Fedora 17 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Tue Oct 23 01:59:11 UTC 2012


The following Fedora 17 Security updates need testing:
 Age  URL
   4  https://admin.fedoraproject.org/updates/FEDORA-2012-16442/drupal7-7.16-1.fc17
 106  https://admin.fedoraproject.org/updates/FEDORA-2012-10391/bcfg2-1.2.3-1.fc17
   4  https://admin.fedoraproject.org/updates/FEDORA-2012-16440/Django-1.4.2-1.fc17
   3  https://admin.fedoraproject.org/updates/FEDORA-2012-16485/xlockmore-5.40-3.fc17
  12  https://admin.fedoraproject.org/updates/FEDORA-2012-15874/drupal7-feeds-2.0-0.5.alpha6.fc17
  13  https://admin.fedoraproject.org/updates/FEDORA-2012-15754/phpMyAdmin-3.5.3-1.fc17
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-16614/dokuwiki-0-0.14.20121013.fc17
  29  https://admin.fedoraproject.org/updates/FEDORA-2012-14650/tor-0.2.2.39-1700.fc17
   6  https://admin.fedoraproject.org/updates/FEDORA-2012-15842/seamonkey-2.13.1-1.fc17
  10  https://admin.fedoraproject.org/updates/FEDORA-2012-16048/cobbler-2.4.0-beta2.fc17
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-16674/viewvc-1.1.15-3.fc17
  27  https://admin.fedoraproject.org/updates/FEDORA-2012-14717/openjpeg-1.4-14.fc17
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-16662/net-snmp-5.7.1-5.fc17
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-16680/optipng-0.7.4-1.fc17
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-16669/kernel-3.6.3-1.fc17
   7  https://admin.fedoraproject.org/updates/FEDORA-2012-16163/ssmtp-2.61-19.fc17
  33  https://admin.fedoraproject.org/updates/FEDORA-2012-14347/pcp-3.6.8-1.fc17
   7  https://admin.fedoraproject.org/updates/FEDORA-2012-16148/python-django-horizon-2012.1.3-1.fc17
 109  https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4.14-1.fc17
   7  https://admin.fedoraproject.org/updates/FEDORA-2012-16147/icecast-2.3.3-1.fc17


The following Fedora 17 Critical Path updates have yet to be approved:
 Age URL
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-16669/kernel-3.6.3-1.fc17
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-16629/libdrm-2.4.39-1.fc17,xorg-x11-drv-intel-2.20.10-2.fc17
   3  https://admin.fedoraproject.org/updates/FEDORA-2012-16487/mdadm-3.2.5-14.fc17
   4  https://admin.fedoraproject.org/updates/FEDORA-2012-16429/perl-5.14.3-217.fc17
   5  https://admin.fedoraproject.org/updates/FEDORA-2012-16363/xcb-proto-1.8-1.fc17,libxcb-1.9-1.fc17
   6  https://admin.fedoraproject.org/updates/FEDORA-2012-16238/ntfs-3g-2012.1.15-5.fc17
  10  https://admin.fedoraproject.org/updates/FEDORA-2012-15978/openldap-2.4.33-2.fc17
  12  https://admin.fedoraproject.org/updates/FEDORA-2012-15849/python-nss-0.13-0.fc17
  13  https://admin.fedoraproject.org/updates/FEDORA-2012-15729/pyxdg-0.23-1.fc17
   8  https://admin.fedoraproject.org/updates/FEDORA-2012-16091/kde-settings-4.8-22.fc17
  61  https://admin.fedoraproject.org/updates/FEDORA-2012-12509/PackageKit-0.7.6-1.fc17
The following builds have been pushed to Fedora 17 updates-testing

    abi-compliance-checker-1.98.4-1.fc17
    ansible-0.8-1.fc17
    emacs-24.1-6.fc17
    jline2-2.5-7.fc17
    kernel-3.6.3-1.fc17
    libesedb-20120102-3.fc17
    logwatch-7.4.0-18.20120619svn110.fc17
    mate-panel-1.4.0-12.fc17
    nagios-plugins-lcgdm-0.9.4-1.fc17
    net-snmp-5.7.1-5.fc17
    onesixtyone-0.3.2-8.fc17
    openscap-0.9.1-1.fc17
    optipng-0.7.4-1.fc17
    php-channel-theseer-1.3-1.fc17
    php-zmq-0.6.0-7.20120613git516bd6f.fc17
    roundcubemail-0.8.2-1.fc17
    tuned-2.0.1-4.fc17
    viewvc-1.1.15-3.fc17
    wireshark-1.6.11-1.fc17
    xautomation-1.07-1.fc17

Details about builds:


================================================================================
 abi-compliance-checker-1.98.4-1.fc17 (FEDORA-2012-16661)
 An ABI Compliance Checker
--------------------------------------------------------------------------------
Update Information:

Update to latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Oct 21 2012 Richard Shaw <hobbes1069 at gmail.com> - 1.98.4-1
- Update to latest upstream release.
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.98.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Tue Jul  3 2012 Richard Shaw <hobbes1069 at gmail.com> - 1.98.2-1
- Update to latest upstream release.
* Tue Jun 19 2012 Richard Shaw <hobbes1069 at gmail.com> - 1.98.1-1
- Update to latest upstream release.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #832644 - abi-compliance-checker-1.98.4 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=832644
--------------------------------------------------------------------------------


================================================================================
 ansible-0.8-1.fc17 (FEDORA-2012-16670)
 SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:

Release of 0.8
--------------------------------------------------------------------------------
ChangeLog:

* Fri Oct 19 2012 Michael DeHaan <michael.dehaan at gmail.com> - 0.8-0
- Release of 0.8
--------------------------------------------------------------------------------


================================================================================
 emacs-24.1-6.fc17 (FEDORA-2012-16677)
 GNU Emacs text editor
--------------------------------------------------------------------------------
Update Information:

Change xorg-x11-fonts-misc dependency to dejavu-sans-mono-fonts
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Karel Klíč <kklic at redhat.com> - 1:24.1-6
- Rebuild
* Mon Oct 22 2012 Karel Klíč <kklic at redhat.com> - 1:24.1-5
- Change xorg-x11-fonts-misc dependency to dejavu-sans-mono-fonts, rhbz#732422
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #732422 - emacs doesn't start without font installed
        https://bugzilla.redhat.com/show_bug.cgi?id=732422
--------------------------------------------------------------------------------


================================================================================
 jline2-2.5-7.fc17 (FEDORA-2012-16667)
 JLine is a Java library for handling console input
--------------------------------------------------------------------------------
Update Information:

Fixed OSGi manifest
--------------------------------------------------------------------------------
ChangeLog:

* Fri Oct 19 2012 Severin Gehwolf <sgehwolf at redhat.com> 2.5-7
- Fix OSGi Import-Package header so as to not import non existing
  org.fusesource.jansi.internal package.
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.5-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #868291 - Broken OSGi Import-Package header
        https://bugzilla.redhat.com/show_bug.cgi?id=868291
--------------------------------------------------------------------------------


================================================================================
 kernel-3.6.3-1.fc17 (FEDORA-2012-16669)
 The Linux kernel
--------------------------------------------------------------------------------
Update Information:

Update to Linux 3.6.3.  Various fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Josh Boyer <jwboyer at redhat.com> - 3.6.3-1
- CVE-2012-0957: uts: stack memory leak in UNAME26 (rhbz 862877 864824)
- Fix rt2x00 usb reset resume (rhbz 856863)
- Linux v3.6.3
* Mon Oct 22 2012 Peter Robinson <pbrobinson at fedoraproject.org>
- Cleanup ARM patches
- Add highbank sata patch
- add patch to revert ARM misaligned access check to stop kernel OOPS
* Sun Oct 21 2012 Josh Boyer <jwboyer at redhat.com>
- Don't enable UDL per Dave Airlie
* Thu Oct 18 2012 Josh Boyer <jwboyer at redhat.com>
- Patch to have mac80211 connect with HT20 if HT40 is not allowed (rhbz 866013)
- Enable VFIO (rhbz 867152)
- Apply patch from Stanislaw Gruszka to fix mac80211 issue (rhbz 862168)
- Apply patch to fix iwlwifi crash (rhbz 770484)
* Wed Oct 17 2012 Josh Boyer <jwboyer at redhat.com>
- Enable TCM_VHOST module (rhbz 866984)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #862877 - CVE-2012-0957 kernel: uts: stack memory leak in UNAME26
        https://bugzilla.redhat.com/show_bug.cgi?id=862877
--------------------------------------------------------------------------------


================================================================================
 libesedb-20120102-3.fc17 (FEDORA-2012-16663)
 Library to access the Extensible Storage Engine (ESE) Database File (EDB) format
--------------------------------------------------------------------------------
Update Information:

Adding new package to Fedora.

Description:
Library and tools to access the Extensible Storage Engine (ESE) Database File
(EDB) format. ESEDB is used in may different applications like Windows Search,
Windows Mail, Exchange, Active Directory, etc.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #822718 - Review Request: libesedb - Library to access the Extensible Storage Engine (ESE) Database File (EDB) format
        https://bugzilla.redhat.com/show_bug.cgi?id=822718
--------------------------------------------------------------------------------


================================================================================
 logwatch-7.4.0-18.20120619svn110.fc17 (FEDORA-2012-16681)
 A log file analysis program
--------------------------------------------------------------------------------
Update Information:

Fix misparsing userhelper log entries that contain additional slashes
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Jan Synáček <jsynacek at redhat.com> - 7.4.0-18.20120619svn110
- Add secure-userhelper patch: Fix misparsing userhelper log entries
  (rhbz#867290)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #867290 - Logwatch is misparsing userhelper log entries for hddtemp that specify a device using a name that includes a slash
        https://bugzilla.redhat.com/show_bug.cgi?id=867290
--------------------------------------------------------------------------------


================================================================================
 mate-panel-1.4.0-12.fc17 (FEDORA-2012-16678)
 MATE Desktop panel applets
--------------------------------------------------------------------------------
Update Information:

add requires mate-session-manager
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Leigh Scott <leigh123linux at googlemail.com> - 1.4.0-12
- Remove un-needed %check section
* Mon Oct 22 2012 Leigh Scott <leigh123linux at googlemail.com> - 1.4.0-11
- add requires mate-session-manager
- change style for build requirements
--------------------------------------------------------------------------------


================================================================================
 nagios-plugins-lcgdm-0.9.4-1.fc17 (FEDORA-2012-16666)
 Nagios probes to be run remotely against DPM / LFC nodes
--------------------------------------------------------------------------------
Update Information:

Update for new upstream release.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Ricardo Rocha <ricardo.rocha at cern.ch> - 0.9.4-1
- Update for new upstream release
* Tue Oct 16 2012 Ricardo Rocha <ricardo.rocha at cern.ch> - 0.9.3-1
- Update for new upstream release
* Wed Sep 12 2012 Ricardo Rocha <ricardo.rocha at cern.ch> - 0.9.2-1
- Added runtime dep on python ldap for dpm-head package
--------------------------------------------------------------------------------


================================================================================
 net-snmp-5.7.1-5.fc17 (FEDORA-2012-16662)
 A collection of SNMP protocol tools and libraries
--------------------------------------------------------------------------------
Update Information:

This update fixes:
* Array index error, leading to out-of heap-based buffer read (CVE-2012-2141)

* Size values in hrStorageTable and hrFSTable.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Jan Safranek <jsafrane at redhat.com> - 1:5.7.1-5
- fixed units in hrStorageTable and hrFSTable (#789441)
- fixed CVE-2012-2141: Array index error, leading to out-of heap-based
  buffer read
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #816549 - Array index error, leading to out-of heap-based buffer read (snmpd crash) [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=816549
  [ 2 ] Bug #789441 - net-snmp reports incorrect used disk space for large filesystems
        https://bugzilla.redhat.com/show_bug.cgi?id=789441
--------------------------------------------------------------------------------


================================================================================
 onesixtyone-0.3.2-8.fc17 (FEDORA-2012-16668)
 An efficient SNMP scanner
--------------------------------------------------------------------------------
Update Information:

Re-adding the onesixtyone package to the distribution after it was orphaned.


--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 20 2011 Michal Ambroz <rebus at, seznam.cz> - 0.3.2-8
- Ressurect the package for F16/17
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #845403 - Review Request: onesixtyone - An efficient SNMP scanner - unretire
        https://bugzilla.redhat.com/show_bug.cgi?id=845403
--------------------------------------------------------------------------------


================================================================================
 openscap-0.9.1-1.fc17 (FEDORA-2012-16683)
 Set of open source libraries enabling integration of the SCAP line of standards
--------------------------------------------------------------------------------
Update Information:

This is an update to the openscap-0.9.1 release: the http in the check-content-ref/@hrefhref support, the cpedict support, obsoleted the oscap_reporter, send start and finish messages to the syslog, the XCCDF multi-check evaluation support, "oscap oval validate-xml" autodetect a document type, bug fixes
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Petr Lautrbach <plautrba at redhat.com> 0.9.1-1
- upgrade
* Tue Sep 25 2012 Peter Vrabec <pvrabec at redhat.com> 0.9.0-1
- upgrade
--------------------------------------------------------------------------------


================================================================================
 optipng-0.7.4-1.fc17 (FEDORA-2012-16680)
 PNG optimizer and converter
--------------------------------------------------------------------------------
Update Information:

Update to version 0.7.4.
http://optipng.sourceforge.net/history.txt
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Ville Skyttä <ville.skytta at iki.fi> - 0.7.4-1
- Update to 0.7.4.
--------------------------------------------------------------------------------


================================================================================
 php-channel-theseer-1.3-1.fc17 (FEDORA-2012-16679)
 Adds theseer channel to PEAR
--------------------------------------------------------------------------------
Update Information:

This package adds the pear.netpirates.net (theseer) channel which allows PEAR packages from this channel to be installed.

--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #866370 - Review Request: php-channel-theseer - Adds theseer channel to PEAR
        https://bugzilla.redhat.com/show_bug.cgi?id=866370
--------------------------------------------------------------------------------


================================================================================
 php-zmq-0.6.0-7.20120613git516bd6f.fc17 (FEDORA-2012-16665)
 PHP 0MQ/zmq/zeromq extension
--------------------------------------------------------------------------------
Update Information:

Rebuild against zeromq3.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Ralph Bean <rbean at redhat.com> - 0.6.0-7.20120613git516bd6f
- Rebuilt against zeromq3.
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.6.0-6.20120613git516bd6f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 roundcubemail-0.8.2-1.fc17 (FEDORA-2012-16671)
 Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:

Latest upstream, better support for patch for CVE-2012-4668 et. al.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 10 2012 Jon Ciesla <limburgher at gmail.com> - 0.8.2-1
- Latest upstream.
* Thu Aug 30 2012 Adam Williamson <awilliam at redhat.com> - 0.8.1-2
- correct stray parenthesis in strict patch
--------------------------------------------------------------------------------


================================================================================
 tuned-2.0.1-4.fc17 (FEDORA-2012-16682)
 A dynamic adaptive system tuning daemon
--------------------------------------------------------------------------------
Update Information:

This is an update that fixed dependencies and powertop2tuned script.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Jaroslav Škarvada <jskarvad at redhat.com> - 2.0.1-4
- Added missing dependencies
  Resolves: rhbz#811196
- Fixed powertop2tuned profile generation
  Resolves: rhbz#859672
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #811196 - tuned should require python-decorator
        https://bugzilla.redhat.com/show_bug.cgi?id=811196
  [ 2 ] Bug #859672 - powertop2tuned doesnt create profile
        https://bugzilla.redhat.com/show_bug.cgi?id=859672
--------------------------------------------------------------------------------


================================================================================
 viewvc-1.1.15-3.fc17 (FEDORA-2012-16674)
 Browser interface for CVS and SVN version control repositories
--------------------------------------------------------------------------------
Update Information:

Patch CVE-2012-4533.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Bojan Smojver <bojan at rexursive.com> - 1.1.15-3
- patch CVE-2012-4533, bug #868606
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.1.15-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #868606 - CVE-2012-4533 viewvc 1.1.5 lib/viewvc.py XSS
        https://bugzilla.redhat.com/show_bug.cgi?id=868606
--------------------------------------------------------------------------------


================================================================================
 wireshark-1.6.11-1.fc17 (FEDORA-2012-16676)
 Network traffic analyzer
--------------------------------------------------------------------------------
Update Information:

upgrade to 1.6.11
see http://www.wireshark.org/docs/relnotes/wireshark-1.6.11.html
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Peter Hatina <phatina at redhat.com> - 1.6.11-1
- upgrade to 1.6.11
- see http://www.wireshark.org/docs/relnotes/wireshark-1.6.11.html
--------------------------------------------------------------------------------


================================================================================
 xautomation-1.07-1.fc17 (FEDORA-2012-16660)
 Tools to automate tasks in X, even detecting on screen images
--------------------------------------------------------------------------------
Update Information:

Add xinput2 device selection support thanks to Victor Beumker.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Oct 22 2012 Mohamed El Morabity <melmorabity at fedoraproject.org> - 1.07-1
- Update to 1.07
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #866162 - xautomation-1.07 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=866162
--------------------------------------------------------------------------------



More information about the test mailing list