The following Fedora 19 Security updates need testing:
Age URL
23
https://admin.fedoraproject.org/updates/FEDORA-2013-4753/microcode_ctl-2....
15
https://admin.fedoraproject.org/updates/FEDORA-2013-5411/php-geshi-1.0.8....
14
https://admin.fedoraproject.org/updates/FEDORA-2013-5530/plexus-archiver-...
10
https://admin.fedoraproject.org/updates/FEDORA-2013-5801/mantis-1.2.15-1....
9
https://admin.fedoraproject.org/updates/FEDORA-2013-5883/xorg-x11-server-...
3
https://admin.fedoraproject.org/updates/FEDORA-2013-6378/tftp-5.2-9.fc19
3
https://admin.fedoraproject.org/updates/FEDORA-2013-6366/arpwatch-2.1a15-...
2
https://admin.fedoraproject.org/updates/FEDORA-2013-6390/owncloud-4.5.10-...
2
https://admin.fedoraproject.org/updates/FEDORA-2013-6481/miredo-1.2.5-4.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2013-6591/telepathy-idle-0...
0
https://admin.fedoraproject.org/updates/FEDORA-2013-6701/python-pip-1.3.1...
The following builds have been pushed to Fedora 19 updates-testing
GConf2-3.2.6-6.fc19
R-abind-1.4.0-6.fc19
R-multcomp-1.2.17-1.fc19
arc-gui-clients-0.4.3-2.fc19
coccinelle-1.0.0-0.rc17.1.fc19
dmidecode-2.12-2.fc19
gdb-7.6-24.fc19
groonga-3.0.3-1.fc19
ibus-m17n-1.3.4-8.fc19
ike-2.2.0-4.fc19
lcms2-2.4-6.fc19
lightdm-1.6.0-4.fc19
lincity-ng-2.0-11.fc19
linpsk-1.1-9.fc19
linsmith-0.99.24-3.fc19
listen-0.6.5-10.fc19
liveusb-creator-3.11.8-2.fc19
lohit-oriya-fonts-2.5.3-3.fc19
perl-Spellunker-0.2.3-1.fc19
python-pip-1.3.1-1.fc19
python-simplevisor-0.8-1.fc19
snapper-0.1.3-1.20130426git35ff4ec.fc19
system-config-language-1.3.5-24.fc19
tomoe-gtk-0.6.0-18.fc19
Details about builds:
================================================================================
GConf2-3.2.6-6.fc19 (FEDORA-2013-6699)
A process-transparent configuration system
--------------------------------------------------------------------------------
Update Information:
This update makes upgrades for some packages work better without the user having to log
out and back in.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Kalev Lember <kalevlember(a)gmail.com> 3.2.6-6
- Update the GConf2-gtk versioned obsoletes
* Wed Apr 17 2013 Ray Strode <rstrode(a)redhat.com> 3.2.6-5
- Make --makefile-install-rule work even in packages that don't use the macros
* Mon Apr 15 2013 Ray Strode <rstrode(a)redhat.com> 3.2.6-4
- Make pkill -HUP -f gconfd-2 work again
- Make --makefile-install-rull less noisy
* Fri Apr 12 2013 Ray Strode <rstrode(a)redhat.com> 3.2.6-3
- Update GConf upgrade macros (Patch from Michael Schwendt)
Resolves: #920615
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #915046 - Newly installed schema values are not visible until gconfd-2 is
restarted
https://bugzilla.redhat.com/show_bug.cgi?id=915046
--------------------------------------------------------------------------------
================================================================================
R-abind-1.4.0-6.fc19 (FEDORA-2013-6708)
Combine multi-dimensional arrays
--------------------------------------------------------------------------------
Update Information:
Drop unnecessary scriptlets.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Tom Callaway <spot(a)fedoraproject.org> - 1.4.0-6
- drop unnecessary scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #956835 - R-make-search-index.sh needs to be updated for version 3
https://bugzilla.redhat.com/show_bug.cgi?id=956835
--------------------------------------------------------------------------------
================================================================================
R-multcomp-1.2.17-1.fc19 (FEDORA-2013-6708)
Simultaneous inference for general linear hypotheses R Package
--------------------------------------------------------------------------------
Update Information:
Drop unnecessary scriptlets.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2013 Tom Callaway <spot(a)fedoraproject.org> - 1.2.17-1
- update to 1.2-17
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #956835 - R-make-search-index.sh needs to be updated for version 3
https://bugzilla.redhat.com/show_bug.cgi?id=956835
--------------------------------------------------------------------------------
================================================================================
arc-gui-clients-0.4.3-2.fc19 (FEDORA-2013-6715)
ARC Graphical Clients
--------------------------------------------------------------------------------
Update Information:
Provides graphical clients to the NorduGrid ARC middleware.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #851267 - Review Request: arc-gui-clients - ARC Graphical Clients
https://bugzilla.redhat.com/show_bug.cgi?id=851267
--------------------------------------------------------------------------------
================================================================================
coccinelle-1.0.0-0.rc17.1.fc19 (FEDORA-2013-6704)
Semantic patching for Linux (spatch)
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.0.0-rc17.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.0-0.rc17.1
- New upstream version 1.0.0-rc17.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #957169 - Junk "left" and "right" outputs from spatch
https://bugzilla.redhat.com/show_bug.cgi?id=957169
--------------------------------------------------------------------------------
================================================================================
dmidecode-2.12-2.fc19 (FEDORA-2013-6709)
Tool to analyse BIOS DMI data
--------------------------------------------------------------------------------
Update Information:
minor code fix
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Anton Arapov <anton(a)redhat.com> - 1:2.12-2
- Fixup, so that it actually read SMBIOS 2.8.0 table.
* Wed Apr 17 2013 Anton Arapov <anton(a)redhat.com> - 1:2.12-1
- Update to upstream 2.12 release.
--------------------------------------------------------------------------------
================================================================================
gdb-7.6-24.fc19 (FEDORA-2013-6698)
A GNU source-level debugger for C, C++, Fortran, Go and other languages
--------------------------------------------------------------------------------
Update Information:
Formal update for the final 7.6 number (+some fixes).
Fix build of man pages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Jan Kratochvil <jan.kratochvil(a)redhat.com> - 7.6-24.fc19
- Rebase to FSF GDB 7.6.
* Wed Apr 24 2013 Jan Kratochvil <jan.kratochvil(a)redhat.com> -
7.5.91.20130423-23.fc19
- Fix man page BuildRequires (for BZ 881892).
* Tue Apr 23 2013 Jan Kratochvil <jan.kratochvil(a)redhat.com> -
7.5.91.20130423-22.fc19
- [spec] Fix virtual bundles after GDB has been branched.
* Tue Apr 23 2013 Jan Kratochvil <jan.kratochvil(a)redhat.com> -
7.5.91.20130423-21.fc19
- Rebase to FSF GDB 7.5.91.20130423 (pre-7.6 snapshot).
* Mon Apr 22 2013 Jan Kratochvil <jan.kratochvil(a)redhat.com> -
7.5.91.20130407-20.fc19
- [SCL] Skip deprecated .gdb_index warning for Red Hat built files (BZ 953585).
* Mon Apr 22 2013 Sergio Durigan Junior <sergiodj(a)redhat.com> -
7.5.91.20130407-19.fc19
- [RHEL-6] Regression test for RH BZ 947564.
--------------------------------------------------------------------------------
================================================================================
groonga-3.0.3-1.fc19 (FEDORA-2013-6706)
An Embeddable Fulltext Search Engine
--------------------------------------------------------------------------------
Update Information:
Update to 3.0.3. See changelog at
http://groonga.org/docs/news.html#release-3-0-3-2013-04-29
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 29 2013 HAYASHI Kentaro <hayashi(a)clear-code.com> - 3.0.3-1
- new upstream release.
- enable the PIE compiler flags.
--------------------------------------------------------------------------------
================================================================================
ibus-m17n-1.3.4-8.fc19 (FEDORA-2013-6705)
The M17N engine for IBus platform
--------------------------------------------------------------------------------
Update Information:
update to the latest upstream master; remove unnecessary patches and drop osk feature
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Daiki Ueno <deno(a)redhat.com> - 1.3.4-8
- Update ibus-m17n-HEAD.patch to the latest upstream master
- Remove unnecessary and not upstreamable patches
- Use gtk3 always
- Fix bug 912592 - ibus-m17n should use default keyboard in most cases
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #912592 - ibus-m17n should use default keyboard in most cases
https://bugzilla.redhat.com/show_bug.cgi?id=912592
--------------------------------------------------------------------------------
================================================================================
ike-2.2.0-4.fc19 (FEDORA-2013-6703)
Shrew Soft VPN Client For Linux
--------------------------------------------------------------------------------
Update Information:
update to latest upstream version (2.2.0)
fix systemd .service file.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Marcel Wysocki <maci(a)satgnu.net> - 2.2.0-4
- fix bug that occurs when no pid is given at the command line
* Wed Apr 24 2013 root - 2.2.0-3
- fix logrotate script
* Wed Apr 24 2013 Marcel Wysocki <maci(a)satgnu.net> - 2.2.0-2
- fix .service file
* Wed Apr 24 2013 Marcel Wysocki <maci(a)satgnu.net> - 2.2.0-1
- Update to 2.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #904782 - iked service dies immediately after starting
https://bugzilla.redhat.com/show_bug.cgi?id=904782
--------------------------------------------------------------------------------
================================================================================
lcms2-2.4-6.fc19 (FEDORA-2013-6712)
Color Management Engine
--------------------------------------------------------------------------------
Update Information:
This update fixes a threading issue that could lead to e.g. a crash in ghostscript.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Tim Waugh <twaugh(a)redhat.com> - 2.4-6
- Applied upstream fixes for threading (bug #951984).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #951984 - [abrt] ghostscript-9.07-2.fc19: gs_lcms2_malloc: Process /usr/bin/gs
was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=951984
--------------------------------------------------------------------------------
================================================================================
lightdm-1.6.0-4.fc19 (FEDORA-2013-6713)
Lightweight Display Manager
--------------------------------------------------------------------------------
Update Information:
Revert PIE-enabled build that crashes-n-burns
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Rex Dieter <rdieter(a)fedoraproject.org> 1.6.0-4
- revert building PIE to avoid crashes (#956868)
* Thu Apr 25 2013 Rex Dieter <rdieter(a)fedoraproject.org> 1.6.0-3
- lightdm package should be built with PIE flags (#955147)
- apply systemd patch unconditionally
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #956868 - [abrt] lightdm-1.6.0-3.fc19: config_get_boolean: Process
/usr/sbin/lightdm was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=956868
--------------------------------------------------------------------------------
================================================================================
lincity-ng-2.0-11.fc19 (FEDORA-2013-6707)
City Simulation Game
--------------------------------------------------------------------------------
Update Information:
Drop desktop vendor tag.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Jon Ciesla <limburgher(a)gmail.com> - 2.0-11
- Drop desktop vendor tag.
--------------------------------------------------------------------------------
================================================================================
linpsk-1.1-9.fc19 (FEDORA-2013-6714)
Psk31 and RTTY program for Linux
--------------------------------------------------------------------------------
Update Information:
Drop desktop vendor tag.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Jon Ciesla <limburgher(a)gmail.com> - 1.1-9
- Drop desktop vendor tag.
--------------------------------------------------------------------------------
================================================================================
linsmith-0.99.24-3.fc19 (FEDORA-2013-6702)
A Smith charting program
--------------------------------------------------------------------------------
Update Information:
Drop desktop vendor tag.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Jon Ciesla <limburgher(a)gmail.com> - 0.99.24-3
- Drop desktop vendor tag.
* Fri Apr 19 2013 Shakthi Kannan <shakthimaan [AT] fedoraproject dot org> -
0.99.24-2
- Use autoreconf
--------------------------------------------------------------------------------
================================================================================
listen-0.6.5-10.fc19 (FEDORA-2013-6711)
A music manager and player for GNOME
--------------------------------------------------------------------------------
Update Information:
Drop desktop vendor tag.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Jon Ciesla <limburgher(a)gmail.com> - 0.6.5-10
- Drop desktop vendor tag.
--------------------------------------------------------------------------------
================================================================================
liveusb-creator-3.11.8-2.fc19 (FEDORA-2013-6695)
A liveusb creator
--------------------------------------------------------------------------------
Update Information:
Drop desktop vendor tag.
- Get persistent overlays working with F18
- Handle devices without any free space
- Fix another bug with non-ascii device labels
- Handle integers in LiveUSBDialog.status
- Don't display unnecessary warnings
- Handle non-ascii mount paths
- Limit the overlay size to 3999MB for FAT32
- More bugfixes to the maximum overlay size code
- Change isolinux to syslinux in the grub.cfg
- Always refer to the label LIVE instead of the device UUID
- /EFI/boot/grub.conf has been renamed to /EFI/BOOT/grub.cfg
- Apply a patch from ivanromanov to fix non-ascii file names
- Enable the close button
- Add f18 to our hardcoded release list
- Add a button for refreshing the list of releases
- Don't call sys.exit in our __init__
- Modernize our installer style and translate it appropriately
- Get our translations working properly under Windows.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Jon Ciesla <limburgher(a)gmail.com> - 3.11.8-2
- Drop desktop vendor tag.
* Mon Apr 22 2013 Luke Macken <lmacken(a)redhat.com> - 3.11.8-1
- Update to 3.11.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #842878 - Remove sys.exit(1) from liveusb/__init__.py
https://bugzilla.redhat.com/show_bug.cgi?id=842878
[ 2 ] Bug #810112 - liveusb-creator-written LiveCDs are not UEFI bootable
https://bugzilla.redhat.com/show_bug.cgi?id=810112
[ 3 ] Bug #820809 - [abrt] liveusb-creator-3.11.6-3.fc17: gui.py:431:status:TypeError:
QTextEdit.append(QString): argument 1 has unexpected type 'int'
https://bugzilla.redhat.com/show_bug.cgi?id=820809
[ 4 ] Bug #863064 - [abrt] liveusb-creator-3.11.7-1.fc17:
gui.py:372:on_driveBox_currentIndexChanged:UnicodeEncodeError: 'ascii' codec
can't encode character u'\xfd' in position 14: ordinal not in range(128)
https://bugzilla.redhat.com/show_bug.cgi?id=863064
[ 5 ] Bug #908120 - Persistent storage on USB flash not mounted, changes don't
persist
https://bugzilla.redhat.com/show_bug.cgi?id=908120
--------------------------------------------------------------------------------
================================================================================
lohit-oriya-fonts-2.5.3-3.fc19 (FEDORA-2013-6700)
Free Oriya Font
--------------------------------------------------------------------------------
Update Information:
This is an update with resolving Oriya script rendering problems with Harfbuzz.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Pravin Satpute <psatpute(a)redhat.com> - 2.5.3-3
- Resolved #923215: UTRRS 123 GSub combination and other ligature
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #923215 - Odia rendering is broken while editing through firefox browser.
https://bugzilla.redhat.com/show_bug.cgi?id=923215
--------------------------------------------------------------------------------
================================================================================
perl-Spellunker-0.2.3-1.fc19 (FEDORA-2013-6716)
Pure perl spelling checker implementation
--------------------------------------------------------------------------------
Update Information:
Pure perl spelling checker implementation, also usable as a library.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #956297 - Review Request: perl-Spellunker - Pure perl spelling checker
implementation
https://bugzilla.redhat.com/show_bug.cgi?id=956297
--------------------------------------------------------------------------------
================================================================================
python-pip-1.3.1-1.fc19 (FEDORA-2013-6701)
Pip installs packages. Python3 packages. An easy_install replacement
--------------------------------------------------------------------------------
Update Information:
1.3.1, fix for CVE-2013-1888, insecure tempdir usage.
Update of python-pip to 1.1 from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Jon Ciesla <limburgher(a)gmail.com> - 1.3.1-1
- Update to 1.3.1, fix for CVE-2013-1888.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #923975 - python-pip: insecure temporary directory usage [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=923975
--------------------------------------------------------------------------------
================================================================================
python-simplevisor-0.8-1.fc19 (FEDORA-2013-6710)
Python simple daemons supervisor
--------------------------------------------------------------------------------
Update Information:
Updating to upstream version 0.8.
Updating to latest upstream 0.7.
Updating to latest upstream 0.7.
Updating to latest upstream 0.7.
Updating to latest upstream 0.7.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Massimo Paladin <Massimo.Paladin(a)gmail.com> - 0.8-1
- Updating to upstream 0.8.
--------------------------------------------------------------------------------
================================================================================
snapper-0.1.3-1.20130426git35ff4ec.fc19 (FEDORA-2013-5999)
Tool for filesystem snapshot management
--------------------------------------------------------------------------------
Update Information:
Basically, this update adds support for extended attributes. See changelog
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Ondrej Kozina <okozina(a)redhat.com> - 0.1.3-1.20130426git35ff4ec
- fixed possible security vulnerability in extended attributes handling
* Thu Apr 18 2013 Ondrej Kozina <okozina(a)redhat.com> - 0.1.3-1.20130418git7ca81a2
- updatet to latest upstream version
- add support to compare extended attributes ('xadiff' command)
- add support to revert modificiations in file's extended attributes
- patch: avoid useless build dependency on libattr-devel
--------------------------------------------------------------------------------
================================================================================
system-config-language-1.3.5-24.fc19 (FEDORA-2013-6696)
A graphical interface for modifying the system language
--------------------------------------------------------------------------------
Update Information:
Add Interlingua to the local-list file and include Interlingua localization to the
package
Added kyrgyz language in s-c-l
This is an update with improved string for zh_TW.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2013 Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-24
- Resolves:rh#956784 - Add Interlingua to the local-list file and include Interlingua
localization to the package
* Mon Apr 22 2013 Pravin Satpute <psatpute(a)redhat.com> - 1.3.5-23
- Resolves: rh#638650 reverting changes for zh_TW
* Mon Apr 22 2013 Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-22
- Resolves:rh#954124 - No kyrgyz language in s-c-l
* Mon Apr 8 2013 Pravin Satpute <psatpute(a)redhat.com> - 1.3.5-21
- Improved patch 638650 as per comments by reporter
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #956784 - Add Interlingua to the local-list file and include Interlingua
localization to the package
https://bugzilla.redhat.com/show_bug.cgi?id=956784
[ 2 ] Bug #954124 - No kyrgyz language in mate
https://bugzilla.redhat.com/show_bug.cgi?id=954124
[ 3 ] Bug #638650 - better localized name for zh_TW in locale-list
https://bugzilla.redhat.com/show_bug.cgi?id=638650
--------------------------------------------------------------------------------
================================================================================
tomoe-gtk-0.6.0-18.fc19 (FEDORA-2013-6697)
Gtk library for tomoe for Japanese and Chinese handwritten input
--------------------------------------------------------------------------------
Update Information:
Fixed Bug 926646 - tomoe-gtk: Does not support aarch64 in f19 and rawhide
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 25 2013 Ding-Yi Chen - 0.6.0-18
- Fixed Bug 926646 - tomoe-gtk: Does not support aarch64 in f19 and rawhide
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #926646 - tomoe-gtk: Does not support aarch64 in f19 and rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=926646
--------------------------------------------------------------------------------