The following Fedora 14 Security updates need testing:
https://admin.fedoraproject.org/updates/mailman-2.1.13-6.fc14
https://admin.fedoraproject.org/updates/moodle-1.9.10-1.fc14
https://admin.fedoraproject.org/updates/cvs-1.11.23-11.fc14
https://admin.fedoraproject.org/updates/monotone-0.48.1-1.fc14
https://admin.fedoraproject.org/updates/apr-util-1.3.10-1.fc14
https://admin.fedoraproject.org/updates/horde-3.3.9-1.fc14
https://admin.fedoraproject.org/updates/tomcat6-6.0.26-14.fc14
https://admin.fedoraproject.org/updates/gnucash-2.3.15-2.fc14
https://admin.fedoraproject.org/updates/perl-libwww-perl-5.837-2.fc14
https://admin.fedoraproject.org/updates/exim-4.72-2.fc14
https://admin.fedoraproject.org/updates/xpdf-3.02-16.fc14
https://admin.fedoraproject.org/updates/seamonkey-2.0.9-1.fc14
https://admin.fedoraproject.org/updates/bristol-0.40.7-7.fc14
https://admin.fedoraproject.org/updates/sunbird-1.0-0.31.b2pre.fc14,thunderbird-3.1.6-1.fc14
https://admin.fedoraproject.org/updates/qt-4.7.0-8.fc14
https://admin.fedoraproject.org/updates/banshee-1.8.0-10.fc14
https://admin.fedoraproject.org/updates/pootle-2.1.2-1.fc14
https://admin.fedoraproject.org/updates/libguestfs-1.5.23-1
https://admin.fedoraproject.org/updates/luci-0.22.4-2.0.b9faf868074git.fc14
https://admin.fedoraproject.org/updates/gnome-xcf-thumbnailer-1.0-4.fc14
The following Fedora 14 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/xdg-utils-1.0.2-21.20101028.fc14
https://admin.fedoraproject.org/updates/mingetty-1.08-5.fc14
https://admin.fedoraproject.org/updates/authconfig-6.1.11-1.fc14,sssd-1.4.0-2.fc14,ding-libs-0.1.2-3.fc14
The following builds have been pushed to Fedora 14 updates-testing
atool-0.37.0-1.fc14
banshee-1.8.0-10.fc14
ccd2iso-0.3-6.fc14
dvdauthor-0.7.0-1.fc14
erlang-amf-0-0.3.20100908git27329144.fc14
erlang-gettext-2.1.0-0.2.20101022gitb55cb72.fc14
erlang-neotoma-1.4-2.fc14
erlang-xmlrpc-1.13-2.fc14
ghc-regex-tdfa-1.1.6-1.fc14
ghc-split-0.1.2.1-1.fc14
ghc-xmonad-contrib-0.9.1-8.fc14
gnome-xcf-thumbnailer-1.0-4.fc14
imagej-1.44-1.i.fc14
kde-plasma-translatoid-1.30-1.fc14
libisofs-0.6.38-1.fc14
libmikey-0.8.0-0.2.20100127svn3750.fc14
libmsip-0.8.0-0.1.20100629svn3775.fc14
nzbget-0.7.0-1.fc14
pootle-2.1.2-1.fc14
postgresql-plparrot-0.04-2.fc14
q4wine-0.120-3.fc14
rubygem-whiskey_disk-0.5.3-1.fc14
spin-kickstarts-0.14.5-1.fc14
webkitgtk-1.3.5-1.fc14
wine-1.3.6-1.fc14
xfce4-dev-tools-4.7.3-1.fc14
xsettingsd-0-0.1.20091208git7804894.fc14
Details about builds:
================================================================================
atool-0.37.0-1.fc14 (FEDORA-2010-17025)
A perl script for managing file archives of various types
--------------------------------------------------------------------------------
================================================================================
banshee-1.8.0-10.fc14 (FEDORA-2010-17021)
Easily import, manage, and play selections from your music collection
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 25 2010 Nathaniel McCallum <nathaniel@xxxxxxxxxxxxxxxx> - 1.8.0-10
- Add a patch to fix CVE-2010-3998
* Tue Oct 19 2010 Dan HorÃk <dan[at]danny.cz> - 1.8.0-9
- Update the Requires to match BR on s390(x)
* Tue Oct 19 2010 Nathaniel McCallum <nathaniel@xxxxxxxxxxxxxxxx> - 1.8.0-8
- Added gnome-doc-utils BR
* Mon Oct 18 2010 Dan HorÃk <dan[at]danny.cz> - 1.8.0-7
- Fix BRs and configure options on s390(x)
- Be verbose during build
* Mon Oct 11 2010 Nathaniel McCallum <nathaniel@xxxxxxxxxxxxxxxx> - 1.8.0-6
- Fix download URL
* Fri Oct 8 2010 Nathaniel McCallum <nathaniel@xxxxxxxxxxxxxxxx> - 1.8.0-5
- Add upstream patch to fix sync screen
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #644554 - CVE-2010-3998 banshee: insecure library loading vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=644554
--------------------------------------------------------------------------------
================================================================================
ccd2iso-0.3-6.fc14 (FEDORA-2010-17032)
CloneCD image to ISO image file converter
--------------------------------------------------------------------------------
Update Information:
The ccd2iso project converts CD backup files created using the non-free CloneCD
program to a format understood by most Free Software CD writing programs.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #562585 - Review Request: ccd2iso - CloneCD image to ISO image file converter
https://bugzilla.redhat.com/show_bug.cgi?id=562585
--------------------------------------------------------------------------------
================================================================================
dvdauthor-0.7.0-1.fc14 (FEDORA-2010-16991)
Command line DVD authoring tool
--------------------------------------------------------------------------------
Update Information:
Update to version 0.7.0.
http://github.com/ldo/dvdauthor/blob/master/ChangeLog
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 27 2010 Ville Skyttà <ville.skytta@xxxxxx> - 0.7.0-1
- Update to 0.7.0, all patches applied upstream.
- Improve %description.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #595543 - [abrt] crash in dvdauthor-0.6.18-1.fc13: dump_dvd: Process /usr/bin/dvdunauthor was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=595543
[ 2 ] Bug #595830 - [abrt] crash in dvdauthor-0.6.18-1.fc12: MarkChapters: Process /usr/bin/dvdauthor was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=595830
[ 3 ] Bug #646938 - dvdauthor-0.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=646938
--------------------------------------------------------------------------------
================================================================================
erlang-amf-0-0.3.20100908git27329144.fc14 (FEDORA-2010-17010)
Erlang Action Message Format Library
--------------------------------------------------------------------------------
Update Information:
* Added missing exported function
* Added workaround for missing BIFs in Erlang/OTP R12B
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 31 2010 Peter Lemenkov <lemenkov@xxxxxxxxx> - 0-0.3.20100908git27329144
- Fixed missing BIFs in Erlang/OTP R12B
- Exported one more function
--------------------------------------------------------------------------------
================================================================================
erlang-gettext-2.1.0-0.2.20101022gitb55cb72.fc14 (FEDORA-2010-17020)
Erlang internationalization library
--------------------------------------------------------------------------------
Update Information:
Initial build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #645801 - Review Request: erlang-gettext - Erlang internationalization library
https://bugzilla.redhat.com/show_bug.cgi?id=645801
--------------------------------------------------------------------------------
================================================================================
erlang-neotoma-1.4-2.fc14 (FEDORA-2010-17042)
Erlang library and packrat parser-generator for parsing expression grammars
--------------------------------------------------------------------------------
Update Information:
Initial build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #639284 - Review Request: erlang-neotoma - Erlang library and packrat parser-generator for parsing expression grammars
https://bugzilla.redhat.com/show_bug.cgi?id=639284
--------------------------------------------------------------------------------
================================================================================
erlang-xmlrpc-1.13-2.fc14 (FEDORA-2010-17005)
HTTP 1.1 compliant XML-RPC library for Erlang
--------------------------------------------------------------------------------
Update Information:
Initial build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #645288 - Review Request: erlang-xmlrpc - HTTP 1.1 compliant XML-RPC library for Erlang
https://bugzilla.redhat.com/show_bug.cgi?id=645288
--------------------------------------------------------------------------------
================================================================================
ghc-regex-tdfa-1.1.6-1.fc14 (FEDORA-2010-17024)
Haskell regular expression library
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #595697 - Review Request: ghc-regex-tdfa - Haskell "tagged" DFA regex engine
https://bugzilla.redhat.com/show_bug.cgi?id=595697
--------------------------------------------------------------------------------
================================================================================
ghc-split-0.1.2.1-1.fc14 (FEDORA-2010-17036)
Combinator library for splitting lists
--------------------------------------------------------------------------------
Update Information:
Combinator library for splitting lists.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #630509 - Review Request: ghc-split - Combinator library for splitting lists
https://bugzilla.redhat.com/show_bug.cgi?id=630509
--------------------------------------------------------------------------------
================================================================================
ghc-xmonad-contrib-0.9.1-8.fc14 (FEDORA-2010-17029)
Third party extensions for xmonad
--------------------------------------------------------------------------------
Update Information:
Fix broken dependencies when using xmonad --recompile. See RHBZ #648134.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 31 2010 Ben Boeckel <mathstuf@xxxxxxxxx> - 0.9.1-8
- Rebuild for broken xmonad deps (RHBZ#648134)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #648134 - broken deps for ghc-xmonad-contrib
https://bugzilla.redhat.com/show_bug.cgi?id=648134
--------------------------------------------------------------------------------
================================================================================
gnome-xcf-thumbnailer-1.0-4.fc14 (FEDORA-2010-17035)
Thumbnailer for XCF files
--------------------------------------------------------------------------------
Update Information:
This update fixes potential stack-based buffer overflows that can
allow remote attackers to cause a denial of service (crash) and
possibly execute arbitrary code via a crafted image that causes a
conversion to a location "above or to the left of the canvas."
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 29 2010 ELMORABITY Mohamed <melmorabity@xxxxxxxxxxxxxxxxx> 1.0-4
- Fix RHBZ #64797 (CVE-2009-2175)
- Update GConf scriptlets to latest specifications
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #647907 - CVE-2009-2175 xcftools: stack-based buffer overflow in flatten.c
https://bugzilla.redhat.com/show_bug.cgi?id=647907
--------------------------------------------------------------------------------
================================================================================
imagej-1.44-1.i.fc14 (FEDORA-2010-17006)
Image Processing and Analysis in Java
--------------------------------------------------------------------------------
Update Information:
update to 1.44i
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 30 2010 Georget Fabien <fabien.georget@xxxxxxxxx> 1.44-1.i
- update to 1.44i
- create imagej.jar link
* Tue Sep 28 2010 Georget Fabien <fabien.georget@xxxxxxxxx> 1.44-1.h
- version 1.44h
--------------------------------------------------------------------------------
================================================================================
kde-plasma-translatoid-1.30-1.fc14 (FEDORA-2010-17038)
Translator Using Google Translator
--------------------------------------------------------------------------------
Update Information:
- Version upgrade
- Correct Json parser with new Google Api.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #483730 - Review Request: kde-plasma-translatoid - A Google Translation Plasmoid
https://bugzilla.redhat.com/show_bug.cgi?id=483730
[ 2 ] Bug #633712 - translatoid widget does not translate
https://bugzilla.redhat.com/show_bug.cgi?id=633712
--------------------------------------------------------------------------------
================================================================================
libisofs-0.6.38-1.fc14 (FEDORA-2010-17030)
Library to create ISO 9660 disk images
--------------------------------------------------------------------------------
Update Information:
This release mainly provides a new feature for ISO 9660 images on USB sticks.
Changes towards previous version 0.6.34:
* New API function iso_write_opts_set_part_offset() controls creation of an MBR with a first partiton table entry that bears non-zero start address. A second set of volume descriptors and directory tree+tables gets created which can be used to mount the image at the partition start.
* Hiding all non-API symbols from the linker by use of --version-script
* Automatic C++ detection in libisofs.h by using macro __cplusplus
* Corrected several memory leaks and potential NULL pointer evaluations in case of memory shortage.
This release can use libjte to produce jigdo files along with the ISO image. Further filesystem images may be appended as MBR partitions 1 to 4. The capability was added to produce boot blocks for computers with MIPS CPU.
Changes towards previous version 0.6.36:
* New API calls iso_write_opts_attach_jte() and iso_write_opts_detach_jte() allow to use libjte for jigdo production.
* New API call iso_write_opts_set_tail_blocks() for tail padding inside ISO image.
* New API call iso_image_generator_is_running() to learn when the write thread is done.
* New API calls iso_image_add_mips_boot_file(), iso_image_get_mips_boot_files(), iso_image_give_up_mips_boot().
* New API call iso_write_opts_set_partition_img() for appending e.g. a small empty FAT12 filesystem which may be used on USB stick.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 31 2010 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 0.6.38-1
- Upgrade to 0.6.38
--------------------------------------------------------------------------------
================================================================================
libmikey-0.8.0-0.2.20100127svn3750.fc14 (FEDORA-2010-17017)
A C++ library implementing the Multimedia Internet KEYing protocol
--------------------------------------------------------------------------------
Update Information:
Initial build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #626701 - Review Request: libmikey - A C++ library implementing the Multimedia Internet KEYing protocol
https://bugzilla.redhat.com/show_bug.cgi?id=626701
--------------------------------------------------------------------------------
================================================================================
libmsip-0.8.0-0.1.20100629svn3775.fc14 (FEDORA-2010-17028)
A C++ library implementing the SIP protocol
--------------------------------------------------------------------------------
Update Information:
Initial build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #626726 - Review Request: libmsip - A C++ library implementing the SIP protocol
https://bugzilla.redhat.com/show_bug.cgi?id=626726
--------------------------------------------------------------------------------
================================================================================
nzbget-0.7.0-1.fc14 (FEDORA-2010-17011)
Command-line based binary newsgrabber for nzb files
--------------------------------------------------------------------------------
================================================================================
pootle-2.1.2-1.fc14 (FEDORA-2010-17000)
Localization and translation management web application
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.2
- Fix XSS on translate page
- Improved monolingual support
- Improved GNU style project support
- New translations: Zulu, Greek, Danish, Acoli and Fulah
- Completed translations: Uighur, Chinese (China), Catalan, Asturian, Akan and Ganda
- Various bug fixes
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 29 2010 Dwayne Bailey <dwayne@xxxxxxxxxxxxxxxx> - 2.1.2-1
- Update to 2.1.2
- Fix XSS on translate page
- Improved monolingual support
- Improved GNU style project support
- New translations: Zulu, Greek, Danish, Acoli and Fulah
- Completed translations: Uighur, Chinese (China), Catalan, Asturian, Akan
and Ganda
- Various bug fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #647832 - pootle: XSS via 'match_names' parameter on translate.html page
https://bugzilla.redhat.com/show_bug.cgi?id=647832
--------------------------------------------------------------------------------
================================================================================
postgresql-plparrot-0.04-2.fc14 (FEDORA-2010-17026)
A PostgreSQL procedural language for the Parrot virtual machine
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #634091 - Review Request: postgresql-plparrot - A PostgreSQL procedural language for the Parrot virtual machine
https://bugzilla.redhat.com/show_bug.cgi?id=634091
--------------------------------------------------------------------------------
================================================================================
q4wine-0.120-3.fc14 (FEDORA-2010-17034)
Qt4 GUI for wine
--------------------------------------------------------------------------------
Update Information:
Q4Wine is a qt4 GUI for W.I.N.E. It will help
you manage wine prefixes and installed applications.
General features:
* Can export QT color theme into wine colors settings.
* Can easy work with different wine versions at same time;
* Easy creating, deleting and managing prefixes (WINEPREFIX);
* Easy controlling for wine process;
* Autostart icons support;
* Easy cd-image use;
* You can extract icons from PE files (.exe .dll);
* Easy backup and restore for managed prefixes.
* Winetriks support.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #640889 - Review Request: q4wine - Qt4 GUI for wine
https://bugzilla.redhat.com/show_bug.cgi?id=640889
--------------------------------------------------------------------------------
================================================================================
rubygem-whiskey_disk-0.5.3-1.fc14 (FEDORA-2010-17015)
Ruby tool for embarrassingly fast deployments
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #646573 - Review Request: rubygem-whiskey_disk - Ruby tool for embarrassingly fast deployments
https://bugzilla.redhat.com/show_bug.cgi?id=646573
--------------------------------------------------------------------------------
================================================================================
spin-kickstarts-0.14.5-1.fc14 (FEDORA-2010-16995)
Kickstart files and templates for creating your own Fedora Spins
--------------------------------------------------------------------------------
Update Information:
Includes one fix for LXDE that didn't make gold, otherwise just a new upstream incorporating patches that were included with package instead of upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 31 2010 Bruno Wolff III <bruno@xxxxxxxx> - 0.14.5-1
- Patches are upstream now and there is one lxde change.
--------------------------------------------------------------------------------
================================================================================
webkitgtk-1.3.5-1.fc14 (FEDORA-2010-17027)
GTK+ Web content engine library
--------------------------------------------------------------------------------
Update Information:
Fixes various bugs, including issue with new fedoraproject.org site.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 28 2010 Kevin Fenzi <kevin@xxxxxxxxx> - 1.3.5-1
- Update to 1.3.5-1
* Wed Oct 13 2010 Dan HorÃk <dan[at]danny.cz> - 1.3.4-4
- Add back updated s390(x) patch
- Do not generate debug information to prevent linker memory exhaustion on s390
with its 2 GB address space
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #643300 - [abrt] epiphany-1:2.30.6-1.fc14: glyphDataForCharacter: Process /usr/bin/epiphany was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=643300
--------------------------------------------------------------------------------
================================================================================
wine-1.3.6-1.fc14 (FEDORA-2010-17031)
A Windows 16/32/64 bit emulator
--------------------------------------------------------------------------------
Update Information:
* Support for GStreamer filters.
* Mapping of standard cursors to native desktop cursors.
* Improved support for installers with services.
* Many MSXML improvements.
* Decoder for TGA-format images.
* Translation updates.
* Various bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 29 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.3.6-1
- version upgrade
- rebase winepulse configure patch
- add gstreamer BR for new gstreamer support
- add libtiff BR for new tiff support
--------------------------------------------------------------------------------
================================================================================
xfce4-dev-tools-4.7.3-1.fc14 (FEDORA-2010-17018)
Xfce developer tools
--------------------------------------------------------------------------------
Update Information:
New upstream version that fixes some bugs, mainly sanity checks. This update is targeted at the release of Xfce 4.8.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 31 2010 Christoph Wickert <cwickert@xxxxxxxxxxxxxxxxx> - 4.7.3-1
- Update to 4.7.3
--------------------------------------------------------------------------------
================================================================================
xsettingsd-0-0.1.20091208git7804894.fc14 (FEDORA-2010-17033)
Provides settings to X11 clients via the XSETTINGS specification
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
