The following Fedora 19 Security updates need testing: Age URL 160 https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glance-2013.1.4-1.fc19 97 https://admin.fedoraproject.org/updates/FEDORA-2013-24023/varnish-3.0.5-1.fc19 79 https://admin.fedoraproject.org/updates/FEDORA-2014-0797/libinfinity-0.5.5-1.fc19 51 https://admin.fedoraproject.org/updates/FEDORA-2014-2260/NetworkManager-ssh-0.9.2-0.2.20140209git46247c2.fc19 43 https://admin.fedoraproject.org/updates/FEDORA-2014-2710/zabbix-2.0.11-2.fc19 19 https://admin.fedoraproject.org/updates/FEDORA-2014-3839/udisks-1.0.4-12.fc19 14 https://admin.fedoraproject.org/updates/FEDORA-2014-4180/tigervnc-1.3.0-10.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2014-4208/ca-certificates-2013.1.97-1.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2014-4210/openstack-keystone-2013.1.5-2.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-4330/seamonkey-2.25-1.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2014-4424/xen-4.2.4-3.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2014-4426/xalan-j2-2.7.1-22.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2014-4438/libyaml-0.1.6-1.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2014-4511/mediawiki-1.21.8-1.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2014-4462/munin-2.0.20-1.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2014-4517/perl-YAML-LibYAML-0.41-4.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-4603/php-ZendFramework-1.12.5-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-4636/php-ZendFramework2-2.2.6-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-4676/a2ps-4.14-23.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-4665/kernel-3.13.8-100.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-4711/cups-filters-1.0.41-6.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-4720/mod_security-2.7.5-3.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-4781/check-mk-1.2.4p1-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-4749/mingw-openjpeg-1.5.1-8.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-4735/php-5.5.11-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-4745/ansible-1.5.4-1.fc19 The following Fedora 19 Critical Path updates have yet to be approved: Age URL 108 https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmarks-15-5.fc19 34 https://admin.fedoraproject.org/updates/FEDORA-2014-3245/testdisk-6.14-2.fc19.1,ntfs-3g-2014.2.15-1.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2014-4216/selinux-policy-3.12.1-74.23.fc19 12 https://admin.fedoraproject.org/updates/FEDORA-2014-4228/nss-util-3.16.0-1.fc19,nss-softokn-3.16.0-1.fc19,nss-3.16.0-1.fc19 10 https://admin.fedoraproject.org/updates/FEDORA-2014-4292/xorg-x11-drv-synaptics-1.7.4-3.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-3970/kde-workspace-4.11.7-6.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-4384/cups-1.6.4-4.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2014-4486/ibus-1.5.6-2.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-4665/kernel-3.13.8-100.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-4635/libvpx-1.3.0-4.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-4692/bash-4.2.46-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-4734/elfutils-0.158-2.fc19 The following builds have been pushed to Fedora 19 updates-testing ansible-1.5.4-1.fc19 awesome-3.5.4-1.fc19 bacula-5.2.13-18.fc19 bacula-docs-5.2.13-5.fc19 check-mk-1.2.4p1-1.fc19 elfutils-0.158-2.fc19 erlang-R16B-03.5.fc19 glusterfs-3.4.3-2.fc19 i3-4.7.2-1.fc19 ibus-table-1.5.0.20140402-1.fc19 idzebra-2.0.58-1.fc19 lnav-0.7.0-1.fc19 mingw-openjpeg-1.5.1-8.fc19 nodejs-exit-0.1.2-1.fc19 nodejs-faye-websocket-0.7.2-2.fc19 nodejs-getobject-0.1.0-1.fc19 nodejs-grunt-0.4.4-1.fc19 nodejs-grunt-contrib-watch-0.6.1-1.fc19 nodejs-grunt-git-authors-1.2.0-2.fc19 nodejs-grunt-legacy-util-0.1.2-1.fc19 nodejs-noptify-0.0.3-2.fc19 nodejs-testswarm-1.1.0-1.fc19 nodejs-tiny-lr-fork-0.0.5-2.fc19 nodejs-websocket-driver-0.3.2-2.fc19 php-5.5.11-1.fc19 pyqt-mail-checker-2.1.12-1.fc19 python-fudge-1.0.3-3.fc19 rss-glx-0.9.1.p-20.fc19 stonevpn-0.4.15-1.fc19 x2goserver-4.0.1.14-1.fc19 xsane-0.999-12.fc19 Details about builds: ================================================================================ ansible-1.5.4-1.fc19 (FEDORA-2014-4745) SSH-based configuration management, deployment, and task execution system -------------------------------------------------------------------------------- Update Information: https://github.com/ansible/ansible/blob/release1.5.4/CHANGELOG.md * Security fix for safe_eval, which further hardens the checking of the evaluation function. * Fix for accelerate mode -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 2 2014 Toshio Kuratomi <toshio@xxxxxxxxxxxxxxxxx> - 1.5.4-1 - Update to 1.5.4 - Add upstream patch to fix accelerator mode - Merge fedora and el6 spec files -------------------------------------------------------------------------------- ================================================================================ awesome-3.5.4-1.fc19 (FEDORA-2014-4732) Highly configurable, framework window manager for X. Fast, light and extensible -------------------------------------------------------------------------------- Update Information: Update Awesome to the latest stable version. See the announcements for the list of changes. - http://www.mail-archive.com/awesome-devel@xxxxxxxxxxxx/msg08984.html - http://www.mail-archive.com/awesome-devel@xxxxxxxxxxxx/msg08954.html - http://www.mail-archive.com/awesome-devel@xxxxxxxxxxxx/msg08544.html -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 2 2014 Thomas Moschny <thomas.moschny@xxxxxx> - 3.5.4-1 - Update to 3.5.4. * Wed Apr 2 2014 Thomas Moschny <thomas.moschny@xxxxxx> - 3.5.3-1 - Update to 3.5.3. - Remove dependency on libev, and a related patch. - Remove dependency on xcb-image. - Add dependency on xcb-cursor. - Simplify cmake invocation. - Define (if undefined) and use _pkgdocdir macro (rhbz#993678). - Fix bogus dates in the %changelog. -------------------------------------------------------------------------------- ================================================================================ bacula-5.2.13-18.fc19 (FEDORA-2014-4726) Cross platform network backup for Linux, Unix, Mac and Windows -------------------------------------------------------------------------------- Update Information: Fix Nagios plugin directory dependency; rework docs build requirements so they can build on RHEL 7. -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 1 2014 Simone Caronni <negativo17@xxxxxxxxx> - 5.2.13-18 - Add missing requirement for Nagios plugin folder. - Update queryfile patch. - Update man pages patch. -------------------------------------------------------------------------------- ================================================================================ bacula-docs-5.2.13-5.fc19 (FEDORA-2014-4726) Bacula documentation -------------------------------------------------------------------------------- Update Information: Fix Nagios plugin directory dependency; rework docs build requirements so they can build on RHEL 7. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 3 2014 Simone Caronni <negativo17@xxxxxxxxx> - 5.2.13-5 - Simplify requirements, fixes build on RHEL 7. * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 5.2.13-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ check-mk-1.2.4p1-1.fc19 (FEDORA-2014-4781) A new general purpose Nagios-plugin for retrieving data -------------------------------------------------------------------------------- Update Information: Fixes CVEs: - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 2 2014 Andrea Veri <averi@xxxxxxxxxxxxxxxxx> - 1.2.4p1-1 - New upstream release. Fixes the missing two CVEs that were still left unfixed on 1.2.4: - CVE-2014-2330 - CVE-2014-2331 * Tue Mar 25 2014 Andrea Veri <averi@xxxxxxxxxxxxxxxxx> - 1.2.4-1 - New upstream release. Fixes the following CVEs: - CVE-2014-2329 - CVE-2014-2332 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1080303 - CVE-2014-2329 CVE-2014-2330 CVE-2014-2331 CVE-2014-2332 check-mk: multiple flaws fixed in versions 1.2.2p3 and 1.2.3i5 https://bugzilla.redhat.com/show_bug.cgi?id=1080303 -------------------------------------------------------------------------------- ================================================================================ elfutils-0.158-2.fc19 (FEDORA-2014-4734) A collection of utilities and DSOs to handle compiled objects -------------------------------------------------------------------------------- Update Information: Update to 0.158. Support for aarch64. Unwinder support for i386, x86_64, s390, s390x, ppc and ppc64. Add eu-stack. -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 11 2014 Mark Wielaard <mjw@xxxxxxxxxx> - 0.158-2 - Add elfutils-0.158-mod-e_type.patch. * Mon Jan 6 2014 Mark Wielaard <mjw@xxxxxxxxxx> - 0.158-1 - Update to 0.158. Remove all patches now upstream. Add eu-stack. * Thu Dec 19 2013 Mark Wielaard <mjw@xxxxxxxxxx> - 0.157-4 - Add elfutils-0.157-aarch64-got-special-symbol.patch. - Remove -Werror=format-security from RPM_OPT_FLAGS. * Fri Dec 13 2013 Petr Machata <pmachata@xxxxxxxxxx> - 0.157-3 - Add upstream support for aarch64 * Wed Oct 9 2013 Mark Wielaard <mjw@xxxxxxxxxx> 0.157-2 - Show tests/test-suite.log in build.log when make check fails. * Mon Sep 30 2013 Mark Wielaard <mjw@xxxxxxxxxx> 0.157-1 - Update to 0.157. - Remove elfutils-0.156-abi_cfi-ppc-s390-arm.patch. - Remove elfutils-0.156-et_dyn-kernels.patch. -------------------------------------------------------------------------------- ================================================================================ erlang-R16B-03.5.fc19 (FEDORA-2014-4733) General-purpose programming language and runtime environment -------------------------------------------------------------------------------- Update Information: - Improve EPMD service - Create group and user for EPMD * Ver. R16B03-1 * Initial systemd support in EPMD * Ver. R16B03-1 * Initial systemd support in EPMD - Create group and user for EPMD * Ver. R16B03-1 * Initial systemd support in EPMD * Ver. R16B03-1 * Initial systemd support in EPMD -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 2 2014 Peter Lemenkov <lemenkov@xxxxxxxxx> - R16B-03.5 - Improve EPMD service * Fri Mar 28 2014 Peter Lemenkov <lemenkov@xxxxxxxxx> - R16B-03.4 - Create group and user for EPMD * Thu Mar 27 2014 Peter Lemenkov <lemenkov@xxxxxxxxx> - R16B-03.3 - Ver. R16B03-1 (Bugfix release) - Enabled systemd support in EPMD * Fri Feb 7 2014 Sam Kottler <skottler@xxxxxxxxxxxxxxxxx> - R16B-03.2 - Fix macro usage for EPEL7 build and added need_bootstrap -------------------------------------------------------------------------------- References: [ 1 ] Bug #1059563 - erlang-R16B03-1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1059563 -------------------------------------------------------------------------------- ================================================================================ glusterfs-3.4.3-2.fc19 (FEDORA-2014-4758) Cluster File System -------------------------------------------------------------------------------- Update Information: GlusterFS 3.4.3-2 GlusterFS 3.4.3 GA -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 3 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.3-2 - GlusterFS 3.4.3-2 * Wed Apr 2 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.3-1 - GlusterFS 3.4.3 GA * Wed Mar 26 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.3-0.3.beta2 - GlusterFS 3.4.3 beta2 * Thu Mar 13 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.3-0.2.beta1 - GlusterFS 3.4.3 beta1 * Thu Feb 13 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.4.3-0.1.alpha1 - GlusterFS 3.4.3 alpha1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #765202 - lgetxattr called with invalid keys on the bricks https://bugzilla.redhat.com/show_bug.cgi?id=765202 [ 2 ] Bug #1019095 - Inconsistent errno returned by glusterfs client when bricks are not online https://bugzilla.redhat.com/show_bug.cgi?id=1019095 [ 3 ] Bug #841617 - after geo-replication start: glusterfs process eats memory until OOM kills it https://bugzilla.redhat.com/show_bug.cgi?id=841617 [ 4 ] Bug #1057846 - Data loss in replicate self-heal https://bugzilla.redhat.com/show_bug.cgi?id=1057846 [ 5 ] Bug #1057264 - WRITE operations in the GlusterFS protocol do not set the size of the write https://bugzilla.redhat.com/show_bug.cgi?id=1057264 [ 6 ] Bug #971805 - nfs: "rm -rf" throws "E [client3_1-fops.c:5214:client3_1_inodelk]" Assertion failed https://bugzilla.redhat.com/show_bug.cgi?id=971805 [ 7 ] Bug #950083 - Merge in the Fedora spec changes to build one single unified spec https://bugzilla.redhat.com/show_bug.cgi?id=950083 -------------------------------------------------------------------------------- ================================================================================ i3-4.7.2-1.fc19 (FEDORA-2014-4747) Improved tiling window manager -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 3 2014 Martin Preisler <mpreisle@xxxxxxxxxx> - 4.7.2-1 - New upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1047301 - i3 window manager: new version (4.7) released https://bugzilla.redhat.com/show_bug.cgi?id=1047301 -------------------------------------------------------------------------------- ================================================================================ ibus-table-1.5.0.20140402-1.fc19 (FEDORA-2014-4763) The Table engine for IBus platform -------------------------------------------------------------------------------- Update Information: Fix a regression caused by the Python3 port in tabcreatedb.py (This fixes the build of ibus-table-chinese) -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 2 2014 Mike FABIAN <mfabian@xxxxxxxxxx> - 1.5.0.20140402-1 - Fix a regression caused by the Python3 port in tabcreatedb.py (This fixes the build of ibus-table-chinese) -------------------------------------------------------------------------------- ================================================================================ idzebra-2.0.58-1.fc19 (FEDORA-2014-4756) High performance structured text indexing and retrieval engine -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 3 2014 Nicholas van Oudtshoorn <vanoudt at gmail.com> - 2.0.58-1 - New upstream release -------------------------------------------------------------------------------- ================================================================================ lnav-0.7.0-1.fc19 (FEDORA-2014-4736) A curses-based tool for viewing and analyzing log files -------------------------------------------------------------------------------- Update Information: == 0.7.0 == Features: * Add the '.schema' SQL command to open a view that displays the schema for the internal tables and any attached databases. If lnav was only executed with a SQLite database and no text files, this view will open by default. * The scroll bar now indicates the location of errors/warnings, search hits, and bookmarks. * The xterm title is update to reflect the file name for the top line in the view. * Added a "headless" mode so that you can execute commands and run SQL queries from the command-line without having to do it from the curses UI. * When doing a search or SQL query, any text that is currently being displayed can be tab-completed. * The '-H' option was added so you can view the internal help text. * Added the 'g/G' hotkeys to move to the top/bottom of the file. * Added a 'log_mark' column to the log tables that indicates whether or not a log message is bookmarked. The field is writable, so you can bookmark lines using an SQL UPDATE query. * Added syntax-highlighting when editing SQL queries or search regexes. * Added a "write-json-to" command that writes the result of a SQL query to a JSON-formatted file. * The "elapsed time" column now uses red/green coloring to indicate sharp changes in the message rate. * Added a "set-min-log-level" command to filter out log messages that are below a given level. Fixes: * Performance improvements. * Multi-line filtering has been fixed. * A collator has been added to the log_level column in the log tables so that you can write expressions like "log_level > 'warning'". * The log_time datetime format now matches what is returned by "datetime('now')" so that collating works correctly. * If a search string is not valid PCRE syntax, a search is done for the exact string instead of just returning an error. * Static-linking has been cleaned up. * OpenSSL is no longer a requirement. * Alpha support for Windows/cygwin. * Environment variables can now be accessed in SQL queries using the syntax: $VAR_NAME * An internal log is kept and written out on a crash. * Partition bookmarks are now tracked separately from regular user bookmarks. You can start a partition with the 'partition-name' command and remove it with the 'clear-partition' command. * Improved display of possible matches during tab-completion in the command-prompt. The matches are now shown in a separate view and pressing tab repeatedly will scroll through the view. * The "open" command now does shell word expansion for file names. * More config directory paths have been added: /etc/lnav, $prefix/etc/lnav, and directories passed on the command-line with -I. -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 1 2014 Christopher Meng <rpm@xxxxxxxx> - 0.7.0-1 - Update to 0.7.0 -------------------------------------------------------------------------------- ================================================================================ mingw-openjpeg-1.5.1-8.fc19 (FEDORA-2014-4749) MinGW Windows OpenJPEG library -------------------------------------------------------------------------------- Update Information: Fix CVE-2014-0158 (see rhbz#1082997) -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 2 2014 Sandro Mani <manisandro@xxxxxxxxx> - 1.5.1-8 - Fix CVE-2014-0158 (see rhbz#1082997) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1082925 - openjpeg: Heap-based buffer overflow in JPEG2000 image tile decoder https://bugzilla.redhat.com/show_bug.cgi?id=1082925 -------------------------------------------------------------------------------- ================================================================================ nodejs-exit-0.1.2-1.fc19 (FEDORA-2014-4773) A process.exit alternative that ensures STDIO are fully drained before exiting -------------------------------------------------------------------------------- Update Information: Update nodejs-grunt to latest upstream release 0.4.4: https://raw.githubusercontent.com/gruntjs/grunt/bfc869e0551992e3418a498920c49646a425ea76/CHANGELOG -------------------------------------------------------------------------------- ================================================================================ nodejs-faye-websocket-0.7.2-2.fc19 (FEDORA-2014-4743) A standards-compliant WebSocket server and client for Node.js -------------------------------------------------------------------------------- Update Information: Initial packages. -------------------------------------------------------------------------------- ================================================================================ nodejs-getobject-0.1.0-1.fc19 (FEDORA-2014-4773) Get and set deep objects easily -------------------------------------------------------------------------------- Update Information: Update nodejs-grunt to latest upstream release 0.4.4: https://raw.githubusercontent.com/gruntjs/grunt/bfc869e0551992e3418a498920c49646a425ea76/CHANGELOG -------------------------------------------------------------------------------- ================================================================================ nodejs-grunt-0.4.4-1.fc19 (FEDORA-2014-4773) Grunt is a JavaScript library used for automation and running tasks -------------------------------------------------------------------------------- Update Information: Update nodejs-grunt to latest upstream release 0.4.4: https://raw.githubusercontent.com/gruntjs/grunt/bfc869e0551992e3418a498920c49646a425ea76/CHANGELOG -------------------------------------------------------------------------------- ChangeLog: * Sat Mar 29 2014 Jamie Nguyen <jamielinux@xxxxxxxxxxxxxxxxx> - 0.4.4-1 - update to upstream release 0.4.4 -------------------------------------------------------------------------------- ================================================================================ nodejs-grunt-contrib-watch-0.6.1-1.fc19 (FEDORA-2014-4743) Run predefined tasks whenever watched file patterns are added/changed/deleted -------------------------------------------------------------------------------- Update Information: Initial packages. -------------------------------------------------------------------------------- ================================================================================ nodejs-grunt-git-authors-1.2.0-2.fc19 (FEDORA-2014-4753) A Grunt module to generate a list of authors from git history -------------------------------------------------------------------------------- Update Information: Initial package. -------------------------------------------------------------------------------- ================================================================================ nodejs-grunt-legacy-util-0.1.2-1.fc19 (FEDORA-2014-4773) Deprecated Grunt utils provided for backwards compatibility -------------------------------------------------------------------------------- Update Information: Update nodejs-grunt to latest upstream release 0.4.4: https://raw.githubusercontent.com/gruntjs/grunt/bfc869e0551992e3418a498920c49646a425ea76/CHANGELOG -------------------------------------------------------------------------------- ================================================================================ nodejs-noptify-0.0.3-2.fc19 (FEDORA-2014-4743) A wrapper for the nopt module with a commander-like API -------------------------------------------------------------------------------- Update Information: Initial packages. -------------------------------------------------------------------------------- ================================================================================ nodejs-testswarm-1.1.0-1.fc19 (FEDORA-2014-4759) A Node.js module for interacting with TestSwarm -------------------------------------------------------------------------------- Update Information: Initial package. -------------------------------------------------------------------------------- ================================================================================ nodejs-tiny-lr-fork-0.0.5-2.fc19 (FEDORA-2014-4743) A tiny LiveReload server implementation you can spawn in the background -------------------------------------------------------------------------------- Update Information: Initial packages. -------------------------------------------------------------------------------- ================================================================================ nodejs-websocket-driver-0.3.2-2.fc19 (FEDORA-2014-4743) WebSocket protocol handler with pluggable I/O for Node.js -------------------------------------------------------------------------------- Update Information: Initial packages. -------------------------------------------------------------------------------- ================================================================================ php-5.5.11-1.fc19 (FEDORA-2014-4735) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information: 03 Apr 2014, PHP 5.5.11 Core: * Allow zero length comparison in substr_compare() (Tjerk) * Fixed bug #60602 (proc_open() changes environment array) (Tjerk) SPL: * Added feature #65545 (SplFileObject::fread()) (Tjerk) cURL: * Fixed bug #66109 (Can't reset CURLOPT_CUSTOMREQUEST to default behaviour) (Tjerk) * Fix compilation on libcurl versions between 7.10.5 and 7.12.2, inclusive. (Adam) FPM: * Added clear_env configuration directive to disable clearenv() call. (Github PR# 598, Paul Annesley) Fileinfo: * Fixed bug #66946 (fileinfo: extensive backtracking in awk rule regular expression). (CVE-2013-7345) (Remi) GD: * Fixed bug #66714 (imageconvolution breakage). (Brad Daily) * Fixed bug #66869 (Invalid 2nd argument crashes imageaffinematrixget) (Pierre) * Fixed bug #66887 (imagescale - poor quality of scaled image). (Remi) * Fixed bug #66890 (imagescale segfault). (Remi) * Fixed bug #66893 (imagescale ignore method argument). (Remi) Hash: * hash_pbkdf2() now works correctly if the $length argument is not specified. (Nikita) Intl: * Fixed bug #66873 (A reproductible crash in UConverter when given invalid encoding) (Stas) Mail: * Fixed bug #66535 (Don't add newline after X-PHP-Originating-Script) (Tjerk) MySQLi: * Fixed bug #66762 (Segfault in mysqli_stmt::bind_result() when link closed) (Remi) OPCache: * Added function opcache_is_script_cached(). (Danack) * Added information about interned strings usage. (Terry, Julien, Dmitry) Openssl: * Fixed bug #66833 (Default disgest algo is still MD5, switch to SHA1). (Remi) GMP: * Fixed bug #66872 (invalid argument crashes gmp_testbit) (Pierre) -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 3 2014 Remi Collet <rcollet@xxxxxxxxxx> 5.5.11-1 - Update to 5.5.11 http://www.php.net/ChangeLog-5.php#5.5.11 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1079846 - CVE-2013-7345 file: extensive backtracking in awk rule regular expression https://bugzilla.redhat.com/show_bug.cgi?id=1079846 -------------------------------------------------------------------------------- ================================================================================ pyqt-mail-checker-2.1.12-1.fc19 (FEDORA-2014-4762) Applet periodically checking for new messages in the mailboxes -------------------------------------------------------------------------------- Update Information: fixed getting the numbers of messages; some fixes; -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 3 2014 Fl@sh <kaperang07@xxxxxxxxx> - 2.1.12-1 - version updated; * Sat Mar 29 2014 Fl@sh <kaperang07@xxxxxxxxx> - 2.1.11-1 - version updated; -------------------------------------------------------------------------------- ================================================================================ python-fudge-1.0.3-3.fc19 (FEDORA-2014-4786) A Python module for using fake objects (mocks and stubs) to test real ones -------------------------------------------------------------------------------- Update Information: First release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1076825 - Review Request: python-fudge - A Python module for using fake objects (mocks and stubs) to test real ones https://bugzilla.redhat.com/show_bug.cgi?id=1076825 -------------------------------------------------------------------------------- ================================================================================ rss-glx-0.9.1.p-20.fc19 (FEDORA-2014-4766) Really Slick Screensavers -------------------------------------------------------------------------------- Update Information: fix date in changelog -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 2 2014 josef radinger <cheese@xxxxxxxxxxxxxx> - 0.9.1.p-20 - fix date in changelog * Tue Apr 1 2014 josef radinger <cheese@xxxxxxxxxxxxxx> - 0.9.1.p-19 - rename xml-files (#744862) * Mon Nov 18 2013 Dave Airlie <airlied@xxxxxxxxxx> - 0.9.1.p-18 - rebuilt for GLEW 1.10 * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.9.1.p-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Sat Mar 30 2013 Kevin Fenzi <kevin@xxxxxxxxx> - 0.9.1.p-16 - Rebuild for broken deps in rawhide -------------------------------------------------------------------------------- References: [ 1 ] Bug #744862 - No configuration available for RSS-GLX screensavers https://bugzilla.redhat.com/show_bug.cgi?id=744862 -------------------------------------------------------------------------------- ================================================================================ stonevpn-0.4.15-1.fc19 (FEDORA-2014-4760) Easy OpenVPN certificate and configuration management -------------------------------------------------------------------------------- Update Information: Added support for Android. Patch by Nerijus Baliunas <nerijus [at] users [dot] sourceforge [dot] net> -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ x2goserver-4.0.1.14-1.fc19 (FEDORA-2014-4752) X2Go Server -------------------------------------------------------------------------------- Update Information: New upstream release (4.0.1.14): - Log SSHFS output and errors to ~/.x2go/C-<session>/sshfs-mounts.log. (Fixes: #415). - If x2golistmounts is used without cmd option <session_id>, then the env var $X2GO_SESSION (current session) will be attempted to use. - If x2goumount-session is used without cmd option <session_id>, then the env var $X2GO_SESSION (current session) will be attempted to use. - Fix x2gostartagent. Make sure the -nolisten tcp option is configurable via x2goagent.options. (Fixes: #424). - Safely remove desktop files for client-side shared folders. Remove the correct desktop file, even if the shared folder has already been (forcefully) umounted. Such situations occur in cases where the connection gets interrupted. SSHFS will then get removed by the Linux kernel and we have to "guess" what desktop icons is actually to be removed. - Fix broken file descriptor closures in x2gocleansessions. (Fixes: #441). - x2gofm.desktop: Drop obsolete Encoding key from .desktop file. - Fix typos / hyphen-as-minus signs issues in x2goversion.8 and x2gomountdirs.8. -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 2 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 4.0.1.14-1 - Update to 4.0.1.14 * Mon Mar 24 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 4.0.1.13-4 - Create /tmp/.X11-unix with correct SELinux context (bug #1079772) -------------------------------------------------------------------------------- ================================================================================ xsane-0.999-12.fc19 (FEDORA-2014-4132) X Window System front-end for the SANE scanner interface -------------------------------------------------------------------------------- Update Information: This update fixes a crash that could occur when receiving signals in short succession. Additionally, it fixes issues found during source code analysis and includes all transparent icon files. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 3 2014 Nils Philippsen <nils@xxxxxxxxxx> - 0.999-12 - don't unnecessarily recreate 32px icon (#966301) - ship 16px icon * Wed Apr 2 2014 Nils Philippsen <nils@xxxxxxxxxx> - 0.999-11 - fix coverity patch: ensure directories exist instead of indiscriminately attempting to create them (#1079586) * Wed Mar 19 2014 Nils Philippsen <nils@xxxxxxxxxx> - 0.999-10 - fix signal handling (#1073698) - fix issues found during static analysis that don't require far-reaching refactoring * Mon Sep 23 2013 Nils Philippsen <nils@xxxxxxxxxx> - 0.999-7 - get rid of ancient compat cruft - build against lcms2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #966301 - xsane icon nontransparent https://bugzilla.redhat.com/show_bug.cgi?id=966301 [ 2 ] Bug #1073698 - [abrt] xsane: sane_dll_close(): xsane killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1073698 [ 3 ] Bug #1079586 - xsane starts with a lot of error messages, and doesn't load saved configuration parameters https://bugzilla.redhat.com/show_bug.cgi?id=1079586 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
