The following Fedora 14 Security updates need testing:
https://admin.fedoraproject.org/updates/phpMyAdmin-3.3.8.1-1.fc14
https://admin.fedoraproject.org/updates/krb5-1.8.2-7.fc14
https://admin.fedoraproject.org/updates/mailman-2.1.13-6.fc14.1
https://admin.fedoraproject.org/updates/exim-4.72-2.fc14
https://admin.fedoraproject.org/updates/bareftp-0.3.7-1.fc14
The following Fedora 14 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/perl-CGI-3.50-2.fc14,perl-5.12.2-140.fc14
https://admin.fedoraproject.org/updates/makebootfat-1.4-11.fc14
https://admin.fedoraproject.org/updates/libwnck-2.30.4-1.fc14
The following builds have been pushed to Fedora 14 updates-testing
alleggl-0.4.3-8.fc14
clive-2.2.18-1.fc14
django-addons-0.6.3-1.fc14
django-ajax-selects-1.1.4-3.fc14
fcoe-utils-1.0.14-3.fc14
fedora-business-cards-0.2.4.3-1.fc14
fgrun-1.5.2-5.fc14
gupnp-0.14.1-1.fc14
ibus-anthy-1.2.5-1.fc14
input-pad-1.0.0-1.fc14
krb5-1.8.2-7.fc14
libint-1.1.4-3.fc14
libpagemap-0.0.1-3.fc14
perl-5.12.2-140.fc14
perl-CGI-3.50-2.fc14
perl-WWW-Curl-4.15-1.fc14
php-pecl-apc-3.1.6-1.fc14
phpwapmail-0.9.4-1.fc14
pidgin-2.7.7-1.fc14
rec-applet-0.2.3-3.fc14
texmakerx-2.0-1.fc14
unoconv-0.4-3.fc14
xl2tpd-1.2.7-1.fc14
Details about builds:
================================================================================
alleggl-0.4.3-8.fc14 (FEDORA-2010-18424)
OpenGL support library for Allegro
--------------------------------------------------------------------------------
Update Information:
Fix a crash when libGL reports a NULL rendering string.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 1 2010 Hans de Goede <hdegoede@xxxxxxxxxx> 0.4.3-8
- Fix crash when libGL reports a NULL rendering string (#658758)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #658758 - [abrt] machineball-1.0-9.fc13: _xwin_signal_handler: Process /usr/bin/machineball was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=658758
--------------------------------------------------------------------------------
================================================================================
clive-2.2.18-1.fc14 (FEDORA-2010-18402)
Video extraction tool for user-uploaded video hosts
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.18
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 30 2010 Nicoleau Fabien <nicoleau.fabien@xxxxxxxxx> 2.2.18-1
- Update to 2.2.18
--------------------------------------------------------------------------------
================================================================================
django-addons-0.6.3-1.fc14 (FEDORA-2010-18404)
A framework to create pluggable Django add-ons
--------------------------------------------------------------------------------
Update Information:
This is a framework
to create pluggable
Django add-ons.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #645764 - Review Request: django-addons - to add plugging functionality in your projects easier
https://bugzilla.redhat.com/show_bug.cgi?id=645764
--------------------------------------------------------------------------------
================================================================================
django-ajax-selects-1.1.4-3.fc14 (FEDORA-2010-18412)
Enables editing of ForeignKey, ManyToMany and simple text fields
--------------------------------------------------------------------------------
Update Information:
Enables editing of ForeignKey,
ManyToMany and simple
text fields.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #645760 - Review Request: django-ajax-selects - Enables editing of ForeignKey, ManyToMany and simple text fields
https://bugzilla.redhat.com/show_bug.cgi?id=645760
--------------------------------------------------------------------------------
================================================================================
fcoe-utils-1.0.14-3.fc14 (FEDORA-2010-18391)
Fibre Channel over Ethernet utilities
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 30 2010 Petr Sabata <psabata@xxxxxxxxxx> - 1.0.14-3
- Removing dependency on vconfig, rhbz#658525
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #658525 - Remove dependency on vconfig
https://bugzilla.redhat.com/show_bug.cgi?id=658525
--------------------------------------------------------------------------------
================================================================================
fedora-business-cards-0.2.4.3-1.fc14 (FEDORA-2010-18390)
The Fedora business card generator
--------------------------------------------------------------------------------
Update Information:
Adds a new template for the standard European business card size, and other enhancements.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 30 2010 Ian Weller <ian@xxxxxxxxxxxxx> - 0.2.4.3-1
- Add template for the Europe business card size
* Sun Jul 25 2010 Ian Weller <iweller@xxxxxxxxxx> - 0.2.4.2-5
- Rebuilt again for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #656769 - [abrt] fedora-business-cards-0.2.4.2-3.fc12: generate.py:46:gen_front:AttributeError: 'NoneType' object has no attribute 'appendChild'
https://bugzilla.redhat.com/show_bug.cgi?id=656769
--------------------------------------------------------------------------------
================================================================================
fgrun-1.5.2-5.fc14 (FEDORA-2010-18406)
Graphical front-end for launching FlightGear flight simulator
--------------------------------------------------------------------------------
Update Information:
This new package is a Graphical front-end
for launching the FlightGear flight simulator.
--------------------------------------------------------------------------------
================================================================================
gupnp-0.14.1-1.fc14 (FEDORA-2010-18387)
A framework for creating UPnP devices & control points
--------------------------------------------------------------------------------
Update Information:
New 0.14.1 bugfix
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 30 2010 Peter Robinson <pbrobinson@xxxxxxxxx> 0.14.1-1
- Update to 0.14.1
--------------------------------------------------------------------------------
================================================================================
ibus-anthy-1.2.5-1.fc14 (FEDORA-2010-18392)
The Anthy engine for IBus input platform
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 1 2010 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.2.5-1
- Updated to 1.2.5
Fixed Bug 652881 - SEGV when key tables are customized in new gconf.
Fixed Bug 654322 - new custom keys are not loaded.
--------------------------------------------------------------------------------
================================================================================
input-pad-1.0.0-1.fc14 (FEDORA-2010-18396)
On-screen Input Pad to Send Characters with Mouse
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 30 2010 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.0.0-1
- Bumped to 1.0.0
--------------------------------------------------------------------------------
================================================================================
krb5-1.8.2-7.fc14 (FEDORA-2010-18409)
The Kerberos network authentication system
--------------------------------------------------------------------------------
Update Information:
This update incorporates the upstream patches to correct bugs outlined in MITKRB5-SA-2010-007 (CVE-2010-1323, CVE-2010-1324, and CVE-2010-4020).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 30 2010 Nalin Dahyabhai <nalin@xxxxxxxxxx> 1.8.2-7
- pull up 1.8.2/1.8.3 libk5crypto changes to correct the patch context
- add upstream patch to fix various issues from MITKRB5-SA-2010-007
(CVE-2010-1323, #648734, CVE-2010-1324, #648674, CVE-2010-4020, #648735)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #648734 - CVE-2010-1323 krb5: incorrect acceptance of certain checksums (MITKRB5-SA-2010-007)
https://bugzilla.redhat.com/show_bug.cgi?id=648734
[ 2 ] Bug #648674 - CVE-2010-1324 krb5: multiple checksum handling vulnerabilities (MITKRB5-SA-2010-007)
https://bugzilla.redhat.com/show_bug.cgi?id=648674
[ 3 ] Bug #648735 - CVE-2010-4020 krb5: krb5 may accept authdata checksums with low-entropy derived keys (MITKRB5-SA-2010-007)
https://bugzilla.redhat.com/show_bug.cgi?id=648735
--------------------------------------------------------------------------------
================================================================================
libint-1.1.4-3.fc14 (FEDORA-2010-18389)
A library for computing electron repulsion integrals efficiently
--------------------------------------------------------------------------------
Update Information:
Split libderiv and libr12 in separate packages. Increased value of maximum angular momentum the library can handle to I-type functions.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 30 2010 Jussi Lehtola <jussi.lehtola@xxxxxx> - 1.1.4-3
- Increase maximum angular momentum values by 2, making it possible to
use basis sets that use up to I-type functions, such as Dunning's cc-pVXZ
basis sets.
- Split libderiv and libr12 into their own packages, as e.g. PyQuante currently
only needs the libint library.
--------------------------------------------------------------------------------
================================================================================
libpagemap-0.0.1-3.fc14 (FEDORA-2010-18400)
Pagemap interface library
--------------------------------------------------------------------------------
Update Information:
New package of libpagemap library and related utility pgmap for getting memory stats of processes from kernel pagemap interface.
--------------------------------------------------------------------------------
================================================================================
perl-5.12.2-140.fc14 (FEDORA-2010-18426)
Practical Extraction and Report Language
--------------------------------------------------------------------------------
Update Information:
Security update of perl-CGI. In main perl package was created CGI sub-package, which is updated with new build of CGI.
For more details see upstream message:
http://www.nntp.perl.org/group/perl.perl5.changes/2010/11/msg28043.html
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 1 2010 Marcela MaÅlÃÅovà <mmaslano@xxxxxxxxxx> - 4:5.12.2-140
- create sub-package for CGI 3.49
- create sub-package for threads-shared
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #657950 - perl-5.12.2/CGI-3.50 security update
https://bugzilla.redhat.com/show_bug.cgi?id=657950
--------------------------------------------------------------------------------
================================================================================
perl-CGI-3.50-2.fc14 (FEDORA-2010-18426)
Handle Common Gateway Interface requests and responses
--------------------------------------------------------------------------------
Update Information:
Security update of perl-CGI. In main perl package was created CGI sub-package, which is updated with new build of CGI.
For more details see upstream message:
http://www.nntp.perl.org/group/perl.perl5.changes/2010/11/msg28043.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #657950 - perl-5.12.2/CGI-3.50 security update
https://bugzilla.redhat.com/show_bug.cgi?id=657950
--------------------------------------------------------------------------------
================================================================================
perl-WWW-Curl-4.15-1.fc14 (FEDORA-2010-18408)
Perl extension interface for libcurl
--------------------------------------------------------------------------------
Update Information:
Update to 4.15
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 30 2010 Nicoleau Fabien <nicoleau.fabien@xxxxxxxxx> - 4.15-1
- Update to 4.15
--------------------------------------------------------------------------------
================================================================================
php-pecl-apc-3.1.6-1.fc14 (FEDORA-2010-18422)
APC caches and optimizes PHP intermediate code
--------------------------------------------------------------------------------
Update Information:
Upstream Changelog
* make slam_defense a little more optimistic, allow a thread/process to write to cache in a loop
* ensure realpaths hit the realpath_cache, in no-stat mode
* prevent memory starvation, nuke all caches when expunging just one doesn't work
* fix uploadprogress keylength issues (NUL is part of keylen, pecl bug #20016)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 30 2010 Remi Collet <Fedora@xxxxxxxxxxxxxxxxx> - 3.1.6-1
- update to 3.1.6 (bugfix)
--------------------------------------------------------------------------------
================================================================================
phpwapmail-0.9.4-1.fc14 (FEDORA-2010-18430)
WAP-based e-mail client
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.4 to fix issues with php 5.3 and later
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 1 2010 Dmitry Butskoy <Dmitry@xxxxxxxxxxxx> - 0.9.4-1
- update to 0.9.4
--------------------------------------------------------------------------------
================================================================================
pidgin-2.7.7-1.fc14 (FEDORA-2010-18401)
A Gtk+ based multiprotocol instant messaging client
--------------------------------------------------------------------------------
Update Information:
New release 2.7.7
Full Upstream ChangeLog:
http://developer.pidgin.im/wiki/ChangeLog
The Fedora package disables MSNP16 features of MSN protocol due to regressions retrieving buddy icons & custom emoticons from the official client when enabled.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Stu Tomlinson <stu@xxxxxxxxxxxxx> 2.7.7-1
- 2.7.7
- Disable MSNP16 due to regressions interacting with official client
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #658746 - upstream is 2.7.7
https://bugzilla.redhat.com/show_bug.cgi?id=658746
--------------------------------------------------------------------------------
================================================================================
rec-applet-0.2.3-3.fc14 (FEDORA-2010-18411)
An audio recording applet
--------------------------------------------------------------------------------
Update Information:
An audio recording applet
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #632970 - Review Request: rec-applet - An audio recording applet for the GNOME-desktop
https://bugzilla.redhat.com/show_bug.cgi?id=632970
--------------------------------------------------------------------------------
================================================================================
texmakerx-2.0-1.fc14 (FEDORA-2010-18388)
A feature-rich editor for LaTeX documents
--------------------------------------------------------------------------------
Update Information:
Update to recent upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 1 2010 Johannes Lips <Johannes.Lips googlemail com> 2.0-1
- Update to recent upstream version
- added several other build requirements
* Sat Aug 28 2010 Johannes Lips <Johannes.Lips googlemail com> 1.9.9a-3
- Bump release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #655911 - [abrt] texmakerx-1.9.9a-3.fc14: Process /usr/bin/texmakerx was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=655911
[ 2 ] Bug #648383 - [abrt] texmakerx-1.9.9a-3.fc13: bool: Process /usr/bin/texmakerx was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=648383
[ 3 ] Bug #647582 - [abrt] texmakerx-1.9.9a-3.fc13: size: Process /usr/bin/texmakerx was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=647582
--------------------------------------------------------------------------------
================================================================================
unoconv-0.4-3.fc14 (FEDORA-2010-17709)
Tool to convert between any document format supported by LibreOffice
--------------------------------------------------------------------------------
Update Information:
Packaging fix:
- Added missing Requires on openoffice.org-brand/libreoffice-core
* 0.4 - released 20/10/2010
- Now properly check if there is a GUI attached and terminate() or -unaccept instance
- Added --pipe option to communicate with UNO pipe (Fernando Lucas Rodriguez)
- Added -o/--outputpath option to modify the output path (Fernando Lucas Rodriguez)
- Added support for MediaWiki output (txt)
- Added OpenOffice path to LD_LIBRARY_PATH env var
- Added -nofirstwizard to ooffice invocations
- Improved the unoconv manpage
- Added proper exitcode (Alan D. Salewski)
- Fixed the license conflict between COPYING and header, the license is GPL, not LGPL
- Give a proper error when a library was found, but failed to get imported
- Make errors somewhat more identifiable
- Added -T/--timeout to try to connect every 0.5 second until timeout has reached default: 3 secs)
- Fixed a typo in bydoctype() (Hugo Lopes)
- Updated filter list based on OpenOffice 3.1
- Added Unified Office Format (uot/uos/uop) support
- Update indexes when converting (Winfried Rohr)
- Find soffice.bin binary (once) similarly to finding uno library
- Use soffice.bin binary instead of soffice wrapper so we can more reliable terminate the process
- Added -e/--export to set export filter options (eg. PageRange, Quality, UseLosslessCompression, ...)
- Added -i/--import to set import filter options (eg. utf8)
- Added docs/filters.txt with information about import and export filters
- First update links, then indexes (Nicolae Mihalache)
- Allow to apply a style template during conversion
- Improvements to stdout and stderr messages consistency
- Updated documentation
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 30 2010 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> - 0.4-3
- Add missing Requires on openoffice.org-brand/libreoffice-core. RHBZ#658576
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #658576 - unoconv assumes soffice is installed, but does not Require
https://bugzilla.redhat.com/show_bug.cgi?id=658576
--------------------------------------------------------------------------------
================================================================================
xl2tpd-1.2.7-1.fc14 (FEDORA-2010-18419)
Layer 2 Tunnelling Protocol Daemon (RFC 2661)
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 30 2010 Paul Wouters <paul@xxxxxxxxxxxxx> - 1.2.7-1
- Updated to 1.2.7
- Added more DEBUG build options to the make command
- Minor cleanups
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #547316 - xl2tpd-1.2.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=547316
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
