The following Fedora 19 Security updates need testing: Age URL 271 https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glance-2013.1.4-1.fc19 83 https://admin.fedoraproject.org/updates/FEDORA-2014-5896/nrpe-2.15-2.fc19 63 https://admin.fedoraproject.org/updates/FEDORA-2014-6553/chicken-4.8.0.6-2.fc19 61 https://admin.fedoraproject.org/updates/FEDORA-2014-6597/drupal7-views-3.8-1.fc19 40 https://admin.fedoraproject.org/updates/FEDORA-2014-7322/thunderbird-24.6.0-1.fc19 34 https://admin.fedoraproject.org/updates/FEDORA-2014-7496/readline-6.2-8.fc19 33 https://admin.fedoraproject.org/updates/FEDORA-2014-7570/asterisk-11.10.2-2.fc19 32 https://admin.fedoraproject.org/updates/FEDORA-2014-6774/claws-mail-3.10.1-1.fc19,claws-mail-plugins-3.10.0-1.fc19,libetpan-1.5-1.fc19 32 https://admin.fedoraproject.org/updates/FEDORA-2014-7610/perl-Email-Address-1.905-1.fc19 23 https://admin.fedoraproject.org/updates/FEDORA-2014-7939/lzo-2.08-1.fc19 18 https://admin.fedoraproject.org/updates/FEDORA-2014-8089/rubygem-activerecord-3.2.13-2.fc19 12 https://admin.fedoraproject.org/updates/FEDORA-2014-7889/zarafa-7.1.10-2.fc19 10 https://admin.fedoraproject.org/updates/FEDORA-2014-8328/python-bottle-0.12.6-1.fc19 10 https://admin.fedoraproject.org/updates/FEDORA-2014-8332/transmission-2.84-1.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-8443/mosquitto-1.3.2-1.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-8402/ipython-0.13.2-4.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-8395/java-1.7.0-openjdk-1.7.0.65-2.5.1.2.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-8441/java-1.8.0-openjdk-1.8.0.11-1.b12.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-8515/drupal7-7.29-1.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-8528/sdcc-3.3.0-1.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-8488/drupal6-6.32-1.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2014-8545/cobbler-2.6.3-1.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2014-8564/dpkg-1.16.15-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-8577/phpMyAdmin-4.2.6-1.fc19 2 https://admin.fedoraproject.org/updates/FEDORA-2014-8571/homebank-4.6.1-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-8648/ansible-1.6.7-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-8176/krb5-1.11.3-24.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-8609/moodle-2.4.11-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-8706/ansible-1.6.8-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-8352/cups-1.6.4-7.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-8763/firefox-31.0-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-8771/ReviewBoard-1.7.27-1.fc19 The following Fedora 19 Critical Path updates have yet to be approved: Age URL 219 https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmarks-15-5.fc19 145 https://admin.fedoraproject.org/updates/FEDORA-2014-3245/testdisk-6.14-2.fc19.1,ntfs-3g-2014.2.15-1.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2014-8256/langtable-0.0.25-1.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-8360/pcre-8.32-10.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-8338/curl-7.29.0-21.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-8176/krb5-1.11.3-24.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-8763/firefox-31.0-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-8761/systemd-204-20.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-8352/cups-1.6.4-7.fc19 The following builds have been pushed to Fedora 19 updates-testing ReviewBoard-1.7.27-1.fc19 cups-1.6.4-7.fc19 dkms-2.2.0.3-25.fc19 firefox-31.0-1.fc19 golang-github-codegangsta-cli-1.0.0-3.fc19 ibus-table-others-1.3.1-1.fc19 imaptest-20140711-1.fc19 libgadu-1.12.0-1.fc19 nodejs-agent-base-1.0.1-1.fc19 nodejs-ast-traverse-0.1.1-1.fc19 nodejs-ast-types-0.4.5-1.fc19 nodejs-bluebird-2.2.2-1.fc19 nodejs-breakable-1.0.0-1.fc19 nodejs-cls-0.1.5-1.fc19 perl-Text-Clip-0.0014-1.fc19 shinken-2.0.3-7.fc19 systemd-204-20.fc19 vdsm-4.14.11.2-0.fc19 Details about builds: ================================================================================ ReviewBoard-1.7.27-1.fc19 (FEDORA-2014-8771) Web-based code review tool -------------------------------------------------------------------------------- Update Information: - New upstream security release 1.7.27 - http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 23 2014 Patrick Uiterwijk <puiterwijk@xxxxxxxxxx> - 1.7.27-1 - New upstream security release 1.7.27 - http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27 -------------------------------------------------------------------------------- ================================================================================ cups-1.6.4-7.fc19 (FEDORA-2014-8352) CUPS printing system -------------------------------------------------------------------------------- Update Information: This update fixes a security flaw potentially leading to a disclosure of information. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 23 2014 Jiri Popelka <jpopelka@xxxxxxxxxx> - 1:1.6.4-7 - CVE-2014-5029, CVE-2014-5030, CVE-2014-5031 (#1122601) * Mon Jul 14 2014 Jiri Popelka <jpopelka@xxxxxxxxxx> - 1:1.6.4-6 - CVE-2014-3537 (#1119303) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1115576 - CVE-2014-3537 cups: insufficient checking leads to privilege escalation https://bugzilla.redhat.com/show_bug.cgi?id=1115576 [ 2 ] Bug #1122600 - CVE-2014-5029 CVE-2014-5030 CVE-2014-5031 cups: Incomplete fix for CVE-2014-3537 https://bugzilla.redhat.com/show_bug.cgi?id=1122600 -------------------------------------------------------------------------------- ================================================================================ dkms-2.2.0.3-25.fc19 (FEDORA-2014-8764) Dynamic Kernel Module Support Framework -------------------------------------------------------------------------------- Update Information: Fixes for parallel module building, intird rebuild skip and bash syntax fixes -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 27 2014 Simone Caronni <negativo17@xxxxxxxxx> - 2.2.0.3-25 - Enable all patches also for RHEL 5 builds. - Skip initramfs/initrd rebuild if not requested (#1109601). * Fri Jun 27 2014 Julien Floret <julien.floret@xxxxxxxxx> - 2.2.0.3-24 - Prevent parallel depmod failure with autoinstall (#1113946). * Tue Jun 17 2014 Simone Caronni <negativo17@xxxxxxxxx> - 2.2.0.3-23 - Update shell syntax (#1104253). * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.2.0.3-22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri Jan 17 2014 Simone Caronni <negativo17@xxxxxxxxx> - 2.2.0.3-21 - Adjust directory extraction due to regenerated tarball upstream. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1104253 - sed: -e expression #1, char 21: unterminated `s' command https://bugzilla.redhat.com/show_bug.cgi?id=1104253 [ 2 ] Bug #1109601 - dkms remove --no-initrd should only call /sbin/weak-modules with parameter --no-initramfs https://bugzilla.redhat.com/show_bug.cgi?id=1109601 [ 3 ] Bug #1113946 - Parallel depmod failure with dkms autoinstall https://bugzilla.redhat.com/show_bug.cgi?id=1113946 -------------------------------------------------------------------------------- ================================================================================ firefox-31.0-1.fc19 (FEDORA-2014-8763) Mozilla Firefox Web browser -------------------------------------------------------------------------------- Update Information: See https://www.mozilla.org/en-US/firefox/31.0/releasenotes/ for changes. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 17 2014 Martin Stransky <stransky@xxxxxxxxxx> - 31.0-1 - Update to 31.0 build 2 -------------------------------------------------------------------------------- ================================================================================ golang-github-codegangsta-cli-1.0.0-3.fc19 (FEDORA-2014-8772) Package for building command line apps in Go -------------------------------------------------------------------------------- Update Information: correct cp args -------------------------------------------------------------------------------- References: [ 1 ] Bug #1114175 - Review Request: golang-github-codegangsta-cli - Package for building command line apps in Go https://bugzilla.redhat.com/show_bug.cgi?id=1114175 -------------------------------------------------------------------------------- ================================================================================ ibus-table-others-1.3.1-1.fc19 (FEDORA-2014-8738) Various tables for IBus-Table -------------------------------------------------------------------------------- Update Information: update to latest upstream 1.3.1; Updates and bugfixes for the LaTeX table by Giuseppe Castagna (original author of the LaTeX table); Add _ and ^ to the start characters for the LaTeX table -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 23 2014 Mike FABIAN <mfabian@xxxxxxxxxx> - 1.3.1-1 - update to latest upstream 1.3.1 - Add _ and ^ to the start characters for the LaTeX table - Updates and bugfixes for the LaTeX table by Giuseppe Castagna (original author of the LaTeX table) -------------------------------------------------------------------------------- ================================================================================ imaptest-20140711-1.fc19 (FEDORA-2014-8759) A generic IMAP server compliancy tester -------------------------------------------------------------------------------- Update Information: ImapTest is a generic IMAP server compliancy tester that works with all IMAP servers. It supports stress testing with state tracking, scripted testing and benchmarking. When stress testing with state tracking ImapTest sends random commands to the server and verifies that server's output looks correct. Using the scripted testing ImapTest runs a list of predefined scripted tests and verifies that server returns expected output. Examples and details are provided online at: http://www.imapwiki.org/ImapTest -------------------------------------------------------------------------------- References: [ 1 ] Bug #1103927 - Review Request: imaptest - A generic IMAP server compliancy tester https://bugzilla.redhat.com/show_bug.cgi?id=1103927 -------------------------------------------------------------------------------- ================================================================================ libgadu-1.12.0-1.fc19 (FEDORA-2014-8758) A Gadu-gadu protocol compatible communications library -------------------------------------------------------------------------------- Update Information: Update to latest stable release. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 23 2014 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> - 1.12.0-1 - update to 1.12.0 release - drop obsolete patches -------------------------------------------------------------------------------- ================================================================================ nodejs-agent-base-1.0.1-1.fc19 (FEDORA-2014-8757) Turn a function into an `http.Agent` instance -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1122208 - Review Request: nodejs-agent-base - Turn a function into an `http.Agent` instance https://bugzilla.redhat.com/show_bug.cgi?id=1122208 -------------------------------------------------------------------------------- ================================================================================ nodejs-ast-traverse-0.1.1-1.fc19 (FEDORA-2014-8741) Simple but flexible AST traversal -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1122210 - Review Request: nodejs-ast-traverse - Simple but flexible AST traversal https://bugzilla.redhat.com/show_bug.cgi?id=1122210 -------------------------------------------------------------------------------- ================================================================================ nodejs-ast-types-0.4.5-1.fc19 (FEDORA-2014-8729) Esprima-compatible implementation of the Mozilla JS Parser API -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1122211 - Review Request: nodejs-ast-types - Esprima-compatible implementation of the Mozilla JS Parser API https://bugzilla.redhat.com/show_bug.cgi?id=1122211 -------------------------------------------------------------------------------- ================================================================================ nodejs-bluebird-2.2.2-1.fc19 (FEDORA-2014-8773) Full featured Promises/A+ implementation -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1122212 - Review Request: nodejs-bluebird - Full featured Promises/A+ implementation https://bugzilla.redhat.com/show_bug.cgi?id=1122212 -------------------------------------------------------------------------------- ================================================================================ nodejs-breakable-1.0.0-1.fc19 (FEDORA-2014-8770) Break out of functions -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1122213 - Review Request: nodejs-breakable - Break out of functions https://bugzilla.redhat.com/show_bug.cgi?id=1122213 -------------------------------------------------------------------------------- ================================================================================ nodejs-cls-0.1.5-1.fc19 (FEDORA-2014-8746) Class factory -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1122214 - Review Request: nodejs-cls - Class factory https://bugzilla.redhat.com/show_bug.cgi?id=1122214 -------------------------------------------------------------------------------- ================================================================================ perl-Text-Clip-0.0014-1.fc19 (FEDORA-2014-8734) Clip and extract text in clipboard-like way -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1121853 - Review Request: perl-Text-Clip - Clip and extract text in clipboard-like way https://bugzilla.redhat.com/show_bug.cgi?id=1121853 -------------------------------------------------------------------------------- ================================================================================ shinken-2.0.3-7.fc19 (FEDORA-2014-8733) Python Monitoring tool -------------------------------------------------------------------------------- Update Information: Add path.cfg file. Fix init SysV scripts. Add forgot doc dir. Add forgot dir. Add shinken manpage. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 23 2014 David Hannequin <david.hannequin@xxxxxxxxx> - 2.0.3-7 - Add path.cfg file. * Wed Jul 23 2014 David Hannequin <david.hannequin@xxxxxxxxx> - 2.0.3-6 - Fix init SysV scripts. * Mon Jul 21 2014 David Hannequin <david.hannequin@xxxxxxxxx> - 2.0.3-5 - Add forgot doc dir. * Fri Jul 18 2014 David Hannequin <david.hannequin@xxxxxxxxx> - 2.0.3-4 - Add forgot dir. * Mon Jul 7 2014 David Hannequin <david.hannequin@xxxxxxxxx> - 2.0.3-3 - Add shinken manpage. * Thu Jul 3 2014 David Hannequin <david.hannequin@xxxxxxxxx> - 2.0.3-2 - Delete python mysql require. * Fri Jun 13 2014 David Hannequin <david.hannequin@xxxxxxxxx> - 2.0.3-1 - Update from upstream. * Fri Apr 25 2014 David Hannequin <david.hannequin@xxxxxxxxx> - 2.0.2-1 - Update from upstream. * Thu Apr 17 2014 David Hannequin <david.hannequin@xxxxxxxxx> - 2.0-1 - Update from upstream. -------------------------------------------------------------------------------- ================================================================================ systemd-204-20.fc19 (FEDORA-2014-8761) A System and Service Manager -------------------------------------------------------------------------------- Update Information: Update hardware database, add SocketUser/SocketGroup, bugfixes. -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 22 2014 Zbigniew Jędrzejewski-Szmek <zbyszek@xxxxxxxxx> 204-20 - Update hardware database - Add SocketUser/SocketGroup (#1119282) - Bugfixes (#1047148, #969795, #1074259, #1062955, #1028687) and some more -------------------------------------------------------------------------------- References: [ 1 ] Bug #1047148 - MSG: useless systemd-journald "Vacuuming done" messages https://bugzilla.redhat.com/show_bug.cgi?id=1047148 [ 2 ] Bug #969795 - [abrt] systemd-204-3.fc19: crash: Process /usr/lib/systemd/systemd was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=969795 [ 3 ] Bug #1074259 - systemd-cryptsetup-generator uses 0 timeout https://bugzilla.redhat.com/show_bug.cgi?id=1074259 [ 4 ] Bug #1062955 - DOC: document that per-interface sysctl variables are applied on hotplug https://bugzilla.redhat.com/show_bug.cgi?id=1062955 [ 5 ] Bug #1028687 - systemctl is-enabled does not work for template instances https://bugzilla.redhat.com/show_bug.cgi?id=1028687 [ 6 ] Bug #1119282 - [Regression] Unable to run docker client as non-root user https://bugzilla.redhat.com/show_bug.cgi?id=1119282 -------------------------------------------------------------------------------- ================================================================================ vdsm-4.14.11.2-0.fc19 (FEDORA-2014-8766) Virtual Desktop Server Manager -------------------------------------------------------------------------------- Update Information: vdsm tag 4.14.11-2 vdsm tag 4.14.11.1 vdsm tag 4.14.11 -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 22 2014 Yaniv Bronhaim <ybronhei@xxxxxxxxxx> - 4.14.11-2 - vdsm tag 4.14.11-2 * Wed Jul 16 2014 Douglas Schilling Landgraf <dougsland@xxxxxxxxxx> - 4.14.11-0 - vdsm tag 4.14.11 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test