Fedora 20 updates-testing report
updates at fedoraproject.org
updates at fedoraproject.org
Thu Sep 26 06:32:20 UTC 2013
The following Fedora 20 Security updates need testing:
Age URL
6 https://admin.fedoraproject.org/updates/FEDORA-2013-17171/hplip-3.13.9-2.fc20
4 https://admin.fedoraproject.org/updates/FEDORA-2013-17338/seamonkey-2.21-1.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2013-17398/xpdf-3.03-8.fc20
2 https://admin.fedoraproject.org/updates/FEDORA-2013-17413/ReviewBoard-1.7.14-1.fc20,python-djblets-0.7.18-1.fc20
1 https://admin.fedoraproject.org/updates/FEDORA-2013-17506/libvirt-1.1.2-3.fc20
0 https://admin.fedoraproject.org/updates/FEDORA-2013-17603/rubygems-2.0.10-106.fc20
0 https://admin.fedoraproject.org/updates/FEDORA-2013-17627/wireshark-1.10.2-7.fc20
The following Fedora 20 Critical Path updates have yet to be approved:
Age URL
12 https://admin.fedoraproject.org/updates/FEDORA-2013-16638/libndp-1.0-2.fc20
8 https://admin.fedoraproject.org/updates/FEDORA-2013-16940/device-mapper-persistent-data-0.2.7-1.fc20
8 https://admin.fedoraproject.org/updates/FEDORA-2013-16949/langtable-0.0.15-1.fc20
7 https://admin.fedoraproject.org/updates/FEDORA-2013-17086/btrfs-progs-0.20.rc1.20130917git194aa4a-1.fc20
7 https://admin.fedoraproject.org/updates/FEDORA-2013-17082/perl-parent-0.228-1.fc20
6 https://admin.fedoraproject.org/updates/FEDORA-2013-17159/libproxy-0.4.11-7.fc20
5 https://admin.fedoraproject.org/updates/FEDORA-2013-17244/thunderbird-24.0-2.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2013-17385/kde-settings-20-3.fc20.1
2 https://admin.fedoraproject.org/updates/FEDORA-2013-17442/keyutils-1.5.6-2.fc20
2 https://admin.fedoraproject.org/updates/FEDORA-2013-17496/libselinux-2.1.13-19.fc20
2 https://admin.fedoraproject.org/updates/FEDORA-2013-17486/rootfiles-8.1-14.fc20
2 https://admin.fedoraproject.org/updates/FEDORA-2013-17410/rygel-0.19.7-1.fc20
1 https://admin.fedoraproject.org/updates/FEDORA-2013-17582/PackageKit-0.8.11-2.fc20
0 https://admin.fedoraproject.org/updates/FEDORA-2013-17672/cronie-1.4.11-4.fc20
0 https://admin.fedoraproject.org/updates/FEDORA-2013-17639/policycoreutils-2.1.14-81.fc20
0 https://admin.fedoraproject.org/updates/FEDORA-2013-17645/empathy-3.10.0-1.fc20,telepathy-glib-0.21.2-1.fc20
0 https://admin.fedoraproject.org/updates/FEDORA-2013-17667/gstreamer1-plugins-bad-free-1.2.0-1.fc20,gstreamer1-plugins-good-1.2.0-1.fc20,gstreamer1-plugins-base-1.2.0-1.fc20,gstreamer1-1.2.0-1.fc20
The following builds have been pushed to Fedora 20 updates-testing
cronie-1.4.11-4.fc20
empathy-3.10.0-1.fc20
fail2ban-0.9-0.3.git1f1a561.fc20
git-cola-1.8.5-1.fc20
gpaste-3.5-1.fc20
graphite-web-0.9.12-3.fc20
gstreamer1-1.2.0-1.fc20
gstreamer1-plugins-bad-free-1.2.0-1.fc20
gstreamer1-plugins-base-1.2.0-1.fc20
gstreamer1-plugins-good-1.2.0-1.fc20
hawtjni-1.9-1.fc20
imagefactory-plugins-1.1.3-2.fc20
jetring-0.20-3.fc20
keyrings-filesystem-1-1.fc20
libuv-0.10.17-1.fc20
libvirt-1.1.2-4.fc20
mfiler4-1.2.6-1.fc20
mod_cluster-1.2.6-1.fc20
mongo-java-driver-2.11.3-1.fc20
munin-2.0.17-6.fc20
nemo-extensions-1.8.0-0.3.git3e366de.fc20
nodejs-0.10.19-1.fc20
opensips-1.10.0-1.fc20
openstack-packstack-2013.2.1-0.10.dev763.fc20
perl-Pod-Spell-1.08-1.fc20
perl-YAML-Tiny-1.56-1.fc20
policycoreutils-2.1.14-81.fc20
pspp-0.8.1-1.fc20
python-apsw-3.8.0.r2-2.fc20
python-bucky-0.2.6-3.fc20
python-carbon-0.9.12-2.fc20
python-flask-script-0.6.2-1.fc20
python-llvmpy-0.12.0-7.fc20
qemu-1.6.0-8.fc20
qt5-qtbase-5.1.1-5.fc20
qt5-qtquickcontrols-5.1.1-2.fc20
qt5-qtwayland-5.1.0-0.1.20130826git3b0b90b.fc20
rubygems-2.0.10-106.fc20
telepathy-glib-0.21.2-1.fc20
virt-manager-0.10.0-3.gita2e52067.fc20
vpnc-0.5.3-19.svn457.fc20
wireshark-1.10.2-7.fc20
xyzsh-1.5.1-1.fc20
yum-langpacks-0.4.1-2.fc20
Details about builds:
================================================================================
cronie-1.4.11-4.fc20 (FEDORA-2013-17672)
Cron daemon for executing programs at set times
--------------------------------------------------------------------------------
Update Information:
Cron jobs sometimes don't run e.g. when environment is using XDG_RUNTIME_DIR.
Cron daemon unit file should use KillMode=process to kill dependent processes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 Marcela Mašláňová <mmaslano at redhat.com> - 1.4.11-4
- some jobs are not executed because not all environment variables are set 995590
- cronie's systemd script use "KillMode=process" 919290
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #919290 - should cronie's systemd script use "KillMode=process"?
https://bugzilla.redhat.com/show_bug.cgi?id=919290
[ 2 ] Bug #995590 - Cron job runs, but doesn't do anything
https://bugzilla.redhat.com/show_bug.cgi?id=995590
--------------------------------------------------------------------------------
================================================================================
empathy-3.10.0-1.fc20 (FEDORA-2013-17645)
Instant Messaging Client for GNOME
--------------------------------------------------------------------------------
Update Information:
Stable releases. For changes, please refer to:
http://lists.freedesktop.org/archives/telepathy/2013-September/006505.html
http://lists.freedesktop.org/archives/telepathy/2013-September/006504.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Brian Pepple <bpepple at fedoraproject.org> - 3.10.0-1
- Update to 3.10.0.
--------------------------------------------------------------------------------
================================================================================
fail2ban-0.9-0.3.git1f1a561.fc20 (FEDORA-2013-17620)
Ban IPs that make too many password failures
--------------------------------------------------------------------------------
Update Information:
Update to current 0.9 git branch. Better systemd journal support.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Orion Poplawski <orion at cora.nwra.com> - 0.9-0.3.git1f1a561
- Update to current 0.9 git branch
- Rebase init patch, drop jail.d and notmp patch applied upstream
--------------------------------------------------------------------------------
================================================================================
git-cola-1.8.5-1.fc20 (FEDORA-2013-17648)
A sleek and powerful git GUI
--------------------------------------------------------------------------------
Update Information:
Let's terminate bugs.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 Christopher Meng <rpm at cicku.me> - 1.8.5-1
- Update to 1.8.5(BZ#1011796) with fix for BZ#886826.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1011796 - git-cola-1.8.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1011796
[ 2 ] Bug #886826 - [abrt] git-cola-1.8.0-1.fc18: decorators.py:84:interruptable:OSError: [Errno 2] No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=886826
--------------------------------------------------------------------------------
================================================================================
gpaste-3.5-1.fc20 (FEDORA-2013-17637)
Clipboard management system
--------------------------------------------------------------------------------
Update Information:
* Compatibility with gnome-shell 3.9.90 and above
* The gnome-shell applet has totally been rewritten and is now more intuitive.
* Port to newer glib
* Don’t use deprecated stuff from gtk+
* The X11 keybinder is now optional
* New keybinding to sync the clipboard to the primary selection
* New keybinding to sync the primary selection to the clipboard
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 Mohamed El Morabity <pikachu.2014 at gmail.com> - 3.5-1
- Update to 3.5
* Mon Sep 23 2013 Mohamed El Morabity <melmorabity at fedoraproject.org> - 3.5-0.2.20130922gitf124a2f
- Update to a newer snapshot
* Wed Sep 18 2013 Mohamed El Morabity <melmorabity at fedoraproject.org> - 3.5-0.1.20130918git6ab4033
- Update to a newer snapshot
--------------------------------------------------------------------------------
================================================================================
graphite-web-0.9.12-3.fc20 (FEDORA-2013-17630)
A Django webapp for enterprise scalable realtime graphing
--------------------------------------------------------------------------------
Update Information:
Tested against ami-05355a6c.
Don't ship js/ext/resources/*.swf (RHBZ#1000253)
Don't ship js/ext/resources/*.swf (RHBZ#1000253)
Don't ship js/ext/resources/*.swf (RHBZ#1000253)
Don't ship js/ext/resources/*.swf (RHBZ#1000253)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Jonathan Steffan <jsteffan at fedoraproject.org> - 0.9.12-3
- Reorder Requires conditionals to fix amzn1 issues (RHBZ#1007300)
- Ensure python-whisper is also updated
* Tue Sep 17 2013 Jonathan Steffan <jsteffan at fedoraproject.org> - 0.9.12-2
- Don't ship js/ext/resources/*.swf (RHBZ#1000253)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1007300 - Installation on AWS (CentOS) fails
https://bugzilla.redhat.com/show_bug.cgi?id=1007300
[ 2 ] Bug #1000253 - graphite-web contains bundled Flash files
https://bugzilla.redhat.com/show_bug.cgi?id=1000253
--------------------------------------------------------------------------------
================================================================================
gstreamer1-1.2.0-1.fc20 (FEDORA-2013-17667)
GStreamer streaming media framework runtime
--------------------------------------------------------------------------------
Update Information:
Latest stable release. For list of changes please refer to:
http://lists.freedesktop.org/archives/gstreamer-announce/2013-September/000294.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Brian Pepple <bpepple at fedoraproject.org> - 1.2.0-1
- Update to 1.2.0.
--------------------------------------------------------------------------------
================================================================================
gstreamer1-plugins-bad-free-1.2.0-1.fc20 (FEDORA-2013-17667)
GStreamer streaming media framework "bad" plugins
--------------------------------------------------------------------------------
Update Information:
Latest stable release. For list of changes please refer to:
http://lists.freedesktop.org/archives/gstreamer-announce/2013-September/000294.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Brian Pepple <bpepple at fedoraproject.org> - 1.2.0-1
- Update to 1.2.0.
--------------------------------------------------------------------------------
================================================================================
gstreamer1-plugins-base-1.2.0-1.fc20 (FEDORA-2013-17667)
GStreamer streaming media framework base plugins
--------------------------------------------------------------------------------
Update Information:
Latest stable release. For list of changes please refer to:
http://lists.freedesktop.org/archives/gstreamer-announce/2013-September/000294.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Brian Pepple <bpepple at fedoraproject.org> - 1.2.0-1
- Update to 1.2.0.
--------------------------------------------------------------------------------
================================================================================
gstreamer1-plugins-good-1.2.0-1.fc20 (FEDORA-2013-17667)
GStreamer plugins with good code and licensing
--------------------------------------------------------------------------------
Update Information:
Latest stable release. For list of changes please refer to:
http://lists.freedesktop.org/archives/gstreamer-announce/2013-September/000294.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Brian Pepple <bpepple at fedoraproject.org> - 1.2.0-1
- Update to 1.2.0.
--------------------------------------------------------------------------------
================================================================================
hawtjni-1.9-1.fc20 (FEDORA-2013-17602)
Code generator that produces the JNI code
--------------------------------------------------------------------------------
Update Information:
Upstream release 1.9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 18 2013 Marek Goldmann <mgoldman at redhat.com> - 1.9-1
- Upstream release 1.9
- hawtjni: missing barriers in cache initialization, RHBZ#957181
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #957181 - hawtjni: missing barriers in cache initialization
https://bugzilla.redhat.com/show_bug.cgi?id=957181
--------------------------------------------------------------------------------
================================================================================
imagefactory-plugins-1.1.3-2.fc20 (FEDORA-2013-17612)
Default plugins for the Image Factory system image generation tool
--------------------------------------------------------------------------------
Update Information:
Allows for TinMan builds to be aborted if they fail. Without this feature, TinMan can leak VMs.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
jetring-0.20-3.fc20 (FEDORA-2013-17605)
GPG keyring maintenance using changesets
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1009996 - Review Request: jetring - GPG keyring maintenance using changesets
https://bugzilla.redhat.com/show_bug.cgi?id=1009996
--------------------------------------------------------------------------------
================================================================================
keyrings-filesystem-1-1.fc20 (FEDORA-2013-17646)
Keyrings filesystem layout
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1010857 - Review Request: keyrings-filesystem - Keyrings filesystem layout
https://bugzilla.redhat.com/show_bug.cgi?id=1010857
--------------------------------------------------------------------------------
================================================================================
libuv-0.10.17-1.fc20 (FEDORA-2013-17647)
Platform layer for node.js
--------------------------------------------------------------------------------
Update Information:
2013.09.24, node.js Version 0.10.19 (Stable)
* readline: handle input starting with control chars (Eric Schrock)
* configure: add mips-float-abi (soft, hard) option (Andrei Sedoi)
* stream: objectMode transforms allow falsey values (isaacs)
* tls: prevent duplicate values returned from read (Nathan Rajlich)
* tls: NPN protocols are now local to connections (Fedor Indutny)
2013.09.25, libuv Version 0.10.17 (Stable)
* build: remove GCC_WARN_ABOUT_MISSING_NEWLINE (Ben Noordhuis)
* darwin: fix 10.6 build error in fsevents.c (Ben Noordhuis)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 T.C. Hollingsworth <tchollingsworth at gmail.com> - 1:0.10.17-1
- new upstream release 0.10.17
https://github.com/joyent/libuv/blob/v0.10.17/ChangeLog
--------------------------------------------------------------------------------
================================================================================
libvirt-1.1.2-4.fc20 (FEDORA-2013-17595)
Library providing a simple virtualization API
--------------------------------------------------------------------------------
Update Information:
* Fix snapshot restore when VM has disabled usb support (bz #1011520)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Cole Robinson <crobinso at redhat.com> - 1.1.2-4
- Fix snapshot restore when VM has disabled usb support (bz #1011520)
* Mon Sep 23 2013 Cole Robinson <crobinso at redhat.com> - 1.1.2-3
- Sync with v1.1.2-maint
- Rebuild for libswan soname bump (bz #1009701)
- CVE-2013-4311: Insecure polkit usage (bz #1009539, bz #1005332)
- CVE-2013-4296: Invalid free memory stats (bz #1006173, bz #1009667)
- CVE-2013-4297: Invalid free in NBDDeviceAssociate (bz #1006505, bz #1006511)
- Fix virsh block-commit abort (bz #1010056)
* Wed Sep 18 2013 Daniel P. Berrange <berrange at redhat.com> - 1.1.2-2
- Rebuild for soname break in openswman package
--------------------------------------------------------------------------------
================================================================================
mfiler4-1.2.6-1.fc20 (FEDORA-2013-17622)
2 pane file manager with a embedded shell
--------------------------------------------------------------------------------
Update Information:
New version 1.2.6 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 Mamoru TASAKA <mtasaka at fedoraproject.org> - 1.2.6-1
- 1.2.6
--------------------------------------------------------------------------------
================================================================================
mod_cluster-1.2.6-1.fc20 (FEDORA-2013-17671)
Apache HTTP load balancer
--------------------------------------------------------------------------------
Update Information:
Upstream release 1.2.6.Final + apache 2.2/2.4 compatibility.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 Marek Goldmann <mgoldman at redhat.com> - 1.2.6-1
- Upstream release 1.2.6.Final
- Support for Apache 2.4 in mod_cluster.conf
--------------------------------------------------------------------------------
================================================================================
mongo-java-driver-2.11.3-1.fc20 (FEDORA-2013-17668)
A Java driver for MongoDB
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Severin Gehwolf <sgehwolf at redhat.com> - 2.11.3-1
- Update to latest upstream release.
* Thu Sep 5 2013 Omair Majid <omajid at redhat.com> - 2.11.2-2
- Do not require -bson subpackage. The classes are present in both jars.
--------------------------------------------------------------------------------
================================================================================
munin-2.0.17-6.fc20 (FEDORA-2013-17665)
Network-wide graphing framework (grapher/gatherer)
--------------------------------------------------------------------------------
Update Information:
BZ# 989080 Add a missing requirement on crontabs to spec file
BZ# 993985: munin possibly affected by F-20 unversioned docdir change
Move Net::IP plugins to a subpackage for dep handling
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 D. Johnson <fenris02 at fedoraproject.org> - 2.0.17-6
- Move Net::IP plugins to a subpackage for dep handling
* Fri Aug 16 2013 D. Johnson <fenris02 at fedoraproject.org> - 2.0.17-5
- BZ# 993985: munin possibly affected by F-20 unversioned docdir change
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #989080 - Add a missing requirement on crontabs for the cron job to the spec file
https://bugzilla.redhat.com/show_bug.cgi?id=989080
[ 2 ] Bug #993985 - munin possibly affected by F-20 unversioned docdir change
https://bugzilla.redhat.com/show_bug.cgi?id=993985
--------------------------------------------------------------------------------
================================================================================
nemo-extensions-1.8.0-0.3.git3e366de.fc20 (FEDORA-2013-17644)
Extensions for Nemo
--------------------------------------------------------------------------------
Update Information:
new
--------------------------------------------------------------------------------
================================================================================
nodejs-0.10.19-1.fc20 (FEDORA-2013-17647)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
2013.09.24, node.js Version 0.10.19 (Stable)
* readline: handle input starting with control chars (Eric Schrock)
* configure: add mips-float-abi (soft, hard) option (Andrei Sedoi)
* stream: objectMode transforms allow falsey values (isaacs)
* tls: prevent duplicate values returned from read (Nathan Rajlich)
* tls: NPN protocols are now local to connections (Fedor Indutny)
2013.09.25, libuv Version 0.10.17 (Stable)
* build: remove GCC_WARN_ABOUT_MISSING_NEWLINE (Ben Noordhuis)
* darwin: fix 10.6 build error in fsevents.c (Ben Noordhuis)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 T.C. Hollingsworth <tchollingsworth at gmail.com> - 0.10.19-1
- new upstream release 0.10.19
http://blog.nodejs.org/2013/09/24/node-v0-10-19-stable/
--------------------------------------------------------------------------------
================================================================================
opensips-1.10.0-1.fc20 (FEDORA-2013-17604)
Open Source SIP Server
--------------------------------------------------------------------------------
Update Information:
- Ver. 1.10.0
- Drop support for Fedora 17 and earlier (still maintain support for EL5)
- New external module - rest_client
- New external module - xmlrpc_ng (contains mi_xmlrpc_ng)
- New internal module - db_cachedb
- New internal module - mathops
- Disabled new external module - sngtc (requires a proprietary library)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 Peter Lemenkov <lemenkov at gmail.com> - 1.10.0-1
- Ver. 1.10.0
- Drop support for Fedora 17 and earlier (still maintain support for EL5)
- New external module - rest_client
- New external module - xmlrpc_ng (contains mi_xmlrpc_ng)
- New internal module - db_cachedb
- New internal module - mathops
- Disabled new external module - sngtc (requires a proprietary library)
* Fri Sep 6 2013 Peter Lemenkov <lemenkov at gmail.com> - 1.9.1-2
- Proper directory for storing tmpfile
--------------------------------------------------------------------------------
================================================================================
openstack-packstack-2013.2.1-0.10.dev763.fc20 (FEDORA-2013-17601)
Openstack Install Utility
--------------------------------------------------------------------------------
Update Information:
Adds db_sync for Heat installation
Fix for puppet-ceilometer python-pymongo issue
This update contains two Cinder plugin fixes
Ceilometer and Heat support added!
Fix for Nova plugin
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Martin Mágr <mmagr at redhat.com> - 2013.2.1-0.10.dev763
- Adds "default-storage-engine=InnoDB" to /etc/my.cnf (#980593)
- Accepts more CLI options (#985361)
- Added GRE support (#1004397)
* Mon Sep 9 2013 Martin Mágr <mmagr at redhat.com> - 2013.2.1-0.9.dev756
- Use python-pymongo for EL distros too (#1006401)
* Mon Sep 9 2013 Martin Mágr <mmagr at redhat.com> - 2013.2.1-0.8.dev754
- Fixed KeyErrors in case VlanManager is not used (#1006214)
* Mon Sep 9 2013 Martin Mágr <mmagr at redhat.com> - 2013.2.1-0.7.dev752
- Cinder fixes
* Mon Sep 9 2013 Martin Mágr <mmagr at redhat.com> - 2013.2.1-0.6.dev749
- Added posibility to change Nova network manager (#915365)
- Support for Ceilometer installation (#967310)
- Support for Heat installation (#967309)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1007497 - Openstack Installer: packstack does not create tables in Heat db.
https://bugzilla.redhat.com/show_bug.cgi?id=1007497
[ 2 ] Bug #1006401 - explicit check for pymongo is incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=1006401
[ 3 ] Bug #1006214 - Openstack Installer: packstack fails to install allinone, ERROR : 'CONFIG_NOVA_NETWORK_VLAN_START'
https://bugzilla.redhat.com/show_bug.cgi?id=1006214
--------------------------------------------------------------------------------
================================================================================
perl-Pod-Spell-1.08-1.fc20 (FEDORA-2013-17657)
A formatter for spell-checking POD
--------------------------------------------------------------------------------
Update Information:
Update to the latest build
Update to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 Jitka Plesnikova <jplesnik at redhat.com> - 1.08-1
- 1.08 bump
* Fri Sep 20 2013 Jitka Plesnikova <jplesnik at redhat.com> - 1.07-1
- 1.07 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1011814 - perl-Pod-Spell-1.08 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1011814
[ 2 ] Bug #1008407 - perl-Pod-Spell-1.07 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1008407
--------------------------------------------------------------------------------
================================================================================
perl-YAML-Tiny-1.56-1.fc20 (FEDORA-2013-17643)
Read/Write YAML files with as little code as possible
--------------------------------------------------------------------------------
Update Information:
Current upstream maintenance release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 Paul Howarth <paul at city-fan.org> 1.56-1
- Update to 1.56
- read_string documentation error fixed (CPAN RT#74409)
- Re-release with fixed compile test
- Go back to Module::Build::Tiny flow
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1011816 - perl-YAML-Tiny-1.56 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1011816
--------------------------------------------------------------------------------
================================================================================
policycoreutils-2.1.14-81.fc20 (FEDORA-2013-17639)
SELinux policy core utilities
--------------------------------------------------------------------------------
Update Information:
- Add back in the help png files
- Begin Adding support for file equivalency.
- Random fixes for sepolicy gui
* Do not prompt for password until you make a change
* Add user mappings and selinux users page
* lots of code cleanup
- Verify homedir is owned by user before mounting over it with seunshare
- Fix fixfiles to handle Relabel properly
- Fix semanage fcontext -e / command to allow "/"
- Add Miroslav Grepl setsebool patch to give better error message on bad boolean names
- Additional help screens for sepolicy gui
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 18 2013 Dan Walsh <dwalsh at redhat.com> - 2.1.14-81
- Add back in the help png files
- Begin Adding support for file equivalency.
* Wed Sep 4 2013 Dan Walsh <dwalsh at redhat.com> - 2.1.14-80
- Random fixes for sepolicy gui
* Do not prompt for password until you make a change
* Add user mappings and selinux users page
* lots of code cleanup
- Verify homedir is owned by user before mounting over it with seunshare
- Fix fixfiles to handle Relabel properly
- Fix semanage fcontext -e / command to allow "/"
* Wed Sep 4 2013 Dan Walsh <dwalsh at redhat.com> - 2.1.14-79
- Add Miroslav Grepl setsebool patch to give better error message on bad boolean names
- Additional help screens for sepolicy gui
--------------------------------------------------------------------------------
================================================================================
pspp-0.8.1-1.fc20 (FEDORA-2013-17651)
A program for statistical analysis of sampled data
--------------------------------------------------------------------------------
Update Information:
* Ver. 0.8.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Peter Lemenkov <lemenkov at gmail.com> - 0.8.1-1
- Ver. 0.8.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1011394 - pspp-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1011394
--------------------------------------------------------------------------------
================================================================================
python-apsw-3.8.0.r2-2.fc20 (FEDORA-2013-17642)
Another Python SQLite Wrapper
--------------------------------------------------------------------------------
Update Information:
update to 3.8.0.r2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Marcel Wysocki <maci at satgnu.net> - 3.8.0.r2-1
- update to 3.8.0-r2
--------------------------------------------------------------------------------
================================================================================
python-bucky-0.2.6-3.fc20 (FEDORA-2013-17616)
CollectD and StatsD adapter for Graphite
--------------------------------------------------------------------------------
Update Information:
Update requires (RHBZ#953834), adding python-setuptools
Add dependency on collectd and update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Add dependency on collectd and update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Add dependency on collectd and update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Add dependency on collectd and update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Add dependency on collectd and update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
Update to 0.2.6.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Jonathan Steffan <jsteffan at fedoraproject.org> - 0.2.6-3
- Update requires (RHBZ#953834), adding python-setuptools
* Thu Sep 19 2013 Jonathan Steffan <jsteffan at fedoraproject.org> - 0.2.6-2
- Update requires (RHBZ#953834)
* Tue Sep 17 2013 Jonathan Steffan <jsteffan at fedoraproject.org> - 0.2.6-1
- Update to 0.2.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #953834 - missing dependencies python-setuptools collectd
https://bugzilla.redhat.com/show_bug.cgi?id=953834
--------------------------------------------------------------------------------
================================================================================
python-carbon-0.9.12-2.fc20 (FEDORA-2013-17658)
Back-end data caching and persistence daemon for Graphite
--------------------------------------------------------------------------------
Update Information:
Add strict python-whisper Requires (RHBZ#1010432), Don't cleanup user and user data on package remove (RHBZ#1010430)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Jonathan Steffan <jsteffan at fedoraproject.org> - 0.9.12-2
- Add strict python-whisper Requires (RHBZ#1010432)
- Don't cleanup user and user data on package remove (RHBZ#1010430)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1010432 - python-carbon-0.9.12 should require python-whisper >= 0.9.12
https://bugzilla.redhat.com/show_bug.cgi?id=1010432
[ 2 ] Bug #1010430 - python-carbon deletes user-created data on uninstall; shouldn't per packaging guidelines
https://bugzilla.redhat.com/show_bug.cgi?id=1010430
--------------------------------------------------------------------------------
================================================================================
python-flask-script-0.6.2-1.fc20 (FEDORA-2013-17636)
Scripting support for Flask
--------------------------------------------------------------------------------
Update Information:
Update source to latest upstream version
Build python3 version as a subpackage
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 Robert Kuska <rkuska at redhat.com> - 0.6.2-1
- Updated source to latest upstream version and added python3 support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1010812 - Support for python3
https://bugzilla.redhat.com/show_bug.cgi?id=1010812
--------------------------------------------------------------------------------
================================================================================
python-llvmpy-0.12.0-7.fc20 (FEDORA-2013-17608)
Python bindings for LLVM
--------------------------------------------------------------------------------
Update Information:
Adds a python3 subpackage
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Sergio Pascual <sergiopr at fedoraproject.org> - 0.12.0-7
- Added s390(x) tracker bug
* Tue Sep 24 2013 Dan Horák <dan[at]danny.cz> - 0.12.0-6
- Exclude s390(x)
* Mon Sep 16 2013 Sergio Pascual <sergiopr at fedoraproject.org> - 0.12.0-5
- Support Python3
--------------------------------------------------------------------------------
================================================================================
qemu-1.6.0-8.fc20 (FEDORA-2013-17670)
QEMU is a FAST! processor emulator
--------------------------------------------------------------------------------
Update Information:
* Fix -vga qxl with -display vnc (bz #948717)
* Fix USB crash when installing reactos (bz #1005495)
* Don't ship x86 kvm wrapper on arm (bz #1005581)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Cole Robinson <crobinso at redhat.com> - 2:1.6.0-8
- Fix -vga qxl with -display vnc (bz #948717)
- Fix USB crash when installing reactos (bz #1005495)
- Don't ship x86 kvm wrapper on arm (bz #1005581)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #948717 - When using “-vga qxl” together with “-display vnc=:5” or “-display sdl” qemu displays pixel garbage
https://bugzilla.redhat.com/show_bug.cgi?id=948717
[ 2 ] Bug #1005495 - [abrt] qemu-system-x86-1.6.0-6.fc20: object_dynamic_cast_assert: Process /usr/bin/qemu-system-x86_64 was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=1005495
[ 3 ] Bug #1005581 - On ARM, qemu-kvm runs qemu-system-x86_64
https://bugzilla.redhat.com/show_bug.cgi?id=1005581
--------------------------------------------------------------------------------
================================================================================
qt5-qtbase-5.1.1-5.fc20 (FEDORA-2013-17611)
Qt5 - QtBase components
--------------------------------------------------------------------------------
Update Information:
fix big endian builds
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 23 2013 Dan Horák <dan[at]danny.cz> - 5.1.1-5
- fix big endian builds
* Wed Sep 11 2013 Rex Dieter <rdieter at fedoraproject.org> 5.1.1-4
- macros.qt5: use newer location, use unexpanded macros
* Sat Sep 7 2013 Rex Dieter <rdieter at fedoraproject.org> 5.1.1-3
- ExcludeArch: ppc64 ppc (#1005482)
* Fri Sep 6 2013 Rex Dieter <rdieter at fedoraproject.org> 5.1.1-2
- BR: pkgconfig(libudev) pkgconfig(xkbcommon) pkgconfig(xcb-xkb)
--------------------------------------------------------------------------------
================================================================================
qt5-qtquickcontrols-5.1.1-2.fc20 (FEDORA-2013-17609)
Qt5 - module with set of QtQuick controls
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
================================================================================
qt5-qtwayland-5.1.0-0.1.20130826git3b0b90b.fc20 (FEDORA-2013-17659)
Qt5 - Wayland platform support and QtCompositor module
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
================================================================================
rubygems-2.0.10-106.fc20 (FEDORA-2013-17603)
The Ruby standard for packaging ruby libraries
--------------------------------------------------------------------------------
Update Information:
Previously a security flow was found on rubygems for validating versions with a regular expression which is vulnerable to denial of service due to backtracking. Although this was thought to be fixed in the previous rubygems, the fix was found imcomplete and the imcompleteness is now assigned as CVE-2013-4363.
A packaging bug was found that a directory was not properly owned.
This new rpm will fix this issue.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 Mamoru TASAKA <mtasaka at fedoraproject.org> - 2.0.10-106
- Update to 2.0.10 (fix for CVE-2013-4363 included)
* Mon Sep 23 2013 Mamoru TASAKA <mtasaka at fedoraproject.org> - 2.0.9-105
- Update to 2.0.9
- Fix %gem_dir/doc ownership (bug 1008866)
- Patch for CVE-2013-4363
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1008866 - /usr/share/gems/doc ownership
https://bugzilla.redhat.com/show_bug.cgi?id=1008866
--------------------------------------------------------------------------------
================================================================================
telepathy-glib-0.21.2-1.fc20 (FEDORA-2013-17645)
GLib bindings for Telepathy
--------------------------------------------------------------------------------
Update Information:
Stable releases. For changes, please refer to:
http://lists.freedesktop.org/archives/telepathy/2013-September/006505.html
http://lists.freedesktop.org/archives/telepathy/2013-September/006504.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Brian Pepple <bpepple at fedoraproject.org> - 0.21.2-1
- Update to 0.21.2.
--------------------------------------------------------------------------------
================================================================================
virt-manager-0.10.0-3.gita2e52067.fc20 (FEDORA-2013-17628)
Virtual Machine Manager
--------------------------------------------------------------------------------
Update Information:
* Sync with git
* Don't try to launch multiple ssh askpass dialogs at once (bz #811346)
* Fix confusion when multiple progress dialogs are run (bz #1003101)
* Fix error adding macvtap nic (bz #1006324)
* Add an appdata file (bz #1011120)
* virt-install: fix nfs:// style URLs (bz #1011177)
* Fix spice with TLS (bz #904295)
* Reduce impact of memory leak (bz #972371)
* Fix parsing rawhide .treeinfo (bz #989162)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Cole Robinson <crobinso at redhat.com> - 0.10.0-3.gita2e52067
- Sync with git
- Don't try to launch multiple ssh askpass dialogs at once (bz #811346)
- Fix confusion when multiple progress dialogs are run (bz #1003101)
- Fix error adding macvtap nic (bz #1006324)
- Add an appdata file (bz #1011120)
- virt-install: fix nfs:// style URLs (bz #1011177)
- Fix spice with TLS (bz #904295)
- Reduce impact of memory leak (bz #972371)
- Fix parsing rawhide .treeinfo (bz #989162)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #811346 - remote spice connection without ssh keys opens many askpass dialogs at once
https://bugzilla.redhat.com/show_bug.cgi?id=811346
[ 2 ] Bug #1003101 - virt-manager: concurrent save or restore confuses progress meter
https://bugzilla.redhat.com/show_bug.cgi?id=1003101
[ 3 ] Bug #1006324 - Adding network hw in Virt-manager: Error adding device: internal error: No <source> 'dev' attribute specified with <interface type='direct'/>
https://bugzilla.redhat.com/show_bug.cgi?id=1006324
[ 4 ] Bug #1011120 - Please include an AppData file
https://bugzilla.redhat.com/show_bug.cgi?id=1011120
[ 5 ] Bug #1011177 - virt-install is dies on nfs:// adresses but man page says they are accepted
https://bugzilla.redhat.com/show_bug.cgi?id=1011177
[ 6 ] Bug #746011 - When running yum while starting virt-manager, it hangs on Searching for available hypervisors and the search cannot be canceled.
https://bugzilla.redhat.com/show_bug.cgi?id=746011
--------------------------------------------------------------------------------
================================================================================
vpnc-0.5.3-19.svn457.fc20 (FEDORA-2013-17629)
IPSec VPN client compatible with Cisco equipment
--------------------------------------------------------------------------------
Update Information:
Added support for unbound
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 23 2013 Paul Wouters <pwouters at redhat.com> - 0.5.3-19.svn457
- Add support for dynamically reconfiguring unbound DNS (rhbz#865092)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #865092 - Patch: Add support for unbound to vpnc-script
https://bugzilla.redhat.com/show_bug.cgi?id=865092
--------------------------------------------------------------------------------
================================================================================
wireshark-1.10.2-7.fc20 (FEDORA-2013-17627)
Network traffic analyzer
--------------------------------------------------------------------------------
Update Information:
dumpcap now stores temporary capture files in /var/tmp
* Convert automake/pkgconfig files into patches (better upstream integration)
* Restored category in the *.desktop file
* Install another one necessary header file - frame_data_sequence.h
* Add basic OpenFlow dissector
* Ver. 1.10.2
* Ver. 1.10.1
fix missing ws_symbol_export.h
* Ver. 1.10.2
* Ver. 1.10.1
fix missing ws_symbol_export.h
* Enhance desktop integration (*.desktop and MIME-related files)
* Add basic OpenFlow dissector
* Ver. 1.10.2
* Ver. 1.10.1
fix missing ws_symbol_export.h
* Ver. 1.10.2
* Ver. 1.10.1
fix missing ws_symbol_export.h
* Enhance desktop integration (*.desktop and MIME-related files)
* Add basic OpenFlow dissector
* Ver. 1.10.2
* Ver. 1.10.1
fix missing ws_symbol_export.h
* Ver. 1.10.2
* Ver. 1.10.1
fix missing ws_symbol_export.h
* Ver. 1.10.2
* Various security fixes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 24 2013 Peter Hatina <phatina at redhat.com> - 1.10.2-7
- fix build error caused by symbols clash
* Tue Sep 17 2013 Peter Hatina <phatina at redhat.com> - 1.10.2-6
- move default temporary directory to /var/tmp
* Fri Sep 13 2013 Peter Lemenkov <lemenkov at gmail.com> - 1.10.2-5
- Convert automake/pkgconfig files into patches (better upstream integration)
- Restored category in the *.desktop file
- Install another one necessary header file - frame_data_sequence.h
* Thu Sep 12 2013 Peter Lemenkov <lemenkov at gmail.com> - 1.10.2-4
- Enhance desktop integration (*.desktop and MIME-related files)
* Thu Sep 12 2013 Peter Lemenkov <lemenkov at gmail.com> - 1.10.2-3
- Fix building on Fedora 18 (no perl-podlators)
* Thu Sep 12 2013 Peter Lemenkov <lemenkov at gmail.com> - 1.10.2-2
- Add an OpenFlow dissector
* Wed Sep 11 2013 Peter Lemenkov <lemenkov at gmail.com> - 1.10-2-1
- Ver. 1.10.2
- Actually remove the console helper
* Mon Sep 9 2013 Peter Lemenkov <lemenkov at gmail.com> - 1.10.1-1
- Ver. 1.10.1
- Backported rtpproxy dissector module
* Wed Sep 4 2013 Peter Hatina <phatina at redhat.com> - 1.10.0-11
- fix missing ws_symbol_export.h
* Wed Sep 4 2013 Peter Hatina <phatina at redhat.com> - 1.10.0-10
- fix tap iostat overflow
* Wed Sep 4 2013 Peter Hatina <phatina at redhat.com> - 1.10.0-9
- fix sctp bytes graph crash
* Wed Sep 4 2013 Peter Hatina <phatina at redhat.com> - 1.10.0-8
- fix string overrun in plugins/profinet
* Tue Sep 3 2013 Peter Hatina <phatina at redhat.com> - 1.10.0-7
- fix BuildRequires - libgcrypt-devel
* Tue Sep 3 2013 Peter Hatina <phatina at redhat.com> - 1.10.0-6
- fix build parameter -fstack-protector-all
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.10.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #990155 - CVE-2013-4920 wireshark: DoS (application crash) in the P1 dissector (wnpa-sec-2013-42)
https://bugzilla.redhat.com/show_bug.cgi?id=990155
[ 2 ] Bug #990156 - CVE-2013-4921 wireshark: Off-by-one (application crash) in the Radiotap dissector (wnpa-sec-2013-43)
https://bugzilla.redhat.com/show_bug.cgi?id=990156
[ 3 ] Bug #990157 - CVE-2013-4922 wireshark: Double-free in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)
https://bugzilla.redhat.com/show_bug.cgi?id=990157
[ 4 ] Bug #990160 - CVE-2013-4923 wireshark: Memory leak (DoS, memory consumption) in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)
https://bugzilla.redhat.com/show_bug.cgi?id=990160
[ 5 ] Bug #990163 - CVE-2013-4924 wireshark: Assertion failure in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)
https://bugzilla.redhat.com/show_bug.cgi?id=990163
[ 6 ] Bug #990164 - CVE-2013-4925 wireshark: Integer signedness error in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)
https://bugzilla.redhat.com/show_bug.cgi?id=990164
[ 7 ] Bug #990165 - CVE-2013-4926 wireshark: DoS in the DCOM ISystemActivator dissector due improper remaining data to process presence check (wnpa-sec-2013-44)
https://bugzilla.redhat.com/show_bug.cgi?id=990165
[ 8 ] Bug #990166 - CVE-2013-4927 wireshark: Integer signedness error in the Bluetooth SDP dissector (wnpa-sec-2013-45)
https://bugzilla.redhat.com/show_bug.cgi?id=990166
[ 9 ] Bug #972679 - CVE-2013-4074 wireshark: DoS (crash) in the CAPWAP dissector (wnpa-sec-2013-32)
https://bugzilla.redhat.com/show_bug.cgi?id=972679
[ 10 ] Bug #972680 - CVE-2013-4075 wireshark: DoS (crash) in the GMR-1 BCCH dissector (wnpa-sec-2013-33)
https://bugzilla.redhat.com/show_bug.cgi?id=972680
[ 11 ] Bug #972681 - CVE-2013-4076 wireshark: Invalid free in the PPP dissector (wnpa-sec-2013-34)
https://bugzilla.redhat.com/show_bug.cgi?id=972681
[ 12 ] Bug #972682 - CVE-2013-4077 wireshark: Array index error in the NBAP dissector (wnpa-sec-2013-35)
https://bugzilla.redhat.com/show_bug.cgi?id=972682
[ 13 ] Bug #972683 - CVE-2013-4078 wireshark: DoS (infinite loop) in the RDP dissector (wnpa-sec-2013-36)
https://bugzilla.redhat.com/show_bug.cgi?id=972683
[ 14 ] Bug #972684 - CVE-2013-4079 wireshark: DoS (infinite loop, application hang) in the GSM CBCH dissector (wnpa-sec-2013-37)
https://bugzilla.redhat.com/show_bug.cgi?id=972684
[ 15 ] Bug #972685 - CVE-2013-4080 wireshark: DoS (infinite loop, CPU & memory consumption) in the Assa Abloy R3 dissector (wnpa-sec-2013-38)
https://bugzilla.redhat.com/show_bug.cgi?id=972685
[ 16 ] Bug #972686 - CVE-2013-4081 wireshark: DoS (infinite loop) in the HTTP dissector (wnpa-sec-2013-39)
https://bugzilla.redhat.com/show_bug.cgi?id=972686
[ 17 ] Bug #972687 - CVE-2013-4082 wireshark: Heap-based buffer overflow in the Ixia IxVeriWave file parser (wnpa-sec-2013-40)
https://bugzilla.redhat.com/show_bug.cgi?id=972687
[ 18 ] Bug #972688 - CVE-2013-4083 wireshark: Invalid free in the DCP ETSI dissector (wnpa-sec-2013-41)
https://bugzilla.redhat.com/show_bug.cgi?id=972688
[ 19 ] Bug #990167 - CVE-2013-4928 wireshark: Integer signedness error in the Bluetooth OBEX dissector (wnpa-sec-2013-46)
https://bugzilla.redhat.com/show_bug.cgi?id=990167
[ 20 ] Bug #990168 - CVE-2013-4929 wireshark: DoS (infinite loop) in the DIS dissector (wnpa-sec-2013-47)
https://bugzilla.redhat.com/show_bug.cgi?id=990168
[ 21 ] Bug #990169 - CVE-2013-4930 wireshark: Assertion failure in the DVB-CI dissector (wnpa-sec-2013-48)
https://bugzilla.redhat.com/show_bug.cgi?id=990169
[ 22 ] Bug #990170 - CVE-2013-4931 wireshark: DoS (infinite loop) in the GSM RR dissector (wnpa-sec-2013-49)
https://bugzilla.redhat.com/show_bug.cgi?id=990170
[ 23 ] Bug #990172 - CVE-2013-4932 wireshark: Multiple array index errors in the GSM A Common dissector (wnpa-sec-2013-50)
https://bugzilla.redhat.com/show_bug.cgi?id=990172
[ 24 ] Bug #990175 - CVE-2013-4933 wireshark: DoS (application crash) in the Netmon file parser (wnpa-sec-2013-51)
https://bugzilla.redhat.com/show_bug.cgi?id=990175
[ 25 ] Bug #990178 - CVE-2013-4934 wireshark: DoS (application crash) in the Netmon file parser (wnpa-sec-2013-51) (A different flaw than CVE-2013-4933)
https://bugzilla.redhat.com/show_bug.cgi?id=990178
[ 26 ] Bug #990179 - CVE-2013-4935 wireshark: DoS (application crash) in the ASN.1 PER dissector (wnpa-sec-2013-52)
https://bugzilla.redhat.com/show_bug.cgi?id=990179
[ 27 ] Bug #965111 - wireshark: DoS (infinite loop) in the MySQL dissector (wnpa-sec-2013-30, upstream #8458)
https://bugzilla.redhat.com/show_bug.cgi?id=965111
[ 28 ] Bug #965190 - CVE-2013-3559 wireshark: DoS (crash) in the DCP ETSI dissector (wnpa-sec-2013-27, upstream #8231, #8540, #8541)
https://bugzilla.redhat.com/show_bug.cgi?id=965190
[ 29 ] Bug #965192 - CVE-2013-3558 wireshark: DoS (crash) in the PPP CCP dissector (wnpa-sec-2013-26, upstream #8638)
https://bugzilla.redhat.com/show_bug.cgi?id=965192
[ 30 ] Bug #965193 - CVE-2013-3557 wireshark: DoS (crash) in the ASN.1 BER dissector (wnpa-sec-2013-25, upstream #8599)
https://bugzilla.redhat.com/show_bug.cgi?id=965193
[ 31 ] Bug #965194 - CVE-2013-3555 wireshark: DoS (crash) in the GTPv2 dissector (wnpa-sec-2013-24, upstream #8493)
https://bugzilla.redhat.com/show_bug.cgi?id=965194
[ 32 ] Bug #965195 - wireshark: DoS (excessive CPU consumption) in the RELOAD dissector (wnpa-sec-2013-23, upstream #8362, #8546)
https://bugzilla.redhat.com/show_bug.cgi?id=965195
[ 33 ] Bug #965110 - wireshark: DoS (large loop) in the ETCH dissector (wnpa-sec-2013-31, upstream #8464)
https://bugzilla.redhat.com/show_bug.cgi?id=965110
[ 34 ] Bug #965112 - CVE-2013-3562 wireshark: DoS (stack overflow, crash) in the Websocket dissector (wnpa-sec-2013-29, upstream #8448, #8499)
https://bugzilla.redhat.com/show_bug.cgi?id=965112
[ 35 ] Bug #965186 - CVE-2013-3560 wireshark: DoS (crash) in the MPEG DSM-CC dissector (wnpa-sec-2013-28, upstream #8481)
https://bugzilla.redhat.com/show_bug.cgi?id=965186
--------------------------------------------------------------------------------
================================================================================
xyzsh-1.5.1-1.fc20 (FEDORA-2013-17617)
Interactive shell and text processing tool
--------------------------------------------------------------------------------
Update Information:
New version 1.5.1 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 Mamoru TASAKA <mtasaka at fedoraproject.org> - 1.5.1-1
- 1.5.1
--------------------------------------------------------------------------------
================================================================================
yum-langpacks-0.4.1-2.fc20 (FEDORA-2013-17666)
Langpacks plugin for yum
--------------------------------------------------------------------------------
Update Information:
Fix issue of yum-langpacks commands that slows down yum runs
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 25 2013 Parag Nemade <pnemade AT redhat DOT com> - 0.4.1-2
- Fix issue of yum-langpacks commands that slows down yum runs (rh#1011670)
* Thu Sep 12 2013 Parag Nemade <pnemade AT redhat DOT com> - 0.4.1-1
- Fix yum langavailable command output (rh#1006695)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1011670 - [PATCH] yum-langpackages slows down yum runs a lot, due to langtable and loading groups.
https://bugzilla.redhat.com/show_bug.cgi?id=1011670
--------------------------------------------------------------------------------
More information about the test
mailing list