The following Fedora 15 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-2012-3356/kernel-2.6.42.9-2.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-3414/python-sqlalchemy0.5-0.5.8-9.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-3355/rubygem-actionpack-3.0.5-6.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-3483/kdelibs-4.6.5-11.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-0752/jetty-6.1.26-7.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-3315/notmuch-0.5-5.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-3363/condor-7.7.5-0.2.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-1838/thunderbird-10.0.1-2.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-3068/iproute-2.6.38.1-6.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-2403/seamonkey-2.7.1-2.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-2367/puppet-2.6.14-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-17233/tor-0.2.1.32-1500.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-16980/asterisk-1.8.7.2-1.fc15
The following Fedora 15 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/FEDORA-2012-3483/kdelibs-4.6.5-11.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-3487/krb5-1.9.3-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-3300/gcc-4.6.3-2.fc15,libtool-2.4-9.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-3308/lorax-0.4.7-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-3037/audit-2.2-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-3090/livecd-tools-15.12-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-3068/iproute-2.6.38.1-6.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-2737/mysql-5.5.21-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-2577/systemd-26-17.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-2396/system-config-printer-1.3.8-4.fc15,python-cups-1.9.60-2.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-2376/mdadm-3.2.3-6.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-13190/phonon-backend-gstreamer-4.5.90-2.fc15,phonon-4.5.57-1.20110914.fc15
The following builds have been pushed to Fedora 15 updates-testing
elinks-0.12-0.26.pre5.fc15
ghc-cabal-file-th-0.2.2-1.fc15
kdelibs-4.6.5-11.fc15
krb5-1.9.3-1.fc15
lua-sec-0.4.1-2.fc15
perl-Test-Assert-0.0504-2.fc15
pl-5.10.2-7.fc15
python-setproctitle-1.1.3-2.fc15
Details about builds:
================================================================================
elinks-0.12-0.26.pre5.fc15 (FEDORA-2012-3472)
A text-mode Web browser
--------------------------------------------------------------------------------
Update Information:
do not crash if add_heartbeat() returned NULL (#798103)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 9 2012 Kamil Dudka <kdudka@xxxxxxxxxx> - 0.12-0.26.pre5
- do not crash if add_heartbeat() returned NULL (#798103)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #798103 - elinks crashes on loading the attached page with ecmascript enabled
https://bugzilla.redhat.com/show_bug.cgi?id=798103
--------------------------------------------------------------------------------
================================================================================
ghc-cabal-file-th-0.2.2-1.fc15 (FEDORA-2012-3469)
Template Haskell expressions for reading cabal files
--------------------------------------------------------------------------------
Update Information:
New package (required for hledger).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #798506 - Review Request: ghc-cabal-file-th - Template Haskell expressions for reading cabal files
https://bugzilla.redhat.com/show_bug.cgi?id=798506
--------------------------------------------------------------------------------
================================================================================
kdelibs-4.6.5-11.fc15 (FEDORA-2012-3483)
KDE Libraries
--------------------------------------------------------------------------------
Update Information:
This update:
* fixes a security issue in khtml: CVE-2010-0046: CSS format() argument memory corruption,
* fixes KTar for archives created by git archive (kde#258737).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 9 2012 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> 4.6.5-11
- fix KTar for archives created by git archive (kde#258737)
* Fri Nov 18 2011 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.6.5-10
- CVE-2010-0046, security issue in khtml
* Wed Nov 16 2011 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.6.5-9
- restore halectomy patch (sans fstab-removing pieces)
--------------------------------------------------------------------------------
================================================================================
krb5-1.9.3-1.fc15 (FEDORA-2012-3487)
The Kerberos network authentication system
--------------------------------------------------------------------------------
Update Information:
This update updates the package from version 1.9.2 to 1.9.3, which incorporates the patches for the previously-issued security update and a bug encountered when computing hmac-md5 MAC values with certain cipher types. It also includes fixes for the removal scriptlet for the krb5-workstation subpackage and a fix which once again causes the key version number to be ignored when searching a keytab for a key which can decrypt an AP request, if the specified key version number is 0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 8 2012 Nalin Dahyabhai <nalin@xxxxxxxxxx> 1.9.3-1
- update to 1.9.3
- drop patch for CVE-2011-1530, incorporated upstream
- drop patch for #756139, incorporated into 1.9 as RT#7007
- when removing -workstation, remove our files from the info index while
the file is still there, in %preun, rather than %postun, and use the
compressed file's name (#801035)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #801035 - rpm -e krb5-workstation have an issue/warning
https://bugzilla.redhat.com/show_bug.cgi?id=801035
--------------------------------------------------------------------------------
================================================================================
lua-sec-0.4.1-2.fc15 (FEDORA-2012-3491)
Lua binding for OpenSSL library
--------------------------------------------------------------------------------
Update Information:
First import in repositories
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #551763 - Review Request: lua-sec - Lua binding for OpenSSL library
https://bugzilla.redhat.com/show_bug.cgi?id=551763
--------------------------------------------------------------------------------
================================================================================
perl-Test-Assert-0.0504-2.fc15 (FEDORA-2012-3467)
Assertion methods for those who like JUnit
--------------------------------------------------------------------------------
Update Information:
This update, to the current upstream release from CPAN:
* Fixes the error message for assert_deep_equals
* Uses Symbol::Util as exported; all exported symbols can be removed with the "no Test::Assert" statement
* Updates the ":assert" tag to also import the "ASSERT" constant
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 9 2012 Paul Howarth <paul@xxxxxxxxxxxx> - 0.0504-2
- Run the release tests too
- Extract upstream tarball in a subdir to avoid interference with signature/
manifest tests
- BR: perl(File::Slurp)
- BR: perl(Test::CheckChanges)
- BR: perl(Test::Distribution)
- BR: perl(Test::Kwalitee)
- BR: perl(Test::MinimumVersion)
- BR: perl(Test::Perl::Critic)
- BR: perl(Test::Pod)
- BR: perl(Test::Pod::Coverage)
- BR: perl(Test::Signature)
- BR: perl(Test::Spelling), hunspell-en
* Fri Mar 9 2012 Paul Howarth <paul@xxxxxxxxxxxx> - 0.0504-1
- Update to 0.0504:
- Fixed error message for assert_deep_equals
- Uses Symbol::Util as exported; all exported symbols can be removed with
"no Test::Assert" statement
- Minor refactoring of "assert_deep_equals" method and its private methods
- Require Symbol::Util ≥ 0.0202 and constant::boolean ≥ 0.02
- Build requires Class::Inspector
- The ":assert" tag also imports the "ASSERT" constant
- Spec clean-up:
- Include LICENSE file
- Include eg/ directory as %doc
- Add %{?perl_default_filter} to avoid doc-file dependencies from examples
- BR: Perl core modules that might be dual-lived
- Don't need to remove empty directories from buildroot
- Make %files list more explicit
- Drop %defattr, redundant since rpm 4.4
- Drop buildroot definition and cleaning, redundant since rpm 4.6
- Don't use macros for commands
- Drop unnecessary dependency filtering
- Use tabs
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.0501-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Thu Jun 23 2011 Marcela Mašláňová <mmaslano@xxxxxxxxxx> - 0.0501-8
- Perl mass rebuild
--------------------------------------------------------------------------------
================================================================================
pl-5.10.2-7.fc15 (FEDORA-2012-3479)
SWI-Prolog - Edinburgh compatible Prolog compiler
--------------------------------------------------------------------------------
Update Information:
Java interface has been fixed. Native library is located correctly now.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 8 2012 Petr Pisar <ppisar@xxxxxxxxxx> - 5.10.2-7
- Fix JPL interface (bug #590499)
* Fri Sep 23 2011 Petr Pisar <ppisar@xxxxxxxxxx> - 5.10.2-6
- Correct Java paths on ARM (thanks to David A. Marlin)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #590499 - pl-jpl : jpl.jar unable to find and load JNI library libjpl.so
https://bugzilla.redhat.com/show_bug.cgi?id=590499
--------------------------------------------------------------------------------
================================================================================
python-setproctitle-1.1.3-2.fc15 (FEDORA-2012-3480)
Python module to customize a process title
--------------------------------------------------------------------------------
Update Information:
initial import
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
