The following Fedora 16 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-2011-17111/openstack-nova-2011.3-13.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-14691/tomcat6-6.0.32-19.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-17235/glibc-2.14.90-24.fc16.3
https://admin.fedoraproject.org/updates/FEDORA-2011-17248/tor-0.2.2.35-1601.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-17065/ipmitool-1.8.11-8.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-17101/icu-4.6-3.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-16966/jasper-1.900.1-18.fc16
The following Fedora 16 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/phonon-4.6.0-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-17235/glibc-2.14.90-24.fc16.3
https://admin.fedoraproject.org/updates/FEDORA-2011-17256/xorg-x11-server-1.11.3-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-17215/telepathy-glib-0.16.4-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-17205/libical-0.48-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-17209/evolution-data-server-3.2.2-2.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-17012/polkit-qt-0.103.0-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-15301/lxpanel-0.5.8-1.fc16,lxinput-0.3.1-1.fc16,lxsession-edit-0.2.0-1.fc16,lxrandr-0.1.2-1.fc16,lxpolkit-0.1.0-1.fc16,lxterminal-0.1.11-1.fc16,lxshortcut-0.1.2-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2011-15013/dnsmasq-2.59-2.fc16
The following builds have been pushed to Fedora 16 updates-testing
3Depict-0.0.9-1.fc16
apcupsd-3.14.10-2.fc16
chntpw-0.99.6-17.110511.fc16
cxxtest-3.10.1-5.fc16
dvisvgm-1.0.10-1.fc16
eigen3-3.0.4-1.fc16
gccxml-0.9.0-0.7.20111218.fc16
glibc-2.14.90-24.fc16.3
gnome-shell-extensions-3.2.3-1.fc16
gxneur-0.15.0-2.fc16
kchmviewer-6.0-1.fc16
libclastfm-0.4-0.1.20111214gitcc78dde5.fc16
libphidget-2.1.8.20111121-1.fc16
logwatch-7.4.0-6.20110328svn50.fc16
mediatomb-0.12.1-14.fc16
octave-communications-1.1.0-2.fc16
php-pear-Validate-0.8.5-1.fc16
php-phpunit-PHPUnit-3.6.5-1.fc16
php-phpunit-PHPUnit-Selenium-1.1.3-1.fc16
tor-0.2.2.35-1601.fc16
vmpk-0.4.0-4.fc16
xneur-0.15.0-2.fc16
xorg-x11-server-1.11.3-1.fc16
Details about builds:
================================================================================
3Depict-0.0.9-1.fc16 (FEDORA-2011-17234)
Valued 3D point cloud visualization and analysis
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 6 2011 Adam Jackson <mycae(a!t)yahoo.com> - 0.0.9-1
- Rebuild for new libpng
* Tue Dec 6 2011 Adam Jackson <ajax@xxxxxxxxxx> - 0.0.8-3
- Rebuild for new libpng
* Sat Oct 29 2011 D Haley <mycae(a!t)yahoo.com> - 0.0.8-2
- Post release fixes for various crash bugs
* Sun Oct 23 2011 D Haley <mycae(a!t)yahoo.com> - 0.0.8-1
- Update to 0.0.8
--------------------------------------------------------------------------------
================================================================================
apcupsd-3.14.10-2.fc16 (FEDORA-2011-17254)
APC UPS Power Control Daemon for Linux
--------------------------------------------------------------------------------
Update Information:
- remove powerfail flag during boot
* Fix missing status and spurrious incorrect status on newer BackUPS CS models using USB interface.
* Ignore transitions to battery due to calibration (possible if user initiates calibration, then exits apctest and starts apcupsd before calibration completes.
* Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
* Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL aka 'mode' to DRIVER.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 19 2011 Michal Hlavinka <mhlavink@xxxxxxxxxx> - 3.14.10-2
- remove powerfail flag on boot (#768684)
* Mon Dec 12 2011 Michal Hlavinka <mhlavink@xxxxxxxxxx> - 3.14.10-1
- apcupsd updated to 3.14.10
- fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
aka 'mode' to DRIVER.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #768684 - /etc/apcupsd/powerfail not removed on startup
https://bugzilla.redhat.com/show_bug.cgi?id=768684
--------------------------------------------------------------------------------
================================================================================
chntpw-0.99.6-17.110511.fc16 (FEDORA-2011-17245)
Change passwords in Windows SAM files
--------------------------------------------------------------------------------
Update Information:
Fixes a bug that apparently causes password reset to not work.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 18 2011 Conrad Meyer <konrad@xxxxxxxxxx> - 0.99.6-17.110511
- Fix 'robustness' patch (#755622)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #755622 - password reset mode of chntpw does nothing
https://bugzilla.redhat.com/show_bug.cgi?id=755622
--------------------------------------------------------------------------------
================================================================================
cxxtest-3.10.1-5.fc16 (FEDORA-2011-17257)
A JUnit-like testing framework for C++
--------------------------------------------------------------------------------
Update Information:
This update fixes the handling of invalid command-line arguments.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 19 2011 Martin Gieseking <martin.gieseking@xxxxxx> - 3.10.1-5
- Fixed https://bugzilla.redhat.com/show_bug.cgi?id=768869
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #768869 - [abrt] cxxtest-3.10.1-4.fc15: cxxtestgen:73:abort:TypeError: expected a character buffer object
https://bugzilla.redhat.com/show_bug.cgi?id=768869
--------------------------------------------------------------------------------
================================================================================
dvisvgm-1.0.10-1.fc16 (FEDORA-2011-17240)
DVI to SVG converter
--------------------------------------------------------------------------------
Update Information:
This is a small maintenance release with the following changes:
* The new environment variable DVISVGM_COLORS allows user-defined message colors.
* The ID format used to reference glyphs and paths has been updated in order to avoid potential ID collisions.
For further information see http://dvisvgm.sourceforge.net
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 19 2011 Martin Gieseking <martin.gieseking@xxxxxx> - 1.0.10-1
- updated to upstream release 1.0.10
--------------------------------------------------------------------------------
================================================================================
eigen3-3.0.4-1.fc16 (FEDORA-2011-17236)
A lightweight C++ template library for vector and matrix math
--------------------------------------------------------------------------------
Update Information:
This update contains the Eigen 3.0.4 release. A full changelog can be found at http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 18 2011 Rich Mattes <richmattes@xxxxxxxxx> - 3.0.4-1
- Update to release 3.0.4
* Tue Nov 15 2011 Rich Mattes <richmattes@xxxxxxxxx> - 3.0.3-1
- Update to release 3.0.3
--------------------------------------------------------------------------------
================================================================================
gccxml-0.9.0-0.7.20111218.fc16 (FEDORA-2011-17238)
XML output extension to GCC
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 19 2011 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 0.9.0-0.7.20111218
- Updated cvs snapshot
--------------------------------------------------------------------------------
================================================================================
glibc-2.14.90-24.fc16.3 (FEDORA-2011-17235)
The GNU libc libraries
--------------------------------------------------------------------------------
Update Information:
* Sun Dec 18 2011 Jeff Law <law@xxxxxxxxxx> - 2.14.90-24.fc16.3
- Check values from TZ file header (#767696)
- Handle EAGAIN from FUTEX_WAIT_REQUEUE_PI (#552960)
- Add {dist}.#
- Correct return value from pthread_create when stack alloction fails.
(#767746)
* Wed Dec 7 2011 Jeff Law <law@xxxxxxxxxx> - 2.14.90-23
- Fix a wrong constant in powerpc hypot implementation (#750811)
#13534 in python bug database
#13472 in glibc bug database
- Truncate time values in Linux futimes when falling back to utime
* Mon Dec 5 2011 Jeff Law <law@xxxxxxxxxx> - 2.14.90-22
- Mark fortified __FD_ELT as extension (#761021)
- Fix typo in manual (#708455)
- Check values from TZ file header (#767696)
- Handle EAGAIN from FUTEX_WAIT_REQUEUE_PI (#552960)
- Add {dist}.#
- Correct return value from pthread_create when stack alloction fails.
(#767746)
- Fix a wrong constant in powerpc hypot implementation (#750811)
#13534 in python bug database
#13472 in glibc bug database
- Truncate time values in Linux futimes when falling back to utime
- Mark fortified __FD_ELT as extension (#761021)
- Fix typo in manual (#708455)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 18 2011 Jeff Law <law@xxxxxxxxxx> - 2.14.90-24.fc16.3
- Check values from TZ file header (#767696)
- Handle EAGAIN from FUTEX_WAIT_REQUEUE_PI (#552960)
- Add {dist}.#
- Correct return value from pthread_create when stack alloction fails.
(#767746)
* Wed Dec 7 2011 Jeff Law <law@xxxxxxxxxx> - 2.14.90-23
- Fix a wrong constant in powerpc hypot implementation (#750811)
- Truncate time values in Linux futimes when falling back to utime
* Mon Dec 5 2011 Jeff Law <law@xxxxxxxxxx> - 2.14.90-22
- Mark fortified __FD_ELT as extension (#761021)
- Fix typo in manual (#708455)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #761245 - CVE-2009-5029 glibc: __tzfile_read integer overflow to buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=761245
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extensions-3.2.3-1.fc16 (FEDORA-2011-17229)
Modify and extend GNOME Shell functionality and behavior
--------------------------------------------------------------------------------
Update Information:
This package provides the latest version of the GNOME Shell extensions for GNOME 3.2. It fixes at last the alternate-tab extension.
Changelog
* workspace-indicator: fix when removing the last workspace
* alternative-status-menu: fix long standing crash without avatar
* alternate-tab: use GConf binding names
* all: update translations
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 18 2011 Mohamed El Morabity <melmorabity@xxxxxxxxxxxxxxxxx> - 3.2.3-1
- Update to 3.2.3
- Remove workaround to fix alternative-status-menu extension crash when login
- Re-enable all references to localedir in metadata.json files (reverted from
commit c4b4092)
- Re-enable GSettings settings removed since 3.2.3 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #752573 - gnome-shell-extension-workspace-indicator display incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=752573
[ 2 ] Bug #739270 - Alternate Tab extension doesn't work
https://bugzilla.redhat.com/show_bug.cgi?id=739270
--------------------------------------------------------------------------------
================================================================================
gxneur-0.15.0-2.fc16 (FEDORA-2011-17252)
GTK front-end for X Neural Switcher (xneur)
--------------------------------------------------------------------------------
Update Information:
Update to new version 0.15.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 18 2011 Pavel Alexeev <Pahan@xxxxxxxxxxxxx> - 0.15.0-2
- Revert back hack to do not stop build on deprecated warning.
* Sun Dec 18 2011 Pavel Alexeev <Pahan@xxxxxxxxxxxxx> - 0.15.0-1
- Update to 0.15.0 version
* Tue Dec 6 2011 Adam Jackson <ajax@xxxxxxxxxx> - 0.13.0-2
- Rebuild for new libpng
--------------------------------------------------------------------------------
================================================================================
kchmviewer-6.0-1.fc16 (FEDORA-2011-17253)
CHM viewer
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 19 2011 Robin Lee <cheeselee@xxxxxxxxxxxxxxxxx> - 6.0-1
- Update to 6.0
- Remove Requires kio_msits and kchmviewer-5.1-no_msits.patch
--------------------------------------------------------------------------------
================================================================================
libclastfm-0.4-0.1.20111214gitcc78dde5.fc16 (FEDORA-2011-17255)
Unofficial C-API for the Last.fm web service
--------------------------------------------------------------------------------
Update Information:
libclastfm is an unofficial C-API for the Last.fm web service
written with libcurl. It was written because the official CBS Interactive Last.fm library requires Nokia QT, which is usually not desired when using GTK based distros.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #767838 - Review Request: libclastfm - Unofficial C-API for the Last.fm web service
https://bugzilla.redhat.com/show_bug.cgi?id=767838
--------------------------------------------------------------------------------
================================================================================
libphidget-2.1.8.20111121-1.fc16 (FEDORA-2011-17246)
Drivers and API for Phidget devices
--------------------------------------------------------------------------------
Update Information:
This package updates libphidget to the latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 18 2011 Rich Mattes <richmattes@xxxxxxxxx> - 2.1.8-20111121-1
- Update to 2.1.8-20111121
--------------------------------------------------------------------------------
================================================================================
logwatch-7.4.0-6.20110328svn50.fc16 (FEDORA-2011-17230)
A log file analysis program
--------------------------------------------------------------------------------
Update Information:
Typo fix
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 19 2011 Jan Synáček <jsynacek@xxxxxxxxxx> - 7.4.0-6.20110328svn50
- Added -sendmail-typo patch (rhbz#708183)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #708183 - Minor typo in logwatch output
https://bugzilla.redhat.com/show_bug.cgi?id=708183
--------------------------------------------------------------------------------
================================================================================
mediatomb-0.12.1-14.fc16 (FEDORA-2011-15355)
MediaTomb - UPnP AV Mediaserver for Linux
--------------------------------------------------------------------------------
Update Information:
This update fixes bug 747023 and restores youtube support. It also adds support for cover art in FLAC files, via libflac.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 6 2011 Rich Mattes <richmattes@xxxxxxxxx> - 0.12.1-14
- Added call to autoreconf to enable flac support
* Tue Oct 18 2011 Rich Mattes <richmattes@xxxxxxxxx> - 0.12.1-13
- Fix youtube support (RHBZ#747023)
- Enable FLAC cover art via libFLAC
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #747023 - YouTube support broken in Mediatomb
https://bugzilla.redhat.com/show_bug.cgi?id=747023
--------------------------------------------------------------------------------
================================================================================
octave-communications-1.1.0-2.fc16 (FEDORA-2011-17241)
Communications for Octave
--------------------------------------------------------------------------------
Update Information:
New Package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #710904 - Review Request: octave-communications - Communications for Octave
https://bugzilla.redhat.com/show_bug.cgi?id=710904
--------------------------------------------------------------------------------
================================================================================
php-pear-Validate-0.8.5-1.fc16 (FEDORA-2011-17244)
Validation Class for Various Data Types
--------------------------------------------------------------------------------
Update Information:
QA Release
- Request #17963: Allow test suite to run without DNS resolver [patch by remicollet, adjustments by dufuz]
- Bug #17279 Validate::email() with 'fullTLDValidation' => 'true' always return false.
- Bug #17947 testdate test fails if date.timezone not set
- Bug #17948 multicard test fails
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 19 2011 Remi Collet <remi@xxxxxxxxxxxxxxxxx> 0.8.5-1
- Version 0.8.5 (beta) - API 0.7.0 (beta) - QA release
- removed merged patch
--------------------------------------------------------------------------------
================================================================================
php-phpunit-PHPUnit-3.6.5-1.fc16 (FEDORA-2011-17232)
The PHP Unit Testing framework
--------------------------------------------------------------------------------
Update Information:
Upstream Changelog:
PHPUnit 3.6.5
-------------
* Implemented #406: Improved the failure description for `assertStringMatchesFormat*()`.
* Fixed #204: Bootstrap script should be loaded before trying to load `testSuiteLoaderClass`.
* Fixed #413: PHPT test failures display double diffs.
* Fixed #420: Using the `@outputBuffering enabled` annotation leads to failing tests when an output string was expected.
* Fixed #430: `OutputTestCase` did not work with `@depends`. Please note that this way of output testing is still deprecated.
* Fixed #432: Process Isolation did not work when PHPUnit is invoked through Apache Ant, for instance, due to PHP binary detection issues.
* Fixed #433: Testing output always printed the output during test execution.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 19 2011 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 3.6.5-1
- Version 3.6.5 (stable) - API 3.6.0 (stable)
--------------------------------------------------------------------------------
================================================================================
php-phpunit-PHPUnit-Selenium-1.1.3-1.fc16 (FEDORA-2011-16685)
Selenium RC integration for PHPUnit
--------------------------------------------------------------------------------
Update Information:
Upstream changelog:
PHPUnit_Selenium 1.1.3
----------------------
* Fixed #71: errors in the result string are detected and raised as exceptions
* Completed #30: shared session is terminated at the end of the PHPUnit proces
* Fixed #65: when required, a screenshot is captured in the case of any except
* Fixed #80. Removed capability of automated stopping from the Driver: it is a
PHPUnit_Selenium 1.1.2
----------------------
* Parameterized timeout for server ping (detection of a not running server).
* Fixed #75: Tests are skipped if the configuration in `setUp()` is not `localhost`.
* Fixed #78: `onNotSuccessfulTest()` erroneous construction of exceptions.
PHPUnit_Selenium 1.1.1
----------------------
* Implemented #30: Introduced the possibility of sharing the session between tests.
* Fixed #13: Assertions made on non-target commands.
* Fixed #54: `waitFor*` calls with Selenium 2.
* Fixed #66: Comparison failure is not set.
* Fixed #76: Selenese variables are now translated in parameters.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 19 2011 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 1.1.3-1
- Version 1.1.3 (stable) - API 1.1.0 (stable)
* Mon Dec 12 2011 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 1.1.2-1
- Version 1.1.2 (stable) - API 1.1.0 (stable)
* Wed Nov 30 2011 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 1.1.1-1
- Version 1.1.1 (stable) - API 1.1.0 (stable)
--------------------------------------------------------------------------------
================================================================================
tor-0.2.2.35-1601.fc16 (FEDORA-2011-17248)
Anonymizing overlay network for TCP (The onion router)
--------------------------------------------------------------------------------
Update Information:
.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 17 2011 Enrico Scholz <enrico.scholz@xxxxxxxxxxxxxxxxxxxxxxxxx> - 0.2.2.35-1601
- added 'su' logrotate option (#751525)
- fixed systemd unit file; customization of TimeoutSec + LimitNOFILE is
not possible by environment variables. Hardcode some values which can
be overridden by the systemd .include method (#755167).
- added systemd rule in the postrotate script
* Sat Dec 17 2011 Enrico Scholz <enrico.scholz@xxxxxxxxxxxxxxxxxxxxxxxxx> - 0.2.2.35-1600
- updated to 0.2.2.35 (security)
- CVE-2011-2778: Tor heap-based buffer overflow
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #768526 - CVE-2011-2778 Tor heap-based buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=768526
--------------------------------------------------------------------------------
================================================================================
vmpk-0.4.0-4.fc16 (FEDORA-2011-17227)
Virtual MIDI Piano Keyboard
--------------------------------------------------------------------------------
Update Information:
VMPK is a MIDI event generator/receiver. It doesn't produce any sound by
itself, but can be used to drive a MIDI synthesizer (either hardware or
software, internal or external). You can use the computer's keyboard to play
MIDI notes, and also the mouse. You can use the Virtual MIDI Piano Keyboard to
display the played MIDI notes from another instrument or MIDI file player.
--------------------------------------------------------------------------------
================================================================================
xneur-0.15.0-2.fc16 (FEDORA-2011-17252)
X Neural Switcher
--------------------------------------------------------------------------------
Update Information:
Update to new version 0.15.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 18 2011 Pavel Alexeev <Pahan@xxxxxxxxxxxxx> - 0.15.0-2
- Disable xosd support for Fedora > 16 as it orphaned now.
* Sun Dec 18 2011 Pavel Alexeev <Pahan@xxxxxxxxxxxxx> - 0.15.0-1
- Update to 0.15.0 version
* Tue Dec 6 2011 Adam Jackson <ajax@xxxxxxxxxx> - 0.13.0-2
- Rebuild for new libpng
--------------------------------------------------------------------------------
================================================================================
xorg-x11-server-1.11.3-1.fc16 (FEDORA-2011-17256)
X.Org X11 X server
--------------------------------------------------------------------------------
Update Information:
Update to 1.11.3 and fix GNOME bug 655928, GTK3 applications do not respond properly when a pointer button mapping is applied
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 19 2011 Peter Hutterer <peter.hutterer@xxxxxxxxxx> 1.11.3-1
- xserver 1.11.3
- xserver-1.11.2-dix-button-state-must-show-the-logical-buttons-not-p.patch:
XI2 button state was wrong
* Thu Dec 15 2011 Adam Jackson <ajax@xxxxxxxxxx> 1.11.2.902-1
- xserver 1.11.3 RC3
- 0001-Xi-allow-passive-keygrabs-on-the-XIAll-Master-Device.patch,
0001-dix-block-signals-when-closing-all-devices.patch: Drop, merged.
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
