The following Fedora 17 Security updates need testing:
Age URL
299
https://admin.fedoraproject.org/updates/FEDORA-2012-10269/revelation-0.4....
111
https://admin.fedoraproject.org/updates/FEDORA-2013-0455/fedora-business-...
81
https://admin.fedoraproject.org/updates/FEDORA-2013-2143/rubygem-rdoc-3.1...
77
https://admin.fedoraproject.org/updates/FEDORA-2013-2315/rubygem-rack-1.4...
40
https://admin.fedoraproject.org/updates/FEDORA-2013-4174/glibc-2.15-59.fc17
39
https://admin.fedoraproject.org/updates/FEDORA-2013-4234/stunnel-4.55-1.fc17
38
https://admin.fedoraproject.org/updates/FEDORA-2013-4296/tomcat6-6.0.36-1...
34
https://admin.fedoraproject.org/updates/FEDORA-2013-4501/libxslt-1.1.28-1...
31
https://admin.fedoraproject.org/updates/FEDORA-2013-4581/libuser-0.57.6-2...
19
https://admin.fedoraproject.org/updates/FEDORA-2013-5440/php-geshi-1.0.8....
19
https://admin.fedoraproject.org/updates/FEDORA-2013-5349/389-ds-base-1.2....
18
https://admin.fedoraproject.org/updates/FEDORA-2013-5546/plexus-archiver-...
13
https://admin.fedoraproject.org/updates/FEDORA-2013-5967/xorg-x11-server-...
6
https://admin.fedoraproject.org/updates/FEDORA-2013-6557/telepathy-idle-0...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-6723/xen-4.1.5-1.fc17
4
https://admin.fedoraproject.org/updates/FEDORA-2013-6727/python-pip-1.3.1...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-6720/curl-7.24.0-8.fc17
1
https://admin.fedoraproject.org/updates/FEDORA-2013-7000/phpMyAdmin-3.5.8...
1
https://admin.fedoraproject.org/updates/FEDORA-2013-7014/php-sabredav-Sab...
1
https://admin.fedoraproject.org/updates/FEDORA-2013-6999/kernel-3.8.10-10...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-7144/xmp-3.4.0-11.fc17
0
https://admin.fedoraproject.org/updates/FEDORA-2013-7128/tinc-1.0.21-1.fc17
The following Fedora 17 Critical Path updates have yet to be approved:
Age URL
251
https://admin.fedoraproject.org/updates/FEDORA-2012-12509/PackageKit-0.7....
80
https://admin.fedoraproject.org/updates/FEDORA-2013-2163/policycoreutils-...
59
https://admin.fedoraproject.org/updates/FEDORA-2013-3304/libvpx-1.2.0-1.fc17
40
https://admin.fedoraproject.org/updates/FEDORA-2013-4140/audit-2.2.3-2.fc17
8
https://admin.fedoraproject.org/updates/FEDORA-2013-6278/nss-3.14.3-2.fc17
5
https://admin.fedoraproject.org/updates/FEDORA-2013-6636/kde-settings-4.8...
4
https://admin.fedoraproject.org/updates/FEDORA-2013-6720/curl-7.24.0-8.fc17
4
https://admin.fedoraproject.org/updates/FEDORA-2013-6750/xorg-x11-drv-syn...
1
https://admin.fedoraproject.org/updates/FEDORA-2013-6999/kernel-3.8.10-10...
The following builds have been pushed to Fedora 17 updates-testing
e16-1.0.13-1.fc17
fedup-0.7.3-4.fc17
libdxfrw-0.5.7-3.fc17
mlton-20100608-17.fc17
python-mccabe-0.2.1-2.fc17
tinc-1.0.21-1.fc17
viking-1.4.1-1.fc17
xmp-3.4.0-11.fc17
zile-2.4.9-1.fc17
Details about builds:
================================================================================
e16-1.0.13-1.fc17 (FEDORA-2013-7133)
The Enlightenment window manager, DR16
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release e16 1.0.13.
Switch sound sub system to pulseaudio and sndfile.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2013 Terje Rosten <terje.rosten(a)ntnu.no> - 1.0.13-1
- 1.0.13
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.11-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fedup-0.7.3-4.fc17 (FEDORA-2013-7124)
The Fedora Upgrade tool
--------------------------------------------------------------------------------
Update Information:
* Fix upgrade hang with multiple encrypted partitions
* Fix upgrade hang with encrypted `/home`
* Fix upgrade hang for systems using `/etc/mdadm.conf`
* Fix upgrade hang for systems that haven't been updated recently
* Fix hang when starting upgrade to F19 Alpha
* Write debuglog to `/var/log/fedup.log` by default
* Support proxy settings from `/etc/yum.conf`
* Other bugfixes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 30 2013 Will Woods <wwoods(a)redhat.com> 0.7.3-4
- Dependency fix: can't Obsolete preupgrade until F19 :/
* Thu Apr 25 2013 Will Woods <wwoods(a)redhat.com> 0.7.3-3
- Fix hang upgrading from F18 to F19 Alpha (#954371)
* Thu Apr 4 2013 Will Woods <wwoods(a)redhat.com> 0.7.3-2
- Add Obsoletes: preupgrade. SO LONG, PREUPGRADE.
* Fri Mar 15 2013 Will Woods <wwoods(a)redhat.com> 0.7.3-1
- Fix hang starting upgrade with encrypted /home (#896023)
* Fri Mar 15 2013 Will Woods <wwoods(a)redhat.com> 0.7.3-0
- Write debuglog by default (/var/log/fedup.log)
- Add support for applying updates to upgrade.img
- Use proxy settings from yum.conf (#892994)
- Fix "NameError: global name 'po' is not defined" (#895576)
- Clearer error on already-upgraded systems (#895967)
- Fix upgrade hang with multiple encrypted partitions (#896010)
- Fix "OSError: [Errno 2]..." when `selinuxenabled` is not in PATH (#896721)
- Fix tracebacks on bad arguments to --iso (#896440, #895665)
- Fix traceback if grubby is missing (#896194)
- Require newer systemd to fix hang on not-updated systems (#910326)
- Fix hang starting upgrade on systems with /dev/md* (#895805)
- Better error messages if you're out of disk space (#896144)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #896023 - The upgrade doesn't continue after reboot, possibly because
systemd doesn't see system-update.target
https://bugzilla.redhat.com/show_bug.cgi?id=896023
[ 2 ] Bug #892994 - Running fedup from behind a proxy when upgrading from F17 to F18
fails
https://bugzilla.redhat.com/show_bug.cgi?id=892994
[ 3 ] Bug #895576 - [abrt] fedup-0.7.2-1.fc17: callback.py:142:procConflictPo:NameError:
global name 'po' is not defined
https://bugzilla.redhat.com/show_bug.cgi?id=895576
[ 4 ] Bug #895967 - [abrt] fedup-0.7.2-1.fc17:
download.py:210:download_packages:TypeError: 'NoneType' object is not iterable
https://bugzilla.redhat.com/show_bug.cgi?id=895967
[ 5 ] Bug #896010 - Upgrade doesn't start for systems with more than one encrypted
partitions
https://bugzilla.redhat.com/show_bug.cgi?id=896010
[ 6 ] Bug #894242 - upgrade process hangs with encrypted /home (no graphical unlock
dialog)
https://bugzilla.redhat.com/show_bug.cgi?id=894242
[ 7 ] Bug #896721 - Fedup-cli fails with OSError: [Errno 2] No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=896721
[ 8 ] Bug #896440 - [abrt] fedup-0.7.2-1.fc17:
subprocess.py:511:check_call:CalledProcessError: Command '['mount',
'-oloop', '/home/marcelo', '/tmp/fedup.mnt.hb0ZtH']' returned
non-zero exit status 1
https://bugzilla.redhat.com/show_bug.cgi?id=896440
[ 9 ] Bug #895665 - [abrt] fedup-0.7.2-1.fc17:
subprocess.py:511:check_call:CalledProcessError: Command '['mount',
'-oloop', 'Fedora-18-i686-Live-Desktop.iso',
'/var/tmp/fedup.mnt.gvtftS']' returned non-zero exit status 1
https://bugzilla.redhat.com/show_bug.cgi?id=895665
[ 10 ] Bug #896194 - fedup Exception Traceback File /usr/bin/fedup-cli line 330 in
<module> main(args)
https://bugzilla.redhat.com/show_bug.cgi?id=896194
[ 11 ] Bug #910326 - Upgrade doesn't start for systems with multiple encrypted
partitions and an old systemd package
https://bugzilla.redhat.com/show_bug.cgi?id=910326
[ 12 ] Bug #895805 - Software RAID root /dev/md1 assembled as /dev/md127 during
fedup-upgrade boot, root mount fails
https://bugzilla.redhat.com/show_bug.cgi?id=895805
[ 13 ] Bug #896144 - fedup fails silently when not enough space on / is available
https://bugzilla.redhat.com/show_bug.cgi?id=896144
[ 14 ] Bug #954371 - F19 Alpha fedup hangs after booting 'System Upgrade'
https://bugzilla.redhat.com/show_bug.cgi?id=954371
--------------------------------------------------------------------------------
================================================================================
libdxfrw-0.5.7-3.fc17 (FEDORA-2013-7141)
Library to read/write DXF files
--------------------------------------------------------------------------------
Update Information:
Add fixes from LibreCAD 2.0.0beta5.
New package: libdxfrw - Library to read/write DXF files
New package: libdxfrw - Library to read/write DXF files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #950172 - Review Request:libdxfrw - Library to read/write DXF files
https://bugzilla.redhat.com/show_bug.cgi?id=950172
--------------------------------------------------------------------------------
================================================================================
mlton-20100608-17.fc17 (FEDORA-2013-7137)
Optimizing compiler for Standard ML
--------------------------------------------------------------------------------
Update Information:
- bootstrap for arm, armhfp, ppc, ppc64
- remove htmldoc requirement, it is buggy and not terribly useful
Fix issue building with newer gmp
Fix issue building with newer gmp
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 27 2013 Adam Goode <adam(a)spicenitz.org> - 20100608-17
- MLton is too big for polyml, so bootstrap arm, armhfp, ppc, ppc64 with mlton
- Don't use htmldoc anymore, it often crashes
- Remove max-heap workaround
* Mon Apr 22 2013 Adam Goode <adam(a)spicenitz.org> - 20100608-16
- Scrap all the arch-specific bootstrapping, use polyml to do it
* Sun Apr 21 2013 Adam Goode <adam(a)spicenitz.org> - 20100608-15
- Try a more generalized bootstrap approach
* Sat Apr 20 2013 Adam Goode <adam(a)spicenitz.org> - 20100608-14
- Really fix builds by more intelligently setting max-heap
* Sat Apr 20 2013 Adam Goode <adam(a)spicenitz.org> - 20100608-13
- Fix ppc64 bootstrap
* Sat Apr 20 2013 Adam Goode <adam(a)spicenitz.org> - 20100608-12
- Bootstrap ppc64
* Fri Apr 19 2013 Adam Goode <adam(a)spicenitz.org> - 20100608-11
- Bootstrap ppc
* Thu Apr 18 2013 Adam Goode <adam(a)spicenitz.org> - 20100608-10
- Constrain max-heap to a fixed value during building, otherwise 70% of physical
ram is used
- Fix detection of ppc64
* Mon Apr 15 2013 Adam Goode <adam(a)spicenitz.org> - 20100608-9
- Fix for #914188 FTBFS
- Update source link
- Remove ExclusiveArch, per packaging recommendations
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
20100608-8.2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
20100608-7.2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #928076 - FTBFS: mlton fails to build on ppc
https://bugzilla.redhat.com/show_bug.cgi?id=928076
[ 2 ] Bug #914188 - mlton: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=914188
--------------------------------------------------------------------------------
================================================================================
python-mccabe-0.2.1-2.fc17 (FEDORA-2013-7138)
McCabe complexity checker
--------------------------------------------------------------------------------
Update Information:
The initial import of the package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #952141 - Review Request: python-mccabe - McCabe complexity checker
https://bugzilla.redhat.com/show_bug.cgi?id=952141
--------------------------------------------------------------------------------
================================================================================
tinc-1.0.21-1.fc17 (FEDORA-2013-7128)
A virtual private network daemon
--------------------------------------------------------------------------------
Update Information:
* Wed Apr 24 2013 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.0.21-1
- Updated to new upstream version 1.0.21
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 24 2013 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.0.21-1
- Updated to new upstream version 1.0.21
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.19-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.19-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #955705 - CVE-2013-1428 tinc: Stack-based buffer overflow when processing
overly long TCP packets
https://bugzilla.redhat.com/show_bug.cgi?id=955705
--------------------------------------------------------------------------------
================================================================================
viking-1.4.1-1.fc17 (FEDORA-2013-7136)
GPS data editor and analyzer
--------------------------------------------------------------------------------
Update Information:
* Mon Apr 29 2013 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.4.1-1
- Updated to new upstream version 1.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 29 2013 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.4.1-1
- Updated to new upstream version 1.4.1
--------------------------------------------------------------------------------
================================================================================
xmp-3.4.0-11.fc17 (FEDORA-2013-7144)
A multi-format module player
--------------------------------------------------------------------------------
Update Information:
This update fixes heap-based buffer overflow when processing certain MASI files.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 28 2013 Dominik Mierzejewski <rpm(a)greysector.net> - 3.4.0-11
- backport fix for CVE-2013-1890 (rhbz #954658)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #954658 - CVE-2013-1980 xmp: Heap-based buffer overflow by processing certain
MASI files
https://bugzilla.redhat.com/show_bug.cgi?id=954658
--------------------------------------------------------------------------------
================================================================================
zile-2.4.9-1.fc17 (FEDORA-2013-7121)
Zile Is Lossy Emacs
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream, which has many bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 29 2013 Eric Smith <eric(a)brouhaha.com> - 2.4.9-1
- Updated to 2.4.9
* Mon Apr 29 2013 Eric Smith <eric(a)brouhaha.com> - 2.3.21-9
- Added --install option to autoreconf.
* Mon Apr 29 2013 Eric Smith <eric(a)brouhaha.com> - 2.3.21-8
- Added missing BuildRequires for autoconf, automake.
* Mon Apr 29 2013 Eric Smith <eric(a)brouhaha.com> - 2.3.21-7
- Add autoreconf in prep section to support aarch64 (Bug #926862).
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.3.21-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sat Aug 4 2012 Parag Nemade <paragn AT fedoraproject DOT org> - 2.31.21-5
- Fix gets call for glibc-2.16 changes
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.3.21-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------