The following Fedora 19 Security updates need testing: Age URL 328 https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glance-2013.1.4-1.fc19 140 https://admin.fedoraproject.org/updates/FEDORA-2014-5896/nrpe-2.15-2.fc19 91 https://admin.fedoraproject.org/updates/FEDORA-2014-7496/readline-6.2-8.fc19 89 https://admin.fedoraproject.org/updates/FEDORA-2014-6774/claws-mail-3.10.1-1.fc19,claws-mail-plugins-3.10.0-1.fc19,libetpan-1.5-1.fc19 89 https://admin.fedoraproject.org/updates/FEDORA-2014-7610/perl-Email-Address-1.905-1.fc19 80 https://admin.fedoraproject.org/updates/FEDORA-2014-7939/lzo-2.08-1.fc19 42 https://admin.fedoraproject.org/updates/FEDORA-2014-9162/xulrunner-31.0-1.fc19 34 https://admin.fedoraproject.org/updates/FEDORA-2014-9427/pipelight-0.2.7.3-3.fc19 29 https://admin.fedoraproject.org/updates/FEDORA-2014-9619/ca-certificates-2014.2.1-1.0.fc19 21 https://admin.fedoraproject.org/updates/FEDORA-2014-9830/glibc-2.17-21.fc19 21 https://admin.fedoraproject.org/updates/FEDORA-2014-9703/cups-1.6.4-10.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-10491/torque-3.0.4-4.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-10359/procmail-3.22-36.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-10366/icecream-1.0.1-8.20140822git.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-10649/xerces-j2-2.11.0-15.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-10640/libreoffice-4.1.6.2-8.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-10714/curl-7.29.0-23.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-10746/not-yet-commons-ssl-0.3.15-2.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-10794/squid-3.3.13-2.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-10784/python-oauth2-1.5.211-7.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11082/check-mk-1.2.4p5-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-10975/nodejs-0.10.32-1.fc19,v8-3.14.5.10-14.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-10989/phpMyAdmin-4.2.8.1-2.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11008/kernel-3.14.19-100.fc19 The following Fedora 19 Critical Path updates have yet to be approved: Age URL 276 https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmarks-15-5.fc19 202 https://admin.fedoraproject.org/updates/FEDORA-2014-3245/testdisk-6.14-2.fc19.1,ntfs-3g-2014.2.15-1.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-10326/elfutils-0.160-1.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-10441/libbluray-0.6.2-1.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-10359/procmail-3.22-36.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-10478/firefox-32.0-1.fc19,xulrunner-32.0-1.fc19,thunderbird-31.1.0-1.fc19,thunderbird-lightning-3.3-3.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-10788/gcc-4.8.3-7.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-10714/curl-7.29.0-23.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-10986/kde-workspace-4.11.12-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11008/kernel-3.14.19-100.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-10971/man-db-2.6.3-8.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-10990/rpm-4.11.3-1.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-10968/squashfs-tools-4.3-8.fc19 The following builds have been pushed to Fedora 19 updates-testing PyYAML-3.10-10.fc19 check-mk-1.2.4p5-1.fc19 collectl-3.7.4-1.fc19 dSFMT-2.2.3-4.fc19 debootstrap-1.0.62-1.fc19 dnstop-20140915-1.fc19 ghc-monads-tf-0.1.0.2-1.fc19 gnulib-0-10.20140910git.fc19.1 ibus-anthy-1.5.6-1.fc19 ibus-table-1.9.0-1.fc19 ibus-table-others-1.3.4-1.fc19 kde-workspace-4.11.12-1.fc19 kernel-3.14.19-100.fc19 lis-1.4.60-1.fc19 man-db-2.6.3-8.fc19 mock-1.1.41-2.fc19 mozilla-https-everywhere-4.0.1-1.fc19 nodejs-0.10.32-1.fc19 nodejs-ansidiff-1.0.0-1.fc19 nodejs-es5-shim-4.0.3-2.fc19 pcp-3.9.10-4.fc19 perl-Business-CreditCard-0.33-1.fc19 perl-DBIx-Connector-0.53-2.fc19 perl-ExtUtils-MakeMaker-6.64-4.fc19 perl-Gtk2-AppIndicator-0.15-2.fc19 perl-Syntax-Highlight-Engine-Kate-0.09-1.fc19 php-5.5.17-1.fc19 phpMyAdmin-4.2.8.1-2.fc19 profile-sync-daemon-5.51-1.fc19 python-backports-ssl_match_hostname-3.4.0.2-4.fc19 python-dill-0.2.1-2.fc19 python-fmn-consumer-0.3.0-1.fc19 python-fmn-lib-0.3.0-1.fc19 python-fmn-rules-0.3.0-1.fc19 python-fmn-web-0.3.0-2.fc19 python-moksha-hub-1.4.2-1.fc19 python-rhsm-1.13.2-1.fc19 python-stomper-0.2.9-1.fc19 python-urllib2_kerberos-0.1.6-13.fc19 qt-creator-3.2.1-1.fc19 rpm-4.11.3-1.fc19 seren-0.0.20-1.fc19 sks-1.1.5-7.fc19 squashfs-tools-4.3-8.fc19 subscription-manager-1.13.2-1.fc19 tiled-0.10.0-1.fc19 v8-3.14.5.10-14.fc19 vdr-vnsiserver-1.2.0-1.fc19 Details about builds: ================================================================================ PyYAML-3.10-10.fc19 (FEDORA-2014-10950) YAML parser and emitter for Python -------------------------------------------------------------------------------- Update Information: fix for big endian arches -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Jakub Čajka <jcajka@xxxxxxxxxx> - 3.10-10 - fixed typecast issues using debian patch(int->size_t)(BZ#1140189) - spec file cleanup * Thu Aug 8 2013 John Eckersberg <jeckersb@xxxxxxxxxx> - 3.10-9 - Add check section and run test suite * Fri Aug 2 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.10-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1140189 - pyyaml: tests fail on BE https://bugzilla.redhat.com/show_bug.cgi?id=1140189 -------------------------------------------------------------------------------- ================================================================================ check-mk-1.2.4p5-1.fc19 (FEDORA-2014-11082) A new general purpose Nagios-plugin for retrieving data -------------------------------------------------------------------------------- Update Information: New upstream release providing many security fixes. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Andrea Veri <averi@xxxxxxxxxxxxxxxxx> - 1.2.4p5-1 - New upstream release. Fixes CVEs: - CVE-2014-5338 - CVE-2014-5339 - CVE-2014-5340 (BZ: #1132337, #1132339, #1132341) - Stop shipping the j4p_performance plugin as it's deprecated. (BZ: #1133068) - Turn Wato_Legacy_Eval as True as we want to prevent breakages between machines running different Python and/or check-mk releases. This is necessary after the 'ast' move from 'pickle' (that was generating a insecure API call), however the 'ast' module is still not available for RHEL / CentOS 5 machines. The patch is there to avoid miscommunications between different distribution releases. More information is available at: http://mathias-kettner.com/check_mk_werks.php?werk_id=984. * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2.4p2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2.4p2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1132337 - CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4 https://bugzilla.redhat.com/show_bug.cgi?id=1132337 -------------------------------------------------------------------------------- ================================================================================ collectl-3.7.4-1.fc19 (FEDORA-2014-11069) A utility to collect various Linux performance data -------------------------------------------------------------------------------- Update Information: - update to upstream version 3.7.4 - upstream changelog at http://collectl.sourceforge.net/Releases.html -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Dan Horák <dan[at]danny.cz> - 3.7.4-1 - upgrade to upstream version 3.7.4 (#1140499) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1140499 - collectl-3.7.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1140499 -------------------------------------------------------------------------------- ================================================================================ dSFMT-2.2.3-4.fc19 (FEDORA-2014-11086) Double precision SIMD-oriented Fast Mersenne Twister -------------------------------------------------------------------------------- Update Information: New package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1108765 - Review Request: dSFMT - Double precision SIMD-oriented Fast Mersenne Twister https://bugzilla.redhat.com/show_bug.cgi?id=1108765 -------------------------------------------------------------------------------- ================================================================================ debootstrap-1.0.62-1.fc19 (FEDORA-2014-10999) Debian GNU/Linux bootstrapper -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Jan Vcelak <jvcelak@xxxxxxxxxxxxxxxxx> 1.0.62-1 - new upstream release: + fix warnings caused by change in output of dpkg 1.17.2 + fix reporting of package versions with epoch -------------------------------------------------------------------------------- References: [ 1 ] Bug #1136225 - debootstrap-1.0.62 is available https://bugzilla.redhat.com/show_bug.cgi?id=1136225 -------------------------------------------------------------------------------- ================================================================================ dnstop-20140915-1.fc19 (FEDORA-2014-10995) Displays information about DNS traffic on your network -------------------------------------------------------------------------------- Update Information: Updated to 20140915 with new-gtlds filter support -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Paul Wouters <pwouters@xxxxxxxxxx> - 20140915-1 - Updated to 20140915 with new-gtlds filter support - Updated warning patch (partially merged upstream) - Added usage patch that was missing the new filter name new-gtlds - Enabled hardening as this application takes in network input. * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 20121017-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 20121017-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Tue Mar 4 2014 Conrad Meyer <cemeyer@xxxxxx> - 20121017-4 - Actual cleanup; drop EL5-age SPEC bits * Mon Mar 3 2014 Denis Fateyev <denis@xxxxxxxxxxx> - 20121017-3 - Spec cleanup, epel branches * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 20121017-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ ghc-monads-tf-0.1.0.2-1.fc19 (FEDORA-2014-10991) Monad classes using type families -------------------------------------------------------------------------------- Update Information: Monad classes using type families - http://hackage.haskell.org/package/monads-tf -------------------------------------------------------------------------------- References: [ 1 ] Bug #1135933 - Review Request: ghc-monads-tf - Monad classes using type families https://bugzilla.redhat.com/show_bug.cgi?id=1135933 -------------------------------------------------------------------------------- ================================================================================ gnulib-0-10.20140910git.fc19.1 (FEDORA-2014-11003) GNU Portability Library -------------------------------------------------------------------------------- Update Information: Update to latest upstream version. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 11 2014 Zbigniew Jędrzejewski-Szmek <zbyszek@xxxxxxxxx> - 0-9.20140910git - Update to latest git. * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-10.20140710git - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ ibus-anthy-1.5.6-1.fc19 (FEDORA-2014-11035) The Anthy engine for IBus input platform -------------------------------------------------------------------------------- Update Information: This release add SearchEntry box in dict view and add Emoji dict and fixes some deprecated messages. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.5.6-1 - Bumped to 1.5.6 - Added ibus-anthy-xx-input-mode.patch from ibus-anthy-HEAD.patch. * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.5.5-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Tue Jul 22 2014 Kalev Lember <kalevlember@xxxxxxxxx> - 1.5.5-8 - Rebuilt for gobject-introspection 1.41.4 * Mon Jul 14 2014 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.5.5-7 - Updated ibus-anthy-HEAD.patch Fixed deprecated warnings with python3-gobject 3.13.3. * Mon Jul 14 2014 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.5.5-6 - Updated ibus-anthy-HEAD.patch Fixed deprecated warnings with python3-gobject 3.13.3. Set max-width-chars in ibus-anthy-setup wrapped GtkLabel. Set 'IBUS_SETUP_XID' environment variable in setup. * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.5.5-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ ibus-table-1.9.0-1.fc19 (FEDORA-2014-10985) The Table engine for IBus platform -------------------------------------------------------------------------------- Update Information: update to 1.9.0; Redesign the property menus, use sub-menus instead of toggles update to 1.8.11; fixes a Python backtrace when the dconf key /desktop/ibus/engine/table/wubi-jidian86/onechar was not set update to 1.8.10; Disable auto_commit option for tables which do not have RULES; Disable hotkey to switch Chinese mode if database is not Chinese; Disable “onechar” (Phrase mode/Single char mode) option for non-CJK databases -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Mike FABIAN <mfabian@xxxxxxxxxx> - 1.9.0-1 - update to 1.9.0 - Redesign the property menus, use sub-menus instead of toggles * Sun Sep 14 2014 Mike FABIAN <mfabian@xxxxxxxxxx> - 1.8.11-1 - update to 1.8.11 - fixes a Python backtrace when the dconf key /desktop/ibus/engine/table/wubi-jidian86/onechar was not set * Thu Sep 4 2014 Mike FABIAN <mfabian@xxxxxxxxxx> - 1.8.10-1 - update to 1.8.10 - Disable auto_commit option for tables which do not have RULES - Resolves: rhbz#1135759 - Disable hotkey to switch Chinese mode if database is not Chinese - Disable “onechar” (Phrase mode/Single char mode) option for non-CJK databases -------------------------------------------------------------------------------- References: [ 1 ] Bug #1135759 - The rusle is broken with "Normal commit mode" https://bugzilla.redhat.com/show_bug.cgi?id=1135759 -------------------------------------------------------------------------------- ================================================================================ ibus-table-others-1.3.4-1.fc19 (FEDORA-2014-11085) Various tables for IBus-Table -------------------------------------------------------------------------------- Update Information: update to latest upstream 1.3.4; Make status prompts and symbols more consistent -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Mike FABIAN <mfabian@xxxxxxxxxx> - 1.3.4-1 - update to latest upstream 1.3.4 - Make status prompts and symbols more consistent -------------------------------------------------------------------------------- ================================================================================ kde-workspace-4.11.12-1.fc19 (FEDORA-2014-10986) KDE Workspace -------------------------------------------------------------------------------- Update Information: New bugfix release, see also: http://kde.org/announcements/announce-4.14.1.php -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.11.12-1 - 4.11.12 * Fri Aug 22 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.11.11-4 - Requires: kactivities (unversioned) * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 4.11.11-3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Fri Jul 25 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.11.11-2.1 - rebuild (f20 against kde-4.13) * Thu Jul 24 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.11.11-2 - -libs: drop Requires: kde-workspace * Sat Jul 12 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.11.11-1 - 4.11.11 * Sat Jul 5 2014 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> 4.11.10-8 - backport upstream patch to fix choppy fullscreen with OpenGL compositing on the latest xorg-x11-drv-intel driver from KWin 5 (kde#336589, fdo#80349) * Thu Jul 3 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.11.10-7 - QT_PLUGIN_PATH contains repeated paths (#1115268) * Wed Jul 2 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.11.10-6 - BuildConflicts: nepomuk-core-devel * Thu Jun 19 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.11.10-5 - BR: kdelibs4-webkit-devel * Wed Jun 11 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.11.10-4 - revert patch for "Fix ... cut off ... in digital clock" * Wed Jun 11 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.11.10-3 - Fix the numbers cut off problem in digital clock applet (kde#228902) -------------------------------------------------------------------------------- ================================================================================ kernel-3.14.19-100.fc19 (FEDORA-2014-11008) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 3.14.19 stable update contains a number of important fixes across the tree. The 3.14.18 stable update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Justin M. Forbes <jforbes@xxxxxxxxxxxxxxxxx> - 3.14.19-100 - Linux v3.14.19 * Mon Sep 15 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - CVE-2014-6410 udf: avoid infinite loop on indirect ICBs (rhbz 1141809 1141810) - CVE-2014-3186 HID: memory corruption via OOB write (rhbz 1141407 1141410) * Fri Sep 12 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - CVE-2014-3181 HID: OOB write in magicmouse driver (rhbz 1141173 1141179) * Wed Sep 10 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - CVE-2014-3631 Add patch to fix oops on keyring gc (rhbz 1116347) * Tue Sep 9 2014 Justin M. Forbes <jforbes@xxxxxxxxxxxxxxxxx> - 3.14.18-100 - Linux v3.14.18 * Thu Aug 28 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - Fix NFSv3 ACL regression (rhbz 1132786) * Wed Aug 27 2014 Justin M. Forbes <jforbes@xxxxxxxxxxxxxxxxx> - CVE-2014-{5471,5472} isofs: Fix unbounded recursion when processing relocated directories (rhbz 1134099 1134101) * Tue Aug 19 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - Fix NFSv3 oops (rhbz 1131551) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141809 - CVE-2014-6410 kernel: udf: Avoid infinite loop when processing indirect ICBs https://bugzilla.redhat.com/show_bug.cgi?id=1141809 [ 2 ] Bug #1141173 - CVE-2014-3181 Kernel: HID: OOB write in magicmouse driver https://bugzilla.redhat.com/show_bug.cgi?id=1141173 [ 3 ] Bug #1141407 - CVE-2014-3186 Kernel: HID: memory corruption via OOB write https://bugzilla.redhat.com/show_bug.cgi?id=1141407 [ 4 ] Bug #1134099 - CVE-2014-5471 CVE-2014-5472 kernel: isofs: unbound recursion when processing relocated directories https://bugzilla.redhat.com/show_bug.cgi?id=1134099 -------------------------------------------------------------------------------- ================================================================================ lis-1.4.60-1.fc19 (FEDORA-2014-11083) A library for solving linear equations and eigenvalue problems -------------------------------------------------------------------------------- Update Information: Update to 1.4.60 Update to 1.4.59 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.60-1 - Update to 1.4.60 * Wed Sep 10 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.59-1 - Update to 1.4.59 -------------------------------------------------------------------------------- ================================================================================ man-db-2.6.3-8.fc19 (FEDORA-2014-10971) Tools for searching and reading man pages -------------------------------------------------------------------------------- Update Information: Don't store canonicalised versions of manpath elements -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 18 2014 jchaloup <jchaloup@xxxxxxxxxx> - 2.6.3-8 - resolves: #1043401 Don't store canonicalised versions of manpath elements -------------------------------------------------------------------------------- References: [ 1 ] Bug #1043401 - SELinux is preventing /usr/bin/mandb from 'write' accesses on the file index.db. https://bugzilla.redhat.com/show_bug.cgi?id=1043401 -------------------------------------------------------------------------------- ================================================================================ mock-1.1.41-2.fc19 (FEDORA-2014-10998) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: add updated configs for secondary arches remove python 2.7 function (os.getresuid()) added in util.py bugfixes, updates to configs various bug fixes bugfixes, updates to configs various bug fixes bugfixes, updates to configs various bug fixes -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 msuchy@xxxxxxxxxx - 1.1.41-2 - add updated configs for secondary arches * Fri Jul 18 2014 Clark Williams <williams@xxxxxxxxxx> - 1.1.41-1 - fix python 2.7 feature so we can run on rhel6 * Thu Jul 17 2014 Clark Williams <williams@xxxxxxxxxx> - 1.1.40-1 - from Miroslav Suchý <msuchy@xxxxxxxxxx>: - mock: Revert "revert 7ec6a1e9d202ab56fb31c914dbf7516c045e56ab" [BZ# 1103239] - configs: use final Centos 7 path in configs [BZ# 1108402] - configs: fix typo in fedora-rawhide-armhfp config [BZ# 1108847] - mockchain: use getuid() instead of getgid() [BZ# 1108265] - configs: check gpg key of packages from Fedora, Centos, Epel - plugins: disable package_state by default on el6 - make /etc/mtab symlink to /proc/self/mounts [BZ# 1116158] - do not list pki files twice - deploy etc/pki to buildroot - from Michael Simacek <msimacek@xxxxxxxxxx>: - mock: do not allow config scripts to regain root priviledges - from Igor Gnatenko <i.gnatenko.brain@xxxxxxxxx>: - Add F21 configs - Change releasever to 22 for rawhide * Wed May 21 2014 Clark Williams <williams@xxxxxxxxxx> - 1.1.39-1 - configs: update epel-7 koji repo to use correct URL - from Ken Dreyer <ktdryer@xxxxxxxxxxxx> - Use RHEL 7 RC mirrorlist URLs from Miroslav Suchý <msuchy@xxxxxxxxxx> - add support for subscription-manager (RHSM) - expand tabs for better readablity - cut of everything after decimal point, if there is some [BZ# 1098477] - better code readablity - clarify the log messages - use metalink instead of mirrorlist in yum config - set LC_MESSAGE to C before executing command [BZ# 519258] - use ctypes.get_errno() instead of ctypes.c_int.in_dll(_libc, "errno") - revert 7ec6a1e9d202ab56fb31c914dbf7516c045e56ab (python 2.4 workarounds) - buildroot and %clean is not needed for el6 and fedoras - description should always end with dot - remove shebang from mockbuild/mounts.py - %defattr is not needed since rpm 4.4 - remove el5 conditional - use createrepo_c which is much faster - whitespace fixes - remove unused variables: 'username' and 'hdr' - better logging of kernel version [BZ# 1048826] - partially revert 9db6edb33cc34a450e762eb5d2bedf9067ebc419 [BZ# 1034805] - teach mockchain about ftp [BZ# 1061776] from Jerry James <loganjerry@xxxxxxxxx> - fix post scriptlet to deal with rawhide [BZ# 1083689] -------------------------------------------------------------------------------- References: [ 1 ] Bug #1103239 - warning during using mock https://bugzilla.redhat.com/show_bug.cgi?id=1103239 [ 2 ] Bug #1108402 - epel-7-x86_64 builds fail because RHEL 7 RC packages removed https://bugzilla.redhat.com/show_bug.cgi?id=1108402 [ 3 ] Bug #1108847 - /etc/mock/fedora-rawhide-armhfp.cfg typo https://bugzilla.redhat.com/show_bug.cgi?id=1108847 [ 4 ] Bug #1108265 - mockchain.py sets up default config with group id instead of user id https://bugzilla.redhat.com/show_bug.cgi?id=1108265 [ 5 ] Bug #1116158 - systemd-215-1.fc21 breaks rawhide buildroot https://bugzilla.redhat.com/show_bug.cgi?id=1116158 [ 6 ] Bug #1061776 - [PATCH] [RFE] allow ftp url for mockchain https://bugzilla.redhat.com/show_bug.cgi?id=1061776 [ 7 ] Bug #1034805 - [PATCH] Do not pass $ to repo id in mockchain https://bugzilla.redhat.com/show_bug.cgi?id=1034805 [ 8 ] Bug #1028438 - [PATCH][RFE] allow mockchain to pass options to mock https://bugzilla.redhat.com/show_bug.cgi?id=1028438 [ 9 ] Bug #1048826 - [PATCH] Log host kernel https://bugzilla.redhat.com/show_bug.cgi?id=1048826 [ 10 ] Bug #519258 - mock ignores unsattisfied BuildRequires with German locale https://bugzilla.redhat.com/show_bug.cgi?id=519258 [ 11 ] Bug #1083689 - mock %post script fails on Rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1083689 [ 12 ] Bug #1098477 - post install scripts failed rhel7 https://bugzilla.redhat.com/show_bug.cgi?id=1098477 [ 13 ] Bug #1099676 - Unable to mock build EL7 SRPMs on EL6 https://bugzilla.redhat.com/show_bug.cgi?id=1099676 [ 14 ] Bug #1090073 - Post scriptlet fails due to RHEL version string https://bugzilla.redhat.com/show_bug.cgi?id=1090073 -------------------------------------------------------------------------------- ================================================================================ mozilla-https-everywhere-4.0.1-1.fc19 (FEDORA-2014-11001) HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey -------------------------------------------------------------------------------- Update Information: 4.0.0 changes - Ruleset fixes to wikimedia, stanford-university, joyent, and gaytorrents. - Merge Android Firefox branch, so Android now has the same release cycle -- as the stable HTTPS Everywhere branch for Firefox. - Remove old unused ContentPolicy code. - FEDORA/RHEL SPECIFIC - Place version conditionals for GNOME Software -- Center metadata in spec file. 4.0.1 changes - Significant new coverage: Reddit, Quora - Fixes include: -- Frontier Networks, Hotmail / Live, Microsoft, Mozilla, Ohio State, Rackspace, SJ.se, Timbo.se -- https://github.com/EFForg/https-everywhere/issues/310 -- https://github.com/EFForg/https-everywhere/issues/500 -- https://trac.torproject.org/projects/tor/ticket/11402 -- https://trac.torproject.org/projects/tor/ticket/11418 -- https://trac.torproject.org/projects/tor/ticket/12583 -- https://trac.torproject.org/projects/tor/ticket/12104 -- https://trac.torproject.org/projects/tor/ticket/9466 -- https://github.com/EFForg/https-everywhere/issues/144 - Enhancements to MCB detection and subsequent ruleset fixes -- https://github.com/EFForg/https-everywhere/issues/529 -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 13 2014 Russell Golden <niveusluna@xxxxxxxxxxxxxx> - 4.0.1-1 - Significant new coverage: Reddit, Quora - Fixes include: -- Frontier Networks, Hotmail / Live, Microsoft, Mozilla, Ohio State, Rackspace, SJ.se, Timbo.se -- https://github.com/EFForg/https-everywhere/issues/310 -- https://github.com/EFForg/https-everywhere/issues/500 -- https://trac.torproject.org/projects/tor/ticket/11402 -- https://trac.torproject.org/projects/tor/ticket/11418 -- https://trac.torproject.org/projects/tor/ticket/12583 -- https://trac.torproject.org/projects/tor/ticket/12104 -- https://trac.torproject.org/projects/tor/ticket/9466 -- https://github.com/EFForg/https-everywhere/issues/144 - Enhancements to MCB detection and subsequent ruleset fixes -- https://github.com/EFForg/https-everywhere/issues/529 * Thu Sep 4 2014 Russell Golden <niveusluna@xxxxxxxxxxxxxx> - 4.0.0-1 - Ruleset fixes to wikimedia, stanford-university, joyent, and gaytorrents. - Merge Android Firefox branch, so Android now has the same release cycle -- as the stable HTTPS Everywhere branch for Firefox. - Remove old unused ContentPolicy code. - FEDORA/RHEL SPECIFIC - Place version conditionals for GNOME Software -- Center metadata in spec file. * Tue Aug 19 2014 Richard Hughes <richard@xxxxxxxxxxx> - 3.5.3-2 - Add a MetaInfo file for GNOME Software and Apper. -------------------------------------------------------------------------------- ================================================================================ nodejs-0.10.32-1.fc19 (FEDORA-2014-10975) JavaScript runtime -------------------------------------------------------------------------------- Update Information: This update provides the latest stable version of Node.js and corresponding backports to the v8 package. This update resolves CVE-2013-6668, which has only a minor impact since Node.js is not typically used to execute untrusted JavaScript. For more information on the fixed vulnerability, please see the CVE bugs listed below. Changes in this update include: * v8: fix a crash introduced by previous release (Fedor Indutny) * crypto: use domains for any callback-taking method (Chris Dickinson) * http: do not send `0rnrn` in TE HEAD responses (Fedor Indutny) * querystring: fix unescape override (Tristan Berger) * url: Add support for RFC 3490 separators (Mathias Bynens) * v8: backport CVE-2013-6668 * cluster: disconnect should not be synchronous (Sam Roberts) * fs: fix fs.readFileSync fd leak when get RangeError (Jackson Tian) * stream: fix Readable.wrap objectMode falsy values (James Halliday) * timers: fix timers with non-integer delay hanging. (Julien Gilli) -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 18 2014 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 0.10.32-1 - new upstream release 0.10.32 http://blog.nodejs.org/2014/08/19/node-v0-10-31-stable/ http://blog.nodejs.org/2014/09/16/node-v0-10-32-stable/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #1074737 - CVE-2013-6668 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146 https://bugzilla.redhat.com/show_bug.cgi?id=1074737 -------------------------------------------------------------------------------- ================================================================================ nodejs-ansidiff-1.0.0-1.fc19 (FEDORA-2014-10954) ANSI colored text diffs -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141876 - Review Request: nodejs-ansidiff - ANSI colored text diffs https://bugzilla.redhat.com/show_bug.cgi?id=1141876 -------------------------------------------------------------------------------- ================================================================================ nodejs-es5-shim-4.0.3-2.fc19 (FEDORA-2014-11057) ECMAScript 5 compatibility shims for legacy JavaScript engines -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141877 - Review Request: nodejs-es5-shim - ECMAScript 5 compatibility shims for legacy JavaScript engines https://bugzilla.redhat.com/show_bug.cgi?id=1141877 -------------------------------------------------------------------------------- ================================================================================ pcp-3.9.10-4.fc19 (FEDORA-2014-10963) System-level performance monitoring and performance management -------------------------------------------------------------------------------- Update Information: pcp 3.9.10 community + pcpfans add-ons Update to latest PCP sources Update to latest PCP sources. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Frank Ch. Eigler <fche@xxxxxxxxxx> - 3.9.10-4 - Respin with pcpfans 3.9.10 add-ons. * Fri Sep 5 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 3.9.10-1.1 - Perl 5.20 rebuild * Fri Sep 5 2014 Nathan Scott <nathans@xxxxxxxxxx> - 3.9.10-1 - Convert PCP init scripts to systemd services (BZ 996438) - Fix pmlogsummary -S/-T time window reporting (BZ 1132476) - Resolve pmdumptext segfault with invalid host (BZ 1131779) - Fix signedness in some service discovery codes (BZ 1136166) - New conditionally-built pcp-pmda-papi sub-package. - Update to latest PCP sources. * Tue Aug 26 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 3.9.9-1.2 - Perl 5.20 rebuild * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.9.9-1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Wed Aug 13 2014 Nathan Scott <nathans@xxxxxxxxxx> - 3.9.9-1 - Update to latest PCP sources. * Wed Jul 16 2014 Mark Goodwin <mgoodwin@xxxxxxxxxx> - 3.9.7-1 - Update to latest PCP sources. -------------------------------------------------------------------------------- References: [ 1 ] Bug #996438 - Convert PCP init scripts to systemd https://bugzilla.redhat.com/show_bug.cgi?id=996438 [ 2 ] Bug #1132476 - pmlogsummary output improvements https://bugzilla.redhat.com/show_bug.cgi?id=1132476 [ 3 ] Bug #1131779 - pmdumptext segfaults when using invalid host https://bugzilla.redhat.com/show_bug.cgi?id=1131779 [ 4 ] Bug #1136166 - pmfind segfaults when avahi not running https://bugzilla.redhat.com/show_bug.cgi?id=1136166 -------------------------------------------------------------------------------- ================================================================================ perl-Business-CreditCard-0.33-1.fc19 (FEDORA-2014-11073) Validate/generate credit card check-sums/names -------------------------------------------------------------------------------- Update Information: This release fixes identification of JCB 3529-3589. It adds support for calling subroutines as class methods and it enhances internal tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 18 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 0.33-1 - 0.33 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1142967 - perl-Business-CreditCard-0.33 is available https://bugzilla.redhat.com/show_bug.cgi?id=1142967 -------------------------------------------------------------------------------- ================================================================================ perl-DBIx-Connector-0.53-2.fc19 (FEDORA-2014-10977) Fast, safe DBI connection and transaction management -------------------------------------------------------------------------------- Update Information: perl-DBIx-Connector: initial submission -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141389 - Review Request: perl-DBIx-Connector - Fast, safe DBI connection and transaction management https://bugzilla.redhat.com/show_bug.cgi?id=1141389 -------------------------------------------------------------------------------- ================================================================================ perl-ExtUtils-MakeMaker-6.64-4.fc19 (FEDORA-2014-11074) Create a module Makefile -------------------------------------------------------------------------------- Update Information: Do not set default switches in Test::Harness -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 18 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 6.64-4 - Do not set default switches in Test::Harnes (bug #1143822) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1143822 - Do not set default switches in Test::Harness https://bugzilla.redhat.com/show_bug.cgi?id=1143822 -------------------------------------------------------------------------------- ================================================================================ perl-Gtk2-AppIndicator-0.15-2.fc19 (FEDORA-2014-10961) Perl extension for libappindicator -------------------------------------------------------------------------------- Update Information: Perl extension for libappindicator. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1138980 - Review Request: perl-Gtk2-AppIndicator - Perl extension for libappindicator https://bugzilla.redhat.com/show_bug.cgi?id=1138980 -------------------------------------------------------------------------------- ================================================================================ perl-Syntax-Highlight-Engine-Kate-0.09-1.fc19 (FEDORA-2014-11049) Port to Perl of the syntax highlight engine of the Kate text editor -------------------------------------------------------------------------------- Update Information: Update to version 0.09 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 0.09-1 - 0.09 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1127477 - Please update to upstream version >= 0.09 https://bugzilla.redhat.com/show_bug.cgi?id=1127477 -------------------------------------------------------------------------------- ================================================================================ php-5.5.17-1.fc19 (FEDORA-2014-11015) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information: 18 Sep 2014, PHP 5.5.17 Core: * Fixed bug #47358 (glob returns error, should be empty array()). (Pierre) * Fixed bug #65463 (SIGSEGV during zend_shutdown()). (Keyur Govande) * Fixed bug #66036 (Crash on SIGTERM in apache process). (Keyur Govande) * Fixed bug #67878 (program_prefix not honoured in man pages). (Remi) COM: * Fixed bug #41577 (DOTNET is successful once per server run) (Aidas Kasparas) FPM: * Fixed #67606 (FPM with mod_fastcgi/apache2.4 is broken). (David Zuelke) OpenSSL: * Fixed bug #41631 (socket timeouts not honored in blocking SSL reads). (Daniel Lowrey) * Fixed bug #67850 (extension won't build if openssl compiled without SSLv3) (Daniel Lowrey) SPL: * Fixed bug #67813 (CachingIterator::__construct InvalidArgumentException wrong message). (tim_siebels_aurich at yahoo dot de) Date: * Fixed bug #66091 (memory leaks in DateTime constructor). (Tjerk) * Fixed bug #66985 (Some timezones are no longer valid in PHP 5.5.10). (Derick) * Fixed bug #67109 (First uppercase letter breaks date string parsing). (Derick) GD: * Made fontFetch's path parser thread-safe. (Sara). MySQLi: * Fixed bug #67839 (mysqli does not handle 4-byte floats correctly). (Keyur) Zlib: * Fixed bug #67724 (chained zlib filters silently fail with large amounts of data). (Mike) * Fixed bug #67865 (internal corruption phar error). Mike Backported, for FPM: * Fixed bug #65641 (PHP-FPM incorrectly defines the SCRIPT_NAME variable when using Apache, mod_proxy-fcgi and ProxyPass). (Remi) -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 18 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> 5.5.17-1 - Update to 5.5.17 http://www.php.net/releases/5_5_17.php - fpm: fix script_name with mod_proxy_fcgi / proxypass add upstream patch for https://bugs.php.net/65641 -------------------------------------------------------------------------------- ================================================================================ phpMyAdmin-4.2.8.1-2.fc19 (FEDORA-2014-10989) Handle the administration of MySQL over the World Wide Web -------------------------------------------------------------------------------- Update Information: phpMyAdmin 4.2.8.1 (2014-09-13) =============================== * [security] DOM based XSS that results to a CSRF that creates a ROOT account in certain conditions -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 4.2.8.1-2 - Move rm(1) calls from %install to %prep (#1121355 #c10) * Tue Sep 16 2014 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 4.2.8.1-1 - Upgrade to 4.2.8.1 (#1141635) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141635 - CVE-2014-6300 phpMyAdmin: XSS flaw possibly leading to root account creation (PMASA-2014-10) https://bugzilla.redhat.com/show_bug.cgi?id=1141635 -------------------------------------------------------------------------------- ================================================================================ profile-sync-daemon-5.51-1.fc19 (FEDORA-2014-11077) Offload browser profiles to RAM for speed a wear reduction -------------------------------------------------------------------------------- Update Information: == Add support for == * Opera * Palemoon * Icecat == Fix == * Start rsync automatically via target requires. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Christopher Meng <rpm@xxxxxxxx> - 5.51-1 - Update to 5.51 * Wed Sep 10 2014 Christopher Meng <rpm@xxxxxxxx> - 5.50-1 - Update to 5.50 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141523 - SELinux context not syncing https://bugzilla.redhat.com/show_bug.cgi?id=1141523 -------------------------------------------------------------------------------- ================================================================================ python-backports-ssl_match_hostname-3.4.0.2-4.fc19 (FEDORA-2014-11024) The ssl.match_hostname() function from Python 3 -------------------------------------------------------------------------------- Update Information: Apply upstream patch to fix namespace handling https://bitbucket.org/brandon/backports.ssl_match_hostname/pull-request/1 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 Ralph Bean <rbean@xxxxxxxxxx> - 3.4.0.2-4 - Apply upstream patch to fix python namespace handling. - Narrow down directory ownership to just the ssl_match_hostname module. * Thu Jul 31 2014 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 3.4.0.2-3 - fix license handling * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.4.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1066625 - UserWarning when importing fedmsg.meta https://bugzilla.redhat.com/show_bug.cgi?id=1066625 -------------------------------------------------------------------------------- ================================================================================ python-dill-0.2.1-2.fc19 (FEDORA-2014-11084) Serialize all of Python -------------------------------------------------------------------------------- Update Information: Dill extends python's 'pickle' module for serializing and de-serializing python objects to the majority of the built-in python types. Serialization is the process of converting an object to a byte stream, and the inverse of which is converting a byte stream back to on python object hierarchy. -------------------------------------------------------------------------------- ================================================================================ python-fmn-consumer-0.3.0-1.fc19 (FEDORA-2014-11043) Backend worker daemon for Fedora Notifications -------------------------------------------------------------------------------- Update Information: Make new users active by default. Improve some cache locking. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Ralph Bean <rbean@xxxxxxxxxx> - 0.3.0-1 - Nip time deltas from the future. They are due to clock skew. - Make new users active by default. - Lock the cache on preference update. - Allow group maintainers of packages. * Wed Jul 23 2014 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.7-1 - Latest upstream with a typofix to 0.2.6. * Wed Jul 23 2014 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.6-1 - Latest upstream. -------------------------------------------------------------------------------- ================================================================================ python-fmn-lib-0.3.0-1.fc19 (FEDORA-2014-11009) Internal API components and model for Fedora Notifications -------------------------------------------------------------------------------- Update Information: Negate-able rules and disable-able filters. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Ralph Bean <rbean@xxxxxxxxxx> - 0.3.0-1 - Latest upstream. - New database fields. - Negate-able rules. - Disable-able filters. -------------------------------------------------------------------------------- ================================================================================ python-fmn-rules-0.3.0-1.fc19 (FEDORA-2014-11061) Message processing rules for Fedora Notifications -------------------------------------------------------------------------------- Update Information: More rules. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Ralph Bean <rbean@xxxxxxxxxx> - 0.3.0-1 - Latest upstream. - Remove patch. * Wed Jul 23 2014 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.5-2 - Apply patch to fix a typo in the new regex rule. * Wed Jul 23 2014 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.5-1 - Latest upstream. -------------------------------------------------------------------------------- ================================================================================ python-fmn-web-0.3.0-2.fc19 (FEDORA-2014-10959) Frontend Web Application for Fedora Notifications -------------------------------------------------------------------------------- Update Information: Negate-able rules and disable-able filters. Negate-able rules and disable-able filters. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Ralph Bean <rbean@xxxxxxxxxx> - 0.3.0-2 - Patch two bugs caught in staging. * Mon Sep 15 2014 Ralph Bean <rbean@xxxxxxxxxx> - 0.3.0-1 - Latest upstream. * Wed Jul 23 2014 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.6-1 - Latest upstream. -------------------------------------------------------------------------------- ================================================================================ python-moksha-hub-1.4.2-1.fc19 (FEDORA-2014-10980) Hub components for Moksha -------------------------------------------------------------------------------- Update Information: Support for STOMP-1.1. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Ralph Bean <rbean@xxxxxxxxxx> - 1.4.2-1 - Latest upstream with support for STOMP-1.1. -------------------------------------------------------------------------------- ================================================================================ python-rhsm-1.13.2-1.fc19 (FEDORA-2014-10987) A Python library to communicate with a Red Hat Unified Entitlement Platform -------------------------------------------------------------------------------- Update Information: Various bug fixes. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 7 2014 Alex Wood <awood@xxxxxxxxxx> 1.13.2-1 - Remove a 2.6ism that slipped in. (awood@xxxxxxxxxx) * Thu Sep 4 2014 Alex Wood <awood@xxxxxxxxxx> 1.13.1-1 - version bump (jesusr@xxxxxxxxxx) -------------------------------------------------------------------------------- ================================================================================ python-stomper-0.2.9-1.fc19 (FEDORA-2014-11046) A python client implementation of the STOMP protocol -------------------------------------------------------------------------------- Update Information: Support for STOMP-1.1. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 15 2014 Ralph Bean <rbean@xxxxxxxxxx> - 0.2.9-1 - New upstream supporting STOMP-1.1. - Use github tarball, https://github.com/oisinmulvihill/stomper/issues/8 - Use python2 macros. * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.2.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu Feb 27 2014 Luke Macken <lmacken@xxxxxxxxxx> - 0.2.8-1 - Update to 0.2.8 (#949150) - Update the URLs - Modernize the specfile * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.2.4-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141300 - Update to python-stomper-0.2.9 for epel7 https://bugzilla.redhat.com/show_bug.cgi?id=1141300 -------------------------------------------------------------------------------- ================================================================================ python-urllib2_kerberos-0.1.6-13.fc19 (FEDORA-2014-10988) Kerberos over HTTP Negotiate/SPNEGO support for urllib2 -------------------------------------------------------------------------------- Update Information: Fix logging format for Python 2.6 (#1065576) -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 3 2014 Matěj Cepl <mcepl@xxxxxxxxxx> - 0.1.6-13 - Fix logging format for Python 2.6 (#1065576) * Mon Jun 30 2014 Toshio Kuratomi <toshio@xxxxxxxxxxxxxxxxx> - 0.1.6-12 - Replace python-setuptools-devel BR with python-setuptools -------------------------------------------------------------------------------- References: [ 1 ] Bug #1065576 - Add additional patches to urllib2_kerberos https://bugzilla.redhat.com/show_bug.cgi?id=1065576 -------------------------------------------------------------------------------- ================================================================================ qt-creator-3.2.1-1.fc19 (FEDORA-2014-11072) Cross-platform IDE for Qt -------------------------------------------------------------------------------- Update Information: Update to release 3.2.1, see https://qt.gitorious.org/qt-creator/qt-creator/source/3a7ce77a4dd28bb24c599f4481c97c0c9c57becf:dist/changes-3.2.1 for details. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 16 2014 Sandro Mani <manisandro@xxxxxxxxx> - 3.2.1-1 - 3.2.1 release -------------------------------------------------------------------------------- ================================================================================ rpm-4.11.3-1.fc19 (FEDORA-2014-10990) The RPM package management system -------------------------------------------------------------------------------- Update Information: This update brings rpm to the latest stable upstream version, including fixes for numerous bugs: http://rpm.org/wiki/Releases/4.11.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 5 2014 Panu Matilainen <pmatilai@xxxxxxxxxx> - 4.11.3-1 - update to 4.11.3 (http://rpm.org/wiki/Releases/4.11.3) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1133885 - [abrt] rpm: rpmReadSignature(): rpm killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=1133885 [ 2 ] Bug #984724 - Source rpms may cause > 100% completion percentages in -h output https://bugzilla.redhat.com/show_bug.cgi?id=984724 [ 3 ] Bug #1123722 - 'rpmbuild -bs' segmentation fault on a possibly broken .spec https://bugzilla.redhat.com/show_bug.cgi?id=1123722 [ 4 ] Bug #1077148 - rpmbuild creates empty debuginfo when %_topdir ends with '/' https://bugzilla.redhat.com/show_bug.cgi?id=1077148 [ 5 ] Bug #1082038 - "%autosetup -S git" should use "git am" whenever possible https://bugzilla.redhat.com/show_bug.cgi?id=1082038 [ 6 ] Bug #1064758 - [py3] rpm.spec attribute missing in py3 https://bugzilla.redhat.com/show_bug.cgi?id=1064758 [ 7 ] Bug #1106594 - huge stack allocation in rpmDoDigest() function https://bugzilla.redhat.com/show_bug.cgi?id=1106594 [ 8 ] Bug #1128359 - %attr of %dir not applied https://bugzilla.redhat.com/show_bug.cgi?id=1128359 -------------------------------------------------------------------------------- ================================================================================ seren-0.0.20-1.fc19 (FEDORA-2014-10958) Simple VoIP program to create conferences from the terminal -------------------------------------------------------------------------------- Update Information: Version bump -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 14 2014 Francesco Frassinelli <fraph24@xxxxxxxxx> - 0.0.20-1 - Version bump * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.0.19-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1140672 - seren-0.0.20 is available https://bugzilla.redhat.com/show_bug.cgi?id=1140672 -------------------------------------------------------------------------------- ================================================================================ sks-1.1.5-7.fc19 (FEDORA-2014-11070) Synchronizing Key Server -------------------------------------------------------------------------------- Update Information: Init script fixes -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 11 2014 Nick Bebout <nb@xxxxxxxxxxxxxxxxx> - 1.1.5-7 - Fix systemd files * Thu Sep 11 2014 Nick Bebout <nb@xxxxxxxxxxxxxxxxx> - 1.1.5-6 - Add systemd support * Thu Aug 21 2014 Kevin Fenzi <kevin@xxxxxxxxx> - 1.1.5-5 - Rebuild for rpm bug 1131960 * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.1.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Fri Aug 15 2014 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 1.1.5-3 - All supprted (primary/secondary) Fedora architectures have ocaml -------------------------------------------------------------------------------- ================================================================================ squashfs-tools-4.3-8.fc19 (FEDORA-2014-10968) Utility for the creation of squashfs filesystems -------------------------------------------------------------------------------- Update Information: Fixes squashfs of files 2+ GB in size. -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 13 2014 Bruno Wolff III <bruno@xxxxxxxx> 4.3-8 - Fix for files >= 2gb rhbz #1141206 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141206 - mksquashfs corrupts last block with more than 2047 blocks https://bugzilla.redhat.com/show_bug.cgi?id=1141206 -------------------------------------------------------------------------------- ================================================================================ subscription-manager-1.13.2-1.fc19 (FEDORA-2014-10987) Tools and libraries for subscription and repository management -------------------------------------------------------------------------------- Update Information: Various bug fixes. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Alex Wood <awood@xxxxxxxxxx> 1.13.2-1 - Added non-overriding default prod dir tests (ckozak@xxxxxxxxxx) - 1135621: fix duplicate product ids from default dir (ckozak@xxxxxxxxxx) - Remove --force option for sat5to6. (awood@xxxxxxxxxx) - Disable RHN yum plugin for unentitled Satellite 5 systems. (awood@xxxxxxxxxx) - Don't ask for org and environment with consumerid. (awood@xxxxxxxxxx) - 1128061: Don't raise logged Disconnected on unreg (alikins@xxxxxxxxxx) - 1128658: do not contact RHN if unregistered (jesusr@xxxxxxxxxx) - 1132919: Repo dialog information is updated without the need for a gui restart. (csnyder@xxxxxxxxxxxxxxxxxxxxxxxxxx) * Thu Sep 4 2014 Alex Wood <awood@xxxxxxxxxx> 1.13.1-1 - Make 'gettext_lint' target grok _(u"foo") strings. (alikins@xxxxxxxxxx) - Add a sat5to6 migration script. * Thu Aug 28 2014 jesus m. rodriguez <jesusr@xxxxxxxxxx> 1.12.14-1 - 1132071: Update rhsm-debug to collect product-default directory (wpoteat@xxxxxxxxxx) - 1123029: Use default product certs if present. (alikins@xxxxxxxxxx) - Latest strings from zanata. (alikins@xxxxxxxxxx) * Wed Aug 20 2014 jesus m. rodriguez <jesusr@xxxxxxxxxx> 1.12.13-1 - 1124685: Handle /status without rules-version (alikins@xxxxxxxxxx) - 1125132: Label does not change to Attaching on Fristboot progress bar (wpoteat@xxxxxxxxxx) - 1128061: Stop logging expected exceptions on unreg (alikins@xxxxxxxxxx) - 1129480: don't query envs when actkey is given (ckozak@xxxxxxxxxx) - 1130637: Correct call to os.path.isfile (awood@xxxxxxxxxx) * Wed Aug 13 2014 jesus m. rodriguez <jesusr@xxxxxxxxxx> 1.12.12-1 - Extract the latest strings from the code (bkearney@xxxxxxxxxx) - 1126724: Use port instead of 443 for the url help text (bkearney@xxxxxxxxxx) -------------------------------------------------------------------------------- ================================================================================ tiled-0.10.0-1.fc19 (FEDORA-2014-11063) Tiled Map Editor -------------------------------------------------------------------------------- Update Information: New release 0.10.0 with many many new features. See http://www.mapeditor.org/download.html#changes for a full list of changes. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 14 2014 Erik Schilling <ablu.erikschilling@xxxxxxxxxxxxxx> - 0.10.0-1 - New upstream release * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.9.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.9.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ v8-3.14.5.10-14.fc19 (FEDORA-2014-10975) JavaScript Engine -------------------------------------------------------------------------------- Update Information: This update provides the latest stable version of Node.js and corresponding backports to the v8 package. This update resolves CVE-2013-6668, which has only a minor impact since Node.js is not typically used to execute untrusted JavaScript. For more information on the fixed vulnerability, please see the CVE bugs listed below. Changes in this update include: * v8: fix a crash introduced by previous release (Fedor Indutny) * crypto: use domains for any callback-taking method (Chris Dickinson) * http: do not send `0rnrn` in TE HEAD responses (Fedor Indutny) * querystring: fix unescape override (Tristan Berger) * url: Add support for RFC 3490 separators (Mathias Bynens) * v8: backport CVE-2013-6668 * cluster: disconnect should not be synchronous (Sam Roberts) * fs: fix fs.readFileSync fd leak when get RangeError (Jackson Tian) * stream: fix Readable.wrap objectMode falsy values (James Halliday) * timers: fix timers with non-integer delay hanging. (Julien Gilli) -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 17 2014 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 1:3.14.5.10-14 - backport bugfix that eliminates unused-local-typedefs warning - backport security fix: Fix Hydrogen bounds check elimination (CVE-2013-6668; RHBZ#1086120) - backport fix to segfault caused by the above patch * Tue Aug 26 2014 David Tardon <dtardon@xxxxxxxxxx> - 1:3.14.5.10-13 - rebuild for ICU 53.1 * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1:3.14.5.10-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1074737 - CVE-2013-6668 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146 https://bugzilla.redhat.com/show_bug.cgi?id=1074737 -------------------------------------------------------------------------------- ================================================================================ vdr-vnsiserver-1.2.0-1.fc19 (FEDORA-2014-11062) VDR plugin to handle XBMC clients via VNSI -------------------------------------------------------------------------------- Update Information: Update to 1.2.0 -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 14 2014 Dr. Tilmann Bubeck <tilmann@xxxxxxxxxx> - 1.2.0-1 - Update to 1.2.0 - Changed package to use version tags instead of git hash -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
