The following Fedora 20 Security updates need testing: Age URL 100 https://admin.fedoraproject.org/updates/FEDORA-2013-19198/quassel-0.9.1-1.fc20 61 https://admin.fedoraproject.org/updates/FEDORA-2013-22130/chicken-4.8.0.5-1.fc20 46 https://admin.fedoraproject.org/updates/FEDORA-2013-23116/python-swiftclient-1.8.0-1.fc20 37 https://admin.fedoraproject.org/updates/FEDORA-2013-23636/rubygem-actionpack-4.0.0-2.fc20 29 https://admin.fedoraproject.org/updates/FEDORA-2013-24018/varnish-3.0.5-1.fc20 16 https://admin.fedoraproject.org/updates/FEDORA-2014-0579/flite-1.3-21.fc20 15 https://admin.fedoraproject.org/updates/FEDORA-2014-0602/graphviz-2.34.0-8.fc20 11 https://admin.fedoraproject.org/updates/FEDORA-2014-0792/libinfinity-0.5.5-1.fc20 10 https://admin.fedoraproject.org/updates/FEDORA-2014-0926/memcached-1.4.17-1.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2014-0978/ibus-chewing-1.4.6-1.fc20 7 https://admin.fedoraproject.org/updates/FEDORA-2014-1121/libreswan-3.8-1.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-1207/cxxtools-2.2.1-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-1307/tntnet-2.2.1-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-1396/moodle-2.5.4-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-1341/perl-MARC-XML-1.0.2-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1463/openstack-nova-2013.2.1-3.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1481/mupdf-1.1-5.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-1552/xen-4.3.1-8.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-1567/mingw-openssl-1.0.1e-5.fc20 The following Fedora 20 Critical Path updates have yet to be approved: Age URL 74 https://admin.fedoraproject.org/updates/FEDORA-2013-21163/libproxy-0.4.11-8.fc20 12 https://admin.fedoraproject.org/updates/FEDORA-2014-0772/openldap-2.4.38-1.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2014-0987/anaconda-20.25.16-1.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-1197/colord-1.1.6-1.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-1231/libwacom-0.8-2.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-1276/pcre-8.33-4.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-1395/krb5-1.11.3-39.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-1436/libnl3-3.2.24-1.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-1410/libsolv-0.4.1-1.gitbcedc98.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-1448/network-manager-applet-0.9.9.0-8.git20140123.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1480/crda-1.1.3_2013.11.27-3.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-1561/elfutils-0.158-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-1568/libvorbis-1.3.4-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-1535/clutter-1.16.2-3.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-1523/procps-ng-3.3.8-15.fc20 The following builds have been pushed to Fedora 20 updates-testing avl-3.32-5.fc20 elfutils-0.158-1.fc20 freecolor-0.9.2-1.fc20 ikiwiki-3.20140102-1.fc20 libvorbis-1.3.4-1.fc20 lnst-2-1.fc20 mingw-openssl-1.0.1e-5.fc20 sipwitch-1.8.7-1.fc20 unar-1.8.1-1.fc20 waf-1.7.15-1.fc20 xfoil-6.97-4.fc20 xrotor-7.55-4.fc20 Details about builds: ================================================================================ avl-3.32-5.fc20 (FEDORA-2014-1575) Aerodynamic and flight-dynamic analysis of rigid aircrafts -------------------------------------------------------------------------------- Update Information: Rebuild without-fdefault-real-8 -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 25 2014 Sandro Mani <manisandro@xxxxxxxxx> - 3.32-5 - Rebuild without-fdefault-real-8 -------------------------------------------------------------------------------- ================================================================================ elfutils-0.158-1.fc20 (FEDORA-2014-1561) A collection of utilities and DSOs to handle compiled objects -------------------------------------------------------------------------------- Update Information: Update to 0.158. Support for aarch64. Unwinder support for i386, x86_64, s390, s390x, ppc and ppc64. Add eu-stack. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 6 2014 Mark Wielaard <mjw@xxxxxxxxxx> - 0.158-1 - Update to 0.158. Remove all patches now upstream. Add eu-stack. * Thu Dec 19 2013 Mark Wielaard <mjw@xxxxxxxxxx> - 0.157-4 - Add elfutils-0.157-aarch64-got-special-symbol.patch. - Remove -Werror=format-security from RPM_OPT_FLAGS. * Fri Dec 13 2013 Petr Machata <pmachata@xxxxxxxxxx> - 0.157-3 - Add upstream support for aarch64 * Wed Oct 9 2013 Mark Wielaard <mjw@xxxxxxxxxx> 0.157-2 - Show tests/test-suite.log in build.log when make check fails. -------------------------------------------------------------------------------- ================================================================================ freecolor-0.9.2-1.fc20 (FEDORA-2014-1581) Display memory information graphically -------------------------------------------------------------------------------- Update Information: Freecolor package initial submission -------------------------------------------------------------------------------- References: [ 1 ] Bug #1055108 - Review Request: freecolor - Display memory information graphically https://bugzilla.redhat.com/show_bug.cgi?id=1055108 -------------------------------------------------------------------------------- ================================================================================ ikiwiki-3.20140102-1.fc20 (FEDORA-2014-1570) A wiki compiler -------------------------------------------------------------------------------- Update Information: Update to the latest stable version. Changes in ikiwiki 3.20140102: * aggregate: Improve display of post author. * poll: Fix behavior of poll buttons when inlined. * Fixed unncessary tight loop hash copy in saveindex where a pointer can be used instead. Can speed up refreshes by nearly 50% in some circumstances. * Optimized loadindex by caching the page name in the index. * Added only_committed_changes config setting, which speeds up wiki refresh by querying git to find the files that were changed, rather than looking at the work tree. Not enabled by default as it can break some setups where not all files get committed to git. * comments: Write pending moderation comments to the transient underlay to avoid conflict with only_committed_changes. * search: Added google_search option, which makes it search google rather than using the internal xapain database. (googlesearch plugin is too hard to turn on when xapain databases corrupt themselves, which happens all too frequently). * osm: Remove invalid use of charset on embedded javascript tags. Closes: http://bugs.debian.org/731197 * style.css: Add compatibility definitions for more block-level html5 elements. Closes: http://bugs.debian.org/731199 * aggregrate: Fix several bugs in handling of empty and colliding titles when generating filenames. -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 25 2014 Thomas Moschny <thomas.moschny@xxxxxx> - 3.20140102-1 - Update to 3.20140102. - Modernize spec file. -------------------------------------------------------------------------------- ================================================================================ libvorbis-1.3.4-1.fc20 (FEDORA-2014-1568) The Vorbis General Audio Compression Codec -------------------------------------------------------------------------------- Update Information: The primary feature of this release is reduced static data size in libvorbisenc, as well as associated minor changes required to libvorbis and libvorbisfile. The release also contains minor build fixes and build system updates. There are no functional changes over the previous 1.3.3 release. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 22 2014 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 1.3.4-1 - libvorbis 1.3.4 * Wed Jan 15 2014 Adam Jackson <ajax@xxxxxxxxxx> 1.3.3-7 - Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc. -------------------------------------------------------------------------------- ================================================================================ lnst-2-1.fc20 (FEDORA-2014-1577) Common code for lnst-ctl and lnst-slave -------------------------------------------------------------------------------- Update Information: rebase to release 2. many of fixes on top of release 1 -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 25 2014 Jiri Pirko <jpirko@xxxxxxxxxx> - 2-1 - Updating to stable release 2 -------------------------------------------------------------------------------- ================================================================================ mingw-openssl-1.0.1e-5.fc20 (FEDORA-2014-1567) MinGW port of the OpenSSL toolkit -------------------------------------------------------------------------------- Update Information: Synced patches with native openssl-1.0.1e-38.fc21 which fixes various CVE's and also enables ECC support -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 25 2014 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 1.0.1e-5 - Synced patches with native openssl-1.0.1e-38.fc21 - Enable ECC support (RHBZ #1037919) - Fixes CVE-2013-6450 (RHBZ #1047844) - Fixes CVE-2013-4353 (RHBZ #1049062) - Fixes CVE-2013-6449 (RHBZ #1045444) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1037919 - RFE: Enable Fedora-supported ECC algorithms https://bugzilla.redhat.com/show_bug.cgi?id=1037919 [ 2 ] Bug #1047844 - CVE-2013-6450 mingw-openssl: openssl: MiTM due to improper implementation of DTLS retransmission [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1047844 [ 3 ] Bug #1049062 - CVE-2013-4353 mingw-openssl: openssl: TLS record tampering issue can lead to OpenSSL crash [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1049062 [ 4 ] Bug #1045444 - CVE-2013-6449 mingw-openssl: openssl: crash when using TLS 1.2 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1045444 -------------------------------------------------------------------------------- ================================================================================ sipwitch-1.8.7-1.fc20 (FEDORA-2014-1566) A secure peer-to-peer VoIP server for the SIP protocol -------------------------------------------------------------------------------- Update Information: fixed systemd multi-arch pathing issue, improved systemd unit -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 25 2014 David Sugar <dyfet@xxxxxxxxxxxxxxxx> - 1.8.7-1 - fixed systemd multi-arch pathing issue - improved systemd unit based on Michael Scherer <misc@xxxxxxxx> -------------------------------------------------------------------------------- References: [ 1 ] Bug #1057867 - wrong location of the systemd unit https://bugzilla.redhat.com/show_bug.cgi?id=1057867 -------------------------------------------------------------------------------- ================================================================================ unar-1.8.1-1.fc20 (FEDORA-2014-1580) Multi-format extractor -------------------------------------------------------------------------------- Update Information: upstream release 1.8.1. minor bug fixes -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 25 2014 Rahul Sundaram <sundaram@xxxxxxxxxxxxxxxxx> - 1.8.1-1 - upstream release 1.8.1 (rhbz#1047226) * Sun Dec 29 2013 Rahul Sundaram <sundaram@xxxxxxxxxxxxxxxxx> - 1.8-1 - upstream release 1.8 (rhbz#1047226) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1047226 - unar-1.8.1_win is available https://bugzilla.redhat.com/show_bug.cgi?id=1047226 -------------------------------------------------------------------------------- ================================================================================ waf-1.7.15-1.fc20 (FEDORA-2014-1565) A Python-based build system -------------------------------------------------------------------------------- Update Information: Update to the latest stable version. Changes in waf 1.7.15: * Fix for tex.py in python3 * Optimizations in mem_reducer.py * Fixes for the windows console in ansiterm.py * Fixes for C++ compilers in gccdeps.py * Xcode generator include fixes #1388 * Fortran scanner improvements #1389 * Configuration tests with several libraries at once in a string #1390 * Added support for MSVS 2012 in msvs.py Changes in waf 1.7.14: * Fixes for Python 3.3 and 3.4 * Extra tool for memory reduction some large builds * Fix for nasm trailing slashes #1379 * Fix for eclipse project generators #1377 * Qt5 tool * Handle empty defines when pasting tokens * Fix for syms.py on python3 #1361 * Swig fixes * Doxygen recursive dependencies -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 25 2014 Thomas Moschny <thomas.moschny@xxxxxx> - 1.7.15-1 - Update to 1.7.15. - Modernize spec file. * Tue Jan 7 2014 Thomas Moschny <thomas.moschny@xxxxxx> - 1.7.14-1 - Update to 1.7.14. -------------------------------------------------------------------------------- ================================================================================ xfoil-6.97-4.fc20 (FEDORA-2014-1574) Subsonic Airfoil Development System -------------------------------------------------------------------------------- Update Information: Build without -fdefault-real-8 -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 25 2014 Sandro Mani <manisandro@xxxxxxxxx> - 6.97-4 - Build without -fdefault-real-8 -------------------------------------------------------------------------------- ================================================================================ xrotor-7.55-4.fc20 (FEDORA-2014-1579) Design and analysis tools for propellers and windmills -------------------------------------------------------------------------------- Update Information: Build without -fdefault-real-8 -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 25 2014 Sandro Mani <manisandro@xxxxxxxxx> - 7.55-4 - Build without -fdefault-real-8 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
