The following Fedora 15 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-2011-15560/nss-3.12.10-7.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-16284/krb5-1.9.2-4.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0250/openssl-1.0.0f-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0144/plib-1.8.5-5.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0233/rubygem-rack-1.1.0-4.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0247/wordpress-3.3.1-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-16893/freeipa-2.1.4-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-17551/ruby-1.8.7.357-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-17233/tor-0.2.1.32-1500.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-16980/asterisk-1.8.7.2-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0018/glibc-2.14.1-5
https://admin.fedoraproject.org/updates/FEDORA-2011-17399/nspr-4.8.9-2.fc15,nss-softokn-3.13.1-14.fc15,nss-util-3.13.1-3.fc15,nss-3.13.1-9.fc15,thunderbird-lightning-1.1-0.1.rc1.fc15,thunderbird-9.0-4.fc15,gnome-python2-extras-2.25.3-35.fc15.4,perl-Gtk2-MozEmbed-0.09-1.fc15.8,firefox-9.0.1-1.fc15,xulrunner-9.0.1-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0049/t1lib-5.1.2-8.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0096/kernel-2.6.41.7-1.fc15
The following Fedora 15 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/FEDORA-2012-0250/openssl-1.0.0f-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0167/mysql-5.5.19-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0105/xine-lib-1.1.20.1-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0095/pyOpenSSL-0.12-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0096/kernel-2.6.41.7-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0073/kdebase-workspace-4.6.5-8.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0088/setup-2.8.33-2.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0018/glibc-2.14.1-5
https://admin.fedoraproject.org/updates/FEDORA-2012-0027/pcre-8.12-6.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-17565/qt-4.7.4-8.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-17399/nspr-4.8.9-2.fc15,nss-softokn-3.13.1-14.fc15,nss-util-3.13.1-3.fc15,nss-3.13.1-9.fc15,thunderbird-lightning-1.1-0.1.rc1.fc15,thunderbird-9.0-4.fc15,gnome-python2-extras-2.25.3-35.fc15.4,perl-Gtk2-MozEmbed-0.09-1.fc15.8,firefox-9.0.1-1.fc15,xulrunner-9.0.1-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-13190/phonon-backend-gstreamer-4.5.90-2.fc15,phonon-4.5.57-1.20110914.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-11955/evolution-mapi-3.0.3-2.fc15,evolution-exchange-3.0.3-1.fc15,evolution-3.0.3-1.fc15,evolution-data-server-3.0.3-1.fc15,gtkhtml3-4.0.2-1.fc15
The following builds have been pushed to Fedora 15 updates-testing
NearTree-3.1.1-1.fc15
PyX-0.11.1-1.fc15
anyremote-5.5-1.fc15
autoconf-archive-2011.12.21-1.fc15
condor-wallaby-base-db-1.18-1.fc15
dvb-apps-1.1.2-0.1457.bec11f78be51.fc15
ekiga-3.3.2-2.fc15
facter-1.6.4-1.fc15
fotoxx-12.01.2-2.fc15
fritzing-0.6.5b-2.fc15
gerbv-2.6.0-1.fc15
gitso-0.6-6.fc15
hatari-1.6.0-1.fc15
help2man-1.40.5-1.fc15
knemo-0.7.3-1.fc15
libva-1.0.15-1.fc15
mozvoikko-2.0.1-1.fc15
mysql-5.5.19-1.fc15
ogre-pagedgeometry-1.1.0-6.fc15
opal-3.10.2-2.fc15
openssl-1.0.0f-1.fc15
perl-App-Daemon-0.14-1.fc15
perl-Catalyst-Action-REST-0.95-1.fc15
perl-DBIx-DBSchema-0.40-1.fc15
perl-IPC-Run3-0.045-1.fc15
perl-Lingua-EN-Inflect-Phrase-0.11-1.fc15
perl-Statistics-Descriptive-3.0203-1.fc15
perl-Test-TCP-1.14-1.fc15
phoronix-test-suite-3.6.1-1.fc15
pslib-0.4.5-2.fc15
ptlib-2.10.2-1.fc15
puppet-2.6.13-2.fc15
python-docutils-0.8.1-1.fc15
qbittorrent-2.9.3-1.fc15
qlandkartegt-1.3.2-1.fc15
rkhunter-1.3.8-12.fc15
rubygem-kgio-2.7.0-3.fc15
rubygem-rack-1.1.0-4.fc15
wordpress-3.3.1-1.fc15
Details about builds:
================================================================================
NearTree-3.1.1-1.fc15 (FEDORA-2012-0160)
An API for finding nearest neighbors
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 6 2012 Takanori MATSUURA <t.matsuu@xxxxxxxxx> - 3.1.1-1
- update to 3.1.1
- add time to BuirdRequires
--------------------------------------------------------------------------------
================================================================================
PyX-0.11.1-1.fc15 (FEDORA-2012-0172)
Python graphics package
--------------------------------------------------------------------------------
Update Information:
New upstream release stable release.
This release contains a major reorganization of the text output code. Transparency in bitmaps is now supported and limited functionality of the bar style is available in 3d graphs. Various bugs have been fixed and there are small improvements all over the place.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 20 2011 José Matos <jamatos@xxxxxxxxxxxxxxxxx> - 0.11.1-1
- New upstream release
- Clean spec file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #760524 - remove tetex dependency
https://bugzilla.redhat.com/show_bug.cgi?id=760524
--------------------------------------------------------------------------------
================================================================================
anyremote-5.5-1.fc15 (FEDORA-2012-0191)
Remote control through bluetooth or IR connection
--------------------------------------------------------------------------------
Update Information:
Use popen() for get command results. Configuration file for guayadeque was added, support inheritance in mode definition,
add Set(popup,...) command, drop support of Set(text,wrap,..) command. Some configuration files reorganization.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Mikhail Fedotov <anyremote at mail.ru> - 5.5
- Use popen() for get command results. Configuration file for guayadeque
(thanks to Fabian Frank) was added, support inheritance in mode definition,
add Set(popup,...) command, drop support of Set(text,wrap,..) command.
Some configuration files reorganization.
--------------------------------------------------------------------------------
================================================================================
autoconf-archive-2011.12.21-1.fc15 (FEDORA-2012-0188)
The Autoconf Macro Archive
--------------------------------------------------------------------------------
Update Information:
Update to 2011.12.21
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Takanori MATSUURA <t.matsuu@xxxxxxxxx> - 2011.12.21-1
- update to 2011.12.21
--------------------------------------------------------------------------------
================================================================================
condor-wallaby-base-db-1.18-1.fc15 (FEDORA-2012-0165)
Base condor database for wallaby
--------------------------------------------------------------------------------
Update Information:
A wallaby database with condor configuration data
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #755079 - Review Request: condor-wallaby-base-db - A condor database for wallaby
https://bugzilla.redhat.com/show_bug.cgi?id=755079
--------------------------------------------------------------------------------
================================================================================
dvb-apps-1.1.2-0.1457.bec11f78be51.fc15 (FEDORA-2012-0223)
Utility, demo and test applications using the Linux DVB API
--------------------------------------------------------------------------------
Update Information:
Update to the latest mercial head adding and updating tuning information, fixing as crash. Fix some RHBZ issues
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 3 2012 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 1.1.2-0.1457.bec11f78be51
- Update to latest hg snapshot
- Fix release based on upstream hg
- Build with $RPM_LD_FLAGS - RHBZ #759879
- Fix naming conflicts - RHBZ #757609
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #757609 - Package dvb-apps from the latest update conflicts with xbase-utils
https://bugzilla.redhat.com/show_bug.cgi?id=757609
[ 2 ] Bug #759879 - dvb-apps libs not stripped, $RPM_LD_FLAGS not used
https://bugzilla.redhat.com/show_bug.cgi?id=759879
--------------------------------------------------------------------------------
================================================================================
ekiga-3.3.2-2.fc15 (FEDORA-2012-0195)
A Gnome based SIP/H323 teleconferencing application
--------------------------------------------------------------------------------
Update Information:
Update to the 3.3.2 release which brings a lot of fixes and improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 29 2011 Milan Crha <mcrha@xxxxxxxxxx> - 3.3.2-2
- Rebuild against newer evolution-data-server
* Tue Aug 23 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 3.3.2-1
- Ekiga 3.3.2 devel - Changelog
ftp://ftp.gnome.org/pub/gnome/sources/ekiga/3.3/ekiga-3.3.2.news
* Tue Aug 16 2011 Milan Crha <mcrha@xxxxxxxxxx> - 3.3.1-3
- Rebuild against newer evolution-data-server
* Sun Jul 24 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 3.3.1-2
- Rebuild for new boost and evolution-data-server
* Sat Jul 16 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 3.3.1-1
- Ekiga 3.3.1 devel - Changelog
ftp://ftp.gnome.org/pub/gnome/sources/ekiga/3.3/ekiga-3.3.1.news
* Fri Jun 17 2011 Milan Crha <mcrha@xxxxxxxxxx> - 3.3.0-10
- Rebuild against newer evolution-data-server
* Fri May 20 2011 Kalev Lember <kalev@xxxxxxxxxxxx> - 3.3.0-9
- Rebuilt for libcamel soname bump
* Tue Apr 12 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 3.3.0-8
- rebuild again for new boost
* Tue Mar 15 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 3.3.0-7
- rebuild for new boost
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #680242 - [abrt] ekiga-3.3.0-6.fc15: Process /usr/bin/ekiga was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=680242
[ 2 ] Bug #687407 - [abrt] ekiga-3.3.0-6.fc15: operator[]: Process /usr/bin/ekiga was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=687407
[ 3 ] Bug #708264 - [abrt] ekiga-3.3.0-6.fc15: PSocket::Select: Process /usr/bin/ekiga was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=708264
--------------------------------------------------------------------------------
================================================================================
facter-1.6.4-1.fc15 (FEDORA-2012-0211)
Ruby module for collecting simple facts about a host operating system
--------------------------------------------------------------------------------
Update Information:
This is an upstream bugfix release. A few small bugs are squashed and dmidecode is added to the package Requires.
The upstream release notes provide more details:
http://projects.puppetlabs.com/projects/facter/wiki
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Todd Zullinger <tmz@xxxxxxxxx> - 1.6.4-1
- Update to 1.6.4
- Require dmidecode (upstream #11041)
--------------------------------------------------------------------------------
================================================================================
fotoxx-12.01.2-2.fc15 (FEDORA-2012-0231)
Photo editor
--------------------------------------------------------------------------------
Update Information:
Update to 12.01.2 for fix bz#755715
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 6 2012 Pavel Alexeev <Pahan@xxxxxxxxxxxxx> - 12.01.2-2
- Update to 12.01.2 for fix bz#755715
* Tue Dec 6 2011 Adam Jackson <ajax@xxxxxxxxxx> - 10.11.1-9
- Rebuild for new libpng
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #755715 - [abrt] fotoxx-10.11.1-7.fc14: appcrash: Process /usr/bin/fotoxx was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=755715
--------------------------------------------------------------------------------
================================================================================
fritzing-0.6.5b-2.fc15 (FEDORA-2012-0173)
Electronic Design Automation software; from prototype to product
--------------------------------------------------------------------------------
Update Information:
Here is where you give an explanation of your update.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 4 2012 Ed Marshall <esm@xxxxxxxxx> - 0.6.5b-2
- Make rpmlint happier with line-endings on documentation.
* Wed Jan 4 2012 Ed Marshall <esm@xxxxxxxxx> - 0.6.5b-1
- Updated to 0.6.5b release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #772030 - New version of Fritzing (0.6.5b)
https://bugzilla.redhat.com/show_bug.cgi?id=772030
--------------------------------------------------------------------------------
================================================================================
gerbv-2.6.0-1.fc15 (FEDORA-2012-0225)
Gerber file viewer from the gEDA toolkit
--------------------------------------------------------------------------------
Update Information:
New release 2.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 3 2012 Chitlesh Goorah <chitlesh [AT] fedoraproject DOT org> - 2.6.0-1
- new upstream release
* Tue Jul 5 2011 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 2.5.0-2
- Hack libtool to not add rpath.
- Propagate RPM_OPT_FLAGS to CFLAGS.
- Pass -ldl through LIBS.
- Fix date of previous changelog entry.
- Remove "unused-direct-shlib-dependencies" libtool hacking.
* Sun Jul 3 2011 Chitlesh Goorah <chitlesh [AT] fedoraproject DOT org> - 2.5.0-1
- new upstream release
--------------------------------------------------------------------------------
================================================================================
gitso-0.6-6.fc15 (FEDORA-2012-0184)
A front-end to reverse VNC connections
--------------------------------------------------------------------------------
Update Information:
Initial update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #752311 - Review Request: gitso - A front-end to reverse VNC connections
https://bugzilla.redhat.com/show_bug.cgi?id=752311
--------------------------------------------------------------------------------
================================================================================
hatari-1.6.0-1.fc15 (FEDORA-2012-0239)
An Atari ST emulator suitable for playing games
--------------------------------------------------------------------------------
Update Information:
* More accurate FDC emulation (correct status bits and commands' timings, DMA transfer by blocks of 16 bytes, floppy change detection). This should fix a lot of non working games, as well as a few demos
* More accurate microwire clock emulation
* SCSI class 1 (ICD) command support for drives > 1 GB
* Improve shifter (add another method to do 4 pixel hardware scrolling, better emulation for 0 byte blank line)
* Some fixes to the IKBD emulation
* Better filters and model for sound emulation
* Correct VBL timings in TT monochrome (double clicking works now)
* More cycle accurate Falcon DSP <-> CPU emulation. All the demos that needed 32Mhz CPU with the old CPU core in Hatari v1.5, work now at correct 16Mhz with the WinUAE CPU core
* 030 MMU emulation with the WinUAE CPU core
* Debugger improvements : "history" command to list instructions executed before entering debugger
* Fixed behavior of the Caps Lock key
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 6 2012 Andrea Musuruane <musuruan@xxxxxxxxx> 1.6.0-1
- updated upstream URL
- updated upstream Source0
* Tue Dec 6 2011 Adam Jackson <ajax@xxxxxxxxxx> - 1.5.0-2
- Rebuild for new libpng
--------------------------------------------------------------------------------
================================================================================
help2man-1.40.5-1.fc15 (FEDORA-2012-0181)
Create simple man pages from --help output
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 1.40.5-1
- Upstream update.
--------------------------------------------------------------------------------
================================================================================
knemo-0.7.3-1.fc15 (FEDORA-2012-0139)
A KDE network monitoring tool
--------------------------------------------------------------------------------
Update Information:
KNemo 0.7.3
* fix loading/calculating off-peak traffic
* use bugs.kde.org for bug reports
* keep the pixmap cache size under control
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 6 2012 Alexey Kurov <nucleo@xxxxxxxxxxxxxxxxx> - 0.7.3-1
- KNemo 0.7.3
--------------------------------------------------------------------------------
================================================================================
libva-1.0.15-1.fc15 (FEDORA-2012-0175)
Video Acceleration (VA) API for Linux
--------------------------------------------------------------------------------
Update Information:
Version 1.0.15 - 28.Oct.2011
* API: make {Top,Bottom}FieldOrderCnt signed (Yi Wang)
* Refine VA trace & VA fool utilities
* Move i965 driver to a specific repository (vaapi/intel-driver)
* Fix DSO link issue in tests
* Fix API vs. DSO vs. package versioning
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 3 2011 Nicolas Chauvet <kwizart@xxxxxxxxx> - 1.0.15-1
- Update to 1.0.15
- Back to vanilla upstream sources - no backend are provided anymore
--------------------------------------------------------------------------------
================================================================================
mozvoikko-2.0.1-1.fc15 (FEDORA-2012-0238)
Finnish Voikko spell-checker extension for Mozilla programs
--------------------------------------------------------------------------------
Update Information:
This update fixes a bug that prevented changing spell checking language to anything else than Finnish in Firefox 9.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 6 2012 Ville-Pekka Vainio <vpvainio AT iki.fi> - 2.0.1-1
- New upstream release.
- This release fixes a bug that prevented changing spell checking language to
anything else than Finnish in Firefox 9.
- Better sed replace for maxVersion in install.rdf.
--------------------------------------------------------------------------------
================================================================================
mysql-5.5.19-1.fc15 (FEDORA-2012-0167)
MySQL client programs and shared libraries
--------------------------------------------------------------------------------
Update Information:
Update to MySQL 5.5.19, for various fixes described at http://dev.mysql.com/doc/refman/5.5/en/news-5-5-19.html
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 4 2012 Tom Lane <tgl@xxxxxxxxxx> 5.5.19-1
- Update to MySQL 5.5.19, for various fixes described at
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-19.html
--------------------------------------------------------------------------------
================================================================================
ogre-pagedgeometry-1.1.0-6.fc15 (FEDORA-2012-0200)
Ogre addon for realtime rendering of dense forests
--------------------------------------------------------------------------------
Update Information:
Fix bug 771772, Include missing PagedGeometryConfig.h
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Bruno Wolff III <bruno@xxxxxxxx> - 1:1.1.0-6
- Fix for bz 771772 PagedGeometryConfig.h was not included
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #771772 - ogre-pagedgeometry-devel does not include PagedGeometryConfig.h
https://bugzilla.redhat.com/show_bug.cgi?id=771772
--------------------------------------------------------------------------------
================================================================================
opal-3.10.2-2.fc15 (FEDORA-2012-0195)
Open Phone Abstraction Library
--------------------------------------------------------------------------------
Update Information:
Update to the 3.3.2 release which brings a lot of fixes and improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 5 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 3.10.2-2
- Fix versioning for -devel
* Tue Aug 23 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 3.10.2-1
- New 3.10.2 stable release
* Sat Jul 16 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 3.10.1-1
- New 3.10.1 stable release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #680242 - [abrt] ekiga-3.3.0-6.fc15: Process /usr/bin/ekiga was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=680242
[ 2 ] Bug #687407 - [abrt] ekiga-3.3.0-6.fc15: operator[]: Process /usr/bin/ekiga was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=687407
[ 3 ] Bug #708264 - [abrt] ekiga-3.3.0-6.fc15: PSocket::Select: Process /usr/bin/ekiga was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=708264
--------------------------------------------------------------------------------
================================================================================
openssl-1.0.0f-1.fc15 (FEDORA-2012-0250)
A general purpose cryptography library with TLS implementation
--------------------------------------------------------------------------------
Update Information:
New upstream package with bugfixes and fixes for moderate and low impact CVEs.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Tomas Mraz <tmraz@xxxxxxxxxx> 1.0.0f-1
- new upstream release fixing multiple CVEs
* Tue Nov 22 2011 Tomas Mraz <tmraz@xxxxxxxxxx> 1.0.0e-4
- move the libraries needed for static linking to Libs.private
* Thu Nov 3 2011 Tomas Mraz <tmraz@xxxxxxxxxx> 1.0.0e-3
- do not use AVX instructions when osxsave bit not set
- add direct known answer tests for SHA2 algorithms
* Wed Sep 21 2011 Tomas Mraz <tmraz@xxxxxxxxxx> 1.0.0e-2
- fix missing initialization of variable in CHIL engine
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #771770 - CVE-2011-4108 openssl: DTLS plaintext recovery attack
https://bugzilla.redhat.com/show_bug.cgi?id=771770
[ 2 ] Bug #771775 - CVE-2011-4576 openssl: uninitialized SSL 3.0 padding
https://bugzilla.redhat.com/show_bug.cgi?id=771775
[ 3 ] Bug #771778 - CVE-2011-4577 openssl: malformed RFC 3779 data can cause assertion failures
https://bugzilla.redhat.com/show_bug.cgi?id=771778
[ 4 ] Bug #771780 - CVE-2011-4619 openssl: SGC restart DoS attack
https://bugzilla.redhat.com/show_bug.cgi?id=771780
--------------------------------------------------------------------------------
================================================================================
perl-App-Daemon-0.14-1.fc15 (FEDORA-2012-0187)
Start an Application as a Daemon
--------------------------------------------------------------------------------
Update Information:
This update fixes a bug with the restart command. See [rt#72835](https://rt.cpan.org/Public/Bug/Display.html?id=72835) for details.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Iain Arnell <iarnell@xxxxxxxxx> 0.14-1
- update to latest upstream version
--------------------------------------------------------------------------------
================================================================================
perl-Catalyst-Action-REST-0.95-1.fc15 (FEDORA-2012-0199)
Automated REST Method Dispatching
--------------------------------------------------------------------------------
Update Information:
This update fixes the regex for JSONP parameter name to be able to include the . character in Catalyst::Action::Serialize::JSONP. It also includes several enhancements. See the [upstream changelog](http://cpansearch.perl.org/src/BOBTFISH/Catalyst-Action-REST-0.95/Changes) for more details.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Iain Arnell <iarnell@xxxxxxxxx> 0.95-1
- update to latest upstream version
* Sat Aug 27 2011 Iain Arnell <iarnell@xxxxxxxxx> 0.91-1
- update to latest upstream version
* Tue Jul 19 2011 Petr Sabata <contyk@xxxxxxxxxx> - 0.90-2
- Perl mass rebuild
--------------------------------------------------------------------------------
================================================================================
perl-DBIx-DBSchema-0.40-1.fc15 (FEDORA-2012-0170)
Database-independent schema objects
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 0.40-1
- Upstream update.
- Modernize specfile.
--------------------------------------------------------------------------------
================================================================================
perl-IPC-Run3-0.045-1.fc15 (FEDORA-2012-0249)
Run a subprocess in batch mode
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 0.045-1
- Upstream update.
- Modernize spec file.
--------------------------------------------------------------------------------
================================================================================
perl-Lingua-EN-Inflect-Phrase-0.11-1.fc15 (FEDORA-2012-0192)
Inflect short English Phrases
--------------------------------------------------------------------------------
Update Information:
This update fixes "aliases" and "referral logs" ([RT#73242](https://rt.cpan.org/Public/Bug/Display.html?id=73242))
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Iain Arnell <iarnell@xxxxxxxxx> 0.11-1
- update to latest upstream version
--------------------------------------------------------------------------------
================================================================================
perl-Statistics-Descriptive-3.0203-1.fc15 (FEDORA-2012-0213)
Perl module of basic descriptive statistical functions
--------------------------------------------------------------------------------
Update Information:
This update fixes [rt#72495](https://rt.cpan.org/Ticket/Display.html?id=72495) - percentile should not die and should return undef if there are no elements in the collection.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 6 2012 Iain Arnell <iarnell@xxxxxxxxx> 3.0203-1
- update to latest upstream version
* Tue Jul 26 2011 Iain Arnell <iarnell@xxxxxxxxx> 3.0202-1
- update to latest upstream
* Fri Jun 17 2011 Marcela Mašláňová <mmaslano@xxxxxxxxxx> - 3.0201-3
- Perl mass rebuild
--------------------------------------------------------------------------------
================================================================================
perl-Test-TCP-1.14-1.fc15 (FEDORA-2012-0185)
Testing TCP program
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 15 2011 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> 1.14-1
- Upstream update.
- BR: perl(Test::Shared::Fork) >= 0.19.
--------------------------------------------------------------------------------
================================================================================
phoronix-test-suite-3.6.1-1.fc15 (FEDORA-2012-0242)
An Automated, Open-Source Testing Framework
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 2 2012 Markus Mayer <lotharlutz@xxxxxx> 3.6.1-1
- new upstream release
- install test dependencies
- fix openbenchmark launcher
--------------------------------------------------------------------------------
================================================================================
pslib-0.4.5-2.fc15 (FEDORA-2012-0215)
C-library to create PostScript files
--------------------------------------------------------------------------------
Update Information:
pslib is a C-library to create PostScript files on the fly. It offers many drawing primitives, inclusion of png and eps images and a very sophisticated text rendering including hyphenation, kerning and ligatures. It can read external Type1 fonts and embed them into the output file. It supports pdfmarks which makes it in combination with ghostscript's pdfwriter an alternative for
libraries creating PDF.
--------------------------------------------------------------------------------
================================================================================
ptlib-2.10.2-1.fc15 (FEDORA-2012-0195)
Portable Tools Library
--------------------------------------------------------------------------------
Update Information:
Update to the 3.3.2 release which brings a lot of fixes and improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 23 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 2.10.2-1
- New 2.10.2 stable release
* Sat Jul 16 2011 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 2.10.1-1
- New 2.10.1 stable release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #680242 - [abrt] ekiga-3.3.0-6.fc15: Process /usr/bin/ekiga was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=680242
[ 2 ] Bug #687407 - [abrt] ekiga-3.3.0-6.fc15: operator[]: Process /usr/bin/ekiga was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=687407
[ 3 ] Bug #708264 - [abrt] ekiga-3.3.0-6.fc15: PSocket::Select: Process /usr/bin/ekiga was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=708264
--------------------------------------------------------------------------------
================================================================================
puppet-2.6.13-2.fc15 (FEDORA-2012-0207)
A network tool for managing many disparate systems
--------------------------------------------------------------------------------
Update Information:
This is an upstream bugfix release that fixes a few issues, notably restoring the behaviour of subjectAltNames from older releases when bootstrapping a puppet master.
It also includes a backported fix for augeas >= 0.10.
For further details refer to the upstream release notes and bugzilla ticket for the augeas issue:
http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.13
https://bugzilla.redhat.com/771097
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Todd Zullinger <tmz@xxxxxxxxx> - 2.6.13-2
- Revert to minimal patch for augeas >= 0.10 (bz#771097)
* Wed Dec 14 2011 Todd Zullinger <tmz@xxxxxxxxx> - 2.6.13-1
- Update to 2.6.13
- Cherry-pick various augeas fixes from upstream (bz#771097)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #771097 - Augeas provider always runs with version >= 0.10.0
https://bugzilla.redhat.com/show_bug.cgi?id=771097
--------------------------------------------------------------------------------
================================================================================
python-docutils-0.8.1-1.fc15 (FEDORA-2012-0155)
System for processing plaintext documentation
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.1 which fixes all licensing issues. Add a patch to fix a traceback when improper command line options are given.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Toshio Kuratomi <toshio@xxxxxxxxxxxxxxxxx> - 0.8.1-1
- Update to new upstream that has properly licensed files and a few bugfixes
- Add a patch to fix tracebacks when wrong values are given to CLI apps
* Wed Jul 20 2011 Toshio Kuratomi <toshio@xxxxxxxxxxxxxxxxx> - 0.8-2
- Replace the Apache licensed files with BSD licensed versions from upstream
* Tue Jul 12 2011 Toshio Kuratomi <toshio@xxxxxxxxxxxxxxxxx> - 0.8-1
- Upgrade to 0.8 final.
- Remove the two remaining Apache licensed files until their license is fixed.
- Patch regressions that we had already submitted upstream -- resubmit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #772121 - Exception raised if wrong value passed to some options such as '-o' when running rst2{html,odt,...}
https://bugzilla.redhat.com/show_bug.cgi?id=772121
--------------------------------------------------------------------------------
================================================================================
qbittorrent-2.9.3-1.fc15 (FEDORA-2012-0217)
A Bittorrent Client
--------------------------------------------------------------------------------
Update Information:
* Thu Dec 29 2011 - Christophe Dumez <chris@xxxxxxxxxxxxxxx> - v2.9.3
- BUGFIX: Fix btdigg plugin (Python3 support + torrent name in magnet links)
- BUGFIX: Fix banning of IPv6 peers (Closes #885021)
- BUGFIX: Fix torrent addition dialog layout problem (Closes #84650522)
- BUGFIX: Do not report any progress for disabled files (Closes #56731485)
- BUGFIX: Make torrent sorting case insensitive (Closes #857154)
- BUGFIX: Improve Web UI usability of small devices
- BUGFIX: Program updater: More reliable version detection / comparison
- I18N: Add Georgian translation
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2011 Leigh Scott <leigh123linux@xxxxxxxxxxxxxx> - 1:2.9.3-1
- update to 2.9.3
--------------------------------------------------------------------------------
================================================================================
qlandkartegt-1.3.2-1.fc15 (FEDORA-2012-0220)
GPS device mapping tool
--------------------------------------------------------------------------------
Update Information:
update to version 1.3.2 with these changes:
- Use unit translator for elevation points in Garmin maps
- Fix: Proxy for TMS maps not working
- Fix: Badly positionsed tiles with TMS maps
- Fix: Compiler optimization -O3 makes Garmin maps crash.
- Make cache path and size an option for streaming maps
- Waypoint selection by radius
- Replace --- OSM --- by own category "Stream"-ing maps
- Worldwide routing via MapQuest
- User defined geographic grid
- Update Spanish translation
- Update German translation
- Projection wizard tries to restore selection from projection string
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Dan Horák <dan[at]danny.cz> 1.3.2-1
- update to 1.3.2
--------------------------------------------------------------------------------
================================================================================
rkhunter-1.3.8-12.fc15 (FEDORA-2012-0229)
A host-based tool to scan for rootkits, backdoors and local exploits
--------------------------------------------------------------------------------
Update Information:
Add /etc/.java directory to whitelist.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 6 2012 Kevin Fenzi <kevin@xxxxxxxxx> 1.3.8-12
- Add /etc/.java to whitelist. Fixes bug #770972
* Fri Nov 25 2011 Kevin Fenzi <kevin@xxxxxxxxx> - 1.3.8-11
- Add /usr/share/man/man5/.k5identity.5.gz to whitelisted hidden files.
* Wed Oct 12 2011 Jim Pirzyk <jim+rpm@xxxxxxxxxx> - 1.3.8-10
- Update %files section so that some .dat files are marked %ghost
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #770972 - Warning: Hidden directory found: /etc/.java
https://bugzilla.redhat.com/show_bug.cgi?id=770972
--------------------------------------------------------------------------------
================================================================================
rubygem-kgio-2.7.0-3.fc15 (FEDORA-2012-0163)
Kinder, gentler I/O for Ruby
--------------------------------------------------------------------------------
Update Information:
Initial package for rubygem-kgio.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #770986 - Review Request: rubygem-kgio - Kinder, gentler I/O for Ruby
https://bugzilla.redhat.com/show_bug.cgi?id=770986
--------------------------------------------------------------------------------
================================================================================
rubygem-rack-1.1.0-4.fc15 (FEDORA-2012-0233)
Common API for connecting web frameworks, web servers and layers of software
--------------------------------------------------------------------------------
Update Information:
Julian Wälde and Alexander Klink reported a flaw in the hash function used in the implementation of the Ruby-rack arrays (CVE-2011-5036). Ruby-rack arrays are implemented using the hash table that maps keys to values. This update fixes the bug.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 5 2012 Bohuslav Kabrda <bkabrda@xxxxxxxxxx> - 1:1.1.0-4
- Moved gem install to %prep to be able to apply patches.
- Applied two patches that fix test failures with Ruby 1.8.7-p357.
- Added a source with files needed for some tests.
- Applied backported security fix for CVE-2011-5036.
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx>
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #771150 - CVE-2011-5036 rubygem-rack: hash table collisions DoS (oCERT-2011-003) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=771150
--------------------------------------------------------------------------------
================================================================================
wordpress-3.3.1-1.fc15 (FEDORA-2012-0247)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
Upgrade to the upstream latest release, fixing also CVE 2012-0287
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 4 2012 'Matej Cepl <mcepl@xxxxxxxxxx>' - 3.3.1-1
- Security (XSS) and maintenance upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #771730 - CVE-2012-0287 wordpress: XSS flaw fixed in 3.3.1 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=771730
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
