Fedora 16 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Fri Jan 18 20:54:56 UTC 2013 

The following Fedora 16 Security updates need testing:
 Age  URL
   6  https://admin.fedoraproject.org/updates/FEDORA-2013-0723/thunderbird-17.0.2-1.fc16
  38  https://admin.fedoraproject.org/updates/FEDORA-2012-20157/libproxy-0.4.11-1.fc16
 118  https://admin.fedoraproject.org/updates/FEDORA-2012-14452/bacula-5.0.3-33.fc16
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-0915/moodle-2.1.10-1.fc16
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-0835/seamonkey-2.15-1.fc16
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-0896/rubygem-rack-1.3.0-3.fc16
  37  https://admin.fedoraproject.org/updates/FEDORA-2012-20236/rssh-2.3.4-1.fc16
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-0934/qemu-0.15.1-9.fc16
 196  https://admin.fedoraproject.org/updates/FEDORA-2012-10314/revelation-0.4.14-1.fc16
 116  https://admin.fedoraproject.org/updates/FEDORA-2012-14654/tor-0.2.2.39-1600.fc16
   6  https://admin.fedoraproject.org/updates/FEDORA-2013-0640/moin-1.9.6-1.fc16
   6  https://admin.fedoraproject.org/updates/FEDORA-2013-0633/perl-5.14.3-205.fc16
   9  https://admin.fedoraproject.org/updates/FEDORA-2013-0477/gnupg-1.4.13-2.fc16
   9  https://admin.fedoraproject.org/updates/FEDORA-2012-19347/cups-1.5.4-12.fc16
   9  https://admin.fedoraproject.org/updates/FEDORA-2013-0270/qt-4.8.4-6.fc16
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-0885/firefox-18.0-1.fc16,xulrunner-18.0-6.fc16
   6  https://admin.fedoraproject.org/updates/FEDORA-2013-0686/rubygem-actionpack-3.0.10-10.fc16,rubygem-activerecord-3.0.10-5.fc16,rubygem-activesupport-3.0.10-5.fc16,rubygem-activemodel-3.0.10-2.fc16
   4  https://admin.fedoraproject.org/updates/FEDORA-2013-0761/xen-4.1.4-2.fc16
   4  https://admin.fedoraproject.org/updates/FEDORA-2013-0752/nagios-3.4.4-1.fc16
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-0894/ettercap-0.7.5-3.fc16.1.20120906gitc796e5
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-0935/samba4-4.0.0-39.alpha16.fc16


The following Fedora 16 Critical Path updates have yet to be approved:
 Age URL
   6  https://admin.fedoraproject.org/updates/FEDORA-2013-0633/perl-5.14.3-205.fc16
   6  https://admin.fedoraproject.org/updates/FEDORA-2013-0723/thunderbird-17.0.2-1.fc16
   6  https://admin.fedoraproject.org/updates/FEDORA-2013-0632/perl-5.14.3-204.fc16
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-0885/firefox-18.0-1.fc16,xulrunner-18.0-6.fc16
   6  https://admin.fedoraproject.org/updates/FEDORA-2013-0651/kernel-3.6.11-4.fc16
   9  https://admin.fedoraproject.org/updates/FEDORA-2013-0270/qt-4.8.4-6.fc16
  13  https://admin.fedoraproject.org/updates/FEDORA-2013-0263/qtwebkit-2.2.2-5.fc16
  13  https://admin.fedoraproject.org/updates/FEDORA-2013-0238/mysql-5.5.29-1.fc16
 262  https://admin.fedoraproject.org/updates/FEDORA-2012-6994/upower-0.9.16-1.fc16


The following builds have been pushed to Fedora 16 updates-testing

    moodle-2.1.10-1.fc16
    perl-Net-STOMP-Client-2.0-1.fc16
    perl-No-Worries-0.8-1.fc16
    qemu-0.15.1-9.fc16
    samba4-4.0.0-39.alpha16.fc16
    sugar-fototoon-13-2.fc16
    youtube-dl-2013.01.13-1.fc16

Details about builds:


================================================================================
 moodle-2.1.10-1.fc16 (FEDORA-2013-0915)
 A Course Management System
--------------------------------------------------------------------------------
Update Information:

Fix for CVE-2012-6087.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 15 2013 Jon Ciesla <limburgher at gmail.com> - 2.1.10-1
- Latest upstream, patch for CVE-2012-6087.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #892701 - CVE-2012-6087 moodle (Amazon S3 module): Improper use of cURL API might lead to improper SSL certificate verification (MiTM) [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=892701
  [ 2 ] Bug #892702 - CVE-2012-6087 moodle (Amazon S3 module): Improper use of cURL API might lead to improper SSL certificate verification (MiTM) [epel-6]
        https://bugzilla.redhat.com/show_bug.cgi?id=892702
--------------------------------------------------------------------------------


================================================================================
 perl-Net-STOMP-Client-2.0-1.fc16 (FEDORA-2013-0904)
 STOMP object oriented client module
--------------------------------------------------------------------------------
Update Information:

Update to 2.0, rhbz #893464.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 15 2013 Massimo Paladin <massimo.paladin at gmail.com> - 2.0-1
- New upstream 2.0, rhbz#893464.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #893464 - Upgrade to new upstream version
        https://bugzilla.redhat.com/show_bug.cgi?id=893464
--------------------------------------------------------------------------------


================================================================================
 perl-No-Worries-0.8-1.fc16 (FEDORA-2013-0931)
 Perl coding without worries
--------------------------------------------------------------------------------
Update Information:

Update to 0.8, rhbz #895876.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jan 16 2013 Massimo Paladin <massimo.paladin at gmail.com> 0.8-1
- Updating to upstream 0.8 rhbz#895876.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #895876 - Upgrade to new upstream version
        https://bugzilla.redhat.com/show_bug.cgi?id=895876
--------------------------------------------------------------------------------


================================================================================
 qemu-0.15.1-9.fc16 (FEDORA-2013-0934)
 QEMU is a FAST! processor emulator
--------------------------------------------------------------------------------
Update Information:

* CVE-2012-6075: Buffer overflow in e1000 nic (bz #889301, bz #889304)
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jan 16 2013 Cole Robinson <crobinso at redhat.com> - 2:0.15.1-9
- CVE-2012-6075: Buffer overflow in e1000 nic (bz #889301, bz #889304)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #889301 - CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled
        https://bugzilla.redhat.com/show_bug.cgi?id=889301
--------------------------------------------------------------------------------


================================================================================
 samba4-4.0.0-39.alpha16.fc16 (FEDORA-2013-0935)
 The Samba4 CIFS and AD client and server suite
--------------------------------------------------------------------------------
Update Information:

Security update for CVE-2013-0172.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jan 16 2013 - Andreas Schneider <asn at redhat.com> - 4.0.0-39.alpha16
- Fixes CVE-2013-0172.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #895631 - CVE-2013-0172 samba4: may provide authenticated users with write access to LDAP directory objects when used as an AD DC
        https://bugzilla.redhat.com/show_bug.cgi?id=895631
--------------------------------------------------------------------------------


================================================================================
 sugar-fototoon-13-2.fc16 (FEDORA-2013-0943)
 An activity used to create cartoons
--------------------------------------------------------------------------------
Update Information:

Init package
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #892682 - Review Request: sugar-fototoon - A cartoon creating game for Sugar
        https://bugzilla.redhat.com/show_bug.cgi?id=892682
--------------------------------------------------------------------------------


================================================================================
 youtube-dl-2013.01.13-1.fc16 (FEDORA-2013-0974)
 Small command-line program to download videos from YouTube
--------------------------------------------------------------------------------
Update Information:

New upstream release with several bug fixes
New upstream upgrade
New upstream upgrade
New upstream upgrade
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 15 2013 Till Maas <opensource at till.name> - 2013.01.13-1
- Update to new release
* Sun Jan  6 2013 Matěj Cepl <mcepl at redhat.com> - 2013.01.02-1
- Update to new release (fix #880270)
* Tue Oct 23 2012 Till Maas <opensource at till.name> - 2012.10.09-1
- Update to new release
- Update BR: add pandoc
- install make target
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #892618 - youtube-dl-2013.01.13 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=892618
  [ 2 ] Bug #880270 - youtube-dl-2013.01.02 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=880270
--------------------------------------------------------------------------------

More information about the test mailing list