The following Fedora 19 Security updates need testing: Age URL 162 https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glance-2013.1.4-1.fc19 99 https://admin.fedoraproject.org/updates/FEDORA-2013-24023/varnish-3.0.5-1.fc19 80 https://admin.fedoraproject.org/updates/FEDORA-2014-0797/libinfinity-0.5.5-1.fc19 53 https://admin.fedoraproject.org/updates/FEDORA-2014-2260/NetworkManager-ssh-0.9.2-0.2.20140209git46247c2.fc19 45 https://admin.fedoraproject.org/updates/FEDORA-2014-2710/zabbix-2.0.11-2.fc19 21 https://admin.fedoraproject.org/updates/FEDORA-2014-3839/udisks-1.0.4-12.fc19 14 https://admin.fedoraproject.org/updates/FEDORA-2014-4208/ca-certificates-2013.1.97-1.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-4511/mediawiki-1.21.8-1.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-4462/munin-2.0.20-1.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-4517/perl-YAML-LibYAML-0.41-4.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2014-4603/php-ZendFramework-1.12.5-1.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2014-4636/php-ZendFramework2-2.2.6-1.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2014-4676/a2ps-4.14-23.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-4711/cups-filters-1.0.41-6.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-4720/mod_security-2.7.5-3.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-4781/check-mk-1.2.4p1-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-4749/mingw-openjpeg-1.5.1-8.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-4735/php-5.5.11-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-4745/ansible-1.5.4-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-4800/squid-3.3.12-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-4849/kernel-3.13.9-100.fc19 The following Fedora 19 Critical Path updates have yet to be approved: Age URL 110 https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmarks-15-5.fc19 36 https://admin.fedoraproject.org/updates/FEDORA-2014-3245/testdisk-6.14-2.fc19.1,ntfs-3g-2014.2.15-1.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2014-4228/nss-util-3.16.0-1.fc19,nss-softokn-3.16.0-1.fc19,nss-3.16.0-1.fc19 11 https://admin.fedoraproject.org/updates/FEDORA-2014-4292/xorg-x11-drv-synaptics-1.7.4-3.fc19 10 https://admin.fedoraproject.org/updates/FEDORA-2014-3970/kde-workspace-4.11.7-6.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-4384/cups-1.6.4-4.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-4486/ibus-1.5.6-2.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2014-4635/libvpx-1.3.0-4.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-4692/bash-4.2.46-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-4734/elfutils-0.158-2.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-4849/kernel-3.13.9-100.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-4855/koji-1.9.0-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-4624/xdg-utils-1.1.0-0.22.rc2.fc19 The following builds have been pushed to Fedora 19 updates-testing kernel-3.13.9-100.fc19 koji-1.9.0-1.fc19 libcdr-0.0.15-1.fc19 python-caja-1.4.0-6.fc19 python-catkin_pkg-0.1.28-1.fc19 python-enum34-0.9.23-1.fc19 python-pyzolib-0.2.9-1.fc19 shared-color-targets-0.1.4-1.fc19 sil-scheherazade-fonts-2.020-1.fc19 Details about builds: ================================================================================ kernel-3.13.9-100.fc19 (FEDORA-2014-4849) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 3.13.9 stable update contains a number of important fixes across the tree. The 3.13.8 stable update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 3 2014 Justin M. Forbes <jforbes@xxxxxxxxxxxxxxxxx> - 3.13.9-100 - Linux v3.13.9 * Tue Apr 1 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - CVE-2014-2678 net: rds: deref of NULL dev in rds_iw_laddr_check (rhbz 1083274 1083280) * Mon Mar 31 2014 Justin M. Forbes <jforbes@xxxxxxxxxxxxxxxxx> - 3.13.8-100 - Linux v3.13.8 * Mon Mar 31 2014 Hans de Goede <hdegoede@xxxxxxxxxx> - Fix clicks getting lost with cypress_ps2 touchpads with recent xorg-x11-drv-synaptics versions (bfdo#76341) * Fri Mar 28 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - CVE-2014-2580 xen: netback crash trying to disable due to malformed packet (rhbz 1080084 1080086) - CVE-2014-0077 vhost-net: insufficent big packet handling in handle_rx (rhbz 1064440 1081504) - CVE-2014-0055 vhost-net: insufficent error handling in get_rx_bufs (rhbz 1062577 1081503) - CVE-2014-2568 net: potential info leak when ubuf backed skbs are zero copied (rhbz 1079012 1079013) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1083274 - CVE-2014-2678 kernel: net: rds: dereference of a NULL device in rds_iw_laddr_check() https://bugzilla.redhat.com/show_bug.cgi?id=1083274 [ 2 ] Bug #1080084 - CVE-2014-2580 kernel: xen: Linux netback crash trying to disable due to malformed packet https://bugzilla.redhat.com/show_bug.cgi?id=1080084 [ 3 ] Bug #1064440 - CVE-2014-0077 kernel: vhost-net: insufficiency in handling of big packets in handle_rx() https://bugzilla.redhat.com/show_bug.cgi?id=1064440 [ 4 ] Bug #1062577 - CVE-2014-0055 kernel: vhost-net: insufficient handling of error conditions in get_rx_bufs() https://bugzilla.redhat.com/show_bug.cgi?id=1062577 [ 5 ] Bug #1079012 - CVE-2014-2568 kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied https://bugzilla.redhat.com/show_bug.cgi?id=1079012 -------------------------------------------------------------------------------- ================================================================================ koji-1.9.0-1.fc19 (FEDORA-2014-4855) Build system tools -------------------------------------------------------------------------------- Update Information: update to upstream 1.9.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 24 2014 Dennis Gilmore <dennis@xxxxxxxx> - 1.9.0-1 - update to upstream 1.9.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #958499 - koji-vm should not be using python-virtinst code https://bugzilla.redhat.com/show_bug.cgi?id=958499 [ 2 ] Bug #995764 - koji-vm cannot be installed because of missing dependency on python-virtinst https://bugzilla.redhat.com/show_bug.cgi?id=995764 -------------------------------------------------------------------------------- ================================================================================ libcdr-0.0.15-1.fc19 (FEDORA-2014-4836) A library providing ability to interpret and import Corel Draw drawings -------------------------------------------------------------------------------- Update Information: Adds support for files created by Corel Draw X7. Fixes some bugs related to closed paths with multiple components. -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 5 2014 David Tardon <dtardon@xxxxxxxxxx> - 0.0.15-1 - new upstream release * Thu Feb 13 2014 David Tardon <dtardon@xxxxxxxxxx> - 0.0.14-6 - rebuild for new ICU * Fri Aug 30 2013 David Tardon <dtardon@xxxxxxxxxx> - 0.0.14-5 - Resolves: rhbz#1001251 duplicate documentation files / potentially conflicting * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.0.14-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Tue Jul 30 2013 Petr Machata <pmachata@xxxxxxxxxx> - 0.0.14-3 - Rebuild for boost 1.54.0 * Tue May 21 2013 David Tardon <dtardon@xxxxxxxxxx> - 0.0.14-2 - add public domain to licenses -------------------------------------------------------------------------------- ================================================================================ python-caja-1.4.0-6.fc19 (FEDORA-2014-4857) Python bindings for Caja -------------------------------------------------------------------------------- Update Information: - use and own %%{_libdir}/caja/extensions-2.0/python - fix rhbz (#1082693) -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 5 2014 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1:1.4.0-6 - use and own %{_libdir}/caja/extensions-2.0/python - fix rhbz (#1082693) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1082693 - Wrong extension directory https://bugzilla.redhat.com/show_bug.cgi?id=1082693 -------------------------------------------------------------------------------- ================================================================================ python-catkin_pkg-0.1.28-1.fc19 (FEDORA-2014-4854) Library for retrieving information about catkin packages -------------------------------------------------------------------------------- Update Information: Update to 0.1.28 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ python-enum34-0.9.23-1.fc19 (FEDORA-2014-4845) Backport of Python 3.4 Enum -------------------------------------------------------------------------------- Update Information: Backport of Python 3.4 enum type to earlier Python releases. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1033975 - Review Request: python-enum34 - Backport of Python 3.4 Enum https://bugzilla.redhat.com/show_bug.cgi?id=1033975 -------------------------------------------------------------------------------- ================================================================================ python-pyzolib-0.2.9-1.fc19 (FEDORA-2014-4856) Utilities for the Pyzo environment -------------------------------------------------------------------------------- Update Information: Update to 0.2.9 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 4 2014 Scott K Logan <logans@xxxxxxxxxxx> - 0.2.9-1 - Update to 0.2.9 -------------------------------------------------------------------------------- ================================================================================ shared-color-targets-0.1.4-1.fc19 (FEDORA-2014-4851) Shared color targets for creating color profiles -------------------------------------------------------------------------------- Update Information: New upstream release with several new targets from Wolf Faust. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 4 2014 Richard Hughes <richard@xxxxxxxxxxx> 0.1.4-1 - New upstream release with several new targets from Wolf Faust. -------------------------------------------------------------------------------- ================================================================================ sil-scheherazade-fonts-2.020-1.fc19 (FEDORA-2014-4832) An Arabic script unicode font -------------------------------------------------------------------------------- Update Information: New upstream bugfix release. Changelog is available in the website. -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 25 2014 Hedayat Vatankhah <hedayat.fwd+rpmchlog@xxxxxxxxx> - 2.020-1 - Update to 2.020 upstream release with bug fixes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1066946 - sil-scheherazade-fonts-2.020 is available https://bugzilla.redhat.com/show_bug.cgi?id=1066946 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test