The following Fedora 19 Security updates need testing: Age URL 44 https://admin.fedoraproject.org/updates/FEDORA-2013-14029/zabbix-2.0.6-3.fc19 31 https://admin.fedoraproject.org/updates/FEDORA-2013-14814/python-glanceclient-0.9.0-3.fc19 12 https://admin.fedoraproject.org/updates/FEDORA-2013-15710/graphite-web-0.9.12-1.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2013-15925/pyOpenSSL-0.13.1-1.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2013-15984/mediawiki-1.21.2-1.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2013-16225/tinyproxy-1.8.3-1.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2013-16232/roundcubemail-0.9.4-1.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2013-16357/xen-4.2.3-1.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2013-16317/polarssl-1.2.8-1.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2013-16376/rubygems-2.0.8-104.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-16505/python-django-1.5.3-1.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-16475/python-django14-1.4.7-1.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2013-16476/moodle-2.4.6-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-16601/glpi-0.83.9.1-4.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-16798/proftpd-1.3.4d-4.fc19 The following Fedora 19 Critical Path updates have yet to be approved: Age URL 18 https://admin.fedoraproject.org/updates/FEDORA-2013-15459/kbd-1.15.5-7.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2013-15666/perl-Encode-2.54-1.fc19 10 https://admin.fedoraproject.org/updates/FEDORA-2013-15788/policycoreutils-2.1.14-46.5.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2013-15925/pyOpenSSL-0.13.1-1.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2013-16224/gdb-7.6.1-41.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2013-16353/gupnp-0.20.6-1.fc19,gssdp-0.14.5-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2013-16691/control-center-3.8.5-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-16797/gdisk-0.8.7-2.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-16818/systemd-204-13.fc19 The following builds have been pushed to Fedora 19 updates-testing etckeeper-1.9-1.fc19 gdisk-0.8.7-2.fc19 gnome-chemistry-utils-0.14.3-1.fc19 gnome-tweak-tool-3.8.1-2.fc19 gnumeric-1.12.7-1.fc19 goffice-0.10.7-1.fc19 ikiwiki-3.20130904.1-1.fc19 jdom2-2.0.5-1.fc19 mate-desktop-1.6.1-14.fc19 meld-1.8.0-1.fc19 pcp-3.8.4-1.fc19 pcp-gui-1.5.10-1.fc19 php-guzzle-Guzzle-3.7.3-1.fc19 proftpd-1.3.4d-4.fc19 python-PyRSS2Gen-1.1-4.fc19 rubygem-narray-0.6.0.8-2.fc19 sagemath-5.9-8.fc19 systemd-204-13.fc19 waf-1.7.13-1.fc19 Details about builds: ================================================================================ etckeeper-1.9-1.fc19 (FEDORA-2013-16803) Store /etc in a SCM system (git, mercurial, bzr or darcs) -------------------------------------------------------------------------------- Update Information: Update to the latest stable release. From the upstream changelog: * Fix git update-ignore syntax. Closes: #721873 * Avoid listing .gitignored files in .etckeeper file. Closes: #607665 Thanks, Zdenek Crha -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 12 2013 Thomas Moschny <thomas.moschny@xxxxxx> - 1.9-1 - Update to 1.9. -------------------------------------------------------------------------------- ================================================================================ gdisk-0.8.7-2.fc19 (FEDORA-2013-16797) An fdisk-like partitioning tool for GPT disks -------------------------------------------------------------------------------- Update Information: Fix crash in sgdisk when using out of bounds arguments. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 13 2013 Richard W.M. Jones <rjones@xxxxxxxxxx> - 0.8.7-2 - Range check -i option (RHBZ#1007847). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1007847 - sgdisk -i segfaults when parameter is too large https://bugzilla.redhat.com/show_bug.cgi?id=1007847 -------------------------------------------------------------------------------- ================================================================================ gnome-chemistry-utils-0.14.3-1.fc19 (FEDORA-2013-16753) A set of chemical utilities -------------------------------------------------------------------------------- Update Information: This is an update to the latest upstream releases of gnumeric, gnome-chemistry-utils and goffice: * https://projects.gnome.org/gnumeric/announcements/1.12/gnumeric-1.12.6.shtml * https://projects.gnome.org/gnumeric/announcements/1.12/gnumeric-1.12.7.shtml * https://savannah.nongnu.org/forum/forum.php?forum_id=7717 -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 14 2013 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 0.14.3-1 - Updated to 0.14.3 * Sat Sep 14 2013 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 0.14.2-7 - Rebuilt for gnumeric-1.12.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1007643 - [abrt] gnumeric-1.12.5-1.fc19: scg_find_pane: Process /usr/bin/gnumeric-1.12.5 was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=1007643 -------------------------------------------------------------------------------- ================================================================================ gnome-tweak-tool-3.8.1-2.fc19 (FEDORA-2013-16813) A tool to customize advanced GNOME 3 options -------------------------------------------------------------------------------- Update Information: This updates allows GNOME Shell themes to be loaded from the ~/.local/share/themes directory. -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 14 2013 Mohamed El Morabity <melmorabity@xxxxxxxxxxxxxxxxx> - 3.8.1-2 - Drop gnome-tweak-tool-3.8.0-shell_themes.patch patch, since theme search is fixed with GS user theme extension 3.8.4 -------------------------------------------------------------------------------- ================================================================================ gnumeric-1.12.7-1.fc19 (FEDORA-2013-16753) Spreadsheet program for GNOME -------------------------------------------------------------------------------- Update Information: This is an update to the latest upstream releases of gnumeric, gnome-chemistry-utils and goffice: * https://projects.gnome.org/gnumeric/announcements/1.12/gnumeric-1.12.6.shtml * https://projects.gnome.org/gnumeric/announcements/1.12/gnumeric-1.12.7.shtml * https://savannah.nongnu.org/forum/forum.php?forum_id=7717 -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 14 2013 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 1:1.12.7-1 - Updated to 1.12.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1007643 - [abrt] gnumeric-1.12.5-1.fc19: scg_find_pane: Process /usr/bin/gnumeric-1.12.5 was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=1007643 -------------------------------------------------------------------------------- ================================================================================ goffice-0.10.7-1.fc19 (FEDORA-2013-16753) G Office support libraries -------------------------------------------------------------------------------- Update Information: This is an update to the latest upstream releases of gnumeric, gnome-chemistry-utils and goffice: * https://projects.gnome.org/gnumeric/announcements/1.12/gnumeric-1.12.6.shtml * https://projects.gnome.org/gnumeric/announcements/1.12/gnumeric-1.12.7.shtml * https://savannah.nongnu.org/forum/forum.php?forum_id=7717 -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 14 2013 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 0.10.7-1 - Updated to 0.10.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1007643 - [abrt] gnumeric-1.12.5-1.fc19: scg_find_pane: Process /usr/bin/gnumeric-1.12.5 was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=1007643 -------------------------------------------------------------------------------- ================================================================================ ikiwiki-3.20130904.1-1.fc19 (FEDORA-2013-16800) A wiki compiler -------------------------------------------------------------------------------- Update Information: Update to the latest stable release. From the upstream changelog: * Fix cookiejar default setting. * calendar: Display the popup mouseover when there is only 1 page for a given day, for better UI consistency. * meta: Can now be used to add an enclosure to a page, which is a fancier way to do podcasting than just inlining the media files directly; this way you can write a post about the podcast episode with show notes, author information, etc. (schmonz) * aggregate: Show author in addition to feedname, if different. (schmonz) * Consistently configure LWP::UserAgent to allow use of http_proxy and no_proxy environment variables, as well as ~/.ikiwiki/cookies (schmonz) * Fix test suite to work with perl 5.18. Closes: #719969 -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 12 2013 Thomas Moschny <thomas.moschny@xxxxxx> - 3.20130904.1-1 - Update to 3.20130904.1. * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.20130711-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ jdom2-2.0.5-1.fc19 (FEDORA-2013-16822) Java manipulation of XML made easy -------------------------------------------------------------------------------- Update Information: Initial import (#1007486). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1007486 - Review Request: jdom2 - Java manipulation of XML made easy https://bugzilla.redhat.com/show_bug.cgi?id=1007486 -------------------------------------------------------------------------------- ================================================================================ mate-desktop-1.6.1-14.fc19 (FEDORA-2013-16824) Shared code for mate-panel, mate-session, mate-file-manager, etc -------------------------------------------------------------------------------- Update Information: - versioned and use a epoch for mate-bluetooth obsoletes -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 14 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1.6.1-14 - versioned mate-bluetooth obsolete * Sat Sep 14 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1.6.1-13 - obsolete mate-bluetooth-libs and mate-bluetooth-devel too * Fri Sep 13 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1.6.1-12 - obsolete mate-bluetooth for f20 -------------------------------------------------------------------------------- ================================================================================ meld-1.8.0-1.fc19 (FEDORA-2013-16823) Visual diff and merge tool -------------------------------------------------------------------------------- Update Information: This update brings the new Meld 1.8.0 to you. This update brings the new Meld 1.7.5 to your home. This update is bringing the new Meld 1.7.5 to your home. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 15 2013 Dominic Hopf <dmaphy@xxxxxxxxxxxxxxxxx> - 1.8.0-1 - New upstream release: Meld 1.8.0 * Sun Sep 1 2013 Dominic Hopf <dmaphy@xxxxxxxxxxxxxxxxx> - 1.7.5-1 - New upstream release: Meld 1.7.5 Tue Jun 04 2013 Dominic Hopf <dmaphy@xxxxxxxxxxxxxxxxx> - 1.7.3-1 - New upstream release: Meld 1.7.3 -------------------------------------------------------------------------------- ================================================================================ pcp-3.8.4-1.fc19 (FEDORA-2013-16815) System-level performance monitoring and performance management -------------------------------------------------------------------------------- Update Information: Update to latest community sources -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 15 2013 Nathan Scott <nathans@xxxxxxxxxx> - 3.8.4-1 - Very minor release containing mostly QA related changes. - Enables many more metrics to be logged for Linux hosts. * Mon Sep 9 2013 Nathan Scott <nathans@xxxxxxxxxx> - 3.8.3-1 - Default to Unix domain socket (authenticated) local connections. - Introduces new pcp-pmda-infiniband sub-package. * Sat Aug 3 2013 Petr Pisar <ppisar@xxxxxxxxxx> - 3.8.2-1.1 - Perl 5.18 rebuild -------------------------------------------------------------------------------- ================================================================================ pcp-gui-1.5.10-1.fc19 (FEDORA-2013-16820) Visualization tools for the Performance Co-Pilot toolkit -------------------------------------------------------------------------------- Update Information: Update to latest community sources -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 9 2013 Nathan Scott <nathans@xxxxxxxxxx> - 1.5.10-1 - Updates to the PCP Users and Administrators Guide. - Updates to the PCP Programmers Guide. - Install a known-good pdf version of each book. - Improve pmchart hostname reporting via pmGetContextHostName. -------------------------------------------------------------------------------- ================================================================================ php-guzzle-Guzzle-3.7.3-1.fc19 (FEDORA-2013-16807) PHP HTTP client library and framework for building RESTful web service clients -------------------------------------------------------------------------------- Update Information: 3.7.3 (2013-09-08) * Added the ability to get the exception associated with a request/command when using `MultiTransferException` and `CommandTransferException`. * Setting `additionalParameters` of a response to false is now honored when parsing responses with a service description * Schemas are only injected into response models when explicitly configured. * No longer guessing Content-Type based on the path of a request. Content-Type is now only guessed based on the path of an EntityBody. * Bug fix: ChunkedIterator can now properly chunk a \Traversable as well as an \Iterator. * Bug fix: FilterIterator now relies on `\Iterator` instead of `\Traversable`. * Bug fix: Gracefully handling malformed responses in RequestMediator::writeResponseBody() * Bug fix: Replaced call to canCache with canCacheRequest in the CallbackCanCacheStrategy of the CachePlugin * Bug fix: Visiting XML attributes first before visting XML children when serializing requests * Bug fix: Properly parsing headers that contain commas contained in quotes * Bug fix: mimetype guessing based on a filename is now case-insensitive Full change log: https://github.com/guzzle/guzzle/blob/v3.7.3/CHANGELOG.md -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 14 2013 Shawn Iwinski <shawn.iwinski@xxxxxxxxx> 3.7.3-1 - Updated to 3.7.3 - Added php-xmlwriter require -------------------------------------------------------------------------------- References: [ 1 ] Bug #1006004 - php-guzzle-Guzzle-3.7.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1006004 -------------------------------------------------------------------------------- ================================================================================ proftpd-1.3.4d-4.fc19 (FEDORA-2013-16798) Flexible, stable and highly-configurable FTP server -------------------------------------------------------------------------------- Update Information: This update addresses an issue with mod_sftp and mod_sftp_pam in which a malicious client could cause the server to make extremely large memory requests and potentially crash. -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 14 2013 Paul Howarth <paul@xxxxxxxxxxxx> 1.3.4d-4 - Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint authentication (#1007678, upstream bug #3973) * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> 1.3.4d-2.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Wed Jul 17 2013 Petr Pisar <ppisar@xxxxxxxxxx> 1.3.4d-2.1 - Perl 5.18 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1007679 - proftpd: mod_sftp/mod_sftp_pam invalid pool allocation during kbdint authentication [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1007679 -------------------------------------------------------------------------------- ================================================================================ python-PyRSS2Gen-1.1-4.fc19 (FEDORA-2013-16821) A Python library for generating RSS 2.0 feeds -------------------------------------------------------------------------------- Update Information: Here is a new python library for Fedora, used to create an RSS feed. Enjoy. -------------------------------------------------------------------------------- ================================================================================ rubygem-narray-0.6.0.8-2.fc19 (FEDORA-2013-16812) N-dimensional Numerical Array class for Ruby -------------------------------------------------------------------------------- Update Information: obsoleted common, common-devel and doc pkg - moved some development-related files from main to devel pkg - removed some unneeded files, e.g. the copy of sources inside %{gem_instdir} NArray is a Numerical N-dimensional Array class. Supported element types are 1/2/4-byte Integer, single/double-precision, Real/Complex and Ruby Object. This extension library incorporates fast calculation and easy manipulation of large numerical arrays into the Ruby language. NArray has features similar to NumPy, but NArray has vector and matrix sub-classes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1005463 - Review Request: rubygem-narray - N-dimensional Numerical Array class for Ruby https://bugzilla.redhat.com/show_bug.cgi?id=1005463 -------------------------------------------------------------------------------- ================================================================================ sagemath-5.9-8.fc19 (FEDORA-2013-16801) A free open-source mathematics software system -------------------------------------------------------------------------------- Update Information: Do not hardcode firefox as browser and remove no longer need pre scriptlet -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 14 2013 pcpa <paulo.cesar.pereira.de.andrade@xxxxxxxxx> - 5.9-8 - Do not hardcode SAGE_BROWSER (#967251) - Remove pre(trans) scriptlet used to upgrade from prototype packages * Tue Sep 10 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 5.9-7 - pretrans scriplet uses shell commands (#1006230) -------------------------------------------------------------------------------- References: [ 1 ] Bug #967251 - sagemath: Hardcoded Requires: firefox https://bugzilla.redhat.com/show_bug.cgi?id=967251 [ 2 ] Bug #1006230 - pretrans scriplet uses shell commands https://bugzilla.redhat.com/show_bug.cgi?id=1006230 -------------------------------------------------------------------------------- ================================================================================ systemd-204-13.fc19 (FEDORA-2013-16818) A System and Service Manager -------------------------------------------------------------------------------- Update Information: Backport a bunch of fixes from upstream. Only a few correspond to bug reports, and others correct display issues, memory access, and correctness of operation. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 6 2013 Zbigniew Jędrzejewski-Szmek <zbyszek@xxxxxxxxx> 204-13 - Backport a bunch of fixes (#995575 and others). * Fri Sep 6 2013 Zbigniew Jędrzejewski-Szmek <zbyszek@xxxxxxxxx> 204-12 - Add ownership of a few directories that we create (#894202). -------------------------------------------------------------------------------- References: [ 1 ] Bug #894202 - missing directory ownership https://bugzilla.redhat.com/show_bug.cgi?id=894202 [ 2 ] Bug #988814 - wrong SYSLOG_FACILITY reported for authpriv messages, sshd logs in /var/log/messages, not /var/log/secure https://bugzilla.redhat.com/show_bug.cgi?id=988814 -------------------------------------------------------------------------------- ================================================================================ waf-1.7.13-1.fc19 (FEDORA-2013-16809) A Python-based build system -------------------------------------------------------------------------------- Update Information: Update to the latest stable release. From the upstream changelog: * Fix for library installation on OpenBSD #1355 * Intel compiler detection fix when using Python3 #1356 * Fix for systems without threading #1323 * Fix for library installation on OpenBSD * Propagate the max_depth argument in ant_glob #1328 * wsdk detection fix #1335 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 10 2013 Thomas Moschny <thomas.moschny@xxxxxx> - 1.7.13-1 - Update to 1.7.13. * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.7.11-1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
