The following Fedora 13 Security updates need testing: https://admin.fedoraproject.org/updates/udunits2-2.1.19-1.fc13 https://admin.fedoraproject.org/updates/mailman-2.1.12-16.fc13 https://admin.fedoraproject.org/updates/udev-153-5.fc13 https://admin.fedoraproject.org/updates/libvpx-0.9.5-2.fc13 https://admin.fedoraproject.org/updates/openconnect-2.26-2.fc13 The following Fedora 13 Critical Path updates have yet to be approved: https://admin.fedoraproject.org/updates/udev-153-5.fc13 https://admin.fedoraproject.org/updates/livecd-tools-13.0-1.fc13 https://admin.fedoraproject.org/updates/gnome-desktop-2.30.2-1.fc13 https://admin.fedoraproject.org/updates/mingetty-1.08-6.fc13 https://admin.fedoraproject.org/updates/chkconfig-1.3.49-1.fc13 https://admin.fedoraproject.org/updates/sendmail-8.14.4-6.fc13 https://admin.fedoraproject.org/updates/hunspell-1.2.8-18.fc13 https://admin.fedoraproject.org/updates/NetworkManager-0.8.1-10.git20100831.fc13 https://admin.fedoraproject.org/updates/mash-0.5.20-1.fc13 https://admin.fedoraproject.org/updates/openldap-2.4.21-11.fc13 https://admin.fedoraproject.org/updates/nss-3.12.7-4.fc13,nss-util-3.12.7-2.fc13,nss-softokn-3.12.7-3.fc13,nspr-4.8.6-1.fc13 https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-7.fc13 The following builds have been pushed to Fedora 13 updates-testing augeas-0.7.4-1.fc13 iscan-firmware-2.25.1-1.fc13 lightsquid-1.8-9.fc13 lshw-B.02.15-1.fc13 openconnect-2.26-2.fc13 perl-Image-ExifTool-8.40-1.fc13 qbittorrent-2.4.11-1.fc13 rubygem-i18n-0.4.2-2.fc13 wireshark-1.2.13-1.fc13 x-tile-1.8.3-1.fc13 xsettings-kde-0.11-2.fc13 Details about builds: ================================================================================ augeas-0.7.4-1.fc13 (FEDORA-2010-18030) A library for changing configuration files -------------------------------------------------------------------------------- Update Information: Update to the latest stable version of augeas. Note that this version makes some incompatible changes to the parsing of the following files: * /etc/fstab: Mount options with values now have the option name and value parsed separately. * /etc/squid/squid.conf: refresh_pattern, upgrade_http0.9, broken_vary_encoding and extension_methods now have their options parsed individually. * /etc/xinetd.d/*: Service names are now parsed as values of a key named 'service' -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2010 Matthew Booth <mbooth@xxxxxxxxxx> - 0.7.4-1 - Update to version 0.7.4 -------------------------------------------------------------------------------- ================================================================================ iscan-firmware-2.25.1-1.fc13 (FEDORA-2010-18066) Firmware for Epson flatbed scanners -------------------------------------------------------------------------------- Update Information: Adds firmwares for the following Epson scanners: Perfection V33, Perfection V330 PHOTO, GT-F730, GT-S630, Perfection V600 PHOTO and GT-X820. -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 21 2010 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> 2.25.1-1 - added firmwares for: V33/V330 PHOTO, V600 PHOTO -------------------------------------------------------------------------------- ================================================================================ lightsquid-1.8-9.fc13 (FEDORA-2010-18063) Light, small, and fast log analyzer for squid proxy -------------------------------------------------------------------------------- ================================================================================ lshw-B.02.15-1.fc13 (FEDORA-2010-18052) Hardware lister -------------------------------------------------------------------------------- Update Information: Update to latest upstream release lshw B.02.15, fixing some bugs and adding support for sqlite data as output. -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 21 2010 Terje Rosten <terje.rosten@xxxxxxx> - B.02.15-1 - B.02.15 - Remove patches now upstream - Build with sqlite support -------------------------------------------------------------------------------- ================================================================================ openconnect-2.26-2.fc13 (FEDORA-2010-18053) Open client for Cisco AnyConnect VPN -------------------------------------------------------------------------------- Update Information: This update implements DTLS rekeying, elides the session cookie from debugging output by default, and fixes a potential crash on relative HTTP redirect during authentication. It also fixes a problem which occurs when changing VPN hosts in the NetworkManager auth-dialog, after the connection to the first host has already been made. -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 21 2010 David Woodhouse <David.Woodhouse@xxxxxxxxx> - 2.26-2 - Fix bug numbers in changelog * Wed Sep 22 2010 David Woodhouse <David.Woodhouse@xxxxxxxxx> - 2.26-1 - Update to 2.26. (#629979: SIGSEGV in nm-openconnect-auth-dialog) -------------------------------------------------------------------------------- References: [ 1 ] Bug #643414 - CVE-2010-3902 OpenConnect: webvpn cookie content disclosure via debugging output https://bugzilla.redhat.com/show_bug.cgi?id=643414 -------------------------------------------------------------------------------- ================================================================================ perl-Image-ExifTool-8.40-1.fc13 (FEDORA-2010-18036) Utility for reading and writing image meta info -------------------------------------------------------------------------------- Update Information: Update to 8.40. Lots of changes and bugfixes since 8.25 (last stable), see: http://owl.phy.queensu.ca/~phil/exiftool/history.html -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2010 Tom "spot" Callaway <tcallawa@xxxxxxxxxx> - 8.40-1 - update to 8.40 * Tue Jul 13 2010 Tom "spot" Callaway <tcallawa@xxxxxxxxxx> - 8.25-1 - update to 8.25 * Sun May 2 2010 Marcela Maslanova <mmaslano@xxxxxxxxxx> - 8.15-2 - Mass rebuild with perl-5.12.0 -------------------------------------------------------------------------------- ================================================================================ qbittorrent-2.4.11-1.fc13 (FEDORA-2010-18031) A Bittorrent Client -------------------------------------------------------------------------------- Update Information: * Sun Nov 21 2010 - Christophe Dumez <chris@xxxxxxxxxxxxxxx> - v2.4.11 - BUGFIX: Do not report a progress of 100% in the Web UI unless the torrent is really complete (closes #674349) - BUGFIX: Fix possible incorrect behavior with queueing - BUGFIX: Fix RSS refresh interval saving - BUGFIX: Fix possible crash when setting RSS proxy (closes #676288) - BUGFIX: Fix HTTP redirect issue that would cause the torrent addition to show up for automated RSS downloads (Closes #677565) -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 21 2010 leigh scott <leigh123linux@xxxxxxxxxxxxxx> - 1:2.4.11-1 - update to 2.4.11 -------------------------------------------------------------------------------- ================================================================================ rubygem-i18n-0.4.2-2.fc13 (FEDORA-2010-18058) New wave Internationalization support for Ruby -------------------------------------------------------------------------------- Update Information: Initial update -------------------------------------------------------------------------------- References: [ 1 ] Bug #652216 - Review Request: rubygem-i18n - New wave Internationalization support for Ruby https://bugzilla.redhat.com/show_bug.cgi?id=652216 -------------------------------------------------------------------------------- ================================================================================ wireshark-1.2.13-1.fc13 (FEDORA-2010-18061) Network traffic analyzer -------------------------------------------------------------------------------- Update Information: The following vulnerabilities have been fixed. See the security advisory[1] for details and a workaround. * Nephi Johnson of BreakingPoint discovered that the LDSS dissector could overflow a buffer. (Upstream bug 5318) * The ZigBee ZCL dissector could go into an infinite loop. (Upstream bug 5303) [1]http://www.wireshark.org/security/wnpa-sec-2010-14.html http://www.wireshark.org/security/wnpa-sec-2010-13.html -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2010 Jan Safranek <jsafrane@xxxxxxxxxx> - upgrade to 1.2.13 - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.13.html -------------------------------------------------------------------------------- ================================================================================ x-tile-1.8.3-1.fc13 (FEDORA-2010-18048) A GNOME panel applet to tile windows in different ways -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2010 Mohamed El Morabity <melmorabity@xxxxxxxxxxxxxxxxx> - 1.8.3-1 - Update to 1.8.3 -------------------------------------------------------------------------------- ================================================================================ xsettings-kde-0.11-2.fc13 (FEDORA-2010-18047) XSettings Daemon for KDE -------------------------------------------------------------------------------- Update Information: This update makes GTK+/GNOME applications display icons in menus when running in a KDE (Plasma) session, as Qt/KDE applications do. You will have to restart your session (log out and log back in) or manually restart xsettings-kde for the change to take effect. -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 22 2010 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> - 0.11-2 - make GTK+ apps display menu images in KDE -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test