The following Fedora 20 Security updates need testing:
Age URL
100
https://admin.fedoraproject.org/updates/FEDORA-2013-19198/quassel-0.9.1-1...
60
https://admin.fedoraproject.org/updates/FEDORA-2013-22130/chicken-4.8.0.5...
46
https://admin.fedoraproject.org/updates/FEDORA-2013-23116/python-swiftcli...
36
https://admin.fedoraproject.org/updates/FEDORA-2013-23636/rubygem-actionp...
28
https://admin.fedoraproject.org/updates/FEDORA-2013-24018/varnish-3.0.5-1...
15
https://admin.fedoraproject.org/updates/FEDORA-2014-0579/flite-1.3-21.fc20
14
https://admin.fedoraproject.org/updates/FEDORA-2014-0602/graphviz-2.34.0-...
10
https://admin.fedoraproject.org/updates/FEDORA-2014-0792/libinfinity-0.5....
9
https://admin.fedoraproject.org/updates/FEDORA-2014-0926/memcached-1.4.17...
8
https://admin.fedoraproject.org/updates/FEDORA-2014-0978/ibus-chewing-1.4...
6
https://admin.fedoraproject.org/updates/FEDORA-2014-1121/libreswan-3.8-1....
4
https://admin.fedoraproject.org/updates/FEDORA-2014-1207/cxxtools-2.2.1-1...
3
https://admin.fedoraproject.org/updates/FEDORA-2014-1307/tntnet-2.2.1-1.fc20
3
https://admin.fedoraproject.org/updates/FEDORA-2014-1341/perl-MARC-XML-1....
2
https://admin.fedoraproject.org/updates/FEDORA-2014-1396/moodle-2.5.4-1.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-1463/openstack-nova-2...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-1481/mupdf-1.1-5.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-1552/xen-4.3.1-8.fc20
The following Fedora 20 Critical Path updates have yet to be approved:
Age URL
73
https://admin.fedoraproject.org/updates/FEDORA-2013-21163/libproxy-0.4.11...
11
https://admin.fedoraproject.org/updates/FEDORA-2014-0772/openldap-2.4.38-...
8
https://admin.fedoraproject.org/updates/FEDORA-2014-0979/librepo-1.5.2-1....
8
https://admin.fedoraproject.org/updates/FEDORA-2014-0987/anaconda-20.25.1...
4
https://admin.fedoraproject.org/updates/FEDORA-2014-1197/colord-1.1.6-1.fc20
4
https://admin.fedoraproject.org/updates/FEDORA-2014-1231/libwacom-0.8-2.fc20
3
https://admin.fedoraproject.org/updates/FEDORA-2014-1276/pcre-8.33-4.fc20
2
https://admin.fedoraproject.org/updates/FEDORA-2014-1395/krb5-1.11.3-39.fc20
1
https://admin.fedoraproject.org/updates/FEDORA-2014-1436/libnl3-3.2.24-1....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-1410/libsolv-0.4.1-1....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-1448/network-manager-...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-1429/pango-1.36.1-2.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-1535/clutter-1.16.2-3...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-1523/procps-ng-3.3.8-...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-1480/crda-1.1.3_2013....
The following builds have been pushed to Fedora 20 updates-testing
jpeginfo-1.6.1-1.fc20
lyx-2.0.7-2.fc20
system-config-repo-0-2.20140117git3318cd6.fc20
wordpress-3.8.1-3.fc20
xen-4.3.1-8.fc20
Details about builds:
================================================================================
jpeginfo-1.6.1-1.fc20 (FEDORA-2014-1557)
Error-check and generate informative listings from JPEG files
--------------------------------------------------------------------------------
Update Information:
Jpeginfo package initial submission
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1049557 - Review Request: jpeginfo - Utility to obtain information from JPEG
files
https://bugzilla.redhat.com/show_bug.cgi?id=1049557
--------------------------------------------------------------------------------
================================================================================
lyx-2.0.7-2.fc20 (FEDORA-2014-1550)
WYSIWYM (What You See Is What You Mean) document processor
--------------------------------------------------------------------------------
Update Information:
* The source file for release has been updated to the official package (the changes do not
apply to linux so there is nothing new or different here). Further changes on the 2.0.7
release are documented on
http://www.lyx.org/announce/2_0_7.txt
* Require chktex that lyx uses to avoid a minimal bug on the configure [bug 1051933]
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 25 2014 José Matos <jamatos(a)fedoraproject.org> - 2.0.7-2
- new sources for release (the changes do not apply to linux)
- add chktex as requirement to fix [bug 1051933]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1051933 - [abrt] lyx-common: configure.py:1222:checkLatexConfig:IOError:
[Errno 2] No such file or directory: 'chkconfig.vars'
https://bugzilla.redhat.com/show_bug.cgi?id=1051933
--------------------------------------------------------------------------------
================================================================================
system-config-repo-0-2.20140117git3318cd6.fc20 (FEDORA-2014-1558)
Administrate a single yum repository file
--------------------------------------------------------------------------------
Update Information:
Adding missing R: redhat-lsb-core (bz #1057824).
Initial release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1057824 - system-config-repo - Dont open repo file
https://bugzilla.redhat.com/show_bug.cgi?id=1057824
[ 2 ] Bug #1055005 - Review Request: system-config-repo - Administrate a single yum
repository file.
https://bugzilla.redhat.com/show_bug.cgi?id=1055005
--------------------------------------------------------------------------------
================================================================================
wordpress-3.8.1-3.fc20 (FEDORA-2014-1556)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
New upstream maintenance release 3.8.1
Upstream annoucement:
http://wordpress.org/news/2014/01/wordpress-3-8-1/
In this new package the auto-updater is disable, as Wordpress core updates are managed by
the package manager.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 25 2014 Remi Collet <remi(a)fedoraproject.org> - 3.8.1-3
- ignore WP_AUTO_UPDATE_CORE (always false)
* Fri Jan 24 2014 Remi Collet <remi(a)fedoraproject.org> - 3.8.1-2
- comment provided configuration about auto-updater
- disable auto-updater on default configuration #1057521
- switch some sed to patch (more robust)
* Thu Jan 23 2014 Adam Williamson <awilliam(a)redhat.com> - 3.8.1-1
- new upstream release 3.8.1 (bugfixes)
--------------------------------------------------------------------------------
================================================================================
xen-4.3.1-8.fc20 (FEDORA-2014-1552)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
PHYSDEVOP_{prepare,release}_msix exposed to unprivileged pv guests,
Out-of-memory condition yielding memory corruption during IRQ setup
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 24 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-8
- PHYSDEVOP_{prepare,release}_msix exposed to unprivileged pv guests
[XSA-87, CVE-2014-1666]
* Thu Jan 23 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-7
- Out-of-memory condition yielding memory corruption during IRQ setup
[XSA-83, CVE-2014-1642] (#1057142)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1057140 - CVE-2014-1642 xen: out-of-memory condition yielding memory
corruption during IRQ setup
https://bugzilla.redhat.com/show_bug.cgi?id=1057140
--------------------------------------------------------------------------------