The following Fedora 21 Security updates need testing:
Age URL
1
https://admin.fedoraproject.org/updates/FEDORA-2014-15142/mantis-1.2.17-4...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-14888/arm-none-eabi-b...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-14995/avr-binutils-2....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-15143/moodle-2.7.3-1....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-15150/kwebkitpart-1.3...
The following Fedora 21 Critical Path updates have yet to be approved:
Age URL
5
https://admin.fedoraproject.org/updates/FEDORA-2014-14752/createrepo_c-0....
The following builds have been pushed to Fedora 21 updates-testing
Zim-0.62-2.fc21
erlang-edown-0.4-1.fc21
erlang-getopt-0.8.2-1.fc21
erlang-lfe-0.9.0-2.fc21
kde-partitionmanager-1.1.0-3.fc21
libgpod-0.8.3-7.fc21
libguestfs-1.28.3-2.fc21
lonote-3.2.11-1.fc21
mock-1.2.1-1.fc21
php-5.6.3-2.fc21
python-shadowsocks-2.4.3-2.fc21
scummvm-tools-1.7.0-1.fc21
uget-1.99.4-1.fc21
vim-latex-1.8.23-14.20141116.812.gitd0f31c9.fc21
vtun-3.0.3-9.fc21
xfdesktop-4.10.3-1.fc21
xscreensaver-5.31-1.fc21
Details about builds:
================================================================================
Zim-0.62-2.fc21 (FEDORA-2014-15227)
Desktop wiki & notekeeper
--------------------------------------------------------------------------------
Update Information:
Backport upstream bzr755 to fix mis-matched gtk and pygtk in Fedora/RHEL
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Robin Lee <cheeselee(a)fedoraproject.org> - 0.62-2
- Backport upstream bzr755 to fix mis-matched gtk and pygtk in Fedora/RHEL
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1046099 - [abrt] Zim: ipc.py:756:call:ValueError: No such object:
<RemoteObject: zim.gui.GtkInterface(file:///home/apjena/Dropbox/ZIM)>
https://bugzilla.redhat.com/show_bug.cgi?id=1046099
--------------------------------------------------------------------------------
================================================================================
erlang-edown-0.4-1.fc21 (FEDORA-2014-15225)
EDoc extension for generating Github-flavored Markdown
--------------------------------------------------------------------------------
Update Information:
* Ver. 0.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Peter Lemenkov <lemenkov(a)gmail.com> - 0.4-1
- Ver. 0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1074175 - erlang-edown-0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1074175
--------------------------------------------------------------------------------
================================================================================
erlang-getopt-0.8.2-1.fc21 (FEDORA-2014-15242)
Erlang module to parse command line arguments using the GNU getopt syntax
--------------------------------------------------------------------------------
Update Information:
* Ver. 0.8.2
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Peter Lemenkov <lemenkov(a)gmail.com> - 0.8.2-1
- Ver. 0.8.2
* Sun Nov 16 2014 Peter Lemenkov <lemenkov(a)gmail.com> - 0.8.2-0
- Bootstrap ver. 0.8.2 with disabled tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #929395 - erlang-getopt-0.8.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=929395
--------------------------------------------------------------------------------
================================================================================
erlang-lfe-0.9.0-2.fc21 (FEDORA-2014-15233)
Lisp Flavoured Erlang
--------------------------------------------------------------------------------
Update Information:
* Ver. 0.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Peter Lemenkov <lemenkov(a)gmail.com> - 0.9.0-2
- Disable debuginfo
* Sun Nov 16 2014 Peter Lemenkov <lemenkov(a)gmail.com> - 0.9.0-1
- Ver. 0.9.0
- Drop support for EL5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1089942 - erlang-lfe-0.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1089942
--------------------------------------------------------------------------------
================================================================================
kde-partitionmanager-1.1.0-3.fc21 (FEDORA-2014-15240)
KDE Partition Manager
--------------------------------------------------------------------------------
Update Information:
Backport upstream patch to fix detection of devices without partition table.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Mattia Verga <mattia.verga(a)tiscali.it> - 1.1.0-3
- Fix detection of devices without partition table
--------------------------------------------------------------------------------
================================================================================
libgpod-0.8.3-7.fc21 (FEDORA-2014-15235)
Library to access the contents of an iPod
--------------------------------------------------------------------------------
Update Information:
switch to mono_arches from a hand written list in ifarch
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Dan Horák <dan[at]danny.cz> - 0.8.3-7
- switch to mono_arches
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.28.3-2.fc21 (FEDORA-2014-15216)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.28.3.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 15 2014 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.28.3-2
- New upstream version 1.28.3.
- Remove patches which are now upstream.
--------------------------------------------------------------------------------
================================================================================
lonote-3.2.11-1.fc21 (FEDORA-2014-15219)
Personal Notebook on browser
--------------------------------------------------------------------------------
Update Information:
Major upstream update
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Robin Lee <cheeselee(a)fedoraproject.org> - 3.2.11-1
- Update to 3.2.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1160436 - [abrt] lonote: im3.py:245:<module>:AttributeError:
'module' object has no attribute 'ABCMeta'
https://bugzilla.redhat.com/show_bug.cgi?id=1160436
[ 2 ] Bug #958167 - lonote-3.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=958167
[ 3 ] Bug #1030888 - lonote-3.2.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1030888
--------------------------------------------------------------------------------
================================================================================
mock-1.2.1-1.fc21 (FEDORA-2014-15224)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
Bump in plugin ABI.
New LVM plugin.
Nosync for better IO performance.
DNF support.
Printing more useful output on terminal.
Concurrent shell acces to buildroot.
Executing package management commands.
--enablerepo and --disablerepo options
Short circuit options.
Automatic initialization.
Python 3 support.
Experimantal support for building using systemd-nspawn.
Accept path as config.
New compress_logs plugin.
And lots of bugfixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 15 2014 Miroslav Suchý <msuchy(a)redhat.com> - 1.2.1-1
- allow mockchain to accept path as config
- end yum's installroot path with a slash [RHBZ#1160428]
- add --mount option [RHBZ#1162637]
- add some missing bash completation strings
- run --shell as root with --new-chroot
- Don't fail scrub when there's no pool [RHBZ#1162631]
- Globbing and tilde expansion
- move restoring priviledges to finally [RHBZ#1162720]
- Remove "Buildroot must be already initialized" note
- Add missing --print-root-path to manpage
- Do not print ANSI escape characters into log [RHBZ#1163037]
- in site-defaults.cfg initialize dictionary of plugins [RHBZ#1162595]
- Disable empty names and values in config_opts[macros] [RHBZ#1160765]
- Disable single macros in -D cmd option [RHBZ#1160765]
- rpmbuild is in /usr/bin [RHBZ#1161112]
- man page for --macro-file [RHBZ#1160326]
- Added option [--macro-file] to support external rpm macros file [RHBZ#1160326]
- Don't output installation/build output when redirected
- Better log message for intial buildroot installation
- Be more specific when installing configs
- Install into correct sitelib when using Python 3
- Fix nosync on aarch64
- wrap all remaining getcwd() [RHBZ#1159300]
- do not use rpm in %post scriptlet [RHBZ#1131279]
- Fix unclear legal host output [RHBZ#1159794]
- allow running from directory, which is deleted [RHBZ#1159300]
- create compress_logs plugin [RHBZ#1100923]
- when default.cfg exists create default.cfg.rpmnew [RHBZ#1085308]
- accept paths to target definition files [RHBZ#1126117]
- set title bar in xterm [RHBZ#1126235]
- pass --enablerepo/--disablerepo to yum in the same order as provided to mock
[RHBZ#1154604]
- Fix incorrect printing of binary strings on py3
- Add missing Requires rpm-python3
- Don't print Yum and build output when quiet
- Prevent output being printed twice with --verbose (rhbz#1152971)
- Fix printing non-ascii characters with output redirected (rhbz#1152952)
- replace urlgrabber by python-requests
- use python3 for Fedora22+
- Don't print we're doing rpmbuild -bb, when it may not be true
- 'prep' choice missing in short-circuit option parser
- Don't execute prebuild in short-circuit mode
* Thu Oct 9 2014 Miroslav Suchý <msuchy(a)redhat.com> - 1.2.0-1
- update configs for secondary architecture (Dan Horák)
- caching of buildroots using LVM (Michael Simacek)
- add support for DNF (Michael Simacek)
- initial porting to python3 (Michael Simacek)
- new config option nosync (Michael Simacek)
- add CentOS extra repository [BZ# 1108402]
- correctly create default.cfg on arm [BZ# 1033786]
- postpone loading of rpm after chroot is set [BZ# 1111147]
- use systemd-nspawn instead of chroot [RHBZ# 1132762]
- in --copyout do not fail on symlinks [BZ# 971474]
- allow to short circuit to prep phase [BZ# 966985]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1160428 - mock 1.2.0 tries to install f21 packages in f19 chroot
https://bugzilla.redhat.com/show_bug.cgi?id=1160428
[ 2 ] Bug #1162637 - Provide --umount counterpart for LVM plugin
https://bugzilla.redhat.com/show_bug.cgi?id=1162637
[ 3 ] Bug #1162631 - With LVM plugin enabled, I can't scrub traditional directories
https://bugzilla.redhat.com/show_bug.cgi?id=1162631
[ 4 ] Bug #1162720 - --copyout prints confusing errors when the copied file doesn't
exist
https://bugzilla.redhat.com/show_bug.cgi?id=1162720
[ 5 ] Bug #1163037 - Do not print ANSI escape characters into log
https://bugzilla.redhat.com/show_bug.cgi?id=1163037
[ 6 ] Bug #1162595 - lvm_root_opts options in site-defaults.cfg don't work
https://bugzilla.redhat.com/show_bug.cgi?id=1162595
[ 7 ] Bug #1160765 - empty and single values for rpm macros in mock cfg file and cmd
option
https://bugzilla.redhat.com/show_bug.cgi?id=1160765
[ 8 ] Bug #1161112 - pre-UsrMove profiles stopped working after update of mock
https://bugzilla.redhat.com/show_bug.cgi?id=1161112
[ 9 ] Bug #1160326 - mock new command line option --macro-file for defining rpm macros
file
https://bugzilla.redhat.com/show_bug.cgi?id=1160326
[ 10 ] Bug #1159300 - running mock from chroot path directory produces "error
retrieving current directory: getcwd"
https://bugzilla.redhat.com/show_bug.cgi?id=1159300
[ 11 ] Bug #1131279 - mock package has a questionable scriptlet, leading to errors about
rpm db version mismatch
https://bugzilla.redhat.com/show_bug.cgi?id=1131279
[ 12 ] Bug #1159794 - invalid legal_host_arches option can cause unclear output
https://bugzilla.redhat.com/show_bug.cgi?id=1159794
[ 13 ] Bug #1100923 - RFE: compress mock build logs when done building
https://bugzilla.redhat.com/show_bug.cgi?id=1100923
[ 14 ] Bug #1085308 - mock: User configuration is lost during update
https://bugzilla.redhat.com/show_bug.cgi?id=1085308
[ 15 ] Bug #1126117 - Mock should accept paths to target definition files
https://bugzilla.redhat.com/show_bug.cgi?id=1126117
[ 16 ] Bug #1126235 - PROMPT_COMMAND does not include required escape codes
https://bugzilla.redhat.com/show_bug.cgi?id=1126235
[ 17 ] Bug #1154604 - mock: enablerepo doesn't work if used after disablerepo
https://bugzilla.redhat.com/show_bug.cgi?id=1154604
[ 18 ] Bug #1152971 - Verbose mode is repeating lines
https://bugzilla.redhat.com/show_bug.cgi?id=1152971
[ 19 ] Bug #1152952 - [mock] UnicodeEncodeError: 'ascii' codec can't encode
characters in position 6-7: ordinal not in range(128)
https://bugzilla.redhat.com/show_bug.cgi?id=1152952
--------------------------------------------------------------------------------
================================================================================
php-5.6.3-2.fc21 (FEDORA-2014-15053)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
13 Nov 2014, PHP 5.6.3
Core:
* Implemented 64-bit format codes for pack() and unpack(). (Leigh)
* Fixed bug #51800 (proc_open on Windows hangs forever). (Anatol)
* Fixed bug #67633 (A foreach on an array returned from a function not doing
copy-on-write). (Nikita)
* Fixed bug #67739 (Windows 8.1/Server 2012 R2 OS build number reported as 6.2 (instead of
6.3)). (Christian Wenz)
* Fixed bug #67949 (DOMNodeList elements should be accessible through array notation)
(Florian)
* Fixed bug #68095 (AddressSanitizer reports a heap buffer overflow in php_getopt()).
(Stas)
* Fixed bug #68118 ($a->foo .= 'test'; can leave $a->foo undefined).
(Nikita)
* Fixed bug #68129 (parse_url() - incomplete support for empty usernames and passwords)
(Tjerk)
* Fixed bug #68365 (zend_mm_heap corrupted after memory overflow in zend_hash_copy).
(Dmitry)
CURL:
* Add CURL_SSLVERSION_TLSv1_0, CURL_SSLVERSION_TLSv1_1, and CURL_SSLVERSION_TLSv1_2
constants if supported by libcurl (Rasmus)
Fileinfo:
* Fixed bug #66242 (libmagic: don't assume char is signed). (ArdB)
* Fixed bug #68224 (buffer-overflow in libmagic/readcdf.c caught by AddressSanitizer).
(Remi)
* Fixed bug #68283 (fileinfo: out-of-bounds read in elf note headers). (CVE-2014-3710)
(Remi)
FPM:
* Fixed bug #65641 (PHP-FPM incorrectly defines the SCRIPT_NAME variable when using
Apache, mod_proxy-fcgi and ProxyPass). (Remi)
* Implemented FR #55508 (listen and listen.allowed_clients should take IPv6 addresses).
(Robin Gloster)
GD:
* Fixed bug #65171 (imagescale() fails without height param). (Remi)
GMP:
* Implemented gmp_random_range() and gmp_random_bits(). (Leigh)
* Fixed bug #63595 (GMP memory management conflicts with other libraries using GMP).
(Remi)
Mysqli:
* Fixed bug #68114 (linker error on some OS X machines with fixed width decimal support)
(Keyur Govande)
ODBC:
* Fixed bug #68087 (ODBC not correctly reading DATE column when preceded by a VARCHAR
column) (Keyur Govande)
OpenSSL:
* Fixed bug #68074 (Allow to use system cipher list instead of hardcoded value). (Remi)
PDO_pgsql:
* Fixed bug #68199 (PDO::pgsqlGetNotify doesn't support NOTIFY payloads) (Matteo,
Alain Laporte)
* Fixed bug #66584 (Segmentation fault on statement deallocation) (Matteo)
Reflection:
* Fixed bug #68103 (Duplicate entry in Reflection for class alias). (Remi)
SPL:
* Fixed bug #68128 (Regression in RecursiveRegexIterator) (Tjerk)
Backported from 5.6.4
FPM:
* Fixed bug #68420 (listen=9000 listens to ipv6 localhost instead of all addresses).
(Remi)
* Fixed bug #68421 (access.format='%R' doesn't log ipv6 address). (Remi)
* Fixed bug #68423 (PHP-FPM will no longer load all pools). (Remi)
Packaging changes:
* fix case sensitivity for some timezones
* disable opcache.fast_shutdown in default config
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Remi Collet <remi(a)fedoraproject.org> 5.6.3-2
- FPM: add upstream patch for
https://bugs.php.net/68421
access.format=R doesn't log ipv6 address
- FPM: add upstream patch for
https://bugs.php.net/68420
listen=9000 listens to ipv6 localhost instead of all addresses
- FPM: add upstream patch for
https://bugs.php.net/68423
will no longer load all pools
* Thu Nov 13 2014 Remi Collet <remi(a)fedoraproject.org> 5.6.3-1
- Update to PHP 5.6.3
http://php.net/releases/5_6_3.php
* Fri Oct 31 2014 Remi Collet <rcollet(a)redhat.com> 5.6.3-0.2.RC1
- php 5.6.3RC1 (refreshed, phpdbg changes reverted)
- new version of systzdata patch, fix case sensitivity
- ignore Factory in date tests
* Wed Oct 29 2014 Remi Collet <rcollet(a)redhat.com> 5.6.3-0.1.RC1
- php 5.6.3RC1
- disable opcache.fast_shutdown in default config
- enable phpdbg_webhelper new extension (in php-dbg)
--------------------------------------------------------------------------------
================================================================================
python-shadowsocks-2.4.3-2.fc21 (FEDORA-2014-15221)
A fast tunnel proxy that help you get through firewalls
--------------------------------------------------------------------------------
Update Information:
Upstream release with python3 support
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Robin Lee <cheeselee(a)fedoraproject.org> - 2.4.3-2
- Build a subpackage for python3
* Sun Nov 16 2014 Robin Lee <cheeselee(a)fedoraproject.org> - 2.4.3-1
- Update to 2.4.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1143001 - python-shadowsocks-2.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1143001
--------------------------------------------------------------------------------
================================================================================
scummvm-tools-1.7.0-1.fc21 (FEDORA-2014-15220)
Tools for scummVM / S.C.U.M.M scripting language
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 12 2014 Christian Krause <chkr(a)fedoraproject.org> - 1.7.0-1
- new upstream release
--------------------------------------------------------------------------------
================================================================================
uget-1.99.4-1.fc21 (FEDORA-2014-15226)
Download manager using GTK+ and libcurl
--------------------------------------------------------------------------------
Update Information:
New version 1.99.4 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 17 2014 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.99.4-1
- 1.99.4
--------------------------------------------------------------------------------
================================================================================
vim-latex-1.8.23-14.20141116.812.gitd0f31c9.fc21 (FEDORA-2014-15234)
Tools to view, edit and compile LaTeX documents in Vim
--------------------------------------------------------------------------------
Update Information:
New upstream release with several bug fixes and appdata support.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Till Maas <opensource(a)till.name> -
1.8.23-14.20141116.812.gitd0f31c9
- Update to new release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1128816 - Add Addon metadata for GNOME Software to vim-latex
https://bugzilla.redhat.com/show_bug.cgi?id=1128816
[ 2 ] Bug #1163518 - LaTeX-suite clobbers the "a" macro
https://bugzilla.redhat.com/show_bug.cgi?id=1163518
--------------------------------------------------------------------------------
================================================================================
vtun-3.0.3-9.fc21 (FEDORA-2014-15236)
Virtual tunnel over TCP/IP networks
--------------------------------------------------------------------------------
Update Information:
added /etc/sysconfig/vtun environment file, updated unit files
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 14 2014 Gabriel Somlo <somlo at cmu.edu> 3.0.3-9
- added /etc/sysconfig/vtun environment file
- updated unit files
--------------------------------------------------------------------------------
================================================================================
xfdesktop-4.10.3-1.fc21 (FEDORA-2014-15237)
Desktop manager for the Xfce Desktop Environment
--------------------------------------------------------------------------------
Update Information:
Update to 4.10.3 with various fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Kevin Fenzi <kevin(a)scrye.com> 4.10.3-1
- Update to 4.10.3 with various fixes.
--------------------------------------------------------------------------------
================================================================================
xscreensaver-5.31-1.fc21 (FEDORA-2014-15230)
X screen saver and locker
--------------------------------------------------------------------------------
Update Information:
New version 5.31 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2014 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1:5.31-1
- Update to 5.31
--------------------------------------------------------------------------------