Fedora 14 updates-testing report

[updates at fedoraproject.org]

The following Fedora 14 Security updates need testing:

    https://admin.fedoraproject.org/updates/libvoikko-3.0-3.fc14
    https://admin.fedoraproject.org/updates/subversion-1.6.17-1.fc14
    https://admin.fedoraproject.org/updates/tomcat6-6.0.26-21.fc14
    https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
    https://admin.fedoraproject.org/updates/xen-4.0.2-1.fc14
    https://admin.fedoraproject.org/updates/oprofile-0.9.6-21.fc14
    https://admin.fedoraproject.org/updates/ejabberd-2.1.8-2.fc14
    https://admin.fedoraproject.org/updates/blender-2.49b-14.fc14
    https://admin.fedoraproject.org/updates/curl-7.21.0-8.fc14
    https://admin.fedoraproject.org/updates/weechat-0.3.5-1.fc14
    https://admin.fedoraproject.org/updates/libxml-1.8.17-27.fc14
    https://admin.fedoraproject.org/updates/syslog-ng-3.1.4-4.fc14
    https://admin.fedoraproject.org/updates/NetworkManager-0.8.4-2.git20110622.fc14
    https://admin.fedoraproject.org/updates/xulrunner-1.9.2.18-1.fc14,firefox-3.6.18-1.fc14,mozvoikko-1.0-22.fc14.1,perl-Gtk2-MozEmbed-0.08-6.fc14.27,gnome-web-photo-0.9-21.fc14.1,galeon-2.0.7-41.fc14.1,gnome-python2-extras-2.25.3-31.fc14.1,thunderbird-3.1.11-1.fc14


The following Fedora 14 Critical Path updates have yet to be approved:

    https://admin.fedoraproject.org/updates/curl-7.21.0-8.fc14
    https://admin.fedoraproject.org/updates/NetworkManager-0.8.4-2.git20110622.fc14
    https://admin.fedoraproject.org/updates/bash-4.1.7-4.fc14
    https://admin.fedoraproject.org/updates/perl-5.12.4-145.fc14
    https://admin.fedoraproject.org/updates/redhat-rpm-config-9.1.0-8.fc14
    https://admin.fedoraproject.org/updates/python-slip-0.2.16-1.fc14
    https://admin.fedoraproject.org/updates/policycoreutils-2.0.85-30.1.fc14
    https://admin.fedoraproject.org/updates/system-config-keyboard-1.3.1-5.fc14
    https://admin.fedoraproject.org/updates/fedora-logos-14.0.2-1.fc14
    https://admin.fedoraproject.org/updates/gtk2-2.22.0-2.fc14
    https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-8.fc14.2
    https://admin.fedoraproject.org/updates/pygobject2-2.21.5-4.fc14
    https://admin.fedoraproject.org/updates/pcre-8.10-2.fc14
    https://admin.fedoraproject.org/updates/libpcap-1.1.1-3.fc14
    https://admin.fedoraproject.org/updates/xorg-x11-drv-qxl-0.0.21-3.fc14
    https://admin.fedoraproject.org/updates/evolution-exchange-2.32.3-1.fc14,evolution-data-server-2.32.3-1.fc14,evolution-2.32.3-1.fc14
    https://admin.fedoraproject.org/updates/xorg-x11-drv-nouveau-0.0.16-14.20101010git8c8f15c.fc14
    https://admin.fedoraproject.org/updates/libconcord-0.23-5.fc14,udev-161-9.fc14,concordance-0.23-2.fc14
    https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14


The following builds have been pushed to Fedora 14 updates-testing

    389-admin-1.1.18-1.fc14
    389-adminutil-1.1.14-1.fc14
    389-console-1.1.7-1.fc14
    389-ds-1.2.2-1.fc14
    389-ds-console-1.2.6-1.fc14
    NetworkManager-0.8.4-2.git20110622.fc14
    R-ROC-1.28.0-1.fc14
    R-affydata-1.11.11-1.fc14
    R-hgu133acdf-2.8.0-1.fc14
    R-hgu95av2cdf-2.8.0-1.fc14
    R-statmod-1.4.10-1.fc14
    R-timeDate-2130.93-1.fc14
    bash-4.1.7-4.fc14
    berusky-1.2-2.fc14
    curl-7.21.0-8.fc14
    firefox-3.6.18-1.fc14
    freeradius-2.1.11-1.fc14
    gajim-0.14.3-1.fc14
    galeon-2.0.7-41.fc14.1
    ghc-rpm-macros-0.10.57-1.fc14
    gnome-paint-0.4.0-4.fc14
    gnome-python2-extras-2.25.3-31.fc14.1
    gnome-web-photo-0.9-21.fc14.1
    idm-console-framework-1.1.7-2.fc14
    libdeltacloud-0.9-1.fc14
    libmtp-1.0.6-3.fc14
    mediawiki-openid-0.9.0-2.fc14
    mock-1.1.11-1.fc14
    mozvoikko-1.0-22.fc14.1
    nco-4.0.8-2.fc14
    perl-5.12.4-145.fc14
    perl-Gtk2-MozEmbed-0.08-6.fc14.27
    perl-Gtk2-Unique-0.05-2.fc14
    perl-Net-DNS-SEC-0.16-4.fc14
    poppler-0.14.5-3.fc14
    publican-jboss-2.8-1.fc14
    python-cvxopt-1.1.3-2.fc14
    python-xgoogle-1.4-3.fc14
    qterm-0.5.12-1.fc14
    quagga-0.99.18-2.fc14
    sonic-visualiser-1.8-1.fc14
    thunderbird-3.1.11-1.fc14
    xulrunner-1.9.2.18-1.fc14

Details about builds:


================================================================================
 389-admin-1.1.18-1.fc14 (FEDORA-2011-8559)
 389 Administration Server (admin)
--------------------------------------------------------------------------------
Update Information:

skip rebranding current brand - add support for different skins
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Rich Megginson <rmeggins at redhat.com> - 1.1.18-1
- skip rebranding current brand
- support for skins
* Fri May 13 2011 Rich Megginson <rmeggins at redhat.com> - 1.1.17-1
- 1.1.17
- support "in-place" upgrade and rebranding from Red Hat to 389
- many fixes for coverity issues
--------------------------------------------------------------------------------


================================================================================
 389-adminutil-1.1.14-1.fc14 (FEDORA-2011-8569)
 Utility library for 389 administration
--------------------------------------------------------------------------------
Update Information:

Many fixes for coverity issues
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 31 2011 Rich Megginson <rmeggins at redhat.com> - 1.1.14-1
- many fixes for coverity issues
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #697641 - Fix Coverity NULL pointer dereferences
        https://bugzilla.redhat.com/show_bug.cgi?id=697641
  [ 2 ] Bug #697106 - (cov#10770) Need to call va_end() after calling va_start()
        https://bugzilla.redhat.com/show_bug.cgi?id=697106
  [ 3 ] Bug #697116 - Need to check if admldapGetISIEDN() returns NULL
        https://bugzilla.redhat.com/show_bug.cgi?id=697116
  [ 4 ] Bug #697110 - (cov#10757) Remove unused variable in psetRootModAttrList()
        https://bugzilla.redhat.com/show_bug.cgi?id=697110
--------------------------------------------------------------------------------


================================================================================
 389-console-1.1.7-1.fc14 (FEDORA-2011-8614)
 389 Management Console
--------------------------------------------------------------------------------
Update Information:

Support skins - use jpackage_script instead of separate shell script
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 14 2011 Rich Megginson <rmeggins at redhat.com> - 1.1.7-1
- use jpackage_script instead of packaging our own shell script
- support "skins" package for other brands/versions
* Mon Feb  7 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.1.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 389-ds-1.2.2-1.fc14 (FEDORA-2011-8651)
 389 Directory, Administration, and Console Suite
--------------------------------------------------------------------------------
Update Information:

Get rid of old fedora-ds cruft
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun  1 2011 Rich Megginson <rmeggins at redhat.com> 1.2.2-1
- get rid of old fedora-ds stuff
--------------------------------------------------------------------------------


================================================================================
 389-ds-console-1.2.6-1.fc14 (FEDORA-2011-8583)
 389 Directory Server Management Console
--------------------------------------------------------------------------------
Update Information:

Some bug fixes - added skin support
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun 17 2011 Rich Megginson <rmeggins at redhat.com> 1.2.6-1
- git tag 389-ds-console-1.2.6
- added skins support
- Bug 700908 - Validate matching rules when creating a new attribute
- Bug 705753 - Refresh problem in Console directory browser
--------------------------------------------------------------------------------


================================================================================
 NetworkManager-0.8.4-2.git20110622.fc14 (FEDORA-2011-8612)
 Network connection manager and user applications
--------------------------------------------------------------------------------
Update Information:

This update fixes the security issue for creating shared WiFi networks.
It's been tracked by #709662 - CVE-2011-2176.

Before this update, NetworkManager didn't respect PolicyKit policies for
creating shared WiFi networks: actions org.freedesktop.network-manager-settings.system.wifi.share.open
and org.freedesktop.network-manager-settings.system.wifi.share.protected in
/usr/share/polkit-1/actions/org.freedesktop.network-manager-settings.system.policy file.
Thus, users could create shared WiFi networks even if it was disabled via the PolicyKit setting.
This update fixes this issue. Be aware, that the default policies still allow creating shared WiFi
networks. You should modify <allow_active>yes</allow_active> to <allow_active>auth_admin</allow_active>
if you require authorization with root password, or to <allow_active>no</allow_active> to disallow
creating the networks altogether through the above PolicyKit actions.

In addition, this update fixes other bugs by updating NetworkManager to git snaphot as of 2011-06-22.
- core: fix up checks for s390 CTC device type (bgo #649025)
- core: recognize platform 'gadget' devices
- core: only send hostname without domain as host-name option (rh #694758)
- core: clear 'invalid' connection tag when cable is re-plugged
- core: fix crash requesting system VPN secrets (bgo #651710)
- core: add MAC address blacklisting feature for WiFi and ethernet connections
- core: allow _ as a valid character for GSM APNs
- wifi: always fix up Ad-Hoc frequency when connecting (rh #699203)
- keyfile: better handle cert/key files that don't exist (bgo #649807)
- keyfile: ignore .pem and .der file changes
- editor: improve usability for entering manual IP addresses and routes (rh #698199) (bgo #607678)
- editor: don't crash in edit_done_cb() when connection is invalid (rh #704848)
- editor: don't allow inserting 0.0.0.0 as destination and netmask for IPv4 routes
- editor: allow _ as a valid character for GSM APNs
- applet: ensure entries activate default button if Enter is pressed (rh #622487)
- applet: add gsm registration status notification
- applet: filter APN entry characters in mobile-wizard
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 Jiří Klimeš <jklimes at redhat.com> - 0.8.4-2.git20110622
- core: respect PolicyKit permissions for creating shared WiFi networks (rh #709662)
- core: fix up checks for s390 CTC device type (bgo #649025)
- core: recognize platform 'gadget' devices
- core: only send hostname without domain as host-name option (rh #694758)
- core: clear 'invalid' connection tag when cable is re-plugged
- core: fix crash requesting system VPN secrets (bgo #651710)
- core: add MAC address blacklisting feature for WiFi and ethernet connections
- core: allow _ as a valid character for GSM APNs
- wifi: always fix up Ad-Hoc frequency when connecting (rh #699203)
- keyfile: better handle cert/key files that don't exist (bgo #649807)
- keyfile: ignore .pem and .der file changes
- editor: improve usability for entering manual IP addresses and routes (rh #698199) (bgo #607678)
- editor: don't crash in edit_done_cb() when connection is invalid (rh #704848)
- editor: don't allow inserting 0.0.0.0 as destination and netmask for IPv4 routes
- editor: allow _ as a valid character for GSM APNs
- applet: ensure entries activate default button if Enter is pressed (rh #622487)
- applet: add gsm registration status notification
- applet: filter APN entry characters in mobile-wizard
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #709662 - CVE-2011-2176 NetworkManager: Did not honour PolicyKit auth_admin action element by creation of Ad-Hoc wireless networks
        https://bugzilla.redhat.com/show_bug.cgi?id=709662
--------------------------------------------------------------------------------


================================================================================
 R-ROC-1.28.0-1.fc14 (FEDORA-2011-8643)
 Utilities for ROC
--------------------------------------------------------------------------------
Update Information:

Update of bioconductor

--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 pingou <pingou at pingoured.fr> 1.28.0-1
- Update to version 1.28.0
--------------------------------------------------------------------------------


================================================================================
 R-affydata-1.11.11-1.fc14 (FEDORA-2011-8643)
 Affymetrix data for demonstration purpose
--------------------------------------------------------------------------------
Update Information:

Update of bioconductor

--------------------------------------------------------------------------------
ChangeLog:

--------------------------------------------------------------------------------


================================================================================
 R-hgu133acdf-2.8.0-1.fc14 (FEDORA-2011-8643)
 HG-U133A.cdf data file
--------------------------------------------------------------------------------
Update Information:

Update of bioconductor

--------------------------------------------------------------------------------
ChangeLog:

--------------------------------------------------------------------------------


================================================================================
 R-hgu95av2cdf-2.8.0-1.fc14 (FEDORA-2011-8643)
 HG_U95Av2.CDF data file
--------------------------------------------------------------------------------
Update Information:

Update of bioconductor

--------------------------------------------------------------------------------
ChangeLog:

--------------------------------------------------------------------------------


================================================================================
 R-statmod-1.4.10-1.fc14 (FEDORA-2011-8643)
 Statistical modeling
--------------------------------------------------------------------------------
Update Information:

Update of bioconductor

--------------------------------------------------------------------------------
ChangeLog:

--------------------------------------------------------------------------------


================================================================================
 R-timeDate-2130.93-1.fc14 (FEDORA-2011-8643)
 Rmetrics - chronological and calendrical objects
--------------------------------------------------------------------------------
Update Information:

Update of bioconductor

--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 pingou <pingou at pingoured.fr> 2130.93-1
- Update to version 2130.93
--------------------------------------------------------------------------------


================================================================================
 bash-4.1.7-4.fc14 (FEDORA-2011-8613)
 The GNU Bourne Again shell
--------------------------------------------------------------------------------
Update Information:

Don't crash when use `read' with associative array
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 Roman Rakus <rrakus at redhat.com> - 4.1.7-4
- Don't crash when use `read' with associative array (#715050)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #715050 - [abrt] bash-4.1.7-3.fc14: array_flush: Process /bin/bash was killed by signal 11 (SIGSEGV)
        https://bugzilla.redhat.com/show_bug.cgi?id=715050
--------------------------------------------------------------------------------


================================================================================
 berusky-1.2-2.fc14 (FEDORA-2011-8574)
 Sokoban clone
--------------------------------------------------------------------------------
Update Information:

Fixed crash after start
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 Martin Stransky <stransky at redhat.com> 1.2-2
- Fixed rhbz#689106 - seg. fault after start
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #689106 - [abrt] berusky-1.2-1.fc14: game_logic::player_move: Process /usr/bin/berusky was killed by signal 6 (SIGABRT)
        https://bugzilla.redhat.com/show_bug.cgi?id=689106
--------------------------------------------------------------------------------


================================================================================
 curl-7.21.0-8.fc14 (FEDORA-2011-8640)
 A utility for getting files from remote servers (FTP, HTTP, and others)
--------------------------------------------------------------------------------
Update Information:

do not delegate GSSAPI credentials (CVE-2011-2192)
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jun 23 2011 Kamil Dudka <kdudka at redhat.com> 7.21.0-8
- do not delegate GSSAPI credentials (CVE-2011-2192)
* Sat Apr 16 2011 Peter Robinson <pbrobinson at gmail.com> 7.21.0-7
- no valgrind on SPARC or ARMv5 arches
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #711454 - CVE-2011-2192 curl: Improper delegation of client credentials during GSS negotiation
        https://bugzilla.redhat.com/show_bug.cgi?id=711454
--------------------------------------------------------------------------------


================================================================================
 firefox-3.6.18-1.fc14 (FEDORA-2011-8647)
 Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:

* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11

This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Jan Horak <jhorak at redhat.com> - 3.6.18-1
- Update to 3.6.18
--------------------------------------------------------------------------------


================================================================================
 freeradius-2.1.11-1.fc14 (FEDORA-2011-8573)
 High-performance and highly configurable free RADIUS server
--------------------------------------------------------------------------------
Update Information:

Upgrade to latest upstream release, 2.1.11
See changelog for details

--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 John Dennis <jdennis at redhat.com> - 2.1.11-1
- Upgrade to latest upstream release: 2.1.11
- Remove the following two patches as upstream has incorporated them:
    freeradius-radtest-ipv6.patch
    freeradius-lt-dladvise.patch
- Upstream changelog for 2.1.11:
  Feature improvements
  * Added doc/rfc/rfc6158.txt: RADIUS Design Guidelines.
    All vendors need to read it and follow its directions.
  * Microsoft SoH support for PEAP from Phil Mayers.
    See doc/SoH.txt
  * Certificate "bootstrap" script now checks for certificate expiry.
    See comments in raddb/eap.conf, and then "make_cert_command".
  * Support for dynamic expansion of EAP-GTC challenges.
    Patch from Alexander Clouter.
  * OCSP support from Alex Bergmann.  See raddb/eap.conf, "ocsp"
    section.
  * Updated dictionary.huawei, dictionary.3gpp, dictionary.3gpp3.
  * Added dictionary.eltex, dictionary.motorola, and dictionary.ukerna.
  * Experimental redis support from Gabriel Blanchard.
    See raddb/modules/redis and raddb/modules/rediswho
  * Add "key" to rlm_fastusers.  Closes bug #126.
  * Added scripts/radtee from original software at
    http://horde.net/~jwm/software/misc/comparison-tee
  * Updated radmin "man" page for new commands.
  * radsniff now prints the hex decoding of the packet (-x -x -x)
  * mschap module now reloads its configuration on HUP
  * Added experimental "replicate" module.  See raddb/modules/replicate
  * Policy "foo" can now refer to module "foo".  This lets you
    over-ride the behavior of a module.
  * Policy "foo.authorize" can now over-ride the behavior of module
    "foo", "authorize" method.
  * Produce errors in more situations when the configuration files
    have invalid syntax.

  Bug fixes
  * Ignore pre/post-proxy sections if proxying is disabled
  * Add configure checks for pcap_fopen*.
  * Fix call to otp_write in rlm_otp
  * Fix issue with Access-Challenge checking from 2.1.10, when the
    debug flag was set after server startup.  Closes #116 and #117.
  * Fix typo in zombie period start time.
  * Fix leak in src/main/valuepair.c.  Patch from James Ballantine.
  * Allow radtest to use spaces in shared secret.
    Patch from Cedric Carree.
  * Remove extra calls to HMAC_CTX_init() in rlm_wimax, fixing leak.
    Patch from James Ballantine.
  * Remove MN-FA key generation.  The NAS does this, not AAA.
    Patch from Ben Weichman.
  * Include dictionary.mikrotik by default.  Closes bug #121.
  * Add group membership query to MS-SQL examples.  Closes bug #120.
  * Don't cast NAS-Port to integer in Postgresql queries.
    Closes bug #112.
  * Fixes for libtool and autoconf from Sam Hartman.
  * radsniff should read the dictionaries in more situations.
  * Use fnmatch to check for detail file reader==writer.
    Closes bug #128.
  * Check for short writes (i.e. disk full) in rlm_detail.
    Closes bug #130.  Patches and testing from John Morrissey.
  * Fix typo in src/lib/token.c.  Closes bug #124
  * Allow workstation trust accounts to use MS-CHAP.
    Closes bug #123.
  * Assigning foo=`/bin/echo hello` now produces a syntax error
    if it is done outside of an "update" section.
  * Fix "too many open file descriptors" problem when using
    "verify client" in eap.conf.
  * Many fixes to dialup_admin for PHP5, by Stefan Winter.
  * Allow preprocess module to have "hints = " and "huntgroups =",
    which allows them to be empty or non-existent.
  * Renamed "php3" files to "php" in dialup_admin/
  * Produce error when sub-TLVs are used in a dictionary.  They are
    supported only in the "master" branch, and not in 2.1.x.
  * Minor fix in dictionary.redback.  Closes bug #138.
  * Fixed MySQL "NULL" issues in ippool.conf.  Closes bug #129.
  * Fix to Access-Challenge warning from Ken-ichirou Matsuzawa.
    Closes bug #118.
  * DHCP fixes to send unicast packets in more situations.
  * Fix to udpfromto, to enable it to work on IPv6 networks.
  * Fixes to the Oracle accounting_onoff_query.
  * When using both IPv4 and IPv6 home servers, ensure that we use the
    correct local socket for proxying.  Closes bug #143.
  * Suppress messages when thread pool is nearly full, all threads
    are busy, and we can't create new threads.
  * IPv6 is now enabled for udpfromto.  Closes bug #141
  * Make sqlippool query buffer the same size as sql module.
    Closes bug #139.
  * Make Coa / Disconnect proxying work again.
  * Configure scripts for rlm_caching from Nathaniel McCallum
  * src/lib/dhcp.c and src/include/libradius.h are LGPL, not GPL.
  * Updated password routines to use time-insensitive comparisons.
    This prevents timing attacks (though none are known).
  * Allow sqlite module to do normal SELECT queries.
  * rlm_wimax now has a configure script
  * Moved Ascend, USR, and Motorola "illegal" dictionaries to separate
    files.  See share/dictionary for explanations.
  * Check for duplicate module definitions in the modules{} section,
    and refuse to start if duplicates are found.
  * Check for duplicate virtual servers, and refuse to start if
    duplicates are found.
  * Don't use udpfromto if source is INADDR_ANY.  Closes bug #148.
  * Check pre-conditions before running radmin "inject file".
  * Don't over-ride "no match" with "match" for regexes.
    Closes bug #152.
  * Make retry and error message configurable in mschap.
    See raddb/modules/mschap
  * Allow EAP-MSCHAPv2 to send error message to client.  This change
    allows some clients to prompt the user for a new password.
    See raddb/eap.conf, mschapv2 section, "send_error".
  * Load the default virtual server before any others.
    This matches what users expect, and reduces confusion.
  * Fix configure checks for udpfromto.  Fixes Debian bug #606866
  * Definitive fix for bug #35, where the server could crash under
    certain loads.  Changes src/lib/packet.c to use RB trees.
  * Updated "configure" checks to allow IPv6 udpfromto on Linux.
  * SQL module now returns NOOP if the accounting start/interim/stop
    queries don't do anything.
  * Allow %{outer.control: ... } in string expansions
  * home_server coa config now matches raddb/proxy.conf
  * Never send a reply to a DHCP Release.
* Sat Jan  1 2011 John Dennis <jdennis at redhat.com> - 2.1.10-3
- bug 666589 - removing freeradius from system does not delete the user "radiusd"
  fix scriptlet argument testing, simplify always exiting with zero
--------------------------------------------------------------------------------


================================================================================
 gajim-0.14.3-1.fc14 (FEDORA-2011-8607)
 Jabber client written in PyGTK
--------------------------------------------------------------------------------
Update Information:

This is a bugfix release of Gajim. From upstream changelog:

* Fix history viewer
* Fix closing roster window
* Prevent some errors with metacontacts

--------------------------------------------------------------------------------
ChangeLog:

* Mon Jun 20 2011 Michal Schmidt <mschmidt at redhat.com> 0.14.3-1
- Upstream bugfix release.
- gajim-0.14-handle-read-before-close.patch already applied.
--------------------------------------------------------------------------------


================================================================================
 galeon-2.0.7-41.fc14.1 (FEDORA-2011-8647)
 GNOME2 Web browser based on Mozilla
--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:

* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11

This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Jan Horak <jhorak at redhat.com> - 2.0.7-41.1
- Rebuild against newer gecko
--------------------------------------------------------------------------------


================================================================================
 ghc-rpm-macros-0.10.57-1.fc14 (FEDORA-2011-8563)
 Macros for building packages for GHC
--------------------------------------------------------------------------------
Update Information:

Don't generate bogus package dependencies on ghc-base = 3.x, which is part of the main ghc-base-4.x subpackage.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 Jens Petersen <petersen at redhat.com> - 0.10.57-1
- ghc-deps.sh: also ignore base-3 since it is part of ghc-base
--------------------------------------------------------------------------------


================================================================================
 gnome-paint-0.4.0-4.fc14 (FEDORA-2011-8604)
 Easy to use paint program
--------------------------------------------------------------------------------
Update Information:

gnome-paint is a simple, easy to use paint program for GNOME.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #666233 - Review Request: gnome-paint - Easy to use paint program for GNOME
        https://bugzilla.redhat.com/show_bug.cgi?id=666233
--------------------------------------------------------------------------------


================================================================================
 gnome-python2-extras-2.25.3-31.fc14.1 (FEDORA-2011-8647)
 Additional PyGNOME Python extension modules
--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:

* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11

This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Jan Horak <jhorak at redhat.com> - 2.25.3-31.1
- Rebuild against newer gecko
--------------------------------------------------------------------------------


================================================================================
 gnome-web-photo-0.9-21.fc14.1 (FEDORA-2011-8647)
 HTML pages thumbnailer
--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:

* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11

This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Jan Horak <jhorak at redhat.com> - 0.9-21.1
- Rebuild against newer gecko
--------------------------------------------------------------------------------


================================================================================
 idm-console-framework-1.1.7-2.fc14 (FEDORA-2011-8603)
 Identity Management Console Framework
--------------------------------------------------------------------------------
Update Information:

A couple of bug fixes
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Rich Megginson <rmeggins at redhat.com> - 1.1.7-2
- using new upstream git repo at fedorahosted.org
- git tag idm-console-framework-1.1.7
- Use DefaultTopologyPlugin if topologyplugin not found in the DS
- Bug 706472 - [console] java exception throw in UI, but user gets created
- Bug 706258 - ACI Editor dialog flickers
--------------------------------------------------------------------------------


================================================================================
 libdeltacloud-0.9-1.fc14 (FEDORA-2011-8657)
 A library for accessing deltacloud
--------------------------------------------------------------------------------
Update Information:

Update to libdeltacloud 0.9
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jun  6 2011 Chris Lalancette <clalance at redhat.com> - 0.9-1
- Update to latest upstream (0.9)
--------------------------------------------------------------------------------


================================================================================
 libmtp-1.0.6-3.fc14 (FEDORA-2011-8560)
 A software library for MTP media players
--------------------------------------------------------------------------------
Update Information:

Attempting to address connection issues with primarily
Android-based tablets we update the device database with the
lates from libmtp 1.1.0
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jun 23 2011 Linus Walleij <triad at df.lth.se> 1.0.6-3
- Update the device database to latest version in an attempt to
  address issues with Android tablets like the Xoom and Asus tablets
* Fri Apr  1 2011 Linus Walleij <triad at df.lth.se> 1.0.6-2
- Maybe fixing a probing issue on an input device.
* Sat Feb 12 2011 Linus Walleij <triad at df.lth.se> 1.0.6-1
- New upstream release fixing bugs & more things we patched.
* Tue Feb  8 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.0.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sat Feb  5 2011 Linus Walleij <triad at df.lth.se> 1.0.5-1
- New upstream release fixing all the things we patched.
* Mon Jan 24 2011 Linus Walleij <triad at df.lth.se> 1.0.4-3
- Screwed up boolean logic in last patch, fixing it.
* Wed Jan 19 2011 Linus Walleij <triad at df.lth.se> 1.0.4-2
- Testing out a patch to be more careful when probing devices.
* Sun Jan  9 2011 Linus Walleij <triad at df.lth.se> 1.0.4-1
- New upstream version with mucho udev fixes.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #647506 - boot hangs at udev
        https://bugzilla.redhat.com/show_bug.cgi?id=647506
  [ 2 ] Bug #688836 - Can't connect to mtp device with mtp-tools scripts.
        https://bugzilla.redhat.com/show_bug.cgi?id=688836
  [ 3 ] Bug #703915 - [abrt] gnome-phone-manager-0.65-9.fc14: __libc_message: Process /usr/bin/gnome-phone-manager was killed by signal 6 (SIGABRT)
        https://bugzilla.redhat.com/show_bug.cgi?id=703915
  [ 4 ] Bug #715453 - [abrt] gnomad2-2.9.5-1.fc14: __libc_message: Process /usr/bin/gnomad2 was killed by signal 6 (SIGABRT)
        https://bugzilla.redhat.com/show_bug.cgi?id=715453
--------------------------------------------------------------------------------


================================================================================
 mediawiki-openid-0.9.0-2.fc14 (FEDORA-2011-8634)
 The OpenID extension for MediaWiki
--------------------------------------------------------------------------------
Update Information:

Fixed dependency mediawiki116 -> mediawiki
Upgrade to mediawiki-openid 0.9.0
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 Kurt Seifried <kurt at seifried.org> - 0.9.0-2
- Fixed requires dependancy, mediawiki116 -> mediawiki
* Sat Jun 11 2011 Kurt Seifried <kurt at seifried.org> - 0.9.0-1
- Updated to 0.9.0 (OpenID-MW1.16-r66255.tar.gz)
--------------------------------------------------------------------------------


================================================================================
 mock-1.1.11-1.fc14 (FEDORA-2011-8575)
 Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:

removed 'newinstance' option from devpts mount in chroot
added Fedora 16 configuration files
Fix inconsistent permissions fixing on /var/cache/mock in SPEC template
modify --chroot command to print command output
update the python requirement to >= 2.6 for 1.1.x mock branch

--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 Clark Williams <williams at redhat.com> - 1.1.11-1
- remove 'newinstance' mount parameter from devpts filesystem mount (BZ# 711175)
- modify --chroot command to print command output
- update the python requirement to >= 2.6 for 1.1.x mock branch
- updated build procedure using fedpkg
- added Fedora 16 configuration files
- from James Laska <jlaska at redhat.com>
  - fix log message typo in SELinux plugin
- from Yury V. Zaytsev <yury at shurup.com>
  - Fix inconsistent permissions fixing on /var/cache/mock in SPEC template (BZ 715286)
--------------------------------------------------------------------------------


================================================================================
 mozvoikko-1.0-22.fc14.1 (FEDORA-2011-8647)
 Finnish Voikko spell-checker extension for Mozilla programs
--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:

* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11

This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Jan Horak <jhorak at redhat.com> - 1.0-22.1
- Rebuild against newer gecko
--------------------------------------------------------------------------------


================================================================================
 nco-4.0.8-2.fc14 (FEDORA-2011-8534)
 Suite of programs for manipulating NetCDF/HDF4 files
--------------------------------------------------------------------------------
Update Information:

- Update to 4.0.8
- NetCDF4 support
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jun 23 2011 - Orion Poplawski <orion at cora.nwra.com> - 4.0.8-2
- Really enable netcdf4 support
* Tue May 17 2011 - Orion Poplawski <orion at cora.nwra.com> - 4.0.8-1
- Update to 4.0.8
* Wed Apr  6 2011 - Orion Poplawski <orion at cora.nwra.com> - 4.0.7-1
- Update to 4.0.7
* Tue Feb  8 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 4.0.6-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sun Feb  6 2011 - Orion Poplawski <orion at cora.nwra.com> - 4.0.6-3
- Rebuild with fixed hdf5 for netcdf4 support
* Sat Feb  5 2011 - Orion Poplawski <orion at cora.nwra.com> - 4.0.6-2
- Fixup more EL5 tests
* Sat Feb  5 2011 - Orion Poplawski <orion at cora.nwra.com> - 4.0.6-1
- Update to 4.0.6
- Really only use libnc-dap for EL5
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #712290 - Updated version of nco with netcdf4 support
        https://bugzilla.redhat.com/show_bug.cgi?id=712290
--------------------------------------------------------------------------------


================================================================================
 perl-5.12.4-145.fc14 (FEDORA-2011-8615)
 Practical Extraction and Report Language
--------------------------------------------------------------------------------
Update Information:

Update to stable minor release 5.12.4: 

 * remove patch for lc tainting RT #87336, 

 * updated Module-CoreList v2.50 in tarball
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 Marcela Mašláňová <mmaslano at redhat.com> - 4:5.12.4-145
- update to minor update release 5.12.4
- Upstream changes: remove patch for lc tainting RT #87336,
-          updated Module-CoreList v2.50 in tarball
- add un-owned but existing perl_vendorarch
* Wed Jun  1 2011 Marcela Mašláňová <mmaslano at redhat.com> - 4:5.12.3-144
- arm can't do parallel build
- add require EE::MM into IPC::Cmd 711486
--------------------------------------------------------------------------------


================================================================================
 perl-Gtk2-MozEmbed-0.08-6.fc14.27 (FEDORA-2011-8647)
 Interface to the Mozilla embedding widget
--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:

* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11

This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Jan Horak <jhorak at redhat.com> - 0.08-6.27
- Rebuild against newer gecko
--------------------------------------------------------------------------------


================================================================================
 perl-Gtk2-Unique-0.05-2.fc14 (FEDORA-2011-8566)
 Perl bindings for the C library "libunique"
--------------------------------------------------------------------------------
Update Information:

Initial Package for Fedora
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #710699 - Review Request: perl-Gtk2-Unique - Perl bindings for the C library "libunique"
        https://bugzilla.redhat.com/show_bug.cgi?id=710699
--------------------------------------------------------------------------------


================================================================================
 perl-Net-DNS-SEC-0.16-4.fc14 (FEDORA-2011-8568)
 DNSSEC modules for Perl
--------------------------------------------------------------------------------
Update Information:

A patched version of Net::DNS::SEC that properly handles the new
private key format
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan  6 2011 Wes Hardaker <wjhns174 at hardakers.net> - 0.16-4
- added support for the v1.3 private key format
* Thu Sep 23 2010 Wes Hardaker <wjhns174 at hardakers.net> - 0.16-3
- rebuild after prereq now properly in the system
* Tue Aug 24 2010 Wes Hardaker <wjhns174 at hardakers.net> - 0.16-2
- added MIME::Base32 as a build req
* Tue Aug 24 2010 Wes Hardaker <wjhns174 at hardakers.net> - 0.16-1
- Update to upstream 0.16
--------------------------------------------------------------------------------


================================================================================
 poppler-0.14.5-3.fc14 (FEDORA-2011-8594)
 PDF rendering library
--------------------------------------------------------------------------------
Update Information:

This update fixes bugs #625744 and #702126.

--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Marek Kasik <mkasik at redhat.com> - 0.14.5-3
- Access correct variable
- Backport of fix of upstream bug #33063
- Resolves: #702126
* Thu Nov 25 2010 Marek Kasik <mkasik at redhat.com> - 0.14.5-2
- Check the objects are numbers before using them
- Resolves: #625744
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #625744 - [abrt] evince-2.30.3-1.fc13: raise: Process /usr/bin/evince was killed by signal 6 (SIGABRT)
        https://bugzilla.redhat.com/show_bug.cgi?id=625744
  [ 2 ] Bug #702126 - Evince crashes opening PDF's containing fill-in form data
        https://bugzilla.redhat.com/show_bug.cgi?id=702126
--------------------------------------------------------------------------------


================================================================================
 publican-jboss-2.8-1.fc14 (FEDORA-2011-8637)
 Common documentation files for JBoss
--------------------------------------------------------------------------------
Update Information:

More translations
Update to upstream 2.6
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 Rüdiger Landmann <r.landmann at redhat.com> 2.8-1
- Updated translations
* Wed Jun 15 2011 Rüdiger Landmann <r.landmann at redhat.com> 2.7-1
- format simplelist for extra trademarks -- BZ#708259
--------------------------------------------------------------------------------


================================================================================
 python-cvxopt-1.1.3-2.fc14 (FEDORA-2011-8617)
 A Python Package for Convex Optimization
--------------------------------------------------------------------------------
Update Information:

This build enables the DSDP module.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 Jerry James <loganjerry at gmail.com> - 1.1.3-2
- Rebuild due to bz 712251
- Enable the DSDP extension
--------------------------------------------------------------------------------


================================================================================
 python-xgoogle-1.4-3.fc14 (FEDORA-2011-8625)
 Python library to search Google without using their API
--------------------------------------------------------------------------------
Update Information:

- Initial package
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #710775 - Review Request: python-xgoogle - Python library to search Google without using their API
        https://bugzilla.redhat.com/show_bug.cgi?id=710775
--------------------------------------------------------------------------------


================================================================================
 qterm-0.5.12-1.fc14 (FEDORA-2011-8621)
 BBS client for X Window System written in Qt
--------------------------------------------------------------------------------
Update Information:

New upstream release
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun 24 2011 Robin Lee <cheeselee at fedoraproject.org> - 0.5.12-1
- Update to 0.5.12 (#715246)
- Conflicts torque-client (#587554)
- URL updated
- Description revised
* Tue Feb  8 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.5.11-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #715246 - qterm-0.5.12 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=715246
  [ 2 ] Bug #587554 - file conflicts with torque-client
        https://bugzilla.redhat.com/show_bug.cgi?id=587554
--------------------------------------------------------------------------------


================================================================================
 quagga-0.99.18-2.fc14 (FEDORA-2011-8579)
 Routing daemon
--------------------------------------------------------------------------------
Update Information:

little corrections in watchquagga init script
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jun 23 2011 Jiri Skala <jskala at redhat.com> - 0.99.18-2
- fixes #712467 - type in init.d script causes strange message on boot
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #712467 - type in init.d script causes strange message on boot
        https://bugzilla.redhat.com/show_bug.cgi?id=712467
--------------------------------------------------------------------------------


================================================================================
 sonic-visualiser-1.8-1.fc14 (FEDORA-2011-8554)
 A program for viewing and exploring audio data
--------------------------------------------------------------------------------
Update Information:

Latest sonic-visualiser release
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Michel Salim <salimma at fedoraproject.org> - 1.8-1
- Update to 1.8
* Wed Feb  9 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.7.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #695303 - sonic-visualiser-1.8 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=695303
--------------------------------------------------------------------------------


================================================================================
 thunderbird-3.1.11-1.fc14 (FEDORA-2011-8647)
 Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:

* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11

This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Jan Horak <jhorak at redhat.com> - 3.1.11-1
- Update to 3.1.11
--------------------------------------------------------------------------------


================================================================================
 xulrunner-1.9.2.18-1.fc14 (FEDORA-2011-8647)
 XUL Runtime for Gecko Applications
--------------------------------------------------------------------------------
Update Information:

Update to new upstream Firefox version 3.6.18 and Thunderbird version 3.1.11, fixing multiple security issues detailed in the upstream advisories:

* http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.18
* http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.11

This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox / XULRunner.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Jan Horak <jhorak at redhat.com> - 1.9.2.18-1
- Update to 1.9.2.18
--------------------------------------------------------------------------------