The following Fedora 14 Security updates need testing:
https://admin.fedoraproject.org/updates/bind-9.7.4-0.2.b1.fc14
https://admin.fedoraproject.org/updates/couchdb-1.0.2-4.fc14
https://admin.fedoraproject.org/updates/avahi-0.6.27-6.fc14
https://admin.fedoraproject.org/updates/pure-ftpd-1.0.32-1.fc14
https://admin.fedoraproject.org/updates/apr-1.4.5-1.fc14
https://admin.fedoraproject.org/updates/unbound-1.4.8-2.fc14
https://admin.fedoraproject.org/updates/drupal7-7.2-1.fc14
https://admin.fedoraproject.org/updates/drupal-6.22-1.fc14
https://admin.fedoraproject.org/updates/tomcat6-6.0.26-21.fc14
https://admin.fedoraproject.org/updates/cyrus-imapd-2.3.16-8.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
https://admin.fedoraproject.org/updates/kernel-2.6.35.13-92.fc14
https://admin.fedoraproject.org/updates/phpMyAdmin-3.4.1-1.fc14
https://admin.fedoraproject.org/updates/mutt-1.5.21-5.fc14
https://admin.fedoraproject.org/updates/rdesktop-1.6.0-11.fc14
https://admin.fedoraproject.org/updates/mumble-1.2.3-2.fc14
https://admin.fedoraproject.org/updates/gimp-2.6.11-14.fc14
The following Fedora 14 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/yum-3.2.28-7.fc14
https://admin.fedoraproject.org/updates/module-init-tools-3.11.1-6.fc14
https://admin.fedoraproject.org/updates/metacity-2.30.3-2.fc14
https://admin.fedoraproject.org/updates/selinux-policy-3.9.7-42.fc14
https://admin.fedoraproject.org/updates/libcdio-0.82-4.fc14
https://admin.fedoraproject.org/updates/libcgroup-0.36.2-7.fc14
https://admin.fedoraproject.org/updates/dash-0.5.6-4.fc14
https://admin.fedoraproject.org/updates/PackageKit-0.6.12-3.fc14
https://admin.fedoraproject.org/updates/pcre-8.10-2.fc14
https://admin.fedoraproject.org/updates/libedit-3.0-3.20090923cvs.fc14
https://admin.fedoraproject.org/updates/libpcap-1.1.1-3.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-qxl-0.0.21-3.fc14
https://admin.fedoraproject.org/updates/evolution-exchange-2.32.3-1.fc14,...
https://admin.fedoraproject.org/updates/xorg-x11-drv-nouveau-0.0.16-14.20...
https://admin.fedoraproject.org/updates/dosfstools-3.0.9-6.fc14
https://admin.fedoraproject.org/updates/libimobiledevice-1.0.6-1.fc14
https://admin.fedoraproject.org/updates/libconcord-0.23-5.fc14,udev-161-9...
https://admin.fedoraproject.org/updates/usbmuxd-1.0.7-1.fc14
https://admin.fedoraproject.org/updates/openldap-2.4.23-10.fc14
https://admin.fedoraproject.org/updates/avahi-0.6.27-6.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-geode-2.11.11-4.fc14
The following builds have been pushed to Fedora 14 updates-testing
OpenSceneGraph-2.8.4-2.fc14
bfast-0.6.5a-1.fc14
bitfrost-1.0.14-1.fc14
dracut-modules-olpc-0.5.10-1.fc14
dvisvgm-1.0.8-1.fc14
emacs-common-riece-8.0.0-1.fc14
epdfview-0.1.8-1.fc14
gcl-2.6.8-0.8.20110516cvs.fc14
getmail-4.20.3-1.fc14
groonga-1.2.2-1.fc14
kamoso-2.0.2-1.fc14
kde-plasma-quickaccess-0.8.1-5.fc14
module-init-tools-3.11.1-6.fc14
mozc-1.1.717.102-2.fc14
mutt-1.5.21-5.fc14
perl-Devel-StackTrace-1.27-2.fc14
perl-Params-Validate-0.99-1.fc14
perl-SOAP-Lite-0.712-5.fc14
voms-2.0.2-1.fc14
voms-mysql-plugin-3.1.5.1-1.fc14
wallpapoz-0.5-8.fc14
yum-3.2.28-7.fc14
Details about builds:
================================================================================
OpenSceneGraph-2.8.4-2.fc14 (FEDORA-2011-7728)
High performance real-time graphics toolkit
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 30 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 2.8.4-2
- Reflect fltk-include paths having changed incompatibly.
--------------------------------------------------------------------------------
================================================================================
bfast-0.6.5a-1.fc14 (FEDORA-2011-7737)
Blat-like Fast Accurate Search Tool
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 27 2011 Adam Huffman <bloch(a)verdurin.com> - 0.6.5a-1
- new upstream release
- remove obsolete file deletion
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.6.4e-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
bitfrost-1.0.14-1.fc14 (FEDORA-2011-7736)
OLPC bitfrost security modules
--------------------------------------------------------------------------------
Update Information:
Fix HTTP etag handling
Minor improvements to update module
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 30 2011 Daniel Drake <dsd(a)laptop.org> - 1.0.14-1
- Fix HTTP etag handling
* Fri May 20 2011 Daniel Drake <dsd(a)laptop.org> - 1.0.13-1
- Misc improvements to update module
--------------------------------------------------------------------------------
================================================================================
dracut-modules-olpc-0.5.10-1.fc14 (FEDORA-2011-7761)
OLPC modules for dracut initramfs
--------------------------------------------------------------------------------
Update Information:
Fix purging of unpartitioned boot configs
Start boot animation during version purging
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 30 2011 Daniel Drake <dsd(a)laptop.org> - 0.5.10-1
- Fix purging of unpartitioned boot configs
* Tue May 17 2011 Daniel Drake <dsd(a)laptop.org> - 0.5.9-1
- Start boot animation while purging old versions
--------------------------------------------------------------------------------
================================================================================
dvisvgm-1.0.8-1.fc14 (FEDORA-2011-7772)
DVI to SVG converter
--------------------------------------------------------------------------------
Update Information:
This maintenance release fixes a couple of PostScript-related positioning issues. The most
important changes are:
* Evaluation of PS operators save, restore, and grestoreall has been added.
* A potential memory issue triggered by invisible zero-length PS paths has been fixed.
* The computation of the current drawing position influenced by PS and DVI actions has
been improved.
* Metafont no longer stops the conversions on errors in order to finish the convertion of
buggy MF fonts properly.
For further information see
http://dvisvgm.sourceforge.net
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Martin Gieseking <martin.gieseking(a)uos.de> 1.0.8-1
- updated to upstream release 1.0.8
* Fri May 6 2011 Martin Gieseking <martin.gieseking(a)uos.de> - 1.0.7-1
- updated to upstream release 1.0.7
--------------------------------------------------------------------------------
================================================================================
emacs-common-riece-8.0.0-1.fc14 (FEDORA-2011-7726)
Yet Another IRC Client for Emacs and XEmacs
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Daiki Ueno <dueno(a)redhat.com> - 8.0.0-1
- new upstream release
- remove riece-xemacs.patch since it is upstreamed
--------------------------------------------------------------------------------
================================================================================
epdfview-0.1.8-1.fc14 (FEDORA-2011-7768)
Lightweight PDF document viewer
--------------------------------------------------------------------------------
Update Information:
Upstream release 0.1.8. Several bugfixes and small improvements. For details see the
upstream changelog:
http://trac.emma-soft.com/epdfview/wiki/ChangeLog#Version0.1.82011-05-28
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 2 2011 Michal Schmidt <mschmidt(a)redhat.com> - 0.1.8-1
- Update to the offical 0.1.8 release.
- Remove buildroot cleaning.
* Wed May 18 2011 Michal Schmidt <mschmidt(a)redhat.com> - 0.1.8-0.2.20110504svn
- Don't forget to package the man page.
* Wed May 4 2011 Michal Schmidt <mschmidt(a)redhat.com> - 0.1.8-0.1.20110504svn
- Take the latest SVN rev for compatibility with poppler 0.17 (RHBZ#698156)
- Drop epdfview-poppler-0.15.patch.
- A new upstream release is coming soon, use 0.1.8 for Version already.
- Use xz instead of bz2.
* Sun Mar 13 2011 Marek Kasik <mkasik(a)redhat.com> - 0.1.7-13.20100621svn
- Rebuild (poppler-0.16.3)
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.1.7-12.20100621svn
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sun Jan 2 2011 Rex Dieter <rdieter(a)fedoraproject.org> - 0.1.7-11.20100621svn
- rebuild (poppler)
* Wed Dec 15 2010 Rex Dieter <rdieter(a)fedoraproject.org> - 0.1.7-10.20100621svn
- rebuild (poppler)
* Sat Nov 6 2010 Rex Dieter <rdieter(a)fedoraproject.org> - 0.1.7-9.20100621svn
- rebuilt (poppler)
* Fri Oct 1 2010 Michal Schmidt <mschmidt(a)redhat.com> 0.1.7-8.20100621svn
- Add support for poppler >= 0.15.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #709704 - [abrt] epdfview-0.1.7-13.20100621svn.fc15: strlen: Process
/usr/bin/epdfview was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=709704
[ 2 ] Bug #709823 - RFE: need update for epdfview
https://bugzilla.redhat.com/show_bug.cgi?id=709823
--------------------------------------------------------------------------------
================================================================================
gcl-2.6.8-0.8.20110516cvs.fc14 (FEDORA-2011-7731)
GNU Common Lisp
--------------------------------------------------------------------------------
Update Information:
This update fixes the SELinux labeling of GCL-compiled Maxima files, as well as
introducing a few minor bug fixes from upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 1 2011 Jerry James <loganjerry(a)gmail.com> - 2.6.8-0.8.20110516cvs
- Update to 20110516 CVS snapshot for more bug fixes
- Fix SELinux policy for maxima (bz 650279)
- Drop upstreamed volatile patch
* Thu Dec 30 2010 Jerry James <loganjerry(a)gmail.com> - 2.6.8-0.7.20101115cvs
- Update to 20101115 CVS snapshot for more bug fixes
- Drop upstreamed loginname patch
- Add man page patch
- Add license file to -selinux package
- Don't force dynamic BFD so we can use custreloc instead
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #650279 - SELinux is preventing /usr/lib64/maxima/5.22.1/binary-gcl/maxima
from changing the access protection of memory on the heap.
https://bugzilla.redhat.com/show_bug.cgi?id=650279
--------------------------------------------------------------------------------
================================================================================
getmail-4.20.3-1.fc14 (FEDORA-2011-7748)
POP3, IMAP4 and SDPS mail retriever with Maildir delivery
--------------------------------------------------------------------------------
Update Information:
4.20.3 bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Ricky Zhou <ricky(a)fedoraproject.org> - 4.20.3-1
- Upstream 4.20.3 release.
--------------------------------------------------------------------------------
================================================================================
groonga-1.2.2-1.fc14 (FEDORA-2011-7723)
An Embeddable Fulltext Search Engine
--------------------------------------------------------------------------------
Update Information:
new upstream release; split -server subpackage
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Daiki Ueno <dueno(a)redhat.com> - 1.2.2-1
- build in fedora
* Sun May 29 2011 Kouhei Sutou <kou(a)clear-code.com> - 1.2.2-0
- new upstream release.
- split server files into groonga-server package.
--------------------------------------------------------------------------------
================================================================================
kamoso-2.0.2-1.fc14 (FEDORA-2011-7767)
Application for taking pictures and videos from a webcam
--------------------------------------------------------------------------------
Update Information:
Kamoso is an application to take pictures and videos out of your webcam.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #674738 - Review Request: kamoso - Application for taking pictures and videos
from a webcam
https://bugzilla.redhat.com/show_bug.cgi?id=674738
--------------------------------------------------------------------------------
================================================================================
kde-plasma-quickaccess-0.8.1-5.fc14 (FEDORA-2011-7708)
Plasma applet for quick access to the most used folders
--------------------------------------------------------------------------------
Update Information:
Fix crash for right-click on selected file item.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Jaroslav Reznik <jreznik(a)redhat.com> - 0.8.1-5
- rebuild due to NewMenu -> NewFileMenu change
* Tue Feb 15 2011 Jaroslav Reznik <jreznik(a)redhat.com> - 0.8.1-4
- fix "taking address of temporary object" build error (with -fpermissive)
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
module-init-tools-3.11.1-6.fc14 (FEDORA-2011-7709)
Kernel module management utilities.
--------------------------------------------------------------------------------
Update Information:
Existing releases of module-init-tools cannot handle Linux kernel version numbering in
which x.y.z releases are replaced with x.y releases. This update contains a fix for such
version number handling.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Jon Masters <jcm(a)jonmasters.org> - 3.11.1-6
- Add patch supporting kernel x.y versions in depmod.
- Update autotools bits to newer build versions.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #709231 - depmod cannot handle kernel versions without x.y.z components
https://bugzilla.redhat.com/show_bug.cgi?id=709231
--------------------------------------------------------------------------------
================================================================================
mozc-1.1.717.102-2.fc14 (FEDORA-2011-7399)
Open-sourced Google Japanese Input
--------------------------------------------------------------------------------
Update Information:
Correct the installation path in emacs-mozc package
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 1 2011 Akira TAGOH <tagoh(a)redhat.com> - 1.1.717.102-2
- Fix broken emacs-mozc package.
* Mon May 23 2011 Akira TAGOH <tagoh(a)redhat.com> - 1.1.717.102-1
- New upstream release.
--------------------------------------------------------------------------------
================================================================================
mutt-1.5.21-5.fc14 (FEDORA-2011-7751)
A text mode mail user agent
--------------------------------------------------------------------------------
Update Information:
This is an update that fixes a hostname verification of x.509 certificates and a
segmentation fault during reading message headers.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 15 2011 Honza Horak <hhorak(a)redhat.com> - 5:1.5.21-5
- Fixed hostname verification of x.509 certificates.
(rhbz#688756, CVE-2011-1429)
* Tue Mar 29 2011 Honza Horak <hhorak(a)redhat.com> - 5:1.5.21-4
- Fixed segmentation faults during reading message headers (rhbz#676074)
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
5:1.5.21-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #688755 - CVE-2011-1429 mutt: improper verification of X.509 certificates can
lead to MITM attacks on SMTP SSL connections
https://bugzilla.redhat.com/show_bug.cgi?id=688755
--------------------------------------------------------------------------------
================================================================================
perl-Devel-StackTrace-1.27-2.fc14 (FEDORA-2011-7754)
Perl module implementing stack trace and stack trace frame objects
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 1:1.27-1
- Upstream update.
--------------------------------------------------------------------------------
================================================================================
perl-Params-Validate-0.99-1.fc14 (FEDORA-2011-7741)
Params-Validate Perl module
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 0.99-1
- Upstream update.
- Rebase patch (Params-Validate-0.99.diff).
--------------------------------------------------------------------------------
================================================================================
perl-SOAP-Lite-0.712-5.fc14 (FEDORA-2011-7770)
Client and server side SOAP implementation
--------------------------------------------------------------------------------
Update Information:
SOAP::Lite should not provide perl(LWP::Protocol).
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Petr Sabata <contyk(a)redhat.com> - 0.712-5
- Filter LWP::Protocol from Provides (#709269)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #709269 - perl-SOAP-Lite provides bogus "perl(LWP::Protocol)"
https://bugzilla.redhat.com/show_bug.cgi?id=709269
--------------------------------------------------------------------------------
================================================================================
voms-2.0.2-1.fc14 (FEDORA-2011-7732)
Virtual Organization Membership Service
--------------------------------------------------------------------------------
Update Information:
Update to voms version 2.0.2.
Add compat package for old releases containing the obsoleted libraries.
Drop Java ahead-of-time compilation for new releases.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 27 2011 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.0.2-1
- Update to version 2.0.2
- Add compat package for older releases
- Drop Java AOT compilation for newer releases
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9.19.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sun Dec 26 2010 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 1.9.19.2-2
- Make vomsjapi-javadoc arch depenent on EPEL
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #693276 - voms is incompatible with bouncycastle-1.46-1.el6
https://bugzilla.redhat.com/show_bug.cgi?id=693276
--------------------------------------------------------------------------------
================================================================================
voms-mysql-plugin-3.1.5.1-1.fc14 (FEDORA-2011-7732)
VOMS server plugin for MySQL
--------------------------------------------------------------------------------
Update Information:
Update to voms version 2.0.2.
Add compat package for old releases containing the obsoleted libraries.
Drop Java ahead-of-time compilation for new releases.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 3.1.5.1-1
- Update to version 3.1.5.1
* Wed Mar 23 2011 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 3.1.3.2-3
- Rebuild for mysql 5.5.10
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.1.3.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #693276 - voms is incompatible with bouncycastle-1.46-1.el6
https://bugzilla.redhat.com/show_bug.cgi?id=693276
--------------------------------------------------------------------------------
================================================================================
wallpapoz-0.5-8.fc14 (FEDORA-2011-7774)
Gnome Multi Backgrounds and Wallpapers Configuration Tool
--------------------------------------------------------------------------------
Update Information:
A bug is reported that wallpapoz configuration GUI raises backtrace when changing XML
configuration file from "Desktop" style to "Workspace" type on some
occasion. This new rpm will fix this issue.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 1 2011 Mamoru Tasaka <mtasaka(a)fedoraproject.org> - 0.5-8
- Fix crash witching from desktop style XML to workspace style one
with workspace number increased (bug 708769)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #708769 - [abrt] wallpapoz-0.5-6.fc15: wallpapoz:727:load_treeview:IndexError:
list index out of range
https://bugzilla.redhat.com/show_bug.cgi?id=708769
--------------------------------------------------------------------------------
================================================================================
yum-3.2.28-7.fc14 (FEDORA-2011-7749)
RPM installer/updater
--------------------------------------------------------------------------------
Update Information:
Make "arm" the basearch for arm*.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 James Antill <james at fedoraproject.org> - 3.2.28-7
- Change arm basearch to arm
--------------------------------------------------------------------------------