The following Fedora 22 Security updates need testing:
Age URL
318
https://bodhi.fedoraproject.org/updates/FEDORA-2015-5878
echoping-6.1-0.beta.r434svn.1.fc22
267
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9185
ceph-deploy-1.5.25-1.fc22
199
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12781
python-kdcproxy-0.3.2-1.fc22
154
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16239 nagios-4.0.8-1.fc22
147
https://bodhi.fedoraproject.org/updates/FEDORA-2015-05490fc42d
squid-3.4.13-3.fc22
142
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2d37e7dacf
openstack-swift-2.2.0-6.fc22
111
https://bodhi.fedoraproject.org/updates/FEDORA-2015-0552500cd7
python-pygments-2.0.2-3.fc22
111
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9039c25f1d
miniupnpc-1.9-6.fc22
94
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
94
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
75
https://bodhi.fedoraproject.org/updates/FEDORA-2015-3a5cebb105
ImageMagick-6.9.2.7-1.fc22
66
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6efa349a85
subversion-1.8.15-1.fc22
61
https://bodhi.fedoraproject.org/updates/FEDORA-2015-b9e4c97ff1 sos-3.2-2.fc22
34
https://bodhi.fedoraproject.org/updates/FEDORA-2015-f683150aa0
thttpd-2.25b-37.fc22
28
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1323b9078a
bind99-9.9.8-2.P3.fc22
23
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0
xulrunner-44.0-1.fc22
11
https://bodhi.fedoraproject.org/updates/FEDORA-2016-560802e52b
xdelta-3.0.7-7.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3a2606f993
rubygem-rails-html-sanitizer-1.0.1-2.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cb30088b06
rubygem-activesupport-4.2.0-4.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-fa0dec2360
rubygem-actionview-4.2.0-3.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-94e71ee673
rubygem-activemodel-4.2.0-2.fc22 rubygem-actionpack-4.2.0-3.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-73fe05d878
rubygem-activerecord-4.2.0-2.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8925b6119f
nodejs-0.10.42-4.fc22
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b0c2412ab2
postgresql-9.4.6-1.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3d9efe44d8
nghttp2-1.7.1-1.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-49bf88cd29
GraphicsMagick-1.3.23-1.fc22 gdl-0.9.5-10.fc22 octave-3.8.2-19.fc22
vdr-skinenigmang-0.1.2-27.fc22 vdr-skinnopacity-1.1.3-9.fc22 vdr-tvguide-1.2.2-9.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0609474cf6
389-ds-base-1.3.4.8-1.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5cb344dd7e
community-mysql-5.6.29-1.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e21be93421 gummi-0.6.6-1.fc22
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-868c170507
mariadb-10.0.23-1.fc22
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1c08d77b96
qt-creator-3.6.0-6.fc22 qca-2.1.1-4.fc22 code-editor-2.8.1-13.fc22 monotone-1.1-13.fc22
botan-1.10.12-1.fc22
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c97f297cd6
hamster-time-tracker-2.0-0.3.rc1.fc22
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-be042f7e6f qemu-2.3.1-12.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a25ee90150
graphite2-1.3.5-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-11c1d0fc69 pcs-0.9.149-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-24d134e494
mingw-nsis-2.50-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-962c0d156d
libreoffice-4.4.7.2-3.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6a006e78d9
thunderbird-38.6.0-1.fc22
The following Fedora 22 Critical Path updates have yet to be approved:
Age URL
193
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13210 yum-3.4.3-508.fc22
111
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2123de044f
libgphoto2-2.5.8-1.fc22
108
https://bodhi.fedoraproject.org/updates/FEDORA-2015-48f718ed1b vim-7.4.909-1.fc22
94
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
94
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
47
https://bodhi.fedoraproject.org/updates/FEDORA-2016-46b611abb8
httpd-2.4.18-1.fc22
23
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0
xulrunner-44.0-1.fc22
23
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6427e041df
libgdata-0.17.4-2.fc22
19
https://bodhi.fedoraproject.org/updates/FEDORA-2016-16a5625f33
kernel-4.3.5-200.fc22
17
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3fce30d64
mobile-broadband-provider-info-1.20151214-1.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1ec4dabbd5 pcre-8.38-2.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0a3cd0a405 enca-1.18-1.fc22
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-72a831c739
libical-1.0.1-3.fc22
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-bdc07e5732
kde-runtime-15.12.2-1.fc22 kdelibs-4.14.17-1.fc22
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d25f4327b1
kdepim-4.14.10-10.fc22 kdepim-runtime-4.14.10-6.fc22 kdepimlibs-4.14.10-8.fc22
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c865c44c3d
breeze-icon-theme-5.19.0-1.fc22 extra-cmake-modules-5.19.0-1.fc22 kf5-5.19.0-1.fc22
kf5-attica-5.19.0-1.fc22 kf5-baloo-5.19.0-1.fc22 kf5-bluez-qt-5.19.0-1.fc22
kf5-frameworkintegration-5.19.0-1.fc22 kf5-kactivities-5.19.0-1.fc22
kf5-kapidox-5.19.0-1.fc22 kf5-karchive-5.19.0-1.fc22 kf5-kauth-5.19.0-1.fc22
kf5-kbookmarks-5.19.0-1.fc22 kf5-kcmutils-5.19.0-1.fc22 kf5-kcodecs-5.19.0-1.fc22
kf5-kcompletion-5.19.0-1.fc22 kf5-kconfig-5.19.0-1.fc22 kf5-kconfigwidgets-5.19.0-1.fc22
kf5-kcoreaddons-5.19.0-1.fc22 kf5-kcrash-5.19.0-1.fc22 kf5-kdbusaddons-5.19.0-1.fc22
kf5-kdeclarative-5.19.0-2.fc22 kf5-kded-5.19.0-1.fc22 kf5-kdelibs4support-5.19.0-1.fc22
kf5-kdesignerplugin-5.19.0-1.fc22 kf5-kdesu-5.19.0-1.fc22 kf5-kdewebkit-5.19.0-1.fc22
kf5-kdnssd-5.19.0-1.fc22 kf5-kdoctools-5.19.0-1.fc22 kf5-kemoticons-5.19.0-1.fc22
kf5-kfilemetadata-5.19.0-1.fc22 kf5-kglobalaccel-5.19.0-1.fc22
kf5-kguiaddons-5.19.0-1.fc22 kf5-khtml
-5.19.0-
1.fc22 kf5-ki18n-5.19.0-1.fc22 kf5-kiconthemes-5.19.0-1.fc22 kf5-kidletime-5.19.0-1.fc22
kf5-kimageformats-5.19.0-1.fc22 kf5-kinit-5.19.0-1.fc22 kf5-kio-5.19.0-1.fc22
kf5-kitemmodels-5.19.0-1.fc22 kf5-kitemviews-5.19.0-1.fc22 kf5-kjobwidgets-5.19.0-1.fc22
kf5-kjs-5.19.0-1.fc22 kf5-kjsembed-5.19.0-1.fc22 kf5-kmediaplayer-5.19.0-1.fc22
kf5-knewstuff-5.19.0-1.fc22 kf5-knotifications-5.19.0-1.fc22
kf5-knotifyconfig-5.19.0-1.fc22 kf5-kpackage-5.19.0-1.fc22 kf5-kparts-5.19.0-1.fc22
kf5-kpeople-5.19.0-1.fc22 kf5-kplotting-5.19.0-1.fc22 kf5-kpty-5.19.0-1.fc22
kf5-kross-5.19.0-1.fc22 kf5-krunner-5.19.0-1.fc22 kf5-kservice-5.19.0-1.fc22
kf5-ktexteditor-5.19.0-1.fc22 kf5-ktextwidgets-5.19.0-1.fc22
kf5-kunitconversion-5.19.0-1.fc22 kf5-kwallet-5.19.0-1.fc22
kf5-kwidgetsaddons-5.19.0-1.fc22 kf5-kwindowsystem-5.19.0-1.fc22 kf5-kxmlgui-5.19.0-1.fc22
kf5-kxmlrpcclient-5.19.0-1.fc22 kf5-modemmanager-qt-5.19.0-1.fc22
kf5-networkmanager-qt-5.19.0-1.fc22 kf5-plasma-5.19.0-2.fc22 kf5-solid-5.19.
0-1.fc22
kf5-sonnet-5.19.0-1.fc22 kf5-threadweaver-5.19.0-1.fc22 oxygen-icon-theme-5.19.0-3.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e3261008b
htdig-3.2.0-0.21.b6.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b37af739e7
spatialite-tools-4.2.0-20.fc22 sqlite-3.11.0-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5ec3bf7e66 glibc-2.21-12.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ed3e59d122
gnutls-3.3.21-2.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6a006e78d9
thunderbird-38.6.0-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c4618aa80c
hwdata-0.286-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ce419c9cab
selinux-policy-3.13.1-128.28.fc22
The following builds have been pushed to Fedora 22 updates-testing
R-Rcpp-0.12.3-2.fc22
caja-1.12.4-1.fc22
check-mk-1.2.6p16-2.fc22
chirp-20160215-1.fc22
cross-gcc-5.3.1-2.fc22
edgar-1.23-1.fc22
eom-1.12.2-1.fc22
erlang-17.4-7.fc22
etcd-2.2.5-1.fc22
fedpkg-1.21-2.fc22
glibc-2.21-12.fc22
gnome-pkg-tools-0.19.6-1.fc22
gnutls-3.3.21-2.fc22
golang-github-grpc-grpc-go-0-0.4.gite29d659.fc22
golang-googlecode-gogoprotobuf-0.1-0.3.gite8904f5.fc22
golang-googlecode-net-0-0.29.git04b9de9.fc22
golang-googlecode-text-0-0.8.git6fc2e00.fc22
hwdata-0.286-1.fc22
jpegoptim-1.4.3-4.fc22
kamera-15.12.2-2.fc22
libreoffice-4.4.7.2-3.fc22
lnst-11-2.fc22
lrzip-0.616-5.fc22
mate-panel-1.12.2-1.fc22
mingw-nsis-2.50-1.fc22
pcs-0.9.149-1.fc22
pg_view-1.3.0-1.fc22
php-horde-Horde-Cache-2.5.3-1.fc22
php-horde-kronolith-4.2.15-1.fc22
php-latte-2.3.10-1.fc22
php-league-flysystem-1.0.17-1.fc22
php-nette-di-2.3.9-1.fc22
php-nette-finder-2.3.2-1.fc22
php-nette-http-2.3.4-1.fc22
php-nette-neon-2.3.4-1.fc22
php-tracy-2.3.8-1.fc22
pluma-1.12.2-1.fc22
procenv-0.44-1.fc22
pyparsing-2.1.0-2.fc22
python-fedora-0.7.1-4.fc22
python-fmn-lib-0.8.0-1.fc22
python-fmn-rules-0.8.0-1.fc22
python-ipdb-0.8.3-1.fc22
python-openid-cla-1.2-1.fc22
python3-pyPEG2-2.15.2-1.fc22
quantum-espresso-5.3.0-8.fc22
rpcbind-0.2.3-5.rc1.fc22
saxon-9.4.0.9-2.fc22
selinux-policy-3.13.1-128.28.fc22
speed-dreams-2.2.0-0.5.20160215svn6358.rc1.fc22
subscription-manager-1.17.2-1.fc22
thunderbird-38.6.0-1.fc22
tracer-0.6.8-1.fc22
voms-2.0.13-1.fc22
Details about builds:
================================================================================
R-Rcpp-0.12.3-2.fc22 (FEDORA-2016-d74f736f60)
Seamless R and C++ Integration
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1305335 - Review Request: R-Rcpp - Seamless R and C++ Integration
https://bugzilla.redhat.com/show_bug.cgi?id=1305335
--------------------------------------------------------------------------------
================================================================================
caja-1.12.4-1.fc22 (FEDORA-2016-8f137de5b1)
File manager for MATE
--------------------------------------------------------------------------------
Update Information:
- update to 1.12.4 release
--------------------------------------------------------------------------------
================================================================================
check-mk-1.2.6p16-2.fc22 (FEDORA-2016-6565234a4e)
A new general purpose Nagios-plugin for retrieving data
--------------------------------------------------------------------------------
Update Information:
Various bug fixes package update ---- Various bug fixes package update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1309350 - Please rebuild the latest check-mk 1.2.6p16 for Nagios 4
https://bugzilla.redhat.com/show_bug.cgi?id=1309350
[ 2 ] Bug #1281888 - Permissions issues on /etc/check_mk/conf.d/wato and
/etc/check_mk/multisite.d
https://bugzilla.redhat.com/show_bug.cgi?id=1281888
[ 3 ] Bug #1281882 - rrd_path missing in defaults.py
https://bugzilla.redhat.com/show_bug.cgi?id=1281882
[ 4 ] Bug #1258969 - check-mk-agent dependency on xinetd
https://bugzilla.redhat.com/show_bug.cgi?id=1258969
--------------------------------------------------------------------------------
================================================================================
chirp-20160215-1.fc22 (FEDORA-2016-28a0296dc6)
A tool for programming two-way radio equipment
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1309842 - chirp-20160215 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1309842
--------------------------------------------------------------------------------
================================================================================
cross-gcc-5.3.1-2.fc22 (FEDORA-2016-97010d486e)
Cross C compiler
--------------------------------------------------------------------------------
Update Information:
Updated the package to be based on gcc-5.3.1-4.
--------------------------------------------------------------------------------
================================================================================
edgar-1.23-1.fc22 (FEDORA-2016-5b835ff751)
A platform game
--------------------------------------------------------------------------------
Update Information:
* Updated French and German translations
--------------------------------------------------------------------------------
================================================================================
eom-1.12.2-1.fc22 (FEDORA-2016-3be0d49007)
Eye of MATE image viewer
--------------------------------------------------------------------------------
Update Information:
- update to 1.12.2 release
--------------------------------------------------------------------------------
================================================================================
erlang-17.4-7.fc22 (FEDORA-2016-679ce800a0)
General-purpose programming language and runtime environment
--------------------------------------------------------------------------------
Update Information:
* Add missing dependency
--------------------------------------------------------------------------------
================================================================================
etcd-2.2.5-1.fc22 (FEDORA-2016-4520ce50d7)
A highly-available key value store for shared configuration
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.5 ---- Rebase to 2.2.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279843 - etcd-v2.3.0-alpha.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1279843
[ 2 ] Bug #1272438 - etcd-v2.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1272438
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.21-2.fc22 (FEDORA-2016-6372be835f)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
### New 1.21 release - Use rpkg's backwards compatible `clone_config`
(pbabinca) - Merge [#7 - Fix Deprecation warning during fedpkg update
run](https://pagure.io/fedpkg/pull-request/7) (kumarpraveen.nitdgp) - Merge [#3
- Add post-clone bz and sendemail config, requires rpkg >
1.36](https://pagure.io/fedpkg/pull-request/3) (ville.skytta) - Merge [#2 -
Lookaside improvents](https://pagure.io/fedpkg/pull-request/2/) (bochecha)
--------------------------------------------------------------------------------
================================================================================
glibc-2.21-12.fc22 (FEDORA-2016-5ec3bf7e66)
The GNU libc libraries
--------------------------------------------------------------------------------
Update Information:
This update corrects a build issue on s390x where kernel headers from version
4.3 need cause the built glibc to be incompatible with kernel versions before
4.3. Additionally, a superfluous newline character is removed from the date
output in Serbian locales.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1310168 - glibc-2.22-9.fc23 breaks audit?
https://bugzilla.redhat.com/show_bug.cgi?id=1310168
[ 2 ] Bug #1114591 - additional new line in output of date when locale is set to sr_RS
https://bugzilla.redhat.com/show_bug.cgi?id=1114591
--------------------------------------------------------------------------------
================================================================================
gnome-pkg-tools-0.19.6-1.fc22 (FEDORA-2016-0f5c1159b8)
Tools for the Debian GNOME Packaging Team
--------------------------------------------------------------------------------
Update Information:
Update to version 0.19.6, see
http://metadata.ftp-
master.debian.org/changelogs/main/g/gnome-pkg-tools/gnome-pkg-
tools_0.19.6_changelog for details.
--------------------------------------------------------------------------------
================================================================================
gnutls-3.3.21-2.fc22 (FEDORA-2016-ed3e59d122)
A TLS protocol implementation
--------------------------------------------------------------------------------
Update Information:
Fix issue with hash truncation on large input (#1310103)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1310103 - hash input truncation: GNUTLS vs nettle
https://bugzilla.redhat.com/show_bug.cgi?id=1310103
--------------------------------------------------------------------------------
================================================================================
golang-github-grpc-grpc-go-0-0.4.gite29d659.fc22 (FEDORA-2016-7eb01acda5)
The Go language implementation of gRPC. HTTP/2 based RPC
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250461 - Tracker for golang-github-grpc-grpc-go
https://bugzilla.redhat.com/show_bug.cgi?id=1250461
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-gogoprotobuf-0.1-0.3.gite8904f5.fc22 (FEDORA-2016-dd4ccc26a9)
A fork of goprotobuf with several extra features
--------------------------------------------------------------------------------
Update Information:
Update ---- Bump to upstream 8edb24c179ed858a38f18920d9005c2dde05ec17 ----
Update spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1246215 - Tracker for golang-googlecode-gogoprotobuf
https://bugzilla.redhat.com/show_bug.cgi?id=1246215
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-net-0-0.29.git04b9de9.fc22 (FEDORA-2016-ea6c509a98)
Supplementary Go networking libraries
--------------------------------------------------------------------------------
Update Information:
Update ---- Bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1230677 - Tracker for golang-googlecode-net
https://bugzilla.redhat.com/show_bug.cgi?id=1230677
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-text-0-0.8.git6fc2e00.fc22 (FEDORA-2016-7514f9b019)
Supplementary Go text libraries
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1254601 - Tracker for golang-googlecode-text
https://bugzilla.redhat.com/show_bug.cgi?id=1254601
--------------------------------------------------------------------------------
================================================================================
hwdata-0.286-1.fc22 (FEDORA-2016-c4618aa80c)
Hardware identification and configuration data
--------------------------------------------------------------------------------
Update Information:
Updated pci, usb and vendor ids.
--------------------------------------------------------------------------------
================================================================================
jpegoptim-1.4.3-4.fc22 (FEDORA-2016-a18d3a4150)
Utility to optimize JPEG files
--------------------------------------------------------------------------------
Update Information:
Adding detailed error handling patch.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1274969 - jpegoptim: error creating temp file: mkstemps() failed
https://bugzilla.redhat.com/show_bug.cgi?id=1274969
--------------------------------------------------------------------------------
================================================================================
kamera-15.12.2-2.fc22 (FEDORA-2016-15ae43e176)
Digital camera support for KDE
--------------------------------------------------------------------------------
Update Information:
Latest release, supports kf5 actions and includes both kf5 and kde4 kioslaves
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1249283 - Camera is not detected when it is plugged to PC
https://bugzilla.redhat.com/show_bug.cgi?id=1249283
--------------------------------------------------------------------------------
================================================================================
libreoffice-4.4.7.2-3.fc22 (FEDORA-2016-962c0d156d)
Free Software Productivity Suite
--------------------------------------------------------------------------------
Update Information:
* CVE-2016-0794 and CVE-2016-0795 LotusWordPro filter security fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1309207 - CVE-2016-0794 CVE-2016-0795 libreoffice: Multiple out-of-bounds
overflows in lwp filter [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1309207
--------------------------------------------------------------------------------
================================================================================
lnst-11-2.fc22 (FEDORA-2016-00da4718b3)
Common code for lnst-ctl and lnst-slave
--------------------------------------------------------------------------------
Update Information:
- added missing dbus-python dependency for lnst-slave ---- - Updating to
stable release 11
--------------------------------------------------------------------------------
================================================================================
lrzip-0.616-5.fc22 (FEDORA-2016-eaff2c6d99)
Compression program optimized for large files
--------------------------------------------------------------------------------
Update Information:
This release disables broken JIT in ZPAQ implementation on non-x86
architectures. It also silents some compiler warnings, performs some tests at
build time and corrects build-time dependency list.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1309772 - ./lrzip -z COPYING crashed on ARMv7
https://bugzilla.redhat.com/show_bug.cgi?id=1309772
[ 2 ] Bug #1306292 - lrzip-0.621-4.fc24 FTBFS: narrowing conversion of '-1' from
'int' to 'char' inside { } [-Wnarrowing]
https://bugzilla.redhat.com/show_bug.cgi?id=1306292
--------------------------------------------------------------------------------
================================================================================
mate-panel-1.12.2-1.fc22 (FEDORA-2016-04616d3c37)
MATE Desktop panel and applets
--------------------------------------------------------------------------------
Update Information:
- update to 1.12.2 release
--------------------------------------------------------------------------------
================================================================================
mingw-nsis-2.50-1.fc22 (FEDORA-2016-24d134e494)
Nullsoft Scriptable Install System
--------------------------------------------------------------------------------
Update Information:
New upstream version 2.50. - Fixes serious DLL hijacking attack:
https://sourceforge.net/p/nsis/bugs/1125/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1309882 - Security: NSIS < 2.50 allows DLL hijacking
https://bugzilla.redhat.com/show_bug.cgi?id=1309882
--------------------------------------------------------------------------------
================================================================================
pcs-0.9.149-1.fc22 (FEDORA-2016-11c1d0fc69)
Pacemaker Configuration System
--------------------------------------------------------------------------------
Update Information:
* Re-synced to upstream sources * Security fix for CVE-2016-0720, CVE-2016-0721
* Rubygems built with RELRO * Spec file cleanup * Fixed multilib .pyc/.pyo issue
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1299615 - CVE-2016-0721 pcs: cookies are not invalidated upon logout
https://bugzilla.redhat.com/show_bug.cgi?id=1299615
[ 2 ] Bug #1299614 - CVE-2016-0720 pcs: Cross-Site Request Forgery in web UI
https://bugzilla.redhat.com/show_bug.cgi?id=1299614
--------------------------------------------------------------------------------
================================================================================
pg_view-1.3.0-1.fc22 (FEDORA-2016-88d645b3f9)
Command-line tool to display the state of the PostgreSQL processes
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.0
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Cache-2.5.3-1.fc22 (FEDORA-2016-f79fef395e)
Horde Caching API
--------------------------------------------------------------------------------
Update Information:
**Horde_Cache 2.5.3** * [jan] Fix incomplete migration from old to new garbage
collection in file backend (Bug #14258). * [jan] Mark PHP 7 as supported.
--------------------------------------------------------------------------------
================================================================================
php-horde-kronolith-4.2.15-1.fc22 (FEDORA-2016-66430a07c8)
A web based calendar
--------------------------------------------------------------------------------
Update Information:
**kronolith 4.2.15** * [mjr] Fix typo preventing deletion of events from
dynamic view (Bug #14256). * [jan] Handle gracefully if the base event of an
imported recurrence exception is no longer recurring (Bug #14249). ----
**Kronolith 4.2.14** * [mjr] Fix issue deleting and closing event dialog during
event deletion. * [mjr] Honor the SCHEDULE-AGENT attribute during CalDAV import.
---- **Kronolith 4.2.13** * [mjr] Add missing EAS ghosted property support for
all EAS versions. Prevents potential loss of event data during synchronization.
**Kronolith 4.2.12** * [mjr] Fix missing truncated event description when using
ActiveSync. * [jan] Fix week number in basic view if week starts on Sundays. *
[mjr] Fix issue where new event could be created with exceptions from previously
edited event. * [jan] Mark preferences only available in basic mode. * [jan] Use
access rules compatible with both Apache 2.2 and 2.4. * [jan] Fix accidental
deletion of events if importing recurring events without a UID attribute (Bug
#14208). * [mjr] Honor confirm_delete preference in dynamic view (Bug #14188). *
[mjr] Correctly deal with cancelled meetings via ActiveSync. * [mjr] Fix
visibility of alarm titles when alarm is generated via CLI (Bug #14154). * [mjr]
Fix display of embed code by adding the full url.
--------------------------------------------------------------------------------
================================================================================
php-latte-2.3.10-1.fc22 (FEDORA-2016-05820203e4)
Latte: the amazing template engine for PHP
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.10** * Parser: || is not modifier separator #100 *
Engine: fixed CompileException sourceLine on PHP7 * FileLoader: error message
explaining touching, when touch() fails ---- **Released version 2.3.9** *
BlockMacros: fixed enabling snippetMode in the dynamic snippetArea *
Parser::parseMacroTag() fixed extraction of modifier nette/nette#1541
--------------------------------------------------------------------------------
================================================================================
php-league-flysystem-1.0.17-1.fc22 (FEDORA-2016-80a7985bc7)
Filesystem abstraction: Many filesystems, one API
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.17** - 2016-02-19 * [Util::guessMimeType] Worked around
incorrect detection of assembly mime-type. (#608)
--------------------------------------------------------------------------------
================================================================================
php-nette-di-2.3.9-1.fc22 (FEDORA-2016-8ace1bfa78)
Nette Dependency Injection Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.2** * fixed typehints, FilesystemIterator ->
RecursiveDirectoryIterator in filters
--------------------------------------------------------------------------------
================================================================================
php-nette-finder-2.3.2-1.fc22 (FEDORA-2016-0d94ae33bc)
Nette Finder: Files Searching
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.2** * fixed typehints, FilesystemIterator ->
RecursiveDirectoryIterator in filters
--------------------------------------------------------------------------------
================================================================================
php-nette-http-2.3.4-1.fc22 (FEDORA-2016-ffcf2a0453)
Nette HTTP Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.4** * IRequest: added PATCH method constant * Fix
FileUpload::move($dest) when low permission to chmod * removed rarely used
@property phpDoc
--------------------------------------------------------------------------------
================================================================================
php-nette-neon-2.3.4-1.fc22 (FEDORA-2016-93395b4638)
Nette NEON: parser and generator for Nette Object Notation
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.4** * Decoder: fixed entity value conversion in the
entity chain
--------------------------------------------------------------------------------
================================================================================
php-tracy-2.3.8-1.fc22 (FEDORA-2016-581bc9dbad)
Tracy: useful PHP debugger
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.8** * added Debugger::$showBar, can disable debug
bar #132 #83 #82 * Bluescreen: link to google opens in new window * Bar:
add xdebug version to info panel * Dumper::encodeString() is independent on
iconv #126 * Dumper: fixed dumping INF in PHP 7.0.2
--------------------------------------------------------------------------------
================================================================================
pluma-1.12.2-1.fc22 (FEDORA-2016-964194914d)
Text editor for the MATE desktop
--------------------------------------------------------------------------------
Update Information:
- update to 1.12.2 release
--------------------------------------------------------------------------------
================================================================================
procenv-0.44-1.fc22 (FEDORA-2016-5ad6e50b35)
Utility to show process environment
--------------------------------------------------------------------------------
Update Information:
New version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1107127 - Review Request: procenv - Utility to show process environment
https://bugzilla.redhat.com/show_bug.cgi?id=1107127
--------------------------------------------------------------------------------
================================================================================
pyparsing-2.1.0-2.fc22 (FEDORA-2016-27c5665cb6)
Python package with an object-oriented approach to text processing
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release. The major changes are: * Added
compatibility for pickle protocols 2-4 when pickling ParseResults; * Added
optional 'stopOn' argument to ZeroOrMore and OneOrMore, to simplify breaking
on stop tokens that would match the repetition expression. * Added expression
names for many internal and builtin expressions, to reduce name and error
message overhead during parsing; * Cleaned up some examples; * Some long
deprecated methods were removed. There are now proper python2 and python3 sub-
packages.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1305395 - pyparsing-2.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1305395
--------------------------------------------------------------------------------
================================================================================
python-fedora-0.7.1-4.fc22 (FEDORA-2016-34d573318a)
Python modules for talking to Fedora Infrastructure Services
--------------------------------------------------------------------------------
Update Information:
Rebased version to include python3 support for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1308351 - python-openid-cla-v1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1308351
--------------------------------------------------------------------------------
================================================================================
python-fmn-lib-0.8.0-1.fc22 (FEDORA-2016-8f694f2559)
Internal API components and model for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
DB upgrade adds taskotron rules to the defaults.
--------------------------------------------------------------------------------
================================================================================
python-fmn-rules-0.8.0-1.fc22 (FEDORA-2016-14dbc8cde9)
Message processing rules for Fedora Notifications
--------------------------------------------------------------------------------
Update Information:
More sophisticated taskotron rules.
--------------------------------------------------------------------------------
================================================================================
python-ipdb-0.8.3-1.fc22 (FEDORA-2016-167823cdfa)
IPython enabled Python debugger
--------------------------------------------------------------------------------
Update Information:
New upstream version 0.8.3 ---- Update to new upstream version 0.8.1
--------------------------------------------------------------------------------
================================================================================
python-openid-cla-1.2-1.fc22 (FEDORA-2016-34d573318a)
CLA extension for python-openid
--------------------------------------------------------------------------------
Update Information:
Rebased version to include python3 support for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1308351 - python-openid-cla-v1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1308351
--------------------------------------------------------------------------------
================================================================================
python3-pyPEG2-2.15.2-1.fc22 (FEDORA-2016-cb9a61cfd1)
A PEG Parser-Interpreter in Python
--------------------------------------------------------------------------------
Update Information:
First update of the package.
--------------------------------------------------------------------------------
================================================================================
quantum-espresso-5.3.0-8.fc22 (FEDORA-2016-109b4f4605)
A suite for electronic-structure calculations and materials modeling
--------------------------------------------------------------------------------
Update Information:
use only 2 cores for tests (bug #1308481)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1308481 - test suite fails on machine with lots of cpu cores
https://bugzilla.redhat.com/show_bug.cgi?id=1308481
--------------------------------------------------------------------------------
================================================================================
rpcbind-0.2.3-5.rc1.fc22 (FEDORA-2016-0c0cb177d4)
Universal Addresses to RPC Program Number Mapper
--------------------------------------------------------------------------------
Update Information:
Updated to the latest RC release rpcbind-0_2_4-rc1
--------------------------------------------------------------------------------
================================================================================
saxon-9.4.0.9-2.fc22 (FEDORA-2016-7080bbab97)
Java XPath, XSLT 2.0 and XQuery implementation
--------------------------------------------------------------------------------
Update Information:
- pom: artifactId: Saxon-HE filename: {artifact_id}-{version_maven}.pom
(i.e Saxon-HE-9.4.0-9.pom) saxon-{version_maven} is provided by mvn_alias -
Move license file under license tag. ---- - Upstream update to 9.4.0-9 -
Remove Source7: saxon-{version}.pom, use here-document to generate it.
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.13.1-128.28.fc22 (FEDORA-2016-ce419c9cab)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
More info:
http://koji.fedoraproject.org/koji/buildinfo?buildID=736112 ----
More info:
http://koji.fedoraproject.org/koji/buildinfo?buildID=712036 ----
More info:
http://koji.fedoraproject.org/koji/buildinfo?buildID=704375
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1253319 - SELinux prevents systemd-coredump from working
https://bugzilla.redhat.com/show_bug.cgi?id=1253319
[ 2 ] Bug #1271401 - SELinux policy prevents the NVIDIA 358.xx driver from updating the
screen
https://bugzilla.redhat.com/show_bug.cgi?id=1271401
[ 3 ] Bug #1294328 - SELinux is preventing /usr/bin/gnome-shell from 'sendto'
accesses on the unix_dgram_socket @nvidia050d047c.
https://bugzilla.redhat.com/show_bug.cgi?id=1294328
[ 4 ] Bug #1308622 - SELinux blocks iptables on Fedora Atomic 23
https://bugzilla.redhat.com/show_bug.cgi?id=1308622
[ 5 ] Bug #1266153 - SELinux prevents reboot from cron job
https://bugzilla.redhat.com/show_bug.cgi?id=1266153
[ 6 ] Bug #1267217 - selinux denial when adding bridge via monitor command
https://bugzilla.redhat.com/show_bug.cgi?id=1267217
[ 7 ] Bug #1276519 - SELinux is preventing mdadm from 'search' accesses on the
directory /sys/firmware/efi/efivars.
https://bugzilla.redhat.com/show_bug.cgi?id=1276519
[ 8 ] Bug #1276861 - SELinux is preventing /usr/sbin/upsmon from using the
'kill' capabilities.
https://bugzilla.redhat.com/show_bug.cgi?id=1276861
[ 9 ] Bug #1279752 - SELinux is preventing plugin-containe from 'create'
accesses on the directory .linphone-web.
https://bugzilla.redhat.com/show_bug.cgi?id=1279752
[ 10 ] Bug #1282103 - SELinux is preventing /usr/sbin/upsmon from 'read'
accesses on the chr_file urandom.
https://bugzilla.redhat.com/show_bug.cgi?id=1282103
[ 11 ] Bug #1282104 - SELinux is preventing /usr/sbin/upsmon from 'open'
accesses on the chr_file /dev/random.
https://bugzilla.redhat.com/show_bug.cgi?id=1282104
[ 12 ] Bug #1282105 - SELinux is preventing /usr/sbin/upsmon from 'open'
accesses on the chr_file /dev/urandom.
https://bugzilla.redhat.com/show_bug.cgi?id=1282105
[ 13 ] Bug #1285425 - SELinux is preventing /usr/bin/perl from name_connect
https://bugzilla.redhat.com/show_bug.cgi?id=1285425
[ 14 ] Bug #1248785 - SELinux is preventing /usr/sbin/clamd from name_bind access on the
tcp_socket
https://bugzilla.redhat.com/show_bug.cgi?id=1248785
[ 15 ] Bug #1268638 - SELinux preventing qemu create access sock_file
https://bugzilla.redhat.com/show_bug.cgi?id=1268638
[ 16 ] Bug #1274018 - selinux blocks apcupsd scrips
https://bugzilla.redhat.com/show_bug.cgi?id=1274018
[ 17 ] Bug #1275006 - SELinux is preventing acpid from 'create' accesses on the
netlink_generic_socket Unknown.
https://bugzilla.redhat.com/show_bug.cgi?id=1275006
[ 18 ] Bug #1277779 - SELinux is preventing /usr/bin/bash from 'getattr'
accesses on the file /usr/sbin/dmsetup.
https://bugzilla.redhat.com/show_bug.cgi?id=1277779
[ 19 ] Bug #1279182 - AVC: systemd hostnamed and networkd cannot talk over dbus
https://bugzilla.redhat.com/show_bug.cgi?id=1279182
[ 20 ] Bug #1282139 - arpwatch doesn't start on fc22 (selinux related)
https://bugzilla.redhat.com/show_bug.cgi?id=1282139
--------------------------------------------------------------------------------
================================================================================
speed-dreams-2.2.0-0.5.20160215svn6358.rc1.fc22 (FEDORA-2016-65abca6611)
The Open Racing Car Simulator
--------------------------------------------------------------------------------
Update Information:
* Wed Feb 17 2016 Martin Gansser <martinkg(a)fedoraproject.org> -
2.2.0-0.5.20160215svn6358.rc1 - Update to svn6358.rc1 - Fixed sed command -
Replaced $$RPM_BUILD_ROOT macro through %%{buildroot} - Dropped speed-dreams-
isnan-not-declared.patch
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 17 2016 Martin Gansser <martinkg(a)fedoraproject.org> -
2.2.0-0.5.20160215svn6358.rc1
- Update to svn6358.rc1
- Fixed sed command
- Replaced $$RPM_BUILD_ROOT macro through %{buildroot}
- Dropped speed-dreams-isnan-not-declared.patch
* Sun Jan 31 2016 Martin Gansser <martinkg(a)fedoraproject.org> -
2.2.0-0.4.20160131svn6353.beta1
- Update to svn6353.beta1
- Dropped t940-r6349.patch
- Added speed-dreams-isnan-not-declared.patch needed by F24
- Cleanup spec file
- Dropped %cmake flag -DCMAKE_EXE_LINKER_FLAGS="-lexpat" no longer needed
- Dropped %cmake flag -DSOLID_SOLID_INCLUDE_DIR:PATH="/usr/include/FreeSOLID" no
longer needed
* Thu Jan 28 2016 Martin Gansser <martinkg(a)fedoraproject.org> -
2.2.0-0.3.20160111svn6344.beta1
- Update upstream ticket links
- Added patch t940-r6349.patch to fix #940 Race config screen corruption
* Mon Jan 25 2016 Martin Gansser <martinkg(a)fedoraproject.org> -
2.2.0-0.2.20160111svn6344.beta1
- Changed %cmake flag to -DSOLID_SOLID_INCLUDE_DIR
- Added danroid in for loop to create a link when library already exists
* Tue Jan 19 2016 Martin Gansser <martinkg(a)fedoraproject.org> -
2.2.0-0.1.20160111svn6344.beta1
- Update to Version 2.2.0 svn6344.beta1
- Dropped epoch
- Dropped BR SDL-devel
- Added BR SDL2-devel
- Added BR OpenSceneGraph-devel
- Added speed-dreams-arm.patch
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:2.1.0-0.24.20140627svn5799.rc2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat May 2 2015 Kalev Lember <kalevlember(a)gmail.com> -
1:2.1.0-0.23.20140627svn5799.rc2
- Rebuilt for GCC 5 C++11 ABI change
* Thu Mar 26 2015 Richard Hughes <rhughes(a)redhat.com> -
1:2.1.0-0.22.20140627svn5799.rc2
- Add an AppData file for the software center
--------------------------------------------------------------------------------
================================================================================
subscription-manager-1.17.2-1.fc22 (FEDORA-2016-f1d84fd4be)
Tools and libraries for subscription and repository management
--------------------------------------------------------------------------------
Update Information:
Minor bugfixes
--------------------------------------------------------------------------------
================================================================================
thunderbird-38.6.0-1.fc22 (FEDORA-2016-6a006e78d9)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
For changes see:
https://www.mozilla.org/en-US/thunderbird/38.6.0/releasenotes/
--------------------------------------------------------------------------------
================================================================================
tracer-0.6.8-1.fc22 (FEDORA-2016-61e7efa1f9)
Finds outdated running applications in your system
--------------------------------------------------------------------------------
Update Information:
Fix /etc/os-release issues on CentOS
--------------------------------------------------------------------------------
================================================================================
voms-2.0.13-1.fc22 (FEDORA-2016-f4ffcf1175)
Virtual Organization Membership Service
--------------------------------------------------------------------------------
Update Information:
New upstream release.
http://italiangrid.github.io/voms/release-notes/voms-
server/2.0.13/
--------------------------------------------------------------------------------