The following Fedora 19 Security updates need testing:
Age URL
388
https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glanc...
200
https://admin.fedoraproject.org/updates/FEDORA-2014-5896/nrpe-2.15-2.fc19
151
https://admin.fedoraproject.org/updates/FEDORA-2014-7496/readline-6.2-8.fc19
69
https://admin.fedoraproject.org/updates/FEDORA-2014-10366/icecream-1.0.1-...
68
https://admin.fedoraproject.org/updates/FEDORA-2014-10640/libreoffice-4.1...
53
https://admin.fedoraproject.org/updates/FEDORA-2014-11544/drupal6-6.33-1....
46
https://admin.fedoraproject.org/updates/FEDORA-2014-12057/krb5-1.11.3-29....
32
https://admin.fedoraproject.org/updates/FEDORA-2014-13047/libxml2-2.9.1-2...
32
https://admin.fedoraproject.org/updates/FEDORA-2014-13018/deluge-1.3.10-1...
22
https://admin.fedoraproject.org/updates/FEDORA-2014-13551/wpa_supplicant-...
17
https://admin.fedoraproject.org/updates/FEDORA-2014-14066/php-sabredav-Sa...
13
https://admin.fedoraproject.org/updates/FEDORA-2014-14266/python-2.7.5-15...
13
https://admin.fedoraproject.org/updates/FEDORA-2014-14237/claws-mail-plug...
11
https://admin.fedoraproject.org/updates/FEDORA-2014-14359/curl-7.29.0-25....
6
https://admin.fedoraproject.org/updates/FEDORA-2014-14738/gnutls-3.1.20-6...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-12407/sddm-0.10.0-2.fc19
4
https://admin.fedoraproject.org/updates/FEDORA-2014-14912/polarssl-1.2.12...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-14980/python-pillow-2...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-15079/mantis-1.2.17-4...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-14874/arm-none-eabi-b...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-14838/avr-binutils-2....
3
https://admin.fedoraproject.org/updates/FEDORA-2014-15124/kwebkitpart-1.3...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-15202/kernel-3.14.24-...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-15248/kde-runtime-4.1...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-15307/python-django14...
The following Fedora 19 Critical Path updates have yet to be approved:
Age URL
336
https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmark...
262
https://admin.fedoraproject.org/updates/FEDORA-2014-3245/testdisk-6.14-2....
13
https://admin.fedoraproject.org/updates/FEDORA-2014-14266/python-2.7.5-15...
11
https://admin.fedoraproject.org/updates/FEDORA-2014-14359/curl-7.29.0-25....
8
https://admin.fedoraproject.org/updates/FEDORA-2014-14516/pcre-8.32-11.fc19
8
https://admin.fedoraproject.org/updates/FEDORA-2014-14505/unzip-6.0-12.fc19
6
https://admin.fedoraproject.org/updates/FEDORA-2014-14738/gnutls-3.1.20-6...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-15022/firefox-33.1-2....
4
https://admin.fedoraproject.org/updates/FEDORA-2014-15032/man-db-2.6.3-9....
4
https://admin.fedoraproject.org/updates/FEDORA-2014-15027/evolution-data-...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-14807/device-mapper-p...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-14846/pciutils-3.3.0-...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-15202/kernel-3.14.24-...
The following builds have been pushed to Fedora 19 updates-testing
gfal2-2.7.8-1.fc19
kde-runtime-4.11.5-3.fc19
labiryntowy-fonts-1.53-2.fc19
perl-Crypt-Rijndael-1.12-1.fc19
perl-Finance-Quote-1.35-1.fc19
php-pecl-xdebug-2.2.6-1.fc19
python-django14-1.4.16-1.fc19
Details about builds:
================================================================================
gfal2-2.7.8-1.fc19 (FEDORA-2014-14534)
Grid file access library 2.0
--------------------------------------------------------------------------------
Update Information:
Update for gfal2 2.7.8 release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 17 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.7.8-1
- Upstream backported fix for protocol honoring on SRM GET and PUT
* Mon Nov 10 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.7.7-1
- Upgraded to upstream release 2.7.7
* Fri Nov 7 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.7.6-1
- New upstream release
* Mon Sep 8 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.6.8-6
- Patch to use lseek64 instead of lseek in the http plugin
* Thu Sep 4 2014 Orion Poplawski <orion(a)cora.nwra.com> - 2.6.8-5
- Rebuild for pugixml 1.4
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.6.8-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kde-runtime-4.11.5-3.fc19 (FEDORA-2014-15248)
KDE Runtime
--------------------------------------------------------------------------------
Update Information:
New security fix release, insufficient Input Validation By IO Slaves, see also
https://www.kde.org/info/security/advisory-20141113-1.txt
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 17 2014 Than Ngo <than(a)redhat.com> - 4.11.5-3
- fix bz#1164609, CVE-2014-8600 Insufficient Input Validation By IO Slaves
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1164293 - CVE-2014-8600 kwebkitpart, kde-runtime: Insufficient Input
Validation By IO Slaves and Webkit Part
https://bugzilla.redhat.com/show_bug.cgi?id=1164293
--------------------------------------------------------------------------------
================================================================================
labiryntowy-fonts-1.53-2.fc19 (FEDORA-2014-15250)
Artificial font consisting of vertical and horizontal bars
--------------------------------------------------------------------------------
Update Information:
Add font licence file, delete info.
Initial packaging.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1162148 - Review Request: labiryntowy-fonts - Conscript (artifical font)
letters consist of vertical and horizontal bars. No matter their thickness.
https://bugzilla.redhat.com/show_bug.cgi?id=1162148
--------------------------------------------------------------------------------
================================================================================
perl-Crypt-Rijndael-1.12-1.fc19 (FEDORA-2014-15311)
Crypt::CBC compliant Rijndael encryption module
--------------------------------------------------------------------------------
Update Information:
Updated to 1.12
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Matias Kreder <mkreder(a)gmail.com> - 1.12-1
- Updated to 1.12
* Thu Aug 28 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.11-7
- Perl 5.20 rebuild
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.11-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.11-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.11-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Sun Jul 21 2013 Petr Pisar <ppisar(a)redhat.com> - 1.11-3
- Perl 5.18 rebuild
--------------------------------------------------------------------------------
================================================================================
perl-Finance-Quote-1.35-1.fc19 (FEDORA-2014-15298)
A Perl module that retrieves stock and mutual fund quotes
--------------------------------------------------------------------------------
Update Information:
This update, to the current upstream release, includes some fixes for existing data
sources and a number of new data sources.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 14 2014 Paul Howarth <paul(a)city-fan.org> - 1.35-1
- Update to 1.35
- Clean up and modernize spec somewhat (can't build for EL < 7 as the module
requires Mozilla::CA)
* Fri Aug 29 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.20-4
- Perl 5.20 rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.20-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-pecl-xdebug-2.2.6-1.fc19 (FEDORA-2014-15275)
PECL package for debugging PHP scripts
--------------------------------------------------------------------------------
Update Information:
Fri, Nov 14, 2014 - xdebug 2.2.6
Fixed bugs:
* Fixed bug #1048: Can not get $GLOBAL variable by property_value on function context.
* Fixed bug #1073 and #1075: Segmentation fault with internal functions calling internal
functions.
* Fixed bug #1085: Fixed the tracefile analyser as the format version had been bumbed.
* Fixed memory leaks
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Remi Collet <remi(a)fedoraproject.org> - 2.2.6-1
- Update to 2.2.6 (stable)
--------------------------------------------------------------------------------
================================================================================
python-django14-1.4.16-1.fc19 (FEDORA-2014-15307)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
Update to latest stable release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 17 2014 Matthias Runge <mrunge(a)redhat.com> - 1.4.16-1
- update to 1.4.16
* Mon Aug 25 2014 Matthias Runge <mrunge(a)redhat.com> - 1.4.14-1
- update to 1.4.14 fixing CVE-2014-0480 CVE-2014-0481 CVE-2014-0482,
CVE-2014-0483
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1129950 - CVE-2014-0480 Django: reverse() can generate URLs pointing to other
hosts, leading to phishing attacks
https://bugzilla.redhat.com/show_bug.cgi?id=1129950
[ 2 ] Bug #1129952 - CVE-2014-0481 Django: file upload denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1129952
[ 3 ] Bug #1129954 - CVE-2014-0482 Django: RemoteUserMiddleware session hijacking
https://bugzilla.redhat.com/show_bug.cgi?id=1129954
[ 4 ] Bug #1129959 - CVE-2014-0483 Django: data leakage via querystring manipulation in
admin
https://bugzilla.redhat.com/show_bug.cgi?id=1129959
--------------------------------------------------------------------------------