The following Fedora 14 Security updates need testing: https://admin.fedoraproject.org/updates/wordpress-2.8.6-3.fc14 https://admin.fedoraproject.org/updates/collectd-4.9.4-1.fc14 https://admin.fedoraproject.org/updates/perl-Convert-UUlib-1.34-1.fc14 https://admin.fedoraproject.org/updates/wordpress-mu-2.9.2-2.fc14 https://admin.fedoraproject.org/updates/pyfribidi-0.10.0-1.fc14 https://admin.fedoraproject.org/updates/Django-1.2.4-1.fc14 https://admin.fedoraproject.org/updates/feh-1.10.1-1.fc14 https://admin.fedoraproject.org/updates/socat-1.7.1.3-1.fc14 https://admin.fedoraproject.org/updates/mod_auth_mysql-3.0.0-12.fc14 https://admin.fedoraproject.org/updates/perl-CGI-Simple-1.112-2.fc14 https://admin.fedoraproject.org/updates/exim-4.72-2.fc14 The following Fedora 14 Critical Path updates have yet to be approved: https://admin.fedoraproject.org/updates/cairo-1.10.2-1.fc14 https://admin.fedoraproject.org/updates/xorg-x11-drv-geode-2.11.10-1.fc14 The following builds have been pushed to Fedora 14 updates-testing Django-1.2.4-1.fc14 boost-1.44.0-5.fc14 cairo-1.10.2-1.fc14 dhcp-forwarder-0.8-1400.fc14 ecryptfs-utils-84-2.fc14 emacs-common-ddskk-14.2-1.fc14 feh-1.10.1-1.fc14 gdesklet-SlideShow-0.9-10.fc14 groonga-1.0.6-1.fc14 ibus-1.3.9-2.fc14 identicurse-0.5.1-2.fc14 ipv6calc-0.80.0-1.fc14 iwl6050-firmware-41.28.5.1-2.fc14 latexmk-4.22-1.fc14 ldc-0.9.2-27.20100102hg1705.fc14 libhangul-0.0.12-1.fc14 man-db-2.5.7-7.fc14 mod_auth_mysql-3.0.0-12.fc14 mydns-1.2.8.31-1.fc14 openscada-0.7.0.1-4.fc14 perl-File-Inplace-0.20-1.fc14 perl-XML-TreeBuilder-4.0-3.fc14 phpMyAdmin-3.3.9-1.fc14 pulseaudio-equalizer-2.7-4.fc14 rawtherapee-3.0-0.27.a1.fc14 rubygem-heroku-1.15.1-1.fc14 seamonkey-2.0.11-2.fc14 sems-1.3.1-3.fc14 setroubleshoot-plugins-3.0.9-1.fc14 socat-1.7.1.3-1.fc14 spectrum-1.4.6-1.fc14 star-1.5.1-5.fc14 subversion-1.6.15-1.fc14 tortoisehg-1.1.8-1.fc14 trash-cli-0.11.3-0.1.r315.fc14 Details about builds: ================================================================================ Django-1.2.4-1.fc14 (FEDORA-2011-0120) A high-level Python Web framework -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 3 2011 Steve 'Ashcrow' Milner <me@xxxxxxxxxxxxxxx> - 1.2.4-1 - Update for multiple security issues (see http://www.djangoproject.com/weblog/2010/dec/22/security/) * Sat Oct 9 2010 Steve 'Ashcrow' Milner <me@xxxxxxxxxxxxxxx> - 1.2.3-3 - Now build docs for F12+ - Added Django-remove-djangodocs-ext.patch * Sat Oct 9 2010 Steve 'Ashcrow' Milner <me@xxxxxxxxxxxxxxx> - 1.2.3-2 - Moved to dirhtml for documentation generation -------------------------------------------------------------------------------- References: [ 1 ] Bug #665373 - CVE-2010-4534, CVE-2010-4535 Information leakage and DoS vulnerabilities in Django < 1.2.4 & 1.1.3 https://bugzilla.redhat.com/show_bug.cgi?id=665373 -------------------------------------------------------------------------------- ================================================================================ boost-1.44.0-5.fc14 (FEDORA-2011-0113) The free peer-reviewed portable C++ source libraries -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 3 2011 Petr Machata <pmachata@xxxxxxxxxx> - 1.44.0-5 - Add boost-random DSOs - Resolves: #665679 -------------------------------------------------------------------------------- References: [ 1 ] Bug #665679 - Boost library does not come with libboost_random, so random_device is unusable https://bugzilla.redhat.com/show_bug.cgi?id=665679 -------------------------------------------------------------------------------- ================================================================================ cairo-1.10.2-1.fc14 (FEDORA-2011-0088) A 2D graphics library -------------------------------------------------------------------------------- Update Information: Updates Cairo to the latest bugfix version 1.10.2. Changes: * Fix embedding of grayscale jpegs in PS. * Fix the reported path of extents containing a curve. * Fix the compositing of unaligned boxes. * Reset the clipper in PDF upon finish. * Fix degenerates arcs to become a degenerate line. * Build support for autoconf 2.67 * Fix painting of transformed patterns in PS * Fix the EPS bounding box for PS * Fix the missing content for EPS * Fix regression upon changing page size in PS/PDF * Only use ActualText with PDF-1.5 documents * Fix the bbox for type1 fallbacks. * Reset the color after ending the context in PDF * Fix the advance of subsetted type1 fonts * Fix handling of EXTEND_NONE gradients for PDF * Restrict in-place optimisation for a8 image masks with SOURCE -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 28 2010 Benjamin Otte <otte@xxxxxxxxxx> - 1.10.2-1 - Update to 1.10.2 -------------------------------------------------------------------------------- ================================================================================ dhcp-forwarder-0.8-1400.fc14 (FEDORA-2011-0072) DHCP relay agent -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 3 2011 Enrico Scholz <enrico.scholz@xxxxxxxxxxxxxxxxxxxxxxxxx> - 0.8-1400 - backported patch from 0.9 which allows to run dhcp-fwd and e.g. dnsmasq simultaneously on the same host -------------------------------------------------------------------------------- ================================================================================ ecryptfs-utils-84-2.fc14 (FEDORA-2011-0068) The eCryptfs mount helper and support libraries -------------------------------------------------------------------------------- Update Information: - fix unsigned < 0 test in pkcs11 helper -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 4 2011 Michal Hlavinka <mhlavink@xxxxxxxxxx> - 84-2 - fix unsigned < 0 test (#664474) * Mon Dec 20 2010 Michal Hlavinka <mhlavink@xxxxxxxxxx> - 84-1 - ecryptfs-utils updated to 84 -------------------------------------------------------------------------------- References: [ 1 ] Bug #664474 - calls to i2d_X509 when certificate_blob_size is unsigned https://bugzilla.redhat.com/show_bug.cgi?id=664474 -------------------------------------------------------------------------------- ================================================================================ emacs-common-ddskk-14.2-1.fc14 (FEDORA-2011-0082) Daredevil SKK - Simple Kana to Kanji conversion program for Emacs -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 4 2011 Daiki Ueno <dueno@xxxxxxxxxx> - 14.2-1 - new upstream release - drop dependency on apel * Fri Nov 12 2010 Daiki Ueno <dueno@xxxxxxxxxx> - 14.1-7 - unown %_xemacs_sitepkgdir/etc/ since xemacs-common now owns it (#645621) -------------------------------------------------------------------------------- References: [ 1 ] Bug #666595 - emacs-common-ddskk-14.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=666595 -------------------------------------------------------------------------------- ================================================================================ feh-1.10.1-1.fc14 (FEDORA-2011-0111) Fast command line image viewer using Imlib2 -------------------------------------------------------------------------------- Update Information: New upstream update, fixes security issue -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 29 2010 Andrew Potter <agpotter@xxxxxxxxx> 1.10.1-1 - New upstream release - Closes CVE-2010-2246 by removing option -G, --wget-timestamp -------------------------------------------------------------------------------- References: [ 1 ] Bug #608808 - CVE-2010-2246 Feh: Arbitrary code execution by viewing http images with reload set https://bugzilla.redhat.com/show_bug.cgi?id=608808 -------------------------------------------------------------------------------- ================================================================================ gdesklet-SlideShow-0.9-10.fc14 (FEDORA-2011-0103) A slideshow of collection for gdesklets -------------------------------------------------------------------------------- Update Information: EVR bump to fix tagging problem with 0.9-8 and 0.9-9. https://fedorahosted.org/rel-eng/ticket/4264 -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 3 2011 Jon Ciesla <limb@xxxxxxxxxxxx> - 0.9-10 - EVR bump to solve tagging issue. https://fedorahosted.org/rel-eng/ticket/4264 -------------------------------------------------------------------------------- ================================================================================ groonga-1.0.6-1.fc14 (FEDORA-2011-0104) An Embeddable Fulltext Search Engine -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 31 2010 Kouhei Sutou <kou@xxxxxxxxxxxxxx> - 1.0.6-0 - new upstream release * Wed Dec 29 2010 Kouhei Sutou <kou@xxxxxxxxxxxxxx> - 1.0.5-0 - new upstream release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #666374 - groonga-1.0.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=666374 -------------------------------------------------------------------------------- ================================================================================ ibus-1.3.9-2.fc14 (FEDORA-2011-0094) Intelligent Input Bus for Linux OS -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 4 2011 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.3.9-2 - Update to 1.3.9 Fixed Bug 621795 - crash in ibus_object_destroy Fixed Bug 626652 - ibus memory leak with ibus_input_context_process_key_event Fixed Bug 652157 - Window position of ibus-x11 in ppc64 - Added ibus-541492-xkb.patch Fixed Bug 541492 - ibus needs to support some xkb layout switching Fixed Bug 653806 - ibus-xkb SEGV Fixed race between ibus and gnome-settings-daemon - Added ibus-435880-surrounding-text.patch Fixed Bug 435880 - ibus-gtk requires surrounding-text support Fixed Bug 634829 - ibus_im_context_set_surrounding() to get strings. Fixed Bug 639253 - ibus_engine_delete_surrounding_text with offset. - Added ibus-xx-g-ir-compiler.patch to fix g-ir-compiler error. - Added ibus-xx-workaround-gtk3.patch Workaround for f14 http://koji.fedoraproject.org/koji/taskinfo?taskID=2516604 - Fixed Bug 666427 - ibus requires dbus-x11 -------------------------------------------------------------------------------- References: [ 1 ] Bug #666427 - ibus requires dbus-x11 https://bugzilla.redhat.com/show_bug.cgi?id=666427 -------------------------------------------------------------------------------- ================================================================================ identicurse-0.5.1-2.fc14 (FEDORA-2010-19195) Curses based Status.net client -------------------------------------------------------------------------------- Update Information: Package Name: identicurse Short Description: A simple but powerful Identi.ca client with a curses-based UI. -------------------------------------------------------------------------------- References: [ 1 ] Bug #661354 - Review Request: identicurse - Curses based Status.net client https://bugzilla.redhat.com/show_bug.cgi?id=661354 [ 2 ] Bug #665297 - [abrt] identicurse-0.4.1-3.fc14: identicurse:5:<module>:ImportError: No module named pkg_resources https://bugzilla.redhat.com/show_bug.cgi?id=665297 -------------------------------------------------------------------------------- ================================================================================ ipv6calc-0.80.0-1.fc14 (FEDORA-2011-0105) IPv6 address format change and calculation utility -------------------------------------------------------------------------------- Update Information: It shouldn't crash after: ipv6calc --out -? -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 4 2011 Marcela MaÅlÃÅovà <mmaslano@xxxxxxxxxx> - 0.80.0-1 - update to the latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #603825 - [abrt] crash in ipv6calc-0.73.0-1.fc13: Process /usr/bin/ipv6calc was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=603825 -------------------------------------------------------------------------------- ================================================================================ iwl6050-firmware-41.28.5.1-2.fc14 (FEDORA-2011-0110) Firmware for Intel(R) Wireless WiFi Link 6050 Series Adapters -------------------------------------------------------------------------------- Update Information: Version 41.28.5.1 of uCode for Intel 6150 and 6250 Series Wi-Fi Adapters * support 6150 series of devices * fix 11n "tid not match" issue Version 41.28.5.1 of uCode for Intel 6150 and 6250 Series Wi-Fi Adapters is now available for download from http://www.intellinuxwireless.org/?n=Downloads Changes: - support 6150 series of devices - fix 11n "tid not match" issue -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 3 2011 John W. Linville <linville@xxxxxxxxxxxxx> - 41.28.5.1-2 - need to keep old firmware version available for kernels that need it - use available macros for standard packaging-related commands * Thu Dec 16 2010 John W. Linville <linville@xxxxxxxxxxxxx> - 41.28.5.1-1 - Update for firmware release 41.28.5.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #663721 - Update for iwl6050-firmware version 41.28.5.1 https://bugzilla.redhat.com/show_bug.cgi?id=663721 -------------------------------------------------------------------------------- ================================================================================ latexmk-4.22-1.fc14 (FEDORA-2011-0084) A make-like utility for LaTeX files -------------------------------------------------------------------------------- Update Information: This update introduces all of the bug fixes and enhancements documented for versions 4.20, 4.21, and 4.22 at http://www.phys.psu.edu/~collins/software/latexmk-jcc/versions.html. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 3 2011 Jerry James <loganjerry@xxxxxxxxx> - 4.22-1 - Update to 4.22 (fixes more parse problems, adds biber support) -------------------------------------------------------------------------------- ================================================================================ ldc-0.9.2-27.20100102hg1705.fc14 (FEDORA-2011-0065) A compiler for the D programming language -------------------------------------------------------------------------------- Update Information: Many bug fix and enhancement now gtkd buikd -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 5 2011 Jonathan MERCIER <bioinfornatics at gmail.com> 0.9.2-27.20100102hg1705 - update to latest revision 1705 -------------------------------------------------------------------------------- ================================================================================ libhangul-0.0.12-1.fc14 (FEDORA-2011-0092) Hangul input library -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 4 2011 Daiki Ueno <dueno@xxxxxxxxxx> - 0.0.12-1 - update to 0.0.12 - install %{_bindir}/hangul and locale files. -------------------------------------------------------------------------------- References: [ 1 ] Bug #666921 - libhangul-0.0.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=666921 -------------------------------------------------------------------------------- ================================================================================ man-db-2.5.7-7.fc14 (FEDORA-2011-0069) Database cached manual pager suite -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 4 2011 Ivana Hutarova Varekova <varekova@xxxxxxxxxx> - 2.5.7-7 - Resolves: #658368 fix "man full comman path" problem upstream patch (revision/1276) - Resolves: #654394 - assertion failure on 'man -l' with an uncompressed page upstream patch (revision/1199) -------------------------------------------------------------------------------- References: [ 1 ] Bug #654394 - [abrt] man-db-2.5.7-2.fc14: raise: Process /usr/bin/man was killed by signal 6 (SIGABRT) https://bugzilla.redhat.com/show_bug.cgi?id=654394 -------------------------------------------------------------------------------- ================================================================================ mod_auth_mysql-3.0.0-12.fc14 (FEDORA-2011-0100) Basic authentication for the Apache web server using a MySQL database -------------------------------------------------------------------------------- Update Information: This update fixes a security issue in mod_auth_mysql. A flaw was found in the way mod_auth_mysql escaped certain multibyte-encoded strings. If mod_auth_mysql was configured to use a multibyte character set that allowed a backslash ("\") as part of the character encodings, a remote attacker could inject arbitrary SQL commands into a login request. (CVE-2008-2384) Note: This flaw only affected non-default installations where AuthMySQLCharacterSet is configured to use one of the affected multibyte character sets. Installations that did not use the AuthMySQLCharacterSet configuration option were not vulnerable to this flaw. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 16 2010 Joe Orton <jorton@xxxxxxxxxx> - 1:3.0.0-12 - add security fix for CVE-2008-2384 (#663617) * Sat Jun 19 2010 Joe Orton <jorton@xxxxxxxxxx> - 1:3.0.0-11 - less noise for httpd-mmn BR; package the LICENSE (#605950) -------------------------------------------------------------------------------- References: [ 1 ] Bug #480238 - CVE-2008-2384 mod_auth_mysql: character encoding SQL injection flaw https://bugzilla.redhat.com/show_bug.cgi?id=480238 -------------------------------------------------------------------------------- ================================================================================ mydns-1.2.8.31-1.fc14 (FEDORA-2011-0077) A Database based DNS server -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 24 2010 Itamar Reis Peixoto <itamar@xxxxxxxxxxxxxxxx> - 1.2.8.31-1 - new version -------------------------------------------------------------------------------- ================================================================================ openscada-0.7.0.1-4.fc14 (FEDORA-2011-0117) Open SCADA system project -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 4 2011 Aleksey Popkov <aleksey@xxxxxxxxxx> - 0.7.0.1-4 - My mistake fixing. Sorry! -------------------------------------------------------------------------------- ================================================================================ perl-File-Inplace-0.20-1.fc14 (FEDORA-2011-0080) Perl module for in-place editing of files -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- ================================================================================ perl-XML-TreeBuilder-4.0-3.fc14 (FEDORA-2011-0089) Parser that builds a tree of XML::Element objects -------------------------------------------------------------------------------- Update Information: Rebase on new upstream -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 4 2011 RÃdiger Landmann <r.landmann@xxxxxxxxxx> - 4.0-3 - Add Test::More to build requires * Thu Dec 23 2010 Marcela Maslanova <mmaslano@xxxxxxxxxx> - 4.0-2 - 661697 rebuild for fixing problems with vendorach/lib * Thu Dec 2 2010 Jeff Fearn <jfearn@xxxxxxxxxx> - 4.0-1 - New upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #664360 - Rebase on upstream version 4.0 https://bugzilla.redhat.com/show_bug.cgi?id=664360 -------------------------------------------------------------------------------- ================================================================================ phpMyAdmin-3.3.9-1.fc14 (FEDORA-2011-0081) Web based MySQL browser written in php -------------------------------------------------------------------------------- Update Information: Changes for 3.3.9.0 (2011-01-03) - [doc] Fix references to MySQL doc - [other] Default function for TIMESTAMP, thanks to jirand - jirand - [js] Double quotes were not escaped in generated js - [core] Events were not copied when copying/renaming database - [core] Copy database with view of a view - [replication] Add quotes to database in initial statement, thanks to Craig Duncan - duncan3dc - [pdf schema] Scratchboard for PDF pages not working - [parser] Query for table "level" causes strange display - [parser] Close all opened round -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 3 2011 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 3.3.9-1 - Upstream released 3.3.9 (#666925) -------------------------------------------------------------------------------- References: [ 1 ] Bug #666925 - phpMyAdmin-3.3.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=666925 -------------------------------------------------------------------------------- ================================================================================ pulseaudio-equalizer-2.7-4.fc14 (FEDORA-2011-0097) A 15 Bands Equalizer for PulseAudio -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 3 2011 Hicham HAOUARI <hicham.haouari@xxxxxxxxx> - 2.7-4 - Remove preamp per discussion with upstream, fixes rhbz #639604 - Add man pages -------------------------------------------------------------------------------- References: [ 1 ] Bug #639604 - equalizer resets volume to maximum on every change https://bugzilla.redhat.com/show_bug.cgi?id=639604 -------------------------------------------------------------------------------- ================================================================================ rawtherapee-3.0-0.27.a1.fc14 (FEDORA-2011-0087) Raw image processing software -------------------------------------------------------------------------------- Update Information: Sync upstream -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 3 2011 Thibault North <tnorth@xxxxxxxxxxxxxxxxx> - 3.0-0.27.a1 - Sync with upstream for various bugfixes and enhancements -------------------------------------------------------------------------------- ================================================================================ rubygem-heroku-1.15.1-1.fc14 (FEDORA-2011-0112) Client library and CLI to deploy Rails apps on Heroku -------------------------------------------------------------------------------- Update Information: RubyGem - deploy apps to Heroku -------------------------------------------------------------------------------- References: [ 1 ] Bug #661436 - Review Request: rubygem-heroku - deploy apps to Heroku https://bugzilla.redhat.com/show_bug.cgi?id=661436 -------------------------------------------------------------------------------- ================================================================================ seamonkey-2.0.11-2.fc14 (FEDORA-2011-0090) Web browser, e-mail, news, IRC client, HTML editor -------------------------------------------------------------------------------- Update Information: Fixes a bug where animated gifs aren't displayed correctly. -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 4 2011 Adel Gadllah <adel.gadllah@xxxxxxxxx> 2.0.11-2 - disabled system cairo, breaks animated gifs (rhbz#628331) -------------------------------------------------------------------------------- References: [ 1 ] Bug #628331 - some animated gifs are not properly displayed; bug is cairo related https://bugzilla.redhat.com/show_bug.cgi?id=628331 -------------------------------------------------------------------------------- ================================================================================ sems-1.3.1-3.fc14 (FEDORA-2011-0101) SIP Express Media Server, an extensible SIP media server -------------------------------------------------------------------------------- Update Information: - Fixed linking issues - Fixed segfault in gateway module - Properly install email template for voicemail module - Don't start py_sems by default (causes issues with python2.7) - Ver. 1.3.1 (Fully API/ABI compatible with previous version) Ver 1.3.0 (with lots of bugfixes) - api and abi compatible with previous version. Fixed severe issue, which caused segfaults Several minor bugfixes and one big fix for regression in modules conference and early_media. - Ver. 1.3.1 (Fully API/ABI compatible with previous version) Ver 1.3.0 (with lots of bugfixes) - api and abi compatible with previous version. Fixed severe issue, which caused segfaults Several minor bugfixes and one big fix for regression in modules conference and early_media. - Ver. 1.3.1 (Fully API/ABI compatible with previous version) Ver 1.3.0 (with lots of bugfixes) - api and abi compatible with previous version. Fixed severe issue, which caused segfaults Several minor bugfixes and one big fix for regression in modules conference and early_media. - Fixed segfault in gateway module - Properly install email template for voicemail module - Don't start py_sems by default (causes issues with python2.7) - Ver. 1.3.1 (Fully API/ABI compatible with previous version) Ver 1.3.0 (with lots of bugfixes) - api and abi compatible with previous version. Fixed severe issue, which caused segfaults Several minor bugfixes and one big fix for regression in modules conference and early_media. - Ver. 1.3.1 (Fully API/ABI compatible with previous version) Ver 1.3.0 (with lots of bugfixes) - api and abi compatible with previous version. Fixed severe issue, which caused segfaults Several minor bugfixes and one big fix for regression in modules conference and early_media. - Ver. 1.3.1 (Fully API/ABI compatible with previous version) Ver 1.3.0 (with lots of bugfixes) - api and abi compatible with previous version. Fixed severe issue, which caused segfaults Several minor bugfixes and one big fix for regression in modules conference and early_media. - Fixed segfault in gateway module - Properly install email template for voicemail module - Don't start py_sems by default (causes issues with python2.7) - Ver. 1.3.1 (Fully API/ABI compatible with previous version) Ver 1.3.0 (with lots of bugfixes) - api and abi compatible with previous version. Fixed severe issue, which caused segfaults Several minor bugfixes and one big fix for regression in modules conference and early_media. - Ver. 1.3.1 (Fully API/ABI compatible with previous version) Ver 1.3.0 (with lots of bugfixes) - api and abi compatible with previous version. Fixed severe issue, which caused segfaults Several minor bugfixes and one big fix for regression in modules conference and early_media. - Ver. 1.3.1 (Fully API/ABI compatible with previous version) Ver 1.3.0 (with lots of bugfixes) - api and abi compatible with previous version. Fixed severe issue, which caused segfaults Several minor bugfixes and one big fix for regression in modules conference and early_media. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 3 2011 Peter Lemenkov <lemenkov@xxxxxxxxx> 1.3.1-3 - Fixed linking issues * Wed Dec 29 2010 Peter Lemenkov <lemenkov@xxxxxxxxx> 1.3.1-2 - Fixed segfault in gateway module - Properly install email template for voicemail module - Don't start py_sems by default (causes issues with python2.7) * Mon Dec 27 2010 Peter Lemenkov <lemenkov@xxxxxxxxx> 1.3.1-1 - Ver. 1.3.1 (Bugfix release) * Wed Sep 29 2010 Peter Lemenkov <lemenkov@xxxxxxxxx> 1.3.0-2 - Workaround for missing atomic built-ins in EPEL5 old gcc -------------------------------------------------------------------------------- ================================================================================ setroubleshoot-plugins-3.0.9-1.fc14 (FEDORA-2011-0073) Analysis plugins for use with setroubleshoot -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 3 2011 <dwalsh@xxxxxxxxxx> - 3.0.9-1 - Change catchall plugin to use just the SOURCE not the Full path for the grep example -------------------------------------------------------------------------------- References: [ 1 ] Bug #665505 - SELinux instructions not functional https://bugzilla.redhat.com/show_bug.cgi?id=665505 -------------------------------------------------------------------------------- ================================================================================ socat-1.7.1.3-1.fc14 (FEDORA-2011-0098) Bidirectional data relay between two data channels ('netcat++') -------------------------------------------------------------------------------- Update Information: - Upgrade to 1.7.1.3 - Includes fix for CVE-2010-2799 Stack overflow by lexical scanning of nested character patterns - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=620430 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 23 2010 Paul Wouters <paul@xxxxxxxxxxxxx> - 1.7.1.3-1 - Upgrade to 1.7.1.3 - Includes fix for CVE-2010-2799 Stack overflow by lexical scanning of nested character patterns - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=620430 -------------------------------------------------------------------------------- References: [ 1 ] Bug #620426 - CVE-2010-2799 Socat: Stack overflow by lexical scanning of nested character patterns https://bugzilla.redhat.com/show_bug.cgi?id=620426 -------------------------------------------------------------------------------- ================================================================================ spectrum-1.4.6-1.fc14 (FEDORA-2011-0076) XMPP transport/gateway -------------------------------------------------------------------------------- Update Information: Upgrade to the latest upstream: * Map Extended Away status to Away if particular libpurple protocol plugin does not support XA status. * Added new filetransfer_force_cache_storage=0 config variable to force storing files from legacy network on server. This is also configurable per user via Transport Settings adhoc commands. * Added "Reject all incoming authorizations" Transport Settings option. * Fixed forwarding of initial presence to XMPP user when more resource are connected. * ICQ: working XStatus forwarding from ICQ buddies to XMPP user (not for EPEL-5). * XMPP: Fixed GTalk's new email notification when there are more pending emails. * IRC: Fixed forwarding of IRC users modes changes. * Yahoo: Fixed issues when receiving messages from MSN buddies using Yahoo transport. Thanks to Paolo Encomienda. * GroupWise: Added support, use protocol=groupwise in config file. * spectrumctl: No longer enforce any permissions on filetransfer_cache (it has to be writable by the webserver) * spectrumctl: Remove the --cron option for action 'list' New action 'cron' is now intended for regular cron runs: * It outputs transports that have crashed * Saves backtraces, logs and the current spectrum_version (see new --output-dir option) * Prints location of those files -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 3 2011 MatÄj Cepl <mcepl@xxxxxxxxxx> - 1.4.6-1 - New upstream release. * Wed Dec 29 2010 MatÄj Cepl <mcepl@xxxxxxxxxx> - 1.4.5-2 - Fix ownership and rights of /etc/tmpfiles.d/spectrum.conf. * Tue Dec 28 2010 MatÄj Cepl <mcepl@xxxxxxxxxx> - 1.4.5-1 - New upstream release - Switch off tests, following the upstream. -------------------------------------------------------------------------------- ================================================================================ star-1.5.1-5.fc14 (FEDORA-2011-0107) An archiving tool with ACL support -------------------------------------------------------------------------------- Update Information: - fix segfault with multivol option due to signedness -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 4 2011 Ondrej Vasik <ovasik@xxxxxxxxxx> 1.5.1-5 - fix segfault with multivol option due to signedness(#666015) -------------------------------------------------------------------------------- References: [ 1 ] Bug #666015 - [abrt] star-1.5.1-4.fc14.1: movetcb: Process /usr/bin/star was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=666015 -------------------------------------------------------------------------------- ================================================================================ subversion-1.6.15-1.fc14 (FEDORA-2011-0099) A Modern Concurrent Version Control System -------------------------------------------------------------------------------- Update Information: This release includes the latest Subversion release, fixing several bugs: * improve svnsync handling of dir copies * hide unreadable dirs in mod_dav_svn's GET response * make 'svnmucc propsetf' actually work * limit memory fragmentation in svnserve * fix 'svn export' regression from 1.6.13 * fix 'svn export' mistakenly uri-encodes paths * fix server-side memory leaks triggered by 'blame -g' * prevent crash in mod_dav_svn when using SVNParentPath * allow 'log -g' to continue in the face of invalid mergeinfo * filter unreadable paths for 'svn ls' and 'svn co' * fix abort in 'svn blame -g' * fix file handle leak in ruby bindings * remove check for 1.7-style working copies -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 28 2010 Joe Orton <jorton@xxxxxxxxxx> - 1.6.15-1 - update to 1.6.15 * Sun Oct 17 2010 Ville Skyttà <ville.skytta@xxxxxx> - 1.6.13-3 - Make name based dependencies arch qualified where appropriate (#643714). * Tue Oct 12 2010 Joe Orton <jorton@xxxxxxxxxx> - 1.6.13-2 - trim tools/buildbot, tools/dist from docdir -------------------------------------------------------------------------------- References: [ 1 ] Bug #648664 - Subversion cannot export files with spaces in the filename https://bugzilla.redhat.com/show_bug.cgi?id=648664 [ 2 ] Bug #643714 - subversion-javahl-1.6.12-3.fc14.x86_64 has dependency on subversion.i686 https://bugzilla.redhat.com/show_bug.cgi?id=643714 -------------------------------------------------------------------------------- ================================================================================ tortoisehg-1.1.8-1.fc14 (FEDORA-2011-0075) Mercurial GUI command line tool hgtk -------------------------------------------------------------------------------- Update Information: This is a bug fix release, with minor improvements. Users are recommended to upgrade. See https://bitbucket.org/tortoisehg/stable/wiki/ReleaseNotes#!tortoisehg-118 -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 2 2011 Mads Kiilerich <mads@xxxxxxxxxxxxx> - 1.1.8-1 - tortoisehg-1.1.8 -------------------------------------------------------------------------------- ================================================================================ trash-cli-0.11.3-0.1.r315.fc14 (FEDORA-2011-0119) Command line interface to the freedesktop.org trashcan -------------------------------------------------------------------------------- Update Information: * Update to latest upstream release - inclusion of completed trash-restore -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 4 2011 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.11.3-0.1.r315 - update to latest up stream release - http://pypi.python.org/pypi/trash-cli/ - rename restore-trash to trash-restore : refer comment -------------------------------------------------------------------------------- References: [ 1 ] Bug #659724 - update to latest release https://bugzilla.redhat.com/show_bug.cgi?id=659724 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test