The following Fedora 19 Security updates need testing: Age URL 76 https://admin.fedoraproject.org/updates/FEDORA-2013-17836/davfs2-1.4.7-3.fc19 55 https://admin.fedoraproject.org/updates/FEDORA-2013-19262/quassel-0.9.1-1.fc19 48 https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glance-2013.1.4-1.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2013-22761/hdapsd-20090401.20131204git401ca60-1.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2013-22776/gimp-2.8.10-4.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2013-22914/mingw-openjpeg-1.5.1-5.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2013-22919/net-snmp-5.7.2-13.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2013-22888/xen-4.2.3-11.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2013-22900/dcraw-9.19-4.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2013-22924/ufraw-0.19.2-10.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2013-22996/munin-2.0.18-2.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2013-23016/munin-2.0.19-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-23141/python-setuptools-0.6.49-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-23062/rubygem-i18n-0.6.1-4.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-23085/samba-4.0.13-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2013-23206/ack-2.12-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-23301/nss-util-3.15.3-1.fc19,nss-softokn-3.15.3-1.fc19,nss-3.15.3-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-23315/libreswan-3.7-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-23295/thunderbird-24.2.0-2.fc19 The following Fedora 19 Critical Path updates have yet to be approved: Age URL 22 https://admin.fedoraproject.org/updates/FEDORA-2013-21772/unzip-6.0-11.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmarks-15-4.fc19 11 https://admin.fedoraproject.org/updates/FEDORA-2013-22509/llvm-3.3-3.fc19 11 https://admin.fedoraproject.org/updates/FEDORA-2013-22421/gvfs-1.16.4-2.fc19 11 https://admin.fedoraproject.org/updates/FEDORA-2013-22463/gvfs-1.16.4-1.fc19 11 https://admin.fedoraproject.org/updates/FEDORA-2013-22512/highlight-3.16.1-1.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2013-22229/qt-4.8.5-11.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-23155/langtable-0.0.23-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-23141/python-setuptools-0.6.49-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-23080/nautilus-3.8.2-2.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2013-22324/mutter-3.8.4-2.fc19,clutter-1.14.4-6.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2013-23219/iscsi-initiator-utils-6.2.0.873-17.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2013-23225/colord-1.0.5-2.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-23295/thunderbird-24.2.0-2.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-23304/abrt-2.1.10-1.fc19,libreport-2.1.10-1.fc19,satyr-0.12-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-23305/libfm-1.1.4-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2013-23301/nss-util-3.15.3-1.fc19,nss-softokn-3.15.3-1.fc19,nss-3.15.3-1.fc19 The following builds have been pushed to Fedora 19 updates-testing abrt-2.1.10-1.fc19 acpi-1.7-1.fc19 digikam-3.5.0-2.fc19 dokuwiki-0-0.21.20131208.fc19 fedup-0.8.0-3.fc19 git-cola-1.9.3-1.fc19 globus-xio-gridftp-driver-1.2-2.fc19 gsi-openssh-6.2p2-4.fc19 kdevelop-4.6.0-2.fc19 kdevelop-php-1.6.0-1.fc19 kdevplatform-1.6.0-1.fc19 libfm-1.1.4-1.fc19 libreport-2.1.10-1.fc19 libreswan-3.7-1.fc19 libuv-0.10.20-1.fc19 lpf-0-14.fc43f57.fc19 netpbm-10.61.02-6.fc19 nodejs-0.10.23-1.fc19 nss-3.15.3-1.fc19 nss-softokn-3.15.3-1.fc19 nss-util-3.15.3-1.fc19 orage-4.10.0-1.fc19 pcp-3.8.9-1.fc19 php-pecl-jsonc-1.3.3-1.fc19 pidgin-sipe-1.17.3-1.fc19 pyflakes-0.7.3-4.fc19 rubygem-rspec-longrun-0.1.2-3.fc19 satyr-0.12-1.fc19 subversion-api-docs-1.7.14-1.fc19 thunderbird-24.2.0-2.fc19 ugene-1.13.0-1.fc19 Details about builds: ================================================================================ abrt-2.1.10-1.fc19 (FEDORA-2013-23304) Automatic bug detection and reporting tool -------------------------------------------------------------------------------- Update Information: This update includes a new upstream release which fixes the bugs listed. You can find other changes in the upstream description at: - https://github.com/abrt/satyr/blob/master/NEWS - https://github.com/abrt/abrt/commit/1dee5ab78d4a923a46c06d6a4619dd068c278688#diff-1e807c90d5bf1222db586f4a8f0a6de1R868 - https://github.com/abrt/libreport/commit/5d5c7034128723056551b285af43cc01e1e626f4#diff-71a31a3e297ea003eaf1b3a5ac3e9457R582 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Jakub Filak <jfilak@xxxxxxxxxx> 2.1.10-1 - abrt-cli: display URL to reports in the details - abrt-cli list: list all problems by default - Do not copy Makefiles to documentation. - harvest_vmcore: Fix absolute path handling - Speed up journalctl --system support detection - spec: add abrt's augeas module - add augeas module for abrt configuration files - spec: rename CCpp.conf - rename CCpp.conf man to abrt-CCpp.conf - spec: move vmcore addon's configuration to a new dir - vmcore: reorganize configuration - make: install abrt-harvest-vmcore into share conf.d - spec: install abrt-harvest-vmcore.conf to share conf.d - switch to libreport workflows in all report-cli events - abrtd: use warning level for "Recreating deleted ..." message - abrt-python: add missing arguments to Crash handler - spec: adapt recent changes related to abrt-action-notify - move the notify event from dbus_event.conf to abrt_event.conf - run the autoreporting event from abrt-action-notify - spec: install conf to /usr/share/abrt/conf.d - Load conf from /usr/share/abrt/conf.d and /etc/abrt - abrt-action-install-debuginfo: fix --exact handling. Fixes rhbz1027786 - Use bugzilla_formatdup.conf for detected duplicates in python too. Fixes rhbz#875312. - applet: properly handle incomplete problems - DBus Problems API: update documentation - spec: add abrt-action-notify - factor out the D-Bus notifications into a python script - adapt post_create event to the recent changes in reporter-ureport - spec: add Requires: systemd-python for python addon - shorten CCpp reason message - abrt-dump-oops: if backtrace is not seen, file an one-line oops. Fixes rhbz#812537 - Update translations - Add several manpages - Resolves: #998066 -------------------------------------------------------------------------------- References: [ 1 ] Bug #998066 - Missing uuid file https://bugzilla.redhat.com/show_bug.cgi?id=998066 -------------------------------------------------------------------------------- ================================================================================ acpi-1.7-1.fc19 (FEDORA-2013-23310) Command-line ACPI client -------------------------------------------------------------------------------- Update Information: Update to new upstream release. -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 1 2013 Johan Swensson <kupo@xxxxxxx> - 1.7-1 - New upstream release 1.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1027078 - acpi-1.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1027078 [ 2 ] Bug #856284 - acpi - Some options not mentioned both in man and help https://bugzilla.redhat.com/show_bug.cgi?id=856284 -------------------------------------------------------------------------------- ================================================================================ digikam-3.5.0-2.fc19 (FEDORA-2013-23314) A digital camera accessing & photo management application -------------------------------------------------------------------------------- Update Information: This update fixes Panaroma GUI crash when used as a standalone application and with no pictures as input. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 12 2013 Jaroslav Reznik <jreznik@xxxxxxxxxx> - 3.5.0-2 - fix panorama crasher rhbz#1040922 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1040922 - Panorama Stitcher (panoramagui) crashes on start if not passed any files https://bugzilla.redhat.com/show_bug.cgi?id=1040922 -------------------------------------------------------------------------------- ================================================================================ dokuwiki-0-0.21.20131208.fc19 (FEDORA-2013-23317) Standards compliant simple to use wiki -------------------------------------------------------------------------------- Update Information: Update to the latest release which contains various bugfixes and enhancements. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 12 2013 Adam Tkac <vonsch@xxxxxxxxx> - 0-0.21.20131208 - fix upstream source link - use macros for dokuwiki release numbers - update to the latest upstream -------------------------------------------------------------------------------- ================================================================================ fedup-0.8.0-3.fc19 (FEDORA-2013-23316) The Fedora Upgrade tool -------------------------------------------------------------------------------- Update Information: * Check GPG signatures on all downloaded packages and images * Clearer error messages for dependency and disk-space problems * Parallel downloads for speed * Better handling of bad mirrors * Lots of other bugfixes and improvements! Note that signature checking requires that the GPG key for the *new* release be provided by your current `fedora-release` package. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 10 2013 Will Woods <wwoods@xxxxxxxxxx> 0.8.0-3 - Fix crash with Ctrl-C on F18 - Fix --instrepo with --device/--iso * Wed Dec 4 2013 Will Woods <wwoods@xxxxxxxxxx> 0.8.0-0 - Check signatures on downloaded packages and images (#877623) - Added --nogpgcheck, --instrepokey, --enableplugin, --disableplugin - Improve error messages and warnings about transaction problems - Improve disk space error messages (#949963) - Clarify "instrepo not found" error (#980818) - Start upgrade using systemd generator instead of boot args (#964303) - Fix emergency shell on F17 upgrades (#958586) - Don't start upgrade if media/packages are missing (#984415) - Check for mismatched instrepo arch (#981180) - Fix traceback with deltarpm (#1005895) - Use the right kernel for Xen guests (#1023618) - Fix mirror failover for instrepo (#1027573) - Download multiple packages in parallel for extra speed - Lots of other bugfixes -------------------------------------------------------------------------------- References: [ 1 ] Bug #891943 - fedup --network fails miserably on systems with low disk space https://bugzilla.redhat.com/show_bug.cgi?id=891943 [ 2 ] Bug #980946 - fedup will proceed with an ISO that is stored on a tmpfs filesystem https://bugzilla.redhat.com/show_bug.cgi?id=980946 [ 3 ] Bug #981881 - Add larger progress bar with more progress details to fedup post reboot screen https://bugzilla.redhat.com/show_bug.cgi?id=981881 [ 4 ] Bug #987106 - FedUp does not cache packages from repositories considered local (NFS etc.) https://bugzilla.redhat.com/show_bug.cgi?id=987106 [ 5 ] Bug #877623 - fedup does not verify online update sources https://bugzilla.redhat.com/show_bug.cgi?id=877623 [ 6 ] Bug #949725 - "TypeError: 'NoneType' object is not iterable" during preparation https://bugzilla.redhat.com/show_bug.cgi?id=949725 [ 7 ] Bug #957364 - fedup-cli fails on "getting boot images" https://bugzilla.redhat.com/show_bug.cgi?id=957364 [ 8 ] Bug #961955 - [abrt] fedup-0.7.3-4.fc18: download.py:294:download_boot_images:UnboundLocalError: local variable 'initrd' referenced before assignment https://bugzilla.redhat.com/show_bug.cgi?id=961955 [ 9 ] Bug #964303 - reboot loop after fedup upgrade due to "systemd.unit=system-upgrade.target" in boot args https://bugzilla.redhat.com/show_bug.cgi?id=964303 [ 10 ] Bug #966841 - fedup --clean, log variable does not exist https://bugzilla.redhat.com/show_bug.cgi?id=966841 [ 11 ] Bug #980918 - fedup ISO F18->F19 fails with Exception in pipelogger https://bugzilla.redhat.com/show_bug.cgi?id=980918 [ 12 ] Bug #981076 - fedup-cli leaves ISO file mounted even if it isn't an install DVD image https://bugzilla.redhat.com/show_bug.cgi?id=981076 [ 13 ] Bug #981180 - Cross-arch upgrade is allowed and "bricks" the machine https://bugzilla.redhat.com/show_bug.cgi?id=981180 [ 14 ] Bug #981819 - fedup seems hung during download from slow mirror https://bugzilla.redhat.com/show_bug.cgi?id=981819 [ 15 ] Bug #984221 - Fedup downloads packages in serial, which is really slow https://bugzilla.redhat.com/show_bug.cgi?id=984221 [ 16 ] Bug #1005895 - Upgrade to f20 fails because of deltarpms https://bugzilla.redhat.com/show_bug.cgi?id=1005895 [ 17 ] Bug #1020898 - If fedup upgrade fails due to a lack of disk space, it removes all the packages it downloaded https://bugzilla.redhat.com/show_bug.cgi?id=1020898 [ 18 ] Bug #1023618 - System Upgrade using FedUp Fails After Reboot on Xen VM https://bugzilla.redhat.com/show_bug.cgi?id=1023618 [ 19 ] Bug #1023740 - Odd progress indicator https://bugzilla.redhat.com/show_bug.cgi?id=1023740 [ 20 ] Bug #1027573 - FedUp does not switch to other mirror if the mirror for vmlinuz is down or is slowly https://bugzilla.redhat.com/show_bug.cgi?id=1027573 [ 21 ] Bug #1031110 - FC18 -> FC20: insufficient disk space need 8M free on / (1.6G free) https://bugzilla.redhat.com/show_bug.cgi?id=1031110 -------------------------------------------------------------------------------- ================================================================================ git-cola-1.9.3-1.fc19 (FEDORA-2013-23290) A sleek and powerful git GUI -------------------------------------------------------------------------------- Update Information: An update of git-cola to the latest upstream release, version 1.9.3: Usability, bells and whistles: * git cola --amend now starts the editor in amend mode. https://github.com/git-cola/git-cola/issues/187 * Multiple lines of text can now be pasted into the summary field. All text beyond the first newline will be automatically moved to the extended description field. https://github.com/git-cola/git-cola/issues/212 Fixes: * Stray whitespace in .git files is now ignored. https://github.com/git-cola/git-cola/issues/213 * Fix "known incorrect sRGB profile" in staged-item.png. http://comments.gmane.org/gmane.linux.gentoo.devel/85066 -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 12 2013 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> - 1.9.3-1 - Update to 1.9.3 (#1040157) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1040157 - git-cola-1.9.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1040157 -------------------------------------------------------------------------------- ================================================================================ globus-xio-gridftp-driver-1.2-2.fc19 (FEDORA-2013-23300) Globus Toolkit - Globus XIO GridFTP Driver -------------------------------------------------------------------------------- Update Information: New package from Globus Toolkit 5.2.5. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1028164 - Review Request: globus-xio-gridftp-driver - Globus Toolkit - Globus XIO GridFTP Driver https://bugzilla.redhat.com/show_bug.cgi?id=1028164 -------------------------------------------------------------------------------- ================================================================================ gsi-openssh-6.2p2-4.fc19 (FEDORA-2013-23298) An implementation of the SSH protocol with GSI authentication -------------------------------------------------------------------------------- Update Information: Sync with openssh package. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 12 2013 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 6.2p2-4 - Based on openssh-6.2p2-7.fc19 -------------------------------------------------------------------------------- ================================================================================ kdevelop-4.6.0-2.fc19 (FEDORA-2013-23014) Integrated Development Environment for C++/C -------------------------------------------------------------------------------- Update Information: KDevelop 4.6.0 release. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 12 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 9:4.6.0-2 - Fix ninja builder (bz#1040801) * Sun Dec 8 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 9:4.6.0-1 - Update to 4.6.0 * Wed Nov 27 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 9:4.5.90-1 - Update to 4.5.90 * Mon Nov 18 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 9:4.5.80-1 - Update to 4.5.80 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1040801 - Kdevelop 4.6.0 Ninja builder is hardwired to use "ninja" executable and so won't build on fedora https://bugzilla.redhat.com/show_bug.cgi?id=1040801 -------------------------------------------------------------------------------- ================================================================================ kdevelop-php-1.6.0-1.fc19 (FEDORA-2013-23014) Php language and documentation plugins for KDevelop -------------------------------------------------------------------------------- Update Information: KDevelop 4.6.0 release. -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 8 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 1.6.0-1 - Update to 1.6.0 * Wed Nov 27 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 1.5.90-1 - Update to 1.5.90 * Mon Nov 18 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 1.5.80-1 - Update to 1.5.80 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1040801 - Kdevelop 4.6.0 Ninja builder is hardwired to use "ninja" executable and so won't build on fedora https://bugzilla.redhat.com/show_bug.cgi?id=1040801 -------------------------------------------------------------------------------- ================================================================================ kdevplatform-1.6.0-1.fc19 (FEDORA-2013-23014) Libraries for use by KDE development tools -------------------------------------------------------------------------------- Update Information: KDevelop 4.6.0 release. -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 8 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 1.6.0-1 - Update to 1.6.0 * Wed Nov 27 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 1.5.90-1 - Update to 1.5.90 * Mon Nov 18 2013 Jan Grulich <jgrulich@xxxxxxxxxx> - 1.5.80-1 - Update to 1.5.80 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1040801 - Kdevelop 4.6.0 Ninja builder is hardwired to use "ninja" executable and so won't build on fedora https://bugzilla.redhat.com/show_bug.cgi?id=1040801 -------------------------------------------------------------------------------- ================================================================================ libfm-1.1.4-1.fc19 (FEDORA-2013-23305) GIO-based library for file manager-like programs -------------------------------------------------------------------------------- Update Information: New version 1.1.4 is released. New version 1.1.3 is released. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 10 2013 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.4-1 - 1.1.4 * Tue Dec 3 2013 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1.1.3-1 - 1.1.3 * Mon Nov 11 2013 Christoph Wickert <wickert@xxxxxxxxxxxx> - 1.1.2.2-3 - Rebuild for new menu-cache 0.5.x -------------------------------------------------------------------------------- ================================================================================ libreport-2.1.10-1.fc19 (FEDORA-2013-23304) Generic library for reporting various problems -------------------------------------------------------------------------------- Update Information: This update includes a new upstream release which fixes the bugs listed. You can find other changes in the upstream description at: - https://github.com/abrt/satyr/blob/master/NEWS - https://github.com/abrt/abrt/commit/1dee5ab78d4a923a46c06d6a4619dd068c278688#diff-1e807c90d5bf1222db586f4a8f0a6de1R868 - https://github.com/abrt/libreport/commit/5d5c7034128723056551b285af43cc01e1e626f4#diff-71a31a3e297ea003eaf1b3a5ac3e9457R582 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Jakub Filak <jfilak@xxxxxxxxxx> 2.1.10-1 - bugzilla: no extra email notification on URL addition - Make make_description() output less confusing - Ensure 'long long unsigned' in printf format args - make_description: add an option for URLs from reported_to - add accountsservice into ignored words - Put back VERBn prefixes for few logging calls - debuginfo: fix clean_up function call - augeas: trim spaces arround '=' - spec: add augeas-devel to build requires - load/save configuration via augeas - create augeas lens for libreport - Fix typo in a string - spec: install ureport conf file and man page - Update reporter-ureport manual pages - ureport: add the configuration file - anaconda: use workflow in the report-cli event - report-cli: add support for workflows - wizard: do not show 'show log' expander if log is empty - ureport: print the error response body only in verbose mode - Load a config file from several directories - Export EXIT_STOP_EVENT_RUN in python modules - reporter-bugzilla: if adding to existing BZ, clearly flag comment as a dup. - Fix a small mistake in "Use log_ family instead of VERBn log calls" commit - ureport: implement attaching of contact email - Do not load "always editable" files if they are HUGE. Fixes rhbz1010167. - shorten default Bugzilla bug summary format - Update translations - XML parser: keep region specific translation texts -------------------------------------------------------------------------------- References: [ 1 ] Bug #998066 - Missing uuid file https://bugzilla.redhat.com/show_bug.cgi?id=998066 -------------------------------------------------------------------------------- ================================================================================ libreswan-3.7-1.fc19 (FEDORA-2013-23315) IPsec implementation with IKEv1 and IKEv2 keying protocols -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2013-4564, extended AES-GCM and AES-CCM support Improved Cisco interop, IKEv2 improvements, bugfixes -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Paul Wouters <pwouters@xxxxxxxxxx> - 3.7-1 - Updated to 3.7, fixes CVE-2013-4564 * Sat Nov 2 2013 Paul Wouters <pwouters@xxxxxxxxxx> - 3.6-1 - Updated to 3.6 (IKEv2, MODECFG, Cisco interop fixes) - Generate empty NSS db if none exists - FIPS update, prelink blacklist added. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1031830 - CVE-2013-4564 libreswan: DoS due to how mangled IKE packets are handled https://bugzilla.redhat.com/show_bug.cgi?id=1031830 -------------------------------------------------------------------------------- ================================================================================ libuv-0.10.20-1.fc19 (FEDORA-2013-23303) Platform layer for node.js -------------------------------------------------------------------------------- Update Information: 2013.12.12, node.js Version 0.10.23 (Stable) * build: include postmortem symbols on linux (Timothy J Fontaine) * crypto: Make Decipher._flush() emit errors. (Kai Groner) * dgram: fix abort when getting `fd` of closed dgram (Fedor Indutny) * events: do not accept NaN in setMaxListeners (Fedor Indutny) * events: avoid calling `once` functions twice (Tim Wood) * events: fix TypeError in removeAllListeners (Jeremy Martin) * fs: report correct path when EEXIST (Fedor Indutny) * process: enforce allowed signals for kill (Sam Roberts) * tls: emit 'end' on .receivedShutdown (Fedor Indutny) * tls: fix potential data corruption (Fedor Indutny) * tls: handle `ssl.start()` errors appropriately (Fedor Indutny) * tls: reset NPN callbacks after SNI (Fedor Indutny) 2013.12.13, libuv Version 0.10.20 (Stable) * linux: fix up SO_REUSEPORT back-port (Ben Noordhuis) * fs-event: fix invalid memory access (huxingyi) -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 12 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 1:0.10.20-1 - new upstream release 0.10.20 https://github.com/joyent/libuv/blob/v0.10.20/ChangeLog -------------------------------------------------------------------------------- ================================================================================ lpf-0-14.fc43f57.fc19 (FEDORA-2013-23309) Local package factory - build non-redistributable rpms -------------------------------------------------------------------------------- Update Information: upstream bugfix: Don't terminate running process in scripts. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 12 2013 Alec Leamas <leamas.alec@xxxxxxxxx> - 0-14.fc43f57 - upstream bugfix: Don't terminate running process in scripts. -------------------------------------------------------------------------------- ================================================================================ netpbm-10.61.02-6.fc19 (FEDORA-2013-23311) A library for handling different graphics file formats -------------------------------------------------------------------------------- Update Information: Bug in netpbm introduced in 10.56 causing hangs during pnmtops conversion -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 12 2013 Petr Hracek <phracek@xxxxxxxxxx> - 10.61.02-6 - Fixed: #1029512 pnmtops hangs during conversion -------------------------------------------------------------------------------- References: [ 1 ] Bug #1029512 - Bug in netpbm introduced in 10.56 causing hangs during pnmtops conversion https://bugzilla.redhat.com/show_bug.cgi?id=1029512 -------------------------------------------------------------------------------- ================================================================================ nodejs-0.10.23-1.fc19 (FEDORA-2013-23303) JavaScript runtime -------------------------------------------------------------------------------- Update Information: 2013.12.12, node.js Version 0.10.23 (Stable) * build: include postmortem symbols on linux (Timothy J Fontaine) * crypto: Make Decipher._flush() emit errors. (Kai Groner) * dgram: fix abort when getting `fd` of closed dgram (Fedor Indutny) * events: do not accept NaN in setMaxListeners (Fedor Indutny) * events: avoid calling `once` functions twice (Tim Wood) * events: fix TypeError in removeAllListeners (Jeremy Martin) * fs: report correct path when EEXIST (Fedor Indutny) * process: enforce allowed signals for kill (Sam Roberts) * tls: emit 'end' on .receivedShutdown (Fedor Indutny) * tls: fix potential data corruption (Fedor Indutny) * tls: handle `ssl.start()` errors appropriately (Fedor Indutny) * tls: reset NPN callbacks after SNI (Fedor Indutny) 2013.12.13, libuv Version 0.10.20 (Stable) * linux: fix up SO_REUSEPORT back-port (Ben Noordhuis) * fs-event: fix invalid memory access (huxingyi) -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 12 2013 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 0.10.23-1 - new upstream release 0.10.23 http://blog.nodejs.org/2013/12/11/node-v0-10-23-stable/ -------------------------------------------------------------------------------- ================================================================================ nss-3.15.3-1.fc19 (FEDORA-2013-23301) Network Security Services -------------------------------------------------------------------------------- Update Information: This update rebases the nss, nss-util, and nss-softokn packages to nss-3.15.3 and nspr to nspr-4.10.2 in order to address security-relevant bugs have been resolved in NSS 3.15.3. For further details please refer to the upstream release notes at https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.3_release_notes Included are some fixes to the manpages. For best results you should upgrade all packages at once including any devel packages. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 4 2013 Elio Maldonado <emaldona@xxxxxxxxxx> - 3.15.3-1 - Update to NSS_3_15_3_RTM - Resolves: Bug 1031897 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws - Fix option descriptions for setup-nsssysinit manpage - Fix man page of nss-sysinit wrong path and other flaws - Install symlink to setup-nsssysinit.sh, without suffix, to match manpage - Remove unused patches -------------------------------------------------------------------------------- References: [ 1 ] Bug #1030807 - CVE-2013-5605 nss: Null_Cipher() does not respect maxOutputLen (MFSA 2013-103) https://bugzilla.redhat.com/show_bug.cgi?id=1030807 -------------------------------------------------------------------------------- ================================================================================ nss-softokn-3.15.3-1.fc19 (FEDORA-2013-23301) Network Security Services Softoken Module -------------------------------------------------------------------------------- Update Information: This update rebases the nss, nss-util, and nss-softokn packages to nss-3.15.3 and nspr to nspr-4.10.2 in order to address security-relevant bugs have been resolved in NSS 3.15.3. For further details please refer to the upstream release notes at https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.3_release_notes Included are some fixes to the manpages. For best results you should upgrade all packages at once including any devel packages. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 1 2013 Elio Maldonado <emaldona@xxxxxxxxxx> - 3.15.2-3 - Update to NSS_3_15_3_RTM - Related: Bug 1031897 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1030807 - CVE-2013-5605 nss: Null_Cipher() does not respect maxOutputLen (MFSA 2013-103) https://bugzilla.redhat.com/show_bug.cgi?id=1030807 -------------------------------------------------------------------------------- ================================================================================ nss-util-3.15.3-1.fc19 (FEDORA-2013-23301) Network Security Services Utilities Library -------------------------------------------------------------------------------- Update Information: This update rebases the nss, nss-util, and nss-softokn packages to nss-3.15.3 and nspr to nspr-4.10.2 in order to address security-relevant bugs have been resolved in NSS 3.15.3. For further details please refer to the upstream release notes at https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.3_release_notes Included are some fixes to the manpages. For best results you should upgrade all packages at once including any devel packages. -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 1 2013 Elio Maldonado <emaldona@xxxxxxxxxx> - 3.15.3-1 - Update to NSS_3_15_3_RTM - Related: Bug 1031897 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1030807 - CVE-2013-5605 nss: Null_Cipher() does not respect maxOutputLen (MFSA 2013-103) https://bugzilla.redhat.com/show_bug.cgi?id=1030807 -------------------------------------------------------------------------------- ================================================================================ orage-4.10.0-1.fc19 (FEDORA-2013-23279) Time-managing application for Xfce4 -------------------------------------------------------------------------------- Update Information: New upstream release with many bugfixes. See http://mail.xfce.org/pipermail/xfce/2013-December/032715.html for a more detailed list. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Kevin Fenzi <kevin@xxxxxxxxx> 4.10.0-1 - Update to 4.10.0 * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 4.8.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Fri May 24 2013 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.8.4-3 - rebulid (libical) -------------------------------------------------------------------------------- ================================================================================ pcp-3.8.9-1.fc19 (FEDORA-2013-23296) System-level performance monitoring and performance management -------------------------------------------------------------------------------- Update Information: Bug fix release -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 12 2013 Nathan Scott <nathans@xxxxxxxxxx> - 3.8.9-1 - Reduce set of exported symbols from DSO PMDAs (BZ 1025694) - Symbol-versioning for PCP shared libraries (BZ 1037771) - Fix pmcd/Avahi interaction with multiple ports (BZ 1035513) - Update to latest PCP sources. * Sun Nov 3 2013 Nathan Scott <nathans@xxxxxxxxxx> - 3.8.8-1 - Update to latest PCP sources (simple build fixes only). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1025694 - pcp pmda shared libraries should use -fvisibility=hidden https://bugzilla.redhat.com/show_bug.cgi?id=1025694 -------------------------------------------------------------------------------- ================================================================================ php-pecl-jsonc-1.3.3-1.fc19 (FEDORA-2013-23288) Support for JSON serialization -------------------------------------------------------------------------------- Update Information: Upstream changelog: * properly decode string value with null-byte (already in previous fedora package) * allow to build in php tree * drop confusing warning about JSON_BIGINT_AS_STRING * add E_NOTICE "integer overflow detected" -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 12 2013 Remi Collet <rcollet@xxxxxxxxxx> - 1.3.3-1 - release 1.3.3 (stable) -------------------------------------------------------------------------------- ================================================================================ pidgin-sipe-1.17.3-1.fc19 (FEDORA-2013-23283) Pidgin protocol plugin to connect to MS Office Communicator -------------------------------------------------------------------------------- Update Information: New upstream release: * fixes typing notifications * fixes that passwords were not entity encoded * fixes crash when groupchat session expired * fixes HTTP re-authentication with NTLM * fixes UCS Persona key extraction * accept alternatives for webticket timestamp/keydata -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Stefan Becker <chemobejk@xxxxxxxxx> - 1.17.3-1 - update to 1.17.3: - fixes crash when groupchat session expired (again) - fixes HTTP re-authentication with NTLM - fixes UCS Persona key extraction * Sat Nov 30 2013 Stefan Becker <chemobejk@xxxxxxxxx> - 1.17.2-1 - update to 1.17.2: - fixes problems with typing notifications fix (bz #1031554) - fixes crash when groupchat session expired * Sat Nov 16 2013 Stefan Becker <chemobejk@xxxxxxxxx> - 1.17.1-1 - update to 1.17.1: - fixes typing notifications - fixes that passwords were not entity encoded - accept alternatives for webticket timestamp/keydata -------------------------------------------------------------------------------- References: [ 1 ] Bug #1031554 - Undelivered messages https://bugzilla.redhat.com/show_bug.cgi?id=1031554 -------------------------------------------------------------------------------- ================================================================================ pyflakes-0.7.3-4.fc19 (FEDORA-2013-23286) A simple program which checks Python source files for errors -------------------------------------------------------------------------------- Update Information: Update to 0.7.3, build Python 3 version, patch to avoid interfering with pies. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Ville Skyttä <ville.skytta@xxxxxx> - 0.7.3-4 - Avoid interfering with pies in version check (#1039706, Timothy Crosley). - Refresh Debian additions tarball. * Mon Sep 9 2013 Ville Skyttä <ville.skytta@xxxxxx> - 0.7.3-3 - Build Python 3 version (#1004668). - Add dependency on setuptools. - Update summary and description. * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.7.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Sun Jul 7 2013 Ville Skyttä <ville.skytta@xxxxxx> - 0.7.3-1 - Update to 0.7.3. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1039706 - [abrt] pyflakes-0.7.2-1.fc19: checker.py:722:LAMBDA:AttributeError: 'arguments' object has no attribute 'kwonlyargs' https://bugzilla.redhat.com/show_bug.cgi?id=1039706 [ 2 ] Bug #1004668 - please build python3 version of pyflakes https://bugzilla.redhat.com/show_bug.cgi?id=1004668 -------------------------------------------------------------------------------- ================================================================================ rubygem-rspec-longrun-0.1.2-3.fc19 (FEDORA-2013-23287) RSpec formatter for long-running specs -------------------------------------------------------------------------------- Update Information: RSpec is a fine unit-testing framework, but is also handy for acceptance and integration tests. But the default report formatters make it difficult to track progress of such long-running tests. The RSpec::Longrun::Formatter outputs the name of each test as it starts, rather than waiting until it passes or fails. It also provides a mechanism for reporting on progress of a test while it is still executing. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1040453 - Review Request: rubygem-rspec-longrun - RSpec formatter for long-running specs https://bugzilla.redhat.com/show_bug.cgi?id=1040453 -------------------------------------------------------------------------------- ================================================================================ satyr-0.12-1.fc19 (FEDORA-2013-23304) Tools to create anonymous, machine-friendly problem reports -------------------------------------------------------------------------------- Update Information: This update includes a new upstream release which fixes the bugs listed. You can find other changes in the upstream description at: - https://github.com/abrt/satyr/blob/master/NEWS - https://github.com/abrt/abrt/commit/1dee5ab78d4a923a46c06d6a4619dd068c278688#diff-1e807c90d5bf1222db586f4a8f0a6de1R868 - https://github.com/abrt/libreport/commit/5d5c7034128723056551b285af43cc01e1e626f4#diff-71a31a3e297ea003eaf1b3a5ac3e9457R582 -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 10 2013 Martin Milata <mmilata@xxxxxxxxxx> 0.12-1 - New upstream version - JVM frames normalization - Add C++ symbol demangling - Unsigned overflow bugfixes - Fix malformed uReports for Java -------------------------------------------------------------------------------- References: [ 1 ] Bug #998066 - Missing uuid file https://bugzilla.redhat.com/show_bug.cgi?id=998066 -------------------------------------------------------------------------------- ================================================================================ subversion-api-docs-1.7.14-1.fc19 (FEDORA-2013-23302) Subversion API documentation -------------------------------------------------------------------------------- Update Information: Rebuild against current stable. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Bojan Smojver <bojan@xxxxxxxxxxxxx> 1.7.14-1 - bump up to 1.7.14 -------------------------------------------------------------------------------- ================================================================================ thunderbird-24.2.0-2.fc19 (FEDORA-2013-23295) Mozilla Thunderbird mail/newsgroup client -------------------------------------------------------------------------------- Update Information: Update to latest upstream - 24.2.0 See release notes here: http://www.mozilla.org/en-US/firefox/17.0.9/releasenotes/ See http://www.mozilla.org/en/thunderbird/24.0/releasenotes/ for full list of changes. See http://www.mozilla.org/en/thunderbird/24.0/releasenotes/ for full list of changes. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Martin Stransky <stransky@xxxxxxxxxx> - 24.2.0-2 - rhbz#1001998 - added a workaround for system notifications * Mon Dec 9 2013 Jan Horak <jhorak@xxxxxxxxxx> - 24.2.0-1 - Update to 24.2.0 * Sat Nov 2 2013 Dennis Gilmore <dennis@xxxxxxxx> - 24.1.0-2 - remove ExcludeArch: armv7hl -------------------------------------------------------------------------------- ================================================================================ ugene-1.13.0-1.fc19 (FEDORA-2013-23280) Integrated bioinformatics toolkit -------------------------------------------------------------------------------- Update Information: Important changes in this major release include: DAS: you can now annotate an unknown amino acid sequence using annotations of its homologs. First, you search for homologs using the Uniprot BLAST. Second, you load the annotations of the selected homologs to your sequence using the Distributed Annotation System (DAS). NCBI Genbank search interface: search for DNA and protein sequences in the GenBank database directly from UGENE. Bowtie2: use sequencing reads aligner "Bowtie2" from UGENE GUI. Codon table: a new help view "Codon table" was added into the Sequence View. Click "Ctrl+T" to open it there. Multiple Alignment Format: a new format PHYLIP is now supported. Assembly Format: ACE format is now opened in the Assembly Browser. NGS pipelines: "Call variant with SAMtools" pipeline was optimized. Workflow Designer: there were a lot of major and minor improvements. Usage of a common workflow output directory Storing history of a workflow execution (in dashboards) Managing of different workflows output Re-running of a workflow from a dashboard Debugging of a workflow execution and investigation of an intermediate data state. "Workflow schemas" were renamed to "workflows" See the release podcast episode for details about the features (https://www.youtube.com/watch?v=iuT-KOSpB6U). The full list of the new features, improvements and bug fixes can be found in our bug tracker (https://ugene.unipro.ru/tracker/browse/UGENE-2533?jql=project%20%3D%20UGENE%20AND%20fixVersion%20%3D%20%221.13%22%20AND%20resolution%20is%20not%20EMPTY). -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2013 Yulia Algaer <yalgaer@xxxxxxxxx> 1.13.0-1 - Upstream version change -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test