The following Fedora 19 Security updates need testing:
Age URL
22
https://admin.fedoraproject.org/updates/FEDORA-2013-4753/microcode_ctl-2....
14
https://admin.fedoraproject.org/updates/FEDORA-2013-5411/php-geshi-1.0.8....
13
https://admin.fedoraproject.org/updates/FEDORA-2013-5530/plexus-archiver-...
9
https://admin.fedoraproject.org/updates/FEDORA-2013-5801/mantis-1.2.15-1....
8
https://admin.fedoraproject.org/updates/FEDORA-2013-5883/xorg-x11-server-...
2
https://admin.fedoraproject.org/updates/FEDORA-2013-6378/tftp-5.2-9.fc19
2
https://admin.fedoraproject.org/updates/FEDORA-2013-6390/owncloud-4.5.10-...
2
https://admin.fedoraproject.org/updates/FEDORA-2013-6366/arpwatch-2.1a15-...
1
https://admin.fedoraproject.org/updates/FEDORA-2013-6481/miredo-1.2.5-4.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2013-6591/telepathy-idle-0...
The following builds have been pushed to Fedora 19 updates-testing
NFStest-1.0.2-0.fc19
audacious-3.4-0.2.beta1.fc19
audacious-plugins-3.4-0.4.beta1.fc19
bamf-0.3.6-2.fc19
dracut-027-39.git20130425.fc19
gnomint-1.2.1-8.fc19
lfsc-0.20120321-3.fc19
libhocr-0.10.17-14.fc19
libsvm-3.17-2.fc19
licq-1.7.0-7.fc19
mygui-3.2.0-5.fc19
nikto-2.1.5-6.fc19
open-vm-tools-9.2.3-1.fc19
pam-1.1.6-10.fc19
pony-0.4-7.fc19
prelink-0.4.9-1.fc19
python-keystoneclient-0.2.3-2.fc19
python-pillow-2.0.0-7.gitd1c6db8.fc19
python-tw2-jqplugins-jqplot-2.0.3-1.fc19
python-tw2-slideymenu-2.2-1.fc19
skyviewer-1.0.0-12.fc19
springlobby-0.169-3.fc19
tex-musixtex-0.114-13.fc19
transmission-2.77-3.fc19
wesnoth-1.10.6-3.fc19
wpa_supplicant-1.1-1.fc19
xorg-x11-drv-synaptics-1.7.0-2.fc19
zanata-api-2.2.0-6.fc19
Details about builds:
================================================================================
NFStest-1.0.2-0.fc19 (FEDORA-2013-6676)
NFS Testing Tool
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream release
--------------------------------------------------------------------------------
================================================================================
audacious-3.4-0.2.beta1.fc19 (FEDORA-2013-6497)
Advanced audio player
--------------------------------------------------------------------------------
Update Information:
* Update from 3.4-alpha1 to 3.4-beta1:
http://audacious-media-player.org/news/21-testing-release-audacious-3-4-b...
* Reintroduce the SID player plugin in the audacious-plugins-exotic package (it's
based on libsidplayfp and may require non-free Kernal and Basic ROM images to handle some
.sid files).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Michael Schwendt <mschwendt(a)fedoraproject.org> - 3.4-0.2.beta1
- Apply patch to restore play-stop-play resume from beginning behaviour.
* Mon Apr 22 2013 Michael Schwendt <mschwendt(a)fedoraproject.org> - 3.4-0.1.beta1
- Generic plugin API/ABI bumped to 43, still compatible with 3.3.x.
- Update to 3.4-beta1.
- BR autoconf automake gettext-devel and
run autoreconf -f -I m4 for aarch64 updates (#925050).
--------------------------------------------------------------------------------
================================================================================
audacious-plugins-3.4-0.4.beta1.fc19 (FEDORA-2013-6497)
Plugins for the Audacious audio player
--------------------------------------------------------------------------------
Update Information:
* Update from 3.4-alpha1 to 3.4-beta1:
http://audacious-media-player.org/news/21-testing-release-audacious-3-4-b...
* Reintroduce the SID player plugin in the audacious-plugins-exotic package (it's
based on libsidplayfp and may require non-free Kernal and Basic ROM images to handle some
.sid files).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 23 2013 Michael Schwendt <mschwendt(a)fedoraproject.org> - 3.4-0.4.beta1
- BR libsidplayfp-devel and include SID music player plug-in in the
audacious-plugins-exotic subpackage. This sid.so plugin based on
libsidplayfp 1.0.x is extensible with the original (albeit non-free and
therefore not included) Kernal and Basic ROM image files to make it
handle all files from the leading SID music collection.
* Mon Apr 22 2013 Michael Schwendt <mschwendt(a)fedoraproject.org> - 3.4-0.3.beta1
- BR audacious-devel 3.4-beta1 for aud_drct_play_plause().
* Mon Apr 22 2013 Michael Schwendt <mschwendt(a)fedoraproject.org> - 3.4-0.2.beta1
- Scrobbler2 plugin replaces scrobbler.
- Update to 3.4-beta1.
- BR autoconf automake and
run autoreconf -f -I m4 for aarch64 updates (#925051).
--------------------------------------------------------------------------------
================================================================================
bamf-0.3.6-2.fc19 (FEDORA-2013-6670)
Application matching framework
--------------------------------------------------------------------------------
Update Information:
Revive bamf.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Tom Callaway <spot(a)fedoraproject.org> - 0.3.6-2
- fix build
* Sat Apr 20 2013 Michel Salim <salimma(a)fedoraproject.org> - 0.3.6-1
- Update to 0.3.6
--------------------------------------------------------------------------------
================================================================================
dracut-027-39.git20130425.fc19 (FEDORA-2013-6673)
Initramfs generator using udev
--------------------------------------------------------------------------------
Update Information:
* fix shutdown, if /dev/console is not writeable
* fixed fips mode
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Harald Hoyer <harald(a)redhat.com> 027-39.git20130425
- fix shutdown, if /dev/console is not writeable
- fixed fips mode
Resolves: rhbz#956521
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #956521 - hmac check fail in initramfs
https://bugzilla.redhat.com/show_bug.cgi?id=956521
--------------------------------------------------------------------------------
================================================================================
gnomint-1.2.1-8.fc19 (FEDORA-2013-6692)
Graphical x509 Certification Authority management tool
--------------------------------------------------------------------------------
Update Information:
Fix build.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Tom Callaway <spot(a)fedoraproject.org> - 1.2.1-8
- get this building again
* Sun Mar 24 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.2.1-7
- rebuild (gnutls)
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
lfsc-0.20120321-3.fc19 (FEDORA-2013-6250)
SMT proof checker
--------------------------------------------------------------------------------
Update Information:
This package contains an SMT proof checker, for use with SMT solvers such as CVC4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #903428 - Review Request: lfsc - SMT proof checker
https://bugzilla.redhat.com/show_bug.cgi?id=903428
[ 2 ] Bug #956160 - lsfc enters end-less loop when running checks on big-endian arches
https://bugzilla.redhat.com/show_bug.cgi?id=956160
--------------------------------------------------------------------------------
================================================================================
libhocr-0.10.17-14.fc19 (FEDORA-2013-6683)
A Hebrew optical character recognition library
--------------------------------------------------------------------------------
Update Information:
Drop desktop vendor tag.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Jon Ciesla <limburgher(a)gmail.com> - 0.10.17-14
- Drop desktop vendor tag.
--------------------------------------------------------------------------------
================================================================================
libsvm-3.17-2.fc19 (FEDORA-2013-6674)
A Library for Support Vector Machines
--------------------------------------------------------------------------------
Update Information:
Drop desktop vendor tag.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Jon Ciesla <limburgher(a)gmail.com> - 3.17-2
- Drop desktop vendor tag.
--------------------------------------------------------------------------------
================================================================================
licq-1.7.0-7.fc19 (FEDORA-2013-6678)
Licq - A graphical ICQ Client for Linux
--------------------------------------------------------------------------------
Update Information:
Drop desktop vendor tag.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Jon Ciesla <limburgher(a)gmail.com> - 1.7.0-7
- Drop desktop vendor tag.
--------------------------------------------------------------------------------
================================================================================
mygui-3.2.0-5.fc19 (FEDORA-2013-6690)
Fast, simple and flexible GUI library for Ogre
--------------------------------------------------------------------------------
Update Information:
Rebuild to include libCommon.so to resolve dep issues.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Tom Callaway <spot(a)fedoraproject.org> - 3.2.0-5
- rebuild to include libCommon
--------------------------------------------------------------------------------
================================================================================
nikto-2.1.5-6.fc19 (FEDORA-2013-6671)
Web server scanner
--------------------------------------------------------------------------------
Update Information:
Fix license tag.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Tom Callaway <spot(a)fedoraproject.org> - 1:2.1.5-6
- treat nikto database files as content, update license
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #888216 - nikto database is non free (?) content.
https://bugzilla.redhat.com/show_bug.cgi?id=888216
--------------------------------------------------------------------------------
================================================================================
open-vm-tools-9.2.3-1.fc19 (FEDORA-2013-6682)
Open VMware Tools for virtual machines hosted on VMware
--------------------------------------------------------------------------------
Update Information:
New upstream version 9.2.3.
Resubmitting the update with a fix for ldconfig dependency.
Added open-vm-tools package for virtual machines hosted on VMware.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #905255 - Review Request: open-vm-tools - Open Virtual Machine Tools
https://bugzilla.redhat.com/show_bug.cgi?id=905255
--------------------------------------------------------------------------------
================================================================================
pam-1.1.6-10.fc19 (FEDORA-2013-6680)
An extensible library which provides authentication for applications
--------------------------------------------------------------------------------
Update Information:
Minor bugfix update.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 24 2013 Tomáš Mráz <tmraz(a)redhat.com> 1.1.6-10
- pam_unix: do not fail with bad ld.so.preload
--------------------------------------------------------------------------------
================================================================================
pony-0.4-7.fc19 (FEDORA-2013-6677)
An image manager
--------------------------------------------------------------------------------
Update Information:
Update dependencies for new python-pillow f19 feature
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Rex Dieter <rdieter(a)fedoraproject.org> - 0.4-7
- Add dependency python-pillow-qt (f19+, #953967)
- use %find_lang --with-kde
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #953967 - Add dependency python-pillow-qt
https://bugzilla.redhat.com/show_bug.cgi?id=953967
--------------------------------------------------------------------------------
================================================================================
prelink-0.4.9-1.fc19 (FEDORA-2013-6672)
An ELF prelinking utility
--------------------------------------------------------------------------------
Update Information:
s390{,x} ifunc support.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Jakub Jelinek <jakub(a)redhat.com> 0.4.9-1
- add support for STT_GNU_IFUNC and R_390_IRELATIVE on s390/s390x
* Thu Apr 18 2013 Jakub Jelinek <jakub(a)redhat.com> 0.4.8-1
- fix also the reloc{4,5,8,9}.sh testcases (#927818)
* Thu Apr 18 2013 Jakub Jelinek <jakub(a)redhat.com> 0.4.7-1
- adjust testsuite not to need --add-needed, and work even with latest ld (#927818)
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.4.6-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-keystoneclient-0.2.3-2.fc19 (FEDORA-2013-6693)
Client library for OpenStack Identity API
--------------------------------------------------------------------------------
Update Information:
- Add missing dependencies
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 4 2013 Jakub Ruzicka <jruzicka(a)redhat.com> 0.2.3-2
- Update requires. (#948244)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #948244 - Missing deps in python-keystoneclient
https://bugzilla.redhat.com/show_bug.cgi?id=948244
--------------------------------------------------------------------------------
================================================================================
python-pillow-2.0.0-7.gitd1c6db8.fc19 (FEDORA-2013-6675)
Python image processing library
--------------------------------------------------------------------------------
Update Information:
* Remove Obsoletes because we don't want to drag in qt when people upgrade
python-pillow.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Toshio Kuratomi <toshio(a)fedoraproject.org> - 2.0.0-7.gitd1c6db8
- Remove Obsoletes in the python-pillow-qt subpackage. Obsoletes isn't
appropriate since qt support didn't exist in the previous python-pillow
package so there's no reason to drag in python-pillow-qt when updating
python-pillow.
--------------------------------------------------------------------------------
================================================================================
python-tw2-jqplugins-jqplot-2.0.3-1.fc19 (FEDORA-2013-6685)
Toscawidgets2 wrapper for the jqPlot jQuery plugin
--------------------------------------------------------------------------------
Update Information:
Initial import (#916431).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #916431 - Review Request: python-tw2-jqplugins-jqplot - Toscawidgets2 wrapper
for the jqPlot jQuery plugin
https://bugzilla.redhat.com/show_bug.cgi?id=916431
--------------------------------------------------------------------------------
================================================================================
python-tw2-slideymenu-2.2-1.fc19 (FEDORA-2013-6686)
Toscawidgets2 wrapper for a "slidey" menu
--------------------------------------------------------------------------------
Update Information:
Initial import (#916436).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #916436 - Review Request: python-narcissus-app - WSGI components for
Narcissus, realtime log visualization
https://bugzilla.redhat.com/show_bug.cgi?id=916436
--------------------------------------------------------------------------------
================================================================================
skyviewer-1.0.0-12.fc19 (FEDORA-2013-6694)
Program to display HEALPix-based skymaps in FITS files
--------------------------------------------------------------------------------
Update Information:
Rebuild for broken deps.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Tom Callaway <spot(a)fedoraproject.org> - 1.0.0-12
- rebuild for new cfitsio
- fix ftbfs, link to libGLU
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Tue Feb 28 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.0-9
- Rebuilt for c++ ABI breakage
--------------------------------------------------------------------------------
================================================================================
springlobby-0.169-3.fc19 (FEDORA-2013-6679)
A lobby client for the spring RTS game engine
--------------------------------------------------------------------------------
Update Information:
- Fix package breakage due to %libdir pulling debug symbols.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Gilboa Davara <gilboad [AT] gmail [DOT] com> - 0.169-3
- Fix package breakage due to %libdir pulling debug symbols.
--------------------------------------------------------------------------------
================================================================================
tex-musixtex-0.114-13.fc19 (FEDORA-2013-6681)
Sophisticated music typesetting
--------------------------------------------------------------------------------
Update Information:
Fix legacy deps.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Tom Callaway <spot(a)fedoraproject.org> - 0.114-13
- fix legacy dependencies
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.114-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
transmission-2.77-3.fc19 (FEDORA-2013-6691)
A lightweight GTK+ BitTorrent client
--------------------------------------------------------------------------------
Update Information:
Security hardened build. refer to
https://fedoraproject.org/wiki/Packaging:Guidelines#PIE
for more details.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 22 2013 Rahul Sundaram <sundaram(a)fedoraproject.org> - 2.77-3
- use hardened build macro and enable fPIC for Qt build. resolves rhbz#955268
* Tue Apr 2 2013 Rahul Sundaram <sundaram(a)fedoraproject.org> - 2.77-2
- fix use of systemd macros to apply to daemon subpackage only
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #955268 - transmission package should be built with PIE flags
https://bugzilla.redhat.com/show_bug.cgi?id=955268
--------------------------------------------------------------------------------
================================================================================
wesnoth-1.10.6-3.fc19 (FEDORA-2013-6688)
Turn-based strategy game with a fantasy theme
--------------------------------------------------------------------------------
Update Information:
Add PIE to build.
Crash fix.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Jon Ciesla <limburgher(a)gmail.com> - 1.10.6-3
- Add PIE, BZ 955196.
* Wed Apr 24 2013 Jon Ciesla <limburgher(a)gmail.com> - 1.10.6-2
- Fix for crash, BZ 953327.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #955196 - wesnoth package should be built with PIE flags
https://bugzilla.redhat.com/show_bug.cgi?id=955196
[ 2 ] Bug #953327 - Wesnoth crashes on startup
https://bugzilla.redhat.com/show_bug.cgi?id=953327
--------------------------------------------------------------------------------
================================================================================
wpa_supplicant-1.1-1.fc19 (FEDORA-2013-6687)
WPA/WPA2/IEEE 802.1X Supplicant
--------------------------------------------------------------------------------
Update Information:
This update upgrades to the latest upstream 1.1 stable version, and makes roaming due to
signal strength less aggressive, which enhances connection stability in large wifi
deployments.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 1 2013 Dan Williams <dcbw(a)redhat.com> - 1:1.1-1
- Update to 1.1
- Be less aggressive when roaming due to signal strength changes
--------------------------------------------------------------------------------
================================================================================
xorg-x11-drv-synaptics-1.7.0-2.fc19 (FEDORA-2013-6689)
Xorg X11 Synaptics touchpad input driver
--------------------------------------------------------------------------------
Update Information:
Fix stack corruption for apple magic trackpads
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Peter Hutterer <peter.hutterer(a)redhat.com> 1.7.0-2
- Fix stack smash on magic trackpad (#952221)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #952221 - Apple Bluetooth "Magic" Trackpad - two-finger click kills
kde session
https://bugzilla.redhat.com/show_bug.cgi?id=952221
--------------------------------------------------------------------------------
================================================================================
zanata-api-2.2.0-6.fc19 (FEDORA-2013-6684)
Zanata API modules
--------------------------------------------------------------------------------
Update Information:
Zanata API modules. Shared between client and server.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #924513 - Review Request: zanata-api - Zanata API modules
https://bugzilla.redhat.com/show_bug.cgi?id=924513
--------------------------------------------------------------------------------