The following Fedora 17 Security updates need testing: Age URL 353 https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4.14-1.fc17 165 https://admin.fedoraproject.org/updates/FEDORA-2013-0455/fedora-business-cards-1-0.1.beta1.fc17 93 https://admin.fedoraproject.org/updates/FEDORA-2013-4234/stunnel-4.55-1.fc17 88 https://admin.fedoraproject.org/updates/FEDORA-2013-4501/libxslt-1.1.28-1.fc17 85 https://admin.fedoraproject.org/updates/FEDORA-2013-4581/libuser-0.57.6-2.fc17 18 https://admin.fedoraproject.org/updates/FEDORA-2013-10128/ssmtp-2.61-20.fc17 18 https://admin.fedoraproject.org/updates/FEDORA-2013-10121/subversion-1.7.10-1.fc17 10 https://admin.fedoraproject.org/updates/FEDORA-2013-10830/fail2ban-0.8.10-1.fc17 10 https://admin.fedoraproject.org/updates/FEDORA-2013-9123/kernel-3.9.5-101.fc17 7 https://admin.fedoraproject.org/updates/FEDORA-2013-10940/tomcat6-6.0.37-1.fc17 4 https://admin.fedoraproject.org/updates/FEDORA-2013-11234/haproxy-1.4.24-1.fc17 3 https://admin.fedoraproject.org/updates/FEDORA-2013-11397/python-bugzilla-0.9.0-1.fc17 3 https://admin.fedoraproject.org/updates/FEDORA-2013-11413/glpi-0.83.9-1.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-11568/curl-7.24.0-10.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-11579/xen-4.1.5-7.fc17 The following Fedora 17 Critical Path updates have yet to be approved: Age URL 305 https://admin.fedoraproject.org/updates/FEDORA-2012-12509/PackageKit-0.7.6-1.fc17 113 https://admin.fedoraproject.org/updates/FEDORA-2013-3304/libvpx-1.2.0-1.fc17 12 https://admin.fedoraproject.org/updates/FEDORA-2013-10602/dnsmasq-2.65-6.fc17 3 https://admin.fedoraproject.org/updates/FEDORA-2013-11411/deltarpm-3.6-0.12.20110223git.fc17 3 https://admin.fedoraproject.org/updates/FEDORA-2013-11392/openssh-5.9p1-30.fc17 3 https://admin.fedoraproject.org/updates/FEDORA-2013-11397/python-bugzilla-0.9.0-1.fc17 0 https://admin.fedoraproject.org/updates/FEDORA-2013-11568/curl-7.24.0-10.fc17 The following builds have been pushed to Fedora 17 updates-testing curl-7.24.0-10.fc17 drupal7-boxes-1.1-2.fc17 drupal7-file_entity-2.0-0.2.unstable7.fc17 drupal7-i18n_boxes-1.0-2.fc17 drupal7-i18nviews-3.0-0.2.dev.20120724.fc17 drupal7-path_breadcrumbs-3.0-0.2.beta2.fc17 drupal7-profiler-2.0-0.2.beta1.fc17 drupal7-taxonomy_access_fix-1.1-2.fc17 drupal7-translation_helpers-1.0-3.fc17 drupal7-translation_overview-2.0-0.2.beta1.fc17 drupal7-translation_table-1.0-0.2.beta1.fc17 drupal7-views_rss-2.0-0.1.rc3.fc17 fatrace-0.5-1.fc17 kicad-2013.06.11-1.rev4021.fc17 rekonq-2.3.1-1.fc17 trafficserver-3.2.4-3.fc17 xen-4.1.5-7.fc17 Details about builds: ================================================================================ curl-7.24.0-10.fc17 (FEDORA-2013-11568) A utility for getting files from remote servers (FTP, HTTP, and others) -------------------------------------------------------------------------------- Update Information: CVE-2013-2174 - fix heap-based buffer overflow in curl_easy_unescape() -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 22 2013 Kamil Dudka <kdudka@xxxxxxxxxx> 7.24.0-10 - fix heap-based buffer overflow in curl_easy_unescape() (CVE-2013-2174) -------------------------------------------------------------------------------- ================================================================================ drupal7-boxes-1.1-2.fc17 (FEDORA-2013-11563) Provides exports for custom blocks and spaces integration -------------------------------------------------------------------------------- Update Information: Boxes module is a re-implementation of the custom blocks (boxes) that the core block module provides. It is a proof of concept for what a re-worked block module could do. The module assumes that custom blocks are configuration, and not content. This means that it is a reasonable action to ask for all blocks at one time, this is in fact exactly what the core block module does. Boxes provides an inline interface for editing blocks, allowing you to change the contents of blocks without going to an admin page. Boxes provides exportables for its blocks via the (required) Chaos tools module. This allows modules to provide blocks in code that can be overwritten in the UI. This package provides the following Drupal module: * boxes -------------------------------------------------------------------------------- ================================================================================ drupal7-file_entity-2.0-0.2.unstable7.fc17 (FEDORA-2013-11556) File entity (fieldable files) -------------------------------------------------------------------------------- Update Information: File entity provides interfaces for managing files. It also extends the core file entity, allowing files to be fieldable, grouped into types, viewed (using display modes) and formatted using field formatters. File entity integrates with a number of modules, exposing files to Views, Entity API, Token and more. This package provides the following Drupal module: * file_entity -------------------------------------------------------------------------------- ================================================================================ drupal7-i18n_boxes-1.0-2.fc17 (FEDORA-2013-11565) Provides the ability to localize Boxes blocks -------------------------------------------------------------------------------- Update Information: This module enables block titles and block content to be exported to code (via boxes) and then be translated (via i18n_string). This package provides the following Drupal module: * i18n_boxes -------------------------------------------------------------------------------- ================================================================================ drupal7-i18nviews-3.0-0.2.dev.20120724.fc17 (FEDORA-2013-11559) Translate views using Internationalization -------------------------------------------------------------------------------- Update Information: Translate views using Internationalization. This package provides the following Drupal module: * i18nviews -------------------------------------------------------------------------------- ================================================================================ drupal7-path_breadcrumbs-3.0-0.2.beta2.fc17 (FEDORA-2013-11577) Allows creation of custom breadcrumbs for any page using contexts -------------------------------------------------------------------------------- Update Information: Path breadcrumbs module helps you to create breadcrumbs for any page with any selection rules and load any entity from the URL. Features * Breadcrumbs navigation may be added to any kind of page: static (example: node/1) or dynamic (example: node/NID). * You can load contexts from URL and use it like tokens for breadcrumb path or title. * You can use selection rules for every breadcrumbs navigation. * Supports ALL tokens from Entity tokens module (part of Entity module). * You can import/export breadcrumbs (supports single operations, Features and Ctools bulk export). * Breadcrumbs can be cloned to save you time while building navigation. * Module provides rich snippets support for breadcrumbs (RDFa and Microdata). * Module provides first/last/odd/even classes to every breadcrumb link. * You can change breadcrumbs delimiter. * Breadcrumbs could be hidden if they contain only one element. * You can disable breadcrumbs and enable them later. * All breadcrumb titles are translatable. * Usable interface. This package provides the following Drupal modules: * path_breadcrumbs * path_breadcrumbs_ui * path_breadcrumbs_i18n (Requires manual install of the i18n module) -------------------------------------------------------------------------------- ================================================================================ drupal7-profiler-2.0-0.2.beta1.fc17 (FEDORA-2013-11582) Allows an install profile to be defined as a Drupal .info file -------------------------------------------------------------------------------- Update Information: Profiler provides a new way to write install profiles. Gone are the days where you needed to know all the quirks of Drupal's APIs in order to write a solid install profile. Profiler allows you to quickly and easily create new install profiles, as well as have 'Sub' Install Profiles, where one Install Profile inherits from and extends another Install Profile. This package provides the following Drupal module: * profiler -------------------------------------------------------------------------------- ================================================================================ drupal7-taxonomy_access_fix-1.1-2.fc17 (FEDORA-2013-11553) Fixes the crooked access checks for Taxonomy pages -------------------------------------------------------------------------------- Update Information: This module: * adds 1 permission per vocabulary: "add terms in X" * changes the way vocabulary specific permissions are handled * changes the Taxonomy admin pages' access checks * alters the vocabularies overview table to show only what you have access to edit or delete The module does what native Taxonomy lacks: more specific Taxonomy permissions (and checking them correctly). Note: In order to access the admin/structure/taxonomy page, you must first set permissions for the desired vocabularies. Note: A module can't add permissions to another module, so the extra "add terms in X" permissions are located under "Taxonomy access fix" and not under "Taxonomy". This package provides the following Drupal module: * taxonomy_access_fix -------------------------------------------------------------------------------- ================================================================================ drupal7-translation_helpers-1.0-3.fc17 (FEDORA-2013-11543) Provides methods for other modules to use with translated content -------------------------------------------------------------------------------- Update Information: Translation helpers enables other modules to respond to changes in the "source translation" of a set of translated content. This functionality is useful for modules that track data by the "source translation" (node.tnid value). The module also provides other methods for modules to use with translated content. This package provides the following Drupal module: * translation_helpers -------------------------------------------------------------------------------- ================================================================================ drupal7-translation_overview-2.0-0.2.beta1.fc17 (FEDORA-2013-11573) Provides an overview of the translation status of site's content -------------------------------------------------------------------------------- Update Information: The Translation Overview page provides a table listing the site's nodes and showing what's been translated into each language. It also lets you assign priorities for translating nodes into the various languages. For translations of taxonomy terms and menu items check out the Translation table (http://drupal.org/project/translation_table) module. This package provides the following Drupal module: * translation_overview -------------------------------------------------------------------------------- ================================================================================ drupal7-translation_table-1.0-0.2.beta1.fc17 (FEDORA-2013-11561) UI for quick translation of dynamic strings -------------------------------------------------------------------------------- Update Information: UI for quick translation of taxonomies and menus. The i18n module allows for translation of taxonomy terms and menu items, but the process is tedious - you need to look up strings you want to translate, there is no overview of what's already translated etc. This module presents your taxonomy terms or menu items in a table, and each language has a corresponding column. Just fill out the translations and click Save. Requires the i18n module, and either taxonomy or menu string translation. * menu item titles * vocabulary names and taxonomy terms * CCK field names and descriptions * content type names and descriptions * quick tab titles This package provides the following Drupal module: * translation_table -------------------------------------------------------------------------------- ================================================================================ drupal7-views_rss-2.0-0.1.rc3.fc17 (FEDORA-2013-11570) Provides a views plugin that allows fields in RSS feeds -------------------------------------------------------------------------------- Update Information: This module allows users to take control of their feeds by providing a fields-based views style plugin for RSS. This package provides the following Drupal modules: * views_rss * views_rss_core * views_rss_dc -------------------------------------------------------------------------------- ================================================================================ fatrace-0.5-1.fc17 (FEDORA-2013-11584) Reports file access events from all running processes -------------------------------------------------------------------------------- Update Information: Initial version for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #977023 - Review Request: fatrace - Reports file access events from all running processes https://bugzilla.redhat.com/show_bug.cgi?id=977023 -------------------------------------------------------------------------------- ================================================================================ kicad-2013.06.11-1.rev4021.fc17 (FEDORA-2013-11586) Electronic schematic diagrams and printed circuit board artwork -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 22 2013 Alain Portal <alain.portal[AT]univ-montp2[DOT]fr> 2013.06.11-1.rev4021 - New upstream release - Added symbols and modules (with 3d view) from Walter Lain -------------------------------------------------------------------------------- References: [ 1 ] Bug #970244 - Time for a package refresh? https://bugzilla.redhat.com/show_bug.cgi?id=970244 -------------------------------------------------------------------------------- ================================================================================ rekonq-2.3.1-1.fc17 (FEDORA-2013-11580) KDE browser based on QtWebkit -------------------------------------------------------------------------------- Update Information: Rekonq 2.3.1 release -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 23 2013 Jan Grulich <jgrulich@xxxxxxxxxx> 2.3.1-1 - 2.3.1 * Tue Jun 4 2013 Jan Grulich <jgrulich@xxxxxxxxxx> 2.3.0-2 - #970690 - nunito font in private directory -------------------------------------------------------------------------------- ================================================================================ trafficserver-3.2.4-3.fc17 (FEDORA-2013-11560) Fast, scalable and extensible HTTP/1.1 compliant caching proxy server -------------------------------------------------------------------------------- Update Information: Harden build with PIE flags. - New upstream version - Remove trafficserver-gcc47.patch since it's fixed upstream, TS-1116. - Join trafficserver-condrestart.patch into trafficserver-init_scripts.patch, and clean out not needed junk. -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 3 2013 Jan-Frode Myklebust <janfrode@xxxxxxxxx> - 3.2.4-3 - Harden build with PIE flags, ref bz#955127. * Sat Jan 19 2013 Jan-Frode Myklebust <janfrode@xxxxxxxxx> - 3.2.4-1 - Update to 3.2.4 release candiate * Fri Jan 4 2013 Jan-Frode Myklebust <janfrode@xxxxxxxxx> - 3.2.3-1 - Update to v3.2.3. Remove patches no longer needed. * Fri Aug 24 2012 Václav Pavlín <vpavlin@xxxxxxxxxx> - 3.2.0-6 - Scriptlets replaced with new systemd macros (#851462) * Thu Aug 16 2012 Jan-Frode Myklebust <janfrode@xxxxxxxxx> - 3.2.0-5 - Add patch for TS-1392, to fix problem with SNI fallback. * Sun Jul 22 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Mon Jun 25 2012 Jan-Frode Myklebust <janfrode@xxxxxxxxx> - 3.2.0-2 - Remove duplicate man-pages. * Sat Jun 23 2012 Jan-Frode Myklebust <janfrode@xxxxxxxxx> - 3.2.0-1 - Update to v3.2.0 * Sun Jun 10 2012 Jan-Frode Myklebust <janfrode@xxxxxxxxx> - 3.0.5-1 - Remove trafficserver-gcc47.patch since it's fixed upstream, TS-1116. - Join trafficserver-condrestart.patch into trafficserver-init_scripts.patch, and clean out not needed junk. * Fri Apr 13 2012 Jan-Frode Myklebust <janfrode@xxxxxxxxx> - 3.0.4-5 - Add hardened build. -------------------------------------------------------------------------------- References: [ 1 ] Bug #955127 - trafficserver package should be built with PIE flags https://bugzilla.redhat.com/show_bug.cgi?id=955127 -------------------------------------------------------------------------------- ================================================================================ xen-4.1.5-7.fc17 (FEDORA-2013-11579) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information: xenstore permissions not set correctly by libxl [XSA-57] -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 21 2013 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.1.5-7 - - xenstore permissions not set correctly by libxl [XSA-57] (#976779) -------------------------------------------------------------------------------- References: [ 1 ] Bug #971503 - xen: libxl allows guest write access to sensitive console related xenstore keys https://bugzilla.redhat.com/show_bug.cgi?id=971503 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test