The following Fedora 20 Security updates need testing:
Age URL
85
https://admin.fedoraproject.org/updates/FEDORA-2014-5897/nrpe-2.15-2.fc20
65
https://admin.fedoraproject.org/updates/FEDORA-2014-6551/chicken-4.8.0.6-...
63
https://admin.fedoraproject.org/updates/FEDORA-2014-6615/drupal7-views-3....
34
https://admin.fedoraproject.org/updates/FEDORA-2014-7551/asterisk-11.10.2...
34
https://admin.fedoraproject.org/updates/FEDORA-2014-7613/perl-Email-Addre...
25
https://admin.fedoraproject.org/updates/FEDORA-2014-7936/python3-3.3.2-16...
15
https://admin.fedoraproject.org/updates/FEDORA-2014-8065/rubygem-activere...
13
https://admin.fedoraproject.org/updates/FEDORA-2014-7896/zarafa-7.1.10-2....
13
https://admin.fedoraproject.org/updates/FEDORA-2014-5497/openstack-keysto...
11
https://admin.fedoraproject.org/updates/FEDORA-2014-8334/python-bottle-0....
8
https://admin.fedoraproject.org/updates/FEDORA-2014-8412/mosquitto-1.3.2-...
6
https://admin.fedoraproject.org/updates/FEDORA-2014-8485/drupal7-7.29-1.fc20
6
https://admin.fedoraproject.org/updates/FEDORA-2014-8510/sdcc-3.3.0-1.fc20
6
https://admin.fedoraproject.org/updates/FEDORA-2014-8458/gd-2.1.0-6.fc20
6
https://admin.fedoraproject.org/updates/FEDORA-2014-8495/drupal6-6.32-1.fc20
5
https://admin.fedoraproject.org/updates/FEDORA-2014-8561/cobbler-2.6.3-1....
4
https://admin.fedoraproject.org/updates/FEDORA-2014-8581/phpMyAdmin-4.2.6...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-8601/moodle-2.5.7-1.fc20
2
https://admin.fedoraproject.org/updates/FEDORA-2014-8189/krb5-1.11.5-10.fc20
1
https://admin.fedoraproject.org/updates/FEDORA-2014-8743/openstack-neutro...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-8752/cups-1.7.4-3.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8879/ansible-1.6.9-1....
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8865/exim-4.80.1-7.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8797/thunderbird-24.7...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8790/trafficserver-4....
The following Fedora 20 Critical Path updates have yet to be approved:
Age URL
8
https://admin.fedoraproject.org/updates/FEDORA-2014-8438/realmd-0.14.6-5....
2
https://admin.fedoraproject.org/updates/FEDORA-2014-8189/krb5-1.11.5-10.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8871/NetworkManager-0...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8818/webkitgtk-2.2.7-...
The following builds have been pushed to Fedora 20 updates-testing
NetworkManager-0.9.9.0-42.git20131003.fc20
ansible-1.6.9-1.fc20
docker-io-1.0.0-9.fc20
ghc-entropy-0.2.2.1-4.fc20
goaccess-0.8.2-1.fc20
httrack-3.48.18-1.fc20
perl-Date-Handler-1.2-1.fc20
perl-IO-Pty-Easy-0.09-1.fc20
php-horde-Horde-SyncMl-2.0.4-1.fc20
python-bloom-0.5.11-1.fc20
rubygem-morph-cli-0.2.1-2.fc20
rubygem-openscap-0.2.0-1.fc20
Details about builds:
================================================================================
NetworkManager-0.9.9.0-42.git20131003.fc20 (FEDORA-2014-8871)
Network connection manager and user applications
--------------------------------------------------------------------------------
Update Information:
This update fixes a potential nmcli crash on machine shutdown (#1122593). It also fixes
notification of the connectivity property and introduces new subpackage
NetworkManager-config-connectivity-fedora with
/etc/NetworkManager/conf.d/20-connectivity-fedora.conf file configuring on-line
connectivity check using a Fedora on-line page.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 24 2014 Jiří Klimeš <jklimes(a)redhat.com> - 0.9.9.0-42.git20131003
- libnm-glib: fix a crash in nm_client_new() (rh #1010288) (rh #1122593)
- manager: fix notification of the connectivity property
- new NetworkManager-config-connectivity-fedora package with connectivity config
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1122593 - segv in nmcli during system shutdown
https://bugzilla.redhat.com/show_bug.cgi?id=1122593
--------------------------------------------------------------------------------
================================================================================
ansible-1.6.9-1.fc20 (FEDORA-2014-8879)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.9 with more shell quoting fixes.
Update to 1.6.7. Fixes CVE-2014-4966 and CVE-2014-4967
Update to 1.6.8 with fixes for shell quoting from previous release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 24 2014 Kevin Fenzi <kevin(a)scrye.com> 1.6.9-1
- Update to 1.6.9 with more shell quoting fixes.
* Tue Jul 22 2014 Kevin Fenzi <kevin(a)scrye.com> 1.6.8-1
- Update to 1.6.8 with fixes for shell quoting from previous release.
- Fixes bugs #1122060 #1122061 #1122062
* Mon Jul 21 2014 Kevin Fenzi <kevin(a)scrye.com> 1.6.7-1
- Update to 1.6.7
- Fixes CVE-2014-4966 and CVE-2014-4967
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1122060 - CVE-2014-4966 CVE-2014-4967 ansible: multiple flaws
https://bugzilla.redhat.com/show_bug.cgi?id=1122060
--------------------------------------------------------------------------------
================================================================================
docker-io-1.0.0-9.fc20 (FEDORA-2014-8877)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
/etc/sysconfig/docker should be config(noreplace)
clean up gopath, install source
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 24 2014 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.0.0-9
- /etc/sysconfig/docker should be config(noreplace)
* Wed Jul 23 2014 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.0.0-8
- Resolves: rhbz#1119849
- Resolves: rhbz#1119413 - min delta between upstream and packaged unitfiles
- devel package owns directories it creates
- ensure min NVRs used for systemd contain fixes RE: CVE-2014-3499
* Wed Jul 16 2014 Vincent Batts <vbatts(a)fedoraproject.org> - 1.0.0-7
- clean up gopath
- add Provides for docker libraries
- produce a -devel with docker source libraries
- accomodate golang rpm macros
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1119413 - docker-io systemd unit file specifies environment file. But, does
not uses it.
https://bugzilla.redhat.com/show_bug.cgi?id=1119413
[ 2 ] Bug #1119849 - su - postgres Results in System Error inside Fedora 20/rawhide
containers
https://bugzilla.redhat.com/show_bug.cgi?id=1119849
--------------------------------------------------------------------------------
================================================================================
ghc-entropy-0.2.2.1-4.fc20 (FEDORA-2014-8882)
A platform independent entropy source
--------------------------------------------------------------------------------
Update Information:
patch out TemplateHaskell from build Setup to allow building on all archs
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 11 2014 Jens Petersen <petersen(a)redhat.com> - 0.2.2.1-4
- drop use of TemplateHaskell from Setup with patch from 0.2.2.2
so no longer need to restrict arch's (#992363)
* Tue Jul 8 2014 Jens Petersen <petersen(a)redhat.com> - 0.2.2.1-3
- update to cblrpm-0.8.11
- exclude arm due to TH segfault
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.2.2.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
goaccess-0.8.2-1.fc20 (FEDORA-2014-8870)
Real-time web log analyzer and interactive viewer
--------------------------------------------------------------------------------
Update Information:
Changes to GoAccess 0.8.2 - Monday, July 20, 2014
* Added ability to parse dates containing whitespaces in between, e.g., Jul 15 20:13:59
(syslog format).
* Added a variety of browsers, game systems, feed readers, and podcasts.
* Added a '-V --version' command line option.
* Added missing up/down arrows to the help section.
* Added the ability to ignore crawlers using the '--ignore-crawlers' option.
* Added the ability to ignore multiple IPv4/v6 and IP ranges.
* Added the PATCH method according to RFC 5789.
* Fixed GeoLocation percent issue for the JSON, CSV and HTML outputs.
* Fixed memory leak when excluding one or multiple IPs.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 22 2014 Christopher Meng <rpm(a)cicku.me> - 0.8.2-1
- Update to 0.8.2
--------------------------------------------------------------------------------
================================================================================
httrack-3.48.18-1.fc20 (FEDORA-2014-8869)
Website copier and offline browser
--------------------------------------------------------------------------------
Update Information:
Include config.h in the headers.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 21 2014 Christopher Meng <rpm(a)cicku.me> - 3.48.18-1
- Update to 3.48.18
- Add missing config.h back
--------------------------------------------------------------------------------
================================================================================
perl-Date-Handler-1.2-1.fc20 (FEDORA-2014-8873)
Easy but complete date object
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1122484 - Review Request: perl-Date-Handler - Easy but complete date object
https://bugzilla.redhat.com/show_bug.cgi?id=1122484
--------------------------------------------------------------------------------
================================================================================
perl-IO-Pty-Easy-0.09-1.fc20 (FEDORA-2014-8876)
Easy interface to IO::Pty
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1122735 - Review Request: perl-IO-Pty-Easy - Easy interface to IO::Pty
https://bugzilla.redhat.com/show_bug.cgi?id=1122735
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-SyncMl-2.0.4-1.fc20 (FEDORA-2014-8881)
Horde_SyncMl provides an API for processing SyncML requests
--------------------------------------------------------------------------------
Update Information:
Horde_SyncMl 2.0.4
* [mjr] Hotfix to deal with failure exporting non-contact data due to inconsistency in
export methods between applications (Bug #13394).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2014 Remi Collet <remi(a)fedoraproject.org> - 2.0.4-1
- Update to 2.0.4
--------------------------------------------------------------------------------
================================================================================
python-bloom-0.5.11-1.fc20 (FEDORA-2014-8884)
Bloom is a release automation tool
--------------------------------------------------------------------------------
Update Information:
Update to 0.5.11
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 24 2014 Scott K Logan <logans(a)cottsay.net> - 0.5.11-1
- Update to 0.5.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1120162 - python-bloom-5.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1120162
--------------------------------------------------------------------------------
================================================================================
rubygem-morph-cli-0.2.1-2.fc20 (FEDORA-2014-8875)
Runs Morph scrapers from the command line
--------------------------------------------------------------------------------
Update Information:
This fixes a http deflate/gzip encoding issue.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 12 2014 Lubomir Rintel <lkundrak(a)v3.sk> - 0.2.1-2
- Disallow gzip TE
--------------------------------------------------------------------------------
================================================================================
rubygem-openscap-0.2.0-1.fc20 (FEDORA-2014-8872)
A FFI wrapper around the OpenSCAP library
--------------------------------------------------------------------------------
Update Information:
upgrade to the new upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2014 Šimon Lukašík <slukasik(a)redhat.com> - 0.2.0-1
- upgrade to the new upstream version
--------------------------------------------------------------------------------