The following Fedora 22 Security updates need testing:
Age URL
365
https://bodhi.fedoraproject.org/updates/FEDORA-2015-5878
echoping-6.1-0.beta.r434svn.1.fc22
314
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9185
ceph-deploy-1.5.25-1.fc22
246
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12781
python-kdcproxy-0.3.2-1.fc22
201
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16239 nagios-4.0.8-1.fc22
189
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2d37e7dacf
openstack-swift-2.2.0-6.fc22
158
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9039c25f1d
miniupnpc-1.9-6.fc22
141
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
141
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
122
https://bodhi.fedoraproject.org/updates/FEDORA-2015-3a5cebb105
ImageMagick-6.9.2.7-1.fc22
108
https://bodhi.fedoraproject.org/updates/FEDORA-2015-b9e4c97ff1 sos-3.2-2.fc22
82
https://bodhi.fedoraproject.org/updates/FEDORA-2015-f683150aa0
thttpd-2.25b-37.fc22
70
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0
xulrunner-44.0-1.fc22
58
https://bodhi.fedoraproject.org/updates/FEDORA-2016-560802e52b
xdelta-3.0.7-7.fc22
47
https://bodhi.fedoraproject.org/updates/FEDORA-2016-24d134e494
mingw-nsis-2.50-1.fc22
38
https://bodhi.fedoraproject.org/updates/FEDORA-2016-338a7e9925
graphite2-1.3.6-1.fc22
34
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3cbe9ad765
python-pygments-2.1.3-1.fc22
30
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7b40eb9e29
libecap-1.0.0-1.fc22 squid-3.5.10-1.fc22
29
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5f44e89fe0
python-tgcaptcha2-0.3.1-1.fc22
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-250042b8a6
xstream-1.4.9-1.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6ad4474058
python-pillow-2.8.2-5.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7eb5caa94d
parallel-20160222-1.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d4b68e412
imlib2-1.4.8-1.fc22
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d19ed2f80d
squid-3.5.10-2.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-880b91c090
xerces-c-3.1.3-1.fc22
The following Fedora 22 Critical Path updates have yet to be approved:
Age URL
240
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13210 yum-3.4.3-508.fc22
158
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2123de044f
libgphoto2-2.5.8-1.fc22
141
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
141
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
70
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0
xulrunner-44.0-1.fc22
64
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3fce30d64
mobile-broadband-provider-info-1.20151214-1.fc22
47
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ce419c9cab
selinux-policy-3.13.1-128.28.fc22
38
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3b03252507
rpm-4.12.0.1-16.fc22
36
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4d5434d82f parted-3.2-16.fc22
27
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4072c51267 dracut-041-15.fc22
23
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d4e6e32c1c
upower-0.99.3-2.fc22
17
https://bodhi.fedoraproject.org/updates/FEDORA-2016-fe22f37fba
hwdata-0.287-1.fc22
17
https://bodhi.fedoraproject.org/updates/FEDORA-2016-33be675c57
firefox-45.0.1-2.fc22
12
https://bodhi.fedoraproject.org/updates/FEDORA-2016-18d1833265
thunderbird-38.7.1-1.fc22
11
https://bodhi.fedoraproject.org/updates/FEDORA-2016-881765e99c
systemtap-3.0-2.fc22
11
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f5078f60f9
ntfs-3g-2016.2.22-1.fc22 testdisk-7.0-7.fc22
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-dedd49a5b7 lorax-22.14-1.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d4b68e412
imlib2-1.4.8-1.fc22
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-50cc0dbbde
wavpack-4.75.2-1.fc22
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-060be75c14
webkitgtk3-2.4.10-2.fc22
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6d6f111230
elfutils-0.166-1.fc22
The following builds have been pushed to Fedora 22 updates-testing
4Pane-4.0-1.fc22
autossh-1.4e-3.fc22
jhdf5-2.11.0-7.fc22
openbabel-2.3.2-12.fc22
php-league-plates-3.1.1-1.fc22
python-jenkinsapi-0.2.29-1.fc22
rats-2.4-5.fc22
recoverjpeg-2.6-1.fc22
rpmspectool-1.99.5-1.fc22
uget-2.0.6-1.fc22
webkitgtk4-2.12.0-2.fc22
xerces-c-3.1.3-1.fc22
xpra-0.16.3-1.fc22
Details about builds:
================================================================================
4Pane-4.0-1.fc22 (FEDORA-2016-6402d0cbd6)
Multi-pane, detailed-list file manager
--------------------------------------------------------------------------------
Update Information:
New version 4.0 is released.
--------------------------------------------------------------------------------
================================================================================
autossh-1.4e-3.fc22 (FEDORA-2016-d5cb71f96e)
Utility to autorestart SSH tunnels
--------------------------------------------------------------------------------
Update Information:
Add systemd service
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1320539 - Add systemd service
https://bugzilla.redhat.com/show_bug.cgi?id=1320539
--------------------------------------------------------------------------------
================================================================================
jhdf5-2.11.0-7.fc22 (FEDORA-2016-e45f4c8fda)
Java HDF5 Package
--------------------------------------------------------------------------------
Update Information:
No functional change, just adds maven depmaps so dependent packages using maven
are easier to build.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1323010 - add maven depmap
https://bugzilla.redhat.com/show_bug.cgi?id=1323010
--------------------------------------------------------------------------------
================================================================================
openbabel-2.3.2-12.fc22 (FEDORA-2016-9e7cb1c296)
Chemistry software file format converter
--------------------------------------------------------------------------------
Update Information:
Fixes compilation of user code against openbabel-devel provided headers with gcc
5.x.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1318062 - fedora 22 openbabel-devel rpm package uses tr1::shared_ptr
https://bugzilla.redhat.com/show_bug.cgi?id=1318062
--------------------------------------------------------------------------------
================================================================================
php-league-plates-3.1.1-1.fc22 (FEDORA-2016-4da62a78c2)
Native PHP template system
--------------------------------------------------------------------------------
Update Information:
Plates is a native PHP template system that's fast, easy to use and easy to
extend. It's inspired by the excellent Twig template engine and strives to bring
modern template language functionality to native PHP templates. Plates is
designed for developers who prefer to use native PHP templates over compiled
template languages, such as Twig or Smarty. Autoloader:
/usr/share/php/League/Plates/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1324861 - Review Request: php-league-plates - Native PHP template system
https://bugzilla.redhat.com/show_bug.cgi?id=1324861
--------------------------------------------------------------------------------
================================================================================
python-jenkinsapi-0.2.29-1.fc22 (FEDORA-2016-33beac4231)
A Python API for accessing resources on a Jenkins(CI) server
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.29, update spec to new packaging guidelines and introduce a Python
3 package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1188097 - python-jenkinsapi-0.2.26 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1188097
--------------------------------------------------------------------------------
================================================================================
rats-2.4-5.fc22 (FEDORA-2016-70bafcbd48)
Rough Auditing Tool for Security
--------------------------------------------------------------------------------
Update Information:
Fix bug
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1129580 - 0002-Fix-engine-output-and-php-extension.patch introduces new bug
https://bugzilla.redhat.com/show_bug.cgi?id=1129580
--------------------------------------------------------------------------------
================================================================================
recoverjpeg-2.6-1.fc22 (FEDORA-2016-efe9ca7281)
Recover JPEG pictures and MOV movies from damaged devices
--------------------------------------------------------------------------------
Update Information:
Update to 2.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1270799 - recoverjpeg-2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1270799
--------------------------------------------------------------------------------
================================================================================
rpmspectool-1.99.5-1.fc22 (FEDORA-2016-559f1f9371)
Utility for handling RPM spec files
--------------------------------------------------------------------------------
Update Information:
Previous versions wrote downloaded files with restrictive permissions, i.e.
other users couldn't read them. This update changes that to applying a user's
umask to the downloaded files.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1323692 - rpmspectool does not respect umask
https://bugzilla.redhat.com/show_bug.cgi?id=1323692
--------------------------------------------------------------------------------
================================================================================
uget-2.0.6-1.fc22 (FEDORA-2016-c026776ab2)
Download manager using GTK+ and libcurl
--------------------------------------------------------------------------------
Update Information:
New version 2.0.6 is released.
--------------------------------------------------------------------------------
================================================================================
webkitgtk4-2.12.0-2.fc22 (FEDORA-2016-104977b1a1)
GTK+ Web content engine library
--------------------------------------------------------------------------------
Update Information:
Update to 2.12.0: * Enable FTL by default in JavaScriptCore for x86_64. *
Network process is now used unconditionally. The shared secondary process model
is now the same as using the multiple process model and setting a process limit
of 1. * Switch to use overlay scrollbars like all other GTK+ widgets and ensure
the behavior is consistent with GTK+ too. * Support for windowless NPAPI
plugins with no UI in non X11 platforms. * Enable GSS-Negotiate support when
available in libsoup. * Improved general performance by better handling glib
main loop sources. * New API to save and restore a WebView session.
--------------------------------------------------------------------------------
================================================================================
xerces-c-3.1.3-1.fc22 (FEDORA-2016-880b91c090)
Validating XML Parser
--------------------------------------------------------------------------------
Update Information:
Update to xerces-c 3.1.3, fixing CVE-2016-0729
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1312231 - CVE-2016-0729 xerces-c: parser crashes on malformed input
https://bugzilla.redhat.com/show_bug.cgi?id=1312231
--------------------------------------------------------------------------------
================================================================================
xpra-0.16.3-1.fc22 (FEDORA-2016-46f14cc24c)
Remote display server for applications and desktops
--------------------------------------------------------------------------------
Update Information:
This minor update contains a large number of fixes, including important
performance issues and application compatibility fixes. Updating is recommended.
Release notes: * fix xpra info major performance issues * fix restore windows
when OSX dock is clicked * fix clipboard timeouts and high CPU usage * fix out-
of-date bug report data * fix startup failures on some invalid MS Windows
configurations * fix HTML5 client with Internet Exporer and zoom * fix visual
corruption with transparent windows * fix pulseaudio starting before we request
it * fix window decorations flag forwarding * fix undecorated window positioning
adjustments * fix microphone forwarding, stop on disconnection or exit * fix
sound-source options parsing errors * fix sound command line tools * fix sound
error in duration message parsing * fix pulseaudio microphone input device
selection * fix gstreamer automatic version selection errors * fix webp package
detection * fix Vfb not getting killed on server startup error * fix handling of
authentication setup errors * fix codec test code (some encodings were skipped)
* fix NVENC handling of runtime speed and quality changes * fix video region
detection off-by-one * fix error in unlikely error handler * fix deadlock on
exit with HTML server * fix socket timeout code - use blocking sockets * fix for
Java applications enabled by default * fix "AltGr" key event forwarding for MS
Windows clients * fix encoding errors with zero dimension windows * fix example
Xdummy command line in default config file * fix Xorg command line path
expansion * fix honour XPRA_SCRIPT_BIN_DIR environment override * fix some
automatic quality heuristics calculations * fix logging large packet warning *
fix MS Windows shadow server key mapping * fix authentication errors with Python
2.6 and older * fix dbus menu forwarding component loading * more user friendly
missing Xvfb error message * hide unusable tray menu entries * make it possible
to tune or disable optimistic sending * make it possible to disable force-quit
code * add shortcut for showing tray menu * add some new common resolutions to
xorg.conf
--------------------------------------------------------------------------------