The following Fedora 19 Security updates need testing:
Age URL
99
https://admin.fedoraproject.org/updates/FEDORA-2013-19262/quassel-0.9.1-1...
92
https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glanc...
37
https://admin.fedoraproject.org/updates/FEDORA-2013-23592/rubygem-actionp...
29
https://admin.fedoraproject.org/updates/FEDORA-2013-24023/varnish-3.0.5-1...
17
https://admin.fedoraproject.org/updates/FEDORA-2014-0467/libXfont-1.4.5-5...
16
https://admin.fedoraproject.org/updates/FEDORA-2014-0574/flite-1.3-20.fc19
15
https://admin.fedoraproject.org/updates/FEDORA-2014-0621/graphviz-2.30.1-...
13
https://admin.fedoraproject.org/updates/FEDORA-2014-0719/openjpeg-1.5.1-8...
11
https://admin.fedoraproject.org/updates/FEDORA-2014-0797/libinfinity-0.5....
10
https://admin.fedoraproject.org/updates/FEDORA-2014-0946/libmicrohttpd-0....
10
https://admin.fedoraproject.org/updates/FEDORA-2014-0934/memcached-1.4.17...
9
https://admin.fedoraproject.org/updates/FEDORA-2014-1004/ibus-chewing-1.4...
7
https://admin.fedoraproject.org/updates/FEDORA-2014-1092/libreswan-3.8-1....
7
https://admin.fedoraproject.org/updates/FEDORA-2014-1100/nss-3.15.4-1.fc1...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-1326/perl-MARC-XML-1....
3
https://admin.fedoraproject.org/updates/FEDORA-2014-1377/moodle-2.4.8-1.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2014-1516/openstack-nova-2...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-1475/mupdf-1.1-5.fc19
0
https://admin.fedoraproject.org/updates/FEDORA-2014-1559/xen-4.2.3-14.fc19
0
https://admin.fedoraproject.org/updates/FEDORA-2014-1560/mingw-openssl-1....
The following Fedora 19 Critical Path updates have yet to be approved:
Age URL
66
https://admin.fedoraproject.org/updates/FEDORA-2013-21772/unzip-6.0-11.fc19
40
https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmark...
13
https://admin.fedoraproject.org/updates/FEDORA-2014-0719/openjpeg-1.5.1-8...
11
https://admin.fedoraproject.org/updates/FEDORA-2014-0847/ibus-1.5.5-1.fc19
10
https://admin.fedoraproject.org/updates/FEDORA-2014-0946/libmicrohttpd-0....
9
https://admin.fedoraproject.org/updates/FEDORA-2014-1008/audit-2.3.3-1.fc19
8
https://admin.fedoraproject.org/updates/FEDORA-2014-0752/firewalld-0.3.9....
7
https://admin.fedoraproject.org/updates/FEDORA-2014-1100/nss-3.15.4-1.fc1...
6
https://admin.fedoraproject.org/updates/FEDORA-2014-1151/hwdata-0.260-1.fc19
5
https://admin.fedoraproject.org/updates/FEDORA-2014-1208/coreutils-8.21-1...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-1255/tigervnc-1.3.0-8...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-1281/abattis-cantarel...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-1368/krb5-1.11.3-19.fc19
3
https://admin.fedoraproject.org/updates/FEDORA-2014-1385/yum-3.4.3-132.fc19
3
https://admin.fedoraproject.org/updates/FEDORA-2014-1324/firefox-26.0-6.fc19
2
https://admin.fedoraproject.org/updates/FEDORA-2014-1438/libtool-2.4.2-23...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-1451/pango-1.34.1-2.fc19
0
https://admin.fedoraproject.org/updates/FEDORA-2014-1564/libvorbis-1.3.4-...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-1524/procps-ng-3.3.8-...
The following builds have been pushed to Fedora 19 updates-testing
avl-3.32-5.fc19
freecolor-0.9.2-1.fc19
ikiwiki-3.20140102-1.fc19
libvorbis-1.3.4-1.fc19
mingw-openssl-1.0.1e-5.fc19
python-matplotlib-1.2.0-15.fc19
unar-1.8.1-1.fc19
waf-1.7.15-1.fc19
xfoil-6.97-4.fc19
xrotor-7.55-4.fc19
Details about builds:
================================================================================
avl-3.32-5.fc19 (FEDORA-2014-1569)
Aerodynamic and flight-dynamic analysis of rigid aircrafts
--------------------------------------------------------------------------------
Update Information:
Rebuild without-fdefault-real-8
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 25 2014 Sandro Mani <manisandro(a)gmail.com> - 3.32-5
- Rebuild without-fdefault-real-8
--------------------------------------------------------------------------------
================================================================================
freecolor-0.9.2-1.fc19 (FEDORA-2014-1576)
Display memory information graphically
--------------------------------------------------------------------------------
Update Information:
Freecolor package initial submission
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1055108 - Review Request: freecolor - Display memory information graphically
https://bugzilla.redhat.com/show_bug.cgi?id=1055108
--------------------------------------------------------------------------------
================================================================================
ikiwiki-3.20140102-1.fc19 (FEDORA-2014-1562)
A wiki compiler
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable version.
Changes in ikiwiki 3.20140102:
* aggregate: Improve display of post author.
* poll: Fix behavior of poll buttons when inlined.
* Fixed unncessary tight loop hash copy in saveindex where a pointer can be used instead.
Can speed up refreshes by nearly 50% in some circumstances.
* Optimized loadindex by caching the page name in the index.
* Added only_committed_changes config setting, which speeds up wiki refresh by querying
git to find the files that were changed, rather than looking at the work tree. Not enabled
by default as it can break some setups where not all files get committed to git.
* comments: Write pending moderation comments to the transient underlay to avoid conflict
with only_committed_changes.
* search: Added google_search option, which makes it search google rather than using the
internal xapain database. (googlesearch plugin is too hard to turn on when xapain
databases corrupt themselves, which happens all too frequently).
* osm: Remove invalid use of charset on embedded javascript tags. Closes:
http://bugs.debian.org/731197
* style.css: Add compatibility definitions for more block-level html5 elements. Closes:
http://bugs.debian.org/731199
* aggregrate: Fix several bugs in handling of empty and colliding titles when generating
filenames.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 25 2014 Thomas Moschny <thomas.moschny(a)gmx.de> - 3.20140102-1
- Update to 3.20140102.
- Modernize spec file.
--------------------------------------------------------------------------------
================================================================================
libvorbis-1.3.4-1.fc19 (FEDORA-2014-1564)
The Vorbis General Audio Compression Codec
--------------------------------------------------------------------------------
Update Information:
The primary feature of this release is reduced static data size in libvorbisenc, as well
as associated minor changes required to libvorbis and libvorbisfile. The release also
contains minor build fixes and build system updates. There are no functional changes over
the previous 1.3.3 release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 22 2014 Peter Robinson <pbrobinson(a)fedoraproject.org> 1.3.4-1
- libvorbis 1.3.4
* Wed Jan 15 2014 Adam Jackson <ajax(a)redhat.com> 1.3.3-7
- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.
* Thu Aug 8 2013 Ville Skyttä <ville.skytta(a)iki.fi> - 1:1.3.3-6
- Install docs to %{_pkgdocdir} where available (#993967).
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:1.3.3-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mingw-openssl-1.0.1e-5.fc19 (FEDORA-2014-1560)
MinGW port of the OpenSSL toolkit
--------------------------------------------------------------------------------
Update Information:
Synced patches with native openssl-1.0.1e-38.fc21 which fixes various CVE's and also
enables ECC support
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 25 2014 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 1.0.1e-5
- Synced patches with native openssl-1.0.1e-38.fc21
- Enable ECC support (RHBZ #1037919)
- Fixes CVE-2013-6450 (RHBZ #1047844)
- Fixes CVE-2013-4353 (RHBZ #1049062)
- Fixes CVE-2013-6449 (RHBZ #1045444)
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.1e-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1037919 - RFE: Enable Fedora-supported ECC algorithms
https://bugzilla.redhat.com/show_bug.cgi?id=1037919
[ 2 ] Bug #1047844 - CVE-2013-6450 mingw-openssl: openssl: MiTM due to improper
implementation of DTLS retransmission [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1047844
[ 3 ] Bug #1049062 - CVE-2013-4353 mingw-openssl: openssl: TLS record tampering issue
can lead to OpenSSL crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1049062
[ 4 ] Bug #1045444 - CVE-2013-6449 mingw-openssl: openssl: crash when using TLS 1.2
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1045444
--------------------------------------------------------------------------------
================================================================================
python-matplotlib-1.2.0-15.fc19 (FEDORA-2014-1563)
Python 2D plotting library
--------------------------------------------------------------------------------
Update Information:
Use GTKAgg as backend and correct requires of python3-matplotlib-qt4.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 25 2014 Thomas Spura <tomspur(a)fedoraproject.org> - 1.2.0-15
- use GTKAgg backend (#982793)
- R python3-matplotlib not python-matplotlib (#988412)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #982793 - python3-matplotlib missing dependency on python3-matplotlib-tk
https://bugzilla.redhat.com/show_bug.cgi?id=982793
[ 2 ] Bug #988412 - python3-matplotlib-qt4 downloads unecessary dependencies
https://bugzilla.redhat.com/show_bug.cgi?id=988412
--------------------------------------------------------------------------------
================================================================================
unar-1.8.1-1.fc19 (FEDORA-2014-1578)
Multi-format extractor
--------------------------------------------------------------------------------
Update Information:
upstream release 1.8.1. minor bug fixes
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 25 2014 Rahul Sundaram <sundaram(a)fedoraproject.org> - 1.8.1-1
- upstream release 1.8.1 (rhbz#1047226)
* Sun Dec 29 2013 Rahul Sundaram <sundaram(a)fedoraproject.org> - 1.8-1
- upstream release 1.8 (rhbz#1047226)
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1047226 - unar-1.8.1_win is available
https://bugzilla.redhat.com/show_bug.cgi?id=1047226
--------------------------------------------------------------------------------
================================================================================
waf-1.7.15-1.fc19 (FEDORA-2014-1571)
A Python-based build system
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable version.
Changes in waf 1.7.15:
* Fix for tex.py in python3
* Optimizations in mem_reducer.py
* Fixes for the windows console in ansiterm.py
* Fixes for C++ compilers in gccdeps.py
* Xcode generator include fixes #1388
* Fortran scanner improvements #1389
* Configuration tests with several libraries at once in a string #1390
* Added support for MSVS 2012 in msvs.py
Changes in waf 1.7.14:
* Fixes for Python 3.3 and 3.4
* Extra tool for memory reduction some large builds
* Fix for nasm trailing slashes #1379
* Fix for eclipse project generators #1377
* Qt5 tool
* Handle empty defines when pasting tokens
* Fix for syms.py on python3 #1361
* Swig fixes
* Doxygen recursive dependencies
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 25 2014 Thomas Moschny <thomas.moschny(a)gmx.de> - 1.7.15-1
- Update to 1.7.15.
- Modernize spec file.
* Tue Jan 7 2014 Thomas Moschny <thomas.moschny(a)gmx.de> - 1.7.14-1
- Update to 1.7.14.
--------------------------------------------------------------------------------
================================================================================
xfoil-6.97-4.fc19 (FEDORA-2014-1573)
Subsonic Airfoil Development System
--------------------------------------------------------------------------------
Update Information:
Build without -fdefault-real-8
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 25 2014 Sandro Mani <manisandro(a)gmail.com> - 6.97-4
- Build without -fdefault-real-8
--------------------------------------------------------------------------------
================================================================================
xrotor-7.55-4.fc19 (FEDORA-2014-1572)
Design and analysis tools for propellers and windmills
--------------------------------------------------------------------------------
Update Information:
Build without -fdefault-real-8
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 25 2014 Sandro Mani <manisandro(a)gmail.com> - 7.55-4
- Build without -fdefault-real-8
--------------------------------------------------------------------------------