The following Fedora 18 Security updates need testing: Age URL 207 https://admin.fedoraproject.org/updates/FEDORA-2013-0416/fedora-business-cards-1-0.1.beta1.fc18 134 https://admin.fedoraproject.org/updates/FEDORA-2013-4243/stunnel-4.55-1.fc18 121 https://admin.fedoraproject.org/updates/FEDORA-2013-4823/microcode_ctl-2.0-3.fc18 105 https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2-1.fc18 41 https://admin.fedoraproject.org/updates/FEDORA-2013-10713/openstack-keystone-2012.2.4-5.fc18 17 https://admin.fedoraproject.org/updates/FEDORA-2013-13131/livecd-tools-18.17-1.fc18 11 https://admin.fedoraproject.org/updates/FEDORA-2013-13388/ghc-xmonad-contrib-0.11-1.1.fc18,bluetile-0.6-13.fc18 8 https://admin.fedoraproject.org/updates/FEDORA-2013-13672/subversion-1.7.11-1.fc18.1 4 https://admin.fedoraproject.org/updates/FEDORA-2013-13911/ReviewBoard-1.7.12-1.fc18,python-djblets-0.7.16-1.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-13900/python-keystoneclient-0.2.0-2.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-13922/httpd-2.4.6-2.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-14159/cxf-2.6.9-1.fc18,jacorb-2.3.1-8.fc18,wss4j-1.6.10-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-13940/gnupg-1.4.14-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-14005/zabbix-2.0.6-3.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-14205/v8-3.14.5.10-2.fc18 The following Fedora 18 Critical Path updates have yet to be approved: Age URL 175 https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5.fc18 10 https://admin.fedoraproject.org/updates/FEDORA-2013-13462/exempi-2.2.1-1.fc18 9 https://admin.fedoraproject.org/updates/FEDORA-2013-13571/telepathy-glib-0.20.4-1.fc18 8 https://admin.fedoraproject.org/updates/FEDORA-2013-13700/ibus-1.5.3-1.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2013-13756/make-3.82-15.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-14164/device-mapper-persistent-data-0.2.3-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-13939/koji-1.8.0-2.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-13970/audit-2.3.2-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-13876/abrt-2.1.6-2.fc18,gnome-abrt-0.3.0-2.fc18,libreport-2.1.6-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-14177/kernel-3.10.4-100.fc18 The following builds have been pushed to Fedora 18 updates-testing apper-0.8.1-1.fc18 eigen3-3.0.7-1.fc18 glite-lbjp-common-trio-2.3.10-2.fc18 hercules-3.09-1.fc18 kernel-3.10.4-100.fc18 libva-vdpau-driver-0.7.4-3.fc18.1 mate-screensaver-1.6.1-2.fc18 mingw-qt5-qt3d-5.0.0-0.5.git20130510.0158ce78.fc18 mingw-qt5-qtlocation-5.0.0-0.6.git20130510.f2840834.fc18 mingw-qt5-qtsensors-5.1.0-1.fc18 opencv-2.4.6.1-1.fc18 perl-MooseX-ClassAttribute-0.27-1.fc18 tito-0.4.17-1.fc18 v8-3.14.5.10-2.fc18 youtube-dl-2013.08.02-1.fc18 Details about builds: ================================================================================ apper-0.8.1-1.fc18 (FEDORA-2013-14191) KDE interface for PackageKit -------------------------------------------------------------------------------- Update Information: New upstream bugfix release, primarily improving function and reliability of QML-based updater applet. See also: http://dantti.wordpress.com/2013/07/30/apper-0-8-1-released/ -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 30 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.8.1-1 - 0.8.1 (final) * Mon Jun 24 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.8.1-0.4.20130624 - 0.8.1 20130624 snapshot -------------------------------------------------------------------------------- ================================================================================ eigen3-3.0.7-1.fc18 (FEDORA-2013-14200) A lightweight C++ template library for vector and matrix math -------------------------------------------------------------------------------- Update Information: Update to release 3.0.7, see http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.0.7 . -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 2 2013 Sandro Mani <manisandro@xxxxxxxxx> - 3.0.7-1 - Update to release 3.0.7 - spec cleanup -------------------------------------------------------------------------------- ================================================================================ glite-lbjp-common-trio-2.3.10-2.fc18 (FEDORA-2013-14181) Standalone extended implementation of printf and scanf -------------------------------------------------------------------------------- Update Information: Standalone extended implementation of printf and scanf. Provides specialized formatting options used by Logging and Bookkeeping and Job Provenance. -------------------------------------------------------------------------------- References: [ 1 ] Bug #877810 - Review Request: glite-lbjp-common-trio - Extended implementation of printf and scanf for gLite https://bugzilla.redhat.com/show_bug.cgi?id=877810 -------------------------------------------------------------------------------- ================================================================================ hercules-3.09-1.fc18 (FEDORA-2013-14184) Hercules S/370, ESA/390, and z/Architecture emulator -------------------------------------------------------------------------------- Update Information: update to version 3.09 * Allow regex replacement variables in HAO commands (Roger Bowler) * Prevent duplicate EQID (Gordon Bonorchis) * Permit concurrent read access to printer and punch files (Roger Bowler) * DFP zoned-conversion facility (Roger Bowler) * Execution-hint facility (Roger Bowler) * Miscellaneous-instruction-extensions facility (Roger Bowler) * Load-and-trap facility (Roger Bowler) * Fix for VSAM Extended Format (David "Fish" Trout) * APL\360 2741 patch (Max H. Parke) * Fix interval timer repeating interrupt (Ivan Warren, Kevin Leonard) * Corrections to build procedures (Mike Frysinger, Dan Horak) * Miscellaneous bug fixes (Roger Bowler) -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 30 2013 Dan Horák <dan[at]danny.cz> - 3.09-1 - updated to 3.09 (#989939) * Sat Jun 1 2013 Dan Horák <dan[at]danny.cz> - 3.08.2-2 - fix build on EL-6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #989939 - hercules-3.09 is available https://bugzilla.redhat.com/show_bug.cgi?id=989939 -------------------------------------------------------------------------------- ================================================================================ kernel-3.10.4-100.fc18 (FEDORA-2013-14177) The Linux kernel -------------------------------------------------------------------------------- Update Information: Linux v 3.10.4 stable update contains a very large number of fixes across the tree -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 1 2013 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> - Rebase ARM config * Thu Aug 1 2013 Justin M. Forbes <jforbes@xxxxxxxxxx> - Update s390x config * Thu Aug 1 2013 Justin M. Forbes <jforbes@xxxxxxxxxx> - Rebase to 3.10.4 dropped: debug-bad-pte-dmi.patch debug-bad-pte-modules.patch VMX-x86-handle-host-TSC-calibration-failure.patch ipv6-ip6_sk_dst_check-must-not-assume-ipv6-dst.patch af_key-fix-info-leaks-in-notify-messages.patch arm-tegra-fixclk.patch vhost-net-fix-use-after-free-in-vhost_net_flush.patch 0001-drivers-crypto-nx-fix-init-race-alignmasks-and-GCM-b.patch i7300_edac_single_mode_fixup.patch drivers-hwmon-nct6775.patch iwlwifi-pcie-fix-race-in-queue-unmapping.patch iwlwifi-pcie-wake-the-queue-if-stopped-when-being-unmapped.patch cve-2013-4125.patch iwlwifi-add-new-pci-id-for-6x35-series.patch ipv6-ip6_append_data_mtu-did-not-care-about-pmtudisc-and_frag_size.patch ipv6-call-udp_push_pending_frames-when-uncorking-a-socket-with-AF_INET-pending-data.patch * Thu Aug 1 2013 Josh Boyer <jwboyer@xxxxxxxxxx> - Fix mac80211 connection issues (rhbz 981445) - Fix firmware issues with iwl4965 and rfkill (rhbz 977053) * Mon Jul 29 2013 Josh Boyer <jwboyer@xxxxxxxxxx> - Add support for elantech v7 devices (rhbz 969473) * Fri Jul 26 2013 Josh Boyer <jwboyer@xxxxxxxxxx> - Add patch to fix NULL deref in iwlwifi (rhbz 979581) * Wed Jul 24 2013 Josh Boyer <jwboyer@xxxxxxxxxx> - CVE-2013-4162 net: panic while pushing pending data out of a IPv6 socket with UDP_CORK enabled (rhbz 987627 987656) - CVE-2013-4163 net: panic while appending data to a corked IPv6 socket in ip6_append_data_mtu (rhbz 987633 987639) -------------------------------------------------------------------------------- References: [ 1 ] Bug #981445 - WiFi fails after some time https://bugzilla.redhat.com/show_bug.cgi?id=981445 [ 2 ] Bug #977053 - [abrt] WARNING: at drivers/net/wireless/iwlegacy/common.c:3118 il_enqueue_hcmd+0x578/0x5a0 [iwlegacy]() https://bugzilla.redhat.com/show_bug.cgi?id=977053 [ 3 ] Bug #969473 - psmouse serio1: elantech: unknown hardware version, aborting... https://bugzilla.redhat.com/show_bug.cgi?id=969473 -------------------------------------------------------------------------------- ================================================================================ libva-vdpau-driver-0.7.4-3.fc18.1 (FEDORA-2013-14199) HW video decode support for VDPAU platforms -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- ================================================================================ mate-screensaver-1.6.1-2.fc18 (FEDORA-2013-14195) MATE Screensaver -------------------------------------------------------------------------------- Update Information: - Update to 1.6.1 -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 2 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1.6.1-2 - bump version to 1.6.1-2 * Fri Aug 2 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1.6.1-1 - Update to 1.6.1 - Drop patches - move doc dir for > f19 -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qt3d-5.0.0-0.5.git20130510.0158ce78.fc18 (FEDORA-2013-14202) Qt5 for Windows - Qt3d component -------------------------------------------------------------------------------- Update Information: New packages -------------------------------------------------------------------------------- References: [ 1 ] Bug #858069 - Review Request: mingw-qt5-qtlocation - Qt5 for Windows - QtLocation component https://bugzilla.redhat.com/show_bug.cgi?id=858069 -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qtlocation-5.0.0-0.6.git20130510.f2840834.fc18 (FEDORA-2013-14202) Qt5 for Windows - QtLocation component -------------------------------------------------------------------------------- Update Information: New packages -------------------------------------------------------------------------------- References: [ 1 ] Bug #858069 - Review Request: mingw-qt5-qtlocation - Qt5 for Windows - QtLocation component https://bugzilla.redhat.com/show_bug.cgi?id=858069 -------------------------------------------------------------------------------- ================================================================================ mingw-qt5-qtsensors-5.1.0-1.fc18 (FEDORA-2013-14202) Qt5 for Windows - QtSensors component -------------------------------------------------------------------------------- Update Information: New packages -------------------------------------------------------------------------------- References: [ 1 ] Bug #858069 - Review Request: mingw-qt5-qtlocation - Qt5 for Windows - QtLocation component https://bugzilla.redhat.com/show_bug.cgi?id=858069 -------------------------------------------------------------------------------- ================================================================================ opencv-2.4.6.1-1.fc18 (FEDORA-2013-14185) Collection of algorithms for computer vision -------------------------------------------------------------------------------- Update Information: Update to 2.4.6.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 24 2013 Nicolas Chauvet <kwizart@xxxxxxxxx> - 2.4.6.1-1 - Update to 2.4.6.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #991552 - Please update to OpenCV 2.4.6 https://bugzilla.redhat.com/show_bug.cgi?id=991552 -------------------------------------------------------------------------------- ================================================================================ perl-MooseX-ClassAttribute-0.27-1.fc18 (FEDORA-2013-14193) Declare class attributes Moose-style -------------------------------------------------------------------------------- Update Information: This update fixes compatibility with Moose 2.08 -------------------------------------------------------------------------------- ChangeLog: * Sat Aug 3 2013 Iain Arnell <iarnell@xxxxxxxxx> 0.27-1 - udpate to latest upstream version * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.26-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #986016 - perl-MooseX-ClassAttribute-0.26 broken w/shipped perl-Moose-2.0802 https://bugzilla.redhat.com/show_bug.cgi?id=986016 -------------------------------------------------------------------------------- ================================================================================ tito-0.4.17-1.fc18 (FEDORA-2013-14188) A tool for managing rpm based git projects -------------------------------------------------------------------------------- Update Information: Fix permissions sources fedpkg modifies. -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 2 2013 Devan Goodwin <dgoodwin@xxxxxxxx> 0.4.17-1 - Fix permissions after a Fedora/Brew build. (dgoodwin@xxxxxxxxxx) - Comment out old nightly releaser. (dgoodwin@xxxxxxxxxx) - add newline to sys.stderr.write (msuchy@xxxxxxxxxx) -------------------------------------------------------------------------------- ================================================================================ v8-3.14.5.10-2.fc18 (FEDORA-2013-14205) JavaScript Engine -------------------------------------------------------------------------------- Update Information: This update fixes an issue with Google V8, as used in Google Chrome before 28.0.1500.95, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion." Please note that this issue's impact on Node.js is somewhat lessened since it does not typically execute JavaScript from foreign sources. -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 2 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 1:3.14.5.10-2 - backport fix for remote DoS or unspecified other impact via type confusion (RHBZ#991116; CVE-2013-2882) -------------------------------------------------------------------------------- References: [ 1 ] Bug #991116 - CVE-2013-2882 v8: remote DoS or unspecified other impact via type confusion https://bugzilla.redhat.com/show_bug.cgi?id=991116 -------------------------------------------------------------------------------- ================================================================================ youtube-dl-2013.08.02-1.fc18 (FEDORA-2013-14187) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information: New version. New version. -------------------------------------------------------------------------------- ChangeLog: * Sat Aug 3 2013 Christopher Meng <rpm@xxxxxxxx> - 2013.08.02-1 - Update to new release. * Mon Jul 22 2013 Christopher Meng <rpm@xxxxxxxx> - 2013.07.25.2-1 - Update to new release. * Mon Jul 22 2013 Christopher Meng <rpm@xxxxxxxx> - 2013.07.19-1 - Update to new release. * Thu Jul 18 2013 Christopher Meng <rpm@xxxxxxxx> - 2013.07.17.1-1 - Update to new release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #990505 - youtube-dl-2013.07.31 is available https://bugzilla.redhat.com/show_bug.cgi?id=990505 [ 2 ] Bug #990038 - youtube-dl-2013.07.25.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=990038 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
