The following Fedora 15 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-2012-8114/libreoffice-3.3.4.1-5.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-7567/php-5.3.13-1.fc15,maniadrive-1.2-32.fc15.5,php-eaccelerator-0.9.6.1-9.fc15.5
https://admin.fedoraproject.org/updates/FEDORA-2012-8161/ikiwiki-3.20111106-2.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-8205/python-tornado-2.2.1-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-6630/dokuwiki-0-0.10.20110525.a.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-7246/libsoup-2.34.3-2.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-6629/gdb-7.3.1-50.fc15
https://admin.fedoraproject.org/updates/FEDORA-2011-17233/tor-0.2.1.32-1500.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-8024/openssl-1.0.0j-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-7131/seamonkey-2.9.1-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-8041/xinetd-2.3.14-37.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-8010/sudo-1.7.4p5-5.fc15
The following Fedora 15 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/FEDORA-2012-8206/mdadm-3.2.5-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-8027/libogg-1.3.0-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-8010/sudo-1.7.4p5-5.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-8024/openssl-1.0.0j-1.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-7909/perl-5.12.4-166.fc15
https://admin.fedoraproject.org/updates/FEDORA-2012-7537/livecd-tools-15.13-1.fc15
https://admin.fedoraproject.org/updates/dracut-009-15.fc15
The following builds have been pushed to Fedora 15 updates-testing
hsqldb-1.8.1.3-5.fc15
mdadm-3.2.5-1.fc15
mozilla-https-everywhere-2.0.5-1.fc15
powertop-2.0-2.fc15
python-tornado-2.2.1-1.fc15
Details about builds:
================================================================================
hsqldb-1.8.1.3-5.fc15 (FEDORA-2012-8218)
HyperSQL Database Engine
--------------------------------------------------------------------------------
Update Information:
LSB compliant init script
There's an error in the changelog, the related bug is not 585125, but 524256.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2012 Tomas Radej <tradej@xxxxxxxxxx> - 1:1.8.1.3-5
- LSB compliant init script (bz #585125)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #524256 - Init script needs a few fixes for LSB compliance
https://bugzilla.redhat.com/show_bug.cgi?id=524256
--------------------------------------------------------------------------------
================================================================================
mdadm-3.2.5-1.fc15 (FEDORA-2012-8206)
The mdadm program controls Linux md devices (software RAID arrays)
--------------------------------------------------------------------------------
Update Information:
This is an update to the mdadm package, based on the latest upstream release, mdadm-3.2.5, which fixes a large number of bugs.
Bugs fixed include:
- Fix bug in the upstream mdadm-3.2.4 release where --add would fail in common situations.
- Fix Monitor mode sometimes crashes when a resync completes
- Fix missing symlink for mdadm container device when incremental creates the array
- Make sure when creating a second array in a container that the second array uses all available space since leaving space for a third array is invalid
- Validate the number of imsm volumes per controller
- Fix issues with imsm arrays and disks larger than 2TB
- Add support for expanding imsm arrays/containers
- The support for expanding imsm arrays/containers was accepted upstream, update to the official patches from there
- Fix for the issue of --add not being very smart
- Fix an issue causing rebuilds to fail to restart on reboot (data corrupter level problem)
- Reset the bad flag on map file updates
- Correctly fix failure when trying to add internal bitmap to 1.0 arrays
- Fix bug where IMSM arrays stay inactive in case a reboot is performed during the reshape process.
- Fix issue when re-adding drive to a raid1 array with bitmap
- Fix bug in the handling of raid arrays using a bitmap, preventing the automatic re-add to the array of a temporarily disconnected drive.
All users of mdadm RAIDs are encouraged to upgrade.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2012 Jes Sorensen <Jes.Sorensen@xxxxxxxxxx> - 3.2.5-1
- Upgrade to mdadm-3.2.5
- Resolves bz822850
* Tue May 15 2012 Jes Sorensen <Jes.Sorensen@xxxxxxxxxx> - 3.2.4-3
- Fix mdadm-3.2.4 introduced bug where --add fails in common cases
- Resolves bz821717 (f17) bz821718 (f16) bz821719 (f15)
* Thu May 10 2012 Jes Sorensen <Jes.Sorensen@xxxxxxxxxx> - 3.2.4-2
- Fix mdadm.conf to use 'd' for /var/run/mdadm creation, to avoid the
map file getting deleted during boot.
* Thu May 10 2012 Jes Sorensen <Jes.Sorensen@xxxxxxxxxx> - 3.2.4-1
- Upgrade to mdadm-3.2.4
- Resolves bz820534 (rawhide) bz820527 (f17) bz820531 (f16) bz820532 (f15)
* Mon Apr 30 2012 Jes Sorensen <Jes.Sorensen@xxxxxxxxxx> - 3.2.3-9
- Fix Monitor mode sometimes crashes when a resync completes
- Fix missing symlink for mdadm container device when incremental creates
the array
- Make sure when creating a second array in a container that the second
array uses all available space since leaving space for a third array
is invalid
- Validate the number of imsm volumes per controller
- Fix issues with imsm arrays and disks larger than 2TB
- Add support for expanding imsm arrays/containers
- The support for expanding imsm arrays/containers was accepted upstream,
update to the official patches from there
- Fix for the issue of --add not being very smart
- Fix an issue causing rebuilds to fail to restart on reboot (data
corrupter level problem)
- Reset the bad flag on map file updates
- Correctly fix failure when trying to add internal bitmap to 1.0 arrays
- Resolves: bz817023 (f17) bz817024 (f17) bz817026 (f17) bz817028 (f17)
- Resolves: bz817029 (f17) bz817032 (f17) bz817038 (f17) bz808774 (f17)
- Resolves: bz817039 (f17) bz817042 (f17)
* Mon Apr 30 2012 Jes Sorensen <Jes.Sorensen@xxxxxxxxxx> - 3.2.3-8
- Fix bug where IMSM arrays stay inactive in case a reboot is
- performed during the reshape process.
- Resolves: bz817522 (f17) bz817535 (f16) bz817537 (f15)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #822850 - mdadm-3.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=822850
[ 2 ] Bug #821719 - mdadm --add fails in common situations
https://bugzilla.redhat.com/show_bug.cgi?id=821719
[ 3 ] Bug #820532 - Update mdadm to version 3.2.4
https://bugzilla.redhat.com/show_bug.cgi?id=820532
[ 4 ] Bug #817023 - "mdadm --monitor" crashes when resync finishes
https://bugzilla.redhat.com/show_bug.cgi?id=817023
[ 5 ] Bug #817024 - imsm: validate the number of imsm volumes per controller
https://bugzilla.redhat.com/show_bug.cgi?id=817024
[ 6 ] Bug #817026 - mdadm: add volume's size expansion feature
https://bugzilla.redhat.com/show_bug.cgi?id=817026
[ 7 ] Bug #817028 - mdadm: imsm: second volume must have size of whole free space left on devices
https://bugzilla.redhat.com/show_bug.cgi?id=817028
[ 8 ] Bug #817029 - imsm: disk/volume sizes incorrect when using disks 1TB+
https://bugzilla.redhat.com/show_bug.cgi?id=817029
[ 9 ] Bug #817032 - link to imsm container device is not created when incremental assembly is used
https://bugzilla.redhat.com/show_bug.cgi?id=817032
[ 10 ] Bug #817038 - Can't add bitmap to array (version 1.0 metadata)
https://bugzilla.redhat.com/show_bug.cgi?id=817038
[ 11 ] Bug #808774 - make mdadm --add not do stupid things
https://bugzilla.redhat.com/show_bug.cgi?id=808774
[ 12 ] Bug #817039 - Rebuild does not continue after reboot.
https://bugzilla.redhat.com/show_bug.cgi?id=817039
[ 13 ] Bug #817042 - mdadm: Reset 'bad' flag on map update
https://bugzilla.redhat.com/show_bug.cgi?id=817042
[ 14 ] Bug #817537 - MD raid devices inactive after reboot done during reshape
https://bugzilla.redhat.com/show_bug.cgi?id=817537
[ 15 ] Bug #791159 - mdadm write intent map not functioning as before
https://bugzilla.redhat.com/show_bug.cgi?id=791159
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-2.0.5-1.fc15 (FEDORA-2012-8204)
HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
--------------------------------------------------------------------------------
Update Information:
* Fix for compatibility with some other Firefox extensions:
https://trac.torproject.org/projects/tor/ticket/5682
* Fixes: Wordpress stylesheets, USENIX, Mozilla, Opera, Indymedia
https://trac.torproject.org/projects/tor/ticket/5905
https://mail1.eff.org/pipermail/https-everywhere-rules/2012-April/001105.html
* Disable broken: Pandora, Miranda IM, Pastebin.ca, PaidContent
https://trac.torproject.org/projects/tor/ticket/5804
https://trac.torproject.org/projects/tor/ticket/5776
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
powertop-2.0-2.fc15 (FEDORA-2012-8219)
Power consumption monitor
--------------------------------------------------------------------------------
Update Information:
This is an update that fixes segfault during calibration (powertop --calibrate).
This is new version of powertop that fixes several bugs and also introduces new features. For original announcement see: http://01.org/powertop/blogs/ceferron/2012/powertop-v2.0-release
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 2.0-2
- Fixed segfault during calibration
Resolves: rhbz#823502
- Used macro optflags instead of variable RPM_OPT_FLAGS
* Wed May 16 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 2.0-1
- New version
Resolves: rhbz#821144
- Dropped patches: unknown-readings-fix (upstreamed), compile-fix (upstreamed),
power-supply-add-power-now-support (upstreamed),
html-print-commands (upstreamed), add-power-supply-class-support (obsoleted),
power-supply-units-fix (obsoleted)
- Updated patches: show-watts-only-if-discharging patch (sent upstream),
html-escape patch
- Added patch: valid-html-output (sent upstream)
* Tue Apr 17 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 1.98-9
- Show power consumption only if discharging
Resolves: rhbz#811949
* Tue Apr 3 2012 Jan Kaluza <jkaluza@xxxxxxxxxx> - 1.98-8
- Escape scripts in HTML output
* Mon Mar 26 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 1.98-7
- Print commands which reproduce the tunings into html log (html-print-commands patch)
* Wed Mar 7 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 1.98-6
- Fixed power_supply units
Resolves: rhbz#800814
* Tue Feb 28 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.98-5
- Rebuilt for c++ ABI breakage
* Fri Feb 24 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 1.98-4
- Backported support for power_supply class
(add-power-supply-class-support patch)
- Added support for POWER_NOW readings
(power-supply-add-power-now-support patch)
Resolves: rhbz#796068
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #823502 - powertop --calibrate segfaults
https://bugzilla.redhat.com/show_bug.cgi?id=823502
[ 2 ] Bug #821144 - powertop-2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=821144
--------------------------------------------------------------------------------
================================================================================
python-tornado-2.2.1-1.fc15 (FEDORA-2012-8205)
Scalable, non-blocking web server and tools
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.1 which fixes an HTTP header injection vulnerability.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 20 2012 Thomas Spura <tomspur@xxxxxxxxxxxxxxxxx> - 2.2.1-1
- update to upstream release 2.2.1 (fixes CVE-2012-2374)
- fix typo for epel6 macro bug #822972 (Florian La Roche)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #822852 - CVE-2012-2374 python-tornado: Tornado v2.2.1 tornado.web.RequestHandler.set_header() fix to prevent header injection
https://bugzilla.redhat.com/show_bug.cgi?id=822852
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
