The following Fedora 14 Security updates need testing:
https://admin.fedoraproject.org/updates/perl-FCGI-0.74-1.fc14
https://admin.fedoraproject.org/updates/quagga-0.99.20-1.fc14
https://admin.fedoraproject.org/updates/drupal6-views_bulk_operations-1.11-1.fc14
https://admin.fedoraproject.org/updates/NetworkManager-0.8.5.92-1.git20110927.fc14
https://admin.fedoraproject.org/updates/bcfg2-1.1.3-1.fc14
https://admin.fedoraproject.org/updates/tomcat6-6.0.26-27.fc14
https://admin.fedoraproject.org/updates/kernel-2.6.35.14-97.fc14
https://admin.fedoraproject.org/updates/cyrus-imapd-2.3.17-1.fc14
https://admin.fedoraproject.org/updates/php-5.3.8-3.fc14
https://admin.fedoraproject.org/updates/thunderbird-3.1.15-1.fc14
https://admin.fedoraproject.org/updates/firefox-3.6.23-1.fc14,xulrunner-1.9.2.23-1.fc14,gnome-web-photo-0.9-24.fc14.1,perl-Gtk2-MozEmbed-0.08-6.fc14.30,gnome-python2-extras-2.25.3-34.fc14.1,galeon-2.0.7-44.fc14.1,mozvoikko-1.0-25.fc14.1
The following Fedora 14 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/livecd-tools-14.5-1.fc14
https://admin.fedoraproject.org/updates/NetworkManager-0.8.5.92-1.git20110927.fc14
https://admin.fedoraproject.org/updates/lldpad-0.9.41-4.fc14
https://admin.fedoraproject.org/updates/ModemManager-0.4.998-1.git20110706.fc14
https://admin.fedoraproject.org/updates/mash-0.5.22-1.fc14
https://admin.fedoraproject.org/updates/policycoreutils-2.0.85-30.3.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-8.fc14.2
https://admin.fedoraproject.org/updates/xorg-x11-drv-qxl-0.0.21-3.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-nouveau-0.0.16-14.20101010git8c8f15c.fc14
https://admin.fedoraproject.org/updates/libconcord-0.23-5.fc14,udev-161-9.fc14,concordance-0.23-2.fc14
The following builds have been pushed to Fedora 14 updates-testing
cab-0.1.6-1.fc14
facter-1.6.1-1.fc14
ghc-data-default-0.3.0-1.fc14
ghc-rpm-macros-0.10.60-1.fc14
groonga-1.2.6-1.fc14
libjingle-0.6.0-2.fc14
mfiler3-4.4.3-2.fc14
mozc-1.2.831.102-1.fc14
ncl-6.0.0-2.fc14
olpc-utils-1.3.5-1.fc14
python-asciitable-0.7.1-1.fc14
quagga-0.99.20-1.fc14
saphire-3.5.3-1.fc14
scsi-target-utils-1.0.18-2.fc14
Details about builds:
================================================================================
cab-0.1.6-1.fc14 (FEDORA-2011-13594)
Maintenance command for Haskell cabal packages
--------------------------------------------------------------------------------
Update Information:
cab is a wrapper over Haskell cabal-install and cabal-dev.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #731972 - Review Request: cab - Haskell Cabal package maintenance program
https://bugzilla.redhat.com/show_bug.cgi?id=731972
--------------------------------------------------------------------------------
================================================================================
facter-1.6.1-1.fc14 (FEDORA-2011-13580)
Ruby module for collecting simple facts about a host operating system
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix release. Refer to the release announcement for full details:
http://groups.google.com/group/puppet-users/browse_thread/thread/d2061ec6263c5d88
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 29 2011 Todd Zullinger <tmz@xxxxxxxxx> - 1.6.1-1
- Update to 1.6.1
- Minor spec file reformatting
--------------------------------------------------------------------------------
================================================================================
ghc-data-default-0.3.0-1.fc14 (FEDORA-2011-13578)
Provides a class for types with a default value
--------------------------------------------------------------------------------
Update Information:
This package provides a class for types with a default value.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #737228 - Review Request: ghc-data-default - A class for types with a default value
https://bugzilla.redhat.com/show_bug.cgi?id=737228
--------------------------------------------------------------------------------
================================================================================
ghc-rpm-macros-0.10.60-1.fc14 (FEDORA-2011-13583)
Macros for building packages for GHC
--------------------------------------------------------------------------------
Update Information:
Fix versions in obsoletes/provides generated for ghc's devel subpackages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 30 2011 Jens Petersen <petersen@xxxxxxxxxx> - 0.10.60-1
- fix devel subpackage's prof and doc obsoletes and provides versions
for multiple lib packages like ghc (reported by Henrik Nordström)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #742407 - broken obsoletes/provides in ghc-7.0.2-16.4.fc15
https://bugzilla.redhat.com/show_bug.cgi?id=742407
--------------------------------------------------------------------------------
================================================================================
groonga-1.2.6-1.fc14 (FEDORA-2011-13570)
An Embeddable Fulltext Search Engine
--------------------------------------------------------------------------------
Update Information:
new upstream release
new upstream release
new upstream release
new upstream release
new upstream release
new upstream release
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 30 2011 Daiki Ueno <dueno@xxxxxxxxxx> - 1.2.6-1
- build in fedora
* Thu Sep 29 2011 Kouhei Sutou <kou@xxxxxxxxxxxxxx> - 1.2.6-0
- new upstream release.
* Mon Sep 5 2011 Daiki Ueno <dueno@xxxxxxxxxx> - 1.2.5-1
- build in fedora
* Mon Aug 29 2011 Kouhei Sutou <kou@xxxxxxxxxxxxxx> - 1.2.5-0
- new upstream release.
* Fri Jul 29 2011 Daiki Ueno <dueno@xxxxxxxxxx> - 1.2.4-1
- build in fedora
* Fri Jul 29 2011 Kouhei Sutou <kou@xxxxxxxxxxxxxx> - 1.2.4-0
- new upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #742181 - groonga-1.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=742181
[ 2 ] Bug #734043 - groonga-1.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=734043
--------------------------------------------------------------------------------
================================================================================
libjingle-0.6.0-2.fc14 (FEDORA-2011-13592)
GoogleTalk implementation of Jingle
--------------------------------------------------------------------------------
Update Information:
Update libjingle to 0.6.0, needed for chromium 14+.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 27 2011 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 0.6.0-2
- fix phone bits up
- properly bump to 0.6
* Tue Sep 27 2011 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 0.6.0-1
- update to 0.6.0
--------------------------------------------------------------------------------
================================================================================
mfiler3-4.4.3-2.fc14 (FEDORA-2011-13575)
Two pane file manager under UNIX console
--------------------------------------------------------------------------------
Update Information:
saphire 3.5.3 is released. mfiler3 is rebuilt against this new saphire.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 30 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 4.4.3-2
- Rebuild against new saphire
--------------------------------------------------------------------------------
================================================================================
mozc-1.2.831.102-1.fc14 (FEDORA-2011-13573)
Open-sourced Google Japanese Input
--------------------------------------------------------------------------------
Update Information:
various bug fixes and enhancements included
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 30 2011 Akira TAGOH <tagoh@xxxxxxxxxx> - 1.2.831.102-1
- New upstream release.
--------------------------------------------------------------------------------
================================================================================
ncl-6.0.0-2.fc14 (FEDORA-2011-13561)
NCAR Command Language and NCAR Graphics
--------------------------------------------------------------------------------
Update Information:
- Update to 6.0.0, enable cairo and gdal support.
- Use system udunits by linking it into where ncl expects it, drop udunits patch. Fixes bug 742307.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 29 2011 - Orion Poplawski <orion@xxxxxxxxxxxxx> - 6.0.0-2
- Use system udunits by linking it into where ncl expects it, drop
udunits patch. Fixes bug 742307.
* Thu Sep 1 2011 - Orion Poplawski <orion@xxxxxxxxxxxxx> - 6.0.0-1
- Update to 6.0.0 final
* Wed May 18 2011 - Orion Poplawski <orion@xxxxxxxxxxxxx> - 6.0.0-0.2.beta
- Rebuild for hdf5 1.8.7
* Thu Mar 31 2011 - Orion Poplawski <orion@xxxxxxxxxxxxx> - 6.0.0-0.1.beta
- Update to 6.0.0-beta
- Enable cairo and gdal support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #742307 - Segmentation fault
https://bugzilla.redhat.com/show_bug.cgi?id=742307
--------------------------------------------------------------------------------
================================================================================
olpc-utils-1.3.5-1.fc14 (FEDORA-2011-13568)
OLPC utilities
--------------------------------------------------------------------------------
Update Information:
Enable hwcursor and rotation on XO-1.75. Fix creation of lockdev/screen directories.
Disable XO-1.75 renderaccel to avoid hangs. Disable tap-to-click and pad scrolling on sentelic driver. Create runtime directories for screen and lockdev.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 30 2011 Daniel Drake <dsd@xxxxxxxxxx> - 1.3.5-1
- Enable XO-1.75 hardware cursor and screen rotation
- Fix permissions on screen/lockdev runtime directories
* Sun Sep 25 2011 Daniel Drake <dsd@xxxxxxxxxx> - 1.3.4-1
- Disable XO-1.75 renderaccel to avoid hangs
- Disable tap-to-click and pad scrolling on sentelic driver
- Create runtime directories for screen and lockdev
--------------------------------------------------------------------------------
================================================================================
python-asciitable-0.7.1-1.fc14 (FEDORA-2011-13595)
Extensible ASCII table reader and writer
--------------------------------------------------------------------------------
Update Information:
This is a minor feature and bug-fix release
- Add a method inconsistent_handler() to the BaseReader
class as a hook to handle rows with an inconsistent number
of data columns (contributed by Erik Tollerud).
- Output a more informative error message when guessing fails.
- Fix issues in column type handling, mostly related to the
MemoryReader class which is used for writing tables.
- Fix a problem in guessing where user-supplied args were
not filtering the guess possibilities correctly.
- Fix problem reading a single column, string-only table with
MemoryReader on MacOS.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 30 2011 Sergio Pascual <sergiopr@xxxxxxxxxxxxxxxxx> - 0.7.1-1
- New upstream version, with bugfixes
--------------------------------------------------------------------------------
================================================================================
quagga-0.99.20-1.fc14 (FEDORA-2011-13499)
Routing daemon
--------------------------------------------------------------------------------
Update Information:
fixes CVE-2011-332{3..7}
update to latest upstream 0.99.20
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 30 2011 Jiri Skala <jskala@xxxxxxxxxx> - 0.99.20-1
- updated to latest upstream version 0.99.20
- fixes #741343 - CVE-2011-3325 corrected fix
* Thu Sep 29 2011 Jiri Skala <jskala@xxxxxxxxxx> - 0.99.19-1
- fixes #741343 - CVE-2011-3323 CVE-2011-3324 CVE-2011-3325 CVE-2011-3326 CVE-2011-3327
- fixes #741580 - updated to latest upstream version 0.99.19
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #738393 - CVE-2011-3323 Quagga (ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA
https://bugzilla.redhat.com/show_bug.cgi?id=738393
[ 2 ] Bug #738394 - CVE-2011-3324 Quagga (ospf6d): Denial of service by decoding malformed Database Description packet headers
https://bugzilla.redhat.com/show_bug.cgi?id=738394
[ 3 ] Bug #738396 - CVE-2011-3325 Quagga (ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type
https://bugzilla.redhat.com/show_bug.cgi?id=738396
[ 4 ] Bug #738398 - CVE-2011-3326 Quagga (ospfd): Denial of service by decoding Link State Update LSAs of unknown type
https://bugzilla.redhat.com/show_bug.cgi?id=738398
[ 5 ] Bug #738400 - CVE-2011-3327 Quagga (bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes
https://bugzilla.redhat.com/show_bug.cgi?id=738400
--------------------------------------------------------------------------------
================================================================================
saphire-3.5.3-1.fc14 (FEDORA-2011-13575)
Yet another shell
--------------------------------------------------------------------------------
Update Information:
saphire 3.5.3 is released. mfiler3 is rebuilt against this new saphire.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 30 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 3.5.3-1
- 3.5.3
* Fri Sep 9 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 3.5.1-1
- 3.5.1
--------------------------------------------------------------------------------
================================================================================
scsi-target-utils-1.0.18-2.fc14 (FEDORA-2011-13566)
The SCSI target daemon and utility programs
--------------------------------------------------------------------------------
Update Information:
Fixes crash on stop.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 29 2011 Andy Grover <agrover@xxxxxxxxxx> - 1.0.18-2
- Add patch
* scsi-target-utils-fix-segfault-on-exit.patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #712807 - [abrt] scsi-target-utils-1.0.14-2.el6: __list_del: Process /usr/sbin/tgtd was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=712807
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
