Fedora 12 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Thu Oct 14 06:47:03 UTC 2010


The following Fedora 12 Security updates need testing:

    https://admin.fedoraproject.org/updates/clamav-0.96.3-1200.fc12
    https://admin.fedoraproject.org/updates/bzip2-1.0.6-1.fc12
    https://admin.fedoraproject.org/updates/java-1.6.0-openjdk-1.6.0.0-41.1.8.2.fc12
    https://admin.fedoraproject.org/updates/ghostscript-8.71-16.fc12
    https://admin.fedoraproject.org/updates/subversion-1.6.13-1.fc12.1
    https://admin.fedoraproject.org/updates/mailman-2.1.12-10.fc12
    https://admin.fedoraproject.org/updates/ardour-2.8.11-5.fc12
    https://admin.fedoraproject.org/updates/tomcat6-6.0.26-3.fc12
    https://admin.fedoraproject.org/updates/openldap-2.4.19-6.fc12
    https://admin.fedoraproject.org/updates/gif2png-2.5.1-1202.fc12
    https://admin.fedoraproject.org/updates/php-pear-CAS-1.1.3-1.fc12
    https://admin.fedoraproject.org/updates/tuxguitar-1.2-3.fc12
    https://admin.fedoraproject.org/updates/freetype-2.3.11-6.fc12
    https://admin.fedoraproject.org/updates/apr-util-1.3.10-1.fc12
    https://admin.fedoraproject.org/updates/postgresql-8.4.5-1.fc12
    https://admin.fedoraproject.org/updates/webkitgtk-1.2.5-1.fc12
    https://admin.fedoraproject.org/updates/poppler-0.12.4-5.fc12


The following builds have been pushed to Fedora 12 updates-testing

    ailurus-10.10.3-1.fc12
    erlang-mochiweb-1.4.0-1.fc12
    fluidsynth-1.1.3-1.fc12
    fwsnort-1.0.6-8.fc12
    gwibber-2.33.0-12.894bzr.fc12
    haildb-2.2.0-2.fc12
    ibus-skk-1.3.2-1.fc12
    iputils-20071127-13.fc12
    java-1.6.0-openjdk-1.6.0.0-41.1.8.2.fc12
    jna-3.2.7-8.fc12
    kchmviewer-5.2-5.fc12
    kdeedu-4.4.5-2.fc12
    kmess-2.0.4-1.fc12
    libdigidocpp-0.3.0-2.fc12.1
    liferea-1.6.5-1.fc12
    moodle-1.9.9-3.fc12
    mpich2-1.2.1p1-3.fc12
    ntfs-3g-2010.10.2-1.fc12
    perl-5.10.0-96.fc12
    subversion-api-docs-1.6.13-1.fc12
    tomcat6-6.0.26-3.fc12
    xscreensaver-5.12-5.fc12

Details about builds:


================================================================================
 ailurus-10.10.3-1.fc12 (FEDORA-2010-16274)
 A simple application installer and GNOME tweaker
--------------------------------------------------------------------------------
Update Information:

Upstream to ailurus-10.10.3
--------------------------------------------------------------------------------
ChangeLog:

* Tue Oct 12 2010 Liang Suilong <liangsuilong at gmail.com> 10.10.3-1
- Upstream to 10.10.3
--------------------------------------------------------------------------------


================================================================================
 erlang-mochiweb-1.4.0-1.fc12 (FEDORA-2010-16277)
 An Erlang library for building lightweight HTTP servers
--------------------------------------------------------------------------------
Update Information:

Ver. 1.4.0 (fully API/ABI compatible with previous one)
- Narrowed BuildRequires.
- Restricted explicit requirement for obsoleted fd_server module (rhbz #601152).
- Dropped upstreamed patch6.

--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 13 2010 Peter Lemenkov <lemenkov at gmail.com> - 1.4.0-1
- Ver. 1.4.0
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #601152 - Missing runtime dependency in erlang-mochiweb - fd_server
        https://bugzilla.redhat.com/show_bug.cgi?id=601152
--------------------------------------------------------------------------------


================================================================================
 fluidsynth-1.1.3-1.fc12 (FEDORA-2010-15720)
 Real-time software synthesizer
--------------------------------------------------------------------------------
Update Information:

FluidSynth 1.1.3 is a pure bug-fix release and contains no new functionality.

* Compilation with LADSPA enabled was broken in 1.1.2 - fixed (plcl, diwic)
* Multichannel output broken when double precision was used - fixed (plcl, diwic)
* Optimize by not starting unused threads with multicore rendering (diwic)
* Race condition in alsa_seq / alsa_raw drivers caused them not to quit (diwic) 
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 11 2010 Orcan Ogetbil <oget[DOT]fedora[AT]gmail[DOT]com> - 1.1.3-1
- Update to 1.1.3
* Fri Oct  1 2010 Orcan Ogetbil <oget[DOT]fedora[AT]gmail[DOT]com> - 1.1.2-2
- Fix garbled sound issues. Upstream ticket #87
--------------------------------------------------------------------------------


================================================================================
 fwsnort-1.0.6-8.fc12 (FEDORA-2010-16290)
 Translates Snort rules into equivalent iptables rules
--------------------------------------------------------------------------------
Update Information:

Minor spec adjust for improved perl packaging guidelines compliance.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Oct 12 2010 Mark Chappell <tremble at tremble.org.uk> - 1.0.6-8
- Replace the perl dependencies with the virtual modules rather than
  the package name
--------------------------------------------------------------------------------


================================================================================
 gwibber-2.33.0-12.894bzr.fc12 (FEDORA-2010-16296)
 An open source microblogging client for GNOME developed with Python and GTK
--------------------------------------------------------------------------------
Update Information:

Update gwibber to bzr894. This build uses a new facebook key, so you will need to delete your old facebook account from gwibber and re-add it (it should work much much better once you do this).
update to 875bzr, BigWhales DM fixes, fix digg, fix kitchen unicode patch, fix glib usage, right-click closes streams now, fixes identi.ca message parsing
update to 875bzr, BigWhales DM fixes, fix digg, fix kitchen unicode patch, fix glib usage, right-click closes streams now, fixes identi.ca message parsing
update to 875bzr, BigWhales DM fixes, fix digg, fix kitchen unicode patch, fix glib usage, right-click closes streams now, fixes identi.ca message parsing
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 13 2010 Tom "spot" Callaway <tcallawa at redhat.com> - 1:2.33.0-12.894bzr
- update to 894, improve result parsing, more digg fixes, fedora facebook key
* Mon Oct 11 2010 Tom "spot" Callaway <tcallawa at redhat.com> - 1:2.33.0-11.886bzr
- update to 886, dm patches merged, glibc fix merged, digg fix merged, several facebook fixes
* Thu Oct  7 2010 Tom "spot" Callaway <tcallawa at redhat.com> - 1:2.33.0-11.875bzr
- right click on a stream in the navigation bar and it closes
- RIBBIT!
* Thu Oct  7 2010 Tom "spot" Callaway <tcallawa at redhat.com> - 1:2.33.0-10.875bzr
- fix place where glib was being used without being imported
- apply BigWhale's DM fixes
* Thu Oct  7 2010 Tom "spot" Callaway <tcallawa at redhat.com> - 1:2.33.0-9.875bzr
- fix digg, apply kitchen changes to digg too
* Wed Oct  6 2010 Tom "spot" Callaway <tcallawa at redhat.com> - 1:2.33.0-8.875bzr
- sync to bzr875
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #619249 - doesn't work - org.freedesktop.DBus.Error.ServiceUnknown: The name com.Gwibber.Connection was not provided by any .service files
        https://bugzilla.redhat.com/show_bug.cgi?id=619249
  [ 2 ] Bug #637579 - incomplete facebook timeline
        https://bugzilla.redhat.com/show_bug.cgi?id=637579
  [ 3 ] Bug #637580 - Posting messages to facebook doesn't work
        https://bugzilla.redhat.com/show_bug.cgi?id=637580
  [ 4 ] Bug #634054 - [abrt] gwibber-1:2.31.4-1.fc13: decoder.py:338:raw_decode:ValueError: No JSON object could be decoded
        https://bugzilla.redhat.com/show_bug.cgi?id=634054
--------------------------------------------------------------------------------


================================================================================
 haildb-2.2.0-2.fc12 (FEDORA-2010-16246)
 A relational database in shared library form
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #638402 - Review Request: haildb - A relational database in shared library form
        https://bugzilla.redhat.com/show_bug.cgi?id=638402
--------------------------------------------------------------------------------


================================================================================
 ibus-skk-1.3.2-1.fc12 (FEDORA-2010-16235)
 Japanese SKK input method for ibus
--------------------------------------------------------------------------------
Update Information:

new upstream release
new upstream release
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 13 2010 Daiki Ueno <dueno at redhat.com> - 1.3.2-1
- new upstream release
* Tue Sep 14 2010 Daiki Ueno <dueno at redhat.com> - 1.3.0-1
- new upstream release
--------------------------------------------------------------------------------


================================================================================
 iputils-20071127-13.fc12 (FEDORA-2010-16291)
 Network monitoring tools including ping
--------------------------------------------------------------------------------
ChangeLog:

* Tue Oct 12 2010 Jiri Skala <jskala at redhat.com> - 20071127-13
- fixes #642005 - arping -c option broken for even numbers, even worse when combined with -w
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #642005 - arping -c option broken for even numbers, even worse when combined with -w
        https://bugzilla.redhat.com/show_bug.cgi?id=642005
--------------------------------------------------------------------------------


================================================================================
 java-1.6.0-openjdk-1.6.0.0-41.1.8.2.fc12 (FEDORA-2010-16240)
 OpenJDK Runtime Environment
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct  7 2010 Jiri Vanek <jvanek at redhat.com> -1:1.6.0-41.1.8.2
- Imports icedtea6-1.8.2
- changed Release versioning from openjdkver to icedteaver
- Resolves: rhbz#533125
- Resolves: rhbz#639876
- Resolves: rhbz#639880
- Resolves: rhbz#639897
- Resolves: rhbz#639904
- Resolves: rhbz#639909
- Resolves: rhbz#639914
- Resolves: rhbz#639920
- Resolves: rhbz#639922
- Resolves: rhbz#639925
- Resolves: rhbz#639951
- Resolves: rhbz#6622002
- Resolves: rhbz#6623943
- Resolves: rhbz#6925672
- Resolves: rhbz#6952017
- Resolves: rhbz#6952603
- Resolves: rhbz#6961084
- Resolves: rhbz#6963285
- Resolves: rhbz#6980004
- Resolves: rhbz#6981426
- Resolves: rhbz#6990437
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #533125 - CVE-2009-3555 TLS: MITM attacks via session renegotiation
        https://bugzilla.redhat.com/show_bug.cgi?id=533125
  [ 2 ] Bug #642202 - CVE-2010-3541 CVE-2010-3573 OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)
        https://bugzilla.redhat.com/show_bug.cgi?id=642202
  [ 3 ] Bug #639909 - CVE-2010-3548 OpenJDK DNS server IP address information leak (6957564)
        https://bugzilla.redhat.com/show_bug.cgi?id=639909
  [ 4 ] Bug #642180 - CVE-2010-3549 OpenJDK HttpURLConnection request splitting (6952017)
        https://bugzilla.redhat.com/show_bug.cgi?id=642180
  [ 5 ] Bug #642187 - CVE-2010-3551 OpenJDK local network address disclosure (6952603)
        https://bugzilla.redhat.com/show_bug.cgi?id=642187
  [ 6 ] Bug #642167 - CVE-2010-3553 OpenJDK Swing unsafe reflection usage (6622002)
        https://bugzilla.redhat.com/show_bug.cgi?id=642167
  [ 7 ] Bug #639880 - CVE-2010-3554 CVE-2010-3561  OpenJDK corba reflection vulnerabilities (6891766,6925672)
        https://bugzilla.redhat.com/show_bug.cgi?id=639880
  [ 8 ] Bug #639904 - CVE-2010-3557 OpenJDK Swing mutable static (6938813)
        https://bugzilla.redhat.com/show_bug.cgi?id=639904
  [ 9 ] Bug #639897 - CVE-2010-3562 OpenJDK IndexColorModel double-free (6925710)
        https://bugzilla.redhat.com/show_bug.cgi?id=639897
  [ 10 ] Bug #639914 - CVE-2010-3564 OpenJDK kerberos vulnerability (6958060)
        https://bugzilla.redhat.com/show_bug.cgi?id=639914
  [ 11 ] Bug #639920 - CVE-2010-3565 OpenJDK JPEG writeImage remote code execution (6963023)
        https://bugzilla.redhat.com/show_bug.cgi?id=639920
  [ 12 ] Bug #642197 - CVE-2010-3567 OpenJDK ICU Opentype layout engine crash (6963285)
        https://bugzilla.redhat.com/show_bug.cgi?id=642197
  [ 13 ] Bug #639876 - CVE-2010-3568 OpenJDK Deserialization Race condition (6559775)
        https://bugzilla.redhat.com/show_bug.cgi?id=639876
  [ 14 ] Bug #639925 - CVE-2010-3569 OpenJDK Serialization inconsistencies (6966692)
        https://bugzilla.redhat.com/show_bug.cgi?id=639925
  [ 15 ] Bug #642215 - CVE-2010-3574 OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)
        https://bugzilla.redhat.com/show_bug.cgi?id=642215
--------------------------------------------------------------------------------


================================================================================
 jna-3.2.7-8.fc12 (FEDORA-2010-16271)
 Pure Java access to native libraries
--------------------------------------------------------------------------------
ChangeLog:

* Tue Oct 12 2010 Levente Farkas <lfarkas at lfarkas.org> - 3.2.7-8
- exclude check on ppc
* Fri Oct  8 2010 Levente Farkas <lfarkas at lfarkas.org> - 3.2.7-7
- fix excludearch condition
* Wed Oct  6 2010 Levente Farkas <lfarkas at lfarkas.org> - 3.2.7-6
- readd excludearch for old release fix #548099
* Fri Oct  1 2010 Dennis Gilmore <dennis at ausil.us> - 3.2.7-5.1
- remove the ExcludeArch it makes no sense
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #640005 - Missing ppc/ppc64 build on F-12
        https://bugzilla.redhat.com/show_bug.cgi?id=640005
--------------------------------------------------------------------------------


================================================================================
 kchmviewer-5.2-5.fc12 (FEDORA-2010-16255)
 CHM viewer
--------------------------------------------------------------------------------
Update Information:

Provides the Qt-only version as kchmviewer-qt
--------------------------------------------------------------------------------
ChangeLog:

* Tue Oct 12 2010 Robin Lee <cheeselee at fedoraproject.org> - 5.2-5
- _smp_mflags will break compilation of the Qt version, remove it
* Mon Oct 11 2010 Robin Lee <cheeselee at fedoraproject.org> - 5.2-4
- Make a subpackage for the Qt-only version
- Make a subpackage owning the common data files
* Fri Jun  4 2010 Robin Lee <robinlee.sysu at gmail.com> - 5.2-3
- fix tag
* Fri Jun  4 2010 Robin Lee <robinlee.sysu at gmail.com> - 5.2-2
- Tar ball updated
--------------------------------------------------------------------------------


================================================================================
 kdeedu-4.4.5-2.fc12 (FEDORA-2010-16236)
 Educational/Edutainment applications
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 11 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.4.5-2
- resurrect indi_nodrivers patch (#640522)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #640522 - Menu item Device missing in kstars (kdeedu not built against libindi)
        https://bugzilla.redhat.com/show_bug.cgi?id=640522
--------------------------------------------------------------------------------


================================================================================
 kmess-2.0.4-1.fc12 (FEDORA-2010-16278)
 Messaging client for MSN
--------------------------------------------------------------------------------
Update Information:

As usual with our 2.0 point releases, it contains a lot of bug fixes, but also general improvements, and even some new features. Here is a quick highlight of the changes in this new version:

Added a small toggle button on the contact list to quickly enable/disable the "Now Listening" feature.
Implemented the new KDE4 system tray specification.
Added ability to drag-and-drop ink drawings from the conversation into the ink editor in order to be edited again.
Fixed bug which caused KMess to fail to connect, instead giving an "Invalid Command Parameter" error.
Fixed bug which caused the user's display picture to be reset upon login.
Fixed bug where status was not changed from Idle upon wake up from sleep.
Updated many translations.
And various other smaller updates and fixes...
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 13 2010 Steven M. Parrish <smparrish at gmail.com> - 2.0.4-1
- Added a small toggle button on the contact list to quickly enable/disable the "Now Listening" feature.
- Implemented the new KDE4 system tray specification.
- Added ability to drag-and-drop ink drawings from the conversation into the ink editor in order to be edited again.
- Fixed bug which caused KMess to fail to connect, instead giving an "Invalid Command Parameter" error.
- Fixed bug which caused the user's display picture to be reset upon login.
- Fixed bug where status was not changed from Idle upon wake up from sleep.
- Updated many translations.
- And various other smaller updates and fixes...
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #638284 - Upgrade Kmess to 2.0.4
        https://bugzilla.redhat.com/show_bug.cgi?id=638284
  [ 2 ] Bug #544097 - [abrt] crash detected in kmess-2.0-2.fc12
        https://bugzilla.redhat.com/show_bug.cgi?id=544097
  [ 3 ] Bug #611161 - [abrt] crash in kmess-2.0.3-1.fc13: QTextEngine::itemize: Process /usr/bin/kmess was killed by signal 11 (SIGSEGV)
        https://bugzilla.redhat.com/show_bug.cgi?id=611161
--------------------------------------------------------------------------------


================================================================================
 libdigidocpp-0.3.0-2.fc12.1 (FEDORA-2010-16264)
 Library for creating and validating BDoc and DDoc containers
--------------------------------------------------------------------------------
Update Information:

libdigidocpp is a C++ library for reading, validating, and creating BDoc and
DDoc containers. These file formats are widespread in Estonia where they are
used for storing legally binding digital signatures.

--------------------------------------------------------------------------------


================================================================================
 liferea-1.6.5-1.fc12 (FEDORA-2010-16295)
 An RSS/RDF feed reader
--------------------------------------------------------------------------------
Update Information:

New upstream release
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 13 2010 Steven M. Parrish <smparrish at gmail.com> - 1.6.5-1
- New upstream release
--------------------------------------------------------------------------------


================================================================================
 moodle-1.9.9-3.fc12 (FEDORA-2010-16300)
 A Course Management System
--------------------------------------------------------------------------------
Update Information:

Fixes updating via yum due to CAS replacement typo.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct  4 2010 Jon Ciesla <limb at jcomserv.net> - 1.9.9-3
- Correction of CAS symlink typo.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #628424 - Cannot upgrade moodle: error: unpacking of archive failed on file /var/www/moodle/web/auth/cas: cpio: rename
        https://bugzilla.redhat.com/show_bug.cgi?id=628424
--------------------------------------------------------------------------------


================================================================================
 mpich2-1.2.1p1-3.fc12 (FEDORA-2010-16289)
 A high-performance implementation of MPI
--------------------------------------------------------------------------------
Update Information:

Set PYTHONPATH in the module file
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 13 2010 Deji Akingunola <dakingun at gmail.com> - 1.2.1p1-3
- Resolve undefined symbols in the mpichcxx library.
* Mon Oct 11 2010 Deji Akingunola <dakingun at gmail.com> - 1.2.1p1-2
- Set PYTHONPATH in the module file.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #635742 - external program cannot find mpi4py
        https://bugzilla.redhat.com/show_bug.cgi?id=635742
--------------------------------------------------------------------------------


================================================================================
 ntfs-3g-2010.10.2-1.fc12 (FEDORA-2010-16265)
 Linux NTFS userspace driver
--------------------------------------------------------------------------------
Update Information:

Updated to 2010.10.2:

* Fixed filename encoding when standard functions are not available.
* Fixed checking mounted device status on some non-Linux platforms.
* Fixed mounting with SELinux context (fedora patch merged)
* Fixed -n and –no-mtab mount option handling, needed by automount (fedora patch merged)
* Improved consistency checks of POSIX ACLs.
* NTFS-3G manual update.


--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 11 2010 Tom "spot" Callaway <tcallawa at redhat.com> - 2:2010.10.2-1
- update to 2010.10.2, all patches merged upstream
--------------------------------------------------------------------------------


================================================================================
 perl-5.10.0-96.fc12 (FEDORA-2010-16239)
 Practical Extraction and Report Language
--------------------------------------------------------------------------------
Update Information:

This update contain updates of threaded modules, which brings mostly bugfixes. This update fix previous -95 build, which included incompatible threads version.
For details you can check upstream changes:
http://cpansearch.perl.org/src/JDHEDDEN/threads-1.79/Changes
http://cpansearch.perl.org/src/JDHEDDEN/threads-shared-1.34/Changes
http://cpansearch.perl.org/src/JDHEDDEN/Thread-Queue-2.11/Changes
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 11 2010 Marcela Mašláňová <mmaslano at redhat.com> - 4:5.10.0-96
- update of threads::shared and threads, which should fix failure of
 threads in previous update
* Tue Sep  7 2010 Marcela Mašláňová <mmaslano at redhat.com> - 4:5.10.0-95
- update thread modules - Thread::Queue, threads::shared, which also fix
  627192
* Tue Aug 24 2010 Petr Pisar <ppisar at redhat.com> - 4:5.10.0-94
- Fix nested loop variable free warning by back-porting from 5.10.1
  (RT#70660, rhbz#626411)
- Log Patch62 by patchlevel.h
* Thu Aug 19 2010 Petr Pisar <ppisar at redhat.com> - 4:5.10.0-93
- Add "-Wl,--enable-new-dtags" to linker to allow to override perl's rpath by
  LD_LIBRARY_PATH used in tests. Otherwise tested perl would link to old
  in-system libperl.so.
* Wed Jul 28 2010 Petr Pisar <ppisar at redhat.com> - 4:5.10.0-92
- Fix taint.t test in Test::Harness
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #627192 - Padre-0.32 requires newer Thread::Queue
        https://bugzilla.redhat.com/show_bug.cgi?id=627192
  [ 2 ] Bug #626411 - Perl gives the error 'Attempt to free unreferenced scalar' with nested foreach loops using the same variable
        https://bugzilla.redhat.com/show_bug.cgi?id=626411
  [ 3 ] Bug #622190 - Sending signal to thread without signal handler in thread causes perl to segfault
        https://bugzilla.redhat.com/show_bug.cgi?id=622190
--------------------------------------------------------------------------------


================================================================================
 subversion-api-docs-1.6.13-1.fc12 (FEDORA-2010-16297)
 Subversion API documentation
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 13 2010 Bojan Smojver <bojan at rexursive.com> 1.6.13-1
- bump up to 1.6.13
* Mon May 10 2010 Bojan Smojver <bojan at rexursive.com> 1.6.11-1
- bump up to 1.6.11
--------------------------------------------------------------------------------


================================================================================
 tomcat6-6.0.26-3.fc12 (FEDORA-2010-16248)
 Apache Servlet/JSP Engine, RI for Servlet 2.5/JSP 2.1 API
--------------------------------------------------------------------------------
Update Information:

* Includes security fix for cve-2010-2227. 
* Package updated to new upstream version tomcat-6.0.26
* commons-dbcp-tomcat5, commons-collections-tomcat5, and commons-pool-tomcat5 have been dropped in favor of commons-collections, commons-pool, and commons-dbcp
* Directory permissions fixed
* tomcat user shell fixed

--------------------------------------------------------------------------------
ChangeLog:

* Tue Oct 12 2010 David Knox <dknox at redhat.com> 0:6.0.26-3
- resolves: rhbz#641102
* Thu Oct  7 2010 David Knox <dknox at redhat.com> 0:6.0.26-1
- copied spec and patches from f13 to bring f12 up to date
- with all tomcat6 fedora.
* Mon Oct  4 2010 David Knox <dknox at redhat.com> 0:6.0.26-10
- ant-nodeps is breaking the build. Put ant-nodeps on the 
- OPT_JAR_LIST
* Fri Oct  1 2010 David Knox <dknox at rehat.com> 0:6.0.26-9
- Resolves rhbz#575341 - Additionally created instances of Tomcat 
- are broken
* Fri Jul  2 2010 David Knox <dknox at rehat.com> 0:6.0.26-8
- LSB initscript compliance
* Thu Jul  1 2010 David Knox <dknox at redhat.com> 0:6.0.26-7
- Made elspec the standard for elspec %post and %postun.
* Tue Jun 29 2010 David Knox <dknox at redhat.com> 0:6.0.26-6
- Completed package and file sections. Added el-spec. Fixed
- directory permission problems.
* Thu May  6 2010 David Knox <dknox at redhat.com> 0:6.0.26-5
- Working on 589145. Tomcat can't find java compiler for java.
* Thu Apr  8 2010 David Knox <dknox at redhat.com> 0:6.0.26-4
- Moved build-jar-repository to later in the install process.
* Tue Apr  6 2010 David Knox <dknox at redhat.com> 0:6.0.26-3
- Incremented the Release tag to 3 to avoid any confusion about which
- is the most recent
* Tue Apr  6 2010 David Knox <dknox at redhat.com> 0:6.0.26-1
- Solved packaging problems involving taglibs-standard
- Solved packaging problems involving jakarta-commons
- Corrected Requires(post) to Requires and checked companion BuildRequires
* Mon Mar 29 2010 David Knox <dknox at redhat.com> 0:6.0.26-2
- Update source to tomcat6.0.26
- Bugzilla 572357 - Please retest. 
- OSGi manifests for servlet-api and jsp-api
* Fri Mar 26 2010 Mary Ellen Foster <mefoster at gmail.com> 0:6.0.24-2
- Add maven POMs and metadata
- Link tomcat6-juli into /usr/share/java/tomcat6
* Mon Mar  1 2010 Alexander Kurtakov <akurtako at redhat.com> 0:6.0.24-1
- Update to 6.0.24.
* Tue Dec 22 2009 Alexander Kurtakov <akurtako at redhat.com> 0:6.0.20-2
- Drop file requires on /usr/share/java/ecj.jar.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #612799 - CVE-2010-2227 tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header
        https://bugzilla.redhat.com/show_bug.cgi?id=612799
--------------------------------------------------------------------------------


================================================================================
 xscreensaver-5.12-5.fc12 (FEDORA-2010-16258)
 X screen saver and locker
--------------------------------------------------------------------------------
Update Information:

Rebuilt against fixed gcc.

memleak was found on gltext. Also a issue was found that flame is completely blank. This new rpm will fix the issue.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 13 2010 Mamoru Tasaka <mtasaka at ioa.s.u-tokyo.ac.jp> - 1:5.12-5
- Fix the issue that xflame is completely blank (bug 642651)
* Wed Oct 13 2010 Mamoru Tasaka <mtasaka at ioa.s.u-tokyo.ac.jp> - 1:5.12-4
- Enable libgle dependent hacks on F-13+
* Wed Oct 13 2010 Mamoru Tasaka <mtasaka at ioa.s.u-tokyo.ac.jp> - 1:5.12-3
- Kill memleak on gltext (bug 638600)
* Sun Oct 10 2010 Mamoru Tasaka <mtasaka at ioa.s.u-tokyo.ac.jp>
- F-14+: rebuild against fixed gcc
* Mon Sep 20 2010 Mamoru Tasaka <mtasaka at ioa.s.u-tokyo.ac.jp> - 1:5.12-2
- Update Patch 31 (xscreensaver-5.12-for-now-set-lang-on-daemon-to-C.patch)
- Reduce BR using pseudo symlink
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #638600 - [abrt] xscreensaver-gl-extras-1:5.12-1.fc13: raise: Process /usr/libexec/xscreensaver/gltext was killed by signal 6 (SIGABRT)
        https://bugzilla.redhat.com/show_bug.cgi?id=638600
  [ 2 ] Bug #642651 - Upstream broke flame xscreensaver hack
        https://bugzilla.redhat.com/show_bug.cgi?id=642651
--------------------------------------------------------------------------------



More information about the test mailing list