The following Fedora 13 Security updates need testing:
https://admin.fedoraproject.org/updates/perl-IO-Socket-SSL-1.37-1.fc13
https://admin.fedoraproject.org/updates/mantis-1.1.8-5.fc13
https://admin.fedoraproject.org/updates/Ajaxterm-0.10-13.fc13
https://admin.fedoraproject.org/updates/libwmf-0.2.8.4-22.fc13
https://admin.fedoraproject.org/updates/opensc-0.11.13-6.fc13
https://admin.fedoraproject.org/updates/tor-0.2.1.28-1300.fc13
https://admin.fedoraproject.org/updates/dbus-1.2.24-2.fc13
https://admin.fedoraproject.org/updates/kernel-2.6.34.7-66.fc13
https://admin.fedoraproject.org/updates/eclipse-3.5.2-4.fc13
https://admin.fedoraproject.org/updates/git-1.7.3.4-1.fc13
https://admin.fedoraproject.org/updates/drupal-views-6.x.2.12-1.fc13
https://admin.fedoraproject.org/updates/php-5.3.4-1.fc13.1,php-eaccelerat...
https://admin.fedoraproject.org/updates/ImageMagick-6.5.8.10-7.fc13
https://admin.fedoraproject.org/updates/perl-CGI-Simple-1.112-2.fc13
The following Fedora 13 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/dbus-1.2.24-2.fc13
https://admin.fedoraproject.org/updates/selinux-policy-3.7.19-80.fc13
https://admin.fedoraproject.org/updates/libical-0.46-2.fc13
https://admin.fedoraproject.org/updates/koji-1.6.0-1.fc13
https://admin.fedoraproject.org/updates/pm-utils-1.2.6.1-4.fc13
https://admin.fedoraproject.org/updates/xorg-x11-font-utils-7.2-12.fc13
https://admin.fedoraproject.org/updates/mingetty-1.08-6.fc13
https://admin.fedoraproject.org/updates/mash-0.5.20-1.fc13
https://admin.fedoraproject.org/updates/openldap-2.4.21-11.fc13
https://admin.fedoraproject.org/updates/nss-3.12.7-4.fc13,nss-util-3.12.7...
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-7...
The following builds have been pushed to Fedora 13 updates-testing
dbus-1.2.24-2.fc13
ibus-m17n-1.3.1-8.fc13
opensc-0.11.13-6.fc13
pootle-2.1.4-1.fc13
python-memcached-1.47-1.fc13
rubygem-warden-1.0.3-3.fc13
sdlhack-1.1-1.fc13
vlgothic-fonts-20101218-1.fc13
Details about builds:
================================================================================
dbus-1.2.24-2.fc13 (FEDORA-2010-19178)
D-BUS message bus
--------------------------------------------------------------------------------
Update Information:
You need to reboot to apply this update.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 21 2010 Colin Walters <walters(a)verbum.org> - 1:1.2.24-2
- CVE-2010-4352
Resolves:
https://bugzilla.redhat.com/show_bug.cgi?id=663744
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #663673 - CVE-2010-4352 D-BUS: Stack overflow by validating message with
excessive number of nested variants
https://bugzilla.redhat.com/show_bug.cgi?id=663673
--------------------------------------------------------------------------------
================================================================================
ibus-m17n-1.3.1-8.fc13 (FEDORA-2010-19191)
The M17N engine for IBus platform
--------------------------------------------------------------------------------
Update Information:
update to 1.3.1-8 for
https://bugzilla.redhat.com/show_bug.cgi?id=664638
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Daiki Ueno <dueno(a)redhat.com> - 1.3.1-8
- Update ibus-m17n-HEAD.patch.
- Lower si-samanala.mim rank per request from a Sinhala user.
* Wed Dec 8 2010 Daiki Ueno <dueno(a)redhat.com> - 1.3.1-7
- Update ibus-m17n-HEAD.patch.
- Fix bug 658336 - ibus-m17n: define the IM ranks in a config file and
not in a compiled binary
* Fri Nov 5 2010 Daiki Ueno <dueno(a)redhat.com> - 1.3.1-6
- Rename ibus-m17n-fedora.patch to ibus-m17n-HEAD.patch since the
changes are merged into upstream.
- Update ibus-m17n-HEAD.patch with upstream fix 08e06310
- Fix bug 649230 - [si] last input character is committed late in
wijesekara input method
--------------------------------------------------------------------------------
================================================================================
opensc-0.11.13-6.fc13 (FEDORA-2010-19193)
Smart card library and applications
--------------------------------------------------------------------------------
Update Information:
Fixes CVE-2010-4523 - buffer overflow when some kinds of specially crafted rogue smart
cards are used.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 21 2010 Tomas Mraz <tmraz(a)redhat.com> - 0.11.13-6
- fix buffer overflow on rogue card serial numbers
* Tue Oct 19 2010 Tomas Mraz <tmraz(a)redhat.com> - 0.11.13-5
- own the _libdir/pkcs11 subdirectory (#644527)
* Tue Sep 7 2010 Tomas Mraz <tmraz(a)redhat.com> - 0.11.13-4
- fix build with new pcsc-lite
* Wed Aug 11 2010 Rex Dieter <rdieter(a)fedoraproject.org> - 0.11.13-3
- build against libassuan1 (f14+)
* Wed Jun 9 2010 Tomas Mraz <tmraz(a)redhat.com> - 0.11.13-2
- replace file dependency (#601943)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #664831 - CVE-2010-4523 OpenSC: Three stack-based buffer overflows, when
processing crafted serial numbers of certain cards
https://bugzilla.redhat.com/show_bug.cgi?id=664831
--------------------------------------------------------------------------------
================================================================================
pootle-2.1.4-1.fc13 (FEDORA-2010-19186)
Localization and translation management web application
--------------------------------------------------------------------------------
Update Information:
**Update to 2.1.4**
- Fix quality checks update on file uploads.
- Qt ts plurals should now work correctly.
- Fix obsolete units now updated when uploading a new file version.
- Fix server errors when using turkish Locale.
- Fix pt_BR detected as Brazillian Portoguese not Breton
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 17 2010 Dwayne Bailey <dwayne(a)translate.org.za> - 2.1.4-1
- Update to 2.1.4
- Fix quality checks update on file uploads.
- Qt ts plurals should now work correctly.
- Fix obsolete units now updated when uploading a new file version.
- Fix server errors when using turkish Locale.
- Fix pt_BR detected as Brazillian Portoguese not Breton
* Fri Nov 19 2010 Dwayne Bailey <dwayne(a)translate.org.za> - 2.1.3-1
- Update to 2.1.3
- Fix data loss bug, recent translations lost when updating from version
control
- Java properties accepted in any encoding, including UTF-8
- New translations: Chiga, Latvian
- Fix for database migration failing for some users
- Fix for errors on upgrades for users who deleted the English
language
- Fix for errors on filenames with spaces and memcached
- Many fixes to language detection in GNU Style projects
- Various fixes to handling of escaped characters on the translate page
--------------------------------------------------------------------------------
================================================================================
python-memcached-1.47-1.fc13 (FEDORA-2010-19177)
A Python memcached client library
--------------------------------------------------------------------------------
Update Information:
Many bugfixes and a few enhancements. See Changelog for details.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 21 2010 Kevin Fenzi <kevin(a)tummy.vom> - 1.47-1
- Update to 1.47
* Thu Jul 22 2010 David Malcolm <dmalcolm(a)redhat.com> - 1.43-6
- Rebuilt for
https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
--------------------------------------------------------------------------------
================================================================================
rubygem-warden-1.0.3-3.fc13 (FEDORA-2010-19183)
Rack middle-ware that provides authentication for rack applications
--------------------------------------------------------------------------------
Update Information:
Initial import.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #663653 - Review Request: rubygem-warden - Rack middle-ware that provides
authentication
https://bugzilla.redhat.com/show_bug.cgi?id=663653
--------------------------------------------------------------------------------
================================================================================
sdlhack-1.1-1.fc13 (FEDORA-2010-19188)
Force full-screen games to minimize
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #657577 - Review Request: sdlhack - Force full-screen games to minimize
https://bugzilla.redhat.com/show_bug.cgi?id=657577
--------------------------------------------------------------------------------
================================================================================
vlgothic-fonts-20101218-1.fc13 (FEDORA-2010-19181)
Japanese TrueType font
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2010 Akira TAGOH <tagoh(a)redhat.com> - 20101218-1
- New upstream release.
--------------------------------------------------------------------------------