Fedora 14 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Mon Apr 25 20:58:26 UTC 2011


The following Fedora 14 Security updates need testing:

    https://admin.fedoraproject.org/updates/tomcat6-6.0.26-20.fc14
    https://admin.fedoraproject.org/updates/mingw32-openssl-1.0.0a-2.fc14
    https://admin.fedoraproject.org/updates/wireshark-1.4.6-1.fc14
    https://admin.fedoraproject.org/updates/couchdb-1.0.2-1.fc14
    https://admin.fedoraproject.org/updates/tor-0.2.1.29-1400.fc14
    https://admin.fedoraproject.org/updates/kdenetwork-4.6.2-2.fc14
    https://admin.fedoraproject.org/updates/feh-1.10.1-1.fc14
    https://admin.fedoraproject.org/updates/avahi-0.6.27-6.fc14
    https://admin.fedoraproject.org/updates/mingw32-libtiff-3.9.5-1.fc14
    https://admin.fedoraproject.org/updates/polkit-0.98-5.fc14
    https://admin.fedoraproject.org/updates/SimGear-2.0.0-5.fc14
    https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
    https://admin.fedoraproject.org/updates/mediawiki-1.16.4-58.fc14
    https://admin.fedoraproject.org/updates/asterisk-1.6.2.17.3-1.fc14


The following Fedora 14 Critical Path updates have yet to be approved:

    https://admin.fedoraproject.org/updates/kernel-2.6.35.12-90.fc14
    https://admin.fedoraproject.org/updates/tar-1.23-9.fc14
    https://admin.fedoraproject.org/updates/xorg-x11-drv-qxl-0.0.21-3.fc14
    https://admin.fedoraproject.org/updates/evolution-exchange-2.32.3-1.fc14,evolution-data-server-2.32.3-1.fc14,evolution-2.32.3-1.fc14
    https://admin.fedoraproject.org/updates/audit-2.1.1-1.fc14
    https://admin.fedoraproject.org/updates/polkit-0.98-5.fc14
    https://admin.fedoraproject.org/updates/pygtk2-2.17.0-9.fc14
    https://admin.fedoraproject.org/updates/xorg-x11-drv-nouveau-0.0.16-14.20101010git8c8f15c.fc14
    https://admin.fedoraproject.org/updates/dosfstools-3.0.9-6.fc14
    https://admin.fedoraproject.org/updates/libimobiledevice-1.0.6-1.fc14
    https://admin.fedoraproject.org/updates/libconcord-0.23-5.fc14,udev-161-9.fc14,concordance-0.23-2.fc14
    https://admin.fedoraproject.org/updates/usbmuxd-1.0.7-1.fc14
    https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
    https://admin.fedoraproject.org/updates/avahi-0.6.27-6.fc14
    https://admin.fedoraproject.org/updates/xorg-x11-drv-geode-2.11.11-4.fc14


The following builds have been pushed to Fedora 14 updates-testing

    clamtk-4.32-1.fc14
    gausssum-2.2.5-1.fc14
    gnomad2-2.9.4-8.fc14
    libprojectM-2.0.1-10.fc14
    mingw32-libtiff-3.9.5-1.fc14
    rpmlint-1.2-1.fc14
    rubygem-daemon_controller-0.2.6-1.fc14
    rubygem-file-tail-1.0.5-3.fc14
    rubygem-spruz-0.2.5-3.fc14
    sugar-0.92.1-2.fc14
    sugar-artwork-0.92.0-1.fc14
    sugar-base-0.92.0-1.fc14

Details about builds:


================================================================================
 clamtk-4.32-1.fc14 (FEDORA-2011-5963)
 Easy to use graphical user interface for Clam anti virus
--------------------------------------------------------------------------------
Update Information:

Update to 4.32.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Apr 25 2011 Dave M. <dave.nerd at gmail.com> - 4.32-1
- Updated to release 4.32.
* Tue Feb  8 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 4.31-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 gausssum-2.2.5-1.fc14 (FEDORA-2011-5949)
 A GUI application for analysis of output of quantum computations
--------------------------------------------------------------------------------
Update Information:

Minor bugfix update to 2.2.5.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Apr 25 2011 Jussi Lehtola <jussilehtola at fedoraproject.org> - 2.2.5-1
- Update to 2.2.5.
* Tue Feb  8 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.2.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #698588 - gausssum-2.2.5 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=698588
--------------------------------------------------------------------------------


================================================================================
 gnomad2-2.9.4-8.fc14 (FEDORA-2011-5948)
 A GNOME 2.0 client for the Creative Jukeboxes and Dell DJs
--------------------------------------------------------------------------------
Update Information:

Remove HAL dependency.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Apr 25 2011 Linus Walleij <triad at df.lth.se> 2.9.4-8
- Drop HAL dependencies and build without HAL
* Tue Feb  8 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.9.4-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #677070 - [abrt] gnomad2-2.9.4-5.fc14: __strlen_sse2_bsf: Process /usr/bin/gnomad2 was killed by signal 11 (SIGSEGV)
        https://bugzilla.redhat.com/show_bug.cgi?id=677070
  [ 2 ] Bug #684317 - [abrt] gnomad2-2.9.4-5.fc14: __libc_message: Process /usr/bin/gnomad2 was killed by signal 6 (SIGABRT)
        https://bugzilla.redhat.com/show_bug.cgi?id=684317
  [ 3 ] Bug #692056 - [abrt] gnomad2-2.9.4-6.fc14: NJB_Get_Disk_Usage: Process /usr/bin/gnomad2 was killed by signal 11 (SIGSEGV)
        https://bugzilla.redhat.com/show_bug.cgi?id=692056
  [ 4 ] Bug #692605 - [abrt] gnomad2-2.9.4-6.fc14: strcmp: Process /usr/bin/gnomad2 was killed by signal 11 (SIGSEGV)
        https://bugzilla.redhat.com/show_bug.cgi?id=692605
  [ 5 ] Bug #692614 - [abrt] gnomad2-2.9.4-6.fc14: __libc_free: Process /usr/bin/gnomad2 was killed by signal 11 (SIGSEGV)
        https://bugzilla.redhat.com/show_bug.cgi?id=692614
  [ 6 ] Bug #698866 - [abrt] gnomad2-2.9.4-6.fc14: __libc_message: Process /usr/bin/gnomad2 was killed by signal 6 (SIGABRT)
        https://bugzilla.redhat.com/show_bug.cgi?id=698866
  [ 7 ] Bug #663955 - [abrt] gnomad2-2.9.4-5.fc14: __libc_message: Process /usr/bin/gnomad2 was killed by signal 6 (SIGABRT)
        https://bugzilla.redhat.com/show_bug.cgi?id=663955
  [ 8 ] Bug #666282 - [abrt] gnomad2-2.9.4-5.fc14: free: Process /usr/bin/gnomad2 was killed by signal 11 (SIGSEGV)
        https://bugzilla.redhat.com/show_bug.cgi?id=666282
--------------------------------------------------------------------------------


================================================================================
 libprojectM-2.0.1-10.fc14 (FEDORA-2011-5961)
 The libraries for the projectM music visualization plugin
--------------------------------------------------------------------------------
Update Information:

Fix fonts patch.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Apr 25 2011 Jameson Pugh <imntreal at gmail.com> - 2.0.1-10
- Fixed fonts patch
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #698381 - [abrt] audacious-2.4.4-2.fc14: FTSize::CharSize: Process /usr/bin/audacious2 was killed by signal 11 (SIGSEGV)
        https://bugzilla.redhat.com/show_bug.cgi?id=698381
--------------------------------------------------------------------------------


================================================================================
 mingw32-libtiff-3.9.5-1.fc14 (FEDORA-2011-5962)
 MinGW Windows port of the LibTIFF library
--------------------------------------------------------------------------------
Update Information:

Update MinGW Windows cross-compiled libtiff to 3.9.5, incorporating most of our previous patches.

Includes a fix for CVE-2011-1167: A flaw was reported in libtiff's thunder decoder. The thunder decoder assumes 4bits per pixel, but if a file has bitpersample set to a smaller value, or defaulted (1) then the allocated strip buffer will be too small, and a heap-based buffer overlow may occur. This could be used to crash an application linked to libtiff, or execute arbitrary code with the privileges of the application opening a malicious TIFF file.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Apr 25 2011 Kalev Lember <kalev at smartlink.ee> - 3.9.5-1
- Update to 3.9.5
- Fixes CVE-2011-1167 (#689575)
- Dropped the patches from Fedora native libtiff package which are all now
  incorporated in 3.9.5
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #689575 - CVE-2011-1167 libtiff: heap-based buffer overflow in thunder decoder (ZDI-CAN-1004) [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=689575
--------------------------------------------------------------------------------


================================================================================
 rpmlint-1.2-1.fc14 (FEDORA-2011-5951)
 Tool for checking common errors in RPM packages
--------------------------------------------------------------------------------
Update Information:

Update rpmlint to 1.2, fixes a number of open bugs. Also filter out files-attr-not-set check except on EL4.

For changes from 1.1 to 1.2, see: http://rpmlint.zarb.org/cgi-bin/trac.cgi/log/trunk?stop_rev=1834&rev=1859&verbose=on
--------------------------------------------------------------------------------
ChangeLog:

* Sun Apr 24 2011 Tom Callaway <spot at fedoraproject.org> - 1.2-1
- update to 1.2
- filter away files-attr-not-set for all targets except EL-4 (bz694579)
* Thu Mar  3 2011 Tom Callaway <spot at fedoraproject.org> - 1.1-3
- apply upstream fix for source url aborts (bz 680781)
* Wed Feb  9 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Fri Feb  4 2011 Tom Callaway <spot at fedoraproject.org> - 1.1-1
- update to 1.1
* Tue Dec  7 2010 Tom "spot" Callaway <tcallawa at redhat.com> - 1.0-3
- fix typo in changelog
- % comment out item in changelog
- simplify el4/el5 config files (thanks to Ville Skyttä)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #637712 - RFE: rpmlint should check for address of FSF in files containing GPL license
        https://bugzilla.redhat.com/show_bug.cgi?id=637712
  [ 2 ] Bug #657593 - traceback when version contains only epoch
        https://bugzilla.redhat.com/show_bug.cgi?id=657593
  [ 3 ] Bug #675360 - rpmlint complain about private-shared-object-provides only on x86_64
        https://bugzilla.redhat.com/show_bug.cgi?id=675360
  [ 4 ] Bug #694090 - python-bytecode-inconsistent-mtime checking is wrongly done on soft links
        https://bugzilla.redhat.com/show_bug.cgi?id=694090
  [ 5 ] Bug #696749 - PATCH: Run undefined-non-weak-symbols through c++filt to improve readability.
        https://bugzilla.redhat.com/show_bug.cgi?id=696749
--------------------------------------------------------------------------------


================================================================================
 rubygem-daemon_controller-0.2.6-1.fc14 (FEDORA-2011-5950)
 A library for implementing daemon management capabilities
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #697780 - Review Request: rubygem-daemon_controller - A library for implementing daemon management capabilities
        https://bugzilla.redhat.com/show_bug.cgi?id=697780
--------------------------------------------------------------------------------


================================================================================
 rubygem-file-tail-1.0.5-3.fc14 (FEDORA-2011-5959)
 File::Tail for Ruby
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #697779 - Review Request: rubygem-file-tail - File::Tail for Ruby
        https://bugzilla.redhat.com/show_bug.cgi?id=697779
--------------------------------------------------------------------------------


================================================================================
 rubygem-spruz-0.2.5-3.fc14 (FEDORA-2011-5954)
 Useful tools library in Ruby
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #697767 - Review Request: rubygem-spruz - Useful tools library in Ruby
        https://bugzilla.redhat.com/show_bug.cgi?id=697767
--------------------------------------------------------------------------------


================================================================================
 sugar-0.92.1-2.fc14 (FEDORA-2011-5957)
 Constructionist learning platform
--------------------------------------------------------------------------------
ChangeLog:

* Mon Apr 25 2011 Peter Robinson <pbrobinson at gmail.com> - 0.92.1-2
- Fix the sugar desktop icon in emulator
* Thu Apr 14 2011 Peter Robinson <pbrobinson at gmail.com> - 0.92.1-1
- 0.92.1 release
* Tue Mar  1 2011 Simon Schampijer <simon at laptop.org> - 0.92.0-2
- added upower (battery status indicator) and ConsoleKit
  (logged users information) as runtime dependencies
* Mon Feb 28 2011 Peter Robinson <pbrobinson at gmail.com> - 0.92.0-1
- 0.92.0 release
* Wed Feb  9 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.90.3-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 sugar-artwork-0.92.0-1.fc14 (FEDORA-2011-5957)
 Artwork for Sugar look-and-feel
--------------------------------------------------------------------------------
ChangeLog:

* Mon Feb 28 2011 Peter Robinson <pbrobinson at gmail.com> - 0.92.0-1
- 0.92.0 stable release
* Wed Feb  9 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.90.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sat Jan 29 2011 Peter Robinson <pbrobinson at gmail.com> - 0.90.0-2
- bump build
--------------------------------------------------------------------------------


================================================================================
 sugar-base-0.92.0-1.fc14 (FEDORA-2011-5957)
 Base Sugar library
--------------------------------------------------------------------------------
ChangeLog:

* Mon Feb 28 2011 Peter Robinson <pbrobinson at gmail.com> - 0.92.0-1
- 0.92.0 stable release
* Wed Feb  9 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.90.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sat Jan 29 2011 Peter Robinson <pbrobinson at gmail.com> - 0.90.1-2
- bump build
--------------------------------------------------------------------------------



More information about the test mailing list