The following Fedora 16 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-2012-10089/libtiff-3.9.6-1...
https://admin.fedoraproject.org/updates/FEDORA-2012-10175/wireshark-1.6.8...
https://admin.fedoraproject.org/updates/FEDORA-2012-9371/viewvc-1.1.15-1....
https://admin.fedoraproject.org/updates/FEDORA-2012-9978/php-ZendFramewor...
https://admin.fedoraproject.org/updates/FEDORA-2012-6614/gdb-7.3.50.20110...
https://admin.fedoraproject.org/updates/FEDORA-2012-9577/clamav-0.97.5-16...
https://admin.fedoraproject.org/updates/FEDORA-2012-10023/openldap-2.4.26...
https://admin.fedoraproject.org/updates/FEDORA-2012-7593/tomcat6-6.0.35-1...
https://admin.fedoraproject.org/updates/FEDORA-2012-8021/sudo-1.8.3p1-3.fc16
The following Fedora 16 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/FEDORA-2012-10203/selinux-policy-...
https://admin.fedoraproject.org/updates/FEDORA-2012-10089/libtiff-3.9.6-1...
https://admin.fedoraproject.org/updates/FEDORA-2012-10023/openldap-2.4.26...
https://admin.fedoraproject.org/updates/FEDORA-2012-10007/kernel-3.4.4-3....
https://admin.fedoraproject.org/updates/FEDORA-2012-9930/gmp-4.3.2-5.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9931/mdadm-3.2.5-3.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9866/elfutils-0.154-1...
https://admin.fedoraproject.org/updates/FEDORA-2012-9863/python-tempita-0...
https://admin.fedoraproject.org/updates/FEDORA-2012-9906/qrencode-3.3.1-1...
https://admin.fedoraproject.org/updates/FEDORA-2012-9800/mobile-broadband...
https://admin.fedoraproject.org/updates/FEDORA-2012-6994/upower-0.9.16-1....
https://admin.fedoraproject.org/updates/FEDORA-2012-3319/GConf2-3.2.3-4.fc16
The following builds have been pushed to Fedora 16 updates-testing
R-2.15.1-1.fc16
anki-1.2.11-1.fc16
console-setup-1.76-2.fc16
dovecot-2.0.21-1.fc16
gambas3-3.2.0-1.fc16
ghc-Diff-0.1.3-1.fc16
openerp-6.1-1.fc16
perl-Net-Twitter-3.18003-1.fc16
php-symfony2-Form-2.0.15-4.fc16
php-symfony2-Routing-2.0.15-3.fc16
php-symfony2-Security-2.0.15-3.fc16
php-symfony2-Validator-2.0.15-4.fc16
rkward-0.5.7-2.fc16.4
rpy-2.2.6-1.fc16
selinux-policy-3.10.0-90.fc16
smartmontools-5.43-1.fc16
Details about builds:
================================================================================
R-2.15.1-1.fc16 (FEDORA-2012-10206)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
Update to R 2.15.1. Rebuild rpy and rkward for new R (update rpy to 2.2.6). Fix dependency
issue with tex.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 2 2012 Tom Callaway <spot(a)fedoraproject.org> - 2.15.1-1
- update to 2.15.1
* Mon Jul 2 2012 Jindrich Novy <jnovy(a)redhat.com> - 2.15.0-4
- fix LaTeX and dvips dependencies (#836817)
* Mon May 7 2012 Tom Callaway <spot(a)fedoraproject.org> - 2.15.0-3
- rebuild for new libtiff
* Tue Apr 24 2012 Tom Callaway <spot(a)fedoraproject.org> - 2.15.0-2
- rebuild for new icu
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #836817 - R-core depends on texlive-latex
https://bugzilla.redhat.com/show_bug.cgi?id=836817
--------------------------------------------------------------------------------
================================================================================
anki-1.2.11-1.fc16 (FEDORA-2012-10210)
Flashcard program for using space repetition learning
--------------------------------------------------------------------------------
Update Information:
Update to new upstream release 1.2.11.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 1 2012 Christian Krause <chkr(a)fedoraproject.org> - 1.2.11-1
- Update to new upstream version 1.2.11 (BZ 819821)
- Remove patch (issue was fixed upstream)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #819821 - anki-1.2.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=819821
--------------------------------------------------------------------------------
================================================================================
console-setup-1.76-2.fc16 (FEDORA-2012-10224)
Tools for configuring the console using X Window System key maps
--------------------------------------------------------------------------------
Update Information:
Tools for configuring the console using X Window System keymaps
--------------------------------------------------------------------------------
================================================================================
dovecot-2.0.21-1.fc16 (FEDORA-2012-10215)
Secure imap and pop3 server
--------------------------------------------------------------------------------
Update Information:
- updated to 2.0.21
- imap-login: Memory leak fixed
- imap: Non-UTF8 input on SEARCH command parameters could have crashed
- auth: Fixed crash with DIGEST-MD5 when attempting to do master user login without master
passdbs.
- sdbox: Don't use more fds than necessary when copying mails.
- mdbox kept the user's storage locked a bit longer than it needed to
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 3 2012 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.0.21-1
- dovecot updated to 2.0.21
- imap-login: Memory leak fixed
- imap: Non-UTF8 input on SEARCH command parameters could have crashed
- auth: Fixed crash with DIGEST-MD5 when attempting to do master user
login without master passdbs.
- sdbox: Don't use more fds than necessary when copying mails.
- mdbox kept the user's storage locked a bit longer than it needed to
--------------------------------------------------------------------------------
================================================================================
gambas3-3.2.0-1.fc16 (FEDORA-2012-10199)
IDE based on a basic interpreter with object extensions
--------------------------------------------------------------------------------
Update Information:
Update to gambas3-3.2.0:
This new release fixes more than 100 bugs and adds more than 100 new features.
All Gambas 3.x versions will be backward-compatible, i.e. a program written in Gambas 3.0
version will be able to run unchanged with any Gambas 3.x version. But the contrary is
false: a program written with a specific Gambas 3.x version will not run with an older
version.
The main new feature of Gambas 3.2 is the new just-in-time compiler made by Emil Lenngren,
that can make a function or an entire class up to 100 times faster.
Otherwise the other main changes are:
* gb.gtk.opengl is a new component that allows to use OpenGL in
GTK+ applications.
* gb.media is a new component based on GStreamer.
* gb.ncurses is a new component based on the ncurses library
made by Tobias Boege.
* gb.xml has been entirely rewritten from scratch by Adrien
Prokopowicz.
* gb.xml.html is a new HTML generator component based on gb.xml.
* The IDE now has an integrated profiler.
* The IDE packager is more robust.
* SidePanel now can be transparent.
* New ON GOTO and ON GOSUB instructions.
* New Base64() and UnBase64() conversion functions.
* A new real-time Mandelbrot fractal generator that uses the JIT
compiler.
* Almost all gb.gtk controls are now transparent as in gb.qt4.
* A new MediaPlayer example based on the gb.media component.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 2 2012 Tom Callaway <spot(a)fedoraproject.org> - 3.2.0-1
- update to 3.2.0
* Mon Jul 2 2012 Marek Kasik <mkasik(a)redhat.com> - 3.1.1-4
- Rebuild (poppler-0.20.1)
* Tue May 29 2012 Tom Callaway <spot(a)fedoraproject.org> - 3.1.1-3
- add support for poppler 0.20
--------------------------------------------------------------------------------
================================================================================
ghc-Diff-0.1.3-1.fc16 (FEDORA-2012-10223)
A O(ND) diff algorithm in Haskell
--------------------------------------------------------------------------------
Update Information:
ghc-Diff provides a O(ND) diff algorithm in Haskell
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #664151 - Review Request: ghc-Diff - A O(ND) diff algorithm in Haskell
https://bugzilla.redhat.com/show_bug.cgi?id=664151
--------------------------------------------------------------------------------
================================================================================
openerp-6.1-1.fc16 (FEDORA-2012-10211)
Business Applications Server
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #817271 - Review Request:openerp - Business Applications Server
https://bugzilla.redhat.com/show_bug.cgi?id=817271
--------------------------------------------------------------------------------
================================================================================
perl-Net-Twitter-3.18003-1.fc16 (FEDORA-2012-10217)
Perl interface to the Twitter API
--------------------------------------------------------------------------------
Update Information:
Update to 3.18003.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 2 2012 Julian C. Dunn <jdunn(a)aquezada.com> - 3.18003-1
- Upgrade to 3.18003
* Mon Jun 25 2012 Petr Pisar <ppisar(a)redhat.com> - 3.18002-2
- Perl 5.16 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #836612 - perl-Net-Twitter-3.18003 is available
https://bugzilla.redhat.com/show_bug.cgi?id=836612
--------------------------------------------------------------------------------
================================================================================
php-symfony2-Form-2.0.15-4.fc16 (FEDORA-2012-10214)
Symfony2 Form Component
--------------------------------------------------------------------------------
Update Information:
Symfony2 Form Component
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #823071 - Review Request: php-symfony2-Form - Symfony2 Form Component
https://bugzilla.redhat.com/show_bug.cgi?id=823071
--------------------------------------------------------------------------------
================================================================================
php-symfony2-Routing-2.0.15-3.fc16 (FEDORA-2012-10201)
Symfony2 Routing Component
--------------------------------------------------------------------------------
Update Information:
The Routing Component maps an HTTP request to a set of configuration variables.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #823060 - Review Request: php-symfony2-Routing - Symfony2 Routing Component
https://bugzilla.redhat.com/show_bug.cgi?id=823060
--------------------------------------------------------------------------------
================================================================================
php-symfony2-Security-2.0.15-3.fc16 (FEDORA-2012-10222)
Symfony2 Security Component
--------------------------------------------------------------------------------
Update Information:
Security provides an infrastructure for sophisticated authorization systems,
which makes it possible to easily separate the actual authorization logic from
so called user providers that hold the users credentials. It is inspired by
the Java Spring framework.
Optional dependencies: DoctrineCommon and DoctrineDBAL
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #823075 - Review Request: php-symfony2-Security - Symfony2 Security Component
https://bugzilla.redhat.com/show_bug.cgi?id=823075
--------------------------------------------------------------------------------
================================================================================
php-symfony2-Validator-2.0.15-4.fc16 (FEDORA-2012-10218)
Symfony2 Validator Component
--------------------------------------------------------------------------------
Update Information:
Symfony2 Validator Component
Optional dependency: APC
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #823066 - Review Request: php-symfony2-Validator - Symfony2 Validator
Component
https://bugzilla.redhat.com/show_bug.cgi?id=823066
--------------------------------------------------------------------------------
================================================================================
rkward-0.5.7-2.fc16.4 (FEDORA-2012-10206)
Graphical frontend for R language
--------------------------------------------------------------------------------
Update Information:
Update to R 2.15.1. Rebuild rpy and rkward for new R (update rpy to 2.2.6). Fix dependency
issue with tex.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 2 2012 Tom Callaway <spot(a)fedoraproject.org> 0.5.7-2.4
- rebuild for R 2.15.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #836817 - R-core depends on texlive-latex
https://bugzilla.redhat.com/show_bug.cgi?id=836817
--------------------------------------------------------------------------------
================================================================================
rpy-2.2.6-1.fc16 (FEDORA-2012-10206)
Python interface to the R language
--------------------------------------------------------------------------------
Update Information:
Update to R 2.15.1. Rebuild rpy and rkward for new R (update rpy to 2.2.6). Fix dependency
issue with tex.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 4 2012 Tom Callaway <spot(a)fedoraproject.org> - 2.2.6-1
- update to 2.2.6, R 2.15.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #836817 - R-core depends on texlive-latex
https://bugzilla.redhat.com/show_bug.cgi?id=836817
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.10.0-90.fc16 (FEDORA-2012-10203)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
- Allow systemd-tmpfiles to delete boot flags - Add support for lightdm - Allow certmonger
to talk directly to Dogtag servers - Change labeling for /var/lib/cobbler/webui_sessions
to httpd_cobbler_rw_content_t - rhsmcertd reads the rpm database - Allow systemd-logind to
kill all process with different MCS - Allow apmd to create /var/run/pm-utils with the
correct label - Allow asterisk to read "unix" - Allow sudodomain to read usr
files - Allow policykit_auth_t to read sysfs - Dontaudit dhcpc to r/w networkmanger tmp
files - Add /var/run/cherokee\.pid labeling - Allow postfix-master to r/w pipes other
postfix domains - Allow apps which search /tmp also to read tmp_t lnk_file - Allow smbd to
stream connect to nmbd - Allow apm to request kernel module - Fixes for cloudform services
- Allow polipo to work as web caching
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 2 2012 Miroslav Grepl <mgrepl(a)redhat.com> 3.10.0-90
- Allow systemd-tmpfiles to delete boot flags
- Add support for lightdm
- Allow certmonger to talk directly to Dogtag servers
- Change labeling for /var/lib/cobbler/webui_sessions to httpd_cobbler_rw_content_t
- rhsmcertd reads the rpm database
- Allow systemd-logind to kill all process with different MCS
- Allow apmd to create /var/run/pm-utils with the correct label
- Allow asterisk to read "unix"
- Allow sudodomain to read usr files
- Allow policykit_auth_t to read sysfs
- Dontaudit dhcpc to r/w networkmanger tmp files
- Add /var/run/cherokee\.pid labeling
- Allow postfix-master to r/w pipes other postfix domains
- Allow apps which search /tmp also to read tmp_t lnk_file
- Allow smbd to stream connect to nmbd
- Allow apm to request kernel module
- Fixes for cloudform services
- Allow polipo to work as web caching
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #753446 - SELinux is preventing /usr/libexec/polkit-1/polkit-agent-helper-1
from 'read' accesses on the file online.
https://bugzilla.redhat.com/show_bug.cgi?id=753446
[ 2 ] Bug #758003 - SELinux is preventing /bin/mkdir from 'create' accesses on
the directory network.
https://bugzilla.redhat.com/show_bug.cgi?id=758003
[ 3 ] Bug #760379 - SELinux is preventing /bin/bash from 'getattr' accesses on
the blk_file /dev/sdb.
https://bugzilla.redhat.com/show_bug.cgi?id=760379
[ 4 ] Bug #760402 - SELinux is preventing /usr/libexec/colord from 'getattr'
accesses on the filesystem /media.
https://bugzilla.redhat.com/show_bug.cgi?id=760402
[ 5 ] Bug #766088 - SELinux is preventing /sbin/ifconfig from read, write access on the
file /tmp/ffiDfQL5C (deleted).
https://bugzilla.redhat.com/show_bug.cgi?id=766088
[ 6 ] Bug #766195 - SELinux is preventing
/var/lib/boinc/projects/cbl-boinc-server2.cs.technion.ac.il_superlinkattechnion/loadd_1.18_i686-pc-linux-gnu
from 'write' accesses on the directory /var/lib/boinc.
https://bugzilla.redhat.com/show_bug.cgi?id=766195
[ 7 ] Bug #766279 - SELinux is preventing /sbin/ifconfig from read, write access on the
file /tmp/ffisiQgkn (deleted).
https://bugzilla.redhat.com/show_bug.cgi?id=766279
[ 8 ] Bug #766609 - SELinux is preventing /usr/sbin/tgtd from 'read' accesses on
the file cpuinfo.
https://bugzilla.redhat.com/show_bug.cgi?id=766609
[ 9 ] Bug #811334 - SELinux constraint is preventing systemd-logind from killing
unconfined_t, unconfined_execmem_t
https://bugzilla.redhat.com/show_bug.cgi?id=811334
[ 10 ] Bug #816027 - SELinux is preventing /bin/mkdir from 'create' accesses on
the directory pm-utils.
https://bugzilla.redhat.com/show_bug.cgi?id=816027
[ 11 ] Bug #817128 - SELinux is preventing /usr/libexec/mysqld from 'read'
accesses on the файл unix.
https://bugzilla.redhat.com/show_bug.cgi?id=817128
[ 12 ] Bug #818882 - Default SELinux policy blocks asterisk file read
https://bugzilla.redhat.com/show_bug.cgi?id=818882
[ 13 ] Bug #821574 - SELinux is preventing /usr/bin/python2.7 from 'read'
accesses on the file /usr/include/python2.7/pyconfig-64.h.
https://bugzilla.redhat.com/show_bug.cgi?id=821574
[ 14 ] Bug #823100 - SELinux is preventing /usr/bin/polipo from 'name_connect'
accesses on the tcp_socket .
https://bugzilla.redhat.com/show_bug.cgi?id=823100
[ 15 ] Bug #824117 - SELinux is preventing /sbin/dhclient from read, write access on the
file /tmp/ffijp77VY (deleted).
https://bugzilla.redhat.com/show_bug.cgi?id=824117
[ 16 ] Bug #825447 - SELinux is preventing rhsmcertd from 'open' accesses on the
file update.
https://bugzilla.redhat.com/show_bug.cgi?id=825447
[ 17 ] Bug #828350 - SELinux is preventing /usr/sbin/cherokee from read, write access on
the file cherokee.pid.
https://bugzilla.redhat.com/show_bug.cgi?id=828350
[ 18 ] Bug #828739 - SELinux is preventing /usr/sbin/postdrop from 'read'
accesses on the fifo_file fifo_file.
https://bugzilla.redhat.com/show_bug.cgi?id=828739
[ 19 ] Bug #829792 - SELinux is preventing /sbin/ldconfig from 'read' accesses
on the lnk_file tmp.
https://bugzilla.redhat.com/show_bug.cgi?id=829792
[ 20 ] Bug #832537 - SELinux is preventing /usr/sbin/smbd from 'search' accesses
on the directory nmbd.
https://bugzilla.redhat.com/show_bug.cgi?id=832537
[ 21 ] Bug #833197 - SELinux is preventing acpid from 'module_request' accesses
on the system .
https://bugzilla.redhat.com/show_bug.cgi?id=833197
[ 22 ] Bug #836644 - the /forcefsck file not being removed after filesystem check
complete
https://bugzilla.redhat.com/show_bug.cgi?id=836644
--------------------------------------------------------------------------------
================================================================================
smartmontools-5.43-1.fc16 (FEDORA-2012-10196)
Tools for monitoring SMART capable hard disks
--------------------------------------------------------------------------------
Update Information:
- smartctl options '-g, --get' and '-s, --set' to get/set various ATA
settings: AAM, APM, Read look-ahead, Write cache, Security (freeze), Standby mode/timer.
- smartd directive '-e' to set (most of) the above settings on startup.
- smartctl options '-f hex' and '-f hex,[id|val]'.
- smartctl does not start ATA self-test if another test is already running. Override with
new option '-t force'.
- smartctl supports extended self-test polling times greater than 255 minutes.
- Controller-independent SAT detection: '-d sat,auto[+TYPE]'.
- smartd.conf DEFAULT directive.
- Many HDD, SSD and USB additions to drive database.
- Linux and FreeBSD: Support for SATA disks behind Areca SAS RAID controllers and HP Smart
Array controllers.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 2 2012 Michal Hlavinka <mhlavink(a)redhat.com> - 1:5.43-1
- smartmontools updated to 5.43
--------------------------------------------------------------------------------