The following Fedora 14 Security updates need testing:
https://admin.fedoraproject.org/updates/tomcat6-6.0.26-20.fc14
https://admin.fedoraproject.org/updates/couchdb-1.0.2-1.fc14
https://admin.fedoraproject.org/updates/tor-0.2.1.29-1400.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
https://admin.fedoraproject.org/updates/mediawiki-1.16.4-57.fc14
https://admin.fedoraproject.org/updates/fail2ban-0.8.4-27.fc14
https://admin.fedoraproject.org/updates/perl-Mojolicious-0.999929-2.fc14
https://admin.fedoraproject.org/updates/feh-1.10.1-1.fc14
https://admin.fedoraproject.org/updates/avahi-0.6.27-6.fc14
https://admin.fedoraproject.org/updates/libtiff-3.9.5-1.fc14
https://admin.fedoraproject.org/updates/darktable-0.8-7.fc14.1,exiv2-0.21.1-1.fc14,geeqie-1.0-9.fc14.1,gipfel-0.3.2-7.fc14,gnome-commander-1.2.8.10-1.fc14.1,gpscorrelate-1.6.1-3.fc14,gthumb-2.12.2-1.fc14.2,hugin-2010.2.0-2.fc14,immix-1.3.2-10.fc14,kde-l10n-4.6.2-1.fc14.1,kdeaccessibility-4.6.2-1.fc14,kdeadmin-4.6.2-2.fc14,kdeartwork-4.6.2-1.fc14,kdebase-4.6.2-1.fc14,kdebase-runtime-4.6.2-1.fc14,kdebase-workspace-4.6.2-2.fc14,kdebindings-4.6.2-1.fc14,kdeedu-4.6.2-1.fc14,kdegames-4.6.2-1.fc14,kdegraphics-4.6.2-1.fc14,kdelibs-4.6.2-1.fc14,kdemultimedia-4.6.2-1.fc14,kdenetwork-4.6.2-1.fc14,kdepimlibs-4.6.2-1.fc14,kdeplasma-addons-4.6.2-1.fc14,kdesdk-4.6.2-1.fc14,kdetoys-4.6.2-1.fc14,kdeutils-4.6.2-1.fc14,koffice-2.3.3-1.fc14.1,kphotoalbum-4.1.1-8.fc14,krename-4.0.7-2.fc14,libextractor-0.6.2-1402.fc14,libgexiv2-0.2.2-2.fc14,merkaartor-0.17.2-2.fc14,oxygen-icon-theme-4.6.2-1.fc14,pyexiv2-0.3.0-1.fc14,qtpfsgui-1.9.3-6.fc14,rawstudio-2.0-0.1.fc14.beta1.1,shotwell-0.8.1-3.fc14,strigi-0.7.2-5.fc14.1,ufraw-0.18-2.fc14.1
https://admin.fedoraproject.org/updates/python-feedparser-5.0.1-1.fc14
https://admin.fedoraproject.org/updates/ikiwiki-3.20110328-1.fc14
https://admin.fedoraproject.org/updates/krb5-1.8.2-10.fc14
The following Fedora 14 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/pygtk2-2.17.0-8.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-nouveau-0.0.16-14.20101010git8c8f15c.fc14
https://admin.fedoraproject.org/updates/dosfstools-3.0.9-6.fc14
https://admin.fedoraproject.org/updates/libimobiledevice-1.0.6-1.fc14
https://admin.fedoraproject.org/updates/libconcord-0.23-5.fc14,udev-161-9.fc14,concordance-0.23-2.fc14
https://admin.fedoraproject.org/updates/usbmuxd-1.0.7-1.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
https://admin.fedoraproject.org/updates/avahi-0.6.27-6.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-geode-2.11.11-4.fc14
The following builds have been pushed to Fedora 14 updates-testing
Coin2-2.5.0-10.fc14
fail2ban-0.8.4-27.fc14
gphotoframe-1.3-1.fc14
knights-2.3.1-1.fc14
libburn-1.0.6-1.fc14
mfiler3-4.2.8-1.fc14
perl-Class-MethodMaker-2.18-1.fc14
perl-Mojolicious-0.999929-2.fc14
perl-Test-CheckManifest-1.24-1.fc14
perl-Test-Command-0.08-1.fc14
php-pear-MDB2-2.5.0-0.3.b3.fc14
php-pear-MDB2-Driver-mysql-1.5.0-0.1.b3.fc14
php-pear-MDB2-Driver-mysqli-1.5.0-0.1.b3.fc14
php-pear-MDB2-Driver-pgsql-1.5.0-0.1.b3.fc14
python-dulwich-0.7.1-1.fc14
saphire-1.4.2-1.fc14
Details about builds:
================================================================================
Coin2-2.5.0-10.fc14 (FEDORA-2011-5503)
High-level 3D visualization library
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.5.0-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Wed Sep 29 2010 Ralf CorsÃpius <corsepiu@xxxxxxxxxxxxxxxxx> - 2.5.0-9
- Reflect upstream having changed URL.
- Introduce alternative coin-config to allow parallel installation of
other Coin*-devel packages.
- Further minor *.spec cleanups.
--------------------------------------------------------------------------------
================================================================================
fail2ban-0.8.4-27.fc14 (FEDORA-2011-5153)
Ban IPs that make too many password failures
--------------------------------------------------------------------------------
Update Information:
fail2ban used predictable /tmp files which a local user can allocate before fail2ban does. All tmp files have been moved to /var/lib/fail2ban. This also helps with selinux policies.
Another security related fix is that fail2ban defaulted to gamin which conflicts with selinux, so users had to typically choose between fail2ban and selinux. fail2ban now defaults to inotify (thanks to Jonathan Underwood).
There are also some minor bugs fixed:
* tmpfiles.d support for tmpfs /var/run
* example mail domains changed to normalized example.com.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 9 2011 Axel Thimm <Axel.Thimm@xxxxxxxxxx> - 0.8.4-27
- Move tmp files to /var/lib (suggested by Phil Anderson).
- Enable inotify support (by Jonathan Underwood).
- Fixes RH bugs #669966, #669965, #551895, #552947, #658849, #656584.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #669966 - fail2ban can't work with tmp files
https://bugzilla.redhat.com/show_bug.cgi?id=669966
[ 2 ] Bug #669965 - unsafe use of /tmp
https://bugzilla.redhat.com/show_bug.cgi?id=669965
[ 3 ] Bug #551895 - RFE: Add patch to enable inotify support
https://bugzilla.redhat.com/show_bug.cgi?id=551895
[ 4 ] Bug #552947 - RFE: conform fail2ban example email sending domains to RFC 2606
https://bugzilla.redhat.com/show_bug.cgi?id=552947
[ 5 ] Bug #658849 - Please change fail2ban to not use gam_server
https://bugzilla.redhat.com/show_bug.cgi?id=658849
[ 6 ] Bug #656584 - Please Update Spec File to use %ghost on files in /var/run and /var/lock
https://bugzilla.redhat.com/show_bug.cgi?id=656584
--------------------------------------------------------------------------------
================================================================================
gphotoframe-1.3-1.fc14 (FEDORA-2011-5512)
Photo Frame Gadget for the GNOME Desktop
--------------------------------------------------------------------------------
Update Information:
New version 1.3 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 17 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.3-1
- 1.3
* Tue Apr 12 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.3-0.3.rc2
- 1.3 rc2
* Sat Apr 2 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxxxx> - 1.3-0.2.b2
- 1.3 b2
* Thu Mar 24 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.3-0.1.b1
- Try 1.3 b1
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2-1.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
knights-2.3.1-1.fc14 (FEDORA-2011-5498)
A chess board for KDE
--------------------------------------------------------------------------------
Update Information:
Update to latest
upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 21 2011 Julian Aloofi <julian@xxxxxxxxxxxxxxxxx> 2.3.1-1
- update to latest upstream release
--------------------------------------------------------------------------------
================================================================================
libburn-1.0.6-1.fc14 (FEDORA-2011-5509)
Library for reading, mastering and writing optical discs
--------------------------------------------------------------------------------
Update Information:
Changes towards previous version 1.0.4:
* Burning DVD-R DAO with 2 kB size granularity rather than 32 kB
* New API call burn_allow_drive_role_4()
Changes towards previous version 1.0.2:
* Bug fix: Read-only file descriptors were classified as write-only pseudo drives
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 17 2011 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 1.0.6-1
- Update to upstream 1.0.6
--------------------------------------------------------------------------------
================================================================================
mfiler3-4.2.8-1.fc14 (FEDORA-2011-5508)
Two pane file manager under UNIX console
--------------------------------------------------------------------------------
Update Information:
saphire 1.4.2 / mfiler3 4.2.8 are released.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 16 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 4.2.8-1
- 4.2.8
- enable gc on F-14+
* Thu Apr 14 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 4.2.7-2
- Fix compilation error with saphire 1.4.0 (and actually fix
symbol error)
- Prefer less over lv for help pager
--------------------------------------------------------------------------------
================================================================================
perl-Class-MethodMaker-2.18-1.fc14 (FEDORA-2011-5500)
Perl module for creating generic object-oriented methods
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 17 2011 Ralf CorsÃpius <corsepiu@xxxxxxxxxxxxxxxxx> - 2.18-1
- Upstream update.
--------------------------------------------------------------------------------
================================================================================
perl-Mojolicious-0.999929-2.fc14 (FEDORA-2011-5504)
A next generation web framework for Perl
--------------------------------------------------------------------------------
Update Information:
Security bugfix backport attempt.
http://blog.kraih.com/mojolicious-116-emergency-release-please-upgr
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 17 2011 Yanko Kaneti <yaneti@xxxxxxxxxxx> 0.999929-2
- Security bugfix attempt.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #697230 - perl-Mojolicious: directory traversal flaw [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=697230
--------------------------------------------------------------------------------
================================================================================
perl-Test-CheckManifest-1.24-1.fc14 (FEDORA-2011-5507)
Check if your Manifest matches your distro
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 17 2011 Ralf CorsÃpius <corsepiu@xxxxxxxxxxxxxxxxx> 1.24-1
- Upstream update.
--------------------------------------------------------------------------------
================================================================================
perl-Test-Command-0.08-1.fc14 (FEDORA-2011-5502)
Test routines for external commands
--------------------------------------------------------------------------------
Update Information:
Test::Command intends to bridge the gap between the well tested
functions and objects you choose and their usage in your programs.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #683257 - Review Request: perl-Test-Command - Test routines for external commands
https://bugzilla.redhat.com/show_bug.cgi?id=683257
--------------------------------------------------------------------------------
================================================================================
php-pear-MDB2-2.5.0-0.3.b3.fc14 (FEDORA-2011-5506)
Database Abstraction Layer
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version.
Upstream Changelog:
* http://pear.php.net/package/MDB2/download/All
* http://pear.php.net/package/MDB2_Driver_mysql/download/All
* http://pear.php.net/package/MDB2_Driver_mysqli/download/All
* http://pear.php.net/package/MDB2_Driver_pgsql/download/All
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 17 2011 Remi Collet <Fedora@xxxxxxxxxxxxxxxxx> 2.5.0-0.3.b3
- doc in /usr/share/doc/pear
- update to 2.5.0b3
- move MDB2.xml to php-pear-MDB2.xml
--------------------------------------------------------------------------------
================================================================================
php-pear-MDB2-Driver-mysql-1.5.0-0.1.b3.fc14 (FEDORA-2011-5506)
MySQL MDB2 driver
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version.
Upstream Changelog:
* http://pear.php.net/package/MDB2/download/All
* http://pear.php.net/package/MDB2_Driver_mysql/download/All
* http://pear.php.net/package/MDB2_Driver_mysqli/download/All
* http://pear.php.net/package/MDB2_Driver_pgsql/download/All
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 2 2010 Remi Collet <Fedora@xxxxxxxxxxxxxxxxx> - 1.5.0-0.1.b3
- update to 1.5.0b3
- move MDB2_Driver_mysql.xml to php-pear-MDB2-Driver-mysql.xml
--------------------------------------------------------------------------------
================================================================================
php-pear-MDB2-Driver-mysqli-1.5.0-0.1.b3.fc14 (FEDORA-2011-5506)
MySQL Improved MDB2 driver
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version.
Upstream Changelog:
* http://pear.php.net/package/MDB2/download/All
* http://pear.php.net/package/MDB2_Driver_mysql/download/All
* http://pear.php.net/package/MDB2_Driver_mysqli/download/All
* http://pear.php.net/package/MDB2_Driver_pgsql/download/All
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 2 2010 Remi Collet <Fedora@xxxxxxxxxxxxxxxxx> - 1.5.0-0.1.b3
- update to 1.5.0b3
- move MDB2_Driver_mysqli.xml to php-pear-MDB2-Driver-mysqli.xml
--------------------------------------------------------------------------------
================================================================================
php-pear-MDB2-Driver-pgsql-1.5.0-0.1.b3.fc14 (FEDORA-2011-5506)
PostgreSQL MDB2 driver
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version.
Upstream Changelog:
* http://pear.php.net/package/MDB2/download/All
* http://pear.php.net/package/MDB2_Driver_mysql/download/All
* http://pear.php.net/package/MDB2_Driver_mysqli/download/All
* http://pear.php.net/package/MDB2_Driver_pgsql/download/All
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 2 2010 Remi Collet <Fedora@xxxxxxxxxxxxxxxxx> - 1.5.0-0.1.b3
- update to 1.5.0b3
- move MDB2_Driver_pgsql.xml to php-pear-MDB2-Driver-pgsql.xml
--------------------------------------------------------------------------------
================================================================================
python-dulwich-0.7.1-1.fc14 (FEDORA-2011-5501)
A python implementation of the Git file formats and protocols
--------------------------------------------------------------------------------
Update Information:
* Sun Apr 17 2011 Fabian Affolter <fabian@xxxxxxxxxxxxxxxxx> - 0.7.1-1
- Updated to new upstream version 0.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 17 2011 Fabian Affolter <fabian@xxxxxxxxxxxxxxxxx> - 0.7.1-1
- Updated to new upstream version 0.7.1
* Fri Mar 11 2011 Fabian Affolter <fabian@xxxxxxxxxxxxxxxxx> - 0.7.0-3
- Test section reworked
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.7.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Thu Jan 27 2011 Fabian Affolter <fabian@xxxxxxxxxxxxxxxxx> - 0.7.0-1
- Updated to new upstream version 0.7.0
--------------------------------------------------------------------------------
================================================================================
saphire-1.4.2-1.fc14 (FEDORA-2011-5508)
Yet another shell
--------------------------------------------------------------------------------
Update Information:
saphire 1.4.2 / mfiler3 4.2.8 are released.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 16 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.4.2-1
- 1.4.2
- Use gc for F-14+
* Wed Apr 13 2011 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1.4.0-1
- 1.4.0
- Prefer less over lv for help pager
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
