The following Fedora 16 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-2012-0913/moodle-2.0.7-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-0921/znc-0.204-3.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-0941/bip-0.8.8-2.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-0730/jetty-6.1.26-8.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-0972/mysql-5.5.20-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-0825/BackupPC-3.2.1-7...
https://admin.fedoraproject.org/updates/FEDORA-2012-0840/polipo-1.0.4.1-6...
https://admin.fedoraproject.org/updates/FEDORA-2012-1028/sudo-1.8.3p1-2.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-14691/tomcat6-6.0.32-...
The following Fedora 16 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/FEDORA-2012-1028/sudo-1.8.3p1-2.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-1031/coreutils-8.12-6...
https://admin.fedoraproject.org/updates/FEDORA-2012-1025/alsa-lib-1.0.25-...
https://admin.fedoraproject.org/updates/FEDORA-2012-0972/mysql-5.5.20-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-0984/lvm2-2.02.86-6.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-0934/strigi-0.7.7-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-0820/schroedinger-1.0...
https://admin.fedoraproject.org/updates/FEDORA-2012-0689/virtuoso-opensou...
https://admin.fedoraproject.org/updates/FEDORA-2012-0590/qrencode-3.2.0-1...
https://admin.fedoraproject.org/updates/FEDORA-2011-15301/lxpanel-0.5.8-1...
The following builds have been pushed to Fedora 16 updates-testing
cifs-utils-5.3-1.fc16
coreutils-8.12-6.fc16
culmus-fonts-0.121-1.fc16
haproxy-1.4.19-1.fc16
kicad-2012.01.19-1.rev3256.fc16
kile-2.1.1-1.fc16
libguestfs-1.16.2-1.fc16
pcmanx-gtk2-1.1-1.fc16
perl-Cairo-1.090-1.fc16
perl-Sub-WrapPackages-2.0-7.fc16
php-channel-horde-1.0-1.fc16
picocom-1.6-4.fc16
spice-xpi-2.7-1.fc16
sssd-1.7.0-1.fc16
sudo-1.8.3p1-2.fc16
system-config-printer-1.3.8-2.fc16
Details about builds:
================================================================================
cifs-utils-5.3-1.fc16 (FEDORA-2012-1037)
Utilities for mounting and managing CIFS mounts
--------------------------------------------------------------------------------
Update Information:
This update adds the cifscreds utility to cifs-utils. That
utility requires a v3.3 kernel, and so should be usable once
F16 gets that kernel version.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 28 2012 Jeff Layton <jlayton(a)redhat.com> 5.3-1
- update to 5.3
--------------------------------------------------------------------------------
================================================================================
coreutils-8.12-6.fc16 (FEDORA-2012-1031)
A set of basic GNU tools commonly used in shell scripts
--------------------------------------------------------------------------------
Update Information:
- output the correct ownership in chown -v (upstream bug #10636)
- do not use shebang in sourced colorls.csh
- su: fix shell suspend in tcsh (#597928)
- variable "u" should be static in uname processor type patch
- various multibyte patch fixes:
- fix cut output-delimiter option
- prevent infinite loop in sort when ignoring chars
- prevent using unitialized variable in cut
- fix pr -c and pr -v segfault with multibyte locales
- fix stack smashing, buffer overflow and invalid output of pr (#772172)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 30 2012 Kamil Dudka <kdudka(a)redhat.com> - 8.12-6
- do not use shebang in sourced colorls.csh
- su: fix shell suspend in tcsh (#597928)
- variable "u" should be static in uname processor type patch
- various multibyte patch fixes:
- fix cut output-delimiter option
- prevent infinite loop in sort when ignoring chars
- prevent using unitialized variable in cut
- fix pr -c and pr -v segfault with multibyte locales
- fix stack smashing, buffer overflow and invalid output of pr (#772172)
* Sun Jan 29 2012 Kamil Dudka <kdudka(a)redhat.com> - 8.12-5
- output the correct ownership in chown -v (upstream bug #10636)
* Mon Oct 24 2011 Ondrej Vasik <ovasik(a)redhat.com> - 8.12-4
- require at least pam >= 1.1.3-7 (#748215)
* Fri Jul 29 2011 Ondrej Vasik <ovasik(a)redhat.com> - 8.12-3
- use acl_extended_file_nofollow() if available (#692823)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #597928 - shell suspend won't work
https://bugzilla.redhat.com/show_bug.cgi?id=597928
[ 2 ] Bug #772172 - pr command failed on multibyte test
https://bugzilla.redhat.com/show_bug.cgi?id=772172
--------------------------------------------------------------------------------
================================================================================
culmus-fonts-0.121-1.fc16 (FEDORA-2012-1045)
Fonts for Hebrew from Culmus project
--------------------------------------------------------------------------------
Update Information:
This is an update with upstream new release with Frank Ruehl OT and enhancements.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 30 2012 Pravin Satpute <psatpute(a)redhat.com> - 0.121-1
- Upstream new release 0.121 with Frank Ruehl OT
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #785535 - Update from Culmus upstream
https://bugzilla.redhat.com/show_bug.cgi?id=785535
--------------------------------------------------------------------------------
================================================================================
haproxy-1.4.19-1.fc16 (FEDORA-2012-1039)
HA-Proxy is a TCP/HTTP reverse proxy for high availability environments
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version 1.4.19
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 29 2012 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.19-1
- Update to 1.4.19
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #773639 - haproxy update to 1.4.19
https://bugzilla.redhat.com/show_bug.cgi?id=773639
--------------------------------------------------------------------------------
================================================================================
kicad-2012.01.19-1.rev3256.fc16 (FEDORA-2012-1030)
Electronic schematic diagrams and printed circuit board artwork
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 29 2012 Alain Portal <alain.portal[AT]univ-montp2[DOT]fr>
2012.01.19-1.rev3256
- New upstream release
- Add doxygen as build requirement
- Add bulgarian language
- Add it and pl tutorials
- Update versioning patch
- Add patch to fix python syntax in bom-in-python (Gerd v. Egidy <gerd(a)egidy.de>)
- Add a new patch to fix a new link time error
- Fix a PS plotting scale bug
- Move junction button close to no connexion button
- Fix thermal relief gap calculation for circular pads in pcbnew
- Add undo/redo support for Pcbnew auto place, auto move, and auto route features.
- Make CvPcb correctly preview the selected component footprint if one has already been
assigned.
- Fix a bug in pcb calculation
- Width tuning (width correction) for PS plotting of tracks, pads and vias
--------------------------------------------------------------------------------
================================================================================
kile-2.1.1-1.fc16 (FEDORA-2012-1036)
(La)TeX source editor and TeX shell
--------------------------------------------------------------------------------
Update Information:
An update of Kile to the latest upstream bugfix release, version 2.1.1.
Fixes:
- Restore the behaviour of LaTeX environment completion to what it was in version 2.0
(Patch by Holger Danielsson)
- Ensure that Kile can be offered as application to open LaTeX documents in Nautilus, for
instance (kde#275438)
- Avoid crashes when closing Kile with two (or more) opened projects (Patch by Eugene
Shalygin, kde#289458)
- Ensure that the correct number of errors/warnings/badboxes is reported in translated
versions of Kile, which notably affected the French version (kde#275700)
Features:
- Add tool tip which explains the available placeholders in the user tag dialog (Patch by
Felix Mauch)
- Allow to configure whether the directory shown in the console is kept synchronized with
the document tabs (kde#265165)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 29 2012 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 2.1.1-1
- update to 2.1.1 (bugfix release, #785528)
- don't Require kate-part on EL (no such package or Provides)
- don't Require konsole-part on F15 nor EL (no such package or Provides)
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #785528 - kile-2.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=785528
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.16.2-1.fc16 (FEDORA-2012-1034)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
New upstream stable version 1.16.2.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 30 2012 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.16.2-1
- New upstream version 1.16.2.
- Try enabling tests on 32 bit. This works on Rawhide, so it might
work on Fedora 16.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #785668 - aug-defnode: daemon crash
https://bugzilla.redhat.com/show_bug.cgi?id=785668
[ 2 ] Bug #785290 - ocaml (bytecode) bindings segfault in 'add_drive_opts'
https://bugzilla.redhat.com/show_bug.cgi?id=785290
--------------------------------------------------------------------------------
================================================================================
pcmanx-gtk2-1.1-1.fc16 (FEDORA-2012-1044)
Telnet client designed for BBS browsing
--------------------------------------------------------------------------------
Update Information:
New upstream release.
Telnet client designed for BBS browsing
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 30 2012 Robin Lee <cheeselee(a)fedoraproject.org> - 1.1-1
- Update to 1.1
- Use upstream desktop entry file
- BR: libtool-ltdl-devel
- Untabified
--------------------------------------------------------------------------------
================================================================================
perl-Cairo-1.090-1.fc16 (FEDORA-2012-1038)
Perl interface to the cairo library
--------------------------------------------------------------------------------
Update Information:
Update perl-Cairo to a modern release. Needed for perl-Gtk3.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 30 2012 Tom Callaway <spot(a)fedoraproject.org> - 1.090-1
- update to 1.090
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.060-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #785709 - RFE: update to latest upstream release
https://bugzilla.redhat.com/show_bug.cgi?id=785709
--------------------------------------------------------------------------------
================================================================================
perl-Sub-WrapPackages-2.0-7.fc16 (FEDORA-2012-1032)
Add wrappers around all the subroutines in packages
--------------------------------------------------------------------------------
Update Information:
This update does not provide perl(lib).
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 29 2012 Emmanuel Seyman <emmanuel.seyman(a)club-internet.fr> - 2.0-3
- Convert the filter to rpm 4.9 format (#784053)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #784053 - perl-Sub-WrapPackages provides perl(lib) erroneously
https://bugzilla.redhat.com/show_bug.cgi?id=784053
--------------------------------------------------------------------------------
================================================================================
php-channel-horde-1.0-1.fc16 (FEDORA-2012-1043)
Adds
pear.horde.org channel to PEAR
--------------------------------------------------------------------------------
Update Information:
Initial build of php-channel-horde which adds the
pear.horde.org channel to PEAR
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #785424 - Review Request: php-channel-horde - Adds
pear.horde.org channel to
PEAR
https://bugzilla.redhat.com/show_bug.cgi?id=785424
--------------------------------------------------------------------------------
================================================================================
picocom-1.6-4.fc16 (FEDORA-2012-1027)
Minimal serial communications program
--------------------------------------------------------------------------------
Update Information:
Fix locking issues.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 29 2012 Scott Tsai <scottt.tw(a)gmail.com> 1.6-4
- Create subdirectories for lockfiles under /run/lock/picocom/ (RHBZ 732360)
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.6-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #732360 - picocom should use different locking because of /var/lock
permissions
https://bugzilla.redhat.com/show_bug.cgi?id=732360
--------------------------------------------------------------------------------
================================================================================
spice-xpi-2.7-1.fc16 (FEDORA-2012-1046)
SPICE extension for Mozilla
--------------------------------------------------------------------------------
Update Information:
version update
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 30 2012 Peter Hatina <phatina(a)redhat.com> 2.7-1
- Update to 2.7
--------------------------------------------------------------------------------
================================================================================
sssd-1.7.0-1.fc16 (FEDORA-2012-0237)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
* Support for case-insensitive domains
* Support for multiple search bases in the LDAP provider
* Support for the native FreeIPA netgroup implementation
* Reliability improvements to the process monitor
* New DEBUG facility with more consistent log levels
* New tool to change debug log levels without restarting SSSD
* SSSD will now disconnect from LDAP server when idle
* FreeIPA HBAC rules can choose to ignore srchost options for significant performance
gains
* Assorted performance improvements in the LDAP provider (reducing disk-writes to the
cache)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 22 2011 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.0-1
- New upstream release 1.7.0
-
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
- Support for case-insensitive domains
- Support for multiple search bases in the LDAP provider
- Support for the native FreeIPA netgroup implementation
- Reliability improvements to the process monitor
- New DEBUG facility with more consistent log levels
- New tool to change debug log levels without restarting SSSD
- SSSD will now disconnect from LDAP server when idle
- FreeIPA HBAC rules can choose to ignore srchost options for significant
performance gains
- Assorted performance improvements in the LDAP provider
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #743133 - Performance regression with Kerberos authentication against AD
https://bugzilla.redhat.com/show_bug.cgi?id=743133
--------------------------------------------------------------------------------
================================================================================
sudo-1.8.3p1-2.fc16 (FEDORA-2012-1028)
Allows restricted root access for specified users
--------------------------------------------------------------------------------
Update Information:
- fixed CVE-2012-0809
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 26 2012 Daniel Kopecek <dkopecek(a)redhat.com> - 1.8.3p1-2
- added patch for CVE-2012-0809
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #784443 - CVE-2012-0809 sudo: format string flaw in sudo_debug()
https://bugzilla.redhat.com/show_bug.cgi?id=784443
--------------------------------------------------------------------------------
================================================================================
system-config-printer-1.3.8-2.fc16 (FEDORA-2012-0923)
A printer administration tool
--------------------------------------------------------------------------------
Update Information:
This update fixes several bugs and crashes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 30 2012 Jiri Popelka <jpopelka(a)redhat.com> 1.3.8-2
- Fixed several debugprints (#785581).
- Clean up and modernize spec file.
* Tue Jan 24 2012 Tim Waugh <twaugh(a)redhat.com> 1.3.8-1
- 1.3.8:
- Avoid AttributeError in on_btnNPApply_clicked() (bug #772112).
- Added debugging when jobviewer not found (bug #757520).
- Applied patch from Till Kamppeter to use pycurl 'https' support
for openprinting (CVE-2011-4405).
- Always use a sequence as args for timedops.TimedSubprocess()
(patch from Vincent Untz).
- Added some firewall debugging for bug #755913.
- Fixed typo (Ubuntu #844976).
- Run probe_printer.py with an argument to run PrinterFinder by hand.
- More debugging output in PrinterFinder.
- Really fix SMB probing in PrinterFinder.
- LpdServer class: spot when we can't connect, and give up (likewise
in PrinterFinder).
- Ignore ' All-in-one' suffix for printer model names when comparing
them (bug #751610).
- Handle HTTP errors from
openprinting.org (seen in bug #743446).
- Don't re-open PPD when already available, just to localize marker
names.
- Use the monitor's PPD cache in the properties dialog.
- monitor: provide method for sharing the monitor's PPD cache.
- cupshelpers: avoid re-opening PPD when not needed (not a leak).
- Fixed file descriptor leak in PPDCache (Ubuntu #874445).
- Fixed typo in check-device-ids.py when looking for ID-less
matches.
- Require newer pycups; drop compatibility code.
- Do not connect to CUPS with an empty user name.
- On asynchronous IPP connections make sure that the password dialog
is repeated if a wrong password is entered (Ubuntu #653132).
- Several fixes on credential caching for IPP authentication (Ubuntu
bug 653132).
- Don't penalise pxlmono now that bug #661814 is fixed in
ghostscript-9.04.
- Handle new CUPS 1.5 IPP error response IPP_AUTHENTICATION_CANCELED
(Ubuntu #653132).
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3.7-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Fri Nov 4 2011 Tim Waugh <twaugh(a)redhat.com> 1.3.7-3
- Use arch-specific requirements where appropriate (bug #749834).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #751610 - Drivers for All-in-one models not combined
https://bugzilla.redhat.com/show_bug.cgi?id=751610
[ 2 ] Bug #772112 - [abrt] system-config-printer-1.3.7-2.fc16:
newprinter.py:3658:on_btnNPApply_clicked:AttributeError: printers
https://bugzilla.redhat.com/show_bug.cgi?id=772112
[ 3 ] Bug #785382 - [abrt] system-config-printer-libs-1.3.7-2.fc16:
scp-dbus-service.py:320:on_dialog_canceled:NameError: global name 'g__killtimer'
is not defined
https://bugzilla.redhat.com/show_bug.cgi?id=785382
[ 4 ] Bug #785581 - [abrt] system-config-printer-1.3.8-1.fc16:
newprinter.py:1531:getNetworkPrinterMakeModel:TypeError: coercing to Unicode: need string
or buffer, list found
https://bugzilla.redhat.com/show_bug.cgi?id=785581
--------------------------------------------------------------------------------