The following Fedora 18 Security updates need testing: Age URL 236 https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2-1.fc18 82 https://admin.fedoraproject.org/updates/FEDORA-2013-17195/spice-gtk-0.18-3.fc18 79 https://admin.fedoraproject.org/updates/FEDORA-2013-17431/thunderbird-17.0.9-1.fc18 76 https://admin.fedoraproject.org/updates/FEDORA-2013-17635/wireshark-1.10.2-4.fc18 75 https://admin.fedoraproject.org/updates/FEDORA-2013-17853/davfs2-1.4.7-3.fc18 18 https://admin.fedoraproject.org/updates/FEDORA-2013-21875/389-ds-base-1.3.0.9-1.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2013-22771/gimp-2.8.10-4.fc18 6 https://admin.fedoraproject.org/updates/FEDORA-2013-22786/mod_nss-1.0.8-27.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-22949/net-snmp-5.7.2-7.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-22866/xen-4.2.3-11.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-22929/dcraw-9.19-4.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-22899/ufraw-0.19.2-10.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-22986/munin-2.0.18-2.fc18 3 https://admin.fedoraproject.org/updates/FEDORA-2013-22993/munin-2.0.19-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-23122/firefox-26.0-2.fc18,xulrunner-26.0-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-23140/python-setuptools-0.6.49-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-23068/rubygem-i18n-0.6.0-2.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-23215/php-5.4.23-1.fc18 The following Fedora 18 Critical Path updates have yet to be approved: Age URL 305 https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5.fc18 12 https://admin.fedoraproject.org/updates/FEDORA-2013-22299/fedora-bookmarks-15-4.fc18 10 https://admin.fedoraproject.org/updates/FEDORA-2013-22457/libbluray-0.4.0-2.fc18 7 https://admin.fedoraproject.org/updates/FEDORA-2013-22690/libfm-1.1.3-1.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-22918/opus-1.1-1.fc18 4 https://admin.fedoraproject.org/updates/FEDORA-2013-22917/colord-1.0.5-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-23122/firefox-26.0-2.fc18,xulrunner-26.0-1.fc18 1 https://admin.fedoraproject.org/updates/FEDORA-2013-23140/python-setuptools-0.6.49-1.fc18 0 https://admin.fedoraproject.org/updates/FEDORA-2013-23224/openssh-6.1p1-11.fc18 The following builds have been pushed to Fedora 18 updates-testing Canna-3.7p3-41.fc18 extremetuxracer-0.6.0-2.fc18 hanazono-fonts-20131208-1.fc18 openssh-6.1p1-11.fc18 oxygen-gtk2-1.4.1-1.fc18 oxygen-gtk3-1.2.1-1.fc18 perl-pmtools-1.54-2.fc18 php-5.4.23-1.fc18 php-pecl-http-2.0.3-1.fc18 Details about builds: ================================================================================ Canna-3.7p3-41.fc18 (FEDORA-2013-23203) A Japanese character set input system. -------------------------------------------------------------------------------- Update Information: Fix an error when building with -Werror=format-security -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 10 2013 Akira TAGOH <tagoh@xxxxxxxxxx> - 3.7p3-41 - Fix an error when building with -Werror=format-security. (#1037008) * Fri Aug 2 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.7p3-40 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Mon Jun 3 2013 Akira TAGOH <tagoh@xxxxxxxxxx> - 3.7p3-39 - Built with PIE enabled. (Dhiru Kholia, #955179) * Tue Mar 26 2013 Akira TAGOH <tagoh@xxxxxxxxxx> - 3.7p3-38 - Rebuilt for aarch64 support (#925129) * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.7p3-37 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1037008 - Canna FTBFS if "-Werror=format-security" flag is used https://bugzilla.redhat.com/show_bug.cgi?id=1037008 -------------------------------------------------------------------------------- ================================================================================ extremetuxracer-0.6.0-2.fc18 (FEDORA-2013-23229) High speed arctic racing game -------------------------------------------------------------------------------- Update Information: Upgrade to version 0.6 because version 0.4 hasn't been maintained upstream in more than 5 years. Noticable difference besides the more polished UI and new courses: the executable was renamed from `etracer` to `etr`. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Nils Philippsen <nils@xxxxxxxxxx> - 0.6.0-2 - install appdata file (#1036330) * Wed Dec 11 2013 Nils Philippsen <nils@xxxxxxxxxx> - 0.6.0-1 - version 0.6.0 - use patched tarball cleaned from dubiously licensed font - drop obsolete patches, build requirements and age-old compat cruft - use %global instead of %define * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.4-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Fri Mar 8 2013 Jon Ciesla <limburgher@xxxxxxxxx> - 0.4-12 - Drop desktop vendor tag. * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.4-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1036330 - Appdata file and possible update https://bugzilla.redhat.com/show_bug.cgi?id=1036330 -------------------------------------------------------------------------------- ================================================================================ hanazono-fonts-20131208-1.fc18 (FEDORA-2013-23223) Japanese Mincho-typeface TrueType font -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Akira TAGOH <tagoh@xxxxxxxxxx> - 20131208-1 - New upstream release. (#1039477) * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 20130222-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1039477 - hanazono-fonts-20131208 is available https://bugzilla.redhat.com/show_bug.cgi?id=1039477 -------------------------------------------------------------------------------- ================================================================================ openssh-6.1p1-11.fc18 (FEDORA-2013-23224) An open source implementation of SSH protocol versions 1 and 2 -------------------------------------------------------------------------------- Update Information: sshd-keygen has been fixed to create ecdsa host key with correct permissions -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Petr Lautrbach <plautrba@xxxxxxxxxx> 6.1p1-11 + 0.9.3-3 - sshd-keygen - use correct permissions on ecdsa host key (#1023945) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1023945 - openssh does not create host key ssh_host_ecdsa_key https://bugzilla.redhat.com/show_bug.cgi?id=1023945 -------------------------------------------------------------------------------- ================================================================================ oxygen-gtk2-1.4.1-1.fc18 (FEDORA-2013-23217) Oxygen GTK+2 theme -------------------------------------------------------------------------------- Update Information: oxygen-gtk2-1.4.1 - mark zotero as XUL application - fix some antialias issue on sliders oxygen-gtk3-1.2.1 It is targetted to users that have gtk3 version < 3.9. - some improvement on inner-shadows - some extra checks on widgets validity to prevent runtime warnings - some rendering improvements for instance regarding scrollbars and textviews See https://projects.kde.org/news/244 -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 10 2013 Alexey Kurov <nucleo@xxxxxxxxxxxxxxxxx> - 1.4.1-1 - oxygen-gtk2-1.4.1 -------------------------------------------------------------------------------- ================================================================================ oxygen-gtk3-1.2.1-1.fc18 (FEDORA-2013-23217) Oxygen GTK+3 theme -------------------------------------------------------------------------------- Update Information: oxygen-gtk2-1.4.1 - mark zotero as XUL application - fix some antialias issue on sliders oxygen-gtk3-1.2.1 It is targetted to users that have gtk3 version < 3.9. - some improvement on inner-shadows - some extra checks on widgets validity to prevent runtime warnings - some rendering improvements for instance regarding scrollbars and textviews See https://projects.kde.org/news/244 -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 10 2013 Alexey Kurov <nucleo@xxxxxxxxxxxxxxxxx> - 1:1.2.1-1 - oxygen-gtk3-1.2.1 -------------------------------------------------------------------------------- ================================================================================ perl-pmtools-1.54-2.fc18 (FEDORA-2013-23226) A suite of small programs to help manage Perl modules -------------------------------------------------------------------------------- Update Information: Update to version 1.54 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.54-2 - The test suite also needs the less command in the build root (F20+). * Wed Dec 11 2013 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.54-1 - Update to 1.54. - New build requirement: perl(Test::More). * Tue Dec 10 2013 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.30-1 - Update to 1.30. * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.10-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Wed Jul 17 2013 Petr Pisar <ppisar@xxxxxxxxxx> - 1.10-13 - Perl 5.18 rebuild * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.10-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ php-5.4.23-1.fc18 (FEDORA-2013-23215) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information: 28 Nov 2013, PHP 5.4.23 Core: * Fixed bug #66094 (unregister_tick_function tries to cast a Closure to a string). (Laruence) * Fixed bug #65947 (basename is no more working after fgetcsv in certain situation). (Laruence) JSON * Fixed whitespace part of bug #64874 ("json_decode handles whitespace and case-sensitivity incorrectly"). (Andrea Faulds) MySQLi: * Fixed bug #66043 (Segfault calling bind_param() on mysqli). (Laruence) mysqlnd: * Fixed bug #66124 (mysqli under mysqlnd loses precision when bind_param with 'i'). (Andrey) * Fixed bug #66141 (mysqlnd quote function is wrong with NO_BACKSLASH_ESCAPES after failed query). (Andrey) OpenSSL: * Fixed memory corruption in openssl_x509_parse() (CVE-2013-6420). (Stefan Esser). PDO * Fixed bug 65946 (sql_parser permanently converts values bound to strings) Backported from 5.5.8 * fix zend_register_functions breaks reflection, php bug 66218 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Remi Collet <rcollet@xxxxxxxxxx> 5.4.23-1 - update to 5.4.23, fix for CVE-2013-6420 - fix zend_register_functions breaks reflection, php bug 66218 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1036830 - CVE-2013-6420 php: memory corruption in openssl_x509_parse() https://bugzilla.redhat.com/show_bug.cgi?id=1036830 -------------------------------------------------------------------------------- ================================================================================ php-pecl-http-2.0.3-1.fc18 (FEDORA-2013-23228) Extended HTTP support -------------------------------------------------------------------------------- Update Information: Release notes: * Fixed bug #66250 (shutdown crash as shared extension) -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 10 2013 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.0.3-1 - Update to 2.0.3 (stable) - drop Conflicts with pecl/event -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test