The following Fedora 14 Security updates need testing:
https://admin.fedoraproject.org/updates/wireshark-1.4.2-2.fc14
https://admin.fedoraproject.org/updates/ccid-1.4.0-2.fc14
https://admin.fedoraproject.org/updates/pcsc-lite-1.6.4-3.fc14
https://admin.fedoraproject.org/updates/perl-Convert-UUlib-1.34-1.fc14
https://admin.fedoraproject.org/updates/wordpress-mu-2.9.2-2.fc14
https://admin.fedoraproject.org/updates/pyfribidi-0.10.0-1.fc14
https://admin.fedoraproject.org/updates/Django-1.2.4-1.fc14
https://admin.fedoraproject.org/updates/feh-1.10.1-1.fc14
https://admin.fedoraproject.org/updates/socat-1.7.1.3-1.fc14
https://admin.fedoraproject.org/updates/mod_auth_mysql-3.0.0-12.fc14
https://admin.fedoraproject.org/updates/perl-CGI-Simple-1.112-2.fc14
https://admin.fedoraproject.org/updates/exim-4.72-2.fc14
The following Fedora 14 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/shadow-utils-4.1.4.2-9.fc14
https://admin.fedoraproject.org/updates/attr-2.4.44-6.fc14
https://admin.fedoraproject.org/updates/libxfcegui4-4.6.4-4.fc14,libxfce4...
https://admin.fedoraproject.org/updates/selinux-policy-3.9.7-20.fc14
https://admin.fedoraproject.org/updates/cairo-1.10.2-1.fc14
https://admin.fedoraproject.org/updates/xorg-x11-drv-geode-2.11.10-1.fc14
The following builds have been pushed to Fedora 14 updates-testing
attr-2.4.44-6.fc14
eclipse-cdt-7.0.1-3.fc14
jemalloc-2.1.0-1.fc14
kdevelop-pg-qt-0.9.0-3.fc14
kdevelop-php-1.1.1-3.fc14
microcode_ctl-1.17-6.fc14
mingw32-gtkmm24-2.22.0-1.fc14
mksh-39c-4.fc14
mmapper-2.1.0-2.fc14
mysql-5.1.52-2.fc14
perl-Dist-CheckConflicts-0.02-2.fc14
perl-HTML-Defang-1.04-1.fc14
perl-POE-Component-IRC-6.52-1.fc14
perl-Package-Pkg-0.0019-1.fc14
perl-Perl-PrereqScanner-1.001-1.fc14
pokerth-0.8.2-1.fc14
python-kitchen-0.2.3-2.fc14
shadow-utils-4.1.4.2-9.fc14
squid-3.1.10-1.fc14
visualvm-1.3.1-1.fc14
Details about builds:
================================================================================
attr-2.4.44-6.fc14 (FEDORA-2011-0197)
Utilities for managing filesystem extended attributes
--------------------------------------------------------------------------------
Update Information:
cumulative bugfix update for stable Fedora
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 5 2011 Kamil Dudka <kdudka(a)redhat.com> 2.2.44-6
- setfattr.1: document supported encodings of values (#587516)
- getfattr: encode NULs properly with --encoding=text (#650539)
- getfattr: return non-zero exit code on failure (#660619)
- walk_tree: do not follow symlink to directory with -h (#660613)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #587516 - setfattr doesn't accept 0x2 as the value [documentation bug]
https://bugzilla.redhat.com/show_bug.cgi?id=587516
[ 2 ] Bug #650539 - getfattr ignores NULs in output when using "text"
encoding
https://bugzilla.redhat.com/show_bug.cgi?id=650539
[ 3 ] Bug #660619 - getfattr does not return failure when designated attribute does not
exist
https://bugzilla.redhat.com/show_bug.cgi?id=660619
[ 4 ] Bug #660613 - getfattr follows the links despite option -h
https://bugzilla.redhat.com/show_bug.cgi?id=660613
--------------------------------------------------------------------------------
================================================================================
eclipse-cdt-7.0.1-3.fc14 (FEDORA-2011-0177)
Eclipse C/C++ Development Tools (CDT) plugin
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 5 2011 Jeff Johnston <jjohnstn(a)redhat.com> 1:7.0.1-3
- Add patch for Eclipse bug 286162.
--------------------------------------------------------------------------------
================================================================================
jemalloc-2.1.0-1.fc14 (FEDORA-2011-0182)
General-purpose scalable concurrent malloc implementation
--------------------------------------------------------------------------------
Update Information:
This is a new upstream release
From the upstream changelog:
This version incorporates some optimizations that can't quite be considered bug
fixes.
**New features**:
* Use Linux's mremap(2) for huge object reallocation when possible.
* Avoid locking in mallctl*() when possible.
* Add the "thread.[de]allocatedp" mallctl's.
* Convert the manual page source from roff to DocBook, and generate both roff and HTML
manuals.
**Bug fixes**:
* Fix a crash due to incorrect bootstrap ordering. This only impacted --enable-debug
--enable-dss configurations.
* Fix a minor statistics bug for mallctl("swap.avail", ...).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 5 2011 Ingvar Hagelund <ingvar(a)redpill-linpro.com> - 2.1.0-1
- New upstream release
- Updated patch to remove pprof
- Added html doc and xsltproc as a requirement to build it
* Sat Dec 11 2010 Dan Horák <dan[at]danny.cz> - 2.0.1-3
- fix build on s390
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #667385 - jemalloc-2.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=667385
--------------------------------------------------------------------------------
================================================================================
kdevelop-pg-qt-0.9.0-3.fc14 (FEDORA-2011-0171)
A parser generator
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #661832 - Review Request: kdevelop-pg-qt - A parser generator
https://bugzilla.redhat.com/show_bug.cgi?id=661832
[ 2 ] Bug #661833 - Review Request: kdevelop-php - Php language plugin for KDevelop
https://bugzilla.redhat.com/show_bug.cgi?id=661833
--------------------------------------------------------------------------------
================================================================================
kdevelop-php-1.1.1-3.fc14 (FEDORA-2011-0171)
Php language plugin for KDevelop
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #661832 - Review Request: kdevelop-pg-qt - A parser generator
https://bugzilla.redhat.com/show_bug.cgi?id=661832
[ 2 ] Bug #661833 - Review Request: kdevelop-php - Php language plugin for KDevelop
https://bugzilla.redhat.com/show_bug.cgi?id=661833
--------------------------------------------------------------------------------
================================================================================
microcode_ctl-1.17-6.fc14 (FEDORA-2011-0181)
Tool to update x86/x86-64 CPU microcode.
--------------------------------------------------------------------------------
Update Information:
microcode update
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 5 2011 Anton Arapov <anton(a)redhat.com> 1.17-6
- Update to microcode-20101123.dat
--------------------------------------------------------------------------------
================================================================================
mingw32-gtkmm24-2.22.0-1.fc14 (FEDORA-2011-0175)
MinGW Windows C++ interface for GTK2 (a GUI library for X)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 6 2010 Thomas Sailer <t.sailer(a)alumni.ethz.ch> - 2.22.0-1
- update to 2.22.0
--------------------------------------------------------------------------------
================================================================================
mksh-39c-4.fc14 (FEDORA-2011-0178)
MirBSD enhanced version of the Korn Shell
--------------------------------------------------------------------------------
Update Information:
- fix crash when bad substitution is used
- example of bad substitution that could crash old version is: echo ${x[@]:2}
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 5 2011 Michal Hlavinka <mhlavink(a)redhat.com> 39c-4
- fix crash when bad substitution is used
--------------------------------------------------------------------------------
================================================================================
mmapper-2.1.0-2.fc14 (FEDORA-2011-0193)
Graphical MUME mapper
--------------------------------------------------------------------------------
Update Information:
This update fixes a visual glitch where all textures were displayed upside-down.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 6 2011 Kalev Lember <kalev(a)smartlink.ee> - 2.1.0-2
- Added patch to fix mirrored textures with Qt >= 4.6
--------------------------------------------------------------------------------
================================================================================
mysql-5.1.52-2.fc14 (FEDORA-2011-0179)
MySQL client programs and shared libraries
--------------------------------------------------------------------------------
Update Information:
Disable use of pthread_setschedprio to prevent useless EINVAL failures
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 6 2011 Tom Lane <tgl(a)redhat.com> 5.1.52-2
- Disable use of pthread_setschedprio to prevent useless EINVAL failures
Resolves: #477624
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #477624 - mysql calls to pthread_setschedparam cause EINVAL
https://bugzilla.redhat.com/show_bug.cgi?id=477624
--------------------------------------------------------------------------------
================================================================================
perl-Dist-CheckConflicts-0.02-2.fc14 (FEDORA-2011-0191)
Declare version conflicts for your dist
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #667403 - Review Request: perl-Dist-CheckConflicts - Declare version conflicts
for your dist
https://bugzilla.redhat.com/show_bug.cgi?id=667403
--------------------------------------------------------------------------------
================================================================================
perl-HTML-Defang-1.04-1.fc14 (FEDORA-2011-0200)
Cleans HTML and CSS of executable contents
--------------------------------------------------------------------------------
Update Information:
This update to the latest upstream version includes:
* Change defang_and_add_to_output to delay the defanging until after the current tag is
actually emitted to the output
* If url callback has marked the attribute as to be defanged, skip result of attribute
callback
* Track <a> tags as part of mismatched tag tracking
* allow attribute values upto 16384 chars long
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 6 2011 Iain Arnell <iarnell(a)gmail.com> 1.04-1
- update to latest upstream version
- clean up spec for modern rpmbuild
* Fri Dec 17 2010 Marcela Maslanova <mmaslano(a)redhat.com> - 1.03-2
- 661697 rebuild for fixing problems with vendorach/lib
--------------------------------------------------------------------------------
================================================================================
perl-POE-Component-IRC-6.52-1.fc14 (FEDORA-2011-0198)
A POE component for building IRC clients
--------------------------------------------------------------------------------
Update Information:
Update from really old unusable version. A lot of bugfixes, a few features. Full list is
here:
http://cpansearch.perl.org/src/HINRIK/POE-Component-IRC-6.52/Changes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 9 2010 Marcela Mašláňová <mmaslano(a)redhat.com> 6.52-2
- update by Fedora::App::MaintainerTools 0.006
- PERL_INSTALL_ROOT => DESTDIR
- altered br on perl(ExtUtils::MakeMaker) (6.42 => 6.31)
- added a new br on perl(Object::Pluggable) (version 0)
- altered br on perl(POE) (0.3202 => 1.287)
- altered br on perl(POE::Filter::IRCD) (1.7 => 2.42)
- added a new br on perl(POE::Session) (version 0)
- dropped old BR on perl(Encode)
- dropped old BR on perl(Encode::Guess)
- dropped old BR on perl(POE::Component::Client::DNS)
- dropped old BR on perl(POE::Component::Pluggable)
- dropped old BR on perl(POE::Filter::Zlib::Stream)
- dropped old BR on perl(Socket6)
- dropped old BR on perl(Test::Pod)
- dropped old BR on perl(Test::Pod::Coverage)
- added a new req on perl(Object::Pluggable) (version 0)
- altered req on perl(POE) (0.3202 => 1.287)
- altered req on perl(POE::Filter::IRCD) (1.7 => 2.42)
- added a new req on perl(POE::Session) (version 0)
- dropped old requires on perl(Encode)
- dropped old requires on perl(Encode::Guess)
- dropped old requires on perl(POE::Component::Pluggable)
* Thu May 20 2010 Iain Arnell <iarnell(a)gmail.com> 6.14-4
- apply patch for rhbz#591215
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #649761 - RFE - Update POE::Component::IRC to version 6.50
https://bugzilla.redhat.com/show_bug.cgi?id=649761
--------------------------------------------------------------------------------
================================================================================
perl-Package-Pkg-0.0019-1.fc14 (FEDORA-2011-0192)
Handy package munging utilities
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #666889 - Review Request: perl-Package-Pkg - Handy package munging utilities
https://bugzilla.redhat.com/show_bug.cgi?id=666889
--------------------------------------------------------------------------------
================================================================================
perl-Perl-PrereqScanner-1.001-1.fc14 (FEDORA-2011-0174)
Tool to scan your Perl code for its prerequisites
--------------------------------------------------------------------------------
Update Information:
This update fixes the scan_prereqs script.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 6 2011 Iain Arnell <iarnell(a)gmail.com> 1.001-1
- update to latest upstream version
- fixes scan_prereqs script
--------------------------------------------------------------------------------
================================================================================
pokerth-0.8.2-1.fc14 (FEDORA-2011-0186)
A Texas-Holdem poker game
--------------------------------------------------------------------------------
Update Information:
Bugfix update to 0.8.2.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 5 2011 Jussi Lehtola <jussilehtola(a)fedoraproject.org> - 0.8.2-1
- Update to 0.8.2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #667395 - pokerth-0.8.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=667395
--------------------------------------------------------------------------------
================================================================================
python-kitchen-0.2.3-2.fc14 (FEDORA-2011-0180)
Small, useful pieces of code to make python coding easier
--------------------------------------------------------------------------------
Update Information:
Update with workaround for people using private functions in subprocess.
New upstream release with two new functions.
New upstream release with two new functions.
New upstream release with two new functions.
New upstream release with two new functions.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 5 2011 Toshio Kuratomi <toshio(a)fedoraproject.org> - 0.2.3-2
- Upstream respin of the tarball
* Wed Jan 5 2011 Toshio Kuratomi <toshio(a)fedoraproject.org> - 0.2.3-1
- Upstream update to 0.2.3
- Fixes
https://bugzilla.redhat.com/show_bug.cgi?id=667433
* Mon Jan 3 2011 Toshio Kuratomi <toshio(a)fedoraproject.org> - 0.2.2-1
- Upstream update 0.2.2
- Adds exception to message functions
- Build html docs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #667433 - fedpkg aborts with AttributeError
https://bugzilla.redhat.com/show_bug.cgi?id=667433
--------------------------------------------------------------------------------
================================================================================
shadow-utils-4.1.4.2-9.fc14 (FEDORA-2011-0187)
Utilities for managing accounts and shadow password files
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 5 2011 Peter Vrabec <pvrabec(a)redhat.com> - 2:4.1.4.2-9
- fix gshadow functions from shadow utils
- make shadow utils use gshadow functions from glibc
Resolves: #665780
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #665780 - /usr/bin/sg has ceased to function for groups with a password;
"Invalid password"
https://bugzilla.redhat.com/show_bug.cgi?id=665780
--------------------------------------------------------------------------------
================================================================================
squid-3.1.10-1.fc14 (FEDORA-2011-0199)
The Squid proxy caching server
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 6 2011 Jiri Skala <jskala(a)redhat.com> - 7:3.1.10-1
- Update to 3.1.10 upstream release
--------------------------------------------------------------------------------
================================================================================
visualvm-1.3.1-1.fc14 (FEDORA-2011-0185)
Lightweight profiler that integrates many command-line JDK tools
--------------------------------------------------------------------------------
Update Information:
updated to 1.3.1
fixed bugs pushing last version to unstable
(
https://bugzilla.redhat.com/show_bug.cgi?id=667314)
--------------------------------------------------------------------------------