The following Fedora 21 Security updates need testing:
Age URL
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9882/squid-3.4.7-1.fc21
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9919/thunderbird-enig...
The following Fedora 21 Critical Path updates have yet to be approved:
Age URL
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9900/lorax-21.21-1.fc21
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9873/selinux-policy-3...
The following builds have been pushed to Fedora 21 updates-testing
ampr-ripd-1.11-1.fc21
amprd-1.4-2.fc21
iwidgets-4.0.2-14.fc21
kexec-tools-2.0.7-8.fc21
libnfc-1.7.1-4.fc21
lorax-21.21-1.fc21
mediawiki-1.23.3-1.fc21
netcdf-fortran-4.2-16.fc21
perl-Makefile-DOM-0.006-9.fc21
perl-Module-Install-TestBase-0.86-2.fc21
perl-MooX-Types-MooseLike-0.27-1.fc21
php-doctrine-instantiator-1.0.2-1.fc21
php-horde-Horde-Mime-2.4.5-1.fc21
php-ircmaxell-security-lib-1.0.0-2.fc21
php-pecl-igbinary-1.2.1-1.fc21
php-pecl-sphinx-1.3.2-1.fc21
python-fedmsg-meta-fedora-infrastructure-0.3.1-1.fc21
python-zmq-14.3.1-1.fc21
scribus-1.4.4-5.fc21
subversion-api-docs-1.8.10-1.fc21
thunderbird-enigmail-1.7.2-1.fc21
uhd-3.6.2-6.fc21
xorg-x11-drv-synaptics-1.8.0-6.fc21
xorg-x11-xfs-1.1.4-1.fc21
yagf-0.9.4.2-2.fc21
Details about builds:
================================================================================
ampr-ripd-1.11-1.fc21 (FEDORA-2014-9901)
Routing daemon for the ampr network
--------------------------------------------------------------------------------
Update Information:
This is new package ampr-ripd - routing daemon for the ampr network
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1124483 - Review Request: ampr-ripd - Routing daemon for the ampr network
https://bugzilla.redhat.com/show_bug.cgi?id=1124483
--------------------------------------------------------------------------------
================================================================================
amprd-1.4-2.fc21 (FEDORA-2014-9902)
An user-space IPIP encapsulation daemon for the ampr network
--------------------------------------------------------------------------------
Update Information:
This is new package, amprd - An user-space IPIP encapsulation daemon for the ampr network
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1124482 - Review Request: amprd - An user-space IPIP encapsulation daemon for
the ampr network
https://bugzilla.redhat.com/show_bug.cgi?id=1124482
--------------------------------------------------------------------------------
================================================================================
iwidgets-4.0.2-14.fc21 (FEDORA-2014-9899)
A set of useful widgets based on itcl and itk
--------------------------------------------------------------------------------
Update Information:
Fix itcl/itk version requirement
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 29 2014 Dmitrij S. Kryzhevich <krege(a)land.ru> - 4.0.2-14
- Fix itcl/itk verstion requirement.
- Some cleanup of spec (clean section, buildroot tag).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1108100 - Outdated version of Itcl required
https://bugzilla.redhat.com/show_bug.cgi?id=1108100
--------------------------------------------------------------------------------
================================================================================
kexec-tools-2.0.7-8.fc21 (FEDORA-2014-9913)
The kexec/kdump userspace component
--------------------------------------------------------------------------------
Update Information:
use absolute path for executable in systemd service
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 29 2014 WANG Chao <chaowang(a)redhat.com> - 2.0.7-8
- use absolute path for executable in systemd service
- update to kdump-anaconda-addon-003
- remove dead kdump firstboot module and po files
--------------------------------------------------------------------------------
================================================================================
libnfc-1.7.1-4.fc21 (FEDORA-2014-9911)
NFC SDK and Programmers API
--------------------------------------------------------------------------------
Update Information:
Migrated udev rule to dynamic ACL management
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 28 2014 Jaroslav Škarvada <jskarvad(a)redhat.com> - 1.7.1-4
- Migrated udev rule to dynamic ACL management
- Fixed udev rule location
- Added kernel modules blacklist file as an example (not enabled by default)
Resolves: rhbz#1057285
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1057285 - udev rules not working.
https://bugzilla.redhat.com/show_bug.cgi?id=1057285
--------------------------------------------------------------------------------
================================================================================
lorax-21.21-1.fc21 (FEDORA-2014-9900)
Tool for creating the anaconda install images
--------------------------------------------------------------------------------
Update Information:
Revert "Require 32bit glibc on ppc64" (bcl(a)redhat.com)
Add support for ppc64 live image creation with livemedia-creator
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 28 2014 Brian C. Lane <bcl(a)redhat.com> 21.21-1
- Revert "Require 32bit glibc on ppc64" (bcl(a)redhat.com)
- livemedia-creator: Update ppc64 live to use grub2 (bcl(a)redhat.com)
- livemedia-creator: Add ppc64 live creation support (#1102318)
(bcl(a)redhat.com)
- Include /sbin/ldconfig from glibc. (dlehman(a)redhat.com)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1102318 - livecd creation for Power64
https://bugzilla.redhat.com/show_bug.cgi?id=1102318
--------------------------------------------------------------------------------
================================================================================
mediawiki-1.23.3-1.fc21 (FEDORA-2014-9905)
A wiki engine
--------------------------------------------------------------------------------
Update Information:
* (bug 68501) Correctly handle incorrect namespace in cleanupTitles.php.
* (bug 64970) Fix support for blobs on DatabaseOracle::update.
* (bug 66574) Display MediaWiki:Loginprompt on the login page.
* (bug 67870) wfShellExec() cuts off stdout at multiples of 8192 bytes.
* (bug 60629) Handle invalid language code gracefully in
Language::fetchLanguageNames.
* (bug 62017) Restore the number of rows shown on Special:Watchlist.
* Check for boolean false result from database query in SqlBagOStuff.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 28 2014 Michael Cronenworth <mike(a)cchtml.com> - 1.23.3-1
- Update to 1.23.3
- (bug 68501) Correctly handle incorrect namespace in cleanupTitles.php.
- (bug 64970) Fix support for blobs on DatabaseOracle::update.
- (bug 66574) Display MediaWiki:Loginprompt on the login page.
- (bug 67870) wfShellExec() cuts off stdout at multiples of 8192 bytes.
- (bug 60629) Handle invalid language code gracefully in
Language::fetchLanguageNames.
- (bug 62017) Restore the number of rows shown on Special:Watchlist.
- Check for boolean false result from database query in SqlBagOStuff.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1134781 - mediawiki-1.23.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1134781
[ 2 ] Bug #1134892 - mediawiki's mw-createinstance script creates a dangling symlink
to redirect.php, which has been removed
https://bugzilla.redhat.com/show_bug.cgi?id=1134892
--------------------------------------------------------------------------------
================================================================================
netcdf-fortran-4.2-16.fc21 (FEDORA-2014-9903)
Fortran libraries for NetCDF-4
--------------------------------------------------------------------------------
Update Information:
Rebuild for openmpi Fortran ABI change
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 27 2014 Orion Poplawski <orion(a)cora.nwra.com> - 4.2-16
- Rebuild for openmpi Fortran ABI change
--------------------------------------------------------------------------------
================================================================================
perl-Makefile-DOM-0.006-9.fc21 (FEDORA-2014-9915)
Simple DOM parser for Makefiles
--------------------------------------------------------------------------------
Update Information:
This resolves build failures after removing Module::Instal::TestBase Perl module from
perl-Test-Build package.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 29 2014 Petr Pisar <ppisar(a)redhat.com> - 0.006-9
- Specify all dependencies (bug #1134289)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1134289 - perl-Makefile-DOM-0.006-8.fc22 FTBFS: Bareword
"use_test_base" not allowed while "strict subs" in use at Makefile.PL
https://bugzilla.redhat.com/show_bug.cgi?id=1134289
[ 2 ] Bug #1134351 - Review Request: perl-Module-Install-TestBase - Module::Install
Support for Test::Base
https://bugzilla.redhat.com/show_bug.cgi?id=1134351
--------------------------------------------------------------------------------
================================================================================
perl-Module-Install-TestBase-0.86-2.fc21 (FEDORA-2014-9915)
Module::Install support for Test::Base
--------------------------------------------------------------------------------
Update Information:
This resolves build failures after removing Module::Instal::TestBase Perl module from
perl-Test-Build package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1134289 - perl-Makefile-DOM-0.006-8.fc22 FTBFS: Bareword
"use_test_base" not allowed while "strict subs" in use at Makefile.PL
https://bugzilla.redhat.com/show_bug.cgi?id=1134289
[ 2 ] Bug #1134351 - Review Request: perl-Module-Install-TestBase - Module::Install
Support for Test::Base
https://bugzilla.redhat.com/show_bug.cgi?id=1134351
--------------------------------------------------------------------------------
================================================================================
perl-MooX-Types-MooseLike-0.27-1.fc21 (FEDORA-2014-9898)
Some Moosish types and a type builder
--------------------------------------------------------------------------------
Update Information:
This release corrects documentation and adjusts tests to work with Moo 1.006000.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 29 2014 Petr Pisar <ppisar(a)redhat.com> - 0.27-1
- 0.27 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1134235 - perl-MooX-Types-MooseLike-0.25-3.fc22 FTBFS: t/basic.t test fails
with Moo-1.006000
https://bugzilla.redhat.com/show_bug.cgi?id=1134235
--------------------------------------------------------------------------------
================================================================================
php-doctrine-instantiator-1.0.2-1.fc21 (FEDORA-2014-9912)
Instantiate objects in PHP without invoking their constructors
--------------------------------------------------------------------------------
Update Information:
This library provides a way of avoiding usage of constructors when instantiating PHP
classes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1134003 - Review Request: php-doctrine-instantiator - Instantiate objects in
PHP without invoking their constructors
https://bugzilla.redhat.com/show_bug.cgi?id=1134003
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Mime-2.4.5-1.fc21 (FEDORA-2014-9918)
Horde MIME Library
--------------------------------------------------------------------------------
Update Information:
Horde_Mime 2.4.5
* [mms] Fix generation of Original-Message-ID header in MDN notification (Bug #13526).
* [mms] Fix determination of user confirmation in certain instances.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 28 2014 Remi Collet <remi(a)fedoraproject.org> - 2.4.5-1
- Update to 2.4.5
--------------------------------------------------------------------------------
================================================================================
php-ircmaxell-security-lib-1.0.0-2.fc21 (FEDORA-2014-9897)
A Base Security Library
--------------------------------------------------------------------------------
Update Information:
This is a base set of libraries used in other projects. This isn't useful on its
own...
Optional dependency: php-gmp or php-bcmath
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1129700 - Review Request: php-ircmaxell-security-lib - A Base Security
Library
https://bugzilla.redhat.com/show_bug.cgi?id=1129700
--------------------------------------------------------------------------------
================================================================================
php-pecl-igbinary-1.2.1-1.fc21 (FEDORA-2014-9904)
Replacement for the standard PHP serializer
--------------------------------------------------------------------------------
Update Information:
Update to official release, instead of git snapshot. No change.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 29 2014 Remi Collet <remi(a)fedoraproject.org> - 1.2.1-1
- Update to 1.2.1
* Thu Aug 28 2014 Remi Collet <remi(a)fedoraproject.org> - 1.2.0-1
- update to 1.2.0
- open
https://github.com/igbinary/igbinary/pull/36
--------------------------------------------------------------------------------
================================================================================
php-pecl-sphinx-1.3.2-1.fc21 (FEDORA-2014-9917)
PECL extension for Sphinx SQL full-text search engine
--------------------------------------------------------------------------------
Update Information:
Upstream Changelog
Version 1.3.2:
* Fixed build with older libsphinxclient versions (Dmitry Saprykin)
* Added LICENSE to the package.
Version 1.3.1:
* Fixed bug #67216 (segfault on setGroupBy()) (Dmitry Saprykin)
* Fixed bug #66272 (Some constants are not defined)
Version 1.3.0:
* Fixed setRankingMode's proto and add new ranking mode constants (patch by Michael
Squires)
* Fixed segfault when reading object properties.
* Fixed bug #62026 (Second param in setRankingMode should be optional)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 29 2014 Remi Collet <rcollet(a)fedoraproject.org> - 1.3.2-1
- update to 1.3.2
- install doc in pecl_docdir
- add LICENSE provided by upstream
- enable ZTS build
- provides php-sphinx
- fix private shared filter
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.3.1-1.fc21 (FEDORA-2014-9916)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
'bodhi conglomerators'. Future-proofed copr processor. New threading lock around
fas cache.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 28 2014 Ralph Bean <rbean(a)redhat.com> - 0.3.1-1
- Latest upstream with the new conglomerator api.
- Also, fixes to copr messages.
- New threading lock put around fas cache regeneration.
- Bump up the BR version on fedmsg.
--------------------------------------------------------------------------------
================================================================================
python-zmq-14.3.1-1.fc21 (FEDORA-2014-9908)
Software library for fast, message-based applications
--------------------------------------------------------------------------------
Update Information:
update to 14.3.1, full list of changes can be found at:
https://zeromq.github.io/pyzmq/changelog.html
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 27 2014 Thomas Spura <tomspur(a)fedoraproject.org> - 14.3.1-1
- update to 14.3.1
--------------------------------------------------------------------------------
================================================================================
scribus-1.4.4-5.fc21 (FEDORA-2014-9896)
DeskTop Publishing application written in Qt
--------------------------------------------------------------------------------
Update Information:
- updated to 1.4.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 28 2014 Dan Horák <dan[at]danny.cz> - 1.4.4-5
- switch to Debian patch for the qreal vs double conflict on ARM (fixes #1076885)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1076885 - shape insertion tool don't works
https://bugzilla.redhat.com/show_bug.cgi?id=1076885
[ 2 ] Bug #1119035 - Scribus V1.4.4 not yet available for Fedora 20
https://bugzilla.redhat.com/show_bug.cgi?id=1119035
[ 3 ] Bug #1103247 - scribus-1.4.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1103247
--------------------------------------------------------------------------------
================================================================================
subversion-api-docs-1.8.10-1.fc21 (FEDORA-2014-9910)
Subversion API documentation
--------------------------------------------------------------------------------
Update Information:
Rebuild against current stable.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 29 2014 Bojan Smojver <bojan(a)rexursive.com> 1.8.10-1
- bump up to 1.8.10
--------------------------------------------------------------------------------
================================================================================
thunderbird-enigmail-1.7.2-1.fc21 (FEDORA-2014-9919)
Authentication and encryption extension for Mozilla Thunderbird
--------------------------------------------------------------------------------
Update Information:
Upstream annoncement:
* This is a bugfix release, fixing several major issues found in v1.7.
* A security bug (CVE-2014-5369) has been fixed.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 29 2014 Remi Collet <remi(a)fedoraproject.org> 1.7.2-1
- Enigmail 1.7.2, fix CVE-2014-5369
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1133373 - CVE-2014-5369 thunderbird-enigmail: mail with only Bcc recipients
sent in plain text
https://bugzilla.redhat.com/show_bug.cgi?id=1133373
--------------------------------------------------------------------------------
================================================================================
uhd-3.6.2-6.fc21 (FEDORA-2014-9906)
Universal Hardware Driver for Ettus Research products
--------------------------------------------------------------------------------
Update Information:
Fixed udev rules and migrated them to dynamic ACL management
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 29 2014 Jaroslav Škarvada <jskarvad(a)redhat.com> - 3.6.2-6
- Migrated udev rule to dynamic ACL management
- Fixed udev rule location
- Group usrp is no more used / created
--------------------------------------------------------------------------------
================================================================================
xorg-x11-drv-synaptics-1.8.0-6.fc21 (FEDORA-2014-9909)
Xorg X11 Synaptics touchpad input driver
--------------------------------------------------------------------------------
Update Information:
Fix build errors with latest glibc, increase top software button areas
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 29 2014 Peter Hutterer <peter.hutterer(a)redhat.com> 1.8.0-6
- Fix build errors with latest glibc
* Thu Aug 28 2014 Peter Hutterer <peter.hutterer(a)redhat.com> 1.8.0-5
- Increase top software button area for easier clicks
- Prevent two-finger taps from being ignored
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.8.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
xorg-x11-xfs-1.1.4-1.fc21 (FEDORA-2014-9907)
X.Org X11 xfs font server
--------------------------------------------------------------------------------
Update Information:
- xfs 1.1.4 (rhbz#952216)
- xfsinfo 1.0.4
- fslsfonts 1.0.4
- fstobdf 1.0.5
- showfont 1.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 28 2014 Hans de Goede <hdegoede(a)redhat.com> - 1:1.1.4-1
- xfs 1.1.4 (rhbz#952216)
- xfsinfo 1.0.4
- fslsfonts 1.0.4
- fstobdf 1.0.5
- showfont 1.0.4
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:1.1.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #952216 - xorg-x11-xfs-1.1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=952216
--------------------------------------------------------------------------------
================================================================================
yagf-0.9.4.2-2.fc21 (FEDORA-2014-9914)
Graphical front-end for cuneiform
--------------------------------------------------------------------------------
Update Information:
Update to new vertion.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 28 2014 Dmitrij S. Kryzhevich <krege(a)land.ru> 0.9.4.2-2
- Fix YAGF.appdata installation.
* Thu Aug 28 2014 Dmitrij S. Kryzhevich <krege(a)land.ru> 0.9.4.2-1
- Update to new 0.9.4.2 version.
--------------------------------------------------------------------------------