The following Fedora 19 Security updates need testing: Age URL 22 https://admin.fedoraproject.org/updates/FEDORA-2013-4753/microcode_ctl-2.0-3.1.fc19 14 https://admin.fedoraproject.org/updates/FEDORA-2013-5411/php-geshi-1.0.8.11-3.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2013-5530/plexus-archiver-2.3-1.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2013-5801/mantis-1.2.15-1.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2013-5883/xorg-x11-server-1.14.0-6.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-6378/tftp-5.2-9.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-6390/owncloud-4.5.10-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-6366/arpwatch-2.1a15-28.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2013-6481/miredo-1.2.5-4.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2013-6591/telepathy-idle-0.1.15-1.fc19 The following builds have been pushed to Fedora 19 updates-testing NFStest-1.0.2-0.fc19 audacious-3.4-0.2.beta1.fc19 audacious-plugins-3.4-0.4.beta1.fc19 bamf-0.3.6-2.fc19 dracut-027-39.git20130425.fc19 gnomint-1.2.1-8.fc19 lfsc-0.20120321-3.fc19 libhocr-0.10.17-14.fc19 libsvm-3.17-2.fc19 licq-1.7.0-7.fc19 mygui-3.2.0-5.fc19 nikto-2.1.5-6.fc19 open-vm-tools-9.2.3-1.fc19 pam-1.1.6-10.fc19 pony-0.4-7.fc19 prelink-0.4.9-1.fc19 python-keystoneclient-0.2.3-2.fc19 python-pillow-2.0.0-7.gitd1c6db8.fc19 python-tw2-jqplugins-jqplot-2.0.3-1.fc19 python-tw2-slideymenu-2.2-1.fc19 skyviewer-1.0.0-12.fc19 springlobby-0.169-3.fc19 tex-musixtex-0.114-13.fc19 transmission-2.77-3.fc19 wesnoth-1.10.6-3.fc19 wpa_supplicant-1.1-1.fc19 xorg-x11-drv-synaptics-1.7.0-2.fc19 zanata-api-2.2.0-6.fc19 Details about builds: ================================================================================ NFStest-1.0.2-0.fc19 (FEDORA-2013-6676) NFS Testing Tool -------------------------------------------------------------------------------- Update Information: Updated to latest upstream release -------------------------------------------------------------------------------- ================================================================================ audacious-3.4-0.2.beta1.fc19 (FEDORA-2013-6497) Advanced audio player -------------------------------------------------------------------------------- Update Information: * Update from 3.4-alpha1 to 3.4-beta1: http://audacious-media-player.org/news/21-testing-release-audacious-3-4-beta1 * Reintroduce the SID player plugin in the audacious-plugins-exotic package (it's based on libsidplayfp and may require non-free Kernal and Basic ROM images to handle some .sid files). -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 3.4-0.2.beta1 - Apply patch to restore play-stop-play resume from beginning behaviour. * Mon Apr 22 2013 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 3.4-0.1.beta1 - Generic plugin API/ABI bumped to 43, still compatible with 3.3.x. - Update to 3.4-beta1. - BR autoconf automake gettext-devel and run autoreconf -f -I m4 for aarch64 updates (#925050). -------------------------------------------------------------------------------- ================================================================================ audacious-plugins-3.4-0.4.beta1.fc19 (FEDORA-2013-6497) Plugins for the Audacious audio player -------------------------------------------------------------------------------- Update Information: * Update from 3.4-alpha1 to 3.4-beta1: http://audacious-media-player.org/news/21-testing-release-audacious-3-4-beta1 * Reintroduce the SID player plugin in the audacious-plugins-exotic package (it's based on libsidplayfp and may require non-free Kernal and Basic ROM images to handle some .sid files). -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 23 2013 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 3.4-0.4.beta1 - BR libsidplayfp-devel and include SID music player plug-in in the audacious-plugins-exotic subpackage. This sid.so plugin based on libsidplayfp 1.0.x is extensible with the original (albeit non-free and therefore not included) Kernal and Basic ROM image files to make it handle all files from the leading SID music collection. * Mon Apr 22 2013 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 3.4-0.3.beta1 - BR audacious-devel 3.4-beta1 for aud_drct_play_plause(). * Mon Apr 22 2013 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 3.4-0.2.beta1 - Scrobbler2 plugin replaces scrobbler. - Update to 3.4-beta1. - BR autoconf automake and run autoreconf -f -I m4 for aarch64 updates (#925051). -------------------------------------------------------------------------------- ================================================================================ bamf-0.3.6-2.fc19 (FEDORA-2013-6670) Application matching framework -------------------------------------------------------------------------------- Update Information: Revive bamf. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 0.3.6-2 - fix build * Sat Apr 20 2013 Michel Salim <salimma@xxxxxxxxxxxxxxxxx> - 0.3.6-1 - Update to 0.3.6 -------------------------------------------------------------------------------- ================================================================================ dracut-027-39.git20130425.fc19 (FEDORA-2013-6673) Initramfs generator using udev -------------------------------------------------------------------------------- Update Information: * fix shutdown, if /dev/console is not writeable * fixed fips mode -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Harald Hoyer <harald@xxxxxxxxxx> 027-39.git20130425 - fix shutdown, if /dev/console is not writeable - fixed fips mode Resolves: rhbz#956521 -------------------------------------------------------------------------------- References: [ 1 ] Bug #956521 - hmac check fail in initramfs https://bugzilla.redhat.com/show_bug.cgi?id=956521 -------------------------------------------------------------------------------- ================================================================================ gnomint-1.2.1-8.fc19 (FEDORA-2013-6692) Graphical x509 Certification Authority management tool -------------------------------------------------------------------------------- Update Information: Fix build. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.2.1-8 - get this building again * Sun Mar 24 2013 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 1.2.1-7 - rebuild (gnutls) * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ lfsc-0.20120321-3.fc19 (FEDORA-2013-6250) SMT proof checker -------------------------------------------------------------------------------- Update Information: This package contains an SMT proof checker, for use with SMT solvers such as CVC4. -------------------------------------------------------------------------------- References: [ 1 ] Bug #903428 - Review Request: lfsc - SMT proof checker https://bugzilla.redhat.com/show_bug.cgi?id=903428 [ 2 ] Bug #956160 - lsfc enters end-less loop when running checks on big-endian arches https://bugzilla.redhat.com/show_bug.cgi?id=956160 -------------------------------------------------------------------------------- ================================================================================ libhocr-0.10.17-14.fc19 (FEDORA-2013-6683) A Hebrew optical character recognition library -------------------------------------------------------------------------------- Update Information: Drop desktop vendor tag. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 0.10.17-14 - Drop desktop vendor tag. -------------------------------------------------------------------------------- ================================================================================ libsvm-3.17-2.fc19 (FEDORA-2013-6674) A Library for Support Vector Machines -------------------------------------------------------------------------------- Update Information: Drop desktop vendor tag. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 3.17-2 - Drop desktop vendor tag. -------------------------------------------------------------------------------- ================================================================================ licq-1.7.0-7.fc19 (FEDORA-2013-6678) Licq - A graphical ICQ Client for Linux -------------------------------------------------------------------------------- Update Information: Drop desktop vendor tag. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 1.7.0-7 - Drop desktop vendor tag. -------------------------------------------------------------------------------- ================================================================================ mygui-3.2.0-5.fc19 (FEDORA-2013-6690) Fast, simple and flexible GUI library for Ogre -------------------------------------------------------------------------------- Update Information: Rebuild to include libCommon.so to resolve dep issues. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 3.2.0-5 - rebuild to include libCommon -------------------------------------------------------------------------------- ================================================================================ nikto-2.1.5-6.fc19 (FEDORA-2013-6671) Web server scanner -------------------------------------------------------------------------------- Update Information: Fix license tag. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1:2.1.5-6 - treat nikto database files as content, update license -------------------------------------------------------------------------------- References: [ 1 ] Bug #888216 - nikto database is non free (?) content. https://bugzilla.redhat.com/show_bug.cgi?id=888216 -------------------------------------------------------------------------------- ================================================================================ open-vm-tools-9.2.3-1.fc19 (FEDORA-2013-6682) Open VMware Tools for virtual machines hosted on VMware -------------------------------------------------------------------------------- Update Information: New upstream version 9.2.3. Resubmitting the update with a fix for ldconfig dependency. Added open-vm-tools package for virtual machines hosted on VMware. -------------------------------------------------------------------------------- References: [ 1 ] Bug #905255 - Review Request: open-vm-tools - Open Virtual Machine Tools https://bugzilla.redhat.com/show_bug.cgi?id=905255 -------------------------------------------------------------------------------- ================================================================================ pam-1.1.6-10.fc19 (FEDORA-2013-6680) An extensible library which provides authentication for applications -------------------------------------------------------------------------------- Update Information: Minor bugfix update. -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 24 2013 Tomáš Mráz <tmraz@xxxxxxxxxx> 1.1.6-10 - pam_unix: do not fail with bad ld.so.preload -------------------------------------------------------------------------------- ================================================================================ pony-0.4-7.fc19 (FEDORA-2013-6677) An image manager -------------------------------------------------------------------------------- Update Information: Update dependencies for new python-pillow f19 feature -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 0.4-7 - Add dependency python-pillow-qt (f19+, #953967) - use %find_lang --with-kde -------------------------------------------------------------------------------- References: [ 1 ] Bug #953967 - Add dependency python-pillow-qt https://bugzilla.redhat.com/show_bug.cgi?id=953967 -------------------------------------------------------------------------------- ================================================================================ prelink-0.4.9-1.fc19 (FEDORA-2013-6672) An ELF prelinking utility -------------------------------------------------------------------------------- Update Information: s390{,x} ifunc support. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Jakub Jelinek <jakub@xxxxxxxxxx> 0.4.9-1 - add support for STT_GNU_IFUNC and R_390_IRELATIVE on s390/s390x * Thu Apr 18 2013 Jakub Jelinek <jakub@xxxxxxxxxx> 0.4.8-1 - fix also the reloc{4,5,8,9}.sh testcases (#927818) * Thu Apr 18 2013 Jakub Jelinek <jakub@xxxxxxxxxx> 0.4.7-1 - adjust testsuite not to need --add-needed, and work even with latest ld (#927818) * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.4.6-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-keystoneclient-0.2.3-2.fc19 (FEDORA-2013-6693) Client library for OpenStack Identity API -------------------------------------------------------------------------------- Update Information: - Add missing dependencies -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 4 2013 Jakub Ruzicka <jruzicka@xxxxxxxxxx> 0.2.3-2 - Update requires. (#948244) -------------------------------------------------------------------------------- References: [ 1 ] Bug #948244 - Missing deps in python-keystoneclient https://bugzilla.redhat.com/show_bug.cgi?id=948244 -------------------------------------------------------------------------------- ================================================================================ python-pillow-2.0.0-7.gitd1c6db8.fc19 (FEDORA-2013-6675) Python image processing library -------------------------------------------------------------------------------- Update Information: * Remove Obsoletes because we don't want to drag in qt when people upgrade python-pillow. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Toshio Kuratomi <toshio@xxxxxxxxxxxxxxxxx> - 2.0.0-7.gitd1c6db8 - Remove Obsoletes in the python-pillow-qt subpackage. Obsoletes isn't appropriate since qt support didn't exist in the previous python-pillow package so there's no reason to drag in python-pillow-qt when updating python-pillow. -------------------------------------------------------------------------------- ================================================================================ python-tw2-jqplugins-jqplot-2.0.3-1.fc19 (FEDORA-2013-6685) Toscawidgets2 wrapper for the jqPlot jQuery plugin -------------------------------------------------------------------------------- Update Information: Initial import (#916431). -------------------------------------------------------------------------------- References: [ 1 ] Bug #916431 - Review Request: python-tw2-jqplugins-jqplot - Toscawidgets2 wrapper for the jqPlot jQuery plugin https://bugzilla.redhat.com/show_bug.cgi?id=916431 -------------------------------------------------------------------------------- ================================================================================ python-tw2-slideymenu-2.2-1.fc19 (FEDORA-2013-6686) Toscawidgets2 wrapper for a "slidey" menu -------------------------------------------------------------------------------- Update Information: Initial import (#916436). -------------------------------------------------------------------------------- References: [ 1 ] Bug #916436 - Review Request: python-narcissus-app - WSGI components for Narcissus, realtime log visualization https://bugzilla.redhat.com/show_bug.cgi?id=916436 -------------------------------------------------------------------------------- ================================================================================ skyviewer-1.0.0-12.fc19 (FEDORA-2013-6694) Program to display HEALPix-based skymaps in FITS files -------------------------------------------------------------------------------- Update Information: Rebuild for broken deps. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.0.0-12 - rebuild for new cfitsio - fix ftbfs, link to libGLU * Fri Feb 15 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.0-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Tue Feb 28 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.0-9 - Rebuilt for c++ ABI breakage -------------------------------------------------------------------------------- ================================================================================ springlobby-0.169-3.fc19 (FEDORA-2013-6679) A lobby client for the spring RTS game engine -------------------------------------------------------------------------------- Update Information: - Fix package breakage due to %libdir pulling debug symbols. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Gilboa Davara <gilboad [AT] gmail [DOT] com> - 0.169-3 - Fix package breakage due to %libdir pulling debug symbols. -------------------------------------------------------------------------------- ================================================================================ tex-musixtex-0.114-13.fc19 (FEDORA-2013-6681) Sophisticated music typesetting -------------------------------------------------------------------------------- Update Information: Fix legacy deps. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 0.114-13 - fix legacy dependencies * Fri Feb 15 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.114-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ transmission-2.77-3.fc19 (FEDORA-2013-6691) A lightweight GTK+ BitTorrent client -------------------------------------------------------------------------------- Update Information: Security hardened build. refer to https://fedoraproject.org/wiki/Packaging:Guidelines#PIE for more details. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 22 2013 Rahul Sundaram <sundaram@xxxxxxxxxxxxxxxxx> - 2.77-3 - use hardened build macro and enable fPIC for Qt build. resolves rhbz#955268 * Tue Apr 2 2013 Rahul Sundaram <sundaram@xxxxxxxxxxxxxxxxx> - 2.77-2 - fix use of systemd macros to apply to daemon subpackage only -------------------------------------------------------------------------------- References: [ 1 ] Bug #955268 - transmission package should be built with PIE flags https://bugzilla.redhat.com/show_bug.cgi?id=955268 -------------------------------------------------------------------------------- ================================================================================ wesnoth-1.10.6-3.fc19 (FEDORA-2013-6688) Turn-based strategy game with a fantasy theme -------------------------------------------------------------------------------- Update Information: Add PIE to build. Crash fix. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 1.10.6-3 - Add PIE, BZ 955196. * Wed Apr 24 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 1.10.6-2 - Fix for crash, BZ 953327. -------------------------------------------------------------------------------- References: [ 1 ] Bug #955196 - wesnoth package should be built with PIE flags https://bugzilla.redhat.com/show_bug.cgi?id=955196 [ 2 ] Bug #953327 - Wesnoth crashes on startup https://bugzilla.redhat.com/show_bug.cgi?id=953327 -------------------------------------------------------------------------------- ================================================================================ wpa_supplicant-1.1-1.fc19 (FEDORA-2013-6687) WPA/WPA2/IEEE 802.1X Supplicant -------------------------------------------------------------------------------- Update Information: This update upgrades to the latest upstream 1.1 stable version, and makes roaming due to signal strength less aggressive, which enhances connection stability in large wifi deployments. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 1 2013 Dan Williams <dcbw@xxxxxxxxxx> - 1:1.1-1 - Update to 1.1 - Be less aggressive when roaming due to signal strength changes -------------------------------------------------------------------------------- ================================================================================ xorg-x11-drv-synaptics-1.7.0-2.fc19 (FEDORA-2013-6689) Xorg X11 Synaptics touchpad input driver -------------------------------------------------------------------------------- Update Information: Fix stack corruption for apple magic trackpads -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Peter Hutterer <peter.hutterer@xxxxxxxxxx> 1.7.0-2 - Fix stack smash on magic trackpad (#952221) -------------------------------------------------------------------------------- References: [ 1 ] Bug #952221 - Apple Bluetooth "Magic" Trackpad - two-finger click kills kde session https://bugzilla.redhat.com/show_bug.cgi?id=952221 -------------------------------------------------------------------------------- ================================================================================ zanata-api-2.2.0-6.fc19 (FEDORA-2013-6684) Zanata API modules -------------------------------------------------------------------------------- Update Information: Zanata API modules. Shared between client and server. -------------------------------------------------------------------------------- References: [ 1 ] Bug #924513 - Review Request: zanata-api - Zanata API modules https://bugzilla.redhat.com/show_bug.cgi?id=924513 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test