The following Fedora 13 Security updates need testing:
https://admin.fedoraproject.org/updates/clamav-0.96.5-1300.fc13
https://admin.fedoraproject.org/updates/Ajaxterm-0.10-13.fc13
https://admin.fedoraproject.org/updates/openssl-1.0.0c-1.fc13
https://admin.fedoraproject.org/updates/perl-CGI-Simple-1.112-2.fc13
https://admin.fedoraproject.org/updates/mailman-2.1.12-16.fc13
The following Fedora 13 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/glibc-2.12.2-1
https://admin.fedoraproject.org/updates/pm-utils-1.2.6.1-4.fc13
https://admin.fedoraproject.org/updates/selinux-policy-3.7.19-76.fc13
https://admin.fedoraproject.org/updates/crontabs-1.11-1.20101115git.fc13
https://admin.fedoraproject.org/updates/openssl-1.0.0c-1.fc13
https://admin.fedoraproject.org/updates/xorg-x11-font-utils-7.2-12.fc13
https://admin.fedoraproject.org/updates/elfutils-0.150-2.fc13
https://admin.fedoraproject.org/updates/mingetty-1.08-6.fc13
https://admin.fedoraproject.org/updates/mash-0.5.20-1.fc13
https://admin.fedoraproject.org/updates/openldap-2.4.21-11.fc13
https://admin.fedoraproject.org/updates/nss-3.12.7-4.fc13,nss-util-3.12.7-2.fc13,nss-softokn-3.12.7-3.fc13,nspr-4.8.6-1.fc13
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-7.fc13
The following builds have been pushed to Fedora 13 updates-testing
Ajaxterm-0.10-13.fc13
fsarchiver-0.6.11-1.fc13
glibc-2.12.2-1
openobex-1.4-5.fc13
pm-utils-1.2.6.1-4.fc13
uisp-20050207-7.fc13
wine-1.3.9-1.fc13
xbacklight-1.1.2-1.fc13
youtube-dl-2010.12.09-1.fc13
zarafa-6.40.4-1.fc13
Details about builds:
================================================================================
Ajaxterm-0.10-13.fc13 (FEDORA-2010-18867)
A web-based terminal
--------------------------------------------------------------------------------
Update Information:
Include several fixes from Debian
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 24 2010 Ruben Kerkhof <ruben@xxxxxxxxxxxxxxxx> 0.10-13
- %ghost files in /var/run and /var/lock (#656543)
* Sun Oct 17 2010 Ruben Kerkhof <ruben@xxxxxxxxxxxxxxxx> 0.10-12
- Apply patches from Debian (fixes #635238, #544033, enables UTF-8)
- Cleanup init script
- Add a sysconfig file
- Relocate pidfile to /var/run/ajaxterm/ajaxterm.pid
- Add a README.Fedora
- Add an example config for Apache
* Wed Aug 11 2010 Ruben Kerkhof <ruben@xxxxxxxxxxxxxxxx> 0.10-10
- Rebuild for python 2.7
>>>>>>> master
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #500225 - CVE-2009-1629 AjaxTerm: session id collision
https://bugzilla.redhat.com/show_bug.cgi?id=500225
--------------------------------------------------------------------------------
================================================================================
fsarchiver-0.6.11-1.fc13 (FEDORA-2010-18860)
Safe and flexible file-system backup/deployment tool
--------------------------------------------------------------------------------
Update Information:
Update to new upstream release, which fixes support for btrfs and add a adds an interactive password option.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 12 2010 Adel Gadllah <adel.gadllah@xxxxxxxxx> - 0.6.11-1
- Update to 0.6.11
--------------------------------------------------------------------------------
================================================================================
glibc-2.12.2-1 (FEDORA-2010-18859)
The GNU libc libraries
--------------------------------------------------------------------------------
Update Information:
Update to glibc-2.12.2 release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2010 Andreas Schwab <schwab@xxxxxxxxxx> - 2.12.2-1
- Update to 2.12.2 release
- Declare wcpcpy and wcpncpy only under _GNU_SOURCE
- Fix use of restrict in wchar.h and string.h
- Fix race in qsort_r initialization (BZ#11655)
- Fix IPTOS_CLASS definition (BZ#11903)
- Don't ignore zero TTL in DNS answers
- Fix x86 pthread_cond_signal() FUTEX_WAKE_OP fallback
- Work around kernel rejecting valid absolute timestamps
- Allow aux_cache_file open()ing to fail silently even in the chroot
mode (BZ#11149)
- Fix multiple nss_compat initgroups() bugs (BZ#10085)
- Properly convert f_fsid in statvfs (BZ#11611)
- Define MAP_HUGETLB and SWAP_FLAG_DISCARD
- Avoid too much stack use in fnmatch (BZ#11883)
- Fix comparison in sqrtl for IBM long double 128
- Fix warnings in __bswap_16 (BZ#12194)
- Properly quote output of locale (BZ#11904)
- Fix perturbing in malloc on free (BZ#12140)
- Don't expand DST twice in dl_open
- Fix memory leak for some invalid regular expressions (BZ#12078)
- Linux getifaddrs might return entries with ->ifa_addr being NULL
(BZ#12093)
- Handle large malloc requests (BZ#12005)
- getdents64 fallback d_type support
- Fix register conflict in s390 ____longjmp_chk
- Fix _FORITY_SOURCE version of longjmp for Linux/x86-64 (BZ#11968)
- Fix array overflow in floating point parser (BZ#7066)
- Missing server address again leads to localhost being used (BZ#10851)
- Document M_PERTURB
- Fix vDSO synthetic hwcap handling so they are not masked out from
ld.so.cache matching
- 32bit memset-sse2.S fails with uneven cache size (BZ#12191)
- Verify in ttyname() that the symlink is valid (BZ#12167)
- Fix concurrency problem between dl_open and dl_iterate_phdr
- Fix x86-64 strchr propagation of search byte into all bytes of SSE
register (BZ#12159)
- Fix alignment of AVX safe area on x86-64 (BZ#12113, #643889)
- Don't ignore $ORIGIN in libraries
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #643889 - Dynamic linker failed to align TCB for AVX
https://bugzilla.redhat.com/show_bug.cgi?id=643889
--------------------------------------------------------------------------------
================================================================================
openobex-1.4-5.fc13 (FEDORA-2010-18871)
Library for using OBEX
--------------------------------------------------------------------------------
Update Information:
- update source url
- fix security issue when creating file
- fix obex_object_resume for server side role
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 19 2010 Vojtech Vitek (V-Teq) <vvitek@xxxxxxxxxx> 1.4-5
- update source url
* Mon Oct 18 2010 Vojtech Vitek (V-Teq) <vvitek@xxxxxxxxxx> 1.4-4
- fix security issue when creating file
- fix obex_object_resume for server side role
* Thu Apr 1 2010 Karsten Hopp <karsten@xxxxxxxxxx> 1.4-3.1
- drop excludearch s390 s390x
--------------------------------------------------------------------------------
================================================================================
pm-utils-1.2.6.1-4.fc13 (FEDORA-2010-18853)
Power management utilities and scripts for Fedora
--------------------------------------------------------------------------------
Update Information:
This is an update that fixes the problem with wake up from sleep in case when KMS is used and vga-mode-3 quirk is suggested by HAL.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 6 2010 Jaroslav Åkarvada <jskarvad@xxxxxxxxxx> - 1.2.6.1-4
- Fix quirk name (vga-mode-3) in 98smart-kernel-video (#657952)
* Thu Mar 11 2010 Adam Jackson <ajax@xxxxxxxxxx> 1.2.6.1-3
- Put Requires: hal back, not completely clean yet.
* Thu Mar 11 2010 Adam Jackson <ajax@xxxxxxxxxx> 1.2.6.1-2
- pm-utils-1.2.6.1-open-the-pod-bay-doors.patch: Rewrite on_ac_power to
inspect /sys/class/power_supply directly.
- Drop Requires: hal, since on_ac_power was the only user.
- Drop explicit devel Requires: pkgconfig, rpm generates this for us.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #657952 - Problem with wake up from sleep
https://bugzilla.redhat.com/show_bug.cgi?id=657952
--------------------------------------------------------------------------------
================================================================================
uisp-20050207-7.fc13 (FEDORA-2010-18865)
Universal In-System Programmer for Atmel AVR and 8051
--------------------------------------------------------------------------------
Update Information:
Add support for atmega168.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 12 2010 Lucian Langa <cooly@xxxxxxxxxxxx> - 20050207-7
- add atmega168 support (upstream #4041)
--------------------------------------------------------------------------------
================================================================================
wine-1.3.9-1.fc13 (FEDORA-2010-18848)
A Windows 16/32/64 bit emulator
--------------------------------------------------------------------------------
Update Information:
* Beginnings of support for ActiveX in built-in browser.
* Icons on Internet shortcut menu entries.
* Standardization of code implementing COM interfaces.
* New scheme for auto-generated DLL registrations.
* Translation updates.
* Various bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 11 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.3.9-1
- version upgrade
--------------------------------------------------------------------------------
================================================================================
xbacklight-1.1.2-1.fc13 (FEDORA-2010-18868)
Adjust backlight brightness using RandR
--------------------------------------------------------------------------------
Update Information:
Latest upstream release, with various improvements to the packaging and build process
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2010 Michel Salim <salimma@xxxxxxxxxxxxxxxxx> - 1.1.2-1
- Update to 1.1.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #662506 - xbacklight-1.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=662506
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2010.12.09-1.fc13 (FEDORA-2010-18869)
Small command-line program to download videos from YouTube
--------------------------------------------------------------------------------
Update Information:
- Adjust to recent youtube changes
- support depositfiles.com
Upstream changelog:
https://github.com/rg3/youtube-dl/commits/master
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 12 2010 Till Maas <opensource@xxxxxxxxx> - 2010.12.09-1
- Update to latest release to adjust with youtube changes
* Sat Nov 6 2010 Till Maas <opensource@xxxxxxxxx> - 2010.10.24-1
- Update to latest release
- Adjust to new upstream location at github instead of bitbucket
- add -p to install
- remove index.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #662394 - 2010.10.03 unable to download video
https://bugzilla.redhat.com/show_bug.cgi?id=662394
--------------------------------------------------------------------------------
================================================================================
zarafa-6.40.4-1.fc13 (FEDORA-2010-18857)
Open Source Edition of the Zarafa Collaboration Platform
--------------------------------------------------------------------------------
Update Information:
Changelog 6.40.4 final [24200]
==============================
Important notes:
- Fedora is not shipping the new multi upload of attachments, because it uses the swfupload.swf flash file. Zarafa is not shipping any source code of this MIT licensed file and it hasn't been clarified so far whether Fedora is able to build the source code of this flash file only with an Open Source flash compiler. Fedora's Packaging Guidelines and Policies don't allow to ship flash files that haven't been build from the source ourself.
- Reverted Fix: Z-Push: Newly created items that are send to the server in between batched of the initial sync are send back as adds by the server (was causing a loop because of other missing merges these will all be in Zarafa 6.40.5).
Backend:
- Fix: Search on email domain doesn't return results when searching with the indexer.
- Fix: Segfault zarafa-server 6.40.4. (rare occasion)
- Fix: Setting send-as rights on group is possible but should not work.
- Fix: Error in Thunderbird after moving e-mail
- Fix: Zarafa-server segfault when recovering deleted items.
- Fix: SQL error: Out of range value adjusted for column 'val_hi' in table properties.
- Fix: Some message get multiple add changes during the initial sync.
- Fix: Zarafa-indexer may skip users when server was upgraded from 6.xx to 6.40.
- Fix: Sever thinks that there is a commercial license.
- Fix: Adding public calendar over caldav will use users calendar or show all public calendars.
- Fix: spooler can deadlock.
- Fix: Can delete the task folder via Ical.
- Fix: Can edit private appointments on the iphone/ipad.
- Fix: Send-as rights on group not working.
- Fix: Readable-index.pl doesn't work correctly with v:3 index files.
- Fix: DAgent fallback delivery on mail "parsing failed: 0x00040380".
- Fix: Sendas settings are updated after user is removed in ADS.
- Fix: Zarafa-server 6.40.2 final segfault.
- Fix: Upgrade from enable_sso_ntlmauth to enable_sso is not working correctly.
- Fix: BES5 will not successfully resolve name when there are username who look the same.
- Fix: Server refused to die.
- Fix: Unix socket is created with wrong permissions.
- Fix: Zarafa 6.40.2 seems to have a memleaks. (Rare occasion).
- Fix: Zarafa-backup 6.30.15 segfault public store.
- Fix: Small memleak in the zarafa server.
- Fix: Zarafa-spooler loops with 100% cpu when SMTP server is missing.
Webaccess:
- Improvement: Download all attachments in 1 zip file.
- Improvement: Task recurrence support.
- Improvement: Task request support.
- Fix: Recurring task has no indication that it is recurring.
- Fix: Message with read receipt keeps asking to send a response.
- Fix: Unable to accept/decline task request when it contains an attachment.
- Fix: Accepting task request is not increasing new task counter.
- Fix: Freebusy error in Ooutlook due to setting rights on calendar and not in inbox.
- Fix: When deleting a appointment the pop-up notify attendees does not cancel action on cancel.
- Fix: Multi-upload gives script error in internet explorer.
- Fix: Space for the new flash upload text is not enough for all languages.
- Fix: Very fast dragging & dropping in calendar can result in duplicated or empty appointment.
- Fix: Resize appointment by dragging will go use a wrong start/end time.
- Fix: Appointment marked as unread in your calendar, will be not be marked as read after opening them.
- Fix: Propose new time is shown as 'imput screen'.
- Fix: Cannot create a 0 minute appointment.
- Fix: Send mail button in the Global address book window to local contact doesn't show email address.
- Fix: New>appointment will not take the day you are on in the date picker or selected time in calendar.
- Fix: Move mail without destination folder selected will make mail disappear.
- Fix: Semicolon missing after updating a meeting request.
- Fix: Sending mails to groups fails in webaccess.
- Fix: Meeting request items are not opened in a readmail dialog from inbox folder.
- Fix: Signature drops down two lines in new mail on the first enter done in the body.
- Fix: Reply on a email with email attached will include the attached mail.
- Fix: Creating a recurrent appointment in the webaccess will always trigger the zarafa-fsck with missing property.
- Fix: Private calendar item not respected in list-view in WebAccess.
- Fix: Changing appointment length deletes appointment.
- Fix: Drag email to task button will make the email disappear .
- Fix: Multi-select items in Advanced Find dialogue not possible.
- Fix: From and To columns in Advanced Search windows.
- Fix: Config option in WA to disable html filter.
- Fix: Extra config option in WA to force SSO to be off or on.
- Fix: Extra info Shortkeys help.
- Fix: Items can be moved to root folder.
- Fix: Search combo does not drop down in chrome/safari.
- Fix: Backslashes are discarded when sending plain-text body in Webaccess.
- Fix: Free busy of first appointment is shown when opening series of recurrence.
- Fix: Forwarding email on behalf of will not contain attachment if (auto) saved as draft before sending.
- Fix: Add config option to hide "Delete permanently" button in Restore items wizard.
- Fix: Calendar items not visible selected after switching calendar views.
- Fix: Convert Email to task breaks on umlauts in subject and owner name.
- Fix: Remove an accepted meeting request without sending an update can't be done.
- Fix: Webaccess adds escaping character opening email address with fullname between quotes.
- Fix: Translate HTTP Error Message.
- Fix: Contact birthday: You must specify a valid date.
- Fix: Resize appointment by dragging will go use a wrong start/end time.
- Fix: Deleting a task as assignee will result in a unknown item in you task list.
- Fix: Due date in the past pop-up> Cancel does just continue.
- Fix: Setting a task to complete will not send completion message.
- Fix: Assign task button available in assigned task but does nothing.
- Fix: Not all info filled in in task assign message.
- Fix: Can mark assigned task complete via quick edit.
- Fix: Setting due date of task request on today will give pop-up due date is in the past.
- Fix: Changing appointment length deletes appointment.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 12 2010 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 6.40.4-1
- Upgrade to 6.40.4
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
