The following Fedora 13 Security updates need testing:
https://admin.fedoraproject.org/updates/clamav-0.96.5-1300.fc13
https://admin.fedoraproject.org/updates/Ajaxterm-0.10-13.fc13
https://admin.fedoraproject.org/updates/seamonkey-2.0.11-1.fc13
https://admin.fedoraproject.org/updates/eclipse-3.5.2-3.fc13
https://admin.fedoraproject.org/updates/perl-CGI-Simple-1.112-2.fc13
https://admin.fedoraproject.org/updates/mailman-2.1.12-16.fc13
The following Fedora 13 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/pm-utils-1.2.6.1-4.fc13
https://admin.fedoraproject.org/updates/xorg-x11-font-utils-7.2-12.fc13
https://admin.fedoraproject.org/updates/elfutils-0.150-2.fc13
https://admin.fedoraproject.org/updates/mingetty-1.08-6.fc13
https://admin.fedoraproject.org/updates/mash-0.5.20-1.fc13
https://admin.fedoraproject.org/updates/openldap-2.4.21-11.fc13
https://admin.fedoraproject.org/updates/nss-3.12.7-4.fc13,nss-util-3.12.7...
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-7...
The following builds have been pushed to Fedora 13 updates-testing
cone-0.84-1.fc13
cp2k-2.1-2.20101006.fc13
eclipse-3.5.2-3.fc13
fluxbox-1.1.1-7.fc13
gambas2-2.22.0-1.fc13
goldendict-1.0.1-3.fc13
jd-2.7.5-0.3.beta101213.fc13
kde-plasma-yawp-0.3.6-1.fc13
luci-0.22.6-1.fc13
mock-1.1.7-1.fc13
natus-0.1.3-2.fc13
pdfmerge-1.0.3-1.fc13
seamonkey-2.0.11-1.fc13
spring-0.82.6.1-1.fc13
springlobby-0.116-1.fc13
superiotool-0-0.25.20101214svn6179.fc13
tkimg-1.4-1.fc13
Details about builds:
================================================================================
cone-0.84-1.fc13 (FEDORA-2010-18907)
CONE mail reader
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2010 Steven Pritchard <steve(a)kspei.com> 0.84-1
- Update to 0.84.
--------------------------------------------------------------------------------
================================================================================
cp2k-2.1-2.20101006.fc13 (FEDORA-2010-18911)
A molecular dynamics engine capable of classical and Car-Parrinello simulations
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #659896 - Review Request: cp2k - A molecular dynamics engine capable of
classical and Car-Parrinello simulations
https://bugzilla.redhat.com/show_bug.cgi?id=659896
--------------------------------------------------------------------------------
================================================================================
eclipse-3.5.2-3.fc13 (FEDORA-2010-18894)
An open, extensible IDE
--------------------------------------------------------------------------------
Update Information:
Eclipse help webapp XSS vulnerability fix. See Redhat Bugzilla #661901 and Eclipse
Bugzilla #329582.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2010 Severin Gehwolf <sgehwolf(a)redhat.com> 1:3.5.2-3
- Add Eclipse help XSS vulnerability fix (RH Bz #661901).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #661901 - eclipse: Help Content web application vulnerable to XSS
https://bugzilla.redhat.com/show_bug.cgi?id=661901
--------------------------------------------------------------------------------
================================================================================
fluxbox-1.1.1-7.fc13 (FEDORA-2010-18880)
Window Manager based on Blackbox
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.1.1-7
- obsolete fluxconf (#662836)
* Wed Dec 8 2010 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.1.1-6
- add -lfontconfig (#660981)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #662836 - fluxconf too old, unmaintained, incompatible with current fluxbox -
remove from repositories
https://bugzilla.redhat.com/show_bug.cgi?id=662836
--------------------------------------------------------------------------------
================================================================================
gambas2-2.22.0-1.fc13 (FEDORA-2010-18918)
IDE based on a basic interpreter with object extensions
--------------------------------------------------------------------------------
Update Information:
Changes in 2.22.0:
Configuration
BUG: Detect x86_64 architecture better.
NEW: Add AC_PROG_LIBTOOL in root configure.ac file.
NEW: Check for missing mathematical function directly instead of relying on operating
system detection.
NEW: Remove useless install-sh links.
Development Environment
NEW: Don't save the Url in the project file if it is equal to the default URL
http://www.endoftheinternet.com
NEW: Greek translation updated by Demosthenes Koptsis.
Database Manager
NEW: Greek translation updated by Demosthenes Koptsis.
Interpreter
BUG: Extern functions now can handle up to 16 pointer or string arguments.
BUG: Do not use stack contents as return value.
BUG: The return value of extern functions returning a 'char *' is now
correctly converted to a constant String.
BUG: The == operator works correctly now.
BUG: Fix two incorrect optional function declarations.
Compiler
BUG: Remove some useless tests.
Archiver
BUG: Files having the ".gambas" extension are now excluded from executable
archives. That prevents a possible endless growing generated file.
Development Enviroment
NEW: Spanish translation updated.
GB.DB.POSTGRESQL
BUG: Correctly ignore fields deleted with the "DROP COLUMN" command.
GB.FORM
BUG: Make arrow keys navigation work better with read-only cells in TableView
control.
NEW: DateChooser uses Sunday as first day of the week when the current language is
'C' or 'en_US'.
GB.GTK
BUG: Fix duplicate Click event in CheckBox control.
BUG: Correctly handle tristate Checkbox controls.
BUG: Fix the behaviour of ComboBox when setting the List and the ReadOnly property,
and the order used for saving ComboBox properties in the *.form file.
BUG: Popup menus now work correctly on tray icons in all cases.
BUG: Make TabStrip behave like in gb.qt when inserting a new tab.
BUG: TabStrip now uses its own window, so that it is not partially visible when
covering other widgets.
BUG: ColumnView, TreeView and ListView are correctly refreshed when an item icon is
changed.
BUG: Read-only ComboBox controls do not lost focus events anymore.
BUG: Correctly free menu tags.
BUG: Fix possible crashes in three utility routines.
BUG: Fix a crash in GridView.Rows[].Text property.
BUG: Fix a infinite recursion in drag and drop management when draging TextBox or
TextArea contents inside the same application.
BUG: Reparenting a top-level window does not show hidden children controls anymore.
BUG: Rich-text string management has been fixed. The ampersand character, the
"&", ">" and "<" entites are correctly
interpreted now.
GB.NET.CURL
BUG: The HttpClient and FtpClient Tag property does not leak memory anymore.
GB.NET.SMTP
BUG: Fix an always true test.
GB.OPENGL
BUG: Fix the use of "=" instead of "==".
GB.QT
BUG: Fix the behaviour of ComboBox when setting the List property, and the order used
for saving ComboBox properties in the *.form file.
BUG: Don't raise events while setting the ComboBox.List property.
BUG: Fix the properties order. Only the ComboBox ReadOnly property must be set first.
BUG: Workaround what it seems a Qt bug in ComboBox. Now, when an editable combo-box is
hidden, it correctly loses the focus.
BUG: Do not propagate Drop events when there is a drop event handler.
GB.SDL.SOUND
BUG: Fix segfaulting when moving the position of a mp3 music. Adding a delay of 10ms
when rewinding the music seem to fix the problem that look like a threading issue in
SDLmixer.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Tom "spot" Callaway <tcallawa(a)redhat.com> - 2.22.0-1
- update to 2.22.0
* Sat Nov 6 2010 Rex Dieter <rdieter(a)fedoraproject.org> - 2.21.0-5
- rebuilt (poppler)
* Wed Oct 6 2010 Tom "spot" Callaway <tcallawa(a)redhat.com> - 2.21.0-4
- rebuild again (poppler)
* Thu Aug 19 2010 Rex Dieter <rdieter(a)fedoraproject.org> - 2.21.0-3
- rebuild (poppler)
* Mon Aug 2 2010 Tom "spot" Callaway <tcallawa(a)redhat.com> - 2.21.0-2
- add gbw2 binary to script subpackage
* Mon Jul 26 2010 Tom "spot" Callaway <tcallawa(a)redhat.com> - 2.21.0-1
- update to 2.21.0
* Wed Jul 7 2010 Tom "spot" Callaway <tcallawa(a)redhat.com> - 2.20.2-3
- add license file to gambas-devel
* Wed May 5 2010 Marcela Maslanova <mmaslano(a)redhat.com> - 2.20.2-2
- Rebuild against new poppler
--------------------------------------------------------------------------------
================================================================================
goldendict-1.0.1-3.fc13 (FEDORA-2010-18908)
A feature-rich dictionary lookup program
--------------------------------------------------------------------------------
Update Information:
Fix the hunspell location issue
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2010 Howard Ning <mrlhwliberty(a)gmail.com> - 1.0.1-3
- Fix the path of hunspell dictionaries
--------------------------------------------------------------------------------
================================================================================
jd-2.7.5-0.3.beta101213.fc13 (FEDORA-2010-18882)
A 2ch browser
--------------------------------------------------------------------------------
Update Information:
New version 2.7.5 beta 101213 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2010 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> -
2.7.5-0.3.beta101213
- 2.7.5 beta 101213
--------------------------------------------------------------------------------
================================================================================
kde-plasma-yawp-0.3.6-1.fc13 (FEDORA-2010-18919)
Yet Another Weather Plasmoid
--------------------------------------------------------------------------------
Update Information:
yaWP 0.3.6
* Traverse through all locations periodically (optional)
* Page 'Settings' from config-dialog has been redesigned to gain more space
* Fixing update bug in Wunderground Ion.
* Algorithm that is doing the text layout for the details area has been simplified
* Fix API breakage in 4.5.2/4.6
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2010 Alexey Kurov <nucleo(a)fedoraproject.org> - 0.3.6-1
- update to 0.3.6
- drop 0.3.5 patches
* Wed Nov 24 2010 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> - 0.3.5-6
- Fix build against KDE4.6
* Tue Nov 23 2010 Rex Dieter <rdieter(a)fedoraproject.org> - 0.3.5-5
- rebuild
--------------------------------------------------------------------------------
================================================================================
luci-0.22.6-1.fc13 (FEDORA-2010-18921)
Web-based high availability administration application
--------------------------------------------------------------------------------
Update Information:
This update addresses several major bugs and improves luci compatibility with Fedora
cluster packages.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2010 Fabio M. Di Nitto <fdinitto(a)redhat.com> - 0.22.6-2
- Fix bad merge from upstream spec file
* Mon Dec 13 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.6-1
- New upstream release (0.22.6)
* Tue Nov 16 2010 Ryan McCabe <rmccabe(a)redhat.com> - 0.22.5-1
- New upstream release (0.22.5)
- Display all fence and resource agents for Fedora clusters
- Add support for fence_rhevm and fence_cisco_ucs
- Cleanup of cluster.conf handler
- Fixes for running on TG2.1
- Allow configuration of saslauthd
- Enforce a 15 minute idle session timeout
- Add back node uptime to the cluster node list display
- Allow users to configure the ricci address and port for cluster nodes
- Fixes to cope with cluster membership changes made outside of luci
--------------------------------------------------------------------------------
================================================================================
mock-1.1.7-1.fc13 (FEDORA-2010-18915)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
added root and group checks for early notification of problems
moved list of legal hosts for packages out to config files
miscellaneous code cleanups
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2010 Clark Williams <williams(a)redhat.com> - 1.1.7-1
- add 'legal_host_arches' config option to configs (BZ# 622792)
- add root check and group check (BZ# 662223)
- from Ville Skyttä <ville.skytta(a)iki.fi>:
- Try to set up an appropriate default.cfg symlink at post install time
- Clean up disttag usage
- Drop obsolete and nonfunctional F-8 bits from specfile
- Drop no longer used requiresTextFromHdr() and uniqReqs()
- Install build deps with yum-builddep
- Add comment why binary packages are built with --nodeps
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #622792 - dysfunctional target_arch-check
https://bugzilla.redhat.com/show_bug.cgi?id=622792
[ 2 ] Bug #662223 - Can't build packages: fails adding 'mockbuild' group
https://bugzilla.redhat.com/show_bug.cgi?id=662223
--------------------------------------------------------------------------------
================================================================================
natus-0.1.3-2.fc13 (FEDORA-2010-18891)
A robust JavaScript shell built on the Natus meta-engine
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #662349 - Review Request: natus - A robust JavaScript shell built on the Natus
meta-engine
https://bugzilla.redhat.com/show_bug.cgi?id=662349
--------------------------------------------------------------------------------
================================================================================
pdfmerge-1.0.3-1.fc13 (FEDORA-2010-18922)
Command line utility program for merging PDF files
--------------------------------------------------------------------------------
Update Information:
pdfmerge is using Ghostscript for its functionality. Since the important Ghostscript tool
for pdfmerge changed it's behaviour, pdfmerge wasn't working correctly anymore.
This update fixes this issue.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 11 2010 Dominic Hopf <dmaphy(a)fedoraproject.org> - 1.0.3-1
- new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #642427 - ghostscript-8.71-16.fc13.i686 breaks pdfmerge-1.0-4.fc12.noarch
https://bugzilla.redhat.com/show_bug.cgi?id=642427
[ 2 ] Bug #646534 - URL no longer current
https://bugzilla.redhat.com/show_bug.cgi?id=646534
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.0.11-1.fc13 (FEDORA-2010-18890)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Update to new upstream SeaMonkey version 2.0.11, fixing multiple security issues detailed
in the upstream advisories:
http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html#se...
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2010 Martin Stransky <stransky(a)redhat.com> 2.0.11-1
- Update to 2.0.11
--------------------------------------------------------------------------------
================================================================================
spring-0.82.6.1-1.fc13 (FEDORA-2010-18898)
Multiplayer, 3D realtime strategy combat game
--------------------------------------------------------------------------------
Update Information:
version 0.82.6.1 (bugfixes,
http://springrts.com/phpbb/viewtopic.php?t=24318)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 18 2010 Gilboa Davara <gilboad [at] gmail [dot] com> - 0.82.6.1-1
- version 0.82.6.1 (bugfixes,
http://springrts.com/phpbb/viewtopic.php?t=24318)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #654842 - RFE: Please upgrade to 0.82.6.1. (patch attached).
https://bugzilla.redhat.com/show_bug.cgi?id=654842
--------------------------------------------------------------------------------
================================================================================
springlobby-0.116-1.fc13 (FEDORA-2010-18876)
A lobby client for the spring RTS game engine
--------------------------------------------------------------------------------
Update Information:
- version 0.116 (w/ GTK fix)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 18 2010 Gilboa Davara <gilboad [at] gmail [dot] com> - 0.116-1
- version 0.116 (w/ GTK fix)
* Wed Sep 29 2010 jkeating - 0.101-2
- Rebuilt for gcc bug 634757
* Wed Sep 15 2010 Aurelien Bompard <abompard(a)fedoraproject.org> - 0.101-1
- version 0.101
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #642633 - [abrt] springlobby-0.95-1.fc13: raise: Process /usr/bin/springlobby
was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=642633
[ 2 ] Bug #636374 - [abrt] springlobby-0.95-1.fc13: Process /usr/bin/springlobby was
killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=636374
[ 3 ] Bug #633472 - [abrt] springlobby-0.95-1.fc13: x86_fallback_frame_state: Process
/usr/bin/springlobby was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=633472
[ 4 ] Bug #629961 - [abrt] springlobby-0.95-1.fc13: raise: Process /usr/bin/springlobby
was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=629961
[ 5 ] Bug #653174 - [abrt] springlobby-0.95-1.fc13: raise: Process /usr/bin/springlobby
was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=653174
[ 6 ] Bug #654840 - RFE: Please upgrade to .116. (patch attached).
https://bugzilla.redhat.com/show_bug.cgi?id=654840
--------------------------------------------------------------------------------
================================================================================
superiotool-0-0.25.20101214svn6179.fc13 (FEDORA-2010-18896)
Simple program for detecting Super I/O on your mainboard
--------------------------------------------------------------------------------
Update Information:
- svn ver. 6179
- Support for the Winbond/Nuvoton W83527HG
- Fintek F71889 detection and dump support
- Detection support for the Fintek F81865/F81865-I
- Fintek F71806 (and F71872) support
- ITE IT8510E/TE/G support
- Fintek F81216D/DG/AD support
- Nuvoton NCT5571D support
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2010 Peter Lemenkov <lemenkov(a)gmail.com> 0-0.25.20101214svn6179
- svn ver. 6179
- Support for the Winbond/Nuvoton W83527HG
- Fintek F71889 detection and dump support
- Detection support for the Fintek F81865/F81865-I
- Fintek F71806 (and F71872) support
- ITE IT8510E/TE/G support
- Fintek F81216D/DG/AD support
- Nuvoton NCT5571D support
--------------------------------------------------------------------------------
================================================================================
tkimg-1.4-1.fc13 (FEDORA-2010-18905)
More Image Formats for Tk
--------------------------------------------------------------------------------
Update Information:
Final release of tkimg 1.4
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2010 Sergio Pascual <sergiopr at fedoraproject.org> - tkimg-1.4-1
- Upstream releases 1.4
* Thu Oct 7 2010 Sergio Pascual <sergiopr at fedoraproject.org> -
tkimg-1.4-0.9.20100906svn
- EVR bump. Upload source tarball
* Thu Oct 7 2010 Sergio Pascual <sergiopr at fedoraproject.org> -
tkimg-1.4-0.8.20100906svn
- New upstream source
--------------------------------------------------------------------------------