The following Fedora 19 Security updates need testing: Age URL 23 https://admin.fedoraproject.org/updates/FEDORA-2013-4753/microcode_ctl-2.0-3.1.fc19 15 https://admin.fedoraproject.org/updates/FEDORA-2013-5411/php-geshi-1.0.8.11-3.fc19 14 https://admin.fedoraproject.org/updates/FEDORA-2013-5530/plexus-archiver-2.3-1.fc19 10 https://admin.fedoraproject.org/updates/FEDORA-2013-5801/mantis-1.2.15-1.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2013-5883/xorg-x11-server-1.14.0-6.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-6378/tftp-5.2-9.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-6366/arpwatch-2.1a15-28.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-6390/owncloud-4.5.10-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-6481/miredo-1.2.5-4.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2013-6591/telepathy-idle-0.1.15-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-6701/python-pip-1.3.1-1.fc19 The following builds have been pushed to Fedora 19 updates-testing GConf2-3.2.6-6.fc19 R-abind-1.4.0-6.fc19 R-multcomp-1.2.17-1.fc19 arc-gui-clients-0.4.3-2.fc19 coccinelle-1.0.0-0.rc17.1.fc19 dmidecode-2.12-2.fc19 gdb-7.6-24.fc19 groonga-3.0.3-1.fc19 ibus-m17n-1.3.4-8.fc19 ike-2.2.0-4.fc19 lcms2-2.4-6.fc19 lightdm-1.6.0-4.fc19 lincity-ng-2.0-11.fc19 linpsk-1.1-9.fc19 linsmith-0.99.24-3.fc19 listen-0.6.5-10.fc19 liveusb-creator-3.11.8-2.fc19 lohit-oriya-fonts-2.5.3-3.fc19 perl-Spellunker-0.2.3-1.fc19 python-pip-1.3.1-1.fc19 python-simplevisor-0.8-1.fc19 snapper-0.1.3-1.20130426git35ff4ec.fc19 system-config-language-1.3.5-24.fc19 tomoe-gtk-0.6.0-18.fc19 Details about builds: ================================================================================ GConf2-3.2.6-6.fc19 (FEDORA-2013-6699) A process-transparent configuration system -------------------------------------------------------------------------------- Update Information: This update makes upgrades for some packages work better without the user having to log out and back in. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Kalev Lember <kalevlember@xxxxxxxxx> 3.2.6-6 - Update the GConf2-gtk versioned obsoletes * Wed Apr 17 2013 Ray Strode <rstrode@xxxxxxxxxx> 3.2.6-5 - Make --makefile-install-rule work even in packages that don't use the macros * Mon Apr 15 2013 Ray Strode <rstrode@xxxxxxxxxx> 3.2.6-4 - Make pkill -HUP -f gconfd-2 work again - Make --makefile-install-rull less noisy * Fri Apr 12 2013 Ray Strode <rstrode@xxxxxxxxxx> 3.2.6-3 - Update GConf upgrade macros (Patch from Michael Schwendt) Resolves: #920615 -------------------------------------------------------------------------------- References: [ 1 ] Bug #915046 - Newly installed schema values are not visible until gconfd-2 is restarted https://bugzilla.redhat.com/show_bug.cgi?id=915046 -------------------------------------------------------------------------------- ================================================================================ R-abind-1.4.0-6.fc19 (FEDORA-2013-6708) Combine multi-dimensional arrays -------------------------------------------------------------------------------- Update Information: Drop unnecessary scriptlets. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.4.0-6 - drop unnecessary scriptlets -------------------------------------------------------------------------------- References: [ 1 ] Bug #956835 - R-make-search-index.sh needs to be updated for version 3 https://bugzilla.redhat.com/show_bug.cgi?id=956835 -------------------------------------------------------------------------------- ================================================================================ R-multcomp-1.2.17-1.fc19 (FEDORA-2013-6708) Simultaneous inference for general linear hypotheses R Package -------------------------------------------------------------------------------- Update Information: Drop unnecessary scriptlets. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 11 2013 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.2.17-1 - update to 1.2-17 -------------------------------------------------------------------------------- References: [ 1 ] Bug #956835 - R-make-search-index.sh needs to be updated for version 3 https://bugzilla.redhat.com/show_bug.cgi?id=956835 -------------------------------------------------------------------------------- ================================================================================ arc-gui-clients-0.4.3-2.fc19 (FEDORA-2013-6715) ARC Graphical Clients -------------------------------------------------------------------------------- Update Information: Provides graphical clients to the NorduGrid ARC middleware. -------------------------------------------------------------------------------- References: [ 1 ] Bug #851267 - Review Request: arc-gui-clients - ARC Graphical Clients https://bugzilla.redhat.com/show_bug.cgi?id=851267 -------------------------------------------------------------------------------- ================================================================================ coccinelle-1.0.0-0.rc17.1.fc19 (FEDORA-2013-6704) Semantic patching for Linux (spatch) -------------------------------------------------------------------------------- Update Information: New upstream version 1.0.0-rc17. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Richard W.M. Jones <rjones@xxxxxxxxxx> - 1.0.0-0.rc17.1 - New upstream version 1.0.0-rc17. -------------------------------------------------------------------------------- References: [ 1 ] Bug #957169 - Junk "left" and "right" outputs from spatch https://bugzilla.redhat.com/show_bug.cgi?id=957169 -------------------------------------------------------------------------------- ================================================================================ dmidecode-2.12-2.fc19 (FEDORA-2013-6709) Tool to analyse BIOS DMI data -------------------------------------------------------------------------------- Update Information: minor code fix -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Anton Arapov <anton@xxxxxxxxxx> - 1:2.12-2 - Fixup, so that it actually read SMBIOS 2.8.0 table. * Wed Apr 17 2013 Anton Arapov <anton@xxxxxxxxxx> - 1:2.12-1 - Update to upstream 2.12 release. -------------------------------------------------------------------------------- ================================================================================ gdb-7.6-24.fc19 (FEDORA-2013-6698) A GNU source-level debugger for C, C++, Fortran, Go and other languages -------------------------------------------------------------------------------- Update Information: Formal update for the final 7.6 number (+some fixes). Fix build of man pages. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jan Kratochvil <jan.kratochvil@xxxxxxxxxx> - 7.6-24.fc19 - Rebase to FSF GDB 7.6. * Wed Apr 24 2013 Jan Kratochvil <jan.kratochvil@xxxxxxxxxx> - 7.5.91.20130423-23.fc19 - Fix man page BuildRequires (for BZ 881892). * Tue Apr 23 2013 Jan Kratochvil <jan.kratochvil@xxxxxxxxxx> - 7.5.91.20130423-22.fc19 - [spec] Fix virtual bundles after GDB has been branched. * Tue Apr 23 2013 Jan Kratochvil <jan.kratochvil@xxxxxxxxxx> - 7.5.91.20130423-21.fc19 - Rebase to FSF GDB 7.5.91.20130423 (pre-7.6 snapshot). * Mon Apr 22 2013 Jan Kratochvil <jan.kratochvil@xxxxxxxxxx> - 7.5.91.20130407-20.fc19 - [SCL] Skip deprecated .gdb_index warning for Red Hat built files (BZ 953585). * Mon Apr 22 2013 Sergio Durigan Junior <sergiodj@xxxxxxxxxx> - 7.5.91.20130407-19.fc19 - [RHEL-6] Regression test for RH BZ 947564. -------------------------------------------------------------------------------- ================================================================================ groonga-3.0.3-1.fc19 (FEDORA-2013-6706) An Embeddable Fulltext Search Engine -------------------------------------------------------------------------------- Update Information: Update to 3.0.3. See changelog at http://groonga.org/docs/news.html#release-3-0-3-2013-04-29 -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 29 2013 HAYASHI Kentaro <hayashi@xxxxxxxxxxxxxx> - 3.0.3-1 - new upstream release. - enable the PIE compiler flags. -------------------------------------------------------------------------------- ================================================================================ ibus-m17n-1.3.4-8.fc19 (FEDORA-2013-6705) The M17N engine for IBus platform -------------------------------------------------------------------------------- Update Information: update to the latest upstream master; remove unnecessary patches and drop osk feature -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Daiki Ueno <deno@xxxxxxxxxx> - 1.3.4-8 - Update ibus-m17n-HEAD.patch to the latest upstream master - Remove unnecessary and not upstreamable patches - Use gtk3 always - Fix bug 912592 - ibus-m17n should use default keyboard in most cases -------------------------------------------------------------------------------- References: [ 1 ] Bug #912592 - ibus-m17n should use default keyboard in most cases https://bugzilla.redhat.com/show_bug.cgi?id=912592 -------------------------------------------------------------------------------- ================================================================================ ike-2.2.0-4.fc19 (FEDORA-2013-6703) Shrew Soft VPN Client For Linux -------------------------------------------------------------------------------- Update Information: update to latest upstream version (2.2.0) fix systemd .service file. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Marcel Wysocki <maci@xxxxxxxxxx> - 2.2.0-4 - fix bug that occurs when no pid is given at the command line * Wed Apr 24 2013 root - 2.2.0-3 - fix logrotate script * Wed Apr 24 2013 Marcel Wysocki <maci@xxxxxxxxxx> - 2.2.0-2 - fix .service file * Wed Apr 24 2013 Marcel Wysocki <maci@xxxxxxxxxx> - 2.2.0-1 - Update to 2.2.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #904782 - iked service dies immediately after starting https://bugzilla.redhat.com/show_bug.cgi?id=904782 -------------------------------------------------------------------------------- ================================================================================ lcms2-2.4-6.fc19 (FEDORA-2013-6712) Color Management Engine -------------------------------------------------------------------------------- Update Information: This update fixes a threading issue that could lead to e.g. a crash in ghostscript. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Tim Waugh <twaugh@xxxxxxxxxx> - 2.4-6 - Applied upstream fixes for threading (bug #951984). -------------------------------------------------------------------------------- References: [ 1 ] Bug #951984 - [abrt] ghostscript-9.07-2.fc19: gs_lcms2_malloc: Process /usr/bin/gs was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=951984 -------------------------------------------------------------------------------- ================================================================================ lightdm-1.6.0-4.fc19 (FEDORA-2013-6713) Lightweight Display Manager -------------------------------------------------------------------------------- Update Information: Revert PIE-enabled build that crashes-n-burns -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.6.0-4 - revert building PIE to avoid crashes (#956868) * Thu Apr 25 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.6.0-3 - lightdm package should be built with PIE flags (#955147) - apply systemd patch unconditionally -------------------------------------------------------------------------------- References: [ 1 ] Bug #956868 - [abrt] lightdm-1.6.0-3.fc19: config_get_boolean: Process /usr/sbin/lightdm was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=956868 -------------------------------------------------------------------------------- ================================================================================ lincity-ng-2.0-11.fc19 (FEDORA-2013-6707) City Simulation Game -------------------------------------------------------------------------------- Update Information: Drop desktop vendor tag. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 2.0-11 - Drop desktop vendor tag. -------------------------------------------------------------------------------- ================================================================================ linpsk-1.1-9.fc19 (FEDORA-2013-6714) Psk31 and RTTY program for Linux -------------------------------------------------------------------------------- Update Information: Drop desktop vendor tag. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 1.1-9 - Drop desktop vendor tag. -------------------------------------------------------------------------------- ================================================================================ linsmith-0.99.24-3.fc19 (FEDORA-2013-6702) A Smith charting program -------------------------------------------------------------------------------- Update Information: Drop desktop vendor tag. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 0.99.24-3 - Drop desktop vendor tag. * Fri Apr 19 2013 Shakthi Kannan <shakthimaan [AT] fedoraproject dot org> - 0.99.24-2 - Use autoreconf -------------------------------------------------------------------------------- ================================================================================ listen-0.6.5-10.fc19 (FEDORA-2013-6711) A music manager and player for GNOME -------------------------------------------------------------------------------- Update Information: Drop desktop vendor tag. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 0.6.5-10 - Drop desktop vendor tag. -------------------------------------------------------------------------------- ================================================================================ liveusb-creator-3.11.8-2.fc19 (FEDORA-2013-6695) A liveusb creator -------------------------------------------------------------------------------- Update Information: Drop desktop vendor tag. - Get persistent overlays working with F18 - Handle devices without any free space - Fix another bug with non-ascii device labels - Handle integers in LiveUSBDialog.status - Don't display unnecessary warnings - Handle non-ascii mount paths - Limit the overlay size to 3999MB for FAT32 - More bugfixes to the maximum overlay size code - Change isolinux to syslinux in the grub.cfg - Always refer to the label LIVE instead of the device UUID - /EFI/boot/grub.conf has been renamed to /EFI/BOOT/grub.cfg - Apply a patch from ivanromanov to fix non-ascii file names - Enable the close button - Add f18 to our hardcoded release list - Add a button for refreshing the list of releases - Don't call sys.exit in our __init__ - Modernize our installer style and translate it appropriately - Get our translations working properly under Windows. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 3.11.8-2 - Drop desktop vendor tag. * Mon Apr 22 2013 Luke Macken <lmacken@xxxxxxxxxx> - 3.11.8-1 - Update to 3.11.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #842878 - Remove sys.exit(1) from liveusb/__init__.py https://bugzilla.redhat.com/show_bug.cgi?id=842878 [ 2 ] Bug #810112 - liveusb-creator-written LiveCDs are not UEFI bootable https://bugzilla.redhat.com/show_bug.cgi?id=810112 [ 3 ] Bug #820809 - [abrt] liveusb-creator-3.11.6-3.fc17: gui.py:431:status:TypeError: QTextEdit.append(QString): argument 1 has unexpected type 'int' https://bugzilla.redhat.com/show_bug.cgi?id=820809 [ 4 ] Bug #863064 - [abrt] liveusb-creator-3.11.7-1.fc17: gui.py:372:on_driveBox_currentIndexChanged:UnicodeEncodeError: 'ascii' codec can't encode character u'\xfd' in position 14: ordinal not in range(128) https://bugzilla.redhat.com/show_bug.cgi?id=863064 [ 5 ] Bug #908120 - Persistent storage on USB flash not mounted, changes don't persist https://bugzilla.redhat.com/show_bug.cgi?id=908120 -------------------------------------------------------------------------------- ================================================================================ lohit-oriya-fonts-2.5.3-3.fc19 (FEDORA-2013-6700) Free Oriya Font -------------------------------------------------------------------------------- Update Information: This is an update with resolving Oriya script rendering problems with Harfbuzz. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Pravin Satpute <psatpute@xxxxxxxxxx> - 2.5.3-3 - Resolved #923215: UTRRS 123 GSub combination and other ligature -------------------------------------------------------------------------------- References: [ 1 ] Bug #923215 - Odia rendering is broken while editing through firefox browser. https://bugzilla.redhat.com/show_bug.cgi?id=923215 -------------------------------------------------------------------------------- ================================================================================ perl-Spellunker-0.2.3-1.fc19 (FEDORA-2013-6716) Pure perl spelling checker implementation -------------------------------------------------------------------------------- Update Information: Pure perl spelling checker implementation, also usable as a library. -------------------------------------------------------------------------------- References: [ 1 ] Bug #956297 - Review Request: perl-Spellunker - Pure perl spelling checker implementation https://bugzilla.redhat.com/show_bug.cgi?id=956297 -------------------------------------------------------------------------------- ================================================================================ python-pip-1.3.1-1.fc19 (FEDORA-2013-6701) Pip installs packages. Python3 packages. An easy_install replacement -------------------------------------------------------------------------------- Update Information: 1.3.1, fix for CVE-2013-1888, insecure tempdir usage. Update of python-pip to 1.1 from upstream -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 1.3.1-1 - Update to 1.3.1, fix for CVE-2013-1888. -------------------------------------------------------------------------------- References: [ 1 ] Bug #923975 - python-pip: insecure temporary directory usage [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=923975 -------------------------------------------------------------------------------- ================================================================================ python-simplevisor-0.8-1.fc19 (FEDORA-2013-6710) Python simple daemons supervisor -------------------------------------------------------------------------------- Update Information: Updating to upstream version 0.8. Updating to latest upstream 0.7. Updating to latest upstream 0.7. Updating to latest upstream 0.7. Updating to latest upstream 0.7. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Massimo Paladin <Massimo.Paladin@xxxxxxxxx> - 0.8-1 - Updating to upstream 0.8. -------------------------------------------------------------------------------- ================================================================================ snapper-0.1.3-1.20130426git35ff4ec.fc19 (FEDORA-2013-5999) Tool for filesystem snapshot management -------------------------------------------------------------------------------- Update Information: Basically, this update adds support for extended attributes. See changelog -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Ondrej Kozina <okozina@xxxxxxxxxx> - 0.1.3-1.20130426git35ff4ec - fixed possible security vulnerability in extended attributes handling * Thu Apr 18 2013 Ondrej Kozina <okozina@xxxxxxxxxx> - 0.1.3-1.20130418git7ca81a2 - updatet to latest upstream version - add support to compare extended attributes ('xadiff' command) - add support to revert modificiations in file's extended attributes - patch: avoid useless build dependency on libattr-devel -------------------------------------------------------------------------------- ================================================================================ system-config-language-1.3.5-24.fc19 (FEDORA-2013-6696) A graphical interface for modifying the system language -------------------------------------------------------------------------------- Update Information: Add Interlingua to the local-list file and include Interlingua localization to the package Added kyrgyz language in s-c-l This is an update with improved string for zh_TW. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2013 Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-24 - Resolves:rh#956784 - Add Interlingua to the local-list file and include Interlingua localization to the package * Mon Apr 22 2013 Pravin Satpute <psatpute@xxxxxxxxxx> - 1.3.5-23 - Resolves: rh#638650 reverting changes for zh_TW * Mon Apr 22 2013 Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-22 - Resolves:rh#954124 - No kyrgyz language in s-c-l * Mon Apr 8 2013 Pravin Satpute <psatpute@xxxxxxxxxx> - 1.3.5-21 - Improved patch 638650 as per comments by reporter -------------------------------------------------------------------------------- References: [ 1 ] Bug #956784 - Add Interlingua to the local-list file and include Interlingua localization to the package https://bugzilla.redhat.com/show_bug.cgi?id=956784 [ 2 ] Bug #954124 - No kyrgyz language in mate https://bugzilla.redhat.com/show_bug.cgi?id=954124 [ 3 ] Bug #638650 - better localized name for zh_TW in locale-list https://bugzilla.redhat.com/show_bug.cgi?id=638650 -------------------------------------------------------------------------------- ================================================================================ tomoe-gtk-0.6.0-18.fc19 (FEDORA-2013-6697) Gtk library for tomoe for Japanese and Chinese handwritten input -------------------------------------------------------------------------------- Update Information: Fixed Bug 926646 - tomoe-gtk: Does not support aarch64 in f19 and rawhide -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 25 2013 Ding-Yi Chen - 0.6.0-18 - Fixed Bug 926646 - tomoe-gtk: Does not support aarch64 in f19 and rawhide -------------------------------------------------------------------------------- References: [ 1 ] Bug #926646 - tomoe-gtk: Does not support aarch64 in f19 and rawhide https://bugzilla.redhat.com/show_bug.cgi?id=926646 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
