The following Fedora 19 Security updates need testing:
Age URL
112
https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glanc...
57
https://admin.fedoraproject.org/updates/FEDORA-2013-23592/rubygem-actionp...
49
https://admin.fedoraproject.org/updates/FEDORA-2013-24023/varnish-3.0.5-1...
31
https://admin.fedoraproject.org/updates/FEDORA-2014-0797/libinfinity-0.5....
17
https://admin.fedoraproject.org/updates/FEDORA-2014-1734/quassel-0.9.2-1....
12
https://admin.fedoraproject.org/updates/FEDORA-2014-1916/chrony-1.29.1-1....
12
https://admin.fedoraproject.org/updates/FEDORA-2014-1910/ibus-chewing-1.4...
9
https://admin.fedoraproject.org/updates/FEDORA-2014-2083/thunderbird-24.3...
8
https://admin.fedoraproject.org/updates/FEDORA-2014-2140/python-gnupg-0.3...
7
https://admin.fedoraproject.org/updates/FEDORA-2014-2183/apache-commons-f...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-2239/python-tahrir-0....
3
https://admin.fedoraproject.org/updates/FEDORA-2014-2253/python-tahrir-0....
3
https://admin.fedoraproject.org/updates/FEDORA-2014-2261/perl-Capture-Tin...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-2324/seamonkey-2.24-1...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-2387/numpy-1.7.2-8.fc19
3
https://admin.fedoraproject.org/updates/FEDORA-2014-2260/NetworkManager-s...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-2340/xstream-1.3.1-5....
3
https://admin.fedoraproject.org/updates/FEDORA-2014-2341/libgadu-1.12.0-0...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-2445/augeas-1.2.0-1.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2014-2506/lighttpd-1.4.34-...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-2534/oath-toolkit-2.4...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-2439/maradns-2.0.09-1...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-2484/drupal6-ctools-1...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-2468/imapsync-1.584-1...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-2588/gnutls-3.1.20-3....
0
https://admin.fedoraproject.org/updates/FEDORA-2014-2578/drupal7-ctools-1...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-2556/kernel-3.12.11-2...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-2606/kernel-3.12.11-2...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-2612/drupal6-image_re...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-2565/mingw-gnutls-3.1...
The following Fedora 19 Critical Path updates have yet to be approved:
Age URL
60
https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmark...
23
https://admin.fedoraproject.org/updates/FEDORA-2014-1324/firefox-26.0-6.fc19
12
https://admin.fedoraproject.org/updates/FEDORA-2014-1958/livecd-tools-19....
12
https://admin.fedoraproject.org/updates/FEDORA-2014-1916/chrony-1.29.1-1....
10
https://admin.fedoraproject.org/updates/FEDORA-2014-2022/gupnp-tools-0.8....
8
https://admin.fedoraproject.org/updates/FEDORA-2014-0752/firewalld-0.3.9....
7
https://admin.fedoraproject.org/updates/FEDORA-2014-2053/kde-workspace-4....
6
https://admin.fedoraproject.org/updates/FEDORA-2014-2208/krb5-1.11.3-20.fc19
3
https://admin.fedoraproject.org/updates/FEDORA-2014-2346/sqlite-3.8.3-1.fc19
3
https://admin.fedoraproject.org/updates/FEDORA-2014-2337/libreport-2.1.12...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-1255/tigervnc-1.3.0-9...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-2446/libvpx-1.3.0-3.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2014-2541/yum-3.4.3-135.fc19
1
https://admin.fedoraproject.org/updates/FEDORA-2014-2498/rpm-4.11.2-1.fc19
0
https://admin.fedoraproject.org/updates/FEDORA-2014-2606/kernel-3.12.11-2...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-2556/kernel-3.12.11-2...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-2588/gnutls-3.1.20-3....
0
https://admin.fedoraproject.org/updates/FEDORA-2014-2544/libusb-0.1.5-3.fc19
The following builds have been pushed to Fedora 19 updates-testing
drupal6-image_resize_filter-1.14-1.fc19
drupal7-diff-3.2-1.fc19
drupal7-metatag-1.0-0.4.beta9.fc19
kernel-3.12.11-201.fc19
libnatpmp-20131126-2.fc19
mingw-wavpack-4.60.1-1.fc19
perl-Excel-Writer-XLSX-0.76-1.fc19
pragha-1.2-1.fc19
Details about builds:
================================================================================
drupal6-image_resize_filter-1.14-1.fc19 (FEDORA-2014-2612)
Filter to automatically scale images to their height and width dimensions
--------------------------------------------------------------------------------
Update Information:
Updated to 1.14
* Release notes:
https://drupal.org/node/2194065
* SA-CONTRIB-2014-017:
https://drupal.org/node/2194655
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 15 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.14-1
- Updated to 1.14 (BZ #1064727; release notes
https://drupal.org/node/2194065)
- Security BZ #1064856, #1064857
- SA-CONTRIB-2014-017 (
https://drupal.org/node/2194655)
- Spec cleanup
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1064856 - drupal6-image_resize_filter: denial of service via large number of
images to resize
https://bugzilla.redhat.com/show_bug.cgi?id=1064856
--------------------------------------------------------------------------------
================================================================================
drupal7-diff-3.2-1.fc19 (FEDORA-2014-2602)
Show differences between content revisions
--------------------------------------------------------------------------------
Update Information:
This module adds a tab for sufficiently permissioned users. The tab
shows all revisions like standard Drupal but it also allows pretty
viewing of all added/changed/deleted words between revisions.
This package provides the following Drupal module:
* diff
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 15 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 3.2-1
- Updated to 3.2 (BZ #1059998; release notes
https://drupal.org/node/1839054)
- Spec cleanup
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1059998 - drupal7-diff-3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1059998
--------------------------------------------------------------------------------
================================================================================
drupal7-metatag-1.0-0.4.beta9.fc19 (FEDORA-2014-2597)
Adds support and an API to implement meta tags
--------------------------------------------------------------------------------
Update Information:
Updated to 1.0-beta9
* Release notes:
https://drupal.org/node/2176579
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 15 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> 1.0-0.4.beta9
- Updated to 1.0-beta9 (BZ #1059999; release notes
https://drupal.org/node/2176579)
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0-0.3.beta7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1059999 - drupal7-metatag-1.0-beta9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1059999
--------------------------------------------------------------------------------
================================================================================
kernel-3.12.11-201.fc19 (FEDORA-2014-2606)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
Fixes CVE-2014-0069 cifs: incorrect handling of bogus user pointers
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 14 2014 Josh Boyer <jwboyer(a)fedoraproject.org> - 3.12.11-201
- CVE-2014-0069 cifs: incorrect handling of bogus user pointers (rhbz 1064253 1062585)
* Thu Feb 13 2014 Justin M. Forbes <jforbes(a)fedoraproject.org> - 3.12.11-200
- Linux v3.12.11
* Wed Feb 12 2014 Josh Boyer <jwboyer(a)fedoraproject.org>
- Add patch to fix list corruption from pinctrl (rhbz 1051918)
- Fix cgroup destroy oops (rhbz 1045755)
- Fix backtrace in amd_e400_idle (rhbz 1031296)
- CVE-2014-1874 SELinux: local denial of service (rhbz 1062356 1062507)
* Thu Feb 6 2014 Justin M. Forbes <jforbes(a)fedoraproject.org> - 3.12.10-200
- Linux v3.12.10
* Wed Feb 5 2014 Justin M. Forbes <jforbes(a)fedoraproject.org>
- fix resume issues on Renesas chips in Samsung laptops (rhbz 950630)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1064253 - CVE-2014-0069 kernel: cifs: incorrect handling of bogus user
pointers during uncached writes
https://bugzilla.redhat.com/show_bug.cgi?id=1064253
--------------------------------------------------------------------------------
================================================================================
libnatpmp-20131126-2.fc19 (FEDORA-2014-2601)
Library of The NAT Port Mapping Protocol (NAT-PMP)
--------------------------------------------------------------------------------
Update Information:
NAT-PMP library.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1006860 - Review Request: libnatpmp - Library of The NAT Port Mapping
Protocol (NAT-PMP)
https://bugzilla.redhat.com/show_bug.cgi?id=1006860
--------------------------------------------------------------------------------
================================================================================
mingw-wavpack-4.60.1-1.fc19 (FEDORA-2014-2598)
Completely open audiocodec
--------------------------------------------------------------------------------
Update Information:
WavPack is a completely open audio compression format providing lossless, high-quality
lossy, and a unique hybrid compression mode. Although the technology is loosely based on
previous versions of WavPack, the new version 4 format has been designed from the ground
up to offer unparalleled performance and functionality. This is the MinGW version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1064579 - Review Request: mingw-wavpack - Completely open audiocodec
https://bugzilla.redhat.com/show_bug.cgi?id=1064579
--------------------------------------------------------------------------------
================================================================================
perl-Excel-Writer-XLSX-0.76-1.fc19 (FEDORA-2014-2609)
Create a new file in the Excel 2007+ XLSX format
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1060465 - Review Request: perl-Excel-Writer-XLSX - Create a new file in the
Excel 2007+ XLSX format
https://bugzilla.redhat.com/show_bug.cgi?id=1060465
--------------------------------------------------------------------------------
================================================================================
pragha-1.2-1.fc19 (FEDORA-2014-2608)
Lightweight GTK+ music manager
--------------------------------------------------------------------------------
Update Information:
This update fixes the playlist import, various crashes and provdes new translations. For a
full list of changes, please refer to
https://github.com/matiasdelellis/pragha/releases
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 13 2014 Christoph Wickert <cwickert(a)fedoraproject.org> - 1.2-1
- Update to 1.2 (fixes #1013020)
- Build against gstreamer 1.0 on Fedora >= 20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1013020 - Pragha freezes when trying to a the bayern3 livestream
https://bugzilla.redhat.com/show_bug.cgi?id=1013020
[ 2 ] Bug #1029003 - [abrt] pragha-1.1.2.2-1.fc19: myrealloc: Process /usr/bin/pragha
was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=1029003
--------------------------------------------------------------------------------