The following Fedora 19 Security updates need testing: Age URL 97 https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glance-2013.1.4-1.fc19 42 https://admin.fedoraproject.org/updates/FEDORA-2013-23592/rubygem-actionpack-3.2.13-3.fc19 34 https://admin.fedoraproject.org/updates/FEDORA-2013-24023/varnish-3.0.5-1.fc19 20 https://admin.fedoraproject.org/updates/FEDORA-2014-0574/flite-1.3-20.fc19 19 https://admin.fedoraproject.org/updates/FEDORA-2014-0621/graphviz-2.30.1-12.fc19 15 https://admin.fedoraproject.org/updates/FEDORA-2014-0797/libinfinity-0.5.5-1.fc19 14 https://admin.fedoraproject.org/updates/FEDORA-2014-0934/memcached-1.4.17-1.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2014-1004/ibus-chewing-1.4.6-1.fc19 12 https://admin.fedoraproject.org/updates/FEDORA-2014-1100/nss-3.15.4-1.fc19,nss-softokn-3.15.4-1.fc19,nss-util-3.15.4-1.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-1475/mupdf-1.1-5.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2014-1559/xen-4.2.3-14.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-1560/mingw-openssl-1.0.1e-5.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-1734/quassel-0.9.2-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-1516/openstack-nova-2013.1.4-6.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-1648/lightdm-gtk-1.6.1-3.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1802/mediawiki-1.21.5-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1795/socat-1.7.2.3-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1766/libpng12-1.2.50-4.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1754/libpng10-1.0.60-6.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1807/ikiwiki-3.20140125-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1772/tpp-1.3.1-16.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-1817/libyaml-0.1.4-6.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-1828/ghdl-0.31-1.fc19 The following Fedora 19 Critical Path updates have yet to be approved: Age URL 45 https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmarks-15-5.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2014-0752/firewalld-0.3.9.2-1.fc19 12 https://admin.fedoraproject.org/updates/FEDORA-2014-1100/nss-3.15.4-1.fc19,nss-softokn-3.15.4-1.fc19,nss-util-3.15.4-1.fc19 11 https://admin.fedoraproject.org/updates/FEDORA-2014-1151/hwdata-0.260-1.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-1255/tigervnc-1.3.0-8.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-1281/abattis-cantarell-fonts-0.0.15-1.fc19,caribou-0.4.13-1.fc19,dconf-0.16.1-1.fc19,file-roller-3.8.4-1.fc19,glib2-2.36.4-1.fc19,gmime-2.6.19-1.fc19,gnome-chess-3.8.5-1.fc19,gnome-color-manager-3.8.4-1.fc19,gnome-icon-theme-symbolic-3.8.3-1.fc19,gnome-mahjongg-3.8.1-1.fc19,gnome-mines-3.8.2-1.fc19,gnome-nibbles-3.8.1-1.fc19,gnome-robots-3.8.2-1.fc19,gnome-settings-daemon-3.8.6.1-1.fc19,iagno-3.8.3-1.fc19,json-glib-0.16.2-1.fc19,libgdata-0.13.4-1.fc19,libgee-0.10.5-1.fc19,libgtop2-2.28.5-1.fc19,libgweather-3.8.3-1.fc19,libnotify-0.7.6-1.fc19,libpeas-1.8.1-1.fc19,libsoup-2.42.3.1-1.fc19,libwnck3-3.4.7-1.fc19,nautilus-sendto-3.8.1-1.fc19,nemiver-0.9.5-1.fc19,orca-3.8.2-1.fc19,tali-3.8.2-1.fc19,swell-foop-3.8.2-1.fc19,vte3-0.34.9-1.fc19,vinagre-3.8.3-1.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-1324/firefox-26.0-6.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2014-1368/krb5-1.11.3-19.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2014-1385/yum-3.4.3-132.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-1438/libtool-2.4.2-23.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-1451/pango-1.34.1-2.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2014-1524/procps-ng-3.3.8-11.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-1564/libvorbis-1.3.4-1.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2014-1599/libgsf-1.14.29-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-1728/kernel-3.12.9-201.fc19 The following builds have been pushed to Fedora 19 updates-testing NFStest-1.0.8-0.fc19 bti-034-1.fc19 collectd-5.4.1-1.fc19 ghdl-0.31-1.fc19 kernel-3.12.9-201.fc19 libyaml-0.1.4-6.fc19 lmiwbem-0.1.0-1.fc19 nfsometer-1.7-1.fc19 ovirt-guest-agent-1.0.9-1.fc19 perl-Archive-Extract-0.72-1.fc19 perl-IO-Socket-SSL-1.88-2.fc19 sword-1.7.2-1.fc19 tcpreplay-4.0.2-1.fc19 tog-pegasus-2.12.1-9.fc19 xiphos-3.1.6-1.fc19 xiphos-3.1.6-2.fc19 xrootd-3.3.6-1.fc19 Details about builds: ================================================================================ NFStest-1.0.8-0.fc19 (FEDORA-2014-1848) NFS Testing Tool -------------------------------------------------------------------------------- Update Information: Updated to latest upstream release: 1.0.8 -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 29 2014 Steve Dickson <steved@xxxxxxxxxx> 1.0.8-0 - Updated to latest upstream release: 1.0.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1059455 - nfstest_dio fails to capture all packets in vectored_io tests https://bugzilla.redhat.com/show_bug.cgi?id=1059455 -------------------------------------------------------------------------------- ================================================================================ bti-034-1.fc19 (FEDORA-2014-1824) Bash Twitter/Identi.ca Idiocy -------------------------------------------------------------------------------- Update Information: * Build against the new JSON-C library name. * change remaining http:// to https:// * use -EIO instead of -EREMOTEIO * dry-run shouldn't error out. * remove identi.ca support. * Remove unused xml parsing function -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 29 2014 Michel Salim <salimma@xxxxxxxxxxxxxxxxx> - 034-1 - Update to 034 * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 033-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1054062 - bti-034 is available https://bugzilla.redhat.com/show_bug.cgi?id=1054062 [ 2 ] Bug #1055564 - bti stopped sending tweets https://bugzilla.redhat.com/show_bug.cgi?id=1055564 -------------------------------------------------------------------------------- ================================================================================ collectd-5.4.1-1.fc19 (FEDORA-2014-1845) Statistics collection daemon for filling RRD files -------------------------------------------------------------------------------- Update Information: Upstream released new version. Please see http://collectd.org/news.shtml#news95 for what's new. -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 28 2014 Ruben Kerkhof <ruben@xxxxxxxxxxxxxxxx> 5.4.1-1 - Upstream released new version: http://collectd.org/news.shtml#news95 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1058601 - collectd doesn't write to RRD files after update https://bugzilla.redhat.com/show_bug.cgi?id=1058601 -------------------------------------------------------------------------------- ================================================================================ ghdl-0.31-1.fc19 (FEDORA-2014-1828) A VHDL simulator, using the GCC technology -------------------------------------------------------------------------------- Update Information: Update to 0.31, which is baed on gcc 4.8.2 and thus fixes CVE-2012-3509 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 18 2013 Thomas Sailer <t.sailer@xxxxxxxxxxxxxx> - 0.31-1 - change to sourceforge repository * Tue Dec 3 2013 Thomas Sailer <t.sailer@xxxxxxxxxxxxxx> - 0.29-4.150svn.3 - prevent format-security warning * Mon Aug 5 2013 Thomas Sailer <t.sailer@xxxxxxxxxxxxxx> - 0.29-4.150svn.2 - fix FTBFS * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.29-4.150svn.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Tue Jul 2 2013 Ville Skyttä <ville.skytta@xxxxxx> - 0.29-3.150svn.2 - Compress gcc tarball with xz. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1059364 - ghdl may be affected by libiberty CVE https://bugzilla.redhat.com/show_bug.cgi?id=1059364 -------------------------------------------------------------------------------- ================================================================================ kernel-3.12.9-201.fc19 (FEDORA-2014-1728) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 3.12.9 stable update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 29 2014 Justin M. Forbes <jforbes@xxxxxxxxxxxxxxxxx> - 3.12.9-201 - ipv6 addrconf: revert /proc/net/if_inet6 ifa_flag format (rhbz 1056711) * Tue Jan 28 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - Add patch from Stanislaw Gruszka to fix ath9k BUG (rhbz 990955) * Mon Jan 27 2014 Justin M. Forbes <jforbes@xxxxxxxxxxxxxxxxx> - 3.12.9-200 - Backport new IPv6 address flag IFA_F_NOPREFIXROUTE and IFA_F_MANAGETEMPADDR (rhbz 1056711) - Linux v3.12.9 - i915: remove pm_qos request on error (rhbz 1057533) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1056711 - Backport new IPv6 address flag IFA_F_NOPREFIXROUTE and IFA_F_MANAGETEMPADDR https://bugzilla.redhat.com/show_bug.cgi?id=1056711 [ 2 ] Bug #1057533 - [abrt] BUG: unable to handle kernel paging request at fffffffffffffff8 https://bugzilla.redhat.com/show_bug.cgi?id=1057533 -------------------------------------------------------------------------------- ================================================================================ libyaml-0.1.4-6.fc19 (FEDORA-2014-1817) YAML 1.1 parser and emitter written in C -------------------------------------------------------------------------------- Update Information: Add patches for CVE-2013-6393 (bz1033990) -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 29 2014 John Eckersberg <jeckersb@xxxxxxxxxx> - 0.1.4-6 - Add patches for CVE-2013-6393 (bz1033990) * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.1.4-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1033990 - CVE-2013-6393 libyaml: heap-based buffer overflow when parsing YAML tags https://bugzilla.redhat.com/show_bug.cgi?id=1033990 -------------------------------------------------------------------------------- ================================================================================ lmiwbem-0.1.0-1.fc19 (FEDORA-2014-1849) Python WBEM Client -------------------------------------------------------------------------------- Update Information: initial import -------------------------------------------------------------------------------- ================================================================================ nfsometer-1.7-1.fc19 (FEDORA-2014-1841) NFS Performance Framework Tool -------------------------------------------------------------------------------- Update Information: Updated to latest upstream release 1.7 -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 29 2014 Steve Dickson <steved@xxxxxxxxxx> 1.7-1 - Updated to 1.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1059341 - NFSometer version 1.6 has bad graphing bug https://bugzilla.redhat.com/show_bug.cgi?id=1059341 -------------------------------------------------------------------------------- ================================================================================ ovirt-guest-agent-1.0.9-1.fc19 (FEDORA-2014-1814) The oVirt Guest Agent -------------------------------------------------------------------------------- Update Information: Upstream 1.0.9 release - Report swap usage of guests - Updated pam conversation approach - Python 2.4 compatability fix Added override option to groupadd Initial EPEL-5 Release of the ovirt-guest-agent Removed selinux-policy conflict Added patch for python2.4 compatability -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 20 2014 Vinzenz Feenstra <evilissimo@xxxxxxxxxx> - 1.0.9-1 - Report swap usage of guests - Updated pam conversation approach - Python 2.4 compatability fix -------------------------------------------------------------------------------- ================================================================================ perl-Archive-Extract-0.72-1.fc19 (FEDORA-2014-1850) Generic archive extracting mechanism -------------------------------------------------------------------------------- Update Information: This release prefers info-unzip on FreeBSD and considers DragonflyBSD as a FreeBSD. We deliver this update only to keep pace with upstream version numbers. -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 30 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 1:0.72-1 - 0.72 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1059621 - perl-Archive-Extract-0.72 is available https://bugzilla.redhat.com/show_bug.cgi?id=1059621 -------------------------------------------------------------------------------- ================================================================================ perl-IO-Socket-SSL-1.88-2.fc19 (FEDORA-2014-1831) Perl library for transparent SSL -------------------------------------------------------------------------------- Update Information: This update includes a back-ported patch from version 1.951 to use OpenSSL's default CA if the user doesn't specify one, needed if SSL_VERIFY_PEER is used (not the default in F-19, but is in F-20 onwards). -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 29 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 1.88-2 - Use OpenSSL default CA if user doesn't specify one (#1059002) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1059002 - On F19, perl's IO::Socket::SSL has problems verifying server's certificate (but works on F20) https://bugzilla.redhat.com/show_bug.cgi?id=1059002 -------------------------------------------------------------------------------- ================================================================================ sword-1.7.2-1.fc19 (FEDORA-2014-1815) Free Bible Software Project -------------------------------------------------------------------------------- Update Information: Update Sword to the latest upstream release, along with Xiphos frontends that was released and built for it -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 29 2014 Deji Akingunola <dakingun@xxxxxxxxx> - 1.7.2-1 - Update to sword-1.7.2 * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.6.2-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ tcpreplay-4.0.2-1.fc19 (FEDORA-2014-1813) Replay captured network traffic -------------------------------------------------------------------------------- Update Information: This version includes minor fixes and performance enhancements to the NetFlow features introduced in version 4.0.0. Fixes include: - Support for netmap version 10 API (#53) - Remove deprecated "absolute time" for OS X (#52) - Make dosleep() rentrant to support API concurrency (#51) - Remove compiler warnings (#50) - Fix slow netmap in Intel GigE "igb" server NICS (#49) - Fix hangs with --mbps command (#54) -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 30 2014 Bojan Smojver <bojan@rexursive com> - 4.0.2-1 - bump up to 4.0.2 -------------------------------------------------------------------------------- ================================================================================ tog-pegasus-2.12.1-9.fc19 (FEDORA-2014-1837) OpenPegasus WBEM Services for Linux -------------------------------------------------------------------------------- Update Information: Add Platform_LINUX_XSCALE_GNU.h to -devel because of lmiwbem on arm. -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 30 2014 Vitezslav Crhonek <vcrhonek@xxxxxxxxxx> - 2:2.12.1-9 - Add Platform_LINUX_XSCALE_GNU.h to -devel because of lmiwbem on arm -------------------------------------------------------------------------------- ================================================================================ xiphos-3.1.6-1.fc19 (FEDORA-2014-1815) Bible study and research tool -------------------------------------------------------------------------------- Update Information: Update Sword to the latest upstream release, along with Xiphos frontends that was released and built for it -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 29 2014 Deji Akingunola <dakingun@xxxxxxxxx> - 3.1.6-1 - Update to version 3.1.6 * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.1.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ xiphos-3.1.6-2.fc19 (FEDORA-2014-1844) Bible study and research tool -------------------------------------------------------------------------------- Update Information: Removed GTK3 in favor of GTK2, as GTK3 is known to be buggy for this release -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 29 2014 Greg Hellings <greg.hellings@xxxxxxxxx> - 3.1.6-2 - Removed GTK3 in favor of GTK2, as GTK3 is known to be buggy for this release * Wed Jan 29 2014 Deji Akingunola <dakingun@xxxxxxxxx> - 3.1.6-1 - Update to version 3.1.6 * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.1.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ xrootd-3.3.6-1.fc19 (FEDORA-2014-1826) Extended ROOT file server -------------------------------------------------------------------------------- Update Information: https://github.com/xrootd/xrootd/blob/v3.3.6/docs/ReleaseNotes.txt -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 30 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 1:3.3.6-1 - Update to version 3.3.6 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
