The following Fedora 15 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-2011-15560/nss-3.12.10-7.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-15006/kdeutils-4.6.5-...
https://admin.fedoraproject.org/updates/FEDORA-2011-16859/perl-PAR-1.002-...
https://admin.fedoraproject.org/updates/FEDORA-2011-14756/arora-0.11.0-3....
https://admin.fedoraproject.org/updates/FEDORA-2011-16282/ejabberd-2.1.9-...
https://admin.fedoraproject.org/updates/FEDORA-2011-16786/phpMyAdmin-3.4....
https://admin.fedoraproject.org/updates/FEDORA-2011-16284/krb5-1.9.2-4.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-16893/freeipa-2.1.4-1...
https://admin.fedoraproject.org/updates/FEDORA-2011-16903/moodle-1.9.15-1...
https://admin.fedoraproject.org/updates/FEDORA-2011-16955/jasper-1.900.1-...
https://admin.fedoraproject.org/updates/FEDORA-2011-16976/dhcp-4.2.1-14.P...
https://admin.fedoraproject.org/updates/FEDORA-2011-16980/asterisk-1.8.7....
https://admin.fedoraproject.org/updates/FEDORA-2011-17040/clearsilver-0.1...
https://admin.fedoraproject.org/updates/FEDORA-2011-17049/cacti-0.8.7i-2....
https://admin.fedoraproject.org/updates/FEDORA-2011-17071/ipmitool-1.8.11...
The following Fedora 15 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/FEDORA-2011-17054/xorg-x11-drv-in...
https://admin.fedoraproject.org/updates/FEDORA-2011-17034/polkit-kde-0.99...
https://admin.fedoraproject.org/updates/FEDORA-2011-17007/polkit-qt-0.99....
https://admin.fedoraproject.org/updates/FEDORA-2011-17035/kernel-2.6.41.5...
https://admin.fedoraproject.org/updates/FEDORA-2011-16959/flac-1.2.1-8.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-16967/xfce-utils-4.8....
https://admin.fedoraproject.org/updates/FEDORA-2011-16976/dhcp-4.2.1-14.P...
https://admin.fedoraproject.org/updates/FEDORA-2011-16955/jasper-1.900.1-...
https://admin.fedoraproject.org/updates/FEDORA-2011-16923/mesa-7.11.2-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-16858/phonon-4.5.1-2....
https://admin.fedoraproject.org/updates/FEDORA-2011-16872/xdg-utils-1.1.0...
https://admin.fedoraproject.org/updates/FEDORA-2011-16890/procmail-3.22-2...
https://admin.fedoraproject.org/updates/FEDORA-2011-16593/perl-Glib-1.241...
https://admin.fedoraproject.org/updates/FEDORA-2011-16286/pcre-8.12-5.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-16284/krb5-1.9.2-4.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-14053/glibc-2.14.1-1
https://admin.fedoraproject.org/updates/FEDORA-2011-13190/phonon-backend-...
https://admin.fedoraproject.org/updates/FEDORA-2011-11955/evolution-mapi-...
The following builds have been pushed to Fedora 15 updates-testing
cacti-0.8.7i-2.fc15
claws-mail-3.7.10-7.fc15
claws-mail-plugins-3.7.10-10.fc15
glances-1.2-1.fc15
ipmitool-1.8.11-7.fc15
kBuild-0.1.98-1.r1.fc15
latexmk-4.30a-1.fc15
liblouis-2.4.0-1.fc15
liblouisutdml-2.0.2-1.fc15
microcode_ctl-1.17-20.fc15
olpc-utils-2.0.1-2.fc15
soundconverter-1.5.4-11.fc15
wordpress-3.3-1.fc15
xorg-x11-drv-intel-2.17.0-4.fc15
zorba-2.1.0-1.fc15
Details about builds:
================================================================================
cacti-0.8.7i-2.fc15 (FEDORA-2011-17049)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.7i. Upstream release notes are at
http://www.cacti.net/release_notes_0_8_7i.php. Notably "Multiple security
vulnerabilities".
Also, adjust mod_security settings.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 13 2011 Ken Dreyer <ktdreyer(a)ktdreyer.com> - 0.8.7i-2
- Only set "su" logrotate parameter for F16 and above.
- Tweak mod_security rules.
* Mon Dec 12 2011 Ken Dreyer <ktdreyer(a)ktdreyer.com> - 0.8.7i-1
- New upstream release (BZ #766573).
* Fri Nov 11 2011 Ken Dreyer <ktdreyer(a)ktdreyer.com> - 0.8.7h-2
- block HTTP access to log and rra directories (#609856)
- overrides for mod_security
- set logrotate to su to cacti apache when rotating (#753079)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #766573 - cacti-0.8.7i is available
https://bugzilla.redhat.com/show_bug.cgi?id=766573
--------------------------------------------------------------------------------
================================================================================
claws-mail-3.7.10-7.fc15 (FEDORA-2011-17085)
Email client and news reader based on GTK+
--------------------------------------------------------------------------------
Update Information:
Upgrade from 3.7.9 to 3.7.10 plus fixes, which have been released also for Fedora 16.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 30 2011 Michael Schwendt <mschwendt(a)fedoraproject.org>
- 3.7.10-7
- merge fix from 3.7.10cvs47 for odd mimeview_start_drag crash (#748384)
- include built/installed manual and not its XML source
- add scriptlets for icon cache update
- add scriptlets for update-desktop-database (#690298)
- add BR gnome-libs-devel so gnome-config script is available
- drop ancient Obsoletes/Provides
- drop old spec sections not needed anymore
* Fri Nov 25 2011 Michael Schwendt <mschwendt(a)fedoraproject.org>
- 3.7.10-6
- fix for new glib2 where only glib.h must be included (#755308)
* Wed Sep 28 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.10-5
- drop unneeded plugin requires
* Tue Sep 27 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.10-4
- drop plugin api script
* Mon Sep 26 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.10-3
- make plugin api isa dependent
* Sun Sep 25 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.10-2
- change plugin dependencies to depend on plugin api version
(rhbz#740662)
* Tue Aug 30 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.10-1
- version upgrade
* Thu Aug 4 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.9-6
- deprecate gtkhtml2 on f16 upwards
--------------------------------------------------------------------------------
================================================================================
claws-mail-plugins-3.7.10-10.fc15 (FEDORA-2011-17085)
Additional plugins for Claws Mail
--------------------------------------------------------------------------------
Update Information:
Upgrade from 3.7.9 to 3.7.10 plus fixes, which have been released also for Fedora 16.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 30 2011 Michael Schwendt <mschwendt(a)fedoraproject.org>
- 3.7.10-10
- don't build geolocation plugin since we can't mix gtk2 and gtk3
(#758173, #662800)
- remove libchamplain* pkg-config hacks for geolocation plugin
(it supports 0.4 to 0.8 only)
- merge newer vcalendar plugin to fix a crash (#742249)
- drop ancient Obsoletes/Provides
- drop old spec sections not needed anymore
* Fri Nov 25 2011 Michael Schwendt <mschwendt(a)fedoraproject.org>
- 3.7.10-9
- fix missing %doc files in -perl subpackage (#707662)
- fix for new glib2 where only glib.h must be included
* Thu Nov 24 2011 Tomas Bzatek <tbzatek(a)redhat.com>
- 3.7.10-8
- Rebuilt for new libarchive and clutter
* Thu Oct 6 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.10-7
- pull cvs version of fancy for newer webkit support (rhbz#743834)
- fix debuginfo (rhbz#742249)
* Wed Sep 28 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.10-6
- drop unneeded plugin requires
* Tue Sep 27 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.10-5
- fix requires for mock
* Mon Sep 26 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.10-4
- make plugin api isa dependent
* Sun Sep 25 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.10-3
- change plugin dependencies to depend on plugin api version
(rhbz#740662)
* Thu Sep 22 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.10-2
- pull gdata cvs version with upstreamed patch for authorizers in
libgdata >= 0.9.x
* Tue Aug 30 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.10-1
- version upgrade
- add gdata plugin
- remove upstreamed patches
* Thu Aug 4 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.9-9
- deprecate gtkhtml2 on f16 upwards
* Wed Aug 3 2011 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 3.7.9-8
- rebuild (cogl)
* Thu Jul 21 2011 Petr Sabata <contyk(a)redhat.com> - 3.7.9-7
- Perl mass rebuild
* Wed Jul 20 2011 Petr Sabata <contyk(a)redhat.com> - 3.7.9-6
- Perl mass rebuild
--------------------------------------------------------------------------------
================================================================================
glances-1.2-1.fc15 (FEDORA-2011-17078)
CLI curses based monitoring tool
--------------------------------------------------------------------------------
Update Information:
upgrade to version 1.2
Glances is a CLI curses based monitoring tool
Glances is a CLI curses based monitoring tool
--------------------------------------------------------------------------------
================================================================================
ipmitool-1.8.11-7.fc15 (FEDORA-2011-17071)
Utility for IPMI control
--------------------------------------------------------------------------------
Update Information:
This update fixes following security bug:
CVE-2011-4339 - OpenIPMI: IPMI event daemon creates PID file with world writeable
permissions
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 13 2011 Jan Safranek <jsafrane(a)redhat.com> - 1.8.11-7
- fixed CVE-2011-4339
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #742837 - CVE-2011-4339 OpenIPMI: IPMI event daemon creates PID file with
world writeable permissions
https://bugzilla.redhat.com/show_bug.cgi?id=742837
--------------------------------------------------------------------------------
================================================================================
kBuild-0.1.98-1.r1.fc15 (FEDORA-2011-17080)
A cross-platform build environment
--------------------------------------------------------------------------------
Update Information:
Update to allow building VirtualBox 4.1.2+ kernel modules, per FESCO ticket 712.
https://fedorahosted.org/fesco/ticket/712
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 20 2011 Lubomir Rintel <lkundrak(a)v3.sk> - 0.1.98-1.r1
- Later patchset
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #734870 - Need kBuild 0.1.98 or later to build Virtualbox 4.1.2
https://bugzilla.redhat.com/show_bug.cgi?id=734870
--------------------------------------------------------------------------------
================================================================================
latexmk-4.30a-1.fc15 (FEDORA-2011-17079)
A make-like utility for LaTeX files
--------------------------------------------------------------------------------
Update Information:
Upstream notes on this update:
- Fix use of bibtex when $aux_dir and/or $out_dir are set
- Documentation of $search_path separator variable
- Work with feynmp package and mpost
- Let dvips find files in the output directory
- In search for cus-deps that can make a missing file, look in $out_dir
- Parse biber 0.9.7 error messages
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 12 2011 Jerry James <loganjerry(a)gmail.com> - 4.30a-1
- Add latexmk.pdf to docs
- Update to 4.30a:
- Fix use of bibtex when $aux_dir and/or $out_dir are set
- Documentation of $search_path separator variable
- Work with feynmp package and mpost
- Let dvips find files in the output directory
- In search for cus-deps that can make a missing file, look in $out_dir
- Parse biber 0.9.7 error messages
--------------------------------------------------------------------------------
================================================================================
liblouis-2.4.0-1.fc15 (FEDORA-2011-17072)
Braille translation and back-translation library
--------------------------------------------------------------------------------
Update Information:
New features in this release:
* New generic Farsi Grade 1 table
* Braille table improvements
- improvements to the French comp6 and comp8 braille tables
- improvements to the Romanian braille table
- improvements to the Generic Arabic Grade 1 table
- improvements to the Czech tables
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 12 2011 Martin Gieseking <martin.gieseking(a)uos.de> 2.4.0-1
- Updated to upstream release 2.4.0.
--------------------------------------------------------------------------------
================================================================================
liblouisutdml-2.0.2-1.fc15 (FEDORA-2011-17060)
Braille transcription library for UTDML documents
--------------------------------------------------------------------------------
Update Information:
This update fixes a couple of issues and improves stability.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 12 2011 Martin Gieseking <martin.gieseking(a)uos.de> 2.0.2-1
- Updated to release 2.0.2.
- Dropped patch since the scripts have been removed from the tarball
--------------------------------------------------------------------------------
================================================================================
microcode_ctl-1.17-20.fc15 (FEDORA-2011-17055)
Tool to update x86/x86-64 CPU microcode.
--------------------------------------------------------------------------------
Update Information:
Update microcode to 20111110
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 13 2011 Anton Arapov <anton(a)redhat.com> 1.17-20
- Update to microcode-20111110.dat
--------------------------------------------------------------------------------
================================================================================
olpc-utils-2.0.1-2.fc15 (FEDORA-2011-17061)
OLPC utilities
--------------------------------------------------------------------------------
Update Information:
2.0.1 bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 21 2011 Daniel Drake <dsd(a)laptop.org> - 2.0.1-2
- Add missing dependency on ConsoleKit-x11
* Sat Nov 12 2011 Daniel Drake <dsd(a)laptop.org> - 2.0.1-1
- Improved mouse setup
* Sat Oct 1 2011 Daniel Drake <dsd(a)laptop.org> - 2.0.0-1
- Remove outdated bits
- Update for Fedora 16
- Add GNOME 3 gsettings overrides for OLPC
* Fri Sep 30 2011 Daniel Drake <dsd(a)laptop.org> - 1.3.5-1
- Enable XO-1.75 hardware cursor and screen rotation
- Fix permissions on screen/lockdev runtime directories
* Sun Sep 25 2011 Daniel Drake <dsd(a)laptop.org> - 1.3.4-1
- Disable XO-1.75 renderaccel to avoid hangs
- Disable tap-to-click and pad scrolling on sentelic driver
- Create runtime directories for screen and lockdev
* Thu Sep 22 2011 Daniel Drake <dsd(a)laptop.org> - 1.3.3-1
- Latest version, includes various fixes and OLPC XO-1.75 support
* Thu May 5 2011 Daniel Drake <dsd(a)laptop.org> - 1.2.11-1
- Fix hostname configuration
* Fri Apr 29 2011 Daniel Drake <dsd(a)laptop.org> - 1.2.10-1
- New version with updated XO-1.5 X config and olpc-configure tweaks
--------------------------------------------------------------------------------
================================================================================
soundconverter-1.5.4-11.fc15 (FEDORA-2011-17066)
Simple sound converter application for GNOME
--------------------------------------------------------------------------------
Update Information:
Reenable FLAC to Ogg Vorbis conversion, since the GStreamer stream corruption (GNOME bz
651615) fix has been backported to Fedora with an update of the gstreamer-plugins-good
package (bz 722667).
Minimal test instructions: After converting .flac files to .ogg with SoundConverter,
running /usr/bin/ogginfo on the resulting .ogg files must not warn about stream data
errors.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 10 2011 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.5.4-11
- Reenable FLAC to Ogg Vorbis conversion and require at least the
first build of the gstreamer-plugins-good package that contains
the backported fix.
--------------------------------------------------------------------------------
================================================================================
wordpress-3.3-1.fc15 (FEDORA-2011-17069)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 13 2011 'Matěj Cepl <mcepl(a)redhat.com>' - 3.3-1
- New upstream release.
* Wed Dec 7 2011 'Matěj Cepl <mcepl(a)redhat.com>' - 3.3-0.5.RC2
- ... and one day after I upgraded to RC1, we have new RC2 ;)
* Tue Dec 6 2011 'Matěj Cepl <mcepl(a)redhat.com>' - 3.3-0.4.RC1
- Cool we are on RC1!
* Thu Nov 24 2011 'Matěj Cepl <mcepl(a)redhat.com>' - 3.3-0.3.beta4
- Another upstream beta release (now hopefully, really close to RC)
* Fri Nov 11 2011 'Matěj Cepl <mcepl(a)redhat.com>' - 3.3-0.3.beta3
- Fix version requirement for php (Closes #753192)
* Wed Nov 9 2011 'Matěj Cepl <mcepl(a)redhat.com>' - 3.3-0.2.beta3
- Another upstream beta release.
* Thu Oct 20 2011 'Matěj Cepl <mcepl(a)redhat.com>' - 3.3-0.1.beta2
- New upstream beta release (just for Rawhide, to be sure we build)
* Sat Jul 30 2011 Matěj Cepl <mcepl(a)redhat.com> - 3.2.1-2
- Rebuilt against new libraries.
--------------------------------------------------------------------------------
================================================================================
xorg-x11-drv-intel-2.17.0-4.fc15 (FEDORA-2011-17054)
Xorg X11 Intel video driver
--------------------------------------------------------------------------------
Update Information:
Update to 2.17.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 13 2011 Adam Jackson <ajax(a)redhat.com> 2.17.0-4
- 0001-uxa-Fix-clip-processing-for-uxa_fill_spans.patch: Backport clipping
fixes from master.
* Tue Nov 29 2011 Adam Jackson <ajax(a)redhat.com> 2.17.0-3
- Rebuild for new xcb-util
* Mon Nov 21 2011 Adam Jackson <ajax(a)redhat.com> 2.17.0-2
- Re-enable DRI1 build for the moment
* Fri Nov 18 2011 Adam Jackson <ajax(a)redhat.com> 2.17.0-1
- intel 2.17.0
- intel-2.17.0-legacy-dri1.patch: Fix build with DRI1 disabled
* Mon Nov 14 2011 Adam Jackson <ajax(a)redhat.com> - 2.16.901-2
- ABI rebuild
* Thu Nov 10 2011 Adam Jackson <ajax(a)redhat.com> 2.16.901-1
- Today's git snapshot (2.16.901 plus a lot)
* Thu Aug 18 2011 Adam Jackson <ajax(a)redhat.com> - 2.16.0-2
- Rebuild for xserver 1.11 ABI
* Wed Aug 17 2011 Adam Jackson <ajax(a)redhat.com> 2.16.0-1
- intel 2.16.0
- Today's intel-gpu-tools snapshot
* Wed Aug 3 2011 Adam Jackson <ajax(a)redhat.com> 2.15.901-1
- intel 2.15.901
--------------------------------------------------------------------------------
================================================================================
zorba-2.1.0-1.fc15 (FEDORA-2011-17086)
General purpose XQuery processor implemented in C++
--------------------------------------------------------------------------------
Update Information:
This release is a minor update for Zorba 2. It contains mostly bug fixes but also several
new features and performance improvements. For a detailed list of changes see
http://launchpadlibrarian.net/87015085/ChangeLog
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 10 2011 Martin Gieseking <martin.gieseking(a)uos.de> 2.1.0-1
- updated to new upstream release
--------------------------------------------------------------------------------