The following Fedora 15 Security updates need testing: https://admin.fedoraproject.org/updates/FEDORA-2012-1077/wicd-1.7.0-11.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1547/nagios-3.3.1-2.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1539/xen-4.1.2-6.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1534/glpi-0.78.5-3.svn17464.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1213/usbmuxd-1.0.7-3.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1283/drupal6-6.24-1.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-0987/mysql-5.5.20-1.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-0752/jetty-6.1.26-7.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1267/phpldapadmin-1.2.2-1.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1250/drupal7-7.12-1.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1301/php-5.3.10-1.fc15,php-eaccelerator-0.9.6.1-9.fc15.2,maniadrive-1.2-32.fc15.2 https://admin.fedoraproject.org/updates/FEDORA-2012-1325/xchat-ruby-1.2-11.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1400/cvs-1.11.23-17.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1390/drupal7-field_permissions-1.0-0.2.beta2.fc15 https://admin.fedoraproject.org/updates/FEDORA-2011-17233/tor-0.2.1.32-1500.fc15 https://admin.fedoraproject.org/updates/FEDORA-2011-16980/asterisk-1.8.7.2-1.fc15 The following Fedora 15 Critical Path updates have yet to be approved: https://admin.fedoraproject.org/updates/FEDORA-2012-1468/linux-firmware-20120206-0.1.git06c8f81.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1432/perl-5.12.4-165.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1430/libgee-0.6.4-1.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1213/usbmuxd-1.0.7-3.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1122/pam-1.1.5-5.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-1070/krb5-1.9.2-6.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-0987/mysql-5.5.20-1.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-0997/rsyslog-5.8.7-1.fc15 https://admin.fedoraproject.org/updates/FEDORA-2012-0943/system-config-printer-1.3.8-2.fc15 https://admin.fedoraproject.org/updates/FEDORA-2011-13190/phonon-backend-gstreamer-4.5.90-2.fc15,phonon-4.5.57-1.20110914.fc15 The following builds have been pushed to Fedora 15 updates-testing ghc-temporary-1.1.2.3-1.fc15 glpi-0.78.5-3.svn17464.fc15 ibus-1.4.1-1.fc15 imsettings-1.2.8-1.fc15 nagios-3.3.1-2.fc15 pam_yubico-2.10-1.fc15 perl-Git-Repository-1.25-2.fc15 perl-local-lib-1.008004-4.fc15 python-gunicorn-0.13.4-3.fc15 xen-4.1.2-6.fc15 yaml-cpp-0.3.0-1.fc15 ykclient-2.7-1.fc15 znc-infobot-0.204-1.fc15 Details about builds: ================================================================================ ghc-temporary-1.1.2.3-1.fc15 (FEDORA-2012-1546) Portable temporary file and directory support -------------------------------------------------------------------------------- Update Information: Portable temporary file library -------------------------------------------------------------------------------- References: [ 1 ] Bug #788006 - Review Request: ghc-temporary - portable temp file library https://bugzilla.redhat.com/show_bug.cgi?id=788006 -------------------------------------------------------------------------------- ================================================================================ glpi-0.78.5-3.svn17464.fc15 (FEDORA-2012-1534) Free IT asset management software -------------------------------------------------------------------------------- Update Information: This version correct several bugs and a security bug (CVE-2012-1037) You are strongly encouraged to update your actual version. -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 10 2012 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 0.78.5-3.svn17464 - bug and security fix from SVN (CVE-2012-1037) -------------------------------------------------------------------------------- ================================================================================ ibus-1.4.1-1.fc15 (FEDORA-2012-1541) Intelligent Input Bus for Linux OS -------------------------------------------------------------------------------- Update Information: Upstreamed some bug fixes. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 9 2012 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.4.1-1 - Updated to 1.4.1 * Wed Jan 4 2012 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.4.0-17 - Added ibus-771115-property-compatible.patch for f16 Fixed Bug 771115 - IBusProperty back compatibility. * Fri Dec 30 2011 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.4.0-16 - Enhanced ibus-gnome3 shell lookup window. - Updated ibus-HEAD.patch from upstream Fixed Bug 769135 - ibus-x11 SEGV in _process_key_event_done. - Updated ibus-541492-xkb.patch Fixed Bug 757889 - ibus-setup SEGV without active engine. Fixed Bug 760213 - ibus-setup saves XKB variants correctly. Fixed Bug 769133 - ibus-engine-xkb returns FALSE for ASCII typings. - Updated ibus-xx-bridge-hotkey.patch for an enhancement. * Wed Nov 30 2011 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.4.0-14 - Enabled dconf. - Updated ibus-HEAD.patch Fixed Bug 618229 - engine setup buton on ibus-setup. - Removed ibus-711632-fedora-fallback-icon.patch as upstreamed. - Updated ibus-xx-bridge-hotkey.patch Removed Enable/Disable buttons on ibus-setup -------------------------------------------------------------------------------- ================================================================================ imsettings-1.2.8-1.fc15 (FEDORA-2012-1515) Delivery framework for general Input Method configuration -------------------------------------------------------------------------------- Update Information: * New upstream release. * Fix crash issues -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 10 2012 Akira TAGOh <tagoh@xxxxxxxxxx> - 1.2.8-1 - New upstream release. - would possibly fix crash issues. (#772342, #766125, #757443, #740175, #720891) -------------------------------------------------------------------------------- References: [ 1 ] Bug #740175 - [abrt] imsettings-1.2.4-1.fc15: g_variant_type_info_check: Process /usr/libexec/imsettings-daemon was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=740175 [ 2 ] Bug #720891 - [abrt] imsettings-1.2.3-1.fc15: __GI_raise: Process /usr/libexec/imsettings-daemon was killed by signal 6 (SIGABRT) https://bugzilla.redhat.com/show_bug.cgi?id=720891 -------------------------------------------------------------------------------- ================================================================================ nagios-3.3.1-2.fc15 (FEDORA-2012-1547) Nagios monitors hosts and services and yells if somethings breaks -------------------------------------------------------------------------------- Update Information: Add php to the requirements list Update to version 3.3.1. -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 10 2012 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.3.1-2 - Add php to the requirements list (#519371, et al.). * Tue Feb 7 2012 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.3.1-1 - Upgrade to 3.3.1 (#732329); includes fixes for CVE-2011-1523 and CVE-2011-2179 (#690880, #690881, #709874). - Make nagios-common own the /usr/lib{,64}/nagios/plugins directories (#756839). - Change the ownership of /etc/nagios to the nagios-common package (#756839). - Retab (tabs -> spaces). * Fri Jan 13 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.2.3-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Dec 6 2011 Adam Jackson <ajax@xxxxxxxxxx> - 3.2.3-12 - Rebuild for new libpng * Tue Jun 21 2011 Marcela Mašláňová <mmaslano@xxxxxxxxxx> - 3.2.3-11 - Perl mass rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #519371 - nagios web interface now requires php as rpm dependency https://bugzilla.redhat.com/show_bug.cgi?id=519371 [ 2 ] Bug #732329 - Updating nagios-3.2.3 SRPM to nagios 3.3.1 requires patches https://bugzilla.redhat.com/show_bug.cgi?id=732329 [ 3 ] Bug #690880 - CVE-2011-2179 nagios various flaws [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=690880 [ 4 ] Bug #690881 - Nagios: XSS in the network status map CGI [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=690881 [ 5 ] Bug #709874 - CVE-2011-2179 nagios: XSS in configuration command expansion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=709874 [ 6 ] Bug #756839 - Unowned %{_libdir}/nagios/plugins dir https://bugzilla.redhat.com/show_bug.cgi?id=756839 -------------------------------------------------------------------------------- ================================================================================ pam_yubico-2.10-1.fc15 (FEDORA-2012-1535) A Pluggable Authentication Module for yubikeys -------------------------------------------------------------------------------- Update Information: Update pam_yubico to 2.10 fixing several bugs -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 8 2012 Nick Bebout <nb@xxxxxxxxxxxxxxxxx> - 2.10-1 - Upgrade to 2.10 * Fri Jan 13 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Mon Nov 7 2011 Dennis Gilmore <dennis@xxxxxxxx> - 2.8-1 - update to 2,8 fixes bz#733322 -------------------------------------------------------------------------------- ================================================================================ perl-Git-Repository-1.25-2.fc15 (FEDORA-2012-1530) Perl interface to Git repositories -------------------------------------------------------------------------------- Update Information: New package - perl-Git-Repository -------------------------------------------------------------------------------- References: [ 1 ] Bug #789332 - Review Request: perl-Git-Repository - Perl interface to Git repositories https://bugzilla.redhat.com/show_bug.cgi?id=789332 -------------------------------------------------------------------------------- ================================================================================ perl-local-lib-1.008004-4.fc15 (FEDORA-2012-1514) Create and use a local lib/ for perl modules -------------------------------------------------------------------------------- Update Information: This update fixes perl-homedir to avoid unconditionally creating a ~/perl5/ directory for all users. -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 10 2012 Iain Arnell <iarnell@xxxxxxxxx> 1.008004-4 - avoid creating ~/perl5/ for all users (rhbz#789146) - drop defattr in files lists * Sat Jan 14 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.008004-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Fri Jun 17 2011 Marcela Mašláňová <mmaslano@xxxxxxxxxx> - 1.008004-2 - Perl mass rebuild * Wed Mar 16 2011 Iain Arnell <iarnell@xxxxxxxxx> 1.008004-1 - update to latest upstream version -------------------------------------------------------------------------------- References: [ 1 ] Bug #789146 - ~/perl5/ is created for all users https://bugzilla.redhat.com/show_bug.cgi?id=789146 -------------------------------------------------------------------------------- ================================================================================ python-gunicorn-0.13.4-3.fc15 (FEDORA-2012-1532) Python WSGI application server -------------------------------------------------------------------------------- Update Information: Gunicorn ("Green Unicorn") is a Python WSGI HTTP server for UNIX. It uses the pre-fork worker model, ported from Ruby's Unicorn project. It supports WSGI, Django, and Paster applications. -------------------------------------------------------------------------------- References: [ 1 ] Bug #785943 - Review Request: python-gunicorn - Python WSGI application server https://bugzilla.redhat.com/show_bug.cgi?id=785943 -------------------------------------------------------------------------------- ================================================================================ xen-4.1.2-6.fc15 (FEDORA-2012-1539) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information: Fix buffer overflow in e1000 emulation for HVM guests [CVE-2012-0029], Start building xen's ocaml, fix a crash and turn a backtrace into an ordinary error -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 2 2012 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.1.2-6 - Fix buffer overflow in e1000 emulation for HVM guests [CVE-2012-0029] * Sat Jan 28 2012 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.1.2-5 - Start building xen's ocaml libraries if appropriate unless --without ocaml was specified - add some backported patches from xen unstable (via Debian) for some ocaml tidying and fixes * Sun Jan 15 2012 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.1.2-4 - actually apply the xend-pci-loop.patch - compile fixes for gcc-4.7 * Wed Jan 11 2012 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.1.2-3 - Add xend-pci-loop.patch to stop xend crashing with weird PCI cards (#767742) - avoid a backtrace if xend can't log to the standard file or a temporary directory (part of #741042) -------------------------------------------------------------------------------- ================================================================================ yaml-cpp-0.3.0-1.fc15 (FEDORA-2012-1516) A YAML parser and emitter for C++ -------------------------------------------------------------------------------- Update Information: Update to new version needed by future review request. -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 10 2012 Richard Shaw <hobbes1069@xxxxxxxxx> - 0.3.0-1 - Update to latest release. * Sat Jan 14 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Fri Sep 30 2011 Guido Grazioli <guido.grazioli@xxxxxxxxx> - 0.2.7-1 - Update to 0.2.7 - Remove gcc 4.6 patch fixed upstream * Mon May 9 2011 Guido Grazioli <guido.grazioli@xxxxxxxxx> - 0.2.6-1 - Upstream 0.2.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #786528 - Please update to yaml-cpp 0.3.0 https://bugzilla.redhat.com/show_bug.cgi?id=786528 -------------------------------------------------------------------------------- ================================================================================ ykclient-2.7-1.fc15 (FEDORA-2012-1535) Yubikey management library and client -------------------------------------------------------------------------------- Update Information: Update pam_yubico to 2.10 fixing several bugs -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 8 2012 Nick Bebout <nb@xxxxxxxxxxxxxxxxx> - 2.7-1 - Update to 2.7 * Sat Jan 14 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Mon Nov 7 2011 Dennis Gilmore <dennis@xxxxxxxx> - 2.6-1 - update to 2.6 release. - include all .h header files -------------------------------------------------------------------------------- ================================================================================ znc-infobot-0.204-1.fc15 (FEDORA-2012-1542) infobot module for ZNC IRC Bouncer -------------------------------------------------------------------------------- Update Information: Fix broken dep -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 9 2012 Nick Bebout <nb@xxxxxxxxxxxxxxxxx> - 0.204-1 - Rebuild for znc 0.204 * Sat Jan 14 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.202-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test