The following Fedora 20 Security updates need testing: Age URL 8 https://admin.fedoraproject.org/updates/FEDORA-2013-17828/davfs2-1.4.7-3.fc20 7 https://admin.fedoraproject.org/updates/FEDORA-2013-17923/fedmsg-0.7.1-2.fc20 7 https://admin.fedoraproject.org/updates/FEDORA-2013-17866/chicken-4.8.0.4-4.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2013-18142/php-pecl-xhprof-0.9.4-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2013-18144/libvirt-1.1.3-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2013-18202/glpi-0.84.2-1.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2013-18241/xinetd-2.3.15-8.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2013-18216/polarssl-1.2.9-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2013-18323/elinks-0.12-0.36.pre6.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2013-18300/xen-4.3.0-7.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2013-18314/zabbix-2.0.8-3.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-18442/rtkit-0.11-7.fc20 The following Fedora 20 Critical Path updates have yet to be approved: Age URL 9 https://admin.fedoraproject.org/updates/FEDORA-2013-17752/lorax-20.2-1.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2013-17976/elfutils-0.157-1.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2013-17985/amor-4.11.2-1.fc20,analitza-4.11.2-1.fc20,ark-4.11.2-1.fc20,audiocd-kio-4.11.2-1.fc20,blinken-4.11.2-1.fc20,cantor-4.11.2-1.fc20,dragon-4.11.2-1.fc20,filelight-4.11.2-1.fc20,gwenview-4.11.2-1.fc20,jovie-4.11.2-1.fc20,juk-4.11.2-1.fc20,kaccessible-4.11.2-1.fc20,kactivities-4.11.2-1.fc20,kalgebra-4.11.2-1.fc20,kalzium-4.11.2-1.fc20,kamera-4.11.2-1.fc20,kanagram-4.11.2-1.fc20,kate-4.11.2-1.fc20,kbruch-4.11.2-1.fc20,kcalc-4.11.2-1.fc20,kcharselect-4.11.2-1.fc20,kcolorchooser-4.11.2-1.fc20,kcron-4.11.2-1.fc20,kdeaccessibility-4.11.2-1.fc20,kdeadmin-4.11.2-1.fc20,kdeartwork-4.11.2-1.fc20,kde-baseapps-4.11.2-1.fc20,kde-base-artwork-4.11.2-1.fc20,kdebindings-4.11.2-1.fc20,kdeedu-4.11.2-1.fc20,kdegraphics-4.11.2-1.fc20,kdegraphics-mobipocket-4.11.2-1.fc20,kdegraphics-strigi-analyzer-4.11.2-1.fc20,kdegraphics-thumbnailers-4.11.2-1.fc20,kdelibs-4.11.2-1.fc20,kdemultimedia-4.11.2-1.fc20,kdenetwork-4.11.2-1.fc20,kdenetwork-filesharing-4.11.2-1.fc20,kdenetwork-strigi-analyzers-4.11.2-1.fc20,kdepim-4.11.2-1.fc20,kdepimlibs-4.11.2-1.fc20,kdepim-runtime-4.11.2-1.fc20,kdeplasma-addons-4.11.2-1.fc20,kde-print-manager-4.11.2-1.fc20,kde-runtime-4.11.2-1.fc20,kdetoys-4.11.2-1.fc20,kdeutils-4.11.2-1.fc20,kde-wallpapers-4.11.2-1.fc20,kde-workspace-4.11.2-1.fc20,kdf-4.11.2-1.fc20,kdnssd-4.11.2-1.fc20,kfloppy-4.11.2-1.fc20,kgamma-4.11.2-1.fc20,kgeography-4.11.2-1.fc20,kget-4.11.2-1.fc20,kgpg-4.11.2-1.fc20,khangman-4.11.2-1.fc20,kig-4.11.2-1.fc20,kimono-4.11.2-1.fc20,kiten-4.11.2-1.fc20,klettres-4.11.2-1.fc20,kmag-4.11.2-1.fc20,kmix-4.11.2-1.fc20,kmousetool-4.11.2-1.fc20,kmouth-4.11.2-1.fc20,kmplot-4.11.2-1.fc20,kolourpaint-4.11.2-1.fc20,konsole-4.11.2-1.fc20,kopete-4.11.2-1.fc20,kppp-4.11.2-1.fc20,krdc-4.11.2-1.fc20,kremotecontrol-4.11.2-1.fc20,krfb-4.11.2-1.fc20,kross-interpreters-4.11.2-1.fc20,kruler-4.11.2-1.fc20,ksaneplugin-4.11.2-1.fc20,kscd-4.11.2-1.fc20,ksnapshot-4.11.2-1.fc20,kstars-4.11.2-1.fc20,ksystemlog-4.11.2-1.fc20,kteatime-4.11.2-1.fc20,ktimer-4.11.2-1.fc20,kto uch-4.11.2-1.fc20,kturtle-4.11.2-1.fc20,ktux-4.11.2-1.fc20,kuser-4.11.2-1.fc20,kwallet-4.11.2-1.fc20,kwordquiz-4.11.2-1.fc20,libkcddb-4.11.2-1.fc20,libkcompactdisc-4.11.2-1.fc20,libkdcraw-4.11.2-1.fc20,libkdeedu-4.11.2-1.fc20,libkexiv2-4.11.2-1.fc20,libkipi-4.11.2-1.fc20,libksane-4.11.2-1.fc20,marble-4.11.2-1.fc20,nepomuk-core-4.11.2-1.fc20,nepomuk-widgets-4.11.2-1.fc20,okular-4.11.2-1.fc20,oxygen-icon-theme-4.11.2-1.fc20,pairs-4.11.2-1.fc20,parley-4.11.2-1.fc20,pykde4-4.11.2-1.fc20,qyoto-4.11.2-1.fc20,rocs-4.11.2-1.fc20,ruby-korundum-4.11.2-1.fc20,ruby-qt-4.11.2-1.fc20,smokegen-4.11.2-1.fc20,smokekde-4.11.2-1.fc20,smokeqt-4.11.2-1.fc20,step-4.11.2-1.fc20,superkaramba-4.11.2-1.fc20,svgpart-4.11.2-1.fc20,sweeper-4.11.2-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2013-18058/groff-1.22.2-8.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2013-18161/samba-4.1.0-0.8.rc4.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2013-18201/telepathy-glib-0.22.0-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2013-18191/initial-setup-0.3.9-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2013-18158/tigervnc-1.3.0-7.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2013-18174/perl-threads-1.89-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2013-18154/perl-Getopt-Long-2.42-1.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2013-18267/dnsmasq-2.67-0.8.rc2.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2013-18084/krb5-1.11.3-21.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2013-18334/keyutils-1.5.8-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2013-18298/ibus-1.5.4-2.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2013-18333/iso-codes-3.47-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-18451/plymouth-0.8.9-1.2013.08.14.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-18442/rtkit-0.11-7.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-18448/yum-utils-1.1.31-18.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-18450/python-urlgrabber-3.9.1-32.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-18444/hwdata-0.256-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-18447/createrepo-0.9.9-23.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-18420/thunderbird-24.0-3.fc20,thunderbird-lightning-2.6-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-18430/anaconda-20.22-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-18435/uboot-tools-2013.10-0.5.rc4.fc20 The following builds have been pushed to Fedora 20 updates-testing babel-1.3-2.fc20 createrepo-0.9.9-23.fc20 fakeroot-1.18.4-2.fc20 geoclue2-2.0.0-1.fc20 hwdata-0.256-1.fc20 lv2-x42-plugins-0.1.1-0.3.20131005git7db99d5.fc20 nfs-utils-1.2.8-6.0.fc20 perl-IO-All-0.47-1.fc20 perl-IPC-Shareable-0.61-1.fc20 plymouth-0.8.9-1.2013.08.14.fc20 python-urlgrabber-3.9.1-32.fc20 rtkit-0.11-7.fc20 setroubleshoot-plugins-3.0.58-1.fc20 unbound-1.4.21-1.fc20 xorg-x11-drv-wacom-0.23.0-1.fc20 yum-utils-1.1.31-18.fc20 Details about builds: ================================================================================ babel-1.3-2.fc20 (FEDORA-2013-18438) Tools for internationalizing Python applications -------------------------------------------------------------------------------- Update Information: update to Babel 1.3 and enable python 3 support -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 6 2013 Felix Schwarz <fschwarz@xxxxxxxxxxxxxxxxx> - 1.3-2 - enable python3 subpackage * Wed Oct 2 2013 Felix Schwarz <fschwarz@xxxxxxxxxxxxxxxxx> - 1.3-1 - update to Babel 1.3 - disabled %check as it tries to download the CLDR -------------------------------------------------------------------------------- References: [ 1 ] Bug #1014560 - babel: Support Python 3 https://bugzilla.redhat.com/show_bug.cgi?id=1014560 -------------------------------------------------------------------------------- ================================================================================ createrepo-0.9.9-23.fc20 (FEDORA-2013-18447) Creates a common metadata repository -------------------------------------------------------------------------------- Update Information: Update to latest HEAD -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 1 2013 Zdenek Pavlas <zpavlas@xxxxxxxxxx> - 0.9.9-23 - update to latest HEAD - docs: Escape dashes in command-line options - chdir("/") if $PWD does not exist. BZ 1001629 - modifyrepo: automatic option defaults - modifyrepo: sanitize opts.sumtype. BZ 1013614 - modifyrepo: Add <open-size> element. BZ 1013601 - modifyrepo --remove: fix multiple bugs. BZ 1013626 - modifyrepo: fix handling of already compressed input. BZ 1013733 -------------------------------------------------------------------------------- ================================================================================ fakeroot-1.18.4-2.fc20 (FEDORA-2013-18441) Gives a fake root environment -------------------------------------------------------------------------------- Update Information: Add Debian-style alternatives to switch "fakeroot" between fakeroot-{tcp|sysv} -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 26 2013 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 1.18.4-2 - Add alternatives (Mimic Debian's behavior). -------------------------------------------------------------------------------- ================================================================================ geoclue2-2.0.0-1.fc20 (FEDORA-2013-18445) Geolocation service -------------------------------------------------------------------------------- Update Information: GeoClue 2.0.0 release with minor changes compared to the previous 1.99.4 build in Fedora 20. On the packaging side, this update moves the home directory for the 'geoclue' system user from / to /var/lib/geoclue/ -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 6 2013 Kalev Lember <kalevlember@xxxxxxxxx> - 2.0.0-1 - Update to 2.0.0 - Create a home directory for the 'geoclue' user -------------------------------------------------------------------------------- ================================================================================ hwdata-0.256-1.fc20 (FEDORA-2013-18444) Hardware identification and configuration data -------------------------------------------------------------------------------- Update Information: Updated pci, usb and vendor ids. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 22 2013 Michal Minar <miminar@xxxxxxxxxx> 0.256-1 - Update of pci, oui and usb ids. * Wed Aug 21 2013 Michal Minar <miminar@xxxxxxxxxx> 0.255-1 - Update of pci, oui and usb ids. -------------------------------------------------------------------------------- ================================================================================ lv2-x42-plugins-0.1.1-0.3.20131005git7db99d5.fc20 (FEDORA-2013-18446) A number of LV2 plugins -------------------------------------------------------------------------------- Update Information: This update adds the new meters.lv2 plugin and corrects compilation of the balance.lv2 UI x42-plugins is a collection of LV2 plugins including a MIDI-filter, fader, convolver and no delay x42-plugins is a collection of LV2 plugins including a MIDI-filter, fader, convolver and no delay x42-plugins is a collection of LV2 plugins including a MIDI-filter, fader, convolver and no delay -------------------------------------------------------------------------------- References: [ 1 ] Bug #1003768 - Review Request: lv2-x42-plugins - a collection of LV2 audio plugins https://bugzilla.redhat.com/show_bug.cgi?id=1003768 -------------------------------------------------------------------------------- ================================================================================ nfs-utils-1.2.8-6.0.fc20 (FEDORA-2013-18443) NFS utilities and supporting clients and daemons for the kernel NFS server -------------------------------------------------------------------------------- Update Information: Updated to latest upstream RC release: nfs-utils-1-2-9-rc6 * Make mountstats Python 3 compatible * Make nfsiostat Python 3 compatible * exportfs: test_export shouldn't use invalid uid/gid * exportfs: Fix the default authentication flavour setting * gssd: don't use tgtname to find our keytab * gssd: fix strncmp bug causing client removals -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 24 2013 Steve Dickson <steved@xxxxxxxxxx> 1.2.8-6.0 - Updated to latest upstream RC release: nfs-utils-1-2-9-rc6 * Wed Sep 18 2013 Steve Dickson <steved@xxxxxxxxxx> 1.2.8-5.0 - Updated to latest upstream RC release: nfs-utils-1-2-9-rc5 -------------------------------------------------------------------------------- ================================================================================ perl-IO-All-0.47-1.fc20 (FEDORA-2013-18440) IO::All Perl module -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 6 2013 Paul Howarth <paul@xxxxxxxxxxxx> - 0.47-1 - Update to 0.47 - Add ->glob method to ::Dir - Add list based constructors to ::Dir and ::File - Add ->mimetype method to ::FileSys - Add ->ext method to ::FileSys - All tests should be parallelizable - This release by FREW -> update source URL - Specify all dependencies - Make %files list more explicit - Don't use macros for commands - Drop redundant %{?perl_default_filter} -------------------------------------------------------------------------------- ================================================================================ perl-IPC-Shareable-0.61-1.fc20 (FEDORA-2013-18452) Share Perl variables between processes -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 6 2013 Paul Howarth <paul@xxxxxxxxxxxx> - 0.61-1 - Update to 0.61 - Added patch fixing IPC::Shareable's dependence on the presence of a perl bug that is no longer present in perl ≥ 5.10 - Fixed bug where the FETCH operation on a tie()d string containing HASH, ARRAY, or SCALAR failed because it was using the stringification of the data to determine what kind of reference it was - Added missing dependency on IPC::Semaphore to Makefile.PL - Added a 'sleep 1' in a test that was hanging on certain systems due (possibly) to two alarm signals coming too quickly to the child process - This release by MSOUTH -> update source URL - Drop upstreamed patches - Specify all dependencies - Use %{_fixperms} macro rather than our own chmod incantation - Use DESTDIR rather than PERL_INSTALL_ROOT - Don't need to remove empty directories from the buildroot - Don't use macros for commands - Drop %defattr, redundant since rpm 4.4 - Make %files list more explicit -------------------------------------------------------------------------------- ================================================================================ plymouth-0.8.9-1.2013.08.14.fc20 (FEDORA-2013-18451) Graphical Boot Animation and Logger -------------------------------------------------------------------------------- Update Information: This update fixes the plymouth release number to make sure the F20 plymouth build updates the F19 build, according to rpm version comparison rules. -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 6 2013 Kalev Lember <kalevlember@xxxxxxxxx> - 0.8.9-1.2013.08.14 - Make sure the release number compares higher than the previous builds -------------------------------------------------------------------------------- ================================================================================ python-urlgrabber-3.9.1-32.fc20 (FEDORA-2013-18450) A high-level cross-protocol url-grabber -------------------------------------------------------------------------------- Update Information: Update to latest HEAD Fixes: * 1001767 - Negative downloading speed in yum * 853432 - Yum with parallel download cannot download packages from repo that allow only single connection -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 27 2013 Zdenek Pavlas <zpavlas@xxxxxxxxxx> - 3.9.1-32 - Update to latest HEAD. - Switch to max_connections=1 after refused connect. BZ 853432 - Never display negative downloading speed. BZ 1001767 * Thu Aug 29 2013 Zdenek Pavlas <zpavlas@xxxxxxxxxx> - 3.9.1-31 - Update to latest HEAD. - add ftp_disable_epsv option. BZ 849177 - Spelling fixes. - docs: throttling is per-connection, suggest max_connections=1. BZ 998263 - More robust "Content-Length" parsing. BZ 1000841 -------------------------------------------------------------------------------- ================================================================================ rtkit-0.11-7.fc20 (FEDORA-2013-18442) Realtime Policy and Watchdog Daemon -------------------------------------------------------------------------------- Update Information: CVE-2013-4326 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 23 2013 Colin Walters <walters@xxxxxxxxxx> - 0.11-7 - CVE-2013-4326 Resolves: #1009543 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1009543 - CVE-2013-4326 rtkit: insecure calling of polkit [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1009543 -------------------------------------------------------------------------------- ================================================================================ setroubleshoot-plugins-3.0.58-1.fc20 (FEDORA-2013-18437) Analysis plugins for use with setroubleshoot -------------------------------------------------------------------------------- Update Information: * Update Translations * Add restorecon_source plugin, to check the source program is labeled correclty. * Fix restorecon.py to handle customized_files properly. * Fix debug message in sandbox-connect plugin -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 22 2013 Dan Walsh <dwalsh@xxxxxxxxxx> - 3.0.58-1 - Update Translations -------------------------------------------------------------------------------- ================================================================================ unbound-1.4.21-1.fc20 (FEDORA-2013-18449) Validating, recursive, and caching DNS(SEC) resolver -------------------------------------------------------------------------------- Update Information: Various minor bugfixes, new max-udp-size: 3072 option to reduce harm caused by DNS Amplification attacks -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 19 2013 Paul Wouters <pwouters@xxxxxxxxxx> - 1.4.21-1 - Updated to 1.4.21, - Enabled new max-udp-size: 3072 (so ANY isc.org won't fit) - Removed patched merged in by upstream - Enable statistics-cumulative for munin-plugin - Added outgoing-port-avoid: 0-32767 conformant to SElinux restrictions - Updated unbound.conf -------------------------------------------------------------------------------- ================================================================================ xorg-x11-drv-wacom-0.23.0-1.fc20 (FEDORA-2013-18439) Xorg X11 wacom input driver -------------------------------------------------------------------------------- Update Information: Update to 0.23.0 which includes Intuos Pro support -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 28 2013 Peter Hutterer <peter.hutterer@xxxxxxxxxx> 0.23.0-1 - wacom 0.23.0 -------------------------------------------------------------------------------- ================================================================================ yum-utils-1.1.31-18.fc20 (FEDORA-2013-18448) Utilities based around the yum package manager -------------------------------------------------------------------------------- Update Information: Update to latest HEAD Fixes: * 996027 - [abrt] yum-utils-1.1.31-16.fc19: config.py:1187:_getsysver:YumBaseError: Error: rpmdb open failed * 1004089 - yumdownloader can't download package when there's an oversize RPM in the destdir. * 1010974 - [abrt] yum-3.4.3-106.fc19: subprocess.py:1308:_execute_child:OSError: [Errno 2] No such file or directory * 984216 - yum-config-manager can not configure local repositories in an isolated network -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 27 2013 Zdenek Pavlas <zpavlas@xxxxxxxxxx> - 1.1.31-18 - Update to latest HEAD - repoquery: handle Yum exceptions on .conf setup. BZ 996027 - repo-rss: non-ASCII fix, sorting - Add repoquery --installroot completion. - Add --nogroups and --noplugins options to verifytree. - yumdownloader: make --destdir less of a hack. BZ 1004089 - fs-snapshot: btrfsctl is obsolete, use btrfs. BZ 1010974 - yum-config-manager: fix --add-repo. BZ 984216 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
