The following Fedora 13 Security updates need testing: https://admin.fedoraproject.org/updates/perl-IO-Socket-SSL-1.37-1.fc13 https://admin.fedoraproject.org/updates/mantis-1.1.8-5.fc13 https://admin.fedoraproject.org/updates/Ajaxterm-0.10-13.fc13 https://admin.fedoraproject.org/updates/libwmf-0.2.8.4-22.fc13 https://admin.fedoraproject.org/updates/opensc-0.11.13-6.fc13 https://admin.fedoraproject.org/updates/tor-0.2.1.28-1300.fc13 https://admin.fedoraproject.org/updates/dbus-1.2.24-2.fc13 https://admin.fedoraproject.org/updates/kernel-2.6.34.7-66.fc13 https://admin.fedoraproject.org/updates/eclipse-3.5.2-4.fc13 https://admin.fedoraproject.org/updates/git-1.7.3.4-1.fc13 https://admin.fedoraproject.org/updates/drupal-views-6.x.2.12-1.fc13 https://admin.fedoraproject.org/updates/php-5.3.4-1.fc13.1,php-eaccelerator-0.9.6.1-3.fc13,maniadrive-1.2-23.fc13 https://admin.fedoraproject.org/updates/ImageMagick-6.5.8.10-7.fc13 https://admin.fedoraproject.org/updates/perl-CGI-Simple-1.112-2.fc13 The following Fedora 13 Critical Path updates have yet to be approved: https://admin.fedoraproject.org/updates/dbus-1.2.24-2.fc13 https://admin.fedoraproject.org/updates/selinux-policy-3.7.19-80.fc13 https://admin.fedoraproject.org/updates/libical-0.46-2.fc13 https://admin.fedoraproject.org/updates/koji-1.6.0-1.fc13 https://admin.fedoraproject.org/updates/pm-utils-1.2.6.1-4.fc13 https://admin.fedoraproject.org/updates/xorg-x11-font-utils-7.2-12.fc13 https://admin.fedoraproject.org/updates/mingetty-1.08-6.fc13 https://admin.fedoraproject.org/updates/mash-0.5.20-1.fc13 https://admin.fedoraproject.org/updates/openldap-2.4.21-11.fc13 https://admin.fedoraproject.org/updates/nss-3.12.7-4.fc13,nss-util-3.12.7-2.fc13,nss-softokn-3.12.7-3.fc13,nspr-4.8.6-1.fc13 https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-7.fc13 The following builds have been pushed to Fedora 13 updates-testing dbus-1.2.24-2.fc13 ibus-m17n-1.3.1-8.fc13 opensc-0.11.13-6.fc13 pootle-2.1.4-1.fc13 python-memcached-1.47-1.fc13 rubygem-warden-1.0.3-3.fc13 sdlhack-1.1-1.fc13 vlgothic-fonts-20101218-1.fc13 Details about builds: ================================================================================ dbus-1.2.24-2.fc13 (FEDORA-2010-19178) D-BUS message bus -------------------------------------------------------------------------------- Update Information: You need to reboot to apply this update. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 21 2010 Colin Walters <walters@xxxxxxxxxx> - 1:1.2.24-2 - CVE-2010-4352 Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=663744 -------------------------------------------------------------------------------- References: [ 1 ] Bug #663673 - CVE-2010-4352 D-BUS: Stack overflow by validating message with excessive number of nested variants https://bugzilla.redhat.com/show_bug.cgi?id=663673 -------------------------------------------------------------------------------- ================================================================================ ibus-m17n-1.3.1-8.fc13 (FEDORA-2010-19191) The M17N engine for IBus platform -------------------------------------------------------------------------------- Update Information: update to 1.3.1-8 for https://bugzilla.redhat.com/show_bug.cgi?id=664638 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 10 2010 Daiki Ueno <dueno@xxxxxxxxxx> - 1.3.1-8 - Update ibus-m17n-HEAD.patch. - Lower si-samanala.mim rank per request from a Sinhala user. * Wed Dec 8 2010 Daiki Ueno <dueno@xxxxxxxxxx> - 1.3.1-7 - Update ibus-m17n-HEAD.patch. - Fix bug 658336 - ibus-m17n: define the IM ranks in a config file and not in a compiled binary * Fri Nov 5 2010 Daiki Ueno <dueno@xxxxxxxxxx> - 1.3.1-6 - Rename ibus-m17n-fedora.patch to ibus-m17n-HEAD.patch since the changes are merged into upstream. - Update ibus-m17n-HEAD.patch with upstream fix 08e06310 - Fix bug 649230 - [si] last input character is committed late in wijesekara input method -------------------------------------------------------------------------------- ================================================================================ opensc-0.11.13-6.fc13 (FEDORA-2010-19193) Smart card library and applications -------------------------------------------------------------------------------- Update Information: Fixes CVE-2010-4523 - buffer overflow when some kinds of specially crafted rogue smart cards are used. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 21 2010 Tomas Mraz <tmraz@xxxxxxxxxx> - 0.11.13-6 - fix buffer overflow on rogue card serial numbers * Tue Oct 19 2010 Tomas Mraz <tmraz@xxxxxxxxxx> - 0.11.13-5 - own the _libdir/pkcs11 subdirectory (#644527) * Tue Sep 7 2010 Tomas Mraz <tmraz@xxxxxxxxxx> - 0.11.13-4 - fix build with new pcsc-lite * Wed Aug 11 2010 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 0.11.13-3 - build against libassuan1 (f14+) * Wed Jun 9 2010 Tomas Mraz <tmraz@xxxxxxxxxx> - 0.11.13-2 - replace file dependency (#601943) -------------------------------------------------------------------------------- References: [ 1 ] Bug #664831 - CVE-2010-4523 OpenSC: Three stack-based buffer overflows, when processing crafted serial numbers of certain cards https://bugzilla.redhat.com/show_bug.cgi?id=664831 -------------------------------------------------------------------------------- ================================================================================ pootle-2.1.4-1.fc13 (FEDORA-2010-19186) Localization and translation management web application -------------------------------------------------------------------------------- Update Information: **Update to 2.1.4** - Fix quality checks update on file uploads. - Qt ts plurals should now work correctly. - Fix obsolete units now updated when uploading a new file version. - Fix server errors when using turkish Locale. - Fix pt_BR detected as Brazillian Portoguese not Breton -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 17 2010 Dwayne Bailey <dwayne@xxxxxxxxxxxxxxxx> - 2.1.4-1 - Update to 2.1.4 - Fix quality checks update on file uploads. - Qt ts plurals should now work correctly. - Fix obsolete units now updated when uploading a new file version. - Fix server errors when using turkish Locale. - Fix pt_BR detected as Brazillian Portoguese not Breton * Fri Nov 19 2010 Dwayne Bailey <dwayne@xxxxxxxxxxxxxxxx> - 2.1.3-1 - Update to 2.1.3 - Fix data loss bug, recent translations lost when updating from version control - Java properties accepted in any encoding, including UTF-8 - New translations: Chiga, Latvian - Fix for database migration failing for some users - Fix for errors on upgrades for users who deleted the English language - Fix for errors on filenames with spaces and memcached - Many fixes to language detection in GNU Style projects - Various fixes to handling of escaped characters on the translate page -------------------------------------------------------------------------------- ================================================================================ python-memcached-1.47-1.fc13 (FEDORA-2010-19177) A Python memcached client library -------------------------------------------------------------------------------- Update Information: Many bugfixes and a few enhancements. See Changelog for details. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 21 2010 Kevin Fenzi <kevin@xxxxxxxxx> - 1.47-1 - Update to 1.47 * Thu Jul 22 2010 David Malcolm <dmalcolm@xxxxxxxxxx> - 1.43-6 - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild -------------------------------------------------------------------------------- ================================================================================ rubygem-warden-1.0.3-3.fc13 (FEDORA-2010-19183) Rack middle-ware that provides authentication for rack applications -------------------------------------------------------------------------------- Update Information: Initial import. -------------------------------------------------------------------------------- References: [ 1 ] Bug #663653 - Review Request: rubygem-warden - Rack middle-ware that provides authentication https://bugzilla.redhat.com/show_bug.cgi?id=663653 -------------------------------------------------------------------------------- ================================================================================ sdlhack-1.1-1.fc13 (FEDORA-2010-19188) Force full-screen games to minimize -------------------------------------------------------------------------------- References: [ 1 ] Bug #657577 - Review Request: sdlhack - Force full-screen games to minimize https://bugzilla.redhat.com/show_bug.cgi?id=657577 -------------------------------------------------------------------------------- ================================================================================ vlgothic-fonts-20101218-1.fc13 (FEDORA-2010-19181) Japanese TrueType font -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 22 2010 Akira TAGOH <tagoh@xxxxxxxxxx> - 20101218-1 - New upstream release. -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test