The following Fedora 22 Security updates need testing:
Age URL
16
https://admin.fedoraproject.org/updates/FEDORA-2015-2638/echoping-6.1-0.1...
15
https://admin.fedoraproject.org/updates/FEDORA-2015-2783/drupal7-entity-1...
10
https://admin.fedoraproject.org/updates/FEDORA-2015-3079/dokuwiki-0-0.24....
6
https://admin.fedoraproject.org/updates/FEDORA-2015-3368/389-ds-base-1.3....
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3727/python-django-1....
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3833/php-ZendFramewor...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-3935/xen-4.5.0-6.fc22
The following Fedora 22 Critical Path updates have yet to be approved:
Age URL
10
https://admin.fedoraproject.org/updates/FEDORA-2015-3062/perl-Test-Simple...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3846/anaconda-22.20.4...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3836/system-config-ke...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3862/perl-threads-2.0...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3717/bind99-9.9.7-3.f...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3719/perl-DBI-1.633-3...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3691/pungi-3.14-1.fc22
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3706/xfce4-panel-4.12...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3802/amor-14.12.3-1.f...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3819/akonadi-1.13.0-1...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3631/kate4-4.14.3-11....
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3434/kde-baseapps-14....
The following builds have been pushed to Fedora 22 updates-testing
99soft-oss-parent-10-1.fc22
DecodeIR-2.45-2.fc22
ahkab-0.12-2.fc22
cgit-0.11.2-1.fc22
cockpit-0.42-1.fc22
gegl03-0.3.0-0.3.gitc9bbc81.fc22
glom-1.28.4-1.fc22
gnome-photos-3.15.91-1.fc22
licq-1.8.2-5.fc22
mesa-10.5.1-1.20150314.fc22
mingw-librsvg2-2.40.8-1.fc22
ndoutils-2.0.0-8.fc22
openambit-0.3-3.git5f2b784.fc22
phpMyAdmin-4.3.12-1.fc22
poedit-1.7.5-1.fc22
python-docx-0.8.5-2.fc22
python-markdown-2.6.1-1.fc22
python-msgpack-0.4.6-1.fc22
rocoto-6.2-1.fc22
spice-html5-0.1.6-1.fc22
tig-2.1-1.fc22
xen-4.5.0-6.fc22
Details about builds:
================================================================================
99soft-oss-parent-10-1.fc22 (FEDORA-2015-3909)
99 Software Foundation parent pom
--------------------------------------------------------------------------------
Update Information:
Initial import (#979727).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #979727 - Review Request: 99soft-oss-parent - 99 Software Foundation parent
pom
https://bugzilla.redhat.com/show_bug.cgi?id=979727
--------------------------------------------------------------------------------
================================================================================
DecodeIR-2.45-2.fc22 (FEDORA-2015-3938)
Infrared remote controls decoding library
--------------------------------------------------------------------------------
Update Information:
Initial import
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1199184 - Review Request: DecodeIR - Infrared remote controls decoding
library
https://bugzilla.redhat.com/show_bug.cgi?id=1199184
--------------------------------------------------------------------------------
================================================================================
ahkab-0.12-2.fc22 (FEDORA-2015-3936)
A SPICE-like electronic circuit simulator written in Python
--------------------------------------------------------------------------------
Update Information:
Python 3 version created
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 13 2015 Kiara Navarro <sophiekovalevsky(a)fedoraproject.org> - 0.12-2
- Python 3 version created
--------------------------------------------------------------------------------
================================================================================
cgit-0.11.2-1.fc22 (FEDORA-2015-3928)
A fast web interface for git
--------------------------------------------------------------------------------
Update Information:
Update to 0.11.2
Update to 0.11.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 14 2015 Kevin Fenzi <kevin(a)scrye.com> 0.11.2-1
- Update to 0.11.2
* Tue Mar 10 2015 Kevin Fenzi <kevin(a)scrye.com> 0.11.1-1
- Update to 0.11.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1201950 - cgit-0.11.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1201950
[ 2 ] Bug #1199323 - cgit-0.11.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1199323
--------------------------------------------------------------------------------
================================================================================
cockpit-0.42-1.fc22 (FEDORA-2015-3940)
A user interface for Linux servers
--------------------------------------------------------------------------------
Update Information:
Update to 0.42 release
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 14 2015 Stef Walter <stefw(a)redhat.com> - 0.42-1
- Update to 0.42 release
--------------------------------------------------------------------------------
================================================================================
gegl03-0.3.0-0.3.gitc9bbc81.fc22 (FEDORA-2015-3942)
Graph based image processing framework
--------------------------------------------------------------------------------
Update Information:
GNOME Photos 3.15.91 release, together with new version of the gegl library that it now
requires.
--------------------------------------------------------------------------------
================================================================================
glom-1.28.4-1.fc22 (FEDORA-2015-3925)
Easy-to-use database designer and user interface
--------------------------------------------------------------------------------
Update Information:
Glom 1.28.4 release.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 14 2015 Kalev Lember <kalevlember(a)gmail.com> - 1.28.4-1
- Update to 1.28.4
- Simplify macro usage
- Drop huge ChangeLog file
- Use license macro for the COPYING file
- Tighten library dependencies with the _isa macro
--------------------------------------------------------------------------------
================================================================================
gnome-photos-3.15.91-1.fc22 (FEDORA-2015-3942)
Access, organize and share your photos on GNOME
--------------------------------------------------------------------------------
Update Information:
GNOME Photos 3.15.91 release, together with new version of the gegl library that it now
requires.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 13 2015 Kalev Lember <kalevlember(a)gmail.com> - 3.15.91-1
- Update to 3.15.91
* Wed Feb 25 2015 Richard Hughes <rhughes(a)redhat.com> - 3.15.90-1
- Update to 3.15.90
--------------------------------------------------------------------------------
================================================================================
licq-1.8.2-5.fc22 (FEDORA-2015-3946)
Graphical ICQ client with multiple protocols support
--------------------------------------------------------------------------------
Update Information:
Rebuild for libgloox.so.12
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 14 2015 Pavel Alexeev <Pahan(a)Hubbitus.info> - 1.8.2-5
- Rebuild for libgloox.so.12
--------------------------------------------------------------------------------
================================================================================
mesa-10.5.1-1.20150314.fc22 (FEDORA-2015-3926)
Mesa graphics libraries
--------------------------------------------------------------------------------
Update Information:
10.5.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 14 2015 Igor Gnatenko <i.gnatenko.brain(a)gmail.com> - 10.5.1-1.20150314
- 10.5.1
--------------------------------------------------------------------------------
================================================================================
mingw-librsvg2-2.40.8-1.fc22 (FEDORA-2015-3943)
SVG library based on cairo for MinGW
--------------------------------------------------------------------------------
Update Information:
Update to 2.40.8
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 13 2015 David King <amigadave(a)amigadave.com> - 2.40.8-1
- Update to 2.40.8
- Use license macro for COPYING
- Update URL
--------------------------------------------------------------------------------
================================================================================
ndoutils-2.0.0-8.fc22 (FEDORA-2015-3908)
Stores all configuration and event data from Nagios in a database
--------------------------------------------------------------------------------
Update Information:
missed the F-22 mass rebuild last year
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
openambit-0.3-3.git5f2b784.fc22 (FEDORA-2015-3930)
Open software for the Suunto Ambit(2)
--------------------------------------------------------------------------------
Update Information:
Rebuild (wireshark).
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 8 2015 Sandro Mani <manisandro(a)gmail.com> - 0.3-3.git5f2b784
- Rebuild (wireshark)
--------------------------------------------------------------------------------
================================================================================
phpMyAdmin-4.3.12-1.fc22 (FEDORA-2015-3905)
Handle the administration of MySQL over the World Wide Web
--------------------------------------------------------------------------------
Update Information:
phpMyAdmin 4.3.12.0 (2015-03-14)
================================
- Right-aligned columns have left-aligned header
- PMA_Util::parseEnumSetValues fails on enums with UTF-8 values
- Undefined index savedsearcheswork
- Inline edit of DATE fields with NULL, NULL checkbox is under datepicker
- DROP TABLE/VIEW IF EXISTS are not tracked
- Compatibility with central columns of version 4.4
- Firefox with auth_type to http with multiple server doesn't work anymore
- Views aren't dropped when copying a database
- Incomplete bookmark saving
- SELECT width on relations page
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 14 2015 Robert Scheck <robert(a)fedoraproject.org> 4.3.12-1
- Upgrade to 4.3.12
--------------------------------------------------------------------------------
================================================================================
poedit-1.7.5-1.fc22 (FEDORA-2015-3917)
GUI editor for GNU gettext .po files
--------------------------------------------------------------------------------
Update Information:
New upstream package
New upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 13 2015 Mario Blättermann <mario.blaettermann(a)gmail.com> - 1.7.5-1
- New upstream version
- Add screenshot URL to appdata file, thanks to Wolfgang Stöggl
- Updated German man page
--------------------------------------------------------------------------------
================================================================================
python-docx-0.8.5-2.fc22 (FEDORA-2015-3914)
Create and update Microsoft Word .docx files
--------------------------------------------------------------------------------
Update Information:
Fix dependency requirement.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1194576 - Review Request:python-docx - Lib for creating/updating docx files
https://bugzilla.redhat.com/show_bug.cgi?id=1194576
--------------------------------------------------------------------------------
================================================================================
python-markdown-2.6.1-1.fc22 (FEDORA-2015-3933)
Markdown implementation in Python
--------------------------------------------------------------------------------
Update Information:
Update to version 2.6.1, a bug-fix release.
The (new) yaml option has been removed from the Meta-Data Extension as it was buggy (see
#390).
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 14 2015 Thomas Moschny <thomas.moschny(a)gmx.de> - 2.6.1-1
- Update to 2.6.1.
- Apply updated Python packaging guidelines.
--------------------------------------------------------------------------------
================================================================================
python-msgpack-0.4.6-1.fc22 (FEDORA-2015-3932)
A Python MessagePack (de)serializer
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release. This fixes a data corruption bug. See the [upstream
changelog](https://github.com/msgpack/msgpack-python/blob/master/ChangeLo... for
more details.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 13 2015 Ken Dreyer <ktdreyer(a)ktdreyer.com> - 0.4.6-1
- Update to latest upstream version 0.4.6 (RHBZ #1201568)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1201568 - python-msgpack-0.4.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1201568
--------------------------------------------------------------------------------
================================================================================
rocoto-6.2-1.fc22 (FEDORA-2015-3919)
Expanded properties file parsing for Google Guice
--------------------------------------------------------------------------------
Update Information:
Initial import (#887146).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #887146 - Review Request: rocoto - Expanded properties file parsing for Google
Guice
https://bugzilla.redhat.com/show_bug.cgi?id=887146
--------------------------------------------------------------------------------
================================================================================
spice-html5-0.1.6-1.fc22 (FEDORA-2015-3916)
Pure Javascript SPICE client
--------------------------------------------------------------------------------
Update Information:
Pavel Grunt: Implement file transfer from client to guest
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 13 2015 Jeremy White <jwhite(a)codeweavers.com> 0.1.6-1
- Pavel Grunt: Implement file transfer from client to guest
- Pavel Grunt: Report agent capabilities, handle agent tokens
- Pavel Grunt: Use WheelEvent instead of MouseWheelEvent
- Frantisek Kobzik: Improve error messages
- Report a modern number of tokens
--------------------------------------------------------------------------------
================================================================================
tig-2.1-1.fc22 (FEDORA-2015-3912)
Text-mode interface for the git revision control system
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 12 2015 Jason L Tibbitts III <tibbs(a)math.uh.edu> - 2.1-1
- Update to 2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1186676 - Crash when staging a chunk
https://bugzilla.redhat.com/show_bug.cgi?id=1186676
--------------------------------------------------------------------------------
================================================================================
xen-4.5.0-6.fc22 (FEDORA-2015-3935)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
Additional patch for XSA-98 on arm64
HVM qemu unexpectedly enabling emulated VGA graphics backends [XSA-119, CVE-2015-2152]
Hypervisor memory corruption due to x86 emulator flaw [XSA-123, CVE-2015-2151]
Information leak via internal x86 system device emulation, Information leak through
version information hypercall, fix a typo in xen.fedora.systemd.patch
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 13 2015 Michael Young <m.a.young(a)durham.ac.uk> - 4.5.0-6
- Additional patch for XSA-98 on arm64
* Thu Mar 12 2015 Michael Young <m.a.young(a)durham.ac.uk> - 4.5.0-5
- HVM qemu unexpectedly enabling emulated VGA graphics backends [XSA-119,
CVE-2015-2152] (#1201365)
* Tue Mar 10 2015 Michael Young <m.a.young(a)durham.ac.uk> - 4.5.0-4
- Hypervisor memory corruption due to x86 emulator flaw [XSA-123,
CVE-2015-2151] (#1200398)
* Thu Mar 5 2015 Michael Young <m.a.young(a)durham.ac.uk> - 4.5.0-3
- Information leak via internal x86 system device emulation [XSA-121,
CVE-2015-2044]
- Information leak through version information hypercall [XSA-122,
CVE-2015-2045]
- fix a typo in xen.fedora.systemd.patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1200724 - CVE-2015-2152 xen: HVM qemu unexpectedly enabling emulated VGA
graphics backends (XSA 119)
https://bugzilla.redhat.com/show_bug.cgi?id=1200724
[ 2 ] Bug #1196274 - CVE-2015-2151 xen: hypervisor memory corruption due to x86 emulator
flaw (xsa123)
https://bugzilla.redhat.com/show_bug.cgi?id=1196274
--------------------------------------------------------------------------------