The following Fedora 16 Security updates need testing: Age URL 1 https://admin.fedoraproject.org/updates/FEDORA-2012-11813/xfig-3.2.5-32.b.fc... 1 https://admin.fedoraproject.org/updates/FEDORA-2012-11843/libvirt-0.9.6.2-1.... 1 https://admin.fedoraproject.org/updates/FEDORA-2012-11870/rubygem-actionpack... 40 https://admin.fedoraproject.org/updates/FEDORA-2012-10314/revelation-0.4.14-... 5 https://admin.fedoraproject.org/updates/FEDORA-2012-11737/transfig-3.2.5d-4.... 1 https://admin.fedoraproject.org/updates/FEDORA-2012-11880/rubygem-activesupp... 0 https://admin.fedoraproject.org/updates/FEDORA-2012-11929/munin-2.0.5-1.fc16 5 https://admin.fedoraproject.org/updates/FEDORA-2012-11576/python-djblets-0.6... 1 https://admin.fedoraproject.org/updates/FEDORA-2012-11872/emacs-23.3-10.fc16 1 https://admin.fedoraproject.org/updates/FEDORA-2012-11890/automake-1.12.2-2.... 0 https://admin.fedoraproject.org/updates/FEDORA-2012-11934/libotr-3.2.1-1.fc1... 0 https://admin.fedoraproject.org/updates/FEDORA-2012-11928/glibc-2.14.90-24.f... 38 https://admin.fedoraproject.org/updates/FEDORA-2012-10402/bcfg2-1.2.3-1.fc16 6 https://admin.fedoraproject.org/updates/FEDORA-2012-11557/wireshark-1.6.9-1.... 12 https://admin.fedoraproject.org/updates/FEDORA-2012-11464/bind-dyndb-ldap-1.... 2 https://admin.fedoraproject.org/updates/FEDORA-2012-11746/ImageMagick-6.7.0.... 10 https://admin.fedoraproject.org/updates/FEDORA-2012-11476/drupal6-og-2.4-1.f... 10 https://admin.fedoraproject.org/updates/FEDORA-2012-11526/dokuwiki-0-0.11.20... 2 https://admin.fedoraproject.org/updates/FEDORA-2012-11785/xen-4.1.3-1.fc16 5 https://admin.fedoraproject.org/updates/FEDORA-2012-11648/mingw32-gdk-pixbuf... 111 https://admin.fedoraproject.org/updates/FEDORA-2012-6614/gdb-7.3.50.20110722...
The following Fedora 16 Critical Path updates have yet to be approved: Age URL 0 https://admin.fedoraproject.org/updates/FEDORA-2012-11928/glibc-2.14.90-24.f... 0 https://admin.fedoraproject.org/updates/FEDORA-2012-11947/system-config-user... 0 https://admin.fedoraproject.org/updates/FEDORA-2012-11961/libfm-1.0-1.fc16,p... 1 https://admin.fedoraproject.org/updates/FEDORA-2012-11797/phonon-backend-gst... 5 https://admin.fedoraproject.org/updates/FEDORA-2012-11673/tar-1.26-5.fc16 5 https://admin.fedoraproject.org/updates/FEDORA-2012-11595/virtuoso-opensourc... 5 https://admin.fedoraproject.org/updates/FEDORA-2012-11669/mysql-5.5.27-1.fc1... 5 https://admin.fedoraproject.org/updates/FEDORA-2012-11630/kde-l10n-4.8.5-2.f... 12 https://admin.fedoraproject.org/updates/FEDORA-2012-11440/zlib-1.2.5-7.fc16 13 https://admin.fedoraproject.org/updates/FEDORA-2012-11411/selinux-policy-3.1... The following builds have been pushed to Fedora 16 updates-testing
cgnslib-3.1-3.r4.fc16 clean-extra-utils-0.1-2.fc16 eigen3-3.0.6-1.fc16 glibc-2.14.90-24.fc16.9 launchy-2.5-5.fc16 libfm-1.0-1.fc16 libotr-3.2.1-1.fc16 muffin-1.0.2-2.fc16 munin-2.0.5-1.fc16 opensips-1.8.1-1.fc16 pcmanfm-1.0-1.fc16 perl-Web-Scraper-0.36-2.fc16 pyobd-0.9.2.2-1.fc16 python-virtualenv-1.7.2-1.fc16 rpmlint-1.4-8.fc16 rubygem-ruby-rc4-0.1.5-4.fc16 system-config-users-1.2.116-1.fc16
Details about builds:
================================================================================ cgnslib-3.1-3.r4.fc16 (FEDORA-2012-11940) Computational Fluid Dynamics General Notation System -------------------------------------------------------------------------------- Update Information:
Updated to 3.1-3 -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 15 2012 Shakthi Kannan <shakthimaan [AT] fedoraproject DOT org> 3.1-3.r4 - Updated to 3.1.3-4 * Wed Jul 18 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.5-8.r2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Tue May 15 2012 Orion Poplawski orion@cora.nwra.com - 2.5-7.rc2 - Rebuild for hdf5 - Explicitly require version of hdf5 built with * Thu Jan 12 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.5-6.r2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #847634 - cgnslib-3.1/cgnslib_3.1.3-4 is available https://bugzilla.redhat.com/show_bug.cgi?id=847634 --------------------------------------------------------------------------------
================================================================================ clean-extra-utils-0.1-2.fc16 (FEDORA-2012-11937) A collection of extra libraries and utilities for the Clean programming language -------------------------------------------------------------------------------- Update Information:
First import -------------------------------------------------------------------------------- References:
[ 1 ] Bug #847406 - Review Request: clean-extra-utils - A collection of extra libraries and utilities for the Clean programming language https://bugzilla.redhat.com/show_bug.cgi?id=847406 --------------------------------------------------------------------------------
================================================================================ eigen3-3.0.6-1.fc16 (FEDORA-2012-11954) A lightweight C++ template library for vector and matrix math -------------------------------------------------------------------------------- Update Information:
Eigen3 release 3.0.6
This release cleans up a lot of compiler warnings during use. For a full list of enhancements and fixes, see http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.0.6 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jul 28 2012 Tim Niemueller tim@niemueller.de - 3.0.6-1 - Update to release 3.0.6 (fixes GCC 4.7 warnings) --------------------------------------------------------------------------------
================================================================================ glibc-2.14.90-24.fc16.9 (FEDORA-2012-11928) The GNU libc libraries -------------------------------------------------------------------------------- Update Information:
- Fix integer overflow leading to buffer overflow in strto* (#847718)
Avoid unbound alloca in vfprintf. (#841318) -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 15 2012 Jeff Law law@redhat.com - 2.14.90-24.fc16.9 - Fix integer overflow leading to buffer overflow in strto* (#847718) * Tue Jul 31 2012 Patsy Franklin patsy@redhat.com - 2.14.90-24.fc16.8 - Avoid unbound alloca in vfprintf. (#841318) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #847715 - CVE-2012-3480 glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines https://bugzilla.redhat.com/show_bug.cgi?id=847715 --------------------------------------------------------------------------------
================================================================================ launchy-2.5-5.fc16 (FEDORA-2012-11946) Open Source Keystroke Launcher -------------------------------------------------------------------------------- Update Information:
Keystroke launcher inspired by MacOS Quicksilver. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #657948 - Review Request: launchy - open source keystroke launcher inspired by MacOS Quicksilver https://bugzilla.redhat.com/show_bug.cgi?id=657948 --------------------------------------------------------------------------------
================================================================================ libfm-1.0-1.fc16 (FEDORA-2012-11961) GIO-based library for file manager-like programs -------------------------------------------------------------------------------- Update Information:
libfm / pcmanfm 1.0 is released. -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 15 2012 Mamoru Tasaka mtasaka@fedoraproject.org - 1.0-1 - 1.0 release * Thu Jul 19 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.1.17-1.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Jan 13 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.1.17-1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ libotr-3.2.1-1.fc16 (FEDORA-2012-11934) Off-The-Record Messaging library and toolkit -------------------------------------------------------------------------------- Update Information:
Updated to 3.2.1, updates patch for rhbz#846377, CVE-2012-3461 Patch for multiple heap-based buffer overflows in the Base64 -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 15 2012 Paul Wouters pwouters@redhat.com - 3.2.1-1 - Updated to 3.2.1, updates patch for rhbz#846377, CVE-2012-3461 * Wed Aug 8 2012 Paul Wouters pwouters@redhat.com - 3.2.0-7 - Patch for Multiple heap-based buffer overflows in the Base64 decoder (rhbz#846377, upstream will not release 3.2.1 for this) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #846377 - CVE-2012-3461 libotr: Multiple heap-based buffer overflows in the Base64 decoder https://bugzilla.redhat.com/show_bug.cgi?id=846377 --------------------------------------------------------------------------------
================================================================================ muffin-1.0.2-2.fc16 (FEDORA-2012-11920) Window and compositing manager based on Clutter -------------------------------------------------------------------------------- Update Information:
move gir file to devel -------------------------------------------------------------------------------- ChangeLog:
* Tue Aug 14 2012 Leigh Scott leigh123linux@googlemail.com - 1.0.2-2 - move gir file to devel - remove .gz extension from the man files --------------------------------------------------------------------------------
================================================================================ munin-2.0.5-1.fc16 (FEDORA-2012-11929) Network-wide graphing framework (grapher/gatherer) -------------------------------------------------------------------------------- Update Information:
Updated to 2.0.5 Update to munin 2 -------------------------------------------------------------------------------- ChangeLog:
* Tue Aug 14 2012 D. Johnson fenris02@fedoraproject.org - 2.0.5-1 - Updated to 2.0.5 - BZ# 603344 / upstream 1180, ACPI thermal information changed with 3.x kernels * Tue Aug 7 2012 D. Johnson fenris02@fedoraproject.org - 2.0.4-3 - BZ# 823533 "hddtemp_smartctl plugin has a bug" - upstream patched - BZ# 825820 Munin memcache plugin requires "perl(Cache::Memcached)" - BZ# 834055 Munin updates changing permissions, conflicts with what munin-check does - BZ# 812893,812894,839786,840496 - updated to munin2 * Sun Aug 5 2012 D. Johnson fenris02@fedoraproject.org - 2.0.4-2 - Changing permissions on html directories to minimize cron messages. * Sat Aug 4 2012 D. Johnson fenris02@fedoraproject.org - 2.0.4-1 - updated to 2.0.4 - backported el6 packaging items * Tue Jul 24 2012 fenris02@fedoraproject.org - 2.0.3-1 - Adjust default conf.d entry. - updated to 2.0.3 * Fri Jul 20 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.0.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Thu Jul 19 2012 D. Johnson fenris02@fedoraproject.org - 2.0.2-2 - fixed conflicts * Sat Jul 14 2012 D. Johnson fenris02@fedoraproject.org - 2.0.2-1 - updated to 2.0.2 * Thu Jun 7 2012 D. Johnson fenris02@fedoraproject.org - 2.0.0-1 - initial 2.0 release -------------------------------------------------------------------------------- References:
[ 1 ] Bug #603344 - On install, Fedora selected all Linux swap partitions and entered them for mounting in fstab https://bugzilla.redhat.com/show_bug.cgi?id=603344 [ 2 ] Bug #823533 - hddtemp_smartctl plugin has a bug https://bugzilla.redhat.com/show_bug.cgi?id=823533 [ 3 ] Bug #825820 - Libvirt is missing important hooks https://bugzilla.redhat.com/show_bug.cgi?id=825820 [ 4 ] Bug #834055 - Munin updates changing permissions, conflicts with what munin-check does https://bugzilla.redhat.com/show_bug.cgi?id=834055 [ 5 ] Bug #812893 - munin various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=812893 [ 6 ] Bug #812894 - munin various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=812894 [ 7 ] Bug #839786 - RFE: Update munin to 2.0.x release https://bugzilla.redhat.com/show_bug.cgi?id=839786 [ 8 ] Bug #840496 - Update to upstream 2.0.2 https://bugzilla.redhat.com/show_bug.cgi?id=840496 --------------------------------------------------------------------------------
================================================================================ opensips-1.8.1-1.fc16 (FEDORA-2012-11936) Open Source SIP Server -------------------------------------------------------------------------------- Update Information:
* Ver. 1.8.1 -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 15 2012 Peter Lemenkov lemenkov@gmail.com - 1.8.1-1 - Ver. 1.8.1 - Dropped all upstreamed patches * Fri Jul 20 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.8.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Mon Jul 9 2012 Petr Pisar ppisar@redhat.com - 1.8.0-2 - Perl 5.16 rebuild * Tue Jul 3 2012 Peter Lemenkov lemenkov@gmail.com - 1.8.0-1 - update to 1.8.0 * Fri Jun 8 2012 Petr Pisar ppisar@redhat.com - 1.7.2-8 - Perl 5.16 rebuild * Sat May 12 2012 Peter Lemenkov lemenkov@gmail.com - 1.7.2-7 - Change %define to %global * Sat May 12 2012 Peter Lemenkov lemenkov@gmail.com - 1.7.2-6 - Added missing docs * Fri May 11 2012 Peter Lemenkov lemenkov@gmail.com - 1.7.2-5 - Fixed conditional building with Oracle DB * Sat Apr 28 2012 Peter Lemenkov lemenkov@gmail.com - 1.7.2-4 - Fixes for systemd unit * Sun Apr 22 2012 Remi Collet remi@fedoraproject.org - 1.7.2-3 - rebuild against libmemcached.so.10 --------------------------------------------------------------------------------
================================================================================ pcmanfm-1.0-1.fc16 (FEDORA-2012-11961) Extremly fast and lightweight file manager -------------------------------------------------------------------------------- Update Information:
libfm / pcmanfm 1.0 is released. -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 15 2012 Mamoru Tasaka mtasaka@fedoraproject.org - 1.0-1 - 1.0 release * Fri Jul 20 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.9.10-2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Thu Jan 5 2012 Mamoru Tasaka mtasaka@fedoraproject.org - 0.9.10-2 - F-17: rebuild against gcc47 --------------------------------------------------------------------------------
================================================================================ perl-Web-Scraper-0.36-2.fc16 (FEDORA-2012-11939) Web Scraping Toolkit using HTML and CSS Selectors or XPath expressions -------------------------------------------------------------------------------- Update Information:
--------------------------------------------------------------------------------
================================================================================ pyobd-0.9.2.2-1.fc16 (FEDORA-2012-11950) OBD-II (SAE-J1979) compliant scantool software -------------------------------------------------------------------------------- Update Information:
This is new package that provides an OBD-II (SAE-J1979) compliant scantool software. It was written entirely in Python. It is meant to interface with the low cost ELM 32x devices such as ELM-USB. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #841199 - Review Request: pyobd - OBD-II (SAE-J1979) compliant scantool software https://bugzilla.redhat.com/show_bug.cgi?id=841199 --------------------------------------------------------------------------------
================================================================================ python-virtualenv-1.7.2-1.fc16 (FEDORA-2012-11921) Tool to create isolated Python environments -------------------------------------------------------------------------------- Update Information:
See changelog at: http://pypi.python.org/pypi/virtualenv#id2 Multiple bugfixes. See http://pypi.python.org/pypi/virtualenv/1.7.1.2 for information. Multiple bugfixes. See http://pypi.python.org/pypi/virtualenv/1.7.1.2 for information. -------------------------------------------------------------------------------- ChangeLog:
* Tue Aug 14 2012 Steve Milner me@stevemilner.org - 1.7.2-1 - Update for upstream bug fixes. - Added path for versioned binary. - Patch no longer required. * Sat Jul 21 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.7.1.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #799733 - 1.7.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=799733 --------------------------------------------------------------------------------
================================================================================ rpmlint-1.4-8.fc16 (FEDORA-2012-11932) Tool for checking common errors in RPM packages -------------------------------------------------------------------------------- Update Information:
Update license list, apply correction to python3 magic number. -------------------------------------------------------------------------------- ChangeLog:
* Tue Aug 14 2012 Tom Callaway spot@fedoraproject.org - 1.4-8 - add magic number fix for python 3 (bz845972) - update license list * Sat Jul 21 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.4-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Mon Jan 23 2012 Toshio Kuratomi toshio@fedoraproject.org - 1.4-6 - Patch to fix messages that contain unicode summaries https://bugzilla.redhat.com/show_bug.cgi?id=783912 * Sat Jan 14 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.4-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Thu Dec 15 2011 Tom Callaway spot@fedoraproject.org - 1.4-4 - Do not throw an error on .desktop files set +x. (bz 767978) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #751288 - rpmlint-1.3-2.fc15 does not recognize diffmark license https://bugzilla.redhat.com/show_bug.cgi?id=751288 [ 2 ] Bug #845972 - rpmlint uses wrong magic number for Python 3.3 bytecode https://bugzilla.redhat.com/show_bug.cgi?id=845972 --------------------------------------------------------------------------------
================================================================================ rubygem-ruby-rc4-0.1.5-4.fc16 (FEDORA-2012-11935) Pure Ruby implementation of the RC4 algorithm -------------------------------------------------------------------------------- Update Information:
new package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #845819 - Review Request: rubygem-ruby-rc4 - Pure Ruby implementation of the RC4 algorithm https://bugzilla.redhat.com/show_bug.cgi?id=845819 --------------------------------------------------------------------------------
================================================================================ system-config-users-1.2.116-1.fc16 (FEDORA-2012-11947) A graphical interface for administering users and groups -------------------------------------------------------------------------------- Update Information:
Fix account expiration if inactive default is set. -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 15 2012 Nils Philippsen nils@redhat.com - 1.2.116-1 - fix account expiration if inactive default is set - pull updated translations * Wed Apr 18 2012 Nils Philippsen nils@redhat.com - 1.2.115-1 - firstboot: don't abuse window hints, consolidate code (#811383) --------------------------------------------------------------------------------