The following Fedora 16 Security updates need testing:
Age URL
0
https://admin.fedoraproject.org/updates/FEDORA-2012-11813/xfig-3.2.5-32.b...
39
https://admin.fedoraproject.org/updates/FEDORA-2012-10314/revelation-0.4....
3
https://admin.fedoraproject.org/updates/FEDORA-2012-11737/transfig-3.2.5d...
4
https://admin.fedoraproject.org/updates/FEDORA-2012-11576/python-djblets-...
36
https://admin.fedoraproject.org/updates/FEDORA-2012-10402/bcfg2-1.2.3-1.fc16
4
https://admin.fedoraproject.org/updates/FEDORA-2012-11557/wireshark-1.6.9...
10
https://admin.fedoraproject.org/updates/FEDORA-2012-11464/bind-dyndb-ldap...
10
https://admin.fedoraproject.org/updates/FEDORA-2012-11474/glibc-2.14.90-2...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-11746/ImageMagick-6.7...
8
https://admin.fedoraproject.org/updates/FEDORA-2012-11476/drupal6-og-2.4-...
8
https://admin.fedoraproject.org/updates/FEDORA-2012-11526/dokuwiki-0-0.11...
0
https://admin.fedoraproject.org/updates/FEDORA-2012-11785/xen-4.1.3-1.fc16
4
https://admin.fedoraproject.org/updates/FEDORA-2012-11651/munin-2.0.4-3.fc16
4
https://admin.fedoraproject.org/updates/FEDORA-2012-11648/mingw32-gdk-pix...
4
https://admin.fedoraproject.org/updates/FEDORA-2012-11547/libotr-3.2.0-7....
109
https://admin.fedoraproject.org/updates/FEDORA-2012-6614/gdb-7.3.50.20110...
The following Fedora 16 Critical Path updates have yet to be approved:
Age URL
0
https://admin.fedoraproject.org/updates/FEDORA-2012-11797/phonon-backend-...
4
https://admin.fedoraproject.org/updates/FEDORA-2012-11673/tar-1.26-5.fc16
4
https://admin.fedoraproject.org/updates/FEDORA-2012-11595/virtuoso-openso...
4
https://admin.fedoraproject.org/updates/FEDORA-2012-11669/mysql-5.5.27-1....
4
https://admin.fedoraproject.org/updates/FEDORA-2012-11630/kde-l10n-4.8.5-...
10
https://admin.fedoraproject.org/updates/FEDORA-2012-11474/glibc-2.14.90-2...
10
https://admin.fedoraproject.org/updates/FEDORA-2012-11440/zlib-1.2.5-7.fc16
11
https://admin.fedoraproject.org/updates/FEDORA-2012-11411/selinux-policy-...
The following builds have been pushed to Fedora 16 updates-testing
drupal7-libraries-2.0-0.fc16
drupal7-pathauto-1.2-1.fc16
drupal7-token-1.2-1.fc16
ghc-chalmers-lava2000-1.2.0-1.fc16
gphotoframe-1.5.1-2.fc16
java-1.7.0-openjdk-1.7.0.5-2.2.1.fc16.7
kio_gopher-0.1.4-1.fc16
libmatecomponent-1.4.0-8.fc16
libmatewnck-1.4.0-3.fc16
libmnl-1.0.3-4.fc16
mate-dialogs-1.4.0-2.fc16
phonon-backend-gstreamer-4.6.2-1.fc16
pokerth-0.9.5-4.fc16
rpmrebuild-2.8-1.fc16
usb_modeswitch-data-20120531-1.fc16
uuid-1.6.2-9.fc16
xfig-3.2.5-32.b.fc16
zarafa-7.0.9-1.fc16
Details about builds:
================================================================================
drupal7-libraries-2.0-0.fc16 (FEDORA-2012-11819)
The common denominator for all Drupal components and external libraries
--------------------------------------------------------------------------------
Update Information:
Update to 2.0
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
drupal7-pathauto-1.2-1.fc16 (FEDORA-2012-11795)
Automatically generates path aliases
--------------------------------------------------------------------------------
Update Information:
New upstream version,
http://drupal.org/node/1721024.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 13 2012 Peter Borsa <peter.borsa(a)gmail.com> - 1.2-1
- Update to upstream release 1.2
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #847637 - drupal7-pathauto-1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=847637
--------------------------------------------------------------------------------
================================================================================
drupal7-token-1.2-1.fc16 (FEDORA-2012-11823)
Provides a method for site designers to control content presentation
--------------------------------------------------------------------------------
Update Information:
New upstream version,
http://drupal.org/node/1722888.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 13 2012 Peter Borsa <peter.borsa(a)gmail.com> - 1.2-1
- New upstream version.
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #847638 - drupal7-token-1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=847638
--------------------------------------------------------------------------------
================================================================================
ghc-chalmers-lava2000-1.2.0-1.fc16 (FEDORA-2012-11832)
Haskell chalmers-lava2000 library
--------------------------------------------------------------------------------
Update Information:
Updated to 1.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 13 2012 Shakthi Kannan <shakthimaan at fedoraproject dot org> - 1.2.0-1
- spec file template generated by cabal2spec-0.25.5
- Updated to 1.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #847642 - ghc-chalmers-lava2000-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=847642
--------------------------------------------------------------------------------
================================================================================
gphotoframe-1.5.1-2.fc16 (FEDORA-2012-11805)
Photo Frame Gadget for the GNOME Desktop
--------------------------------------------------------------------------------
Update Information:
A bug was found that gphotoframe cannot handle certain jpeg files containg somewhat
"malformed" exif file. This new rpm will fix this issue.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 19 2012 Mamoru Tasaka <mtasaka(a)fedoraproject.org> - 1.5.1-2
- Handle exif file with zero denominator on geometry information
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #845418 - [abrt] gphotoframe-1.5.1-1.fc17:
parseexif.py:73:get_geo:ZeroDivisionError: float division by zero
https://bugzilla.redhat.com/show_bug.cgi?id=845418
--------------------------------------------------------------------------------
================================================================================
java-1.7.0-openjdk-1.7.0.5-2.2.1.fc16.7 (FEDORA-2012-11788)
OpenJDK Runtime Environment
--------------------------------------------------------------------------------
Update Information:
-package version is now sync with icedtea version
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
kio_gopher-0.1.4-1.fc16 (FEDORA-2012-11798)
Gopher KIO slave for Konqueror
--------------------------------------------------------------------------------
Update Information:
An update of kio_gopher to the latest upstream release, version 0.1.4, which installs the
documentation (which was previously included only in the source tarball).
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 12 2012 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 0.1.4-1
- update to 0.1.4
- update URL and Source0 tags
- add versioned kdelibs4 dependency
- package documentation (use %find_lang --with-kde), now installed by upstream
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.1.3-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.1.3-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libmatecomponent-1.4.0-8.fc16 (FEDORA-2012-11827)
Libraries for matecomponent package of MATE-Desktop
--------------------------------------------------------------------------------
Update Information:
Libraries for matecomponent.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #844080 - Review Request: libmatecomponent -- Libraries for matecomponent
package of MATE-Desktop
https://bugzilla.redhat.com/show_bug.cgi?id=844080
--------------------------------------------------------------------------------
================================================================================
libmatewnck-1.4.0-3.fc16 (FEDORA-2012-11811)
MATE Desktop Window Navigator Construction Kit libraries
--------------------------------------------------------------------------------
Update Information:
MATE window navigator construction kit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #841001 - Review Request: libmatewnck - MATE Desktop Window Navigator
Construction Kit libraries
https://bugzilla.redhat.com/show_bug.cgi?id=841001
--------------------------------------------------------------------------------
================================================================================
libmnl-1.0.3-4.fc16 (FEDORA-2012-11824)
A minimalistic Netlink library
--------------------------------------------------------------------------------
Update Information:
1. add static library package 2. fix multilib conflict issue
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 12 2012 Hushan Jia <hushan.jia(a)gmail.com> - 1.0.3-4
- use %doc for each arch to avoid multilib conflict (rhbz 831413)
* Sat Aug 4 2012 Philip Prindeville <philipp(a)fedoraproject.org> - 1.0.3-3
- Add .a to devel package (rhbz 845793)
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #845793 - Include .a in -devel packaging for use in building Poco static libs
https://bugzilla.redhat.com/show_bug.cgi?id=845793
[ 2 ] Bug #831413 - libmnl-devel multilib conflict
https://bugzilla.redhat.com/show_bug.cgi?id=831413
--------------------------------------------------------------------------------
================================================================================
mate-dialogs-1.4.0-2.fc16 (FEDORA-2012-11825)
Displays dialog boxes from shell scripts
--------------------------------------------------------------------------------
Update Information:
Display dialog boxes from shell scripts
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #846660 - Review Request: mate-dialogs -- Display dialog boxes from shell
scripts
https://bugzilla.redhat.com/show_bug.cgi?id=846660
--------------------------------------------------------------------------------
================================================================================
phonon-backend-gstreamer-4.6.2-1.fc16 (FEDORA-2012-11797)
Gstreamer phonon backend
--------------------------------------------------------------------------------
Update Information:
This is a bugfix release, which addresses some bugs related to gapless playback on certain
systems.
See also:
http://wm161.net/2012/08/13/phonon-gstreamer-4-6-2/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 13 2012 Rex Dieter <rdieter(a)fedoraproject.org> 2:4.6.2-1
- 4.6.2
--------------------------------------------------------------------------------
================================================================================
pokerth-0.9.5-4.fc16 (FEDORA-2012-11799)
A Texas-Holdem poker game
--------------------------------------------------------------------------------
Update Information:
new and working version.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 12 2012 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> - 0.9.5-4
- fix a mistake during git merge
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jul 19 2012 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> - 0.9.5-2
- add missing BR tinyxml-devel
* Tue Jul 17 2012 Itamar Reis Peixoto <itamar(a)ispbrasil.com.br> - 0.9.5-1
- new version
* Tue Feb 28 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8.3-13
- Rebuilt for c++ ABI breakage
* Mon Jan 30 2012 Bruno Wolff III <bruno(a)wolff.to> - 0.8.3-12
- Fix for gcc 4.7
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8.3-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Sat Nov 26 2011 Bruno Wolff III <bruno(a)wolff.to> - 0.8.3-10
- Rebuild for boost 1.48 soname bump
--------------------------------------------------------------------------------
================================================================================
rpmrebuild-2.8-1.fc16 (FEDORA-2012-11818)
A tool to build rpm file from rpm database
--------------------------------------------------------------------------------
Update Information:
Here is where you give an explanation of your update.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 10 2012 Anderson Silva <ansilva(a)redhat.com> - 2.8-1
- New package from upstream includes 2.7 version.
--------------------------------------------------------------------------------
================================================================================
usb_modeswitch-data-20120531-1.fc16 (FEDORA-2012-11826)
USB Modeswitch gets mobile broadband cards in operational mode
--------------------------------------------------------------------------------
Update Information:
New mobile devices added
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 18 2012 Dan Williams <dcbw(a)redhat.com> 20120531-1
- New upstream data release
- Handle failure of udevadm control --reload-rules (rh #824849)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #783645 - usb_modeswitch-data-20120531 is available
https://bugzilla.redhat.com/show_bug.cgi?id=783645
--------------------------------------------------------------------------------
================================================================================
uuid-1.6.2-9.fc16 (FEDORA-2012-11800)
Universally Unique Identifier library
--------------------------------------------------------------------------------
Update Information:
- fix generation of MAC address based uuids (#829532)
- fix debuginfo
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 19 2012 Michal Hlavinka <mhlavink(a)redhat.com> - 1.6.2-9
- enforce usage of our c(xx)flags
* Tue Jun 19 2012 Michal Hlavinka <mhlavink(a)redhat.com> - 1.6.2-8
- fix debuginfo
* Tue Jun 19 2012 Michal Hlavinka <mhlavink(a)redhat.com> - 1.6.2-7
- fix generation of MAC address based uuids (#829532),
patch by Philip Prindeville
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #829532 - uuid fails to generate v1 uuids based on local MAC address
https://bugzilla.redhat.com/show_bug.cgi?id=829532
--------------------------------------------------------------------------------
================================================================================
xfig-3.2.5-32.b.fc16 (FEDORA-2012-11813)
An X Window System tool for drawing basic vector graphics
--------------------------------------------------------------------------------
Update Information:
- Fix a stack overflow when importing 1.3 files (CVE-2009-4227)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 12 2012 Hans de Goede <hdegoede(a)redhat.com> - 3.2.5-32.b
- Fix a stack overflow when importing 1.3 files (CVE-2009-4227) (rhbz#543905)
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.2.5-31.b
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sun Feb 26 2012 Orion Poplawski <orion(a)cora.nwra.com> - 3.2.5-30.b
- Rebuild with Xaw3d 1.6.1
* Tue Feb 14 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 3.2.5-29.b
- Add patch from Debian for libpng 1.5
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.2.5-28.b
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Tue Dec 6 2011 Adam Jackson <ajax(a)redhat.com> - 3.2.5-27.b
- Rebuild for new libpng
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #543905 - CVE-2009-4227 CVE-2009-4228 Xfig, Transfig: Stack-based buffer
overflow by loading malformed .FIG files
https://bugzilla.redhat.com/show_bug.cgi?id=543905
--------------------------------------------------------------------------------
================================================================================
zarafa-7.0.9-1.fc16 (FEDORA-2012-11794)
Open Source Edition of the Zarafa Collaboration Platform
--------------------------------------------------------------------------------
Update Information:
Zarafa Collaboration Platform 7.0.9 final [36358]
=================================================
Backend
-------
* ZCP-10360, ZCP-10310 Zarafa-server 7.1.0 RC1 segfault.
* ZCP-10384, ZCP-10037 The zarafa client can deadlock on a reconnect.
* ZCP-10396, ZCP-10376 Zarafa-archiver doesn't detect copies and moves on
archive-on-delivery archived messages that are copied or moved before the archive_after
period has expired.
* ZCP-10398, ZCP-10374 Zarafa-archiver -C wrongfully deletes messages from the archive
if a copy/move detection fails or hasn't been execute.
* ZCP-10370, ZCP-10354 Cannot open archive folder in outlook.
* ZCP-10329, ZCP-10280 Extensive explanation needed for using za-aclsync.
* ZCP-10310, ZCP-10360 Zarafa-server 7.1.0 RC1 segfault. Rare case with outlook 2010
conversation view.
* ZCP-10354, ZCP-10370 Cannot open shared store that is used as archive store in
outlook.
* ZCP-10216, ZCP-10208 Since 7.1 version wizard rules are sometimes not processed
although the subject is matching
* ZCP-10183, Zarafa server crash when the ads server is unavailable.
* ZCP-10188, ZCP-10183 Zarafa server crash when the ads server is unavailable
* ZCP-10299, ZCP-10291 Trying to attach a user store as an archive to itself will fail,
but only after preparing the store for archiving.
* ZCP-10137, ZCP-9858 Build with boost 1.50
* ZCP-10301, ZCP-10284 Accept generic PHP-Package format according to SLES standards
* ZCP-10320, ZCP-10294 valgrind warning in multiserver setup
* ZCP-10133, ZCP-10065 Race condition in ECUnknown possible when N threads
simultaneously release the last N references
* ZCP-10259, ZCP-10034 zarafa-server segfault in 7.0.7
* ZCP-10167, ZCP-10151 Zarafa --force-database-upgrade should give a proper message when
converting the database to unicode
* ZCP-10210, ZCP-10174 Off-by-one error in calculation of temporary path
* ZCP-10324, ZCP-10296 Server side errors during a streaming message export are not
properly handled by the client.
* ZCP-10135, ZCP-10071 Suboptimal performance when searching large addressbooks
* ZCP-10318, ZCP-10306 include path of php different than php file locations
* ZCP-10164, ZCP-10001 6.40 package does not remove .pyc files when upgrading to 7.1 -
causes breakage of spooler, dagent, ...
* ZCP-10243, ZCP-10194 Users see more deadlocks about lock in shared mode after 7.0.7
release
* ZCP-10274, Contacts provider shows empty rows for some contacts
* ZCP-10016, ZCP-10009 Unable to deliver this email
* ZCP-10189, ZCP-10165 Out of Office with large body is not saved
* ZCP-10288, ZCP-9949 Thunderbird will keep deleting restored emails.
* ZCP-10279, ZCP-10012 Fetching email status from gateway in blocks is very slow on
large folders
* ZCP-9976, ZCP-9815 Out of office message broken received in Mac Mail
* ZCP-10200, ZCP-10066 Upgrade from 6.40 to 7.0 doesn't always correctly do a
ldconfig in rpm files
* ZCP-10134, ZCP-10078 Don't show password while typing in install.sh
* ZCP-10265, ZCP-10225 ExpandRecips does not copy MAPIPDL recipient properties
* ZCP-10091, ZCP-10057 Indexing of attachment after OLE attachment fails
* ZCP-10278, ZCP-10224 Change default values openldap.cfg
WebAccess
---------
* ZCP-10406, ZCP-10333 Unable to open rules in Firefox 14+.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 13 2012 Robert Scheck <robert(a)fedoraproject.org> 7.0.9-1
- Upgrade to 7.0.9 (#847534)
* Sun Aug 12 2012 Rex Dieter <rdieter(a)fedoraproject.org> 7.0.8-2
- rebuild (boost)
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
7.0.8-1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #847534 - zarafa-7.0.8 FTBFS against boost-1.50
https://bugzilla.redhat.com/show_bug.cgi?id=847534
--------------------------------------------------------------------------------