On Wed, 29 Aug 2007 20:56:21 +0200, Michael Schwendt wrote: > On Wed, 29 Aug 2007 14:45:16 -0400, Peter Jones wrote: > > > Michael Schwendt wrote: > > > $ rpm -qi sylpheed|grep 'Build Date' > > > Release : 3 Build Date: Fri 24 Aug 2007 01:21:16 PM CEST > > > > > > $ grep -B2 POP3 sylpheed.spec > > > %changelog > > > * Fri Aug 24 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 2.4.4-3 > > > - Patch POP3 format string vulnerability CVE-2007-2958 (#254123). > > > > > > But: > > > > > > $ LANG=C rpm -q sylpheed --changelog|head -3 > > > * Sat Aug 25 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 2.4.4-3 > > > - Patch POP3 format string vulnerability CVE-2007-2958 (#254123). > > > > > > *All* entries are off by one day forward. Bug or PEBKAC? > > > > > > > What's your timezone set to? > > $ cat /etc/sysconfig/clock > ZONE="Europe/Berlin" > UTC=true > ARC=false > Fedora 7 is affected, too. All F7 Test Updates, for example, don't pass this check. The Test Update announcements print changelog dates that doesn't match the rpm --changelog query, which is off by one into the future compared with what the spec file contains. E.g.: metacity announcement says: * Tue Sep 11 2007 Ray Strode <rstrode redhat com> - 2.18.5-2 - don't dereference a NULL pointer (crash on logout, leading to weird problems on next login, bug 243761) rpm says: * Wed Sep 12 2007 Ray Strode <rstrode redhat com> - 2.18.5-2 - don't dereference a NULL pointer (crash on logout, leading to weird problems on next login, bug 243761) yum announcement says: * Mon Sep 10 2007 Seth Vidal <skvidal at fedoraproject org> - 3.2.5-1 - 3.2.5 - prune unnecessary patches rpm says: * Tue Sep 11 2007 Seth Vidal <skvidal at fedoraproject org> - 3.2.5-1 - 3.2.5 - prune unnecessary patches -- fedora-test-list mailing list fedora-test-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-test-list
