Fedora 16 updates-testing report

Fri Dec 21 12:11:24 UTC 2012

The following Fedora 16 Security updates need testing:
 Age  URL
   5  https://admin.fedoraproject.org/updates/FEDORA-2012-20404/libtiff-3.9.7-1.fc16
  10  https://admin.fedoraproject.org/updates/FEDORA-2012-20156/389-ds-base-1.2.10.24-1.fc16
  10  https://admin.fedoraproject.org/updates/FEDORA-2012-20157/libproxy-0.4.11-1.fc16
  10  https://admin.fedoraproject.org/updates/FEDORA-2012-20159/v8-3.13.7.5-1.fc16
  90  https://admin.fedoraproject.org/updates/FEDORA-2012-14452/bacula-5.0.3-33.fc16
   2  https://admin.fedoraproject.org/updates/FEDORA-2012-20621/inkscape-0.48.4-1.fc16
   2  https://admin.fedoraproject.org/updates/FEDORA-2012-20623/freeciv-2.3.3-1.fc16
  15  https://admin.fedoraproject.org/updates/FEDORA-2012-19822/bind-9.8.4-3.P1.fc16
   9  https://admin.fedoraproject.org/updates/FEDORA-2012-20236/rssh-2.3.4-1.fc16
  16  https://admin.fedoraproject.org/updates/FEDORA-2012-19347/cups-1.5.4-10.fc16
 168  https://admin.fedoraproject.org/updates/FEDORA-2012-10314/revelation-0.4.14-1.fc16
  88  https://admin.fedoraproject.org/updates/FEDORA-2012-14654/tor-0.2.2.39-1600.fc16
   3  https://admin.fedoraproject.org/updates/FEDORA-2012-20537/squid-3.2.5-1.fc16
  51  https://admin.fedoraproject.org/updates/FEDORA-2012-17291/thunderbird-16.0.2-1.fc16
  16  https://admin.fedoraproject.org/updates/FEDORA-2012-19752/dovecot-2.0.21-4.fc16
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-20794/drupal6-6.27-1.fc16,drupal7-7.18-1.fc16

The following Fedora 16 Critical Path updates have yet to be approved:
 Age URL
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-20787/iproute-2.6.39-8.fc16
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-20768/system-config-users-1.3.3-1.fc16
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-20795/nss-util-3.14-1.fc16,nss-softokn-3.14-5.fc16,nss-3.14-7.fc16
   5  https://admin.fedoraproject.org/updates/FEDORA-2012-20414/xulrunner-17.0.1-2.fc16
   5  https://admin.fedoraproject.org/updates/FEDORA-2012-20404/libtiff-3.9.7-1.fc16
   9  https://admin.fedoraproject.org/updates/FEDORA-2012-20239/mdadm-3.2.6-7.fc16
   5  https://admin.fedoraproject.org/updates/FEDORA-2012-20238/python-slip-0.2.24-1.fc16,system-config-date-1.10.5-1.fc16
   9  https://admin.fedoraproject.org/updates/FEDORA-2012-20244/mdadm-3.2.6-4.fc16
  10  https://admin.fedoraproject.org/updates/FEDORA-2012-20141/unzip-6.0-5.fc16
  10  https://admin.fedoraproject.org/updates/FEDORA-2012-20155/xmlrpc-c-1.27.7-1604.svn2185.fc16
  10  https://admin.fedoraproject.org/updates/FEDORA-2012-20157/libproxy-0.4.11-1.fc16
The following builds have been pushed to Fedora 16 updates-testing

    0ad-0.0.12-2.fc16
    0ad-data-0.0.12-1.fc16
    asterisk-1.8.19.0-1.fc16
    ax25-apps-0.0.6-12.fc16
    ccd2iso-0.3-10.fc16
    cherrytree-0.28.5-1.fc16
    darktable-1.1.1-1.fc16
    drupal6-6.27-1.fc16
    drupal7-7.18-1.fc16
    globus-common-14.9-1.fc16
    globus-core-8.9-2.fc16
    globus-gram-job-manager-13.51-1.fc16
    globus-gram-job-manager-condor-1.4-1.fc16
    globus-gram-job-manager-pbs-1.6-1.fc16
    globus-gram-job-manager-sge-1.5-2.fc16
    globus-gridftp-server-6.16-1.fc16
    globus-gsi-callback-4.4-1.fc16
    globus-scheduler-event-generator-4.7-1.fc16
    globus-simple-ca-3.2-1.fc16
    gphotoframe-1.5.1-3.fc16
    grid-packaging-tools-3.6.3-1.fc16
    iproute-2.6.39-8.fc16
    libhid-0.2.17-11.fc16
    libnetfilter_acct-1.0.0-2.fc16
    maniadrive-1.2-32.fc16.12
    nordugrid-arc-2.0.1-1.fc16
    nss-3.14-7.fc16
    nss-softokn-3.14-5.fc16
    nss-util-3.14-1.fc16
    nvidia-texture-tools-2.0.8-3.fc16
    php-5.3.20-1.fc16
    php-eaccelerator-0.9.6.1-9.fc16.12
    php-simplepie-1.3.1-2.fc16
    salt-0.11.1-1.fc16
    system-config-users-1.3.3-1.fc16
    tomcat-native-1.1.24-1.fc16
    voms-2.0.9-1.fc16
    xen-4.1.4-1.fc16
    zanata-python-client-1.3.13-1.fc16
    znc-infobot-1.0-2.fc16

Details about builds:

================================================================================
 0ad-0.0.12-2.fc16 (FEDORA-2012-20773)
 Cross-Platform RTS Game of Ancient Warfare
--------------------------------------------------------------------------------
Update Information:

Update to latest 0ad and 0ad-data, and add new nvidia-texture-tools dependency.

--------------------------------------------------------------------------------
ChangeLog:

* Wed Dec 19 2012 pcpa <paulo.cesar.pereira.de.andrade at gmail.com> - 0.0.11-2
- Enable build with system nvtt as it is now approved in Fedora (#823096)
- Correct release date in manual page
- Minor consistency correction in manual page formatting
- Regenerate the licensecheck text file to match pristine tarball
* Tue Dec 18 2012 pcpa <paulo.cesar.pereira.de.andrade at gmail.com> - 0.0.11-1
- Update to latest upstream release
- Remove no longer required gamin patch
- Rediff rpath patch
- Remove libxml2 patch already applied upstream
- Update 0ad manpage for newer options and release information
- Add versioned requires to data files
- Add 0ad licensecheck text file to simplify checking changes
* Sat Nov  3 2012 pcpa <paulo.cesar.pereira.de.andrade at gmail.com> - 0.0.11-4
- Add %with_debug maintainer mode build
- Disable fcollada debug build if %with_debug is false
- Add patch to not crash and display helful messages in editor (#872801)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #823096 - Review Request: nvidia-texture-tools - Collection of image processing and texture manipulation tools
        https://bugzilla.redhat.com/show_bug.cgi?id=823096
  [ 2 ] Bug #888438 - RFE: Alpha 12 is now available
        https://bugzilla.redhat.com/show_bug.cgi?id=888438
--------------------------------------------------------------------------------

================================================================================
 0ad-data-0.0.12-1.fc16 (FEDORA-2012-20773)
 The Data Files for 0 AD
--------------------------------------------------------------------------------
Update Information:

Update to latest 0ad and 0ad-data, and add new nvidia-texture-tools dependency.

--------------------------------------------------------------------------------
ChangeLog:

* Tue Dec 18 2012 pcpa <paulo.cesar.pereira.de.andrade at gmail.com> - 0.0.12-1
- Update to latest upstream release
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #823096 - Review Request: nvidia-texture-tools - Collection of image processing and texture manipulation tools
        https://bugzilla.redhat.com/show_bug.cgi?id=823096
  [ 2 ] Bug #888438 - RFE: Alpha 12 is now available
        https://bugzilla.redhat.com/show_bug.cgi?id=888438
--------------------------------------------------------------------------------

================================================================================
 asterisk-1.8.19.0-1.fc16 (FEDORA-2012-20765)
 The Open Source PBX
--------------------------------------------------------------------------------
Update Information:

The Asterisk Development Team has announced the release of Asterisk 1.8.19.0.
This release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk

The release of Asterisk 1.8.19.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* --- Prevent resetting of NATted realtime peer address on reload.
  (Closes issue ASTERISK-18203. Reported by daren ferreira)

* --- Do not use a FILE handle when doing SIP TCP reads.
  (Closes issue ASTERISK-20212. Reported by Phil Ciccone)

* --- Fix execution of 'i' extension due to uninitialized variable.
  (Closes issue ASTERISK-20455. Reported by Richard Miller)

* --- Ensure that the Queue application tracks busy members in off
      nominal situations
  (Closes issue ASTERISK-20623. Reported by Bryan Walters)

* --- Properly extract the Body information of an EWS calendar item
  (Closes issue ASTERISK-19738. Reported by Dmitry Burilov)

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.19.0
--------------------------------------------------------------------------------
ChangeLog:

* Wed Dec 19 2012 Jeffrey Ollie <jeff at ocjtech.us> - 1.8.19.0-1:
- The Asterisk Development Team has announced the release of Asterisk 1.8.19.0.
- This release is available for immediate download at
- http://downloads.asterisk.org/pub/telephony/asterisk
-
- The release of Asterisk 1.8.19.0 resolves several issues reported by the
- community and would have not been possible without your participation.
- Thank you!
-
- The following is a sample of the issues resolved in this release:
-
- * --- Prevent resetting of NATted realtime peer address on reload.
-   (Closes issue ASTERISK-18203. Reported by daren ferreira)
-
- * --- Do not use a FILE handle when doing SIP TCP reads.
-   (Closes issue ASTERISK-20212. Reported by Phil Ciccone)
-
- * --- Fix execution of 'i' extension due to uninitialized variable.
-   (Closes issue ASTERISK-20455. Reported by Richard Miller)
-
- * --- Ensure that the Queue application tracks busy members in off
-       nominal situations
-   (Closes issue ASTERISK-20623. Reported by Bryan Walters)
-
- * --- Properly extract the Body information of an EWS calendar item
-   (Closes issue ASTERISK-19738. Reported by Dmitry Burilov)
-
- For a full list of changes in this release, please see the ChangeLog:
-
- http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.19.0
* Fri Dec  7 2012 Jeffrey Ollie <jeff at ocjtech.us> - 1.8.18.1-1:
- The Asterisk Development Team has announced the release of Asterisk 1.8.18.1.
- This release is available for immediate download at
- http://downloads.asterisk.org/pub/telephony/asterisk
-
- The release of Asterisk 1.8.18.1 resolves an issue reported by the
- community and would have not been possible without your participation.
- Thank you!
-
- The following is the issue resolved in this release:
-
- * --- chan_local: Fix local_pvt ref leak in local_devicestate().
-   (Closes issue ASTERISK-20769. Reported by rmudgett)
-
- For a full list of changes in this release, please see the ChangeLog:
-
- http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.18.1
--------------------------------------------------------------------------------

================================================================================
 ax25-apps-0.0.6-12.fc16 (FEDORA-2012-20786)
 AX.25 ham radio applications
--------------------------------------------------------------------------------
Update Information:

Source re-released under BSD. Patched source in question, added BSD License
--------------------------------------------------------------------------------
ChangeLog:

* Tue Dec 18 2012 Randall Berry, N3LRX <dp67 at fedoraproject.org> - 0.0.6-12
- Add patch to relicense /listen/ripdump.c
- Author re-released source in question under BSD
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=630893
- BZ: #888206 https://bugzilla.redhat.com/show_bug.cgi?id=888206
- Add BSD license text to package.
* Sun Aug  5 2012 Randall Berry, N3LRX <dp67 at fedoraproject.org> - 0.0.6-11
- Cleanup build for F18/Rawhide
- Remove patch1 0 byte file
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.0.6-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.0.6-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #888206 - ax25-apps included non-free source file.
        https://bugzilla.redhat.com/show_bug.cgi?id=888206
--------------------------------------------------------------------------------

================================================================================
 ccd2iso-0.3-10.fc16 (FEDORA-2012-20793)
 CloneCD image to ISO image file converter
--------------------------------------------------------------------------------
Update Information:

This is an update that just adds a manual page originally written for the debian package of ccd2iso.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Dec 20 2012 Mohammed El-Afifi <Mohammed_ElAfifi at yahoo.com> - 0.3-10
- Adding a manual page from debian distro
--------------------------------------------------------------------------------

================================================================================
 cherrytree-0.28.5-1.fc16 (FEDORA-2012-20769)
 Hierarchical note taking application
--------------------------------------------------------------------------------
Update Information:

New upstream release
--------------------------------------------------------------------------------
ChangeLog:

* Wed Dec 19 2012 Robin Lee <cheeselee at fedoraproject.org> - 0.28.5-1
- Update to 0.28.5
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #784230 - cherrytree-0.28.5 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=784230
--------------------------------------------------------------------------------

================================================================================
 darktable-1.1.1-1.fc16 (FEDORA-2012-20802)
 Utility to organize and develop raw images
--------------------------------------------------------------------------------
Update Information:

upgrade to 1.1
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 28 2012 Edouard Bourguignon <madko at linuxed.net> - 1.1.1-1
- Upgrade to 1.1.1
* Sat Nov 24 2012 Edouard Bourguignon <madko at linuxed.net> - 1.1-1
- Upgrade to 1.1
* Wed Nov 14 2012 Edouard Bourguignon <madko at linuxed.net> - 1.1-0.1.rc2
- Upgrade to 1.1~rc2
* Wed Oct 31 2012 Edouard Bourguignon <madko at linuxed.net> - 1.1-0.1.rc1
- Upgrade to 1.1~rc1
--------------------------------------------------------------------------------

================================================================================
 drupal6-6.27-1.fc16 (FEDORA-2012-20794)
 An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:

Upstream Drupal has reported SA-CORE-2012-004 [1] which corrects multiple vulnerabilities:

1) Access bypass (User module search - Drupal 6 and 7)
2) Access bypass (Upload module - Drupal 6)
3) Arbitrary PHP code execution (File upload modules - Drupal 6 and 7)

CVEs have been requested and are not yet assigned.

These flaws have been fixed in Drupal 6.27 and 7.18.

[1] http://drupal.org/SA-CORE-2012-004
--------------------------------------------------------------------------------
ChangeLog:

* Thu Dec 20 2012 Jon Ciesla <limburgher at gmail.com> - 6.27-1
- 6.27.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #888990 - CVE-2012-5651 CVE-2012-5652 CVE-2012-5653 drupal: multiple flaws fixed in 6.27/7.18 (SA-CORE-2012-004)
        https://bugzilla.redhat.com/show_bug.cgi?id=888990
--------------------------------------------------------------------------------

================================================================================
 drupal7-7.18-1.fc16 (FEDORA-2012-20794)
 An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:

Upstream Drupal has reported SA-CORE-2012-004 [1] which corrects multiple vulnerabilities:

1) Access bypass (User module search - Drupal 6 and 7)
2) Access bypass (Upload module - Drupal 6)
3) Arbitrary PHP code execution (File upload modules - Drupal 6 and 7)

CVEs have been requested and are not yet assigned.

These flaws have been fixed in Drupal 6.27 and 7.18.

[1] http://drupal.org/SA-CORE-2012-004
--------------------------------------------------------------------------------
ChangeLog:

* Thu Dec 20 2012 Jon Ciesla <limburgher at gmail.com> - 7.18-1
- 7.18.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #888990 - CVE-2012-5651 CVE-2012-5652 CVE-2012-5653 drupal: multiple flaws fixed in 6.27/7.18 (SA-CORE-2012-004)
        https://bugzilla.redhat.com/show_bug.cgi?id=888990
--------------------------------------------------------------------------------

================================================================================
 globus-common-14.9-1.fc16 (FEDORA-2012-20777)
 Globus Toolkit - Common Library
--------------------------------------------------------------------------------
Update Information:

Update to Globus Toolkit 5.2.3.