The following Fedora 19 Security updates need testing:
Age URL
340
https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glanc...
152
https://admin.fedoraproject.org/updates/FEDORA-2014-5896/nrpe-2.15-2.fc19
103
https://admin.fedoraproject.org/updates/FEDORA-2014-7496/readline-6.2-8.fc19
101
https://admin.fedoraproject.org/updates/FEDORA-2014-6774/claws-mail-3.10....
92
https://admin.fedoraproject.org/updates/FEDORA-2014-7939/lzo-2.08-1.fc19
54
https://admin.fedoraproject.org/updates/FEDORA-2014-9162/xulrunner-31.0-1...
46
https://admin.fedoraproject.org/updates/FEDORA-2014-9427/pipelight-0.2.7....
33
https://admin.fedoraproject.org/updates/FEDORA-2014-9830/glibc-2.17-21.fc19
33
https://admin.fedoraproject.org/updates/FEDORA-2014-9703/cups-1.6.4-10.fc19
21
https://admin.fedoraproject.org/updates/FEDORA-2014-10491/torque-3.0.4-4....
21
https://admin.fedoraproject.org/updates/FEDORA-2014-10366/icecream-1.0.1-...
20
https://admin.fedoraproject.org/updates/FEDORA-2014-10640/libreoffice-4.1...
18
https://admin.fedoraproject.org/updates/FEDORA-2014-10714/curl-7.29.0-23....
17
https://admin.fedoraproject.org/updates/FEDORA-2014-10794/squid-3.3.13-2....
5
https://admin.fedoraproject.org/updates/FEDORA-2014-11348/kdelibs-4.11.5-...
5
https://admin.fedoraproject.org/updates/FEDORA-2014-11370/nginx-1.4.7-3.fc19
5
https://admin.fedoraproject.org/updates/FEDORA-2014-11428/perl-Data-Dumpe...
5
https://admin.fedoraproject.org/updates/FEDORA-2014-11483/xen-4.2.5-2.fc19
5
https://admin.fedoraproject.org/updates/FEDORA-2014-11464/krfb-4.11.5-4.fc19
5
https://admin.fedoraproject.org/updates/FEDORA-2014-11495/nodejs-send-0.3...
5
https://admin.fedoraproject.org/updates/FEDORA-2014-11399/nodejs-qs-0.6.6...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-11565/nss-softokn-3.1...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-11522/python-2.7.5-14...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-11544/drupal6-6.33-1....
4
https://admin.fedoraproject.org/updates/FEDORA-2014-11541/libvncserver-0....
3
https://admin.fedoraproject.org/updates/FEDORA-2014-11649/rubygem-bundler...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-11745/seamonkey-2.29....
3
https://admin.fedoraproject.org/updates/FEDORA-2014-11582/mediawiki-1.23....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-11838/fish-2.1.1-1.fc19
0
https://admin.fedoraproject.org/updates/FEDORA-2014-11855/golang-1.3.2-1....
0
https://admin.fedoraproject.org/updates/FEDORA-2014-11929/check-mk-1.2.4p...
The following Fedora 19 Critical Path updates have yet to be approved:
Age URL
288
https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmark...
214
https://admin.fedoraproject.org/updates/FEDORA-2014-3245/testdisk-6.14-2....
11
https://admin.fedoraproject.org/updates/FEDORA-2014-10986/kde-workspace-4...
11
https://admin.fedoraproject.org/updates/FEDORA-2014-10971/man-db-2.6.3-8....
11
https://admin.fedoraproject.org/updates/FEDORA-2014-10968/squashfs-tools-...
5
https://admin.fedoraproject.org/updates/FEDORA-2014-11348/kdelibs-4.11.5-...
5
https://admin.fedoraproject.org/updates/FEDORA-2014-11443/firefox-32.0.2-...
5
https://admin.fedoraproject.org/updates/FEDORA-2014-11394/thunderbird-31....
4
https://admin.fedoraproject.org/updates/FEDORA-2014-11522/python-2.7.5-14...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-11565/nss-softokn-3.1...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-11671/koji-1.9.0-5.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2014-11828/dash-0.5.8-1.fc19
The following builds have been pushed to Fedora 19 updates-testing
check-mk-1.2.4p5-2.fc19
golang-1.3.2-1.fc19
ibus-table-1.9.1-1.fc19
ibus-table-others-1.3.5-1.fc19
mock-1.1.41-3.fc19
python-bugzilla2fedmsg-0.2.0-1.fc19
python-fedmsg-meta-fedora-infrastructure-0.3.2-1.fc19
salt-2014.1.11-1.fc19
Details about builds:
================================================================================
check-mk-1.2.4p5-2.fc19 (FEDORA-2014-11929)
A new general purpose Nagios-plugin for retrieving data
--------------------------------------------------------------------------------
Update Information:
Do not require any other shell than bash since that's the default shell for the Fedora
/ RHEL distributions
New upstream release providing many security fixes.
New upstream release providing many security fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 30 2014 Andrea Veri <averi(a)fedoraproject.org> - 1.2.4p5-2
- Do not require any other shell than bash since that's the default
shell for the Fedora / RHEL distributions.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1132337 - CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws
fixed in versions 1.2.4p4 and 1.2.5i4
https://bugzilla.redhat.com/show_bug.cgi?id=1132337
--------------------------------------------------------------------------------
================================================================================
golang-1.3.2-1.fc19 (FEDORA-2014-11855)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
update to go1.3.2 (bz1147324)
more work to get cgo.a timestamps to line up, due to build-env
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 29 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.3.2-1
- update to go1.3.2 (bz1147324)
* Wed Aug 13 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-22
- more work to get cgo.a timestamps to line up, due to build-env
* Wed Aug 13 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-21
- touch cgo.a regardless
* Wed Aug 13 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-20
- rpm dependency ordering for %post
* Tue Aug 12 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-19
- finally check for a Stale cgo in a %post
* Tue Aug 12 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-18
- explicitly list all the files and directories for the packages trees
* Tue Aug 12 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-17
- explicitly list all the files and directories of the src tree, to preserve timestamps
* Mon Aug 11 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-16
- touch all the built archives to be the same
* Mon Aug 11 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-15
- make golang-src 'noarch' again, since that was not a fix, and takes up more
space
* Mon Aug 11 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-14
- update timestamps of source files during %install bz1099206
* Fri Aug 8 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-13
- update timestamps of source during %install bz1099206
* Fri Aug 8 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-12
- set another version constraint on xemacs due to bz1127518
* Wed Aug 6 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-11
- set a version constraint on xemacs due to bz1127518
* Wed Aug 6 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.2.2-10
- make the source subpackage arch'ed, instead of noarch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1147324 - CVE-2014-7189 golang: TLS client authentication issue fixed in
version 1.3.2
https://bugzilla.redhat.com/show_bug.cgi?id=1147324
--------------------------------------------------------------------------------
================================================================================
ibus-table-1.9.1-1.fc19 (FEDORA-2014-11869)
The Table engine for IBus platform
--------------------------------------------------------------------------------
Update Information:
update to 1.9.1; Use proper fallback when reading the localized table name; Show pinyin
mode as well in the input mode indicator
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 30 2014 Mike FABIAN <mfabian(a)redhat.com> - 1.9.1-1
- update to 1.9.1
- Use proper fallback when reading the localized table name
- Show pinyin mode as well in the input mode indicator
--------------------------------------------------------------------------------
================================================================================
ibus-table-others-1.3.5-1.fc19 (FEDORA-2014-11860)
Various tables for IBus-Table
--------------------------------------------------------------------------------
Update Information:
update to latest upstream 1.3.5; Use better localized names for the rusle table
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 30 2014 Mike FABIAN <mfabian(a)redhat.com> - 1.3.5-1
- update to latest upstream 1.3.5
- Use better localized names for the rusle table
--------------------------------------------------------------------------------
================================================================================
mock-1.1.41-3.fc19 (FEDORA-2014-11883)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
add updated configs for secondary arches
remove python 2.7 function (os.getresuid()) added in util.py
bugfixes, updates to configs
various bug fixes
bugfixes, updates to configs
various bug fixes
bugfixes, updates to configs
various bug fixes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 30 2014 msuchy(a)redhat.com - 1.1.41-3
- remove broken symlink [BZ# 1145078]
* Tue Sep 16 2014 msuchy(a)redhat.com - 1.1.41-2
- add updated configs for secondary arches
* Fri Jul 18 2014 Clark Williams <williams(a)redhat.com> - 1.1.41-1
- fix python 2.7 feature so we can run on rhel6
* Thu Jul 17 2014 Clark Williams <williams(a)redhat.com> - 1.1.40-1
- from Miroslav Suchý <msuchy(a)redhat.com>:
- mock: Revert "revert 7ec6a1e9d202ab56fb31c914dbf7516c045e56ab" [BZ#
1103239]
- configs: use final Centos 7 path in configs [BZ# 1108402]
- configs: fix typo in fedora-rawhide-armhfp config [BZ# 1108847]
- mockchain: use getuid() instead of getgid() [BZ# 1108265]
- configs: check gpg key of packages from Fedora, Centos, Epel
- plugins: disable package_state by default on el6
- make /etc/mtab symlink to /proc/self/mounts [BZ# 1116158]
- do not list pki files twice
- deploy etc/pki to buildroot
- from Michael Simacek <msimacek(a)redhat.com>:
- mock: do not allow config scripts to regain root priviledges
- from Igor Gnatenko <i.gnatenko.brain(a)gmail.com>:
- Add F21 configs
- Change releasever to 22 for rawhide
* Wed May 21 2014 Clark Williams <williams(a)redhat.com> - 1.1.39-1
- configs: update epel-7 koji repo to use correct URL
- from Ken Dreyer <ktdryer(a)ktdryder.com>
- Use RHEL 7 RC mirrorlist URLs
from Miroslav Suchý <msuchy(a)redhat.com>
- add support for subscription-manager (RHSM)
- expand tabs for better readablity
- cut of everything after decimal point, if there is some [BZ# 1098477]
- better code readablity
- clarify the log messages
- use metalink instead of mirrorlist in yum config
- set LC_MESSAGE to C before executing command [BZ# 519258]
- use ctypes.get_errno() instead of ctypes.c_int.in_dll(_libc, "errno")
- revert 7ec6a1e9d202ab56fb31c914dbf7516c045e56ab (python 2.4 workarounds)
- buildroot and %clean is not needed for el6 and fedoras
- description should always end with dot
- remove shebang from mockbuild/mounts.py
- %defattr is not needed since rpm 4.4
- remove el5 conditional
- use createrepo_c which is much faster
- whitespace fixes
- remove unused variables: 'username' and 'hdr'
- better logging of kernel version [BZ# 1048826]
- partially revert 9db6edb33cc34a450e762eb5d2bedf9067ebc419 [BZ# 1034805]
- teach mockchain about ftp [BZ# 1061776]
from Jerry James <loganjerry(a)gmail.com>
- fix post scriptlet to deal with rawhide [BZ# 1083689]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1145078 - mock: broken symlink /etc/mock/fedora-devel-ppc.cfg
https://bugzilla.redhat.com/show_bug.cgi?id=1145078
[ 2 ] Bug #1103239 - warning during using mock
https://bugzilla.redhat.com/show_bug.cgi?id=1103239
[ 3 ] Bug #1108402 - epel-7-x86_64 builds fail because RHEL 7 RC packages removed
https://bugzilla.redhat.com/show_bug.cgi?id=1108402
[ 4 ] Bug #1108847 - /etc/mock/fedora-rawhide-armhfp.cfg typo
https://bugzilla.redhat.com/show_bug.cgi?id=1108847
[ 5 ] Bug #1108265 - mockchain.py sets up default config with group id instead of user
id
https://bugzilla.redhat.com/show_bug.cgi?id=1108265
[ 6 ] Bug #1116158 - systemd-215-1.fc21 breaks rawhide buildroot
https://bugzilla.redhat.com/show_bug.cgi?id=1116158
[ 7 ] Bug #1061776 - [PATCH] [RFE] allow ftp url for mockchain
https://bugzilla.redhat.com/show_bug.cgi?id=1061776
[ 8 ] Bug #1034805 - [PATCH] Do not pass $ to repo id in mockchain
https://bugzilla.redhat.com/show_bug.cgi?id=1034805
[ 9 ] Bug #1028438 - [PATCH][RFE] allow mockchain to pass options to mock
https://bugzilla.redhat.com/show_bug.cgi?id=1028438
[ 10 ] Bug #1048826 - [PATCH] Log host kernel
https://bugzilla.redhat.com/show_bug.cgi?id=1048826
[ 11 ] Bug #519258 - mock ignores unsattisfied BuildRequires with German locale
https://bugzilla.redhat.com/show_bug.cgi?id=519258
[ 12 ] Bug #1083689 - mock %post script fails on Rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1083689
[ 13 ] Bug #1098477 - post install scripts failed rhel7
https://bugzilla.redhat.com/show_bug.cgi?id=1098477
[ 14 ] Bug #1099676 - Unable to mock build EL7 SRPMs on EL6
https://bugzilla.redhat.com/show_bug.cgi?id=1099676
[ 15 ] Bug #1090073 - Post scriptlet fails due to RHEL version string
https://bugzilla.redhat.com/show_bug.cgi?id=1090073
--------------------------------------------------------------------------------
================================================================================
python-bugzilla2fedmsg-0.2.0-1.fc19 (FEDORA-2014-11863)
Consume BZ messages over STOMP and republish to fedmsg
--------------------------------------------------------------------------------
Update Information:
Reorganized internally to be more coherent.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 30 2014 Ralph Bean <rbean(a)redhat.com> - 0.2.0-1
- Reorganized internally to rely on fedmsg queueing.
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.1.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.3.2-1.fc19 (FEDORA-2014-11859)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
Handle new pkgdb messages, certain legacy messages, and new bugzilla messages. git
messages now return the full patch via a call to msg2long_form
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 29 2014 Ralph Bean <rbean(a)redhat.com> - 0.3.2-1
- Latest upstream.
- Handle different types of legacy messages.
- git messages now return the full patch via a call to msg2long_form.
- future-proofing against new types of bugzilla messages.
--------------------------------------------------------------------------------
================================================================================
salt-2014.1.11-1.fc19 (FEDORA-2014-11916)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to bugfix release 2014.1.11
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 29 2014 Erik Johnson <erik(a)saltstack.com> - 2014.1.11-1
- Update to bugfix release 2014.1.11
--------------------------------------------------------------------------------