The following Fedora 19 Security updates need testing: Age URL 388 https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glance-2013.1.4-1.fc19 200 https://admin.fedoraproject.org/updates/FEDORA-2014-5896/nrpe-2.15-2.fc19 151 https://admin.fedoraproject.org/updates/FEDORA-2014-7496/readline-6.2-8.fc19 69 https://admin.fedoraproject.org/updates/FEDORA-2014-10366/icecream-1.0.1-8.20140822git.fc19 68 https://admin.fedoraproject.org/updates/FEDORA-2014-10640/libreoffice-4.1.6.2-8.fc19 53 https://admin.fedoraproject.org/updates/FEDORA-2014-11544/drupal6-6.33-1.fc19 46 https://admin.fedoraproject.org/updates/FEDORA-2014-12057/krb5-1.11.3-29.fc19 32 https://admin.fedoraproject.org/updates/FEDORA-2014-13047/libxml2-2.9.1-2.fc19 32 https://admin.fedoraproject.org/updates/FEDORA-2014-13018/deluge-1.3.10-1.fc19 22 https://admin.fedoraproject.org/updates/FEDORA-2014-13551/wpa_supplicant-2.0-12.fc19 17 https://admin.fedoraproject.org/updates/FEDORA-2014-14066/php-sabredav-Sabre_VObject-2.1.4-1.fc19,php-sabredav-Sabre_HTTP-1.7.11-1.fc19,php-sabredav-Sabre_CalDAV-1.7.9-1.fc19,php-sabredav-Sabre_DAVACL-1.7.9-1.fc19,php-sabredav-Sabre_CardDAV-1.7.9-2.fc19,php-sabredav-Sabre_DAV-1.7.13-1.fc19,owncloud-5.0.17-2.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2014-14266/python-2.7.5-15.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2014-14237/claws-mail-plugins-3.11.1-1.fc19,claws-mail-3.11.1-2.fc19,libetpan-1.6-1.fc19 11 https://admin.fedoraproject.org/updates/FEDORA-2014-14359/curl-7.29.0-25.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-14738/gnutls-3.1.20-6.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-12407/sddm-0.10.0-2.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14912/polarssl-1.2.12-1.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14980/python-pillow-2.0.0-16.gitd1c6db8.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2014-15079/mantis-1.2.17-4.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2014-14874/arm-none-eabi-binutils-cs-2014.05.28-3.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2014-14838/avr-binutils-2.24-3.fc19 3 https://admin.fedoraproject.org/updates/FEDORA-2014-15124/kwebkitpart-1.3.4-5.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-15202/kernel-3.14.24-100.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-15248/kde-runtime-4.11.5-3.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-15307/python-django14-1.4.16-1.fc19 The following Fedora 19 Critical Path updates have yet to be approved: Age URL 336 https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmarks-15-5.fc19 262 https://admin.fedoraproject.org/updates/FEDORA-2014-3245/testdisk-6.14-2.fc19.1,ntfs-3g-2014.2.15-1.fc19 13 https://admin.fedoraproject.org/updates/FEDORA-2014-14266/python-2.7.5-15.fc19 11 https://admin.fedoraproject.org/updates/FEDORA-2014-14359/curl-7.29.0-25.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-14516/pcre-8.32-11.fc19 8 https://admin.fedoraproject.org/updates/FEDORA-2014-14505/unzip-6.0-12.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-14738/gnutls-3.1.20-6.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-15022/firefox-33.1-2.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-15032/man-db-2.6.3-9.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-15027/evolution-data-server-3.8.5-7.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14807/device-mapper-persistent-data-0.4.1-2.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14846/pciutils-3.3.0-1.fc19 1 https://admin.fedoraproject.org/updates/FEDORA-2014-15202/kernel-3.14.24-100.fc19 The following builds have been pushed to Fedora 19 updates-testing gfal2-2.7.8-1.fc19 kde-runtime-4.11.5-3.fc19 labiryntowy-fonts-1.53-2.fc19 perl-Crypt-Rijndael-1.12-1.fc19 perl-Finance-Quote-1.35-1.fc19 php-pecl-xdebug-2.2.6-1.fc19 python-django14-1.4.16-1.fc19 Details about builds: ================================================================================ gfal2-2.7.8-1.fc19 (FEDORA-2014-14534) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: Update for gfal2 2.7.8 release -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 17 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.7.8-1 - Upstream backported fix for protocol honoring on SRM GET and PUT * Mon Nov 10 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.7.7-1 - Upgraded to upstream release 2.7.7 * Fri Nov 7 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.7.6-1 - New upstream release * Mon Sep 8 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.6.8-6 - Patch to use lseek64 instead of lseek in the http plugin * Thu Sep 4 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 2.6.8-5 - Rebuild for pugixml 1.4 * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.6.8-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ kde-runtime-4.11.5-3.fc19 (FEDORA-2014-15248) KDE Runtime -------------------------------------------------------------------------------- Update Information: New security fix release, insufficient Input Validation By IO Slaves, see also https://www.kde.org/info/security/advisory-20141113-1.txt -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 17 2014 Than Ngo <than@xxxxxxxxxx> - 4.11.5-3 - fix bz#1164609, CVE-2014-8600 Insufficient Input Validation By IO Slaves -------------------------------------------------------------------------------- References: [ 1 ] Bug #1164293 - CVE-2014-8600 kwebkitpart, kde-runtime: Insufficient Input Validation By IO Slaves and Webkit Part https://bugzilla.redhat.com/show_bug.cgi?id=1164293 -------------------------------------------------------------------------------- ================================================================================ labiryntowy-fonts-1.53-2.fc19 (FEDORA-2014-15250) Artificial font consisting of vertical and horizontal bars -------------------------------------------------------------------------------- Update Information: Add font licence file, delete info. Initial packaging. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1162148 - Review Request: labiryntowy-fonts - Conscript (artifical font) letters consist of vertical and horizontal bars. No matter their thickness. https://bugzilla.redhat.com/show_bug.cgi?id=1162148 -------------------------------------------------------------------------------- ================================================================================ perl-Crypt-Rijndael-1.12-1.fc19 (FEDORA-2014-15311) Crypt::CBC compliant Rijndael encryption module -------------------------------------------------------------------------------- Update Information: Updated to 1.12 -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 16 2014 Matias Kreder <mkreder@xxxxxxxxx> - 1.12-1 - Updated to 1.12 * Thu Aug 28 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.11-7 - Perl 5.20 rebuild * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.11-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.11-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.11-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Sun Jul 21 2013 Petr Pisar <ppisar@xxxxxxxxxx> - 1.11-3 - Perl 5.18 rebuild -------------------------------------------------------------------------------- ================================================================================ perl-Finance-Quote-1.35-1.fc19 (FEDORA-2014-15298) A Perl module that retrieves stock and mutual fund quotes -------------------------------------------------------------------------------- Update Information: This update, to the current upstream release, includes some fixes for existing data sources and a number of new data sources. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 14 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 1.35-1 - Update to 1.35 - Clean up and modernize spec somewhat (can't build for EL < 7 as the module requires Mozilla::CA) * Fri Aug 29 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.20-4 - Perl 5.20 rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.20-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ php-pecl-xdebug-2.2.6-1.fc19 (FEDORA-2014-15275) PECL package for debugging PHP scripts -------------------------------------------------------------------------------- Update Information: Fri, Nov 14, 2014 - xdebug 2.2.6 Fixed bugs: * Fixed bug #1048: Can not get $GLOBAL variable by property_value on function context. * Fixed bug #1073 and #1075: Segmentation fault with internal functions calling internal functions. * Fixed bug #1085: Fixed the tracefile analyser as the format version had been bumbed. * Fixed memory leaks -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 16 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.2.6-1 - Update to 2.2.6 (stable) -------------------------------------------------------------------------------- ================================================================================ python-django14-1.4.16-1.fc19 (FEDORA-2014-15307) A high-level Python Web framework -------------------------------------------------------------------------------- Update Information: Update to latest stable release -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 17 2014 Matthias Runge <mrunge@xxxxxxxxxx> - 1.4.16-1 - update to 1.4.16 * Mon Aug 25 2014 Matthias Runge <mrunge@xxxxxxxxxx> - 1.4.14-1 - update to 1.4.14 fixing CVE-2014-0480 CVE-2014-0481 CVE-2014-0482, CVE-2014-0483 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1129950 - CVE-2014-0480 Django: reverse() can generate URLs pointing to other hosts, leading to phishing attacks https://bugzilla.redhat.com/show_bug.cgi?id=1129950 [ 2 ] Bug #1129952 - CVE-2014-0481 Django: file upload denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1129952 [ 3 ] Bug #1129954 - CVE-2014-0482 Django: RemoteUserMiddleware session hijacking https://bugzilla.redhat.com/show_bug.cgi?id=1129954 [ 4 ] Bug #1129959 - CVE-2014-0483 Django: data leakage via querystring manipulation in admin https://bugzilla.redhat.com/show_bug.cgi?id=1129959 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
