The following Fedora 13 Security updates need testing:
https://admin.fedoraproject.org/updates/openttd-1.0.5-1.fc13
https://admin.fedoraproject.org/updates/fontforge-20090923-4.fc13
https://admin.fedoraproject.org/updates/clamav-0.96.5-1300.fc13
https://admin.fedoraproject.org/updates/openssl-1.0.0c-1.fc13
https://admin.fedoraproject.org/updates/thunderbird-3.1.7-2.fc13
https://admin.fedoraproject.org/updates/perl-CGI-Simple-1.112-2.fc13
https://admin.fedoraproject.org/updates/mailman-2.1.12-16.fc13
The following Fedora 13 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/selinux-policy-3.7.19-76.fc13
https://admin.fedoraproject.org/updates/crontabs-1.11-1.20101115git.fc13
https://admin.fedoraproject.org/updates/openssl-1.0.0c-1.fc13
https://admin.fedoraproject.org/updates/xorg-x11-font-utils-7.2-12.fc13
https://admin.fedoraproject.org/updates/elfutils-0.150-2.fc13
https://admin.fedoraproject.org/updates/mingetty-1.08-6.fc13
https://admin.fedoraproject.org/updates/mash-0.5.20-1.fc13
https://admin.fedoraproject.org/updates/openldap-2.4.21-11.fc13
https://admin.fedoraproject.org/updates/nss-3.12.7-4.fc13,nss-util-3.12.7...
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-7...
The following builds have been pushed to Fedora 13 updates-testing
bacula-5.0.3-2.fc13
eclipse-nls-3.5.0.v20100814074441-1.fc13
ibus-anthy-1.2.5-3.fc13
mcu8051ide-1.3.11-1.fc13
pidgin-latex-1.4.3-1.fc13
qjackctl-0.3.7-1.fc13
rpmorphan-1.4-8.fc13
sagator-1.2.2-1.fc13
selinux-policy-3.7.19-76.fc13
towhee-6.2.14-1.fc13
wings-1.2-3.fc13
xchat-2.8.8-6.fc13
Details about builds:
================================================================================
bacula-5.0.3-2.fc13 (FEDORA-2010-18171)
Cross platform network backup for Linux, Unix, Mac and Windows
--------------------------------------------------------------------------------
Update Information:
This is an update that fixes various problems in Bacula.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 26 2010 Jan Görig <jgorig(a)redhat.com> - 5.0.3-2
- Fixed previous fix of alternatives
* Wed Nov 24 2010 Jan Görig <jgorig(a)redhat.com> 5.0.3-1
- Upgrade to new upstream version and included fixes from Rawhide
- Fixed initscripts (#629697, #556669)
- Fixed openssl patch, thanks to Enrico Scholz (#636619)
- Fixed alternatives for dbcheck (#650224)
- Added director address to default tray monitor config (#626490)
* Wed Sep 29 2010 jkeating - 5.0.2-8.1
- Rebuilt for gcc bug 634757
* Fri Jul 30 2010 Jon Ciesla <limb(a)jcomserv.net> - 5.0.2-8
- Patched configure scripts for Python 2.7.
* Fri Jul 30 2010 Jon Ciesla <limb(a)jcomserv.net> - 5.0.2-7
- Rebuild against Python 2.7.
* Wed Jul 14 2010 Dan Horák <dan(a)danny.cz> - 5.0.2-6
- rebuilt against wxGTK-2.8.11-2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #629697 - Bacula daemons do not drop privileges
https://bugzilla.redhat.com/show_bug.cgi?id=629697
[ 2 ] Bug #636619 - -openssl patch is broken
https://bugzilla.redhat.com/show_bug.cgi?id=636619
[ 3 ] Bug #650224 - It appears an incorrect symlink for dbcheck prevents catalog backup
https://bugzilla.redhat.com/show_bug.cgi?id=650224
[ 4 ] Bug #626490 - [abrt] crash in bacula-traymonitor-3.0.3-5.fc12: __strlen_sse2:
Process /usr/sbin/bacula-tray-monitor was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=626490
--------------------------------------------------------------------------------
================================================================================
eclipse-nls-3.5.0.v20100814074441-1.fc13 (FEDORA-2010-18803)
Babel language packs for the Eclipse platform and various plugins
--------------------------------------------------------------------------------
Update Information:
Updated to Babel langpack R0.8.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Sean Flanigan <sflaniga(a)redhat.com> - 3.5.0.v20100814074441-1
- Updated from upstream to 0.8.0 (3.5.0.v20100814074441)
- Added locales ca, en_CA, fa and id
- Marked eclipse-nls as not having debuginfo
--------------------------------------------------------------------------------
================================================================================
ibus-anthy-1.2.5-3.fc13 (FEDORA-2010-18800)
The Anthy engine for IBus input platform
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.2.5-3
- Added ibus-anthy-HEAD.patch
Fixed Bug 661943 - the latest page_size for ibus.LookupTable.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #661943 - [ibus-anthy] candidate page size does not come across without
restarting ibus
https://bugzilla.redhat.com/show_bug.cgi?id=661943
--------------------------------------------------------------------------------
================================================================================
mcu8051ide-1.3.11-1.fc13 (FEDORA-2010-18789)
IDE for MCS-51 based microcontrollers
--------------------------------------------------------------------------------
Update Information:
Updated to upstream 1.3.10.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 9 2010 Shakthi Kannan <shakthimaan [AT] fedoraproject DOT org> -
1.3.11-1
- Updated package to 1.3.11 upstream release
* Tue Nov 16 2010 Shakthi Kannan <shakthimaan [AT] fedoraproject DOT org> -
1.3.10-1
- Updated package to 1.3.10 upstream release
--------------------------------------------------------------------------------
================================================================================
pidgin-latex-1.4.3-1.fc13 (FEDORA-2010-18797)
Use LaTeX formulas in your pidgin conversations
--------------------------------------------------------------------------------
Update Information:
Fix chatroom crash caused by wrong order of parameters.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Jussi Lehtola <jussilehtola(a)fedoraproject.org> - 1.4.3-1
- Update to 1.4.3.
--------------------------------------------------------------------------------
================================================================================
qjackctl-0.3.7-1.fc13 (FEDORA-2010-18806)
Qt based JACK control application
--------------------------------------------------------------------------------
Update Information:
* Session widget has session save type preserved as well.
* Connections and the new Messages/Status widgets now have their last open tab preserved
across program run-cycles.
* Connections and Patchbay widgets have been finally given up on an old feature request:
an Expand All items button.
* A significant UI layout has been made: the Messages and Status widgets were merged into
one, giving space to the brand new Session wigdet to be easy accessible from the main
panel control window.
* libX11 is now being added explicitly to the build link phase, as seen necessary on some
bleeding-edge distros eg. Fedora 13, Debian 6. (closing bug #3050915).
* Input/Output latency options were missing but now finally enabled for the firewire
back-end.
* General standard dialog buttons layout is now in place.
* Avoid pre-loading a stalled patchbay definition filename and its nagging error on
startup (fixes bug #3017078).
* Client connection retrial logic scrapped. Being a leftover from early ages, when
machines were slower and JACK server startup times were longer... now, if it can't
connect first time as client, it will tear down the server whether it's starting up
still or not at all. (cf. Setup/Settings/Start Delay for the rescue).
* Server name is finally part of the server settings presets, thanks to Fons Adriaensen
for the heads-up.
* As a workaround regarding issues switching jack2's backends, Robin Gareus sends us
yet another D-Bus metho slot: "preset", (dbus-send --system /
org.rncbc.qjackctl.preset string:PRESET). Thanks again.
* Another D-Bus interface slot makes it through implementation: "quit" (eg.
usage: dbus-send --system / org.rncbc.qjackctl.quit). Besides, there's also these new
JACK session management actions which were being overlooked as well: "load",
"save", "savequit" and "savetemplate" are also available as
D-Bus method slots.
* Make sure that Patchbay socket names are unique when adding or copying, fixing previous
patch by Dominic Sacré.
* JACK version is now being shown on the About box (jack2).
* Slight Connections widget behavioral change: (dis)connecting a client (from) to one
single port, (dis)connections will be applied in sequence from (to) all client output
ports to (from) as many input ports there are in below, one by one (satisfying a 5 year
old request from Yann Orlarey, thanks:).
* JACK session support is being introduced.
* Ignore first XRUN occurrence option dropped from statistics.
* Initial widget geometry and visibility persistence logic has been slightly revised as
much to avoid crash failures due to wrong main widget hidden state.
* Double-quotes are now being added to device names which include blank characters and
were rendering invalid all command line invocation of the classic JACK server (eg.
specially due for Portaudio device names on Windows).
* Transport play (rolling) status is now being guarded to avoid backfiring from extraneous
transport state changes.
* General source tree layout and build configuration change.
* Italian (it) translation added (by Sergio Atzori).
* Post-shutdown script invocation logic slightly refactored in attempt to enforce its
execution on application quit.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Orcan Ogetbil <oget[DOT]fedora[AT]gmail[DOT]com> 0.3.7-1
- New version. Drop upstreamed patch.
- Some cleanup in he specfile.
- Enable portaudio support.
--------------------------------------------------------------------------------
================================================================================
rpmorphan-1.4-8.fc13 (FEDORA-2010-18802)
List packages that have no dependencies (like deborphan)
--------------------------------------------------------------------------------
Update Information:
Adds a missing dependency
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Rahul Sundaram <sundaram(a)fedoraproject.org> - 1.4-8
- Fix missing perl module dependency for curses UI
- Resolves rhbz#600136
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #600136 - rpmorphan should requires perl(Curses::UI)
https://bugzilla.redhat.com/show_bug.cgi?id=600136
--------------------------------------------------------------------------------
================================================================================
sagator-1.2.2-1.fc13 (FEDORA-2010-18810)
Antivir/antispam gateway for smtp server
--------------------------------------------------------------------------------
Update Information:
Update to upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 9 2010 Jan ONDREJ (SAL) <ondrejj(at)salstar.sk> - 1.2.2-1
- database creation scripts moved to /usr/share/sagator
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.7.19-76.fc13 (FEDORA-2010-18796)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
- nagios needs to to read the state information for software raid
- Add addtional support for OpenCT from Dominic
- Fixes for clamscan
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 9 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-76
- Fixes for clamscan
* Mon Dec 6 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.7.19-75
- nagios needs to to read the state information for software raid
- Add addtional support for OpenCT from Dominic
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #659443 - SELinux is preventing /usr/sbin/nagios (deleted) "read"
access on mdstat.
https://bugzilla.redhat.com/show_bug.cgi?id=659443
[ 2 ] Bug #659442 - SELinux is preventing /usr/sbin/nagios (deleted) "ioctl"
access on /usr/lib64/nagios/plugins/check_linux_raid.
https://bugzilla.redhat.com/show_bug.cgi?id=659442
[ 3 ] Bug #637003 - selinux prevents clamdscan from running
https://bugzilla.redhat.com/show_bug.cgi?id=637003
[ 4 ] Bug #659468 - SELinux is preventing /usr/sbin/exim access to a leaked
/var/log/nagios/spool/checkresults/checkK9kGwp file descriptor.
https://bugzilla.redhat.com/show_bug.cgi?id=659468
[ 5 ] Bug #659473 - SELinux is preventing /usr/sbin/nagios (deleted) "ioctl"
access on /usr/lib64/nagios/plugins/check_ifstatus.
https://bugzilla.redhat.com/show_bug.cgi?id=659473
[ 6 ] Bug #659464 - SELinux is preventing /usr/sbin/nagios (deleted) "ioctl"
access on /usr/lib64/nagios/plugins/check_mailq.
https://bugzilla.redhat.com/show_bug.cgi?id=659464
[ 7 ] Bug #660147 - avc: smartcard token login (openct)
https://bugzilla.redhat.com/show_bug.cgi?id=660147
--------------------------------------------------------------------------------
================================================================================
towhee-6.2.14-1.fc13 (FEDORA-2010-18805)
A Monte Carlo molecular simulation code
--------------------------------------------------------------------------------
Update Information:
Update to 6.2.14, fixing minor errors in forcefield files.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Jussi Lehtola <jussilehtola(a)fedoraproject.org> - 6.2.14-1
- Update to 6.2.14.
* Mon Oct 25 2010 Jussi Lehtola <jussilehtola(a)fedoraproject.org> - 6.2.12-2
- Bump spec due to upgrades of MPICH2 and OpenMPI.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #654795 - towhee-6.2.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=654795
--------------------------------------------------------------------------------
================================================================================
wings-1.2-3.fc13 (FEDORA-2010-18793)
3D Subdivision Modeler
--------------------------------------------------------------------------------
Update Information:
Do not interfere with user-supplied Erlang/OTP libraries (possibly built from sources).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 9 2010 Peter Lemenkov <lemenkov(a)gmail.com> - 1.2.0-3
- Explicitly use erl installed into /usr/bin
--------------------------------------------------------------------------------
================================================================================
xchat-2.8.8-6.fc13 (FEDORA-2010-18788)
A popular and easy to use graphical IRC (chat) client
--------------------------------------------------------------------------------
Update Information:
This update adds a dependency on alsa-utils, which contains the aplay utility, which is
used by XChat to play event sounds.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 10 2010 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 1:2.8.8-6
- Requires: alsa-utils for aplay (#661957)
* Mon Nov 15 2010 Owen Taylor <otaylor(a)redhat.com> - 1:2.8.8-5
- Add patch to work with libnotify-0.7
* Tue Jul 27 2010 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 1:2.8.8-4
- Rebuild against python 2.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #661957 - xchat sound playing method 'Automatic' produces no sound
https://bugzilla.redhat.com/show_bug.cgi?id=661957
--------------------------------------------------------------------------------