The following Fedora 17 Security updates need testing:
Age URL
280
https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4....
92
https://admin.fedoraproject.org/updates/FEDORA-2013-0455/fedora-business-...
62
https://admin.fedoraproject.org/updates/FEDORA-2013-2143/rubygem-rdoc-3.1...
58
https://admin.fedoraproject.org/updates/FEDORA-2013-2315/rubygem-rack-1.4...
20
https://admin.fedoraproject.org/updates/FEDORA-2013-4234/stunnel-4.55-1.fc17
20
https://admin.fedoraproject.org/updates/FEDORA-2013-4174/glibc-2.15-59.fc17
18
https://admin.fedoraproject.org/updates/FEDORA-2013-4296/tomcat6-6.0.36-1...
15
https://admin.fedoraproject.org/updates/FEDORA-2013-4501/libxslt-1.1.28-1...
13
https://admin.fedoraproject.org/updates/FEDORA-2013-4522/libarchive-3.0.4...
12
https://admin.fedoraproject.org/updates/FEDORA-2013-4581/libuser-0.57.6-2...
10
https://admin.fedoraproject.org/updates/FEDORA-2013-4619/polarssl-1.1.6-1...
6
https://admin.fedoraproject.org/updates/FEDORA-2013-4827/haproxy-1.4.23-1...
6
https://admin.fedoraproject.org/updates/FEDORA-2013-4834/mod_security-2.7...
6
https://admin.fedoraproject.org/updates/FEDORA-2013-4818/clamav-0.97.7-1....
6
https://admin.fedoraproject.org/updates/FEDORA-2013-4983/seamonkey-2.17-1...
6
https://admin.fedoraproject.org/updates/FEDORA-2013-4927/xen-4.1.4-7.fc17
6
https://admin.fedoraproject.org/updates/FEDORA-2013-4980/drupal7-ctools-1...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-5051/gsi-openssh-5.9p...
1
https://admin.fedoraproject.org/updates/FEDORA-2013-5286/krb5-1.10.2-10.fc17
0
https://admin.fedoraproject.org/updates/FEDORA-2013-5440/php-geshi-1.0.8....
0
https://admin.fedoraproject.org/updates/FEDORA-2013-5349/389-ds-base-1.2....
The following Fedora 17 Critical Path updates have yet to be approved:
Age URL
232
https://admin.fedoraproject.org/updates/FEDORA-2012-12509/PackageKit-0.7....
61
https://admin.fedoraproject.org/updates/FEDORA-2013-2163/policycoreutils-...
40
https://admin.fedoraproject.org/updates/FEDORA-2013-3304/libvpx-1.2.0-1.fc17
20
https://admin.fedoraproject.org/updates/FEDORA-2013-4140/audit-2.2.3-2.fc17
18
https://admin.fedoraproject.org/updates/FEDORA-2013-4308/libnotify-0.7.5-...
13
https://admin.fedoraproject.org/updates/FEDORA-2013-4522/libarchive-3.0.4...
12
https://admin.fedoraproject.org/updates/FEDORA-2013-4581/libuser-0.57.6-2...
8
https://admin.fedoraproject.org/updates/FEDORA-2013-4730/koji-1.8.0-1.fc17
6
https://admin.fedoraproject.org/updates/FEDORA-2013-5001/selinux-policy-3...
6
https://admin.fedoraproject.org/updates/FEDORA-2013-4958/cryptopp-5.6.2-2...
6
https://admin.fedoraproject.org/updates/FEDORA-2013-4977/livecd-tools-17....
1
https://admin.fedoraproject.org/updates/FEDORA-2013-5287/libogg-1.3.0-5.fc17
1
https://admin.fedoraproject.org/updates/FEDORA-2013-5288/python-pycurl-7....
1
https://admin.fedoraproject.org/updates/FEDORA-2013-5101/analitza-4.10.2-...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-5476/perl-5.14.4-225....
0
https://admin.fedoraproject.org/updates/FEDORA-2013-5353/abrt-2.1.3-2.fc1...
The following builds have been pushed to Fedora 17 updates-testing
calligra-2.6.3-1.fc17
calligra-l10n-2.6.3-1.fc17
clipsmm-0.3.3-1.fc17
gogui-1.4.7-1.fc17
ovirt-engine-cli-3.2.0.11-1.fc17
ovirt-engine-sdk-3.2.0.10-1.fc17
pcmanfm-qt-0.1.0-3.fc17
perl-5.14.4-225.fc17
perl-WWW-OrangeHRM-Client-0.5.0-1.fc17
php-5.4.14-1.fc17
php-geshi-1.0.8.11-3.fc17
python-path-3.0.1-2.fc17
python-txzmq-0.6.2-1.fc17
qt5-qtbase-5.0.2-2.fc17
rubygem-net-http-digest_auth-1.3-1.fc17
rubygem-webrobots-0.1.1-1.fc17
scsi-target-utils-1.0.24-8.fc17
sugar-pukllanapac-11-3.fc17
xemacs-packages-base-20130408-1.fc17
xemacs-packages-extra-20130408-1.fc17
Details about builds:
================================================================================
calligra-2.6.3-1.fc17 (FEDORA-2013-5442)
An integrated office suite
--------------------------------------------------------------------------------
Update Information:
Calligra 2.6.3 bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2013 Rex Dieter <rdieter(a)fedoraproject.org> 2.6.3-1
- 2.6.3 (#951003)
* Tue Mar 26 2013 Rex Dieter <rdieter(a)fedoraproject.org> 2.6.2-4
- explicitly omit bundled Arev fonts
--------------------------------------------------------------------------------
================================================================================
calligra-l10n-2.6.3-1.fc17 (FEDORA-2013-5442)
Language files for calligra
--------------------------------------------------------------------------------
Update Information:
Calligra 2.6.3 bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2013 Rex Dieter <rdieter(a)fedoraproject.org> 2.6.3-1
- 2.6.3
--------------------------------------------------------------------------------
================================================================================
clipsmm-0.3.3-1.fc17 (FEDORA-2013-5475)
C++ interface to the CLIPS expert system C library
--------------------------------------------------------------------------------
Update Information:
Upgrade to 0.3.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2013 Tim Niemueller <tim(a)niemueller.de> - 0.3.3-1
- Upgrade to 0.3.3
--------------------------------------------------------------------------------
================================================================================
gogui-1.4.7-1.fc17 (FEDORA-2013-5454)
Graphical user interface to programs that play the board game Go
--------------------------------------------------------------------------------
Update Information:
Merge 1.4.7 changes
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 8 2013 Christophe Burgun <jouty(a)fedoraproject.org> 1.4.7-1
- Update gogui version
- Remove patch0 which is now fixed
- Fix path for gogui.png
- Fix path for gogui.desktop
--------------------------------------------------------------------------------
================================================================================
ovirt-engine-cli-3.2.0.11-1.fc17 (FEDORA-2013-5448)
oVirt Engine Command Line Interface
--------------------------------------------------------------------------------
Update Information:
Update to upstream 3.2.0.11
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 11 2013 Juan Hernandez <juan.hernandez(a)redhat.com> - 3.2.0.11-1
- Update to upstream 3.2.0.11
* Wed Feb 20 2013 Juan Hernandez <juan.hernandez(a)redhat.com> - 3.2.0.10-4
- Update to upstream 3.2.0.10
- Revert upstream change to use pexpect-u instead of pexpect, as the
former is not available in el6 distributions
* Wed Jan 30 2013 Juan Hernandez <juan.hernandez(a)redhat.com> - 3.2.0.9-1
- Update to upstream 3.2.0.9
- Fix for #905359
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #905359 - ovirt-cli quits with DistributionNotFound exception on fedora18
https://bugzilla.redhat.com/show_bug.cgi?id=905359
--------------------------------------------------------------------------------
================================================================================
ovirt-engine-sdk-3.2.0.10-1.fc17 (FEDORA-2013-5462)
oVirt Engine Software Development Kit
--------------------------------------------------------------------------------
Update Information:
Update to upstream 3.2.0.10
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 11 2013 Juan Hernandez <juan.hernandez(a)redhat.com> - 3.2.0.10-1
- Update to upstream 3.2.0.10
* Wed Feb 20 2013 Juan Hernandez <juan.hernandez(a)redhat.com> - 3.2.0.9-1
- Update to upstream 3.2.0.9
* Wed Jan 30 2013 Juan Hernandez <juan.hernandez(a)redhat.com> - 3.2.0.8-1
- Update to upstream 3.2.0.8
- Fix for #905359
--------------------------------------------------------------------------------
================================================================================
pcmanfm-qt-0.1.0-3.fc17 (FEDORA-2013-5447)
Qt port of the LXDE file manager PCManFM
--------------------------------------------------------------------------------
Update Information:
This is a new package.
--------------------------------------------------------------------------------
================================================================================
perl-5.14.4-225.fc17 (FEDORA-2013-5476)
Practical Extraction and Report Language
--------------------------------------------------------------------------------
Update Information:
Correct dependencies (perl, perl-HTTP-Tiny, perl-Digest-MD5). Fix dead lock in PerlIO
after forking from a thread.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2013 Petr Pisar <ppisar(a)redhat.com> - 4:5.14.4-225
- Correct dependencies of perl-HTTP-Tiny
- Correct perl-Digest-MD5 dependencies
- Filter provides from *.pl files (bug #924938)
- Fix dead lock in PerlIO after fork from thread (bug #947444)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #924938 - wrong provides in latest build
https://bugzilla.redhat.com/show_bug.cgi?id=924938
[ 2 ] Bug #947444 - PerlIO dead-locks with threaded fork
https://bugzilla.redhat.com/show_bug.cgi?id=947444
--------------------------------------------------------------------------------
================================================================================
perl-WWW-OrangeHRM-Client-0.5.0-1.fc17 (FEDORA-2013-5466)
Client for OrangeHRM
--------------------------------------------------------------------------------
Update Information:
It's possible to edit specific field only with --amend option.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2013 Petr Pisar <ppisar(a)redhat.com> - 0.5.0-1
- 0.5.0 bump
--------------------------------------------------------------------------------
================================================================================
php-5.4.14-1.fc17 (FEDORA-2013-5438)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
From upstream NEWS: 11 Apr 2013, PHP 5.4.14
Core:
* Fixed bug #64529 (Ran out of opcode space). (Dmitry)
* Fixed bug #64515 (Memoryleak when using the same variablename two times in function
declaration). (Laruence)
* Fixed bug #64432 (more empty delimiter warning in strX methods). (Laruence)
* Fixed bug #64417 (ArrayAccess::&offsetGet() in a trait causes fatal error).
(Dmitry)
* Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
(Anatol)
* Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10 or 5.4.11). (Dmitry,
Laruence)
* Fixed bug #63976 (Parent class incorrectly using child constant in class property).
(Dmitry)
* Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not handle exceptions properly).
(Jeff Welch)
* Fixed bug #62343 (Show class_alias In get_declared_classes()) (Dmitry)
SNMP:
* Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly). (Boris
Lytochkin)
Zip:
* Bug #64452 (Zip crash intermittently). (Anatol)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2013 Remi Collet <rcollet(a)redhat.com> 5.4.14-1
- update to 5.4.11
- clean old deprecated options
--------------------------------------------------------------------------------
================================================================================
php-geshi-1.0.8.11-3.fc17 (FEDORA-2013-5440)
Generic syntax highlighter
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.8.11 :
- Fix for CVE-2012-3521 : Remote directory traversal and information disclosure (local
file inclusion) in the contrib module.
- Fix for CVE-2012-3522 : Non-persistent XSS in langwiz contrib script.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 10 2013 Xavier Bachelot <xavier(a)bachelot.org> 1.0.8.11-3
- Bump release for rebuild.
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.8.11-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Tue Aug 21 2012 Xavier Bachelot <xavier(a)bachelot.org> 1.0.8.11-1
- Update to 1.0.8.11.
- Fix remote directory traversal and information disclosure bug.
(CVE-2012-3521)(RHBZ#850425).
- Fix Requires (RHBZ#848699).
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.8.10-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850425 - CVE-2012-3521 php-geshi: Remote directory traversal and information
disclosure (local file inclusion) in the contrib module
https://bugzilla.redhat.com/show_bug.cgi?id=850425
[ 2 ] Bug #850495 - CVE-2012-3522 php-geshi: Non-persistent XSS in langwiz contrib
script
https://bugzilla.redhat.com/show_bug.cgi?id=850495
--------------------------------------------------------------------------------
================================================================================
python-path-3.0.1-2.fc17 (FEDORA-2013-5470)
A python module wrapper for os.path
--------------------------------------------------------------------------------
Update Information:
New packages to collection
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #950699 - Review Request: python-path - A python module wrapper for os.path
https://bugzilla.redhat.com/show_bug.cgi?id=950699
--------------------------------------------------------------------------------
================================================================================
python-txzmq-0.6.2-1.fc17 (FEDORA-2013-5445)
Twisted bindings for ZeroMQ
--------------------------------------------------------------------------------
Update Information:
Compat with multiple versions of pyzmq
Patches to support the latest pyzmq when it arrives.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2013 Ralph Bean <rbean(a)redhat.com> - 0.6.2-1
- Latest upstream including our patches.
- Removed patches 2 through 5 for pyzmq compat.
* Wed Mar 27 2013 Ralph Bean <rbean(a)redhat.com> - 0.6.1-5
- Added three patches to support old and new pyzmq.
- More explicit file ownership in %{python_sitelib}.
- Removed some trailing whitespace.
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.6.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #946893 - python-txzmq-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=946893
--------------------------------------------------------------------------------
================================================================================
qt5-qtbase-5.0.2-2.fc17 (FEDORA-2013-4068)
Qt5 - QtBase components
--------------------------------------------------------------------------------
Update Information:
Initial Qt5 QtBase component build for fedora. See also:
http://qt-project.org/qt5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #878188 - Review Request: qt5-qtbase - Qt5 - QtBase components
https://bugzilla.redhat.com/show_bug.cgi?id=878188
[ 2 ] Bug #929227 - CMake Config files assume wrong directory layout
https://bugzilla.redhat.com/show_bug.cgi?id=929227
--------------------------------------------------------------------------------
================================================================================
rubygem-net-http-digest_auth-1.3-1.fc17 (FEDORA-2013-5453)
Implementation of RFC 2617 - Digest Access Authentication
--------------------------------------------------------------------------------
Update Information:
New version 1.3 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.3-1
- 1.3
--------------------------------------------------------------------------------
================================================================================
rubygem-webrobots-0.1.1-1.fc17 (FEDORA-2013-5459)
Ruby library to help write robots.txt compliant web robots
--------------------------------------------------------------------------------
Update Information:
New version 0.1.1 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.1.1-1
- 0.1.1
* Fri Mar 8 2013 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.1.0-2
- F-19: rebuild for ruby 2.0.0
--------------------------------------------------------------------------------
================================================================================
scsi-target-utils-1.0.24-8.fc17 (FEDORA-2013-5441)
The SCSI target daemon and utility programs
--------------------------------------------------------------------------------
Update Information:
fix previous update
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 10 2013 Andy Grover <agrover(a)redhat.com> - 1.0.24-8
- Fix ExecStartPost line in tgtd.service to have full path
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #848942 - tgtd fails to start due to possible race condition
https://bugzilla.redhat.com/show_bug.cgi?id=848942
--------------------------------------------------------------------------------
================================================================================
sugar-pukllanapac-11-3.fc17 (FEDORA-2013-5444)
A sliding puzzle game
--------------------------------------------------------------------------------
Update Information:
Version 11 release for gtk3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2013 Kalpa Welivitigoda <callkalpa(a)gmail.com> - 11-3
- Release version 11 for gtk3
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
11-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
xemacs-packages-base-20130408-1.fc17 (FEDORA-2013-5469)
Base lisp packages for XEmacs
--------------------------------------------------------------------------------
Update Information:
This update contains a fix for a critical bug in CC Mode's electric key behaviors. In
addition, it contains minor updates and bug fixes for other packages, as follows:
- which-func.el, which prints the function at point in the modeline, has been added to
edit-utils
- ido.el, which interactively operates on files and buffers, has been added to
edit-utils
- arc-mode.el in os-utils now provides arc-mode in addition to archive-mode for Emacs
compatibility
- A bug in imenu-syntax-alist in the scheme package has been fixed
- TRAMP has been updated to version 2.2.7
- file-utils.el has been added to xemacs-base
- rx.el has been added to xemacs-base
- subr-more.el has been added to xemacs-base
- imenu.el, in xemacs-base, now allows REGEXP to be a search function
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 9 2013 Jerry James <loganjerry(a)gmail.com> - 20130408-1
- Update to latest package releases
- Add -texi patch to fix build with texinfo 5
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
20121228-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
xemacs-packages-extra-20130408-1.fc17 (FEDORA-2013-5469)
Collection of XEmacs lisp packages
--------------------------------------------------------------------------------
Update Information:
This update contains a fix for a critical bug in CC Mode's electric key behaviors. In
addition, it contains minor updates and bug fixes for other packages, as follows:
- which-func.el, which prints the function at point in the modeline, has been added to
edit-utils
- ido.el, which interactively operates on files and buffers, has been added to
edit-utils
- arc-mode.el in os-utils now provides arc-mode in addition to archive-mode for Emacs
compatibility
- A bug in imenu-syntax-alist in the scheme package has been fixed
- TRAMP has been updated to version 2.2.7
- file-utils.el has been added to xemacs-base
- rx.el has been added to xemacs-base
- subr-more.el has been added to xemacs-base
- imenu.el, in xemacs-base, now allows REGEXP to be a search function
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 9 2013 Jerry James <loganjerry(a)gmail.com> - 20130408-1
- Update to new package release
--------------------------------------------------------------------------------