Fedora 19 updates-testing report

Tue May 28 16:18:13 UTC 2013

The following Fedora 19 Security updates need testing:
 Age  URL
  42  https://admin.fedoraproject.org/updates/FEDORA-2013-5801/mantis-1.2.15-1.fc19
  27  https://admin.fedoraproject.org/updates/FEDORA-2013-7098/xmp-3.5.0-3.fc19
  14  https://admin.fedoraproject.org/updates/FEDORA-2013-8116/clamav-0.97.8-1.fc19
  11  https://admin.fedoraproject.org/updates/FEDORA-2013-8328/owncloud-4.5.11-1.fc19
   6  https://admin.fedoraproject.org/updates/FEDORA-2013-8746/python-backports-ssl_match_hostname-3.2-0.3.a3.fc19
   6  https://admin.fedoraproject.org/updates/FEDORA-2013-8738/ruby-2.0.0.195-8.fc19
   5  https://admin.fedoraproject.org/updates/FEDORA-2013-8844/spnavcfg-0.2.1-5.fc19
   5  https://admin.fedoraproject.org/updates/FEDORA-2013-8908/schroot-1.4.25-13.fc19
   5  https://admin.fedoraproject.org/updates/FEDORA-2013-8906/pmount-0.9.23-4.fc19
   4  https://admin.fedoraproject.org/updates/FEDORA-2013-9015/livecd-tools-19.3-1.fc19
   4  https://admin.fedoraproject.org/updates/FEDORA-2013-8998/nagios-plugins-1.4.16-7.fc19
   4  https://admin.fedoraproject.org/updates/FEDORA-2013-8991/xorg-x11-drv-openchrome-0.3.3-1.fc19
   3  https://admin.fedoraproject.org/updates/FEDORA-2013-9078/libdmx-1.1.2-4.20130524git5074d9d64.fc19
   3  https://admin.fedoraproject.org/updates/FEDORA-2013-9057/slock-1.1-3.fc19
   3  https://admin.fedoraproject.org/updates/FEDORA-2013-9072/libXext-1.3.1-3.20130524gitdfe6e1f3b.fc19
   3  https://admin.fedoraproject.org/updates/FEDORA-2013-9081/libFS-1.0.4-6.20130524git26dc23446.fc19
   3  https://admin.fedoraproject.org/updates/FEDORA-2013-9102/libXvMC-1.0.7-5.20130524gite9415ddef.fc19
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-9228/transifex-client-0.9-1.fc19
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-9209/dropbear-0.58-4.fc19
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-9457/socat-1.7.2.2-1.fc19
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-9467/cgit-0.9.2-1.fc19

The following builds have been pushed to Fedora 19 updates-testing

    acpid-2.0.19-1.fc19
    bacula-5.2.13-11.fc19
    bacula2-2.4.4-15.fc19
    cgit-0.9.2-1.fc19
    evince-3.8.2-1.fc19
    flac-1.3.0-1.fc19
    fping-3.5-1.fc19
    gdb-7.6-30.fc19
    gnome-boxes-3.8.2-5.fc19
    gnome-chess-3.8.2.1-1.fc19
    gnome-contacts-3.8.2-1.fc19
    gogoc-1.2-25.fc19
    hunspell-ga-4.6-5.fc19
    hunspell-ga-4.6-6.fc19
    hunspell-mr-20060920-13.fc19
    hunspell-ne-20080425-7.fc19
    im-chooser-1.6.3-1.fc19
    libX11-1.5.99.902-1.fc19
    libXcursor-1.1.13-7.20130524git8f677eaea.fc19
    libXext-1.3.1-6.20130524gitdfe6e1f3b.fc19
    libXfixes-5.0-7.20130524gitc480fe327.fc19
    libXi-1.7.1-5.20130524git661c45ca1.fc19
    libXinerama-1.1.2-6.20130524git99c644fc8.fc19
    libXrandr-1.4.0-5.20130524gitc90f74497.fc19
    libXrender-0.9.7-6.20130524git786f78fd8.fc19
    libXres-1.0.6-6.20130524gitf46818496.fc19
    libXt-1.1.3-5.20130524git1f4802b74.fc19
    libXtst-1.2.1-7.20130524gite7e04b7be.fc19
    libXv-1.0.7-6.20130524git50fc4cb18.fc19
    libXvMC-1.0.7-7.20130524gite9415ddef.fc19
    libXxf86dga-1.1.3-6.20130524gita8dc6be32.fc19
    libXxf86vm-1.1.2-6.20130524git4c4123441.fc19
    libdmx-1.1.2-5.20130524git5074d9d64.fc19
    libffi-3.0.13-3.fc19
    mono-basic-2.10-7.fc19
    netpbm-10.61.02-3.fc19
    nload-0.7.4-1.fc19
    nodejs-async-0.2.9-1.fc19
    nodejs-request-2.16.6-4.fc19
    obconf-2.0.3-13.20121006gitcfde28.fc19
    opencc-0.4.3-1.fc19
    openstack-quantum-2013.1.1-5.fc19
    perl-Archive-Extract-0.68-2.fc19
    perl-B-Lint-1.17-2.fc19
    perl-Devel-Size-0.79-1.fc19
    perl-File-CheckTree-4.42-2.fc19
    perl-HTTP-CookieJar-0.004-2.fc19
    perl-Hash-MultiValue-0.14-1.fc19
    perl-Module-Pluggable-4.8-1.fc19
    perl-Plack-Middleware-Deflater-0.09-1.fc19
    perl-Text-Soundex-3.04-2.fc19
    pyparted-3.10-1.fc19
    qgit-2.5-1.fc19
    qodem-0.3.2-5.fc19
    quota-4.01-6.fc19
    rpm-4.11.0.1-2.fc19
    seabios-1.7.2.2-1.fc19
    sharutils-4.13.3-4.fc19
    socat-1.7.2.2-1.fc19
    sugar-fototoon-15-2.fc19
    sugar-paint-59-1.fc19
    sugar-read-109-1.fc19
    util-linux-2.23.1-1.fc19
    virt-manager-0.10.0-0.5.gitde1695b2.fc19
    xorg-x11-drv-qxl-0.1.1-0.8.20130514git77a1594.fc19

Details about builds:

================================================================================
 acpid-2.0.19-1.fc19 (FEDORA-2013-9442)
 ACPI Event Daemon
--------------------------------------------------------------------------------
Update Information:

This is new version of acpid that fixes several bugs and adds support for mi
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 28 2013 Jaroslav Škarvada <jskarvad at redhat.com> - 2.0.19-1
- New version
--------------------------------------------------------------------------------

================================================================================
 bacula-5.2.13-11.fc19 (FEDORA-2013-9468)
 Cross platform network backup for Linux, Unix, Mac and Windows
--------------------------------------------------------------------------------
Update Information:

Here is where you give an explanation of your update.
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 28 2013 Petr Hracek <phracek at redhat.com> - 5.2.13-11
- Fix for nonfree code (#967417)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #967417 - bacula included non-free code
        https://bugzilla.redhat.com/show_bug.cgi?id=967417
--------------------------------------------------------------------------------

================================================================================
 bacula2-2.4.4-15.fc19 (FEDORA-2013-9448)
 Backup client for bacula version 2 server
--------------------------------------------------------------------------------
Update Information:

Remove non-free (but distributable) sha1 code.
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 28 2013 Tom Callaway <spot at fedoraproject.org> - 2.4.4-15
- drop non-free sha1 code bits
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #967419 - bacula2 included non-free code
        https://bugzilla.redhat.com/show_bug.cgi?id=967419
--------------------------------------------------------------------------------

================================================================================
 cgit-0.9.2-1.fc19 (FEDORA-2013-9467)
 A fast web interface for git
--------------------------------------------------------------------------------
Update Information:

A directory traversal vulnerability was discovered in cgit.  By default, cgit is not affected.  However, if cgit is configured to use a readme file from a filesystem path instead of from the git repo itself then files outside of the repository can be read.

Refer to the discussion on oss-security for further details:

http://www.openwall.com/lists/oss-security/2013/05/25/3
--------------------------------------------------------------------------------
ChangeLog:

* Mon May 27 2013 Todd Zullinger <tmz at pobox.com> - 0.9.2-1
- Update to 0.9.2, fixes CVE-2013-2117
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #967346 - CVE-2013-2117 cgit: directory traversal
        https://bugzilla.redhat.com/show_bug.cgi?id=967346
--------------------------------------------------------------------------------

================================================================================
 evince-3.8.2-1.fc19 (FEDORA-2013-9466)
 Document viewer
--------------------------------------------------------------------------------
Update Information:

This is a bug-fix release.

* Fix zoom and position of FitR link destinations
* Update the search string when the document is reloaded
* Fix --find command line option to actually show the find bar
* Forward EvView key events to the focused form field, so that it's possible to move between words with CTRL+Left/Right in text form fields instead of rotating the view
* Do not update the history while searching to prevent the find bar from begin closed unexpectedly
* Fix document to view coordinates transformation to take page borders into account. This makes search results, form fields, annotations and other items to be correctly placed on the view
* Update gtk-doc API files adding new symbols and removing the ones that no longer exist
* Update the man page
--------------------------------------------------------------------------------
ChangeLog:

* Wed May 15 2013 Marek Kasik <mkasik at redhat.com> - 3.8.2-1
- Update to 3.8.2
* Thu Apr 11 2013 Marek Kasik <mkasik at redhat.com> - 3.8.0-3
- Fix a typo and add a description of an option to man page
--------------------------------------------------------------------------------

================================================================================
 flac-1.3.0-1.fc19 (FEDORA-2013-9461)
 An encoder/decoder for the Free Lossless Audio Codec
--------------------------------------------------------------------------------
Update Information:

Update to the final 1.3.0 release.
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 28 2013 Miroslav Lichvar <mlichvar at redhat.com> 1.3.0-1
- update to 1.3.0
* Tue Apr  2 2013 Miroslav Lichvar <mlichvar at redhat.com> 1.3.0-0.2.pre3
- update to 1.3.0pre3
--------------------------------------------------------------------------------

================================================================================
 fping-3.5-1.fc19 (FEDORA-2013-9439)
 Scriptable, parallelized ping-like utility
--------------------------------------------------------------------------------
Update Information:

* Version 3.5
* Fix sprint_tm buffer size crash (reported by Japheth Cleaver)
* Addded -D flag to print timestamps (Toke Høiland-Jørgensen)
* Re-create configure script with autoconf 2.69 for aarch64 support (Chuck Anderson, #45)
--------------------------------------------------------------------------------
ChangeLog:

* Fri May 24 2013 Charles R. Anderson <cra at wpi.edu> - 3.5-1
- update to 3.5 (rhbz#925355, rhbz#966000)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #925355 - fping: Does not support aarch64 in f19 and rawhide
        https://bugzilla.redhat.com/show_bug.cgi?id=925355
  [ 2 ] Bug #966000 - fping-3.5 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=966000
--------------------------------------------------------------------------------

================================================================================
 gdb-7.6-30.fc19 (FEDORA-2013-9460)
 A GNU source-level debugger for C, C++, Fortran, Go and other languages
--------------------------------------------------------------------------------
Update Information:

Backported Python frame filters (Phil Muldoon).
Backported breakpoint conditions crash fix (Sergio Durigan Junior).

--------------------------------------------------------------------------------
ChangeLog:

* Tue May 21 2013 Jan Kratochvil <jan.kratochvil at redhat.com> - 7.6-30.fc19
- Backported Python frame filters (Phil Muldoon).
- Backported breakpoint conditions crash fix (Sergio Durigan Junior).
--------------------------------------------------------------------------------

================================================================================
 gnome-boxes-3.8.2-5.fc19 (FEDORA-2013-9443)
 A simple GNOME 3 application to access remote or virtual systems
--------------------------------------------------------------------------------
Update Information:

This update fixes the dependency explosion that appeared in gnome-boxes-3.8.2-4.fc19 build.

In addition to that, fixes carried over from the previous updates-testing builds:

 * remove exclusivearch, boxes should kind of work (slowly) on non-x68 arches
 * Fix build/install issues on non-x86 arch
 * New build with a patch for rhbz#963464
--------------------------------------------------------------------------------
ChangeLog:

* Mon May 27 2013 Kalev Lember <kalevlember at gmail.com> 3.8.2-5
- Only pull in qemu on non-kvm arches
* Fri May 24 2013 Christophe Fergeau <cfergeau at redhat.com> 3.8.2-4
- ... and remove again the ExclusiveArch on fedora. If libvirt-daemon-qemu
  is available, this means we can create (very slow) x86 boxes regardless
  of the arch
* Thu May 23 2013 Christophe Fergeau <cfergeau at redhat.com> 3.8.2-3
- Readd ExclusiveArch as Boxes is not really functional on non-x86
  arch even if it can be built. Also, libvirt-daemon-kvm is not
  available on every arch, causing rhbz#962325
* Thu May 16 2013 Christophe Fergeau <cfergeau at redhat.com> 3.8.2-2
- Add upstream patch for rhbz#963464
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #962325 - gnome-boxes-3.8.1.2-1.fc19.armv7hl requires libvirt-daemon-kvm
        https://bugzilla.redhat.com/show_bug.cgi?id=962325
  [ 2 ] Bug #963464 - Boxes generates invalid kickstart "keyboard" entries
        https://bugzilla.redhat.com/show_bug.cgi?id=963464
--------------------------------------------------------------------------------

================================================================================
 gnome-chess-3.8.2.1-1.fc19 (FEDORA-2013-9478)
 GNOME Chess game
--------------------------------------------------------------------------------
Update Information:

This update fixes a segfault when no engines are installed

--------------------------------------------------------------------------------
ChangeLog:

* Tue May 28 2013 Matthias Clasen <mclasen at redhat.com> - 3.8.2.1-1
- Update to 3.8.2.1
* Mon May 13 2013 Tanner Doshier <doshitan at gmail.com> - 3.8.2-1
- Update to 3.8.2
--------------------------------------------------------------------------------

================================================================================
 gnome-contacts-3.8.2-1.fc19 (FEDORA-2013-9447)
 Contacts manager for GNOME
--------------------------------------------------------------------------------
Update Information:

This is a bug-fix release.

* Updated translations
* Fixed "new" button height
* Fix webcam dialog shows blank camera
* Fix searching when string is empty
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 28 2013 Matthias Clasen <mclasen at redhat.com> - 3.8.2-1
- Update to 3.8.2
--------------------------------------------------------------------------------

================================================================================
 gogoc-1.2-25.fc19 (FEDORA-2013-9474)
 IPv6 TSP client for gogo6
--------------------------------------------------------------------------------
Update Information:

Add startup options via environment variable in service unit file
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 28 2013 Juan Orti Alcaine <jorti at fedoraproject.org> - 1.2-25
- Add startup options via environment variable in service unit file
--------------------------------------------------------------------------------

================================================================================
 hunspell-ga-4.6-5.fc19 (FEDORA-2013-9472)
 Irish hunspell dictionaries
--------------------------------------------------------------------------------
Update Information:

empty affix file
--------------------------------------------------------------------------------
ChangeLog:

* Mon May 27 2013 Caolán McNamara <caolanm at redhat.com> - 4.6-5
- Resolves: rhbz#967637 empty ga.aff
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #967637 - ga_IE.aff is empty but ga_IE.dic contains affix rules
        https://bugzilla.redhat.com/show_bug.cgi?id=967637
--------------------------------------------------------------------------------

================================================================================
 hunspell-ga-4.6-6.fc19 (FEDORA-2013-9473)
 Irish hunspell dictionaries
--------------------------------------------------------------------------------
Update Information:

and fix the encoding bustage of the affix
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 28 2013 Caolán McNamara <caolanm at redhat.com> - 4.6-6
- Resolves: rhbz#967637 encoding bustage
* Mon May 27 2013 Caolán McNamara <caolanm at redhat.com> - 4.6-5
- Resolves: rhbz#967637 empty ga.aff
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #967637 - ga_IE.aff is empty but ga_IE.dic contains affix rules
        https://bugzilla.redhat.com/show_bug.cgi?id=967637
--------------------------------------------------------------------------------

================================================================================
 hunspell-mr-20060920-13.fc19 (FEDORA-2013-9438)
 Marathi hunspell dictionaries
--------------------------------------------------------------------------------
Update Information:

Removed ^M character from each line of wordlist mr_IN.dic file
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 28 2013 Parag Nemade <pnemade AT redhat DOT com> - 20060920-13
- Resolves:rh# 967639: mr_IN.dic contains both CRLF and LF line terminators
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #967639 - mr_IN.dic contains both CRLF *and* LF line terminators
        https://bugzilla.redhat.com/show_bug.cgi?id=967639
--------------------------------------------------------------------------------

================================================================================
 hunspell-ne-20080425-7.fc19 (FEDORA-2013-9449)
 Nepali hunspell dictionaries
--------------------------------------------------------------------------------
Update Information:

Removed ^M from each words in ne_NP.dic file. Other is fixed 2 words.
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 28 2013 Parag <pnemade AT redhat DOT com> - 20080425-7
- Resolves:rh#959987: Error message: “0 is wrong flag id” occurs when using hunspell-ne
- Resolves:rh#967638: ne_NP.dic contains both CRLF and LF line terminators
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #959987 - Error message: “0 is wrong flag id” occurs when  using hunspell-ne
        https://bugzilla.redhat.com/show_bug.cgi?id=959987
  [ 2 ] Bug #967638 - ne_NP.dic contains both CRLF *and* LF line terminators
        https://bugzilla.redhat.com/show_bug.cgi?id=967638
--------------------------------------------------------------------------------

================================================================================
 im-chooser-1.6.3-1.fc19 (FEDORA-2013-9456)
 Desktop Input Method configuration tool
--------------------------------------------------------------------------------
Update Information:

* New upstream release
* Fix a crash issue
* Add a link to the log file in the error dialog
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 28 2013 Akira TAGOH <tagoh at redhat.com> - 1.6.3-1
- New upstream release.
  - Add a link to the log file in the error dialog (#950488)
  - Fix a crash issue (#859624)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #950488 - Error selecting IBus in the Input Method Selector application
        https://bugzilla.redhat.com/show_bug.cgi?id=950488
  [ 2 ] Bug #859624 - [abrt] im-chooser-1.5.2.2-1.fc17: Process /usr/bin/im-chooser was killed by signal 11 (SIGSEGV)
        https://bugzilla.redhat.com/show_bug.cgi?id=859624
--------------------------------------------------------------------------------

================================================================================
 libX11-1.5.99.902-1.fc19 (FEDORA-2013-9484)
 Core X11 protocol client library
--------------------------------------------------------------------------------
Update Information: