Fedora 20 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Tue Mar 25 08:22:19 UTC 2014


The following Fedora 20 Security updates need testing:
 Age  URL
  87  https://admin.fedoraproject.org/updates/FEDORA-2013-24018/varnish-3.0.5-1.fc20
  69  https://admin.fedoraproject.org/updates/FEDORA-2014-0792/libinfinity-0.5.5-1.fc20
  34  https://admin.fedoraproject.org/updates/FEDORA-2014-2693/openstack-glance-2013.2.2-1.fc20
  33  https://admin.fedoraproject.org/updates/FEDORA-2014-2751/zabbix-2.0.11-2.fc20
  31  https://admin.fedoraproject.org/updates/FEDORA-2014-2875/oath-toolkit-2.4.1-3.fc20
   9  https://admin.fedoraproject.org/updates/FEDORA-2014-3915/squid-3.3.12-1.fc20
   9  https://admin.fedoraproject.org/updates/FEDORA-2014-3818/udisks-1.0.4-13.fc20
   3  https://admin.fedoraproject.org/updates/FEDORA-2014-4135/k4dirstat-2.7.0-0.14.20101010git6c0a9e6.fc20
   3  https://admin.fedoraproject.org/updates/FEDORA-2014-4118/rubygem-rack-ssl-1.3.2-9.fc20
   3  https://admin.fedoraproject.org/updates/FEDORA-2014-4163/moodle-2.5.5-1.fc20
   0  https://admin.fedoraproject.org/updates/FEDORA-2014-4304/file-5.14-19.fc20


The following Fedora 20 Critical Path updates have yet to be approved:
 Age URL
 132  https://admin.fedoraproject.org/updates/FEDORA-2013-21163/libproxy-0.4.11-8.fc20
   9  https://admin.fedoraproject.org/updates/FEDORA-2014-3884/libosinfo-0.2.9-1.fc20
   7  https://admin.fedoraproject.org/updates/FEDORA-2014-4019/lcms2-2.6-1.fc20
   5  https://admin.fedoraproject.org/updates/FEDORA-2014-4085/libevdev-0.6-4.fc20
   5  https://admin.fedoraproject.org/updates/FEDORA-2014-4052/fftw-3.3.4-1.fc20
   0  https://admin.fedoraproject.org/updates/FEDORA-2014-4295/gtk3-3.10.7-1.fc20
   0  https://admin.fedoraproject.org/updates/FEDORA-2014-4304/file-5.14-19.fc20
   0  https://admin.fedoraproject.org/updates/FEDORA-2014-4306/gstreamer-plugins-bad-free-0.10.23-20.fc20
   0  https://admin.fedoraproject.org/updates/FEDORA-2014-4291/xorg-x11-drv-synaptics-1.7.4-3.fc20


The following builds have been pushed to Fedora 20 updates-testing

    asunder-2.5-1.fc20
    dd_rescue-1.42.1-3.fc20
    dtv-scan-tables-0-5.20140309git177b522.fc20
    file-5.14-19.fc20
    git-1.9.0-1.fc20
    gstreamer-plugins-bad-free-0.10.23-20.fc20
    gtk3-3.10.7-1.fc20
    mod_authnz_pam-0.9-1.fc20
    python-testtools-0.9.35-2.fc20
    python-trollius-0.2-1.fc20
    python-wsme-0.6-2.fc20
    tito-0.5.0-1.fc20
    xorg-x11-drv-synaptics-1.7.4-3.fc20

Details about builds:


================================================================================
 asunder-2.5-1.fc20 (FEDORA-2014-4296)
 A graphical Audio CD ripper and encoder
--------------------------------------------------------------------------------
Update Information:

Upstream release notes (2.5):
- Fixed two major bugs that caused Asunder to hang while ripping.
- Fixed a bug where the CDDB info from a removed disk still showed up in a newly inserted disk.
- Added NetBSD support.
- Now logging to /var/log/asunder.log via syslog-ng instead of /tmp/asunder.log
- Updated German and Spanish translations.

Upstream release notes (2.4):
- Added Bengali, Traditional Chinese translations.
- Updated Hungarian, Italian translations.
- Fixed the eject functionality to be more reliable.
- Added support for XDG_CACHE_HOME
- Fixed some memory corruption bugs that may have caused crashes and undefined behaviour.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Mar 16 2014 Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 2.5-1
- Update to 2.5
* Sat Mar  1 2014 Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 2.4-1
- Update to 2.4
- Fix bogus date in changelog
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1047183 - asunder-2.4 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1047183
  [ 2 ] Bug #1076481 - asunder-2.5 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1076481
--------------------------------------------------------------------------------


================================================================================
 dd_rescue-1.42.1-3.fc20 (FEDORA-2014-4301)
 Fault tolerant "dd" utility for rescuing data from bad media
--------------------------------------------------------------------------------
Update Information:

- fix build on 64-bit arches
Update to current upstream version
Update to current upstream version
--------------------------------------------------------------------------------
ChangeLog:

* Sat Mar 22 2014 Michal Ambroz <rebus AT seznam dot cz> - 1.42.1-3
- fix libdir to reflect ppc64
* Sat Mar 22 2014 Michal Ambroz <rebus AT seznam dot cz> - 1.42.1-2
- bump to latest upstream release 1.42.1
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1070103 - dd_rescue-1.42.1 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1070103
--------------------------------------------------------------------------------


================================================================================
 dtv-scan-tables-0-5.20140309git177b522.fc20 (FEDORA-2014-4287)
 Digital TV scan tables
--------------------------------------------------------------------------------
Update Information:

There was an issue upstream on generating newer dtv-scan-tables. Due to that, Fedora were using a one year ago table. The bug got fixed at LinuxTV.org today. So, update the fedora package too.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Mar 23 2014 Mauro Carvalho Chehab <m.chehab at samsun.com> 0-5.20140309git177b522
- Update to the latest DTV tables
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1077571 - The initial DVB-T scan tables are outdated
        https://bugzilla.redhat.com/show_bug.cgi?id=1077571
--------------------------------------------------------------------------------


================================================================================
 file-5.14-19.fc20 (FEDORA-2014-4304)
 A utility for determining file types
--------------------------------------------------------------------------------
Update Information:

fix #1079847 - fix for CVE-2013-7345
--------------------------------------------------------------------------------
ChangeLog:

* Mon Mar 24 2014 Jan Kaluza <jkaluza at redhat.com> - 5.14-19
- fix redefinition of OFFSET_OOB in CVE-2014-2270 patch
* Mon Mar 24 2014 Jan Kaluza <jkaluza at redhat.com> - 5.14-18
- fix #1079847 - fix for CVE-2013-7345
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1079846 - CVE-2013-7345 file: extensive backtracking in awk rule regular expression
        https://bugzilla.redhat.com/show_bug.cgi?id=1079846
--------------------------------------------------------------------------------


================================================================================
 git-1.9.0-1.fc20 (FEDORA-2014-4294)
 Fast Version Control System
--------------------------------------------------------------------------------
Update Information:

git 1.9 fixes an issue with certificates. More on this in #1043194
--------------------------------------------------------------------------------
ChangeLog:

* Mon Feb 17 2014 Ondrej Oprala <ooprala at redhat.com> - 1.9.0-1
- Update to 1.9.0
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1076019 - git 1.9.0 available
        https://bugzilla.redhat.com/show_bug.cgi?id=1076019
--------------------------------------------------------------------------------


================================================================================
 gstreamer-plugins-bad-free-0.10.23-20.fc20 (FEDORA-2014-4306)
 GStreamer streaming media framework "bad" plug-ins
--------------------------------------------------------------------------------
Update Information:

Rebuild for libvpx ABI break. See #1068664
--------------------------------------------------------------------------------
ChangeLog:

* Thu Mar 13 2014 Wim Taymans <wtaymans at redhat.com> - 0.10.23-20
- Rebuild for libvpx ABI break. See #1068664
- Fix modplug include
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1068664 - Upgrading libvpx from 1.2.0 to 1.3.0 causes buffer overflow in "vp8enc" GStreamer 0.10 element
        https://bugzilla.redhat.com/show_bug.cgi?id=1068664
--------------------------------------------------------------------------------


================================================================================
 gtk3-3.10.7-1.fc20 (FEDORA-2014-4295)
 The GIMP ToolKit (GTK+), a library for creating GUIs for X
--------------------------------------------------------------------------------
Update Information:

Bug fixes for GNOME 3.10:
https://download.gnome.org/sources/gtk+/3.10/gtk+-3.10.7.news
--------------------------------------------------------------------------------
ChangeLog:

* Mon Mar 24 2014 Debarshi Ray <rishi at fedoraproject.org> - 3.10.7-1
- Update to 3.10.7
--------------------------------------------------------------------------------


================================================================================
 mod_authnz_pam-0.9-1.fc20 (FEDORA-2014-4298)
 PAM authorization checker and PAM Basic Authentication provider
--------------------------------------------------------------------------------
Update Information:

Rebase to 0.9 to get properly isolated functions.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Mar 19 2014 Jan Pazdziora <jpazdziora at redhat.com> - 0.9-1
- One more function made static for proper isolation.
--------------------------------------------------------------------------------


================================================================================
 python-testtools-0.9.35-2.fc20 (FEDORA-2014-4297)
 Extensions to the Python unit testing framework
--------------------------------------------------------------------------------
Update Information:

re-enable building the python3-subpackage
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 28 2014 Matthias Runge <mrunge at redhat.com> - 0.9.35-2
- re-enable building the python3-subpackage
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1071122 - Python 3 packages are no longer building
        https://bugzilla.redhat.com/show_bug.cgi?id=1071122
--------------------------------------------------------------------------------


================================================================================
 python-trollius-0.2-1.fc20 (FEDORA-2014-4299)
 A port of the Tulip asyncio module to Python 2
--------------------------------------------------------------------------------
Update Information:

Update to 0.2 release
add python-futures as build-dep
add python-futures as build-dep
--------------------------------------------------------------------------------


================================================================================
 python-wsme-0.6-2.fc20 (FEDORA-2014-4289)
 Web Services Made Easy
--------------------------------------------------------------------------------
Update Information:

- Latest upstream
- Latest upstream
--------------------------------------------------------------------------------
ChangeLog:

* Sun Mar 23 2014 Pádraig Brady <pbrady at redhat.com> - 0.6-2
- Add missing dependency on python-ipaddr and python-ordereddict
--------------------------------------------------------------------------------


================================================================================
 tito-0.5.0-1.fc20 (FEDORA-2014-4302)
 A tool for managing rpm based git projects
--------------------------------------------------------------------------------
Update Information:

Significant improvements, new builders/releasers, removal of dead code and refactoring.
New support for writing out a templated version file during tagging. New Copr build system and OBS releasers. Fixed bug with old versions of packages still being left in the yum repodata. Small documentation updates. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies. Fix permissions sources fedpkg modifies.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Mar 24 2014 Devan Goodwin <dgoodwin at rm-rf.ca> 0.5.0-1
- Prep for python3. (jumanjiman at gmail.com)
- Print output live for longer running rpmbuild commands. (dgoodwin at redhat.com)
- Add GitAnnexBuilder, using git-annex to store blobs (dcleal at redhat.com)
- Remove legacy CvsBuilder and CvsReleaser. (dgoodwin at redhat.com)
- Stop writing temp file to load tito.props from past tag.
  (dgoodwin at redhat.com)
- Remove deprecated support for build.py.props config filename.
  (dgoodwin at redhat.com)
- Remove a very old hack for assuming config from Makefiles.
  (dgoodwin at redhat.com)
- Refactor config overriding. (dgoodwin at redhat.com)
- Move taggers to sub-directory. (dgoodwin at redhat.com)
- Move releasers to sub-directory. (dgoodwin at redhat.com)
- Improved docs for [version_template] section of tito.props
  (chris.a.st.pierre at gmail.com)
- allow empty dist tag in functional tests (jumanjiman at gmail.com)
- docs: createrepo is needed for functional tests (jumanjiman at gmail.com)
- provide config for editorconfig plugins (jumanjiman at gmail.com)
- Add more missing documentation to MANIFEST.in. (dgoodwin at redhat.com)
- Assume a default fetch strategy. (dgoodwin at redhat.com)
- Add markdown docs for FetchBuilder instead of manpage. (dgoodwin at redhat.com)
- Fix releasers and respect offline flag. (dgoodwin at redhat.com)
- Support release with fetch builder. (dgoodwin at redhat.com)
- Add support for passing builder args through a releaser.
  (dgoodwin at redhat.com)
- MANIFEST.in: include README.mkd and asciidoc files (code at alan.grosskurth.ca)
- Rename --builder-arg to just --arg in build command. (dgoodwin at redhat.com)
- Fix issue with releaser temp dir. (dgoodwin at redhat.com)
- Refactor to just one config object. (dgoodwin at redhat.com)
- Make external source builder fetch strategy configurable.
  (dgoodwin at redhat.com)
- Fix buildroot using ~/rpmbuild/BUILDROOT. (dgoodwin at redhat.com)
- Refactor builders to allow separate modules. (dgoodwin at redhat.com)
- Restore building of specific tags. (dgoodwin at redhat.com)
- Start building with external sources and no tag. (dgoodwin at redhat.com)
- Allow possibility of building without a pre-existing tag.
  (dgoodwin at redhat.com)
- Print koji/brew task ID and URL during release. (dgoodwin at redhat.com)
* Thu Nov 14 2013 Devan Goodwin <dgoodwin at rm-rf.ca> 0.4.18-1
- Merge the FiledVersionTagger into the base VersionTagger.
  (dgoodwin at redhat.com)
- add Copr releaser (msuchy at redhat.com)
- Fix broken asciidoc. (dgoodwin at redhat.com)
- Fix old versions in yum repodata. (dgoodwin at redhat.com)
- adding the FiledVersionTagger class that we are using internally
  (vbatts at redhat.com)
- tito report man page missing options (admiller at redhat.com)
- Implement OBS releaser (msuchy at redhat.com)
--------------------------------------------------------------------------------


================================================================================
 xorg-x11-drv-synaptics-1.7.4-3.fc20 (FEDORA-2014-4291)
 Xorg X11 Synaptics touchpad input driver
--------------------------------------------------------------------------------
Update Information:

Fix stuck touch points when receiving SYN_DROPPED events (#877464)
Unset ClickPad for Cypress touchpads, they do everything in firmware and we get flaky button events if we try to enable software buttons on top of that.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Mar 24 2014 Peter Hutterer <peter.hutterer at redhat.com> 1.7.4-3
- Fix stuck touch points when receving SYN_DROPPED events (#877464)
* Fri Mar 21 2014 Peter Hutterer <peter.hutterer at redhat.com> 1.7.4-2
- Unset ClickPad for Cypress touchpads, they do everything in firmware, we
  can't compete with that. (fdo bug 76341 and 70819)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #877464 - BUG: triggered 'if (priv->num_active_touches > priv->num_slots)'
        https://bugzilla.redhat.com/show_bug.cgi?id=877464
--------------------------------------------------------------------------------



More information about the test mailing list