The following Fedora 17 Security updates need testing:
Age URL
243
https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4....
85
https://admin.fedoraproject.org/updates/FEDORA-2012-20092/libproxy-0.4.11...
60
https://admin.fedoraproject.org/updates/FEDORA-2013-0210/vdsm-4.10.0-13.fc17
60
https://admin.fedoraproject.org/updates/FEDORA-2013-0231/ca-certificates-...
56
https://admin.fedoraproject.org/updates/FEDORA-2013-0455/fedora-business-...
42
https://admin.fedoraproject.org/updates/FEDORA-2013-1286/python-tw2-jquer...
33
https://admin.fedoraproject.org/updates/FEDORA-2013-1804/coreutils-8.15-1...
26
https://admin.fedoraproject.org/updates/FEDORA-2013-2143/rubygem-rdoc-3.1...
26
https://admin.fedoraproject.org/updates/FEDORA-2013-2023/tor-0.2.3.25-1700
22
https://admin.fedoraproject.org/updates/FEDORA-2013-2315/rubygem-rack-1.4...
13
https://admin.fedoraproject.org/updates/FEDORA-2013-2789/yum-3.4.3-31.fc17
13
https://admin.fedoraproject.org/updates/FEDORA-2013-2793/openssl-1.0.0k-1...
11
https://admin.fedoraproject.org/updates/FEDORA-2013-2874/Django-1.4.5-1.fc17
11
https://admin.fedoraproject.org/updates/FEDORA-2013-2845/bugzilla-4.0.10-...
10
https://admin.fedoraproject.org/updates/FEDORA-2013-2984/libtasn1-2.14-1....
7
https://admin.fedoraproject.org/updates/FEDORA-2013-3079/nss-3.14.3-1.fc1...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-3252/kernel-3.7.10-10...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-3259/crypto-utils-2.4...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-3270/sudo-1.8.6p7-1.fc17
2
https://admin.fedoraproject.org/updates/FEDORA-2013-3382/zfs-fuse-0.7.0-3...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-3437/euca2ools-2.1.3-...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-3116/krb5-1.10.2-9.fc17
0
https://admin.fedoraproject.org/updates/FEDORA-2013-3227/mediawiki-1.19.4...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-3438/mingw-gnutls-2.1...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-3439/telepathy-gabble...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-3443/perl-5.14.3-223....
0
https://admin.fedoraproject.org/updates/FEDORA-2013-3457/poppler-0.18.4-4...
The following Fedora 17 Critical Path updates have yet to be approved:
Age URL
196
https://admin.fedoraproject.org/updates/FEDORA-2012-12509/PackageKit-0.7....
26
https://admin.fedoraproject.org/updates/FEDORA-2013-2065/abrt-2.1.0-1.fc1...
25
https://admin.fedoraproject.org/updates/FEDORA-2013-2163/policycoreutils-...
13
https://admin.fedoraproject.org/updates/FEDORA-2013-2789/yum-3.4.3-31.fc17
13
https://admin.fedoraproject.org/updates/FEDORA-2013-2793/openssl-1.0.0k-1...
11
https://admin.fedoraproject.org/updates/FEDORA-2013-2858/orc-0.4.17-2.fc17
10
https://admin.fedoraproject.org/updates/FEDORA-2013-2984/libtasn1-2.14-1....
7
https://admin.fedoraproject.org/updates/FEDORA-2013-3119/python-pycurl-7....
7
https://admin.fedoraproject.org/updates/FEDORA-2013-3079/nss-3.14.3-1.fc1...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-3304/libvpx-1.2.0-1.fc17
4
https://admin.fedoraproject.org/updates/FEDORA-2013-3276/createrepo-0.9.9...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-3252/kernel-3.7.10-10...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-3270/sudo-1.8.6p7-1.fc17
3
https://admin.fedoraproject.org/updates/FEDORA-2013-3360/qt-4.8.4-14.fc17
0
https://admin.fedoraproject.org/updates/FEDORA-2013-3494/iproute-3.3.0-6....
0
https://admin.fedoraproject.org/updates/FEDORA-2013-3466/selinux-policy-3...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-3443/perl-5.14.3-223....
0
https://admin.fedoraproject.org/updates/FEDORA-2013-3435/python-bugzilla-...
The following builds have been pushed to Fedora 17 updates-testing
appmenu-qt-0.2.6-3.fc17
bmake-20130123-1.fc17
gnome-games-3.4.2-2.fc17
iproute-3.3.0-6.fc17
krb5-1.10.2-9.fc17
mingw-eigen3-3.1.2-1.fc17
miniupnpc-1.6-9.fc17
shinken-1.2.4-2.fc17
splix-2.0.1-0.13.20121128svn.fc17
wbox-5-5.fc17
zeroinstall-injector-2.0-1.fc17
Details about builds:
================================================================================
appmenu-qt-0.2.6-3.fc17 (FEDORA-2013-3486)
Global application menu to Qt
--------------------------------------------------------------------------------
Update Information:
This package allows Qt to export its menus over DBus
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #882508 - Review Request: appmenu-qt - Global application menu to Qt
https://bugzilla.redhat.com/show_bug.cgi?id=882508
--------------------------------------------------------------------------------
================================================================================
bmake-20130123-1.fc17 (FEDORA-2013-3481)
The NetBSD make(1) tool
--------------------------------------------------------------------------------
Update Information:
The NetBSD make(1) tool
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 6 2013 Luis Bazan <lbazan(a)fedoraproject.org> - 20130123-1
- New Upstream Version
--------------------------------------------------------------------------------
================================================================================
gnome-games-3.4.2-2.fc17 (FEDORA-2013-3482)
Games for the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
Fix glchess not working when playing against the computer
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 5 2013 Hans de Goede <hdegoede(a)redhat.com> - 1:3.4.2-2
- Fix glchess not working when playing against the computer (rhbz#917305)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #917305 - gnome-chess completely broken, computer cannot move
https://bugzilla.redhat.com/show_bug.cgi?id=917305
--------------------------------------------------------------------------------
================================================================================
iproute-3.3.0-6.fc17 (FEDORA-2013-3494)
Advanced IP routing and network device configuration tools
--------------------------------------------------------------------------------
Update Information:
Don't propagate mounts outside of ip.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 6 2013 Petr Šabata <contyk(a)redhat.com> - 3.3.0-6
- Don't propagate mounts outside of ip (#882047)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #882047 - "ip netns exec" destroys the /sys mounting and causes
systemd problem
https://bugzilla.redhat.com/show_bug.cgi?id=882047
--------------------------------------------------------------------------------
================================================================================
krb5-1.10.2-9.fc17 (FEDORA-2013-3116)
The Kerberos network authentication system
--------------------------------------------------------------------------------
Update Information:
This update incorporates the upstream fix for possible NULL-pointer dereferences which
could occur if a client sent a malformed PKINIT request to a KDC (CVE-2013-1415), or if a
client sent a draft9 PKINIT request to a KDC (CVE-2012-1016).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 5 2013 Nalin Dahyabhai <nalin(a)redhat.com> 1.10.2-9
- add patch to avoid dereferencing a NULL pointer in the KDC when handling a
draft9 PKINIT request (#917841, CVE-2012-1016)
* Thu Feb 28 2013 Nalin Dahyabhai <nalin(a)redhat.com> 1.10.2-8
- fix a memory leak when acquiring credentials using a keytab (RT#7586, #911110)
* Mon Feb 25 2013 Nalin Dahyabhai <nalin(a)redhat.com> 1.10.2-7
- incorporate upstream patch to fix a NULL pointer dereference when the client
supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #914756)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #914749 - CVE-2013-1415 krb5: PKINIT null pointer deref leads to DoS
(pkinit_check_kdc_pkid())
https://bugzilla.redhat.com/show_bug.cgi?id=914749
[ 2 ] Bug #917840 - CVE-2012-1016 krb5: PKINIT null pointer deref leads to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=917840
--------------------------------------------------------------------------------
================================================================================
mingw-eigen3-3.1.2-1.fc17 (FEDORA-2013-3487)
MinGW lightweight C++ template library for vector and matrix math
--------------------------------------------------------------------------------
Update Information:
MinGW lightweight C++ template library for vector and matrix math
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #851820 - Review Request: mingw-eigen3 - MinGW lightweight C++ template
library for vector and matrix math
https://bugzilla.redhat.com/show_bug.cgi?id=851820
--------------------------------------------------------------------------------
================================================================================
miniupnpc-1.6-9.fc17 (FEDORA-2013-3491)
Library and tool to control NAT in UPnP-enabled routers
--------------------------------------------------------------------------------
Update Information:
Added upnpc, a client side tool.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 5 2013 Domingo Becker <domingobecker(a)gmail.com> - 1.6-9
- Added upnpc, a client side tool, to the main package.
- Added USAGE file with instructions on how to use upnpc.
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.6-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.6-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
shinken-1.2.4-2.fc17 (FEDORA-2013-3502)
Python Monitoring tool
--------------------------------------------------------------------------------
Update Information:
update version 1.2.4.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 6 2013 David Hannequin <david.hannequin(a)gmail.com> - 1.2.4-2
- fix discovery rules.
* Sun Feb 24 2013 David Hannequin <david.hannequin(a)gmail.com> - 1.2.4-1
- update from upstream.
* Wed Jan 30 2013 David Hannequin <david.hannequin(a)gmail.com> - 1.2.3-1
- update from upstream.
--------------------------------------------------------------------------------
================================================================================
splix-2.0.1-0.13.20121128svn.fc17 (FEDORA-2013-3508)
Driver for QPDL/SPL2 printers (Samsung and several Xerox printers)
--------------------------------------------------------------------------------
Update Information:
This update fixes one bug.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 6 2013 Jiri Popelka <jpopelka(a)redhat.com> - 2.0.1-0.13.20121128svn
- Add Device IDs for Samsung ML-2250/2510, Xerox Phaser 3117/3120/3130
* Tue Mar 5 2013 Tim Waugh <twaugh(a)redhat.com> - 2.0.1-0.12.20121128svn
- Build requires cups for postscriptdriver tags (bug #917333).
* Wed Nov 28 2012 Jiri Popelka <jpopelka(a)redhat.com> - 2.0.1-0.11.20121128svn
- latest svn snapshot
* Wed Oct 17 2012 Jiri Popelka <jpopelka(a)redhat.com> - 2.0.1-0.10.20120419svn
- Add Device ID for Xerox Phaser 3124 (#867392).
* Tue Sep 25 2012 Jiri Popelka <jpopelka(a)redhat.com> - 2.0.1-0.9.20120419svn
- Add Device ID for Samsung ML-2525 (#859669).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #917333 - I cannot print from application (Test page is o.k.)
https://bugzilla.redhat.com/show_bug.cgi?id=917333
--------------------------------------------------------------------------------
================================================================================
wbox-5-5.fc17 (FEDORA-2013-3510)
HTTP testing tool and configuration-less HTTP server
--------------------------------------------------------------------------------
Update Information:
* Wed Feb 27 2013 Fabian Affolter <mail(a)fabian-affolter.ch> - 5-5
- Whitespaces removed
- Comment added
* Thu Jan 10 2012 Fabian Affolter <mail(a)fabian-affolter.ch> - 5-4
- Minor updates
* Tue Dec 27 2011 Athmane Madjoudj <athmane(a)fedoraproject.org> - 5-3
- Use version macro
- Remove rm -rf buildroot
* Mon Dec 19 2011 Athmane Madjoudj <athmane(a)fedoraproject.org> - 5-2
- Add manpage from Debian project
- Some minor fixes
* Mon Dec 19 2011 Athmane Madjoudj <athmane(a)fedoraproject.org> - 5-1
- Initial spec
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #894176 - Review Request: wbox - HTTP testing tool and configuration-less HTTP
server
https://bugzilla.redhat.com/show_bug.cgi?id=894176
--------------------------------------------------------------------------------
================================================================================
zeroinstall-injector-2.0-1.fc17 (FEDORA-2013-3488)
The Zero Install Injector (0launch)
--------------------------------------------------------------------------------
Update Information:
0install 2.0 brings many enhancements to the XML metadata syntax used to describe packages
and their dependencies, allowing a more precise specification of their requirements.
Support for using distribution-provided packages as dependencies was extended and now
covers Arch Linux, Cygwin, Darwin, Debian, Fink, FreeBSD Ports, Gentoo, MacPorts, Mint,
openSUSE, Red Hat, Slackware and Windows. The 0install software now supports apps, an
easier way to manage 0install applications, improved diagnostics when no compatible
versions can be selected, improved usability, and better support for use on headless
servers.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 6 2013 Michel Salim <salimma(a)fedoraproject.org> - 2.0-1
- Update to 2.0
* Mon Feb 25 2013 Michel Salim <salimma(a)fedoraproject.org> - 1.16-1
- Update to 1.16
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #895936 - zeroinstall-injector-1.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=895936
[ 2 ] Bug #911270 - 0install should be updated to version 1.14 at least because of
PackageKit API incompatibility
https://bugzilla.redhat.com/show_bug.cgi?id=911270
--------------------------------------------------------------------------------