The following Fedora 19 Security updates need testing: Age URL 52 https://admin.fedoraproject.org/updates/FEDORA-2013-5801/mantis-1.2.15-1.fc19 24 https://admin.fedoraproject.org/updates/FEDORA-2013-8116/clamav-0.97.8-1.fc19 22 https://admin.fedoraproject.org/updates/FEDORA-2013-8328/owncloud-4.5.11-1.fc19 14 https://admin.fedoraproject.org/updates/FEDORA-2013-9102/libXvMC-1.0.7-5.20130524gite9415ddef.fc19 10 https://admin.fedoraproject.org/updates/FEDORA-2013-9457/socat-1.7.2.2-1.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2013-9715/heat-jeos-9-1.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2013-9748/rubygem-passenger-3.0.21-1.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2013-9722/LibRaw-0.14.8-2.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2013-9827/livecd-tools-19.4-1.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2013-9829/nrpe-2.14-3.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2013-9918/perl-Dancer-1.3111-3.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-9981/subversion-1.7.10-1.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-9976/libFS-1.0.5-1.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-9986/xen-4.2.2-6.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-10020/community-mysql-5.5.31-7.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-10032/gallery3-3.0.8-1.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-10029/libguestfs-1.22.2-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-9984/bind-9.9.3-3.P1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2013-10206/php-5.5.0-0.8.RC3.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-10288/rrdtool-1.4.8-2.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-10354/perl-Module-Signature-0.73-1.fc19 The following builds have been pushed to Fedora 19 updates-testing NetworkManager-0.9.8.2-1.fc19 appliance-tools-007.0-1.fc19 blender-2.67b-1.fc19 calibre-0.9.34-1.fc19 dfu-util-0.7-1.fc19 dragonegg-3.3-0.3.rc3.fc19 eclipse-rse-3.5-0.4.rc3.fc19 fedora-arm-installer-1.1.1-8.fc19 gdk-pixbuf2-2.28.2-1.fc19 grubby-8.26-2.fc19 gssproxy-0.2.3-5.fc19 harfbuzz-0.9.18-2.fc19 hdapsd-20090401gita64b50c-1.fc19 langtable-0.0.5-1.fc19 latexila-2.8.2-1.fc19 lato-fonts-1.105-1.fc19 libguac-client-rdp-0.7.4-1.fc19 libguac-client-vnc-0.7.2-1.fc19 libqmi-1.4.0-1.fc19 libreoffice-4.1.0.0-7.beta2.fc19 mate-themes-1.6.1-1.fc19 network-manager-applet-0.9.8.2-1.fc19 nodejs-estraverse-1.1.1-1.fc19 nodejs-pubcontrol-0.3.2-1.fc19 nodejs-stack-trace-0.0.6-3.fc19 openstack-nova-2013.1.2-1.fc19 pacrunner-0.6-1.fc19 perl-Module-Signature-0.73-1.fc19 perl-Moo-1.002000-1.fc19 perl-local-lib-1.008010-1.fc19 perlbrew-0.64-1.fc19 phoronix-test-suite-4.6.1-1.fc19 php-Assetic-1.1.1-1.fc19 php-Raven-0.6.0-1.fc19 php-bartlett-PHP-CompatInfo-2.17.0-2.fc19 php-twig-Twig-1.13.1-1.fc19 phrel-1.0.2-1.fc19 printrun-0.0-24.20130123git71e5da0.fc19 python-rtslib-2.1.fb35-1.fc19 python-tahrir-api-0.1.8-1.fc19 setup-2.8.71-1.fc19 shim-0.3-2.fc19 system-config-printer-1.4.1-6.fc19 targetcli-2.1.fb26-1.fc19 vym-2.3.18-1.fc19 vzctl-4.3.1-3.fc19 webkitgtk-2.0.2-2.fc19 webkitgtk3-2.0.2-3.fc19 Details about builds: ================================================================================ NetworkManager-0.9.8.2-1.fc19 (FEDORA-2013-10357) Network connection manager and user applications -------------------------------------------------------------------------------- Update Information: This update fixes add support for systemd's new network-online target, fixes a crash when IPv6 configuration times out on WiFi networks, and fixes bridge/bond interfaces with static configuration waiting for slaves before completing. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Dan Williams <dcbw@xxxxxxxxxx> - 0.9.8.2-1 - Update to 0.9.8.2 release - core: fix crash when IPv6 times out on Wi-Fi (rh #970293) - Update for systemd network-online.target (rh #787314) - Add system service for the script dispatcher (rh #948433) -------------------------------------------------------------------------------- References: [ 1 ] Bug #970293 - Activates both wired and wireless devices https://bugzilla.redhat.com/show_bug.cgi?id=970293 [ 2 ] Bug #787314 - assorted issues with remote filesystem dependency tree https://bugzilla.redhat.com/show_bug.cgi?id=787314 [ 3 ] Bug #948433 - Please add systemd unit file for nm_dispatcher https://bugzilla.redhat.com/show_bug.cgi?id=948433 -------------------------------------------------------------------------------- ================================================================================ appliance-tools-007.0-1.fc19 (FEDORA-2013-10356) Tools for building Appliances -------------------------------------------------------------------------------- Update Information: - specify filesystem type when creating partitions extlinux fixes from mattdm dont use -F 32 when making vfat partition - compress qcow2 by default - make sure we dont destroy our newly created vfat partition - leave first mb free - write out kickstart file - correctly write out extlinux config - dont require --ondisk for partitions -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Dennis Gilmore <dennis@xxxxxxxx> - 007.0-1 - specify filesystem type when creating partitions - extlinux fixes from mattdm - dont use -F 32 when making vfat partition * Thu May 23 2013 Dennis Gilmore <dennis@xxxxxxxx> - 006.6-1 - really start at 1mb - compress qcow2 by default - make sure we dont destroy our newly created vfat partition * Wed May 22 2013 Dennis Gilmore <dennis@xxxxxxxx> - 006.5-2 - add patch to read vfat uuid earlier - leave first mb free * Sun May 19 2013 Dennis Gilmore <dennis@xxxxxxxx> - 006.5-1 - fix writing out kickstart file * Sat May 18 2013 Dennis Gilmore <dennis@xxxxxxxx> - 006.4-1 - write out kickstart file - correctly write out extlinux config - dont require --ondisk for partitions -------------------------------------------------------------------------------- ================================================================================ blender-2.67b-1.fc19 (FEDORA-2013-10290) 3D modeling, animation, rendering and post-production -------------------------------------------------------------------------------- Update Information: Fix a creash in blender. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Jochen Schmitt <Jochen herr-schmitt de> - 1:2.67b-1 - Minor upstream bugfix update * Mon Jun 3 2013 Jochen Schmitt <Jochen herr-schmitt de> - 1:2.67a-3 - Fix crash in blender/makerna/intern/rna_access.c (ä969043) -------------------------------------------------------------------------------- References: [ 1 ] Bug #969043 - AVC denials when using netns https://bugzilla.redhat.com/show_bug.cgi?id=969043 -------------------------------------------------------------------------------- ================================================================================ calibre-0.9.34-1.fc19 (FEDORA-2013-10336) E-book converter and library management -------------------------------------------------------------------------------- Update Information: Newest upstream release to collect up bugfixes and enhancements for F19. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Kevin Fenzi <kevin@xxxxxxxxx> 0.9.34-1 - Update to 0.9.34 * Fri May 31 2013 Kevin Fenzi <kevin@xxxxxxxxx> 0.9.33-1 - Update to 0.9.33 * Fri May 24 2013 Kevin Fenzi <kevin@xxxxxxxxx> 0.9.32-1 - Update to 0.9.32 -------------------------------------------------------------------------------- ================================================================================ dfu-util-0.7-1.fc19 (FEDORA-2013-10375) USB Device Firmware Upgrade tool -------------------------------------------------------------------------------- Update Information: Update to latest upstream. Adds TI/Luminary Stellaris device support and improves ST DfuSe support. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Eric Smith <eric@xxxxxxxxxxxx> - 0.7-1 - Latest 0.7 upstream release -------------------------------------------------------------------------------- ================================================================================ dragonegg-3.3-0.3.rc3.fc19 (FEDORA-2013-10370) GCC plugin to use LLVM optimizers and code generators -------------------------------------------------------------------------------- Update Information: Update to latest upstream. Update to upstream 3.3rc2 to get support for GCC 4.8. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Eric Smith <eric@xxxxxxxxxxxx> - 3.3-0.3.rc3 - Updated to latest upstream. * Tue Jun 4 2013 Eric Smith <brouhaha@xxxxxxxxxxxxxxxxx> - 3.3-0.2.rc2 - Rebuild for gcc-4.8.1-1.fc20. * Mon Jun 3 2013 Eric Smith <eric@xxxxxxxxxxxx> - 3.3-0.1.rc2 - Updated to latest upstream. * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.1-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #913944 - dragonegg: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=913944 -------------------------------------------------------------------------------- ================================================================================ eclipse-rse-3.5-0.4.rc3.fc19 (FEDORA-2013-10360) Eclipse Remote System Explorer -------------------------------------------------------------------------------- Update Information: Update to Kepler RC3. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Alexander Kurtakov <akurtako@xxxxxxxxxx> 3.5-0.4.rc3 - Update to Kepler RC3. -------------------------------------------------------------------------------- ================================================================================ fedora-arm-installer-1.1.1-8.fc19 (FEDORA-2013-10361) Writes binary image files to any specified block device -------------------------------------------------------------------------------- Update Information: Updated the installer to use /var/tmp for temporary storage due to large image file sizes -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Jon Chiappetta <jonc_mailbox@xxxxxxxx> - 1.1.1-8 - Changed the tempfile module dir location to var -------------------------------------------------------------------------------- ================================================================================ gdk-pixbuf2-2.28.2-1.fc19 (FEDORA-2013-10373) An image loading library -------------------------------------------------------------------------------- Update Information: This update fixes a problem with error handling in gdk_pixbuf_animation_new_from_file. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Matthias Clasen <mclasen@xxxxxxxxxx> - 2.28.2-1 - Update to 2.28.2 -------------------------------------------------------------------------------- ================================================================================ grubby-8.26-2.fc19 (FEDORA-2013-10348) Command line tool for updating bootloader configs -------------------------------------------------------------------------------- Update Information: update a extlinux.conf file on arm if it exists. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Dennis Gilmore <dennis@xxxxxxxx> - 8.26-2 - add patch to update extlinux.conf file on arm if it exists * Fri May 10 2013 Peter Jones <pjones@xxxxxxxxxx> - 8.26-1 - Conditionally call arm-boot-config's boot.scr generator if available Resolves: rhbz#952428 * Tue Apr 9 2013 Peter Jones <pjones@xxxxxxxxxx> - 8.25-1 - Error instead of segfaulting if we can't find any working config Resolves: rhbz#912873 Resolves: rhbz#751608 -------------------------------------------------------------------------------- ================================================================================ gssproxy-0.2.3-5.fc19 (FEDORA-2013-10340) GSSAPI Proxy -------------------------------------------------------------------------------- Update Information: New upstream release 0.2.3. -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 6 2013 Guenther Deschner <gdeschner@xxxxxxxxxx> 0.2.3-5 - New upstream release * Fri May 31 2013 Guenther Deschner <gdeschner@xxxxxxxxxx> 0.2.2-5 - Require libverto-tevent to make sure libverto initialization succeeds -------------------------------------------------------------------------------- ================================================================================ harfbuzz-0.9.18-2.fc19 (FEDORA-2013-10363) Text shaping library -------------------------------------------------------------------------------- Update Information: harfbuzz 0.9.18 release that splits harfbuzz-icu into a separate library, and rebuilds of affected packages. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Parag Nemade <pnemade AT redhat DOT com> - 0.9.18-2 - Resolves:rh#971795:Merge -icu-devel subpackage into -devel subpackage * Wed Jun 5 2013 Parag Nemade <pnemade AT redhat DOT com> - 0.9.18-1 - Update to 0.9.18 upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #971795 - Handling the harfbuzz / harfbuzz-icu split https://bugzilla.redhat.com/show_bug.cgi?id=971795 [ 2 ] Bug #971880 - Harfbuzz 0.9.18-1 causes LibreOffice to crash https://bugzilla.redhat.com/show_bug.cgi?id=971880 -------------------------------------------------------------------------------- ================================================================================ hdapsd-20090401gita64b50c-1.fc19 (FEDORA-2013-10347) Protects hard drives by parking head when fall is detected -------------------------------------------------------------------------------- Update Information: This update makes startup logic a bit smarter – SSD drives are not protected by default -------------------------------------------------------------------------------- ChangeLog: * Tue May 28 2013 Tomasz Torcz <ttorcz@xxxxxxxxxxxxxxxxx> - 20090401gita64b50c-1 - package upstream snapshot: - use upstream systemd units and udev rules - drop sysconfig file -------------------------------------------------------------------------------- ================================================================================ langtable-0.0.5-1.fc19 (FEDORA-2013-10355) Guessing reasonable defaults for locale, keyboard layout, territory, and language. -------------------------------------------------------------------------------- Update Information: Support reading gzipped xml files, accept script names as used by glibc locales as well, set ASCII support to “True” for cz and sk keyboard layouts -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Mike FABIAN <mfabian@xxxxxxxxxx> - 0.0.5-1 - Update to 0.0.5 - Accept script names as used by glibc locales as well - Support reading gzipped xml files - Set ASCII support to “True” for cz and sk keyboard layouts -------------------------------------------------------------------------------- ================================================================================ latexila-2.8.2-1.fc19 (FEDORA-2013-10335) Integrated LaTeX Environment for the GNOME desktop -------------------------------------------------------------------------------- Update Information: latexila 2.8.2 release with minor bug fixes. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Kalev Lember <kalevlember@xxxxxxxxx> - 2.8.2-1 - Update to 2.8.2 -------------------------------------------------------------------------------- ================================================================================ lato-fonts-1.105-1.fc19 (FEDORA-2013-10342) A sanserif typeface family -------------------------------------------------------------------------------- Update Information: # Version 1.105 (2013-06-04) Created separate TTF and OTF versions. The TTF version is autohinted using ttfautohint 0.95. Changed naming for Microsoft Office 2011 for Mac -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 6 2013 Mohamed El Morabity <melmorabity@xxxxxxxxxxxxxxxxx> - 1.105-1 - Update to 1.105 -------------------------------------------------------------------------------- ================================================================================ libguac-client-rdp-0.7.4-1.fc19 (FEDORA-2013-10358) RDP support for guacd -------------------------------------------------------------------------------- Update Information: Upstream bugfixes to Guacamole RDP and VNC plugins. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Simone Caronni <negativo17@xxxxxxxxx> - 0.7.4-1 - Update to 0.7.4. -------------------------------------------------------------------------------- ================================================================================ libguac-client-vnc-0.7.2-1.fc19 (FEDORA-2013-10358) VNC support for guacd -------------------------------------------------------------------------------- Update Information: Upstream bugfixes to Guacamole RDP and VNC plugins. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Simone Caronni <negativo17@xxxxxxxxx> - 0.7.2-1 - Update to 0.7.2. -------------------------------------------------------------------------------- ================================================================================ libqmi-1.4.0-1.fc19 (FEDORA-2013-10352) Support library to use the Qualcomm MSM Interface (QMI) protocol -------------------------------------------------------------------------------- Update Information: This update fixes issues on Big Endian architectures. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ libreoffice-4.1.0.0-7.beta2.fc19 (FEDORA-2013-10363) Free Software Productivity Suite -------------------------------------------------------------------------------- Update Information: harfbuzz 0.9.18 release that splits harfbuzz-icu into a separate library, and rebuilds of affected packages. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 David Tardon <dtardon@xxxxxxxxxx> - 1:4.1.0.0-7.beta2 - Resolves: rhbz#971230 Use BR: harfbuzz-icu-devel * Wed Jun 5 2013 David Tardon <dtardon@xxxxxxxxxx> - 1:4.1.0.0-7.beta1 - 4.1.0 beta2 * Wed Jun 5 2013 Caolán McNamara <caolanm@xxxxxxxxxx> - 1:4.1.0.0-6.beta1 - Related: rhbz#968892 discard impossible languages for Oriya script * Tue Jun 4 2013 Caolán McNamara <caolanm@xxxxxxxxxx> - 1:4.1.0.0-5.beta1 - Resolves: rhbz#968892 block entire grapheme together for glyph fallback - Related: rhbz#968892 discard impossible languages for glyph fallback * Fri May 31 2013 Caolán McNamara <caolanm@xxxxxxxxxx> - 1:4.1.0.0-4.beta1 - Resolves: rhbz#968976 fix dropdown list autosizing * Thu May 30 2013 David Tardon <dtardon@xxxxxxxxxx> - 1:4.1.0.0-3.beta1 - build fix for s390 -------------------------------------------------------------------------------- References: [ 1 ] Bug #971795 - Handling the harfbuzz / harfbuzz-icu split https://bugzilla.redhat.com/show_bug.cgi?id=971795 [ 2 ] Bug #971880 - Harfbuzz 0.9.18-1 causes LibreOffice to crash https://bugzilla.redhat.com/show_bug.cgi?id=971880 -------------------------------------------------------------------------------- ================================================================================ mate-themes-1.6.1-1.fc19 (FEDORA-2013-10359) MATE Desktop themes -------------------------------------------------------------------------------- Update Information: - Update to latest 1.6.1 stable release - removal of aldabra theme, fix #907565 -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1.6.1-1 - Update to latest 1.6.1 stable release - removal of aldabra theme, fix #907565 -------------------------------------------------------------------------------- References: [ 1 ] Bug #907565 - Mate-themes conflicts with adwaita-gtk3-theme, gnome-themes-standard, aldabra-theme-gnome https://bugzilla.redhat.com/show_bug.cgi?id=907565 -------------------------------------------------------------------------------- ================================================================================ network-manager-applet-0.9.8.2-1.fc19 (FEDORA-2013-10357) A network control and status applet for NetworkManager -------------------------------------------------------------------------------- Update Information: This update fixes add support for systemd's new network-online target, fixes a crash when IPv6 configuration times out on WiFi networks, and fixes bridge/bond interfaces with static configuration waiting for slaves before completing. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Dan Williams <dcbw@xxxxxxxxxx> - 0.9.8.2-1 - Update to 0.9.8.2 release -------------------------------------------------------------------------------- References: [ 1 ] Bug #970293 - Activates both wired and wireless devices https://bugzilla.redhat.com/show_bug.cgi?id=970293 [ 2 ] Bug #787314 - assorted issues with remote filesystem dependency tree https://bugzilla.redhat.com/show_bug.cgi?id=787314 [ 3 ] Bug #948433 - Please add systemd unit file for nm_dispatcher https://bugzilla.redhat.com/show_bug.cgi?id=948433 -------------------------------------------------------------------------------- ================================================================================ nodejs-estraverse-1.1.1-1.fc19 (FEDORA-2013-10344) ECMAScript JS AST traversal functions -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #968600 - Review Request: nodejs-estraverse - ECMAScript JS AST traversal functions https://bugzilla.redhat.com/show_bug.cgi?id=968600 -------------------------------------------------------------------------------- ================================================================================ nodejs-pubcontrol-0.3.2-1.fc19 (FEDORA-2013-10366) HTTP Extensible Pubsub Control Protocol (EPCP) library for Node.js -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #969827 - Review Request: nodejs-pubcontrol - HTTP Extensible Pubsub Control Protocol (EPCP) library for Node.js https://bugzilla.redhat.com/show_bug.cgi?id=969827 -------------------------------------------------------------------------------- ================================================================================ nodejs-stack-trace-0.0.6-3.fc19 (FEDORA-2013-10362) Node.js module to get v8 stack traces as an array of CallSite objects -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #911069 - Review Request: nodejs-stack-trace - Node.js module to get v8 stack traces as an array of CallSite objects https://bugzilla.redhat.com/show_bug.cgi?id=911069 -------------------------------------------------------------------------------- ================================================================================ openstack-nova-2013.1.2-1.fc19 (FEDORA-2013-10364) OpenStack Compute (nova) -------------------------------------------------------------------------------- Update Information: Update to the latest Grizzly stable 2013.1.2 fix for CVE-2013-2096 - Update to stable/grizzly 2013.1.1 release -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Nikola Đipanov<ndipanov@xxxxxxxxxx> - 2013.1.2-1 - Update to stable/grizzly 2013.1.2 release * Fri May 17 2013 Nikola Đipanov <ndipanov@xxxxxxxxxx> - 2013.1-2 - Check QCOW2 image size during root disk creation (CVE-2013-2096) * Mon May 13 2013 Pádraig Brady <pbrady@xxxxxxxxxx> - 2013.1.1-1 - Update to stable/grizzly 2013.1.1 release * Fri May 10 2013 Pádraig Brady <pbrady@xxxxxxxxxx> - 2013.1-3 - Make openstack-nova-network depend on ebtables #961567 -------------------------------------------------------------------------------- ================================================================================ pacrunner-0.6-1.fc19 (FEDORA-2013-10374) Proxy configuration dæmon -------------------------------------------------------------------------------- Update Information: This provides the new pacrunner package for managing proxy information -------------------------------------------------------------------------------- ================================================================================ perl-Module-Signature-0.73-1.fc19 (FEDORA-2013-10354) CPAN signature management utilities and modules -------------------------------------------------------------------------------- Update Information: This update ensures that digest modules are only loaded from absolute paths in @INC, avoiding a potential arbitrary code execution problem (CVE-2013-2145). -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Paul Howarth <paul@xxxxxxxxxxxx> - 0.73-1 - Update to 0.73 - Constrain the user-specified digest name to /^\w+\d+$/ - Only allow loading Digest::* from absolute paths in @INC (CVE-2013-2145) -------------------------------------------------------------------------------- References: [ 1 ] Bug #971096 - CVE-2013-2145 perl-Module-Signature: arbitrary code execution when verifying SIGNATURE https://bugzilla.redhat.com/show_bug.cgi?id=971096 -------------------------------------------------------------------------------- ================================================================================ perl-Moo-1.002000-1.fc19 (FEDORA-2013-10346) Minimalist Object Orientation (with Moose compatibility) -------------------------------------------------------------------------------- Update Information: This update includes: * add 'moosify' attribute key to provide code for inflating to Moose * fix warnings about unknown attribute parameters on metaclass inflation * don't pass 'handles' down when doing 'has +' to avoid unDWIMmy explosions * throw a useful exception when typemap doesn't return a value * avoid localising @_ when not required for Sub::Quote * successfully inflate a metaclass for attributeless classes (RT#86415) * fix false default values used with non-lazy accessors * stop built values that fail isa checks still getting stored in the object * stop lazy+weak_ref accessors re-building their value on every call * make lazy+weak_ref accessors return undef if built value isn't already stored elsewhere (Moose compatibility) * stop isa checks being called on every access for lazy attributes * bump Devel::GlobalDestruction dependency to fix warning on cleanup when run under -c (RT#78617) * document Moose type constraint creation for roles and classes (actually fixed in 1.001000) -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Iain Arnell <iarnell@xxxxxxxxx> 1.002000-1 - update to latest upstream version -------------------------------------------------------------------------------- ================================================================================ perl-local-lib-1.008010-1.fc19 (FEDORA-2013-10349) Create and use a local lib/ for perl modules -------------------------------------------------------------------------------- Update Information: This update fixes a split on undefined value warning -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Iain Arnell <iarnell@xxxxxxxxx> 1.008010-1 - update to latest upstream version * Fri Apr 19 2013 Iain Arnell <iarnell@xxxxxxxxx> 1.008009-2 - rebase append-semicolon patch -------------------------------------------------------------------------------- ================================================================================ perlbrew-0.64-1.fc19 (FEDORA-2013-10367) Manage perl installations in your $HOME -------------------------------------------------------------------------------- Update Information: This update includes: * The build directory is removed before a new build. * New command: `install-multiple` * `clean` command now also removes tarballs * `install` command has many extra convienent flags. * Use "http://www.cpan.org" as the default CPAN mirror instead of "http://search.cpan.org/CPAN" * Remove the --insecure/--no-check-certificate command bflags when invoking curl/wget * Add missing dependency on CPAN::Perl::Releases -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Iain Arnell <iarnell@xxxxxxxxx> 0.64-1 - update to latest upstream version - explicitly require CPAN::Perl::Releases -------------------------------------------------------------------------------- References: [ 1 ] Bug #970101 - perlbrew-0.64 is available https://bugzilla.redhat.com/show_bug.cgi?id=970101 [ 2 ] Bug #970869 - missed Requires perl(CPAN::Perl::Releases) https://bugzilla.redhat.com/show_bug.cgi?id=970869 -------------------------------------------------------------------------------- ================================================================================ phoronix-test-suite-4.6.1-1.fc19 (FEDORA-2013-10353) An Automated, Open-Source Testing Framework -------------------------------------------------------------------------------- Update Information: update to 4.6.1 -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Markus Mayer <lotharlutz@xxxxxx> - 4.6.1-1 - new upstream -------------------------------------------------------------------------------- ================================================================================ php-Assetic-1.1.1-1.fc19 (FEDORA-2013-10372) Asset Management for PHP -------------------------------------------------------------------------------- Update Information: Updated to 1.1.1 1.1.1 (June 1, 2013) * Fixed cloning of asset collections * Fixed environment var inheritance * Replaced AssetWriter::getCombinations() for BC, even though we don't use it * Added support for @import-once to Less filters 1.1.0 (May 15, 2013) * Added LazyAssetManager::getLastModified() for determining "deep" mtime * Added DartFilter * Added EmberPrecompile * Added GssFilter * Added PhpCssEmbedFilter * Added RooleFilter * Added TypeScriptFilter * Added the possibility to configure additional load paths for less and lessphp * Added the UglifyCssFilter * Fixed the handling of directories in the GlobAsset. #256 * Added Handlebars support * Added Scssphp-compass support * Added the CacheBustingWorker * Added the UglifyJs2Filter Full change log: https://github.com/kriswallsmith/assetic/blob/v1.1.1/CHANGELOG-1.1.md -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Shawn Iwinski <shawn.iwinski@xxxxxxxxx> 1.1.1-1 - Updated to 1.1.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #970102 - php-Assetic-1.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=970102 -------------------------------------------------------------------------------- ================================================================================ php-Raven-0.6.0-1.fc19 (FEDORA-2013-10369) A PHP client for Sentry -------------------------------------------------------------------------------- Update Information: Updated to 0.6.0 0.5.1 to 0.6.0: https://github.com/getsentry/raven-php/compare/0.5.1...0.6.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Shawn Iwinski <shawn.iwinski@xxxxxxxxx> 0.6.0-1 - Updated to 0.6.0 - Removed tests sub-package -------------------------------------------------------------------------------- References: [ 1 ] Bug #971729 - php-Raven-0.6.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=971729 -------------------------------------------------------------------------------- ================================================================================ php-bartlett-PHP-CompatInfo-2.17.0-2.fc19 (FEDORA-2013-10343) Find out version and the extensions required for a piece of code to run -------------------------------------------------------------------------------- Update Information: Additions and changes: * add both support to PHP 5.4.16 and 5.3.26 * update xdebug reference to 2.2.3 * update xhprof reference to 0.9.3 * update libevent reference to 0.1.0 * update amqp reference to 1.2.0 * update gender reference to 1.0.0 * update intl reference to 3.0.0 * update mongo reference to 1.4.1 * update zendopcache reference to 7.0.2 * phar version of CLI tools * CLI tools phpci is renamed to phpcompatinfo to avoid name conflict with http://www.phptesting.org/ Bug fixes: * extension Zend OPcache is not displayed in list-references For now, the RPM provides both "phpci" and "phpcompatinfo" commands. Deprecated "phpci" command will be dropped in a future version. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.17.0-2 - keep phpci command for now * Fri Jun 7 2013 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.17.0-1 - Update to 2.17.0 - phpci command renamed to phpcompatinfo -------------------------------------------------------------------------------- ================================================================================ php-twig-Twig-1.13.1-1.fc19 (FEDORA-2013-10350) The flexible, fast, and secure template engine for PHP -------------------------------------------------------------------------------- Update Information: Updated to 1.13.1 (see http://blog.twig.sensiolabs.org/post/52290013748/twig-1-13-1-released) * added the possibility to ignore the filesystem constructor argument in Twig_Loader_Filesystem * fixed Twig_Loader_Chain::exists() for a loader which implements Twig_ExistsLoaderInterface * adjusted backtrace call to reduce memory usage when an error occurs * added support for object instances as the second argument of the constant test * fixed the include function when used in an assignment Full change log: https://github.com/fabpot/Twig/blob/v1.13.1/CHANGELOG -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Shawn Iwinski <shawn.iwinski@xxxxxxxxx> 1.13.1-1 - Updated to 1.13.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #971730 - php-twig-Twig-1.13.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=971730 -------------------------------------------------------------------------------- ================================================================================ phrel-1.0.2-1.fc19 (FEDORA-2013-10338) Per Host RatE Limiter -------------------------------------------------------------------------------- Update Information: New version -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ printrun-0.0-24.20130123git71e5da0.fc19 (FEDORA-2013-10337) RepRap printer interface and tools -------------------------------------------------------------------------------- Update Information: Fixed plater not working with pyglet 1.2#Here is where you give an explanation of your update. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Miro Hrončok <mhroncok@xxxxxxxxxx> - 0.0-24.20130123git71e5da0 - Fixed Pyglet 1.2 issue (#868266) -------------------------------------------------------------------------------- References: [ 1 ] Bug #868266 - Review Request: pyglet - A cross-platform windowing and multimedia library for Python https://bugzilla.redhat.com/show_bug.cgi?id=868266 -------------------------------------------------------------------------------- ================================================================================ python-rtslib-2.1.fb35-1.fc19 (FEDORA-2013-10368) API for Linux kernel LIO SCSI target -------------------------------------------------------------------------------- Update Information: fix tag issues -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Andy Grover <agrover@xxxxxxxxxx> - 2.1.fb35-1 - New upstream version - add fix-tabs.patch -------------------------------------------------------------------------------- ================================================================================ python-tahrir-api-0.1.8-1.fc19 (FEDORA-2013-10345) An API for interacting with the Tahrir database -------------------------------------------------------------------------------- Update Information: New features, bugfixes, and relicense to GPLv3+. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Ralph Bean <rbean@xxxxxxxxxx> - 0.1.8-1 - New Invitations API. - Bugfixes to other API functions. - Relicense to GPLv3+ -------------------------------------------------------------------------------- ================================================================================ setup-2.8.71-1.fc19 (FEDORA-2013-10339) A set of system configuration and setup files -------------------------------------------------------------------------------- Update Information: - fix escape codes for screen (#969429) - handle vte terminals in bashrc (#924275) -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Ondrej Vasik <ovasik@xxxxxxxxxx> 2.8.71-1 - fix escape codes for screen (#969429) - handle vte terminals in bashrc (#924275) -------------------------------------------------------------------------------- References: [ 1 ] Bug #969429 - PROMPT_COMMAND prints wrong escape code for screen https://bugzilla.redhat.com/show_bug.cgi?id=969429 [ 2 ] Bug #924275 - __vte_prompt_command always overrides /etc/sysconfig/bash-prompt-xterm as the user's PROMPT_COMMAND https://bugzilla.redhat.com/show_bug.cgi?id=924275 -------------------------------------------------------------------------------- ================================================================================ shim-0.3-2.fc19 (FEDORA-2013-10341) First-stage UEFI bootloader -------------------------------------------------------------------------------- Update Information: Provides a fallback bootloader and moves mokutil to a separate subpackage. No UEFI binaries in this package are signed any more; all of that is in shim-signed. So to test this, you'll have to either a) disable Secure Boot, or b) do your own signing (possibly with "Red Hat Test Certificate") -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Peter Jones <pjones@xxxxxxxxxx> - 0.3-2 - Require gnu-efi-3.0q for now. - Don't allow mmx or sse during compilation. - Re-organize this so all real signing happens in shim-signed instead. - Split out mokutil -------------------------------------------------------------------------------- References: [ 1 ] Bug #963359 - Shim should provide a mechanism for \EFI\BOOT\BOOTX64.EFI as a fallback on fixed media. https://bugzilla.redhat.com/show_bug.cgi?id=963359 -------------------------------------------------------------------------------- ================================================================================ system-config-printer-1.4.1-6.fc19 (FEDORA-2013-10351) A printer administration tool -------------------------------------------------------------------------------- Update Information: This update fixes some more UTF-8 codec issues, as well as some remaining issues from switching to GObject introspection. It also fixes a traceback that would occur when using the New Printer dialog more than once. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Tim Waugh <twaugh@xxxxxxxxxx> 1.4.1-6 - Use the right signal for spotting when editing is done when renaming a printer (bug #971404). - More fixes for UTF-8 encoding issues (bug #968142). - Fixed new printer dialog traceback (bug #969916). * Fri Jun 7 2013 Tim Waugh <twaugh@xxxxxxxxxx> 1.4.1-5 - More fixes for UTF-8 encoding issues (bug #971548). * Thu Jun 6 2013 Tim Waugh <twaugh@xxxxxxxxxx> 1.4.1-4 - Removed old pointer/keyboard grabbing code as it no longer works (bug #971459). - Notify urgencies have new names with gi.repository (bug #970646). - More fixes for UTF-8 encoding issues (bug #969846, bug #971417). -------------------------------------------------------------------------------- References: [ 1 ] Bug #969916 - [abrt] system-config-printer-1.4.1-3.fc19: newprinter.py:3429:fillModelList:AttributeError: 'NoneType' object has no attribute 'getModels' https://bugzilla.redhat.com/show_bug.cgi?id=969916 [ 2 ] Bug #970646 - [abrt] system-config-printer-libs-1.4.1-3.fc19: module.py:135:__getattr__:AttributeError: 'gi.repository.Notify' object has no attribute 'URGENCY_NORMAL' https://bugzilla.redhat.com/show_bug.cgi?id=970646 [ 3 ] Bug #971459 - Can't Authenticate Add printer via SAMBA in system-config-printer https://bugzilla.redhat.com/show_bug.cgi?id=971459 [ 4 ] Bug #968142 - [abrt] system-config-printer-1.4.1-3.fc19: PhysicalDevice.py:181:get_info:UnicodeDecodeError: 'ascii' codec can't decode byte 0xe2 in position 34: ordinal not in range(128) https://bugzilla.redhat.com/show_bug.cgi?id=968142 [ 5 ] Bug #969846 - [abrt] system-config-printer-1.4.1-3.fc19: newprinter.py:3443:fillModelList:UnicodeDecodeError: 'ascii' codec can't decode byte 0xc4 in position 7: ordinal not in range(128) https://bugzilla.redhat.com/show_bug.cgi?id=969846 [ 6 ] Bug #971417 - Accented characters not handled correctly https://bugzilla.redhat.com/show_bug.cgi?id=971417 [ 7 ] Bug #971548 - [abrt] system-config-printer-1.4.1-3.fc19: exceptions.py:53:__str__:UnicodeEncodeError: 'ascii' codec can't encode character u'\xe3' in position 1: ordinal not in range(128) https://bugzilla.redhat.com/show_bug.cgi?id=971548 -------------------------------------------------------------------------------- ================================================================================ targetcli-2.1.fb26-1.fc19 (FEDORA-2013-10368) An administration shell for storage targets -------------------------------------------------------------------------------- Update Information: fix tag issues -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Andy Grover <agrover@xxxxxxxxxx> - 2.1.fb26-1 - New upstream release -------------------------------------------------------------------------------- ================================================================================ vym-2.3.18-1.fc19 (FEDORA-2013-10365) View your mind -------------------------------------------------------------------------------- Update Information: Latest upstream release. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 2.3.18-1 - Latest upstream, BZ 971759. -------------------------------------------------------------------------------- References: [ 1 ] Bug #971759 - vym-2.3.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=971759 -------------------------------------------------------------------------------- ================================================================================ vzctl-4.3.1-3.fc19 (FEDORA-2013-10371) OpenVZ containers control utility -------------------------------------------------------------------------------- Update Information: Fix compilation on architectures without support for VZ Updated to upstream version 4.3.1 Updated to upstream version 4.3.1 -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Andrey Vagin <avagin@xxxxxxxxx> - 4.3.1-3 - Fix compilation on architectures without support for VZ (rhbz 971821) * Thu Jun 6 2013 Andrey Vagin <avagin@xxxxxxxxx> - 4.3.1-2 - Include missing dependency for gnugpg. * Tue Jun 4 2013 Andrew Vagin <avagin@xxxxxxxxxx> - 4.3.1-1 - Updated to upstream version 4.3.1 * Wed Apr 24 2013 Glauber Costa <glommer@xxxxxxxxx> - 4.1.1-4 - Include missing dependency for bridge-utils. - Fix problems with user and pid namespaces. -------------------------------------------------------------------------------- References: [ 1 ] Bug #971821 - vzctl-4.3.1-2.fc18 is FTBFS https://bugzilla.redhat.com/show_bug.cgi?id=971821 -------------------------------------------------------------------------------- ================================================================================ webkitgtk-2.0.2-2.fc19 (FEDORA-2013-10363) GTK+ Web content engine library -------------------------------------------------------------------------------- Update Information: harfbuzz 0.9.18 release that splits harfbuzz-icu into a separate library, and rebuilds of affected packages. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Kalev Lember <kalevlember@xxxxxxxxx> - 2.0.2-2 - Link with harfbuzz-icu (split into separate library in harfbuzz 0.9.18) -------------------------------------------------------------------------------- References: [ 1 ] Bug #971795 - Handling the harfbuzz / harfbuzz-icu split https://bugzilla.redhat.com/show_bug.cgi?id=971795 [ 2 ] Bug #971880 - Harfbuzz 0.9.18-1 causes LibreOffice to crash https://bugzilla.redhat.com/show_bug.cgi?id=971880 -------------------------------------------------------------------------------- ================================================================================ webkitgtk3-2.0.2-3.fc19 (FEDORA-2013-10363) GTK+ Web content engine library -------------------------------------------------------------------------------- Update Information: harfbuzz 0.9.18 release that splits harfbuzz-icu into a separate library, and rebuilds of affected packages. -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 7 2013 Kalev Lember <kalevlember@xxxxxxxxx> - 2.0.2-3 - Link with harfbuzz-icu (split into separate library in harfbuzz 0.9.18) * Mon Jun 3 2013 Kalev Lember <kalevlember@xxxxxxxxx> - 2.0.2-2 - Remove glib-compile-schemas scriptlets: the schemas are no longer installed - Add ldconfig calls to the libwebkit2gtk subpackage - Remove rpath from MiniBrowser - Re-enable full debuginfo (#861452) -------------------------------------------------------------------------------- References: [ 1 ] Bug #971795 - Handling the harfbuzz / harfbuzz-icu split https://bugzilla.redhat.com/show_bug.cgi?id=971795 [ 2 ] Bug #971880 - Harfbuzz 0.9.18-1 causes LibreOffice to crash https://bugzilla.redhat.com/show_bug.cgi?id=971880 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test