The following Fedora 17 Security updates need testing: https://admin.fedoraproject.org/updates/FEDORA-2012-9979/php-ZendFramework-1.11.12-1.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10081/libtiff-3.9.6-1.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4.14-1.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10250/libytnef-1.5-8.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10287/pidgin-2.10.5-1.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10324/asterisk-10.5.2-1.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10391/bcfg2-1.2.3-1.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10000/openldap-2.4.31-3.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-9433/viewvc-1.1.15-1.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-9824/mod_security-2.6.6-2.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-9813/mod_security_crs-2.2.5-1.fc17 The following Fedora 17 Critical Path updates have yet to be approved: https://admin.fedoraproject.org/updates/FEDORA-2012-10354/initscripts-9.37.1-1.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10318/qt-4.8.2-4.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10234/checkpolicy-2.1.10-1.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10249/libsepol-2.1.7-1.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10279/selinux-policy-3.10.0-137.fc17 https://admin.fedoraproject.org/updates/glibc-2.15-51.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10093/pam-1.1.5-7.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10071/shared-desktop-ontologies-0.10.0-2.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10081/libtiff-3.9.6-1.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10000/openldap-2.4.31-3.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-10025/evolution-3.4.3-2.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-9946/mdadm-3.2.5-3.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-9916/cyrus-sasl-2.1.23-30.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-9836/python-tempita-0.5.1-1.fc17 https://admin.fedoraproject.org/updates/file-5.11-2.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-7461/libarchive-3.0.4-1.fc17 https://admin.fedoraproject.org/updates/FEDORA-2012-7262/biosdevname-0.4.0-1.fc17 The following builds have been pushed to Fedora 17 updates-testing bcfg2-1.2.3-1.fc17 digikam-2.7.0-1.fc17 fedmsg-0.2.2-2.fc17 ghc-Stream-0.4.6-1.fc17 ghc-lambdabot-utils-4.2.1-1.fc17 hatari-1.6.2-1.fc17 libguestfs-1.18.4-1.fc17 libpgf-6.12.24-2.fc17 mozilla-adblockplus-2.1.1-1.fc17 nettle-2.4-3.fc17 oggvideotools-0.8-7.fc17 perlbrew-0.44-1.fc17 rubygem-declarative_authorization-0.5.5-3.fc17 unetbootin-0-11.577bzr.fc17 uwsgi-1.2.3-1.fc17 wmacpi-2.2-0.9.rc5.fc17 Details about builds: ================================================================================ bcfg2-1.2.3-1.fc17 (FEDORA-2012-10391) A configuration management system -------------------------------------------------------------------------------- Update Information: * Sat Jul 07 2012 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.2.3-1 - Fix CVE-2012-3366 - Updated to new upstream version 1.2.3 -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 7 2012 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.2.3-1 - Fix CVE-2012-3366 - Updated to new upstream version 1.2.3 * Tue May 1 2012 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.2.2-2 - python-nose is needed by bcfg2-test * Fri Apr 6 2012 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.2.2-1 - Updated to new upstream version 1.2.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #835987 - bcfg2: arbitrary code execution flaw in Trigger plugin [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=835987 [ 2 ] Bug #835988 - bcfg2: arbitrary code execution flaw in Trigger plugin [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=835988 -------------------------------------------------------------------------------- ================================================================================ digikam-2.7.0-1.fc17 (FEDORA-2012-10044) A digital camera accessing & photo management application -------------------------------------------------------------------------------- Update Information: digiKam 2.7.0 BUGFIXES FROM KDE BUGZILLA (alias B.K.O | http://bugs.kde.org): - 301494 - Misspelling: "carreful". - 299988 - Using MySQL but on DB test got "Database connection test was not successful. Error was: Driver not loaded Driver not loaded". - 301482 - Xmp sidecar files not being generated for .3xf raw file type. - 301496 - Crash tagging a picture. - 291877 - Change tag filters checkboxes to three-states checkboxes to allow filtering by inclusion and by exclusion. - 232360 - Zoom reset in Image view for each downloaded image. - 298606 - Resize controls in editor are missing. - 301072 - Application crash when using curves correction. - 301051 - digiKam crashes when changing picture in image editor. - 274555 - digikam crashes while histogram computation. - 301483 - Sigma raw files and preview (.x3f). - 197378 - Fading between photo's in diashow. - 302443 - "Open in File Manager" opens Rythmbox in Ubuntu. - 288762 - digiKam crash when closing digikam after mass-tagging. - 286719 - digiKam hang during startup (deadlock?). - 225443 - Fileview preview panning shortcut back to old. - 302562 - Rename "View Image" to "Preview". - 280142 - Crash in libtiff when files are edited. - 300848 - "Reread Metadata From Image" is broken. - 302592 - digiKam crashes when I open the Tab "Search Geomap". - 302740 - Duplicate rotation/flip entries in image menu, shortcuts not working. - 275400 - "Reduced Size Preview" images are blurry and not rotated after upgrade from 1.2.0. - 294578 - Problem when moving grouped pictures from one album to another. - 295274 - Crash when specific pictures are opened in Image Editor. - 287331 - digiKam crashes when reading a large pic collection. - 302802 - In albumview, turningkeys have disappeared, whereas these are switched on in setting. - 295335 - Pasting a name in the "Who is this?" input field does not activate "Confirm" Button. - 295923 - File always changed even if no metadata should be written to it. - 278345 - Context menu > Assign Tags > Recently assigned tags not preserved between session and fixed size. Kipi-plugins 2.7.0 BUGFIXES FROM KDE BUGZILLA (alias B.K.O | http://bugs.kde.org): - 295931 - digiKam / Kipi-Geolocation segfault. - 302447 - DNG RAW file can't be added for conversion. - 291951 - Shows numeric ID instead of name of the Google. - 285831 - Picasa export plugin: name is replaced by google userid. - 302121 - "Blend bracketed images" menu entry doesn't appear. libpgf 6.12.24 The new version is a replacement of version 6.11.42. In case you use the ROI encoding scheme, we strongly encourage using version 6.12.24 instead of version 6.11.42. This version fixes some decoder bugs, sometimes seen in ROI decoding. This version allows a simpler user-data handling, especially for uncached metadata. The following two methods in the class PGFimage are designed for this purpose: - GetUserDataPos() returns in an opened PGF image the stream position of the user data area. - WriteImage() encodes and writes the image at the current stream position. This method is called after WriteHeader(). In case you want to write uncached metadata into the stream, then do that after WriteHeader() and just before WriteImage(). If you are not interested in writing uncached metadata, then you usually use Write() instead of WriteImage(). WriteHeader() and WriteImage() are called inside of Write(). -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 8 2012 Alexey Kurov <nucleo@xxxxxxxxxxxxxxxxx> - 2.7.0-1 - digikam-2.7.0 * Thu Jun 28 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.6.0-3 - fix build for newer lensfun-0.2.6+ * Tue Jun 26 2012 Alexey Kurov <nucleo@xxxxxxxxxxxxxxxxx> - 2.6.0-2 - rebuild for libpgf-6.12.24 -------------------------------------------------------------------------------- ================================================================================ fedmsg-0.2.2-2.fc17 (FEDORA-2012-10386) Tools for Fedora Infrastructure real-time messaging -------------------------------------------------------------------------------- Update Information: Fixes for fedmsg-irc and a new crypto module. Require moksha >= 0.8.3. -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 7 2012 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.2-2 - Added deps on m2crypto and python-m2ext * Sat Jul 7 2012 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.2-1 - Update to fedmsg-irc to fix lineRate issues - fedmsg.crypto module - sign and validate messages -------------------------------------------------------------------------------- ================================================================================ ghc-Stream-0.4.6-1.fc17 (FEDORA-2012-10394) Provides functions to create and manipulate infinite lists -------------------------------------------------------------------------------- Update Information: ghc-Stream - Provides functions to create and manipulate infinite lists -------------------------------------------------------------------------------- References: [ 1 ] Bug #833359 - Review Request: ghc-Stream - Provides functions to create and manipulate infinite lists https://bugzilla.redhat.com/show_bug.cgi?id=833359 -------------------------------------------------------------------------------- ================================================================================ ghc-lambdabot-utils-4.2.1-1.fc17 (FEDORA-2012-10392) Utility libraries for the IRC bot Lambdabot -------------------------------------------------------------------------------- Update Information: Utility libraries for the Lambdabot IRC bot -------------------------------------------------------------------------------- References: [ 1 ] Bug #831123 - Review Request: ghc-lambdabot-utils - Utility libraries for the Lambdabot IRC bot https://bugzilla.redhat.com/show_bug.cgi?id=831123 -------------------------------------------------------------------------------- ================================================================================ hatari-1.6.2-1.fc17 (FEDORA-2012-10395) An Atari ST emulator suitable for playing games -------------------------------------------------------------------------------- Update Information: * Some fixes for overscan screen in STF/STE * Better IKBD/ACIA compatibility * Improved audio filters for YM2149 and DMA sound * Several improvements in Falcon mode : DSP, CPU, MMU, FPU, videl borders * Various fixes for FDC, SCSI, printer output, ... * Fixes to the SDL UI, OSX UI and python UI * Improvements to the debugger -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 5 2012 Andrea Musuruane <musuruan@xxxxxxxxx> 1.6.2-1 - updated to upstream 1.6.2 -------------------------------------------------------------------------------- ================================================================================ libguestfs-1.18.4-1.fc17 (FEDORA-2012-10400) Access and modify virtual machine disk images -------------------------------------------------------------------------------- Update Information: New stable branch version 1.18.4. New upstream stable version 1.18.3. New upstream stable version 1.18.2. -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 7 2012 Richard W.M. Jones <rjones@xxxxxxxxxx> - 1:1.18.4-1 - New upstream stable version 1.18.4. * Thu Jun 28 2012 Richard W.M. Jones <rjones@xxxxxxxxxx> - 1:1.18.3-1 - New upstream stable version 1.18.3. * Thu Jun 21 2012 Richard W.M. Jones <rjones@xxxxxxxxxx> - 1:1.18.2-1 - New upstream stable version 1.18.2. -------------------------------------------------------------------------------- References: [ 1 ] Bug #836710 - Data loss when writing to qcow2-format disk files https://bugzilla.redhat.com/show_bug.cgi?id=836710 -------------------------------------------------------------------------------- ================================================================================ libpgf-6.12.24-2.fc17 (FEDORA-2012-10044) PGF (Progressive Graphics File) library -------------------------------------------------------------------------------- Update Information: digiKam 2.7.0 BUGFIXES FROM KDE BUGZILLA (alias B.K.O | http://bugs.kde.org): - 301494 - Misspelling: "carreful". - 299988 - Using MySQL but on DB test got "Database connection test was not successful. Error was: Driver not loaded Driver not loaded". - 301482 - Xmp sidecar files not being generated for .3xf raw file type. - 301496 - Crash tagging a picture. - 291877 - Change tag filters checkboxes to three-states checkboxes to allow filtering by inclusion and by exclusion. - 232360 - Zoom reset in Image view for each downloaded image. - 298606 - Resize controls in editor are missing. - 301072 - Application crash when using curves correction. - 301051 - digiKam crashes when changing picture in image editor. - 274555 - digikam crashes while histogram computation. - 301483 - Sigma raw files and preview (.x3f). - 197378 - Fading between photo's in diashow. - 302443 - "Open in File Manager" opens Rythmbox in Ubuntu. - 288762 - digiKam crash when closing digikam after mass-tagging. - 286719 - digiKam hang during startup (deadlock?). - 225443 - Fileview preview panning shortcut back to old. - 302562 - Rename "View Image" to "Preview". - 280142 - Crash in libtiff when files are edited. - 300848 - "Reread Metadata From Image" is broken. - 302592 - digiKam crashes when I open the Tab "Search Geomap". - 302740 - Duplicate rotation/flip entries in image menu, shortcuts not working. - 275400 - "Reduced Size Preview" images are blurry and not rotated after upgrade from 1.2.0. - 294578 - Problem when moving grouped pictures from one album to another. - 295274 - Crash when specific pictures are opened in Image Editor. - 287331 - digiKam crashes when reading a large pic collection. - 302802 - In albumview, turningkeys have disappeared, whereas these are switched on in setting. - 295335 - Pasting a name in the "Who is this?" input field does not activate "Confirm" Button. - 295923 - File always changed even if no metadata should be written to it. - 278345 - Context menu > Assign Tags > Recently assigned tags not preserved between session and fixed size. Kipi-plugins 2.7.0 BUGFIXES FROM KDE BUGZILLA (alias B.K.O | http://bugs.kde.org): - 295931 - digiKam / Kipi-Geolocation segfault. - 302447 - DNG RAW file can't be added for conversion. - 291951 - Shows numeric ID instead of name of the Google. - 285831 - Picasa export plugin: name is replaced by google userid. - 302121 - "Blend bracketed images" menu entry doesn't appear. libpgf 6.12.24 The new version is a replacement of version 6.11.42. In case you use the ROI encoding scheme, we strongly encourage using version 6.12.24 instead of version 6.11.42. This version fixes some decoder bugs, sometimes seen in ROI decoding. This version allows a simpler user-data handling, especially for uncached metadata. The following two methods in the class PGFimage are designed for this purpose: - GetUserDataPos() returns in an opened PGF image the stream position of the user data area. - WriteImage() encodes and writes the image at the current stream position. This method is called after WriteHeader(). In case you want to write uncached metadata into the stream, then do that after WriteHeader() and just before WriteImage(). If you are not interested in writing uncached metadata, then you usually use Write() instead of WriteImage(). WriteHeader() and WriteImage() are called inside of Write(). -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 26 2012 Alexey Kurov <nucleo@xxxxxxxxxxxxxxxxx> - 6.12.24-2 - libpgf-6.12.24 -------------------------------------------------------------------------------- ================================================================================ mozilla-adblockplus-2.1.1-1.fc17 (FEDORA-2012-10405) Adblocking extension for Mozilla Firefox, Thunderbird, and Seamonkey -------------------------------------------------------------------------------- Update Information: Update to upstream 2.1.1 -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 7 2012 Russell Golden <niveusluna@xxxxxxxxxxxxxx> - 2.1.1-1 - update to upstream 2.1.1 * Mon Jul 2 2012 Russell Golden <niveusluna@xxxxxxxxxxxxxx> - 2.1-2 - update to upstream 2.1 - add changelog * Fri Jan 20 2012 Russell Golden <niveusluna@xxxxxxxxxxxxxx> - 2.0.3-3 - build release build, not debug build -------------------------------------------------------------------------------- ================================================================================ nettle-2.4-3.fc17 (FEDORA-2012-10398) A low-level cryptographic library -------------------------------------------------------------------------------- Update Information: Nettle is a cryptographic library -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 5 2012 David Woodhouse <dwmw2@xxxxxxxxxxxxx> - 2.4-3 - Remove explicit buildroot handling and defattr. * Wed Jul 4 2012 David Woodhouse <dwmw2@xxxxxxxxxxxxx> - 2.4-2 - Review feedback * Mon Jun 18 2012 David Woodhouse <dwmw2@xxxxxxxxxxxxx> - 2.4-1 - Revive package (GnuTLS needs it), disable static, update to current release 2.4 -------------------------------------------------------------------------------- ================================================================================ oggvideotools-0.8-7.fc17 (FEDORA-2012-10401) Toolbox for manipulating Ogg video files -------------------------------------------------------------------------------- Update Information: Fix FTBFS -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 8 2012 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - 0.8-7 - Fix FTBFS * Tue Feb 28 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.8-6 - Rebuilt for c++ ABI breakage * Fri Jan 13 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.8-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ perlbrew-0.44-1.fc17 (FEDORA-2012-10408) Manage perl installations in your $HOME -------------------------------------------------------------------------------- Update Information: This update includes: * "self-install" command now alters the shebang to use system perl * "install-patchperl" command now alters the shebang to use system perl. * some documentation tweaks * fix: `perlbrew use` to/from a lib has not been working properly. -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 8 2012 Iain Arnell <iarnell@xxxxxxxxx> 0.44-1 - update to latest upstream version * Thu Jun 21 2012 Petr Pisar <ppisar@xxxxxxxxxx> - 0.43-2 - Perl 5.16 rebuild -------------------------------------------------------------------------------- ================================================================================ rubygem-declarative_authorization-0.5.5-3.fc17 (FEDORA-2012-10403) Provides readable authorization rules for Rails -------------------------------------------------------------------------------- Update Information: Removed Group as unused field, removed BuildRequires on ruby(abi), created separate doc subpackage. -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 8 2012 Darryl L. Pierce <dpierce@xxxxxxxxxx> - 0.5.5-3 - Removed Group as unused field. - Removed BuildRequires on ruby(abi). - Created separate doc subpackage. -------------------------------------------------------------------------------- ================================================================================ unetbootin-0-11.577bzr.fc17 (FEDORA-2012-10387) Create bootable Live USB drives for a variety of Linux distributions -------------------------------------------------------------------------------- Update Information: Update to 577, featuring Fedora 17 and CentOS 6 capabilities. -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 8 2012 Jussi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 0-11.577bzr - Update to 577. -------------------------------------------------------------------------------- ================================================================================ uwsgi-1.2.3-1.fc17 (FEDORA-2012-10407) Fast, self-healing, application container server -------------------------------------------------------------------------------- Update Information: Updating to latest stable version -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 26 2012 Jorge A Gallegos <kad@xxxxxxxxx> - 1.2.3-1 - Updated to latest stable upstream - Building the pytho3 plugin is a bit trickier now, but still possible - Added PHP plugin - Added Carbon plugin - Added RRDTool plugin - Added rsyslog plugin - Added syslog plugin -------------------------------------------------------------------------------- ================================================================================ wmacpi-2.2-0.9.rc5.fc17 (FEDORA-2012-10404) Dockapp for laptop acpi/apm information -------------------------------------------------------------------------------- Update Information: * update to rc5 * adds /sys support -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 8 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de> - 2.2-0.9.rc5 - upgrade to rc5 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test