-8643)
Affymetrix data for demonstration purpose
--------------------------------------------------------------------------------
Update Information:
Update of bioconductor
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
R-hgu133acdf-2.8.0-1.fc14 (FEDORA-2011-8643)
HG-U133A.cdf data file
--------------------------------------------------------------------------------
Update Information:
Update of bioconductor
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
R-hgu95av2cdf-2.8.0-1.fc14 (FEDORA-2011-8643)
HG_U95Av2.CDF data file
--------------------------------------------------------------------------------
Update Information:
Update of bioconductor
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
R-statmod-1.4.10-1.fc14 (FEDORA-2011-8643)
Statistical modeling
--------------------------------------------------------------------------------
Update Information:
Update of bioconductor
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
R-timeDate-2130.93-1.fc14 (FEDORA-2011-8643)
Rmetrics - chronological and calendrical objects
--------------------------------------------------------------------------------
Update Information:
Update of bioconductor
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 pingou <pingou@xxxxxxxxxxxx> 2130.93-1
- Update to version 2130.93
--------------------------------------------------------------------------------
================================================================================
bash-4.1.7-4.fc14 (FEDORA-2011-8613)
The GNU Bourne Again shell
--------------------------------------------------------------------------------
Update Information:
Don't crash when use `read' with associative array
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 Roman Rakus <rrakus@xxxxxxxxxx> - 4.1.7-4
- Don't crash when use `read' with associative array (#715050)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #715050 - [abrt] bash-4.1.7-3.fc14: array_flush: Process /bin/bash was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=715050
--------------------------------------------------------------------------------
================================================================================
berusky-1.2-2.fc14 (FEDORA-2011-8574)
Sokoban clone
--------------------------------------------------------------------------------
Update Information:
Fixed crash after start
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 Martin Stransky <stransky@xxxxxxxxxx> 1.2-2
- Fixed rhbz#689106 - seg. fault after start
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #689106 - [abrt] berusky-1.2-1.fc14: game_logic::player_move: Process /usr/bin/berusky was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=689106
--------------------------------------------------------------------------------
================================================================================
curl-7.21.0-8.fc14 (FEDORA-2011-8640)
A utility for getting files from remote servers (FTP, HTTP, and others)
--------------------------------------------------------------------------------
Update Information:
do not delegate GSSAPI credentials (CVE-2011-2192)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2011 Kamil Dudka <kdudka@xxxxxxxxxx> 7.21.0-8
- do not delegate GSSAPI credentials (CVE-2011-2192)
* Sat Apr 16 2011 Peter Robinson <pbrobinson@xxxxxxxxx> 7.21.0-7
- no valgrind on SPARC or ARMv5 arches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #711454 - CVE-2011-2192 curl: Improper delegation of client credentials during GSS negotiation
https://bugzilla.redhat.com/show_bug.cgi?id=711454
--------------------------------------------------------------------------------
================================================================================
firefox-3.6.18-1.fc14 (FEDORA-2011-8647)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:
* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11
This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Jan Horak <jhorak@xxxxxxxxxx> - 3.6.18-1
- Update to 3.6.18
--------------------------------------------------------------------------------
================================================================================
freeradius-2.1.11-1.fc14 (FEDORA-2011-8573)
High-performance and highly configurable free RADIUS server
--------------------------------------------------------------------------------
Update Information:
Upgrade to latest upstream release, 2.1.11
See changelog for details
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 John Dennis <jdennis@xxxxxxxxxx> - 2.1.11-1
- Upgrade to latest upstream release: 2.1.11
- Remove the following two patches as upstream has incorporated them:
freeradius-radtest-ipv6.patch
freeradius-lt-dladvise.patch
- Upstream changelog for 2.1.11:
Feature improvements
* Added doc/rfc/rfc6158.txt: RADIUS Design Guidelines.
All vendors need to read it and follow its directions.
* Microsoft SoH support for PEAP from Phil Mayers.
See doc/SoH.txt
* Certificate "bootstrap" script now checks for certificate expiry.
See comments in raddb/eap.conf, and then "make_cert_command".
* Support for dynamic expansion of EAP-GTC challenges.
Patch from Alexander Clouter.
* OCSP support from Alex Bergmann. See raddb/eap.conf, "ocsp"
section.
* Updated dictionary.huawei, dictionary.3gpp, dictionary.3gpp3.
* Added dictionary.eltex, dictionary.motorola, and dictionary.ukerna.
* Experimental redis support from Gabriel Blanchard.
See raddb/modules/redis and raddb/modules/rediswho
* Add "key" to rlm_fastusers. Closes bug #126.
* Added scripts/radtee from original software at
http://horde.net/~jwm/software/misc/comparison-tee
* Updated radmin "man" page for new commands.
* radsniff now prints the hex decoding of the packet (-x -x -x)
* mschap module now reloads its configuration on HUP
* Added experimental "replicate" module. See raddb/modules/replicate
* Policy "foo" can now refer to module "foo". This lets you
over-ride the behavior of a module.
* Policy "foo.authorize" can now over-ride the behavior of module
"foo", "authorize" method.
* Produce errors in more situations when the configuration files
have invalid syntax.
Bug fixes
* Ignore pre/post-proxy sections if proxying is disabled
* Add configure checks for pcap_fopen*.
* Fix call to otp_write in rlm_otp
* Fix issue with Access-Challenge checking from 2.1.10, when the
debug flag was set after server startup. Closes #116 and #117.
* Fix typo in zombie period start time.
* Fix leak in src/main/valuepair.c. Patch from James Ballantine.
* Allow radtest to use spaces in shared secret.
Patch from Cedric Carree.
* Remove extra calls to HMAC_CTX_init() in rlm_wimax, fixing leak.
Patch from James Ballantine.
* Remove MN-FA key generation. The NAS does this, not AAA.
Patch from Ben Weichman.
* Include dictionary.mikrotik by default. Closes bug #121.
* Add group membership query to MS-SQL examples. Closes bug #120.
* Don't cast NAS-Port to integer in Postgresql queries.
Closes bug #112.
* Fixes for libtool and autoconf from Sam Hartman.
* radsniff should read the dictionaries in more situations.
* Use fnmatch to check for detail file reader==writer.
Closes bug #128.
* Check for short writes (i.e. disk full) in rlm_detail.
Closes bug #130. Patches and testing from John Morrissey.
* Fix typo in src/lib/token.c. Closes bug #124
* Allow workstation trust accounts to use MS-CHAP.
Closes bug #123.
* Assigning foo=`/bin/echo hello` now produces a syntax error
if it is done outside of an "update" section.
* Fix "too many open file descriptors" problem when using
"verify client" in eap.conf.
* Many fixes to dialup_admin for PHP5, by Stefan Winter.
* Allow preprocess module to have "hints = " and "huntgroups =",
which allows them to be empty or non-existent.
* Renamed "php3" files to "php" in dialup_admin/
* Produce error when sub-TLVs are used in a dictionary. They are
supported only in the "master" branch, and not in 2.1.x.
* Minor fix in dictionary.redback. Closes bug #138.
* Fixed MySQL "NULL" issues in ippool.conf. Closes bug #129.
* Fix to Access-Challenge warning from Ken-ichirou Matsuzawa.
Closes bug #118.
* DHCP fixes to send unicast packets in more situations.
* Fix to udpfromto, to enable it to work on IPv6 networks.
* Fixes to the Oracle accounting_onoff_query.
* When using both IPv4 and IPv6 home servers, ensure that we use the
correct local socket for proxying. Closes bug #143.
* Suppress messages when thread pool is nearly full, all threads
are busy, and we can't create new threads.
* IPv6 is now enabled for udpfromto. Closes bug #141
* Make sqlippool query buffer the same size as sql module.
Closes bug #139.
* Make Coa / Disconnect proxying work again.
* Configure scripts for rlm_caching from Nathaniel McCallum
* src/lib/dhcp.c and src/include/libradius.h are LGPL, not GPL.
* Updated password routines to use time-insensitive comparisons.
This prevents timing attacks (though none are known).
* Allow sqlite module to do normal SELECT queries.
* rlm_wimax now has a configure script
* Moved Ascend, USR, and Motorola "illegal" dictionaries to separate
files. See share/dictionary for explanations.
* Check for duplicate module definitions in the modules{} section,
and refuse to start if duplicates are found.
* Check for duplicate virtual servers, and refuse to start if
duplicates are found.
* Don't use udpfromto if source is INADDR_ANY. Closes bug #148.
* Check pre-conditions before running radmin "inject file".
* Don't over-ride "no match" with "match" for regexes.
Closes bug #152.
* Make retry and error message configurable in mschap.
See raddb/modules/mschap
* Allow EAP-MSCHAPv2 to send error message to client. This change
allows some clients to prompt the user for a new password.
See raddb/eap.conf, mschapv2 section, "send_error".
* Load the default virtual server before any others.
This matches what users expect, and reduces confusion.
* Fix configure checks for udpfromto. Fixes Debian bug #606866
* Definitive fix for bug #35, where the server could crash under
certain loads. Changes src/lib/packet.c to use RB trees.
* Updated "configure" checks to allow IPv6 udpfromto on Linux.
* SQL module now returns NOOP if the accounting start/interim/stop
queries don't do anything.
* Allow %{outer.control: ... } in string expansions
* home_server coa config now matches raddb/proxy.conf
* Never send a reply to a DHCP Release.
* Sat Jan 1 2011 John Dennis <jdennis@xxxxxxxxxx> - 2.1.10-3
- bug 666589 - removing freeradius from system does not delete the user "radiusd"
fix scriptlet argument testing, simplify always exiting with zero
--------------------------------------------------------------------------------
================================================================================
gajim-0.14.3-1.fc14 (FEDORA-2011-8607)
Jabber client written in PyGTK
--------------------------------------------------------------------------------
Update Information:
This is a bugfix release of Gajim. From upstream changelog:
* Fix history viewer
* Fix closing roster window
* Prevent some errors with metacontacts
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 20 2011 Michal Schmidt <mschmidt@xxxxxxxxxx> 0.14.3-1
- Upstream bugfix release.
- gajim-0.14-handle-read-before-close.patch already applied.
--------------------------------------------------------------------------------
================================================================================
galeon-2.0.7-41.fc14.1 (FEDORA-2011-8647)
GNOME2 Web browser based on Mozilla
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:
* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11
This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Jan Horak <jhorak@xxxxxxxxxx> - 2.0.7-41.1
- Rebuild against newer gecko
--------------------------------------------------------------------------------
================================================================================
ghc-rpm-macros-0.10.57-1.fc14 (FEDORA-2011-8563)
Macros for building packages for GHC
--------------------------------------------------------------------------------
Update Information:
Don't generate bogus package dependencies on ghc-base = 3.x, which is part of the main ghc-base-4.x subpackage.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 Jens Petersen <petersen@xxxxxxxxxx> - 0.10.57-1
- ghc-deps.sh: also ignore base-3 since it is part of ghc-base
--------------------------------------------------------------------------------
================================================================================
gnome-paint-0.4.0-4.fc14 (FEDORA-2011-8604)
Easy to use paint program
--------------------------------------------------------------------------------
Update Information:
gnome-paint is a simple, easy to use paint program for GNOME.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #666233 - Review Request: gnome-paint - Easy to use paint program for GNOME
https://bugzilla.redhat.com/show_bug.cgi?id=666233
--------------------------------------------------------------------------------
================================================================================
gnome-python2-extras-2.25.3-31.fc14.1 (FEDORA-2011-8647)
Additional PyGNOME Python extension modules
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:
* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11
This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Jan Horak <jhorak@xxxxxxxxxx> - 2.25.3-31.1
- Rebuild against newer gecko
--------------------------------------------------------------------------------
================================================================================
gnome-web-photo-0.9-21.fc14.1 (FEDORA-2011-8647)
HTML pages thumbnailer
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:
* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11
This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Jan Horak <jhorak@xxxxxxxxxx> - 0.9-21.1
- Rebuild against newer gecko
--------------------------------------------------------------------------------
================================================================================
idm-console-framework-1.1.7-2.fc14 (FEDORA-2011-8603)
Identity Management Console Framework
--------------------------------------------------------------------------------
Update Information:
A couple of bug fixes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Rich Megginson <rmeggins@xxxxxxxxxx> - 1.1.7-2
- using new upstream git repo at fedorahosted.org
- git tag idm-console-framework-1.1.7
- Use DefaultTopologyPlugin if topologyplugin not found in the DS
- Bug 706472 - [console] java exception throw in UI, but user gets created
- Bug 706258 - ACI Editor dialog flickers
--------------------------------------------------------------------------------
================================================================================
libdeltacloud-0.9-1.fc14 (FEDORA-2011-8657)
A library for accessing deltacloud
--------------------------------------------------------------------------------
Update Information:
Update to libdeltacloud 0.9
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 6 2011 Chris Lalancette <clalance@xxxxxxxxxx> - 0.9-1
- Update to latest upstream (0.9)
--------------------------------------------------------------------------------
================================================================================
libmtp-1.0.6-3.fc14 (FEDORA-2011-8560)
A software library for MTP media players
--------------------------------------------------------------------------------
Update Information:
Attempting to address connection issues with primarily
Android-based tablets we update the device database with the
lates from libmtp 1.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2011 Linus Walleij <triad@xxxxxxxxx> 1.0.6-3
- Update the device database to latest version in an attempt to
address issues with Android tablets like the Xoom and Asus tablets
* Fri Apr 1 2011 Linus Walleij <triad@xxxxxxxxx> 1.0.6-2
- Maybe fixing a probing issue on an input device.
* Sat Feb 12 2011 Linus Walleij <triad@xxxxxxxxx> 1.0.6-1
- New upstream release fixing bugs & more things we patched.
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sat Feb 5 2011 Linus Walleij <triad@xxxxxxxxx> 1.0.5-1
- New upstream release fixing all the things we patched.
* Mon Jan 24 2011 Linus Walleij <triad@xxxxxxxxx> 1.0.4-3
- Screwed up boolean logic in last patch, fixing it.
* Wed Jan 19 2011 Linus Walleij <triad@xxxxxxxxx> 1.0.4-2
- Testing out a patch to be more careful when probing devices.
* Sun Jan 9 2011 Linus Walleij <triad@xxxxxxxxx> 1.0.4-1
- New upstream version with mucho udev fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #647506 - boot hangs at udev
https://bugzilla.redhat.com/show_bug.cgi?id=647506
[ 2 ] Bug #688836 - Can't connect to mtp device with mtp-tools scripts.
https://bugzilla.redhat.com/show_bug.cgi?id=688836
[ 3 ] Bug #703915 - [abrt] gnome-phone-manager-0.65-9.fc14: __libc_message: Process /usr/bin/gnome-phone-manager was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=703915
[ 4 ] Bug #715453 - [abrt] gnomad2-2.9.5-1.fc14: __libc_message: Process /usr/bin/gnomad2 was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=715453
--------------------------------------------------------------------------------
================================================================================
mediawiki-openid-0.9.0-2.fc14 (FEDORA-2011-8634)
The OpenID extension for MediaWiki
--------------------------------------------------------------------------------
Update Information:
Fixed dependency mediawiki116 -> mediawiki
Upgrade to mediawiki-openid 0.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 Kurt Seifried <kurt@xxxxxxxxxxxx> - 0.9.0-2
- Fixed requires dependancy, mediawiki116 -> mediawiki
* Sat Jun 11 2011 Kurt Seifried <kurt@xxxxxxxxxxxx> - 0.9.0-1
- Updated to 0.9.0 (OpenID-MW1.16-r66255.tar.gz)
--------------------------------------------------------------------------------
================================================================================
mock-1.1.11-1.fc14 (FEDORA-2011-8575)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
removed 'newinstance' option from devpts mount in chroot
added Fedora 16 configuration files
Fix inconsistent permissions fixing on /var/cache/mock in SPEC template
modify --chroot command to print command output
update the python requirement to >= 2.6 for 1.1.x mock branch
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 Clark Williams <williams@xxxxxxxxxx> - 1.1.11-1
- remove 'newinstance' mount parameter from devpts filesystem mount (BZ# 711175)
- modify --chroot command to print command output
- update the python requirement to >= 2.6 for 1.1.x mock branch
- updated build procedure using fedpkg
- added Fedora 16 configuration files
- from James Laska <jlaska@xxxxxxxxxx>
- fix log message typo in SELinux plugin
- from Yury V. Zaytsev <yury@xxxxxxxxxx>
- Fix inconsistent permissions fixing on /var/cache/mock in SPEC template (BZ 715286)
--------------------------------------------------------------------------------
================================================================================
mozvoikko-1.0-22.fc14.1 (FEDORA-2011-8647)
Finnish Voikko spell-checker extension for Mozilla programs
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:
* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11
This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Jan Horak <jhorak@xxxxxxxxxx> - 1.0-22.1
- Rebuild against newer gecko
--------------------------------------------------------------------------------
================================================================================
nco-4.0.8-2.fc14 (FEDORA-2011-8534)
Suite of programs for manipulating NetCDF/HDF4 files
--------------------------------------------------------------------------------
Update Information:
- Update to 4.0.8
- NetCDF4 support
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2011 - Orion Poplawski <orion@xxxxxxxxxxxxx> - 4.0.8-2
- Really enable netcdf4 support
* Tue May 17 2011 - Orion Poplawski <orion@xxxxxxxxxxxxx> - 4.0.8-1
- Update to 4.0.8
* Wed Apr 6 2011 - Orion Poplawski <orion@xxxxxxxxxxxxx> - 4.0.7-1
- Update to 4.0.7
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 4.0.6-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sun Feb 6 2011 - Orion Poplawski <orion@xxxxxxxxxxxxx> - 4.0.6-3
- Rebuild with fixed hdf5 for netcdf4 support
* Sat Feb 5 2011 - Orion Poplawski <orion@xxxxxxxxxxxxx> - 4.0.6-2
- Fixup more EL5 tests
* Sat Feb 5 2011 - Orion Poplawski <orion@xxxxxxxxxxxxx> - 4.0.6-1
- Update to 4.0.6
- Really only use libnc-dap for EL5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #712290 - Updated version of nco with netcdf4 support
https://bugzilla.redhat.com/show_bug.cgi?id=712290
--------------------------------------------------------------------------------
================================================================================
perl-5.12.4-145.fc14 (FEDORA-2011-8615)
Practical Extraction and Report Language
--------------------------------------------------------------------------------
Update Information:
Update to stable minor release 5.12.4:
* remove patch for lc tainting RT #87336,
* updated Module-CoreList v2.50 in tarball
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 Marcela Mašláňová <mmaslano@xxxxxxxxxx> - 4:5.12.4-145
- update to minor update release 5.12.4
- Upstream changes: remove patch for lc tainting RT #87336,
- updated Module-CoreList v2.50 in tarball
- add un-owned but existing perl_vendorarch
* Wed Jun 1 2011 Marcela Mašláňová <mmaslano@xxxxxxxxxx> - 4:5.12.3-144
- arm can't do parallel build
- add require EE::MM into IPC::Cmd 711486
--------------------------------------------------------------------------------
================================================================================
perl-Gtk2-MozEmbed-0.08-6.fc14.27 (FEDORA-2011-8647)
Interface to the Mozilla embedding widget
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:
* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11
This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Jan Horak <jhorak@xxxxxxxxxx> - 0.08-6.27
- Rebuild against newer gecko
--------------------------------------------------------------------------------
================================================================================
perl-Gtk2-Unique-0.05-2.fc14 (FEDORA-2011-8566)
Perl bindings for the C library "libunique"
--------------------------------------------------------------------------------
Update Information:
Initial Package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #710699 - Review Request: perl-Gtk2-Unique - Perl bindings for the C library "libunique"
https://bugzilla.redhat.com/show_bug.cgi?id=710699
--------------------------------------------------------------------------------
================================================================================
perl-Net-DNS-SEC-0.16-4.fc14 (FEDORA-2011-8568)
DNSSEC modules for Perl
--------------------------------------------------------------------------------
Update Information:
A patched version of Net::DNS::SEC that properly handles the new
private key format
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 6 2011 Wes Hardaker <wjhns174@xxxxxxxxxxxxx> - 0.16-4
- added support for the v1.3 private key format
* Thu Sep 23 2010 Wes Hardaker <wjhns174@xxxxxxxxxxxxx> - 0.16-3
- rebuild after prereq now properly in the system
* Tue Aug 24 2010 Wes Hardaker <wjhns174@xxxxxxxxxxxxx> - 0.16-2
- added MIME::Base32 as a build req
* Tue Aug 24 2010 Wes Hardaker <wjhns174@xxxxxxxxxxxxx> - 0.16-1
- Update to upstream 0.16
--------------------------------------------------------------------------------
================================================================================
poppler-0.14.5-3.fc14 (FEDORA-2011-8594)
PDF rendering library
--------------------------------------------------------------------------------
Update Information:
This update fixes bugs #625744 and #702126.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Marek Kasik <mkasik@xxxxxxxxxx> - 0.14.5-3
- Access correct variable
- Backport of fix of upstream bug #33063
- Resolves: #702126
* Thu Nov 25 2010 Marek Kasik <mkasik@xxxxxxxxxx> - 0.14.5-2
- Check the objects are numbers before using them
- Resolves: #625744
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #625744 - [abrt] evince-2.30.3-1.fc13: raise: Process /usr/bin/evince was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=625744
[ 2 ] Bug #702126 - Evince crashes opening PDF's containing fill-in form data
https://bugzilla.redhat.com/show_bug.cgi?id=702126
--------------------------------------------------------------------------------
================================================================================
publican-jboss-2.8-1.fc14 (FEDORA-2011-8637)
Common documentation files for JBoss
--------------------------------------------------------------------------------
Update Information:
More translations
Update to upstream 2.6
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 Rüdiger Landmann <r.landmann@xxxxxxxxxx> 2.8-1
- Updated translations
* Wed Jun 15 2011 Rüdiger Landmann <r.landmann@xxxxxxxxxx> 2.7-1
- format simplelist for extra trademarks -- BZ#708259
--------------------------------------------------------------------------------
================================================================================
python-cvxopt-1.1.3-2.fc14 (FEDORA-2011-8617)
A Python Package for Convex Optimization
--------------------------------------------------------------------------------
Update Information:
This build enables the DSDP module.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2011 Jerry James <loganjerry@xxxxxxxxx> - 1.1.3-2
- Rebuild due to bz 712251
- Enable the DSDP extension
--------------------------------------------------------------------------------
================================================================================
python-xgoogle-1.4-3.fc14 (FEDORA-2011-8625)
Python library to search Google without using their API
--------------------------------------------------------------------------------
Update Information:
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #710775 - Review Request: python-xgoogle - Python library to search Google without using their API
https://bugzilla.redhat.com/show_bug.cgi?id=710775
--------------------------------------------------------------------------------
================================================================================
qterm-0.5.12-1.fc14 (FEDORA-2011-8621)
BBS client for X Window System written in Qt
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 24 2011 Robin Lee <cheeselee@xxxxxxxxxxxxxxxxx> - 0.5.12-1
- Update to 0.5.12 (#715246)
- Conflicts torque-client (#587554)
- URL updated
- Description revised
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.5.11-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #715246 - qterm-0.5.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=715246
[ 2 ] Bug #587554 - file conflicts with torque-client
https://bugzilla.redhat.com/show_bug.cgi?id=587554
--------------------------------------------------------------------------------
================================================================================
quagga-0.99.18-2.fc14 (FEDORA-2011-8579)
Routing daemon
--------------------------------------------------------------------------------
Update Information:
little corrections in watchquagga init script
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2011 Jiri Skala <jskala@xxxxxxxxxx> - 0.99.18-2
- fixes #712467 - type in init.d script causes strange message on boot
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #712467 - type in init.d script causes strange message on boot
https://bugzilla.redhat.com/show_bug.cgi?id=712467
--------------------------------------------------------------------------------
================================================================================
sonic-visualiser-1.8-1.fc14 (FEDORA-2011-8554)
A program for viewing and exploring audio data
--------------------------------------------------------------------------------
Update Information:
Latest sonic-visualiser release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Michel Salim <salimma@xxxxxxxxxxxxxxxxx> - 1.8-1
- Update to 1.8
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.7.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #695303 - sonic-visualiser-1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=695303
--------------------------------------------------------------------------------
================================================================================
thunderbird-3.1.11-1.fc14 (FEDORA-2011-8647)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:
* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11
This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Jan Horak <jhorak@xxxxxxxxxx> - 3.1.11-1
- Update to 3.1.11
--------------------------------------------------------------------------------
================================================================================
xulrunner-1.9.2.18-1.fc14 (FEDORA-2011-8647)
XUL Runtime for Gecko Applications
--------------------------------------------------------------------------------
Update Information:
Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:
* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11
This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2011 Jan Horak <jhorak@xxxxxxxxxx> - 1.9.2.18-1
- Update to 1.9.2.18
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
