The following Fedora 22 Security updates need testing:
Age URL
450
https://bodhi.fedoraproject.org/updates/FEDORA-2015-5878
echoping-6.1-0.beta.r434svn.1.fc22
399
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9185
ceph-deploy-1.5.25-1.fc22
331
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12781
python-kdcproxy-0.3.2-1.fc22
286
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16239 nagios-4.0.8-1.fc22
274
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2d37e7dacf
openstack-swift-2.2.0-6.fc22
243
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9039c25f1d
miniupnpc-1.9-6.fc22
226
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
226
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
193
https://bodhi.fedoraproject.org/updates/FEDORA-2015-b9e4c97ff1 sos-3.2-2.fc22
167
https://bodhi.fedoraproject.org/updates/FEDORA-2015-f683150aa0
thttpd-2.25b-37.fc22
143
https://bodhi.fedoraproject.org/updates/FEDORA-2016-560802e52b
xdelta-3.0.7-7.fc22
132
https://bodhi.fedoraproject.org/updates/FEDORA-2016-24d134e494
mingw-nsis-2.50-1.fc22
119
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3cbe9ad765
python-pygments-2.1.3-1.fc22
80
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a028331ebc
poppler-0.30.0-4.fc22
51
https://bodhi.fedoraproject.org/updates/FEDORA-2016-73a5867050
squid-3.5.10-4.fc22
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0fd6ca526a expat-2.1.1-2.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5c52dcfe47
python3-3.4.2-8.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e37f15a5f4
python-2.7.10-10.fc22
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d18f993ab6
krb5-1.13.2-15.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-63ee0999e4
kernel-4.4.14-200.fc22
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-84373c5f4f
xerces-c-3.1.4-1.fc22
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7615febbd6
mingw-xerces-c-3.1.4-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-acbd6a75f3 gimp-2.8.16-2.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b046b56518 pypy3-2.4.0-3.fc22
The following Fedora 22 Critical Path updates have yet to be approved:
Age URL
325
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13210 yum-3.4.3-508.fc22
243
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2123de044f
libgphoto2-2.5.8-1.fc22
226
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
226
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
80
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a028331ebc
poppler-0.30.0-4.fc22
77
https://bodhi.fedoraproject.org/updates/FEDORA-2016-027faabac4
libreport-2.6.4-2.fc22 abrt-2.6.1-11.fc22
27
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2cdb5d5a7c
vim-7.4.1868-1.fc22
22
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f4a2bc1983 mdadm-3.3.4-3.fc22
18
https://bodhi.fedoraproject.org/updates/FEDORA-2016-babda1429a
thunderbird-45.1.1-2.fc22
15
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3b1495a847
samba-4.2.12-1.fc22
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0fd6ca526a expat-2.1.1-2.fc22
11
https://bodhi.fedoraproject.org/updates/FEDORA-2016-18212502a4 pcre-8.39-2.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e37f15a5f4
python-2.7.10-10.fc22
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4204f66082
findutils-4.5.14-7.fc22
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d18f993ab6
krb5-1.13.2-15.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-63ee0999e4
kernel-4.4.14-200.fc22
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9311371c46
dmidecode-3.0-4.fc22
The following builds have been pushed to Fedora 22 updates-testing
bcrypt-1.1-14.fc22
copr-cli-1.53-1.fc22
datovka-4.6.1-1.fc22
dynafed-1.2.2-2.fc22
gimp-2.8.16-2.fc22
grfcodec-6.0.6-1.fc22
openttd-1.6.1-1.fc22
pypy3-2.4.0-3.fc22
python-copr-1.72-1.fc22
qsstv-9.1.6-1.fc22
rubygem-domain_name-0.5.20160615-1.fc22
singularity-2.0-9.fc22
Details about builds:
================================================================================
bcrypt-1.1-14.fc22 (FEDORA-2016-18ef7d9719)
File encryption utility
--------------------------------------------------------------------------------
Update Information:
Fix memory allocation error.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1351022 - bcrypt: "realloc invalid pointer" error for very small
files
https://bugzilla.redhat.com/show_bug.cgi?id=1351022
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.53-1.fc22 (FEDORA-2016-c7692eedc3)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
This version of copr-cli and python-copr is backwards compatible (in contrast to
python-copr 1.70 and copr-cli 1.51) with old copr-frontends (1.92 and older),
which means that the standard copr-cli build command works for frontends of
these versions (no "got unknown parameter 'source_type' error). Note,
however,
that these versions (1.72 + 1.53) are incompatible with frontend-1.93 (and only
this one). Please, if you employ COPR, do not use frontend-1.93. Additionally,
this release fixes building error of python-copr 1.71 and copr-cli 1.52 on el7
and el6 distros caused by added pylint checks.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1346945 - Project List filled with automated builds
https://bugzilla.redhat.com/show_bug.cgi?id=1346945
[ 2 ] Bug #1335236 - Internet access during builds flag needed in CLI create/modify
commands
https://bugzilla.redhat.com/show_bug.cgi?id=1335236
[ 3 ] Bug #1335237 - copr create command missing --disable_createrepo
https://bugzilla.redhat.com/show_bug.cgi?id=1335237
--------------------------------------------------------------------------------
================================================================================
datovka-4.6.1-1.fc22 (FEDORA-2016-5d308c1086)
A free graphical interface for Czech Databox (Datov�� schr��nky)
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1351819 - datovka-4.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1351819
--------------------------------------------------------------------------------
================================================================================
dynafed-1.2.2-2.fc22 (FEDORA-2016-8cc7cdb646)
Ultra-scalable dynamic system for federating HTTP-based storage resources
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------
================================================================================
gimp-2.8.16-2.fc22 (FEDORA-2016-acbd6a75f3)
GNU Image Manipulation Program
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-4994
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1348617 - CVE-2016-4994 gimp: Use-after-free vulnerabilities in the channel
and layer properties parsing process
https://bugzilla.redhat.com/show_bug.cgi?id=1348617
--------------------------------------------------------------------------------
================================================================================
grfcodec-6.0.6-1.fc22 (FEDORA-2016-7de151b3da)
A suite of programs to modify Transport Tycoon Deluxe's GRF files
--------------------------------------------------------------------------------
Update Information:
Update openttd stack to fix some crash and corruption issues in conjunction with
the new GCC 6 suite.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1342740 - lto cause industries to be broken and more bugs
https://bugzilla.redhat.com/show_bug.cgi?id=1342740
[ 2 ] Bug #1342731 - [abrt] openttd: __signbit(): openttd killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1342731
[ 3 ] Bug #1307596 - grfcodec: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1307596
--------------------------------------------------------------------------------
================================================================================
openttd-1.6.1-1.fc22 (FEDORA-2016-7de151b3da)
Transport system simulation game
--------------------------------------------------------------------------------
Update Information:
Update openttd stack to fix some crash and corruption issues in conjunction with
the new GCC 6 suite.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1342740 - lto cause industries to be broken and more bugs
https://bugzilla.redhat.com/show_bug.cgi?id=1342740
[ 2 ] Bug #1342731 - [abrt] openttd: __signbit(): openttd killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1342731
[ 3 ] Bug #1307596 - grfcodec: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1307596
--------------------------------------------------------------------------------
================================================================================
pypy3-2.4.0-3.fc22 (FEDORA-2016-b046b56518)
Python 3 implementation with a Just-In-Time compiler
--------------------------------------------------------------------------------
Update Information:
Security fixes for CVE-2016-0772 and CVE-2016-5699
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1303647 - CVE-2016-0772 python: smtplib StartTLS stripping attack
https://bugzilla.redhat.com/show_bug.cgi?id=1303647
[ 2 ] Bug #1303699 - CVE-2016-5699 python: http protocol steam injection attack
https://bugzilla.redhat.com/show_bug.cgi?id=1303699
--------------------------------------------------------------------------------
================================================================================
python-copr-1.72-1.fc22 (FEDORA-2016-c7692eedc3)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
This version of copr-cli and python-copr is backwards compatible (in contrast to
python-copr 1.70 and copr-cli 1.51) with old copr-frontends (1.92 and older),
which means that the standard copr-cli build command works for frontends of
these versions (no "got unknown parameter 'source_type' error). Note,
however,
that these versions (1.72 + 1.53) are incompatible with frontend-1.93 (and only
this one). Please, if you employ COPR, do not use frontend-1.93. Additionally,
this release fixes building error of python-copr 1.71 and copr-cli 1.52 on el7
and el6 distros caused by added pylint checks.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1346945 - Project List filled with automated builds
https://bugzilla.redhat.com/show_bug.cgi?id=1346945
[ 2 ] Bug #1335236 - Internet access during builds flag needed in CLI create/modify
commands
https://bugzilla.redhat.com/show_bug.cgi?id=1335236
[ 3 ] Bug #1335237 - copr create command missing --disable_createrepo
https://bugzilla.redhat.com/show_bug.cgi?id=1335237
--------------------------------------------------------------------------------
================================================================================
qsstv-9.1.6-1.fc22 (FEDORA-2016-30f2e42ad5)
Qt-based slow-scan TV and fax
--------------------------------------------------------------------------------
Update Information:
ftp transfer crashes when transmitting in hybrid mode-> solved
--------------------------------------------------------------------------------
================================================================================
rubygem-domain_name-0.5.20160615-1.fc22 (FEDORA-2016-58d511ac03)
Domain Name manipulation library for Ruby
--------------------------------------------------------------------------------
Update Information:
New version 0.5.20160615 is released.
--------------------------------------------------------------------------------
================================================================================
singularity-2.0-9.fc22 (FEDORA-2016-b08ea02c43)
Enabling "Mobility of Compute" with container based applications
--------------------------------------------------------------------------------
Update Information:
Licence fix, patches ---- New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1331818 - Review Request: singularity - Portable application stack packaging
and runtime utility
https://bugzilla.redhat.com/show_bug.cgi?id=1331818
--------------------------------------------------------------------------------