The following Fedora 16 Security updates need testing:
Age URL
63
https://admin.fedoraproject.org/updates/FEDORA-2012-14452/bacula-5.0.3-33...
1
https://admin.fedoraproject.org/updates/FEDORA-2012-18782/android-tools-2...
1
https://admin.fedoraproject.org/updates/FEDORA-2012-18559/claws-mail-3.9....
2
https://admin.fedoraproject.org/updates/FEDORA-2012-18691/kernel-3.6.7-4....
36
https://admin.fedoraproject.org/updates/FEDORA-2012-16415/389-ds-base-1.2...
4
https://admin.fedoraproject.org/updates/FEDORA-2012-18575/weechat-0.3.8-4...
4
https://admin.fedoraproject.org/updates/FEDORA-2012-18570/moodle-2.1.9-1....
1
https://admin.fedoraproject.org/updates/FEDORA-2012-18848/squashfs-tools-...
20
https://admin.fedoraproject.org/updates/FEDORA-2012-17553/libproxy-0.4.10...
141
https://admin.fedoraproject.org/updates/FEDORA-2012-10314/revelation-0.4....
61
https://admin.fedoraproject.org/updates/FEDORA-2012-14654/tor-0.2.2.39-16...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-18927/cups-pk-helper-...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-18931/seamonkey-2.14-...
42
https://admin.fedoraproject.org/updates/FEDORA-2012-16032/cobbler-2.4.0-b...
2
https://admin.fedoraproject.org/updates/FEDORA-2012-18687/libssh-0.5.3-1....
5
https://admin.fedoraproject.org/updates/FEDORA-2012-18462/cgit-0.9.1-2.fc16
24
https://admin.fedoraproject.org/updates/FEDORA-2012-17291/thunderbird-16....
6
https://admin.fedoraproject.org/updates/FEDORA-2012-18330/perl-CGI-3.51-6...
2
https://admin.fedoraproject.org/updates/FEDORA-2012-18661/firefox-17.0-1....
The following Fedora 16 Critical Path updates have yet to be approved:
Age URL
0
https://admin.fedoraproject.org/updates/FEDORA-2012-18927/cups-pk-helper-...
1
https://admin.fedoraproject.org/updates/FEDORA-2012-18848/squashfs-tools-...
1
https://admin.fedoraproject.org/updates/FEDORA-2012-18857/koji-1.7.1-1.fc16
2
https://admin.fedoraproject.org/updates/FEDORA-2012-18687/libssh-0.5.3-1....
2
https://admin.fedoraproject.org/updates/FEDORA-2012-18692/NetworkManager-...
2
https://admin.fedoraproject.org/updates/FEDORA-2012-18691/kernel-3.6.7-4....
4
https://admin.fedoraproject.org/updates/FEDORA-2012-18524/dnsmasq-2.59-5....
6
https://admin.fedoraproject.org/updates/FEDORA-2012-18416/libass-0.10.1-2...
6
https://admin.fedoraproject.org/updates/FEDORA-2012-18401/gnupg2-2.0.19-4...
7
https://admin.fedoraproject.org/updates/FEDORA-2012-18316/perl-IO-Tty-1.1...
13
https://admin.fedoraproject.org/updates/FEDORA-2012-17969/gnome-keyring-3...
The following builds have been pushed to Fedora 16 updates-testing
cups-pk-helper-0.1.3-4.fc16
duply-1.5.9-1.fc16
ibus-typing-booster-0.0.23-1.fc16
lightdm-1.2.3-1.fc16
paps-0.6.8-23.fc16
seamonkey-2.14-1.fc16
vidalia-0.2.20-1.fc16
xen-4.1.3-5.fc16
Details about builds:
================================================================================
cups-pk-helper-0.1.3-4.fc16 (FEDORA-2012-18927)
A helper that makes system-config-printer use PolicyKit
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2012-4510.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 23 2012 Marek Kasik <mkasik(a)redhat.com> - 0.1.3-4
- Fix a bunch of issues when getting/putting a file from cups
- This fix changes behaviour of method FileGet, it needs to have the
- target file created in advance (part of the security fix).
- Resolves: #865815 (CVE-2012-4510)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #865815 - CVE-2012-4510 cups-pk-helper: Insecure wrapping of cupsGetFile() and
cupsPutFile() methods [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=865815
--------------------------------------------------------------------------------
================================================================================
duply-1.5.9-1.fc16 (FEDORA-2012-18926)
Wrapper for duplicity
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable version. From the upstream changelog:
- bugfix 3588926: filter --exclude* params for restore/fetch ate too much
- restore/fetch now also ignores --include* or --exclude='foobar'
- bugfix 3575487: implement proper cloud files support
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2012 Thomas Moschny <thomas.moschny(a)gmx.de> - 1.5.9-1
- Update to 1.5.9.
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.5.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-0.0.23-1.fc16 (FEDORA-2012-18928)
A typing booster engine for the IBus platform
--------------------------------------------------------------------------------
Update Information:
Make the engine reload the dictionary when the dictionary is installed via the setup tool
Move input method setting from the properties to the setup tool. Makes more sense and
makes it usable in gnome-shell on f18 as well. Save the input method setting to dconf and
load them again.
Shorten symbol displayed in gnome panel
Improve setup GUI to make correct dictionary installable
Save setup option “Enable suggestions by Tab Key” correctly in dconf
Make enabling the lookup table with the TAB key work correctly.
Make sure the lookup table is hidden if there are no candidates to suggest
858980-.desktop file is added but i-t-b's pref will be enable only after , it has
added support in g-c-c
New Feature, suggestions can be turned on by Tab Key
Fixed bugs #852993,#852994
New Feature, suggestions can be turned on by Tab Key
Fixed bugs #852993,#852994
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2012 Mike FABIAN <mfabian(a)redhat.com> - 0.0.23-1
- Update to 0.0.23 upstream version
- Resolves: #879262 dictionary is not automatically reloaded when it is installed via the
setup tool
- Make the engine reload the dictionary when the dictionary is installed via the setup
tool
* Wed Nov 14 2012 Mike FABIAN <mfabian(a)redhat.com> - 0.0.22-1
- Update to 0.0.22 upstream version
- Resolves: #876666 Properties of ibus-typing-booster to select input methods are not
shown by gnome-shell in f18
- Make the engine use the input method from the dconf setting
- Add combobox to setup GUI to select input method
- Update German translation
* Mon Nov 12 2012 Mike FABIAN <mfabian(a)redhat.com> - 0.0.21-1
- Update to 0.0.21 upstream version
- Resolves: #875285 Shorten symbol displayed in gnome panel
- Add space before ( in long display name
* Thu Nov 8 2012 Mike FABIAN <mfabian(a)redhat.com> - 0.0.20-1
- Update to 0.0.20 upstream version
- Resolves: #874421
- Improve setup GUI to make correct dictionary installable (Resolves #874421)
- Add page size spin button to setup tool
- Connect signals in __init__ of SetupUI after setting the initial values
- Make the setup tool find the right config file in gnome-shell on Fedora 18
- Update German translation
* Tue Nov 6 2012 Mike FABIAN <mfabian(a)redhat.com> - 0.0.19-1
- Update to 0.0.19 upstream version
- fix rpmlint warning “incorrect-fsf-address”
* Wed Oct 31 2012 Mike FABIAN <mfabian(a)redhat.com> - 0.0.18-1
- Update to 0.0.18 upstream version
- Resolves: #871056
- Save setup option “Enable suggestions by Tab Key” correctly in dconf (Resolves:
#871056)
- Make setup dialog translatable and add German translations
* Wed Oct 24 2012 Mike FABIAN <mfabian(a)redhat.com> - 0.0.16-1
- Update to 0.0.16 upstream version
- Resolves: #869687
- Make enabling the lookup table with the TAB key work correctly
- Simplify code in add_input()
- Make German input typed in NFD work
* Mon Oct 22 2012 Mike FABIAN <mfabian(a)redhat.com> - 0.0.15-1
- Update to 0.0.15 upstream version
- Resolves: #869050
- Make sure the lookup table is hidden if there are no candidates to suggest (#869050)
* Mon Oct 22 2012 Mike FABIAN <mfabian(a)redhat.com> - 0.0.14-1
- Update to 0.0.14 upstream version
- Show an obvious warning when the hunspell dictionary needed is not found
- Show exact matches in the .dic files as suggestions as well
- Do not forget the input method used last when activating a previously used engine
- Make spelling of the value of “symbol” in the .conf files more consistent
- include the file ru_RU.conf
* Thu Oct 18 2012 Mike FABIAN <mfabian(a)redhat.com> - 0.0.13-1
- Update to 0.0.13 upstream version, in 0.0.12 I forgot to
include the file de_DE.conf
* Thu Oct 18 2012 Mike FABIAN <mfabian(a)redhat.com> - 0.0.12-1
- Update to 0.0.12 upstream version, in 0.0.11 I forgot to
include the file keysym2ucs.py
* Thu Oct 18 2012 Mike FABIAN <mfabian(a)redhat.com> - 0.0.11-1
- Upstream has released 0.0.11 version containing the following
improvements:
- Add .conf files for many languages and improve some existing .conf files
- Read other_ime option case insensitively
- Split only at the first = in a line in a .conf file
- Fix the problem that the user defined phrases are lost when switching engines
- use “layout = default” instead of “layout = us” in all .conf files
- Make sure the input of transliterate() is UTF-8 encoded
- Add a keysym2unichr() function and use it to support languages which have non Latin1
input
- Let first letter start with index 1 in autogenerated tabdict
- Use autogenerated tabdict always, not only in m17n mode
- Use special value 'NoIme' to indicate that no input method should be used
- Use contents of lang_chars for the regexp to match words in the dictionaries
- In process_key_event, do not return False when a non-ASCII character has been typed
- Read option valid_input_chars as UTF-8
- Use the encoding option from the .conf file always, not only in m17n mode
- Whether m17n mode is used should depend on the .conf file, not the language
- Use correct encoding to decode the dictionary file
- Some other minor fixes
* Wed Sep 26 2012 Anish Patil <apatil(a)redhat.com> - 0.0.10-1
- Upstream has released new version.
* Thu Sep 13 2012 Anish Patil <apatil(a)redhat.com> - 0.0.9-1
- Upstream has released new version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #876666 - Properties of ibus-typing-booster to select input methods are not
shown by gnome-shell in f18
https://bugzilla.redhat.com/show_bug.cgi?id=876666
[ 2 ] Bug #875285 - IME names too long in gnome-shell Input Sources indicator
https://bugzilla.redhat.com/show_bug.cgi?id=875285
[ 3 ] Bug #874421 - Dictionary install feature does not work for all languages
https://bugzilla.redhat.com/show_bug.cgi?id=874421
[ 4 ] Bug #871056 - The setup option “Enable suggestions by Tab Key” in
ibus-typing-booster is never saved
https://bugzilla.redhat.com/show_bug.cgi?id=871056
[ 5 ] Bug #869687 - The feature to enable the display of the suggestions only when
typing TAB doesn’t work correctly
https://bugzilla.redhat.com/show_bug.cgi?id=869687
[ 6 ] Bug #869050 - ibus-typing-booster shows a lookup table even if there are zero
candidates to suggest
https://bugzilla.redhat.com/show_bug.cgi?id=869050
[ 7 ] Bug #857280 - should have Obsoletes and Provides lines for older typing-boosters
https://bugzilla.redhat.com/show_bug.cgi?id=857280
[ 8 ] Bug #858980 - ibus-typing-booster setup is not enabled in gnome-control-center
region, .desktop file is missing
https://bugzilla.redhat.com/show_bug.cgi?id=858980
[ 9 ] Bug #859438 - unable to see suggestions in candidate window
https://bugzilla.redhat.com/show_bug.cgi?id=859438
[ 10 ] Bug #860113 - [ibus-typing-booster] please list hunspell en JM dictionary as GB
(British English)
https://bugzilla.redhat.com/show_bug.cgi?id=860113
[ 11 ] Bug #852993 - ibus-hunspell-table lacks config file for en_GB
https://bugzilla.redhat.com/show_bug.cgi?id=852993
[ 12 ] Bug #852994 - [typo] only one 'n' in Danish
https://bugzilla.redhat.com/show_bug.cgi?id=852994
--------------------------------------------------------------------------------
================================================================================
lightdm-1.2.3-1.fc16 (FEDORA-2012-18932)
Lightweight Display Manager
--------------------------------------------------------------------------------
Update Information:
lightdm-1.2.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2012 Gregor Tätzner <brummbq(a)fedoraproject.org> - 1.2.3-1
- 1.2.3
--------------------------------------------------------------------------------
================================================================================
paps-0.6.8-23.fc16 (FEDORA-2012-18961)
Plain Text to PostScript converter
--------------------------------------------------------------------------------
Update Information:
Fix the undefined symbol error in libpaps.so.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 23 2012 Akira TAGOH <tagoh(a)redhat.com> - 0.6.8-23
- the spec file cleanup
- Fix the undefined symbol issue in libpaps.so.0
- Correct FSF address in the COPYING.LIB
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.14-1.fc16 (FEDORA-2012-18931)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Update to 2.14
Fix CVE-2012-5830, CVE-2012-5833, CVE-2012-5835, CVE-2012-{4212-4218}, CVE-2012-5829,
CVE-2012-5839, CVE-2012-5840, CVE-2012-5836, CVE-2012-4202, CVE-2012-5842, CVE-2012-5843
and others, see
http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for
more info.
Update to latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 22 2012 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.14-1
- update to 2.14
- fix elfhack compile
* Wed Oct 31 2012 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.13.2-2
- exclude ppc64 arch (hoping it is temporary, #866589)
- fix startup warnings (error console) for omni and inspector
- fix build langpacks
- change License to MPLv2.0
- add seamonkey-related directories in mozilla-filesystem (#865054)
- use proper MOZ_SMP_FLAGS
- add patch for jemalloc for powerpc arches (#852698)
- add patch to avoid decommit memory on powerpc arches (#852698)
- some cleanups in spec file
- drop version from install directories (follow the current firefox
and thunderbird way)
* Fri Oct 26 2012 Martin Stransky <stransky(a)redhat.com> 2.13.2-1
- Update to 2.13.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #878802 - seamonkey-2.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=878802
--------------------------------------------------------------------------------
================================================================================
vidalia-0.2.20-1.fc16 (FEDORA-2012-18949)
GUI controller for the Tor Onion Routing Network
--------------------------------------------------------------------------------
Update Information:
update to 0.2.20
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 15 2012 Paul Wouters <pwouters(a)redhat.com> - 0.2.20-1
- Updated to 0.2.20
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.2.15-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jan 7 2012 Paul Wouters <paul(a)xelerance.com> - 0.2.15-1
- Updated to 0.2.15
- Don't use --delete-original in desktop-file-install
- Fix obsolete-not-provided vidalia-doc
--------------------------------------------------------------------------------
================================================================================
xen-4.1.3-5.fc16 (FEDORA-2012-18967)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
some of the selinux fixes in F17+ may be needed in F16
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 18 2012 Michael Young <m.a.young(a)durham.ac.uk> - 4.1.3-5
- some of the selinux fixes in F17+ may be needed in F16 (#825775)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #825775 - SELinux is preventing /usr/bin/python2.7 from write access on the
directory /
https://bugzilla.redhat.com/show_bug.cgi?id=825775
--------------------------------------------------------------------------------