The following Fedora 19 Security updates need testing: Age URL 3 https://admin.fedoraproject.org/updates/FEDORA-2013-4783/haproxy-1.4.23-1.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-4753/microcode_ctl-2.0-3.1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2013-4870/drupal7-ctools-1.3-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2013-4871/seamonkey-2.17-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2013-4908/mod_security-2.7.3-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-5044/gsi-openssh-6.1p1-5.fc19 The following builds have been pushed to Fedora 19 updates-testing gsi-openssh-6.1p1-5.fc19 libmikmod-3.2.0-21.fc19 milia-1.0.0-1.fc19 msitools-0.92-4.fc19 openstack-swift-1.8.0-2.fc19 php-drush-drush-5.8.0-4.fc19 selinux-policy-3.12.1-26.fc19 springlobby-0.169-2.fc19 Details about builds: ================================================================================ gsi-openssh-6.1p1-5.fc19 (FEDORA-2013-5044) An implementation of the SSH protocol with GSI authentication -------------------------------------------------------------------------------- Update Information: Security fix for vulnerability * http://grid.ncsa.illinois.edu/ssh/pamuserchange-2013-01.adv * https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2013-5168 -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 6 2013 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 6.1p1-5 - Based on openssh-6.1p1-7.fc19 - Security fix for vulnerability http://grid.ncsa.illinois.edu/ssh/pamuserchange-2013-01.adv https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2013-5168 -------------------------------------------------------------------------------- ================================================================================ libmikmod-3.2.0-21.fc19 (FEDORA-2013-5050) A MOD music file player library -------------------------------------------------------------------------------- Update Information: - Fix stuttering sound and hang on exit for apps using libmikmod's alsa driver - Remove non standard options configure adds to CFLAGS - Run autoreconf for aarch64 support (rhbz#925794) -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 6 2013 Hans de Goede <hdegoede@xxxxxxxxxx> - 3.2.0-21 - Fix stuttering sound and hang on exit for apps using libmikmod's alsa driver - Remove non standard options configure adds to CFLAGS - Run autoreconf for aarch64 support (rhbz#925794) -------------------------------------------------------------------------------- References: [ 1 ] Bug #925794 - libmikmod: Does not support aarch64 in f19 and rawhide https://bugzilla.redhat.com/show_bug.cgi?id=925794 -------------------------------------------------------------------------------- ================================================================================ milia-1.0.0-1.fc19 (FEDORA-2013-5049) C++ cosmology library -------------------------------------------------------------------------------- Update Information: New upstream source -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 4 2013 Sergio Pascual <sergiopr@xxxxxxxxxxxxxxxxx> - 1.0.0-1 - New upstream source -------------------------------------------------------------------------------- ================================================================================ msitools-0.92-4.fc19 (FEDORA-2013-5048) Windows Installer tools -------------------------------------------------------------------------------- Update Information: Fix a few wxi to match f19 Fixes glib.wxi -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 5 2013 Marc-André Lureau <marcandre.lureau@xxxxxxxxx> - 0.92-4 - More f19 wxi updates * Thu Apr 4 2013 Marc-André Lureau <marcandre.lureau@xxxxxxxxx> - 0.92-3 - Remove obsolete file in glib.wxi * Wed Apr 3 2013 Marc-André Lureau <marcandre.lureau@xxxxxxxxx> - 0.92-2 - Add a glib.wxi workaround for win64 -------------------------------------------------------------------------------- ================================================================================ openstack-swift-1.8.0-2.fc19 (FEDORA-2013-5046) OpenStack Object Storage (Swift) -------------------------------------------------------------------------------- Update Information: Update to swift 1.8.0 (Grizzly) -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 5 2013 Derek Higgins <derekh@xxxxxxxxxx> - 1.8.0-2 - change path to middleware in proxy conf file - add dependency for python-keystoneclient for proxy * Thu Apr 4 2013 Pete Zaitcev <zaitcev@xxxxxxxxxx> 1.8.0-1 - Update to 1.8.0; this is the "Grizzly" release of OpenStack * Mon Mar 18 2013 Pete Zaitcev <zaitcev@xxxxxxxxxx> 1.7.6-2 - Move ownership of /var/cache/swift to main package per Zane's comments -------------------------------------------------------------------------------- ================================================================================ php-drush-drush-5.8.0-4.fc19 (FEDORA-2013-5043) Command line shell and Unix scripting interface for Drupal -------------------------------------------------------------------------------- Update Information: Drush is a command line shell and Unix scripting interface for Drupal. If you are unfamiliar with shell scripting, reviewing the documentation for your shell (e.g. man bash) or reading an online tutorial (e.g. search for "bash tutorial") will help you get the most out of Drush. Drush core ships with lots of useful commands for interacting with code like modules/themes/profiles. Similarly, it runs update.php, executes sql queries and DB migrations, and misc utilities like run cron or clear cache. Works with Drupal 6, Drupal 7, and usually Drupal 8. *** NOTE: This package obsoletes drupal6-drush and drupal7-drush. -------------------------------------------------------------------------------- References: [ 1 ] Bug #874905 - Review Request: php-drush-drush - Command line shell and Unix scripting interface for Drupal https://bugzilla.redhat.com/show_bug.cgi?id=874905 -------------------------------------------------------------------------------- ================================================================================ selinux-policy-3.12.1-26.fc19 (FEDORA-2013-5045) SELinux policy configuration -------------------------------------------------------------------------------- Update Information: - Try to label on controlC devices up to 30 correctly - Add mount_rw_pid_files() interface - Add additional mount/umount interfaces needed by mock - fsadm_t sends audit messages in reads kernel_ipc_info when doing livecd-iso-to-disk - Fix tabs - Allow initrc_domain to search rgmanager lib files - Add more fixes which make mock working together with confined users * Allow mock_t to manage rpm files * Allow mock_t to read rpm log files * Allow mock to setattr on tmpfs, devpts * Allow mount/umount filesystems - Add rpm_read_log() interface - yum-cron runs rpm from within it. - Allow tuned to transition to dmidecode - Allow firewalld to do net_admin - Allow mock to unmont tmpfs_t - Fix virt_sigkill() interface - Add additional fixes for mock. Mainly caused by mount running in mock_t - Allow mock to write sysfs_t and mount pid files - Add mailman_domain to mailman_template() - Allow openvswitch to execute shell - Allow qpidd to use kerberos - Allow mailman to use fusefs, needs back port to RHEL6 - Allow apache and its scripts to use anon_inodefs - Add alias for git_user_content_t and git_sys_content_t so that RHEL6 will update to RHEL7 - Realmd needs to connect to samba ports, needs back port to F18 also - Allow colord to read /run/initial-setup- - Allow sanlock-helper to send sigkill to virtd which is registred to sanlock - Add virt_kill() interface - Add rgmanager_search_lib() interface - Allow wdmd to getattr on all filesystems. Back ported from RHEL6 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 5 2013 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.12.1-26 - Try to label on controlC devices up to 30 correctly - Add mount_rw_pid_files() interface - Add additional mount/umount interfaces needed by mock - fsadm_t sends audit messages in reads kernel_ipc_info when doing livecd-iso-to-disk - Fix tabs - Allow initrc_domain to search rgmanager lib files - Add more fixes which make mock working together with confined users * Allow mock_t to manage rpm files * Allow mock_t to read rpm log files * Allow mock to setattr on tmpfs, devpts * Allow mount/umount filesystems - Add rpm_read_log() interface - yum-cron runs rpm from within it. - Allow tuned to transition to dmidecode - Allow firewalld to do net_admin - Allow mock to unmont tmpfs_t - Fix virt_sigkill() interface - Add additional fixes for mock. Mainly caused by mount running in mock_t - Allow mock to write sysfs_t and mount pid files - Add mailman_domain to mailman_template() - Allow openvswitch to execute shell - Allow qpidd to use kerberos - Allow mailman to use fusefs, needs back port to RHEL6 - Allow apache and its scripts to use anon_inodefs - Add alias for git_user_content_t and git_sys_content_t so that RHEL6 will update to RHEL7 - Realmd needs to connect to samba ports, needs back port to F18 also - Allow colord to read /run/initial-setup- - Allow sanlock-helper to send sigkill to virtd which is registred to sanlock - Add virt_kill() interface - Add rgmanager_search_lib() interface - Allow wdmd to getattr on all filesystems. Back ported from RHEL6 * Tue Apr 2 2013 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.12.1-25 - Allow realmd to create tmp files - FIx ircssi_home_t type to irssi_home_t - Allow adcli running as realmd_t to connect to ldap port - Allow NetworkManager to transition to ipsec_t, for running strongswan - Make openshift_initrc_t an lxc_domain - Allow gssd to manage user_tmp_t files - Fix handling of irclogs in users homedir - Fix labeling for drupal an wp-content in subdirs of /var/www/html - Allow abrt to read utmp_t file - Fix openshift policy to transition lnk_file, sock-file an fifo_file when created in a tmpfs_t, needs back port to RHEL6 - fix labeling for (oo|rhc)-restorer-wrapper.sh - firewalld needs to be able to write to network sysctls - Fix mozilla_plugin_dontaudit_rw_sem() interface - Dontaudit generic ipc read/write to a mozilla_plugin for sandbox_x domains - Add mozilla_plugin_dontaudit_rw_sem() interface - Allow svirt_lxc_t to transition to openshift domains - Allow condor domains block_suspend and dac_override caps - Allow condor_master to read passd - Allow condor_master to read system state - Allow NetworkManager to transition to ipsec_t, for running strongswan - Lots of access required by lvm_t to created encrypted usb device - Allow xdm_t to dbus communicate with systemd_localed_t - Label strongswan content as ipsec_exec_mgmt_t for now - Allow users to dbus chat with systemd_localed - Fix handling of .xsession-errors in xserver.if, so kde will work - Might be a bug but we are seeing avc's about people status on init_t:service - Make sure we label content under /var/run/lock as <<none>> - Allow daemon and systemprocesses to search init_var_run_t directory - Add boolean to allow xdm to write xauth data to the home directory - Allow mount to write keys for the unconfined domain - Add unconfined_write_keys() interface -------------------------------------------------------------------------------- ================================================================================ springlobby-0.169-2.fc19 (FEDORA-2013-5047) A lobby client for the spring RTS game engine -------------------------------------------------------------------------------- Update Information: - Fix missing libraries (-2). - Version 0.169, major spring/springlobby upstream release. - Fix #921690. - GTK2 patch dropped. - Version 0.169, major spring/springlobby upstream release. - Fix #921690. - GTK2 patch dropped. - Version 0.169, major spring/springlobby upstream release. - Fix #921690. - GTK2 patch dropped. - Version 0.169, major spring/springlobby upstream release. - Fix #921690. - GTK2 patch dropped. -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 6 2013 Gilboa Davara <gilboad [AT] gmail [DOT] com> - 0.169-2 - Fix missing libraries. * Mon Apr 1 2013 Gilboa Davara <gilboad [AT] gmail [DOT] com> - 0.169-1 - Version 0.169, major spring/springlobby upstream release. - Fix #921690. - GTK2 patch dropped. -------------------------------------------------------------------------------- References: [ 1 ] Bug #921690 - spring 93.1 is available - new version https://bugzilla.redhat.com/show_bug.cgi?id=921690 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
