The following Fedora 19 Security updates need testing:
Age URL
217
https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glanc...
30
https://admin.fedoraproject.org/updates/FEDORA-2014-5896/nrpe-2.15-2.fc19
25
https://admin.fedoraproject.org/updates/FEDORA-2014-6046/cifs-utils-6.3-2...
21
https://admin.fedoraproject.org/updates/FEDORA-2014-5759/cups-filters-1.0...
19
https://admin.fedoraproject.org/updates/FEDORA-2014-6255/smb4k-1.1.2-1.fc19
19
https://admin.fedoraproject.org/updates/FEDORA-2014-6233/dpkg-1.16.14-1.fc19
18
https://admin.fedoraproject.org/updates/FEDORA-2014-6331/dovecot-2.2.13-1...
10
https://admin.fedoraproject.org/updates/FEDORA-2014-6553/chicken-4.8.0.6-...
10
https://admin.fedoraproject.org/updates/FEDORA-2014-6569/openssh-6.2p2-8....
8
https://admin.fedoraproject.org/updates/FEDORA-2014-6594/libtiff-4.0.3-10...
8
https://admin.fedoraproject.org/updates/FEDORA-2014-6597/drupal7-views-3....
7
https://admin.fedoraproject.org/updates/FEDORA-2014-6645/libgadu-1.12.0-0...
5
https://admin.fedoraproject.org/updates/FEDORA-2014-6717/libpng-1.5.13-3....
5
https://admin.fedoraproject.org/updates/FEDORA-2014-6716/readline-6.2-7.fc19
3
https://admin.fedoraproject.org/updates/FEDORA-2014-6818/check-mk-1.2.4p2...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6851/mingw-libgcrypt-...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6831/mingw-libtiff-4....
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6858/mingw-icu-50.1.2...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6829/mingw-pixman-0.3...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6859/mingw-libjpeg-tu...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6833/mingw-freetype-2...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6866/mingw-readline-6...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6892/mingw-libpng-1.5...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6921/mingw-curl-7.37....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6896/qt3-3.3.8b-58.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6904/php-doctrine-orm...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6881/gnutls-3.1.20-5....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6919/libtasn1-3.6-1.fc19
0
https://admin.fedoraproject.org/updates/FEDORA-2014-6938/mod_wsgi-3.5-1.fc19
The following Fedora 19 Critical Path updates have yet to be approved:
Age URL
166
https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmark...
92
https://admin.fedoraproject.org/updates/FEDORA-2014-3245/testdisk-6.14-2....
13
https://admin.fedoraproject.org/updates/FEDORA-2014-6462/libxfce4ui-4.10....
10
https://admin.fedoraproject.org/updates/FEDORA-2014-6587/libnl3-3.2.22-3....
10
https://admin.fedoraproject.org/updates/FEDORA-2014-6578/ibus-1.5.7-2.fc19
8
https://admin.fedoraproject.org/updates/FEDORA-2014-6613/langtable-0.0.24...
5
https://admin.fedoraproject.org/updates/FEDORA-2014-6708/webkitgtk3-2.0.4...
5
https://admin.fedoraproject.org/updates/FEDORA-2014-6716/readline-6.2-7.fc19
5
https://admin.fedoraproject.org/updates/FEDORA-2014-6717/libpng-1.5.13-3....
3
https://admin.fedoraproject.org/updates/FEDORA-2014-6814/device-mapper-pe...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6898/openldap-2.4.39-...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6919/libtasn1-3.6-1.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6881/gnutls-3.1.20-5....
The following builds have been pushed to Fedora 19 updates-testing
0ad-0.0.16-2.fc19
0ad-data-0.0.16-1.fc19
cinnamon-settings-daemon-2.0.8-7.fc19
imagefactory-1.1.5-1.fc19
imagefactory-plugins-1.1.5-2.fc19
mod_wsgi-3.5-1.fc19
mozjs24-24.2.0-3.fc19
nodejs-grunt-0.4.4-3.fc19
perl-qpid-0.26-3.fc19
php-Raven-0.8.0-3.20140519git2351d97.fc19
python-qpid-0.26-1.fc19
qpid-dispatch-0.2-3.fc19
xpdf-3.04-1.fc19
Details about builds:
================================================================================
0ad-0.0.16-2.fc19 (FEDORA-2014-6943)
Cross-Platform RTS Game of Ancient Warfare
--------------------------------------------------------------------------------
Update Information:
New Release: 0 A.D. Alpha 16 Patañjali
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 23 2014 Petr Machata <pmachata(a)redhat.com> - 0.0.16-2
- Rebuild for boost 1.55.0
* Sat May 17 2014 Kalev Lember <kalevlember(a)gmail.com> - 0.0.16-1
- Update to latest upstream release
* Mon May 5 2014 pcpa <paulo.cesar.pereira.de.andrade(a)gmail.com> - 0.0.15-5
- Rebuild for newer enet
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1101618 - 0.0.16-2 Latest Alpha Not In Fedora 20
https://bugzilla.redhat.com/show_bug.cgi?id=1101618
[ 2 ] Bug #1100875 - RFE: Please consider an f20 update of mozjs24
https://bugzilla.redhat.com/show_bug.cgi?id=1100875
--------------------------------------------------------------------------------
================================================================================
0ad-data-0.0.16-1.fc19 (FEDORA-2014-6943)
The Data Files for 0 AD
--------------------------------------------------------------------------------
Update Information:
New Release: 0 A.D. Alpha 16 Patañjali
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 17 2014 Kalev Lember <kalevlember(a)gmail.com> - 0.0.16-1
- Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1101618 - 0.0.16-2 Latest Alpha Not In Fedora 20
https://bugzilla.redhat.com/show_bug.cgi?id=1101618
[ 2 ] Bug #1100875 - RFE: Please consider an f20 update of mozjs24
https://bugzilla.redhat.com/show_bug.cgi?id=1100875
--------------------------------------------------------------------------------
================================================================================
cinnamon-settings-daemon-2.0.8-7.fc19 (FEDORA-2014-6924)
The daemon sharing settings from CINNAMON to GTK+/KDE applications
--------------------------------------------------------------------------------
Update Information:
- add fedora support to datetime
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2014 Leigh Scott <leigh123linux(a)googlemail.com> - 2.0.8-7
- add fedora support to datetime
--------------------------------------------------------------------------------
================================================================================
imagefactory-1.1.5-1.fc19 (FEDORA-2014-6945)
System image generation tool
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream 1.1.5 release of imagefactory and the associated imagefactory-plugins
packages
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 6 2014 Ian McLeod <imcleod(a)redhat.com> - 1.1.5-1
- Rebase with upstream
- Improved CLI parameter passing support
* Thu Jan 30 2014 Steve Loranz <sloranz(a)redhat.com> - 1.1.3-1
- Remove references to man directories. Documentation will be hosted @
imgfac.org.
* Thu Aug 15 2013 Ian McLeod <imcleod(a)redhat.com> - 1.1.3
- Rebase with upstream
--------------------------------------------------------------------------------
================================================================================
imagefactory-plugins-1.1.5-2.fc19 (FEDORA-2014-6945)
Default plugins for the Image Factory system image generation tool
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream 1.1.5 release of imagefactory and the associated imagefactory-plugins
packages
--------------------------------------------------------------------------------
================================================================================
mod_wsgi-3.5-1.fc19 (FEDORA-2014-6938)
A WSGI interface for Python web applications in Apache
--------------------------------------------------------------------------------
Update Information:
http://modwsgi.readthedocs.org/en/develop/release-notes/version-3.5.html
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 29 2014 Luke Macken <lmacken(a)redhat.com> - 3.5-1
- Update to 3.5 to fix CVE-2014-0240 (#1101863)
- Remove all of the patches, which have been applied upstream
- Update source URL for new the GitHub upstream
* Wed May 28 2014 Joe Orton <jorton(a)redhat.com> - 3.4-14
- rebuild for Python 3.4
* Mon Apr 28 2014 Matthias Runge <mrunge(a)redhat.com> - 3.4.13
- do not use conflicts between mod_wsgi packages (rhbz#1087943)
* Thu Jan 23 2014 Joe Orton <jorton(a)redhat.com> - 3.4-12
- fix _httpd_mmn expansion in absence of httpd-devel
* Fri Jan 10 2014 Matthias Runge <mrunge(a)redhat.com> - 3.4-11
- added python3 subpackage (thanks to Jakub Dorňák), rhbz#1035876
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.4-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Mon Jul 8 2013 Joe Orton <jorton(a)redhat.com> - 3.4-9
- modernize spec file (thanks to rcollet)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1101863 - CVE-2014-0240 mod_wsgi: possible privilege escalation in setuid()
failure scenarios
https://bugzilla.redhat.com/show_bug.cgi?id=1101863
[ 2 ] Bug #1101873 - CVE-2014-0242 mod_wsgi: information leak
https://bugzilla.redhat.com/show_bug.cgi?id=1101873
--------------------------------------------------------------------------------
================================================================================
mozjs24-24.2.0-3.fc19 (FEDORA-2014-6943)
JavaScript interpreter and libraries
--------------------------------------------------------------------------------
Update Information:
New Release: 0 A.D. Alpha 16 Patañjali
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1101618 - 0.0.16-2 Latest Alpha Not In Fedora 20
https://bugzilla.redhat.com/show_bug.cgi?id=1101618
[ 2 ] Bug #1100875 - RFE: Please consider an f20 update of mozjs24
https://bugzilla.redhat.com/show_bug.cgi?id=1100875
--------------------------------------------------------------------------------
================================================================================
nodejs-grunt-0.4.4-3.fc19 (FEDORA-2014-6930)
Grunt is a JavaScript library used for automation and running tasks
--------------------------------------------------------------------------------
Update Information:
This update resolves "_ is not defined" errors when using templates.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2014 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 0.4.4-3
- apply patch to fix "_ is not defined" errors when using templates
--------------------------------------------------------------------------------
================================================================================
perl-qpid-0.26-3.fc19 (FEDORA-2014-6925)
Perl bindings for the Qpid messaging framework
--------------------------------------------------------------------------------
Update Information:
Updated the requires to use virtual packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.26-3
- Updated the requires to use virtual packages.
* Tue Feb 25 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.26-2
- QPID-5556: Fix top level Perl packages.
* Mon Feb 24 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.26-1
- Rebased on Qpid 0.26.
- Re-enabled building on ARM.
--------------------------------------------------------------------------------
================================================================================
php-Raven-0.8.0-3.20140519git2351d97.fc19 (FEDORA-2014-6947)
A PHP client for Sentry
--------------------------------------------------------------------------------
Update Information:
Updated to latest snapshot (commit 2351d97c862f02343e5465d550df68bd9632cad9; 2014-05-19)
Changes:
https://github.com/getsentry/raven-php/compare/dac9333...2351d97
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> -
0.8.0-3.20140519git2351d97
- Updated to latest snapshot
- Removed max PHPUnit dependency
--------------------------------------------------------------------------------
================================================================================
python-qpid-0.26-1.fc19 (FEDORA-2014-6935)
Python client library for AMQP
--------------------------------------------------------------------------------
Update Information:
Rebased on Qpid 0.26.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.26-1
- Rebased on Qpid 0.26.
--------------------------------------------------------------------------------
================================================================================
qpid-dispatch-0.2-3.fc19 (FEDORA-2014-6928)
Dispatch router for Qpid
--------------------------------------------------------------------------------
Update Information:
Fixed build type to be RelWithDebInfo
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.2-3
- Fixed build type to be RelWithDebInfo
--------------------------------------------------------------------------------
================================================================================
xpdf-3.04-1.fc19 (FEDORA-2014-6927)
A PDF file viewer for the X Window System
--------------------------------------------------------------------------------
Update Information:
Update xpdf to 3.04. Use motif (instead of lesstif) on Fedora.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 29 2014 Tom Callaway <spot(a)fedoraproject.org> - 1:3.04-1
- update to 3.04
- update all patches, langpacks
- use motif instead of lesstif where possible
- fix pdftopng to install (not in poppler right now)
--------------------------------------------------------------------------------