The following Fedora 22 Security updates need testing:
Age URL
314
https://bodhi.fedoraproject.org/updates/FEDORA-2015-5878
echoping-6.1-0.beta.r434svn.1.fc22
263
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9185
ceph-deploy-1.5.25-1.fc22
195
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12781
python-kdcproxy-0.3.2-1.fc22
150
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16239 nagios-4.0.8-1.fc22
144
https://bodhi.fedoraproject.org/updates/FEDORA-2015-05490fc42d
squid-3.4.13-3.fc22
138
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2d37e7dacf
openstack-swift-2.2.0-6.fc22
107
https://bodhi.fedoraproject.org/updates/FEDORA-2015-0552500cd7
python-pygments-2.0.2-3.fc22
107
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9039c25f1d
miniupnpc-1.9-6.fc22
90
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
90
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
72
https://bodhi.fedoraproject.org/updates/FEDORA-2015-3a5cebb105
ImageMagick-6.9.2.7-1.fc22
62
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6efa349a85
subversion-1.8.15-1.fc22
57
https://bodhi.fedoraproject.org/updates/FEDORA-2015-b9e4c97ff1 sos-3.2-2.fc22
31
https://bodhi.fedoraproject.org/updates/FEDORA-2015-f683150aa0
thttpd-2.25b-37.fc22
25
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1323b9078a
bind99-9.9.8-2.P3.fc22
25
https://bodhi.fedoraproject.org/updates/FEDORA-2016-34bc10a2c8
ntp-4.2.6p5-36.fc22
19
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0
xulrunner-44.0-1.fc22
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3d1183830b
php-horde-horde-5.2.9-1.fc22
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-560802e52b
xdelta-3.0.7-7.fc22
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8ee88aee21
nettle-2.7.1-6.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2302ed02a7
kscreenlocker-5.5.4-3.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3a2606f993
rubygem-rails-html-sanitizer-1.0.1-2.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cb30088b06
rubygem-activesupport-4.2.0-4.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-fa0dec2360
rubygem-actionview-4.2.0-3.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-94e71ee673
rubygem-activemodel-4.2.0-2.fc22 rubygem-actionpack-4.2.0-3.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-73fe05d878
rubygem-activerecord-4.2.0-2.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8925b6119f
nodejs-0.10.42-4.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4d00dca15a
python-pillow-2.8.2-4.fc22
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b0c2412ab2
postgresql-9.4.6-1.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3d9efe44d8
nghttp2-1.7.1-1.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-49bf88cd29
GraphicsMagick-1.3.23-1.fc22 gdl-0.9.5-10.fc22 octave-3.8.2-19.fc22
vdr-skinenigmang-0.1.2-27.fc22 vdr-skinnopacity-1.1.3-9.fc22 vdr-tvguide-1.2.2-9.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0609474cf6
389-ds-base-1.3.4.8-1.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5cb344dd7e
community-mysql-5.6.29-1.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e21be93421 gummi-0.6.6-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-868c170507
mariadb-10.0.23-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1c08d77b96
qt-creator-3.6.0-6.fc22 qca-2.1.1-4.fc22 code-editor-2.8.1-13.fc22 monotone-1.1-13.fc22
botan-1.10.12-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c97f297cd6
hamster-time-tracker-2.0-0.3.rc1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-be042f7e6f qemu-2.3.1-12.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a25ee90150
graphite2-1.3.5-1.fc22
The following Fedora 22 Critical Path updates have yet to be approved:
Age URL
189
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13210 yum-3.4.3-508.fc22
107
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2123de044f
libgphoto2-2.5.8-1.fc22
104
https://bodhi.fedoraproject.org/updates/FEDORA-2015-48f718ed1b vim-7.4.909-1.fc22
90
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
90
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
44
https://bodhi.fedoraproject.org/updates/FEDORA-2016-46b611abb8
httpd-2.4.18-1.fc22
19
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0
xulrunner-44.0-1.fc22
19
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6427e041df
libgdata-0.17.4-2.fc22
15
https://bodhi.fedoraproject.org/updates/FEDORA-2016-16a5625f33
kernel-4.3.5-200.fc22
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d5fbc3b7eb
gnutls-3.3.21-1.fc22
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3fce30d64
mobile-broadband-provider-info-1.20151214-1.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1ec4dabbd5 pcre-8.38-2.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0a3cd0a405 enca-1.18-1.fc22
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2f0441bc7b
nss-softokn-3.22.0-1.0.fc22 nss-util-3.22.0-1.0.fc22 nss-3.22.0-1.0.fc22
nspr-4.11.0-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e3261008b
htdig-3.2.0-0.21.b6.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b37af739e7
spatialite-tools-4.2.0-20.fc22 sqlite-3.11.0-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-72a831c739
libical-1.0.1-3.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-bdc07e5732
kde-runtime-15.12.2-1.fc22 kdelibs-4.14.17-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d25f4327b1
kdepim-4.14.10-10.fc22 kdepim-runtime-4.14.10-6.fc22 kdepimlibs-4.14.10-8.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ce419c9cab
selinux-policy-3.13.1-128.27.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c865c44c3d
breeze-icon-theme-5.19.0-1.fc22 extra-cmake-modules-5.19.0-1.fc22 kf5-5.19.0-1.fc22
kf5-attica-5.19.0-1.fc22 kf5-baloo-5.19.0-1.fc22 kf5-bluez-qt-5.19.0-1.fc22
kf5-frameworkintegration-5.19.0-1.fc22 kf5-kactivities-5.19.0-1.fc22
kf5-kapidox-5.19.0-1.fc22 kf5-karchive-5.19.0-1.fc22 kf5-kauth-5.19.0-1.fc22
kf5-kbookmarks-5.19.0-1.fc22 kf5-kcmutils-5.19.0-1.fc22 kf5-kcodecs-5.19.0-1.fc22
kf5-kcompletion-5.19.0-1.fc22 kf5-kconfig-5.19.0-1.fc22 kf5-kconfigwidgets-5.19.0-1.fc22
kf5-kcoreaddons-5.19.0-1.fc22 kf5-kcrash-5.19.0-1.fc22 kf5-kdbusaddons-5.19.0-1.fc22
kf5-kdeclarative-5.19.0-2.fc22 kf5-kded-5.19.0-1.fc22 kf5-kdelibs4support-5.19.0-1.fc22
kf5-kdesignerplugin-5.19.0-1.fc22 kf5-kdesu-5.19.0-1.fc22 kf5-kdewebkit-5.19.0-1.fc22
kf5-kdnssd-5.19.0-1.fc22 kf5-kdoctools-5.19.0-1.fc22 kf5-kemoticons-5.19.0-1.fc22
kf5-kfilemetadata-5.19.0-1.fc22 kf5-kglobalaccel-5.19.0-1.fc22
kf5-kguiaddons-5.19.0-1.fc22 kf5-khtml
-5.19.0-
1.fc22 kf5-ki18n-5.19.0-1.fc22 kf5-kiconthemes-5.19.0-1.fc22 kf5-kidletime-5.19.0-1.fc22
kf5-kimageformats-5.19.0-1.fc22 kf5-kinit-5.19.0-1.fc22 kf5-kio-5.19.0-1.fc22
kf5-kitemmodels-5.19.0-1.fc22 kf5-kitemviews-5.19.0-1.fc22 kf5-kjobwidgets-5.19.0-1.fc22
kf5-kjs-5.19.0-1.fc22 kf5-kjsembed-5.19.0-1.fc22 kf5-kmediaplayer-5.19.0-1.fc22
kf5-knewstuff-5.19.0-1.fc22 kf5-knotifications-5.19.0-1.fc22
kf5-knotifyconfig-5.19.0-1.fc22 kf5-kpackage-5.19.0-1.fc22 kf5-kparts-5.19.0-1.fc22
kf5-kpeople-5.19.0-1.fc22 kf5-kplotting-5.19.0-1.fc22 kf5-kpty-5.19.0-1.fc22
kf5-kross-5.19.0-1.fc22 kf5-krunner-5.19.0-1.fc22 kf5-kservice-5.19.0-1.fc22
kf5-ktexteditor-5.19.0-1.fc22 kf5-ktextwidgets-5.19.0-1.fc22
kf5-kunitconversion-5.19.0-1.fc22 kf5-kwallet-5.19.0-1.fc22
kf5-kwidgetsaddons-5.19.0-1.fc22 kf5-kwindowsystem-5.19.0-1.fc22 kf5-kxmlgui-5.19.0-1.fc22
kf5-kxmlrpcclient-5.19.0-1.fc22 kf5-modemmanager-qt-5.19.0-1.fc22
kf5-networkmanager-qt-5.19.0-1.fc22 kf5-plasma-5.19.0-2.fc22 kf5-solid-5.19.
0-1.fc22
kf5-sonnet-5.19.0-1.fc22 kf5-threadweaver-5.19.0-1.fc22 oxygen-icon-theme-5.19.0-3.fc22
The following builds have been pushed to Fedora 22 updates-testing
cachefilesd-0.10.9-1.fc22
graphite2-1.3.5-1.fc22
htdig-3.2.0-0.21.b6.fc22
spatialite-tools-4.2.0-20.fc22
sqlite-3.11.0-1.fc22
xawtv-3.103-8.fc22
Details about builds:
================================================================================
cachefilesd-0.10.9-1.fc22 (FEDORA-2016-dc7dbdf6de)
CacheFiles user-space management daemon
--------------------------------------------------------------------------------
Update Information:
Update cachefilesd to interact with systemd in the correct way to change the
status of the cachefilesd during installation, fix the service file to refer to
/usr/sbin rather than /sbin and turn on build hardening (RELRO and PIE).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #850053 - Introduce new systemd-rpm macros in cachefilesd spec file
https://bugzilla.redhat.com/show_bug.cgi?id=850053
--------------------------------------------------------------------------------
================================================================================
graphite2-1.3.5-1.fc22 (FEDORA-2016-a25ee90150)
Font rendering capabilities for complex non-Roman writing systems
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-1521, CVE-2016-1522, CVE-2016-1523 and CVE-2016-1526
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1305806 - CVE-2016-1521 graphite2: Two out-of-bound read vulnerabilities
triggered by crafted fonts [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1305806
[ 2 ] Bug #1308591 - CVE-2016-1526 graphite2: Out-of-bounds read vulnerability in
TfUtil:LocaLookup [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1308591
[ 3 ] Bug #1305814 - CVE-2016-1523 graphite2: Heap-based buffer overflow in context item
handling functionality [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1305814
[ 4 ] Bug #1305811 - CVE-2016-1522 graphite2: Null pointer dereference and out-of-bounds
access vulnerabilities [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1305811
--------------------------------------------------------------------------------
================================================================================
htdig-3.2.0-0.21.b6.fc22 (FEDORA-2016-2e3261008b)
ht://Dig - Web search engine
--------------------------------------------------------------------------------
Update Information:
one bug fixed
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1230897 - RPM does not contain binary for htsearch
https://bugzilla.redhat.com/show_bug.cgi?id=1230897
--------------------------------------------------------------------------------
================================================================================
spatialite-tools-4.2.0-20.fc22 (FEDORA-2016-b37af739e7)
A set of useful CLI tools for SpatiaLite
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream version, with rebuilt spatialite-tools.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1288606 - Split library from binary to drop unnecessary dependencies.
https://bugzilla.redhat.com/show_bug.cgi?id=1288606
[ 2 ] Bug #1308765 - sqlite-3.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1308765
--------------------------------------------------------------------------------
================================================================================
sqlite-3.11.0-1.fc22 (FEDORA-2016-b37af739e7)
Library that implements an embeddable SQL database engine
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream version, with rebuilt spatialite-tools.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1288606 - Split library from binary to drop unnecessary dependencies.
https://bugzilla.redhat.com/show_bug.cgi?id=1288606
[ 2 ] Bug #1308765 - sqlite-3.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1308765
--------------------------------------------------------------------------------
================================================================================
xawtv-3.103-8.fc22 (FEDORA-2016-8526675e06)
TV applications for video4linux compliant devices
--------------------------------------------------------------------------------
Update Information:
- Bring in several bugfix patch from upstream - Fix crash with saa7134
driver - Use png instead of xpm for icons - Add appdata - Build motv and
mtt now that we have a FOSS motif, put them in xawtv-motv resp xawtv-mtt sub-
packages
--------------------------------------------------------------------------------