The following Fedora 17 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-2012-11182/xen-4.1.2-24.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-10661/glpi-0.83.4-1.fc17,glpi-data-injection-2.2.2-1.fc17,glpi-mass-ocs-import-1.6.1-1.fc17,glpi-pdf-0.83.3-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-11203/nsd-3.2.13-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4.14-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-10892/perl-DBD-Pg-2.19.2-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-11302/qemu-1.0.1-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-10391/bcfg2-1.2.3-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-10936/php-5.4.5-1.fc17,maniadrive-1.2-43.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-10835/apache-poi-3.8-2.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-11039/moodle-2.2.4-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-11069/ecryptfs-utils-99-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-11079/dhcp-4.2.4-9.P1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-11146/bind-9.9.1-5.P2.fc17
The following Fedora 17 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/FEDORA-2012-11222/libsepol-2.1.7-3.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-11216/shadow-utils-4.1.5-4.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-11124/phonon-backend-gstreamer-4.6.1-3.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-11151/mdadm-3.2.5-4.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-11095/elfutils-0.154-2.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-11057/libcap-ng-0.7-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-11053/python-2.7.3-7.2.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-10943/python-urlgrabber-3.9.1-14.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-10873/openldap-2.4.31-7.fc17
https://admin.fedoraproject.org/updates/libexif-0.6.21-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-7461/libarchive-3.0.4-1.fc17
The following builds have been pushed to Fedora 17 updates-testing
SDL_mixer-1.2.12-3.fc17
arquillian-core-1.0.2-1.fc17
emacspeak-36.0-2.fc17
fedmsg-0.2.6-1.fc17
fence-agents-3.1.9-1.fc17
ibus-typing-booster-0.0.7-1.fc17
ikiwiki-3.20120629-1.fc17
jena-2.6.4-5.fc17
jena-iri-0.8-7.fc17
kde-plasma-networkmanagement-0.9.0.4-1.fc17
libnfc-1.4.2-5.fc17
maven-script-interpreter-1.0-1.fc17
openstack-nova-2012.1.1-11.fc17
perl-Mail-GnuPG-0.18-1.fc17
perl-Plack-1.0001-1.fc17
perl-Rose-DateTime-0.537-4.fc17
python-httplib2-0.7.4-6.fc17
qemu-1.0.1-1.fc17
shotwell-0.12.3-1.fc17.1
sslsplit-0.4.4-4.fc17
usbredir-0.4.3-3.fc17
Details about builds:
================================================================================
SDL_mixer-1.2.12-3.fc17 (FEDORA-2012-11304)
Simple DirectMedia Layer - Sample Mixer Library
--------------------------------------------------------------------------------
Update Information:
Fix libmikmod-related crashes.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 29 2012 Jan Dvorak <mordae@xxxxxxxxxxxx> - 1.2.12-3
- Apply MikMod-related fixes from trunk to prevent crashes.
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2.12-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #841322 - libmikmod causes xbmc to crash
https://bugzilla.redhat.com/show_bug.cgi?id=841322
--------------------------------------------------------------------------------
================================================================================
arquillian-core-1.0.2-1.fc17 (FEDORA-2012-11301)
Arquillian is a revolutionary testing platform built on the JVM
--------------------------------------------------------------------------------
Update Information:
Upgrade arquillian-core to 1.0.2.Final
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
emacspeak-36.0-2.fc17 (FEDORA-2012-11286)
Emacs Speech interface
--------------------------------------------------------------------------------
Update Information:
Update to latest release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2012 Jens Petersen <petersen@xxxxxxxxxx> - 36.0-2
- patch tclsh8.4_ia32 in 32-outloud
* Wed Jul 25 2012 Jens Petersen <petersen@xxxxxxxxxx> - 36.0-1
- update to 36.0
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 29.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fedmsg-0.2.6-1.fc17 (FEDORA-2012-11279)
Tools for Fedora Infrastructure real-time messaging
--------------------------------------------------------------------------------
Update Information:
API enhancement.
0.2.5 with more realistic X509 capacity
0.2.4 with fix for disabled ssl
python-argparse fix for epel-6.
Fixes for fedmsg-irc and a new crypto module.
Require moksha >= 0.8.3.
0.2.3 with upstream typo fixes
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2012 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.6-1
- Upstream bugfixes and API enhancements.
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.2.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sun Jul 15 2012 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.5-1
- Upstream crypto updates in preparation for a more realistic X509 setup.
* Fri Jul 13 2012 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.4-1
- Upstream bugfix for when ssl is disabled.
* Wed Jul 11 2012 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.3-1
- Upstream bump that fixes some typos.
* Tue Jul 10 2012 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.2-3
- Added deps on python-argparse for py < 2.7 (rhel6)
* Sat Jul 7 2012 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.2-2
- Added deps on m2crypto and python-m2ext
* Sat Jul 7 2012 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.2-1
- Update to fedmsg-irc to fix lineRate issues
- fedmsg.crypto module - sign and validate messages
--------------------------------------------------------------------------------
================================================================================
fence-agents-3.1.9-1.fc17 (FEDORA-2012-11303)
Fence Agents for Red Hat Cluster
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 31 2012 Marek Grac <mgrac@xxxxxxxxxx> - 3.1.9-1
- new upstream release
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.1.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-0.0.7-1.fc17 (FEDORA-2012-11291)
The Table engine for IBus platform
--------------------------------------------------------------------------------
Update Information:
Initial import
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #820511 - ibus-european-table has $HOME/.ibus
https://bugzilla.redhat.com/show_bug.cgi?id=820511
[ 2 ] Bug #820513 - ibus-indic-table has $HOME/.ibus
https://bugzilla.redhat.com/show_bug.cgi?id=820513
[ 3 ] Bug #824307 - unassigned keysym causes crash
https://bugzilla.redhat.com/show_bug.cgi?id=824307
[ 4 ] Bug #840740 - Review Request: ibus-typing-booster - Auto completion for ibus
https://bugzilla.redhat.com/show_bug.cgi?id=840740
--------------------------------------------------------------------------------
================================================================================
ikiwiki-3.20120629-1.fc17 (FEDORA-2012-11298)
A wiki compiler
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version 3.20120629.
See http://ikiwiki.info/news/ for the full list of changes.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 14 2012 Thomas Moschny <thomas.moschny@xxxxxx> - 3.20120629-1
- Update to 3.20120629.
* Thu Jun 21 2012 Petr Pisar <ppisar@xxxxxxxxxx> - 3.20120516-2
- Perl 5.16 rebuild
--------------------------------------------------------------------------------
================================================================================
jena-2.6.4-5.fc17 (FEDORA-2012-11293)
Java framework for building Semantic Web applications
--------------------------------------------------------------------------------
Update Information:
BR on icu4j was missing
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 24 2012 Tomas Radej <tradej@xxxxxxxxxx> - 2.6.4-5
- BR on icu4j
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.6.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
jena-iri-0.8-7.fc17 (FEDORA-2012-11285)
The Jena IRI Library
--------------------------------------------------------------------------------
Update Information:
FTBFS - icu4j (B)R was missing
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 27 2012 Tomas Radej <tradej@xxxxxxxxxx> - 0.8-7
- Added icu4j (B)R
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.8-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kde-plasma-networkmanagement-0.9.0.4-1.fc17 (FEDORA-2012-11297)
NetworkManager KDE 4 integration
--------------------------------------------------------------------------------
Update Information:
Update to the most recent upstream release 0.9.0.4, see http://lamarque-lvs.blogspot.cz/2012/07/plasma-nm-0904.html for details
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2012 Lukas Tinkl <ltinkl@xxxxxxxxxx> 0.9.0.4-1
- upstream version 0.9.0.4 (see
http://lamarque-lvs.blogspot.cz/2012/07/plasma-nm-0904.html for details)
* Tue Jul 24 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.9.0.3-4
- rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #832893 - Password dialog is missing password field
https://bugzilla.redhat.com/show_bug.cgi?id=832893
--------------------------------------------------------------------------------
================================================================================
libnfc-1.4.2-5.fc17 (FEDORA-2012-11283)
NFC SDK and Programmers API
--------------------------------------------------------------------------------
Update Information:
Fix issues with USB enumeration
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2012 F. Kooman <fkooman@xxxxxxxxx> - 1.4.2-5
- fix patch
* Mon Jul 30 2012 F. Kooman <fkooman@xxxxxxxxx> - 1.4.2-4
- added usb enumeration patch to fix RHBZ #832983, #843660
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.4.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #832983 - PCSC Lite CCID causing ccid_usb.c:648:WriteUSB() write failed (1/10): -4 No such device
https://bugzilla.redhat.com/show_bug.cgi?id=832983
[ 2 ] Bug #843660 - libnfc broken with pcsc-lite-ccid-1.4.6
https://bugzilla.redhat.com/show_bug.cgi?id=843660
--------------------------------------------------------------------------------
================================================================================
maven-script-interpreter-1.0-1.fc17 (FEDORA-2012-11299)
Maven Script Interpreter
--------------------------------------------------------------------------------
Update Information:
New package with maven-script-interpreter
(required by new maven-invoker-plugin)
--------------------------------------------------------------------------------
================================================================================
openstack-nova-2012.1.1-11.fc17 (FEDORA-2012-11278)
OpenStack Compute (nova)
--------------------------------------------------------------------------------
Update Information:
- Split out into more sub packages
- Update from stable upstream including...
- Fix metadata file injection with xen
- Fix affinity filters when hints is None
- Fix marker behavior for flavors
- Handle local remote exceptions consistently
- Fix qcow2 size on libvirt live block migration
- Fix for API listing of os hosts
- Avoid lazy loading errors on instance_type
- Avoid casts in network manager to prevent races
- Conditionally allow queries for deleted flavours
- Fix wrong regex in cleanup_file_locks
- Add net rules to VMs on compute service start
- Tolerate parsing null connection info in BDM
- Support EC2 CreateImage API for boot from volume
- EC2 DescribeImages reports correct rootDeviceType
- Reject EC2 CreateImage for instance store
- Fix EC2 CreateImage no_reboot logic
- Convert remaining network API casts to calls
- Move where the fixed ip deallocation happens
- Fix the qpid_heartbeat option so that it's effective
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2012 Pádraig Brady <P@xxxxxxxxxxxxxx> - 2012.1.1-11
- Update from stable upstream including...
- Fix metadata file injection with xen
- Fix affinity filters when hints is None
- Fix marker behavior for flavors
- Handle local remote exceptions consistently
- Fix qcow2 size on libvirt live block migration
- Fix for API listing of os hosts
- Avoid lazy loading errors on instance_type
- Avoid casts in network manager to prevent races
- Conditionally allow queries for deleted flavours
- Fix wrong regex in cleanup_file_locks
- Add net rules to VMs on compute service start
- Tolerate parsing null connection info in BDM
- Support EC2 CreateImage API for boot from volume
- EC2 DescribeImages reports correct rootDeviceType
- Reject EC2 CreateImage for instance store
- Fix EC2 CreateImage no_reboot logic
- Convert remaining network API casts to calls
- Move where the fixed ip deallocation happens
- Fix the qpid_heartbeat option so that it's effective
* Fri Jul 27 2012 Pádraig Brady <P@xxxxxxxxxxxxxx> - 2012.1.1-10
- Split out into more sub packages
--------------------------------------------------------------------------------
================================================================================
perl-Mail-GnuPG-0.18-1.fc17 (FEDORA-2012-11281)
Process email with GPG
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2012 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 0.18-1
- Upstream update.
- Spec file cleanup.
--------------------------------------------------------------------------------
================================================================================
perl-Plack-1.0001-1.fc17 (FEDORA-2012-11307)
Perl Superglue for Web frameworks and Web Servers (PSGI toolkit)
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2012 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> 1.0001-1
- Upstream update.
--------------------------------------------------------------------------------
================================================================================
perl-Rose-DateTime-0.537-4.fc17 (FEDORA-2012-11289)
DateTime helper functions and objects
--------------------------------------------------------------------------------
Update Information:
DateTime helper functions and objects
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #839744 - Review Request: perl-Rose-DateTime - DateTime helper functions and objects
https://bugzilla.redhat.com/show_bug.cgi?id=839744
--------------------------------------------------------------------------------
================================================================================
python-httplib2-0.7.4-6.fc17 (FEDORA-2012-11292)
A comprehensive HTTP client library
--------------------------------------------------------------------------------
Update Information:
Bug 840968 - SSL errors when the site certificate contains subjectAltName but DNS is not in it
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 27 2012 Ding-Yi Chen <dchen at redhat.com> - 0.7.4-6
- Fixed Bug 840968 - SSL errors when the site certificate contains
subjectAltName but DNS is not in it
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.7.4-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #840968 - SSL errors when the site certificate contains subjectAltName but DNS is not in it
https://bugzilla.redhat.com/show_bug.cgi?id=840968
[ 2 ] Bug #787542 - python-httplib2 is more than two years old
https://bugzilla.redhat.com/show_bug.cgi?id=787542
[ 3 ] Bug #566721 - httplib2 version 0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=566721
--------------------------------------------------------------------------------
================================================================================
qemu-1.0.1-1.fc17 (FEDORA-2012-11302)
QEMU is a FAST! processor emulator
--------------------------------------------------------------------------------
Update Information:
* Fix systemtap tapsets (bz 831763)
* Fix VNC audio tunnelling (bz 840653)
* CVE-2012-2652: Possible symlink attacks with -snapshot (bz 825697, bz
824919)
* Don't renable ksm on update (bz 815156)
* Bump usbredir dep (bz 812097)
* Fix RPM install error on non-virt machines (bz 660629)
* Obsolete openbios to fix upgrade dependency issues (bz 694802)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 29 2012 Cole Robinson <crobinso@xxxxxxxxxx> - 1.0.1-2
- Fix VNC audio tunnelling (bz 840653)
- CVE-2012-2652: Possible symlink attacks with -snapshot (bz 825697, bz
824919)
- Fix systemtap tapsets (bz 831763)
- Don't renable ksm on update (bz 815156)
- Bump usbredir dep (bz 812097)
- Fix RPM install error on non-virt machines (bz 660629)
- Obsolete openbios to fix upgrade dependency issues (bz 694802)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #824919 - CVE-2012-2652 qemu: vulnerable to temporary file symlink attacks
https://bugzilla.redhat.com/show_bug.cgi?id=824919
--------------------------------------------------------------------------------
================================================================================
shotwell-0.12.3-1.fc17.1 (FEDORA-2012-11284)
A photo organizer for the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
Add patches from upstream's stable branch to prevent crashes.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 15 2012 Thomas Moschny <thomas.moschny@xxxxxx> - 0.12.3-1.1
- Add patches from stable branch.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #830610 - [abrt] shotwell-0.12.3-1.fc17: Process /usr/bin/shotwell was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=830610
--------------------------------------------------------------------------------
================================================================================
sslsplit-0.4.4-4.fc17 (FEDORA-2012-11280)
Transparent and scalable SSL/TLS interception
--------------------------------------------------------------------------------
Update Information:
Initial release of sslsplit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #825865 - Review Request: sslsplit - Transparent and scalable SSL/TLS interception
https://bugzilla.redhat.com/show_bug.cgi?id=825865
--------------------------------------------------------------------------------
================================================================================
usbredir-0.4.3-3.fc17 (FEDORA-2012-11295)
USB network redirection protocol libraries
--------------------------------------------------------------------------------
Update Information:
- Add 2 fixes from upstream fixing issues with some bulk devices
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2012 Hans de Goede <hdegoede@xxxxxxxxxx> - 0.4.3-3
- Add 2 fixes from upstream fixing issues with some bulk devices (rhbz#842358)
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.4.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
