Fedora 11 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Tue Mar 23 23:40:23 UTC 2010


The following builds have been pushed to Fedora 11 updates-testing

    autoarchive-0.2.0-1.fc11
    climm-0.7.1-2.fc11
    ecryptfs-utils-83-2.fc11
    gnote-0.6.4-2.fc11
    ifuse-1.0.0-1.fc11
    kmplayer-0.11.2a-1.fc11
    libimobiledevice-1.0.0-1.fc11
    nut-2.4.3-2.fc11
    openssl-0.9.8m-1.fc11
    pdfresurrect-0.10-1.fc11
    spamass-milter-0.3.1-17.fc11
    usbmuxd-1.0.3-1.fc11
    xapian-bindings-1.0.18-1.fc11
    xapian-core-1.0.18-1.fc11

Details about builds:


================================================================================
 autoarchive-0.2.0-1.fc11 (FEDORA-2010-5077)
 A simple backup tool that uses tar
--------------------------------------------------------------------------------
Update Information:

* Sat Mar 20 2010 Fabian Affolter <fabian at bernewireless.net> - 0.2.0-1  -
Changed man page compression format  - Added xz as a BR  - Updated to new
upstreaqm version 0.2.0
--------------------------------------------------------------------------------
ChangeLog:

* Sat Mar 20 2010 Fabian Affolter <fabian at bernewireless.net> - 0.2.0-1
- Changed man page compression format
- Added xz as a BR
- Updated to new upstreaqm version 0.2.0
--------------------------------------------------------------------------------


================================================================================
 climm-0.7.1-2.fc11 (FEDORA-2010-5108)
 Text/line based ICQ client with many features
--------------------------------------------------------------------------------
Update Information:

Update to upstream.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Mar 21 2010 Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 0.7.1-2
- Update to upstream
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 ecryptfs-utils-83-2.fc11 (FEDORA-2010-5137)
 The eCryptfs mount helper and support libraries
--------------------------------------------------------------------------------
Update Information:

ads PKCS#11 module support
--------------------------------------------------------------------------------
ChangeLog:

* Mon Mar 22 2010 Michal Hlavinka <mhlavink at redhat.com> - 83-2
- enable PKCS#11 support
--------------------------------------------------------------------------------


================================================================================
 gnote-0.6.4-2.fc11 (FEDORA-2010-5110)
 Note-taking application
--------------------------------------------------------------------------------
Update Information:

Many bug fixes    http://mail.gnome.org/archives/gnote-
list/2010-March/msg00019.html
--------------------------------------------------------------------------------
ChangeLog:

* Tue Mar 23 2010 Rahul Sundaram <sundaram at fedoraproject.org> - 0.6.4-2
- libuuid-devel deosn't exist in Fedora 11
* Mon Mar 22 2010 Rahul Sundaram <sundaram at fedoraproject.org> - 0.6.4-1
- Update to 0.6.4
- http://mail.gnome.org/archives/gnote-list/2010-March/msg00019.html
--------------------------------------------------------------------------------


================================================================================
 ifuse-1.0.0-1.fc11 (FEDORA-2010-5161)
 Mount Apple iPhone and iPod touch devices
--------------------------------------------------------------------------------
ChangeLog:

* Sun Mar 21 2010 Peter Robinson <pbrobinson at gmail.com> 1.0.0-1
- New upstream stable 1.0.0 release
--------------------------------------------------------------------------------


================================================================================
 kmplayer-0.11.2a-1.fc11 (FEDORA-2010-5107)
 A simple frontend for MPlayer/FFMpeg/Phonon
--------------------------------------------------------------------------------
Update Information:

- Add 'escape-uri' and 'contains' expression functions, support for '.' node  -
Fix slider hiding when mplayer starts and no length available  - TV device
scanner fix, recognize v4l2 inputs and fix detection when done  - Fix opening
multiple files on commandline  - smilText improvements, support transition and
background attributes  - Fix load-on-demand icon not shown for plugin  - SMIL
support for paramGroup and mediaAlign attributes
--------------------------------------------------------------------------------
ChangeLog:

* Tue Mar 23 2010 Orcan Ogetbil <oget[DOT]fedora[AT]gmail[DOT]com> - 0.11.2a-1
- kmplayer-0.11.2a
--------------------------------------------------------------------------------


================================================================================
 libimobiledevice-1.0.0-1.fc11 (FEDORA-2010-5161)
 Library for connecting to mobile devices
--------------------------------------------------------------------------------
ChangeLog:

* Sun Mar 21 2010 Peter Robinson <pbrobinson at gmail.com> 1.0.0-1
- New upstream stable 1.0.0 release
* Mon Feb 15 2010 Peter Robinson <pbrobinson at gmail.com> 0.9.7-3
- Add patch to fix DSO linking. Fixes bug 565084
--------------------------------------------------------------------------------


================================================================================
 nut-2.4.3-2.fc11 (FEDORA-2010-5124)
 Network UPS Tools
--------------------------------------------------------------------------------
Update Information:

- reduced size of buffer to maximum size supported by low-speed USB devices,
which fixes some recent usbhid-ups problems
--------------------------------------------------------------------------------
ChangeLog:

* Tue Mar 23 2010 Michal Hlavinka <mhlavink at redhat.com> - 2.4.3-2
- reduced size of buffer to maximum size supported by low-speed USB devices
- fixes #575334
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #575334 - nut.x86_64 0:2.4.3-1.fc12 upgrade breaks cyberpower 800AVS setup
        https://bugzilla.redhat.com/show_bug.cgi?id=575334
--------------------------------------------------------------------------------


================================================================================
 openssl-0.9.8m-1.fc11 (FEDORA-2010-5153)
 A general purpose cryptography library with TLS implementation
--------------------------------------------------------------------------------
Update Information:

This is a minor update from upstream with one  additional fix for CVE-2010-0433
vulnerability. It  contains these additional security fixes: CVE-2009-3555,
CVE-2009-3245, and CVE-2009-4355.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Mar 22 2010 Tomas Mraz <tmraz at redhat.com> 0.9.8m-1
- fix CVE-2009-3245 CVE-2009-3555 CVE-2009-4355 CVE-2010-0433
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #533125 - CVE-2009-3555 TLS: MITM attacks via session renegotiation
        https://bugzilla.redhat.com/show_bug.cgi?id=533125
  [ 2 ] Bug #570924 - CVE-2009-3245 openssl: missing bn_wexpand return value checks
        https://bugzilla.redhat.com/show_bug.cgi?id=570924
  [ 3 ] Bug #546707 - CVE-2009-4355 openssl significant memory leak in certain SSLv3 requests (DoS)
        https://bugzilla.redhat.com/show_bug.cgi?id=546707
  [ 4 ] Bug #569774 - CVE-2010-0433 openssl: crash caused by a missing krb5_sname_to_principal() return value check
        https://bugzilla.redhat.com/show_bug.cgi?id=569774
--------------------------------------------------------------------------------


================================================================================
 pdfresurrect-0.10-1.fc11 (FEDORA-2010-5089)
 PDF Analysis and Scrubbing Utility
--------------------------------------------------------------------------------
Update Information:

Ver. 0.10 (with minor bugfix)
--------------------------------------------------------------------------------
ChangeLog:

* Tue Mar 23 2010 Peter Lemenkov <lemenkov at gmail.com> 0.10-1
- Ver. 0.10
--------------------------------------------------------------------------------


================================================================================
 spamass-milter-0.3.1-17.fc11 (FEDORA-2010-5176)
 Milter (mail filter) for spamassassin
--------------------------------------------------------------------------------
Update Information:

This update includes a fix for a problem where if the milter is running using
the "-x" option to expand aliases before passing inbound mail through
SpamAssassin, a malicious client using a carefully-crafted SMTP session could
execute arbitrary code on the mail server. The fix avoids the use of a shell in
the alias expansion and hence there is no longer a problem with having to
sanitize input from the client.    No CVE number has yet been assigned to this
problem, which is tracked upstream at https://savannah.nongnu.org/bugs/?29136
The update also contains a fix for a problem where the milter would erroneously
log warnings about the mail server's configuration when the first message from a
non-authenticated client passed through. As part of the fix for this issue, the
required milter macro configuration for the mail server has changed slightly:
see the README file included in the package for details.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Mar 12 2010 Paul Howarth <paul at city-fan.org> 0.3.1-17
- Update initscript to support running the milter as root, which is needed
  for the -x (expand aliases) option; note that the milter does not run as
  root by default
- Add patch for popen unsanitized input vulnerability
  (#572117, #572119, https://savannah.nongnu.org/bugs/?29136)
- Rebase authuser patch
- Update patch adding auth info to dummy Received-header so that it doesn't
  generate spurious warnings about missing macros (#532266), and update and
  merge the macro documentation patch into this patch
- Document patch usage in spec file
* Tue Aug 11 2009 Paul Howarth <paul at city-fan.org> 0.3.1-16
- Switch to bzipped source tarball
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> 0.3.1-15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #572117 - SpamAssassin Mail Filter: Arbitrary shell command injection (privilege escalation)
        https://bugzilla.redhat.com/show_bug.cgi?id=572117
--------------------------------------------------------------------------------


================================================================================
 usbmuxd-1.0.3-1.fc11 (FEDORA-2010-5128)
 Daemon for communicating with Apple's iPod Touch and iPhone
--------------------------------------------------------------------------------
Update Information:

New upstream bugfix release
--------------------------------------------------------------------------------
ChangeLog:

* Mon Mar 22 2010 Peter Robinson <pbrobinson at gmail.com> 1.0.3-1
- New stable 1.0.3 release
* Thu Feb 11 2010 Peter Robinson <pbrobinson at gmail.com> 1.0.2-1
- New stable 1.0.2 release
--------------------------------------------------------------------------------


================================================================================
 xapian-bindings-1.0.18-1.fc11 (FEDORA-2010-5172)
 Bindings for the Xapian Probabilistic Information Retrieval Library
--------------------------------------------------------------------------------
Update Information:

New bugfix stable release
--------------------------------------------------------------------------------
ChangeLog:

* Sun Mar 21 2010 Peter Robinson<pbrobinson at gmail.com> 1.0.18-1
- Update to 1.0.18
* Sat Jan  9 2010 Peter Robinson <pbrobinson at gmail.com> 1.0.17-3
- Updated to the new python sysarch spec file reqs
--------------------------------------------------------------------------------


================================================================================
 xapian-core-1.0.18-1.fc11 (FEDORA-2010-5172)
 The Xapian Probabilistic Information Retrieval Library
--------------------------------------------------------------------------------
Update Information:

New bugfix stable release
--------------------------------------------------------------------------------
ChangeLog:

* Sun Mar 21 2010 Peter Robinson <pbrobinson at gmail.com> - 1.0.18-1
- Update to 1.0.18
--------------------------------------------------------------------------------



More information about the test mailing list