The following Fedora 19 Security updates need testing: Age URL 263 https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glance-2... 75 https://admin.fedoraproject.org/updates/FEDORA-2014-5896/nrpe-2.15-2.fc19 64 https://admin.fedoraproject.org/updates/FEDORA-2014-6233/dpkg-1.16.14-1.fc19 55 https://admin.fedoraproject.org/updates/FEDORA-2014-6553/chicken-4.8.0.6-2.f... 53 https://admin.fedoraproject.org/updates/FEDORA-2014-6597/drupal7-views-3.8-1... 32 https://admin.fedoraproject.org/updates/FEDORA-2014-7322/thunderbird-24.6.0-... 26 https://admin.fedoraproject.org/updates/FEDORA-2014-7496/readline-6.2-8.fc19 24 https://admin.fedoraproject.org/updates/FEDORA-2014-7570/asterisk-11.10.2-2.... 24 https://admin.fedoraproject.org/updates/FEDORA-2014-6774/claws-mail-3.10.1-1... 24 https://admin.fedoraproject.org/updates/FEDORA-2014-7610/perl-Email-Address-... 20 https://admin.fedoraproject.org/updates/FEDORA-2014-7716/python-simplejson-3... 15 https://admin.fedoraproject.org/updates/FEDORA-2014-7939/lzo-2.08-1.fc19 10 https://admin.fedoraproject.org/updates/FEDORA-2014-8089/rubygem-activerecor... 6 https://admin.fedoraproject.org/updates/FEDORA-2014-8178/kernel-3.14.11-100.... 6 https://admin.fedoraproject.org/updates/FEDORA-2014-8176/krb5-1.11.3-22.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-8218/ocsinventory-2.0.5-... 6 https://admin.fedoraproject.org/updates/FEDORA-2014-8223/libXfont-1.4.8-1.fc... 4 https://admin.fedoraproject.org/updates/FEDORA-2014-7645/couchdb-1.6.0-9.fc1... 3 https://admin.fedoraproject.org/updates/FEDORA-2014-7889/zarafa-7.1.10-2.fc1... 2 https://admin.fedoraproject.org/updates/FEDORA-2014-8310/polarssl-1.2.11-1.f... 2 https://admin.fedoraproject.org/updates/FEDORA-2014-8309/php-ZendFramework-1... 2 https://admin.fedoraproject.org/updates/FEDORA-2014-8328/python-bottle-0.12.... 2 https://admin.fedoraproject.org/updates/FEDORA-2014-8332/transmission-2.84-1... 0 https://admin.fedoraproject.org/updates/FEDORA-2014-8352/cups-1.6.4-6.fc19
The following Fedora 19 Critical Path updates have yet to be approved: Age URL 211 https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmarks-1... 137 https://admin.fedoraproject.org/updates/FEDORA-2014-3245/testdisk-6.14-2.fc1... 12 https://admin.fedoraproject.org/updates/FEDORA-2014-8047/nss-3.16.2-1.fc19,n... 12 https://admin.fedoraproject.org/updates/FEDORA-2014-8025/shared-mime-info-1.... 11 https://admin.fedoraproject.org/updates/FEDORA-2014-8079/xorg-x11-xauth-1.0.... 6 https://admin.fedoraproject.org/updates/FEDORA-2014-8223/libXfont-1.4.8-1.fc... 6 https://admin.fedoraproject.org/updates/FEDORA-2014-8202/fontconfig-2.10.93-... 6 https://admin.fedoraproject.org/updates/FEDORA-2014-8176/krb5-1.11.3-22.fc19 6 https://admin.fedoraproject.org/updates/FEDORA-2014-8178/kernel-3.14.11-100.... 4 https://admin.fedoraproject.org/updates/FEDORA-2014-8256/langtable-0.0.25-1.... 0 https://admin.fedoraproject.org/updates/FEDORA-2014-8360/pcre-8.32-10.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-8352/cups-1.6.4-6.fc19 0 https://admin.fedoraproject.org/updates/FEDORA-2014-8338/curl-7.29.0-21.fc19
The following builds have been pushed to Fedora 19 updates-testing
ctstream-21-1.fc19 cups-1.6.4-6.fc19 curl-7.29.0-21.fc19 kpcli-2.7-1.fc19 ktorrent-4.3.1-11.fc19 libktorrent-1.3.1-9.fc19 pcre-8.32-10.fc19 perl-Parallel-Prefork-0.17-1.fc19 python-fmn-rules-0.2.4-1.fc19
Details about builds:
================================================================================ ctstream-21-1.fc19 (FEDORA-2014-8355) Get URLs of Czech Television video streams -------------------------------------------------------------------------------- Update Information:
This release adds iframe support again. -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 14 2014 Petr Pisar ppisar@redhat.com - 21-1 - Version 21 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1119062 - ctstream-21 is available https://bugzilla.redhat.com/show_bug.cgi?id=1119062 --------------------------------------------------------------------------------
================================================================================ cups-1.6.4-6.fc19 (FEDORA-2014-8352) CUPS printing system -------------------------------------------------------------------------------- Update Information:
This update fixes a security flaw potentially leading to a disclosure of information. -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 14 2014 Jiri Popelka jpopelka@redhat.com - 1:1.6.4-6 - CVE-2014-3537 (#1119303) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1115576 - CVE-2014-3537 cups: insufficient checking leads to privilege escalation https://bugzilla.redhat.com/show_bug.cgi?id=1115576 --------------------------------------------------------------------------------
================================================================================ curl-7.29.0-21.fc19 (FEDORA-2014-8338) A utility for getting files from remote servers (FTP, HTTP, and others) -------------------------------------------------------------------------------- Update Information:
- handle cookies with numerical IPv6 address (#1118917) -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 14 2014 Kamil Dudka kdudka@redhat.com 7.29.0-21 - handle cookies with numerical IPv6 address (#1118917) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1118917 - Curl request for HTTP GET with Cookie to an IPV6 address does not send the cookie https://bugzilla.redhat.com/show_bug.cgi?id=1118917 --------------------------------------------------------------------------------
================================================================================ kpcli-2.7-1.fc19 (FEDORA-2014-8345) KeePass Command Line Interface (CLI) / interactive shell -------------------------------------------------------------------------------- Update Information:
Updated to 2.7 -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 14 2014 Matias Kreder delete@fedoraproject.org 2.7-1 - Updated to 2.7 * Sun Jun 8 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 2.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ ktorrent-4.3.1-11.fc19 (FEDORA-2014-8353) A BitTorrent program -------------------------------------------------------------------------------- Update Information:
pull in some upstream fixes... in particular, a fix for ip block list parsing. -------------------------------------------------------------------------------- ChangeLog:
* Sun Jul 13 2014 Rex Dieter rdieter@fedoraproject.org - 4.3.1-11 - pull in some upstream fixes... in particular, - ktorrent can't parse ip block list (#1101122) - s/kdebase-/kde-/ in -runtime,-workspace deps * Thu Jun 19 2014 Rex Dieter rdieter@fedoraproject.org 4.3.1-10 - BR: kdelibs4-webkit-devel * Sun Jun 8 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 4.3.1-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri May 23 2014 Petr Machata pmachata@redhat.com - 4.3.1-8 - Rebuild for boost 1.55.0 * Sat Apr 19 2014 Rex Dieter rdieter@fedoraproject.org 4.3.1-7 - plasma-dataengine-depextractor support * Fri Jan 31 2014 Rex Dieter rdieter@fedoraproject.org 4.3.1-6 - update URL's * Wed Sep 25 2013 Rex Dieter rdieter@fedoraproject.org - 4.3.1-5 - drop unused BR: avahi-devel - trim changelog * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 4.3.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1101122 - [Patch] ktorrent can't parse ip block list https://bugzilla.redhat.com/show_bug.cgi?id=1101122 --------------------------------------------------------------------------------
================================================================================ libktorrent-1.3.1-9.fc19 (FEDORA-2014-8353) Library providing torrent downloading code -------------------------------------------------------------------------------- Update Information:
pull in some upstream fixes... in particular, a fix for ip block list parsing. -------------------------------------------------------------------------------- ChangeLog:
* Sun Jul 13 2014 Rex Dieter rdieter@fedoraproject.org 1.3.1-9 - pull in upstream fix for authenticated peers not to get accepted * Sat Jun 7 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.3.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri May 23 2014 Petr Machata pmachata@redhat.com - 1.3.1-7 - Rebuild for boost 1.55.0 * Wed Apr 23 2014 Tomáš Mráz tmraz@redhat.com - 1.3.1-6 - Rebuild for new libgcrypt * Fri Jan 31 2014 Rex Dieter rdieter@fedoraproject.org 1.3.1-5 - update URLs * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.3.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Tue Jul 30 2013 Petr Machata pmachata@redhat.com - 1.3.1-3 - Rebuild for boost 1.54.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1101122 - [Patch] ktorrent can't parse ip block list https://bugzilla.redhat.com/show_bug.cgi?id=1101122 --------------------------------------------------------------------------------
================================================================================ pcre-8.32-10.fc19 (FEDORA-2014-8360) Perl-compatible regular expression library -------------------------------------------------------------------------------- Update Information:
This releases fixes a wrong match on empty-matching possessive zero-repeat groups in interpreted mode, a compiler crash for zero-repeated groups with a recursive back reference, and memory leaks in pcregrep. -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 14 2014 Petr Pisar ppisar@redhat.com - 8.32-10 - Fix empty-matching possessive zero-repeat groups in interpreted mode (bug #1119241) - Fix memory leaks in pcregrep (bug #1119257) - Fix compiler crash for zero-repeated groups with a recursive back reference (bug #1119272) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1119241 - Zero-minimum possessive groups does not match empty string in https://bugzilla.redhat.com/show_bug.cgi?id=1119241 [ 2 ] Bug #1119257 - Memory leak in pcregrep https://bugzilla.redhat.com/show_bug.cgi?id=1119257 [ 3 ] Bug #1119272 - Wrong compilation of zero-repeated groups with recursive back reference can cause crash https://bugzilla.redhat.com/show_bug.cgi?id=1119272 --------------------------------------------------------------------------------
================================================================================ perl-Parallel-Prefork-0.17-1.fc19 (FEDORA-2014-8342) Simple prefork server framework -------------------------------------------------------------------------------- Update Information:
-------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 14 2014 Ralf Corsépius corsepiu@fedoraproject.org - 0.17-1 - Upstream update. --------------------------------------------------------------------------------
================================================================================ python-fmn-rules-0.2.4-1.fc19 (FEDORA-2014-8343) Message processing rules for Fedora Notifications -------------------------------------------------------------------------------- Update Information:
More granular copr rules. -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 14 2014 Ralph Bean rbean@redhat.com - 0.2.4-1 - More granular COPRs rules. --------------------------------------------------------------------------------