The following Fedora 14 Security updates need testing:
https://admin.fedoraproject.org/updates/mailman-2.1.13-6.fc14.1
https://admin.fedoraproject.org/updates/exim-4.72-2.fc14
https://admin.fedoraproject.org/updates/bareftp-0.3.7-1.fc14
The following Fedora 14 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/xfce4-notifyd-0.2.0-1.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-4.fc14
https://admin.fedoraproject.org/updates/makebootfat-1.4-11.fc14
https://admin.fedoraproject.org/updates/libwnck-2.30.4-1.fc14
The following builds have been pushed to Fedora 14 updates-testing
and-1.2.2-10.fc14
automaton-1.11r4-1.fc14
bareftp-0.3.7-1.fc14
ccache-3.1.3-1.fc14
directfb-1.4.11-2.fc14
flies-python-client-0.4.0-1.fc14
groonga-1.0.4-1.fc14
gthumb-2.12.1-1.fc14
gtk-vnc-0.4.2-3.fc14
ibus-handwrite-2.1.1-1.fc14
icu-4.4.1-6.fc14
openoffice.org-3.3.0-17.2.fc14
pyqtrailer-0.6.0-1.fc14
python-asyncmongo-0.1-1.fc14
pytrailer-0.6.0-1.fc14
pywebdav-0.9.4-1.fc14
rxvt-unicode-9.09-4.fc14
s3cmd-0.9.9.91-3.fc14
sysvinit-2.87-6.dsf.fc14
telepathy-logger-0.1.7-1.fc14
tuned-0.2.18-1.fc14
wordnet-3.0-14.fc14
Details about builds:
================================================================================
and-1.2.2-10.fc14 (FEDORA-2010-18319)
Auto nice daemon
--------------------------------------------------------------------------------
Update Information:
Set a Req. to and-sysvinit to solve a issue simular
of one in inadyn-mt
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 28 2010 Jochen Schmitt <Jochen herr-schmitt de> - 1.2.2-10
- Add and-sysvinit as an Req.
--------------------------------------------------------------------------------
================================================================================
automaton-1.11r4-1.fc14 (FEDORA-2010-18311)
A Java finite state automata/regular expression library
--------------------------------------------------------------------------------
Update Information:
This update applies a bug fix and performance improvement in BasicOperations.concatenate,
due to R. Muir.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 23 2010 Jerry James <loganjerry(a)gmail.com> - 1.11r4-1
- Upgrade to 1.11-4
- Drop the gcj bits
- Drop the BuildRoot definition
--------------------------------------------------------------------------------
================================================================================
bareftp-0.3.7-1.fc14 (FEDORA-2010-18310)
File transfer client supporting the FTP, FTP over SSL/TLS (FTPS) and SSH
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 26 2010 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> - 0.3.7-1
- new version 0.3.7
* Wed Oct 27 2010 Paul F. Johnson <paul(a)all-the-johnsons.co.uk> - 0.3.6-1
- New version 0.3.6
- Build against mono-2.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #638371 - CVE-2010-3350 bareftp: insecure library loading vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=638371
--------------------------------------------------------------------------------
================================================================================
ccache-3.1.3-1.fc14 (FEDORA-2010-18321)
C/C++ compiler cache
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 3.1.3.
http://ccache.samba.org/releasenotes.html#_ccache_3_1_3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 28 2010 Ville Skyttä <ville.skytta(a)iki.fi> - 3.1.3-1
- Update to 3.1.3, fixes #657857.
* Tue Nov 23 2010 Ville Skyttä <ville.skytta(a)iki.fi> - 3.1.2-1
- Update to 3.1.2.
* Thu Nov 18 2010 Ville Skyttä <ville.skytta(a)iki.fi> - 3.1.1-1
- Update to 3.1.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #657857 - ccache generates invalid error when compiling with specific options,
makes Eclipse projects problematic
https://bugzilla.redhat.com/show_bug.cgi?id=657857
--------------------------------------------------------------------------------
================================================================================
directfb-1.4.11-2.fc14 (FEDORA-2010-18320)
Graphics abstraction library for the Linux Framebuffer Device
--------------------------------------------------------------------------------
Update Information:
Update to lastest current bugfix from 1.4:
http://www.directfb.org/downloads/Core/DirectFB-1.4/NEWS
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Nicolas Chauvet <kwizart(a)gmail.com> - 1.4.11-2
- Keep DirectFB correct ABI
* Wed Nov 24 2010 Nicolas Chauvet <kwizart(a)gmail.com> - 1.4.11-1
- Update to 1.4.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #655958 - directfb-1.4.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=655958
--------------------------------------------------------------------------------
================================================================================
flies-python-client-0.4.0-1.fc14 (FEDORA-2010-18313)
Python Client for Flies Server
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 James Ni <jni(a)redhat.com> - 0.4.0-1
- Add command line option for translation folder and importPo, read and write multiple
locale, read the flies.xml first
* Wed Oct 27 2010 James Ni <jni(a)redhat.com> - 0.3.2-1
- Fix a typo in project creation
* Fri Oct 22 2010 James Ni <jni(a)redhat.com> - 0.3.1-1
- Fix an issue in project creation
* Thu Oct 21 2010 James Ni <jni(a)redhat.com> - 0.3.0-1
- Fix the issues in extension support and update translation command
* Thu Oct 21 2010 James Ni <jni(a)redhat.com> - 0.2.0-1
- Add extension support and update translation command
* Wed Sep 29 2010 James Ni <jni(a)redhat.com> - 0.1.0-1
- Modify the user configuration file and command line options
* Wed Sep 8 2010 James Ni <jni(a)redhat.com> - 0.0.6-1
- Try to resolve the dependency of python-setuptools
--------------------------------------------------------------------------------
================================================================================
groonga-1.0.4-1.fc14 (FEDORA-2010-18322)
An Embeddable Fulltext Search Engine
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Kouhei Sutou <kou(a)clear-code.com> - 1.0.4-1
- new upstream release
* Wed Nov 24 2010 Daiki Ueno <dueno(a)redhat.com> - 1.0.3-2
- %ghost /var/run/*.
* Sat Oct 9 2010 Kouhei Sutou <kou(a)clear-code.com> - 1.0.3-1
- new upstream release.
--------------------------------------------------------------------------------
================================================================================
gthumb-2.12.1-1.fc14 (FEDORA-2010-18316)
Image viewer, editor, organizer
--------------------------------------------------------------------------------
Update Information:
- new bugfix upstream release 2.12.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 17 2010 Christian Krause <chkr(a)fedoraproject.org> - 2.12.1-1
- Update to 2.12.1 (#654748)
- Add 3 upstream patches (to fix bgo: #635475 and two other minor bugs)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #654748 - gthumb-2.12.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=654748
--------------------------------------------------------------------------------
================================================================================
gtk-vnc-0.4.2-3.fc14 (FEDORA-2010-18307)
A GTK2 widget for VNC clients
--------------------------------------------------------------------------------
Update Information:
Fixes mutliple crash scenarios that were impacting
users of virt-manager, virt-viewer and vinagre. Addresses a performance regression seen in
the 0.4.2 release, as compared to 0.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Daniel P. Berrange <berrange(a)redhat.com> - 0.4.2-3
- Re-introduce a server side pixmap via cairo to cache framebuffer (rhbz #657542)
* Mon Nov 29 2010 Daniel P. Berrange <berrange(a)redhat.com> - 0.4.2-2
- Fix crash in TLS shutdown code (rhbz #650601)
- Fix crash in motion event handler (rhbz #650104)
- Fix framebuffer update bounds checking (rhbz #655630)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #650601 - Crash in TLS graceful shutdown during connection close
https://bugzilla.redhat.com/show_bug.cgi?id=650601
[ 2 ] Bug #650104 - Crash in mouse motion event handler if VNC connection has not fully
initialized
https://bugzilla.redhat.com/show_bug.cgi?id=650104
[ 3 ] Bug #655630 - Broken bounds checking on framebuffer updates
https://bugzilla.redhat.com/show_bug.cgi?id=655630
[ 4 ] Bug #657542 - Extremely slow when text is moved
https://bugzilla.redhat.com/show_bug.cgi?id=657542
--------------------------------------------------------------------------------
================================================================================
ibus-handwrite-2.1.1-1.fc14 (FEDORA-2010-18328)
IBus handwrite project
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.1.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 26 2010 Peng Wu <pwu(a)redhat.com> - 2.1.1-1
- Update to version 2.1.1
also add ibus-handwrite-add-tooltip.patch.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #655553 - Handwrite input less than perfect on screens with low horizontal
resolution
https://bugzilla.redhat.com/show_bug.cgi?id=655553
--------------------------------------------------------------------------------
================================================================================
icu-4.4.1-6.fc14 (FEDORA-2010-18324)
International Components for Unicode
--------------------------------------------------------------------------------
Update Information:
Improve Malayalam rendering
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Caolán McNamara <caolanm(a)redhat.com> - 4.4.1-6
- Resolves: rhbz#657964 icu-config bindir returns sbindir
* Thu Nov 25 2010 Caolán McNamara <caolanm(a)redhat.com> - 4.4.1-5
- Resolves: rhbz#654200 revert icu#5431
* Wed Sep 29 2010 jkeating - 4.4.1-4.1
- Rebuilt for gcc bug 634757
* Thu Sep 9 2010 Caolán McNamara <caolanm(a)redhat.com> - 4.4.1-4
- Resolves: rhbz#631403 doxygen no longer generates gifs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #657964 - icu-config --bindir Result Incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=657964
[ 2 ] Bug #654200 - [ml_IN] Rendering with 0D30 and 0D31 breaking in ICU with all fonts
https://bugzilla.redhat.com/show_bug.cgi?id=654200
--------------------------------------------------------------------------------
================================================================================
openoffice.org-3.3.0-17.2.fc14 (FEDORA-2010-18326)
OpenOffice.org comprehensive office suite
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 27 2010 Caolán McNamara <caolanm(a)redhat.com>- 1:3.3.0-17.2
- Resolves: rhbz#657541 don't crash during processing of auto. styles
when joining paragraphs (dtardon)
- Resolves: rhbz#657628 divide-by-zero
* Fri Nov 26 2010 Caolán McNamara <caolanm(a)redhat.com>- 1:3.3.0-17.1
- latest milestone
- Resolves: rhbz#656191 catch bad_alloc when opening corrupt zips
- Resolves: rhbz#652695 release desktop in timeout
- drop integrated 0001-Resolves-rhbz-647392-Ensure-autocorrect-doesn-t-cras.patch
* Thu Nov 25 2010 Caolán McNamara <caolanm(a)redhat.com>- 1:3.3.0-16.4
- Resolves: rhbz#610103 exit quickstarter when libs deleted
* Wed Nov 24 2010 Caolán McNamara <caolanm(a)redhat.com>- 1:3.3.0-16.3
- Related: rhbz#650170 don't crash when quickstarter is exited by user
(dtardon)
- Related: rhbz#610103 avoid obvious crash when upgraded while quick
starter running (caolanm)
* Mon Nov 22 2010 Caolán McNamara <caolanm(a)redhat.com>- 1:3.3.0-16.2
- Resolves: rhbz#652504 [abrt] VbaEventsHelperBase::processVbaEvent
* Sat Nov 20 2010 Caolán McNamara <caolanm(a)redhat.com>- 1:3.3.0-16.1
- QuickStarter is being enabled for next-start when a new extension
is installed/updated.
- Resolves: rhbz#650170 quickstarter safeexit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #657541 - [abrt] SwTxtNode::impl_FmtToTxtAttr
https://bugzilla.redhat.com/show_bug.cgi?id=657541
[ 2 ] Bug #656191 - [abrt] ZipFile::readLOC
https://bugzilla.redhat.com/show_bug.cgi?id=656191
[ 3 ] Bug #652504 - [abrt] VbaEventsHelperBase::processVbaEvent
https://bugzilla.redhat.com/show_bug.cgi?id=652504
[ 4 ] Bug #650170 - [abrt] quickstarter keeps oo.o alive after end of session
https://bugzilla.redhat.com/show_bug.cgi?id=650170
--------------------------------------------------------------------------------
================================================================================
pyqtrailer-0.6.0-1.fc14 (FEDORA-2010-18302)
PyQt4 application to download trailers from
apple.com
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Stanislav Ochotnicky <sochotnicky(a)redhat.com> - 0.6.0-1
- Update to latest upstream version
--------------------------------------------------------------------------------
================================================================================
python-asyncmongo-0.1-1.fc14 (FEDORA-2010-18332)
An asynchronous Python MongoDB library
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #654544 - Review Request: python-asyncmongo - An asynchronous Python MongoDB
library
https://bugzilla.redhat.com/show_bug.cgi?id=654544
--------------------------------------------------------------------------------
================================================================================
pytrailer-0.6.0-1.fc14 (FEDORA-2010-18302)
Python module to simplify access to movie trailers on
apple.com
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Stanislav Ochotnicky <sochotnicky(a)redhat.com> - 0.6.0-1
- Update to latest upstream version
--------------------------------------------------------------------------------
================================================================================
pywebdav-0.9.4-1.fc14 (FEDORA-2010-18305)
WebDAV library
--------------------------------------------------------------------------------
Update Information:
update to upstream bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Dan Horák <dan[at]danny.cz> 0.9.4-1
- update to 0.9.4
--------------------------------------------------------------------------------
================================================================================
rxvt-unicode-9.09-4.fc14 (FEDORA-2010-17884)
Unicode version of rxvt
--------------------------------------------------------------------------------
Update Information:
Provide four versions:
* standard (rxvt-unicode)
* multi-language support (rxvt-unicode-ml)
* 256color version (rxvt-unicode-256color)
* 256color multi-language (rxvt-unicode-256color-ml)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 9.09-4
- include terminfo for 256color version for now
* Thu Nov 18 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 9.09-3
- re-add frills build option for standard versions
- bind scrolling actions to crtl+up/down/pgup/pgdown as shift will break the
tabbing support
* Mon Nov 15 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 9.09-2
- Rework to provide four versions:
- standard (rxvt-unicode)
- multi-language support (rxvt-unicode-ml)
- 256color version (rxvt-unicode-256color)
- 256color multi-language (rxvt-unicode-256color-ml)
* Sun Nov 14 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 9.09-1
- version upgrade (fixes #581373)
- allow scrolling with mod+up/down (#510944)
- fixup desktop file (#617519)
- spec file cleanups
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #581373 - RFE: Apply 256 color patch [PATCH]
https://bugzilla.redhat.com/show_bug.cgi?id=581373
[ 2 ] Bug #510944 - rxvt-unicode single line scrolling patch
https://bugzilla.redhat.com/show_bug.cgi?id=510944
[ 3 ] Bug #617519 - .desktop menu entry has wrong/missing categories
https://bugzilla.redhat.com/show_bug.cgi?id=617519
--------------------------------------------------------------------------------
================================================================================
s3cmd-0.9.9.91-3.fc14 (FEDORA-2010-18308)
Tool for accessing Amazon Simple Storage Service
--------------------------------------------------------------------------------
Update Information:
This new updated package fixes a regression
with newer Python httplib library which caused
crash upon issuing any HTTP request due improperly
formatted Content-Length header.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Lubomir Rintel (GoodData) <lubo.rintel(a)gooddata.com> - 0.9.9.91-3
- Patch for broken f14 httplib
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #657916 - Does not communicate with S3 web services
https://bugzilla.redhat.com/show_bug.cgi?id=657916
--------------------------------------------------------------------------------
================================================================================
sysvinit-2.87-6.dsf.fc14 (FEDORA-2010-18327)
Programs which control basic system processes
--------------------------------------------------------------------------------
Update Information:
This is an update that fixes problem with segfaulting pidof when is called inside script
without non-absolute path in argv[0].
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Petr Lautrbach <plautrba(a)redhat.com> 2.87-6.dsf
- fixed sysvinit-2.87-omit.patch - check return value of canonicalize_file_name()
(#657646)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #657646 - pidof is broken on FC14
https://bugzilla.redhat.com/show_bug.cgi?id=657646
--------------------------------------------------------------------------------
================================================================================
telepathy-logger-0.1.7-1.fc14 (FEDORA-2010-18314)
Telepathy framework logging daemon
--------------------------------------------------------------------------------
Update Information:
Bugfix release:
* Stop using tp_get_bus().
* Loads of memory leaks fixed.
* Don't crash by trying to use the sqlite log store after it has been disposed.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Brian Pepple <bpepple(a)fedoraproject.org> - 0.1.7-1
- Update to 0.1.7.
--------------------------------------------------------------------------------
================================================================================
tuned-0.2.18-1.fc14 (FEDORA-2010-18309)
A dynamic adaptive system tuning daemon
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Jan Vcelak <jvcelak(a)redhat.com> 0.2.18-1
- fix hal-disable-polling if no CD drives present
- setup tmpfiles.d config to autocreate runtime directory on F15
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #641586 - In all ktune.sh scripts of tuned, hal-disable-polling coredumps if
there is no cdrom drive.
https://bugzilla.redhat.com/show_bug.cgi?id=641586
--------------------------------------------------------------------------------
================================================================================
wordnet-3.0-14.fc14 (FEDORA-2010-18325)
A lexical database for the English language
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 29 2010 Petr Pisar <ppisar(a)redhat.com> - 3.0-14
- Remove Makefiles from documentation clashing in multiarch installation
(#658118).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #658118 - File conflicts between wordnet multilib packages
https://bugzilla.redhat.com/show_bug.cgi?id=658118
--------------------------------------------------------------------------------