The following Fedora 17 Security updates need testing: Age URL 280 https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4.14-1.fc17 93 https://admin.fedoraproject.org/updates/FEDORA-2013-0455/fedora-business-cards-1-0.1.beta1.fc17 63 https://admin.fedoraproject.org/updates/FEDORA-2013-2143/rubygem-rdoc-3.12-5.fc17 59 https://admin.fedoraproject.org/updates/FEDORA-2013-2315/rubygem-rack-1.4.0-4.fc17 21 https://admin.fedoraproject.org/updates/FEDORA-2013-4234/stunnel-4.55-1.fc17 21 https://admin.fedoraproject.org/updates/FEDORA-2013-4174/glibc-2.15-59.fc17 19 https://admin.fedoraproject.org/updates/FEDORA-2013-4296/tomcat6-6.0.36-1.fc17 16 https://admin.fedoraproject.org/updates/FEDORA-2013-4501/libxslt-1.1.28-1.fc17 13 https://admin.fedoraproject.org/updates/FEDORA-2013-4581/libuser-0.57.6-2.fc17 11 https://admin.fedoraproject.org/updates/FEDORA-2013-4619/polarssl-1.1.6-1.fc17 7 https://admin.fedoraproject.org/updates/FEDORA-2013-4827/haproxy-1.4.23-1.fc17 6 https://admin.fedoraproject.org/updates/FEDORA-2013-4983/seamonkey-2.17-1.fc17 6 https://admin.fedoraproject.org/updates/FEDORA-2013-4927/xen-4.1.4-7.fc17 6 https://admin.fedoraproject.org/updates/FEDORA-2013-4980/drupal7-ctools-1.3-1.fc17 5 https://admin.fedoraproject.org/updates/FEDORA-2013-5051/gsi-openssh-5.9p1-11.fc17 2 https://admin.fedoraproject.org/updates/FEDORA-2013-5286/krb5-1.10.2-10.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2013-5349/389-ds-base-1.2.11.21-1.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-5440/php-geshi-1.0.8.11-3.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-5546/plexus-archiver-2.3-1.fc17 The following Fedora 17 Critical Path updates have yet to be approved: Age URL 233 https://admin.fedoraproject.org/updates/FEDORA-2012-12509/PackageKit-0.7.6-1.fc17 62 https://admin.fedoraproject.org/updates/FEDORA-2013-2163/policycoreutils-2.1.13-27.3.fc17 41 https://admin.fedoraproject.org/updates/FEDORA-2013-3304/libvpx-1.2.0-1.fc17 21 https://admin.fedoraproject.org/updates/FEDORA-2013-4140/audit-2.2.3-2.fc17 19 https://admin.fedoraproject.org/updates/FEDORA-2013-4308/libnotify-0.7.5-5.fc17 13 https://admin.fedoraproject.org/updates/FEDORA-2013-4581/libuser-0.57.6-2.fc17 9 https://admin.fedoraproject.org/updates/FEDORA-2013-4730/koji-1.8.0-1.fc17 6 https://admin.fedoraproject.org/updates/FEDORA-2013-5001/selinux-policy-3.10.0-169.fc17 6 https://admin.fedoraproject.org/updates/FEDORA-2013-4958/cryptopp-5.6.2-2.fc17 6 https://admin.fedoraproject.org/updates/FEDORA-2013-4977/livecd-tools-17.16-1.fc17 2 https://admin.fedoraproject.org/updates/FEDORA-2013-5287/libogg-1.3.0-5.fc17 2 https://admin.fedoraproject.org/updates/FEDORA-2013-5288/python-pycurl-7.19.0-11.1.fc17 2 https://admin.fedoraproject.org/updates/FEDORA-2013-5101/analitza-4.10.2-1.fc17,ark-4.10.2-1.fc17,audiocd-kio-4.10.2-1.fc17,blinken-4.10.2-1.fc17,bomber-4.10.2-1.fc17,bovo-4.10.2-1.fc17,cantor-4.10.2-1.fc17,dragon-4.10.2-1.fc17,filelight-4.10.2-1.fc17,granatier-4.10.2-1.fc17,gwenview-4.10.2-1.fc17,jovie-4.10.2-1.fc17,juk-4.10.2-1.fc17,kaccessible-4.10.2-1.fc17,kactivities-4.10.2-1.fc17,kajongg-4.10.2-1.fc17,kalgebra-4.10.2-1.fc17,kalzium-4.10.2-1.fc17,kamera-4.10.2-1.fc17,kanagram-4.10.2-1.fc17,kapman-4.10.2-1.fc17,kate-4.10.2-1.fc17,katomic-4.10.2-1.fc17,kblackbox-4.10.2-1.fc17,kblocks-4.10.2-1.fc17,kbounce-4.10.2-1.fc17,kbreakout-4.10.2-1.fc17,kbruch-4.10.2-1.fc17,kcalc-4.10.2-1.fc17,kcharselect-4.10.2-1.fc17,kcolorchooser-4.10.2-1.fc17,kdeaccessibility-4.10.2-1.fc17,kdeadmin-4.10.2-1.fc17,kdeartwork-4.10.2-1.fc17,kde-baseapps-4.10.2-1.fc17,kde-base-artwork-4.10.2-1.fc17,kdebindings-4.10.2-1.fc17,kdeedu-4.10.2-1.fc17,kdegames-4.10.2-1.fc17,kdegraphics-4.10.2-1.fc17,kdegraphics-mobipocket-4.10.2-1.fc17,kdegraphics-strigi-analyzer-4.10.2-1.fc17,kdegraphics-thumbnailers-4.10.2-1.fc17,kde-l10n-4.10.2-1.fc17,kdelibs-4.10.2-1.fc17,kdemultimedia-4.10.2-1.fc17,kdenetwork-4.10.2-1.fc17,kdepim-4.10.2-2.fc17,kdepimlibs-4.10.2-1.fc17,kdepim-runtime-4.10.2-1.fc17,kdeplasma-addons-4.10.2-1.fc17,kde-print-manager-4.10.2-1.fc17,kde-runtime-4.10.2-1.fc17,kdesdk-4.10.2-1.fc17,kdetoys-4.10.2-1.fc17,kdeutils-4.10.2-1.fc17,kde-wallpapers-4.10.2-1.fc17,kde-workspace-4.10.2-1.fc17,kdf-4.10.2-1.fc17,kdiamond-4.10.2-1.fc17,kfloppy-4.10.2-1.fc17,kfourinline-4.10.2-1.fc17,kgamma-4.10.2-1.fc17,kgeography-4.10.2-1.fc17,kgoldrunner-4.10.2-1.fc17,kgpg-4.10.2-1.fc17,khangman-4.10.2-1.fc17,kig-4.10.2-1.fc17,kigo-4.10.2-1.fc17,killbots-4.10.2-1.fc17,kimono-4.10.2-1.fc17,kiriki-4.10.2-1.fc17,kiten-4.10.2-1.fc17,kjumpingcube-4.10.2-1.fc17,klettres-4.10.2-1.fc17,klickety-4.10.2-1.fc17,klines-4.10.2-1.fc17,kmag-4.10.2-1.fc17,kmahjongg-4.10.2-1.fc17,kmines-4.10.2-1.fc17,kmix-4.10.2-1.fc17,kmousetool-4.10.2-1.fc17,kmouth-4.10.2-1.fc17,kmplot-4. 10.2-1.fc17,knavalbattle-4.10.2-1.fc17,knetwalk-4.10.2-1.fc17,kolf-4.10.2-1.fc17,kollision-4.10.2-1.fc17,kolourpaint-4.10.2-1.fc17,konquest-4.10.2-1.fc17,konsole-4.10.2-1.fc17,kpat-4.10.2-1.fc17,kremotecontrol-4.10.2-1.fc17,kreversi-4.10.2-1.fc17,kross-interpreters-4.10.2-1.fc17,kruler-4.10.2-1.fc17,ksaneplugin-4.10.2-1.fc17,kscd-4.10.2-1.fc17,kshisen-4.10.2-1.fc17,ksirk-4.10.2-1.fc17,ksnakeduel-4.10.2-1.fc17,ksnapshot-4.10.2-1.fc17,kspaceduel-4.10.2-1.fc17,ksquares-4.10.2-1.fc17,kstars-4.10.2-1.fc17,ksudoku-4.10.2-1.fc17,ktimer-4.10.2-1.fc17,ktouch-4.10.2-1.fc17,ktuberling-4.10.2-1.fc17,kturtle-4.10.2-1.fc17,kubrick-4.10.2-1.fc17,kwallet-4.10.2-1.fc17,kwordquiz-4.10.2-1.fc17,libkcddb-4.10.2-1.fc17,libkcompactdisc-4.10.2-1.fc17,libkdcraw-4.10.2-1.fc17,libkdeedu-4.10.2-1.fc17,libkdegames-4.10.2-1.fc17,libkexiv2-4.10.2-1.fc17,libkipi-4.10.2-1.fc17,libkmahjongg-4.10.2-1.fc17,libksane-4.10.2-1.fc17,lskat-4.10.2-1.fc17,marble-4.10.2-1.fc17,nepomuk-core-4.10.2-2.fc17,nepomuk-widgets-4.10.2-1.fc17,okular-4.10.2-1.fc17,oxygen-icon-theme-4.10.2-1.fc17,pairs-4.10.2-1.fc17,palapeli-4.10.2-1.fc17,parley-4.10.2-1.fc17,picmi-4.10.2-1.fc17,pykde4-4.10.2-1.fc17,qyoto-4.10.2-1.fc17,rocs-4.10.2-1.fc17,ruby-korundum-4.10.2-1.fc17,ruby-qt-4.10.2-1.fc17,smokegen-4.10.2-1.fc17,smokekde-4.10.2-1.fc17,smokeqt-4.10.2-1.fc17,step-4.10.2-1.fc17,superkaramba-4.10.2-1.fc17,svgpart-4.10.2-1.fc17,sweeper-4.10.2-1.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2013-5353/abrt-2.1.3-2.fc17,libreport-2.1.3-1.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-5476/perl-5.14.4-225.fc17 The following builds have been pushed to Fedora 17 updates-testing TurboGears-1.1.3-6.fc17 libguestfs-1.18.12-1.fc17 libmusicbrainz4-4.0.3-4.fc17 mediawiki-1.19.4-3.fc17 mirall-1.2.4-1.fc17 owncloud-csync-0.70.6-1.fc17 php-bartlett-PHP-CompatInfo-2.15.0-1.fc17 php-bartlett-PHP-Reflect-1.6.2-1.fc17 plexus-archiver-2.3-1.fc17 urdfdom-headers-0.2.2-2.fc17 Details about builds: ================================================================================ TurboGears-1.1.3-6.fc17 (FEDORA-2013-5555) Back-to-front web development in Python -------------------------------------------------------------------------------- Update Information: * Fix a traceback to be more informative when an application's identity provider is misconfigured. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 11 2013 Toshio Kuratomi <toshio@xxxxxxxxxxxxxxxxx> - 1.1.3-6 - Patch to fix naming a caught exception * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.1.3-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Jul 18 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.1.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ libguestfs-1.18.12-1.fc17 (FEDORA-2013-5560) Access and modify virtual machine disk images -------------------------------------------------------------------------------- Update Information: New upstream stable branch version 1.18.12. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 11 2013 Richard W.M. Jones <rjones@xxxxxxxxxx> - 1:1.18.12-1 - New upstream stable version 1.18.12. -------------------------------------------------------------------------------- ================================================================================ libmusicbrainz4-4.0.3-4.fc17 (FEDORA-2013-5543) Library for accessing MusicBrainz servers -------------------------------------------------------------------------------- Update Information: Fix failure to get metadata in some cases -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 11 2013 Christophe Fergeau <cfergeau@xxxxxxxxxx> 4.0.3-4 - Fixes bug in xml replacement code which is causing rhbz#845846 -------------------------------------------------------------------------------- References: [ 1 ] Bug #845846 - sound-juicer does not retrieve information for any CDs https://bugzilla.redhat.com/show_bug.cgi?id=845846 -------------------------------------------------------------------------------- ================================================================================ mediawiki-1.19.4-3.fc17 (FEDORA-2013-5552) A wiki engine -------------------------------------------------------------------------------- Update Information: * Fixes mw-updateallinstances to use configuration file in update. * Fixes mw-createinstance to include "includes" in multiple wiki instances and use correct config directory of "mw-config". -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 11 2013 Michael Cronenworth <mike@xxxxxxxxxx> - 1.19.4-3 - Update mw-* scripts. (#926899) -------------------------------------------------------------------------------- References: [ 1 ] Bug #926899 - mw-updateallinstances is broken https://bugzilla.redhat.com/show_bug.cgi?id=926899 -------------------------------------------------------------------------------- ================================================================================ mirall-1.2.4-1.fc17 (FEDORA-2013-5563) The ownCloud Client -------------------------------------------------------------------------------- Update Information: Updated to latest upstream version This updates the applications to the latest upstream release. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 11 2013 <jmarrero@xxxxxxxxxxxxxxxxx> 1.2.4-1 - Update to uptream version 1.2.4 * Wed Apr 3 2013 <jmarrero@xxxxxxxxxxxxxxxxx> 1.2.3-1 - remove plasma client files as is not officially merged uptream - Update to 1.2.3 uptream version * Tue Mar 5 2013 <jmarrero@xxxxxxxxxxxxxxxxx> 1.2.2-2 - plasma client files fix * Tue Mar 5 2013 <jmarrero@xxxxxxxxxxxxxxxxx> 1.2.2-1 - add new Plasma client package -------------------------------------------------------------------------------- References: [ 1 ] Bug #922430 - [abrt] owncloud-client-1.2.1-2.fc18: csync_vio_set_property: Process /usr/bin/owncloud was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=922430 [ 2 ] Bug #922469 - [abrt] owncloud-client-1.2.1-2.fc18: Process /usr/bin/owncloud was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=922469 -------------------------------------------------------------------------------- ================================================================================ owncloud-csync-0.70.6-1.fc17 (FEDORA-2013-5563) A user level bidirectional client only file synchronizer -------------------------------------------------------------------------------- Update Information: Updated to latest upstream version This updates the applications to the latest upstream release. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 11 2013 <jmarrero@xxxxxxxxxxxxxxxxx> 0.70.6-1 - Update to 0.70.6 * Wed Apr 3 2013 <jmarrero@xxxxxxxxxxxxxxxxx> 0.70.5-1 - Update to 0.70.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #922430 - [abrt] owncloud-client-1.2.1-2.fc18: csync_vio_set_property: Process /usr/bin/owncloud was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=922430 [ 2 ] Bug #922469 - [abrt] owncloud-client-1.2.1-2.fc18: Process /usr/bin/owncloud was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=922469 -------------------------------------------------------------------------------- ================================================================================ php-bartlett-PHP-CompatInfo-2.15.0-1.fc17 (FEDORA-2013-5281) Find out version and the extensions required for a piece of code to run -------------------------------------------------------------------------------- Update Information: Upstream changelogs: * http://php5.laurent-laville.org/compatinfo/manual/current/en/CHANGELOG.html * http://php5.laurent-laville.org/reflect/manual/current/en/CHANGELOG.html -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 12 2013 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.15.0-2 - add upstream man page (from github) - Update to 2.15.0 - raise dependencies, PHP_Reflect 1.6.2 * Tue Apr 2 2013 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.14.1-1 - Update to 2.14.1 - make cache path user dependent - raise dependencies, PHP_Reflect 1.6.1 - provides phpci -------------------------------------------------------------------------------- ================================================================================ php-bartlett-PHP-Reflect-1.6.2-1.fc17 (FEDORA-2013-5281) Adds the ability to reverse-engineer PHP -------------------------------------------------------------------------------- Update Information: Upstream changelogs: * http://php5.laurent-laville.org/compatinfo/manual/current/en/CHANGELOG.html * http://php5.laurent-laville.org/reflect/manual/current/en/CHANGELOG.html -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 6 2013 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 1.6.2-1 - Update to 1.6.2 - html documentation is now provided by upstream -------------------------------------------------------------------------------- ================================================================================ plexus-archiver-2.3-1.fc17 (FEDORA-2013-5546) Plexus Archiver Component -------------------------------------------------------------------------------- Update Information: Rebase to upstream version 2.3 and add patch to fix CVE-2012-2098. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 11 2013 Mikolaj Izdebski <mizdebsk@xxxxxxxxxx> - 0:2.3-1 - Update to upstream version 2.3 - Use apache-commons-compress for bzip2 (de)compression - Resolves: CVE-2012-2098 - Force source/target 1.5 * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0:2.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Feb 6 2013 Java SIG <java-devel@xxxxxxxxxxxxxxxxxxxxxxx> - 0:2.2-5 - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild - Replace maven BuildRequires with maven-local * Fri Nov 23 2012 Stanislav Ochotnicky <sochotnicky@xxxxxxxxxx> - 0:2.2-4 - Add ASL 2.0 license text to packages * Thu Nov 22 2012 Jaromir Capik <jcapik@xxxxxxxxxx> - 0:2.2-3 - Migration to plexus-containers-container-default * Mon Nov 19 2012 Stanislav Ochotnicky <sochotnicky@xxxxxxxxxx> - 0:2.2-2 - Fix source URL to be stable * Wed Oct 10 2012 Alexander Kurtakov <akurtako@xxxxxxxxxx> 0:2.2-1 - Update to upstream 2.2. * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0:2.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Wed Apr 18 2012 Alexander Kurtakov <akurtako@xxxxxxxxxx> 0:2.1.1-1 - Update to latest upstream release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #951521 - plexus-archiver: Uses embedded bzip implementation from apache-commons-compress (making it vulnerable against CVE-2012-2098 flaw and possibly others) https://bugzilla.redhat.com/show_bug.cgi?id=951521 -------------------------------------------------------------------------------- ================================================================================ urdfdom-headers-0.2.2-2.fc17 (FEDORA-2013-5544) The URDF (U-Robot Description Format) headers -------------------------------------------------------------------------------- Update Information: Initial import of the urdfdom-headers package. -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test