The following Fedora 14 Security updates need testing: https://admin.fedoraproject.org/updates/FEDORA-2011-13795 https://admin.fedoraproject.org/updates/FEDORA-2011-14000 https://admin.fedoraproject.org/updates/FEDORA-2011-13499 https://admin.fedoraproject.org/updates/FEDORA-2011-13457 https://admin.fedoraproject.org/updates/FEDORA-2011-13633 https://admin.fedoraproject.org/updates/FEDORA-2011-13805 https://admin.fedoraproject.org/updates/FEDORA-2011-13869 https://admin.fedoraproject.org/updates/FEDORA-2011-13864 https://admin.fedoraproject.org/updates/FEDORA-2011-13874 https://admin.fedoraproject.org/updates/FEDORA-2011-13915 https://admin.fedoraproject.org/updates/FEDORA-2011-14025 https://admin.fedoraproject.org/updates/FEDORA-2011-14049 The following Fedora 14 Critical Path updates have yet to be approved: https://admin.fedoraproject.org/updates/FEDORA-2011-13933 https://admin.fedoraproject.org/updates/FEDORA-2011-13874 https://admin.fedoraproject.org/updates/FEDORA-2011-13515 https://admin.fedoraproject.org/updates/FEDORA-2011-12717 https://admin.fedoraproject.org/updates/FEDORA-2011-9266 https://admin.fedoraproject.org/updates/FEDORA-2011-8835 https://admin.fedoraproject.org/updates/FEDORA-2011-8401 https://admin.fedoraproject.org/updates/FEDORA-2011-8116 https://admin.fedoraproject.org/updates/FEDORA-2011-5174 https://admin.fedoraproject.org/updates/FEDORA-2011-3923 The following builds have been pushed to Fedora 14 updates-testing amide-1.0.0-1.fc14 g2clib-1.2.2-2.fc14 kobo-0.3.5-1.fc14 leksah-0.10.0.4-4.fc14 ompl-0.9.5-1.fc14 radvd-1.8.2-2.fc14 vtk-5.6.1-10.fc14 Details about builds: ================================================================================ amide-1.0.0-1.fc14 (FEDORA-2011-13916) Program for viewing and analyzing medical image data sets -------------------------------------------------------------------------------- Update Information: Amide is a medical data examiner. -------------------------------------------------------------------------------- References: [ 1 ] Bug #666726 - Review Request: amide - A Medical Image Data Examiner: https://bugzilla.redhat.com/show_bug.cgi?id=666726 -------------------------------------------------------------------------------- ================================================================================ g2clib-1.2.2-2.fc14 (FEDORA-2011-14148) GRIB2 encoder/decoder and search/indexing routines in C -------------------------------------------------------------------------------- Update Information: Add -fPIC to 64-bit builds. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Orion Poplawski <orion@xxxxxxxxxxxxx> - 1.2.2-2 - Add -fPIC to 64-bit builds * Wed Mar 16 2011 Orion Poplawski <orion@xxxxxxxxxxxxx> - 1.2.2-1 - Update to 1.2.2 -------------------------------------------------------------------------------- ================================================================================ kobo-0.3.5-1.fc14 (FEDORA-2011-14146) Python modules for tools development -------------------------------------------------------------------------------- Update Information: Bump to a new upstream version. Bugfixes mostly. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Daniel Mach <dmach@xxxxxxxxxx> - 0.3.5-1 - Bump version to 0.3.5. (Daniel Mach) - Return tracebacks in the XML-RPC dispatcher as unicode. (Daniel Mach) - Refactor MainMenu to be Django 1.3 compliant. (Martin Magr) - Make StateEnumField Django 1.2 compliant. (Martin Magr) - Add proxy support to XML-RPC transports. (Daniel Mach) - Cache stat values in FileWrapper objects, add size and mtime properties. (Tomas Mlcoch) - Fix unittest kobo.http for Python 2.4. (Tomas Mlcoch) - Add unit test for kobo.pkgset. (Tomas Mlcoch) - Rename pkgset.FileCache.__get__ to __getitem__. (Tomas Mlcoch) - Add unit test for kobo.http. (Tomas Mlcoch) - Add unit test for kobo.decorators. (Tomas Mlcoch) - Add docstrings to kobo.http. (Tomas Mlcoch) - Add UndoHardlink class to __all__. (Tomas Mlcoch) - Add unit test for kobo.hardlink. (Tomas Mlcoch) - Fix params for os.utime() call in UndoHardlink class. (Tomas Mlcoch) - Fix tback.Traceback to work properly in interpreter. (Tomas Mlcoch) - Use getattr to read Krb5Error.err_code to prevent possible AttributeError in HubProxy. (Daniel Mach) - Add a new task state - CREATED. (Daniel Mach) - Fix templates to work properly in debug mode. (Daniel Mach) - Revamp log downloads - download as a stream, better support for other than .log files, enforce using UPLOAD_DIR in settings. (Daniel Mach) - Delete empty directories on FileUpload.delete(). (Daniel Mach) - Catch an exception when deleting an FileUpload object and target file is missing. (Daniel Mach) - Make sure that xmlrpc.decode_xmlrpc_chunk() won't fail on existing directory. (Daniel Mach) - Run task cleanup and notification for foreground tasks. (Daniel Mach) - Enhance shortcuts.iter_chunks() to work with files. (Daniel Mach) - Upload files in chunks in order to prevent client-side memory issues. (Daniel Mach) - Exclude file uploads from CSRF protection. (Daniel Mach) - Add assertRegexpMatches and assertIsInstance to tback tests to make them work on python < 2.7. (Daniel Mach) - Fix processing unitialized variables in tback. (Martin Bukatovic) - Fix a traceback in kobo-admin start-hub when a project name contained dashes. (Daniel Mach) - Add -tt python interpreter argument to project templates. (Daniel Mach) - Add kobo.rpmlib.parse_evr() to parse E:VR. (Daniel Mach) - Fix parse_nvra() - arch must not contain '-'. (Daniel Mach) - Add missing {{ project_name }} prefix to kobo admin templates. (Daniel Mach) - Start daemons in "/" rather than in working dir. (Daniel Mach) - Add TransactionMiddleware to the hub template's settings. (Daniel Mach) - Add skip_broken argument to PluginContainer.register_module() class method. (Daniel Mach) -------------------------------------------------------------------------------- ================================================================================ leksah-0.10.0.4-4.fc14 (FEDORA-2011-14149) Haskell IDE -------------------------------------------------------------------------------- Update Information: This update addresses the issue when leksah does not open the Haskell source file which is passed to it on command line. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Lakshmi Narasimhan T V <lakshminaras2002@xxxxxxxxx> - 0.10.0.4-4 - Fix bug 744559. - Added leksah.xml to mime database. -------------------------------------------------------------------------------- References: [ 1 ] Bug #744559 - leksah.desktop passes haskell source to leksah which doesn't open file from commandline https://bugzilla.redhat.com/show_bug.cgi?id=744559 -------------------------------------------------------------------------------- ================================================================================ ompl-0.9.5-1.fc14 (FEDORA-2011-14142) The Open Motion Planning Library -------------------------------------------------------------------------------- Update Information: Updated to release 0.9.5. For full list of changes, see release notes. -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 9 2011 Rich Mattes <richmattes@xxxxxxxxx> - 0.9.5-1 - Update to release 0.9.5 -------------------------------------------------------------------------------- ================================================================================ radvd-1.8.2-2.fc14 (FEDORA-2011-14000) A Router Advertisement daemon -------------------------------------------------------------------------------- Update Information: update to latest upstream radvd-1.8.2 fixes CVE-2011-3601, CVE-2011-3602, CVE-2011-3603, CVE-2011-3604, CVE-2011-3605 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Jiri Skala <jskala@xxxxxxxxxx> - 1.8.2-2 - fixes CVE-2011-3602 * Fri Oct 7 2011 Jiri Skala <jskala@xxxxxxxxxx> - 1.8.2-1 - update to latest upstream version 1.8.2 - this update fixes CVE-2011-360{1..5} -------------------------------------------------------------------------------- References: [ 1 ] Bug #743748 - CVE-2011-3601 radvd: privilege escalation flaw in process_ra() https://bugzilla.redhat.com/show_bug.cgi?id=743748 [ 2 ] Bug #743749 - CVE-2011-3602 radvd: arbitrary file overwrite flaw in set_interface_var() https://bugzilla.redhat.com/show_bug.cgi?id=743749 [ 3 ] Bug #743752 - CVE-2011-3603 radvd: daemon would not fail on privsep_init() causing it to run with full root privileges https://bugzilla.redhat.com/show_bug.cgi?id=743752 [ 4 ] Bug #743756 - CVE-2011-3604 radvd: numerous buffer overread flaws in process_ra() may lead to crash https://bugzilla.redhat.com/show_bug.cgi?id=743756 [ 5 ] Bug #743758 - CVE-2011-3605 radvd: temporary denial of service flaw in process_rs() https://bugzilla.redhat.com/show_bug.cgi?id=743758 -------------------------------------------------------------------------------- ================================================================================ vtk-5.6.1-10.fc14 (FEDORA-2011-14141) The Visualization Toolkit - A high level 3D visualization library -------------------------------------------------------------------------------- Update Information: - Remove rpaths from all hand installed binaries (Bug 744437) - Don't link against OSMesa (Bug 744434) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 10 2011 Orion Poplawski <orion@xxxxxxxxxxxxx> - 5.6.1-10 - Remove rpaths from all hand installed binaries (Bug 744437) - Don't link against OSMesa (Bug 744434) -------------------------------------------------------------------------------- References: [ 1 ] Bug #744434 - VTK should not be being built against both libGL and libOSMesa https://bugzilla.redhat.com/show_bug.cgi?id=744434 [ 2 ] Bug #744437 - Build rpaths still in manually copied executables https://bugzilla.redhat.com/show_bug.cgi?id=744437 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test