The following Fedora 22 Security updates need testing:
Age URL
380
https://bodhi.fedoraproject.org/updates/FEDORA-2015-5878
echoping-6.1-0.beta.r434svn.1.fc22
329
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9185
ceph-deploy-1.5.25-1.fc22
262
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12781
python-kdcproxy-0.3.2-1.fc22
216
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16239 nagios-4.0.8-1.fc22
205
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2d37e7dacf
openstack-swift-2.2.0-6.fc22
174
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9039c25f1d
miniupnpc-1.9-6.fc22
156
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
156
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
138
https://bodhi.fedoraproject.org/updates/FEDORA-2015-3a5cebb105
ImageMagick-6.9.2.7-1.fc22
123
https://bodhi.fedoraproject.org/updates/FEDORA-2015-b9e4c97ff1 sos-3.2-2.fc22
97
https://bodhi.fedoraproject.org/updates/FEDORA-2015-f683150aa0
thttpd-2.25b-37.fc22
86
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0
xulrunner-44.0-1.fc22
73
https://bodhi.fedoraproject.org/updates/FEDORA-2016-560802e52b
xdelta-3.0.7-7.fc22
62
https://bodhi.fedoraproject.org/updates/FEDORA-2016-24d134e494
mingw-nsis-2.50-1.fc22
54
https://bodhi.fedoraproject.org/updates/FEDORA-2016-338a7e9925
graphite2-1.3.6-1.fc22
50
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3cbe9ad765
python-pygments-2.1.3-1.fc22
45
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7b40eb9e29
libecap-1.0.0-1.fc22 squid-3.5.10-1.fc22
44
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5f44e89fe0
python-tgcaptcha2-0.3.1-1.fc22
24
https://bodhi.fedoraproject.org/updates/FEDORA-2016-250042b8a6
xstream-1.4.9-1.fc22
18
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7eb5caa94d
parallel-20160222-1.fc22
18
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d4b68e412
imlib2-1.4.8-1.fc22
16
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d19ed2f80d
squid-3.5.10-2.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-96bfd9e873
libtasn1-4.8-1.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a028331ebc
poppler-0.30.0-4.fc22
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0517fab538
keepassx-0.4.4-1.fc22
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3c4e438fc8
mingw-poppler-0.30.0-4.fc22
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-94582896cd
firefox-45.0.2-1.fc22
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-59c5e405e3
golang-1.5.4-1.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-28ff51a3f5
ansible1.9-1.9.6-1.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-85e9f2e3cd
mod_nss-1.0.11-7.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-fc1cc33e05
gsi-openssh-6.9p1-8.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ac1dff014c
webkitgtk4-2.12.1-1.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-75063477ca xen-4.5.3-2.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ab154c56dd
ansible-2.0.2.0-1.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-373c063e79
kernel-4.4.8-200.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ff9e0c574c
java-1.8.0-openjdk-1.8.0.91-1.b14.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5a9313e4b4
perl-5.20.3-330.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c1bad2b755
thunderbird-45.0-2.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1aaf308de4
community-mysql-5.6.30-1.fc22
The following Fedora 22 Critical Path updates have yet to be approved:
Age URL
255
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13210 yum-3.4.3-508.fc22
174
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2123de044f
libgphoto2-2.5.8-1.fc22
156
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
156
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
86
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0
xulrunner-44.0-1.fc22
80
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3fce30d64
mobile-broadband-provider-info-1.20151214-1.fc22
62
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ce419c9cab
selinux-policy-3.13.1-128.28.fc22
51
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4d5434d82f parted-3.2-16.fc22
38
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d4e6e32c1c
upower-0.99.3-2.fc22
18
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d4b68e412
imlib2-1.4.8-1.fc22
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1576899f4e
gnome-settings-daemon-3.16.5-1.fc22
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9097b02af0
vim-7.4.1718-1.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a028331ebc
poppler-0.30.0-4.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2cdfd91ad1
webkitgtk3-2.4.11-1.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a18dc43d88
control-center-3.16.4-1.fc22
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-96bfd9e873
libtasn1-4.8-1.fc22
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-027faabac4
libreport-2.6.4-2.fc22 abrt-2.6.1-11.fc22
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-94582896cd
firefox-45.0.2-1.fc22
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-af1f30412b
pygtk2-2.24.0-14.fc22
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-695843b69a
hwdata-0.288-1.fc22
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1122e53c5a expat-2.1.1-1.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-89e3334638
gnome-shell-3.16.4-2.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5a9313e4b4
perl-5.20.3-330.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-83b47a28ce
wavpack-4.80.0-1.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-373c063e79
kernel-4.4.8-200.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-41df7ccbc8
lldpad-1.0.1-4.git036e314.fc22
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-476f32d4ec
evolution-ews-3.16.5-2.fc22 libsoup-2.50.0-2.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c1bad2b755
thunderbird-45.0-2.fc22
The following builds have been pushed to Fedora 22 updates-testing
can-utils-20160229git-1.fc22
clearsilver-0.10.5-35.fc22
community-mysql-5.6.30-1.fc22
frescobaldi-2.19.0-1.fc22
frysk-0.4-53.fc22
grub-customizer-5.0.6-1.fc22
holland-1.0.12-6.fc22
kturtle-15.12.3-1.fc22
kuser-16.04.0-2.fc22
liveusb-creator-3.93.2-1.fc22
mingw-wavpack-4.80.0-1.fc22
openscap-1.2.9-1.fc22
openscap-daemon-0.1.5-1.fc22
perl-DateTime-TimeZone-1.98-1.fc22
php-getid3-1.9.12-1.fc22
php-league-flysystem-1.0.21-1.fc22
pidgin-sipe-1.21.0-1.fc22
python-ly-0.9.4-2.fc22
python-pypandoc-1.1.3-1.fc22
sssd-1.13.4-2.fc22
thunderbird-45.0-2.fc22
trac-1.0.10-1.fc22
tripwire-2.4.3.0-10.fc22
tzdata-2016d-1.fc22
Details about builds:
================================================================================
can-utils-20160229git-1.fc22 (FEDORA-2016-721f1da0ae)
SocketCAN user space utilities and tools
--------------------------------------------------------------------------------
Update Information:
This is the first version of can-utils in Fedora, containing user space
utilities for working with Linux SocketCAN subsystem. For further information
about the CAN bus and SocketCAN, see eg
https://en.wikipedia.org/wiki/CAN_bus
and
https://en.wikipedia.org/wiki/SocketCAN
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1327050 - Review Request: can-utils - SocketCAN userspace utilities and
tools
https://bugzilla.redhat.com/show_bug.cgi?id=1327050
--------------------------------------------------------------------------------
================================================================================
clearsilver-0.10.5-35.fc22 (FEDORA-2016-159ded8a54)
Fast and powerful HTML templating system
--------------------------------------------------------------------------------
Update Information:
Fix perl symbol issue, add EL-7 build.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1329524 - perl-clearsilver has symbol lookup error: undefined symbol:
hdf_init because of wrong command order in %build
https://bugzilla.redhat.com/show_bug.cgi?id=1329524
--------------------------------------------------------------------------------
================================================================================
community-mysql-5.6.30-1.fc22 (FEDORA-2016-1aaf308de4)
MySQL client programs and shared libraries
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release. Also fixes CVE-2016-0705, CVE-2016-0639,
CVE-2016-2047, CVE-2016-0647, CVE-2016-0648, CVE-2016-0666, CVE-2016-0642,
CVE-2016-0655, CVE-2016-0643
--------------------------------------------------------------------------------
================================================================================
frescobaldi-2.19.0-1.fc22 (FEDORA-2016-899b51b664)
Edit LilyPond sheet music with ease!
--------------------------------------------------------------------------------
Update Information:
Latest upstream release.
--------------------------------------------------------------------------------
================================================================================
frysk-0.4-53.fc22 (FEDORA-2016-cf7553c231)
Execution analysis and debugging tool-suite
--------------------------------------------------------------------------------
Update Information:
Fixes openjdk incompatibility in JNI code.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1323767 - SIGSEGV in jre
https://bugzilla.redhat.com/show_bug.cgi?id=1323767
--------------------------------------------------------------------------------
================================================================================
grub-customizer-5.0.6-1.fc22 (FEDORA-2016-f0af95ab24)
Graphical GRUB2 settings manager
--------------------------------------------------------------------------------
Update Information:
Update to 5.0.6.
--------------------------------------------------------------------------------
================================================================================
holland-1.0.12-6.fc22 (FEDORA-2016-8513d4e36f)
Pluggable Backup Framework
--------------------------------------------------------------------------------
Update Information:
Integrate commvault plugin
--------------------------------------------------------------------------------
================================================================================
kturtle-15.12.3-1.fc22 (FEDORA-2016-d3925bddbb)
Educational Programming Environment
--------------------------------------------------------------------------------
Update Information:
Update to 15.12.3, fixes startup issues
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1262631 - kturtle: fix desktop entry
https://bugzilla.redhat.com/show_bug.cgi?id=1262631
--------------------------------------------------------------------------------
================================================================================
kuser-16.04.0-2.fc22 (FEDORA-2016-9edd86eb1a)
User Manager for KDE
--------------------------------------------------------------------------------
Update Information:
Set default login shell to /bin/bash.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1209019 - Missing default login shell for new users
https://bugzilla.redhat.com/show_bug.cgi?id=1209019
--------------------------------------------------------------------------------
================================================================================
liveusb-creator-3.93.2-1.fc22 (FEDORA-2016-77e613d54d)
Fedora Media Writer
--------------------------------------------------------------------------------
Update Information:
Updated to another upstream pre-release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1329611 - no image written on F22
https://bugzilla.redhat.com/show_bug.cgi?id=1329611
[ 2 ] Bug #1329608 - missing deps on F22
https://bugzilla.redhat.com/show_bug.cgi?id=1329608
--------------------------------------------------------------------------------
================================================================================
mingw-wavpack-4.80.0-1.fc22 (FEDORA-2016-4fd8549f48)
Completely open audiocodec
--------------------------------------------------------------------------------
Update Information:
New release 4.80.0 with fixes and improvements. It contains also full Unicode
support for Windows platform.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1329173 - Update to 4.80.0
https://bugzilla.redhat.com/show_bug.cgi?id=1329173
--------------------------------------------------------------------------------
================================================================================
openscap-1.2.9-1.fc22 (FEDORA-2016-e058b460b9)
Set of open source libraries enabling integration of the SCAP line of standards
--------------------------------------------------------------------------------
Update Information:
upgrade to the latest upstream release
--------------------------------------------------------------------------------
================================================================================
openscap-daemon-0.1.5-1.fc22 (FEDORA-2016-0fe72e3e74)
Manages continuous SCAP scans of your infrastructure
--------------------------------------------------------------------------------
Update Information:
upgrade to the latest upstream release
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-TimeZone-1.98-1.fc22 (FEDORA-2016-0aafdb48e1)
Time zone object base class and factory
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1328844 - perl-DateTime-TimeZone-1.98 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1328844
--------------------------------------------------------------------------------
================================================================================
php-getid3-1.9.12-1.fc22 (FEDORA-2016-55659eab59)
The PHP media file parser
--------------------------------------------------------------------------------
Update Information:
* Update to upstream version 1.9.12 * Add a simple autoloader
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1319676 - Please add an autoloader and update to latest version 1.9.12
https://bugzilla.redhat.com/show_bug.cgi?id=1319676
--------------------------------------------------------------------------------
================================================================================
php-league-flysystem-1.0.21-1.fc22 (FEDORA-2016-2510d26dec)
Filesystem abstraction: Many filesystems, one API
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.21** - 2016-04-22 * Explicitly return false when a has call
receives an empty filename. * MounManager copy and move operators now comply
to the Filesystem's signature.
--------------------------------------------------------------------------------
================================================================================
pidgin-sipe-1.21.0-1.fc22 (FEDORA-2016-072c251c22)
Pidgin protocol plugin to connect to MS Office Communicator
--------------------------------------------------------------------------------
Update Information:
New upstream release: * add support for Lync File Transfer * support embedded
XML as buddy photo URL * improve "Join scheduled conference" dialog * add
AppStream metadata file
--------------------------------------------------------------------------------
================================================================================
python-ly-0.9.4-2.fc22 (FEDORA-2016-6c91d68c55)
Tool and library for manipulating LilyPond files
--------------------------------------------------------------------------------
Update Information:
Requires fix. ---- Latest upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1329556 - python-ly requires both Python 2 and Python 3
https://bugzilla.redhat.com/show_bug.cgi?id=1329556
[ 2 ] Bug #1328650 - python-ly-0.9.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1328650
--------------------------------------------------------------------------------
================================================================================
python-pypandoc-1.1.3-1.fc22 (FEDORA-2016-ed7e5e86d5)
Thin wrapper for pandoc
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
================================================================================
sssd-1.13.4-2.fc22 (FEDORA-2016-48891618d0)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6 ---- New
upstream release 1.13.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1328108 - Protocol error with FreeIPA on CentOS 6
https://bugzilla.redhat.com/show_bug.cgi?id=1328108
--------------------------------------------------------------------------------
================================================================================
thunderbird-45.0-2.fc22 (FEDORA-2016-c1bad2b755)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
For changes see
https://www.mozilla.org/en-US/thunderbird/45.0/releasenotes/
--------------------------------------------------------------------------------
================================================================================
trac-1.0.10-1.fc22 (FEDORA-2016-8e46d66bd5)
Enhanced wiki and issue tracking system
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.10
--------------------------------------------------------------------------------
================================================================================
tripwire-2.4.3.0-10.fc22 (FEDORA-2016-87026a3428)
IDS (Intrusion Detection System)
--------------------------------------------------------------------------------
Update Information:
update to 2.4.3.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1308196 - tripwire: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1308196
--------------------------------------------------------------------------------
================================================================================
tzdata-2016d-1.fc22 (FEDORA-2016-809b74139b)
Timezone data
--------------------------------------------------------------------------------
Update Information:
- Rebase to 2016d - America/Caracas will switch from -0430 to -04 on
2016-05-01 at 02:30. - Asia/Magadan will switch from +10 to +11 on 2016-04-24
at 02:00. - New zone Asia/Tomsk, has split off from Asia/Novosibirsk. It
covers Tomsk Oblast, Russia, which will switch from +06 to +07 on 2016-05-29
at 02:00. ---- Rebase to 2016c - Azerbaijan no longer observes DST.
- Chile changes from permanent DST to seasonal DST. ---- - Rebase to 2016b
- New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
2016-03-27 at 02:00 local time. They need distinct zones since their
post-1970 histories disagree. New zone Asia/Barnaul for Altai Krai and
Altai Republic, Russia, which will switch from +06 to +07 on the same date
and local time. The Astrakhan change is already official; the others have
passed the first reading in the State Duma and are extremely likely. Also,
Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00. - As a trial of a
new system that needs less information to be made up, the new zones use
numeric time zone abbreviations like "+04" instead of invented
abbreviations
like "ASTT". - Haiti will not observe DST in 2016. - Palestine's
spring-
forward transition on 2016-03-26 is at 01:00, not 00:00. Guess future
transitions will be March's last Saturday at 01:00, not March's last Friday
at 24:00.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1328294 - tzdata-2016d is available
https://bugzilla.redhat.com/show_bug.cgi?id=1328294
[ 2 ] Bug #1320770 - tzdata-2016c is available
https://bugzilla.redhat.com/show_bug.cgi?id=1320770
[ 3 ] Bug #1317720 - tzdata-2016b is available
https://bugzilla.redhat.com/show_bug.cgi?id=1317720
--------------------------------------------------------------------------------