The following Fedora 17 Security updates need testing:
Age URL
275
https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4....
87
https://admin.fedoraproject.org/updates/FEDORA-2013-0455/fedora-business-...
57
https://admin.fedoraproject.org/updates/FEDORA-2013-2143/rubygem-rdoc-3.1...
53
https://admin.fedoraproject.org/updates/FEDORA-2013-2315/rubygem-rack-1.4...
16
https://admin.fedoraproject.org/updates/FEDORA-2013-4174/glibc-2.15-59.fc17
15
https://admin.fedoraproject.org/updates/FEDORA-2013-4234/stunnel-4.55-1.fc17
14
https://admin.fedoraproject.org/updates/FEDORA-2013-4296/tomcat6-6.0.36-1...
10
https://admin.fedoraproject.org/updates/FEDORA-2013-4501/libxslt-1.1.28-1...
8
https://admin.fedoraproject.org/updates/FEDORA-2013-4522/libarchive-3.0.4...
8
https://admin.fedoraproject.org/updates/FEDORA-2013-4516/drupal7-rules-2....
7
https://admin.fedoraproject.org/updates/FEDORA-2013-4598/389-ds-base-1.2....
7
https://admin.fedoraproject.org/updates/FEDORA-2013-4581/libuser-0.57.6-2...
5
https://admin.fedoraproject.org/updates/FEDORA-2013-4619/polarssl-1.1.6-1...
2
https://admin.fedoraproject.org/updates/FEDORA-2013-4827/haproxy-1.4.23-1...
2
https://admin.fedoraproject.org/updates/FEDORA-2013-4834/mod_security-2.7...
2
https://admin.fedoraproject.org/updates/FEDORA-2013-4818/clamav-0.97.7-1....
2
https://admin.fedoraproject.org/updates/FEDORA-2013-4802/xulrunner-20.0-1...
1
https://admin.fedoraproject.org/updates/FEDORA-2013-4983/seamonkey-2.17-1...
1
https://admin.fedoraproject.org/updates/FEDORA-2013-4927/xen-4.1.4-7.fc17
1
https://admin.fedoraproject.org/updates/FEDORA-2013-4980/drupal7-ctools-1...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-5051/gsi-openssh-5.9p...
The following Fedora 17 Critical Path updates have yet to be approved:
Age URL
227
https://admin.fedoraproject.org/updates/FEDORA-2012-12509/PackageKit-0.7....
56
https://admin.fedoraproject.org/updates/FEDORA-2013-2163/policycoreutils-...
35
https://admin.fedoraproject.org/updates/FEDORA-2013-3304/libvpx-1.2.0-1.fc17
16
https://admin.fedoraproject.org/updates/FEDORA-2013-4140/audit-2.2.3-2.fc17
14
https://admin.fedoraproject.org/updates/FEDORA-2013-4308/libnotify-0.7.5-...
10
https://admin.fedoraproject.org/updates/FEDORA-2013-4501/libxslt-1.1.28-1...
8
https://admin.fedoraproject.org/updates/FEDORA-2013-4522/libarchive-3.0.4...
7
https://admin.fedoraproject.org/updates/FEDORA-2013-4581/libuser-0.57.6-2...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-4730/koji-1.8.0-1.fc17
1
https://admin.fedoraproject.org/updates/FEDORA-2013-5001/selinux-policy-3...
1
https://admin.fedoraproject.org/updates/FEDORA-2013-4958/cryptopp-5.6.2-2...
1
https://admin.fedoraproject.org/updates/FEDORA-2013-4977/livecd-tools-17....
The following builds have been pushed to Fedora 17 updates-testing
dovecot-2.1.16-1.fc17
gsi-openssh-5.9p1-11.fc17
igor-0.3.0-4.fc17
libmikmod-3.2.0-21.fc17
log4c-1.2.3-1.fc17
mysql-utilities-1.3.0-1.fc17
perl-DateTime-Format-Builder-0.8100-2.fc17
qpid-proton-0.4-2.2.fc17
springlobby-0.169-2.fc17
tcsh-6.17-19.fc17
zeroinstall-injector-2.1-1.fc17
Details about builds:
================================================================================
dovecot-2.1.16-1.fc17 (FEDORA-2013-5071)
Secure imap and pop3 server
--------------------------------------------------------------------------------
Update Information:
- Added quota-status policy service for Postfix
- Added "doveadm batch" command to run multiple commands before moving onto the
next user (useful only with -A and -u <usermask>)
- Added forwards compatibility for v2.2 index files
- mdbox: Index rebuilding crashed in some situations
- Fixed a race condition with setting \Recent flags
- Fixed a crash when decoding a specific message (decoding is done for SEARCH TEXT/BODY
and with full text sear
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 5 2013 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.1.16-1
- dovecot updated to 2.1.16
- mdbox: Index rebuilding crashed in some situations
- Fixed a race condition with setting \Recent flags
- Fixed a crash when decoding a specific message (decoding is done
for SEARCH TEXT/BODY and with full text search indexing, so this
couldn't fully DoS a user)
* Thu Feb 28 2013 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.1.15-2
- do not print error when NetworkManager is not installed (#916456)
--------------------------------------------------------------------------------
================================================================================
gsi-openssh-5.9p1-11.fc17 (FEDORA-2013-5051)
An implementation of the SSH protocol with GSI authentication
--------------------------------------------------------------------------------
Update Information:
Security fix for vulnerability
*
http://grid.ncsa.illinois.edu/ssh/pamuserchange-2013-01.adv
*
https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2013-5168
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 6 2013 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 5.9p1-11
- Security fix for vulnerability
http://grid.ncsa.illinois.edu/ssh/pamuserchange-2013-01.adv
https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2013-5168
--------------------------------------------------------------------------------
================================================================================
igor-0.3.0-4.fc17 (FEDORA-2013-5059)
Automated distribution life-cycle testing
--------------------------------------------------------------------------------
Update Information:
This update introduces igor into Fedora 17 and 18.
--------------------------------------------------------------------------------
================================================================================
libmikmod-3.2.0-21.fc17 (FEDORA-2013-5076)
A MOD music file player library
--------------------------------------------------------------------------------
Update Information:
- Fix stuttering sound and hang on exit for apps using libmikmod's alsa driver
- Remove non standard options configure adds to CFLAGS
- Run autoreconf for aarch64 support (rhbz#925794)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 6 2013 Hans de Goede <hdegoede(a)redhat.com> - 3.2.0-21
- Fix stuttering sound and hang on exit for apps using libmikmod's alsa driver
- Remove non standard options configure adds to CFLAGS
- Run autoreconf for aarch64 support (rhbz#925794)
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.2.0-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #925794 - libmikmod: Does not support aarch64 in f19 and rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=925794
--------------------------------------------------------------------------------
================================================================================
log4c-1.2.3-1.fc17 (FEDORA-2013-5065)
Library for logging application messages
--------------------------------------------------------------------------------
Update Information:
This release contains important bugfix in syslog appender. There are also other packaging
updates and improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 6 2013 František Dvořák <valtri(a)civ.zcu.cz> - 1.2.3-1
- Release log4c 1.2.3
- Added pkgconfig file and the manpage for log4c-config
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #926084 - log4c: Does not support aarch64 in f19 and rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=926084
--------------------------------------------------------------------------------
================================================================================
mysql-utilities-1.3.0-1.fc17 (FEDORA-2013-5081)
MySQL Utilities
--------------------------------------------------------------------------------
Update Information:
Upstream release notes:
http://dev.mysql.com/doc/relnotes/mysql-utilities/en/wb-utils-news-1-3-0....
Package changes:
- upstream moved from launchpad to
mysql.com
- new command mysqlfrm
- new command mysqluc
- man pages provided by upstream
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 6 2013 Remi Collet <remi(a)fedoraproject.org> - 1.3.0-1
- update to 1.3.0 (alpha)
http://dev.mysql.com/doc/relnotes/mysql-utilities/en/wb-utils-news-1-3-0....
- move from launchpad to
mysql.com
- new command mysqlfrm
- mysqluc is now usable
- man pages provided in upstream tarball
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-Format-Builder-0.8100-2.fc17 (FEDORA-2013-5063)
Create DateTime parser classes and objects
--------------------------------------------------------------------------------
Update Information:
This update fixes build-time test failures with DateTime >= 1.00
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 5 2013 Iain Arnell <iarnell(a)gmail.com> 0.8100-2
- license change from "same as perl" to Artistic 2.0
* Fri Apr 5 2013 Iain Arnell <iarnell(a)gmail.com> 0.8100-1
- update to latest upstream version
- drop dependency filtering
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8000-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.8000-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Wed Jun 20 2012 Petr Pisar <ppisar(a)redhat.com> - 0.8000-9
- Perl 5.16 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #948062 - New upstream release 0.81 fixes tests to work with DateTime 1.00
https://bugzilla.redhat.com/show_bug.cgi?id=948062
--------------------------------------------------------------------------------
================================================================================
qpid-proton-0.4-2.2.fc17 (FEDORA-2013-5078)
A high performance, lightweight messaging library
--------------------------------------------------------------------------------
Update Information:
Fixed the Obsoletes and Provides for the renamed packages.
Fixed the subpackage interdependencies.
Moved the C code to the qpid-proton-c subpackage.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2013 Darryl L. Pierce <dpierce(a)redhat.com> - 0.4-2.2
- Added Obsoletes and Provides for packages whose names changed.
- Resolves: BZ#948784
* Mon Apr 1 2013 Darryl L. Pierce <dpierce(a)redhat.com> - 0.4-2.1
- Fixed the dependencies for qpid-proton-devel and python-qpid-proton.
* Thu Mar 28 2013 Darryl L. Pierce <dpierce(a)redhat.com> - 0.4-2
- Moved all C libraries to the new qpid-proton-c subpackage.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #948784 - The packages for qpid-proton-c 0.4-2.1 do not properly obsolete and
provide the previous qpid-proton packages they've replaced.
https://bugzilla.redhat.com/show_bug.cgi?id=948784
--------------------------------------------------------------------------------
================================================================================
springlobby-0.169-2.fc17 (FEDORA-2013-5062)
A lobby client for the spring RTS game engine
--------------------------------------------------------------------------------
Update Information:
- Fix missing libraries (-2).
- Version 0.169, major spring/springlobby upstream release.
- Fix #921690.
- GTK2 patch dropped.
- Version 0.169, major spring/springlobby upstream release.
- Fix #921690.
- GTK2 patch dropped.
- Version 0.169, major spring/springlobby upstream release.
- Fix #921690.
- GTK2 patch dropped.
- Version 0.169, major spring/springlobby upstream release.
- Fix #921690.
- GTK2 patch dropped.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 6 2013 Gilboa Davara <gilboad [AT] gmail [DOT] com> - 0.169-2
- Fix missing libraries.
* Mon Apr 1 2013 Gilboa Davara <gilboad [AT] gmail [DOT] com> - 0.169-1
- Version 0.169, major spring/springlobby upstream release.
- Fix #921690.
- GTK2 patch dropped.
* Sun Feb 24 2013 Rahul Sundaram <sundaram(a)fedoraproject.org> - 0.147-4
- Rebuild for rb_libtorrent soname bump
- Clean up spec to follow current guidelines
* Sat Feb 9 2013 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> - 0.147-3
- Rebuild for Boost-1.53.0
* Sun Feb 3 2013 Kevin Fenzi <kevin(a)scrye.com> - 0.147-2
- Rebuild for broken deps in rawhide
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #921690 - spring 93.1 is available - new version
https://bugzilla.redhat.com/show_bug.cgi?id=921690
--------------------------------------------------------------------------------
================================================================================
tcsh-6.17-19.fc17 (FEDORA-2013-5067)
An enhanced version of csh, the C shell
--------------------------------------------------------------------------------
Update Information:
This is a new bugfix release to be backwards compatible with pipeline or a backquote
expansion error propagation.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 5 2013 Fridolin Pokorny <fpokorny(a)redhat.com> - 6.17-19
- modified tcsh-6.17.00-status-pipeline-backquote-list-of-cmds.patch to be
backwards compatible
Resolves: #916386
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #916386 - Command substitution return code NOT same as from command executed.
https://bugzilla.redhat.com/show_bug.cgi?id=916386
--------------------------------------------------------------------------------
================================================================================
zeroinstall-injector-2.1-1.fc17 (FEDORA-2013-5079)
The Zero Install Injector (0launch)
--------------------------------------------------------------------------------
Update Information:
see
http://article.gmane.org/gmane.comp.file-systems.zero-install.devel/6827
New features
- Added "0install search"
- Use new version of 0install-runenv-cli helper
- Add a <file> download step, with mandatory href, dest and size
attributes
- Added <remove> recipe step
- Added optional `dest` attribute to <archive>
- Search system paths for native binaries
- Added generic binding element <binding>
- Support .deb files with data.tar.xz
- Added support for Tulip mainloop
- "0install add" now prints a warning if the target has a replaced-by field
(like 0alias used to do)
Changes
- Improved diagnostics when a required command is missing
- Add spacer lines for readability in "0install show" output
- Report exact error when a script is unreadable in "0install man"
- Improved error when a feed has the wrong root element
Bug fixes
- Cope with read-only cache in Fetcher.download_and_import_feed
- Don't abort running an app if updating fails due to a read-only filesystem
- Fixed exception reporting on Python 3
- Fix typo ("contraint")
- GtkStatusIcon.set_blinking has been removed from GTK 3
- Log exception before converting it to a string in Handler.report_error
Python API / code cleanups
- Refactoring in sat.py to be more Pythonic
- Added more epydoc types
- Pass a list to check_call, not a string
- Converted remaining classes to be new-style classes
- Test "0store add" with a path to extract
- Add an --xml output option to the testrunner
- Make the coverage output as --xml as well
- Use copy instead of symlink for latest app selections document
on Windows
Translations
- Updated Swedish translation
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 5 2013 Michel Salim <salimma(a)fedoraproject.org> - 2.1-1
- Update to 2.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #948181 - zeroinstall-injector-2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=948181
--------------------------------------------------------------------------------