The following Fedora 17 Security updates need testing: Age URL 299 https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4.14-1.fc17 111 https://admin.fedoraproject.org/updates/FEDORA-2013-0455/fedora-business-cards-1-0.1.beta1.fc17 81 https://admin.fedoraproject.org/updates/FEDORA-2013-2143/rubygem-rdoc-3.12-5.fc17 77 https://admin.fedoraproject.org/updates/FEDORA-2013-2315/rubygem-rack-1.4.0-4.fc17 40 https://admin.fedoraproject.org/updates/FEDORA-2013-4174/glibc-2.15-59.fc17 39 https://admin.fedoraproject.org/updates/FEDORA-2013-4234/stunnel-4.55-1.fc17 38 https://admin.fedoraproject.org/updates/FEDORA-2013-4296/tomcat6-6.0.36-1.fc17 34 https://admin.fedoraproject.org/updates/FEDORA-2013-4501/libxslt-1.1.28-1.fc17 31 https://admin.fedoraproject.org/updates/FEDORA-2013-4581/libuser-0.57.6-2.fc17 19 https://admin.fedoraproject.org/updates/FEDORA-2013-5440/php-geshi-1.0.8.11-3.fc17 19 https://admin.fedoraproject.org/updates/FEDORA-2013-5349/389-ds-base-1.2.11.21-1.fc17 18 https://admin.fedoraproject.org/updates/FEDORA-2013-5546/plexus-archiver-2.3-1.fc17 13 https://admin.fedoraproject.org/updates/FEDORA-2013-5967/xorg-x11-server-1.12.4-7.fc17 6 https://admin.fedoraproject.org/updates/FEDORA-2013-6557/telepathy-idle-0.1.15-1.fc17 4 https://admin.fedoraproject.org/updates/FEDORA-2013-6723/xen-4.1.5-1.fc17 4 https://admin.fedoraproject.org/updates/FEDORA-2013-6727/python-pip-1.3.1-1.fc17 4 https://admin.fedoraproject.org/updates/FEDORA-2013-6720/curl-7.24.0-8.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2013-7000/phpMyAdmin-3.5.8.1-1.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2013-7014/php-sabredav-Sabre_DAV-1.6.5-4.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2013-6999/kernel-3.8.10-100.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-7144/xmp-3.4.0-11.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-7128/tinc-1.0.21-1.fc17 The following Fedora 17 Critical Path updates have yet to be approved: Age URL 251 https://admin.fedoraproject.org/updates/FEDORA-2012-12509/PackageKit-0.7.6-1.fc17 80 https://admin.fedoraproject.org/updates/FEDORA-2013-2163/policycoreutils-2.1.13-27.3.fc17 59 https://admin.fedoraproject.org/updates/FEDORA-2013-3304/libvpx-1.2.0-1.fc17 40 https://admin.fedoraproject.org/updates/FEDORA-2013-4140/audit-2.2.3-2.fc17 8 https://admin.fedoraproject.org/updates/FEDORA-2013-6278/nss-3.14.3-2.fc17 5 https://admin.fedoraproject.org/updates/FEDORA-2013-6636/kde-settings-4.8-25.fc17 4 https://admin.fedoraproject.org/updates/FEDORA-2013-6720/curl-7.24.0-8.fc17 4 https://admin.fedoraproject.org/updates/FEDORA-2013-6750/xorg-x11-drv-synaptics-1.6.3-3.fc17 1 https://admin.fedoraproject.org/updates/FEDORA-2013-6999/kernel-3.8.10-100.fc17 The following builds have been pushed to Fedora 17 updates-testing e16-1.0.13-1.fc17 fedup-0.7.3-4.fc17 libdxfrw-0.5.7-3.fc17 mlton-20100608-17.fc17 python-mccabe-0.2.1-2.fc17 tinc-1.0.21-1.fc17 viking-1.4.1-1.fc17 xmp-3.4.0-11.fc17 zile-2.4.9-1.fc17 Details about builds: ================================================================================ e16-1.0.13-1.fc17 (FEDORA-2013-7133) The Enlightenment window manager, DR16 -------------------------------------------------------------------------------- Update Information: Update to latest upstream release e16 1.0.13. Switch sound sub system to pulseaudio and sndfile. -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 30 2013 Terje Rosten <terje.rosten@xxxxxxx> - 1.0.13-1 - 1.0.13 * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ fedup-0.7.3-4.fc17 (FEDORA-2013-7124) The Fedora Upgrade tool -------------------------------------------------------------------------------- Update Information: * Fix upgrade hang with multiple encrypted partitions * Fix upgrade hang with encrypted `/home` * Fix upgrade hang for systems using `/etc/mdadm.conf` * Fix upgrade hang for systems that haven't been updated recently * Fix hang when starting upgrade to F19 Alpha * Write debuglog to `/var/log/fedup.log` by default * Support proxy settings from `/etc/yum.conf` * Other bugfixes -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 30 2013 Will Woods <wwoods@xxxxxxxxxx> 0.7.3-4 - Dependency fix: can't Obsolete preupgrade until F19 :/ * Thu Apr 25 2013 Will Woods <wwoods@xxxxxxxxxx> 0.7.3-3 - Fix hang upgrading from F18 to F19 Alpha (#954371) * Thu Apr 4 2013 Will Woods <wwoods@xxxxxxxxxx> 0.7.3-2 - Add Obsoletes: preupgrade. SO LONG, PREUPGRADE. * Fri Mar 15 2013 Will Woods <wwoods@xxxxxxxxxx> 0.7.3-1 - Fix hang starting upgrade with encrypted /home (#896023) * Fri Mar 15 2013 Will Woods <wwoods@xxxxxxxxxx> 0.7.3-0 - Write debuglog by default (/var/log/fedup.log) - Add support for applying updates to upgrade.img - Use proxy settings from yum.conf (#892994) - Fix "NameError: global name 'po' is not defined" (#895576) - Clearer error on already-upgraded systems (#895967) - Fix upgrade hang with multiple encrypted partitions (#896010) - Fix "OSError: [Errno 2]..." when `selinuxenabled` is not in PATH (#896721) - Fix tracebacks on bad arguments to --iso (#896440, #895665) - Fix traceback if grubby is missing (#896194) - Require newer systemd to fix hang on not-updated systems (#910326) - Fix hang starting upgrade on systems with /dev/md* (#895805) - Better error messages if you're out of disk space (#896144) -------------------------------------------------------------------------------- References: [ 1 ] Bug #896023 - The upgrade doesn't continue after reboot, possibly because systemd doesn't see system-update.target https://bugzilla.redhat.com/show_bug.cgi?id=896023 [ 2 ] Bug #892994 - Running fedup from behind a proxy when upgrading from F17 to F18 fails https://bugzilla.redhat.com/show_bug.cgi?id=892994 [ 3 ] Bug #895576 - [abrt] fedup-0.7.2-1.fc17: callback.py:142:procConflictPo:NameError: global name 'po' is not defined https://bugzilla.redhat.com/show_bug.cgi?id=895576 [ 4 ] Bug #895967 - [abrt] fedup-0.7.2-1.fc17: download.py:210:download_packages:TypeError: 'NoneType' object is not iterable https://bugzilla.redhat.com/show_bug.cgi?id=895967 [ 5 ] Bug #896010 - Upgrade doesn't start for systems with more than one encrypted partitions https://bugzilla.redhat.com/show_bug.cgi?id=896010 [ 6 ] Bug #894242 - upgrade process hangs with encrypted /home (no graphical unlock dialog) https://bugzilla.redhat.com/show_bug.cgi?id=894242 [ 7 ] Bug #896721 - Fedup-cli fails with OSError: [Errno 2] No such file or directory https://bugzilla.redhat.com/show_bug.cgi?id=896721 [ 8 ] Bug #896440 - [abrt] fedup-0.7.2-1.fc17: subprocess.py:511:check_call:CalledProcessError: Command '['mount', '-oloop', '/home/marcelo', '/tmp/fedup.mnt.hb0ZtH']' returned non-zero exit status 1 https://bugzilla.redhat.com/show_bug.cgi?id=896440 [ 9 ] Bug #895665 - [abrt] fedup-0.7.2-1.fc17: subprocess.py:511:check_call:CalledProcessError: Command '['mount', '-oloop', 'Fedora-18-i686-Live-Desktop.iso', '/var/tmp/fedup.mnt.gvtftS']' returned non-zero exit status 1 https://bugzilla.redhat.com/show_bug.cgi?id=895665 [ 10 ] Bug #896194 - fedup Exception Traceback File /usr/bin/fedup-cli line 330 in <module> main(args) https://bugzilla.redhat.com/show_bug.cgi?id=896194 [ 11 ] Bug #910326 - Upgrade doesn't start for systems with multiple encrypted partitions and an old systemd package https://bugzilla.redhat.com/show_bug.cgi?id=910326 [ 12 ] Bug #895805 - Software RAID root /dev/md1 assembled as /dev/md127 during fedup-upgrade boot, root mount fails https://bugzilla.redhat.com/show_bug.cgi?id=895805 [ 13 ] Bug #896144 - fedup fails silently when not enough space on / is available https://bugzilla.redhat.com/show_bug.cgi?id=896144 [ 14 ] Bug #954371 - F19 Alpha fedup hangs after booting 'System Upgrade' https://bugzilla.redhat.com/show_bug.cgi?id=954371 -------------------------------------------------------------------------------- ================================================================================ libdxfrw-0.5.7-3.fc17 (FEDORA-2013-7141) Library to read/write DXF files -------------------------------------------------------------------------------- Update Information: Add fixes from LibreCAD 2.0.0beta5. New package: libdxfrw - Library to read/write DXF files New package: libdxfrw - Library to read/write DXF files -------------------------------------------------------------------------------- References: [ 1 ] Bug #950172 - Review Request:libdxfrw - Library to read/write DXF files https://bugzilla.redhat.com/show_bug.cgi?id=950172 -------------------------------------------------------------------------------- ================================================================================ mlton-20100608-17.fc17 (FEDORA-2013-7137) Optimizing compiler for Standard ML -------------------------------------------------------------------------------- Update Information: - bootstrap for arm, armhfp, ppc, ppc64 - remove htmldoc requirement, it is buggy and not terribly useful Fix issue building with newer gmp Fix issue building with newer gmp -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 27 2013 Adam Goode <adam@xxxxxxxxxxxxx> - 20100608-17 - MLton is too big for polyml, so bootstrap arm, armhfp, ppc, ppc64 with mlton - Don't use htmldoc anymore, it often crashes - Remove max-heap workaround * Mon Apr 22 2013 Adam Goode <adam@xxxxxxxxxxxxx> - 20100608-16 - Scrap all the arch-specific bootstrapping, use polyml to do it * Sun Apr 21 2013 Adam Goode <adam@xxxxxxxxxxxxx> - 20100608-15 - Try a more generalized bootstrap approach * Sat Apr 20 2013 Adam Goode <adam@xxxxxxxxxxxxx> - 20100608-14 - Really fix builds by more intelligently setting max-heap * Sat Apr 20 2013 Adam Goode <adam@xxxxxxxxxxxxx> - 20100608-13 - Fix ppc64 bootstrap * Sat Apr 20 2013 Adam Goode <adam@xxxxxxxxxxxxx> - 20100608-12 - Bootstrap ppc64 * Fri Apr 19 2013 Adam Goode <adam@xxxxxxxxxxxxx> - 20100608-11 - Bootstrap ppc * Thu Apr 18 2013 Adam Goode <adam@xxxxxxxxxxxxx> - 20100608-10 - Constrain max-heap to a fixed value during building, otherwise 70% of physical ram is used - Fix detection of ppc64 * Mon Apr 15 2013 Adam Goode <adam@xxxxxxxxxxxxx> - 20100608-9 - Fix for #914188 FTBFS - Update source link - Remove ExclusiveArch, per packaging recommendations * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 20100608-8.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Fri Jul 20 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 20100608-7.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #928076 - FTBFS: mlton fails to build on ppc https://bugzilla.redhat.com/show_bug.cgi?id=928076 [ 2 ] Bug #914188 - mlton: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=914188 -------------------------------------------------------------------------------- ================================================================================ python-mccabe-0.2.1-2.fc17 (FEDORA-2013-7138) McCabe complexity checker -------------------------------------------------------------------------------- Update Information: The initial import of the package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #952141 - Review Request: python-mccabe - McCabe complexity checker https://bugzilla.redhat.com/show_bug.cgi?id=952141 -------------------------------------------------------------------------------- ================================================================================ tinc-1.0.21-1.fc17 (FEDORA-2013-7128) A virtual private network daemon -------------------------------------------------------------------------------- Update Information: * Wed Apr 24 2013 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.0.21-1 - Updated to new upstream version 1.0.21 -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.0.21-1 - Updated to new upstream version 1.0.21 * Fri Feb 15 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.19-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.19-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #955705 - CVE-2013-1428 tinc: Stack-based buffer overflow when processing overly long TCP packets https://bugzilla.redhat.com/show_bug.cgi?id=955705 -------------------------------------------------------------------------------- ================================================================================ viking-1.4.1-1.fc17 (FEDORA-2013-7136) GPS data editor and analyzer -------------------------------------------------------------------------------- Update Information: * Mon Apr 29 2013 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.4.1-1 - Updated to new upstream version 1.4.1 -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 29 2013 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.4.1-1 - Updated to new upstream version 1.4.1 -------------------------------------------------------------------------------- ================================================================================ xmp-3.4.0-11.fc17 (FEDORA-2013-7144) A multi-format module player -------------------------------------------------------------------------------- Update Information: This update fixes heap-based buffer overflow when processing certain MASI files. -------------------------------------------------------------------------------- ChangeLog: * Sun Apr 28 2013 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> - 3.4.0-11 - backport fix for CVE-2013-1890 (rhbz #954658) -------------------------------------------------------------------------------- References: [ 1 ] Bug #954658 - CVE-2013-1980 xmp: Heap-based buffer overflow by processing certain MASI files https://bugzilla.redhat.com/show_bug.cgi?id=954658 -------------------------------------------------------------------------------- ================================================================================ zile-2.4.9-1.fc17 (FEDORA-2013-7121) Zile Is Lossy Emacs -------------------------------------------------------------------------------- Update Information: Updated to latest upstream, which has many bug fixes. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 29 2013 Eric Smith <eric@xxxxxxxxxxxx> - 2.4.9-1 - Updated to 2.4.9 * Mon Apr 29 2013 Eric Smith <eric@xxxxxxxxxxxx> - 2.3.21-9 - Added --install option to autoreconf. * Mon Apr 29 2013 Eric Smith <eric@xxxxxxxxxxxx> - 2.3.21-8 - Added missing BuildRequires for autoconf, automake. * Mon Apr 29 2013 Eric Smith <eric@xxxxxxxxxxxx> - 2.3.21-7 - Add autoreconf in prep section to support aarch64 (Bug #926862). * Fri Feb 15 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.3.21-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Sat Aug 4 2012 Parag Nemade <paragn AT fedoraproject DOT org> - 2.31.21-5 - Fix gets call for glibc-2.16 changes * Sun Jul 22 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.3.21-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test