The following Fedora 21 Security updates need testing:
Age URL
4
https://admin.fedoraproject.org/updates/FEDORA-2014-13837/konversation-1....
3
https://admin.fedoraproject.org/updates/FEDORA-2014-14461/python-requests...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-14617/GraphicsMagick-...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-14697/drupal7-ckedito...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-14546/oath-toolkit-2....
The following Fedora 21 Critical Path updates have yet to be approved:
Age URL
4
https://admin.fedoraproject.org/updates/FEDORA-2014-14342/cdrkit-1.1.11-2...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-14476/pulseaudio-5.0-...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-14433/libteam-1.14-1....
0
https://admin.fedoraproject.org/updates/FEDORA-2014-14639/pcre-8.35-7.fc21
0
https://admin.fedoraproject.org/updates/FEDORA-2014-14298/openssh-6.6.1p1...
The following builds have been pushed to Fedora 21 updates-testing
abcde-2.6-1.fc21
anki-2.0.31-1.fc21
bluebird-1.2-2.fc21
drupal7-ckeditor-1.16-2.fc21
drupal7-ds-2.7-1.fc21
drupal7-link-1.3-1.fc21
gimp-paint-studio-2.0-8.fc21
greybird-1.4-3.fc21
mate-themes-1.9.2-0.1.git20141108.66e3797.fc21
mesa-10.3.3-1.20141110.fc21
mintmenu-5.6.0-1.fc21
perl-Devel-Timer-0.06-1.fc21
php-Monolog-1.11.0-1.fc21
php-aws-sdk-2.7.3-1.fc21
php-egulias-email-validator-1.2.5-1.fc21
python-structlog-0.4.2-3.fc21
recoll-1.19.14p2-1.fc21
sazanami-fonts-0.20040629-23.fc21
xpa-2.1.15-2.fc21
Details about builds:
================================================================================
abcde-2.6-1.fc21 (FEDORA-2014-14680)
A Better CD Encoder
--------------------------------------------------------------------------------
Update Information:
Update to version 2.6.
http://git.einval.com/cgi-bin/gitweb.cgi?p=abcde.git;a=blob;f=changelog;h...
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 9 2014 Ville Skyttä <ville.skytta(a)iki.fi> - 2.6-1
- Update to 2.6
- Mark COPYING as %license where applicable
--------------------------------------------------------------------------------
================================================================================
anki-2.0.31-1.fc21 (FEDORA-2014-14685)
Flashcard program for using space repetition learning
--------------------------------------------------------------------------------
Update Information:
Update to new bugfix upstream release 2.0.28.
Please see
http://www.ankisrs.net/docs/changes.html for details.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 3 2014 Christian Krause <chkr(a)fedoraproject.org> - 2.0.31-1
- Update to new upstream version 2.0.31 (BZ 1144973)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1144973 - anki-2.0.31 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1144973
--------------------------------------------------------------------------------
================================================================================
bluebird-1.2-2.fc21 (FEDORA-2014-14679)
A clean minimalistic theme for Xfce, GTK+ 2 and 3
--------------------------------------------------------------------------------
Update Information:
Upstream fix for checkboxes and radios in gtk3.14
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 8 2014 poma <poma(a)gmail.com> 1.2-2
- Upstream fix for checkboxes and radios in gtk3.14
- The "shadow" is re-enabled, the full size of the app menu in the system tray
is resolved upstream - gtkmenu: fix unnecessary scroll buttons gtk-3-14
https://git.gnome.org/browse/gtk+/commit/?h=gtk-3-14&id=695ff38
- The same applies to the Shimmer Project Desktop Suites for Xfce as a whole,
i.e. Greybird, Bluebird and Albatross.
- With these two corrections bugs #1114161, #1139190 and #1139187
are solved completely.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1139190 - Update to 1.2 & catch up gtk3
https://bugzilla.redhat.com/show_bug.cgi?id=1139190
--------------------------------------------------------------------------------
================================================================================
drupal7-ckeditor-1.16-2.fc21 (FEDORA-2014-14697)
Enables the usage of CKEditor (WYSIWYG) instead of plain text fields
--------------------------------------------------------------------------------
Update Information:
## [
7.x-1.16](https://www.drupal.org/node/2356563)
* [SA-CONTRIB-2014-098 - CKEditor - Cross Site Scripting
(
XSS)](https://www.drupal.org/node/2357029)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 10 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.16-2
- Removed EPEL 5 bits
* Sun Nov 9 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.16-1
- Updated to 1.16 (BZ #1153938)
- Removed RPM README b/c it only explained common Drupal workflow
- Spec cleanup
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1153938 - drupal7-ckeditor-1.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1153938
--------------------------------------------------------------------------------
================================================================================
drupal7-ds-2.7-1.fc21 (FEDORA-2014-14675)
Extend the display options for every entity type
--------------------------------------------------------------------------------
Update Information:
## [
7.x-2.7](https://www.drupal.org/node/2364627)
* Issue #2345543 by lorenx: Fixed undefined variable.
* Issue #2288345 by axe312: Added token support for region classes.
* Issue #2324537 by mitrpaka: Fixed Odd/even classes for field items.
* Issue #2284575 by stefan.r: Fixed Node display test fails if site is installed in a
subdirectory.
* Issue #2289845 by thirdender: Added ds_render_user_picture should use format_username.
* Issue #2291887 by MXT: Added FIGURE to custom wrappers.
* Added odd/even classes to grouped elements
* Issue #1927752 by yannickoo: Token support for outer wrapper's, field items' and
field item's classes and attributes.
* Issue #2226083 by samhassell: PHP 5.5 'undefined index' notice in
ds_extras.registry.inc.
* Issue #2111707 by aspilicious | robertstaddon: Display Suite Search + PHP 5.4 =
"Notice: Array to string conversion in node_ds_search_execute()".
* Prevent fatals when index is corrupt
* Issue #1670150 by legolasbo | webankit: Field Collection Embedded.
* Make it possible to alter the ds_field_theme settings
* 2158273 fixed layout classes not being applied on forms
* Improved check for ui_limit to ignore empty arrays
* Issue #2076897 by aspilicious: Prefix/suffix.
* Issue #1931216 by yannickoo: Hide unnecessary fields in expert field template.
* Issue #1824348 by alanburke, aspilicious | carajito: Label wrapper.
* Issue #1635906 by Deciphered: Remove 'block' module requirement for related
functionality.
* Added extra checks to prevent notices when non existing terms are loaded
* Issue #2154515 by bartvdputte: Entity translation on custom view mode of term results in
"[language] translation unavailable for [term]".
* Issue #1519916 by swentel, Stalski: Field templates, field refresh and cogwheel
problems.
* Issue #1645500 by dawehner | gooddesignusa: Add Class to region based on field value.
* Issue #2141439 by swentel | dead_arm: Label, as link with label as title does not
respect a custom label.
* 1822404 Increase label length of custom fields in schema
* Issue #2155977 by svdhout: Linked wrapper on user entity.
* Issue #2154661 by sch4lly: Add clear option to token_replace in Layout Link Wrapper.
* Issue #2162107 by sammys: Ds_render_field() does not use URI options when rendering
links to an entity.
* Issue #2154661 by sch4lly: Add clear option to token_replace in Layout Link Wrapper.
* Issue #1279478 by swentel: Fixed block notice.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 9 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> 2.7-1
- Updated to 2.7 (BZ #1159477)
- Removed RPM README b/c it only explained common Drupal workflow
- %license usage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1159477 - drupal7-ds-2.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1159477
--------------------------------------------------------------------------------
================================================================================
drupal7-link-1.3-1.fc21 (FEDORA-2014-14701)
Defines simple link field types
--------------------------------------------------------------------------------
Update Information:
## [
7.x-1.3](https://www.drupal.org/node/2361091)
* Issue #0 by jcfiala: Various small fixes to pass coder review.
* Issue #2351223: Improve field validation error message by Xano: Improve field validation
error message.
* Issue #2350253: Link with ! (exclamation) in URL query returns "not a valid
URL" by genjohnson: Fixed Link with ! (exclamation) in URL query returns "not a
valid URL".
* Issue #1483494: Notice: Undefined index: url in _link_process() (line 345 of
../link.module). by vinmassaro, cord1: Notice: Undefined index: url in _link_process()
(line 345 of ../link.module).
* Issue #1955976: Allow relative paths with validation by chOP, erikhopp, idebr, d.clarke
| Jim Cutler: Added Allow relative paths with validation.
* Issue #2117099: Expose attributes as property info by tim.plunkett: Expose attributes as
property info.
* Issue #1930430: Migration integration misses title attribute for mutiple-valued link
fields by benjifisher: Fixed Migration integration misses title attribute for
mutiple-valued link fields.
* Issue #97766: Class attribute field option for each dataset in link widget by tanepiper,
heddn, timbrandin, droath, alanburke, Digidog: Class attribute field option for each
dataset in link widget.
* Issue #1266474: Use field label as the label for the title field by redndahead, franz,
RobLoach, jcfiala, markabur: Use field label as the label for the title field
* Issue #2036645: Issue when a URL is a query string parameter, e.g. EZproxy links, Zanox
tracking links etc. by lex0r: restricting the explode to 2 items when breaking apart
querystrings helps prevent problems with unescaped = characters in the data.
* Issue #2223571: Support for new TLD's by jcfiala: Included new tld that had been
included into the 6.x-2.x branch.
* Issue #2223571: Support for new TLD's by jcfiala:Back-ported configurable domain
support from 7.x-1.x version, added more tlds to default list.
* Issue #1836632: Ampersand in plain title by jcfiala:Removed double-encoding of titles
when url not specified in link field.
* Issue #1980736: theme_link_field() only renders elements defined by this module by
Cottser: Allow child elements of the link field to be rendered.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 9 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.3-1
- Updated to 1.3 (BZ #1155470)
- Removed RPM README b/c it only explained common Drupal workflow
- %license usage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1155470 - drupal7-link-1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1155470
--------------------------------------------------------------------------------
================================================================================
gimp-paint-studio-2.0-8.fc21 (FEDORA-2014-14676)
A collection of tool option presets and brushes for GIMP
--------------------------------------------------------------------------------
Update Information:
This update removes the wrong file format inside patterns directory
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 9 2014 Luya Tshimbalanga <luya(a)fedoraproject.org> - 2.0-8
- Removal of xcf files within patterns directory (rhbz#1054967)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1054967 - Couldn't recognize the image file format for file
'/usr/share/gimp/2.0/patterns/GPS-Pat/Canvas-Covered.xcf'
https://bugzilla.redhat.com/show_bug.cgi?id=1054967
--------------------------------------------------------------------------------
================================================================================
greybird-1.4-3.fc21 (FEDORA-2014-14706)
A clean minimalistic theme for Xfce, GTK+ 2 and 3
--------------------------------------------------------------------------------
Update Information:
Upstream fix for checkboxes and radios in gtk3.14
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 6 2014 poma <poma(a)gmail.com> 1.4-3
- Upstream fix for checkboxes and radios in gtk3.14
- The "shadow" is re-enabled, the full size of the app menu in the system tray
is resolved upstream - gtkmenu: fix unnecessary scroll buttons gtk-3-14
https://git.gnome.org/browse/gtk+/commit/?h=gtk-3-14&id=695ff38
- The same applies to the Shimmer Project Desktop Suites for Xfce as a whole,
i.e. Greybird, Bluebird and Albatross.
- With these two corrections bugs #1114161, #1139190 and #1139187
are solved completely.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1114161 - shimmerproject is caput
https://bugzilla.redhat.com/show_bug.cgi?id=1114161
--------------------------------------------------------------------------------
================================================================================
mate-themes-1.9.2-0.1.git20141108.66e3797.fc21 (FEDORA-2014-14686)
MATE Desktop themes
--------------------------------------------------------------------------------
Update Information:
- a lot of enhancements for GTK3-3.14
- enable contrasthighinverse, supports now GTK3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 9 2014 Wolfgang Ulbrich <chat-to-me(a)raveit.de> -
1.9.2-0.1.git20140304.5a900e
- update to latest git snapshot from 2014-11-08
--------------------------------------------------------------------------------
================================================================================
mesa-10.3.3-1.20141110.fc21 (FEDORA-2014-14684)
Mesa graphics libraries
--------------------------------------------------------------------------------
Update Information:
10.3.3
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 10 2014 Igor Gnatenko <i.gnatenko.brain(a)gmail.com> - 10.3.3-1.20141110
- 10.3.3
--------------------------------------------------------------------------------
================================================================================
mintmenu-5.6.0-1.fc21 (FEDORA-2014-14670)
Advanced Menu for the MATE Desktop
--------------------------------------------------------------------------------
Update Information:
- update to 5.6.0 release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 9 2014 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 5.6.0-1
- update to 5.6.0
--------------------------------------------------------------------------------
================================================================================
perl-Devel-Timer-0.06-1.fc21 (FEDORA-2014-14700)
Track and report execution time for parts of code
--------------------------------------------------------------------------------
Update Information:
perl-Devel-Timer: 0.06 release
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 8 2014 Denis Fateyev <denis(a)fateyev.com> - 0.06-1
- Update to 0.06 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1154974 - perl-Devel-Timer-0.05-2.fc22 FTBFS randomly: Failed test 'sort
by count' at t/test.t line 73
https://bugzilla.redhat.com/show_bug.cgi?id=1154974
--------------------------------------------------------------------------------
================================================================================
php-Monolog-1.11.0-1.fc21 (FEDORA-2014-14690)
Sends your logs to files, sockets, inboxes, databases and various web services
--------------------------------------------------------------------------------
Update Information:
### 1.11.0 (2014-09-30)
* Break: The NewRelicHandler extra and context data are now prefixed with extra_ and
context_ to avoid clashes. Watch out if you have scripts reading those from the API and
rely on names
* Added WhatFailureGroupHandler to suppress any exception coming from the wrapped handlers
and avoid chain failures if a logging service fails
* Added MandrillHandler to send emails via the
Mandrillapp.com API
* Added SlackHandler to log records to a
Slack.com account
* Added FleepHookHandler to log records to a Fleep.io account
* Added LogglyHandler::addTag to allow adding tags to an existing handler
* Added $ignoreEmptyContextAndExtra to LineFormatter to avoid empty [] at the end
* Added $useLocking to StreamHandler and RotatingFileHandler to enable flock() while
writing
* Added support for PhpAmqpLib in the AmqpHandler
* Added FingersCrossedHandler::clear and BufferHandler::clear to reset them between
batches in long running jobs
* Added support for adding extra fields from $_SERVER in the WebProcessor
* Fixed support for non-string values in PrsLogMessageProcessor
* Fixed SwiftMailer messages being sent with the wrong date in long running scripts
* Fixed minor PHP 5.6 compatibility issues
* Fixed BufferHandler::close being called twice
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1148336 - php-Monolog-1.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1148336
--------------------------------------------------------------------------------
================================================================================
php-aws-sdk-2.7.3-1.fc21 (FEDORA-2014-14695)
Amazon Web Services framework for PHP
--------------------------------------------------------------------------------
Update Information:
## 2.7.3 - 2014-11-06
* Added support for private DNS for Amazon Virtual Private Clouds, health check failure
reasons, and reusable delegation sets to the Amazon Route 53 client.
* Updated the CloudFront model.
* Added support for configuring push synchronization to the Cognito Sync client.
* Updated docblocks in a few S3 and Glacier classes to improve IDE experience.
## 2.7.2 - 2014-10-23
* Updated AWS Identity and Access Management (IAM) to the latest version.
* Updated Amazon Cognito Identity client to the latest version.
* Added auto-renew support to the Amazon Route 53 Domains client.
* Updated Amazon EC2 to the latest version.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 9 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 2.7.3-1
- Updated to 2.7.3 (BZ #1157501)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1157501 - php-aws-sdk-2.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1157501
--------------------------------------------------------------------------------
================================================================================
php-egulias-email-validator-1.2.5-1.fc21 (FEDORA-2014-14705)
A library for validating emails
--------------------------------------------------------------------------------
Update Information:
A library for validating emails.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1157699 - Review Request: php-egulias-email-validator - A library for
validating emails
https://bugzilla.redhat.com/show_bug.cgi?id=1157699
--------------------------------------------------------------------------------
================================================================================
python-structlog-0.4.2-3.fc21 (FEDORA-2014-14678)
Painless structural logging
--------------------------------------------------------------------------------
Update Information:
Removed group
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1154213 - Review Request: python-structlog - Painless structural logging
https://bugzilla.redhat.com/show_bug.cgi?id=1154213
--------------------------------------------------------------------------------
================================================================================
recoll-1.19.14p2-1.fc21 (FEDORA-2014-14669)
Desktop full text search tool with Qt GUI
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release recoll 1.19.14p2, fixing an index corruption issue.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 9 2014 Terje Rosten <terje.rosten(a)ntnu.no> - 1.19.14p2-1
- 1.19.14p2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1161918 - Index corruption issue fixed in later release, pleas update
package
https://bugzilla.redhat.com/show_bug.cgi?id=1161918
--------------------------------------------------------------------------------
================================================================================
sazanami-fonts-0.20040629-23.fc21 (FEDORA-2014-14672)
Sazanami Japanese TrueType fonts
--------------------------------------------------------------------------------
Update Information:
Rebuilt to generate the proper fonts.scale
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 4 2014 Akira TAGOH <tagoh(a)redhat.com> - 0.20040629-23
- Rebuilt to get the proper fonts.scale with fixed xorg-x11-fonts-misc. (#1007493)
--------------------------------------------------------------------------------
================================================================================
xpa-2.1.15-2.fc21 (FEDORA-2014-14677)
The X Public Access messaging system
--------------------------------------------------------------------------------
Update Information:
The XPA Messaging System
--------------------------------------------------------------------------------