The following Fedora 20 Security updates need testing: Age URL 72 https://admin.fedoraproject.org/updates/FEDORA-2013-19198/quassel-0.9.1-1.fc20 32 https://admin.fedoraproject.org/updates/FEDORA-2013-22130/chicken-4.8.0.5-1.fc20 25 https://admin.fedoraproject.org/updates/FEDORA-2013-22575/subversion-1.8.5-2.fc20 23 https://admin.fedoraproject.org/updates/FEDORA-2013-22809/net-snmp-5.7.2-16.fc20 18 https://admin.fedoraproject.org/updates/FEDORA-2013-23116/python-swiftclient-1.8.0-1.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2013-23524/openstack-nova-2013.2.1-2.fc20 8 https://admin.fedoraproject.org/updates/FEDORA-2013-23636/rubygem-actionpack-4.0.0-2.fc20 8 https://admin.fedoraproject.org/updates/FEDORA-2013-23659/ibus-chewing-1.4.4-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2013-23975/devscripts-2.13.9-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-24013/mingw-openjpeg-1.5.1-6.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-24059/mingw-openjpeg-1.5.1-7.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-24018/varnish-3.0.5-1.fc20 The following Fedora 20 Critical Path updates have yet to be approved: Age URL 45 https://admin.fedoraproject.org/updates/FEDORA-2013-21163/libproxy-0.4.11-8.fc20 12 https://admin.fedoraproject.org/updates/FEDORA-2013-23451/gupnp-0.20.9-1.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2013-23572/iscsi-initiator-utils-6.2.0.873-17.fc20 7 https://admin.fedoraproject.org/updates/FEDORA-2013-23721/krb5-1.11.3-38.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2013-23850/libbluray-0.5.0-2.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2013-23915/rygel-0.20.3-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-24070/gstreamer1-1.2.2-1.fc20,gstreamer1-plugins-base-1.2.2-1.fc20,gstreamer1-plugins-good-1.2.2-1.fc20,gstreamer1-plugins-bad-free-1.2.2-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2013-24022/dbus-1.6.12-8.fc20 The following builds have been pushed to Fedora 20 updates-testing 0ad-0.0.15-1.fc20 0ad-data-0.0.15-1.fc20 gedit-plugins-3.10.1-1.fc20 gstreamer1-1.2.2-1.fc20 gstreamer1-plugins-bad-free-1.2.2-1.fc20 gstreamer1-plugins-base-1.2.2-1.fc20 gstreamer1-plugins-good-1.2.2-1.fc20 libselinux-2.2.1-6.fc20 mate-notification-daemon-1.6.1-2.fc20 mingw-openjpeg-1.5.1-7.fc20 mkvtoolnix-6.6.0-1.fc20 php-pear-Net-URL2-2.0.2-1.fc20 printrun-2013.10.19-7.fc20 python-eyed3-0.7.4-1.fc20 rubygem-geoip-1.3.5-1.fc20 wings-1.5.2-1.fc20 xfce4-terminal-0.6.3-1.fc20 Details about builds: ================================================================================ 0ad-0.0.15-1.fc20 (FEDORA-2013-24061) Cross-Platform RTS Game of Ancient Warfare -------------------------------------------------------------------------------- Update Information: New Release: 0 A.D. Alpha 15 Osiris -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 pcpa <paulo.cesar.pereira.de.andrade@xxxxxxxxx> - 0.0.15-1 - Update to latest upstream release - Add new gloox and minupnpc build requires - Use 0ad.appdata.xml from upstream tarball -------------------------------------------------------------------------------- References: [ 1 ] Bug #1046983 - 0 A.D. Alpha 15 released! https://bugzilla.redhat.com/show_bug.cgi?id=1046983 -------------------------------------------------------------------------------- ================================================================================ 0ad-data-0.0.15-1.fc20 (FEDORA-2013-24061) The Data Files for 0 AD -------------------------------------------------------------------------------- Update Information: New Release: 0 A.D. Alpha 15 Osiris -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 pcpa <paulo.cesar.pereira.de.andrade@xxxxxxxxx> - 0.0.15-1 - Update to latest upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1046983 - 0 A.D. Alpha 15 released! https://bugzilla.redhat.com/show_bug.cgi?id=1046983 -------------------------------------------------------------------------------- ================================================================================ gedit-plugins-3.10.1-1.fc20 (FEDORA-2013-24064) Plugins for gedit -------------------------------------------------------------------------------- Update Information: Update to 3.10.1 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Ignacio Casal Quinteiro <icq@xxxxxxxxx> - 3.10.1-1 - Update to 3.10.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1036867 - Gedit embedded terminal is not available https://bugzilla.redhat.com/show_bug.cgi?id=1036867 -------------------------------------------------------------------------------- ================================================================================ gstreamer1-1.2.2-1.fc20 (FEDORA-2013-24070) GStreamer streaming media framework runtime -------------------------------------------------------------------------------- Update Information: Latest bugfix release -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Brian Pepple <bpepple@xxxxxxxxxxxxxxxxx> - 1.2.2-1 - Update to 1.2.2. -------------------------------------------------------------------------------- ================================================================================ gstreamer1-plugins-bad-free-1.2.2-1.fc20 (FEDORA-2013-24070) GStreamer streaming media framework "bad" plugins -------------------------------------------------------------------------------- Update Information: Latest bugfix release -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Brian Pepple <bpepple@xxxxxxxxxxxxxxxxx> - 1.2.2-1 - Update to 1.2.2. * Fri Nov 15 2013 Brian Pepple <bpepple@xxxxxxxxxxxxxxxxx> - 1.2.1-4 - Build fluidsynth plugin. (#1024906) * Thu Nov 14 2013 Brian Pepple <bpepple@xxxxxxxxxxxxxxxxx> - 1.2.1-3 - Add BR on gnutls-devel for HLS support. (#1030491) -------------------------------------------------------------------------------- ================================================================================ gstreamer1-plugins-base-1.2.2-1.fc20 (FEDORA-2013-24070) GStreamer streaming media framework base plugins -------------------------------------------------------------------------------- Update Information: Latest bugfix release -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Brian Pepple <bpepple@xxxxxxxxxxxxxxxxx> - 1.2.2-1 - Update to 1.2.2. * Wed Dec 4 2013 Nils Philippsen <nils@xxxxxxxxxx> - 1.2.1-2 - rebuild for new libvisual -------------------------------------------------------------------------------- ================================================================================ gstreamer1-plugins-good-1.2.2-1.fc20 (FEDORA-2013-24070) GStreamer plugins with good code and licensing -------------------------------------------------------------------------------- Update Information: Latest bugfix release -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Brian Pepple <bpepple@xxxxxxxxxxxxxxxxx> - 1.2.2-1 - Update to 1.2.2. -------------------------------------------------------------------------------- ================================================================================ libselinux-2.2.1-6.fc20 (FEDORA-2013-24058) SELinux library and simple utilities -------------------------------------------------------------------------------- Update Information: This update reverts the change from 2.2.1-1 which broke disabling SELinux from the configuration file (#1046470). So far as SELinux enabling/disabling is concerned it should behave precisely as 2.1.13-21 and previous builds did. Please report any case where this is not true. -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Adam Williamson <awilliam@xxxxxxxxxx> - 2.2.1-6 - revert unexplained change to rhat.patch which broke SELinux disablement * Mon Dec 23 2013 Dan Walsh <dwalsh@xxxxxxxxxx> - 2.2.1-5 - Verify context is not null when passed into lsetfilecon_raw -------------------------------------------------------------------------------- References: [ 1 ] Bug #1046470 - libselinux-2.2.1-4 doesn't respect SELINUX=disabled in /etc/selinux/config https://bugzilla.redhat.com/show_bug.cgi?id=1046470 -------------------------------------------------------------------------------- ================================================================================ mate-notification-daemon-1.6.1-2.fc20 (FEDORA-2013-24080) Notification daemon for MATE Desktop -------------------------------------------------------------------------------- Update Information: - fix mate part of rhbz (#1046716) -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1.6.1-2 - fix mate part of rhbz (#1046716) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1046716 - [abrt] mate-notification-daemon: g_return_if_fail_warning(): mate-notification-daemon killed by SIGTRAP https://bugzilla.redhat.com/show_bug.cgi?id=1046716 -------------------------------------------------------------------------------- ================================================================================ mingw-openjpeg-1.5.1-7.fc20 (FEDORA-2013-24059) MinGW Windows OpenJPEG library -------------------------------------------------------------------------------- Update Information: Fix CVE-2013-6887 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Sandro Mani <manisandro@xxxxxxxxx> - 1.5.1-7 - Fix CVE-2013-6887 (see rhbz#1037945) * Thu Dec 26 2013 Sandro Mani <manisandro@xxxxxxxxx> - 1.5.1-6 - Fix CVE-2013-1447 (see rhbz#1037945) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1038981 - CVE-2013-6887 CVE-2013-1447 mingw-openjpeg: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1038981 -------------------------------------------------------------------------------- ================================================================================ mkvtoolnix-6.6.0-1.fc20 (FEDORA-2013-24076) Matroska container manipulation utilities -------------------------------------------------------------------------------- Update Information: Multiple bug fixes and enhancements: * mmg: implemented drag & drop in the chapter editor * docs: enabled Portugese translation (added in 6.3.0, but inactive) * mkvmerge: better support for VP9 * mkvmerge: fixed a crash when reading empty global tag files. * docs: Added a German translation of the man pages by Chris Leick (see AUTHORS) See */usr/share/doc/mkvtoolnix/ChangeLog* for complete list. -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> 6.6.0-1 - update to 6.6.0 - drop obsolete/redundant specfile parts - remove executable bit from some sources - drop version from libmatroska-devel BR - disable curl support (used only for online update checks) * Sun Oct 20 2013 Nicolas Chauvet <kwizart@xxxxxxxxx> - 6.5.0-1 - Update to 6.5.0 - Fix duplicate localized man pages and add lang(de) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1036573 - mkvtoolnix-6.6.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1036573 -------------------------------------------------------------------------------- ================================================================================ php-pear-Net-URL2-2.0.2-1.fc20 (FEDORA-2013-23977) Class for parsing and handling URL -------------------------------------------------------------------------------- Update Information: Upstream Changelog: Version 2.0.2: * Fixed #19684: Redirects containing spaces do not work * Fixed diverse coding style violations and misc. minor issues * Improved source package distribution * Added support for Travis CI Version 2.0.1: * Fixed Bug #20013: getNormalizedURL() adds leading "@" chars in the Authority * Fixed Bug #20016: Wrong data in 6d4f4dd "Package.xml preparation." * Fixed Bug #19176: resolve() does not merge the path if the base path is empty * Fixed Bug #19315: removeDotSegments("0") not working -------------------------------------------------------------------------------- ChangeLog: * Sat Dec 28 2013 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.0.2-1 - Update to 2.0.2 (stable) * Wed Dec 25 2013 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.0.1-1 - Update to 2.0.1 (stable) -------------------------------------------------------------------------------- ================================================================================ printrun-2013.10.19-7.fc20 (FEDORA-2013-24069) RepRap printer interface and tools -------------------------------------------------------------------------------- Update Information: Added AppData files and enhanced desktop files -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Miro Hrončok <mhroncok@xxxxxxxxxx> - 2013.10.19-7 - Add AppData -------------------------------------------------------------------------------- ================================================================================ python-eyed3-0.7.4-1.fc20 (FEDORA-2013-24063) Python audio data toolkit (ID3 and MP3) -------------------------------------------------------------------------------- Update Information: 0.7.4 - 11.07.2013 (Ill Blood) New Features: [fixup plugin] – New plugin for fixing different types of music directories. [statistics plugin] Count the types of images (APIC frames) in ID3 tags. Added eyed3.mp3.Mp3AudioFile.initTag() for adding/resetting a new ID3 on a file. Deprecated eyed3.utils.cli and moved the best parts to eyed3.utils.console (including utilities for showing status). Changes to APIs to be more reusable for third party projects and plugins. More steps towards Python3 compatibility. Allow users of eyed3.utils.ArgumentParser to set their own version. eyed3.core.Date is no sortable. Bug Fixes: [issue 40] Support for TSO2 and TSOC ID3 frames. [issue 37] –pdb option no longer requires ipdb package. [issue 39] Recognize some of the more esoteric mime-types that mp3 files sometimes resolve to. e.g. application/octet-stream, audio/x-hx-aac-adts, audio/x-wav Don’t crash when encountering non-ascii URLs in ID3 frames. [statistics plugin] Fixed file type counters. Fixes for setting ID3 dates to None. Fixes for StopIteration handling in plugins. Fixes for newer versions (>= 0.4.4) of python-magic that now want filenames in Unicode. -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Christopher Meng <rpm@xxxxxxxx> - 0.7.4-1 - Update to 0.7.4. - Add EPEL support. -------------------------------------------------------------------------------- ================================================================================ rubygem-geoip-1.3.5-1.fc20 (FEDORA-2013-24066) Search a GeoIP database for an IP address -------------------------------------------------------------------------------- Update Information: Update to latest upstream release. See the [upstream changelog](https://github.com/cjheath/geoip/commits/v1.3.5) for details. -------------------------------------------------------------------------------- ChangeLog: * Sat Dec 28 2013 Ken Dreyer <ktdreyer@xxxxxxxxxxxx> - 1.3.5-1 - Update to 1.3.5 - Remove obsolete comments - Remove Rakefile during %prep - Move README to the main package - Exclude tests from the binary packages -------------------------------------------------------------------------------- ================================================================================ wings-1.5.2-1.fc20 (FEDORA-2013-24065) 3D Subdivision Modeler -------------------------------------------------------------------------------- Update Information: * Ver. 1.5.2 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Peter Lemenkov <lemenkov@xxxxxxxxx> - 1.5.2-2 - Ver. 1.5.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1031421 - wings-1.5.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1031421 -------------------------------------------------------------------------------- ================================================================================ xfce4-terminal-0.6.3-1.fc20 (FEDORA-2013-24067) X Terminal Emulator for the Xfce Desktop environment -------------------------------------------------------------------------------- Update Information: Update to 0.6.3. For full changes, see: http://mail.xfce.org/pipermail/xfce/2013-December/032788.html Add patch to fix crash in locale menu. Fixes bug #1015850 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 27 2013 Kevin Fenzi <kevin@xxxxxxxxx> 0.6.3-1 - Update to 0.6.3 - Drop unstreamed patches. * Mon Dec 23 2013 Kevin Fenzi <kevin@xxxxxxxxx> 0.6.2-4 - Add patch to fix crash in locale menu. Fixes bug #1015850 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1015850 - [abrt] xfce4-terminal-0.6.2-2.fc20: magazine_chain_pop_head: Process /usr/bin/xfce4-terminal was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=1015850 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test