The following Fedora 19 Security updates need testing:
Age URL
271
https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glanc...
83
https://admin.fedoraproject.org/updates/FEDORA-2014-5896/nrpe-2.15-2.fc19
63
https://admin.fedoraproject.org/updates/FEDORA-2014-6553/chicken-4.8.0.6-...
61
https://admin.fedoraproject.org/updates/FEDORA-2014-6597/drupal7-views-3....
40
https://admin.fedoraproject.org/updates/FEDORA-2014-7322/thunderbird-24.6...
34
https://admin.fedoraproject.org/updates/FEDORA-2014-7496/readline-6.2-8.fc19
33
https://admin.fedoraproject.org/updates/FEDORA-2014-7570/asterisk-11.10.2...
32
https://admin.fedoraproject.org/updates/FEDORA-2014-6774/claws-mail-3.10....
32
https://admin.fedoraproject.org/updates/FEDORA-2014-7610/perl-Email-Addre...
23
https://admin.fedoraproject.org/updates/FEDORA-2014-7939/lzo-2.08-1.fc19
18
https://admin.fedoraproject.org/updates/FEDORA-2014-8089/rubygem-activere...
12
https://admin.fedoraproject.org/updates/FEDORA-2014-7889/zarafa-7.1.10-2....
10
https://admin.fedoraproject.org/updates/FEDORA-2014-8328/python-bottle-0....
10
https://admin.fedoraproject.org/updates/FEDORA-2014-8332/transmission-2.8...
6
https://admin.fedoraproject.org/updates/FEDORA-2014-8443/mosquitto-1.3.2-...
6
https://admin.fedoraproject.org/updates/FEDORA-2014-8402/ipython-0.13.2-4...
6
https://admin.fedoraproject.org/updates/FEDORA-2014-8395/java-1.7.0-openj...
6
https://admin.fedoraproject.org/updates/FEDORA-2014-8441/java-1.8.0-openj...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-8515/drupal7-7.29-1.fc19
4
https://admin.fedoraproject.org/updates/FEDORA-2014-8528/sdcc-3.3.0-1.fc19
4
https://admin.fedoraproject.org/updates/FEDORA-2014-8488/drupal6-6.32-1.fc19
3
https://admin.fedoraproject.org/updates/FEDORA-2014-8545/cobbler-2.6.3-1....
3
https://admin.fedoraproject.org/updates/FEDORA-2014-8564/dpkg-1.16.15-1.fc19
2
https://admin.fedoraproject.org/updates/FEDORA-2014-8577/phpMyAdmin-4.2.6...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-8571/homebank-4.6.1-1...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-8648/ansible-1.6.7-1....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-8176/krb5-1.11.3-24.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2014-8609/moodle-2.4.11-1....
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8706/ansible-1.6.8-1....
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8352/cups-1.6.4-7.fc19
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8763/firefox-31.0-1.fc19
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8771/ReviewBoard-1.7....
The following Fedora 19 Critical Path updates have yet to be approved:
Age URL
219
https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmark...
145
https://admin.fedoraproject.org/updates/FEDORA-2014-3245/testdisk-6.14-2....
13
https://admin.fedoraproject.org/updates/FEDORA-2014-8256/langtable-0.0.25...
8
https://admin.fedoraproject.org/updates/FEDORA-2014-8360/pcre-8.32-10.fc19
8
https://admin.fedoraproject.org/updates/FEDORA-2014-8338/curl-7.29.0-21.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2014-8176/krb5-1.11.3-24.fc19
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8763/firefox-31.0-1.fc19
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8761/systemd-204-20.fc19
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8352/cups-1.6.4-7.fc19
The following builds have been pushed to Fedora 19 updates-testing
ReviewBoard-1.7.27-1.fc19
cups-1.6.4-7.fc19
dkms-2.2.0.3-25.fc19
firefox-31.0-1.fc19
golang-github-codegangsta-cli-1.0.0-3.fc19
ibus-table-others-1.3.1-1.fc19
imaptest-20140711-1.fc19
libgadu-1.12.0-1.fc19
nodejs-agent-base-1.0.1-1.fc19
nodejs-ast-traverse-0.1.1-1.fc19
nodejs-ast-types-0.4.5-1.fc19
nodejs-bluebird-2.2.2-1.fc19
nodejs-breakable-1.0.0-1.fc19
nodejs-cls-0.1.5-1.fc19
perl-Text-Clip-0.0014-1.fc19
shinken-2.0.3-7.fc19
systemd-204-20.fc19
vdsm-4.14.11.2-0.fc19
Details about builds:
================================================================================
ReviewBoard-1.7.27-1.fc19 (FEDORA-2014-8771)
Web-based code review tool
--------------------------------------------------------------------------------
Update Information:
- New upstream security release 1.7.27
-
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 23 2014 Patrick Uiterwijk <puiterwijk(a)redhat.com> - 1.7.27-1
- New upstream security release 1.7.27
-
http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27
--------------------------------------------------------------------------------
================================================================================
cups-1.6.4-7.fc19 (FEDORA-2014-8352)
CUPS printing system
--------------------------------------------------------------------------------
Update Information:
This update fixes a security flaw potentially leading to a disclosure of information.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 23 2014 Jiri Popelka <jpopelka(a)redhat.com> - 1:1.6.4-7
- CVE-2014-5029, CVE-2014-5030, CVE-2014-5031 (#1122601)
* Mon Jul 14 2014 Jiri Popelka <jpopelka(a)redhat.com> - 1:1.6.4-6
- CVE-2014-3537 (#1119303)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1115576 - CVE-2014-3537 cups: insufficient checking leads to privilege
escalation
https://bugzilla.redhat.com/show_bug.cgi?id=1115576
[ 2 ] Bug #1122600 - CVE-2014-5029 CVE-2014-5030 CVE-2014-5031 cups: Incomplete fix for
CVE-2014-3537
https://bugzilla.redhat.com/show_bug.cgi?id=1122600
--------------------------------------------------------------------------------
================================================================================
dkms-2.2.0.3-25.fc19 (FEDORA-2014-8764)
Dynamic Kernel Module Support Framework
--------------------------------------------------------------------------------
Update Information:
Fixes for parallel module building, intird rebuild skip and bash syntax fixes
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 27 2014 Simone Caronni <negativo17(a)gmail.com> - 2.2.0.3-25
- Enable all patches also for RHEL 5 builds.
- Skip initramfs/initrd rebuild if not requested (#1109601).
* Fri Jun 27 2014 Julien Floret <julien.floret(a)6wind.com> - 2.2.0.3-24
- Prevent parallel depmod failure with autoinstall (#1113946).
* Tue Jun 17 2014 Simone Caronni <negativo17(a)gmail.com> - 2.2.0.3-23
- Update shell syntax (#1104253).
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.2.0.3-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri Jan 17 2014 Simone Caronni <negativo17(a)gmail.com> - 2.2.0.3-21
- Adjust directory extraction due to regenerated tarball upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1104253 - sed: -e expression #1, char 21: unterminated `s' command
https://bugzilla.redhat.com/show_bug.cgi?id=1104253
[ 2 ] Bug #1109601 - dkms remove --no-initrd should only call /sbin/weak-modules with
parameter --no-initramfs
https://bugzilla.redhat.com/show_bug.cgi?id=1109601
[ 3 ] Bug #1113946 - Parallel depmod failure with dkms autoinstall
https://bugzilla.redhat.com/show_bug.cgi?id=1113946
--------------------------------------------------------------------------------
================================================================================
firefox-31.0-1.fc19 (FEDORA-2014-8763)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
See
https://www.mozilla.org/en-US/firefox/31.0/releasenotes/ for changes.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 17 2014 Martin Stransky <stransky(a)redhat.com> - 31.0-1
- Update to 31.0 build 2
--------------------------------------------------------------------------------
================================================================================
golang-github-codegangsta-cli-1.0.0-3.fc19 (FEDORA-2014-8772)
Package for building command line apps in Go
--------------------------------------------------------------------------------
Update Information:
correct cp args
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1114175 - Review Request: golang-github-codegangsta-cli - Package for
building command line apps in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1114175
--------------------------------------------------------------------------------
================================================================================
ibus-table-others-1.3.1-1.fc19 (FEDORA-2014-8738)
Various tables for IBus-Table
--------------------------------------------------------------------------------
Update Information:
update to latest upstream 1.3.1; Updates and bugfixes for the LaTeX table by Giuseppe
Castagna (original author of the LaTeX table); Add _ and ^ to the start characters for the
LaTeX table
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 23 2014 Mike FABIAN <mfabian(a)redhat.com> - 1.3.1-1
- update to latest upstream 1.3.1
- Add _ and ^ to the start characters for the LaTeX table
- Updates and bugfixes for the LaTeX table by
Giuseppe Castagna (original author of the LaTeX table)
--------------------------------------------------------------------------------
================================================================================
imaptest-20140711-1.fc19 (FEDORA-2014-8759)
A generic IMAP server compliancy tester
--------------------------------------------------------------------------------
Update Information:
ImapTest is a generic IMAP server compliancy tester that works with all IMAP servers. It
supports stress testing with state tracking, scripted testing and benchmarking. When
stress testing with state tracking ImapTest sends random commands to the server and
verifies that server's output looks correct. Using the scripted testing ImapTest runs
a list of predefined scripted tests and verifies that server returns expected output.
Examples and details are provided online at:
http://www.imapwiki.org/ImapTest
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1103927 - Review Request: imaptest - A generic IMAP server compliancy tester
https://bugzilla.redhat.com/show_bug.cgi?id=1103927
--------------------------------------------------------------------------------
================================================================================
libgadu-1.12.0-1.fc19 (FEDORA-2014-8758)
A Gadu-gadu protocol compatible communications library
--------------------------------------------------------------------------------
Update Information:
Update to latest stable release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 23 2014 Dominik Mierzejewski <rpm(a)greysector.net> - 1.12.0-1
- update to 1.12.0 release
- drop obsolete patches
--------------------------------------------------------------------------------
================================================================================
nodejs-agent-base-1.0.1-1.fc19 (FEDORA-2014-8757)
Turn a function into an `http.Agent` instance
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1122208 - Review Request: nodejs-agent-base - Turn a function into an
`http.Agent` instance
https://bugzilla.redhat.com/show_bug.cgi?id=1122208
--------------------------------------------------------------------------------
================================================================================
nodejs-ast-traverse-0.1.1-1.fc19 (FEDORA-2014-8741)
Simple but flexible AST traversal
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1122210 - Review Request: nodejs-ast-traverse - Simple but flexible AST
traversal
https://bugzilla.redhat.com/show_bug.cgi?id=1122210
--------------------------------------------------------------------------------
================================================================================
nodejs-ast-types-0.4.5-1.fc19 (FEDORA-2014-8729)
Esprima-compatible implementation of the Mozilla JS Parser API
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1122211 - Review Request: nodejs-ast-types - Esprima-compatible
implementation of the Mozilla JS Parser API
https://bugzilla.redhat.com/show_bug.cgi?id=1122211
--------------------------------------------------------------------------------
================================================================================
nodejs-bluebird-2.2.2-1.fc19 (FEDORA-2014-8773)
Full featured Promises/A+ implementation
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1122212 - Review Request: nodejs-bluebird - Full featured Promises/A+
implementation
https://bugzilla.redhat.com/show_bug.cgi?id=1122212
--------------------------------------------------------------------------------
================================================================================
nodejs-breakable-1.0.0-1.fc19 (FEDORA-2014-8770)
Break out of functions
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1122213 - Review Request: nodejs-breakable - Break out of functions
https://bugzilla.redhat.com/show_bug.cgi?id=1122213
--------------------------------------------------------------------------------
================================================================================
nodejs-cls-0.1.5-1.fc19 (FEDORA-2014-8746)
Class factory
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1122214 - Review Request: nodejs-cls - Class factory
https://bugzilla.redhat.com/show_bug.cgi?id=1122214
--------------------------------------------------------------------------------
================================================================================
perl-Text-Clip-0.0014-1.fc19 (FEDORA-2014-8734)
Clip and extract text in clipboard-like way
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1121853 - Review Request: perl-Text-Clip - Clip and extract text in
clipboard-like way
https://bugzilla.redhat.com/show_bug.cgi?id=1121853
--------------------------------------------------------------------------------
================================================================================
shinken-2.0.3-7.fc19 (FEDORA-2014-8733)
Python Monitoring tool
--------------------------------------------------------------------------------
Update Information:
Add path.cfg file.
Fix init SysV scripts.
Add forgot doc dir.
Add forgot dir.
Add shinken manpage.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 23 2014 David Hannequin <david.hannequin(a)gmail.com> - 2.0.3-7
- Add path.cfg file.
* Wed Jul 23 2014 David Hannequin <david.hannequin(a)gmail.com> - 2.0.3-6
- Fix init SysV scripts.
* Mon Jul 21 2014 David Hannequin <david.hannequin(a)gmail.com> - 2.0.3-5
- Add forgot doc dir.
* Fri Jul 18 2014 David Hannequin <david.hannequin(a)gmail.com> - 2.0.3-4
- Add forgot dir.
* Mon Jul 7 2014 David Hannequin <david.hannequin(a)gmail.com> - 2.0.3-3
- Add shinken manpage.
* Thu Jul 3 2014 David Hannequin <david.hannequin(a)gmail.com> - 2.0.3-2
- Delete python mysql require.
* Fri Jun 13 2014 David Hannequin <david.hannequin(a)gmail.com> - 2.0.3-1
- Update from upstream.
* Fri Apr 25 2014 David Hannequin <david.hannequin(a)gmail.com> - 2.0.2-1
- Update from upstream.
* Thu Apr 17 2014 David Hannequin <david.hannequin(a)gmail.com> - 2.0-1
- Update from upstream.
--------------------------------------------------------------------------------
================================================================================
systemd-204-20.fc19 (FEDORA-2014-8761)
A System and Service Manager
--------------------------------------------------------------------------------
Update Information:
Update hardware database, add SocketUser/SocketGroup, bugfixes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 22 2014 Zbigniew Jędrzejewski-Szmek <zbyszek(a)in.waw.pl> 204-20
- Update hardware database
- Add SocketUser/SocketGroup (#1119282)
- Bugfixes (#1047148, #969795, #1074259, #1062955, #1028687) and
some more
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1047148 - MSG: useless systemd-journald "Vacuuming done" messages
https://bugzilla.redhat.com/show_bug.cgi?id=1047148
[ 2 ] Bug #969795 - [abrt] systemd-204-3.fc19: crash: Process /usr/lib/systemd/systemd
was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=969795
[ 3 ] Bug #1074259 - systemd-cryptsetup-generator uses 0 timeout
https://bugzilla.redhat.com/show_bug.cgi?id=1074259
[ 4 ] Bug #1062955 - DOC: document that per-interface sysctl variables are applied on
hotplug
https://bugzilla.redhat.com/show_bug.cgi?id=1062955
[ 5 ] Bug #1028687 - systemctl is-enabled does not work for template instances
https://bugzilla.redhat.com/show_bug.cgi?id=1028687
[ 6 ] Bug #1119282 - [Regression] Unable to run docker client as non-root user
https://bugzilla.redhat.com/show_bug.cgi?id=1119282
--------------------------------------------------------------------------------
================================================================================
vdsm-4.14.11.2-0.fc19 (FEDORA-2014-8766)
Virtual Desktop Server Manager
--------------------------------------------------------------------------------
Update Information:
vdsm tag 4.14.11-2
vdsm tag 4.14.11.1
vdsm tag 4.14.11
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 22 2014 Yaniv Bronhaim <ybronhei(a)redhat.com> - 4.14.11-2
- vdsm tag 4.14.11-2
* Wed Jul 16 2014 Douglas Schilling Landgraf <dougsland(a)redhat.com> - 4.14.11-0
- vdsm tag 4.14.11
--------------------------------------------------------------------------------