The following Fedora 16 Security updates need testing: https://admin.fedoraproject.org/updates/FEDORA-2012-0913/moodle-2.0.7-1.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-0921/znc-0.204-3.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-0941/bip-0.8.8-2.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-0730/jetty-6.1.26-8.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-0972/mysql-5.5.20-1.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-0825/BackupPC-3.2.1-7.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-0840/polipo-1.0.4.1-6.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-1028/sudo-1.8.3p1-2.fc16 https://admin.fedoraproject.org/updates/FEDORA-2011-14691/tomcat6-6.0.32-19.fc16 The following Fedora 16 Critical Path updates have yet to be approved: https://admin.fedoraproject.org/updates/FEDORA-2012-1028/sudo-1.8.3p1-2.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-1031/coreutils-8.12-6.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-1025/alsa-lib-1.0.25-1.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-0972/mysql-5.5.20-1.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-0984/lvm2-2.02.86-6.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-0934/strigi-0.7.7-1.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-0820/schroedinger-1.0.11-1.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-0689/virtuoso-opensource-6.1.4-4.fc16 https://admin.fedoraproject.org/updates/FEDORA-2012-0590/qrencode-3.2.0-1.fc16 https://admin.fedoraproject.org/updates/FEDORA-2011-15301/lxpanel-0.5.8-1.fc16,lxinput-0.3.1-1.fc16,lxsession-edit-0.2.0-1.fc16,lxrandr-0.1.2-1.fc16,lxpolkit-0.1.0-1.fc16,lxterminal-0.1.11-1.fc16,lxshortcut-0.1.2-1.fc16 The following builds have been pushed to Fedora 16 updates-testing cifs-utils-5.3-1.fc16 coreutils-8.12-6.fc16 culmus-fonts-0.121-1.fc16 haproxy-1.4.19-1.fc16 kicad-2012.01.19-1.rev3256.fc16 kile-2.1.1-1.fc16 libguestfs-1.16.2-1.fc16 pcmanx-gtk2-1.1-1.fc16 perl-Cairo-1.090-1.fc16 perl-Sub-WrapPackages-2.0-7.fc16 php-channel-horde-1.0-1.fc16 picocom-1.6-4.fc16 spice-xpi-2.7-1.fc16 sssd-1.7.0-1.fc16 sudo-1.8.3p1-2.fc16 system-config-printer-1.3.8-2.fc16 Details about builds: ================================================================================ cifs-utils-5.3-1.fc16 (FEDORA-2012-1037) Utilities for mounting and managing CIFS mounts -------------------------------------------------------------------------------- Update Information: This update adds the cifscreds utility to cifs-utils. That utility requires a v3.3 kernel, and so should be usable once F16 gets that kernel version. -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 28 2012 Jeff Layton <jlayton@xxxxxxxxxx> 5.3-1 - update to 5.3 -------------------------------------------------------------------------------- ================================================================================ coreutils-8.12-6.fc16 (FEDORA-2012-1031) A set of basic GNU tools commonly used in shell scripts -------------------------------------------------------------------------------- Update Information: - output the correct ownership in chown -v (upstream bug #10636) - do not use shebang in sourced colorls.csh - su: fix shell suspend in tcsh (#597928) - variable "u" should be static in uname processor type patch - various multibyte patch fixes: - fix cut output-delimiter option - prevent infinite loop in sort when ignoring chars - prevent using unitialized variable in cut - fix pr -c and pr -v segfault with multibyte locales - fix stack smashing, buffer overflow and invalid output of pr (#772172) -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 30 2012 Kamil Dudka <kdudka@xxxxxxxxxx> - 8.12-6 - do not use shebang in sourced colorls.csh - su: fix shell suspend in tcsh (#597928) - variable "u" should be static in uname processor type patch - various multibyte patch fixes: - fix cut output-delimiter option - prevent infinite loop in sort when ignoring chars - prevent using unitialized variable in cut - fix pr -c and pr -v segfault with multibyte locales - fix stack smashing, buffer overflow and invalid output of pr (#772172) * Sun Jan 29 2012 Kamil Dudka <kdudka@xxxxxxxxxx> - 8.12-5 - output the correct ownership in chown -v (upstream bug #10636) * Mon Oct 24 2011 Ondrej Vasik <ovasik@xxxxxxxxxx> - 8.12-4 - require at least pam >= 1.1.3-7 (#748215) * Fri Jul 29 2011 Ondrej Vasik <ovasik@xxxxxxxxxx> - 8.12-3 - use acl_extended_file_nofollow() if available (#692823) -------------------------------------------------------------------------------- References: [ 1 ] Bug #597928 - shell suspend won't work https://bugzilla.redhat.com/show_bug.cgi?id=597928 [ 2 ] Bug #772172 - pr command failed on multibyte test https://bugzilla.redhat.com/show_bug.cgi?id=772172 -------------------------------------------------------------------------------- ================================================================================ culmus-fonts-0.121-1.fc16 (FEDORA-2012-1045) Fonts for Hebrew from Culmus project -------------------------------------------------------------------------------- Update Information: This is an update with upstream new release with Frank Ruehl OT and enhancements. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 30 2012 Pravin Satpute <psatpute@xxxxxxxxxx> - 0.121-1 - Upstream new release 0.121 with Frank Ruehl OT -------------------------------------------------------------------------------- References: [ 1 ] Bug #785535 - Update from Culmus upstream https://bugzilla.redhat.com/show_bug.cgi?id=785535 -------------------------------------------------------------------------------- ================================================================================ haproxy-1.4.19-1.fc16 (FEDORA-2012-1039) HA-Proxy is a TCP/HTTP reverse proxy for high availability environments -------------------------------------------------------------------------------- Update Information: Update to latest upstream version 1.4.19 -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 29 2012 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.19-1 - Update to 1.4.19 -------------------------------------------------------------------------------- References: [ 1 ] Bug #773639 - haproxy update to 1.4.19 https://bugzilla.redhat.com/show_bug.cgi?id=773639 -------------------------------------------------------------------------------- ================================================================================ kicad-2012.01.19-1.rev3256.fc16 (FEDORA-2012-1030) Electronic schematic diagrams and printed circuit board artwork -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 29 2012 Alain Portal <alain.portal[AT]univ-montp2[DOT]fr> 2012.01.19-1.rev3256 - New upstream release - Add doxygen as build requirement - Add bulgarian language - Add it and pl tutorials - Update versioning patch - Add patch to fix python syntax in bom-in-python (Gerd v. Egidy <gerd@xxxxxxxx>) - Add a new patch to fix a new link time error - Fix a PS plotting scale bug - Move junction button close to no connexion button - Fix thermal relief gap calculation for circular pads in pcbnew - Add undo/redo support for Pcbnew auto place, auto move, and auto route features. - Make CvPcb correctly preview the selected component footprint if one has already been assigned. - Fix a bug in pcb calculation - Width tuning (width correction) for PS plotting of tracks, pads and vias -------------------------------------------------------------------------------- ================================================================================ kile-2.1.1-1.fc16 (FEDORA-2012-1036) (La)TeX source editor and TeX shell -------------------------------------------------------------------------------- Update Information: An update of Kile to the latest upstream bugfix release, version 2.1.1. Fixes: - Restore the behaviour of LaTeX environment completion to what it was in version 2.0 (Patch by Holger Danielsson) - Ensure that Kile can be offered as application to open LaTeX documents in Nautilus, for instance (kde#275438) - Avoid crashes when closing Kile with two (or more) opened projects (Patch by Eugene Shalygin, kde#289458) - Ensure that the correct number of errors/warnings/badboxes is reported in translated versions of Kile, which notably affected the French version (kde#275700) Features: - Add tool tip which explains the available placeholders in the user tag dialog (Patch by Felix Mauch) - Allow to configure whether the directory shown in the console is kept synchronized with the document tabs (kde#265165) -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 29 2012 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> - 2.1.1-1 - update to 2.1.1 (bugfix release, #785528) - don't Require kate-part on EL (no such package or Provides) - don't Require konsole-part on F15 nor EL (no such package or Provides) * Fri Jan 13 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #785528 - kile-2.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=785528 -------------------------------------------------------------------------------- ================================================================================ libguestfs-1.16.2-1.fc16 (FEDORA-2012-1034) Access and modify virtual machine disk images -------------------------------------------------------------------------------- Update Information: New upstream stable version 1.16.2. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 30 2012 Richard W.M. Jones <rjones@xxxxxxxxxx> - 1:1.16.2-1 - New upstream version 1.16.2. - Try enabling tests on 32 bit. This works on Rawhide, so it might work on Fedora 16. -------------------------------------------------------------------------------- References: [ 1 ] Bug #785668 - aug-defnode: daemon crash https://bugzilla.redhat.com/show_bug.cgi?id=785668 [ 2 ] Bug #785290 - ocaml (bytecode) bindings segfault in 'add_drive_opts' https://bugzilla.redhat.com/show_bug.cgi?id=785290 -------------------------------------------------------------------------------- ================================================================================ pcmanx-gtk2-1.1-1.fc16 (FEDORA-2012-1044) Telnet client designed for BBS browsing -------------------------------------------------------------------------------- Update Information: New upstream release. Telnet client designed for BBS browsing -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 30 2012 Robin Lee <cheeselee@xxxxxxxxxxxxxxxxx> - 1.1-1 - Update to 1.1 - Use upstream desktop entry file - BR: libtool-ltdl-devel - Untabified -------------------------------------------------------------------------------- ================================================================================ perl-Cairo-1.090-1.fc16 (FEDORA-2012-1038) Perl interface to the cairo library -------------------------------------------------------------------------------- Update Information: Update perl-Cairo to a modern release. Needed for perl-Gtk3. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 30 2012 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.090-1 - update to 1.090 * Fri Jan 13 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.060-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #785709 - RFE: update to latest upstream release https://bugzilla.redhat.com/show_bug.cgi?id=785709 -------------------------------------------------------------------------------- ================================================================================ perl-Sub-WrapPackages-2.0-7.fc16 (FEDORA-2012-1032) Add wrappers around all the subroutines in packages -------------------------------------------------------------------------------- Update Information: This update does not provide perl(lib). -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 29 2012 Emmanuel Seyman <emmanuel.seyman@xxxxxxxxxxxxxxxx> - 2.0-3 - Convert the filter to rpm 4.9 format (#784053) -------------------------------------------------------------------------------- References: [ 1 ] Bug #784053 - perl-Sub-WrapPackages provides perl(lib) erroneously https://bugzilla.redhat.com/show_bug.cgi?id=784053 -------------------------------------------------------------------------------- ================================================================================ php-channel-horde-1.0-1.fc16 (FEDORA-2012-1043) Adds pear.horde.org channel to PEAR -------------------------------------------------------------------------------- Update Information: Initial build of php-channel-horde which adds the pear.horde.org channel to PEAR -------------------------------------------------------------------------------- References: [ 1 ] Bug #785424 - Review Request: php-channel-horde - Adds pear.horde.org channel to PEAR https://bugzilla.redhat.com/show_bug.cgi?id=785424 -------------------------------------------------------------------------------- ================================================================================ picocom-1.6-4.fc16 (FEDORA-2012-1027) Minimal serial communications program -------------------------------------------------------------------------------- Update Information: Fix locking issues. -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 29 2012 Scott Tsai <scottt.tw@xxxxxxxxx> 1.6-4 - Create subdirectories for lockfiles under /run/lock/picocom/ (RHBZ 732360) * Sat Jan 14 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #732360 - picocom should use different locking because of /var/lock permissions https://bugzilla.redhat.com/show_bug.cgi?id=732360 -------------------------------------------------------------------------------- ================================================================================ spice-xpi-2.7-1.fc16 (FEDORA-2012-1046) SPICE extension for Mozilla -------------------------------------------------------------------------------- Update Information: version update -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 30 2012 Peter Hatina <phatina@xxxxxxxxxx> 2.7-1 - Update to 2.7 -------------------------------------------------------------------------------- ================================================================================ sssd-1.7.0-1.fc16 (FEDORA-2012-0237) System Security Services Daemon -------------------------------------------------------------------------------- Update Information: * Support for case-insensitive domains * Support for multiple search bases in the LDAP provider * Support for the native FreeIPA netgroup implementation * Reliability improvements to the process monitor * New DEBUG facility with more consistent log levels * New tool to change debug log levels without restarting SSSD * SSSD will now disconnect from LDAP server when idle * FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains * Assorted performance improvements in the LDAP provider (reducing disk-writes to the cache) -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 22 2011 Stephen Gallagher <sgallagh@xxxxxxxxxx> - 1.7.0-1 - New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider -------------------------------------------------------------------------------- References: [ 1 ] Bug #743133 - Performance regression with Kerberos authentication against AD https://bugzilla.redhat.com/show_bug.cgi?id=743133 -------------------------------------------------------------------------------- ================================================================================ sudo-1.8.3p1-2.fc16 (FEDORA-2012-1028) Allows restricted root access for specified users -------------------------------------------------------------------------------- Update Information: - fixed CVE-2012-0809 -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 26 2012 Daniel Kopecek <dkopecek@xxxxxxxxxx> - 1.8.3p1-2 - added patch for CVE-2012-0809 -------------------------------------------------------------------------------- References: [ 1 ] Bug #784443 - CVE-2012-0809 sudo: format string flaw in sudo_debug() https://bugzilla.redhat.com/show_bug.cgi?id=784443 -------------------------------------------------------------------------------- ================================================================================ system-config-printer-1.3.8-2.fc16 (FEDORA-2012-0923) A printer administration tool -------------------------------------------------------------------------------- Update Information: This update fixes several bugs and crashes. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 30 2012 Jiri Popelka <jpopelka@xxxxxxxxxx> 1.3.8-2 - Fixed several debugprints (#785581). - Clean up and modernize spec file. * Tue Jan 24 2012 Tim Waugh <twaugh@xxxxxxxxxx> 1.3.8-1 - 1.3.8: - Avoid AttributeError in on_btnNPApply_clicked() (bug #772112). - Added debugging when jobviewer not found (bug #757520). - Applied patch from Till Kamppeter to use pycurl 'https' support for openprinting (CVE-2011-4405). - Always use a sequence as args for timedops.TimedSubprocess() (patch from Vincent Untz). - Added some firewall debugging for bug #755913. - Fixed typo (Ubuntu #844976). - Run probe_printer.py with an argument to run PrinterFinder by hand. - More debugging output in PrinterFinder. - Really fix SMB probing in PrinterFinder. - LpdServer class: spot when we can't connect, and give up (likewise in PrinterFinder). - Ignore ' All-in-one' suffix for printer model names when comparing them (bug #751610). - Handle HTTP errors from openprinting.org (seen in bug #743446). - Don't re-open PPD when already available, just to localize marker names. - Use the monitor's PPD cache in the properties dialog. - monitor: provide method for sharing the monitor's PPD cache. - cupshelpers: avoid re-opening PPD when not needed (not a leak). - Fixed file descriptor leak in PPDCache (Ubuntu #874445). - Fixed typo in check-device-ids.py when looking for ID-less matches. - Require newer pycups; drop compatibility code. - Do not connect to CUPS with an empty user name. - On asynchronous IPP connections make sure that the password dialog is repeated if a wrong password is entered (Ubuntu #653132). - Several fixes on credential caching for IPP authentication (Ubuntu bug 653132). - Don't penalise pxlmono now that bug #661814 is fixed in ghostscript-9.04. - Handle new CUPS 1.5 IPP error response IPP_AUTHENTICATION_CANCELED (Ubuntu #653132). * Sat Jan 14 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.3.7-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Fri Nov 4 2011 Tim Waugh <twaugh@xxxxxxxxxx> 1.3.7-3 - Use arch-specific requirements where appropriate (bug #749834). -------------------------------------------------------------------------------- References: [ 1 ] Bug #751610 - Drivers for All-in-one models not combined https://bugzilla.redhat.com/show_bug.cgi?id=751610 [ 2 ] Bug #772112 - [abrt] system-config-printer-1.3.7-2.fc16: newprinter.py:3658:on_btnNPApply_clicked:AttributeError: printers https://bugzilla.redhat.com/show_bug.cgi?id=772112 [ 3 ] Bug #785382 - [abrt] system-config-printer-libs-1.3.7-2.fc16: scp-dbus-service.py:320:on_dialog_canceled:NameError: global name 'g__killtimer' is not defined https://bugzilla.redhat.com/show_bug.cgi?id=785382 [ 4 ] Bug #785581 - [abrt] system-config-printer-1.3.8-1.fc16: newprinter.py:1531:getNetworkPrinterMakeModel:TypeError: coercing to Unicode: need string or buffer, list found https://bugzilla.redhat.com/show_bug.cgi?id=785581 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test