The following Fedora 17 Security updates need testing:
Age URL
11
https://admin.fedoraproject.org/updates/FEDORA-2012-20620/inkscape-0.48.4...
11
https://admin.fedoraproject.org/updates/FEDORA-2012-20610/freeciv-2.3.3-1...
21
https://admin.fedoraproject.org/updates/FEDORA-2012-20001/kde-filesystem-...
98
https://admin.fedoraproject.org/updates/FEDORA-2012-14650/tor-0.2.2.39-17...
25
https://admin.fedoraproject.org/updates/FEDORA-2012-19606/cups-1.5.4-16.fc17
4
https://admin.fedoraproject.org/updates/FEDORA-2012-20965/php-symfony2-Ht...
4
https://admin.fedoraproject.org/updates/FEDORA-2012-20967/ndjbdns-1.05.5-...
178
https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4....
4
https://admin.fedoraproject.org/updates/FEDORA-2012-20968/BackupPC-3.2.1-...
20
https://admin.fedoraproject.org/updates/FEDORA-2012-20092/libproxy-0.4.11...
13
https://admin.fedoraproject.org/updates/FEDORA-2012-20531/libvirt-0.9.11....
9
https://admin.fedoraproject.org/updates/FEDORA-2012-20766/drupal6-6.27-1....
0
https://admin.fedoraproject.org/updates/FEDORA-2012-21106/php-pear-CAS-1....
The following Fedora 17 Critical Path updates have yet to be approved:
Age URL
1
https://admin.fedoraproject.org/updates/FEDORA-2012-21067/jack-audio-conn...
2
https://admin.fedoraproject.org/updates/FEDORA-2012-21032/nspr-4.9.4-1.fc...
4
https://admin.fedoraproject.org/updates/FEDORA-2012-20960/linux-firmware-...
9
https://admin.fedoraproject.org/updates/FEDORA-2012-20790/iproute-3.3.0-5...
9
https://admin.fedoraproject.org/updates/FEDORA-2012-20782/caribou-0.4.2-2...
9
https://admin.fedoraproject.org/updates/FEDORA-2012-20767/abrt-2.0.20-1.f...
11
https://admin.fedoraproject.org/updates/FEDORA-2012-20697/system-config-u...
11
https://admin.fedoraproject.org/updates/FEDORA-2012-20609/policycoreutils...
11
https://admin.fedoraproject.org/updates/FEDORA-2012-20635/udisks2-1.94.0-...
13
https://admin.fedoraproject.org/updates/FEDORA-2012-20544/selinux-policy-...
15
https://admin.fedoraproject.org/updates/FEDORA-2012-20216/python-slip-0.2...
The following builds have been pushed to Fedora 17 updates-testing
aajohan-comfortaa-fonts-2.003-1.fc17
flashrom-0.9.6.1-2.svn1639.fc17
gpaste-2.9.1-1.fc17
jai-imageio-core-1.2-0.11.20100217cvs.fc17
liferea-1.8.11-1.fc17
mysql-connector-python-1.0.8-1.fc17
mysql-workbench-5.2.45-1.fc17
ovirt-engine-3.0.0.0001-15.fc17
php-pear-CAS-1.3.2-1.fc17
rekonq-2.0-1.fc17
rxvt-unicode-9.16-1.fc17
thunderbird-enigmail-1.5.0-1.fc17
wine-1.5.20-1.fc17
xnoise-0.2.14-1.fc17
Details about builds:
================================================================================
aajohan-comfortaa-fonts-2.003-1.fc17 (FEDORA-2012-21119)
Modern style true type font
--------------------------------------------------------------------------------
Update Information:
This update from upstream addresses a bug related to missing "¿" character in
the typeface.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 30 2012 Luya Tshimbalanga <luya(a)fedoraproject.org> - 2.003-1
- Upstream update (rhbz#786442)
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.002-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #786442 - Cannot type ¿ symbol correctly on Comfortaa font
https://bugzilla.redhat.com/show_bug.cgi?id=786442
--------------------------------------------------------------------------------
================================================================================
flashrom-0.9.6.1-2.svn1639.fc17 (FEDORA-2012-21108)
Simple program for reading/writing BIOS chips content
--------------------------------------------------------------------------------
Update Information:
- Updated to the latest svn ver. 1639 (post-release snapshot for 0.9.6.1)
- Support for Atmel's AT25F series of SPI flash chips
- Support for Intel S33 series flash chips
- Add a "device" parameter for Dediprog
- (Untested) board enable for Asus DSAN-DX
- Support for Winbond W39F010/W39L010/W39L020
- Support for Atmel AT26DF041
- Support for Numonyx N25Q016 and N25Q032
- Support for SST's 25WF series of SPI flash chips
- Support for GigaDevice GD25LQ32
- Board enable for MSI K8N Neo Platinum
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 30 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 0.9.6.1-2.svn1639
- Updated to the latest svn ver. 1639 (post-release snapshot for 0.9.6.1)
- Support for Atmel's AT25F series of SPI flash chips
- Support for Intel S33 series flash chips
- Add a "device" parameter for Dediprog
- (Untested) board enable for Asus DSAN-DX
- Support for Winbond W39F010/W39L010/W39L020
- Support for Atmel AT26DF041
- Support for Numonyx N25Q016 and N25Q032
- Support for SST's 25WF series of SPI flash chips
- Support for GigaDevice GD25LQ32
- Board enable for MSI K8N Neo Platinum
--------------------------------------------------------------------------------
================================================================================
gpaste-2.9.1-1.fc17 (FEDORA-2012-21110)
Clipboard management system
--------------------------------------------------------------------------------
Update Information:
NEW in 2.9.1 (01/12/2012)
=============
- Fix memory leak when handling images
- Fix duplicated images in history
- Fix "changed" signal in GPasteSettings
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 30 2012 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 2.9.1-1
- Update to 2.9.1
- Drop patch gpaste-2.9-gir.patch, fixed upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #882855 - gpaste-2.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=882855
--------------------------------------------------------------------------------
================================================================================
jai-imageio-core-1.2-0.11.20100217cvs.fc17 (FEDORA-2012-21112)
Core Java Advanced Imaging Image I/O Tools API
--------------------------------------------------------------------------------
Update Information:
* Fix "License files not installed with javadoc package"
* Fix "Javadoc package requires main package"
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 18 2012 Michal Srb <msrb(a)redhat.com> - 1.2-0.11.20100217cvs
- Install license in javadoc package (Resolves: #888420)
- Removed dependency on jai-imageio-core from javadoc package (Resolves: #888423)
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2-0.10.20100217cvs
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #888423 - jai-imageio-core: Javadoc package requires main package
https://bugzilla.redhat.com/show_bug.cgi?id=888423
[ 2 ] Bug #888420 - jai-imageio-core: License files not installed with javadoc package
https://bugzilla.redhat.com/show_bug.cgi?id=888420
--------------------------------------------------------------------------------
================================================================================
liferea-1.8.11-1.fc17 (FEDORA-2012-21124)
An RSS/RDF feed reader
--------------------------------------------------------------------------------
Update Information:
This is a new bugfix release. It fixes a problem with the browser preferences and a Google
Reader notification issue. It removed
feedvalidator.org support because of a malware
alert. Finally it provides an Hebrew and German translation update.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 29 2012 Emmanuel Seyman <emmanuel(a)seyman.fr> - 1:1.8.11-1
- New bugfix upstream release - 1.8.11
--------------------------------------------------------------------------------
================================================================================
mysql-connector-python-1.0.8-1.fc17 (FEDORA-2012-21117)
MySQL Connector for Python 2
--------------------------------------------------------------------------------
Update Information:
Upstream Changelog: 1.0.8 (2012-12-17)
--------------------------------------
* Fixed MySQLConnection.ping() so it only reconnects when the reconnect argument is set to
True. (BUG#15915243)
* Fixed storing multiple results after calling stored procedures which are using
arguments. (BUG#15916486)
* Fixed support for connecting to MySQL using IPv6 addresses. (BUG#15876886)
* Fixed handling MySQL errors when doing handshake. (BUG#15836979)
* Fixed support for connecting to MySQL using IPv6 addresses. (BUG#15876886,
BUG#15927825)
* Fixed reading the header of MySQL packets. Previously, we were reading the MySQL packet
headers as 4 (or 7) bytes long buffers from the socket. When we did have the correct
length, we would immediately raise an exception. We now keep reading data from the socket
until we got the full header or bail out on errors. (BUG#14829471)
* Fixed the error message when the TCP/IP port number is not a valid integer. Strings are
first converted to integer and raise an error with a proper error when this fails.
(BUG#13808727)
* Fixed authenticating for Python v2 using usernames and/or passwords which contain
Unicode characters using Python v2. (BUG#14843456)
* Fixed reporting of socket errors. (BUG#14802017)
* Fixed executemany() to support the pyformat parameter style. (BUG#14754894) The regular
expression parsing the INSERT statement did not work when pyformat markers where used,
that is, '%(c1)s' for example. This is now fixed so both ANSI C printf and Python
extended format codes can be used by MySQLCursor.executemany().
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 29 2012 Remi Collet <remi(a)fedoraproject.org> - 1.0.8-1
- version 1.0.8 GA
--------------------------------------------------------------------------------
================================================================================
mysql-workbench-5.2.45-1.fc17 (FEDORA-2012-21111)
A MySQL visual database modeling, administration and querying tool
--------------------------------------------------------------------------------
Update Information:
See upstream Release notes, Changes in MySQL Workbench 5.2.45 (2012-12-27):
*
http://dev.mysql.com/doc/relnotes/workbench/en/wb-news-5-2-45.html
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 29 2012 Remi Collet <remi(a)fedoraproject.org> 5.2.45-1
- update to 5.2.45 Community (OSS) Edition (GPL)
http://dev.mysql.com/doc/relnotes/workbench/en/wb-news-5-2-45.html
--------------------------------------------------------------------------------
================================================================================
ovirt-engine-3.0.0.0001-15.fc17 (FEDORA-2012-21120)
Management server for Open Virtualization
--------------------------------------------------------------------------------
Update Information:
Fix location of logrotate script
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 29 2012 Juan Hernandez <juan.hernandez(a)redhat.com> - 3.0.0.0001-15
- Fix location of logrotate script (rhbz#890691)
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.0.0.0001-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #890691 - /etc/cron.daily/ovirt-cron calls a shell script that does not exist
( /usr/share/ovirt/scripts/ovirtlogrot.sh ) which causes cron to generate errors
https://bugzilla.redhat.com/show_bug.cgi?id=890691
--------------------------------------------------------------------------------
================================================================================
php-pear-CAS-1.3.2-1.fc17 (FEDORA-2012-21106)
Central Authentication Service client library in php
--------------------------------------------------------------------------------
Update Information:
Changes in version 1.3.2
Security Fixes:
* CVE-2012-5583 Missing CN validation of CAS server certificate [#58] (Joachim Fritschi)
Bug Fixes:
* Fix broken character encoding in Greek and French [#40] (Joachim Fritschi)
* Minor error corrections in a few example files [] (Joachim Fritschi)
* Remove erroneous break statement [#44] (jbittel)
* Use X-Forwarded-Port [#45] (Andrew Kirkpatrick)
* Stop autoloader using set_include_path [#51/#52] (drysdaleb)
* Fix undefined property in the rebroadcast code [#47] (Joachim Fritschi)
Improvement:
* Enable getCookies on a proxied sevices [#56] (Adam Franco)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 29 2012 Remi Collet <remi(a)fedoraproject.org> - 1.3.2-1
- update to Version 1.3.2, security fix for
CVE-2012-5583 Missing CN validation of CAS server certificate
- add requires for all needed php extensions
--------------------------------------------------------------------------------
================================================================================
rekonq-2.0-1.fc17 (FEDORA-2012-21113)
KDE browser based on QtWebkit
--------------------------------------------------------------------------------
Update Information:
Rekonq 2.0 release.
See
http://adjamblog.wordpress.com/2012/12/29/rekonq-2-0-first-stable/
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 29 2012 Jan Grulich <jgrulich(a)redhat.com> 2.0-1
- 2.0
--------------------------------------------------------------------------------
================================================================================
rxvt-unicode-9.16-1.fc17 (FEDORA-2012-21121)
Unicode version of rxvt
--------------------------------------------------------------------------------
Update Information:
* INCOMPATIBLE CHANGE: renamed urlLauncher resource to url-launcher.
* fix processing of DEC private mode save sequences.
* perl extensions now have their own manpages, installed as urxvt-NAME(1), e.g.
urxvt-background(1) - see urxvt-extensions(1) for a list.
* fix disabling of cursor blink with the option-popup menu.
* the font height is not augmented anymore when lineSpace is non zero.
* fix "new pagemap" vs. "delete pagemap" mismatch ([] vs. non-[]).
* fix height mismatch between active and inactive cursor when lineSpace is non zero.
* completely redone background pixmap support - users can now specify arbitrary
expressions (And programs) that calculate new terminal backgrounds. see the
urxvt-background manpage for details.
* xrender is now required for background pixmap support.
* perl extensions can now provide commandline switches and resources which show up in
-help etc.
* iso14755 51 mode window now displays row and column.
* implement a -visual switch and move that and -depth to frills, also warn when we
can't get the requested visual.
* new env variable: RXVT_PERL_LIB.
* allocate all screen memory in one go and let the virtual memory subsystem sort it out.
this simplifies code, improves access locality, saves a bit of ram and makes things a bit
faster, too.
* remove support for libafterimage.
* selectively mark some methods as cache-hot/cache cold, which might speed up execution
but definitely decreases codesize.
* Fix regression that prevented the scrollbar trough color from being applied.
* Fix the scrollbar size for rxvt style.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 30 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 9.16-1
- version upgrade
- cleanup manpages
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
9.15-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Mon Jun 11 2012 Petr Pisar <ppisar(a)redhat.com> - 9.15-2
- Perl 5.16 rebuild
--------------------------------------------------------------------------------
================================================================================
thunderbird-enigmail-1.5.0-1.fc17 (FEDORA-2012-21123)
Authentication and encryption extension for Mozilla Thunderbird
--------------------------------------------------------------------------------
Update Information:
Official upstream announcement:
I am very happy to announce the availability of Enigmail v1.5. It is precisely a year ago
that I announced that I would work on replacing the binary components that depend on
Thunderbird with JavaScript code. Today is the moment when the last part of this project
is completed and Enigmail is released with (almost) no binary code anymore.
Notable Changes:
* PGP/MIME encryption & signing have been rewritten from scratch in JavaScript.
* Core parts of inline-PGP (creation, decryption and verification) have been rewritten in
JavaScript.
* Due to the new code structure, this version of Enigmail is compatible with all future
versions of Thunderbird and SeaMonkey. There is a small C++ component remaining for
Thunderbird 17 and 18 and SeaMonkey 2.14 and 2.15. As of Thunderbird 19 and SeaMonkey 2.16
there won't be any Mozilla version-specific code in Enigmail.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 30 2012 Remi Collet <remi(a)fedoraproject.org> 1.5.0-1
- Enigmail 1.5.0 for Thunderbird 17
--------------------------------------------------------------------------------
================================================================================
wine-1.5.20-1.fc17 (FEDORA-2012-21109)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
1.5.20
* A bunch of dlls with ugly names for API sets support.
* More ATL functions implemented.
* Still more C++ runtime functions.
* Several text rendering fixes.
* PostScript driver improvements.
* Various bug fixes.
1.5.19
* Performance improvements in the DIB engine.
* More fleshed out XML-lite implementation.
* Some more C++ runtime functions.
* Various bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 28 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.5.20-1
- version upgrade
- upgraded winepulse
* Sun Dec 9 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.5.19-1
- version upgrade
- upgraded winepulse
--------------------------------------------------------------------------------
================================================================================
xnoise-0.2.14-1.fc17 (FEDORA-2012-21118)
Tracklist-centric Media Player
--------------------------------------------------------------------------------
Update Information:
* Add support for Android and some other player devices
* Use themed symbolic icons
* Add optional GENRE-ARTIST-ALBUM sort mode in music browser
* Add some sort modes for album-art-view
* Allow editing of genres
* Equalizer is now activatable from the equalizer window, only
* Show album art in album tag editor
* Rework settings dialog, again
* Localization updates
* Code cleanups
* Many bug fixes
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 28 2012 Michel Salim <salimma(a)fedoraproject.org> - 0.2.14-1
- Update to 0.2.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #871780 - xnoise-0.2.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=871780
--------------------------------------------------------------------------------