The following Fedora 13 Security updates need testing:
https://admin.fedoraproject.org/updates/tor-0.2.1.29-1300.fc13
https://admin.fedoraproject.org/updates/SimGear-2.0.0-5.fc13
https://admin.fedoraproject.org/updates/libmodplug-0.8.7-3.fc13
https://admin.fedoraproject.org/updates/feh-1.10.1-1.fc13
https://admin.fedoraproject.org/updates/openldap-2.4.21-12.fc13
https://admin.fedoraproject.org/updates/mingw32-libtiff-3.9.5-1.fc13
https://admin.fedoraproject.org/updates/libcgroup-0.35.1-5.fc13
https://admin.fedoraproject.org/updates/libtiff-3.9.5-1.fc13
https://admin.fedoraproject.org/updates/polkit-0.96-2.fc13
https://admin.fedoraproject.org/updates/mingw32-openssl-1.0.0-0.7.beta4.fc13
https://admin.fedoraproject.org/updates/widelands-0-0.24.build16.fc13
https://admin.fedoraproject.org/updates/xorg-x11-server-utils-7.4-17.fc13
https://admin.fedoraproject.org/updates/mediawiki-1.16.4-58.fc13
https://admin.fedoraproject.org/updates/asterisk-1.6.2.18-1.fc13
https://admin.fedoraproject.org/updates/firefox-3.6.17-1.fc13,mozvoikko-1.0-21.fc13,gnome-web-photo-0.9-19.fc13,perl-Gtk2-MozEmbed-0.08-6.fc13.24,gnome-python2-extras-2.25.3-29.fc13,galeon-2.0.7-40.fc13,thunderbird-3.1.10-1.fc13,xulrunner-1.9.2.17-2.fc13
The following Fedora 13 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/polkit-0.96-2.fc13
https://admin.fedoraproject.org/updates/xorg-x11-drv-penmount-1.4.1-2.fc13
https://admin.fedoraproject.org/updates/python-ethtool-0.7-2.fc13
https://admin.fedoraproject.org/updates/libtiff-3.9.5-1.fc13
https://admin.fedoraproject.org/updates/pygtk2-2.17.0-9.fc13
https://admin.fedoraproject.org/updates/dosfstools-3.0.9-5.fc13
https://admin.fedoraproject.org/updates/libimobiledevice-1.0.6-1.fc13
https://admin.fedoraproject.org/updates/usbmuxd-1.0.7-1.fc13
https://admin.fedoraproject.org/updates/fuse-2.8.5-5.fc13
https://admin.fedoraproject.org/updates/libcgroup-0.35.1-5.fc13
https://admin.fedoraproject.org/updates/openldap-2.4.21-12.fc13
https://admin.fedoraproject.org/updates/livecd-tools-13.2-1.fc13
https://admin.fedoraproject.org/updates/lua-5.1.4-7.fc13
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-7.fc13
https://admin.fedoraproject.org/updates/lldpad-0.9.26-2.fc13
The following builds have been pushed to Fedora 13 updates-testing
agedu-0-2.r9153.fc13
asterisk-1.6.2.18-1.fc13
firefox-3.6.17-1.fc13
galeon-2.0.7-40.fc13
gnome-python2-extras-2.25.3-29.fc13
gnome-web-photo-0.9-19.fc13
jmol-12.0.41-1.fc13
mozvoikko-1.0-21.fc13
nginx-0.8.54-1.fc13
openobex-1.4-6.fc13
perl-Convert-Color-0.08-1.fc13
perl-Gtk2-MozEmbed-0.08-6.fc13.24
python-kitchen-1.0.0-1.fc13
rcssserver3d-0.6.5-1.fc13
simspark-0.2.2-2.fc13
thunderbird-3.1.10-1.fc13
xulrunner-1.9.2.17-2.fc13
Details about builds:
================================================================================
agedu-0-2.r9153.fc13 (FEDORA-2011-6228)
An utility for tracking down wasted disk space
--------------------------------------------------------------------------------
Update Information:
Update to newest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Jussi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 0-2.r9153
- Update to upstream r9153.
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-2.r8928
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Wed Jul 7 2010 Jussi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 0-1.r8928
- Update to upstream r8928.
--------------------------------------------------------------------------------
================================================================================
asterisk-1.6.2.18-1.fc13 (FEDORA-2011-6208)
The Open Source PBX
--------------------------------------------------------------------------------
Update Information:
The Asterisk Development Team has announced the release of Asterisk 1.6.2.18.
This release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/
The release of Asterisk 1.6.2.18 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!
The following is a sample of the issues resolved in this release:
* Only offer codecs both sides support for directmedia.
(Closes issue #17403. Reported, patched by one47)
* Resolution of several DTMF based attended transfer issues.
(Closes issue #17999, #17096, #18395, #17273. Reported by iskatel, gelo,
shihchuan, grecco. Patched by rmudgett)
NOTE: Be sure to read the ChangeLog for more information about these changes.
* Resolve deadlocks related to device states in chan_sip
(Closes issue #18310. Reported, patched by one47. Patched by jpeeler)
* Fix channel redirect out of MeetMe() and other issues with channel softhangup
(Closes issue #18585. Reported by oej. Tested by oej, wedhorn, russellb.
Patched by russellb)
* Fix voicemail sequencing for file based storage.
(Closes issue #18498, #18486. Reported by JJCinAZ, bluefox. Patched by
jpeeler)
* Guard against retransmitting BYEs indefinitely during attended transfers with
chan_sip.
(Review: https://reviewboard.asterisk.org/r/1077/)
In addition to the changes listed above, commits to resolve security issues
AST-2011-005 and AST-2011-006 have been merged into this release. More
information about AST-2011-005 and AST-2011-006 can be found at:
http://downloads.asterisk.org/pub/security/AST-2011-005.pdf
http://downloads.asterisk.org/pub/security/AST-2011-006.pdf
For a full list of changes in this release, please see the ChangeLog:
http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.2.18
The Asterisk Development Team has announced security releases for Asterisk
branches 1.4, 1.6.1, 1.6.2, and 1.8. The available security releases are
released as versions 1.4.40.1, 1.6.1.25, 1.6.2.17.3, and 1.8.3.3.
These releases are available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/releases
The releases of Asterisk 1.4.40.1, 1.6.1.25, 1.6.2.17.3, and 1.8.3.3 resolve two
issues:
* File Descriptor Resource Exhaustion (AST-2011-005)
* Asterisk Manager User Shell Access (AST-2011-006)
The issues and resolutions are described in the AST-2011-005 and AST-2011-006
security advisories.
For more information about the details of these vulnerabilities, please read the
security advisories AST-2011-005 and AST-2011-006, which were released at the
same time as this announcement.
For a full list of changes in the current releases, please see the ChangeLog:
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.40.1
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.1.25
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.17.3
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.3.3
Security advisory AST-2011-005 and AST-2011-006 are available at:
http://downloads.asterisk.org/pub/security/AST-2011-005.pdf
http://downloads.asterisk.org/pub/security/AST-2011-006.pdf
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 1.6.2.18-1
-
- The Asterisk Development Team has announced the release of Asterisk 1.6.2.18.
- This release is available for immediate download at
- http://downloads.asterisk.org/pub/telephony/asterisk/
-
- The release of Asterisk 1.6.2.18 resolves several issues reported by the
- community and would have not been possible without your participation.
- Thank you!
-
- The following is a sample of the issues resolved in this release:
-
- * Only offer codecs both sides support for directmedia.
- (Closes issue #17403. Reported, patched by one47)
-
- * Resolution of several DTMF based attended transfer issues.
- (Closes issue #17999, #17096, #18395, #17273. Reported by iskatel, gelo,
- shihchuan, grecco. Patched by rmudgett)
- NOTE: Be sure to read the ChangeLog for more information about these changes.
-
- * Resolve deadlocks related to device states in chan_sip
- (Closes issue #18310. Reported, patched by one47. Patched by jpeeler)
-
- * Fix channel redirect out of MeetMe() and other issues with channel softhangup
- (Closes issue #18585. Reported by oej. Tested by oej, wedhorn, russellb.
- Patched by russellb)
-
- * Fix voicemail sequencing for file based storage.
- (Closes issue #18498, #18486. Reported by JJCinAZ, bluefox. Patched by
- jpeeler)
-
- * Guard against retransmitting BYEs indefinitely during attended transfers with
- chan_sip.
- (Review: https://reviewboard.asterisk.org/r/1077/)
-
- In addition to the changes listed above, commits to resolve security issues
- AST-2011-005 and AST-2011-006 have been merged into this release. More
- information about AST-2011-005 and AST-2011-006 can be found at:
-
- http://downloads.asterisk.org/pub/security/AST-2011-005.pdf
- http://downloads.asterisk.org/pub/security/AST-2011-006.pdf
-
- For a full list of changes in this release, please see the ChangeLog:
-
- http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.2.18
* Fri Apr 22 2011 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 1.6.2.17.3-1
- The Asterisk Development Team has announced security releases for Asterisk
- branches 1.4, 1.6.1, 1.6.2, and 1.8. The available security releases are
- released as versions 1.4.40.1, 1.6.1.25, 1.6.2.17.3, and 1.8.3.3.
-
- These releases are available for immediate download at
- http://downloads.asterisk.org/pub/telephony/asterisk/releases
-
- The releases of Asterisk 1.4.40.1, 1.6.1.25, 1.6.2.17.3, and 1.8.3.3 resolve two
- issues:
-
- * File Descriptor Resource Exhaustion (AST-2011-005)
- * Asterisk Manager User Shell Access (AST-2011-006)
-
- The issues and resolutions are described in the AST-2011-005 and AST-2011-006
- security advisories.
-
- For more information about the details of these vulnerabilities, please read the
- security advisories AST-2011-005 and AST-2011-006, which were released at the
- same time as this announcement.
-
- For a full list of changes in the current releases, please see the ChangeLog:
-
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.40.1
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.1.25
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.17.3
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.3.3
-
- Security advisory AST-2011-005 and AST-2011-006 are available at:
-
- http://downloads.asterisk.org/pub/security/AST-2011-005.pdf
- http://downloads.asterisk.org/pub/security/AST-2011-006.pdf
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #698916 - CVE-2011-1507 Asterisk: file descriptor resource exhaustion (AST-2011-005)
https://bugzilla.redhat.com/show_bug.cgi?id=698916
[ 2 ] Bug #698917 - CVE-2011-1599 Asterisk: Shell command execution via manager Originate action (AST-2011-006)
https://bugzilla.redhat.com/show_bug.cgi?id=698917
--------------------------------------------------------------------------------
================================================================================
firefox-3.6.17-1.fc13 (FEDORA-2011-6205)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Jan Horak <jhorak@xxxxxxxxxx> - 3.6.17-1
- Update to 3.6.17
* Wed Mar 23 2011 Jan Horak <jhorak@xxxxxxxxxx> - 3.6.16-2
- Enable Mozilla crash reporter
- Disable Mozilla updater
--------------------------------------------------------------------------------
================================================================================
galeon-2.0.7-40.fc13 (FEDORA-2011-6205)
GNOME2 Web browser based on Mozilla
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Jan Horak <jhorak@xxxxxxxxxx> - 2.0.7-40
- Rebuild against newer gecko
--------------------------------------------------------------------------------
================================================================================
gnome-python2-extras-2.25.3-29.fc13 (FEDORA-2011-6205)
Additional PyGNOME Python extension modules
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Jan Horak <jhorak@xxxxxxxxxx> - 2.25.3-29
- Rebuild against newer gecko
--------------------------------------------------------------------------------
================================================================================
gnome-web-photo-0.9-19.fc13 (FEDORA-2011-6205)
HTML pages thumbnailer
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Jan Horak <jhorak@xxxxxxxxxx> - 0.9-19
- Rebuild against newer gecko
--------------------------------------------------------------------------------
================================================================================
jmol-12.0.41-1.fc13 (FEDORA-2011-6222)
An open-source Java viewer for chemical structures in 3D
--------------------------------------------------------------------------------
Update Information:
Update to the 12.0 branch.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Jussi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 12.0.41-1
- Update to 12.0.41.
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 11.8.26-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mozvoikko-1.0-21.fc13 (FEDORA-2011-6205)
Finnish Voikko spell-checker extension for Mozilla programs
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Jan Horak <jhorak@xxxxxxxxxx> - 1.0-21
- Rebuild against newer gecko
--------------------------------------------------------------------------------
================================================================================
nginx-0.8.54-1.fc13 (FEDORA-2011-6224)
Robust, small and high performance HTTP and reverse proxy server
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 27 2011 Jeremy Hinegardner <jeremy at hinegardner dot org> - 0.8.54-1
- Update to new legacy stable 0.8.54
--------------------------------------------------------------------------------
================================================================================
openobex-1.4-6.fc13 (FEDORA-2011-6201)
Library for using OBEX
--------------------------------------------------------------------------------
Update Information:
Drop obex_test program, as it is just for testing purposes and has some problems with multiple stack overflows etc.
rhbz#521663
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Vojtech Vitek (V-Teq) <vvitek@xxxxxxxxxx> - 1.4-6
- Drop obex_test program, as it is just for testing purposes
and has some problems with multiple stack overflows etc.
Resolves: #521663
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #521663 - openobex-apps: Multiple stack overflows in OpenOBEX interactive test application
https://bugzilla.redhat.com/show_bug.cgi?id=521663
--------------------------------------------------------------------------------
================================================================================
perl-Convert-Color-0.08-1.fc13 (FEDORA-2011-6212)
Color space conversions and named lookups
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Ralf CorsÃpius <corsepiu@xxxxxxxxxxxxxxxxx> 0.08-1
- Upstream update.
- Spec cleanup.
--------------------------------------------------------------------------------
================================================================================
perl-Gtk2-MozEmbed-0.08-6.fc13.24 (FEDORA-2011-6205)
Interface to the Mozilla embedding widget
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Jan Horak <jhorak@xxxxxxxxxx> - 0.08-6.24
- Rebuild against newer gecko
--------------------------------------------------------------------------------
================================================================================
python-kitchen-1.0.0-1.fc13 (FEDORA-2011-6209)
Small, useful pieces of code to make python coding easier
--------------------------------------------------------------------------------
Update Information:
Update to the 1.0 final release. Has a few documentation updates and cleanups for potential unicode problems exposed by unicodenazi.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 14 2011 Toshio Kuratomi <toshio@xxxxxxxxxxxxxxxxx> - 1.0.0-1
- Upstream update to 1.0 final
--------------------------------------------------------------------------------
================================================================================
rcssserver3d-0.6.5-1.fc13 (FEDORA-2011-6216)
Robocup 3D Soccer Simulation Server
--------------------------------------------------------------------------------
Update Information:
This updates brings the latest version of simspark/rcssserver3d to the users. It brings many enhancements which can be found in the project page.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 27 2011 Hedayat Vatankhah <hedayat.fwd+rpmchlog@xxxxxxxxx> - 0.6.5-1
- Updated to 0.6.5 release
- Added a patch to use correct ODE flags
- Added COPYING to -doc subpackage because of the new guidelines
--------------------------------------------------------------------------------
================================================================================
simspark-0.2.2-2.fc13 (FEDORA-2011-6216)
Spark physical simulation system
--------------------------------------------------------------------------------
Update Information:
This updates brings the latest version of simspark/rcssserver3d to the users. It brings many enhancements which can be found in the project page.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 27 2011 Hedayat Vatankhah <hedayat.fwd+rpmchlog@xxxxxxxxx> - 0.2.2-2
- Link against the correct ode library
* Wed Apr 27 2011 Hedayat Vatankhah <hedayat.fwd+rpmchlog@xxxxxxxxx> - 0.2.2-1
- Updated to latest release 0.2.2
- Fixed multilib conflict in config scripts (rh #507983)
--------------------------------------------------------------------------------
================================================================================
thunderbird-3.1.10-1.fc13 (FEDORA-2011-6205)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Jan Horak <jhorak@xxxxxxxxxx> - 3.1.10-1
- Update to 3.1.10
* Wed Apr 20 2011 Christopher Aillon <caillon@xxxxxxxxxx> - 3.1.9-2
- Drop the -lightning subpackage, it needs to be in its own SRPM
--------------------------------------------------------------------------------
================================================================================
xulrunner-1.9.2.17-2.fc13 (FEDORA-2011-6205)
XUL Runtime for Gecko Applications
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2011 Jan Horak <jhorak@xxxxxxxxxx> - 1.9.2.17-2
- Update to 1.9.2.17
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
