The following Fedora 17 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-2012-5785/python3-3.2.3-5....
https://admin.fedoraproject.org/updates/FEDORA-2012-6334/sectool-0.9.5-7....
https://admin.fedoraproject.org/updates/FEDORA-2012-7070/postgresql-pgpoo...
https://admin.fedoraproject.org/updates/FEDORA-2012-6494/wordpress-3.3.2-...
https://admin.fedoraproject.org/updates/FEDORA-2012-7010/vdr-1.7.27-2.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-7259/drupal6-og-2.3-1...
https://admin.fedoraproject.org/updates/FEDORA-2012-7317/samba4-4.0.0-47a...
https://admin.fedoraproject.org/updates/FEDORA-2012-7362/kernel-3.3.4-4.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-7369/python-django-ho...
https://admin.fedoraproject.org/updates/FEDORA-2012-6666/bind-dyndb-ldap-...
https://admin.fedoraproject.org/updates/FEDORA-2012-6674/puppet-2.7.13-1....
https://admin.fedoraproject.org/updates/FEDORA-2012-6869/php-5.4.1-1.fc17...
https://admin.fedoraproject.org/updates/FEDORA-2012-6963/polarssl-1.1.3-1...
https://admin.fedoraproject.org/updates/FEDORA-2012-7086/seamonkey-2.9.1-...
The following Fedora 17 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/FEDORA-2012-7364/libzeitgeist-0.3...
https://admin.fedoraproject.org/updates/FEDORA-2012-7353/anaconda-17.25-1...
https://admin.fedoraproject.org/updates/FEDORA-2012-7362/kernel-3.3.4-4.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-7307/gsettings-deskto...
https://admin.fedoraproject.org/updates/FEDORA-2012-7308/accountsservice-...
https://admin.fedoraproject.org/updates/FEDORA-2012-7315/dracut-018-31.gi...
https://admin.fedoraproject.org/updates/FEDORA-2012-7265/livecd-tools-17....
https://admin.fedoraproject.org/updates/FEDORA-2012-7251/lorax-17.17-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-7262/biosdevname-0.4....
https://admin.fedoraproject.org/updates/FEDORA-2012-7254/udisks2-1.94.0-2...
https://admin.fedoraproject.org/updates/FEDORA-2012-7203/libwacom-0.5-2.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-7078/gcc-4.7.0-4.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-7105/mdadm-3.2.3-9.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-6961/db4-4.8.30-10.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-6978/gphoto2-2.4.14-1...
https://admin.fedoraproject.org/updates/FEDORA-2012-6930/perl-Compress-Ra...
https://admin.fedoraproject.org/updates/FEDORA-2012-6975/usbmuxd-1.0.8-2....
https://admin.fedoraproject.org/updates/FEDORA-2012-7313/selinux-policy-3...
https://admin.fedoraproject.org/updates/FEDORA-2012-6823/xorg-x11-drv-ves...
https://admin.fedoraproject.org/updates/FEDORA-2012-6660/libvdpau-0.4.1-7...
https://admin.fedoraproject.org/updates/FEDORA-2012-6693/mactel-boot-0.9-...
https://admin.fedoraproject.org/updates/FEDORA-2012-6698/perl-Net-SSLeay-...
https://admin.fedoraproject.org/updates/FEDORA-2012-6598/openldap-2.4.31-...
https://admin.fedoraproject.org/updates/FEDORA-2012-6475/gdisk-0.8.4-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-6476/telepathy-glib-0...
https://admin.fedoraproject.org/updates/FEDORA-2012-6453/pcre-8.21-5.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-6075/colord-0.1.19-1....
https://admin.fedoraproject.org/updates/FEDORA-2012-6111/sane-backends-1....
https://admin.fedoraproject.org/updates/FEDORA-2012-6165/perl-IO-Socket-S...
https://admin.fedoraproject.org/updates/FEDORA-2012-5976/pungi-2.11-2.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-5710/libpciaccess-0.1...
https://admin.fedoraproject.org/updates/FEDORA-2012-5335/xmlrpc-c-1.29.3-...
https://admin.fedoraproject.org/updates/FEDORA-2012-4131/webkitgtk3-1.7.9...
https://admin.fedoraproject.org/updates/FEDORA-2012-3251/bluez-4.99-1.fc17
https://admin.fedoraproject.org/updates/FEDORA-2012-1726/gpgme-1.3.0-8.fc17
The following builds have been pushed to Fedora 17 updates-testing
389-ds-base-1.2.11.3-1.fc17
gupnp-0.18.3-1.fc17
hoard-3.8-4.fc17
jglobus-2.0.4-3.fc17
jibx-1.2.4-1.fc17
libyuv-0-0.7.20120505svn256.fc17
libzeitgeist-0.3.18-1.fc17
newlisp-10.4.2-2.fc17
python-django-horizon-2012.1-3.fc17
sems-1.4.3-1.fc17
sugar-0.96.1-2.fc17
sugar-abacus-35-1.fc17
sugar-artwork-0.96.2-1.fc17
sugar-clock-8-1.fc17
sugar-finance-7-1.fc17
sugar-help-14-1.fc17
sugar-paint-43-1.fc17
sugar-toolkit-0.96.1-1.fc17
sugar-toolkit-gtk3-0.96.1-1.fc17
sugar-write-79-1.fc17
synfig-0.63.05-1.fc17
synfigstudio-0.63.05-1.fc17
thermostat-0.2-0.20120503hg2140a7c81a4b.fc17
tor-arm-1.4.5.0-1.fc17
Details about builds:
================================================================================
389-ds-base-1.2.11.3-1.fc17 (FEDORA-2012-7374)
389 Directory Server (base)
--------------------------------------------------------------------------------
Update Information:
fixed bug - managed entry doesn't delete linked entry
disable use of betxn plugins by default - ldclt fix
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.11.3-1
- Ticket #358 - managed entry doesn't delete linked entry
* Fri May 4 2012 Rich Megginson <rmeggins(a)redhat.com> - 1.2.11.2-1
- Ticket #351 - use betxn plugins by default
- revert - make no plugins betxn by default - too great a risk
- for deadlocks until we can test this better
- Ticket #348 - crash in ldap_initialize with multiple threads
- fixes PR_Init problem in ldclt
--------------------------------------------------------------------------------
================================================================================
gupnp-0.18.3-1.fc17 (FEDORA-2012-7371)
A framework for creating UPnP devices & control points
--------------------------------------------------------------------------------
Update Information:
0.18.3
======
Changes since 0.18.2:
- Add a Connman (
http://connman.net) context manager.
- Add a work-around for one of the lock-ups in bug 667494.
- Don't leak private symbols.
- Don't leak DBus proxies in network-manager context-manager.
- Fix some g-i annotations.
Changes in dependencies:
If the Connman context-manager is enabled (--with-context-manager=connman), the required
glib version is 2.28.
Bugs fixed:
-
https://bugzilla.gnome.org/show_bug.cgi?id=673933
-
https://bugzilla.gnome.org/show_bug.cgi?id=674410
-
https://bugzilla.gnome.org/show_bug.cgi?id=672998
Update to drop bogus dependency on libgdbus-devel.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 0.18.3-1
- 0.18.3 release
-
http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.18/gupnp-0.18.3.news
* Thu Apr 26 2012 Zeeshan Ali <zeenix(a)redhat.com> - 0.18.2-2
- Remove bogus dependency on libgdbus-devel.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #818899 - gupnp-0.18.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=818899
--------------------------------------------------------------------------------
================================================================================
hoard-3.8-4.fc17 (FEDORA-2012-7378)
A fast, scalable, and memory-efficient allocator
--------------------------------------------------------------------------------
Update Information:
Hoard is a scalable memory allocator
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #753517 - Review Request: hoard - scalable memory allocator
https://bugzilla.redhat.com/show_bug.cgi?id=753517
--------------------------------------------------------------------------------
================================================================================
jglobus-2.0.4-3.fc17 (FEDORA-2012-7373)
Globus Java client libraries
--------------------------------------------------------------------------------
Update Information:
Adapt to changes in automatic maven rpm dependency generation
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 4 2012 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.0.4-3
- Adapt to changes in automatic maven rpm dependency generation
--------------------------------------------------------------------------------
================================================================================
jibx-1.2.4-1.fc17 (FEDORA-2012-7368)
Framework for binding XML data to Java objects
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Johannes Lips <johannes.lips(a)googlemail.com> - 1.2.4-1
- update to recent upstream version
- removed buildarch noarch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #818900 - jibx-1.2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=818900
--------------------------------------------------------------------------------
================================================================================
libyuv-0-0.7.20120505svn256.fc17 (FEDORA-2012-7370)
YUV conversion and scaling functionality library
--------------------------------------------------------------------------------
Update Information:
* Next svn snapshot - ver. 256
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 0-0.7.20120505svn256
- Next svn snapshot - ver. 256
--------------------------------------------------------------------------------
================================================================================
libzeitgeist-0.3.18-1.fc17 (FEDORA-2012-7364)
Client library for applications that want to interact with the Zeitgeist daemon
--------------------------------------------------------------------------------
Update Information:
Updated to upstream stable version
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Renich Bon Ciric <renich(a)woralelandia.com> - 0.3.18-1
- Updated to version 0.3.18.
- Disabled a log test since it's failing because no libzeitgeist daemon is present at
build time.
- Added missing Result Type constant (*CurrentUri and *EventOrigin).
- Now async functions fail instead of lingering indefinitely if Zeitgeist isn't
available.
* Mon Mar 19 2012 Renich Bon Ciric <renich(a)woralelandia.com> - 0.3.14-1
- Updated to version 0.3.14
- Update to shared-desktop-ontologies-0.8
- Return relevancies of events when searching index
- Update the ZeitgeistEvent and ZeitgeistSubject with event origin and subject current
uri
- Zeitgeist isn't autostarted after it disappears
- Removed log-fix patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #818890 - Please update libzeitgeist to 0.3.18
https://bugzilla.redhat.com/show_bug.cgi?id=818890
--------------------------------------------------------------------------------
================================================================================
newlisp-10.4.2-2.fc17 (FEDORA-2012-7365)
Lisp-like general purpose scripting
--------------------------------------------------------------------------------
Update Information:
Updated version.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 4 2012 Nathan Owe <ndowens at fedoraproject.org> 10.4.2-2
- Removed a file in %files that doesn't exist anymore
* Fri May 4 2012 Nathan Owe <ndowens at fedoraproject.org> 10.4.2-1
- Fixes missing RPM_OPT_FLAGS (bug #815529)
- Updated version (bug #818145)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #818145 - newlisp-10.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=818145
--------------------------------------------------------------------------------
================================================================================
python-django-horizon-2012.1-3.fc17 (FEDORA-2012-7369)
Django application for talking to Openstack
--------------------------------------------------------------------------------
Update Information:
Fixes session hijack vulnerability
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 3 2012 Pádraig Brady <P(a)draigBrady.com> - 2012.1-3
- CVE-2012-2144 session reuse vulnerability
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #818680 - CVE-2012-2144 python-django-horizon: Horizon session fixation and
reuse [fedora-17]
https://bugzilla.redhat.com/show_bug.cgi?id=818680
[ 2 ] Bug #818681 - CVE-2012-2144 python-django-horizon: Horizon session fixation and
reuse [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=818681
--------------------------------------------------------------------------------
================================================================================
sems-1.4.3-1.fc17 (FEDORA-2012-7367)
SIP Express Media Server, an extensible SIP media server
--------------------------------------------------------------------------------
Update Information:
* Ver. 1.4.3 (bugfix release in 1.4.x branch)
- Fixed systemd installation
- Enabled IPv6 (see rhbz #814229)
* Enabled iLBC (
https://bugzilla.redhat.com/728302#c26 )
* Enabled iLBC (
https://bugzilla.redhat.com/728302#c26 )
* Enabled iLBC (
https://bugzilla.redhat.com/728302#c26 )
* Enabled iLBC (
https://bugzilla.redhat.com/728302#c26 )
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 1.4.3-1
- Ver. 1.4.3 (bugfix release in 1.4.x branch)
- Dropped upstreamed patches
* Fri Apr 27 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 1.4.2-6
- Fixed systemd installation
- Enabled IPv6 (see rhbz #814229)
* Thu Apr 19 2012 Peter Lemenkov <lemenkov(a)gmail.com> - 1.4.2-5
- Enabled iLBC (
https://bugzilla.redhat.com/728302#c26 )
* Tue Feb 28 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4.2-4
- Rebuilt for c++ ABI breakage
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #814229 - Enable IPv6 support in SEMS
https://bugzilla.redhat.com/show_bug.cgi?id=814229
--------------------------------------------------------------------------------
================================================================================
sugar-0.96.1-2.fc17 (FEDORA-2012-7377)
Constructionist learning platform
--------------------------------------------------------------------------------
Update Information:
New sugar stable release
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 0.96.1-2
- Add patch to create gnome keyring if it doesn't exist
--------------------------------------------------------------------------------
================================================================================
sugar-abacus-35-1.fc17 (FEDORA-2012-7366)
A simple abacus activity for Sugar
--------------------------------------------------------------------------------
Update Information:
Version 35 Release
Update to v34
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Kalpa Welivitigoda <callkalpa(a)gmail.com> - 35-1
- Release 35
* Thu May 3 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 34-1
- Release 34
--------------------------------------------------------------------------------
================================================================================
sugar-artwork-0.96.2-1.fc17 (FEDORA-2012-7377)
Artwork for Sugar look-and-feel
--------------------------------------------------------------------------------
Update Information:
New sugar stable release
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 0.96.2-1
- 0.96.2 stable release
--------------------------------------------------------------------------------
================================================================================
sugar-clock-8-1.fc17 (FEDORA-2012-7377)
Clock activity for Sugar
--------------------------------------------------------------------------------
Update Information:
New sugar stable release
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 8-1
- Release 8
--------------------------------------------------------------------------------
================================================================================
sugar-finance-7-1.fc17 (FEDORA-2012-7377)
Financial planning for Sugar
--------------------------------------------------------------------------------
Update Information:
New sugar stable release
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 7-1
- Release 7
--------------------------------------------------------------------------------
================================================================================
sugar-help-14-1.fc17 (FEDORA-2012-7377)
Help and Dokumentation for Sugar
--------------------------------------------------------------------------------
Update Information:
New sugar stable release
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 14-1
- Release 14
--------------------------------------------------------------------------------
================================================================================
sugar-paint-43-1.fc17 (FEDORA-2012-7377)
Paint activity for Sugar
--------------------------------------------------------------------------------
Update Information:
New sugar stable release
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 43-1
- Release 43
* Thu Apr 19 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 42-1
- Release 42
--------------------------------------------------------------------------------
================================================================================
sugar-toolkit-0.96.1-1.fc17 (FEDORA-2012-7377)
Sugar toolkit
--------------------------------------------------------------------------------
Update Information:
New sugar stable release
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 0.96.1-1
- 0.96.1 stable release
--------------------------------------------------------------------------------
================================================================================
sugar-toolkit-gtk3-0.96.1-1.fc17 (FEDORA-2012-7377)
Sugar toolkit GTK+ 3
--------------------------------------------------------------------------------
Update Information:
New sugar stable release
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 0.96.1-1
- 0.96.1 stable release
--------------------------------------------------------------------------------
================================================================================
sugar-write-79-1.fc17 (FEDORA-2012-7377)
Word processor for Sugar
--------------------------------------------------------------------------------
Update Information:
New sugar stable release
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2012 Peter Robinson <pbrobinson(a)fedoraproject.org> - 79-1
- New 79 release
--------------------------------------------------------------------------------
================================================================================
synfig-0.63.05-1.fc17 (FEDORA-2012-7376)
Vector-based 2D animation rendering backend
--------------------------------------------------------------------------------
Update Information:
Upstream stable release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 23 2012 Jon Ciesla <limburgher(a)gmail.com> - 0.63.05-1
- Latest upstream.
--------------------------------------------------------------------------------
================================================================================
synfigstudio-0.63.05-1.fc17 (FEDORA-2012-7379)
Vector-based 2D animation studio
--------------------------------------------------------------------------------
Update Information:
Upstream release with several fixed bugs
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #667917 - [abrt] synfigstudio-0.62.00-2.fc13: operator->: Process
/usr/bin/synfigstudio was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=667917
[ 2 ] Bug #657387 - [abrt] synfigstudio-0.62.00-2.fc13: Process /usr/bin/synfigstudio
was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=657387
[ 3 ] Bug #703854 - [abrt] synfigstudio-0.62.00-2.fc13: gobj: Process
/usr/bin/synfigstudio was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=703854
[ 4 ] Bug #788441 - [abrt] synfigstudio-0.62.02-1.fc15: __GI_exit: Process
/usr/bin/synfigstudio was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=788441
[ 5 ] Bug #811727 - [abrt] synfigstudio-0.62.02-1.fc15: __GI_raise: Process
/usr/bin/synfigstudio was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=811727
--------------------------------------------------------------------------------
================================================================================
thermostat-0.2-0.20120503hg2140a7c81a4b.fc17 (FEDORA-2012-7375)
A monitoring and serviceability tool for OpenJDK
--------------------------------------------------------------------------------
Update Information:
Update to newer upstream (pre-release) version
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 4 2012 Omair Majid <omajid(a)redhat.com> - 0.2-0.20120503hg2140a7c81a4b
- Update to pre-release upstream snapshot
--------------------------------------------------------------------------------
================================================================================
tor-arm-1.4.5.0-1.fc17 (FEDORA-2012-7372)
Terminal status monitor for Tor
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.4.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 2 2012 Juan Orti Alcaine <j.orti.alcaine(a)gmail.com> - 1.4.5.0-1
- New upstream version 1.4.5.0
- Drop icon and desktop file because now they are included in the tarball
--------------------------------------------------------------------------------