The following Fedora 14 Security updates need testing: https://admin.fedoraproject.org/updates/perl-IO-Socket-SSL-1.37-1.fc14 https://admin.fedoraproject.org/updates/mantis-1.1.8-5.fc14 https://admin.fedoraproject.org/updates/libwmf-0.2.8.4-27.fc14 https://admin.fedoraproject.org/updates/dbus-1.4.0-2.fc14 https://admin.fedoraproject.org/updates/opensc-0.11.13-6.fc14 https://admin.fedoraproject.org/updates/tor-0.2.1.28-1400.fc14 https://admin.fedoraproject.org/updates/eclipse-3.6.1-6.1.fc14 https://admin.fedoraproject.org/updates/git-1.7.3.4-1.fc14 https://admin.fedoraproject.org/updates/drupal-views-6.x.2.12-1.fc14 https://admin.fedoraproject.org/updates/collectd-4.9.4-1.fc14 https://admin.fedoraproject.org/updates/php-5.3.4-1.fc14.1,php-eaccelerator-0.9.6.1-3.fc14,maniadrive-1.2-23.fc14 https://admin.fedoraproject.org/updates/ImageMagick-6.6.4.1-15.fc14 https://admin.fedoraproject.org/updates/perl-CGI-Simple-1.112-2.fc14 https://admin.fedoraproject.org/updates/exim-4.72-2.fc14 The following Fedora 14 Critical Path updates have yet to be approved: https://admin.fedoraproject.org/updates/selinux-policy-3.9.7-19.fc14 https://admin.fedoraproject.org/updates/less-436-7.fc14 https://admin.fedoraproject.org/updates/xorg-x11-font-utils-7.4-4.fc14 https://admin.fedoraproject.org/updates/dbus-1.4.0-2.fc14 https://admin.fedoraproject.org/updates/libical-0.46-2.fc14 https://admin.fedoraproject.org/updates/koji-1.6.0-1.fc14 https://admin.fedoraproject.org/updates/python-decorator-3.2.1-1.fc14 https://admin.fedoraproject.org/updates/xorg-x11-drv-geode-2.11.10-1.fc14 The following builds have been pushed to Fedora 14 updates-testing bc-1.06.95-2.fc14 identicurse-0.4.1-3.fc14 kpackagekit-0.6.3-2.fc14 less-436-7.fc14 metamorphose2-0.7.1-4.fc14 mingw32-sigar-1.6.5-0.3.git833ca18.fc14 olpc-utils-1.2.5-1.fc14 opensc-0.11.13-6.fc14 pootle-2.1.4-1.fc14 python-memcached-1.47-1.fc14 qtscriptgenerator-0.1.0-13.fc14 rubygem-warden-1.0.3-3.fc14 sdlhack-1.1-1.fc14 selinux-policy-3.9.7-19.fc14 sigar-1.6.5-0.1.git833ca18.fc14 telepathy-haze-0.4.0-2.fc14 vlgothic-fonts-20101218-1.fc14 xorg-x11-font-utils-7.4-4.fc14 Details about builds: ================================================================================ bc-1.06.95-2.fc14 (FEDORA-2010-19199) GNU's bc (a numeric processing language) and dc (a calculator) -------------------------------------------------------------------------------- Update Information: - fix possible segfault in arrays handling(debbug #586969) - initialize f_void to work with math lib again(#664080) -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 22 2010 Ondrej Vasik <ovasik@xxxxxxxxxx> 1.06.95-2 - fix possible segfault in arrays handling(debbug #586969) - initialize f_void to work with math lib again(#664080) -------------------------------------------------------------------------------- References: [ 1 ] Bug #664080 - math lib functions no longer work https://bugzilla.redhat.com/show_bug.cgi?id=664080 -------------------------------------------------------------------------------- ================================================================================ identicurse-0.4.1-3.fc14 (FEDORA-2010-19195) Curses based Status.net client -------------------------------------------------------------------------------- Update Information: Package Name: identicurse Short Description: A simple but powerful Identi.ca client with a curses-based UI. -------------------------------------------------------------------------------- References: [ 1 ] Bug #661354 - Review Request: identicurse - Curses based Status.net client https://bugzilla.redhat.com/show_bug.cgi?id=661354 -------------------------------------------------------------------------------- ================================================================================ kpackagekit-0.6.3-2.fc14 (FEDORA-2010-19197) KDE interface for PackageKit -------------------------------------------------------------------------------- Update Information: New bugfix release, namely restores add/remove functionality lost in 0.6.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 22 2010 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.6.3-2 - fix/improve browsing pk categories * Tue Dec 21 2010 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.6.3-1 - kpk-0.6.3 * Wed Dec 15 2010 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> 0.6.3-0.2.20101214 - fetch translations from SVN * Tue Dec 14 2010 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.6.3-0.1.20101214 - 0.6.3 snapshot (sans translations) -------------------------------------------------------------------------------- References: [ 1 ] Bug #654536 - Missing UI elements on "Get and Remove Software" https://bugzilla.redhat.com/show_bug.cgi?id=654536 [ 2 ] Bug #660479 - Cannot select group when mouse needs double click to open folder https://bugzilla.redhat.com/show_bug.cgi?id=660479 -------------------------------------------------------------------------------- ================================================================================ less-436-7.fc14 (FEDORA-2010-19176) A text file browser similar to more, but better -------------------------------------------------------------------------------- Update Information: - Fix for valid empty LESSOPEN pipe output Resolves: #579251, #615303 - The new "--old-bot" option is not documented in the man page Resolves: #510724 - Fix descriptions of some options in online help Resolves: #578289 (Jeff Bastian <jbastian@xxxxxxxxxx>)[IT603793] -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 22 2010 Vojtech Vitek (V-Teq) <vvitek@xxxxxxxxxx> - 436-7 - Fix for valid empty LESSOPEN pipe output Resolves: #579251, #615303 - The new "--old-bot" option is not documented in the man page Resolves: #510724 - Fix descriptions of some options in online help Resolves: #578289 (Jeff Bastian <jbastian@xxxxxxxxxx>)[IT603793] -------------------------------------------------------------------------------- References: [ 1 ] Bug #579251 - less fails to decompress empty files that have been gzipped https://bugzilla.redhat.com/show_bug.cgi?id=579251 [ 2 ] Bug #615303 - less fails to decompress empty files that have been gzipped https://bugzilla.redhat.com/show_bug.cgi?id=615303 [ 3 ] Bug #510724 - The new "--old-bot" option is not documented in the man page for "less" https://bugzilla.redhat.com/show_bug.cgi?id=510724 [ 4 ] Bug #578289 - less online help is incorrect for the descriptions of some options https://bugzilla.redhat.com/show_bug.cgi?id=578289 -------------------------------------------------------------------------------- ================================================================================ metamorphose2-0.7.1-4.fc14 (FEDORA-2010-19182) A cross platform file and folder mass renamer -------------------------------------------------------------------------------- Update Information: Import of metamorphose2 into Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #661660 - Review Request: metamorphose2 - A cross platform file and folder mass renamer https://bugzilla.redhat.com/show_bug.cgi?id=661660 -------------------------------------------------------------------------------- ================================================================================ mingw32-sigar-1.6.5-0.3.git833ca18.fc14 (FEDORA-2010-19187) MinGW Windows sigar library -------------------------------------------------------------------------------- Update Information: Initial import of mingw32-sigar. -------------------------------------------------------------------------------- ================================================================================ olpc-utils-1.2.5-1.fc14 (FEDORA-2010-19180) OLPC utilities -------------------------------------------------------------------------------- Update Information: Various GNOME hardening and screen rotation fixes -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 22 2010 Daniel Drake <dsd@xxxxxxxxxx> - 1.2.5-1 - Drop Xephyr from sisusb setup, protect ~/Activities in GNOME, create default GNOME keyring, sound mixer default tweaks, check and repair bad GNOME config, enable xrandr-1.2 rotation -------------------------------------------------------------------------------- ================================================================================ opensc-0.11.13-6.fc14 (FEDORA-2010-19192) Smart card library and applications -------------------------------------------------------------------------------- Update Information: Fixes CVE-2010-4523 - buffer overflow when some kinds of specially crafted rogue smart cards are used. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 21 2010 Tomas Mraz <tmraz@xxxxxxxxxx> - 0.11.13-6 - fix buffer overflow on rogue card serial numbers * Tue Oct 19 2010 Tomas Mraz <tmraz@xxxxxxxxxx> - 0.11.13-5 - own the _libdir/pkcs11 subdirectory (#644527) * Tue Sep 7 2010 Tomas Mraz <tmraz@xxxxxxxxxx> - 0.11.13-4 - fix build with new pcsc-lite -------------------------------------------------------------------------------- References: [ 1 ] Bug #664831 - CVE-2010-4523 OpenSC: Three stack-based buffer overflows, when processing crafted serial numbers of certain cards https://bugzilla.redhat.com/show_bug.cgi?id=664831 -------------------------------------------------------------------------------- ================================================================================ pootle-2.1.4-1.fc14 (FEDORA-2010-19194) Localization and translation management web application -------------------------------------------------------------------------------- Update Information: **Update to 2.1.4** - Fix quality checks update on file uploads. - Qt ts plurals should now work correctly. - Fix obsolete units now updated when uploading a new file version. - Fix server errors when using turkish Locale. - Fix pt_BR detected as Brazillian Portoguese not Breton -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 17 2010 Dwayne Bailey <dwayne@xxxxxxxxxxxxxxxx> - 2.1.4-1 - Update to 2.1.4 - Fix quality checks update on file uploads. - Qt ts plurals should now work correctly. - Fix obsolete units now updated when uploading a new file version. - Fix server errors when using turkish Locale. - Fix pt_BR detected as Brazillian Portoguese not Breton * Fri Nov 19 2010 Dwayne Bailey <dwayne@xxxxxxxxxxxxxxxx> - 2.1.3-1 - Update to 2.1.3 - Fix data loss bug, recent translations lost when updating from version control - Java properties accepted in any encoding, including UTF-8 - New translations: Chiga, Latvian - Fix for database migration failing for some users - Fix for errors on upgrades for users who deleted the English language - Fix for errors on filenames with spaces and memcached - Many fixes to language detection in GNU Style projects - Various fixes to handling of escaped characters on the translate page -------------------------------------------------------------------------------- ================================================================================ python-memcached-1.47-1.fc14 (FEDORA-2010-19185) A Python memcached client library -------------------------------------------------------------------------------- Update Information: Many bugfixes and a few enhancements. See Changelog for details. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 21 2010 Kevin Fenzi <kevin@xxxxxxxxx> - 1.47-1 - Update to 1.47 -------------------------------------------------------------------------------- ================================================================================ qtscriptgenerator-0.1.0-13.fc14 (FEDORA-2010-19184) A tool to generate Qt bindings for Qt Script -------------------------------------------------------------------------------- Update Information: Rebuild for qt-4.7.1 (webkit) -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 21 2010 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 0.1.0-13 - disable/omit phonon binding for now (#660852) -------------------------------------------------------------------------------- References: [ 1 ] Bug #660852 - FTBFS qtscriptgenerator-0.1.0-12.fc14 https://bugzilla.redhat.com/show_bug.cgi?id=660852 -------------------------------------------------------------------------------- ================================================================================ rubygem-warden-1.0.3-3.fc14 (FEDORA-2010-19201) Rack middle-ware that provides authentication for rack applications -------------------------------------------------------------------------------- Update Information: Initial import. -------------------------------------------------------------------------------- References: [ 1 ] Bug #663653 - Review Request: rubygem-warden - Rack middle-ware that provides authentication https://bugzilla.redhat.com/show_bug.cgi?id=663653 -------------------------------------------------------------------------------- ================================================================================ sdlhack-1.1-1.fc14 (FEDORA-2010-19189) Force full-screen games to minimize -------------------------------------------------------------------------------- References: [ 1 ] Bug #657577 - Review Request: sdlhack - Force full-screen games to minimize https://bugzilla.redhat.com/show_bug.cgi?id=657577 -------------------------------------------------------------------------------- ================================================================================ selinux-policy-3.9.7-19.fc14 (FEDORA-2010-19179) SELinux policy configuration -------------------------------------------------------------------------------- Update Information: - Fixes for passenger policy - Allow staff user to execute mysql -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 22 2010 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.9.7-19 - Fixes for passenger policy - Allow staff user to execute mysql -------------------------------------------------------------------------------- References: [ 1 ] Bug #664049 - KDE: kdepim (akonadi) 4.6 currently doesn't work w. confined domains https://bugzilla.redhat.com/show_bug.cgi?id=664049 [ 2 ] Bug #664122 - SELinux powstrzymuje smokeping.cgi przed uÅywaniem plikÃw z potencjalnie bÅÄdnymi etykietami /var/cache/fontconfig. https://bugzilla.redhat.com/show_bug.cgi?id=664122 -------------------------------------------------------------------------------- ================================================================================ sigar-1.6.5-0.1.git833ca18.fc14 (FEDORA-2010-19196) System Information Gatherer And Reporter -------------------------------------------------------------------------------- Update Information: Import of the sigar package. -------------------------------------------------------------------------------- ================================================================================ telepathy-haze-0.4.0-2.fc14 (FEDORA-2010-19190) A multi-protocol Libpurple connection manager for Telepathy -------------------------------------------------------------------------------- Update Information: Add patch to instantiate the media manager only if the protocol support calls. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 22 2010 Brian Pepple <bpepple@xxxxxxxxxxxxxxxxx> - 0.4.0-2 - Add patch to instantiate the media manager only if the protocol support calls. - Drop buildroot and clean section. No longer needed. -------------------------------------------------------------------------------- ================================================================================ vlgothic-fonts-20101218-1.fc14 (FEDORA-2010-19198) Japanese TrueType font -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 22 2010 Akira TAGOH <tagoh@xxxxxxxxxx> - 20101218-1 - New upstream release. -------------------------------------------------------------------------------- ================================================================================ xorg-x11-font-utils-7.4-4.fc14 (FEDORA-2010-19200) X.Org X11 font utilities -------------------------------------------------------------------------------- Update Information: pushd/popd are slightly evil, removing (#664701, #664699) -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 22 2010 MatÄj Cepl <mcepl@xxxxxxxxxx> - 7.4-4 - pushd/popd are slightly evil, removing (#664701, #664699) -------------------------------------------------------------------------------- References: [ 1 ] Bug #664701 - xorg-x11-fonts-update-dirs should be silent https://bugzilla.redhat.com/show_bug.cgi?id=664701 [ 2 ] Bug #664699 - xorg-x11-fonts-update-dirs is not a /bin/sh script https://bugzilla.redhat.com/show_bug.cgi?id=664699 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test