The following Fedora 15 Security updates need testing: https://admin.fedoraproject.org/updates/FEDORA-2011-13456 https://admin.fedoraproject.org/updates/FEDORA-2011-13504 https://admin.fedoraproject.org/updates/FEDORA-2011-13999 https://admin.fedoraproject.org/updates/FEDORA-2011-12981 https://admin.fedoraproject.org/updates/FEDORA-2011-13801 https://admin.fedoraproject.org/updates/FEDORA-2011-13636 https://admin.fedoraproject.org/updates/FEDORA-2011-13862 https://admin.fedoraproject.org/updates/FEDORA-2011-13861 https://admin.fedoraproject.org/updates/FEDORA-2011-13929 https://admin.fedoraproject.org/updates/FEDORA-2011-13860 https://admin.fedoraproject.org/updates/FEDORA-2011-14036 https://admin.fedoraproject.org/updates/FEDORA-2011-14022 The following Fedora 15 Critical Path updates have yet to be approved: https://admin.fedoraproject.org/updates/FEDORA-2011-14143 https://admin.fedoraproject.org/updates/FEDORA-2011-14140 https://admin.fedoraproject.org/updates/FEDORA-2011-13937 https://admin.fedoraproject.org/updates/FEDORA-2011-13859 https://admin.fedoraproject.org/updates/FEDORA-2011-13512 https://admin.fedoraproject.org/updates/FEDORA-2011-13399 https://admin.fedoraproject.org/updates/FEDORA-2011-13246 https://admin.fedoraproject.org/updates/FEDORA-2011-13073 https://admin.fedoraproject.org/updates/FEDORA-2011-12797 https://admin.fedoraproject.org/updates/FEDORA-2011-12720 https://admin.fedoraproject.org/updates/FEDORA-2011-12576 https://admin.fedoraproject.org/updates/FEDORA-2011-12372 https://admin.fedoraproject.org/updates/FEDORA-2011-11955 https://admin.fedoraproject.org/updates/FEDORA-2011-9651 https://admin.fedoraproject.org/updates/FEDORA-2011-9592 https://admin.fedoraproject.org/updates/FEDORA-2011-8822 https://admin.fedoraproject.org/updates/FEDORA-2011-6791 https://admin.fedoraproject.org/updates/FEDORA-2011-5583 The following builds have been pushed to Fedora 15 updates-testing amide-1.0.0-1.fc15 cln-1.3.2-1.fc15 dracut-modules-olpc-0.6.0-1.fc15 fftw-3.3-3.fc15 g2clib-1.2.2-2.fc15 glibc-2.14.1-1 ibus-indic-table-1.3.1-8.fc15 imsettings-1.2.5-3.fc15 kobo-0.3.5-1.fc15 leksah-0.10.0.4-4.fc15 libXi-1.4.3-3.fc15 midori-0.4.1-1.fc15 ompl-0.9.5-1.fc15 pokerth-0.8.3-9.fc15 radvd-1.8.2-2.fc15 sugar-abacus-24-1.fc15 sugar-measure-34-1.fc15 system-setup-keyboard-0.8.8-1.fc15 vtk-5.6.1-10.fc15 Details about builds: ================================================================================ amide-1.0.0-1.fc15 (FEDORA-2011-13922) Program for viewing and analyzing medical image data sets -------------------------------------------------------------------------------- Update Information: This update adds dcmtk and xmedcom support to amide. -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 8 2011 Christoph Wickert <cwickert@xxxxxxxxxxxxxxxxx> - 1.0.0-1 - Update to 1.0.0 * Fri Oct 7 2011 Christoph Wickert <cwickert@xxxxxxxxxxxxxxxxx> - 0.9.3-1 - Update to 0.9.3 * Fri Aug 26 2011 Christoph Wickert <cwickert@xxxxxxxxxxxxxxxxx> - 0.9.2-4 - Build with dcmtk and xmedcom support -------------------------------------------------------------------------------- References: [ 1 ] Bug #666726 - Review Request: amide - A Medical Image Data Examiner: https://bugzilla.redhat.com/show_bug.cgi?id=666726 -------------------------------------------------------------------------------- ================================================================================ cln-1.3.2-1.fc15 (FEDORA-2011-14153) Class Library for Numbers -------------------------------------------------------------------------------- Update Information: Update to latest upstream release -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 9 2011 Deji Akingunola <dakingun@xxxxxxxxx> - 1.3.2-1 - New upstream version - Add -DNO_ASM flag for arm archs. -------------------------------------------------------------------------------- ================================================================================ dracut-modules-olpc-0.6.0-1.fc15 (FEDORA-2011-14136) OLPC modules for dracut initramfs -------------------------------------------------------------------------------- Update Information: New version which avoids activating the modules unless they were explicitly requested. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.6.0 - New F15+ compatible version - Don't activate modules unless requested in configuration (#707423) * Thu Oct 6 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.18-1 - XO-1.75 activation GUI fix * Thu Sep 15 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.17-1 - UBIFS and JFFS2 fixes for XO-1 * Sun Aug 28 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.16-1 - XO-1.75 support * Wed Jul 6 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.15-1 - Fix connecting to some APs for activation, thanks to Aleksey Lim * Sat Jun 25 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.14-1 - Fix mounting root filesystems after activation * Sun Jun 19 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.13-1 - Activation fixes * Fri Jun 17 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.12-1 - Include kernel modules in activation initramfs * Wed Jun 1 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.11-1 - Fix creation of /versions/running link * Mon May 30 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.10-1 - Fix purging of unpartitioned boot configs * Tue May 17 2011 Daniel Drake <dsd@xxxxxxxxxx> - 0.5.9-1 - Start boot animation while purging old versions -------------------------------------------------------------------------------- References: [ 1 ] Bug #707423 - (x86_64) newest fc15 kernels fail to boot due to Python issues https://bugzilla.redhat.com/show_bug.cgi?id=707423 -------------------------------------------------------------------------------- ================================================================================ fftw-3.3-3.fc15 (FEDORA-2011-14139) A Fast Fourier Transform library -------------------------------------------------------------------------------- Update Information: Reinstate Provides: fftw3-devel -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 3.3-3 - -devel: Provides: fftw3-devel (#744758) - -static: Provides: fftw3-static - drop %_isa from Obsoletes -------------------------------------------------------------------------------- References: [ 1 ] Bug #744758 - fftw-devel no longer Provides: fftw3-devel https://bugzilla.redhat.com/show_bug.cgi?id=744758 -------------------------------------------------------------------------------- ================================================================================ g2clib-1.2.2-2.fc15 (FEDORA-2011-14137) GRIB2 encoder/decoder and search/indexing routines in C -------------------------------------------------------------------------------- Update Information: Add -fPIC to 64-bit builds. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Orion Poplawski <orion@xxxxxxxxxxxxx> - 1.2.2-2 - Add -fPIC to 64-bit builds * Wed Mar 16 2011 Orion Poplawski <orion@xxxxxxxxxxxxx> - 1.2.2-1 - Update to 1.2.2 -------------------------------------------------------------------------------- ================================================================================ glibc-2.14.1-1 (FEDORA-2011-14053) The GNU libc libraries -------------------------------------------------------------------------------- Update Information: Update to 2.14.1 release -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 7 2011 Andreas Schwab <schwab@xxxxxxxxxx> - 2.14.1-1 - Update to 2.14.1 release - Correctly reparse group line after enlarging the buffer (#739360) - Avoid race between {,__de}allocate_stack and __reclaim_stacks during fork * Thu Sep 8 2011 Andreas Schwab <schwab@xxxxxxxxxx> - 2.14-7 - Update from 2.14 branch - Fix cfi directive in audit trampoline code - Correct cycle detection during dependency sorting (BZ#11724) - Fix fopen (non-existing-file, "re") errno (BZ#13114) - Fix CFI info in x86-64 trampolines * Mon Aug 15 2011 Andreas Schwab <schwab@xxxxxxxxxx> - 2.14-6 - Update from 2.14 branch - Locale-independent parsing in libintl (#726536) - Fix stack alignment on x86_64 (#728762) - Filter out GLIBC_PRIVATE symbols again -------------------------------------------------------------------------------- References: [ 1 ] Bug #739360 - getgrouplist does not return groups with lines longer than 1024 characters. https://bugzilla.redhat.com/show_bug.cgi?id=739360 -------------------------------------------------------------------------------- ================================================================================ ibus-indic-table-1.3.1-8.fc15 (FEDORA-2011-14145) The Table engine for IBus platform -------------------------------------------------------------------------------- Update Information: Removed unknown/unnecessary icons in ime bar for ibus-indic-table * Aux string is correctly displayed * Icon symbol is display issue solved This is an enhancement that fixes you can add new phrases in database. You can add page_size parameter in ime table to determine number of words to display. * Aux string is correctly displayed * Icon symbol is display issue solved -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 5 2011 Anish Patil <apatil@xxxxxxxxxx> - 1.3.1-8 - Fixed the bug #683749 * Mon Oct 3 2011 Anish Patil <apatil@xxxxxxxxxx> - 1.3.1-7 - Fixed the bug #742852 * Fri Sep 30 2011 Anish Patil <apatil@xxxxxxxxxx> - 1.3.1-6 - Resolves bug #741176 added unicode support for localized string * Tue Sep 27 2011 Anish Patil <apatil@xxxxxxxxxx> - 1.3.1-5 - reolves bug #741176 * Wed Sep 21 2011 Anish Patil <apatil@xxxxxxxxxx> - 1.3.1-4 - reolves bug #683826 and #683743 -------------------------------------------------------------------------------- References: [ 1 ] Bug #683749 - unknown/unnecessary icons in ime bar for ibus-indic-table https://bugzilla.redhat.com/show_bug.cgi?id=683749 [ 2 ] Bug #741176 - ibus compose file needs a symbol tag for gnome-shell https://bugzilla.redhat.com/show_bug.cgi?id=741176 [ 3 ] Bug #742852 - auxiliary text in not getting updated properly https://bugzilla.redhat.com/show_bug.cgi?id=742852 [ 4 ] Bug #683826 - addition of new phrases by users https://bugzilla.redhat.com/show_bug.cgi?id=683826 [ 5 ] Bug #683743 - [RFE] should show 10 candidates at a times https://bugzilla.redhat.com/show_bug.cgi?id=683743 -------------------------------------------------------------------------------- ================================================================================ imsettings-1.2.5-3.fc15 (FEDORA-2011-14144) Delivery framework for general Input Method configuration -------------------------------------------------------------------------------- Update Information: Fix the unowned directory issue -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 11 2011 Akira TAGOH <tagoh@xxxxxxxxxx> - 1.2.5-3 - Own %{_libdir}/imsettings. (#744892) * Tue Oct 4 2011 Akira TAGOH <tagoh@xxxxxxxxxx> - 1.2.5-2 - Add Requires: dconf to imsettings-gnome to ensure it works on KDE. (#742910) -------------------------------------------------------------------------------- References: [ 1 ] Bug #744892 - Unowned directory https://bugzilla.redhat.com/show_bug.cgi?id=744892 -------------------------------------------------------------------------------- ================================================================================ kobo-0.3.5-1.fc15 (FEDORA-2011-14138) Python modules for tools development -------------------------------------------------------------------------------- Update Information: Bump to a new upstream version. Bugfixes mostly. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Daniel Mach <dmach@xxxxxxxxxx> - 0.3.5-1 - Bump version to 0.3.5. (Daniel Mach) - Return tracebacks in the XML-RPC dispatcher as unicode. (Daniel Mach) - Refactor MainMenu to be Django 1.3 compliant. (Martin Magr) - Make StateEnumField Django 1.2 compliant. (Martin Magr) - Add proxy support to XML-RPC transports. (Daniel Mach) - Cache stat values in FileWrapper objects, add size and mtime properties. (Tomas Mlcoch) - Fix unittest kobo.http for Python 2.4. (Tomas Mlcoch) - Add unit test for kobo.pkgset. (Tomas Mlcoch) - Rename pkgset.FileCache.__get__ to __getitem__. (Tomas Mlcoch) - Add unit test for kobo.http. (Tomas Mlcoch) - Add unit test for kobo.decorators. (Tomas Mlcoch) - Add docstrings to kobo.http. (Tomas Mlcoch) - Add UndoHardlink class to __all__. (Tomas Mlcoch) - Add unit test for kobo.hardlink. (Tomas Mlcoch) - Fix params for os.utime() call in UndoHardlink class. (Tomas Mlcoch) - Fix tback.Traceback to work properly in interpreter. (Tomas Mlcoch) - Use getattr to read Krb5Error.err_code to prevent possible AttributeError in HubProxy. (Daniel Mach) - Add a new task state - CREATED. (Daniel Mach) - Fix templates to work properly in debug mode. (Daniel Mach) - Revamp log downloads - download as a stream, better support for other than .log files, enforce using UPLOAD_DIR in settings. (Daniel Mach) - Delete empty directories on FileUpload.delete(). (Daniel Mach) - Catch an exception when deleting an FileUpload object and target file is missing. (Daniel Mach) - Make sure that xmlrpc.decode_xmlrpc_chunk() won't fail on existing directory. (Daniel Mach) - Run task cleanup and notification for foreground tasks. (Daniel Mach) - Enhance shortcuts.iter_chunks() to work with files. (Daniel Mach) - Upload files in chunks in order to prevent client-side memory issues. (Daniel Mach) - Exclude file uploads from CSRF protection. (Daniel Mach) - Add assertRegexpMatches and assertIsInstance to tback tests to make them work on python < 2.7. (Daniel Mach) - Fix processing unitialized variables in tback. (Martin Bukatovic) - Fix a traceback in kobo-admin start-hub when a project name contained dashes. (Daniel Mach) - Add -tt python interpreter argument to project templates. (Daniel Mach) - Add kobo.rpmlib.parse_evr() to parse E:VR. (Daniel Mach) - Fix parse_nvra() - arch must not contain '-'. (Daniel Mach) - Add missing {{ project_name }} prefix to kobo admin templates. (Daniel Mach) - Start daemons in "/" rather than in working dir. (Daniel Mach) - Add TransactionMiddleware to the hub template's settings. (Daniel Mach) - Add skip_broken argument to PluginContainer.register_module() class method. (Daniel Mach) -------------------------------------------------------------------------------- ================================================================================ leksah-0.10.0.4-4.fc15 (FEDORA-2011-14151) Haskell IDE -------------------------------------------------------------------------------- Update Information: This update addresses the issue when leksah does not open the Haskell source file which is passed to it on command line. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Lakshmi Narasimhan T V <lakshminaras2002@xxxxxxxxx> - 0.10.0.4-4 - Fix bug 744559. - Added leksah.xml to mime database. -------------------------------------------------------------------------------- References: [ 1 ] Bug #744559 - leksah.desktop passes haskell source to leksah which doesn't open file from commandline https://bugzilla.redhat.com/show_bug.cgi?id=744559 -------------------------------------------------------------------------------- ================================================================================ libXi-1.4.3-3.fc15 (FEDORA-2011-14143) X.Org X11 libXi runtime library -------------------------------------------------------------------------------- Update Information: Invalid prototype caused truncation of pointer values and dereference to invalid memory -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 11 2011 Peter Hutterer <peter.hutterer@xxxxxxxxxx> 1.4.3-3 - Fix 0001-Handle-unknown-device-classes.patch: missing prototype change for copy_classes in XIQueryDevice caused parameter corruption (#744960) -------------------------------------------------------------------------------- References: [ 1 ] Bug #744960 - libXi crashes on XIQueryDevice on ppc64 https://bugzilla.redhat.com/show_bug.cgi?id=744960 -------------------------------------------------------------------------------- ================================================================================ midori-0.4.1-1.fc15 (FEDORA-2011-14154) A lightweight GTK+ web browser -------------------------------------------------------------------------------- Update Information: Update to 0.4.1 upsteam. Many small bugs fixed and some minor enhancements. -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 9 2011 Kevin Fenzi <kevin@xxxxxxxxx> - 0.4.1-1 - Update to 0.4.1 * Mon Aug 1 2011 Kevin Fenzi <kevin@xxxxxxxxx> - 0.4.0-1 - Update to 0.4.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #737226 - midori needs an update https://bugzilla.redhat.com/show_bug.cgi?id=737226 -------------------------------------------------------------------------------- ================================================================================ ompl-0.9.5-1.fc15 (FEDORA-2011-14135) The Open Motion Planning Library -------------------------------------------------------------------------------- Update Information: Updated to release 0.9.5. For full list of changes, see release notes. -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 9 2011 Rich Mattes <richmattes@xxxxxxxxx> - 0.9.5-1 - Update to release 0.9.5 -------------------------------------------------------------------------------- ================================================================================ pokerth-0.8.3-9.fc15 (FEDORA-2011-14150) A Texas-Holdem poker game -------------------------------------------------------------------------------- Update Information: * Sun Oct 9 2011 Ryan Rix <ry@xxxxxxxx> - 0.8.3-9 - Grammar and update to personal specifications - Apply patch to fix GNUTLS issues from Paul Frields <pfrields at fedoraproject dot org> -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 9 2011 Ryan Rix <ry@xxxxxxxx> - 0.8.3-9 - Grammar and update to personal specifications - Apply patch to fix GNUTLS issues from Paul Frields <pfrields at fedoraproject dot org> * Fri Jul 22 2011 Jussi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 0.8.3-7 - Bump spec due to new boost. * Tue Apr 26 2011 Jussi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 0.8.3-6 - Bump due to libgnutls update. * Wed Apr 6 2011 Jussi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 0.8.3-5 - Bump spec due to boost upgrade. -------------------------------------------------------------------------------- ================================================================================ radvd-1.8.2-2.fc15 (FEDORA-2011-14022) A Router Advertisement daemon -------------------------------------------------------------------------------- Update Information: update to latest upstream radvd-1.8.2 fixes CVE-2011-3601, CVE-2011-3602, CVE-2011-3603, CVE-2011-3604, CVE-2011-3605 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Jiri Skala <jskala@xxxxxxxxxx> - 1.8.2-2 - fixes CVE-2011-3602 * Fri Oct 7 2011 Jiri Skala <jskala@xxxxxxxxxx> - 1.8.2-1 - update to latest upstream version 1.8.2 - this update fixes CVE-2011-360{1..5} -------------------------------------------------------------------------------- References: [ 1 ] Bug #743748 - CVE-2011-3601 radvd: privilege escalation flaw in process_ra() https://bugzilla.redhat.com/show_bug.cgi?id=743748 [ 2 ] Bug #743749 - CVE-2011-3602 radvd: arbitrary file overwrite flaw in set_interface_var() https://bugzilla.redhat.com/show_bug.cgi?id=743749 [ 3 ] Bug #743752 - CVE-2011-3603 radvd: daemon would not fail on privsep_init() causing it to run with full root privileges https://bugzilla.redhat.com/show_bug.cgi?id=743752 [ 4 ] Bug #743756 - CVE-2011-3604 radvd: numerous buffer overread flaws in process_ra() may lead to crash https://bugzilla.redhat.com/show_bug.cgi?id=743756 [ 5 ] Bug #743758 - CVE-2011-3605 radvd: temporary denial of service flaw in process_rs() https://bugzilla.redhat.com/show_bug.cgi?id=743758 -------------------------------------------------------------------------------- ================================================================================ sugar-abacus-24-1.fc15 (FEDORA-2011-14152) A simple abacus activity for Sugar -------------------------------------------------------------------------------- Update Information: Activity updates -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 1 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 24-1 - Update to 24 * Mon Sep 26 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 23-1 - Update to 23 * Wed Aug 10 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 22-1 - Update to 22 * Sat Jun 25 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 20-1 - Update to 20 -------------------------------------------------------------------------------- ================================================================================ sugar-measure-34-1.fc15 (FEDORA-2011-14152) Measure for Sugar -------------------------------------------------------------------------------- Update Information: Activity updates -------------------------------------------------------------------------------- ================================================================================ system-setup-keyboard-0.8.8-1.fc15 (FEDORA-2011-14140) xorg.conf keyboard layout callout -------------------------------------------------------------------------------- Update Information: system-setup-keyboard used to ignore the KEYTABLE value in /etc/sysconfig/keyboard. For setups where no other keyboard option was set, the X server would start with an invalid (default) keyboard mapping instead of the language selected. Make sure system-setup-keyboard survives suspend/resume -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Peter Hutterer <peter.hutterer@xxxxxxxxxx> 0.8.8-1 - 0.8.8 release - Don't ignore the keytable (#744641) * Wed Sep 28 2011 Peter Hutterer <peter.hutterer@xxxxxxxxxx> 0.8.7-2 - Oops. Drop the man page permissions patch, it's upstream now. * Wed Sep 28 2011 Peter Hutterer <peter.hutterer@xxxxxxxxxx> 0.8.7-1 - 0.8.7 release - fix suspend/resume errors (#741800) -------------------------------------------------------------------------------- References: [ 1 ] Bug #744641 - system-setup-keyboard ignored KEYTABLE https://bugzilla.redhat.com/show_bug.cgi?id=744641 [ 2 ] Bug #741800 - system-setup-keyboard dies on suspend/resume https://bugzilla.redhat.com/show_bug.cgi?id=741800 -------------------------------------------------------------------------------- ================================================================================ vtk-5.6.1-10.fc15 (FEDORA-2011-14147) The Visualization Toolkit - A high level 3D visualization library -------------------------------------------------------------------------------- Update Information: - Remove rpaths from all hand installed binaries (Bug 744437) - Don't link against OSMesa (Bug 744434) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Orion Poplawski <orion@xxxxxxxxxxxxx> - 5.6.1-10 - Remove rpaths from all hand installed binaries (Bug 744437) - Don't link against OSMesa (Bug 744434) -------------------------------------------------------------------------------- References: [ 1 ] Bug #744434 - VTK should not be being built against both libGL and libOSMesa https://bugzilla.redhat.com/show_bug.cgi?id=744434 [ 2 ] Bug #744437 - Build rpaths still in manually copied executables https://bugzilla.redhat.com/show_bug.cgi?id=744437 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test