Fedora 20 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Sun Jan 26 00:33:24 UTC 2014


The following Fedora 20 Security updates need testing:
 Age  URL
 100  https://admin.fedoraproject.org/updates/FEDORA-2013-19198/quassel-0.9.1-1.fc20
  60  https://admin.fedoraproject.org/updates/FEDORA-2013-22130/chicken-4.8.0.5-1.fc20
  46  https://admin.fedoraproject.org/updates/FEDORA-2013-23116/python-swiftclient-1.8.0-1.fc20
  36  https://admin.fedoraproject.org/updates/FEDORA-2013-23636/rubygem-actionpack-4.0.0-2.fc20
  28  https://admin.fedoraproject.org/updates/FEDORA-2013-24018/varnish-3.0.5-1.fc20
  15  https://admin.fedoraproject.org/updates/FEDORA-2014-0579/flite-1.3-21.fc20
  14  https://admin.fedoraproject.org/updates/FEDORA-2014-0602/graphviz-2.34.0-8.fc20
  10  https://admin.fedoraproject.org/updates/FEDORA-2014-0792/libinfinity-0.5.5-1.fc20
   9  https://admin.fedoraproject.org/updates/FEDORA-2014-0926/memcached-1.4.17-1.fc20
   8  https://admin.fedoraproject.org/updates/FEDORA-2014-0978/ibus-chewing-1.4.6-1.fc20
   6  https://admin.fedoraproject.org/updates/FEDORA-2014-1121/libreswan-3.8-1.fc20
   4  https://admin.fedoraproject.org/updates/FEDORA-2014-1207/cxxtools-2.2.1-1.fc20
   3  https://admin.fedoraproject.org/updates/FEDORA-2014-1307/tntnet-2.2.1-1.fc20
   3  https://admin.fedoraproject.org/updates/FEDORA-2014-1341/perl-MARC-XML-1.0.2-1.fc20
   2  https://admin.fedoraproject.org/updates/FEDORA-2014-1396/moodle-2.5.4-1.fc20
   0  https://admin.fedoraproject.org/updates/FEDORA-2014-1463/openstack-nova-2013.2.1-3.fc20
   0  https://admin.fedoraproject.org/updates/FEDORA-2014-1481/mupdf-1.1-5.fc20
   0  https://admin.fedoraproject.org/updates/FEDORA-2014-1552/xen-4.3.1-8.fc20


The following Fedora 20 Critical Path updates have yet to be approved:
 Age URL
  73  https://admin.fedoraproject.org/updates/FEDORA-2013-21163/libproxy-0.4.11-8.fc20
  11  https://admin.fedoraproject.org/updates/FEDORA-2014-0772/openldap-2.4.38-1.fc20
   8  https://admin.fedoraproject.org/updates/FEDORA-2014-0979/librepo-1.5.2-1.fc20
   8  https://admin.fedoraproject.org/updates/FEDORA-2014-0987/anaconda-20.25.16-1.fc20
   4  https://admin.fedoraproject.org/updates/FEDORA-2014-1197/colord-1.1.6-1.fc20
   4  https://admin.fedoraproject.org/updates/FEDORA-2014-1231/libwacom-0.8-2.fc20
   3  https://admin.fedoraproject.org/updates/FEDORA-2014-1276/pcre-8.33-4.fc20
   2  https://admin.fedoraproject.org/updates/FEDORA-2014-1395/krb5-1.11.3-39.fc20
   1  https://admin.fedoraproject.org/updates/FEDORA-2014-1436/libnl3-3.2.24-1.fc20
   1  https://admin.fedoraproject.org/updates/FEDORA-2014-1410/libsolv-0.4.1-1.gitbcedc98.fc20
   1  https://admin.fedoraproject.org/updates/FEDORA-2014-1448/network-manager-applet-0.9.9.0-8.git20140123.fc20
   1  https://admin.fedoraproject.org/updates/FEDORA-2014-1429/pango-1.36.1-2.fc20
   0  https://admin.fedoraproject.org/updates/FEDORA-2014-1535/clutter-1.16.2-3.fc20
   0  https://admin.fedoraproject.org/updates/FEDORA-2014-1523/procps-ng-3.3.8-15.fc20
   0  https://admin.fedoraproject.org/updates/FEDORA-2014-1480/crda-1.1.3_2013.11.27-3.fc20


The following builds have been pushed to Fedora 20 updates-testing

    jpeginfo-1.6.1-1.fc20
    lyx-2.0.7-2.fc20
    system-config-repo-0-2.20140117git3318cd6.fc20
    wordpress-3.8.1-3.fc20
    xen-4.3.1-8.fc20

Details about builds:


================================================================================
 jpeginfo-1.6.1-1.fc20 (FEDORA-2014-1557)
 Error-check and generate informative listings from JPEG files
--------------------------------------------------------------------------------
Update Information:

Jpeginfo package initial submission
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1049557 - Review Request: jpeginfo - Utility to obtain information from JPEG files
        https://bugzilla.redhat.com/show_bug.cgi?id=1049557
--------------------------------------------------------------------------------


================================================================================
 lyx-2.0.7-2.fc20 (FEDORA-2014-1550)
 WYSIWYM (What You See Is What You Mean) document processor
--------------------------------------------------------------------------------
Update Information:

* The source file for release has been updated to the official package (the changes do not apply to linux so there is nothing new or different here). Further changes on the 2.0.7 release are documented on http://www.lyx.org/announce/2_0_7.txt

* Require chktex that lyx uses to avoid a minimal bug on the configure [bug 1051933]
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jan 25 2014 José Matos <jamatos at fedoraproject.org> - 2.0.7-2
- new sources for release (the changes do not apply to linux)
- add chktex as requirement to fix [bug 1051933]
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1051933 - [abrt] lyx-common: configure.py:1222:checkLatexConfig:IOError: [Errno 2] No such file or directory: 'chkconfig.vars'
        https://bugzilla.redhat.com/show_bug.cgi?id=1051933
--------------------------------------------------------------------------------


================================================================================
 system-config-repo-0-2.20140117git3318cd6.fc20 (FEDORA-2014-1558)
 Administrate a single yum repository file
--------------------------------------------------------------------------------
Update Information:

Adding missing R: redhat-lsb-core (bz #1057824).
Initial release.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1057824 - system-config-repo - Dont open repo file
        https://bugzilla.redhat.com/show_bug.cgi?id=1057824
  [ 2 ] Bug #1055005 - Review Request: system-config-repo - Administrate a single yum repository file.
        https://bugzilla.redhat.com/show_bug.cgi?id=1055005
--------------------------------------------------------------------------------


================================================================================
 wordpress-3.8.1-3.fc20 (FEDORA-2014-1556)
 Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:

New upstream maintenance release 3.8.1

Upstream annoucement: http://wordpress.org/news/2014/01/wordpress-3-8-1/

In this new package the auto-updater is disable, as Wordpress core updates are managed by the package manager.
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jan 25 2014 Remi Collet <remi at fedoraproject.org> - 3.8.1-3
- ignore WP_AUTO_UPDATE_CORE (always false)
* Fri Jan 24 2014 Remi Collet <remi at fedoraproject.org> - 3.8.1-2
- comment provided configuration about auto-updater
- disable auto-updater on default configuration #1057521
- switch some sed to patch (more robust)
* Thu Jan 23 2014 Adam Williamson <awilliam at redhat.com> - 3.8.1-1
- new upstream release 3.8.1 (bugfixes)
--------------------------------------------------------------------------------


================================================================================
 xen-4.3.1-8.fc20 (FEDORA-2014-1552)
 Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:

PHYSDEVOP_{prepare,release}_msix exposed to unprivileged pv guests,
Out-of-memory condition yielding memory corruption during IRQ setup
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jan 24 2014 Michael Young <m.a.young at durham.ac.uk> - 4.3.1-8
- PHYSDEVOP_{prepare,release}_msix exposed to unprivileged pv guests
    [XSA-87, CVE-2014-1666]
* Thu Jan 23 2014 Michael Young <m.a.young at durham.ac.uk> - 4.3.1-7
- Out-of-memory condition yielding memory corruption during IRQ setup
    [XSA-83, CVE-2014-1642] (#1057142)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1057140 - CVE-2014-1642 xen: out-of-memory condition yielding memory corruption during IRQ setup
        https://bugzilla.redhat.com/show_bug.cgi?id=1057140
--------------------------------------------------------------------------------



More information about the test mailing list