The following Fedora 16 Security updates need testing: Age URL 19 https://admin.fedoraproject.org/updates/FEDORA-2012-17376/seamonkey-2.13.2-1... 59 https://admin.fedoraproject.org/updates/FEDORA-2012-14452/bacula-5.0.3-33.fc... 32 https://admin.fedoraproject.org/updates/FEDORA-2012-16415/389-ds-base-1.2.10... 0 https://admin.fedoraproject.org/updates/FEDORA-2012-18575/weechat-0.3.8-4.fc... 0 https://admin.fedoraproject.org/updates/FEDORA-2012-18570/moodle-2.1.9-1.fc1... 16 https://admin.fedoraproject.org/updates/FEDORA-2012-17553/libproxy-0.4.10-1.... 137 https://admin.fedoraproject.org/updates/FEDORA-2012-10314/revelation-0.4.14-... 57 https://admin.fedoraproject.org/updates/FEDORA-2012-14654/tor-0.2.2.39-1600.... 38 https://admin.fedoraproject.org/updates/FEDORA-2012-16032/cobbler-2.4.0-beta... 12 https://admin.fedoraproject.org/updates/FEDORA-2012-17746/libsocialweb-0.25.... 5 https://admin.fedoraproject.org/updates/FEDORA-2012-18224/bugzilla-4.0.9-1.f... 5 https://admin.fedoraproject.org/updates/FEDORA-2012-18249/xen-4.1.3-4.fc16 1 https://admin.fedoraproject.org/updates/FEDORA-2012-18462/cgit-0.9.1-2.fc16 20 https://admin.fedoraproject.org/updates/FEDORA-2012-17291/thunderbird-16.0.2... 3 https://admin.fedoraproject.org/updates/FEDORA-2012-18299/mantis-1.2.12-1.fc... 2 https://admin.fedoraproject.org/updates/FEDORA-2012-18330/perl-CGI-3.51-6.fc... 3 https://admin.fedoraproject.org/updates/FEDORA-2012-18300/insight-7.4.50-4.2...
The following Fedora 16 Critical Path updates have yet to be approved: Age URL 0 https://admin.fedoraproject.org/updates/FEDORA-2012-18547/desktop-file-utils... 0 https://admin.fedoraproject.org/updates/FEDORA-2012-18524/dnsmasq-2.59-5.fc1... 2 https://admin.fedoraproject.org/updates/FEDORA-2012-18416/libass-0.10.1-2.fc... 2 https://admin.fedoraproject.org/updates/FEDORA-2012-18401/gnupg2-2.0.19-4.fc... 2 https://admin.fedoraproject.org/updates/FEDORA-2012-18389/initscripts-9.34.4... 3 https://admin.fedoraproject.org/updates/FEDORA-2012-18316/perl-IO-Tty-1.10-8... 5 https://admin.fedoraproject.org/updates/FEDORA-2012-18217/nss-util-3.13.6-2.... 9 https://admin.fedoraproject.org/updates/FEDORA-2012-17969/gnome-keyring-3.2.... 12 https://admin.fedoraproject.org/updates/FEDORA-2012-17746/libsocialweb-0.25.... 13 https://admin.fedoraproject.org/updates/FEDORA-2012-17660/gnutls-2.12.14-4.f... The following builds have been pushed to Fedora 16 updates-testing
Zim-0.57-2.fc16 claws-mail-3.9.0-1.fc16 claws-mail-plugins-3.9.0-1.fc16 desktop-file-utils-0.21-1.fc16 dnsmasq-2.59-5.fc16 e16-epplets-0.14-1.fc16 emacs-23.3-11.fc16 jemalloc-3.2.0-1.fc16 latexmk-4.35-1.fc16 mate-common-1.5.0-1.fc16 mate-doc-utils-1.5.0-1.fc16 moodle-2.1.9-1.fc16 nickle-2.77-2.fc16 perl-DateTime-0.78-2.fc16 pothana2000-fonts-1.3.3-4.fc16 puddletag-1.0.1-1.fc16 python-newt_syrup-0.2.0-1.1.fc16 recoll-1.18.1-1.fc16 rednotebook-1.6.2-1.fc16 vemana2000-fonts-1.1.3-4.fc16 weechat-0.3.8-4.fc16 zeroinstall-injector-1.13-1.fc16
Details about builds:
================================================================================ Zim-0.57-2.fc16 (FEDORA-2012-18573) Desktop wiki & notekeeper -------------------------------------------------------------------------------- Update Information:
fix 865078,865079 New upstream release -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Robin Lee cheeselee@fedoraproject.org - 0.57-2 - Backport fix for #865078, #865079 * Tue Oct 9 2012 Robin Lee cheeselee@fedoraproject.org - 0.57-1 - Update to 0.57 (#807149, #826886) * Wed Jul 18 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.56-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #865078 - [abrt] Zim-0.57-1.fc16: socket.py:224:meth:error: [Errno 98] Address already in use https://bugzilla.redhat.com/show_bug.cgi?id=865078 [ 2 ] Bug #865079 - [abrt] Zim-0.57-1.fc16: ipc.py:272:start_server_if_not_running:AssertionError: Failed to start server (spawning) https://bugzilla.redhat.com/show_bug.cgi?id=865079 [ 3 ] Bug #807149 - [abrt] Zim-0.55-1.fc16: pageview.py:2549:paste_clipboard:AttributeError: 'NoneType' object has no attribute 'resolve_images' https://bugzilla.redhat.com/show_bug.cgi?id=807149 --------------------------------------------------------------------------------
================================================================================ claws-mail-3.9.0-1.fc16 (FEDORA-2012-18559) Email client and news reader based on GTK+ -------------------------------------------------------------------------------- Update Information:
* Added IMAP server side search * Added the file .claws-mail/extraheaderrc which holds editable extra headers to be added to compose window combobox * Added 'Select html part of multipart messages' to the Folder Properties * GnuPG: Consider marginal signature validity as untrusted * The mimeview shortcuts are now user configurable * Spell checker: Always show 'change dictionary' menu * Filtering dialogue: TreeView type-ahead is now case insensitive * Separated 'Mark all read' from 'Mark as read' and 'Ignore thread' * Made 'Mark all read' confirmation button more clear * Made the clickable area of the expander arrows in the folder list larger * Made SSL client certificate error messages more meaningful * The type of units required in the Extended Search information dialogue are now indicated * Several speed-ups and optimizations * Updated manual * Updated translations: Brazilian Portuguese, Finnish, French, German, Hungarian, Spanish, Swedish, traditional Chinese, Ukrainian -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 3.9.0-1 --------------------------------------------------------------------------------
================================================================================ claws-mail-plugins-3.9.0-1.fc16 (FEDORA-2012-18559) Additional plugins for Claws Mail -------------------------------------------------------------------------------- Update Information:
* Added IMAP server side search * Added the file .claws-mail/extraheaderrc which holds editable extra headers to be added to compose window combobox * Added 'Select html part of multipart messages' to the Folder Properties * GnuPG: Consider marginal signature validity as untrusted * The mimeview shortcuts are now user configurable * Spell checker: Always show 'change dictionary' menu * Filtering dialogue: TreeView type-ahead is now case insensitive * Separated 'Mark all read' from 'Mark as read' and 'Ignore thread' * Made 'Mark all read' confirmation button more clear * Made the clickable area of the expander arrows in the folder list larger * Made SSL client certificate error messages more meaningful * The type of units required in the Extended Search information dialogue are now indicated * Several speed-ups and optimizations * Updated manual * Updated translations: Brazilian Portuguese, Finnish, French, German, Hungarian, Spanish, Swedish, traditional Chinese, Ukrainian -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 3.9.0-1 - version upgrade * Wed Jul 18 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.8.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Mon Jul 9 2012 Petr Pisar ppisar@redhat.com - 3.8.1-2 - Perl 5.16 rebuild --------------------------------------------------------------------------------
================================================================================ desktop-file-utils-0.21-1.fc16 (FEDORA-2012-18547) Utilities for manipulating .desktop files -------------------------------------------------------------------------------- Update Information:
update to latest release -------------------------------------------------------------------------------- ChangeLog:
* Fri Oct 19 2012 Kalev Lember kalevlember@gmail.com - 0.21-1 - Update to 0.21 * Thu Sep 6 2012 Dan Mashal dan.mashal@fedoraproject.org 0.20-4 - Update F17 to 0.20 (#847097). * Sat Aug 11 2012 Ville Skyttä ville.skytta@iki.fi - 0.20-3 - Fold emacs-* subpackages into main (#690264). * Wed Jul 18 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.20-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri May 18 2012 Matthias Clasen mclasen@redhat.com - 0.20-1 - Update to 0.20 * Fri Jan 13 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.19-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Fri Dec 23 2011 Matthias Clasen mclasen@redhat.com - 0.19-5 - Fix up locale lists just like other lists * Tue Dec 20 2011 Matthias Clasen mclasen@redhat.com - 0.19-1 - Update to 0.19: support for Unity as desktop env, and support for Keywords --------------------------------------------------------------------------------
================================================================================ dnsmasq-2.59-5.fc16 (FEDORA-2012-18524) A lightweight DHCP/caching DNS server -------------------------------------------------------------------------------- Update Information:
This bug fixes one bug. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Tomas Hozza thozza@redhat.com - 2.59-5 - removed "-s $HOSTNAME" from .service file (#753656) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #753656 - Domain set to hostname by default https://bugzilla.redhat.com/show_bug.cgi?id=753656 --------------------------------------------------------------------------------
================================================================================ e16-epplets-0.14-1.fc16 (FEDORA-2012-18556) Epplets for Enlightenment, DR16 -------------------------------------------------------------------------------- Update Information:
Update to latest upstream release epplets 0.14.
-------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Terje Rosten terjeros@phys.ntnu.no - 0.14-1 - 0.14 * Wed Jul 18 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.12-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Jan 13 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.12-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ emacs-23.3-11.fc16 (FEDORA-2012-18553) GNU Emacs text editor -------------------------------------------------------------------------------- Update Information:
Previously, EUDC returned an error message when trying to complete the name of local BBDB records which don't have their last names.
This update fixes the issue. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2012 Sergio Durigan Junior sergiodj@riseup.net - 1:23.3-11 - Fix for Emacs bug #11580, 'Fix querying BBDB for entries without a last name'. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #860431 - EUDC can't handle empty last names in BBDB https://bugzilla.redhat.com/show_bug.cgi?id=860431 --------------------------------------------------------------------------------
================================================================================ jemalloc-3.2.0-1.fc16 (FEDORA-2012-18546) General-purpose scalable concurrent malloc implementation -------------------------------------------------------------------------------- Update Information:
New upstream release. See http://www.canonware.com/jemalloc/ChangeLog.html for details -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Ingavr Hagelund ingvar@redpill-linpro.com - 3.2.0-1 - New upstream release --------------------------------------------------------------------------------
================================================================================ latexmk-4.35-1.fc16 (FEDORA-2012-18565) A make-like utility for LaTeX files -------------------------------------------------------------------------------- Update Information:
Upstream notes on this release: - Corrects bug that fls file is incorrectly parsed when using a combination of cygwin and a native MS-Windows TeX program. - Corrects bug that old dependency information was retained when using the --gg option.
-------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Jerry James loganjerry@gmail.com - 4.35-1 - Update to 4.35 (fix retaining old dependency info with -gg) --------------------------------------------------------------------------------
================================================================================ mate-common-1.5.0-1.fc16 (FEDORA-2012-18530) mate common build files -------------------------------------------------------------------------------- Update Information:
update to latest upstream release -------------------------------------------------------------------------------- ChangeLog:
* Thu Oct 11 2012 Dan Mashal dan.mashal@fedoraproject.org 1.5.0-1 - New upstream release 1.5 --------------------------------------------------------------------------------
================================================================================ mate-doc-utils-1.5.0-1.fc16 (FEDORA-2012-18560) MATE Desktop doc utils -------------------------------------------------------------------------------- Update Information:
update to latest upstream release -------------------------------------------------------------------------------- ChangeLog:
* Tue Oct 30 2012 Leigh Scott leigh123linux@googlemail.com - 1.5.0-1 - update to 1.5.0 release * Tue Jul 24 2012 Dan Mashal dan.mashal@fedoraproject.org 1.4.0-13 - Update spec file. --------------------------------------------------------------------------------
================================================================================ moodle-2.1.9-1.fc16 (FEDORA-2012-18570) A Course Management System -------------------------------------------------------------------------------- Update Information:
CVE-2012-5471 moodle: Various security issues fixed in upstream 2.3.3, 2.2.6 and 2.1.9 versions (MSA-12-0057, MSA-12-0058, MSA-12-0059, MSA-12-0060, MSA-12-0061, MSA-12-0062, MSA-12-0063) -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Jon Ciesla limburgher@gmail.com - 2.1.9-1 - Security update, BZ 878132. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #878132 - CVE-2012-5471 moodle: Various security issues fixed in upstream 2.3.3, 2.2.6 and 2.1.9 versions (MSA-12-0057, MSA-12-0058, MSA-12-0059, MSA-12-0060, MSA-12-0061, MSA-12-0062, MSA-12-0063) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=878132 --------------------------------------------------------------------------------
================================================================================ nickle-2.77-2.fc16 (FEDORA-2012-18566) A programming language-based prototyping environment -------------------------------------------------------------------------------- Update Information:
- Handle OpFarJump in CompileReachable - Now includes tutorial PDF
-------------------------------------------------------------------------------- ChangeLog:
* Sat Nov 10 2012 Michel Salim salimma@fedoraproject.org - 2.77-2 - Build and package tutorial PDF * Fri Nov 9 2012 Michel Salim salimma@fedoraproject.org - 2.77-1 - Update to 2.77 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #873995 - nickle-2.77 is available https://bugzilla.redhat.com/show_bug.cgi?id=873995 --------------------------------------------------------------------------------
================================================================================ perl-DateTime-0.78-2.fc16 (FEDORA-2012-18572) Date and time object -------------------------------------------------------------------------------- Update Information:
Round nanoseconds always down. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Petr Pisar ppisar@redhat.com - 0:0.78-2 - 0.78 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #877724 - perl-DateTime-0.78 is available https://bugzilla.redhat.com/show_bug.cgi?id=877724 --------------------------------------------------------------------------------
================================================================================ pothana2000-fonts-1.3.3-4.fc16 (FEDORA-2012-18574) Unicode compliant OpenType font for Telugu -------------------------------------------------------------------------------- Update Information:
spec cleanup -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Sandeep Shedmake sshedmak@redhat.com - 1.3.3-4 - Cleaned the spec file - Removed BuildRoot - Edited Source0 and BuildRequires * Sat Jul 21 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.3.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sat Jan 14 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.3.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ puddletag-1.0.1-1.fc16 (FEDORA-2012-18540) Feature rich, easy to use tag editor -------------------------------------------------------------------------------- Update Information:
Update to latest upstream release puddletag 1.0.1.
-------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Terje Rosten terje.rosten@ntnu.no - 1.0.1-1 - 1.0.1 --------------------------------------------------------------------------------
================================================================================ python-newt_syrup-0.2.0-1.1.fc16 (FEDORA-2012-18541) Newt Syrup is an app framework built on top of Newt -------------------------------------------------------------------------------- Update Information:
Fixed the source URL. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Darryl L. Pierce dpierce@redhat.com - 0.2.0-1.1 - Updated the upstream source location. --------------------------------------------------------------------------------
================================================================================ recoll-1.18.1-1.fc16 (FEDORA-2012-18539) Desktop full text search tool with Qt GUI -------------------------------------------------------------------------------- Update Information:
Update to latest upstream release recoll 1.18.1
-------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Terje Rosten terje.rosten@ntnu.no - 1.18.1-1 - 1.18.1 * Sat Jul 21 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.17.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #855587 - [abrt] recoll-1.16.1-2.fc14: operator new: Process /usr/bin/recoll was killed by signal 6 (SIGABRT) https://bugzilla.redhat.com/show_bug.cgi?id=855587 --------------------------------------------------------------------------------
================================================================================ rednotebook-1.6.2-1.fc16 (FEDORA-2012-18529) A desktop diary -------------------------------------------------------------------------------- Update Information:
* Mon Nov 19 2012 Fabian Affolter mail@fabian-affolter.ch - 1.6.2-1 - Updated to new upstream version 1.6.2 * Thu Nov 15 2012 Fabian Affolter mail@fabian-affolter.ch - 1.6.1-1 - Updated to new upstream version 1.6.1 * Thu Nov 01 2012 Fabian Affolter mail@fabian-affolter.ch - 1.6.0-1 - Updated to new upstream version 1.6.0 * Thu Nov 15 2012 Fabian Affolter mail@fabian-affolter.ch - 1.6.1-1 - Updated to new upstream version 1.6.1 * Thu Nov 01 2012 Fabian Affolter mail@fabian-affolter.ch - 1.6.0-1 - Updated to new upstream version 1.6.0 * Thu Nov 15 2012 Fabian Affolter mail@fabian-affolter.ch - 1.6.1-1 - Updated to new upstream version 1.6.1 * Thu Nov 01 2012 Fabian Affolter mail@fabian-affolter.ch - 1.6.0-1 - Updated to new upstream version 1.6.0 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Fabian Affolter mail@fabian-affolter.ch - 1.6.2-1 - Updated to new upstream version 1.6.2 * Thu Nov 15 2012 Fabian Affolter mail@fabian-affolter.ch - 1.6.1-1 - Updated to new upstream version 1.6.1 * Thu Nov 1 2012 Fabian Affolter mail@fabian-affolter.ch - 1.6.0-1 - Updated to new upstream version 1.6.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #860059 - [abrt] python-2.7.3-7.2.fc17: gtk_text_line_segment_split: Process /usr/bin/python2.7 was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=860059 [ 2 ] Bug #875625 - [abrt] rednotebook-1.5.0-2.fc17: zipfile.py:1024:_writecheck:LargeZipFile: Zipfile size would require ZIP64 extensions https://bugzilla.redhat.com/show_bug.cgi?id=875625 --------------------------------------------------------------------------------
================================================================================ vemana2000-fonts-1.1.3-4.fc16 (FEDORA-2012-18537) Unicode compliant OpenType font for Telugu -------------------------------------------------------------------------------- Update Information:
spec cleanup -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Sandeep Shedmake sshedmak@redhat.com - 1.1.3-4 - Cleaned the spec file - Removed BuildRoot - Edited Source0 and BuildRequires * Sun Jul 22 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.1.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sat Jan 14 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.1.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ weechat-0.3.8-4.fc16 (FEDORA-2012-18575) Portable, fast, light and extensible IRC client -------------------------------------------------------------------------------- Update Information:
Fix arbitrary code execution due to call of shell when executing command within hook_process -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Paul P. Komkoff Jr i@stingr.net - 0.3.8-4 - fix bz#878025 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #878025 - CVE-2012-5534 weechat (scripts / plug-ins): Arbitrary code execution due to call of shell when executing command within hook_process https://bugzilla.redhat.com/show_bug.cgi?id=878025 --------------------------------------------------------------------------------
================================================================================ zeroinstall-injector-1.13-1.fc16 (FEDORA-2012-18577) The Zero Install Injector (0launch) -------------------------------------------------------------------------------- Update Information:
1.13: - hugely improved diagnostics when a solve fails (or fails to select the expected version) - feed elements can be restricted to specified 0install versions - new escaping scheme for site-local packages - user-specified implementation cache directories are now aggregated with the administrator's list - app versions recalculated if configuration changes - bug fixes
1.12: - Some long-deprecated APIs now produce deprecation warnings if used - Added <requires os='...'> attribute - Added --manifest and --digest options to "0install digest" - Added "0install man" command - Allow dependencies for <package-implementation> - bug fixes -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 19 2012 Michel Salim salimma@fedoraproject.org - 1.13-1 - Update to 1.13 --------------------------------------------------------------------------------