The following Fedora 19 Security updates need testing:
Age URL
260
https://admin.fedoraproject.org/updates/FEDORA-2013-19963/openstack-glanc...
72
https://admin.fedoraproject.org/updates/FEDORA-2014-5896/nrpe-2.15-2.fc19
61
https://admin.fedoraproject.org/updates/FEDORA-2014-6233/dpkg-1.16.14-1.fc19
52
https://admin.fedoraproject.org/updates/FEDORA-2014-6553/chicken-4.8.0.6-...
50
https://admin.fedoraproject.org/updates/FEDORA-2014-6597/drupal7-views-3....
29
https://admin.fedoraproject.org/updates/FEDORA-2014-7322/thunderbird-24.6...
23
https://admin.fedoraproject.org/updates/FEDORA-2014-7496/readline-6.2-8.fc19
21
https://admin.fedoraproject.org/updates/FEDORA-2014-7570/asterisk-11.10.2...
21
https://admin.fedoraproject.org/updates/FEDORA-2014-6774/claws-mail-3.10....
21
https://admin.fedoraproject.org/updates/FEDORA-2014-7610/perl-Email-Addre...
17
https://admin.fedoraproject.org/updates/FEDORA-2014-7716/python-simplejso...
16
https://admin.fedoraproject.org/updates/FEDORA-2014-7772/python-2.7.5-13....
12
https://admin.fedoraproject.org/updates/FEDORA-2014-7939/lzo-2.08-1.fc19
9
https://admin.fedoraproject.org/updates/FEDORA-2014-8035/python3-3.3.2-9....
9
https://admin.fedoraproject.org/updates/FEDORA-2014-8034/docker-io-1.0.0-...
7
https://admin.fedoraproject.org/updates/FEDORA-2014-8089/rubygem-activere...
7
https://admin.fedoraproject.org/updates/FEDORA-2014-8112/lz4-r119-1.fc19
4
https://admin.fedoraproject.org/updates/FEDORA-2014-8178/kernel-3.14.11-1...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-8176/krb5-1.11.3-22.fc19
3
https://admin.fedoraproject.org/updates/FEDORA-2014-8218/ocsinventory-2.0...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-8223/libXfont-1.4.8-1...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-7645/couchdb-1.6.0-9....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-7889/zarafa-7.1.10-2....
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8310/polarssl-1.2.11-...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8309/php-ZendFramewor...
The following Fedora 19 Critical Path updates have yet to be approved:
Age URL
208
https://admin.fedoraproject.org/updates/FEDORA-2013-22326/fedora-bookmark...
134
https://admin.fedoraproject.org/updates/FEDORA-2014-3245/testdisk-6.14-2....
12
https://admin.fedoraproject.org/updates/FEDORA-2014-7906/libtasn1-3.7-1.fc19
12
https://admin.fedoraproject.org/updates/FEDORA-2014-7939/lzo-2.08-1.fc19
9
https://admin.fedoraproject.org/updates/FEDORA-2014-8047/nss-3.16.2-1.fc1...
9
https://admin.fedoraproject.org/updates/FEDORA-2014-8025/shared-mime-info...
8
https://admin.fedoraproject.org/updates/FEDORA-2014-8079/xorg-x11-xauth-1...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-8202/fontconfig-2.10....
4
https://admin.fedoraproject.org/updates/FEDORA-2014-8176/krb5-1.11.3-22.fc19
4
https://admin.fedoraproject.org/updates/FEDORA-2014-8178/kernel-3.14.11-1...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-8207/yum-3.4.3-152.fc19
3
https://admin.fedoraproject.org/updates/FEDORA-2014-8223/libXfont-1.4.8-1...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-8256/langtable-0.0.25...
The following builds have been pushed to Fedora 19 updates-testing
golang-googlecode-net-0-0.15.hg84a4013f96e0.fc19
perl-Net-DNS-0.78-1.fc19
php-ZendFramework-1.12.7-1.fc19
polarssl-1.2.11-1.fc19
python-fedmsg-meta-fedora-infrastructure-0.2.15-2.fc19
wine-1.7.22-1.fc19
wxGTK3-3.0.1-1.fc19
Details about builds:
================================================================================
golang-googlecode-net-0-0.15.hg84a4013f96e0.fc19 (FEDORA-2014-8315)
Supplementary Go networking libraries
--------------------------------------------------------------------------------
Update Information:
don't fail on ipv6 test bz1056185
revert golang >= 1.2 version requirement
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 11 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 0-0.15.hg84a4013f96e0
- don't fail on ipv6 test bz1056185
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0-0.14.hg84a4013f96e0
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri Jan 17 2014 Lokesh Mandvekar <lsm5(a)redhat.com> 0-0.13.hg84a4013f96e0
- golang exclusivearch for el6+
- add check
* Fri Jan 17 2014 Lokesh Mandvekar <lsm5(a)redhat.com> 0-0.12.hg84a4013f96e0
- revert golang >= 1.2 version requirement
* Wed Jan 15 2014 Lokesh Mandvekar <lsm5(a)redhat.com> 0-0.11.hg84a4013f96e0
- require golang 1.2 and up
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1056185 - go test
code.google.com/p/go.net/ipv6 test fails
https://bugzilla.redhat.com/show_bug.cgi?id=1056185
--------------------------------------------------------------------------------
================================================================================
perl-Net-DNS-0.78-1.fc19 (FEDORA-2014-8322)
DNS resolver modules for Perl
--------------------------------------------------------------------------------
Update Information:
Updated to 0.78, various bugfixes and multiline TXT rdata printing support
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 12 2014 Paul Wouters <pwouters(a)redhat.com> - 0.78-1
- Updated to 0.78, various bugfixes and multiline TXT rdata printing support
* Sat Jun 14 2014 Paul Wouters <pwouters(a)redhat.com> - 0.77-1
- Updated to 0.77, a "quickfix release" fixing AXFR support
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.76-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-ZendFramework-1.12.7-1.fc19 (FEDORA-2014-8309)
Leading open-source PHP framework
--------------------------------------------------------------------------------
Update Information:
Update to 1.12.7 fixes CVE-2014-4914 aka. ZF2014-04: Potential SQL injection in the ORDER
implementation of Zend_Db_Select
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 12 2014 Felix Kaechele <felix(a)fetzig.org> - 1.12.7-1
- update to 1.12.7
- fixes
http://framework.zend.com/security/advisory/ZF2014-04 / CVE-2014-4914
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.12.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1117545 - CVE-2014-4914 Zend FrameWork: ZF2014-04: Potential SQL injection in
the ORDER implementation of Zend_Db_Select
https://bugzilla.redhat.com/show_bug.cgi?id=1117545
--------------------------------------------------------------------------------
================================================================================
polarssl-1.2.11-1.fc19 (FEDORA-2014-8310)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
- Update to 1.2.11
- CVE-2014-4911 (rhbz#1118929, rhbz#1118930)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 12 2014 Morten Stevens <mstevens(a)imt-systems.com> - 1.2.11-1
- Update to 1.2.11
- CVE-2014-4911 (rhbz#1118929, rhbz#1118930)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1118929 - CVE-2014-4911 PolarSSL: Denial of Service against GCM enabled
servers (and clients)
https://bugzilla.redhat.com/show_bug.cgi?id=1118929
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.2.15-2.fc19 (FEDORA-2014-8307)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
Fix edge case with github status messages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 11 2014 Ralph Bean <rbean(a)redhat.com> - 0.2.15-2
- Patch to handle github edge case.
* Thu Jul 10 2014 Ralph Bean <rbean(a)redhat.com> - 0.2.15-1
- New kerneltest processor
- Fixes to pkgdb, coprs, elections, github, and releng.
--------------------------------------------------------------------------------
================================================================================
wine-1.7.22-1.fc19 (FEDORA-2014-8317)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
* Support for Unicode bracketing pairs.
* Improved Internet cookie support.
* OS X CoreAudio driver uses AUHAL instead of AudioQueue.
* Initial support for geographical information.
* Support for critical sections in the C runtime.
* Unicode data updated to Unicode 7.0.
* Support for interlaced PNG encoding.
* Initial stub for the Packager library.
* Various bug fixes.
* X11 drag & drop fixes.
* A few more C/C++ runtime functions.
* Fixes for various memory issues found by Valgrind.
* Some OLE storage fixes.
* Various bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 11 2014 Michael Cronenworth <mike(a)cchtml.com>
- 1.7.22-1
- version upgrade
* Wed Jul 9 2014 Michael Cronenworth <mike(a)cchtml.com>
- 1.7.21-2
- Fixes for EPEL7 (rhbz#1117422)
* Tue Jul 1 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.21-1
- version upgrade
* Thu Jun 19 2014 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.7.20-1
- version upgrade
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.7.19-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1114366 - wine-1.7.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1114366
--------------------------------------------------------------------------------
================================================================================
wxGTK3-3.0.1-1.fc19 (FEDORA-2014-8313)
GTK port of the wxWidgets GUI library
--------------------------------------------------------------------------------
Update Information:
Bump to 3.0.1 RH#1111903
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 5 2014 Jeremy Newton <alexjnewt(a)hotmail.com> - 3.0.1-1
- Bump to 3.0.1 RH#1076617
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1111903 - wxGTK3-3.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1111903
--------------------------------------------------------------------------------