On Wed, 29 Aug 2007 20:56:21 +0200, Michael Schwendt wrote:
On Wed, 29 Aug 2007 14:45:16 -0400, Peter Jones wrote:
Michael Schwendt wrote:
$ rpm -qi sylpheed|grep 'Build Date' Release : 3 Build Date: Fri 24 Aug 2007 01:21:16 PM CEST
$ grep -B2 POP3 sylpheed.spec %changelog
- Fri Aug 24 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 2.4.4-3
- Patch POP3 format string vulnerability CVE-2007-2958 (#254123).
But:
$ LANG=C rpm -q sylpheed --changelog|head -3
- Sat Aug 25 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 2.4.4-3
- Patch POP3 format string vulnerability CVE-2007-2958 (#254123).
*All* entries are off by one day forward. Bug or PEBKAC?
What's your timezone set to?
$ cat /etc/sysconfig/clock ZONE="Europe/Berlin" UTC=true ARC=false
Fedora 7 is affected, too. All F7 Test Updates, for example, don't pass this check.
The Test Update announcements print changelog dates that doesn't match the rpm --changelog query, which is off by one into the future compared with what the spec file contains. E.g.:
metacity announcement says:
* Tue Sep 11 2007 Ray Strode <rstrode redhat com> - 2.18.5-2 - don't dereference a NULL pointer (crash on logout, leading to weird problems on next login, bug 243761)
rpm says:
* Wed Sep 12 2007 Ray Strode <rstrode redhat com> - 2.18.5-2 - don't dereference a NULL pointer (crash on logout, leading to weird problems on next login, bug 243761)
yum announcement says:
* Mon Sep 10 2007 Seth Vidal <skvidal at fedoraproject org> - 3.2.5-1 - 3.2.5 - prune unnecessary patches
rpm says:
* Tue Sep 11 2007 Seth Vidal <skvidal at fedoraproject org> - 3.2.5-1 - 3.2.5 - prune unnecessary patches