The following Fedora 22 Security updates need testing:
Age URL
298
https://bodhi.fedoraproject.org/updates/FEDORA-2015-5878
echoping-6.1-0.beta.r434svn.1.fc22
247
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9185
ceph-deploy-1.5.25-1.fc22
180
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12781
python-kdcproxy-0.3.2-1.fc22
134
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16239 nagios-4.0.8-1.fc22
128
https://bodhi.fedoraproject.org/updates/FEDORA-2015-05490fc42d
squid-3.4.13-3.fc22
123
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2d37e7dacf
openstack-swift-2.2.0-6.fc22
92
https://bodhi.fedoraproject.org/updates/FEDORA-2015-0552500cd7
python-pygments-2.0.2-3.fc22
92
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9039c25f1d
miniupnpc-1.9-6.fc22
74
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
74
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
68
https://bodhi.fedoraproject.org/updates/FEDORA-2015-8413bdd343 abrt-2.6.1-7.fc22
56
https://bodhi.fedoraproject.org/updates/FEDORA-2015-3a5cebb105
ImageMagick-6.9.2.7-1.fc22
56
https://bodhi.fedoraproject.org/updates/FEDORA-2015-39522bb8c9
php-PHPMailer-5.2.14-1.fc22
46
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6efa349a85
subversion-1.8.15-1.fc22
41
https://bodhi.fedoraproject.org/updates/FEDORA-2015-b9e4c97ff1 sos-3.2-2.fc22
15
https://bodhi.fedoraproject.org/updates/FEDORA-2015-f683150aa0
thttpd-2.25b-37.fc22
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1323b9078a
bind99-9.9.8-2.P3.fc22
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-34bc10a2c8
ntp-4.2.6p5-36.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c1fd651bc0
salt-2015.5.9-2.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3c0b37e056
imlib2-1.4.7-1.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-54dcc5d1bf
389-ds-base-1.3.4.7-1.fc22
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3441e9da2f
nodejs-is-my-json-valid-2.12.4-1.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-bf03932bb3 nginx-1.8.1-1.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7b9a2fe987
ecryptfs-utils-109-1.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0
xulrunner-44.0-1.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e2c5111eda
prosody-0.9.10-1.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-35492207cb
krb5-1.13.2-13.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b211281b8e
claws-mail-3.13.2-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-143a48536c
webkitgtk4-2.10.7-1.fc22
The following Fedora 22 Critical Path updates have yet to be approved:
Age URL
173
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13210 yum-3.4.3-508.fc22
92
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2123de044f
libgphoto2-2.5.8-1.fc22
88
https://bodhi.fedoraproject.org/updates/FEDORA-2015-48f718ed1b vim-7.4.909-1.fc22
85
https://bodhi.fedoraproject.org/updates/FEDORA-2015-069fea7e6b
livecd-tools-22.3-1.fc22
74
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
74
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
28
https://bodhi.fedoraproject.org/updates/FEDORA-2016-46b611abb8
httpd-2.4.18-1.fc22
12
https://bodhi.fedoraproject.org/updates/FEDORA-2016-825869e1a4
selinux-policy-3.13.1-128.25.fc22
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-196966efc2
spatialite-tools-4.2.0-19.fc22 sqlite-3.10.2-1.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3c0b37e056
imlib2-1.4.7-1.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-35e3877a89
elfutils-0.165-2.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3b8e5e8781
dnsmasq-2.75-3.fc22
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6427e041df
libgdata-0.17.4-2.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-35492207cb
krb5-1.13.2-13.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0
xulrunner-44.0-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-21424484be
pixman-0.34.0-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-16a5625f33
kernel-4.3.5-200.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9e8671afca
gammaray-2.4.0-1.fc22 qt-4.8.7-4.fc22
The following builds have been pushed to Fedora 22 updates-testing
atomic-reactor-1.6.2-1.fc22
awesome-3.5.8-1.fc22
gammaray-2.4.0-1.fc22
gnome-chemistry-utils-0.14.10-10.fc22
kernel-4.3.5-200.fc22
liferea-1.10.18-1.fc22
lilypond-2.19.36-1.fc22
lilypond-doc-2.19.36-1.fc22
opendnssec-1.4.9-1.fc22
perl-Tk-Pod-0.9943-1.fc22
php-pear-Mail-1.3.0-1.fc22
php-twig-1.24.0-1.fc22
pixman-0.34.0-1.fc22
python-acoustid-1.1.0-1.fc22
python-fedmsg-meta-fedora-infrastructure-0.15.8-1.fc22
python-rhsm-1.17.1-1.fc22
qt-4.8.7-4.fc22
smuxi-1.0.3-1.fc22
subscription-manager-1.17.1-1.fc22
webkitgtk4-2.10.7-1.fc22
Details about builds:
================================================================================
atomic-reactor-1.6.2-1.fc22 (FEDORA-2016-2e3195f45a)
Improved builder for Docker images
--------------------------------------------------------------------------------
Update Information:
New upstream version.
--------------------------------------------------------------------------------
================================================================================
awesome-3.5.8-1.fc22 (FEDORA-2016-c5c4b725bf)
Highly configurable, framework window manager for X. Fast, light and extensible
--------------------------------------------------------------------------------
Update Information:
Awesome 3.5.8 fixes a bug where keyboard bindings stopped working when the
keyboard layout was changed.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1303307 - Awesome WM: Some key bindings (e.g. window close) sporadically stop
to work for already open clients
https://bugzilla.redhat.com/show_bug.cgi?id=1303307
--------------------------------------------------------------------------------
================================================================================
gammaray-2.4.0-1.fc22 (FEDORA-2016-9e8671afca)
A tool for examining internals of Qt applications
--------------------------------------------------------------------------------
Update Information:
Gammaray 2.4.0 release, Qt 4.8.7 release
--------------------------------------------------------------------------------
================================================================================
gnome-chemistry-utils-0.14.10-10.fc22 (FEDORA-2016-5616b950bc)
A set of chemical utilities
--------------------------------------------------------------------------------
Update Information:
This update fixes a crash in gchemtable
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1302135 - [abrt] gchemtable: gcu::Dialog::SetRealName(): gchemtable-0.14
killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1302135
--------------------------------------------------------------------------------
================================================================================
kernel-4.3.5-200.fc22 (FEDORA-2016-16a5625f33)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream stable release, Linux v4.3.5. Fixes across the tree.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1255235 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1255235
[ 2 ] Bug #1278942 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1278942
[ 3 ] Bug #1302037 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1302037
--------------------------------------------------------------------------------
================================================================================
liferea-1.10.18-1.fc22 (FEDORA-2016-4b2d18b54a)
An RSS/RDF feed reader
--------------------------------------------------------------------------------
Update Information:
This updates liferea to 1.10.18 which fixes a number of issues: * Fixes #287:
media:content support broken (patch by Leiaz) * Fixes #279: Rules not visible in
searchdialog (patch by Leiaz) * Fixes #83: Segfault when sorting feeds in folder
(patch by Leiaz) * Fixes #302: Broken compilation with --disable-notify
(reported by vostorga)
--------------------------------------------------------------------------------
================================================================================
lilypond-2.19.36-1.fc22 (FEDORA-2016-a656be91ea)
A typesetting system for music notation
--------------------------------------------------------------------------------
Update Information:
Latest upstream release.
--------------------------------------------------------------------------------
================================================================================
lilypond-doc-2.19.36-1.fc22 (FEDORA-2016-a656be91ea)
HTML documentation for LilyPond
--------------------------------------------------------------------------------
Update Information:
Latest upstream release.
--------------------------------------------------------------------------------
================================================================================
opendnssec-1.4.9-1.fc22 (FEDORA-2016-0de0bc90ec)
DNSSEC key and zone management software
--------------------------------------------------------------------------------
Update Information:
Updated to 1.4.9
--------------------------------------------------------------------------------
================================================================================
perl-Tk-Pod-0.9943-1.fc22 (FEDORA-2016-4139474942)
Pod browser top-level widget
--------------------------------------------------------------------------------
Update Information:
This release fixes geo IP URI provider, exiting forked processes, WWWBrowser
class. It also improves tests.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1303480 - perl-Tk-Pod-0.9943 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1303480
--------------------------------------------------------------------------------
================================================================================
php-pear-Mail-1.3.0-1.fc22 (FEDORA-2016-b1c0cb3a3d)
Class that provides multiple interfaces for sending emails
--------------------------------------------------------------------------------
Update Information:
**Version 1.3.0** * Updated code to use PHP 5 method signatures. Implemented
requests: * 17888, #17865: Reduce peak memory usage when using the smtp/smtpmx
backend [alec] * Ability to pass socket options to Net_SMTP Fixed bugs: *
18109: New "pipelining" parameter for SMTP backend never used [alec] * 17317:
Invalid periods in mailbox not marked as invalid [alec] * 17388: Deprecated
assigning the return value of new by reference [alec] * 17866, #20424, #12071,
#17553: Non-static method Mail_RFC822::parseAddressList called statically [alec]
* 17178: Mail_RFC822::parseAddressList does not accept RFC-valid empty-group
syntax [alec]
--------------------------------------------------------------------------------
================================================================================
php-twig-1.24.0-1.fc22 (FEDORA-2016-c1d78e2af8)
The flexible, fast, and secure template engine for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.24.0** * adding support for the ?? operator * fixed the defined
test when used on a constant, a map, or a sequence * undeprecated _self (should
only be used to get the template name, not the template instance) * fixed
parsing on PHP7
--------------------------------------------------------------------------------
================================================================================
pixman-0.34.0-1.fc22 (FEDORA-2016-21424484be)
Pixel manipulation library
--------------------------------------------------------------------------------
Update Information:
Update to 0.34.0 (#1249357)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1249357 - pixman-0.34.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1249357
--------------------------------------------------------------------------------
================================================================================
python-acoustid-1.1.0-1.fc22 (FEDORA-2016-fcc81f35df)
Python bindings for Chromaprint acoustic fingerprinting and the Acoustid API
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release pyacoustid 1.1.0. Also adds Python 3 version
of the package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1303708 - python-acoustid-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1303708
[ 2 ] Bug #1303458 - python-acoustid: Provide a Python 3 subpackage
https://bugzilla.redhat.com/show_bug.cgi?id=1303458
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.15.8-1.fc22 (FEDORA-2016-87f4e2242c)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
Handle new releng and pagure message types.
--------------------------------------------------------------------------------
================================================================================
python-rhsm-1.17.1-1.fc22 (FEDORA-2016-eb254695f6)
A Python library to communicate with a Red Hat Unified Entitlement Platform
--------------------------------------------------------------------------------
Update Information:
* Fixes for several ppc64 related bugs * Man page updates * GUI usability fixes
* Translation updates
--------------------------------------------------------------------------------
================================================================================
qt-4.8.7-4.fc22 (FEDORA-2016-9e8671afca)
Qt toolkit
--------------------------------------------------------------------------------
Update Information:
Gammaray 2.4.0 release, Qt 4.8.7 release
--------------------------------------------------------------------------------
================================================================================
smuxi-1.0.3-1.fc22 (FEDORA-2016-d0f460c932)
Powerful, flexible, user-friendly chat client
--------------------------------------------------------------------------------
Update Information:
- Update to 1.0.3
--------------------------------------------------------------------------------
================================================================================
subscription-manager-1.17.1-1.fc22 (FEDORA-2016-eb254695f6)
Tools and libraries for subscription and repository management
--------------------------------------------------------------------------------
Update Information:
* Fixes for several ppc64 related bugs * Man page updates * GUI usability fixes
* Translation updates
--------------------------------------------------------------------------------
================================================================================
webkitgtk4-2.10.7-1.fc22 (FEDORA-2016-143a48536c)
GTK+ Web content engine library
--------------------------------------------------------------------------------
Update Information:
This update together with previous releases addresses the following
vulnerabilities: - CVE-2015-7096 - CVE-2015-7098 Additional fixes: - Disable
DNS prefetch when a proxy is configured. - Reduce the maximum simultaneous
network connections to match other browsers. - Make WebKitWebView always
propagate motion-notify-event signal. - Add a way to force accelerating
compositing mode at runtime using an environment variable. - Fix input elements
and scrollbars rendering with GTK+ 3.19. - Fix rendering of lines when using
solid colors. - Fix UI process crashes related to not having a main resource
response when the load is committed for pages restored from the history cache.
- Fix a WebProcess crash when loading large contents with custom URI schemes
API. - Fix a crash in the UI process when the WebView is destroyed while the
screensaver DBus proxy is being created. - Fix WebProcess crashes due to
BadDrawable X errors in accelerated compositing mode. - Fix crashes on PPC64
due to mprotect() on address not aligned to the page size. - Fix
std::bad_function_call exception raised in
dispatchDecidePolicyForNavigationAction. - Fix downloads of data URLs. - Fix
runtime critical warnings when closing a page containing windowed plugins. -
Fix several crashes and rendering issues. - Fix a deadlock in the Web Process
when JavaScript garbage collector was running for a web worker thread that made
google maps to hang. - Fix media controls displaying without controls
attribute. - Fix a Web Process crash when quickly attempting many DnD
operations. - Fix the build with GTK+ < 3.16. - Translation updates: French,
German, Italian, Turkish.
--------------------------------------------------------------------------------