The following Fedora 16 Security updates need testing:
Age URL
1
https://admin.fedoraproject.org/updates/FEDORA-2012-11813/xfig-3.2.5-32.b...
1
https://admin.fedoraproject.org/updates/FEDORA-2012-11843/libvirt-0.9.6.2...
1
https://admin.fedoraproject.org/updates/FEDORA-2012-11870/rubygem-actionp...
40
https://admin.fedoraproject.org/updates/FEDORA-2012-10314/revelation-0.4....
5
https://admin.fedoraproject.org/updates/FEDORA-2012-11737/transfig-3.2.5d...
1
https://admin.fedoraproject.org/updates/FEDORA-2012-11880/rubygem-actives...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-11929/munin-2.0.5-1.fc16
5
https://admin.fedoraproject.org/updates/FEDORA-2012-11576/python-djblets-...
1
https://admin.fedoraproject.org/updates/FEDORA-2012-11872/emacs-23.3-10.fc16
1
https://admin.fedoraproject.org/updates/FEDORA-2012-11890/automake-1.12.2...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-11934/libotr-3.2.1-1....
0
https://admin.fedoraproject.org/updates/FEDORA-2012-11928/glibc-2.14.90-2...
38
https://admin.fedoraproject.org/updates/FEDORA-2012-10402/bcfg2-1.2.3-1.fc16
6
https://admin.fedoraproject.org/updates/FEDORA-2012-11557/wireshark-1.6.9...
12
https://admin.fedoraproject.org/updates/FEDORA-2012-11464/bind-dyndb-ldap...
2
https://admin.fedoraproject.org/updates/FEDORA-2012-11746/ImageMagick-6.7...
10
https://admin.fedoraproject.org/updates/FEDORA-2012-11476/drupal6-og-2.4-...
10
https://admin.fedoraproject.org/updates/FEDORA-2012-11526/dokuwiki-0-0.11...
2
https://admin.fedoraproject.org/updates/FEDORA-2012-11785/xen-4.1.3-1.fc16
5
https://admin.fedoraproject.org/updates/FEDORA-2012-11648/mingw32-gdk-pix...
111
https://admin.fedoraproject.org/updates/FEDORA-2012-6614/gdb-7.3.50.20110...
The following Fedora 16 Critical Path updates have yet to be approved:
Age URL
0
https://admin.fedoraproject.org/updates/FEDORA-2012-11928/glibc-2.14.90-2...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-11947/system-config-u...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-11961/libfm-1.0-1.fc1...
1
https://admin.fedoraproject.org/updates/FEDORA-2012-11797/phonon-backend-...
5
https://admin.fedoraproject.org/updates/FEDORA-2012-11673/tar-1.26-5.fc16
5
https://admin.fedoraproject.org/updates/FEDORA-2012-11595/virtuoso-openso...
5
https://admin.fedoraproject.org/updates/FEDORA-2012-11669/mysql-5.5.27-1....
5
https://admin.fedoraproject.org/updates/FEDORA-2012-11630/kde-l10n-4.8.5-...
12
https://admin.fedoraproject.org/updates/FEDORA-2012-11440/zlib-1.2.5-7.fc16
13
https://admin.fedoraproject.org/updates/FEDORA-2012-11411/selinux-policy-...
The following builds have been pushed to Fedora 16 updates-testing
cgnslib-3.1-3.r4.fc16
clean-extra-utils-0.1-2.fc16
eigen3-3.0.6-1.fc16
glibc-2.14.90-24.fc16.9
launchy-2.5-5.fc16
libfm-1.0-1.fc16
libotr-3.2.1-1.fc16
muffin-1.0.2-2.fc16
munin-2.0.5-1.fc16
opensips-1.8.1-1.fc16
pcmanfm-1.0-1.fc16
perl-Web-Scraper-0.36-2.fc16
pyobd-0.9.2.2-1.fc16
python-virtualenv-1.7.2-1.fc16
rpmlint-1.4-8.fc16
rubygem-ruby-rc4-0.1.5-4.fc16
system-config-users-1.2.116-1.fc16
Details about builds:
================================================================================
cgnslib-3.1-3.r4.fc16 (FEDORA-2012-11940)
Computational Fluid Dynamics General Notation System
--------------------------------------------------------------------------------
Update Information:
Updated to 3.1-3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 15 2012 Shakthi Kannan <shakthimaan [AT] fedoraproject DOT org> 3.1-3.r4
- Updated to 3.1.3-4
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.5-8.r2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Tue May 15 2012 Orion Poplawski <orion(a)cora.nwra.com> - 2.5-7.rc2
- Rebuild for hdf5
- Explicitly require version of hdf5 built with
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.5-6.r2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #847634 - cgnslib-3.1/cgnslib_3.1.3-4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=847634
--------------------------------------------------------------------------------
================================================================================
clean-extra-utils-0.1-2.fc16 (FEDORA-2012-11937)
A collection of extra libraries and utilities for the Clean programming language
--------------------------------------------------------------------------------
Update Information:
First import
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #847406 - Review Request: clean-extra-utils - A collection of extra libraries
and utilities for the Clean programming language
https://bugzilla.redhat.com/show_bug.cgi?id=847406
--------------------------------------------------------------------------------
================================================================================
eigen3-3.0.6-1.fc16 (FEDORA-2012-11954)
A lightweight C++ template library for vector and matrix math
--------------------------------------------------------------------------------
Update Information:
Eigen3 release 3.0.6
This release cleans up a lot of compiler warnings during use. For a full list of
enhancements and fixes, see
http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.0.6
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 28 2012 Tim Niemueller <tim(a)niemueller.de> - 3.0.6-1
- Update to release 3.0.6 (fixes GCC 4.7 warnings)
--------------------------------------------------------------------------------
================================================================================
glibc-2.14.90-24.fc16.9 (FEDORA-2012-11928)
The GNU libc libraries
--------------------------------------------------------------------------------
Update Information:
- Fix integer overflow leading to buffer overflow in strto* (#847718)
Avoid unbound alloca in vfprintf. (#841318)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 15 2012 Jeff Law <law(a)redhat.com> - 2.14.90-24.fc16.9
- Fix integer overflow leading to buffer overflow in strto* (#847718)
* Tue Jul 31 2012 Patsy Franklin <patsy(a)redhat.com> - 2.14.90-24.fc16.8
- Avoid unbound alloca in vfprintf. (#841318)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #847715 - CVE-2012-3480 glibc: Integer overflows, leading to stack-based
buffer overflows in strto* related routines
https://bugzilla.redhat.com/show_bug.cgi?id=847715
--------------------------------------------------------------------------------
================================================================================
launchy-2.5-5.fc16 (FEDORA-2012-11946)
Open Source Keystroke Launcher
--------------------------------------------------------------------------------
Update Information:
Keystroke launcher inspired by MacOS Quicksilver.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #657948 - Review Request: launchy - open source keystroke launcher inspired by
MacOS Quicksilver
https://bugzilla.redhat.com/show_bug.cgi?id=657948
--------------------------------------------------------------------------------
================================================================================
libfm-1.0-1.fc16 (FEDORA-2012-11961)
GIO-based library for file manager-like programs
--------------------------------------------------------------------------------
Update Information:
libfm / pcmanfm 1.0 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 15 2012 Mamoru Tasaka <mtasaka(a)fedoraproject.org> - 1.0-1
- 1.0 release
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.1.17-1.2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.1.17-1.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libotr-3.2.1-1.fc16 (FEDORA-2012-11934)
Off-The-Record Messaging library and toolkit
--------------------------------------------------------------------------------
Update Information:
Updated to 3.2.1, updates patch for rhbz#846377, CVE-2012-3461
Patch for multiple heap-based buffer overflows in the Base64
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 15 2012 Paul Wouters <pwouters(a)redhat.com> - 3.2.1-1
- Updated to 3.2.1, updates patch for rhbz#846377, CVE-2012-3461
* Wed Aug 8 2012 Paul Wouters <pwouters(a)redhat.com> - 3.2.0-7
- Patch for Multiple heap-based buffer overflows in the Base64 decoder
(rhbz#846377, upstream will not release 3.2.1 for this)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #846377 - CVE-2012-3461 libotr: Multiple heap-based buffer overflows in the
Base64 decoder
https://bugzilla.redhat.com/show_bug.cgi?id=846377
--------------------------------------------------------------------------------
================================================================================
muffin-1.0.2-2.fc16 (FEDORA-2012-11920)
Window and compositing manager based on Clutter
--------------------------------------------------------------------------------
Update Information:
move gir file to devel
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 14 2012 Leigh Scott <leigh123linux(a)googlemail.com> - 1.0.2-2
- move gir file to devel
- remove .gz extension from the man files
--------------------------------------------------------------------------------
================================================================================
munin-2.0.5-1.fc16 (FEDORA-2012-11929)
Network-wide graphing framework (grapher/gatherer)
--------------------------------------------------------------------------------
Update Information:
Updated to 2.0.5
Update to munin 2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 14 2012 D. Johnson <fenris02(a)fedoraproject.org> - 2.0.5-1
- Updated to 2.0.5
- BZ# 603344 / upstream 1180, ACPI thermal information changed with 3.x kernels
* Tue Aug 7 2012 D. Johnson <fenris02(a)fedoraproject.org> - 2.0.4-3
- BZ# 823533 "hddtemp_smartctl plugin has a bug" - upstream patched
- BZ# 825820 Munin memcache plugin requires "perl(Cache::Memcached)"
- BZ# 834055 Munin updates changing permissions, conflicts with what munin-check does
- BZ# 812893,812894,839786,840496 - updated to munin2
* Sun Aug 5 2012 D. Johnson <fenris02(a)fedoraproject.org> - 2.0.4-2
- Changing permissions on html directories to minimize cron messages.
* Sat Aug 4 2012 D. Johnson <fenris02(a)fedoraproject.org> - 2.0.4-1
- updated to 2.0.4
- backported el6 packaging items
* Tue Jul 24 2012 fenris02(a)fedoraproject.org - 2.0.3-1
- Adjust default conf.d entry.
- updated to 2.0.3
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jul 19 2012 D. Johnson <fenris02(a)fedoraproject.org> - 2.0.2-2
- fixed conflicts
* Sat Jul 14 2012 D. Johnson <fenris02(a)fedoraproject.org> - 2.0.2-1
- updated to 2.0.2
* Thu Jun 7 2012 D. Johnson <fenris02(a)fedoraproject.org> - 2.0.0-1
- initial 2.0 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #603344 - On install, Fedora selected all Linux swap partitions and entered
them for mounting in fstab
https://bugzilla.redhat.com/show_bug.cgi?id=603344
[ 2 ] Bug #823533 - hddtemp_smartctl plugin has a bug
https://bugzilla.redhat.com/show_bug.cgi?id=823533
[ 3 ] Bug #825820 - Libvirt is missing important hooks
https://bugzilla.redhat.com/show_bug.cgi?id=825820
[ 4 ] Bug #834055 - Munin updates changing permissions, conflicts with what munin-check
does
https://bugzilla.redhat.com/show_bug.cgi?id=834055
[ 5 ] Bug #812893 - munin various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=812893
[ 6 ] Bug #812894 - munin various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=812894
[ 7 ] Bug #839786 - RFE: Update munin to 2.0.x release
https://bugzilla.redhat.com/show_bug.cgi?id=839786
[ 8 ] Bug #840496 - Update to upstream 2.0.2
https://bugzilla.redhat.com/show_bug.cgi?id=840496
--------------------------------------------------------------------------------
================================================================================
opensips-1.8.1-1.fc16 (FEDORA-2012-11936)
Open Source SIP Server
--------------------------------------------------------------------------------
Update Information:
* Ver. 1.8.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 15 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 1.8.1-1
- Ver. 1.8.1
- Dropped all upstreamed patches
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.8.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Mon Jul 9 2012 Petr Pisar <ppisar(a)redhat.com> - 1.8.0-2
- Perl 5.16 rebuild
* Tue Jul 3 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 1.8.0-1
- update to 1.8.0
* Fri Jun 8 2012 Petr Pisar <ppisar(a)redhat.com> - 1.7.2-8
- Perl 5.16 rebuild
* Sat May 12 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 1.7.2-7
- Change %define to %global
* Sat May 12 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 1.7.2-6
- Added missing docs
* Fri May 11 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 1.7.2-5
- Fixed conditional building with Oracle DB
* Sat Apr 28 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 1.7.2-4
- Fixes for systemd unit
* Sun Apr 22 2012 Remi Collet <remi(a)fedoraproject.org> - 1.7.2-3
- rebuild against libmemcached.so.10
--------------------------------------------------------------------------------
================================================================================
pcmanfm-1.0-1.fc16 (FEDORA-2012-11961)
Extremly fast and lightweight file manager
--------------------------------------------------------------------------------
Update Information:
libfm / pcmanfm 1.0 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 15 2012 Mamoru Tasaka <mtasaka(a)fedoraproject.org> - 1.0-1
- 1.0 release
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.10-2.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jan 5 2012 Mamoru Tasaka <mtasaka(a)fedoraproject.org> - 0.9.10-2
- F-17: rebuild against gcc47
--------------------------------------------------------------------------------
================================================================================
perl-Web-Scraper-0.36-2.fc16 (FEDORA-2012-11939)
Web Scraping Toolkit using HTML and CSS Selectors or XPath expressions
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
================================================================================
pyobd-0.9.2.2-1.fc16 (FEDORA-2012-11950)
OBD-II (SAE-J1979) compliant scantool software
--------------------------------------------------------------------------------
Update Information:
This is new package that provides an OBD-II (SAE-J1979) compliant scantool software. It
was written entirely in Python. It is meant to interface with the low cost ELM 32x devices
such as ELM-USB.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #841199 - Review Request: pyobd - OBD-II (SAE-J1979) compliant scantool
software
https://bugzilla.redhat.com/show_bug.cgi?id=841199
--------------------------------------------------------------------------------
================================================================================
python-virtualenv-1.7.2-1.fc16 (FEDORA-2012-11921)
Tool to create isolated Python environments
--------------------------------------------------------------------------------
Update Information:
See changelog at:
http://pypi.python.org/pypi/virtualenv#id2
Multiple bugfixes. See
http://pypi.python.org/pypi/virtualenv/1.7.1.2 for information.
Multiple bugfixes. See
http://pypi.python.org/pypi/virtualenv/1.7.1.2 for information.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 14 2012 Steve Milner <me(a)stevemilner.org> - 1.7.2-1
- Update for upstream bug fixes.
- Added path for versioned binary.
- Patch no longer required.
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.7.1.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #799733 - 1.7.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=799733
--------------------------------------------------------------------------------
================================================================================
rpmlint-1.4-8.fc16 (FEDORA-2012-11932)
Tool for checking common errors in RPM packages
--------------------------------------------------------------------------------
Update Information:
Update license list, apply correction to python3 magic number.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 14 2012 Tom Callaway <spot(a)fedoraproject.org> - 1.4-8
- add magic number fix for python 3 (bz845972)
- update license list
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Mon Jan 23 2012 Toshio Kuratomi <toshio(a)fedoraproject.org> - 1.4-6
- Patch to fix messages that contain unicode summaries
https://bugzilla.redhat.com/show_bug.cgi?id=783912
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Thu Dec 15 2011 Tom Callaway <spot(a)fedoraproject.org> - 1.4-4
- Do not throw an error on .desktop files set +x. (bz 767978)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #751288 - rpmlint-1.3-2.fc15 does not recognize diffmark license
https://bugzilla.redhat.com/show_bug.cgi?id=751288
[ 2 ] Bug #845972 - rpmlint uses wrong magic number for Python 3.3 bytecode
https://bugzilla.redhat.com/show_bug.cgi?id=845972
--------------------------------------------------------------------------------
================================================================================
rubygem-ruby-rc4-0.1.5-4.fc16 (FEDORA-2012-11935)
Pure Ruby implementation of the RC4 algorithm
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #845819 - Review Request: rubygem-ruby-rc4 - Pure Ruby implementation of the
RC4 algorithm
https://bugzilla.redhat.com/show_bug.cgi?id=845819
--------------------------------------------------------------------------------
================================================================================
system-config-users-1.2.116-1.fc16 (FEDORA-2012-11947)
A graphical interface for administering users and groups
--------------------------------------------------------------------------------
Update Information:
Fix account expiration if inactive default is set.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 15 2012 Nils Philippsen <nils(a)redhat.com> - 1.2.116-1
- fix account expiration if inactive default is set
- pull updated translations
* Wed Apr 18 2012 Nils Philippsen <nils(a)redhat.com> - 1.2.115-1
- firstboot: don't abuse window hints, consolidate code (#811383)
--------------------------------------------------------------------------------