The following Fedora 19 Security updates need testing: Age URL 202 https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glance-2013.1.4-1.fc19 14 https://admin.fedoraproject.org/updates/FEDORA-2014-5896/nrpe-2.15-2.fc19 12 https://admin.fedoraproject.org/updates/FEDORA-2014-5974/python-fmn-web-0.2.4-3.fc19 12 https://admin.fedoraproject.org/updates/FEDORA-2014-5948/python-fedora-0.3.34-1.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-6046/cifs-utils-6.3-2.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-6083/qt-4.8.6-5.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2014-6127/rubygem-actionpack-3.2.13-6.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-5759/cups-filters-1.0.53-2.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-6255/smb4k-1.1.2-1.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-6237/botan-1.8.14-3.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-6233/dpkg-1.16.14-1.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-6271/seamonkey-2.26-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-6331/dovecot-2.2.13-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-6369/perl-LWP-Protocol-https-6.04-2.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-6343/zabbix-2.0.12-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-6354/kernel-3.14.4-100.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-6395/mutt-1.5.23-2.fc19 The following Fedora 19 Critical Path updates have yet to be approved: Age URL 150 https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmarks-15-5.fc19 76 https://admin.fedoraproject.org/updates/FEDORA-2014-3245/testdisk-6.14-2.fc19.1,ntfs-3g-2014.2.15-1.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-6047/gupnp-0.20.11-1.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-6113/xorg-x11-drv-evdev-2.8.4-1.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-6075/selinux-policy-3.12.1-74.26.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-6083/qt-4.8.6-5.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-5590/libcap-ng-0.7.4-1.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2014-6179/nss-softokn-3.16.1-1.fc19,nspr-4.10.5-1.fc19,nss-util-3.16.1-1.fc19,nss-3.16.1-1.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2014-6126/policycoreutils-2.1.14-46.8.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-6185/kde-workspace-4.11.9-4.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-6282/curl-7.29.0-19.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-6354/kernel-3.14.4-100.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-6361/btrfs-progs-3.14.1-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-6422/taglib-1.9.1-5.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-6407/firefox-29.0.1-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-6335/squashfs-tools-4.3-4.fc19 The following builds have been pushed to Fedora 19 updates-testing ceph-0.80.1-2.fc19 dpm-dsi-1.9.3-2.fc19 epix-1.2.14-1.fc19 firefox-29.0.1-1.fc19 freemind-1.0.1-1.fc19 mutt-1.5.23-2.fc19 openoffice.org-dict-cs_CZ-20080822-1.fc19 openvswitch-2.1.2-1.fc19 packagedb-cli-2.2-1.fc19 pcp-3.9.4-1.fc19 python-behave-1.2.3-13.fc19 python-junitxml-0.7-1.fc19 python-sqlalchemy-0.8.6-1.fc19 squashfs-tools-4.3-4.fc19 taglib-1.9.1-5.fc19 tzdata-2014c-1.fc19 vdsm-4.14.8.1-0.fc19 znc-1.4-1.fc19 Details about builds: ================================================================================ ceph-0.80.1-2.fc19 (FEDORA-2014-6391) User space components of the Ceph file system -------------------------------------------------------------------------------- Update Information: build epel-6 -------------------------------------------------------------------------------- ChangeLog: * Wed May 14 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 0.80.1-2 - build epel-6 - exclude %{_libdir}/ceph/erasure-code in base package * Tue May 13 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 0.80.1-1 - Update to latest stable upstream release, BZ 1095201 - PIE, _hardened_build, BZ 955174 * Thu Feb 6 2014 Ken Dreyer <ken.dreyer@xxxxxxxxxxx> - 0.72.2-2 - Move plugins from -devel into -libs package (#891993). Thanks Michael Schwendt. * Mon Jan 6 2014 Ken Dreyer <ken.dreyer@xxxxxxxxxxx> 0.72.2-1 - Update to latest stable upstream release - Use HTTPS for URLs - Submit Automake 1.12 patch upstream - Move unversioned shared libs from ceph-libs into ceph-devel * Wed Dec 18 2013 Marcin Juszkiewicz <mjuszkiewicz@xxxxxxxxxx> 0.67.3-4 - build without tcmalloc on aarch64 (no gperftools) * Sat Nov 30 2013 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 0.67.3-3 - gperftools not currently available on aarch64 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1095201 - ceph-0.80.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1095201 [ 2 ] Bug #955174 - ceph package should be built with PIE flags https://bugzilla.redhat.com/show_bug.cgi?id=955174 -------------------------------------------------------------------------------- ================================================================================ dpm-dsi-1.9.3-2.fc19 (FEDORA-2014-6425) Disk Pool Manager (DPM) plugin for the Globus GridFTP server -------------------------------------------------------------------------------- Update Information: Patch for proper EOF handling -------------------------------------------------------------------------------- ChangeLog: * Thu May 15 2014 Alejandro Alvarez <aalvarez@xxxxxxx> - 1.9.3-2 - Patch for proper EOF handling -------------------------------------------------------------------------------- ================================================================================ epix-1.2.14-1.fc19 (FEDORA-2014-6405) Utilities for mathematically accurate figures -------------------------------------------------------------------------------- Update Information: Update to 1.2.14 -------------------------------------------------------------------------------- ChangeLog: * Wed May 14 2014 Antonio Trande <sagitterATfedoraproject.org> 1.2.14-1 - Update to 1.2.14 -------------------------------------------------------------------------------- ================================================================================ firefox-29.0.1-1.fc19 (FEDORA-2014-6407) Mozilla Firefox Web browser -------------------------------------------------------------------------------- Update Information: New upstream release - 29.0.1. -------------------------------------------------------------------------------- ChangeLog: * Wed May 14 2014 Martin Stransky <stransky@xxxxxxxxxx> - 29.0.1-1 - Update to 29.0.1 -------------------------------------------------------------------------------- ================================================================================ freemind-1.0.1-1.fc19 (FEDORA-2014-6421) Free mind mapping software -------------------------------------------------------------------------------- Update Information: Update to upstream version 1.0.1 -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 24 2014 Michael Simacek <msimacek@xxxxxxxxxx> - 1.0.1-1 - Update to upstream version 1.0.1 - Specfile cleanup * Mon Aug 5 2013 Johannes Lips <hannes@xxxxxxxxxxxxxxxxx> 0.9.0-16 - fixed wrong build requires - updated jibx version * Sun Aug 4 2013 Johannes Lips <hannes@xxxxxxxxxxxxxxxxx> 0.9.0-15 - fixed changelog dates * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.9.0-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1020276 - freemind-1.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1020276 [ 2 ] Bug #992293 - freemind: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=992293 [ 3 ] Bug #962107 - Rebuild of freemind needed due to jgoodies-forms update https://bugzilla.redhat.com/show_bug.cgi?id=962107 [ 4 ] Bug #1054431 - Broken links in /usr/share/freemind/lib/jibx https://bugzilla.redhat.com/show_bug.cgi?id=1054431 -------------------------------------------------------------------------------- ================================================================================ mutt-1.5.23-2.fc19 (FEDORA-2014-6395) A text mode mail user agent -------------------------------------------------------------------------------- Update Information: fix build on s390 fix: CVE-2014-0467 heap-based buffer overflow when parsing certain headers -------------------------------------------------------------------------------- ChangeLog: * Thu May 15 2014 Dan Horák <dan[at]danny.cz> - 5:1.5.23-2 - update Makefile.am before running autoreconf * Tue Apr 29 2014 Jan Pacner <jpacner@xxxxxxxxxx> - 5:1.5.23-1 - Resolves: #1034263 (new version due to CVE) - patch cleanup (upstream fixes) - add html documentation (in addition to the current txt one) * Mon Dec 2 2013 Jan Pacner <jpacner@xxxxxxxxxx> - 5:1.5.22-1 - new release (Resolves: #1034263) - use inline sed instead of nodotlock patch - patches removed: testcert, hdrcnt, certscomp, updating, pophash, notation, writehead, tmpdir, verpeers, tlsv1v2 - manhelp patch adjusted (only DEBUG logging capability was left) * Mon Oct 21 2013 Honza Horak <hhorak@xxxxxxxxxx> - 5:1.5.21-26 - Fixed patch for certificates comparison * Mon Sep 23 2013 Miroslav Lichvar <mlichvar@xxxxxxxxxx> - 5:1.5.21-25 - Revert to packaging only selected doc files * Thu Aug 8 2013 Ville Skyttä <ville.skytta@xxxxxx> - 5:1.5.21-24 - Fix FTBFS with unversioned %{_docdir_fmt} (#992311), drop duplicate docs. * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 5:1.5.21-23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Jul 18 2013 Petr Pisar <ppisar@xxxxxxxxxx> - 5:1.5.21-22 - Perl 5.18 rebuild * Thu Jun 27 2013 Honza Horak <hhorak@xxxxxxxxxx> - 5:1.5.21-21 - Backported support for TLS 1.2 and TLS 1.2 protocols Resolves: #957840 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1075860 - CVE-2014-0467 mutt: heap-based buffer overflow when parsing certain headers https://bugzilla.redhat.com/show_bug.cgi?id=1075860 -------------------------------------------------------------------------------- ================================================================================ openoffice.org-dict-cs_CZ-20080822-1.fc19 (FEDORA-2014-6398) Czech spellchecker and hyphenation dictionaries for LibreOffice -------------------------------------------------------------------------------- Update Information: update to a new version -------------------------------------------------------------------------------- ChangeLog: * Thu May 15 2014 David Tardon <dtardon@xxxxxxxxxx> - 20080822-1 - update to a new version * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 20060303-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ openvswitch-2.1.2-1.fc19 (FEDORA-2014-6383) Open vSwitch daemon/database/utilities -------------------------------------------------------------------------------- Update Information: updated to 2.1.2 updated to 2.1.0 -------------------------------------------------------------------------------- ChangeLog: * Tue May 13 2014 Flavio Leitner - 2.1.2-1 - updated to 2.1.2 * Tue Mar 25 2014 Flavio Leitner - 2.1.0-1 - updated to 2.1.0 - obsoleted openvswitch-controller package - ovs-lib: allow non-root users to check service status (upstream commit 691e47554dd03dd6492e00bab5bd6d215f5cbd4f) - rhel: Add Patch Port support to initscripts (upstream commit e2bcc8ef49f5e51f48983b87ab1010f0f9ab1454) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1097941 - openvswitch-2.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1097941 [ 2 ] Bug #1080680 - [F19] openvswitch-2.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1080680 -------------------------------------------------------------------------------- ================================================================================ packagedb-cli-2.2-1.fc19 (FEDORA-2014-6375) A CLI for pkgdb -------------------------------------------------------------------------------- Update Information: Update to 2.2 * Replaces `devel` by `master` * Fix layout for groups * Rely on /api/critpath for the get_critpath_packages method * Log URLs before calling them rather than after Update to 2.1, for the pkgdb2 upgrade Update to 2.1, for the pkgdb2 upgrade Update to 2.1, for the pkgdb2 upgrade -------------------------------------------------------------------------------- ChangeLog: * Thu May 15 2014 Pierre-Yves Chibon <pingou@xxxxxxxxxxxx> - 2.2-1 - Update to 2.2 - Replaces `devel` by `master` - Fix layout for groups - Rely on /api/critpath for the get_critpath_packages method - Log URLs before calling them rather than after * Thu May 15 2014 Pierre-Yves Chibon <pingou@xxxxxxxxxxxx> - 2.1-1 - Update to 2.1 - Adds supports to pkgdb2client for the critpath filtering or querying * Wed May 14 2014 Pierre-Yves Chibon <pingou@xxxxxxxxxxxx> - 2.0-1 - Update to 2.0 for pkgdb2 - Adjust spec to rely on the newly included setup.py - Add BR on python-setuptools (and explicitely on python-requests) - Adjust the BR now that we use setup.py, all R are also BR -------------------------------------------------------------------------------- ================================================================================ pcp-3.9.4-1.fc19 (FEDORA-2014-6428) System-level performance monitoring and performance management -------------------------------------------------------------------------------- Update Information: Update to latest PCP sources -------------------------------------------------------------------------------- ChangeLog: * Thu May 15 2014 Nathan Scott <nathans@xxxxxxxxxx> - 3.9.4-1 - Merged pcp-gui and pcp-doc packages into core PCP. - Allow for conditional libmicrohttpd builds in spec file. - Adopt slow-start capability in systemd PMDA (BZ 1073658) - Resolve pmcollectl network/disk mis-reporting (BZ 1097095) - Update to latest PCP sources. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1073658 - intermittent pmdasystemd failure at pmcd startup during system boot https://bugzilla.redhat.com/show_bug.cgi?id=1073658 -------------------------------------------------------------------------------- ================================================================================ python-behave-1.2.3-13.fc19 (FEDORA-2014-6378) Tools for the behavior-driven development, Python style -------------------------------------------------------------------------------- Update Information: Remove bundled compatibility libraries and add Requires -------------------------------------------------------------------------------- ChangeLog: * Fri May 9 2014 Matěj Cepl <mcepl@xxxxxxxxxx> - 1.2.3-13 - Remove bundled compatibility libraries and add Requires (fix #1096220). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1096220 - python-behave package should depend on python-importlib https://bugzilla.redhat.com/show_bug.cgi?id=1096220 -------------------------------------------------------------------------------- ================================================================================ python-junitxml-0.7-1.fc19 (FEDORA-2014-6402) PyJUnitXML, a pyunit extension to output JUnit compatible XML -------------------------------------------------------------------------------- Update Information: Initial package. pyunit extension to output JUnit compatible XML. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1093406 - Review Request: python-junitxml - pyunit extension to output JUnit compatible XML https://bugzilla.redhat.com/show_bug.cgi?id=1093406 -------------------------------------------------------------------------------- ================================================================================ python-sqlalchemy-0.8.6-1.fc19 (FEDORA-2014-6386) Modular and flexible ORM library for python -------------------------------------------------------------------------------- Update Information: This update contains a new upstream bugfix release. [See here](http://docs.sqlalchemy.org/en/latest/changelog/changelog_08.html#change-0.8.6) for a list of all changes. -------------------------------------------------------------------------------- ChangeLog: * Thu May 15 2014 Nils Philippsen <nils@xxxxxxxxxx> - 0.8.6-1 - version 0.8.6, upstream bugfix release -------------------------------------------------------------------------------- ================================================================================ squashfs-tools-4.3-4.fc19 (FEDORA-2014-6335) Utility for the creation of squashfs filesystems -------------------------------------------------------------------------------- Update Information: Mostly this is just to get to the released version of 4.3. However this does pick up lz4 support (which is not in the kernel at this time) which was added after the stable snapshot. -------------------------------------------------------------------------------- ChangeLog: * Wed May 14 2014 Bruno Wolff III <bruno@xxxxxxxx> 4.3-4 - Even more man page fixes * Wed May 14 2014 Bruno Wolff III <bruno@xxxxxxxx> 4.3-3 - More mksquashfs man page fixes * Tue May 13 2014 Bruno Wolff III <bruno@xxxxxxxx> 4.3-2 - Add missed option to the mksquashfs man page * Tue May 13 2014 Bruno Wolff III <bruno@xxxxxxxx> 4.3-1 - Update to real 4.3 release - Added support for lz4 since the stable snapshot - Added support for alternate zlib compression strategies -------------------------------------------------------------------------------- ================================================================================ taglib-1.9.1-5.fc19 (FEDORA-2014-6422) Audio Meta-Data Library -------------------------------------------------------------------------------- Update Information: - add fixes for big endian platforms -------------------------------------------------------------------------------- ChangeLog: * Thu May 15 2014 Dan Horák <dan[at]danny.cz> 1.9.1-5 - big endian fixes (#1097109) * Tue May 6 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.9.1-4 - enable tests (#1094759) * Fri Apr 25 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.9.1-3 - License: GPLv2 or MPLv1.1 (#1091089) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1097109 - taglib build-in tests fail on BE machines https://bugzilla.redhat.com/show_bug.cgi?id=1097109 -------------------------------------------------------------------------------- ================================================================================ tzdata-2014c-1.fc19 (FEDORA-2014-6404) Timezone data -------------------------------------------------------------------------------- Update Information: Egypt's government decided to re-apply DTS starting May 15, 2014 at 24:00. Rebase to tzdata-2014b which includes the following update: - Crimea changes to Moscow time on March, 30, 2014. Rebase to 2014a: - Turkey begins DST on 2014-03-31, not 03-30. -------------------------------------------------------------------------------- ChangeLog: * Wed May 14 2014 Patsy Franklin <pfrankli@xxxxxxxxxx> 2014c-1 - Rebase to 2014c - Egypt will re-apply DST on May 15 at 24:00, except that DST will not be observed during Ramadan. * Wed Mar 26 2014 Patsy Franklin <pfrankli@xxxxxxxxxx> 2014b-1 - Rebase to 2014b - Crimea changes to Moscow time on March 30, 2014. * Wed Mar 12 2014 Patsy Franklin <pfrankli@xxxxxxxxxx> 2014a-1 - Rebase to 2014a - Turkey begins DST on 2014-03-31, not 03-30. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1095669 - Egypt's government to re-apply daylight saving time https://bugzilla.redhat.com/show_bug.cgi?id=1095669 [ 2 ] Bug #1080928 - tzdata-2014b is available https://bugzilla.redhat.com/show_bug.cgi?id=1080928 [ 3 ] Bug #1075002 - tzdata-2014a is available https://bugzilla.redhat.com/show_bug.cgi?id=1075002 -------------------------------------------------------------------------------- ================================================================================ vdsm-4.14.8.1-0.fc19 (FEDORA-2014-6430) Virtual Desktop Server Manager -------------------------------------------------------------------------------- Update Information: vdsm tag 4.14.8.1 vdsm-4.14.1 Ovirt-3.3.2 update vdsm-4.14.1-2 vdsm-4.13.4 for ovirt-3.3.5 -------------------------------------------------------------------------------- ChangeLog: * Wed May 7 2014 Douglas Schilling Landgraf <dougsland@xxxxxxxxxx> - 4.14.8.1-0 - vdsm tag 4.14.8.1 * Thu Apr 24 2014 Douglas Schilling Landgraf <dougsland@xxxxxxxxxx> - 4.14.7-0 - vdsm tag 4.14.7-0 * Tue Mar 25 2014 Douglas Schilling Landgraf <dougsland@xxxxxxxxxx> - 4.14.6-0 - vdsm tag 4.14.6-0 * Sun Mar 9 2014 Yaniv Bronhaim <ybronhei@xxxxxxxxxx> - 4.14.5-0 - Adding patches until 4.14.5 tag - Urgent fix for 4.14.4 that included http-1.1 support for python 2.6 - xmlrpc: [Fix] Use correct base class for parsing request -------------------------------------------------------------------------------- ================================================================================ znc-1.4-1.fc19 (FEDORA-2014-6385) An advanced IRC bouncer -------------------------------------------------------------------------------- Update Information: Update to 1.4 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
