The following Fedora 17 Security updates need testing: Age URL 295 https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4.14-1.fc17 107 https://admin.fedoraproject.org/updates/FEDORA-2013-0455/fedora-business-cards-1-0.1.beta1.fc17 77 https://admin.fedoraproject.org/updates/FEDORA-2013-2143/rubygem-rdoc-3.12-5.fc17 73 https://admin.fedoraproject.org/updates/FEDORA-2013-2315/rubygem-rack-1.4.0-4.fc17 35 https://admin.fedoraproject.org/updates/FEDORA-2013-4234/stunnel-4.55-1.fc17 35 https://admin.fedoraproject.org/updates/FEDORA-2013-4174/glibc-2.15-59.fc17 34 https://admin.fedoraproject.org/updates/FEDORA-2013-4296/tomcat6-6.0.36-1.fc17 30 https://admin.fedoraproject.org/updates/FEDORA-2013-4501/libxslt-1.1.28-1.fc17 27 https://admin.fedoraproject.org/updates/FEDORA-2013-4581/libuser-0.57.6-2.fc17 15 https://admin.fedoraproject.org/updates/FEDORA-2013-5440/php-geshi-1.0.8.11-3.fc17 15 https://admin.fedoraproject.org/updates/FEDORA-2013-5349/389-ds-base-1.2.11.21-1.fc17 14 https://admin.fedoraproject.org/updates/FEDORA-2013-5546/plexus-archiver-2.3-1.fc17 8 https://admin.fedoraproject.org/updates/FEDORA-2013-5967/xorg-x11-server-1.12.4-7.fc17 6 https://admin.fedoraproject.org/updates/FEDORA-2013-6107/php-twig-Twig-1.12.3-1.fc17 5 https://admin.fedoraproject.org/updates/FEDORA-2013-6211/qemu-1.0.1-6.fc17 5 https://admin.fedoraproject.org/updates/FEDORA-2013-6170/mediawiki-1.19.5-1.fc17 3 https://admin.fedoraproject.org/updates/FEDORA-2013-6316/pdns-recursor-3.5-2.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2013-6557/telepathy-idle-0.1.15-1.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6723/xen-4.1.5-1.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6727/python-pip-1.3.1-1.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6720/curl-7.24.0-8.fc17 The following Fedora 17 Critical Path updates have yet to be approved: Age URL 247 https://admin.fedoraproject.org/updates/FEDORA-2012-12509/PackageKit-0.7.6-1.fc17 76 https://admin.fedoraproject.org/updates/FEDORA-2013-2163/policycoreutils-2.1.13-27.3.fc17 55 https://admin.fedoraproject.org/updates/FEDORA-2013-3304/libvpx-1.2.0-1.fc17 36 https://admin.fedoraproject.org/updates/FEDORA-2013-4140/audit-2.2.3-2.fc17 11 https://admin.fedoraproject.org/updates/FEDORA-2013-5724/ncurses-5.9-10.20130413.fc17 7 https://admin.fedoraproject.org/updates/FEDORA-2013-6034/kernel-3.8.8-100.fc17 3 https://admin.fedoraproject.org/updates/FEDORA-2013-6278/nss-3.14.3-2.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6720/curl-7.24.0-8.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6750/xorg-x11-drv-synaptics-1.6.3-3.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6636/kde-settings-4.8-25.fc17 The following builds have been pushed to Fedora 17 updates-testing arc-gui-clients-0.4.3-2.fc17 bibletime-2.9.1-6.fc17 curl-7.24.0-8.fc17 drupal6-messaging-2.4-1.fc17 drupal6-notifications-2.3-1.fc17 drupal6-stringoverrides-1.8-1.fc17 drupal6-vertical_tabs-1.0-0.1.rc2.fc17 drupal6-views_customfield-1.0-1.fc17 drupal6-views_datasource-1.0-0.1.beta2.fc17 drupal6-vote_up_down-3.2-1.fc17 drupal6-wikitools-1.3-1.fc17 kdevelop-4.5.0-1.fc17 kdevelop-php-1.5.0-1.fc17 kdevplatform-1.5.0-1.fc17 open-vm-tools-9.2.3-1.fc17 python-pip-1.3.1-1.fc17 python-simplevisor-0.8-1.fc17 python-tw2-jqplugins-jqplot-2.0.3-1.fc17 python-tw2-slideymenu-2.2-1.fc17 springlobby-0.169-3.fc17 tomoe-gtk-0.6.0-18.fc17 xen-4.1.5-1.fc17 xorg-x11-drv-synaptics-1.6.3-3.fc17 zanata-api-2.2.0-6.fc17 Details about builds: ================================================================================ arc-gui-clients-0.4.3-2.fc17 (FEDORA-2013-6731) ARC Graphical Clients -------------------------------------------------------------------------------- Update Information: Provides graphical clients to the NorduGrid ARC middleware. -------------------------------------------------------------------------------- References: [ 1 ] Bug #851267 - Review Request: arc-gui-clients - ARC Graphical Clients https://bugzilla.redhat.com/show_bug.cgi?id=851267 -------------------------------------------------------------------------------- ================================================================================ bibletime-2.9.1-6.fc17 (FEDORA-2013-6772) An easy to use Bible study tool -------------------------------------------------------------------------------- Update Information: Omit extraneous dependencies (curl, icu, zlib), and backport for proper display on newer qt/qtwebkit releases. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 19 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.9.1-6 - No text visible in main window when using qtwebkit-2.3 (#952390) * Thu Apr 18 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 2.9.1-5 - clean .spec of deprecated tags (Group, %clean, %defattr) - use %cmake macro - drop extraneous explicit sword-related deps (curl, zlib) - bibletime.desktop: don't remove Qt category, patch to pass validation - fix unowned dirs %_datadir/bibletime/docs/{handbook,howto} * Sun Feb 3 2013 Kevin Fenzi <kevin@xxxxxxxxx> - 2.9.1-4 - Rebuild for broken deps in rawhide * Wed Jul 18 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.9.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sun May 20 2012 Deji Akingunola <dakingun@xxxxxxxxx> - 2.9.1-2 - Rebuild for icu soname change -------------------------------------------------------------------------------- References: [ 1 ] Bug #952390 - No text visible in main window when using qtwebkit-2.3 https://bugzilla.redhat.com/show_bug.cgi?id=952390 -------------------------------------------------------------------------------- ================================================================================ curl-7.24.0-8.fc17 (FEDORA-2013-6720) A utility for getting files from remote servers (FTP, HTTP, and others) -------------------------------------------------------------------------------- Update Information: - prevent an artificial timeout event due to stale speed-check data (#906031) - show proper host name on failed resolve (#957173) fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944) -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Kamil Dudka <kdudka@xxxxxxxxxx> 7.24.0-8 - prevent an artificial timeout event due to stale speed-check data (#906031) - show proper host name on failed resolve (#957173) * Fri Apr 12 2013 Kamil Dudka <kdudka@xxxxxxxxxx> 7.24.0-7 - fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944) -------------------------------------------------------------------------------- References: [ 1 ] Bug #950577 - CVE-2013-1944 curl: Cookie domain suffix match vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=950577 -------------------------------------------------------------------------------- ================================================================================ drupal6-messaging-2.4-1.fc17 (FEDORA-2013-6764) Messaging Framework to allow message sending in an independent way -------------------------------------------------------------------------------- Update Information: This is a Messaging Framework to allow message sending in a channel independent way. It will provide a common API for message composition and sending while allowing plug-ins for multiple messaging methods. When using this framework, you won't send e-mails to users anymore. You will send them 'messages' and they will decide how they want to get them delivered, that may be by mail, IM, SMS, depending on user's preferences. This package provides the following Drupal modules: * messaging * messaging_debug * messaging_mail * messaging_mime_mail (NOTE: Requires manual install of the mimemail module) * messaging_phpmailer * messaging_privatemsg (NOTE: Requires manual install of the privatemsg module) * messaging_simple * messaging_sms (NOTE: Requires manual install of the smsframework module) * messaging_twitter (NOTE: Requires manual install of the twitter module) * messaging_xmpp (NOTE: Requires manual install of the xmppframework module) -------------------------------------------------------------------------------- References: [ 1 ] Bug #925991 - Review Request: drupal6-messaging - Messaging Framework to allow message sending in an independent way https://bugzilla.redhat.com/show_bug.cgi?id=925991 -------------------------------------------------------------------------------- ================================================================================ drupal6-notifications-2.3-1.fc17 (FEDORA-2013-6763) This is a complete Subscriptions/Notifications Framework -------------------------------------------------------------------------------- Update Information: This is a complete Subscriptions/Notifications Framework aiming at extendability and scalability. It allows any number of plug-ins defining new event types or subscription types or a different user interface. This package provides the following Drupal modules: * notifications * notifications_autosubscribe * notifications_content * notifications_lite * notifications_tags * notifications_ui * notifications_views -------------------------------------------------------------------------------- References: [ 1 ] Bug #925995 - Review Request: drupal6-notifications - This is a complete Subscriptions/Notifications Framework https://bugzilla.redhat.com/show_bug.cgi?id=925995 -------------------------------------------------------------------------------- ================================================================================ drupal6-stringoverrides-1.8-1.fc17 (FEDORA-2013-6737) Provides a quick and easy way of replacing text -------------------------------------------------------------------------------- Update Information: Provides a quick and easy way to replace any text on a site. Features: * Easily replace anything that's passed through t() * Locale support, allowing you to override strings in any language * Ability to import/export *.po files, for easy migration from the Locale module * Note that this is not a replacement to Locale as having thousands of overrides can cause more pain then benefit. Use this only if you need a few easy text changes. This package provides the following Drupal modules: * stringoverrides -------------------------------------------------------------------------------- References: [ 1 ] Bug #925972 - Review Request: drupal6-stringoverrides - Provides a quick and easy way of replacing text https://bugzilla.redhat.com/show_bug.cgi?id=925972 -------------------------------------------------------------------------------- ================================================================================ drupal6-vertical_tabs-1.0-0.1.rc2.fc17 (FEDORA-2013-6740) Provides vertical tabs for supported forms like the node edit page -------------------------------------------------------------------------------- Update Information: Provides vertical tabs like the node add form here: http://drupal.geek.nz/static/node-form/default/summaries2.html This module provides the following features: * Vertical tabifying all node forms * Vertical tabifying the content type forms * Vertical tabifying the block forms * Specialized CSS for Garland, as well as generic CSS for other themes * Color module support when both Garland and color.module are used * Vertical tabbed forms and fieldsets are over-ridable by using your site's settings.php and $conf * When used in combination with Form module allows you to configure vertical tabs on all possible forms This package provides the following Drupal module: * vertical_tabs -------------------------------------------------------------------------------- References: [ 1 ] Bug #925978 - Review Request: drupal6-vertical_tabs - Provides vertical tabs for supported forms like the node edit page https://bugzilla.redhat.com/show_bug.cgi?id=925978 -------------------------------------------------------------------------------- ================================================================================ drupal6-views_customfield-1.0-1.fc17 (FEDORA-2013-6722) Provides a number of custom views fields (rownumber, phpcode, ...) -------------------------------------------------------------------------------- Update Information: This module provides some useful views fields. Available views fields: * Markup: Field that allows usage of custom text and the input filter system. * PHP code: Field that allows usage of custom PHP code (with access to view's database result) * Rownumber: Field containing rownumber (respects pagers). This package provides the following Drupal module: * views_customfield -------------------------------------------------------------------------------- References: [ 1 ] Bug #925979 - Review Request: drupal6-views_customfield - Provides a number of custom views fields (rownumber, phpcode, ...) https://bugzilla.redhat.com/show_bug.cgi?id=925979 -------------------------------------------------------------------------------- ================================================================================ drupal6-views_datasource-1.0-0.1.beta2.fc17 (FEDORA-2013-6717) Plugins for Drupal Views for rendering content in a number formats -------------------------------------------------------------------------------- Update Information: Views Datasource is a set of plugins for Drupal Views for rendering content in a number of shareable, reusable formats based on XML, JSON and XHTML. These formats allow content in a Drupal site to be easily used as data sources for Semantic Web clients and web mash-ups. Views Datasource plugins output content from node lists created in the Drupal Views interface in a variety of formats - XML data documents using schemas like OPML and Atom, RDF data documents using a vocabulary like FOAF, JSON data documents in a format like Exhibit JSON, and XHTML data documents using a microformat like hCard. Views Datasource can be thought of as a userland complement to the work going on in the Services and RDF APIs as a site operator only needs to know Views to be able to create datasources in the different formats. The project consists of 4 Views style plugins (and related row plugins): * views_xml - Output as raw XML, OPML, and Atom; * views_json - Output as Simile/Exhibit JSON, Canonical JSON, JSONP/JSON in script; * views_rdf- Output as FOAF, SIOC, and DOAP; * views_xhtml - Output as hCard, hCalendar, and Geo. This package provides the following Drupal modules: * views_json * views_rdf * views_xhtml * views_xml -------------------------------------------------------------------------------- References: [ 1 ] Bug #925980 - Review Request: drupal6-views_datasource - Plugins for Drupal Views for rendering content in a number formats https://bugzilla.redhat.com/show_bug.cgi?id=925980 -------------------------------------------------------------------------------- ================================================================================ drupal6-vote_up_down-3.2-1.fc17 (FEDORA-2013-6729) Provides a configurable up/down voting widget for other modules -------------------------------------------------------------------------------- Update Information: Allows votes on some drupal entities and provides the base for implementing votes on other entities. Features: * Vote on nodes, comments and taxonomy terms on a node * Interchangeable voting widget themes * Code voting support for your own objects * Make your own widgets using ctools plugins * And more! This package provides the following Drupal modules: * vud * vud_comment * vud_node * vud_term -------------------------------------------------------------------------------- References: [ 1 ] Bug #925982 - Review Request: drupal6-vote_up_down - Provides a configurable up/down voting widget for other modules https://bugzilla.redhat.com/show_bug.cgi?id=925982 -------------------------------------------------------------------------------- ================================================================================ drupal6-wikitools-1.3-1.fc17 (FEDORA-2013-6743) Provides helper functionality to have wiki-like behavior -------------------------------------------------------------------------------- Update Information: The wikitools module provides some settings to get a more wiki-like behavior. It aims to be lightweight; all features are optional, and it provides no database tables of its own. Some of the features of this module are: * Node Creation: Let users create new nodes when they type in a node name which does not exist. * Node Search: Let users search for nodes when they type in a node name which does not exist. * Automatic Redirect: If a title of a moved page is entered, redirect automatically. * Unique Titles: Enforce that titles are unique over all wiki node types * Move Protection: Disallow change of node titles for users without administer nodes permission. * Underscore as Space: Treat underscores as spaces when doing a node-lookup by title. * Dash as Space: Treat dashes as spaces when doing a node-lookup by title. * Custom wiki 404 pages: pick and choose from links to create, links to search, and an inline node add form. The module can be used in conjunction with the flexifilter module (of course), the freelinking module by hijacking freelinking links, or together with the pearwiki filter module for various wiki formats. This package provides the following Drupal module: * wikitools -------------------------------------------------------------------------------- References: [ 1 ] Bug #925984 - Review Request: drupal6-wikitools - Provides helper functionality to have wiki-like behavior https://bugzilla.redhat.com/show_bug.cgi?id=925984 -------------------------------------------------------------------------------- ================================================================================ kdevelop-4.5.0-1.fc17 (FEDORA-2013-6734) Integrated Development Environment for C++/C -------------------------------------------------------------------------------- Update Information: KDevelop 4.5.0 release. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 9:4.5.0-1 - Update to 4.5.0 * Fri Apr 26 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 9:4.4.90-2 - Add previusly removed rpath patch * Thu Apr 25 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 9:4.4.90-1 - Update to 4.4.90 (RC1) * Mon Apr 1 2013 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> - 9:4.4.1-4 - Requires: cmake (as per discussion of kde#274246) * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 9:4.4.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ kdevelop-php-1.5.0-1.fc17 (FEDORA-2013-6734) Php language and documentation plugins for KDevelop -------------------------------------------------------------------------------- Update Information: KDevelop 4.5.0 release. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jan Grulich <jgrulich@xxxxxxxxxx> 1.5.0-1 - Update to 1.5.0 * Thu Apr 25 2013 Jan Grulich <jgrulich@xxxxxxxxxx> 1.4.90-1 - Update to 1.4.90 (RC1) * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.4.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ kdevplatform-1.5.0-1.fc17 (FEDORA-2013-6734) Libraries for use by KDE development tools -------------------------------------------------------------------------------- Update Information: KDevelop 4.5.0 release. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 1.5.0-1 - Update to 1.5.0 * Thu Apr 25 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 1.4.90-1 - Update to 1.4.90 (RC1) * Sun Feb 10 2013 Denis Arnaud <denis.arnaud_fedora@xxxxxxx> - 1.4.1-5 - Rebuild for Boost-1.53.0 * Sat Feb 9 2013 Denis Arnaud <denis.arnaud_fedora@xxxxxxx> - 1.4.1-4 - Rebuild for Boost-1.53.0 * Tue Nov 27 2012 Jan Grulich <jgrulich@xxxxxxxxxx> 1.4.1-3 - Rebuild (qjson) * Fri Nov 23 2012 Jan Grulich <jgrulich@xxxxxxxxxx> 1.4.1-2 - Rebuild for qjson 0.8.0 -------------------------------------------------------------------------------- ================================================================================ open-vm-tools-9.2.3-1.fc17 (FEDORA-2013-6768) Open VMware Tools for virtual machines hosted on VMware -------------------------------------------------------------------------------- Update Information: Open Virtual Machine Tools for VMware environments Open Virtual Machine Tools for VMware environments -------------------------------------------------------------------------------- References: [ 1 ] Bug #905255 - Review Request: open-vm-tools - Open Virtual Machine Tools https://bugzilla.redhat.com/show_bug.cgi?id=905255 -------------------------------------------------------------------------------- ================================================================================ python-pip-1.3.1-1.fc17 (FEDORA-2013-6727) Pip installs packages. Python3 packages. An easy_install replacement -------------------------------------------------------------------------------- Update Information: 1.3.1, fix for CVE-2013-1888, insecure tempdir usage. Update of python-pip to 1.1 from upstream -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 1.3.1-1 - Update to 1.3.1, fix for CVE-2013-1888. * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Tue Oct 9 2012 Tim Flink <tflink@xxxxxxxxxxxxxxxxx> - 1.2.1-2 - Fixing files for python3-pip * Thu Oct 4 2012 Tim Flink <tflink@xxxxxxxxxxxxxxxxx> - 1.2.1-1 - Update to upstream 1.2.1 - Change binary from pip-python to python-pip (RHBZ#855495) - Add alias from python-pip to pip-python, to be removed at a later date * Tue May 15 2012 Tim Flink <tflink@xxxxxxxxxxxxxxxxx> - 1.1.0-1 - Update to upstream 1.1.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #923975 - python-pip: insecure temporary directory usage [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=923975 -------------------------------------------------------------------------------- ================================================================================ python-simplevisor-0.8-1.fc17 (FEDORA-2013-6719) Python simple daemons supervisor -------------------------------------------------------------------------------- Update Information: Updating to upstream version 0.8. Updating to latest upstream 0.7. Updating to latest upstream 0.7. Updating to latest upstream 0.7. Updating to latest upstream 0.7. -------------------------------------------------------------------------------- ================================================================================ python-tw2-jqplugins-jqplot-2.0.3-1.fc17 (FEDORA-2013-6739) Toscawidgets2 wrapper for the jqPlot jQuery plugin -------------------------------------------------------------------------------- Update Information: Initial import (#916431). -------------------------------------------------------------------------------- References: [ 1 ] Bug #916431 - Review Request: python-tw2-jqplugins-jqplot - Toscawidgets2 wrapper for the jqPlot jQuery plugin https://bugzilla.redhat.com/show_bug.cgi?id=916431 -------------------------------------------------------------------------------- ================================================================================ python-tw2-slideymenu-2.2-1.fc17 (FEDORA-2013-6760) Toscawidgets2 wrapper for a "slidey" menu -------------------------------------------------------------------------------- Update Information: Initial import (#916436). -------------------------------------------------------------------------------- References: [ 1 ] Bug #916436 - Review Request: python-narcissus-app - WSGI components for Narcissus, realtime log visualization https://bugzilla.redhat.com/show_bug.cgi?id=916436 -------------------------------------------------------------------------------- ================================================================================ springlobby-0.169-3.fc17 (FEDORA-2013-6718) A lobby client for the spring RTS game engine -------------------------------------------------------------------------------- Update Information: - Fix package breakage due to %libdir pulling debug symbols. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Gilboa Davara <gilboad [AT] gmail [DOT] com> - 0.169-3 - Fix package breakage due to %libdir pulling debug symbols. -------------------------------------------------------------------------------- ================================================================================ tomoe-gtk-0.6.0-18.fc17 (FEDORA-2013-6758) Gtk library for tomoe for Japanese and Chinese handwritten input -------------------------------------------------------------------------------- Update Information: Fixed Bug 926646 - tomoe-gtk: Does not support aarch64 in f19 and rawhide -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Ding-Yi Chen - 0.6.0-18 - Fixed Bug 926646 - tomoe-gtk: Does not support aarch64 in f19 and rawhide * Fri Feb 15 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.6.0-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.6.0-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #926646 - tomoe-gtk: Does not support aarch64 in f19 and rawhide https://bugzilla.redhat.com/show_bug.cgi?id=926646 -------------------------------------------------------------------------------- ================================================================================ xen-4.1.5-1.fc17 (FEDORA-2013-6723) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information: Here is where you give an explanation of your update. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.1.5-1 - update to xen-4.1.5 includes fixes for passed through IRQs or PCI devices might allow denial of service attack [XSA-46, CVE-2013-1919] (#953568) SYSENTER in 32-bit PV guests on 64-bit xen can crash hypervisor [XSA-44, CVE-2013-1917] (#953569) grant releases can release more than intended potentially crashing xen [XSA-50, CVE-2013-1964] (#953632) - remove patches that are included in 4.1.5 - allow xendomains to work with xl saved images -------------------------------------------------------------------------------- References: [ 1 ] Bug #953632 - CVE-2013-1964 xen: grant table hypercall acquire/release imbalance https://bugzilla.redhat.com/show_bug.cgi?id=953632 [ 2 ] Bug #950686 - CVE-2013-1919 kernel: xen: Several access permission issues with IRQs for unprivileged guests https://bugzilla.redhat.com/show_bug.cgi?id=950686 [ 3 ] Bug #950668 - CVE-2013-1917 kernel: xen: Xen PV DoS vulnerability with SYSENTER https://bugzilla.redhat.com/show_bug.cgi?id=950668 -------------------------------------------------------------------------------- ================================================================================ xorg-x11-drv-synaptics-1.6.3-3.fc17 (FEDORA-2013-6750) Xorg X11 Synaptics touchpad input driver -------------------------------------------------------------------------------- Update Information: Fix stack corruption for trackpads supporting more than 10 touchpoints -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Peter Hutterer <peter.hutterer@xxxxxxxxxx> 1.6.3-3 - Fix stack smash on apple touchpads (#877464), this time with a patch * Fri Apr 26 2013 Peter Hutterer <peter.hutterer@xxxxxxxxxx> 1.6.3-2 - Fix stack smash on apple touchpads (#877464) -------------------------------------------------------------------------------- References: [ 1 ] Bug #877464 - BUG: triggered 'if (priv->num_active_touches > priv->num_slots)' https://bugzilla.redhat.com/show_bug.cgi?id=877464 -------------------------------------------------------------------------------- ================================================================================ zanata-api-2.2.0-6.fc17 (FEDORA-2013-6752) Zanata API modules -------------------------------------------------------------------------------- Update Information: Zanata API modules. Shared between client and server. -------------------------------------------------------------------------------- References: [ 1 ] Bug #924513 - Review Request: zanata-api - Zanata API modules https://bugzilla.redhat.com/show_bug.cgi?id=924513 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
