The following Fedora 19 Security updates need testing: Age URL 97 https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glance-2... 42 https://admin.fedoraproject.org/updates/FEDORA-2013-23592/rubygem-actionpack... 34 https://admin.fedoraproject.org/updates/FEDORA-2013-24023/varnish-3.0.5-1.fc... 20 https://admin.fedoraproject.org/updates/FEDORA-2014-0574/flite-1.3-20.fc19 19 https://admin.fedoraproject.org/updates/FEDORA-2014-0621/graphviz-2.30.1-12.... 15 https://admin.fedoraproject.org/updates/FEDORA-2014-0797/libinfinity-0.5.5-1... 14 https://admin.fedoraproject.org/updates/FEDORA-2014-0934/memcached-1.4.17-1.... 13 https://admin.fedoraproject.org/updates/FEDORA-2014-1004/ibus-chewing-1.4.6-... 12 https://admin.fedoraproject.org/updates/FEDORA-2014-1100/nss-3.15.4-1.fc19,n... 6 https://admin.fedoraproject.org/updates/FEDORA-2014-1475/mupdf-1.1-5.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2014-1559/xen-4.2.3-14.fc19 4 https://admin.fedoraproject.org/updates/FEDORA-2014-1560/mingw-openssl-1.0.1... 2 https://admin.fedoraproject.org/updates/FEDORA-2014-1734/quassel-0.9.2-1.fc1... 2 https://admin.fedoraproject.org/updates/FEDORA-2014-1516/openstack-nova-2013... 2 https://admin.fedoraproject.org/updates/FEDORA-2014-1648/lightdm-gtk-1.6.1-3... 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1802/mediawiki-1.21.5-1.... 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1795/socat-1.7.2.3-1.fc1... 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1766/libpng12-1.2.50-4.f... 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1754/libpng10-1.0.60-6.f... 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1807/ikiwiki-3.20140125-... 1 https://admin.fedoraproject.org/updates/FEDORA-2014-1772/tpp-1.3.1-16.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-1817/libyaml-0.1.4-6.fc1... 0 https://admin.fedoraproject.org/updates/FEDORA-2014-1828/ghdl-0.31-1.fc19
The following Fedora 19 Critical Path updates have yet to be approved: Age URL 45 https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmarks-1... 13 https://admin.fedoraproject.org/updates/FEDORA-2014-0752/firewalld-0.3.9.2-1... 12 https://admin.fedoraproject.org/updates/FEDORA-2014-1100/nss-3.15.4-1.fc19,n... 11 https://admin.fedoraproject.org/updates/FEDORA-2014-1151/hwdata-0.260-1.fc19 9 https://admin.fedoraproject.org/updates/FEDORA-2014-1255/tigervnc-1.3.0-8.fc... 9 https://admin.fedoraproject.org/updates/FEDORA-2014-1281/abattis-cantarell-f... 8 https://admin.fedoraproject.org/updates/FEDORA-2014-1324/firefox-26.0-6.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2014-1368/krb5-1.11.3-19.fc19 7 https://admin.fedoraproject.org/updates/FEDORA-2014-1385/yum-3.4.3-132.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-1438/libtool-2.4.2-23.fc... 6 https://admin.fedoraproject.org/updates/FEDORA-2014-1451/pango-1.34.1-2.fc19 5 https://admin.fedoraproject.org/updates/FEDORA-2014-1524/procps-ng-3.3.8-11.... 4 https://admin.fedoraproject.org/updates/FEDORA-2014-1564/libvorbis-1.3.4-1.f... 3 https://admin.fedoraproject.org/updates/FEDORA-2014-1599/libgsf-1.14.29-1.fc... 0 https://admin.fedoraproject.org/updates/FEDORA-2014-1728/kernel-3.12.9-201.f...
The following builds have been pushed to Fedora 19 updates-testing
NFStest-1.0.8-0.fc19 bti-034-1.fc19 collectd-5.4.1-1.fc19 ghdl-0.31-1.fc19 kernel-3.12.9-201.fc19 libyaml-0.1.4-6.fc19 lmiwbem-0.1.0-1.fc19 nfsometer-1.7-1.fc19 ovirt-guest-agent-1.0.9-1.fc19 perl-Archive-Extract-0.72-1.fc19 perl-IO-Socket-SSL-1.88-2.fc19 sword-1.7.2-1.fc19 tcpreplay-4.0.2-1.fc19 tog-pegasus-2.12.1-9.fc19 xiphos-3.1.6-1.fc19 xiphos-3.1.6-2.fc19 xrootd-3.3.6-1.fc19
Details about builds:
================================================================================ NFStest-1.0.8-0.fc19 (FEDORA-2014-1848) NFS Testing Tool -------------------------------------------------------------------------------- Update Information:
Updated to latest upstream release: 1.0.8 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 29 2014 Steve Dickson steved@redhat.com 1.0.8-0 - Updated to latest upstream release: 1.0.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1059455 - nfstest_dio fails to capture all packets in vectored_io tests https://bugzilla.redhat.com/show_bug.cgi?id=1059455 --------------------------------------------------------------------------------
================================================================================ bti-034-1.fc19 (FEDORA-2014-1824) Bash Twitter/Identi.ca Idiocy -------------------------------------------------------------------------------- Update Information:
* Build against the new JSON-C library name. * change remaining http:// to https:// * use -EIO instead of -EREMOTEIO * dry-run shouldn't error out. * remove identi.ca support. * Remove unused xml parsing function
-------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 29 2014 Michel Salim salimma@fedoraproject.org - 034-1 - Update to 034 * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 033-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1054062 - bti-034 is available https://bugzilla.redhat.com/show_bug.cgi?id=1054062 [ 2 ] Bug #1055564 - bti stopped sending tweets https://bugzilla.redhat.com/show_bug.cgi?id=1055564 --------------------------------------------------------------------------------
================================================================================ collectd-5.4.1-1.fc19 (FEDORA-2014-1845) Statistics collection daemon for filling RRD files -------------------------------------------------------------------------------- Update Information:
Upstream released new version. Please see http://collectd.org/news.shtml#news95 for what's new. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 28 2014 Ruben Kerkhof ruben@rubenkerkhof.com 5.4.1-1 - Upstream released new version: http://collectd.org/news.shtml#news95 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1058601 - collectd doesn't write to RRD files after update https://bugzilla.redhat.com/show_bug.cgi?id=1058601 --------------------------------------------------------------------------------
================================================================================ ghdl-0.31-1.fc19 (FEDORA-2014-1828) A VHDL simulator, using the GCC technology -------------------------------------------------------------------------------- Update Information:
Update to 0.31, which is baed on gcc 4.8.2 and thus fixes CVE-2012-3509 -------------------------------------------------------------------------------- ChangeLog:
* Wed Dec 18 2013 Thomas Sailer t.sailer@alumni.ethz.ch - 0.31-1 - change to sourceforge repository * Tue Dec 3 2013 Thomas Sailer t.sailer@alumni.ethz.ch - 0.29-4.150svn.3 - prevent format-security warning * Mon Aug 5 2013 Thomas Sailer t.sailer@alumni.ethz.ch - 0.29-4.150svn.2 - fix FTBFS * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.29-4.150svn.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Tue Jul 2 2013 Ville Skyttä ville.skytta@iki.fi - 0.29-3.150svn.2 - Compress gcc tarball with xz. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1059364 - ghdl may be affected by libiberty CVE https://bugzilla.redhat.com/show_bug.cgi?id=1059364 --------------------------------------------------------------------------------
================================================================================ kernel-3.12.9-201.fc19 (FEDORA-2014-1728) The Linux kernel -------------------------------------------------------------------------------- Update Information:
The 3.12.9 stable update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 29 2014 Justin M. Forbes jforbes@fedoraproject.org - 3.12.9-201 - ipv6 addrconf: revert /proc/net/if_inet6 ifa_flag format (rhbz 1056711) * Tue Jan 28 2014 Josh Boyer jwboyer@fedoraproject.org - Add patch from Stanislaw Gruszka to fix ath9k BUG (rhbz 990955) * Mon Jan 27 2014 Justin M. Forbes jforbes@fedoraproject.org - 3.12.9-200 - Backport new IPv6 address flag IFA_F_NOPREFIXROUTE and IFA_F_MANAGETEMPADDR (rhbz 1056711) - Linux v3.12.9 - i915: remove pm_qos request on error (rhbz 1057533) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1056711 - Backport new IPv6 address flag IFA_F_NOPREFIXROUTE and IFA_F_MANAGETEMPADDR https://bugzilla.redhat.com/show_bug.cgi?id=1056711 [ 2 ] Bug #1057533 - [abrt] BUG: unable to handle kernel paging request at fffffffffffffff8 https://bugzilla.redhat.com/show_bug.cgi?id=1057533 --------------------------------------------------------------------------------
================================================================================ libyaml-0.1.4-6.fc19 (FEDORA-2014-1817) YAML 1.1 parser and emitter written in C -------------------------------------------------------------------------------- Update Information:
Add patches for CVE-2013-6393 (bz1033990) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 29 2014 John Eckersberg jeckersb@redhat.com - 0.1.4-6 - Add patches for CVE-2013-6393 (bz1033990) * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 0.1.4-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1033990 - CVE-2013-6393 libyaml: heap-based buffer overflow when parsing YAML tags https://bugzilla.redhat.com/show_bug.cgi?id=1033990 --------------------------------------------------------------------------------
================================================================================ lmiwbem-0.1.0-1.fc19 (FEDORA-2014-1849) Python WBEM Client -------------------------------------------------------------------------------- Update Information:
initial import --------------------------------------------------------------------------------
================================================================================ nfsometer-1.7-1.fc19 (FEDORA-2014-1841) NFS Performance Framework Tool -------------------------------------------------------------------------------- Update Information:
Updated to latest upstream release 1.7 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 29 2014 Steve Dickson steved@RedHat.com 1.7-1 - Updated to 1.7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1059341 - NFSometer version 1.6 has bad graphing bug https://bugzilla.redhat.com/show_bug.cgi?id=1059341 --------------------------------------------------------------------------------
================================================================================ ovirt-guest-agent-1.0.9-1.fc19 (FEDORA-2014-1814) The oVirt Guest Agent -------------------------------------------------------------------------------- Update Information:
Upstream 1.0.9 release - Report swap usage of guests - Updated pam conversation approach - Python 2.4 compatability fix
Added override option to groupadd Initial EPEL-5 Release of the ovirt-guest-agent Removed selinux-policy conflict Added patch for python2.4 compatability -------------------------------------------------------------------------------- ChangeLog:
* Mon Jan 20 2014 Vinzenz Feenstra evilissimo@redhat.com - 1.0.9-1 - Report swap usage of guests - Updated pam conversation approach - Python 2.4 compatability fix --------------------------------------------------------------------------------
================================================================================ perl-Archive-Extract-0.72-1.fc19 (FEDORA-2014-1850) Generic archive extracting mechanism -------------------------------------------------------------------------------- Update Information:
This release prefers info-unzip on FreeBSD and considers DragonflyBSD as a FreeBSD. We deliver this update only to keep pace with upstream version numbers. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jan 30 2014 Petr Pisar ppisar@redhat.com - 1:0.72-1 - 0.72 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1059621 - perl-Archive-Extract-0.72 is available https://bugzilla.redhat.com/show_bug.cgi?id=1059621 --------------------------------------------------------------------------------
================================================================================ perl-IO-Socket-SSL-1.88-2.fc19 (FEDORA-2014-1831) Perl library for transparent SSL -------------------------------------------------------------------------------- Update Information:
This update includes a back-ported patch from version 1.951 to use OpenSSL's default CA if the user doesn't specify one, needed if SSL_VERIFY_PEER is used (not the default in F-19, but is in F-20 onwards). -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 29 2014 Paul Howarth paul@city-fan.org - 1.88-2 - Use OpenSSL default CA if user doesn't specify one (#1059002) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1059002 - On F19, perl's IO::Socket::SSL has problems verifying server's certificate (but works on F20) https://bugzilla.redhat.com/show_bug.cgi?id=1059002 --------------------------------------------------------------------------------
================================================================================ sword-1.7.2-1.fc19 (FEDORA-2014-1815) Free Bible Software Project -------------------------------------------------------------------------------- Update Information:
Update Sword to the latest upstream release, along with Xiphos frontends that was released and built for it -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 29 2014 Deji Akingunola dakingun@gmail.com - 1.7.2-1 - Update to sword-1.7.2 * Sun Aug 4 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.6.2-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ tcpreplay-4.0.2-1.fc19 (FEDORA-2014-1813) Replay captured network traffic -------------------------------------------------------------------------------- Update Information:
This version includes minor fixes and performance enhancements to the NetFlow features introduced in version 4.0.0.
Fixes include:
- Support for netmap version 10 API (#53) - Remove deprecated "absolute time" for OS X (#52) - Make dosleep() rentrant to support API concurrency (#51) - Remove compiler warnings (#50) - Fix slow netmap in Intel GigE "igb" server NICS (#49) - Fix hangs with --mbps command (#54) -------------------------------------------------------------------------------- ChangeLog:
* Thu Jan 30 2014 Bojan Smojver <bojan@rexursive com> - 4.0.2-1 - bump up to 4.0.2 --------------------------------------------------------------------------------
================================================================================ tog-pegasus-2.12.1-9.fc19 (FEDORA-2014-1837) OpenPegasus WBEM Services for Linux -------------------------------------------------------------------------------- Update Information:
Add Platform_LINUX_XSCALE_GNU.h to -devel because of lmiwbem on arm. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jan 30 2014 Vitezslav Crhonek vcrhonek@redhat.com - 2:2.12.1-9 - Add Platform_LINUX_XSCALE_GNU.h to -devel because of lmiwbem on arm --------------------------------------------------------------------------------
================================================================================ xiphos-3.1.6-1.fc19 (FEDORA-2014-1815) Bible study and research tool -------------------------------------------------------------------------------- Update Information:
Update Sword to the latest upstream release, along with Xiphos frontends that was released and built for it -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 29 2014 Deji Akingunola dakingun@gmail.com - 3.1.6-1 - Update to version 3.1.6 * Sun Aug 4 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.1.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ xiphos-3.1.6-2.fc19 (FEDORA-2014-1844) Bible study and research tool -------------------------------------------------------------------------------- Update Information:
Removed GTK3 in favor of GTK2, as GTK3 is known to be buggy for this release -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 29 2014 Greg Hellings greg.hellings@gmail.com - 3.1.6-2 - Removed GTK3 in favor of GTK2, as GTK3 is known to be buggy for this release * Wed Jan 29 2014 Deji Akingunola dakingun@gmail.com - 3.1.6-1 - Update to version 3.1.6 * Sun Aug 4 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.1.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ xrootd-3.3.6-1.fc19 (FEDORA-2014-1826) Extended ROOT file server -------------------------------------------------------------------------------- Update Information:
https://github.com/xrootd/xrootd/blob/v3.3.6/docs/ReleaseNotes.txt -------------------------------------------------------------------------------- ChangeLog:
* Thu Jan 30 2014 Mattias Ellert mattias.ellert@fysast.uu.se - 1:3.3.6-1 - Update to version 3.3.6 --------------------------------------------------------------------------------