The following Fedora 14 Security updates need testing:
https://admin.fedoraproject.org/updates/openttd-1.0.5-1.fc14
https://admin.fedoraproject.org/updates/fontforge-20100501-5.fc14
https://admin.fedoraproject.org/updates/xfig-3.2.5-25.b.fc14
https://admin.fedoraproject.org/updates/thunderbird-3.1.7-2.fc14
https://admin.fedoraproject.org/updates/perl-CGI-Simple-1.112-2.fc14
https://admin.fedoraproject.org/updates/mailman-2.1.13-6.fc14.1
https://admin.fedoraproject.org/updates/exim-4.72-2.fc14
The following Fedora 14 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/selinux-policy-3.9.7-16.fc14
https://admin.fedoraproject.org/updates/pyOpenSSL-0.9-3.fc14
https://admin.fedoraproject.org/updates/e2fsprogs-1.41.12-6.fc14
https://admin.fedoraproject.org/updates/plymouth-0.8.4-0.20100823.7.fc14
https://admin.fedoraproject.org/updates/policycoreutils-2.0.83-33.4.fc14
https://admin.fedoraproject.org/updates/xorg-x11-font-utils-7.4-3.fc14
https://admin.fedoraproject.org/updates/python-decorator-3.2.1-1.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-geode-2.11.10-1.fc14
The following builds have been pushed to Fedora 14 updates-testing
bacula-5.0.3-2.fc14
eclipse-nls-3.6.0.v20100814043401-2.fc14
gnome-phone-manager-0.65-9.fc14
ibus-anthy-1.2.5-3.fc14
ibus-m17n-1.3.1-8.fc14
mcu8051ide-1.3.11-1.fc14
pidgin-latex-1.4.3-1.fc14
qjackctl-0.3.7-1.fc14
qt-4.7.1-5.fc14
sagator-1.2.2-1.fc14
selinux-policy-3.9.7-16.fc14
towhee-6.2.14-1.fc14
wings-1.2-3.fc14
xchat-2.8.8-6.fc14
xmp-3.3.0-2.fc14
Details about builds:
================================================================================
bacula-5.0.3-2.fc14 (FEDORA-2010-18200)
Cross platform network backup for Linux, Unix, Mac and Windows
--------------------------------------------------------------------------------
Update Information:
This is an update that fixes various problems in Bacula.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 26 2010 Jan GÃrig <jgorig@xxxxxxxxxx> - 5.0.3-2
- Fixed previous fix of alternatives
* Wed Nov 24 2010 Jan GÃrig <jgorig@xxxxxxxxxx> 5.0.3-1
- Upgrade to new upstream version and included fixes from Rawhide
- Fixed initscripts (#629697, #556669)
- Fixed openssl patch, thanks to Enrico Scholz (#636619)
- Fixed alternatives for dbcheck (#650224)
- Added director address to default tray monitor config (#626490)
* Wed Sep 29 2010 jkeating - 5.0.2-8.1
- Rebuilt for gcc bug 634757
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #629697 - Bacula daemons do not drop privileges
https://bugzilla.redhat.com/show_bug.cgi?id=629697
[ 2 ] Bug #636619 - -openssl patch is broken
https://bugzilla.redhat.com/show_bug.cgi?id=636619
[ 3 ] Bug #650224 - It appears an incorrect symlink for dbcheck prevents catalog backup
https://bugzilla.redhat.com/show_bug.cgi?id=650224
[ 4 ] Bug #626490 - [abrt] crash in bacula-traymonitor-3.0.3-5.fc12: __strlen_sse2: Process /usr/sbin/bacula-tray-monitor was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=626490
--------------------------------------------------------------------------------
================================================================================
eclipse-nls-3.6.0.v20100814043401-2.fc14 (FEDORA-2010-18790)
Babel language packs for the Eclipse platform and various plug-ins
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Sean Flanigan <sflaniga@xxxxxxxxxx> - 3.6.0.v20100814043401-2
- Tweaked to make rpmlint happy
* Mon Nov 29 2010 Sean Flanigan <sflaniga@xxxxxxxxxx> - 3.6.0.v20100814043401-1
- Updated from upstream to 0.8.0 (3.6.0.v20100814043401); added fa, removed en_CA
* Wed Aug 4 2010 Sean Flanigan <sflaniga@xxxxxxxxxx> - 3.5.0.v20100729072834-1
- Updated from upstream to 0.8.0 RC1 (3.5.0.v20100731072648)
* Mon Aug 2 2010 Sean Flanigan <sflaniga@xxxxxxxxxx> - 3.5.0.v20100729072834-1
- Updated from upstream; added locales ca, en_CA and id.
* Thu Jun 10 2010 Sean Flanigan <sflaniga@xxxxxxxxxx> - 3.5.0.v20090620043401-3
- Marked eclipse-nls as not having debuginfo
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #653344 - Periodic error message: Unknown format at
https://bugzilla.redhat.com/show_bug.cgi?id=653344
--------------------------------------------------------------------------------
================================================================================
gnome-phone-manager-0.65-9.fc14 (FEDORA-2010-18791)
Gnome Phone Manager
--------------------------------------------------------------------------------
Update Information:
This update fixes crashes on startup due to linking old libraries.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Bastien Nocera <bnocera@xxxxxxxxxx> 0.65-9
- Rebuild against GTK2 libraries (#643646)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #643646 - gnome-phone-manager-0.65-8.fc14 links with libraries using gtk2
https://bugzilla.redhat.com/show_bug.cgi?id=643646
--------------------------------------------------------------------------------
================================================================================
ibus-anthy-1.2.5-3.fc14 (FEDORA-2010-18799)
The Anthy engine for IBus input platform
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.2.5-3
- Added ibus-anthy-HEAD.patch
Fixed Bug 661943 - the latest page_size for ibus.LookupTable.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #661943 - [ibus-anthy] candidate page size does not come across without restarting ibus
https://bugzilla.redhat.com/show_bug.cgi?id=661943
--------------------------------------------------------------------------------
================================================================================
ibus-m17n-1.3.1-8.fc14 (FEDORA-2010-18787)
The M17N engine for IBus platform
--------------------------------------------------------------------------------
Update Information:
update ibus-m17n-HEAD.patch
update ibus-m17n-HEAD.patch
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Daiki Ueno <dueno@xxxxxxxxxx> - 1.3.1-8
- Update ibus-m17n-HEAD.patch.
- Lower si-samanala.mim rank per request from a Sinhala user.
* Wed Dec 8 2010 Daiki Ueno <dueno@xxxxxxxxxx> - 1.3.1-7
- Update ibus-m17n-HEAD.patch.
- Fix bug 658336 - ibus-m17n: define the IM ranks in a config file and
not in a compiled binary
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #658336 - ibus-m17n: define the IM ranks in a config file and not in a compiled binary
https://bugzilla.redhat.com/show_bug.cgi?id=658336
--------------------------------------------------------------------------------
================================================================================
mcu8051ide-1.3.11-1.fc14 (FEDORA-2010-18804)
IDE for MCS-51 based microcontrollers
--------------------------------------------------------------------------------
Update Information:
Updated to upstream 1.3.10.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 9 2010 Shakthi Kannan <shakthimaan [AT] fedoraproject DOT org> - 1.3.11-1
- Updated package to 1.3.11 upstream release
* Tue Nov 16 2010 Shakthi Kannan <shakthimaan [AT] fedoraproject DOT org> - 1.3.10-1
- Updated package to 1.3.10 upstream release
--------------------------------------------------------------------------------
================================================================================
pidgin-latex-1.4.3-1.fc14 (FEDORA-2010-18801)
Use LaTeX formulas in your pidgin conversations
--------------------------------------------------------------------------------
Update Information:
Fix chatroom crash caused by wrong order of parameters.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Jussi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 1.4.3-1
- Update to 1.4.3.
--------------------------------------------------------------------------------
================================================================================
qjackctl-0.3.7-1.fc14 (FEDORA-2010-18811)
Qt based JACK control application
--------------------------------------------------------------------------------
Update Information:
* Session widget has session save type preserved as well.
* Connections and the new Messages/Status widgets now have their last open tab preserved across program run-cycles.
* Connections and Patchbay widgets have been finally given up on an old feature request: an Expand All items button.
* A significant UI layout has been made: the Messages and Status widgets were merged into one, giving space to the brand new Session wigdet to be easy accessible from the main panel control window.
* libX11 is now being added explicitly to the build link phase, as seen necessary on some bleeding-edge distros eg. Fedora 13, Debian 6. (closing bug #3050915).
* Input/Output latency options were missing but now finally enabled for the firewire back-end.
* General standard dialog buttons layout is now in place.
* Avoid pre-loading a stalled patchbay definition filename and its nagging error on startup (fixes bug #3017078).
* Client connection retrial logic scrapped. Being a leftover from early ages, when machines were slower and JACK server startup times were longer... now, if it can't connect first time as client, it will tear down the server whether it's starting up still or not at all. (cf. Setup/Settings/Start Delay for the rescue).
* Server name is finally part of the server settings presets, thanks to Fons Adriaensen for the heads-up.
* As a workaround regarding issues switching jack2's backends, Robin Gareus sends us yet another D-Bus metho slot: "preset", (dbus-send --system / org.rncbc.qjackctl.preset string:PRESET). Thanks again.
* Another D-Bus interface slot makes it through implementation: "quit" (eg. usage: dbus-send --system / org.rncbc.qjackctl.quit). Besides, there's also these new JACK session management actions which were being overlooked as well: "load", "save", "savequit" and "savetemplate" are also available as D-Bus method slots.
* Make sure that Patchbay socket names are unique when adding or copying, fixing previous patch by Dominic SacrÃ.
* JACK version is now being shown on the About box (jack2).
* Slight Connections widget behavioral change: (dis)connecting a client (from) to one single port, (dis)connections will be applied in sequence from (to) all client output ports to (from) as many input ports there are in below, one by one (satisfying a 5 year old request from Yann Orlarey, thanks:).
* JACK session support is being introduced.
* Ignore first XRUN occurrence option dropped from statistics.
* Initial widget geometry and visibility persistence logic has been slightly revised as much to avoid crash failures due to wrong main widget hidden state.
* Double-quotes are now being added to device names which include blank characters and were rendering invalid all command line invocation of the classic JACK server (eg. specially due for Portaudio device names on Windows).
* Transport play (rolling) status is now being guarded to avoid backfiring from extraneous transport state changes.
* General source tree layout and build configuration change.
* Italian (it) translation added (by Sergio Atzori).
* Post-shutdown script invocation logic slightly refactored in attempt to enforce its execution on application quit.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Orcan Ogetbil <oget[DOT]fedora[AT]gmail[DOT]com> 0.3.7-1
- New version. Drop upstreamed patch.
- Some cleanup in he specfile.
- Enable portaudio support.
--------------------------------------------------------------------------------
================================================================================
qt-4.7.1-5.fc14 (FEDORA-2010-18808)
Qt toolkit
--------------------------------------------------------------------------------
Update Information:
This update:
* fixes a regression in QTextCursor in 4.7.1 (QTBUG-15857) which made some applications (at least Lokalize and Psi are affected) crash when backspace is used,
* fixes a NULL pointer dereference in the glib event loop integration which caused QGIS (and possibly other applications) to crash under some conditions when the QGtkStyle was used.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 8 2010 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> 4.7.1-5
- make the Assistant QtWebKit dependency removal (#660287) F15+ only for now
- fix QTextCursor crash in Lokalize and Psi (QTBUG-15857, kde#249373, #660028)
- add some more NULL checks to the glib_eventloop_nullcheck patch (#622164)
* Mon Dec 6 2010 Than Ngo <than@xxxxxxxxxx> 4.7.1-4
- bz#660287, using QTextBrowser in assistant to drop qtwebkit dependency
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #660028 - [lokalize] Application Crash with Backspace (qt-4.7.1 bug)
https://bugzilla.redhat.com/show_bug.cgi?id=660028
[ 2 ] Bug #622164 - [abrt] crash in qgis-1.5.0-3.fc13: isEmpty: Process /usr/bin/qgis was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=622164
--------------------------------------------------------------------------------
================================================================================
sagator-1.2.2-1.fc14 (FEDORA-2010-18794)
Antivir/antispam gateway for smtp server
--------------------------------------------------------------------------------
Update Information:
Update to upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 9 2010 Jan ONDREJ (SAL) <ondrejj(at)salstar.sk> - 1.2.2-1
- database creation scripts moved to /usr/share/sagator
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.9.7-16.fc14 (FEDORA-2010-18795)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
- Allow boinc-project to read mtab
- Fixes for clamscan
- Allow mount fowner capability
- Fix the label for wicd log
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.9.7-16
- Allow boinc-project to read mtab
- Fixes for clamscan
* Mon Dec 6 2010 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.9.7-15
- Allow mount fowner capability
- Fix the label for wicd log
- Allow avahi to request the kernel to load a module
- Allow mpd to read alsa config
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #659445 - SELinux empÃche l'accÃs en  execute  à /usr/sbin/rpc.nfsd on /bin/
https://bugzilla.redhat.com/show_bug.cgi?id=659445
[ 2 ] Bug #659205 - SELinux is preventing /bin/mount "fowner" access .
https://bugzilla.redhat.com/show_bug.cgi?id=659205
[ 3 ] Bug #659957 - SELinux is preventing /opt/google/chrome/chrome-sandbox "setsched" access .
https://bugzilla.redhat.com/show_bug.cgi?id=659957
[ 4 ] Bug #660377 - selinux prevent openvpn read certs in user home dir
https://bugzilla.redhat.com/show_bug.cgi?id=660377
[ 5 ] Bug #660016 - SELinux is preventing /bin/bash "execute" access on brprintconflsr3.
https://bugzilla.redhat.com/show_bug.cgi?id=660016
[ 6 ] Bug #660530 - SELinux is preventing /sbin/cgconfigparser "unmount" access .
https://bugzilla.redhat.com/show_bug.cgi?id=660530
[ 7 ] Bug #661259 - SELinux is preventing /var/lib/boinc/slots/3/dnetc "setpgid" access .
https://bugzilla.redhat.com/show_bug.cgi?id=661259
[ 8 ] Bug #650293 - SELinux empÃche l'accÃs en  read  à /var/lib/boinc/projects/www.worldcommunitygrid.org/wcgrid_cep2_qchem_6.19_i686-pc-linux-gnu on /etc/
https://bugzilla.redhat.com/show_bug.cgi?id=650293
[ 9 ] Bug #659620 - SELinux is preventing /usr/sbin/avahi-autoipd "module_request" access on <Unknown>.
https://bugzilla.redhat.com/show_bug.cgi?id=659620
[ 10 ] Bug #564277 - SELinux is preventing /usr/sbin/dnsmasq "setattr" access on /var/log/dnsmasq.
https://bugzilla.redhat.com/show_bug.cgi?id=564277
[ 11 ] Bug #659882 - SELinuxë ëìë /home/hemos/GNUstep/Defaults íì ìììë /lib/upstart/shutdown ì
https://bugzilla.redhat.com/show_bug.cgi?id=659882
[ 12 ] Bug #659949 - SELinux is preventing /usr/bin/mpd "read" access on /usr/share/alsa/alsa.conf.
https://bugzilla.redhat.com/show_bug.cgi?id=659949
[ 13 ] Bug #659932 - SELinux is preventing /usr/bin/python "rename" access on wicd.log.1.
https://bugzilla.redhat.com/show_bug.cgi?id=659932
--------------------------------------------------------------------------------
================================================================================
towhee-6.2.14-1.fc14 (FEDORA-2010-18809)
A Monte Carlo molecular simulation code
--------------------------------------------------------------------------------
Update Information:
Update to 6.2.14, fixing minor errors in forcefield files.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Jussi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 6.2.14-1
- Update to 6.2.14.
* Mon Oct 25 2010 Jussi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 6.2.12-2
- Bump spec due to upgrades of MPICH2 and OpenMPI.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #654795 - towhee-6.2.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=654795
--------------------------------------------------------------------------------
================================================================================
wings-1.2-3.fc14 (FEDORA-2010-18807)
3D Subdivision Modeler
--------------------------------------------------------------------------------
Update Information:
Do not interfere with user-supplied Erlang/OTP libraries (possibly built from sources).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 9 2010 Peter Lemenkov <lemenkov@xxxxxxxxx> - 1.2.0-3
- Explicitly use erl installed into /usr/bin
--------------------------------------------------------------------------------
================================================================================
xchat-2.8.8-6.fc14 (FEDORA-2010-18798)
A popular and easy to use graphical IRC (chat) client
--------------------------------------------------------------------------------
Update Information:
This update adds a dependency on alsa-utils, which contains the aplay utility, which is used by XChat to play event sounds.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> - 1:2.8.8-6
- Requires: alsa-utils for aplay (#661957)
* Mon Nov 15 2010 Owen Taylor <otaylor@xxxxxxxxxx> - 1:2.8.8-5
- Add patch to work with libnotify-0.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #661957 - xchat sound playing method 'Automatic' produces no sound
https://bugzilla.redhat.com/show_bug.cgi?id=661957
--------------------------------------------------------------------------------
================================================================================
xmp-3.3.0-2.fc14 (FEDORA-2010-18792)
A multi-format module player
--------------------------------------------------------------------------------
Update Information:
Fixes a crash in audacious plugin after a broken module file is found in the playlist.
Bugfixes and minor enhancements, upstream changelog: http://sourceforge.net/projects/xmp/files/xmp/3.3.0/ChangeLog/view
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 9 2010 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> 3.3.0-2
- apply upstream patches to fix crash in audacious plugins (bug #660507)
* Sat Dec 4 2010 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> 3.3.0-1
- updated to 3.3.0
- drop obsolete patches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #660507 - [abrt] audacious-2.4.0-3.fc14.1: xmp_smix_softmixer: Process /usr/bin/audacious2 was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=660507
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
