Fedora 18 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Fri Nov 1 03:59:20 UTC 2013 

The following Fedora 18 Security updates need testing:
 Age  URL
 195  https://admin.fedoraproject.org/updates/FEDORA-2013-6117/eucalyptus-3.2.2-1.fc18
  41  https://admin.fedoraproject.org/updates/FEDORA-2013-17195/spice-gtk-0.18-3.fc18
  38  https://admin.fedoraproject.org/updates/FEDORA-2013-17431/thunderbird-17.0.9-1.fc18
  35  https://admin.fedoraproject.org/updates/FEDORA-2013-17635/wireshark-1.10.2-4.fc18
  34  https://admin.fedoraproject.org/updates/FEDORA-2013-17853/davfs2-1.4.7-3.fc18
  33  https://admin.fedoraproject.org/updates/FEDORA-2013-17912/chicken-4.8.0.4-4.fc18
  22  https://admin.fedoraproject.org/updates/FEDORA-2013-18647/gnupg-1.4.15-1.fc18
  21  https://admin.fedoraproject.org/updates/FEDORA-2013-18802/phpMyAdmin-3.5.8.2-1.fc18
  13  https://admin.fedoraproject.org/updates/FEDORA-2013-19307/GraphicsMagick-1.3.18-2.fc18
   9  https://admin.fedoraproject.org/updates/FEDORA-2013-19648/mysql-5.5.34-1.fc18
   6  https://admin.fedoraproject.org/updates/FEDORA-2013-19976/mod_nss-1.0.8-24.fc18
   3  https://admin.fedoraproject.org/updates/FEDORA-2013-20200/python-backports-ssl_match_hostname-3.4.0.2-1.fc18
   3  https://admin.fedoraproject.org/updates/FEDORA-2013-20176/mantis-1.2.15-3.fc18
   1  https://admin.fedoraproject.org/updates/FEDORA-2013-20354/xen-4.2.3-6.fc18
   1  https://admin.fedoraproject.org/updates/FEDORA-2013-20360/spice-0.12.4-3.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-20410/poppler-0.20.2-17.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-20429/xulrunner-25.0-2.fc18,firefox-25.0-3.fc18


The following Fedora 18 Critical Path updates have yet to be approved:
 Age URL
 264  https://admin.fedoraproject.org/updates/FEDORA-2013-2192/nautilus-3.6.3-5.fc18
  13  https://admin.fedoraproject.org/updates/FEDORA-2013-19289/gdisk-0.8.8-1.fc18
  13  https://admin.fedoraproject.org/updates/FEDORA-2013-19292/usbmuxd-1.0.8-10.fc18
  13  https://admin.fedoraproject.org/updates/FEDORA-2013-19268/qtwebkit-2.3.3-1.fc18
  12  https://admin.fedoraproject.org/updates/FEDORA-2013-19456/device-mapper-persistent-data-0.2.8-1.fc18
   3  https://admin.fedoraproject.org/updates/FEDORA-2013-20150/nss-util-3.15.2-2.fc18,nss-softokn-3.15.2-2.fc18,nss-3.15.2-2.fc18
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-20263/openssl-1.0.1e-30.fc18
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-20268/sane-backends-1.0.24-4.fc18
   2  https://admin.fedoraproject.org/updates/FEDORA-2013-20279/gnome-abrt-0.3.3-1.fc18,abrt-2.1.9-1.fc18,libreport-2.1.9-1.fc18,satyr-0.11-1.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-20434/thunderbird-24.1.0-1.fc18,thunderbird-lightning-2.6.2-2.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-20422/bind-9.9.3-7.P2.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-20410/poppler-0.20.2-17.fc18
   0  https://admin.fedoraproject.org/updates/FEDORA-2013-20429/xulrunner-25.0-2.fc18,firefox-25.0-3.fc18


The following builds have been pushed to Fedora 18 updates-testing

    alpine-2.10-4.fc18
    bind-9.9.3-7.P2.fc18
    ctstream-9-1.fc18
    firefox-25.0-3.fc18
    kdevelop-4.5.2-1.fc18
    kdevelop-php-1.5.2-1.fc18
    kdevplatform-1.5.2-1.fc18
    libetonyek-0.0.0-1.fc18
    libxdg-basedir-1.2.0-5.fc18
    orthanc-0.7.1-1.fc18
    perl-Types-Serialiser-0.03-2.fc18
    poppler-0.20.2-17.fc18
    python-offtrac-0.1.0-1.fc18
    thunderbird-24.1.0-1.fc18
    thunderbird-lightning-2.6.2-2.fc18
    tzdata-2013h-1.fc18
    xulrunner-25.0-2.fc18
    youtube-dl-2013.10.30-1.fc18

Details about builds:


================================================================================
 alpine-2.10-4.fc18 (FEDORA-2013-20442)
 powerful, easy to use console email client
--------------------------------------------------------------------------------
Update Information:

new 2.10 bugfix release.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct 31 2013 Rex Dieter <rdieter at fedoraproject.org> 2.10-4
- re-add README.fedora
* Sat Aug  3 2013 Dennis Gilmore <dennis at ausil.us> - 2.10-3
- remove refrences to non existant README.fedora file
* Sat Aug  3 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.10-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Fri Mar 15 2013 Paul Wouters <pwouters at redhat.com> - 2.10-1
- Build from new upstream for 2.10, fixes rhbz#838359
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.03-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #838359 - alpine crashes when suspending in password prompt mode
        https://bugzilla.redhat.com/show_bug.cgi?id=838359
--------------------------------------------------------------------------------


================================================================================
 bind-9.9.3-7.P2.fc18 (FEDORA-2013-20422)
 The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
--------------------------------------------------------------------------------
Update Information:

One bug fixed.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct 31 2013 Tomas Hozza <thozza at redhat.com> 32:9.9.3-7.P2
- Correct the upstream patch for #794940
* Wed Oct 30 2013 Tomas Hozza <thozza at redhat.com> 32:9.9.3-6.P2
- Use upstream version of patch for previously fixed #794940
* Fri Oct 18 2013 Tomas Hozza <thozza at redhat.com> 32:9.9.3-5.P2
- Fix race condition on send buffers in dighost.c (#794940)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #794940 - 'host' dies with SEGV.
        https://bugzilla.redhat.com/show_bug.cgi?id=794940
--------------------------------------------------------------------------------


================================================================================
 ctstream-9-1.fc18 (FEDORA-2013-20431)
 Get URLs of Czech Television video streams
--------------------------------------------------------------------------------
Update Information:

This release fixes locating JSON structure.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct 31 2013 Petr Pisar <ppisar at redhat.com> - 9-1
- Version 9 bump
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1024821 - ctstream-9 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1024821
--------------------------------------------------------------------------------


================================================================================
 firefox-25.0-3.fc18 (FEDORA-2013-20429)
 Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:

Upstream update to Firefox 25
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 30 2013 Martin Stransky <stransky at redhat.com> - 25.0-3
- Update to 25.0 Build 3
* Thu Oct 24 2013 Martin Stransky <stransky at redhat.com> - 25.0-2
- Fixed xulrunner dependency
* Thu Oct 24 2013 Martin Stransky <stransky at redhat.com> - 25.0-1
- Update to 25.0 Build 2
* Thu Oct 17 2013 Martin Stransky <stransky at redhat.com> - 24.0-2
- Fixed rhbz#1005611 - BEAST workaround not enabled in Firefox
--------------------------------------------------------------------------------


================================================================================
 kdevelop-4.5.2-1.fc18 (FEDORA-2013-20413)
 Integrated Development Environment for C++/C
--------------------------------------------------------------------------------
Update Information:

KDevelop 4.5.2 release.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct 31 2013 Jan Grulich <jgrulich at redhat.com> - 9:4.5.2-1
- Update to 4.5.2
* Wed Aug  7 2013 Jan Grulich <jgrulich at redhat.com> - 9:4.5.1-4
- Not necessary to require the latest version of okteta
* Sat Aug  3 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 9:4.5.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Tue Jul 30 2013 Petr Machata <pmachata at redhat.com> - 9:4.5.1-2
- Rebuild for boost 1.54.0
--------------------------------------------------------------------------------


================================================================================
 kdevelop-php-1.5.2-1.fc18 (FEDORA-2013-20413)
 Php language and documentation plugins for KDevelop
--------------------------------------------------------------------------------
Update Information:

KDevelop 4.5.2 release.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct 31 2013 Jan Grulich <jgrulich at redhat.com> - 1.5.2-1
- Update to 1.5.2
* Sat Aug  3 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.5.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 kdevplatform-1.5.2-1.fc18 (FEDORA-2013-20413)
 Libraries for use by KDE development tools
--------------------------------------------------------------------------------
Update Information:

KDevelop 4.5.2 release.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct 31 2013 Jan Grulich <jgrulich at redhat.com> - 1.5.2-1
- Update to 1.5.2
* Sat Aug  3 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.5.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Tue Jul 30 2013 Petr Machata <pmachata at redhat.com> - 1.5.1-2
- Rebuild for boost 1.54.0
--------------------------------------------------------------------------------


================================================================================
 libetonyek-0.0.0-1.fc18 (FEDORA-2013-20439)
 A library for import of Apple Keynote presentations
--------------------------------------------------------------------------------
Update Information:

A new package.
--------------------------------------------------------------------------------


================================================================================
 libxdg-basedir-1.2.0-5.fc18 (FEDORA-2013-20424)
 Implementation of the XDG Base Directory Specifications
--------------------------------------------------------------------------------
Update Information:

Small patch that frees cache->runtimeDirectory in xdgFreeData()
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct 31 2013 Jon Ciesla <limburgher at gmail.com> - 1.2.0-5
- Patch for memory leak, BZ 1018527.
* Sat Aug  3 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.2.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.2.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1018527 - memory leak in libxdg-basedir 1.2.0 (xdgFreeData() does not free cache->runtimeDirectory)
        https://bugzilla.redhat.com/show_bug.cgi?id=1018527
--------------------------------------------------------------------------------


================================================================================
 orthanc-0.7.1-1.fc18 (FEDORA-2013-20433)
 RESTful DICOM server for healthcare and medical research
--------------------------------------------------------------------------------
Update Information:

New upstream version of Orthanc and packaging of Orthanc Client
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 30 2013 Sebastien Jodogne <s.jodogne at gmail.com> 0.7.1-1
- New upstream version
- Fix for big endian architectures (bug #985748)
- Packaging of the Orthanc Client library
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #985748 - 2 tests failing on big endian platforms
        https://bugzilla.redhat.com/show_bug.cgi?id=985748
--------------------------------------------------------------------------------


================================================================================
 perl-Types-Serialiser-0.03-2.fc18 (FEDORA-2013-20441)
 Simple data types for common serialization formats
--------------------------------------------------------------------------------
Update Information:

This is the first Fedora / EPEL release of perl-Types-Serialiser.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1024913 - Review Request: perl-Types-Serialiser - Simple data types for common serialization formats
        https://bugzilla.redhat.com/show_bug.cgi?id=1024913
--------------------------------------------------------------------------------


================================================================================
 poppler-0.20.2-17.fc18 (FEDORA-2013-20410)
 PDF rendering library
--------------------------------------------------------------------------------
Update Information:

This update fixes several security issues of pdfseparate.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct 31 2013 Marek Kasik <mkasik at redhat.com> 0.20.2-17
- Fixes CVE-2013-4473 (Limit length of output to pathName buffer)
- Fixes CVE-2013-4474 (Check file pattern)
- Resolves: #1024765
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1024753 - CVE-2013-4473 poppler: stack-based buffer overflow in pdfseparate utility
        https://bugzilla.redhat.com/show_bug.cgi?id=1024753
  [ 2 ] Bug #1024762 - CVE-2013-4474 poppler: format string flaw in pdfseparate utility
        https://bugzilla.redhat.com/show_bug.cgi?id=1024762
--------------------------------------------------------------------------------


================================================================================
 python-offtrac-0.1.0-1.fc18 (FEDORA-2013-20437)
 Trac xmlrpc library
--------------------------------------------------------------------------------
Update Information:

Latest upstream with python3 support.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 30 2013 Ralph Bean <rbean at redhat.com> - 0.1.0-1
- Python3 support
* Sun Aug  4 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.0.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1024819 - python-offtrac: Support Python 3
        https://bugzilla.redhat.com/show_bug.cgi?id=1024819
--------------------------------------------------------------------------------


================================================================================
 thunderbird-24.1.0-1.fc18 (FEDORA-2013-20434)
 Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:

For changes see:
http://www.mozilla.org/en-US/thunderbird/24.1.0/releasenotes/
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 30 2013 Jan Horak <jhorak at redhat.com> - 24.1.0-1
- Update to 24.1.0
* Thu Oct 17 2013 Martin Stransky <stransky at redhat.com> - 24.0-4
- Fixed rhbz#1005611 - BEAST workaround not enabled in Firefox
* Wed Sep 25 2013 Jan Horak <jhorak at redhat.com> - 24.0-3
- Update to 24.0
* Mon Sep 23 2013 Jan Horak <jhorak at redhat.com> - 17.0.9-1
- Update to 17.0.9 ESR
--------------------------------------------------------------------------------


================================================================================
 thunderbird-lightning-2.6.2-2.fc18 (FEDORA-2013-20434)
 The calendar extension to Thunderbird
--------------------------------------------------------------------------------
Update Information:

For changes see:
http://www.mozilla.org/en-US/thunderbird/24.1.0/releasenotes/
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 30 2013 Jan Horak <jhorak at redhat.com> - 2.6.2-2
- Update to 2.6.2
* Fri Sep 20 2013 Orion Poplawski <orion at cora.nwra.com> - 2.6-1
- Drop alarm patch
- Drop -fpermissive
- Update to 2.6
- Exclude arm architecture
* Sat Aug 17 2013 Orion Poplawski <orion at cora.nwra.com> - 1.9.1-5
- Fix up gdata lightning version dependency
* Fri Aug 16 2013 Orion Poplawski <orion at cora.nwra.com> - 1.9.1-4
- Split Google data provider into a sub-package (bug #554113)
* Sun Aug  4 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.9.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 tzdata-2013h-1.fc18 (FEDORA-2013-20435)
 Timezone data
--------------------------------------------------------------------------------
Update Information:

tzdata-2013h update
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 30 2013 Patsy Franklin <pfrankli at redhat.com> 2013h-1
- Rebase to 2013h 
  - Lybia switched to using UTC+2 without DST
  - Western Sahara (Africa/ElAaiun) uses Morocco's DST rules
  - Acres and Amazon swithc to UTC-4 and UTC-5 on 2013-11-10
  - Add entries for DST transition in Morocco in the year 2038
--------------------------------------------------------------------------------


================================================================================
 xulrunner-25.0-2.fc18 (FEDORA-2013-20429)
 XUL Runtime for Gecko Applications
--------------------------------------------------------------------------------
Update Information:

Upstream update to Firefox 25
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 30 2013 Martin Stransky <stransky at redhat.com> - 25.0-2
- Update to 25.0 Build 3
* Wed Oct 23 2013 Martin Stransky <stransky at redhat.com> - 25.0-1
- Update to 25.0 Build 2
* Tue Oct 15 2013 Karsten Hopp <karsten at redhat.com> 24.0-3
- drop PPC-only rhbz-911314.patch, fixed upstream
--------------------------------------------------------------------------------


================================================================================
 youtube-dl-2013.10.30-1.fc18 (FEDORA-2013-20445)
 A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:

New RPM.
New version.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Oct 31 2013 Christopher Meng <rpm at cicku.me> - 2013.10.30-1
- Update to new release(BZ#1024948).
* Mon Oct 28 2013 Christopher Meng <rpm at cicku.me> - 2013.10.28-1
- Update to new release(BZ#1022706).
* Wed Oct 23 2013 Christopher Meng <rpm at cicku.me> - 2013.10.23-1
- Update to new release.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1024948 - youtube-dl-2013.10.30 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1024948
  [ 2 ] Bug #1022706 - youtube-dl-2013.10.28 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1022706
--------------------------------------------------------------------------------

More information about the test mailing list