Fedora 15 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Sat Jun 25 20:03:03 UTC 2011


The following Fedora 15 Security updates need testing:

    https://admin.fedoraproject.org/updates/asterisk-1.8.4.3-1.fc15
    https://admin.fedoraproject.org/updates/ejabberd-2.1.8-2.fc15
    https://admin.fedoraproject.org/updates/torque-3.0.1-3.fc15
    https://admin.fedoraproject.org/updates/libvoikko-3.2.1-1.fc15
    https://admin.fedoraproject.org/updates/blender-2.49b-16.fc15
    https://admin.fedoraproject.org/updates/oprofile-0.9.6-21.fc15
    https://admin.fedoraproject.org/updates/libxml-1.8.17-27.fc15
    https://admin.fedoraproject.org/updates/weechat-0.3.5-1.fc15
    https://admin.fedoraproject.org/updates/xen-4.1.1-1.fc15
    https://admin.fedoraproject.org/updates/rubygem-activesupport-3.0.5-3.fc15
    https://admin.fedoraproject.org/updates/rubygem-actionpack-3.0.5-3.fc15
    https://admin.fedoraproject.org/updates/gdk-pixbuf2-2.23.3-2.fc15


The following Fedora 15 Critical Path updates have yet to be approved:

    https://admin.fedoraproject.org/updates/libcap-ng-0.6.6-1.fc15
    https://admin.fedoraproject.org/updates/gdk-pixbuf2-2.23.3-2.fc15
    https://admin.fedoraproject.org/updates/nss-softokn-3.12.10-2.fc15
    https://admin.fedoraproject.org/updates/xorg-x11-drv-evdev-2.6.0-4.fc15
    https://admin.fedoraproject.org/updates/xorg-x11-drv-wacom-0.11.1-1.fc15
    https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-14.fc15.1
    https://admin.fedoraproject.org/updates/lldpad-0.9.41-3.fc15
    https://admin.fedoraproject.org/updates/mtools-4.0.16-1.fc15
    https://admin.fedoraproject.org/updates/libfprint-0.4.0-1.fc15,fprintd-0.4.1-1.fc15


The following builds have been pushed to Fedora 15 updates-testing

    OpenLP-1.9.6-1.fc15
    asterisk-1.8.4.3-1.fc15
    asunder-2.1-1.fc15
    ax25-tools-0.0.9-6.fc15
    gnome-shell-extension-icon-manager-0-0.2.gite9deb2b.fc15
    kbibtex-0.3-2.fc15
    krb5-1.9.1-5.fc15
    libcap-ng-0.6.6-1.fc15
    libnjb-2.2.7-1.fc15
    mail-notification-5.4-39.fc15
    perl-Dist-Zilla-4.200008-1.fc15
    perl-Moose-2.0010-1.fc15
    perl-MooseX-OneArgNew-0.002-1.fc15
    perl-Test-Spec-0.33-1.fc15
    perl-XML-Atom-0.39-2.fc15
    phatch-0.2.7-7.fc15
    portreserve-0.0.5-1.fc15
    python-pip-0.8.3-1.fc15
    python-rhsm-0.96.5-1.fc15
    routino-2.0.1-2.fc15
    setroubleshoot-3.0.37-1.fc15
    sirius-0.8.0-17.fc15
    suricata-1.0.4-1.fc15
    transifex-client-0.5.2-1.fc15

Details about builds:


================================================================================
 OpenLP-1.9.6-1.fc15 (FEDORA-2011-8724)
 Open source Church presentation and lyrics projection application
--------------------------------------------------------------------------------
Update Information:

Beta 2 release.
See OpenLP.org for release notes
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jun 25 2011 Tim Bentley <timbentley at openlp.org> - 1.9.6-1
- Release build for beta 2
--------------------------------------------------------------------------------


================================================================================
 asterisk-1.8.4.3-1.fc15 (FEDORA-2011-8728)
 The Open Source PBX
--------------------------------------------------------------------------------
Update Information:

The Asterisk Development Team has announced the release of Asterisk versions
1.4.41.1, 1.6.2.18.1, and 1.8.4.3, which are security releases.

These releases are available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/releases

The release of Asterisk 1.4.41.1, 1.6.2.18, and 1.8.4.3 resolves several issues
as outlined below:

* AST-2011-008: If a remote user sends a SIP packet containing a null,
 Asterisk assumes available data extends past the null to the
 end of the packet when the buffer is actually truncated when
 copied.  This causes SIP header parsing to modify data past
 the end of the buffer altering unrelated memory structures.
 This vulnerability does not affect TCP/TLS connections.
 -- Resolved in 1.6.2.18.1 and 1.8.4.3

* AST-2011-009: A remote user sending a SIP packet containing a Contact header
 with a missing left angle bracket (<) causes Asterisk to
 access a null pointer.
 -- Resolved in 1.8.4.3

* AST-2011-010: A memory address was inadvertently transmitted over the
 network via IAX2 via an option control frame and the remote party would try
 to access it.
 -- Resolved in 1.4.41.1, 1.6.2.18.1, and 1.8.4.3


The issues and resolutions are described in the AST-2011-008, AST-2011-009, and
AST-2011-010 security advisories.

For more information about the details of these vulnerabilities, please read
the security advisories AST-2011-008, AST-2011-009, and AST-2011-010, which were
released at the same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.41.1
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.18.1
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.3

Security advisories AST-2011-008, AST-2011-009, and AST-2011-010 are available
at:

http://downloads.asterisk.org/pub/security/AST-2011-008.pdf
http://downloads.asterisk.org/pub/security/AST-2011-009.pdf
http://downloads.asterisk.org/pub/security/AST-2011-010.pdf

The Asterisk Development Team has announced the release of Asterisk
version 1.8.4.2, which is a security release for Asterisk 1.8.

This release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/releases

The release of Asterisk 1.8.4.2 resolves an issue with SIP URI
parsing which can lead to a remotely exploitable crash:

   Remote Crash Vulnerability in SIP channel driver (AST-2011-007)

The issue and resolution is described in the AST-2011-007 security
advisory.

For more information about the details of this vulnerability, please
read the security advisory AST-2011-007, which was released at the
same time as this announcement.

For a full list of changes in the current release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.2

Security advisory AST-2011-007 is available at:

http://downloads.asterisk.org/pub/security/AST-2011-007.pdf

The Asterisk Development Team has announced the release of Asterisk 1.8.4.1.
This release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/

The release of Asterisk 1.8.4.1 resolves several issues reported by the
community. Without your help this release would not have been possible.
Thank you!

Below is a list of issues resolved in this release:

 * Fix our compliance with RFC 3261 section 18.2.2. (aka Cisco phone fix)
  (Closes issue #18951. Reported by jmls. Patched by wdoekes)

 * Resolve a change in IPv6 header parsing due to the Cisco phone fix issue.
  This issue was found and reported by the Asterisk test suite.
  (Closes issue #18951. Patched by mnicholson)

 * Resolve potential crash when using SIP TLS support.
  (Closes issue #19192. Reported by stknob. Patched by Chainsaw. Tested by
   vois, Chainsaw)

 * Improve reliability when using SIP TLS.
  (Closes issue #19182. Reported by st. Patched by mnicholson)


For a full list of changes in this release candidate, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.4.1

The Asterisk Development Team has announced the release of Asterisk 1.8.4. This
release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/

The release of Asterisk 1.8.4 resolves several issues reported by the community.
Without your help this release would not have been possible. Thank you!

Below is a sample of the issues resolved in this release:

 * Use SSLv23_client_method instead of old SSLv2 only.
  (Closes issue #19095, #19138. Reported, patched by tzafrir. Tested by russell
  and chazzam.

 * Resolve crash in ast_mutex_init()
  (Patched by twilson)

 * Resolution of several DTMF based attended transfer issues.
  (Closes issue #17999, #17096, #18395, #17273. Reported by iskatel, gelo,
  shihchuan, grecco. Patched by rmudgett)

  NOTE: Be sure to read the ChangeLog for more information about these changes.

 * Resolve deadlocks related to device states in chan_sip
  (Closes issue #18310. Reported, patched by one47. Patched by jpeeler)

 * Resolve an issue with the Asterisk manager interface leaking memory when
  disabled.
  (Reported internally by kmorgan. Patched by russellb)

 * Support greetingsfolder as documented in voicemail.conf.sample.
  (Closes issue #17870. Reported by edhorton. Patched by seanbright)

 * Fix channel redirect out of MeetMe() and other issues with channel softhangup
  (Closes issue #18585. Reported by oej. Tested by oej, wedhorn, russellb.
  Patched by russellb)

 * Fix voicemail sequencing for file based storage.
  (Closes issue #18498, #18486. Reported by JJCinAZ, bluefox. Patched by
  jpeeler)

 * Set hangup cause in local_hangup so the proper return code of 486 instead of
  503 when using Local channels when the far sides returns a busy. Also affects
  CCSS in Asterisk 1.8+.
  (Patched by twilson)

 * Fix issues with verbose messages not being output to the console.
  (Closes issue #18580. Reported by pabelanger. Patched by qwell)

 * Fix Deadlock with attended transfer of SIP call
  (Closes issue #18837. Reported, patched by alecdavis. Tested by
  alecdavid, Irontec, ZX81, cmaj)

Includes changes per AST-2011-005 and AST-2011-006
For a full list of changes in this release candidate, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.4

Information about the security releases are available at:

http://downloads.asterisk.org/pub/security/AST-2011-005.pdf
http://downloads.asterisk.org/pub/security/AST-2011-006.pdf

--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun 24 2011 Jeffrey C. Ollie <jeff at ocjtech.us> - 1.8.4.3-1
- The Asterisk Development Team has announced the release of Asterisk versions
- 1.4.41.1, 1.6.2.18.1, and 1.8.4.3, which are security releases.
- 
- These releases are available for immediate download at
- http://downloads.asterisk.org/pub/telephony/asterisk/releases
- 
- The release of Asterisk 1.4.41.1, 1.6.2.18, and 1.8.4.3 resolves several issues
- as outlined below:
- 
- * AST-2011-008: If a remote user sends a SIP packet containing a null,
-  Asterisk assumes available data extends past the null to the
-  end of the packet when the buffer is actually truncated when
-  copied.  This causes SIP header parsing to modify data past
-  the end of the buffer altering unrelated memory structures.
-  This vulnerability does not affect TCP/TLS connections.
-  -- Resolved in 1.6.2.18.1 and 1.8.4.3
- 
- * AST-2011-009: A remote user sending a SIP packet containing a Contact header
-  with a missing left angle bracket (<) causes Asterisk to
-  access a null pointer.
-  -- Resolved in 1.8.4.3
- 
- * AST-2011-010: A memory address was inadvertently transmitted over the
-  network via IAX2 via an option control frame and the remote party would try
-  to access it.
-  -- Resolved in 1.4.41.1, 1.6.2.18.1, and 1.8.4.3
- 
- The issues and resolutions are described in the AST-2011-008, AST-2011-009, and
- AST-2011-010 security advisories.
- 
- For more information about the details of these vulnerabilities, please read
- the security advisories AST-2011-008, AST-2011-009, and AST-2011-010, which were
- released at the same time as this announcement.
- 
- For a full list of changes in the current releases, please see the ChangeLog:
- 
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.41.1
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.18.1
- http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.3
- 
- Security advisories AST-2011-008, AST-2011-009, and AST-2011-010 are available
- at:
- 
- http://downloads.asterisk.org/pub/security/AST-2011-008.pdf
- http://downloads.asterisk.org/pub/security/AST-2011-009.pdf
- http://downloads.asterisk.org/pub/security/AST-2011-010.pdf
* Tue Jun 21 2011 Jeffrey C. Ollie <jeff at ocjtech.us> - 1.8.4.2-2
- Convert to systemd
* Fri Jun 17 2011 Marcela Mašláňová <mmaslano at redhat.com> - 1.8.4.2-1.2
- Perl mass rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #710441 - CVE-2011-2216 Asterisk: Remote DoS (crash) in SIP channel driver (AST-2011-007)
        https://bugzilla.redhat.com/show_bug.cgi?id=710441
--------------------------------------------------------------------------------


================================================================================
 asunder-2.1-1.fc15 (FEDORA-2011-8688)
 A graphical Audio CD ripper and encoder
--------------------------------------------------------------------------------
Update Information:

(From original changelog)
3 Jan 2011 - 2.1
================
- Added Basque, Urdu translations
- Fixed crash at startup that happened on some systems (e.g. when run with kde-config).
- Fixed bug where selected destination folder was lost when prefs window is open.
- Fixed some tooltips.
- System umask is now obeyed when creating directories.
- Year for file/directory names and tags is now editable.
- Removed 'Single Genre' checkbox.
- No longer passing -Y and -Z options to cdparanoia, for better quality rips. This was reported to freeze on badly scratched disks, but perhaps the cause was different.

--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun 24 2011 Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 2.1-1
- updated to 2.1
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #715297 - update to new release 2.1
        https://bugzilla.redhat.com/show_bug.cgi?id=715297
--------------------------------------------------------------------------------


================================================================================
 ax25-tools-0.0.9-6.fc15 (FEDORA-2011-8715)
 Tools used to configure an ax.25 enabled computer
--------------------------------------------------------------------------------
Update Information:

"Apply libXi-devel to BuildRequires. Build log now reports properly."
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 21 2011 Randall J. Berry, N3LRX <dp67 at fedoraproject.org> - 0.0.9-6
- Rebuild test including new BRs
* Tue Jun 21 2011 Ralf Baechle <ralf at linux-mips.org> - 0.0.9-5
- Added BRs libXi-devel, fltk-devel
* Tue Jun 21 2011 Randall J. Berry, N3LRX <dp67 at fedoraproject.org> - 0.0.9-4
- Rebuild per bz #545272
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #545272 - AX-25-tools All builds are bad
        https://bugzilla.redhat.com/show_bug.cgi?id=545272
--------------------------------------------------------------------------------


================================================================================
 gnome-shell-extension-icon-manager-0-0.2.gite9deb2b.fc15 (FEDORA-2011-8727)
 A gnome-shell extension to manage icons in top bar
--------------------------------------------------------------------------------
Update Information:

newpackage
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #712705 - Review Request: gnome-shell-extension-icon-manager -  A gnome-shell extension to manage icons in top bar
        https://bugzilla.redhat.com/show_bug.cgi?id=712705
--------------------------------------------------------------------------------


================================================================================
 kbibtex-0.3-2.fc15 (FEDORA-2011-8684)
 A BibTeX editor for KDE
--------------------------------------------------------------------------------
Update Information:

KDE4-based new release
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jun 25 2011 Robin Lee <cheeselee at fedoraproject.org> - 0.3-2
- Scriptlets revised
- Use description from upstream REAMDE
* Sat Jun 25 2011 Robin Lee <cheeselee at fedoraproject.org> - 0.3-1
- Update to 0.3
- BR: cmake kdelibs-devel poppler-qt4-devel added, kdelibs3-devel removed
- Cmake-based build
- Scriptlets revised
- Specfile Untabified
- URL and Source0 updated
- kbibtex-0.2-desktop-file-type.patch removed
- Other cleanup
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #655424 - new upstream version available
        https://bugzilla.redhat.com/show_bug.cgi?id=655424
  [ 2 ] Bug #716600 - kbibtex-0.3 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=716600
--------------------------------------------------------------------------------


================================================================================
 krb5-1.9.1-5.fc15 (FEDORA-2011-8726)
 The Kerberos network authentication system
--------------------------------------------------------------------------------
Update Information:

This update bumps us to 1.9.1, which rolls up a few patches which we'd previously been carrying.

Additionally, the update now ensures that the proper SELinux file context is applied to replay caches when expired entries are expunged from them, and fixes a potential crash in "klist".

It backports fixes for interoperability problems with KDCs which reject requests which specify options they don't recognize, and with older versions of kadmind.  It also backports a change to how host names are used to derive principal names.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jun 23 2011 Nalin Dahyabhai <nalin at redhat.com> 1.9.1-5
- pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
  during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
  not to ask for an IPv6 address based on the set of configured interfaces
  (RT#6922)
- pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)
* Mon Jun 20 2011 Nalin Dahyabhai <nalin at redhat.com> 1.9.1-4
- apply upstream patch by way of Burt Holzman to fall back to a non-referral
  method in cases where we might be derailed by a KDC that rejects the
  canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)
* Tue Jun 14 2011 Nalin Dahyabhai <nalin at redhat.com> 1.9.1-3
- pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
  using the old protocol over IPv4 again (RT#6920)
* Tue Jun 14 2011 Nalin Dahyabhai <nalin at redhat.com>
- incorporate a fix to teach the file labeling bits about when replay caches
  are expunged (#576093)
* Thu May 26 2011 Nalin Dahyabhai <nalin at redhat.com>
- switch to the upstream patch for #707145
* Wed May 25 2011 Nalin Dahyabhai <nalin at redhat.com> 1.9.1-2
- klist: don't trip over referral entries when invoked with -s (#707145,
  RT#6915)
* Fri May  6 2011 Nalin Dahyabhai <nalin at redhat.com>
- fixup URL in a comment
- when built with NSS, require 3.12.10 rather than 3.12.9
* Thu May  5 2011 Nalin Dahyabhai <nalin at redhat.com> 1.9.1-1
- update to 1.9.1:
  - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
    CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #684065 - missing parenthesis in backoff_from_master()
        https://bugzilla.redhat.com/show_bug.cgi?id=684065
  [ 2 ] Bug #715074 - Canonicalize fallback only works for different realm (MITKRB RT #6917)
        https://bugzilla.redhat.com/show_bug.cgi?id=715074
--------------------------------------------------------------------------------


================================================================================
 libcap-ng-0.6.6-1.fc15 (FEDORA-2011-8685)
 An alternate posix capabilities library
--------------------------------------------------------------------------------
Update Information:

This update fixes a couple minor bugs in the utilities and allows use of the new CAP_SYSLOG capability.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun 24 2011 Steve Grubb <sgrubb at redhat.com> 0.6.6-1
- New upstream release
--------------------------------------------------------------------------------


================================================================================
 libnjb-2.2.7-1.fc15 (FEDORA-2011-8718)
 A software library for talking to the Creative Nomad Jukeboxes and Dell DJs
--------------------------------------------------------------------------------
Update Information:

Maintenance release fixing a playlist bug
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jun 25 2011 Linus Walleij <triad at df.lth.se> 2.2.7-1
- New upstream release, fixing longstanding bug. Nuke HAL support.
* Wed Jun 15 2011 Linus Walleij <triad at df.lth.se> 2.2.6-10
- Tag libnjb devices with a specific ID for autodetection
--------------------------------------------------------------------------------


================================================================================
 mail-notification-5.4-39.fc15 (FEDORA-2011-8706)
 Status icon that informs you if you have new mail
--------------------------------------------------------------------------------
Update Information:

Fixes a markup issue in XFCE
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jun 25 2011 Erik van Pienbroek <epienbro at fedoraproject.org> - 5.4-39
- Fix markup with XFCE (RHBZ #715591)
  Thanks to Enrico Scholz for supplying a patch!
* Fri Jun 17 2011 Erik van Pienbroek <epienbro at fedoraproject.org> - 5.4-38
- Fixed the compilation against the latest evolution
  More changes are still needed for full compatibility
* Wed Jun 15 2011 Dmitry Butskoy <Dmitry at Butskoy.name> - 5.4-37
- rebuild for new evolution-data-server
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #715591 - Violates "Notifications Specification" by using <span> tags in notification popup
        https://bugzilla.redhat.com/show_bug.cgi?id=715591
--------------------------------------------------------------------------------


================================================================================
 perl-Dist-Zilla-4.200008-1.fc15 (FEDORA-2011-8722)
 Distribution builder; installer not included!
--------------------------------------------------------------------------------
Update Information:

This update includes:
* PodVersion no longer drops the file's last newline
* listdeps now includes recommended prereqs as well as required
* always numify the version use in "use VERSION" in Makefile.PL

--------------------------------------------------------------------------------
ChangeLog:

* Sat Jun 25 2011 Iain Arnell <iarnell at gmail.com> 4.200008-1
- update to latest upstream version
* Sun Jun  5 2011 Iain Arnell <iarnell at gmail.com> 4.200007-1
- update to latest upstream version
--------------------------------------------------------------------------------


================================================================================
 perl-Moose-2.0010-1.fc15 (FEDORA-2011-8689)
 Complete modern object system for Perl 5
--------------------------------------------------------------------------------
Update Information:

This update includes:
* duck_type type constraints now report reasonable errors when given something which isn't an instance of an object
* Moose::Util::apply_all_roles now works even if the applicant is a non-Moose class
* When an object is reblessed, triggers are called on attributes that are set during the reblessing
* Better error message if Moose->init_meta is called with a 'metaclass' option when that metaclass hasn't been loaded
* The 'accessor' native delegation for hashrefs now allows setting the value to undef
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jun 25 2011 Iain Arnell <iarnell at gmail.com> 2.0010-1
- update to latest upstream version
--------------------------------------------------------------------------------


================================================================================
 perl-MooseX-OneArgNew-0.002-1.fc15 (FEDORA-2011-8708)
 Teach ->new to accept single, non-hashref arguments
--------------------------------------------------------------------------------
Update Information:

This update simply removes a documentation warning; the module's interface is considered stable now.
--------------------------------------------------------------------------------
ChangeLog:

--------------------------------------------------------------------------------


================================================================================
 perl-Test-Spec-0.33-1.fc15 (FEDORA-2011-8692)
 Write tests in a declarative specification style
--------------------------------------------------------------------------------
Update Information:

This update adds `shared_examples_for/it_should_behave_like` to allow factorization of tests
--------------------------------------------------------------------------------
ChangeLog:

--------------------------------------------------------------------------------


================================================================================
 perl-XML-Atom-0.39-2.fc15 (FEDORA-2011-8712)
 Atom feed and API implementation
--------------------------------------------------------------------------------
Update Information:

This update disables external entities and network to avoid possible security flaw.
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jun 25 2011 Iain Arnell <iarnell at gmail.com> 0.39-2
- restore doc files
* Sat Jun 25 2011 Iain Arnell <iarnell at gmail.com> 0.39-1
- update to latest upstream version
- use perl_default_filter
--------------------------------------------------------------------------------


================================================================================
 phatch-0.2.7-7.fc15 (FEDORA-2011-8694)
 Photo batch processor
--------------------------------------------------------------------------------
Update Information:

This update fixes the api compatibility for phatch with pyexiv2. This update will enable processing of jpg files again. A patch has been applied to ensure compatibility.

Users of this update are advised to save modified files under a different name/location instead of overwriting the original files.

--------------------------------------------------------------------------------
ChangeLog:

* Sat Jun 25 2011 Lakshmi Narasimhan T V <lakshminaras2002 at gmail.com> - 0.2.7-7
- Fix pyexiv2 compatibility issue #704703. Updated the patch pyexiv2_compat.patch
* Thu Jun 23 2011 Lakshmi Narasimhan T V <lakshminaras2002 at gmail.com> - 0.2.7-6
- Fix pyexiv2 compatibility issue #704703. Applied patch pyexiv2_compat.patch
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #704703 - Error processing jpg files, 'module' object has no attribute 'Image' in phatch
        https://bugzilla.redhat.com/show_bug.cgi?id=704703
--------------------------------------------------------------------------------


================================================================================
 portreserve-0.0.5-1.fc15 (FEDORA-2011-8719)
 TCP port reservation utility
--------------------------------------------------------------------------------
Update Information:

This update fixes a problem that would cause the portreserve daemon to exit too early when several services are registered.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun 24 2011 Tim Waugh <twaugh at redhat.com> 0.0.5-1
- 0.0.5 (bug #619089, bug #704567).
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #619089 - portreserve service is always reported as "running"
        https://bugzilla.redhat.com/show_bug.cgi?id=619089
  [ 2 ] Bug #704567 - Possible problems found by static analysis of code
        https://bugzilla.redhat.com/show_bug.cgi?id=704567
--------------------------------------------------------------------------------


================================================================================
 python-pip-0.8.3-1.fc15 (FEDORA-2011-8704)
 Pip installs packages.  Python packages.  An easy_install replacement
--------------------------------------------------------------------------------
Update Information:

Update to python-pip 0.8.3
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 22 2011 Tim Flink <tflink at fedoraproject.org> - 0.8.3-1
- update to 0.8.3 and project home page
--------------------------------------------------------------------------------


================================================================================
 python-rhsm-0.96.5-1.fc15 (FEDORA-2011-8720)
 A Python library to communicate with a Red Hat Unified Entitlement Platform
--------------------------------------------------------------------------------
Update Information:

Fixes broken backward compatability in previous failed build. Add initial support for activations. Improved documentation and default config values. Several bugfixes.
Latest version has the package manifest functionality
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun 24 2011 Devan Goodwin <dgoodwin at redhat.com> 0.96.5-1
- Fix backward compatability with old use of getPoolsList.
  (dgoodwin at redhat.com)
- Remove one built in type issue. (bkearney at redhat.com)
- Removed unused Bundle class (alikins at redhat.com)
- quantity for subscription (wottop at dhcp231-152.rdu.redhat.com)
- Add the activation key call, and remove subscription tokens
  (bkearney at redhat.com)
- Improve the doco, referencing the candlepin site. (bkearney at redhat.com)
- Improve the defualt values for the config (bkearney at redhat.com)
- Fix bug with owner specification during registration. (dgoodwin at redhat.com)
* Wed Jun  8 2011 Bryan Kearney <bkearney at redhat.com> 0.96.4-1
- Adding profile module and updating spec (pkilambi at redhat.com)
- Added stacking Id to the certificate (wottop at dhcp231-152.rdu.redhat.com)
- Changed call to CP for owner list (wottop at dhcp231-152.rdu.redhat.com)
- added getOwners function for use with 'list --owners'
  (wottop at dhcp231-152.rdu.redhat.com)
- change (wottop at dhcp231-152.rdu.redhat.com)
- Added the owner entered in the cli to the post for register
  (wottop at dhcp231-152.rdu.redhat.com)
- altered pool query to use both owner and consumer
  (wottop at dhcp231-152.rdu.redhat.com)
- Added getOwner(consumerid) function (wottop at dhcp231-152.rdu.redhat.com)
--------------------------------------------------------------------------------


================================================================================
 routino-2.0.1-2.fc15 (FEDORA-2011-8695)
 Router for OpenStreetMap Data
--------------------------------------------------------------------------------
Update Information:

An update of Routino to the latest upstream version, which adds
in handling of turn restrictions (the simplest type defined by
way, node & way) as well as fixing a few bugs.

See http://www.routino.org/software/NEWS.txt for details.

IMPORTANT: When upgrading from 1.5.1, you will have to rerun the
planetsplitter tool. Existing .mem files from 1.x versions cannot
be used with the new version. See README-MARBLE.txt for details.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jun 12 2011 Kevin Kofler <Kevin at tigcc.ticalc.org> - 2.0.1-2
- README-MARBLE.txt: update version number references
* Thu Jun  9 2011 Kevin Kofler <Kevin at tigcc.ticalc.org> - 2.0.1-1
- Update to 2.0.1 (#709309, bugfix release)
- Drop planetsplitter-segfault patch (fixed upstream)
* Tue May 31 2011 Kevin Kofler <Kevin at tigcc.ticalc.org> - 2.0-3
- README-MARBLE.txt: update time indication (planetsplitter is faster in 2.0)
* Tue May 31 2011 Kevin Kofler <Kevin at tigcc.ticalc.org> - 2.0-2
- README-MARBLE.txt: mention that data files from old versions no longer work
- Fix segmentation fault in planetsplitter (at least on austria.osm)
* Tue May 31 2011 Kevin Kofler <Kevin at tigcc.ticalc.org> - 2.0-1
- Update to 2.0 (#709309, adds turn restriction support among other things)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #709309 - routino-2.0.1 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=709309
--------------------------------------------------------------------------------


================================================================================
 setroubleshoot-3.0.37-1.fc15 (FEDORA-2011-8700)
 Helps troubleshoot SELinux problems
--------------------------------------------------------------------------------
Update Information:

Allows sealert -l UUID to work if setroubleshoot is not installed.  Also moves other files from setroubleshoot to setroubleshoot-server so command line works without X.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun 24 2011 <dwalsh at redhat.com> - 3.0.37-1
- Move serverconnection.py and FixIt commands from setroubleshoot to setroubleshoot-server
- Remove run_cmd.py
--------------------------------------------------------------------------------


================================================================================
 sirius-0.8.0-17.fc15 (FEDORA-2011-8701)
 Reversi game for Gnome
--------------------------------------------------------------------------------
Update Information:

Fixes FTBFS.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun 24 2011 Bruno Wolff III <bruno at wolff.to> - 0.8.0-17
- Note that upstream has disappeared
- Run autogen.sh, since upstreams autotools stuff is out of date
- Use iconv instead of a patch to convert doc files from latin1 to utf8
- Remove image extension in desktop file
- Correct category in desktop file - bug 485368
- Fix FTBFS - bugs 565100 and 715896
- Add build requires needed to run autogen.sh
* Wed Feb  9 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.8.0-16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 suricata-1.0.4-1.fc15 (FEDORA-2011-8713)
 Intrusion Detection System
--------------------------------------------------------------------------------
Update Information:

This is a bugfix release.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun 24 2011 Steve Grubb <sgrubb at redhat.com> 1.0.4-1
- New upstream release
* Thu Apr 28 2011 Dan Horák <dan[at]danny.cz> 1.0.3-2
- don't override -march set by the buildsystem (fixes build on non-x86)
--------------------------------------------------------------------------------


================================================================================
 transifex-client-0.5.2-1.fc15 (FEDORA-2011-8729)
 Command line tool for Transifex translation management
--------------------------------------------------------------------------------
Update Information:

Update to new upstream version.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jun 24 2011 Domingo Becker <domingobecker at gmail.com> - 0.5.2-1
- Update to new upstream version.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #678680 - Review Request: transifex-client - Command line tool for Transifex translation management
        https://bugzilla.redhat.com/show_bug.cgi?id=678680
--------------------------------------------------------------------------------



More information about the test mailing list