The following Fedora 13 Security updates need testing:
https://admin.fedoraproject.org/updates/gimp-2.6.11-14.fc13
https://admin.fedoraproject.org/updates/tor-0.2.1.29-1300.fc13
https://admin.fedoraproject.org/updates/libmodplug-0.8.7-3.fc13
https://admin.fedoraproject.org/updates/openldap-2.4.21-12.fc13
https://admin.fedoraproject.org/updates/polkit-0.96-2.fc13
https://admin.fedoraproject.org/updates/xorg-x11-server-utils-7.4-17.fc13
https://admin.fedoraproject.org/updates/kernel-2.6.34.9-69.fc13
https://admin.fedoraproject.org/updates/drupal-6.22-1.fc13
https://admin.fedoraproject.org/updates/cyrus-imapd-2.3.16-5.fc13
https://admin.fedoraproject.org/updates/phpMyAdmin-3.4.1-1.fc13
https://admin.fedoraproject.org/updates/libtiff-3.9.5-1.fc13
https://admin.fedoraproject.org/updates/bind-9.7.3-2.P1.fc13
https://admin.fedoraproject.org/updates/dovecot-1.2.17-1.fc13
https://admin.fedoraproject.org/updates/mutt-1.5.21-5.fc13
https://admin.fedoraproject.org/updates/rdesktop-1.6.0-10.fc13
https://admin.fedoraproject.org/updates/apr-1.4.5-1.fc13
The following Fedora 13 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/module-init-tools-3.11.1-4.fc13
https://admin.fedoraproject.org/updates/libcdio-0.82-4.fc13
https://admin.fedoraproject.org/updates/kernel-2.6.34.9-69.fc13
https://admin.fedoraproject.org/updates/polkit-0.96-2.fc13
https://admin.fedoraproject.org/updates/python-ethtool-0.7-2.fc13
https://admin.fedoraproject.org/updates/libtiff-3.9.5-1.fc13
https://admin.fedoraproject.org/updates/pygtk2-2.17.0-9.fc13
https://admin.fedoraproject.org/updates/dosfstools-3.0.9-5.fc13
https://admin.fedoraproject.org/updates/libimobiledevice-1.0.6-1.fc13
https://admin.fedoraproject.org/updates/usbmuxd-1.0.7-1.fc13
https://admin.fedoraproject.org/updates/fuse-2.8.5-5.fc13
https://admin.fedoraproject.org/updates/openldap-2.4.21-12.fc13
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-7...
https://admin.fedoraproject.org/updates/lldpad-0.9.26-2.fc13
The following builds have been pushed to Fedora 13 updates-testing
boswars-addons-2.6-1
dvisvgm-1.0.8-1.fc13
emacs-common-riece-8.0.0-1.fc13
groonga-1.2.2-1.fc13
module-init-tools-3.11.1-4.fc13
mutt-1.5.21-5.fc13
voms-2.0.2-1.fc13
voms-mysql-plugin-3.1.5.1-1.fc13
Details about builds:
================================================================================
boswars-addons-2.6-1 (FEDORA-2011-7742)
Addon maps for Bos Wars real-time strategy game
--------------------------------------------------------------------------------
Update Information:
Update to be compatible with the current boswars.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Bruno Wolff III <bruno(a)wolff.to> - 2.6-1
- Use 2.6 compatible maps (resolves 659989)
- Correct license from GPLv2 to GPLv2+
- Require a compatible version of boswars
- Fix upstream URL
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.5-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #659989 - Boswars addon maps don't work
https://bugzilla.redhat.com/show_bug.cgi?id=659989
--------------------------------------------------------------------------------
================================================================================
dvisvgm-1.0.8-1.fc13 (FEDORA-2011-7746)
DVI to SVG converter
--------------------------------------------------------------------------------
Update Information:
This maintenance release fixes a couple of PostScript-related positioning issues. The most
important changes are:
* Evaluation of PS operators save, restore, and grestoreall has been added.
* A potential memory issue triggered by invisible zero-length PS paths has been fixed.
* The computation of the current drawing position influenced by PS and DVI actions has
been improved.
* Metafont no longer stops the conversions on errors in order to finish the convertion of
buggy MF fonts properly.
For further information see
http://dvisvgm.sourceforge.net
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Martin Gieseking <martin.gieseking(a)uos.de> 1.0.8-1
- updated to upstream release 1.0.8
--------------------------------------------------------------------------------
================================================================================
emacs-common-riece-8.0.0-1.fc13 (FEDORA-2011-7716)
Yet Another IRC Client for Emacs and XEmacs
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Daiki Ueno <dueno(a)redhat.com> - 8.0.0-1
- new upstream release
- remove riece-xemacs.patch since it is upstreamed
--------------------------------------------------------------------------------
================================================================================
groonga-1.2.2-1.fc13 (FEDORA-2011-7714)
An Embeddable Fulltext Search Engine
--------------------------------------------------------------------------------
Update Information:
new upstream release; split -server subpackage
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Daiki Ueno <dueno(a)redhat.com> - 1.2.2-1
- build in fedora
* Sun May 29 2011 Kouhei Sutou <kou(a)clear-code.com> - 1.2.2-0
- new upstream release.
- split server files into groonga-server package.
--------------------------------------------------------------------------------
================================================================================
module-init-tools-3.11.1-4.fc13 (FEDORA-2011-7713)
Kernel module management utilities.
--------------------------------------------------------------------------------
Update Information:
Existing releases of module-init-tools cannot handle Linux kernel version numbering in
which x.y.z releases are replaced with x.y releases. This update contains a fix for such
version number handling.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Jon Masters <jcm(a)jonmasters.org> - 3.11.1-4
- Add patch supporting kernel x.y versions in depmod.
- Intentionally do not rebase existing well understood shipping code.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #709231 - depmod cannot handle kernel versions without x.y.z components
https://bugzilla.redhat.com/show_bug.cgi?id=709231
--------------------------------------------------------------------------------
================================================================================
mutt-1.5.21-5.fc13 (FEDORA-2011-7756)
A text mode mail user agent
--------------------------------------------------------------------------------
Update Information:
This is an update that fixes a hostname verification of x.509 certificates and a
segmentation fault during reading message headers.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 15 2011 Honza Horak <hhorak(a)redhat.com> - 5:1.5.21-5
- Fixed hostname verification of x.509 certificates.
(rhbz#688756, CVE-2011-1429)
* Tue Mar 29 2011 Honza Horak <hhorak(a)redhat.com> - 5:1.5.21-4
- Fixed segmentation faults during reading message headers (rhbz#676074)
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
5:1.5.21-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Wed Sep 29 2010 jkeating - 5:1.5.21-2
- Rebuilt for gcc bug 634757
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #688755 - CVE-2011-1429 mutt: improper verification of X.509 certificates can
lead to MITM attacks on SMTP SSL connections
https://bugzilla.redhat.com/show_bug.cgi?id=688755
--------------------------------------------------------------------------------
================================================================================
voms-2.0.2-1.fc13 (FEDORA-2011-7750)
Virtual Organization Membership Service
--------------------------------------------------------------------------------
Update Information:
Update to voms version 2.0.2.
Add compat package for old releases containing the obsoleted libraries.
Drop Java ahead-of-time compilation for new releases.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 27 2011 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.0.2-1
- Update to version 2.0.2
- Add compat package for older releases
- Drop Java AOT compilation for newer releases
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9.19.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sun Dec 26 2010 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 1.9.19.2-2
- Make vomsjapi-javadoc arch depenent on EPEL
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #693276 - voms is incompatible with bouncycastle-1.46-1.el6
https://bugzilla.redhat.com/show_bug.cgi?id=693276
--------------------------------------------------------------------------------
================================================================================
voms-mysql-plugin-3.1.5.1-1.fc13 (FEDORA-2011-7750)
VOMS server plugin for MySQL
--------------------------------------------------------------------------------
Update Information:
Update to voms version 2.0.2.
Add compat package for old releases containing the obsoleted libraries.
Drop Java ahead-of-time compilation for new releases.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 31 2011 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 3.1.5.1-1
- Update to version 3.1.5.1
* Wed Mar 23 2011 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 3.1.3.2-3
- Rebuild for mysql 5.5.10
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.1.3.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #693276 - voms is incompatible with bouncycastle-1.46-1.el6
https://bugzilla.redhat.com/show_bug.cgi?id=693276
--------------------------------------------------------------------------------