The following Fedora 14 Security updates need testing:
https://admin.fedoraproject.org/updates/libsoup-2.32.2-2.fc14
https://admin.fedoraproject.org/updates/foomatic-4.0.8-3.fc14
https://admin.fedoraproject.org/updates/nss-3.12.10-4.fc14
https://admin.fedoraproject.org/updates/tomcat6-6.0.26-21.fc14
https://admin.fedoraproject.org/updates/Django-1.3.1-2.fc14
https://admin.fedoraproject.org/updates/cherokee-1.2.99-1.fc14
https://admin.fedoraproject.org/updates/quassel-0.7.3-1.fc14
https://admin.fedoraproject.org/updates/qt-4.7.4-2.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
https://admin.fedoraproject.org/updates/kernel-2.6.35.14-97.fc14
https://admin.fedoraproject.org/updates/phpMyAdmin-3.4.5-1.fc14
The following Fedora 14 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/kernel-2.6.35.14-97.fc14
https://admin.fedoraproject.org/updates/lldpad-0.9.41-4.fc14
https://admin.fedoraproject.org/updates/nss-3.12.10-4.fc14
https://admin.fedoraproject.org/updates/livecd-tools-14.3-1.fc14
https://admin.fedoraproject.org/updates/curl-7.21.0-10.fc14
https://admin.fedoraproject.org/updates/system-config-users-1.2.110-1.fc14
https://admin.fedoraproject.org/updates/ModemManager-0.4.998-1.git20110706.fc14
https://admin.fedoraproject.org/updates/mash-0.5.22-1.fc14
https://admin.fedoraproject.org/updates/policycoreutils-2.0.85-30.3.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-8.fc14.2
https://admin.fedoraproject.org/updates/xorg-x11-drv-qxl-0.0.21-3.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-nouveau-0.0.16-14.20101010git8c8f15c.fc14
https://admin.fedoraproject.org/updates/libconcord-0.23-5.fc14,udev-161-9.fc14,concordance-0.23-2.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
The following builds have been pushed to Fedora 14 updates-testing
automaton-1.11r8-1.fc14
curl-7.21.0-10.fc14
dovecot-2.0.15-1.fc14
nut-2.6.2-1.fc14
perl-CGI-Emulate-PSGI-0.13-1.fc14
perl-DBIx-SearchBuilder-1.61-1.fc14
perl-Devel-CallChecker-0.003-1.fc14
perl-DynaLoader-Functions-0.000-1.fc14
perl-HTML-Selector-XPath-0.08-1.fc14
perl-HTTP-Server-Simple-Authen-0.04-1.fc14
perl-IO-Stty-0.03-2.fc14
perl-Number-Compare-0.02-1.fc14
rubygem-test-unit-2.4.0-1.fc14
Details about builds:
================================================================================
automaton-1.11r8-1.fc14 (FEDORA-2011-12977)
A Java finite state automata/regular expression library
--------------------------------------------------------------------------------
Update Information:
This updated introduces caching of isDebug, to avoid a synchronized call to System.getProperty().
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 19 2011 Jerry James <loganjerry@xxxxxxxxx> - 1.11r8-1
- Upgrade to 1.11-8
- Drop clean at start of %install and %defattr
- Update BuildRequires and Requires
--------------------------------------------------------------------------------
================================================================================
curl-7.21.0-10.fc14 (FEDORA-2011-10995)
A utility for getting files from remote servers (FTP, HTTP, and others)
--------------------------------------------------------------------------------
Update Information:
- add a new option CURLOPT_GSSAPI_DELEGATION (#719939)
- fix SIGSEGV of curl -O -J given more than one URL (#723075)
- introduce the --delegation option of curl (#730444)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 21 2011 Paul Howarth <paul@xxxxxxxxxxxx> 7.21.0-10
- actually fix SIGSEGV of curl -O -J given more than one URL (#723075)
* Tue Aug 16 2011 Kamil Dudka <kdudka@xxxxxxxxxx> 7.21.0-9
- add a new option CURLOPT_GSSAPI_DELEGATION (#719939)
- fix SIGSEGV of curl -O -J given more than one URL (#723075)
- introduce the --delegation option of curl (#730444)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #719939 - Add support for Kerberos ticket delegation
https://bugzilla.redhat.com/show_bug.cgi?id=719939
[ 2 ] Bug #723075 - Segfault when downloading two RPMs from a scratch build
https://bugzilla.redhat.com/show_bug.cgi?id=723075
[ 3 ] Bug #730444 - Curl command line No longer supports GSSAPI Delegation
https://bugzilla.redhat.com/show_bug.cgi?id=730444
--------------------------------------------------------------------------------
================================================================================
dovecot-2.0.15-1.fc14 (FEDORA-2011-12990)
Secure imap and pop3 server
--------------------------------------------------------------------------------
Update Information:
- dovecot updated to 2.0.15
- v2.0.14: Index reading could have eaten a lot of memory in some
situations
- mbox: Fixed crash during mail delivery when mailbox didn't yet have
GUID assigned to it.
- zlib+mbox: Fetching last message from compressed mailboxes crashed.
- do not enable insecure connections by default
- userdb extra fields can now return name+=value to append to an existing name - script-login attempted an unnecessary config lookup, which usually failed with "Permission denied".
- lmtp: Fixed parsing quoted strings with spaces as local-part for MAIL FROM and RCPT TO.
- imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not returned all data sometimes.
- ldap: Fixed random assert-crashing with with sasl_bind=yes.
- Fixes to handling mail chroots
- Fixed renaming mailboxes under different parent with FS layout when using separate ALT, INDEX or CONTROL paths.
- zlib: Fixed reading concatenated .gz files.
- userdb extra fields can now return name+=value to append to an existing name - script-login attempted an unnecessary config lookup, which usually failed with "Permission denied".
- lmtp: Fixed parsing quoted strings with spaces as local-part for MAIL FROM and RCPT TO.
- imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not returned all data sometimes.
- ldap: Fixed random assert-crashing with with sasl_bind=yes.
- Fixes to handling mail chroots
- Fixed renaming mailboxes under different parent with FS layout when using separate ALT, INDEX or CONTROL paths.
- zlib: Fixed reading concatenated .gz files.
- userdb extra fields can now return name+=value to append to an existing name - script-login attempted an unnecessary config lookup, which usually failed with "Permission denied".
- lmtp: Fixed parsing quoted strings with spaces as local-part for MAIL FROM and RCPT TO.
- imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not returned all data sometimes.
- ldap: Fixed random assert-crashing with with sasl_bind=yes.
- Fixes to handling mail chroots
- Fixed renaming mailboxes under different parent with FS layout when using separate ALT, INDEX or CONTROL paths.
- zlib: Fixed reading concatenated .gz files.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 19 2011 Michal Hlavinka <mhlavink@xxxxxxxxxx> - 1:2.0.15-1
- dovecot updated to 2.0.15
- v2.0.14: Index reading could have eaten a lot of memory in some
situations
- mbox: Fixed crash during mail delivery when mailbox didn't yet have
GUID assigned to it.
- zlib+mbox: Fetching last message from compressed mailboxes crashed.
* Mon Aug 29 2011 Michal Hlavinka <mhlavink@xxxxxxxxxx> - 1:2.0.14-1
- dovecot updated to 2.0.14
- userdb extra fields can now return name+=value to append to an
existing name
- script-login attempted an unnecessary config lookup, which usually
failed with "Permission denied".
- lmtp: Fixed parsing quoted strings with spaces as local-part for
MAIL FROM and RCPT TO.
- imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not
returned all data sometimes.
- ldap: Fixed random assert-crashing with with sasl_bind=yes.
- Fixes to handling mail chroots
- Fixed renaming mailboxes under different parent with FS layout when
using separate ALT, INDEX or CONTROL paths.
- zlib: Fixed reading concatenated .gz files.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #737416 - Upgrade to Fedora 15 enabled insecure login
https://bugzilla.redhat.com/show_bug.cgi?id=737416
--------------------------------------------------------------------------------
================================================================================
nut-2.6.2-1.fc14 (FEDORA-2011-12969)
Network UPS Tools
--------------------------------------------------------------------------------
Update Information:
- NUT can now monitor power supply units (PSU) in servers, through IPMI, using the new experimental 'nut-ipmipsu' driver. Users are encouraged to test it (only on Fedora 15 and newer).
- NUT now provides a tool, called 'nut-scanner', to discover supported devices, both local and remote. nut-scanner will help to ease the configuration step, and power infrastructure discovery. A separate library, called 'libnutscan', is also available to provide these features.
- support for new devices: Eaton 3S ; Cyber Power Systems CP1000AVRLCD ; various APC models equiped with APC AP9618 management card, including APC Smart-UPS RT XL ; Orvaldi 750 / 900SP ; POWEREX VI 1000 LED ; PowerWalker VI 850 LCD ; SVEN Power Pro+ series (USB ID ffff:0000).
- A regression has been fixed in udev rules file. This previously caused permission issues to owners of some USB devices.
- usbhid-ups has had Eaton completion: some features have been improved, such as 'output.voltage.nominal' ; 3S Eco control support has been added, along with battery.runtime.low and end of battery life (life cycle monitoring) support ; new measurements for 5 PX are also supported now (outlet power factor, power, real power and current).
- apcsmart has been updated to support more variables and features ; the previous driver is however still available as 'apcsmart-old', in case of issues.
- bcmxcp now supports per outlet startup and shutdown delays setting ; shutdown delay is also used, when available, for outlet.n.shutdown.return instead of the default 3 seconds.
- snmp-ups.c has a new initialization method, that uses sysObjectID, which is a pointer to the prefered MIB of the device, to detect supported devices. This speeds up even more init stage and should render void the use of 'mib' option. SNMP v3 session initialisation has also been fixed, and Eaton PDU support has been completed.
- Initial support has been added for systemd, the System and Service Manager
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 16 2011 Michal Hlavinka <mhlavink@xxxxxxxxxx> - 2.6.2-1
- nut updated to 2.6.2
--------------------------------------------------------------------------------
================================================================================
perl-CGI-Emulate-PSGI-0.13-1.fc14 (FEDORA-2011-12984)
PSGI adapter for CGI applications
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 19 2011 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> 0.13-1
- Upstream update.
--------------------------------------------------------------------------------
================================================================================
perl-DBIx-SearchBuilder-1.61-1.fc14 (FEDORA-2011-12993)
Encapsulate SQL queries and rows in simple perl objects
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 19 2011 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 1.61-1
- Upstream update.
- Add explicit Requires for Requirements rpm-4.8 misses.
--------------------------------------------------------------------------------
================================================================================
perl-Devel-CallChecker-0.003-1.fc14 (FEDORA-2011-12966)
Custom op checking attached to subroutines
--------------------------------------------------------------------------------
Update Information:
Function-oriented interface for dynamic loading. Needed for perl-smartmatch.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #720327 - Review Request: perl-DynaLoader-Functions - Deconstructed dynamic C library loading
https://bugzilla.redhat.com/show_bug.cgi?id=720327
[ 2 ] Bug #720333 - Review Request: perl-Devel-CallChecker - Custom op checking attached to subroutines
https://bugzilla.redhat.com/show_bug.cgi?id=720333
--------------------------------------------------------------------------------
================================================================================
perl-DynaLoader-Functions-0.000-1.fc14 (FEDORA-2011-12966)
Deconstructed dynamic C library loading
--------------------------------------------------------------------------------
Update Information:
Function-oriented interface for dynamic loading. Needed for perl-smartmatch.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #720327 - Review Request: perl-DynaLoader-Functions - Deconstructed dynamic C library loading
https://bugzilla.redhat.com/show_bug.cgi?id=720327
[ 2 ] Bug #720333 - Review Request: perl-Devel-CallChecker - Custom op checking attached to subroutines
https://bugzilla.redhat.com/show_bug.cgi?id=720333
--------------------------------------------------------------------------------
================================================================================
perl-HTML-Selector-XPath-0.08-1.fc14 (FEDORA-2011-12965)
CSS Selector to XPath compiler
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 19 2011 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> 0.08-1
- Upstream update.
--------------------------------------------------------------------------------
================================================================================
perl-HTTP-Server-Simple-Authen-0.04-1.fc14 (FEDORA-2011-12970)
Authentication plugin for HTTP::Server::Simple
--------------------------------------------------------------------------------
Update Information:
HTTP::Server::Simple::Authen is an HTTP::Server::Simple plugin to allow HTTP authentication. Authentication scheme is pluggable and you can use whatever Authentication protocol that Authen::Simple supports.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #739278 - Review Request: perl-HTTP-Server-Simple-Authen - Authentication plugin for HTTP::Server::Simple
https://bugzilla.redhat.com/show_bug.cgi?id=739278
--------------------------------------------------------------------------------
================================================================================
perl-IO-Stty-0.03-2.fc14 (FEDORA-2011-12986)
Change and print terminal line settings
--------------------------------------------------------------------------------
Update Information:
Requested for some tools in F-14.
--------------------------------------------------------------------------------
================================================================================
perl-Number-Compare-0.02-1.fc14 (FEDORA-2011-12968)
Perl module for numeric comparisons
--------------------------------------------------------------------------------
Update Information:
c
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 19 2011 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 0.02-1
- Upstream update.
- Spec file cleanup.
* Tue Dec 21 2010 Marcela Maslanova <mmaslano@xxxxxxxxxx> - 0.01-16
- 661697 rebuild for fixing problems with vendorach/lib
--------------------------------------------------------------------------------
================================================================================
rubygem-test-unit-2.4.0-1.fc14 (FEDORA-2011-12988)
Improved version of Test::Unit bundled in Ruby 1.8.x
--------------------------------------------------------------------------------
Update Information:
New version 2.4.0 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 19 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 2.4.0-1
- 2.4.0
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
