The following Fedora 16 Security updates need testing:
Age URL
4
https://admin.fedoraproject.org/updates/FEDORA-2013-0114/gnupg-1.4.13-1.fc16
4
https://admin.fedoraproject.org/updates/FEDORA-2013-0110/tcl-snack-2.2.10...
26
https://admin.fedoraproject.org/updates/FEDORA-2012-20157/libproxy-0.4.11...
26
https://admin.fedoraproject.org/updates/FEDORA-2012-20156/389-ds-base-1.2...
26
https://admin.fedoraproject.org/updates/FEDORA-2012-20159/v8-3.13.7.5-1.fc16
107
https://admin.fedoraproject.org/updates/FEDORA-2012-14452/bacula-5.0.3-33...
25
https://admin.fedoraproject.org/updates/FEDORA-2012-20236/rssh-2.3.4-1.fc16
33
https://admin.fedoraproject.org/updates/FEDORA-2012-19347/cups-1.5.4-10.fc16
185
https://admin.fedoraproject.org/updates/FEDORA-2012-10314/revelation-0.4....
105
https://admin.fedoraproject.org/updates/FEDORA-2012-14654/tor-0.2.2.39-16...
2
https://admin.fedoraproject.org/updates/FEDORA-2013-0225/pl-5.10.2-9.fc16
2
https://admin.fedoraproject.org/updates/FEDORA-2013-0244/rubygem-activere...
2
https://admin.fedoraproject.org/updates/FEDORA-2013-0222/gnupg2-2.0.19-7....
68
https://admin.fedoraproject.org/updates/FEDORA-2012-17291/thunderbird-16....
2
https://admin.fedoraproject.org/updates/FEDORA-2013-0261/nss-3.14.1-3.fc16
2
https://admin.fedoraproject.org/updates/FEDORA-2013-0269/drupal7-context-...
5
https://admin.fedoraproject.org/updates/FEDORA-2013-0061/php-ZendFramewor...
7
https://admin.fedoraproject.org/updates/FEDORA-2012-21122/php-pear-CAS-1....
0
https://admin.fedoraproject.org/updates/FEDORA-2013-0270/qt-4.8.4-5.fc16
The following Fedora 16 Critical Path updates have yet to be approved:
Age URL
2
https://admin.fedoraproject.org/updates/FEDORA-2013-0230/selinux-policy-3...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-0270/qt-4.8.4-5.fc16
2
https://admin.fedoraproject.org/updates/FEDORA-2013-0263/qtwebkit-2.2.2-5...
2
https://admin.fedoraproject.org/updates/FEDORA-2013-0261/nss-3.14.1-3.fc16
2
https://admin.fedoraproject.org/updates/FEDORA-2013-0222/gnupg2-2.0.19-7....
2
https://admin.fedoraproject.org/updates/FEDORA-2013-0238/mysql-5.5.29-1.fc16
4
https://admin.fedoraproject.org/updates/FEDORA-2013-0114/gnupg-1.4.13-1.fc16
10
https://admin.fedoraproject.org/updates/FEDORA-2012-20795/nss-3.14.1-2.fc...
The following builds have been pushed to Fedora 16 updates-testing
hercstudio-1.4.0-1.fc16
kde-plasma-networkmanagement-0.9.0.6-1.fc16
lua-markdown-0.32-1.fc16
mozilla-https-everywhere-3.1.2-1.fc16
pypoppler-0.12.1-22.fc16
python-httplib2-0.7.7-1.fc16
qt-4.8.4-5.fc16
rachota-2.3-5.20130104cvs.fc16
youtube-dl-2013.01.02-1.fc16
Details about builds:
================================================================================
hercstudio-1.4.0-1.fc16 (FEDORA-2013-0348)
GUI front-end to the Hercules mainframe Emulator
--------------------------------------------------------------------------------
Update Information:
new upstream release 1.4.0
see
http://tech.groups.yahoo.com/group/hercstudio/message/85 for details
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 6 2013 Dan Horák <dan[at]danny.cz> - 1.4.0-1
- update to 1.4.0
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Tue Feb 28 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3.0-4
- Rebuilt for c++ ABI breakage
* Sun Jan 15 2012 Dan Horák <dan[at]danny.cz> - 1.3.0-3
- fix unistd.h include
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kde-plasma-networkmanagement-0.9.0.6-1.fc16 (FEDORA-2013-0349)
NetworkManager KDE 4 integration
--------------------------------------------------------------------------------
Update Information:
New upstream stable/bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 5 2013 Rex Dieter <rdieter(a)fedoraproject.org> 0.9.0.6-1
- 0.9.0.6
* Thu Dec 6 2012 Rex Dieter <rdieter(a)fedoraproject.org> 0.9.0.5-3
- backport upstream vpn-related fixes (#882308)
* Fri Nov 9 2012 Rex Dieter <rdieter(a)fedoraproject.org> 0.9.0.5-2
- +plasma-dataengine-depextractor support
--------------------------------------------------------------------------------
================================================================================
lua-markdown-0.32-1.fc16 (FEDORA-2013-0347)
Markdown module for Lua
--------------------------------------------------------------------------------
Update Information:
This is an implementation of the popular text markup language Markdown in pure Lua.
Markdown can convert documents written in a simple and easy to read text format to
well-formatted HTML.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #891436 - Review Request: lua-markdown - Markdown module for Lua
https://bugzilla.redhat.com/show_bug.cgi?id=891436
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-3.1.2-1.fc16 (FEDORA-2013-0350)
HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
--------------------------------------------------------------------------------
Update Information:
* Release 3.1.2, since 3.1.1 was accidentally mis-tagged
* Fixes for: AmazonAWS/Datawrapper, Cachefly, Cloudfront/C-SPAN, Hetzner.de
KeyDrive/Snapnames, QT, openDesktop, OpenTTD, WhiskeyMedia
https://mail1.eff.org/pipermail/https-everywhere-rules/2012-December/0014...
https://trac.torproject.org/projects/tor/ticket/7608
https://trac.torproject.org/projects/tor/ticket/7567
https://mail1.eff.org/pipermail/https-everywhere-rules/2012-December/0014...
https://trac.torproject.org/projects/tor/ticket/7560
https://trac.torproject.org/projects/tor/ticket/7796
* Disable broken: FlossManuals, Pastebin, Poste.it, Ustream, TED, AusGamers
https://trac.torproject.org/projects/tor/ticket/7731
https://trac.torproject.org/projects/tor/ticket/7850
https://trac.torproject.org/projects/tor/ticket/7840
https://trac.torproject.org/projects/tor/ticket/7548
* Increase Observatory deployment (65%->85%)
* Update cert whitelist
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 3 2013 Russell Golden <niveusluna(a)niveusluna.org> - 3.1.2-1
- Fixes for: AmazonAWS/Datawrapper, Cachefly, Cloudfront/C-SPAN, Hetzner.de
KeyDrive/Snapnames, QT, openDesktop, OpenTTD, WhiskeyMedia
https://mail1.eff.org/pipermail/https-everywhere-rules/2012-December/0014...
https://trac.torproject.org/projects/tor/ticket/7608
https://trac.torproject.org/projects/tor/ticket/7567
https://mail1.eff.org/pipermail/https-everywhere-rules/2012-December/0014...
https://trac.torproject.org/projects/tor/ticket/7560
https://trac.torproject.org/projects/tor/ticket/7796
- Disable broken: FlossManuals, Pastebin, Poste.it, Ustream, TED, AusGamers
https://trac.torproject.org/projects/tor/ticket/7731
https://trac.torproject.org/projects/tor/ticket/7850
https://trac.torproject.org/projects/tor/ticket/7840
https://trac.torproject.org/projects/tor/ticket/7548
- Increase Observatory deployment (65>85%)
- Update cert whitelist
--------------------------------------------------------------------------------
================================================================================
pypoppler-0.12.1-22.fc16 (FEDORA-2013-0352)
Python bindings for the Poppler PDF rendering library
--------------------------------------------------------------------------------
Update Information:
* Sun Jan 06 2013 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.12.1-22
- Resource leaks (BZ #891754)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 6 2013 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.12.1-22
- Resource leaks (BZ #891754)
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.12.1-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Wed May 16 2012 Marek Kasik <mkasik(a)redhat.com> - 0.12.1-20
- Rebuild (poppler-0.20.0)
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.12.1-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Fri Oct 28 2011 Rex Dieter <rdieter(a)fedoraproject.org> - 0.12.1-18
- rebuild(poppler)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #891754 - resource leaks
https://bugzilla.redhat.com/show_bug.cgi?id=891754
--------------------------------------------------------------------------------
================================================================================
python-httplib2-0.7.7-1.fc16 (FEDORA-2013-0353)
A comprehensive HTTP client library
--------------------------------------------------------------------------------
Update Information:
Upstream update to 0.7.7
Which says:
0.7.7
More fixes for App Engine, now less likely to swallow important exceptions.
Adding proxy_info_from_* methods to Python3. Reviewed in
https://codereview.appspot.com/6588078/.
Added GeoTrust cert
Make httplib2.Http() instances pickleable. Reviewed in
https://codereview.appspot.com/6506074/
The following issues have been fixed:
229 python3 httplib2 clobbers multiple headers of same key
230 Expose meaningful exception for App Engine URLFetch ResponseTooLargeError
231 Expose App Engine URLFetch DeadlineExceededError for debugging purposes
0.7.6
Fixes for App Engine 2.7.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 2 2013 Ding-Yi Chen <dchen at redhat.com> - 0.7.7-1
- Upstream update to 0.7.7
* Sat Aug 4 2012 David Malcolm <dmalcolm(a)redhat.com> - 0.7.4-7
- rebuild for
https://fedoraproject.org/wiki/Features/Python_3.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #857431 - Version 0.7.6 is available upstream
https://bugzilla.redhat.com/show_bug.cgi?id=857431
--------------------------------------------------------------------------------
================================================================================
qt-4.8.4-5.fc16 (FEDORA-2013-0270)
Qt toolkit
--------------------------------------------------------------------------------
Update Information:
This build fixes a security issue where QSslSocket may report incorrect errors when
certificate verification fails. For more information:
http://lists.qt-project.org/pipermail/announce/2013-January/000020.html
This build also produces a new qt-designer-plugin-webkit subpackage containing QtWebKit
designer plugin.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 4 2013 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.4-5
- QGtkStyle was unable to detect the current GTK+ theme (#702493, QTBUG-5545))
* Fri Jan 4 2013 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.4-4
- QSslSocket may report incorrect errors when certificate verification fails
* Thu Jan 3 2013 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.4-3
- -x11: %exclude %{_qt4_plugindir}/designer/libqwebview.so
* Sun Dec 16 2012 Rex Dieter <rdieter(a)fedoraproject.org> 1:4.8.4-2
- -designer-plugin-webkit subpkg (#887501)
- fix/prune/changelog
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #891955 - qt: QSslSocket might report inappropriate errors when certificate
verification fails
https://bugzilla.redhat.com/show_bug.cgi?id=891955
--------------------------------------------------------------------------------
================================================================================
rachota-2.3-5.20130104cvs.fc16 (FEDORA-2013-0346)
Straightforward timetracking
--------------------------------------------------------------------------------
Update Information:
Fixes an infinite loop on exit
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 5 2013 Sebastien Willmann <sebastien.willmann(a)gmail.com> -
2.3-5.20130104cvs
- Update to last cvs version
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.3-4.20120110cvs
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2013.01.02-1.fc16 (FEDORA-2013-0351)
Small command-line program to download videos from YouTube
--------------------------------------------------------------------------------
Update Information:
New upstream upgrade
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 6 2013 Matěj Cepl <mcepl(a)redhat.com> - 2013.01.02-1
- Update to new release (fix #880270)
* Tue Oct 23 2012 Till Maas <opensource(a)till.name> - 2012.10.09-1
- Update to new release
- Update BR: add pandoc
- install make target
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #880270 - youtube-dl-2013.01.02 is available
https://bugzilla.redhat.com/show_bug.cgi?id=880270
--------------------------------------------------------------------------------