The following Fedora 17 Security updates need testing: Age URL 1 https://admin.fedoraproject.org/updates/FEDORA-2012-12377/keepalived-1.2.5-2.fc17 47 https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4.14-1.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2012-12352/GraphicsMagick-1.3.16-5.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2012-12500/ocaml-xml-light-2.3-0.1.svn234.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2012-12362/roundcubemail-0.7.3-1.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2012-12383/gimp-2.8.0-3.fc17 11 https://admin.fedoraproject.org/updates/FEDORA-2012-11717/bacula-5.2.10-5.fc17 6 https://admin.fedoraproject.org/updates/FEDORA-2012-11959/libotr-3.2.1-1.fc17 45 https://admin.fedoraproject.org/updates/FEDORA-2012-10391/bcfg2-1.2.3-1.fc17 5 https://admin.fedoraproject.org/updates/FEDORA-2012-12028/drupal6-ctools-1.9-1.fc17 4 https://admin.fedoraproject.org/updates/FEDORA-2012-12127/condor-7.9.1-0.1.fc17.2 5 https://admin.fedoraproject.org/updates/FEDORA-2012-12031/phpMyAdmin-3.5.2.2-1.fc17 11 https://admin.fedoraproject.org/updates/FEDORA-2012-11718/transfig-3.2.5d-7.fc17 5 https://admin.fedoraproject.org/updates/FEDORA-2012-12091/wireshark-1.6.10-1.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2012-12483/tor-0.2.2.38-1700.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2012-12487/jabberd-2.2.14-4.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2012-12496/zabbix-1.8.15-1.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2012-12523/libvirt-0.9.11.5-3.fc17 4 https://admin.fedoraproject.org/updates/FEDORA-2012-12151/amsn-0.98.9-4.fc17 9 https://admin.fedoraproject.org/updates/FEDORA-2012-11762/ImageMagick-6.7.5.6-4.fc17 16 https://admin.fedoraproject.org/updates/FEDORA-2012-11479/drupal6-og-2.4-1.fc17 16 https://admin.fedoraproject.org/updates/FEDORA-2012-11485/dokuwiki-0-0.12.20120125.b.fc17 4 https://admin.fedoraproject.org/updates/FEDORA-2012-12165/postgresql-9.1.5-1.fc17 3 https://admin.fedoraproject.org/updates/FEDORA-2012-12208/openttd-1.2.2-1.fc17 2 https://admin.fedoraproject.org/updates/FEDORA-2012-12284/munin-2.0.5-2.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2012-12368/gnome-keyring-3.4.1-3.fc17 The following Fedora 17 Critical Path updates have yet to be approved: Age URL 0 https://admin.fedoraproject.org/updates/FEDORA-2012-12518/gdb-7.4.50.20120120-50.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2012-12509/PackageKit-0.7.6-1.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2012-12495/fedora-logos-17.0.2-5.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2012-12369/xorg-x11-drv-intel-2.20.4-2.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2012-12360/libdrm-2.4.37-1.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2012-12355/selinux-policy-3.10.0-146.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2012-12361/grep-2.14-1.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2012-12368/gnome-keyring-3.4.1-3.fc17 2 https://admin.fedoraproject.org/updates/FEDORA-2012-12279/ntfs-3g-2012.1.15-3.fc17 4 https://admin.fedoraproject.org/updates/FEDORA-2012-12134/e2fsprogs-1.42.3-3.fc17 6 https://admin.fedoraproject.org/updates/FEDORA-2012-11955/bluez-4.99-2.fc17 6 https://admin.fedoraproject.org/updates/FEDORA-2012-11931/system-config-users-1.2.116-1.fc17 7 https://admin.fedoraproject.org/updates/FEDORA-2012-11873/libmx-1.4.7-1.fc17 8 https://admin.fedoraproject.org/updates/FEDORA-2012-11856/xz-5.1.2-1alpha.fc17 8 https://admin.fedoraproject.org/updates/FEDORA-2012-11808/phonon-backend-gstreamer-4.6.2-1.fc17 4 https://admin.fedoraproject.org/updates/FEDORA-2012-11822/evolution-ews-3.4.4-1.fc17,evolution-mapi-3.4.4-1.fc17,evolution-exchange-3.4.4-1.fc17,evolution-3.4.4-1.fc17,evolution-data-server-3.4.4-2.fc17,gtkhtml3-4.4.4-1.fc17 11 https://admin.fedoraproject.org/updates/FEDORA-2012-11702/kde-settings-4.8-18.fc17 11 https://admin.fedoraproject.org/updates/FEDORA-2012-11727/pykickstart-1.99.15-1.fc17 12 https://admin.fedoraproject.org/updates/FEDORA-2012-11617/virtuoso-opensource-6.1.6-1.fc17 12 https://admin.fedoraproject.org/updates/FEDORA-2012-11529/abrt-2.0.12-1.fc17,libreport-2.0.13-1.fc17,btparser-0.18-2.fc17 The following builds have been pushed to Fedora 17 updates-testing PackageKit-0.7.6-1.fc17 amarok-2.6.0-2.fc17.1 antlr3-3.4-11.fc17 apacheds-ldap-client-0.1-2.fc17 cheese-3.4.2-4.fc17 clementine-1.0.1-11.fc17 csync2-1.34-9.fc17 eclipse-fedorapackager-0.4.1-1.fc17 fedora-logos-17.0.2-5.fc17 gdb-7.4.50.20120120-50.fc17 glances-1.4-2.fc17 ibus-1.4.99.20120822-1.fc17 jabberd-2.2.14-4.fc17 jtds-1.2.6-1.fc17 kmymoney-4.6.2-2.fc17 libechonest-2.0.1-1.fc17 liblastfm-1.0.1-1.fc17 libvirt-0.9.11.5-3.fc17 littleproxy-0.4-2.fc17 mate-polkit-1.4.0-2.fc17 mate-vfs-1.4.0-10.fc17 mingw-qwt-5.2.2-1.fc17 ocaml-xml-light-2.3-0.1.svn234.fc17 opencc-0.3.0-4.fc17 openstack-quantum-2012.1-7.fc17 perl-CGI-Session-4.35-12.fc17 perl-DBD-Pg-2.19.3-1.fc17 qbittorrent-3.0.1-1.fc17 rednotebook-1.5.0-1.fc17 rubygem-boxgrinder-build-0.10.3-1.fc17 rubygem-boxgrinder-core-0.3.13-1.fc17 rubygem-rhc-0.96.9-1.fc17 subversion-1.7.6-1.fc17 sympol-0.1.7-2.fc17 system-config-kdump-2.0.8-1.fc17 tomahawk-0.5.5-1.fc17 tor-0.2.2.38-1700.fc17 tortoisehg-2.4.3-1.fc17 uhd-3.4.3-1.fc17 vim-command-t-1.4-1.fc17 vrq-1.0.96-1.fc17 wqy-zenhei-fonts-0.9.46-6.fc17 xscreensaver-5.19-2.fc17 zabbix-1.8.15-1.fc17 Details about builds: ================================================================================ PackageKit-0.7.6-1.fc17 (FEDORA-2012-12509) Package management service -------------------------------------------------------------------------------- Update Information: - New upstream release - Fix a crash where NetworkManager is restarted whilst packagekitd is running - Fix segfault in pkcon when user does ctrl-d at the package prompt - Inhibit shutdown when the package manager is locked - Fix several return values in pkcon when there is an error -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 21 2012 Richard Hughes <rhughes@xxxxxxxxxx> - 0.7.6-1 - New upstream release - Fix a crash where NetworkManager is restarted whilst packagekitd is running - Fix segfault in pkcon when user does ctrl-d at the package prompt - Inhibit shutdown when the package manager is locked - Fix several return values in pkcon when there is an error -------------------------------------------------------------------------------- ================================================================================ amarok-2.6.0-2.fc17.1 (FEDORA-2012-12524) Media player -------------------------------------------------------------------------------- Update Information: An update to the latest stable upstream release of tomahawk-0.5.5, and dependent libraries. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.6.0-2.1 - use liblastfm1 on f16/f17 too -------------------------------------------------------------------------------- ================================================================================ antlr3-3.4-11.fc17 (FEDORA-2012-12526) ANother Tool for Language Recognition -------------------------------------------------------------------------------- Update Information: - ANTLR3 is built for Java 1.6 to fix possible incompatibility with Java 1.7 Add stringtemplate back to Requires/BuildRequires after an erroneous update -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 21 2012 Miloš Jakubíček <xjakub@xxxxxxxxxx> - 3.4-11 - Now really compile for Java 1.6 everything *Sat Aug 18 2012 Miloš Jakubíček <xjakub@xxxxxxxxxx> - 3.4-10 - Explicitly compile for Java 1.5, to (maybe?) fix BZ#842572 * Mon Aug 6 2012 Alexander Kurtakov <akurtako@xxxxxxxxxx> 3.4-9 - Inject org.antlr.runtime OSGi metadata. - Update BRs to newer versions. * Tue Jul 24 2012 Stanislav Ochotnicky <sochotnicky@xxxxxxxxxx> - 3.4-8 - Add back requires on stringtemplate for java subpackage * Wed Jul 18 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.4-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #842572 - antlr3 - compile with -target 1.5 or greater https://bugzilla.redhat.com/show_bug.cgi?id=842572 -------------------------------------------------------------------------------- ================================================================================ apacheds-ldap-client-0.1-2.fc17 (FEDORA-2012-12489) ApacheDS LDAP Client API -------------------------------------------------------------------------------- Update Information: Initial import. -------------------------------------------------------------------------------- References: [ 1 ] Bug #823964 - Review Request: apacheds-ldap-client - ApacheDS LDAP Client API https://bugzilla.redhat.com/show_bug.cgi?id=823964 -------------------------------------------------------------------------------- ================================================================================ cheese-3.4.2-4.fc17 (FEDORA-2012-12472) Application for taking pictures and movies from a webcam -------------------------------------------------------------------------------- Update Information: Fix cheese crashing on tvcards which report they can capture 0x0 as minimum resolution -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Hans de Goede <hdegoede@xxxxxxxxxx> - 2:3.4.2-4 - Fix cheese crashing on tvcards which report they can capture 0x0 as minimum resolution (rhbz#850505) -------------------------------------------------------------------------------- References: [ 1 ] Bug #850505 - [abrt] cheese-3.4.2-3.fc17: g_private_get_impl: Process /usr/bin/cheese was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=850505 -------------------------------------------------------------------------------- ================================================================================ clementine-1.0.1-11.fc17 (FEDORA-2012-12524) A music player and library organizer -------------------------------------------------------------------------------- Update Information: An update to the latest stable upstream release of tomahawk-0.5.5, and dependent libraries. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 26 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.0.1-11 - rebuild (libechonest) * Wed Jul 18 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.1-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ csync2-1.34-9.fc17 (FEDORA-2012-12482) Cluster synchronization tool -------------------------------------------------------------------------------- Update Information: Fix the Makefile to properly compile with gnutls -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 20 2012 Simon Piette <piette.simon@xxxxxxxxx> - 1.34-9 - Fix the application of gnutls (bz 849795) - Actually compiles gnutls in * Wed Jul 18 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.34-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #849795 - csync2 does not use TLS https://bugzilla.redhat.com/show_bug.cgi?id=849795 -------------------------------------------------------------------------------- ================================================================================ eclipse-fedorapackager-0.4.1-1.fc17 (FEDORA-2012-12511) Fedora Packager for Eclipse -------------------------------------------------------------------------------- Update Information: Update to 0.4.1. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 20 2012 Andrew Robinson <arobinso@xxxxxxxxxx> 0.4.1-1 - Update to 0.4.1. -------------------------------------------------------------------------------- ================================================================================ fedora-logos-17.0.2-5.fc17 (FEDORA-2012-12495) Fedora-related icons and pictures -------------------------------------------------------------------------------- Update Information: Fixes theme issues caused by grub2 theme.txt specifying "fireworks.png", when file was named "background.png". fireworks.png is now a symlink to background.png. -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 21 2012 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 17.0.2-5 - add fireworks.png symlink * Thu Aug 2 2012 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 17.0.2-4 - codename update for f17 - drop unused kde dir ownerships * Thu Jul 19 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 17.0.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Tue Jun 12 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 17.0.2-2 - drop reference to (old/f11) Leonidas ksplash theme -------------------------------------------------------------------------------- References: [ 1 ] Bug #840179 - Latest grub2 update broke "system" theme https://bugzilla.redhat.com/show_bug.cgi?id=840179 -------------------------------------------------------------------------------- ================================================================================ gdb-7.4.50.20120120-50.fc17 (FEDORA-2012-12518) A GNU source-level debugger for C, C++, Fortran and other languages -------------------------------------------------------------------------------- Update Information: Support constant DW_AT_high_pc produced by FSF GCC HEAD (Mark Wielaard). -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Jan Kratochvil <jan.kratochvil@xxxxxxxxxx> - 7.4.50.20120120-50.fc17 - Support constant DW_AT_high_pc produced by FSF GCC HEAD (Mark Wielaard). -------------------------------------------------------------------------------- References: [ 1 ] Bug #850747 - Backport constant DW_AT_high_pc support https://bugzilla.redhat.com/show_bug.cgi?id=850747 -------------------------------------------------------------------------------- ================================================================================ glances-1.4-2.fc17 (FEDORA-2012-12485) CLI curses based monitoring tool -------------------------------------------------------------------------------- Update Information: add missing dependancies -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 21 2012 Edouard Bourguignon <madko@xxxxxxxxxxx> - 1.4-2 - Adding missing dependencies - Removing shebang in non-executable files * Tue Aug 21 2012 Edouard Bourguignon <madko@xxxxxxxxxxx> - 1.4-1 - Upgrade to version 1.4 * Thu Jul 19 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.3.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Mon Feb 13 2012 Edouard Bourguignon <madko@xxxxxxxxxxx> - 1.3.7-2 - Add version for python -------------------------------------------------------------------------------- ================================================================================ ibus-1.4.99.20120822-1.fc17 (FEDORA-2012-12494) Intelligent Input Bus for Linux OS -------------------------------------------------------------------------------- Update Information: This update fixes no default dconf values in ibus in F18 and also adds the customization to disable the reverse trigger keys. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.4.99.20120822-1 - Bumped to 1.4.99.20120822 - Bumped to ibus-gjs 3.4.1.20120815 Fixed Bug 845956 - ibus backward trigger key is not customized Fixed Bug 844580 - ibus-dconf does not load the system gvdb - Separated ibus-810211-no-switch-by-no-trigger.patch from ibus-HEAD.patch * Fri Jul 27 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.4.99.20120712-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Thu Jul 19 2012 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.4.99.20120712-2 - Updated ibus-HEAD.patch Support dconf 0.13.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #844580 - ibus-dconf does not load the system gvdb in dconf 0.13.4 https://bugzilla.redhat.com/show_bug.cgi?id=844580 [ 2 ] Bug #845956 - ibus backward trigger key is not customized in ibus-setup https://bugzilla.redhat.com/show_bug.cgi?id=845956 -------------------------------------------------------------------------------- ================================================================================ jabberd-2.2.14-4.fc17 (FEDORA-2012-12487) OpenSource server implementation of the Jabber protocols -------------------------------------------------------------------------------- Update Information: included patch for "Vulnerability in XMPP Server Dialback Implementations" http://xmpp.org/resources/security-notices/server-dialback/ -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Adrian Reber <adrian@xxxxxxxx> - 2.2.14-4 - included patch for "Vulnerability in XMPP Server Dialback Implementations" http://xmpp.org/resources/security-notices/server-dialback/ -------------------------------------------------------------------------------- ================================================================================ jtds-1.2.6-1.fc17 (FEDORA-2012-12505) SQL Server and Sybase JDBC driver -------------------------------------------------------------------------------- Update Information: Initial import. -------------------------------------------------------------------------------- References: [ 1 ] Bug #818943 - Review Request: jtds - SQL Server and Sybase JDBC driver https://bugzilla.redhat.com/show_bug.cgi?id=818943 -------------------------------------------------------------------------------- ================================================================================ kmymoney-4.6.2-2.fc17 (FEDORA-2012-12484) Personal finance -------------------------------------------------------------------------------- Update Information: rebuild for new calligra/kdchart -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 17 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.6.2-2 - rebuild (kdchart) -------------------------------------------------------------------------------- References: [ 1 ] Bug #850584 - Update of Kmyoney failed due to dependencies https://bugzilla.redhat.com/show_bug.cgi?id=850584 -------------------------------------------------------------------------------- ================================================================================ libechonest-2.0.1-1.fc17 (FEDORA-2012-12524) C++ wrapper for the Echo Nest API -------------------------------------------------------------------------------- Update Information: An update to the latest stable upstream release of tomahawk-0.5.5, and dependent libraries. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 26 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.0.1-1 - Update to 2.0.1 * Thu Jul 19 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ liblastfm-1.0.1-1.fc17 (FEDORA-2012-12524) Libraries to integrate Last.fm services -------------------------------------------------------------------------------- Update Information: An update to the latest stable upstream release of tomahawk-0.5.5, and dependent libraries. -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 3 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.0.1-1 - liblastfm-1.0.1 * Tue Feb 28 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.3.3-5 - Rebuilt for c++ ABI breakage -------------------------------------------------------------------------------- ================================================================================ libvirt-0.9.11.5-3.fc17 (FEDORA-2012-12523) Library providing a simple virtualization API -------------------------------------------------------------------------------- Update Information: * Rebased to version 0.9.11.5 * CVE-2012-3445 crash in virTypedParameterArrayClear (bz 844734) * Fix libvirt-guests (bz 843836) * Fix occasional loss of domain events in boxes (bz 819617) * Drop bogus daemon dep additions (bz 849159) -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Cole Robinson <crobinso@xxxxxxxxxx> - 0.9.11.5-3 - Drop bogus daemon dep additions (bz 849159) * Tue Aug 14 2012 Cole Robinson <crobinso@xxxxxxxxxx> - 0.9.11.5-2 - Fix libvirt driver deps * Mon Aug 13 2012 Cole Robinson <crobinso@xxxxxxxxxx> - 0.9.11.5-1 - Rebased to version 0.9.11.5 - CVE-2012-3445 crash in virTypedParameterArrayClear (bz 844734) - Fix libvirt-guests (bz 843836) - Fix occasional loss of domain events in boxes (bz 819617) -------------------------------------------------------------------------------- References: [ 1 ] Bug #844734 - CVE-2012-3445 libvirt: crash in virTypedParameterArrayClear https://bugzilla.redhat.com/show_bug.cgi?id=844734 -------------------------------------------------------------------------------- ================================================================================ littleproxy-0.4-2.fc17 (FEDORA-2012-12497) High Performance HTTP Proxy -------------------------------------------------------------------------------- Update Information: Here is where you give an explanation of your update. -------------------------------------------------------------------------------- References: [ 1 ] Bug #845852 - Review Request: littleproxy - High Performance HTTP Proxy https://bugzilla.redhat.com/show_bug.cgi?id=845852 -------------------------------------------------------------------------------- ================================================================================ mate-polkit-1.4.0-2.fc17 (FEDORA-2012-12475) Integrates polkit authentication for MATE desktop -------------------------------------------------------------------------------- Update Information: PolicyKit integration for MATE desktop. -------------------------------------------------------------------------------- References: [ 1 ] Bug #847419 - Review request: mate-polkit - Integrates polkit with the MATE Desktop environment https://bugzilla.redhat.com/show_bug.cgi?id=847419 -------------------------------------------------------------------------------- ================================================================================ mate-vfs-1.4.0-10.fc17 (FEDORA-2012-12521) The MATE virtual file-system libraries -------------------------------------------------------------------------------- Update Information: mate vfs -------------------------------------------------------------------------------- References: [ 1 ] Bug #844164 - Review Request: mate-vfs - The MATE virtual file-system libraries https://bugzilla.redhat.com/show_bug.cgi?id=844164 -------------------------------------------------------------------------------- ================================================================================ mingw-qwt-5.2.2-1.fc17 (FEDORA-2012-12504) MinGW Windows Qwt library -------------------------------------------------------------------------------- Update Information: update to 5.2.2 -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 21 2012 Thomas Sailer <t.sailer@xxxxxxxxxxxxxx> - 5.2.2-1 - update to 5.2.2 -------------------------------------------------------------------------------- ================================================================================ ocaml-xml-light-2.3-0.1.svn234.fc17 (FEDORA-2012-12500) Minimal XML parser and printer for OCaml -------------------------------------------------------------------------------- Update Information: Fix for CVE-2012-3514. -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 21 2012 Richard W.M. Jones <rjones@xxxxxxxxxx> - 2.3-0.1.svn234 - Update to latest version (subversion release 234). - Includes fix for CVE-2012-3514 - moderate impact hash table collisions (resolves: rhbz#787890). - Clean up the spec file and bring up to modern standards. - Add tests. -------------------------------------------------------------------------------- References: [ 1 ] Bug #787890 - ocaml-xml-light: hash table collisions CPU usage DoS https://bugzilla.redhat.com/show_bug.cgi?id=787890 -------------------------------------------------------------------------------- ================================================================================ opencc-0.3.0-4.fc17 (FEDORA-2012-12508) Libraries for Simplified-Traditional Chinese Conversion -------------------------------------------------------------------------------- Update Information: Fixes Download URL -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Peng Wu <pwu@xxxxxxxxxx> - 0.3.0-4 - Fixes Download URL * Mon Jul 23 2012 Peng Wu <pwu@xxxxxxxxxx> - 0.3.0-3 - Fixes cmake * Fri Jul 20 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ openstack-quantum-2012.1-7.fc17 (FEDORA-2012-12502) Virtual network service for OpenStack (quantum) -------------------------------------------------------------------------------- Update Information: - fix database config generated by install scripts -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 21 2012 Robert Kukura <rkukura@xxxxxxxxxx> - 2012.1-7 - fix database config generated by install scripts (#847785) -------------------------------------------------------------------------------- ================================================================================ perl-CGI-Session-4.35-12.fc17 (FEDORA-2012-12492) Persistent session data in CGI applications -------------------------------------------------------------------------------- Update Information: Fix deprecated use of qw//. Specify all dependencies. -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 21 2012 Petr Pisar <ppisar@xxxxxxxxxx> - 4.35-12 - Specify all dependencies - Fix deprecated use of qw// (bug #754689) -------------------------------------------------------------------------------- References: [ 1 ] Bug #754689 - CGI::Session emits deprecation warning when running under 'use warnings' https://bugzilla.redhat.com/show_bug.cgi?id=754689 -------------------------------------------------------------------------------- ================================================================================ perl-DBD-Pg-2.19.3-1.fc17 (FEDORA-2012-12491) A PostgreSQL interface for perl -------------------------------------------------------------------------------- Update Information: Fix segfault in pg_st_split_statement(). -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Petr Pisar <ppisar@xxxxxxxxxx> - 2.19.3-1 - 2.19.3 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #850673 - perl-DBD-Pg-2.19.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=850673 -------------------------------------------------------------------------------- ================================================================================ qbittorrent-3.0.1-1.fc17 (FEDORA-2012-12507) A Bittorrent Client -------------------------------------------------------------------------------- Update Information: * Tue Aug 21 2012 - Christophe Dumez <chris@xxxxxxxxxxxxxxx> - v3.0.1 - BUGFIX: Fix possible crash when adding a tracker to a magnet torrent without metadata (Closes #1034254) - BUGFIX: Remember queue position for torrents without metadata (closes #17) - BUGFIX: Fix crash when using unauthorized characters in label names (closes #19) - BUGFIX: Fix search plugins updating (closes #25) - BUGFIX: Make uTP connections rate limited by default -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 21 2012 Leigh Scott <leigh123linux@xxxxxxxxxxxxxx> - 1:3.0.1-1 - update to 3.0.1 release - change source to .xz -------------------------------------------------------------------------------- ================================================================================ rednotebook-1.5.0-1.fc17 (FEDORA-2012-12510) A desktop diary -------------------------------------------------------------------------------- Update Information: * Mon Aug 13 2012 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.5.0-1 - Updated to new upstream version 1.5.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 13 2012 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.5.0-1 - Updated to new upstream version 1.5.0 * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.4.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Apr 13 2012 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.4.0-1 - Updated to new upstream version 1.4.0 -------------------------------------------------------------------------------- ================================================================================ rubygem-boxgrinder-build-0.10.3-1.fc17 (FEDORA-2012-12499) A tool for creating appliances from simple plain text files -------------------------------------------------------------------------------- Update Information: - Upstream release: 0.10.3 - [BGBUILD-339] Existing rpm package with the name containing '+' considered as an invalid name - [BGBUILD-359] Enable more than 4 partitions in msdos partition layout - [BGBUILD-368] Update QEMU wrapper to attempt detection of a valid qemu binary -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Marek Goldmann <mgoldman@xxxxxxxxxx> - 0.10.3-1 - Upstream release: 0.10.3 - [BGBUILD-339] Existing rpm package with the name containing '+' considered as an invalid name - [BGBUILD-359] Enable more than 4 partitions in msdos partition layout - [BGBUILD-368] Update QEMU wrapper to attempt detection of a valid qemu binary * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.10.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rubygem-boxgrinder-core-0.3.13-1.fc17 (FEDORA-2012-12517) Core library for BoxGrinder -------------------------------------------------------------------------------- Update Information: - Upstream release: 0.3.13 - [BGBUILD-364] Validate length of appliance name -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Marek Goldmann <mgoldman@xxxxxxxxxx> - 0.3.13-1 - Upstream release: 0.3.13 - [BGBUILD-364] Validate length of appliance name * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.3.12-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rubygem-rhc-0.96.9-1.fc17 (FEDORA-2012-12519) OpenShift Express Client Tools -------------------------------------------------------------------------------- Update Information: Updated version 0.96.9 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 20 2012 Guillermo Gómez <gomix@xxxxxxxxxxxxxxxxx> - 0.96.9-1 - Updated to version 0.96.9 -------------------------------------------------------------------------------- ================================================================================ subversion-1.7.6-1.fc17 (FEDORA-2012-12473) A Modern Concurrent Version Control System -------------------------------------------------------------------------------- Update Information: This update contains the latest release of Subversion, version 1.7.6. The following client side bug fixes are included: * Fix "svn status -u --depth empty FILE" * Fix example output of 'svn help status' * svn propset of svn:eol-style might not notice related text changes * sort output of 'svn propget -R' * sort output of 'svn proplist' * sort output of 'svn status' * avoid a filestat per working copy find operation * optimize 'svn upgrade' performance on large working copies * fix 'svn upgrade' on working copies with certain tree conflicts * avoid workqueue references to system temp dir * allow non-existant canonical paths * fix 'svn revert --depth files' to operate on files * fix relocate with server-relative externals (issue 4216) * don't attempt to anchor an operation outside a wc root The following server-side bugfixes are also included: * partial sync drops properties when converting to adds * replaying a copy and delete of an unreadable child fails * allow svnlook to operate on r0 * make FSFS revision files independent of APR hash order -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 17 2012 Joe Orton <jorton@xxxxxxxxxx> - 1.7.6-1 - update to 1.7.6 * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.7.5-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Mon Jul 16 2012 Joe Orton <jorton@xxxxxxxxxx> - 1.7.5-5 - switch svnserve pidfile to use /run, use /usr/lib/tmpfiles.d (#840195) * Thu Jun 28 2012 Petr Pisar <ppisar@xxxxxxxxxx> - 1.7.5-4 - Perl 5.16 rebuild * Mon Jun 18 2012 Dan Horák <dan[at]danny.cz - 1.7.5-3 - fix build with recent gcc 4.7 (svn rev 1345740) * Fri Jun 8 2012 Petr Pisar <ppisar@xxxxxxxxxx> - 1.7.5-2 - Perl 5.16 rebuild -------------------------------------------------------------------------------- ================================================================================ sympol-0.1.7-2.fc17 (FEDORA-2012-12471) Symmetric polyhedra tool -------------------------------------------------------------------------------- Update Information: SymPol is a C++ tool to work with symmetric polyhedra. It helps to compute restricted automorphisms (parts of the linear symmetry group) of polyhedra and performs polyhedral description conversion up to a given or computed symmetry group. This tool is used by polymake. -------------------------------------------------------------------------------- References: [ 1 ] Bug #804190 - Review Request: sympol - Symmetric polyhedra tool https://bugzilla.redhat.com/show_bug.cgi?id=804190 -------------------------------------------------------------------------------- ================================================================================ system-config-kdump-2.0.8-1.fc17 (FEDORA-2012-12498) A graphical interface for configuring kernel crash dumping -------------------------------------------------------------------------------- Update Information: Update to latest version, fix few bugs -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Roman Rakus <rrakus@xxxxxxxxxx> - 2.0.8-1 - Update to 2.0.8 -------------------------------------------------------------------------------- ================================================================================ tomahawk-0.5.5-1.fc17 (FEDORA-2012-12524) The Social Media Player -------------------------------------------------------------------------------- Update Information: An update to the latest stable upstream release of tomahawk-0.5.5, and dependent libraries. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 26 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.5.5-1 - tomahawk-0.5.5 * Tue Jul 24 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.5.4-2 - rebuild * Thu Jul 19 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.5.4-1 - tomahawk-0.5.4 * Sat Jul 14 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.5.2-2 - update scriptlet(s) * Tue Jul 3 2012 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.5.2-1 - tomahawk-0.5.2 -------------------------------------------------------------------------------- ================================================================================ tor-0.2.2.38-1700.fc17 (FEDORA-2012-12483) Anonymizing overlay network for TCP (The onion router) -------------------------------------------------------------------------------- Update Information: . -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 19 2012 Enrico Scholz <enrico.scholz@xxxxxxxxxxxxxxxxxxxxxxxxx> - 0.2.2.38-1700 - updated to 0.2.2.38 -------------------------------------------------------------------------------- References: [ 1 ] Bug #849949 - CVE-2012-3517 tor: Read from freed memory and double free by processing failed DNS request https://bugzilla.redhat.com/show_bug.cgi?id=849949 -------------------------------------------------------------------------------- ================================================================================ tortoisehg-2.4.3-1.fc17 (FEDORA-2012-12480) Mercurial GUI command line tool thg -------------------------------------------------------------------------------- Update Information: Bugfix release * 2.4.3 - see https://bitbucket.org/tortoisehg/thg/wiki/ReleaseNotes#!tortoisehg-243 * update for nautilus-python 1.x - extension directory has moved and works -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 21 2012 Mads Kiilerich <mads@xxxxxxxxxxxxx> - 2.4.3-1 - tortoisehg-2.4.3 * Sun Aug 19 2012 Mads Kiilerich <mads@xxxxxxxxxxxxx> - 2.4.2-2 - update nautilus-python extension directory -------------------------------------------------------------------------------- References: [ 1 ] Bug #849906 - tortoisehg-2.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=849906 [ 2 ] Bug #730049 - tortoisehg-nautilus extension doesn't work https://bugzilla.redhat.com/show_bug.cgi?id=730049 -------------------------------------------------------------------------------- ================================================================================ uhd-3.4.3-1.fc17 (FEDORA-2012-12478) Universal Hardware Driver for Ettus Research products -------------------------------------------------------------------------------- Update Information: This is new version of uhd that brings several fixes, for full list see changelog: http://code.ettus.com/redmine/ettus/projects/uhd/wiki/ChangeLog -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 3.4.3-1 - New version * Fri Aug 10 2012 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 3.4.2-4 - Rebuilt for new boost * Sun Jul 22 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.4.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ vim-command-t-1.4-1.fc17 (FEDORA-2012-12476) An extremely fast, intuitive mechanism for opening files in VIM -------------------------------------------------------------------------------- Update Information: Initial package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #845568 - Review Request: vim-command-t - An extremely fast, intuitive mechanism for opening files in VIM https://bugzilla.redhat.com/show_bug.cgi?id=845568 -------------------------------------------------------------------------------- ================================================================================ vrq-1.0.96-1.fc17 (FEDORA-2012-12469) Verilog tool framework with plugins for manipulating source code -------------------------------------------------------------------------------- Update Information: Updated to 1.0.96 -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Shakthi Kannan <shakthimaan [AT] fedoraproject dot org> - 1.0.96-1 - Updated to 1.0.96 * Sun Jul 22 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.88-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ wqy-zenhei-fonts-0.9.46-6.fc17 (FEDORA-2012-12515) WenQuanYi Zen Hei CJK Font -------------------------------------------------------------------------------- Update Information: Fixes Download URL -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Peng Wu <pwu@xxxxxxxxxx> - 0.9.46-6 - Fixes Download URL * Sun Jul 22 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.9.46-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ xscreensaver-5.19-2.fc17 (FEDORA-2012-12522) X screen saver and locker -------------------------------------------------------------------------------- Update Information: A bug is reported that lament hack causes segv with -wireframe option. This new rpm will fix this issue. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 22 2012 Mamoru Tasaka <mtasaka@xxxxxxxxxxxxxxxxx> - 1:5.19-2 - Fix segv on lament with -wireframe option (bug 849961) - Fix improper and operator on flurry detected by llvm-clang -------------------------------------------------------------------------------- References: [ 1 ] Bug #849961 - [abrt] xscreensaver-gl-extras-5.19-1.fc17: scale_for_window: Process /usr/libexec/xscreensaver/lament was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=849961 -------------------------------------------------------------------------------- ================================================================================ zabbix-1.8.15-1.fc17 (FEDORA-2012-12496) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information: Release notes: http://www.zabbix.com/rn1.8.15.php Amongst others: - Solves SQL injection vulnerability CVE-2012-3435 - Removes useless backup files from the frontend -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 20 2012 Volker Fröhlich <volker27@xxxxxx> - 1.8.15-1 - update to 1.8.15 - Rework patches to not leave backup files in the frontend -------------------------------------------------------------------------------- References: [ 1 ] Bug #843927 - zabbix: SQL injection vulnerability via the "itemid" parameter https://bugzilla.redhat.com/show_bug.cgi?id=843927 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test