The following Fedora 20 Security updates need testing:
Age URL
173
https://admin.fedoraproject.org/updates/FEDORA-2014-17089/aeskulap-0.2.2-...
128
https://admin.fedoraproject.org/updates/FEDORA-2015-1718/389-admin-1.1.38...
111
https://admin.fedoraproject.org/updates/FEDORA-2015-0951/xdg-utils-1.1.0-...
95
https://admin.fedoraproject.org/updates/FEDORA-2015-3417/389-ds-base-1.3....
91
https://admin.fedoraproject.org/updates/FEDORA-2015-3738/ImageMagick-6.8....
78
https://admin.fedoraproject.org/updates/FEDORA-2015-4672/quassel-0.11.0-2...
62
https://admin.fedoraproject.org/updates/FEDORA-2015-5970/asterisk-11.17.1...
62
https://admin.fedoraproject.org/updates/FEDORA-2015-5978/krb5-1.11.5-20.fc20
55
https://admin.fedoraproject.org/updates/FEDORA-2015-6339/realmd-0.14.6-6....
43
https://admin.fedoraproject.org/updates/FEDORA-2015-7231/libarchive-3.1.2...
42
https://admin.fedoraproject.org/updates/FEDORA-2015-7302/drupal7-views-3....
29
https://admin.fedoraproject.org/updates/FEDORA-2015-8159/rawstudio-2.1-0....
21
https://admin.fedoraproject.org/updates/FEDORA-2015-8142/cabal-install-1....
21
https://admin.fedoraproject.org/updates/FEDORA-2015-8727/fail2ban-0.9.2-1...
13
https://admin.fedoraproject.org/updates/FEDORA-2015-9163/fossil-1.33-1.fc20
8
https://admin.fedoraproject.org/updates/FEDORA-2015-9371/openssl-1.0.1e-4...
5
https://admin.fedoraproject.org/updates/FEDORA-2015-9604/python-django14-...
5
https://admin.fedoraproject.org/updates/FEDORA-2015-9625/mbedtls-1.3.11-1...
3
https://admin.fedoraproject.org/updates/FEDORA-2015-9649/libwmf-0.2.8.4-4...
2
https://admin.fedoraproject.org/updates/FEDORA-2015-5375/strongswan-5.3.2...
2
https://admin.fedoraproject.org/updates/FEDORA-2015-9703/squid-3.3.14-1.fc20
The following Fedora 20 Critical Path updates have yet to be approved:
Age URL
111
https://admin.fedoraproject.org/updates/FEDORA-2015-0951/xdg-utils-1.1.0-...
13
https://admin.fedoraproject.org/updates/FEDORA-2015-9131/cdrkit-1.1.11-23...
8
https://admin.fedoraproject.org/updates/FEDORA-2015-9379/perl-Getopt-Long...
8
https://admin.fedoraproject.org/updates/FEDORA-2015-9371/openssl-1.0.1e-4...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-9452/gnupg2-2.0.28-1....
3
https://admin.fedoraproject.org/updates/FEDORA-2015-8911/kdelibs-4.14.9-2...
The following builds have been pushed to Fedora 20 updates-testing
RBTools-0.7.4-1.fc20
blueman-2.0-7.fc20
cinnamon-2.6.7-3.fc20
fldigi-3.22.10-1.fc20
freecad-0.14-8.fc20
golang-github-docker-libcontainer-2.1.1-0.1.gitc964368.fc20
golang-googlecode-net-0-0.21.git7dbad50.fc20
java-1.8.0-openjdk-1.8.0.45-40.b14.fc20
libreoffice-4.2.8.2-9.fc20
mom-0.4.5-2.fc20
nemo-2.6.5-2.fc20
perl-Crypt-URandom-0.36-1.fc20
php-5.5.26-1.fc20
python-rhsm-1.15.1-1.fc20
rendercheck-1.5-1.fc20
subscription-manager-1.15.1-1.fc20
Details about builds:
================================================================================
RBTools-0.7.4-1.fc20 (FEDORA-2015-9871)
Tools for use with ReviewBoard
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream 0.7.4
https://www.reviewboard.org/docs/releasenotes/rbtools/0.7.4/
https://www.reviewboard.org/docs/releasenotes/rbtools/0.7.3/
https://www.reviewboard.org/docs/releasenotes/rbtools/0.7.3/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 11 2015 Stephen Gallagher <sgallagh(a)redhat.com> 0.7.4-1
- New upstream release 0.7.4
-
https://www.reviewboard.org/docs/releasenotes/rbtools/0.7.4/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1225179 - rbt post + git-svn: CRITICAL: object of type 'NoneType' has
no len().
https://bugzilla.redhat.com/show_bug.cgi?id=1225179
--------------------------------------------------------------------------------
================================================================================
blueman-2.0-7.fc20 (FEDORA-2015-9850)
GTK+ Bluetooth Manager
--------------------------------------------------------------------------------
Update Information:
- remove appindicator support
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 10 2015 Leigh Scott <leigh123linux(a)googlemail.com> - 2.0-7
- remove appindicator support
--------------------------------------------------------------------------------
================================================================================
cinnamon-2.6.7-3.fc20 (FEDORA-2015-9844)
Window management and application launching for GNOME
--------------------------------------------------------------------------------
Update Information:
- fix extension list for 64bit
- tweak override schema
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 11 2015 Leigh Scott <leigh123linux(a)googlemail.com> - 2.6.7-3
- tweak override schema
--------------------------------------------------------------------------------
================================================================================
fldigi-3.22.10-1.fc20 (FEDORA-2015-9867)
Digital modem program for Linux
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 1 2015 Richard Shaw <hobbes1069(a)gmail.com> - 3.22.10-1
- Update to latest upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1227125 - fldigi-3.22.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1227125
--------------------------------------------------------------------------------
================================================================================
freecad-0.14-8.fc20 (FEDORA-2015-9837)
A general purpose 3D CAD modeler
--------------------------------------------------------------------------------
Update Information:
Fix version reporting in the About dialog (BZ#1192841).
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 28 2015 Richard Shaw <hobbes1069(a)gmail.com> - 1:0.14-8
- Fix version reporting in the About dialog (BZ#1192841).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1192841 - version info missing in about dialog
https://bugzilla.redhat.com/show_bug.cgi?id=1192841
--------------------------------------------------------------------------------
================================================================================
golang-github-docker-libcontainer-2.1.1-0.1.gitc964368.fc20 (FEDORA-2015-9890)
Configuration options for containers
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 11 2015 jchaloup <jchaloup(a)redhat.com> - 2.1.1-0.1.gitc964368
- Update to 2.1.1
Ppolish spec file
Use license macro for LICENSE
Remove runtime dependency on golang
resolves: #1230658
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1230658 - Tracker for golang-github-docker-libcontainer
https://bugzilla.redhat.com/show_bug.cgi?id=1230658
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-net-0-0.21.git7dbad50.fc20 (FEDORA-2015-9847)
Supplementary Go networking libraries
--------------------------------------------------------------------------------
Update Information:
Bump to 7dbad50ab5b31073856416cdcfeb2796d682f844
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 11 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.21.git7dbad50
- Bump to 7dbad50ab5b31073856416cdcfeb2796d682f844
resolves: #1230677
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1230677 - Tracker for golang-googlecode-net
https://bugzilla.redhat.com/show_bug.cgi?id=1230677
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-1.8.0.45-40.b14.fc20 (FEDORA-2015-9879)
OpenJDK Runtime Environment
--------------------------------------------------------------------------------
Update Information:
added requires lksctp-tools for headless subpackage to make sun.nio.ch.sctp work, added
pacth to build on kernel 4.x added fix to RHBZ#1213280
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 5 2015 Jiri Vanek <jvanek(a)redhat.com> - 1:1.8.0.45-40.b14
- added requires lksctp-tools for headless subpackage to make sun.nio.ch.sctp work
- added patch506 rhbz1213280-b51c6914f297.patch
- allow build on Linux 4.x kernel (sync from master)
--------------------------------------------------------------------------------
================================================================================
libreoffice-4.2.8.2-9.fc20 (FEDORA-2015-9870)
Free Software Productivity Suite
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1223696 some labels in print dialog are not translated, even though the
translations exist
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 25 2015 David Tardon <dtardon(a)redhat.com> - 1:4.2.8.2-9
- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
though the translations exist
--------------------------------------------------------------------------------
================================================================================
mom-0.4.5-2.fc20 (FEDORA-2015-9914)
Dynamically manage system resources on virtualization hosts
--------------------------------------------------------------------------------
Update Information:
- New hypervisor interface for VDSM over XML-RPC
- Support for mom's RPC over unix socket
- Better reporting of syntax and semantic errors in policy files
Upgrade to 0.4.4
Upgrade to 0.4.4
Upgrade to 0.4.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 11 2015 Martin Sivak <msivak(a)redhat.com> - 0.4.5-2
- Fix systemd dependencies for install scripts
* Thu Jun 11 2015 Martin Sivak <msivak(a)redhat.com> - 0.4.5-1
- Upgrade to 0.4.5
* Fri May 15 2015 Adam Litke <alitke(a)redhat.com> - 0.4.4-1
- Upgrade to 0.4.4
--------------------------------------------------------------------------------
================================================================================
nemo-2.6.5-2.fc20 (FEDORA-2015-9844)
File manager for Cinnamon
--------------------------------------------------------------------------------
Update Information:
- fix extension list for 64bit
- tweak override schema
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 11 2015 Leigh Scott <leigh123linux(a)googlemail.com> - 2.6.5-2
- fix extension list for 64bit
- add patch for preferences
--------------------------------------------------------------------------------
================================================================================
perl-Crypt-URandom-0.36-1.fc20 (FEDORA-2015-9887)
Non-blocking randomness for Perl
--------------------------------------------------------------------------------
Update Information:
This releases fixes initialization around fork calls.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 11 2015 Petr Pisar <ppisar(a)redhat.com> - 0.36-1
- 0.36 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1230543 - perl-Crypt-URandom-0.36 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1230543
--------------------------------------------------------------------------------
================================================================================
php-5.5.26-1.fc20 (FEDORA-2015-9894)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
11 Jun 2015, **PHP 5.5.26**
**Core:**
* Fixed bug #69566 (Conditional jump or move depends on uninitialised value in extension
trait). (jbboehr at gmail dot com)
* Fixed bug #66048 (temp. directory is cached during multiple requests). (Julien)
* Fixed bug #69628 (complex GLOB_BRACE fails on Windows). (Christoph M. Becker)
* Fixed bug #69646 (OS command injection vulnerability in escapeshellarg). (Anatol
Belski)
* Fixed bug #69719 (Incorrect handling of paths with NULs). (Stas)
**FTP:**
* Improved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in heap
overflow). (Max Spelsberg)
**GD:**
* Fixed bug #69479 (GD fails to build with newer libvpx). (Remi)
Iconv:
* Fixed bug #48147 (iconv with //IGNORE cuts the string). (Stas)
**Mail:**
* Fixed bug #68776 (mail() does not have mail header injection prevention for additional
headers). (Yasuo)
**MCrypt:**
* Added file descriptor caching to mcrypt_create_iv() (Leigh)
**Opcache:**
* Fixed bug #69549 (Memory leak with opcache.optimization_level=0xFFFFFFFF). (Laruence,
Dmitry)
**Phar:**
* Fixed bug #69680 (phar symlink in binary directory broken). (Matteo Bernardini, Remi)
**Postgres:**
* Fixed bug #69667 (segfault in php_pgsql_meta_data). (Remi)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 11 2015 Remi Collet <remi(a)fedoraproject.org> 5.5.26-1
- Update to 5.5.26
http://www.php.net/releases/5_5_26.php
- opcache is now 7.0.6-dev
- add explicit spec license (implicit by FPCA)
--------------------------------------------------------------------------------
================================================================================
python-rhsm-1.15.1-1.fc20 (FEDORA-2015-9891)
A Python library to communicate with a Red Hat Unified Entitlement Platform
--------------------------------------------------------------------------------
Update Information:
* Fixes various grammar issues
* Now performed with a hardened build
* Fixes issue with proxy use in the GUI
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 11 2015 Alex Wood <awood(a)redhat.com> 1.15.1-1
- Move Python.h include to be first include (alikins(a)redhat.com)
- 1092564: Provide LDFLAGS to setup.py to enable hardened build.
(awood(a)redhat.com)
- Bump version to 1.15 (wpoteat(a)redhat.com)
- Do not process proxy environment variables if host is in no_proxy
(martin.matuska(a)axelspringer.de)
* Tue Jun 2 2015 William Poteat <wpoteat(a)redhat.com> 1.14.3-1
- 1225600: Default config entry needs to include the substitution string
(wpoteat(a)redhat.com)
- Add F22 to Fedora branches. (awood(a)redhat.com)
--------------------------------------------------------------------------------
================================================================================
rendercheck-1.5-1.fc20 (FEDORA-2015-9908)
Tool to verify correct operation of the XRENDER extension
--------------------------------------------------------------------------------
Update Information:
upstream rendercheck 1.5 release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 11 2015 Dave Airlie <airlied(a)redhat.com> 1.5-1
- upstream rendercheck 1.5 release
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:1.4-3.0.2.20140402GIT589bb58
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:1.4-2.0.2.20140402GIT589bb58
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
subscription-manager-1.15.1-1.fc20 (FEDORA-2015-9891)
Tools and libraries for subscription and repository management
--------------------------------------------------------------------------------
Update Information:
* Fixes various grammar issues
* Now performed with a hardened build
* Fixes issue with proxy use in the GUI
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 11 2015 Alex Wood <awood(a)redhat.com> 1.15.1-1
- Don't try to set file attrs on symlinks in spec (alikins(a)redhat.com)
- 1228807: Make disabling proxy via gui apply (alikins(a)redhat.com)
- Use find_lang --with-gnome for the gnome help (alikins(a)redhat.com)
- Cast return daemon() to void to quiet warnings. (alikins(a)redhat.com)
- Make the 'compile-po' step in the build quiet. (alikins(a)redhat.com)
- Make desktop-file-validate warnings. (alikins(a)redhat.com)
- rpm spec file reorg (alikins(a)redhat.com)
- 1224806: Prevent yum blocking on rhsm locks (alikins(a)redhat.com)
- 1092564: Add LDFLAGS to makefile so RPM can modify them. (awood(a)redhat.com)
- Update registergui.py (wpoteat(a)redhat.com)
- Bump version to 1.15 (wpoteat(a)redhat.com)
- Remove spurious debug logging about content labels (alikins(a)redhat.com)
- Revert "1189953: Replaced usage of "startup" with
"start-up""
(crog(a)redhat.com)
- Revert "1149098: Removed uses of the non-word "unregister""
(crog(a)redhat.com)
- Revert "1189937: Added hypens to instances of the non-word
"wildcard""
(crog(a)redhat.com)
- Revert "1200507: Hyphenated uses of the non-word "plugin.""
(crog(a)redhat.com)
- 1225435: Use LC_ALL instead of LANG for lscpu. (alikins(a)redhat.com)
- Remove mutable default args in stubs (alikins(a)redhat.com)
- Add notes about how register/firstboot interact. (alikins(a)redhat.com)
- 1189953: Replaced usage of "startup" with "start-up"
(crog(a)redhat.com)
- 1194453: Fixed typos and grammar issues in the rhsmcertd man page
(crog(a)redhat.com)
- 1192646: Fixed typos and grammar issues in the RHSM conf man page
(crog(a)redhat.com)
- 1192574: Fixed typos and grammar issues in subman GUI man page
(crog(a)redhat.com)
- 1192120: Fixed typos and grammar issues in subman man page (crog(a)redhat.com)
- 1192094: Fixed erroneous usage of "servicelevel" for the subman command
(crog(a)redhat.com)
- 1194468: Fixed typos and grammar in rhsm-debug man page (crog(a)redhat.com)
- 1193991: Fixed typos and header for RCT man page. (crog(a)redhat.com)
- 1200507: Hyphenated uses of the non-word "plugin." (crog(a)redhat.com)
- 1189946: Removed extraneous hyphens from instances of "pre-configure"
(crog(a)redhat.com)
- 1189937: Added hypens to instances of the non-word "wildcard"
(crog(a)redhat.com)
- 1149098: Removed uses of the non-word "unregister" (crog(a)redhat.com)
- 1189880: Removed the non-word "unentitle" from error messages
(crog(a)redhat.com)
* Tue Jun 2 2015 William Poteat <wpoteat(a)redhat.com> 1.14.9-1
- 1223038: Fix API used by openshift clients. (alikins(a)redhat.com)
- 1195824: Latest strings from zanata (alikins(a)redhat.com)
* Tue May 26 2015 William Poteat <wpoteat(a)redhat.com> 1.14.8-1
- 1223860: Revert to default value on remove command (wpoteat(a)redhat.com)
- translation sync from zanata (alikins(a)redhat.com)
- 1223852: fix 'Deletedfd' string in repo report (alikins(a)redhat.com)
- Remove gnome-python2-canvas,gnome-python2 deps (alikins(a)redhat.com)
* Tue May 19 2015 William Poteat <wpoteat(a)redhat.com> 1.14.7-1
- 1220287: Proxy Save accel fix with latest strings. (alikins(a)redhat.com)
- 1212515: Print error message for missing systemid file. (awood(a)redhat.com)
- Added missing option to the migration manual page (crog(a)redhat.com)
- Specified error codes on system_exit in rhn-migrate-classic-to-rhsm
(crog(a)redhat.com)
- Updated the manual pages for the attach command (crog(a)redhat.com)
- Remove locale based DatePicker tests. (alikins(a)redhat.com)
- Make rhsm-debug test cases clean up better. (alikins(a)redhat.com)
--------------------------------------------------------------------------------