The following Fedora 19 Security updates need testing: Age URL 89 https://admin.fedoraproject.org/updates/FEDORA-2013-5801/mantis-1.2.15-1.fc19 44 https://admin.fedoraproject.org/updates/FEDORA-2013-9715/heat-jeos-9-1.fc19 32 https://admin.fedoraproject.org/updates/FEDORA-2013-10678/python-keystoneclient-0.2.3-4.fc19 20 https://admin.fedoraproject.org/updates/FEDORA-2013-10467/openstack-keystone-2013.1.2-3.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2013-12384/gallery3-3.0.9-1.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2013-12321/gpm-1.20.6-33.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2013-12593/libXvMC-1.0.8-1.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-12698/seamonkey-2.19-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-12948/openjpa-2.2.1-6.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-12663/ruby-2.0.0.247-13.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-12908/nodejs-fstream-0.1.23-1.fc19,nodejs-glob-3.2.3-1.fc19,nodejs-graceful-fs-2.0.0-2.fc19,node-gyp-0.10.6-1.fc19,nodejs-lockfile-0.4.0-1.fc19,nodejs-npm-registry-client-0.2.27-1.fc19,nodejs-semver-2.0.10-1.fc19,nodejs-sha-1.0.1-4.fc19,npm-1.3.3-1.fc19,nodejs-npmlog-0.0.4-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-12977/php-5.5.0-2.fc19 The following builds have been pushed to Fedora 19 updates-testing fantasdic-1.0-0.15.beta7.fc19 kbibtex-0.4.1-3.fc19 mingw-pcre-8.33-2.fc19 mingw-qt5-qtbase-5.1.0-1.fc19 mingw-qt5-qtdeclarative-5.1.0-1.fc19 mingw-qt5-qtgraphicaleffects-5.1.0-1.fc19 mingw-qt5-qtimageformats-5.1.0-1.fc19 mingw-qt5-qtjsbackend-5.1.0-1.fc19 mingw-qt5-qtquick1-5.1.0-1.fc19 mingw-qt5-qtscript-5.1.0-1.fc19 mingw-qt5-qtsensors-5.1.0-1.fc19 mingw-qt5-qttools-5.1.0-1.fc19 mingw-qt5-qttranslations-5.1.0-1.fc19 mkvtoolnix-6.3.0-1.fc19 node-gyp-0.10.6-1.fc19 nodejs-fstream-0.1.23-1.fc19 nodejs-glob-3.2.3-1.fc19 nodejs-graceful-fs-2.0.0-2.fc19 nodejs-lockfile-0.4.0-1.fc19 nodejs-npm-registry-client-0.2.27-1.fc19 nodejs-npmlog-0.0.4-1.fc19 nodejs-semver-2.0.10-1.fc19 nodejs-sha-1.0.1-4.fc19 npm-1.3.3-1.fc19 salt-0.16.0-1.fc19 xtide-2.13.1-1.fc19 Details about builds: ================================================================================ fantasdic-1.0-0.15.beta7.fc19 (FEDORA-2013-12982) Dictionary application using Ruby -------------------------------------------------------------------------------- Update Information: fantasdic in Fedora 19 does not launch at all due to incorrect settings. This new rpm should fix this issue. -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 14 2013 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1.0-0.15.beta7 - Fix DATADIR and installation path -------------------------------------------------------------------------------- ================================================================================ kbibtex-0.4.1-3.fc19 (FEDORA-2013-12984) A BibTeX editor for KDE -------------------------------------------------------------------------------- Update Information: Explictly requires okular-part -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 14 2013 Robin Lee <cheeselee@xxxxxxxxxxxxxxxxx> - 0.4.1-3 - Requires okular-part (BZ#984142) -------------------------------------------------------------------------------- References: [ 1 ] Bug #984142 - kbibtex segfaults on startup https://bugzilla.redhat.com/show_bug.cgi?id=984142 -------------------------------------------------------------------------------- ================================================================================ mingw-pcre-8.33-2.fc19 (FEDORA-2013-12991) MinGW Windows pcre library -------------------------------------------------------------------------------- Update Information: Added -static subpackages -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 11 2013 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 8.33-2 - Added -static subpackages -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qtbase-5.1.0-1.fc19 (FEDORA-2013-12983) Qt5 for Windows - QtBase component -------------------------------------------------------------------------------- Update Information: Update to Qt 5.1.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 10 2013 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 5.1.0-1 - Update to 5.1.0 - Fix detection of external pcre library - Added BR: mingw32-pcre mingw64-pcre * Wed Jul 10 2013 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 5.0.2-3 - Display message box if platform plugin cannot be found (QTBUG-31765, QTBUG-31760) -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qtdeclarative-5.1.0-1.fc19 (FEDORA-2013-12983) Qt5 for Windows - QtDeclarative component -------------------------------------------------------------------------------- Update Information: Update to Qt 5.1.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 11 2013 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 5.1.0-1 - Update to 5.1.0 - Added mingw{32,64}-qt5-qmldevtools subpackages - Changed URL to http://qt-project.org/ -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qtgraphicaleffects-5.1.0-1.fc19 (FEDORA-2013-12983) Qt5 for Windows - QtGraphicalEffects component -------------------------------------------------------------------------------- Update Information: Update to Qt 5.1.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 11 2013 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 5.1.0-1 - Update to 5.1.0 -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qtimageformats-5.1.0-1.fc19 (FEDORA-2013-12983) Qt5 for Windows - QtImageFormats component -------------------------------------------------------------------------------- Update Information: Update to Qt 5.1.0 -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 14 2013 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 5.1.0-1 - Update to 5.1.0 -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qtjsbackend-5.1.0-1.fc19 (FEDORA-2013-12983) Qt5 for Windows - QtJsBackend component -------------------------------------------------------------------------------- Update Information: Update to Qt 5.1.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 11 2013 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 5.1.0-1 - Update to 5.1.0 - Changed URL to http://qt-project.org/ -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qtquick1-5.1.0-1.fc19 (FEDORA-2013-12983) Qt5 for Windows - QtQuick1 component -------------------------------------------------------------------------------- Update Information: Update to Qt 5.1.0 -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 13 2013 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 5.1.0-1 - Update to 5.1.0 -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qtscript-5.1.0-1.fc19 (FEDORA-2013-12983) Qt5 for Windows - QtScript component -------------------------------------------------------------------------------- Update Information: Update to Qt 5.1.0 -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 14 2013 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 5.1.0-1 - Update to 5.1.0 -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qtsensors-5.1.0-1.fc19 (FEDORA-2013-12983) Qt5 for Windows - QtSensors component -------------------------------------------------------------------------------- Update Information: Update to Qt 5.1.0 -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 14 2013 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 5.1.0-1 - Update to 5.1.0 -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qttools-5.1.0-1.fc19 (FEDORA-2013-12983) Qt5 for Windows - QtTools component -------------------------------------------------------------------------------- Update Information: Update to Qt 5.1.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 11 2013 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 5.1.0-1 - Update to 5.1.0 - Changed URL to http://qt-project.org/ -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qttranslations-5.1.0-1.fc19 (FEDORA-2013-12983) Qt5 for Windows - QtTranslations component -------------------------------------------------------------------------------- Update Information: Update to Qt 5.1.0 -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 14 2013 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 5.1.0-1 - Update to 5.1.0 -------------------------------------------------------------------------------- ================================================================================ mkvtoolnix-6.3.0-1.fc19 (FEDORA-2013-12988) Matroska container manipulation utilities -------------------------------------------------------------------------------- Update Information: * Released v6.3.0. * mkvmerge: bug fix: When appending unframed AVC/h.264 tracks and setting the default duration the second and all following source parts will use the same default duration as set for the first part. Fixes #889. -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 13 2013 Nicolas Chauvet <kwizart@xxxxxxxxx> - 6.3.0-1 - Update to 6.3.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #979578 - mkvtoolnix-6.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=979578 -------------------------------------------------------------------------------- ================================================================================ node-gyp-0.10.6-1.fc19 (FEDORA-2013-12908) Node.js native addon build tool -------------------------------------------------------------------------------- Update Information: Update to the latest version of npm, fixing several bugs including a minor security bug. For more information about recent changes in npm, see the changelog at GitHub: https://github.com/isaacs/npm/commits/v1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 12 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 0.10.6-1 - new upstream release 0.10.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #983918 - npm: CVE-2013-4116 npm: Insecure temporary directory generation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=983918 [ 2 ] Bug #984202 - nodejs-npmlog must be updated because of new npm-1.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=984202 -------------------------------------------------------------------------------- ================================================================================ nodejs-fstream-0.1.23-1.fc19 (FEDORA-2013-12908) Advanced file system stream objects for Node.js -------------------------------------------------------------------------------- Update Information: Update to the latest version of npm, fixing several bugs including a minor security bug. For more information about recent changes in npm, see the changelog at GitHub: https://github.com/isaacs/npm/commits/v1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 12 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 0.1.23-1 - new upstream release 0.1.23 -------------------------------------------------------------------------------- References: [ 1 ] Bug #983918 - npm: CVE-2013-4116 npm: Insecure temporary directory generation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=983918 [ 2 ] Bug #984202 - nodejs-npmlog must be updated because of new npm-1.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=984202 -------------------------------------------------------------------------------- ================================================================================ nodejs-glob-3.2.3-1.fc19 (FEDORA-2013-12908) A little globber for Node.js -------------------------------------------------------------------------------- Update Information: Update to the latest version of npm, fixing several bugs including a minor security bug. For more information about recent changes in npm, see the changelog at GitHub: https://github.com/isaacs/npm/commits/v1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 12 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 3.2.3-1 - new upstream release 3.2.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #983918 - npm: CVE-2013-4116 npm: Insecure temporary directory generation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=983918 [ 2 ] Bug #984202 - nodejs-npmlog must be updated because of new npm-1.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=984202 -------------------------------------------------------------------------------- ================================================================================ nodejs-graceful-fs-2.0.0-2.fc19 (FEDORA-2013-12908) 'fs' module with incremental back-off on EMFILE -------------------------------------------------------------------------------- Update Information: Update to the latest version of npm, fixing several bugs including a minor security bug. For more information about recent changes in npm, see the changelog at GitHub: https://github.com/isaacs/npm/commits/v1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 12 2013 Jamie Nguyen <jamielinux@xxxxxxxxxxxxxxxxx> - 2.0.0-2 - include missing polyfills.js file * Fri Jul 12 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 2.0.0-1 - new upstream release 2.0.0 - license file now updated upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #983918 - npm: CVE-2013-4116 npm: Insecure temporary directory generation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=983918 [ 2 ] Bug #984202 - nodejs-npmlog must be updated because of new npm-1.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=984202 -------------------------------------------------------------------------------- ================================================================================ nodejs-lockfile-0.4.0-1.fc19 (FEDORA-2013-12908) A very polite lock file utility -------------------------------------------------------------------------------- Update Information: Update to the latest version of npm, fixing several bugs including a minor security bug. For more information about recent changes in npm, see the changelog at GitHub: https://github.com/isaacs/npm/commits/v1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 12 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 0.4.0-1 - new upstream release 0.4.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #983918 - npm: CVE-2013-4116 npm: Insecure temporary directory generation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=983918 [ 2 ] Bug #984202 - nodejs-npmlog must be updated because of new npm-1.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=984202 -------------------------------------------------------------------------------- ================================================================================ nodejs-npm-registry-client-0.2.27-1.fc19 (FEDORA-2013-12908) Client for the npm registry -------------------------------------------------------------------------------- Update Information: Update to the latest version of npm, fixing several bugs including a minor security bug. For more information about recent changes in npm, see the changelog at GitHub: https://github.com/isaacs/npm/commits/v1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 12 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 0.2.27-1 - new upstream release 0.2.27 -------------------------------------------------------------------------------- References: [ 1 ] Bug #983918 - npm: CVE-2013-4116 npm: Insecure temporary directory generation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=983918 [ 2 ] Bug #984202 - nodejs-npmlog must be updated because of new npm-1.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=984202 -------------------------------------------------------------------------------- ================================================================================ nodejs-npmlog-0.0.4-1.fc19 (FEDORA-2013-12908) Logger for npm -------------------------------------------------------------------------------- Update Information: Update to the latest version of npm, fixing several bugs including a minor security bug. For more information about recent changes in npm, see the changelog at GitHub: https://github.com/isaacs/npm/commits/v1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 13 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 0.0.4-1 - new upstream release 0.0.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #983918 - npm: CVE-2013-4116 npm: Insecure temporary directory generation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=983918 [ 2 ] Bug #984202 - nodejs-npmlog must be updated because of new npm-1.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=984202 -------------------------------------------------------------------------------- ================================================================================ nodejs-semver-2.0.10-1.fc19 (FEDORA-2013-12908) Semantic versioner for npm -------------------------------------------------------------------------------- Update Information: Update to the latest version of npm, fixing several bugs including a minor security bug. For more information about recent changes in npm, see the changelog at GitHub: https://github.com/isaacs/npm/commits/v1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 12 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 2.0.10-1 - new upstream release 2.0.10 -------------------------------------------------------------------------------- References: [ 1 ] Bug #983918 - npm: CVE-2013-4116 npm: Insecure temporary directory generation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=983918 [ 2 ] Bug #984202 - nodejs-npmlog must be updated because of new npm-1.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=984202 -------------------------------------------------------------------------------- ================================================================================ nodejs-sha-1.0.1-4.fc19 (FEDORA-2013-12908) Check and get file hashes -------------------------------------------------------------------------------- Update Information: Update to the latest version of npm, fixing several bugs including a minor security bug. For more information about recent changes in npm, see the changelog at GitHub: https://github.com/isaacs/npm/commits/v1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 12 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 1.0.1-4 - fix graceful-fs dep -------------------------------------------------------------------------------- References: [ 1 ] Bug #983918 - npm: CVE-2013-4116 npm: Insecure temporary directory generation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=983918 [ 2 ] Bug #984202 - nodejs-npmlog must be updated because of new npm-1.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=984202 -------------------------------------------------------------------------------- ================================================================================ npm-1.3.3-1.fc19 (FEDORA-2013-12908) Node.js Package Manager -------------------------------------------------------------------------------- Update Information: Update to the latest version of npm, fixing several bugs including a minor security bug. For more information about recent changes in npm, see the changelog at GitHub: https://github.com/isaacs/npm/commits/v1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 12 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 1.3.3-1 - new upstream release 1.3.3 - fixes insecure temporary directory generation (CVE-2013-4116; RHBZ#983917) -------------------------------------------------------------------------------- References: [ 1 ] Bug #983918 - npm: CVE-2013-4116 npm: Insecure temporary directory generation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=983918 [ 2 ] Bug #984202 - nodejs-npmlog must be updated because of new npm-1.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=984202 -------------------------------------------------------------------------------- ================================================================================ salt-0.16.0-1.fc19 (FEDORA-2013-12989) A parallel remote execution system -------------------------------------------------------------------------------- Update Information: Update to feature release 0.16.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 9 2013 Clint Savage <herlo1@xxxxxxxxx> - 0.16.0-1 - Update to feature release 0.16.0 -------------------------------------------------------------------------------- ================================================================================ xtide-2.13.1-1.fc19 (FEDORA-2013-12980) Calculate tide all over the world -------------------------------------------------------------------------------- Update Information: New version 2.13.1 is released. -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 12 2013 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 2.13.1-1 - 2.13.1 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test