The following Fedora 20 Security updates need testing:
Age URL
38
https://admin.fedoraproject.org/updates/FEDORA-2014-5497/openstack-keysto...
30
https://admin.fedoraproject.org/updates/FEDORA-2014-5897/nrpe-2.15-2.fc20
19
https://admin.fedoraproject.org/updates/FEDORA-2014-6258/smb4k-1.1.2-1.fc20
10
https://admin.fedoraproject.org/updates/FEDORA-2014-6551/chicken-4.8.0.6-...
8
https://admin.fedoraproject.org/updates/FEDORA-2014-6615/drupal7-views-3....
7
https://admin.fedoraproject.org/updates/FEDORA-2014-6687/libgadu-1.12.0-0...
5
https://admin.fedoraproject.org/updates/FEDORA-2014-6705/readline-6.2-9.fc20
3
https://admin.fedoraproject.org/updates/FEDORA-2014-6810/check-mk-1.2.4p2...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6837/mingw-libtiff-4....
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6828/mingw-icu-50.1.2...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6870/mingw-libjpeg-tu...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6825/mingw-pixman-0.3...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6830/mingw-freetype-2...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6820/mingw-readline-6...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6912/mingw-curl-7.37....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6922/qt3-3.3.8b-58.fc20
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6891/gnutls-3.1.25-1....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6895/libtasn1-3.6-1.fc20
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6901/php-doctrine-orm...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-6944/mod_wsgi-3.5-1.fc20
The following Fedora 20 Critical Path updates have yet to be approved:
Age URL
10
https://admin.fedoraproject.org/updates/FEDORA-2014-6568/ibus-1.5.7-2.fc20
8
https://admin.fedoraproject.org/updates/FEDORA-2014-6619/langtable-0.0.24...
8
https://admin.fedoraproject.org/updates/FEDORA-2014-6617/libnl3-3.2.24-3....
5
https://admin.fedoraproject.org/updates/FEDORA-2014-6726/gssdp-0.14.8-1.fc20
3
https://admin.fedoraproject.org/updates/FEDORA-2014-6792/device-mapper-pe...
2
https://admin.fedoraproject.org/updates/FEDORA-2014-6834/firewalld-0.3.10...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6915/openldap-2.4.39-...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6918/python-urlgrabbe...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6895/libtasn1-3.6-1.fc20
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6891/gnutls-3.1.25-1....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-6684/mesa-10.1.4-3.20...
The following builds have been pushed to Fedora 20 updates-testing
0ad-0.0.16-2.fc20
0ad-data-0.0.16-1.fc20
imagefactory-1.1.5-1.fc20
imagefactory-plugins-1.1.5-2.fc20
iris-1.0.0-0.17.20140424git4dcc9f49.fc20
jdns-2.0.0-7.fc20
jreen-1.2.0-2.fc20
mod_wsgi-3.5-1.fc20
nodejs-grunt-0.4.4-3.fc20
perl-AnyEvent-Handle-UDP-0.043-1.fc20
perl-qpid-0.26-3.fc20
php-Raven-0.8.0-3.20140519git2351d97.fc20
python-qpid-0.26-1.fc20
python3-3.3.2-15.fc20
qpid-dispatch-0.2-3.fc20
resiprocate-1.9.7-9.fc20
xpdf-3.04-1.fc20
Details about builds:
================================================================================
0ad-0.0.16-2.fc20 (FEDORA-2014-6940)
Cross-Platform RTS Game of Ancient Warfare
--------------------------------------------------------------------------------
Update Information:
New Release: 0 A.D. Alpha 16 Patañjali
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 23 2014 Petr Machata <pmachata(a)redhat.com> - 0.0.16-2
- Rebuild for boost 1.55.0
* Sat May 17 2014 Kalev Lember <kalevlember(a)gmail.com> - 0.0.16-1
- Update to latest upstream release
* Mon May 5 2014 pcpa <paulo.cesar.pereira.de.andrade(a)gmail.com> - 0.0.15-5
- Rebuild for newer enet
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1101618 - 0.0.16-2 Latest Alpha Not In Fedora 20
https://bugzilla.redhat.com/show_bug.cgi?id=1101618
--------------------------------------------------------------------------------
================================================================================
0ad-data-0.0.16-1.fc20 (FEDORA-2014-6940)
The Data Files for 0 AD
--------------------------------------------------------------------------------
Update Information:
New Release: 0 A.D. Alpha 16 Patañjali
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 17 2014 Kalev Lember <kalevlember(a)gmail.com> - 0.0.16-1
- Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1101618 - 0.0.16-2 Latest Alpha Not In Fedora 20
https://bugzilla.redhat.com/show_bug.cgi?id=1101618
--------------------------------------------------------------------------------
================================================================================
imagefactory-1.1.5-1.fc20 (FEDORA-2014-6932)
System image generation tool
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream 1.1.5 release of imagefactory and the associated imagefactory-plugins
packages
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 6 2014 Ian McLeod <imcleod(a)redhat.com> - 1.1.5-1
- Rebase with upstream
- Improved CLI parameter passing support
--------------------------------------------------------------------------------
================================================================================
imagefactory-plugins-1.1.5-2.fc20 (FEDORA-2014-6931)
Default plugins for the Image Factory system image generation tool
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream 1.1.5 release
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 6 2014 Ian McLeod <imcleod(a)redhat.com> - 1.1.5-2
- Rebase with upstream
- Improved parameters parsing that couples with improved parameters CLI support in core
imagefactory
- Add support for "offline" ICICLE generation in TinMan
- Rework IndirectionCloud to work with recent Oz releases
--------------------------------------------------------------------------------
================================================================================
iris-1.0.0-0.17.20140424git4dcc9f49.fc20 (FEDORA-2014-6934)
A library for working with the XMPP/Jabber protocol
--------------------------------------------------------------------------------
Update Information:
Unbundle jdns (from iris), and update to latest stable bugfix release of jreen.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 24 2014 Rex Dieter <rdieter(a)fedoraproject.org>
1.0.0-0.17.20140424git4dcc9f49
- 20140424 snapshot, use system qjdns (#1087129)
* Sat Nov 23 2013 Rex Dieter <rdieter(a)fedoraproject.org> 1.0.0-0.16.20131107git
- 20131107 snapshot
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1084397 - Review Request: jdns - A simple DNS queries library
https://bugzilla.redhat.com/show_bug.cgi?id=1084397
[ 2 ] Bug #1097347 - Please update jreen to 1.2.0
https://bugzilla.redhat.com/show_bug.cgi?id=1097347
--------------------------------------------------------------------------------
================================================================================
jdns-2.0.0-7.fc20 (FEDORA-2014-6934)
A simple DNS queries library
--------------------------------------------------------------------------------
Update Information:
Unbundle jdns (from iris), and update to latest stable bugfix release of jreen.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1084397 - Review Request: jdns - A simple DNS queries library
https://bugzilla.redhat.com/show_bug.cgi?id=1084397
[ 2 ] Bug #1097347 - Please update jreen to 1.2.0
https://bugzilla.redhat.com/show_bug.cgi?id=1097347
--------------------------------------------------------------------------------
================================================================================
jreen-1.2.0-2.fc20 (FEDORA-2014-6934)
Qt4 XMPP Library
--------------------------------------------------------------------------------
Update Information:
Unbundle jdns (from iris), and update to latest stable bugfix release of jreen.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 13 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.2.0-2
- add Qt5 support, qt5/qt5-devel subpkgs
* Tue May 13 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.2.0-1
- jreen-1.2.0 (#1097347)
* Fri Apr 25 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.1.1-5
- fix build with recent cmake/moc handling
* Fri Apr 25 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.1.1-4
- rebuild (qjdns)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1084397 - Review Request: jdns - A simple DNS queries library
https://bugzilla.redhat.com/show_bug.cgi?id=1084397
[ 2 ] Bug #1097347 - Please update jreen to 1.2.0
https://bugzilla.redhat.com/show_bug.cgi?id=1097347
--------------------------------------------------------------------------------
================================================================================
mod_wsgi-3.5-1.fc20 (FEDORA-2014-6944)
A WSGI interface for Python web applications in Apache
--------------------------------------------------------------------------------
Update Information:
http://modwsgi.readthedocs.org/en/develop/release-notes/version-3.5.html
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 29 2014 Luke Macken <lmacken(a)redhat.com> - 3.5-1
- Update to 3.5 to fix CVE-2014-0240 (#1101863)
- Remove all of the patches, which have been applied upstream
- Update source URL for new the GitHub upstream
* Wed May 28 2014 Joe Orton <jorton(a)redhat.com> - 3.4-14
- rebuild for Python 3.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1101863 - CVE-2014-0240 mod_wsgi: possible privilege escalation in setuid()
failure scenarios
https://bugzilla.redhat.com/show_bug.cgi?id=1101863
[ 2 ] Bug #1101873 - CVE-2014-0242 mod_wsgi: information leak
https://bugzilla.redhat.com/show_bug.cgi?id=1101873
--------------------------------------------------------------------------------
================================================================================
nodejs-grunt-0.4.4-3.fc20 (FEDORA-2014-6929)
Grunt is a JavaScript library used for automation and running tasks
--------------------------------------------------------------------------------
Update Information:
This update resolves a bug that results in "_ is not defined" errors when using
templates.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2014 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 0.4.4-3
- apply patch to fix "_ is not defined" errors when using templates
--------------------------------------------------------------------------------
================================================================================
perl-AnyEvent-Handle-UDP-0.043-1.fc20 (FEDORA-2014-6937)
Client/server UDP handles for AnyEvent
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1103123 - Review Request: perl-AnyEvent-Handle-UDP - Client/server UDP
handles for AnyEvent
https://bugzilla.redhat.com/show_bug.cgi?id=1103123
--------------------------------------------------------------------------------
================================================================================
perl-qpid-0.26-3.fc20 (FEDORA-2014-6936)
Perl bindings for the Qpid messaging framework
--------------------------------------------------------------------------------
Update Information:
Updated the requires to use virtual packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.26-3
- Updated the requires to use virtual packages.
* Tue Feb 25 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.26-2
- QPID-5556: Fix top level Perl packages.
* Mon Feb 24 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.26-1
- Rebased on Qpid 0.26.
- Re-enabled building on ARM.
--------------------------------------------------------------------------------
================================================================================
php-Raven-0.8.0-3.20140519git2351d97.fc20 (FEDORA-2014-6946)
A PHP client for Sentry
--------------------------------------------------------------------------------
Update Information:
Updated to latest snapshot (commit 2351d97c862f02343e5465d550df68bd9632cad9; 2014-05-19)
Changes:
https://github.com/getsentry/raven-php/compare/dac9333...2351d97
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> -
0.8.0-3.20140519git2351d97
- Updated to latest snapshot
- Removed max PHPUnit dependency
--------------------------------------------------------------------------------
================================================================================
python-qpid-0.26-1.fc20 (FEDORA-2014-6939)
Python client library for AMQP
--------------------------------------------------------------------------------
Update Information:
Rebased on Qpid 0.26.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.26-1
- Rebased on Qpid 0.26.
--------------------------------------------------------------------------------
================================================================================
python3-3.3.2-15.fc20 (FEDORA-2014-6926)
Version 3 of the Python programming language aka Python 3000
--------------------------------------------------------------------------------
Update Information:
Fix multilib with python-devel
Fix tests with SQLite >= 3.8.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2014 Miro Hrončok <mhroncok(a)redhat.com> - 3.3.2-15
- In config script, use uname -m to write the arch
* Thu May 29 2014 Miro Hrončok <mhroncok(a)redhat.com> - 3.3.2-14
- Forward arguments to the arch specific config script
Resolves: rhbz#1102683
* Thu May 29 2014 Matej Stuchlik <mstuchli(a)redhat.com> - 3.3.2-13
- Fix tests with SQLite >= 3.8.4
* Thu May 29 2014 Miro Hrončok <mhroncok(a)redhat.com> - 3.3.2-12
- Fix multilib dependencies.
- Rename python3.Xm-config script to arch specific.
Resolves: rhbz#1091815
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1091815 - python3.i686 and python3.x86_64 don't coexist.
https://bugzilla.redhat.com/show_bug.cgi?id=1091815
--------------------------------------------------------------------------------
================================================================================
qpid-dispatch-0.2-3.fc20 (FEDORA-2014-6933)
Dispatch router for Qpid
--------------------------------------------------------------------------------
Update Information:
Fixed build type to be RelWithDebInfo
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.2-3
- Fixed build type to be RelWithDebInfo
--------------------------------------------------------------------------------
================================================================================
resiprocate-1.9.7-9.fc20 (FEDORA-2014-6941)
SIP and TURN stacks, with SIP proxy and TURN server implementations
--------------------------------------------------------------------------------
Update Information:
Obsoletes resiprocate-b2bua as discussed by FESCo in the decision noted here:
https://fedorahosted.org/fesco/ticket/1304
New upstream release, adds WebRTC support and many fixes.
https://fedorahosted.org/fesco/ticket/1304
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2014 Daniel Pocock <daniel(a)pocock.pro> - 1.9.7-9
- New upstream release
* Thu May 22 2014 Petr Machata <pmachata(a)redhat.com> - 1.9.6-8
- Rebuild for boost 1.55.0
* Wed Apr 30 2014 Daniel Pocock <daniel(a)pocock.pro> - 1.9.6-7
- New upstream release
* Sun Mar 9 2014 Daniel Pocock <daniel(a)pocock.com.au> - 1.9.2-6
- New upstream release
* Fri Feb 21 2014 Daniel Pocock <daniel(a)pocock.com.au> - 1.9.1-5
- New upstream release
* Mon Feb 10 2014 Daniel Pocock <daniel(a)pocock.com.au> - 1.9.0-4
- New upstream release
--------------------------------------------------------------------------------
================================================================================
xpdf-3.04-1.fc20 (FEDORA-2014-6942)
A PDF file viewer for the X Window System
--------------------------------------------------------------------------------
Update Information:
Update xpdf to 3.04. Use motif (instead of lesstif) on Fedora.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 29 2014 Tom Callaway <spot(a)fedoraproject.org> - 1:3.04-1
- update to 3.04
- update all patches, langpacks
- use motif instead of lesstif where possible
- fix pdftopng to install (not in poppler right now)
--------------------------------------------------------------------------------