Fedora 11 updates-testing report

[updates at fedoraproject.org]

The following builds have been pushed to Fedora 11 updates-testing

    emesene-1.6.2-1.fc11
    fuse-2.8.4-1.fc11
    kde-plasma-translatoid-1.20-1.fc11
    mrpt-0.9.0-0.1.fc11
    source-highlight-3.1.3-1.fc11
    youtube-dl-2010.06.06-1.fc11

Details about builds:


================================================================================
 emesene-1.6.2-1.fc11 (FEDORA-2010-9696)
 Instant messaging client for Windows Live Messenger network
--------------------------------------------------------------------------------
Update Information:

emesenelib/ProfileManager.py in emesene before 1.6.2 allows local users to
overwrite arbitrary files via a symlink attack on the emsnpic temporary file.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun  8 2010 Rahul Sundaram <sundaram at fedoraproject.org> - 1.6.2-1
- Update to 1.6.2.  Resolves rhbz#601402  CVE-2010-2053
- Update spec to match current guidelines
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #601401 - CVE-2010-2053 emesene: symlink vulnerability allows overwriting arbitrary files
        https://bugzilla.redhat.com/show_bug.cgi?id=601401
--------------------------------------------------------------------------------


================================================================================
 fuse-2.8.4-1.fc11 (FEDORA-2010-9706)
 File System in Userspace (FUSE) utilities
--------------------------------------------------------------------------------
Update Information:

Update to 2.8.4 which, hopefully, fixes issue with race condition while using
.gvfs
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun  8 2010 Peter Lemenkov <lemenkov at gmail.com> 2.8.4-1
- Ver. 2.8.4
- CVE-2009-3297 patch dropped (merged upstream)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #493565 - fuse mounts may hang on xattr retrieval causing numerous problems
        https://bugzilla.redhat.com/show_bug.cgi?id=493565
--------------------------------------------------------------------------------


================================================================================
 kde-plasma-translatoid-1.20-1.fc11 (FEDORA-2010-9680)
 Translator Using Google Translator
--------------------------------------------------------------------------------
Update Information:

-1.2  - Correct Html rending  -1.12  - fix Icon installation
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jun  6 2010 Eli Wapniarski <eli at orbsky.homelinux.org> 1.2
-1.2
- Correct Html rending
-1.12
- fix Icon installation
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #483730 - Review Request: kde-plasma-translatoid - A Google Translation Plasmoid
        https://bugzilla.redhat.com/show_bug.cgi?id=483730
--------------------------------------------------------------------------------


================================================================================
 mrpt-0.9.0-0.1.fc11 (FEDORA-2010-9677)
 Libraries and programs for mobile robot SLAM and navigation
--------------------------------------------------------------------------------
Update Information:

New upstream version.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun  4 2010 - Jose Luis Blanco <joseluisblancoc at gmail.com> 0.9.0-0.1
- Packaging of new upstream version 0.9.0.
--------------------------------------------------------------------------------


================================================================================
 source-highlight-3.1.3-1.fc11 (FEDORA-2010-9710)
 Produces a document with syntax highlighting
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun  4 2010 Leigh Scott <leigh123linux at googlemail.com> - 3.1.3-1
- updated to 3.1.3
- change configure command so it finds boost_regex
- fix source url's
- add devel package
- fix directory ownership
- fix rpath on binary
--------------------------------------------------------------------------------


================================================================================
 youtube-dl-2010.06.06-1.fc11 (FEDORA-2010-9711)
 Small command-line program to download videos from YouTube
--------------------------------------------------------------------------------
Update Information:

A detailed list of changes can be found in the upstream commit history at
http://bitbucket.org/rg3/youtube-dl/changesets
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jun  7 2010 Till Maas <opensource at till.name> - 2010.06.06-1
- Update to latest release
--------------------------------------------------------------------------------