The following Fedora 19 Security updates need testing:
Age URL
84
https://admin.fedoraproject.org/updates/FEDORA-2013-19262/quassel-0.9.1-1...
77
https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glanc...
22
https://admin.fedoraproject.org/updates/FEDORA-2013-23592/rubygem-actionp...
22
https://admin.fedoraproject.org/updates/FEDORA-2013-23622/ibus-chewing-1....
14
https://admin.fedoraproject.org/updates/FEDORA-2013-24023/varnish-3.0.5-1...
6
https://admin.fedoraproject.org/updates/FEDORA-2014-0204/mingw-poppler-0....
6
https://admin.fedoraproject.org/updates/FEDORA-2014-0168/x2goserver-4.0.1...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-0398/cantata-1.2.2-1....
2
https://admin.fedoraproject.org/updates/FEDORA-2014-0467/libXfont-1.4.5-5...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-0508/drupal7-entity-1...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-0574/flite-1.3-20.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2014-0567/strongswan-5.1.1...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-0094/rubygem-will_pag...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-0621/graphviz-2.30.1-...
The following Fedora 19 Critical Path updates have yet to be approved:
Age URL
51
https://admin.fedoraproject.org/updates/FEDORA-2013-21772/unzip-6.0-11.fc19
25
https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmark...
13
https://admin.fedoraproject.org/updates/FEDORA-2013-24072/tracker-0.16.2-...
8
https://admin.fedoraproject.org/updates/FEDORA-2014-0051/libldb-1.1.16-4....
7
https://admin.fedoraproject.org/updates/FEDORA-2014-0158/perl-Encode-2.54...
5
https://admin.fedoraproject.org/updates/FEDORA-2014-0250/qtwebkit-2.3.3-3...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-0452/popt-1.16-2.fc19
2
https://admin.fedoraproject.org/updates/FEDORA-2014-0498/livecd-tools-19....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-0525/ca-certificates-...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-0517/pcre-8.32-8.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2014-0437/satyr-0.13-1.fc1...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-0630/control-center-3...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-0636/selinux-policy-3...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-0639/rtkit-0.11-8.fc19
The following builds have been pushed to Fedora 19 updates-testing
accountsservice-0.6.35-3.fc19
audacious-3.4.3-1.fc19
audacious-plugins-3.4.3-1.fc19
cajun-jsonapi-2.0.3-1.fc19
cmake-fedora-1.2.3-1.fc19
control-center-3.8.5-2.fc19
docker-io-0.7.5-1.fc19
docker-registry-0.6.3-1.fc19
drupal7-cck-3.0-0.1.alpha3.fc19
drupal7-crumbs-2.0-0.6.beta13.fc19
drupal7-date-2.7-1.fc19
drupal7-language_cookie-1.8-1.fc19
eiciel-0.9.8.2-1.fc19
gfal2-2.4.8-1.fc19
ghc-pcap-0.4.5.2-1.fc19
gnome-disk-utility-3.8.2-2.fc19
graphviz-2.30.1-12.fc19
kde-runtime-4.11.5-2.fc19
libssh-0.6.0-1.fc19
linkchecker-8.6-2.fc19
maildrop-2.7.1-1.fc19
mirall-1.5.0-2.fc19
nfs-utils-1.2.8-6.2.fc19
octave-parallel-2.1.1-3.fc19
opendnssec-1.4.3-1.fc19
openerp7-7.0-4.20140109_002644.fc19
openscap-1.0.2-1.fc19
openstack-java-sdk-3.0.2-1.fc19
owncloud-csync-0.91.4-1.fc19
python-celery-3.0.15-5.fc19
python-fedmsg-meta-fedora-infrastructure-0.2.5-1.fc19
python-libturpial-1.1.16-1.fc19
qbittorrent-3.1.4-4.fc19
qtkeychain-0.1.0-4.20130805git.fc19
rtkit-0.11-8.fc19
ruby-libvirt-0.5.2-2.fc19
rubygem-will_paginate-3.0.4-5.fc19
scap-workbench-0.8.5-1.fc19
scl-utils-20140108-1.fc19
selinux-policy-3.12.1-74.17.fc19
subsurface-4.0.2-1.fc19
system-config-date-1.10.7-1.fc19
Details about builds:
================================================================================
accountsservice-0.6.35-3.fc19 (FEDORA-2014-0630)
D-Bus interfaces for querying and manipulating user account information
--------------------------------------------------------------------------------
Update Information:
This update improves the user deletion dialog in gnome-control-center to be more thorough
when checking if the user is still logged in.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Matthias Clasen <mclasen(a)redhat.com> - 0.6.35-3
- Consistently call userdel with -f
* Tue Oct 22 2013 Ray Strode <rstrode(a)redhat.com> 0.6.35-1
- Update to 0.6.35
- Rip out extension interface
--------------------------------------------------------------------------------
================================================================================
audacious-3.4.3-1.fc19 (FEDORA-2014-0671)
Advanced audio player
--------------------------------------------------------------------------------
Update Information:
Update from 3.4.2 to 3.4.3 for additional bug-fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 8 2014 Michael Schwendt <mschwendt(a)fedoraproject.org> - 3.4.3-1
- Update to 3.4.3 (a few bug-fixes and translation updates).
--------------------------------------------------------------------------------
================================================================================
audacious-plugins-3.4.3-1.fc19 (FEDORA-2014-0671)
Plugins for the Audacious audio player
--------------------------------------------------------------------------------
Update Information:
Update from 3.4.2 to 3.4.3 for additional bug-fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 8 2014 Michael Schwendt <mschwendt(a)fedoraproject.org> - 3.4.3-1
- Merge post-3.4.3 patch for fixing a font rendering problem in the
skinned ui.
- Update to 3.4.3 (a few bug-fixes and translation updates). An update
of 3rd party plugin packages to 3.4.3 is needed to get all fixes.
* Mon Dec 16 2013 Adrian Reber <adrian(a)lisas.de> - 3.4.2-2
- Rebuilt for libcdio-0.92
--------------------------------------------------------------------------------
================================================================================
cajun-jsonapi-2.0.3-1.fc19 (FEDORA-2014-0590)
A cross-platform C++ header library for JSON
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
================================================================================
cmake-fedora-1.2.3-1.fc19 (FEDORA-2014-0654)
CMake helper modules for fedora developers
--------------------------------------------------------------------------------
Update Information:
- Resolves Bug 1040333 - RFE: Suiport .gitignore file as
source of CPACK_SOURCE_IGNORE_FILES
- Resolves Bug 1046213 - RFE: RPM ChangeLog should be generated by
newest build from koji
- Enhancement:
+ ChangeLog.prev is no longer required.
+ RPM-ChangeLog.prev is provide by koji now.
+ cmake-fedora-koji:
- new subcommand: newest-build and newest-changelog.
+ cmake-fedora-changelog: new script.
+ New targets:
- tag_push: Push to git.
+ ManageFile:
- Add absolute file support
- MANAGE_FILE_INSTALL: Add TARGETS support.
- MANAGE_FILE_INSTALL: Add RENAME support.
- GIT_GLOB_TO_CMAKE_REGEX: Convert git glob to cmake regex
+ ManageArchive:
- PACK_SOURCE_CPACK: Pack with CPack
- PACK_SOURCE_ARCHIVE: Now can specify OUTPUT_FILE.
- SOURCE_ARCHIVE_CONTENTS_ADD: Add file to source archive.
- SOURCE_ARCHIVE_CONTENTS_ADD_NO_CHECK:
Add file to source archive without checking.
+ ManageDependency: Manage dependencies.
+ ManageRPM:
- PACK_RPM: New options: SPEC_IN and SPEC.
- RPM_SPEC_STRING_ADD: Add a string to SPEC string.
- RPM_SPEC_STRING_ADD_DIRECTIVE: Add a directive to SPEC string.
- RPM_SPEC_STRING_ADD_TAG: Add a string to SPEC string.
+ ManageString:
- STRING_APPEND: Append a string to a variable.
- STRING_PADDING: Padding the string to specified length
- STRING_PREPEND: Prepend a string to a variable.
+ ManageTranslation:
- MANAGE_GETTEXT:
+ Can specify MSGFMT_OPTIONS and MSGMERGE_OPTIONS
+ Add gettext-devel to BUILD_REQUIRES.
+ ManageVariable:
- VARIABLE_TO_ARGN: Merge the variable and options to
the form of ARGN.
+ Cached variables:
- RPM_SPEC_CMAKE_FLAG: cmake flags in rpm build.
- RPM_SPEC_MAKE_FLAG: make flags in rpm build.
- Changed Modules:
+ ManageArchive:
- PACK_SOURCE_ARCHIVE: Can now pass either
empty, outputDir, or source File.
+ ManageGConf2: Fixed.
+ ManageString: STRING_SPLIT: New Option: ALLOW_EMPTY
+ ManageRPM
- Add support of pre, post, and preun
+ ManageVariable:
- VARIABLE_PARSE_ARGN can now handle multiple-appeared options.
- Changed:
+ CMake policy no longer enforced by default.
+ ManageString: STRING_SPLIT is changed from macro to function,
so no need to put excessive backslashes.
- Removed:
+ Target after_release_commit and related are no longer required
and thus removed.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 9 2014 Ding-Yi Chen <dchen at redhat.com> - 1.2.3-1
- Resolves Bug 1040333 - RFE: Suiport .gitignore file as
source of CPACK_SOURCE_IGNORE_FILES
- Resolves Bug 1046213 - RFE: RPM ChangeLog should be generated by
newest build from koji
- Enhancement:
+ ChangeLog.prev is no longer required.
+ RPM-ChangeLog.prev is provide by koji now.
+ cmake-fedora-koji:
- new subcommand: newest-build and newest-changelog.
+ cmake-fedora-changelog: new script.
+ New targets:
- tag_push: Push to git.
+ ManageFile:
- Add absolute file support
- MANAGE_FILE_INSTALL: Add TARGETS support.
- MANAGE_FILE_INSTALL: Add RENAME support.
- GIT_GLOB_TO_CMAKE_REGEX: Convert git glob to cmake regex
+ ManageArchive:
- PACK_SOURCE_CPACK: Pack with CPack
- PACK_SOURCE_ARCHIVE: Now can specify OUTPUT_FILE.
- SOURCE_ARCHIVE_CONTENTS_ADD: Add file to source archive.
- SOURCE_ARCHIVE_CONTENTS_ADD_NO_CHECK:
Add file to source archive without checking.
+ ManageDependency: Manage dependencies.
+ ManageRPM:
- PACK_RPM: New options: SPEC_IN and SPEC.
- RPM_SPEC_STRING_ADD: Add a string to SPEC string.
- RPM_SPEC_STRING_ADD_DIRECTIVE: Add a directive to SPEC string.
- RPM_SPEC_STRING_ADD_TAG: Add a string to SPEC string.
+ ManageString:
- STRING_APPEND: Append a string to a variable.
- STRING_PADDING: Padding the string to specified length
- STRING_PREPEND: Prepend a string to a variable.
+ ManageTranslation:
- MANAGE_GETTEXT:
+ Can specify MSGFMT_OPTIONS and MSGMERGE_OPTIONS
+ Add gettext-devel to BUILD_REQUIRES.
+ ManageVariable:
- VARIABLE_TO_ARGN: Merge the variable and options to
the form of ARGN.
+ Cached variables:
- RPM_SPEC_CMAKE_FLAG: cmake flags in rpm build.
- RPM_SPEC_MAKE_FLAG: make flags in rpm build.
- Changed Modules:
+ ManageArchive:
- PACK_SOURCE_ARCHIVE: Can now pass either
empty, outputDir, or source File.
+ ManageGConf2: Fixed.
+ ManageString: STRING_SPLIT: New Option: ALLOW_EMPTY
+ ManageRPM
- Add support of pre, post, and preun
+ ManageVariable:
- VARIABLE_PARSE_ARGN can now handle multiple-appeared options.
- Changed:
+ CMake policy no longer enforced by default.
+ ManageString: STRING_SPLIT is changed from macro to function,
so no need to put excessive backslashes.
- Removed:
+ Target after_release_commit and related are no longer required
and thus removed.
--------------------------------------------------------------------------------
================================================================================
control-center-3.8.5-2.fc19 (FEDORA-2014-0630)
Utilities to configure the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
This update improves the user deletion dialog in gnome-control-center to be more thorough
when checking if the user is still logged in.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Matthias Clsaen <mclasen(a)redhat.com> - 1:3.8.5-2
- Improve the user deletion dialog
--------------------------------------------------------------------------------
================================================================================
docker-io-0.7.5-1.fc19 (FEDORA-2014-0638)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
upstream version bump to 0.7.5
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 9 2014 Lokesh Mandvekar <lsm5(a)redhat.com> - 0.7.5-1
- upstream version bump to 0.7.5
* Thu Jan 9 2014 Lokesh Mandvekar <lsm5(a)redhat.com> - 0.7.4-1
- upstream version bump to 0.7.4 (BZ #1049793)
- udev rules file from upstream contrib
- unit file firewalld not used, description changes
* Mon Jan 6 2014 Lokesh Mandvekar <lsm5(a)redhat.com> - 0.7.3-3
- udev rules typo fixed (BZ 1048775)
* Sat Jan 4 2014 Lokesh Mandvekar <lsm5(a)redhat.com> - 0.7.3-2
- missed commit value in release 1, updated now
- upstream release monitoring (BZ 1048441)
* Sat Jan 4 2014 Lokesh Mandvekar <lsm5(a)redhat.com> - 0.7.3-1
- upstream release bump to v0.7.3
--------------------------------------------------------------------------------
================================================================================
docker-registry-0.6.3-1.fc19 (FEDORA-2014-0651)
Registry server for Docker
--------------------------------------------------------------------------------
Update Information:
Upstream release 0.6.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 7 2014 Marek Goldmann <mgoldman(a)redhat.com> - 0.6.3-1
- Upstream release 0.6.3
- Added python-backports-lzma and python-rsa to R
- Removed configuration file path patch, it's in upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1049189 - docker-registry: Update to 0.6.3
https://bugzilla.redhat.com/show_bug.cgi?id=1049189
--------------------------------------------------------------------------------
================================================================================
drupal7-cck-3.0-0.1.alpha3.fc19 (FEDORA-2014-0674)
Miscellaneous field functions not handled by core
--------------------------------------------------------------------------------
Update Information:
Updated to 3.0-alpha3
Release notes:
* 3.0-alpha3:
https://drupal.org/node/2155617
* 3.0-alpha2:
https://drupal.org/node/2154759
* 3.0-alpha1:
https://drupal.org/node/2154721
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 9 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 3.0-0.1.alpha3
- Updated to 3.0-alpha3 (release notes:
https://drupal.org/node/2155617) (BZ #1043059)
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2-0.5.dev
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1043059 - drupal7-cck-3.x-dev is available
https://bugzilla.redhat.com/show_bug.cgi?id=1043059
--------------------------------------------------------------------------------
================================================================================
drupal7-crumbs-2.0-0.6.beta13.fc19 (FEDORA-2014-0655)
The ultimate breadcrumbs module
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 2.0-beta13 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/2167279
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Peter Borsa <peter.borsa(a)gmail.com> 2.0-0.6.beta13
- Update to upstream 2.0-beta13 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/2167279
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1047189 - drupal7-crumbs-2.0-beta13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1047189
--------------------------------------------------------------------------------
================================================================================
drupal7-date-2.7-1.fc19 (FEDORA-2014-0608)
This package contains both the Date module and a Date API module
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 2.7 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/2161141
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Peter Borsa <peter.borsa(a)gmail.com> 2.7-1
- Update to upstream 2.7 release for bug fixes
- Upstream changelog for this release is available at
https://drupal.org/node/2161141
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1045893 - drupal7-date-2.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1045893
--------------------------------------------------------------------------------
================================================================================
drupal7-language_cookie-1.8-1.fc19 (FEDORA-2014-0672)
Allows usage of cookies to remember the user's last language
--------------------------------------------------------------------------------
Update Information:
Updated to 1.8
* Release notes:
https://drupal.org/node/2150363
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 9 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> 1.8-1
- Updated to 1.8 (release notes:
https://drupal.org/node/2150363) (BZ #1039692)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1039692 - drupal7-language_cookie-1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1039692
--------------------------------------------------------------------------------
================================================================================
eiciel-0.9.8.2-1.fc19 (FEDORA-2014-0599)
Graphical editor for ACLs and xattr
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.8.2 maintenance release.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 29 2013 Michael Schwendt <mschwendt(a)fedoraproject.org> - 0.9.8.2-1
- Update to 0.9.8.2.
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.9.8.1-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gfal2-2.4.8-1.fc19 (FEDORA-2014-0647)
Grid file access library 2.0
--------------------------------------------------------------------------------
Update Information:
Update to release 2.4.8 of GFAL 2.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 5 2013 Alejandro Alvarez <aalvarez at cern.ch> - 2.4.8-1
- Release 2.4.8 of GFAL2
* Mon Dec 2 2013 Alejandro Alvarez <aalvarez at cern.ch> - 2.4.7-1
- Release 2.4.7 of GFAL2
* Thu Nov 7 2013 Alejandro Alvarez <aalvarez at cern.ch> - 2.4.6-1
- Release 2.4.6 of GFAL 2
* Wed Oct 23 2013 Alejandro Alvarez <aalvarez at cern.ch> - 2.4.5-3
- Release 2.4.5 of GFAL 2
--------------------------------------------------------------------------------
================================================================================
ghc-pcap-0.4.5.2-1.fc19 (FEDORA-2014-0668)
A system-independent interface for user-level packet capture
--------------------------------------------------------------------------------
Update Information:
Initial version of package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1026432 - Review Request: ghc-pcap - Haskell bindings for libpcap
https://bugzilla.redhat.com/show_bug.cgi?id=1026432
--------------------------------------------------------------------------------
================================================================================
gnome-disk-utility-3.8.2-2.fc19 (FEDORA-2014-0609)
Disks
--------------------------------------------------------------------------------
Update Information:
This update makes formatting usb disks from the nautilus sidebar work again.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Matthias Clasen <mclasen(a)redhat.com> - 3.8.2-2
* Sun Jun 02 2013 Kalev Lember <kalevlember(a)gmail.com> - 3.8.2-1
- Update to 3.8.2
--------------------------------------------------------------------------------
================================================================================
graphviz-2.30.1-12.fc19 (FEDORA-2014-0621)
Graph Visualization Tools
--------------------------------------------------------------------------------
Update Information:
This is an update that fixes CVE-2014-1235 and CVE-2014-1236.
This is an update that fixes overflow in yyerror.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Jaroslav Škarvada <jskarvad(a)redhat.com> - 2.30.1-12
- Prevent possible buffer overflow in yyerror()
Resolves: CVE-2014-1235
- Fix possible buffer overflow problem in chkNum of scanner
Resolves: CVE-2014-1236
* Tue Jan 7 2014 Jaroslav Škarvada <jskarvad(a)redhat.com> - 2.30.1-11
- Fixed overflow in yyerror
Resolves: CVE-2014-0978
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1050871 - CVE-2014-1235 graphviz: buffer overflow in yyerror() due to
improper fix for CVE-2014-0978
https://bugzilla.redhat.com/show_bug.cgi?id=1050871
[ 2 ] Bug #1050872 - CVE-2014-1236 graphviz: buffer overflow vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1050872
[ 3 ] Bug #1049165 - CVE-2014-0978 graphviz: stack-based buffer overflow in yyerror()
https://bugzilla.redhat.com/show_bug.cgi?id=1049165
--------------------------------------------------------------------------------
================================================================================
kde-runtime-4.11.5-2.fc19 (FEDORA-2014-0665)
KDE Runtime
--------------------------------------------------------------------------------
Update Information:
An update of libssh to version 0.6.0, which adds support for the elliptic curve algorithms
ECDSA and ECDH:
http://www.libssh.org/2014/01/08/libssh-0-6-0/
This update also backports kio_sftp support for libssh 0.6's new public key API from
kde-runtime 4.13, enabling ECDSA in kio_sftp:
https://bugs.kde.org/show_bug.cgi?id=327024
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 4.11.5-2
- backport support for libssh 0.6 and ECDSA keys (kde#327024) from master/4.13
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1033370 - no support for ECDSA ssh keys
https://bugzilla.redhat.com/show_bug.cgi?id=1033370
--------------------------------------------------------------------------------
================================================================================
libssh-0.6.0-1.fc19 (FEDORA-2014-0665)
A library implementing the SSH protocol
--------------------------------------------------------------------------------
Update Information:
An update of libssh to version 0.6.0, which adds support for the elliptic curve algorithms
ECDSA and ECDH:
http://www.libssh.org/2014/01/08/libssh-0-6-0/
This update also backports kio_sftp support for libssh 0.6's new public key API from
kde-runtime 4.13, enabling ECDSA in kio_sftp:
https://bugs.kde.org/show_bug.cgi?id=327024
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 8 2014 - Andreas Schneider <asn(a)redhat.com> - 0.6.0-1
- Update to 0.6.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1033370 - no support for ECDSA ssh keys
https://bugzilla.redhat.com/show_bug.cgi?id=1033370
--------------------------------------------------------------------------------
================================================================================
linkchecker-8.6-2.fc19 (FEDORA-2014-0645)
Check HTML documents for broken links
--------------------------------------------------------------------------------
Update Information:
----------------------------------------------------------------
----------MAJOR UPGRADE! BE CAREFUL!----------
----------------------------------------------------------------
Upgrading
=========
Migrating from 8.4 to 8.5
--------------------------
Custom output loggers have been changed.
See doc/web/content/faq.md for an example with custom loggers.
Migrating from 8.0 to 8.1
-------------------------
All loggers have an additional output field "modified".
If these loggers are not configured with specific output parts,
the output format will change.
For example existing SQL tables can be altered with:
alter table linkcheck add (modified varchar(256));
The default User-Agent string used by LinkChecker is now
Mozilla/5.0 (compatible; LinkChecker/8.1; +http://linkchecker.sourceforge.net/)
Migrating from 7.9 to 8.0
-------------------------
Python 2.7.2 or newer is required (Python 3.x is not supported though).
Migrating from 7.6 to 7.7
-------------------------
The deprecated options --check-html-w3 and --check-css-w3
have been removed from the commandline client.
Migrating from 7.3 to 7.4
-------------------------
Python 2.7 or newer is required (Python 3.x is not supported though).
The deprecated options --interactive, --priority and --allow-root
have been removed from the commandline client.
Migrating from 7.0 to 7.1
-------------------------
The FastCGI module lc.fcgi has been removed.
The lc.cgi module can be used instead.
----------------------------------------------------------------
---------CHANGELOG SINCE THE LASTEST VERSION IN FEDORA----------
----------------------------------------------------------------
8.6 "About Time" (released 8.1.2014)
Changes:
- checking: Add "Accept" HTTP header.
Closes: GH bug #395
Fixes:
- installer: Include missing logger classes for Windows and
OSX installer.
Closes: GH bug #448
8.5 "Christmas Vacation" (released 24.12.2013)
Features:
- checking: Make per-host connection limits configurable.
- checking: Avoid DoS in SSL certificate host matcher.
Changes:
- checking: Always use the W3C validator to check HTML or CSS syntax.
- checking: Remove the http-wrong-redirect warning.
- checking: Remove the url-content-duplicate warning.
- checking: Make SSL certificate verification optional and allow
user-specified certificate files.
Closes: GH bug #387
- cmdline: Replace argument parsing. No changes in functionality, only
the help text will be formatted different.
- gui: Check early if help files are not found.
Closes: GH bug #437
- gui: Remember the last "Save result as" selection.
Closes: GH bug #380
Fixes:
- checking: Apache Coyote (the HTTP server of Tomcat) sends the wrong
Content-Type on HEAD requests. Automatically fallback to GET in this
case.
Closes: GH bug #414
- checking: Do not use GET on POST forms.
Closes: GH bug #405
- scripts: Fix argument parsing in linkchecker-nagios
Closes: GH bug #404
- installation: Fix building on OS X systems.
8.4 "Frankenweenie" (released 25.01.2013)
Features:
- checking: Support <link rel="dns-prefetch"> URLs.
- logging: Sending SIGUSR1 signal prints the stack trace of all current
running threads. This makes debugging deadlocks easier.
- gui: Support Drag-and-Drop of local files. If the local file is
a LinkChecker project (.lcp) file it is loaded, else the check
URL is set to the local file URL.
Changes:
- checking: Increase per-host connection limits to speed up checking.
Fixes:
- checking: Fix a crash when closing a Word document after scanning failed.
Closes: GH bug #369
- checking: Catch UnicodeError from idna.encode() fixing an internal error when
trying to connect to certain invalid hostnames.
- checking: Always close HTTP connections without body content.
See also
http://bugs.python.org/issue16298
Closes: GH bug #376
8.3 "Mahna Mahna Killer" (released 6.1.2013)
Features:
- project: The Project moved to Github.
Closes: GH bug #368
Changes:
- logging: Print system arguments (sys.argv) and variable values in
internal error information.
- installation: Install the dns Python module into linkcheck_dns subdirectory to avoid
conflicts with an upstream python-dns installation.
Fixes:
- gui: Fix storing of ignore lines in options.
Closes: SF bug #3587386
8.2 "Belle De Jour" (released 9.11.2012)
Changes:
- checking: Print a warning when passwords are found in the configuration file
and the file is accessible by others.
- checking: Add debug statements for unparseable content types.
Closes: SF bug #3579714
- checking: Turn off caching. This improves memory performance drastically
and it's a very seldom used feature - judging from user feedback over the years
and my own experience.
- checking: Only allow checking of local files when parent URL does not exist or
it's also a file URL.
Fixes:
- checking: Fix anchor checking of cached HTTP URLs.
Closes: SF bug #3577743
- checking: Fix cookie path matching with empty paths.
Closes: SF bug #3578005
- checking: Fix handling of non-ASCII exceptions (regression in 8.1).
Closes: SF bug #3579766
- configuration: Fix configuration directory creation on Windows
systems.
Closes: SF bug #3584837
8.1 "Safety Not Guaranteed" (released 14.10.2012)
Features:
- checking: Allow specification of maximum checking time or maximum
number of checked URLs.
- checking: Send a HTTP Do-Not-Track header.
- checking: Check URL length. Print error on URL longer than 2000 characters,
warning for longer than 255 characters.
- checking: Warn about duplicate URL contents.
- logging: A new XML sitemap logger can be used that implements the protocol
defined at
http://www.sitemaps.org/protocol.php.
Changes:
- doc: Mention 7-zip and Peazip to extract the .tar.xz under Windows.
Closes: SF bug #3564733
- logging: Print download and cache statistics in text output logger.
- logging: Print warning tag in text output logger. Makes warning filtering
more easy.
- logging: Make the last modification time a separate field in logging
output. See doc/upgrading.txt for compatibility changes.
- logging: All sitemap loggers log all valid URLs regardless of the
--warnings or --complete options. This way the sitemaps can be
logged to file without changing the output of URLs in other loggers.
- logging: Ignored warnings are now never logged, even when the URL
has errors.
- checking: Improved robots.txt caching by using finer grained locking.
- checking: Limit number of concurrent connections to FTP and HTTP
servers. This avoids spurious BadStatusLine errors.
Fixes:
- logging: Close logger properly on I/O errors.
Closes: SF bug #3567476
- checking: Fix wrong method name when printing SSL certificate warnings.
- checking: Catch ValueError on invalid cookie expiration dates.
Patch from Charles Jones.
Closes: SF bug #3575556
- checking: Detect and handle remote filesystem errors when checking
local file links.
8.0 "Luminaris" (released 2.9.2012)
Features:
- checking: Verify SSL certificates for HTTPS connections. Both the
hostname and the expiration date are checked.
- checking: Always compare encoded anchor names.
Closes: SF bug #3538365
- checking: Support WML sites.
Closes: SF bug #3553175
- checking: Show number of parsed URLs in page content.
- cmdline: Added Nagios plugin script.
Changes:
- dependencies: Python >= 2.7.2 is now required
- gui: Display debug output text with fixed-width font.
- gui: Display the real name in the URL properties.
Closes: SF bug #3542976
- gui: Make URL properties selectable with the mouse.
Closes: SF bug #3561129
- checking: Ignore feed: URLs.
- checking: --ignore-url now really ignores the URLs instead
of checking only the syntax.
- checking: Increase the default number of checker threads from 10 to
100.
Fixes:
- gui: Fix saving of the debugmemory option.
- checking: Do not handle <object codebase="..."> attribute as parent
URL but as normal URL to be checked.
- checking: Fix UNC path handling on Windows.
- checking: Detect more sites not supporting HEAD requests properly.
Closes: SF bug #3535981
7.9 "The Dark Knight" (released 10.6.2012)
Fixes:
- checking: Catch any errors initializing the MIME database.
Closes: SF bug #3528450
- checking: Fix writing temporary files.
- checking: Properly handle URLs with user/password information.
Closes: SF bug #3529812
Changes:
- checking: Ignore URLs from local PHP files with execution
directives of the form "<? ?>".
Prevents false errors when checking local PHP files.
Closes: SF bug #3532763
- checking: Allow configuration of local webroot directory to
enable checking of local HTML files with absolute URLs.
Closes: SF bug #3533203
Features:
- installation: Support RPM building with cx_Freeze.
- installation: Added .desktop files for POSIX systems.
- checking: Allow writing of a memory dump file to debug memory
problems.
7.8 "Gangster Exchange" (released 12.5.2012)
Fixes:
- checking: Always use GET for Zope servers since their HEAD support
is broken.
Closes: SF bug #3522710
- installation: Install correct MSVC++ runtime DLL version for Windows.
- installation: Install missing Python modules for twill, cssutils and
HTMLTidy.
Changes:
- documentation: Made the --ignore-url documentation more clear.
Patch from Charles Jones.
Closes: SF bug #3522351
- installation: Report missing py2app instead of generating a
Distutils error.
Closes: SF bug #3522265
- documentation: Fix typo in linkcheckerrc.5 manual page.
Closes: SF bug #3522846
Features:
- installation: Add dependency declaration documentation to setup.py.
Closes: SF bug #3524757
7.7 "Intouchables" (released 22.04.2012)
Fixes:
- checking: Detect invalid empty cookie values.
Patch by Charles Jones.
Closes: SF bug #3514219
- checking: Fix cache key for URL connections on redirect.
Closes: SF bug #3514748
- gui: Fix update check when content could not be downloaded.
Closes: SF bug #3515959
- i18n: Make locale domain name lowercase, fixing the .mo-file
lookup on Unix systems.
- checking: Fix CSV output with German locale.
Closes: SF bug #3516400
- checking: Write correct statistics when saving results in the GUI.
Closes: SF bug #3515980
Changes:
- cmdline: Remove deprecated options --check-css-w3 and
--check-html-w3.
Features:
- cgi: Added a WSGI script to replace the CGI script.
7.6 "T�rkisch f�r Anf�nger" (released 31.03.2012)
Fixes:
- checking: Recheck extern status on HTTP redirects even if domain
did not change. Patch by Charles Jones.
Closes: SF bug #3495407
- checking: Fix non-ascii HTTP header handling.
Closes: SF bug #3495621
- checking: Fix non-ascii HTTP header debugging.
Closes: SF bug #3488675
- checking: Improved error message for connect errors to the ClamAV
virus checking daemon.
- gui: Replace configuration filename in options dialog.
- checking: Honor the charset encoding of the Content-Type HTTP
header when parsing HTML. Fixes characters displayed as '?'
for non-ISO-8859-1 websites.
Closes: SF bug #3388257
- checking: HTML parser detects and handles invalid comments of the
form "<! bla >".
Closes: SF bug #3509848
- checking: Store cookies on redirects. Patch by Charles Jones.
Closes: SF bug #3513345
- checking: Fix concatenation of multiple cookie values.
Patch by Charles Jones.
- logging: Encode comments when logging CSV comments.
Closes: SF bug #3513415
Changes:
- checking: Add real url to cache. Improves output for cached errors.
- checking: Specify timeout for SMTP connections. Avoids spurious
connect errors when checking email addresses.
Closes: SF bug #3504366
Features:
- config: Allow --pause and --cookiefile to be set in configuration file.
7.5 "Kukushka" (released 13.02.2012)
Fixes:
- checking: Properly handle non-ascii HTTP header values.
Closes: SF bug #3473359
- checking: Work around a Squid proxy bug which resulted in not
detecting broken links.
Closes: SF bug #3472341
- documentation: Fix typo in the manual page.
Closes: SF bug #3485876
Changes:
- checking: Add steam:// URIs to the list of ignored URIs.
Closes: SF bug #3471570
- checking: Deprecate the --check-html-w3 and --check-css-w3 options.
The W3C checkers are automatically used if a local check library
is not installed.
- distribution: The portable version of LinkChecker does not write
the configuration file in the user directory anymore. So a user
can use this version on a foreign system without leaving any traces
behind.
Features:
- gui: Add Ctrl-L shortcut to highlight the URL input.
- gui: Support loading and saving of project files.
Closes: SF bug #3467492
7.4 "Warrior" (released 07.01.2012)
Fixes:
- gui: Fix saving of check results as a file.
Closes: SF bug #3466545, #3470389
Changes:
- checking: The archive attribute of <applet> and <object> is a
comma-separated list of URIs. The value is now split and each URI
is checked separately.
- cmdline: Remove deprecated options.
- configuration: The dictionary-based logging configuration is now
used. The logging.conf file has been removed.
- dependencies: Python >= 2.7 is now required
Features:
- checking: Add HTML5 link elements and attributes.
7.3 "Attack the block" (released 25.12.2011)
Fixes:
- configuration: Properly detect home directory on OS X systems.
Closes: SF bug #3423110
- checking: Proper error reporting for too-long unicode hostnames.
Closes: SF bug #3438553
- checking: Do not remove whitespace inside URLs given on the
commandline or GUI. Only remove whitespace at the start and end.
- cmdline: Return with non-zero exit value when internal program
errors occurred.
- gui: Fix saving of check results as a file.
Changes:
- gui: Display all options in one dialog instead of tabbed panes.
Features:
- gui: Add configuration for warning strings instead of regular
expressions. The regular expressions can still be configured in
the configuration file.
- gui: Add configuration for ignore URL patterns.
Closes: SF bug #3311262
- checking: Support parsing of Safari Bookmark files.
7.2 "Drive" (released 20.10.2011)
Fixes:
- checking: HTML parser now correctly detects character encoding for
some sites.
Closes: SF bug #3388291
- logging: Fix SQL output.
Closes: SF bug #3415274, #3422230
- checking: Fix W3C HTML checking by using the new soap12 output.
Closes: SF bug #3413022
- gui: Fix startup when configuration file contains errors.
Closes: SF bug #3392021
- checking: Ignore errors trying to get FTP feature set.
Closes: SF bug #3424719
Changes:
- configuration: Parse logger and logging part names case insensitive.
Closes: SF bug #3380114
- gui: Add actions to find bookmark files to the edit menu.
Features:
- checking: If a warning regex is configured, multiple matches in
the URL content are added as warnings.
Closes: SF bug #3412317
- gui: Allow configuration of a warning regex.
7.1 "A fish called Wanda" (released 6.8.2011)
Fixes:
- checking: HTML parser detects and handles stray "<" characters before
end tags.
- checking: Reset content type setting after loading HTTP headers again.
Closes: SF bug #3324125
- checking: Remove query and fragment parts of file URLs. Fixes false
errors checking sites on local file systems.
Closes: SF bug #3308753
- checking: Do not append a stray newline character when encoding
authentication information to base64. Fixes HTTP basic
authentication.
Closes: SF bug #3377193
- checking: Ignore attribute errors when printing the Qt version.
- checking: Update cookie values instead of adding duplicate entries.
Closes: SF bug #3373910
- checking: Send cookies in as few headers as possible.
Closes: SF bug #3346972
- checking: Send all domain-matching cookies that apply.
Closes: SF bug #3375899
- gui: Properly reset active URL count when checking stops.
Closes: SF bug #3311270
Changes:
- gui: Default to last URL checked in GUI (if no URL is given as
commandline parameter).
Closes: SF bug #3311271
- cgi: Removed FastCGI module. The normal CGI module should be
sufficient.
- doc: Document the list of supported warnings in the linkcheckerrc(5)
man page.
Closes: SF bug #3340449
Features:
- checking: New option --user-agent to set the User-Agent header
string sent to HTTP web servers. Note that this does not change
or prevent robots.txt checking.
Closes: SF bug #3325026
7.0 "Plots with a View" (released 28.5.2011)
Fixes:
- doc: Correct reference to RFC 2616 for cookie file format.
Closes: SF bug #3299557
- checking: HTML parser detects and handles stray "<" characters.
Closes: SF bug #3302895
- checking: Correct wrong import path in configuration file.
Closes: SF bug #3305351
- checking: Only check warning patterns in parseable content.
Avoids false errors downloading large binary files.
Closes: SF bug #3297970
- checking: Correctly include dns.rdtypes.IN and dns.rdtypes.ANY
submodules in Windows and OSX installers. Fixes false DNS errors.
Closes: SF bug #3297235
Changes:
- gui: Display status info into GUI main window instead of modal window.
Closes: SF bug #3297252
- gui: Display warnings in result column.
Closes: SF bug #3298036
- gui: Improved option dialog layout.
Closes: SF bug #3302498
- doc: Document the ability to search for URLs with --warning-regex.
Closes: SF bug #3297248
- checking: Support for a system configuration file has been removed.
There is now only one user-configurable configuration file.
- doc: Paginate linkchecker -h output when printing to console.
Features:
- logging: Colorize number of errors in text output logger.
- checking: Support both Chromium and Google Chrome profile dirs
for finding bookmark files.
- gui: Remember last 10 checked URLs in GUI.
Closes: SF bug #3297243
- gui: Display the number of selected rows as status message.
Closes: SF bug #3297247
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Christopher Meng <rpm(a)cicku.me> - 8.6-2
- Add some missing docs.
* Thu Jan 9 2014 Christopher Meng <rpm(a)cicku.me> - 8.6-1
- Major update to 8.6
- SPEC cleanup.
- Standardize desktop files.
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
6.5-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
maildrop-2.7.1-1.fc19 (FEDORA-2014-0591)
Mail delivery agent with filtering abilities
--------------------------------------------------------------------------------
Update Information:
Update to 2.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Brian C. Lane <bcl(a)redhat.com> 2.7.1-1
- Update to 2.7.1
--------------------------------------------------------------------------------
================================================================================
mirall-1.5.0-2.fc19 (FEDORA-2014-0363)
The ownCloud Client
--------------------------------------------------------------------------------
Update Information:
- Update owncloud-csync and mirall to latest upstream version.
- Push new dependency qtkeychain to stable.
This update sould fix various bugs reported in lower version 1.4.x
- [abrt] mirall-1.4.2-3.fc19: __strlen_sse2_pminub: Process /usr/bin/owncloud was killed
by signal 11 (SIGSEGV)
- [abrt] mirall: QString::free(QString::Data*)(): owncloud killed by SIGABRT
- Unnecessarily downloading files
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 9 2014 Joseph Marrero <jmarrero(a)fedoraproject.org> - 1.5.0-2
- Add requires owncloud-csync-libs
* Tue Jan 7 2014 Joseph Marrero <jmarrero(a)fedoraproject.org> - 1.5.0-1
- Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1046340 - Review Request: qtkeychain - A password store library
https://bugzilla.redhat.com/show_bug.cgi?id=1046340
[ 2 ] Bug #1047683 - mirall-1.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1047683
[ 3 ] Bug #1033472 - [abrt] mirall-1.4.2-3.fc19: __strlen_sse2_pminub: Process
/usr/bin/owncloud was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=1033472
[ 4 ] Bug #1043026 - Unnecessarily downloading files
https://bugzilla.redhat.com/show_bug.cgi?id=1043026
[ 5 ] Bug #1045848 - [abrt] mirall: QString::free(QString::Data*)(): owncloud killed by
SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1045848
[ 6 ] Bug #1051249 - mirall 1.5.0 is missing owncloud-csync-libs dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1051249
--------------------------------------------------------------------------------
================================================================================
nfs-utils-1.2.8-6.2.fc19 (FEDORA-2014-0448)
NFS utilities and supporting clients and daemons for the kernel NFS server
--------------------------------------------------------------------------------
Update Information:
* Wed Jan 08 2014 Steve Dickson <steved(a)redhat.com> 1.2.8-6.1
- Added Also=nfs.target to nfs-service file (bz 1047972)
* Fri Jan 10 2014 Steve Dickson <steved(a)redhat.com> 1.2.8-6.2
- Fixed typo in nfs-service file. (bz 1047972)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Steve Dickson <steved(a)redhat.com> 1.2.8-6.2
- Fixed typo in nfs-service file. (bz 1047972)
* Wed Jan 8 2014 Steve Dickson <steved(a)redhat.com> 1.2.8-6.1
- Added Also=nfs.target to nfs-service file (bz 1047972)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1047972 - nfs-server: modify service file to also enable nfs.target when
nfs-server.service is enabled
https://bugzilla.redhat.com/show_bug.cgi?id=1047972
--------------------------------------------------------------------------------
================================================================================
octave-parallel-2.1.1-3.fc19 (FEDORA-2014-0640)
Parallel execution package for cluster computers for Octave
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1050953 - Review Request: octave-parallel - Parallel execution package for
cluster computers for Octave
https://bugzilla.redhat.com/show_bug.cgi?id=1050953
--------------------------------------------------------------------------------
================================================================================
opendnssec-1.4.3-1.fc19 (FEDORA-2014-0593)
DNSSEC key and zone management software
--------------------------------------------------------------------------------
Update Information:
Updated to 1.4.3 (rhel#1048449) - minor bugfixes, minor feature enhancements
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 9 2014 Paul Wouters <pwouters(a)redhat.com> - 1.4.3-1
- Updated to 1.4.3 (rhel#1048449) - minor bugfixes, minor feature enhancements
* Sat Nov 2 2013 Paul Wouters <pwouters(a)redhat.com> - 1.4.2-2
- Fix for ods-signerd service not starting (rhbz#1025985)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1048449 - opendnssec-1.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1048449
--------------------------------------------------------------------------------
================================================================================
openerp7-7.0-4.20140109_002644.fc19 (FEDORA-2014-0637)
Business Applications Server
--------------------------------------------------------------------------------
Update Information:
Partly revert release 3.
Updating to today's nightly build, adding R: unittest2.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 leamas.alec(a)gmail.com - 7.0-4.20140109_002644
- Removing bad unittest2 dep.
* Thu Jan 9 2014 leamas.alec(a)gmail.com - 7.0-3.20140109_002644
- Updating to today's nightly build, adding R: unittest2.
--------------------------------------------------------------------------------
================================================================================
openscap-1.0.2-1.fc19 (FEDORA-2014-0589)
Set of open source libraries enabling integration of the SCAP line of standards
--------------------------------------------------------------------------------
Update Information:
Update to new upstream release: OpenSCAP 1.0.2. Vast majority of the changes are bug
fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Šimon Lukašík <slukasik(a)redhat.com> - 1.0.2-1
- upgrade
- This upstream release addresses: #1018291, #1029879, #1026833
--------------------------------------------------------------------------------
================================================================================
openstack-java-sdk-3.0.2-1.fc19 (FEDORA-2014-0656)
OpenStack Java SDK
--------------------------------------------------------------------------------
Update Information:
update to openstack-java-sdk-3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 7 2014 Federico Simoncelli <fsimonce(a)redhat.com> - 3.0.2-1
- update to openstack-java-sdk-3.0.2
--------------------------------------------------------------------------------
================================================================================
owncloud-csync-0.91.4-1.fc19 (FEDORA-2014-0363)
A user level bidirectional client only file synchronizer
--------------------------------------------------------------------------------
Update Information:
- Update owncloud-csync and mirall to latest upstream version.
- Push new dependency qtkeychain to stable.
This update sould fix various bugs reported in lower version 1.4.x
- [abrt] mirall-1.4.2-3.fc19: __strlen_sse2_pminub: Process /usr/bin/owncloud was killed
by signal 11 (SIGSEGV)
- [abrt] mirall: QString::free(QString::Data*)(): owncloud killed by SIGABRT
- Unnecessarily downloading files
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 23 2013 <jmarrero(a)fedoraproject.org> 0.91.4-1
- Update to version 0.91.4
- remove iniparser dependency as is no longer needed
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1046340 - Review Request: qtkeychain - A password store library
https://bugzilla.redhat.com/show_bug.cgi?id=1046340
[ 2 ] Bug #1047683 - mirall-1.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1047683
[ 3 ] Bug #1033472 - [abrt] mirall-1.4.2-3.fc19: __strlen_sse2_pminub: Process
/usr/bin/owncloud was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=1033472
[ 4 ] Bug #1043026 - Unnecessarily downloading files
https://bugzilla.redhat.com/show_bug.cgi?id=1043026
[ 5 ] Bug #1045848 - [abrt] mirall: QString::free(QString::Data*)(): owncloud killed by
SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1045848
[ 6 ] Bug #1051249 - mirall 1.5.0 is missing owncloud-csync-libs dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1051249
--------------------------------------------------------------------------------
================================================================================
python-celery-3.0.15-5.fc19 (FEDORA-2014-0605)
Distributed Task Queue
--------------------------------------------------------------------------------
Update Information:
add requirement to python-setuptools (rhbz#1051176)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Matthias Runge <mrunge(a)redhat.com> - 3.0.15-5
- add requirement to python-setuptools (rhbz#1051176)
* Wed Jan 8 2014 Matthias Runge <mrunge(a)redhat.com> - 3.0.15-4
- require more specific versions of kombu and billiard
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1051176 - python-celery has a runtime dependency on python-setuptools, but
the RPM does not require it
https://bugzilla.redhat.com/show_bug.cgi?id=1051176
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.2.5-1.fc19 (FEDORA-2014-0632)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
Support for koji scratch builds.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Ralph Bean <rbean(a)redhat.com> - 0.2.5-1
- Latest upstream.
- Compose processor supports epelbeta7
- Support for cnucnuweb.
- Support for koji scratch builds.
--------------------------------------------------------------------------------
================================================================================
python-libturpial-1.1.16-1.fc19 (FEDORA-2014-0625)
Micro blogging python library, needed for turpial (twitter client)
--------------------------------------------------------------------------------
Update Information:
Support to new API twitter changes:
http://turpial.org.ve/2014/01/libturpial-1-1-16-a-new-maintenance-version/
Initial package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1036297 - Review Request: python-libturpial - library needed to new turpial
(twitter client) version
https://bugzilla.redhat.com/show_bug.cgi?id=1036297
--------------------------------------------------------------------------------
================================================================================
qbittorrent-3.1.4-4.fc19 (FEDORA-2014-0661)
A Bittorrent Client
--------------------------------------------------------------------------------
Update Information:
- hardened build
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Leigh Scott <leigh123linux(a)googlemail.com> - 1:3.1.4-4
- drop the _hardened_build global as it's crap
* Fri Jan 10 2014 Leigh Scott <leigh123linux(a)googlemail.com> - 1:3.1.4-3
- fix build flags so hardened build works
* Fri Jan 10 2014 Leigh Scott <leigh123linux(a)googlemail.com> - 1:3.1.4-2
- hardened build
* Sun Jan 5 2014 Leigh Scott <leigh123linux(a)googlemail.com> - 1:3.1.4-1
- update to 3.1.4 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1051342 - no hardening build
https://bugzilla.redhat.com/show_bug.cgi?id=1051342
--------------------------------------------------------------------------------
================================================================================
qtkeychain-0.1.0-4.20130805git.fc19 (FEDORA-2014-0363)
A password store library
--------------------------------------------------------------------------------
Update Information:
- Update owncloud-csync and mirall to latest upstream version.
- Push new dependency qtkeychain to stable.
This update sould fix various bugs reported in lower version 1.4.x
- [abrt] mirall-1.4.2-3.fc19: __strlen_sse2_pminub: Process /usr/bin/owncloud was killed
by signal 11 (SIGSEGV)
- [abrt] mirall: QString::free(QString::Data*)(): owncloud killed by SIGABRT
- Unnecessarily downloading files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1046340 - Review Request: qtkeychain - A password store library
https://bugzilla.redhat.com/show_bug.cgi?id=1046340
[ 2 ] Bug #1047683 - mirall-1.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1047683
[ 3 ] Bug #1033472 - [abrt] mirall-1.4.2-3.fc19: __strlen_sse2_pminub: Process
/usr/bin/owncloud was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=1033472
[ 4 ] Bug #1043026 - Unnecessarily downloading files
https://bugzilla.redhat.com/show_bug.cgi?id=1043026
[ 5 ] Bug #1045848 - [abrt] mirall: QString::free(QString::Data*)(): owncloud killed by
SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1045848
[ 6 ] Bug #1051249 - mirall 1.5.0 is missing owncloud-csync-libs dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1051249
--------------------------------------------------------------------------------
================================================================================
rtkit-0.11-8.fc19 (FEDORA-2014-0639)
Realtime Policy and Watchdog Daemon
--------------------------------------------------------------------------------
Update Information:
Hardened build.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 16 2013 Zbigniew Jędrzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.11-8
- Use a simpler patch for -lrt.
- Turn on hardening flags
Resolves: #996735, #1008399
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1008399 - no hardened build
https://bugzilla.redhat.com/show_bug.cgi?id=1008399
--------------------------------------------------------------------------------
================================================================================
ruby-libvirt-0.5.2-2.fc19 (FEDORA-2014-0633)
Ruby bindings for libvirt
--------------------------------------------------------------------------------
Update Information:
Update to upstream 0.5.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 9 2014 Chris Lalancette <clalancette(a)gmail.com> - 0.5.2-2
- Fix bogus tarball
* Wed Jan 8 2014 Chris Lalancette <clalancette(a)gmail.com> - 0.5.2-1
- Update to upstream 0.5.2
--------------------------------------------------------------------------------
================================================================================
rubygem-will_paginate-3.0.4-5.fc19 (FEDORA-2014-0094)
Most awesome pagination solution for Rails
--------------------------------------------------------------------------------
Update Information:
Fix XSS vulnerabilities (CVE-2013-6459).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Vít Ondruch <vondruch(a)redhat.com> - 3.0.4-5
- Fix XSS vulnerabilities (CVE-2013-6459) (add one more patch pointed out in
the associated bug).
* Thu Jan 2 2014 Vít Ondruch <vondruch(a)redhat.com> - 3.0.4-2
- Fix XSS vulnerabilities (CVE-2013-6459).
- Disable Sequel test, since Sequel 4.x does not seem to be supported by
will_paginate yet.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1046642 - CVE-2013-6459 rubygem-will_paginate: XSS vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1046642
--------------------------------------------------------------------------------
================================================================================
scap-workbench-0.8.5-1.fc19 (FEDORA-2014-0610)
Scanning, tailoring, editing and validation tool for SCAP content
--------------------------------------------------------------------------------
Update Information:
Updated to new upstream release. Bugfixes and usability improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Martin Preisler <mpreisle(a)redhat.com> 0.8.5-1
- Updated to new version
--------------------------------------------------------------------------------
================================================================================
scl-utils-20140108-1.fc19 (FEDORA-2014-0600)
Utilities for alternative packaging
--------------------------------------------------------------------------------
Update Information:
A few rather small bugfixes
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 8 2014 Jan Zeleny <jzeleny(a)redhat.com> - 20140108-1
- split _scl_prefix macro in two parts: scl_basedir and scl_vendor (#985233)
- check if temp file is created (#1032666)
- don't split command arguments containing white space (#1032666)
- rename some attr rpm macros to stop confusing rpm (#1023625)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #985233 - split prefix macro in two parts
https://bugzilla.redhat.com/show_bug.cgi?id=985233
[ 2 ] Bug #1032550 - scl command splits arguments with white-space
https://bugzilla.redhat.com/show_bug.cgi?id=1032550
[ 3 ] Bug #1023625 - scl.attr screws up %__pkconfig_{provides,path} macros when building
for non-SCL
https://bugzilla.redhat.com/show_bug.cgi?id=1023625
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.12.1-74.17.fc19 (FEDORA-2014-0636)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
See
http://koji.fedoraproject.org/koji/buildinfo?buildID=489481
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Lukas Vrabec <lvrabec(a)redhat.com> 3.12.1-74.17
- Allow polipo to connect to http_cache_ports
- Add new access for mythtv
- Allow tor to bind to hplip port
- Allow showall_t to send itself signals
- Add zabbix_var_lib_t for /var/lib/zabbixsrv, also allow zabix to connect to smtp port
- Fixed filetrans in zabbix policy
- Allow httpd to read ldap certs
- passwd to create gnome-keyring passwd socket
- Allow sytemd_tmpfiles_t to delete all directories
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #916674 - SELinux is preventing /usr/bin/tor from 'name_bind' accesses
on the tcp_socket .
https://bugzilla.redhat.com/show_bug.cgi?id=916674
[ 2 ] Bug #1031930 - SELinux is preventing /usr/bin/gnome-keyring-daemon from
'create' accesses on the sock_file control.
https://bugzilla.redhat.com/show_bug.cgi?id=1031930
[ 3 ] Bug #1047020 - SELinux is preventing /usr/bin/polipo from 'name_connect'
accesses on the tcp_socket .
https://bugzilla.redhat.com/show_bug.cgi?id=1047020
[ 4 ] Bug #1047144 - SELinux is preventing /usr/bin/systemd-tmpfiles from
'rmdir' accesses on the directory /lost+found.
https://bugzilla.redhat.com/show_bug.cgi?id=1047144
[ 5 ] Bug #1046346 - Missing context for zabbix-server(-pgsql)
https://bugzilla.redhat.com/show_bug.cgi?id=1046346
[ 6 ] Bug #1047166 - /var/lib/shorewall/.start: line 1079: kill: (5535) - Permission
denied
https://bugzilla.redhat.com/show_bug.cgi?id=1047166
[ 7 ] Bug #1050981 - SELinux is preventing /usr/sbin/httpd from getattr access on the
directory /etc/openldap/certs.
https://bugzilla.redhat.com/show_bug.cgi?id=1050981
--------------------------------------------------------------------------------
================================================================================
subsurface-4.0.2-1.fc19 (FEDORA-2014-0623)
A feature-full divelog in Qt
--------------------------------------------------------------------------------
Update Information:
Update to 4.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 4.0.2-1
- Update to release 4.0.2
--------------------------------------------------------------------------------
================================================================================
system-config-date-1.10.7-1.fc19 (FEDORA-2014-0648)
A graphical interface for modifying system date and time
--------------------------------------------------------------------------------
Update Information:
This update fixes a bug where system-config-date erroneously used obsolete SysVinit
mechanisms which made it impossible to enable synchronizing the system time over NTP.
Additionally, it contains updated translations.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 10 2014 Nils Philippsen <nils(a)redhat.com> - 1.10.7-1
- cope with systemd executables in several possible locations (#1048136)
- pull updated translations
* Fri Oct 4 2013 Rex Dieter <rdieter(a)fedoraproject.org> 1.10.6-2
- use optimized icon scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1048136 - Synchronize date and time over the network does not work
https://bugzilla.redhat.com/show_bug.cgi?id=1048136
--------------------------------------------------------------------------------