The following Fedora 20 Security updates need testing:
Age URL
60
https://admin.fedoraproject.org/updates/FEDORA-2014-5897/nrpe-2.15-2.fc20
40
https://admin.fedoraproject.org/updates/FEDORA-2014-6551/chicken-4.8.0.6-...
38
https://admin.fedoraproject.org/updates/FEDORA-2014-6615/drupal7-views-3....
17
https://admin.fedoraproject.org/updates/FEDORA-2014-7348/ReviewBoard-1.7....
12
https://admin.fedoraproject.org/updates/FEDORA-2014-5497/openstack-keysto...
11
https://admin.fedoraproject.org/updates/FEDORA-2014-7523/readline-6.2-10....
9
https://admin.fedoraproject.org/updates/FEDORA-2014-7551/asterisk-11.10.2...
9
https://admin.fedoraproject.org/updates/FEDORA-2014-7577/claws-mail-3.10....
8
https://admin.fedoraproject.org/updates/FEDORA-2014-7613/perl-Email-Addre...
6
https://admin.fedoraproject.org/updates/FEDORA-2014-7657/couchdb-1.6.0-2....
6
https://admin.fedoraproject.org/updates/FEDORA-2014-7697/dpkg-1.16.15-1.fc20
6
https://admin.fedoraproject.org/updates/FEDORA-2014-7682/seamonkey-2.26.1...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-7722/xen-4.3.2-6.fc20
4
https://admin.fedoraproject.org/updates/FEDORA-2014-7751/apt-cacher-ng-0....
3
https://admin.fedoraproject.org/updates/FEDORA-2014-7804/ansible-1.6.5-1....
3
https://admin.fedoraproject.org/updates/FEDORA-2014-7779/mediawiki-1.21.1...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-7799/openstack-ceilom...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-7780/python-pycadf-0....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-7836/cacti-0.8.8b-7.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-7926/lzo-2.08-1.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-7896/zarafa-7.1.10-1....
0
https://admin.fedoraproject.org/updates/FEDORA-2014-7936/python3-3.3.2-16...
The following Fedora 20 Critical Path updates have yet to be approved:
Age URL
3
https://admin.fedoraproject.org/updates/FEDORA-2014-7789/libndp-1.3-1.fc20
1
https://admin.fedoraproject.org/updates/FEDORA-2014-7857/python-mako-1.0....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-7868/gnome-shell-3.10...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-7927/kde-settings-20-...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-7928/libtasn1-3.7-1.fc20
The following builds have been pushed to Fedora 20 updates-testing
amavisd-new-2.9.1-1.fc20
cockpit-0.13-1.fc20
ctstream-20-1.fc20
dcraw-9.22-1.fc20
gtksourceview3-3.10.3-1.fc20
heimdal-1.6.0-0.7.20140621gita5adc06.fc20
kcm_wacomtablet-2.0.1-1.fc20
kde-connect-0.7.1-1.fc20
kde-settings-20-14.fc20
libtasn1-3.7-1.fc20
lzo-2.08-1.fc20
mariadb-5.5.38-3.fc20
nfs-ganesha-2.1.0-1.fc20
nuxwdog-1.0.1-12.fc20
ocserv-0.8.1-1.fc20
openlmi-tools-0.9.2-1.fc20
perl-CHI-0.58-1.fc20
perl-Data-Perl-0.002009-1.fc20
perl-DateTime-TimeZone-1.71-1.fc20
perl-IO-HTML-1.001-1.fc20
perl-Params-Validate-1.13-1.fc20
perl-Stream-Buffered-0.03-1.fc20
perl-Test-SharedFork-0.26-1.fc20
perl-Test-TCP-2.05-1.fc20
python-click-2.2-1.fc20
python-netaddr-0.7.11-1.fc20
python3-3.3.2-16.fc20
sispmctl-3.1-1.fc20
sni-qt-0.2.6-3.fc20
Details about builds:
================================================================================
amavisd-new-2.9.1-1.fc20 (FEDORA-2014-7872)
Email filter with virus scanner and spamassassin support
--------------------------------------------------------------------------------
Update Information:
Change permissions of /var/spool/amavisd folders to 750.
Update to version 2.9.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Juan Orti Alcaine <jorti(a)fedoraproject.org> 2.9.1-1
- Update to version 2.9.1
* Fri Jun 27 2014 Juan Orti Alcaine <jorti(a)fedoraproject.org> 2.9.0-2
- Change permissions of /var/spool/amavisd folders to 750. Fix bug #906396
* Thu Jun 26 2014 Juan Orti Alcaine <jorti(a)fedoraproject.org> 2.9.0-1
- Update to version 2.9.0
- Rework amavisd-conf.patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #906396 - Permission problems in amavis-new
https://bugzilla.redhat.com/show_bug.cgi?id=906396
--------------------------------------------------------------------------------
================================================================================
cockpit-0.13-1.fc20 (FEDORA-2014-7932)
A user interface for Linux servers
--------------------------------------------------------------------------------
Update Information:
Update to 0.13 release
Update to upstream 0.12 release
Update to upstream 0.11 release
Update to upstream 0.10 release
Update to upstream 0.8
Update to upstream 0.5 release
Update to upstream 0.4 release
Update to upstream 0.3 release, including new UI look, and Docker container support
Primary package.
Update to upstream 0.9 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1061056 - Review Request: cockpit - A user interface for Linux servers
https://bugzilla.redhat.com/show_bug.cgi?id=1061056
--------------------------------------------------------------------------------
================================================================================
ctstream-20-1.fc20 (FEDORA-2014-7918)
Get URLs of Czech Television video streams
--------------------------------------------------------------------------------
Update Information:
This release implements some server-side changes. Not all features are implemented yet.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Petr Pisar <ppisar(a)redhat.com> - 20-1
- Version 20 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1114495 - ctstream-20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1114495
--------------------------------------------------------------------------------
================================================================================
dcraw-9.22-1.fc20 (FEDORA-2014-7904)
Tool for decoding raw image data from digital cameras
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix release with these changes:
* Correctly dereference TIFF type 13 (SubIFD) tags.
* In colorcheck(), darken sample squares and do a second pass for exact white balance.
* Copied color matrices from DNG Converter 8.5.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Nils Philippsen <nils(a)redhat.com> - 9.22-1
- version 9.22
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
9.21-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gtksourceview3-3.10.3-1.fc20 (FEDORA-2014-7934)
A library for viewing source files
--------------------------------------------------------------------------------
Update Information:
Update to 3.10.3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 29 2014 Sebastien Lugan <1698DA98(a)dynmail.crt1.net> - 3.10.3-1
- Update to 3.10.3
--------------------------------------------------------------------------------
================================================================================
heimdal-1.6.0-0.7.20140621gita5adc06.fc20 (FEDORA-2014-7925)
A Kerberos 5 implementation without export restrictions
--------------------------------------------------------------------------------
Update Information:
First Fedora release. (Review Request at RHBZ 613001)
--------------------------------------------------------------------------------
================================================================================
kcm_wacomtablet-2.0.1-1.fc20 (FEDORA-2014-7923)
KDE Control module for Wacom Graphictablets
--------------------------------------------------------------------------------
Update Information:
New stable bugfix release.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 28 2014 Rex Dieter <rdieter(a)fedoraproject.org> 2.0.1-1
- kcm_wacomtablet-2.0.1 (#1114238)
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.3.7-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1114238 - kcm_wacomtablet-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1114238
--------------------------------------------------------------------------------
================================================================================
kde-connect-0.7.1-1.fc20 (FEDORA-2014-7866)
KDE Connect client for communication with smartphones
--------------------------------------------------------------------------------
Update Information:
New upstream release, fixes remote filesystem support, and adds a new features including
remote pointer control see also
http://albertvaka.wordpress.com/2014/06/28/awesome-contributions-to-kde-c...
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 29 2014 Rex Dieter <rdieter(a)fedoraproject.org> 0.7.1-1
- 0.7.1
* Sat Jun 28 2014 Rex Dieter <rdieter(a)fedoraproject.org> - 0.7-1
- kde-connect-0.7 (#1114196)
- Requires: fuse-sshfs (#1114197)
- Requires: qca-ossl
- -libs, -devel subpkgs
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.6-0.3.20140305git52901898
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1114196 - KDE Connect 0.7 released
https://bugzilla.redhat.com/show_bug.cgi?id=1114196
[ 2 ] Bug #1114197 - KDE Connect's SFTP dependencies not installed
https://bugzilla.redhat.com/show_bug.cgi?id=1114197
--------------------------------------------------------------------------------
================================================================================
kde-settings-20-14.fc20 (FEDORA-2014-7927)
Config files for kde
--------------------------------------------------------------------------------
Update Information:
baloo default config: index only well-known dirs (#1114216)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Rex Dieter <rdieter(a)fedoraproject.org> 20-14
- baloo default config: index only well-known dirs (#1114216)
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
20-13.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu May 1 2014 Rex Dieter <rdieter(a)fedoraproject.org> 20-13
- /etc/pam.d/kdm: pam-kwallet support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1114216 - baloo default config: index only well-known dirs
https://bugzilla.redhat.com/show_bug.cgi?id=1114216
--------------------------------------------------------------------------------
================================================================================
libtasn1-3.7-1.fc20 (FEDORA-2014-7928)
The ASN.1 library used in GNUTLS
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Nikos Mavrogiannopoulos <nmav(a)redhat.com> - 3.7-1
- new upstream release
--------------------------------------------------------------------------------
================================================================================
lzo-2.08-1.fc20 (FEDORA-2014-7926)
Data compression library with very fast (de)compression
--------------------------------------------------------------------------------
Update Information:
New upstream
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Huzaifa Sidhpurwala <huzaifas(a)redhat.com> - 2.08-1
- New upstream
- Fix CVE-2014-4607
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1114304 - lzo-2.08 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1114304
[ 2 ] Bug #1114230 - update lzo to 2.07
https://bugzilla.redhat.com/show_bug.cgi?id=1114230
[ 3 ] Bug #1113874 - CVE-2014-4607 LZO: lzo1x_decompress_safe() integer overflow
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1113874
--------------------------------------------------------------------------------
================================================================================
mariadb-5.5.38-3.fc20 (FEDORA-2014-7920)
A community developed branch of MySQL
--------------------------------------------------------------------------------
Update Information:
This is an update to the new upstream release 5.5.37, which fixes issues described at
https://kb.askmonty.org/en/mariadb-5537-changelog/. This update also adds some mission
symbols in libmysqlclient.so.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 27 2014 Honza Horak <hhorak(a)redhat.com> - 1:5.5.38-3
- Add compatible libmysqlclient_18 version for symbols
Resolves: #1111776
* Thu Jun 19 2014 Honza Horak <hhorak(a)redhat.com> - 1:5.5.38-2
- Enable TokuDB engine for x86_64
- Re-enable tokudb_innodb_xa_crash again, seems to be fixed now
Resolves: #1074488
* Wed Jun 18 2014 Honza Horak <hhorak(a)redhat.com> - 1:5.5.38-1
- Rebase to 5.5.38
https://kb.askmonty.org/en/mariadb-5538-changelog/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1111776 - symbol mysql_server_init missing
https://bugzilla.redhat.com/show_bug.cgi?id=1111776
--------------------------------------------------------------------------------
================================================================================
nfs-ganesha-2.1.0-1.fc20 (FEDORA-2014-7899)
Ganesha NFS Server
--------------------------------------------------------------------------------
Update Information:
nfs-ganesha-2.1.0 GA
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Kaleb S. KEITHLEY <kkeithle at redhat.com> 2.1.0-1
- nfs-ganesha-2.1.0 GA
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nuxwdog-1.0.1-12.fc20 (FEDORA-2014-7914)
Watchdog server to start and stop processes, and prompt for passwords
--------------------------------------------------------------------------------
Update Information:
Addresses FTBFS
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 1.0.1-12
- Fix UnversionedDocDir-installation issues (FTBFS RHBZ #1106553, RHBZ #992385).
- Let nuxwdog package require perl(:MODULE_COMPAT_..).
- Fix bogus %changelog date.
* Fri Mar 28 2014 Michael Simacek <msimacek(a)redhat.com> - 1.0.1-10
- Use Requires: java-headless rebuild (#1067528)
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.1-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1068455 - nuxwdog: Switch to java-headless (build)requires
https://bugzilla.redhat.com/show_bug.cgi?id=1068455
[ 2 ] Bug #992385 - nuxwdog: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=992385
--------------------------------------------------------------------------------
================================================================================
ocserv-0.8.1-1.fc20 (FEDORA-2014-7931)
OpenConnect SSL VPN server
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Nikos Mavrogiannopoulos <nmav(a)redhat.com> - 0.8.1-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1114320 - ocserv-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1114320
--------------------------------------------------------------------------------
================================================================================
openlmi-tools-0.9.2-1.fc20 (FEDORA-2014-7937)
Set of CLI tools for Openlmi providers
--------------------------------------------------------------------------------
Update Information:
upgrade to 0.9.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Peter Hatina <phatina(a)redhat.com> - 0.9.2
- upgrade to 0.9.2
--------------------------------------------------------------------------------
================================================================================
perl-CHI-0.58-1.fc20 (FEDORA-2014-7924)
Unified cache handling interface
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 22 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 0.58-1
- Upstream update (Fixes FTBFS RHBZ #1105958).
- Reflect Source0: having changed.
- Reflect dep changes.
- Spec file cosmetics.
--------------------------------------------------------------------------------
================================================================================
perl-Data-Perl-0.002009-1.fc20 (FEDORA-2014-7933)
Base classes wrapping fundamental Perl data types
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 0.002009-3
- Upstream update.
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-TimeZone-1.71-1.fc20 (FEDORA-2014-7921)
Time zone object base class and factory
--------------------------------------------------------------------------------
Update Information:
This release brings updated Olson time zone database for Perl to version 2014e (changes
for Egypt and Morocco). It also corrects internal test suite.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Petr Pisar <ppisar(a)redhat.com> - 1.71-1
- update to latest upstream version - Olson 2014e
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1103667 - perl-DateTime-TimeZone-1.71 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1103667
--------------------------------------------------------------------------------
================================================================================
perl-IO-HTML-1.001-1.fc20 (FEDORA-2014-7902)
Open an HTML file with automatic character set detection
--------------------------------------------------------------------------------
Update Information:
This release corrects link to HTML5 specification.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Petr Pisar <ppisar(a)redhat.com> - 1.001-1
- 1.001 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1114324 - perl-IO-HTML-1.001 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1114324
--------------------------------------------------------------------------------
================================================================================
perl-Params-Validate-1.13-1.fc20 (FEDORA-2014-7898)
Params-Validate Perl module
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 1.13-1
- Upstream update.
* Sat Jun 28 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 1.12-1
- Upstream update.
* Mon May 12 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 1.10-1
- Upstream update.
--------------------------------------------------------------------------------
================================================================================
perl-Stream-Buffered-0.03-1.fc20 (FEDORA-2014-7912)
Temporary buffer to save bytes
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 0.03-1
- Upstream update.
- Modernize spec.
--------------------------------------------------------------------------------
================================================================================
perl-Test-SharedFork-0.26-1.fc20 (FEDORA-2014-7930)
Fork test
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 0.26-1
- Upstream update.
- Reflect BR-changes.
- Reflect upstream having switched to ExtUtils::MakeMaker.
--------------------------------------------------------------------------------
================================================================================
perl-Test-TCP-2.05-1.fc20 (FEDORA-2014-7915)
Testing TCP program
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 2.05-1
- Upstream update.
- Reflect upstream having switched to ExtUtils::MakeMaker.
- Rework deps.
* Thu Nov 7 2013 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 2.02-1
- Upstream update.
--------------------------------------------------------------------------------
================================================================================
python-click-2.2-1.fc20 (FEDORA-2014-7903)
A simple wrapper around optparse for powerful command line utilities
--------------------------------------------------------------------------------
Update Information:
Update to 2.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Robert Kuska <rkuska(a)redhat.com> - 2.2-1
- Update to 2.2
--------------------------------------------------------------------------------
================================================================================
python-netaddr-0.7.11-1.fc20 (FEDORA-2014-7905)
A pure Python network address representation and manipulation library
--------------------------------------------------------------------------------
Update Information:
New upstream release 0.7.11, with Python 3 support
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 21 2014 John Eckersberg <jeckersb(a)redhat.com> - 0.7.11-1
- New upstream release 0.7.11
- Enabled Python 3 support (bz1070357)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1070357 - New upstream release of python-netaddr
https://bugzilla.redhat.com/show_bug.cgi?id=1070357
--------------------------------------------------------------------------------
================================================================================
python3-3.3.2-16.fc20 (FEDORA-2014-7936)
Version 3 of the Python programming language aka Python 3000
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2014-4650
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 30 2014 Matej Stuchlik <mstuchli(a)redhat.com> - 3.3.2-16
- JSON module could read arbitrary process memory
Resolves: rhbz#1112293
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1112285 - CVE-2014-4616 python: missing boundary check in JSON module
https://bugzilla.redhat.com/show_bug.cgi?id=1112285
--------------------------------------------------------------------------------
================================================================================
sispmctl-3.1-1.fc20 (FEDORA-2014-7907)
Control Gembird SIS-PM programmable power outlet strips
--------------------------------------------------------------------------------
Update Information:
Initial build
--------------------------------------------------------------------------------
================================================================================
sni-qt-0.2.6-3.fc20 (FEDORA-2014-7911)
Plugin for Qt4 that turns QSystemTrayIcons into status notifiers
--------------------------------------------------------------------------------
Update Information:
Plugin for Qt4 that turns QSystemTrayIcons into status notifiers
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1073614 - Review Request: sni-qt - Plugin for Qt4 that turns QSystemTrayIcons
into status notifiers
https://bugzilla.redhat.com/show_bug.cgi?id=1073614
--------------------------------------------------------------------------------