The following Fedora 20 Security updates need testing:
Age URL
122
https://admin.fedoraproject.org/updates/FEDORA-2014-11969/krb5-1.11.5-16....
75
https://admin.fedoraproject.org/updates/FEDORA-2014-15371/rubygem-actionp...
73
https://admin.fedoraproject.org/updates/FEDORA-2014-15489/rubygem-sprocke...
52
https://admin.fedoraproject.org/updates/FEDORA-2014-16494/mutt-1.5.23-4.fc20
51
https://admin.fedoraproject.org/updates/FEDORA-2014-16845/resteasy-3.0.6-...
51
https://admin.fedoraproject.org/updates/FEDORA-2014-16825/asterisk-11.14....
46
https://admin.fedoraproject.org/updates/FEDORA-2014-17153/httpd-2.4.10-2....
42
https://admin.fedoraproject.org/updates/FEDORA-2014-17089/aeskulap-0.2.2-...
39
https://admin.fedoraproject.org/updates/FEDORA-2014-17559/mapserver-6.2.2...
37
https://admin.fedoraproject.org/updates/FEDORA-2014-17641/dokuwiki-0-0.23...
20
https://admin.fedoraproject.org/updates/FEDORA-2015-0577/strongswan-5.2.2...
19
https://admin.fedoraproject.org/updates/FEDORA-2015-0633/chicken-4.9.0.1-...
16
https://admin.fedoraproject.org/updates/FEDORA-2015-0773/arc-5.21p-5.fc20
12
https://admin.fedoraproject.org/updates/FEDORA-2015-0951/xdg-utils-1.1.0-...
11
https://admin.fedoraproject.org/updates/FEDORA-2015-1007/dump-0.4-0.24.b4...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-1085/puppetlabs-stdli...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-1101/php-5.5.21-1.fc20
7
https://admin.fedoraproject.org/updates/FEDORA-2015-1133/seamonkey-2.32-1...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-1162/community-mysql-...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-1159/jasper-1.900.1-2...
6
https://admin.fedoraproject.org/updates/FEDORA-2015-1176/privoxy-3.0.23-1...
6
https://admin.fedoraproject.org/updates/FEDORA-2015-1191/vorbis-tools-1.4...
4
https://admin.fedoraproject.org/updates/FEDORA-2015-1294/qpid-cpp-0.30-7....
3
https://admin.fedoraproject.org/updates/FEDORA-2015-1354/firefox-35.0.1-3...
3
https://admin.fedoraproject.org/updates/FEDORA-2015-1364/mantis-1.2.19-1....
2
https://admin.fedoraproject.org/updates/FEDORA-2015-1439/websvn-2.3.3-8.fc20
1
https://admin.fedoraproject.org/updates/FEDORA-2015-1263/maradns-2.0.11-1...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-1497/kernel-3.18.5-10...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-1510/pigz-2.3.3-1.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2015-1165/patch-2.7.4-1.fc20
The following Fedora 20 Critical Path updates have yet to be approved:
Age URL
12
https://admin.fedoraproject.org/updates/FEDORA-2015-0951/xdg-utils-1.1.0-...
12
https://admin.fedoraproject.org/updates/FEDORA-2015-0959/redhat-rpm-confi...
11
https://admin.fedoraproject.org/updates/FEDORA-2015-1033/sddm-0.10.0-3.fc20
7
https://admin.fedoraproject.org/updates/FEDORA-2015-1095/perl-Filter-1.54...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-1159/jasper-1.900.1-2...
6
https://admin.fedoraproject.org/updates/FEDORA-2015-1214/hwdata-0.274-2.fc20
4
https://admin.fedoraproject.org/updates/FEDORA-2015-1285/polkit-0.112-7.f...
3
https://admin.fedoraproject.org/updates/FEDORA-2015-1384/cairo-1.14.0-1.fc20
3
https://admin.fedoraproject.org/updates/FEDORA-2015-1423/amor-14.12.1-1.f...
3
https://admin.fedoraproject.org/updates/FEDORA-2015-1420/zip-3.0-10.fc20
3
https://admin.fedoraproject.org/updates/FEDORA-2015-1398/selinux-policy-3...
2
https://admin.fedoraproject.org/updates/FEDORA-2015-1425/perl-Getopt-Long...
2
https://admin.fedoraproject.org/updates/FEDORA-2015-1434/perl-Pod-Simple-...
2
https://admin.fedoraproject.org/updates/FEDORA-2015-1448/koji-1.9.0-10.fc...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-1525/nss-util-3.17.4-...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-1497/kernel-3.18.5-10...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-1528/xorg-x11-server-...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-1165/patch-2.7.4-1.fc20
The following builds have been pushed to Fedora 20 updates-testing
haproxy-1.5.11-1.fc20
inadyn-mt-2.24.44-1.fc20
jd-2.8.9-0.3.rc150201.fc20
nodejs-caller-callsite-1.0.0-1.fc20
nodejs-infinity-agent-1.0.2-1.fc20
nodejs-is-stream-1.0.1-1.fc20
nodejs-lowercase-keys-1.0.0-1.fc20
nodejs-prepend-http-1.0.1-1.fc20
patch-2.7.4-1.fc20
perl-Apache-Session-NoSQL-0.1-2.fc20
perl-Params-Validate-1.17-1.fc20
perl-Redis-1.978-1.fc20
rubygem-narray-0.6.1.1-1.fc20
siege-3.0.9-1.fc20
xorg-x11-server-1.14.4-14.fc20
xscreensaver-5.32-4.fc20
Details about builds:
================================================================================
haproxy-1.5.11-1.fc20 (FEDORA-2015-1554)
HAProxy reverse proxy for high availability environments
--------------------------------------------------------------------------------
Update Information:
Update to upstream stable release 1.5.11
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 1 2015 Ryan O'Hara <rohara(a)redhat.com> - 1.5.11-1
- Update to 1.5.11 (#1188029)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1188029 - haproxy-1.5.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1188029
--------------------------------------------------------------------------------
================================================================================
inadyn-mt-2.24.44-1.fc20 (FEDORA-2015-1555)
Dynamic DNS Client
--------------------------------------------------------------------------------
Update Information:
New upstream release with bug fixes
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 31 2015 Jochen Schmitt <Jochen herr-schmitt de> - 2.24.44-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
jd-2.8.9-0.3.rc150201.fc20 (FEDORA-2015-1561)
A 2ch browser
--------------------------------------------------------------------------------
Update Information:
New version 2.8.9 rc 150201 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 1 2015 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2.8.9-0.3.rc150201
- 2.8.9 rc 150201
* Wed Jan 28 2015 Mamoru TASAKA <mtasaka(a)fedoraproject.org>
- Update to the latest trunk
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.8.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Thu Jun 12 2014 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2.8.8-2
- F-21: mass rebuild
--------------------------------------------------------------------------------
================================================================================
nodejs-caller-callsite-1.0.0-1.fc20 (FEDORA-2015-1529)
Get the callsite of the caller function
--------------------------------------------------------------------------------
Update Information:
update to 1.0.0 release
--------------------------------------------------------------------------------
================================================================================
nodejs-infinity-agent-1.0.2-1.fc20 (FEDORA-2015-1549)
Creates HTTP/HTTPS Agent with Infinity maxSockets
--------------------------------------------------------------------------------
Update Information:
update to 1.0.2 upstream release
--------------------------------------------------------------------------------
================================================================================
nodejs-is-stream-1.0.1-1.fc20 (FEDORA-2015-1559)
Check if something is a Node.js stream
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
================================================================================
nodejs-lowercase-keys-1.0.0-1.fc20 (FEDORA-2015-1542)
Lowercase the keys of an object
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
================================================================================
nodejs-prepend-http-1.0.1-1.fc20 (FEDORA-2015-1531)
Prepend http:// to humanized URLs like
todomvc.com and localhost
--------------------------------------------------------------------------------
Update Information:
update to 1.0.1 upstream release
--------------------------------------------------------------------------------
================================================================================
patch-2.7.4-1.fc20 (FEDORA-2015-1165)
Utility for modifying/upgrading files
--------------------------------------------------------------------------------
Update Information:
Security fixes for CVE-2014-9637 and CVE-2015-1196.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 1 2015 Tim Waugh <twaugh(a)redhat.com> - 2.7.4-1
- 2.7.4, including a better fix for CVE-2015-1196 that still allows
symlinks referencing ".." to be created.
* Fri Jan 23 2015 Tim Waugh <twaugh(a)redhat.com> - 2.7.3-1
- 2.7.3 (bug #1182157, CVE-2015-1196, bug #1184491, CVE-2014-9637).
* Tue Jan 20 2015 Tim Waugh <twaugh(a)redhat.com> - 2.7.1-12
- Apply upstream patch to fix line numbering integer overflow.
* Tue Jan 20 2015 Tim Waugh <twaugh(a)redhat.com> - 2.7.1-11
- Apply upstream patch to fix directory traversal via symlinks
(bug #1182157, CVE-2015-1196).
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.7.1-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Fri Jun 6 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.7.1-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1185262 - CVE-2014-9637 patch: local denial of service with a crafted patch
https://bugzilla.redhat.com/show_bug.cgi?id=1185262
[ 2 ] Bug #1184490 - CVE-2015-1395 patch: directory traversal via file rename
https://bugzilla.redhat.com/show_bug.cgi?id=1184490
--------------------------------------------------------------------------------
================================================================================
perl-Apache-Session-NoSQL-0.1-2.fc20 (FEDORA-2015-1530)
NoSQL implementation of Apache::Session
--------------------------------------------------------------------------------
Update Information:
This is the first Fedora/EPEL release of perl-Apache-Session-NoSQL.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1186725 - Review Request: perl-Apache-Session-NoSQL - NoSQL implementation of
Apache::Session
https://bugzilla.redhat.com/show_bug.cgi?id=1186725
[ 2 ] Bug #1181654 - Please package perl-Apache-Session-NoSQL into EPEL 5/6/7
https://bugzilla.redhat.com/show_bug.cgi?id=1181654
--------------------------------------------------------------------------------
================================================================================
perl-Params-Validate-1.17-1.fc20 (FEDORA-2015-1532)
Params-Validate Perl module
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 1 2015 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 1.17-1
- Upstream update.
* Mon Jan 12 2015 Petr Pisar <ppisar(a)redhat.com> - 1.16-2
- Remove unused test-time dependency on Readonly:::XS
--------------------------------------------------------------------------------
================================================================================
perl-Redis-1.978-1.fc20 (FEDORA-2015-1552)
Perl binding for Redis database
--------------------------------------------------------------------------------
Update Information:
Upgrade to 1.978.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 1 2015 David Dick <ddick(a)cpan.org> - 1.978-1
- Upgrade to 1.978.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1187912 - perl-Redis-1.978 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1187912
--------------------------------------------------------------------------------
================================================================================
rubygem-narray-0.6.1.1-1.fc20 (FEDORA-2015-1546)
N-dimensional Numerical Array class for Ruby
--------------------------------------------------------------------------------
Update Information:
* new upstream release (#1178432)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 1 2015 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.1.1-1
- new upstream release (#1178432)
* Fri Jan 16 2015 Vít Ondruch <vondruch(a)redhat.com> - 0.6.0.9-4
- Rebuilt for
https://fedoraproject.org/wiki/Changes/Ruby_2.2
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.6.0.9-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.6.0.9-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1178432 - rubygem-narray-0.6.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1178432
--------------------------------------------------------------------------------
================================================================================
siege-3.0.9-1.fc20 (FEDORA-2015-1558)
A HTTP regression testing and benchmarking utility
--------------------------------------------------------------------------------
Update Information:
Update to new upstream release 3.0.9 (rhbz#1178439)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 11 2015 Fabian Affolter <mail(a)fabian-affolter.ch> - 3.0.9-1
- Update to new upstream release 3.0.9 (rhbz#1178439)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1178439 - siege-3.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1178439
--------------------------------------------------------------------------------
================================================================================
xorg-x11-server-1.14.4-14.fc20 (FEDORA-2015-1528)
X.Org X11 X server
--------------------------------------------------------------------------------
Update Information:
backport two fixes from master, randr + udev
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 1 2015 Dave Airlie <airlied(a)redhat.com> 1.14.4-14
- backport two fixes from master, randr + udev
--------------------------------------------------------------------------------
================================================================================
xscreensaver-5.32-4.fc20 (FEDORA-2015-1556)
X screen saver and locker
--------------------------------------------------------------------------------
Update Information:
A possible problem is found on xscreensaver with gcc5. This rpm will fix the issue.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 1 2015 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1:5.32-4
- Temporarily disable sse2 when gcc5 with -fsanitize=foo
- gcc5 address sanitizer fix for pick_best_gl_visual
--------------------------------------------------------------------------------