The following Fedora 22 Security updates need testing:
Age URL
378
https://bodhi.fedoraproject.org/updates/FEDORA-2015-5878
echoping-6.1-0.beta.r434svn.1.fc22
327
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9185
ceph-deploy-1.5.25-1.fc22
260
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12781
python-kdcproxy-0.3.2-1.fc22
214
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16239 nagios-4.0.8-1.fc22
203
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2d37e7dacf
openstack-swift-2.2.0-6.fc22
172
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9039c25f1d
miniupnpc-1.9-6.fc22
154
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
154
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
136
https://bodhi.fedoraproject.org/updates/FEDORA-2015-3a5cebb105
ImageMagick-6.9.2.7-1.fc22
121
https://bodhi.fedoraproject.org/updates/FEDORA-2015-b9e4c97ff1 sos-3.2-2.fc22
95
https://bodhi.fedoraproject.org/updates/FEDORA-2015-f683150aa0
thttpd-2.25b-37.fc22
83
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0
xulrunner-44.0-1.fc22
71
https://bodhi.fedoraproject.org/updates/FEDORA-2016-560802e52b
xdelta-3.0.7-7.fc22
60
https://bodhi.fedoraproject.org/updates/FEDORA-2016-24d134e494
mingw-nsis-2.50-1.fc22
52
https://bodhi.fedoraproject.org/updates/FEDORA-2016-338a7e9925
graphite2-1.3.6-1.fc22
48
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3cbe9ad765
python-pygments-2.1.3-1.fc22
43
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7b40eb9e29
libecap-1.0.0-1.fc22 squid-3.5.10-1.fc22
42
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5f44e89fe0
python-tgcaptcha2-0.3.1-1.fc22
22
https://bodhi.fedoraproject.org/updates/FEDORA-2016-250042b8a6
xstream-1.4.9-1.fc22
16
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7eb5caa94d
parallel-20160222-1.fc22
16
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d4b68e412
imlib2-1.4.8-1.fc22
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d19ed2f80d
squid-3.5.10-2.fc22
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-96bfd9e873
libtasn1-4.8-1.fc22
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a028331ebc
poppler-0.30.0-4.fc22
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0517fab538
keepassx-0.4.4-1.fc22
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3c4e438fc8
mingw-poppler-0.30.0-4.fc22
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-94582896cd
firefox-45.0.2-1.fc22
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-59c5e405e3
golang-1.5.4-1.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-28ff51a3f5
ansible1.9-1.9.6-1.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-85e9f2e3cd
mod_nss-1.0.11-7.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-fc1cc33e05
gsi-openssh-6.9p1-8.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ac1dff014c
webkitgtk4-2.12.1-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-75063477ca xen-4.5.3-2.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ab154c56dd
ansible-2.0.2.0-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-373c063e79
kernel-4.4.8-200.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ff9e0c574c
java-1.8.0-openjdk-1.8.0.91-1.b14.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5a9313e4b4
perl-5.20.3-330.fc22
The following Fedora 22 Critical Path updates have yet to be approved:
Age URL
253
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13210 yum-3.4.3-508.fc22
172
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2123de044f
libgphoto2-2.5.8-1.fc22
154
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6
libpng-1.6.16-5.fc22
154
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4
libpng-1.6.16-4.fc22
83
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0
xulrunner-44.0-1.fc22
78
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3fce30d64
mobile-broadband-provider-info-1.20151214-1.fc22
60
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ce419c9cab
selinux-policy-3.13.1-128.28.fc22
49
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4d5434d82f parted-3.2-16.fc22
36
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d4e6e32c1c
upower-0.99.3-2.fc22
16
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d4b68e412
imlib2-1.4.8-1.fc22
12
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1576899f4e
gnome-settings-daemon-3.16.5-1.fc22
12
https://bodhi.fedoraproject.org/updates/FEDORA-2016-922ad45d24
gcc-python-plugin-0.14-4.3.fc22 gcc-5.3.1-6.fc22
12
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9097b02af0
vim-7.4.1718-1.fc22
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a028331ebc
poppler-0.30.0-4.fc22
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2cdfd91ad1
webkitgtk3-2.4.11-1.fc22
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a18dc43d88
control-center-3.16.4-1.fc22
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-96bfd9e873
libtasn1-4.8-1.fc22
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-027faabac4
libreport-2.6.4-2.fc22 abrt-2.6.1-11.fc22
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-94582896cd
firefox-45.0.2-1.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-695843b69a
hwdata-0.288-1.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1122e53c5a expat-2.1.1-1.fc22
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-af1f30412b
pygtk2-2.24.0-14.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-89e3334638
gnome-shell-3.16.4-2.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5a9313e4b4
perl-5.20.3-330.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-83b47a28ce
wavpack-4.80.0-1.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-373c063e79
kernel-4.4.8-200.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-41df7ccbc8
lldpad-1.0.1-4.git036e314.fc22
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-476f32d4ec
evolution-ews-3.16.5-2.fc22 libsoup-2.50.0-2.fc22
The following builds have been pushed to Fedora 22 updates-testing
R-qtl-1.39.5-1.fc22
amsynth-1.6.4-1.fc22
ansible-2.0.2.0-1.fc22
apigen-4.1.2-2.fc22
armadillo-6.700.4-1.fc22
clementine-1.3.1-1.fc22
composer-1.0.2-1.fc22
conntrack-tools-1.4.3-1.fc22
davix-0.6.3-1.fc22
dejagnu-1.6-1.fc22
dhcp-forwarder-0.11-1.fc22
dnsperf-2.1.0.0-1.fc22
evolution-ews-3.16.5-2.fc22
fedfind-2.4.5-1.fc22
flex-2.6.0-1.fc22
gcstar-1.7.1-1.fc22
gnome-shell-3.16.4-2.fc22
golang-github-go-tomb-tomb-0-0.6.git14b3d72.fc22
golang-github-smartystreets-assertions-1.6.0-0.1.git287b434.fc22
golang-github-smartystreets-goconvey-1.6.1-0.1.gitbf58a9a.fc22
ibus-typing-booster-1.4.1-1.fc22
inxi-2.3.0-1.fc22
java-1.8.0-openjdk-1.8.0.91-1.b14.fc22
julietaula-montserrat-fonts-20151221-5.fc22
kernel-4.4.8-200.fc22
ldns-1.6.17-18.fc22
libkml-1.3.0-2.fc22
libsoup-2.50.0-2.fc22
liveusb-creator-3.93.1-1.fc22
lldpad-1.0.1-4.git036e314.fc22
mingw-webkitgtk3-2.4.11-1.fc22
perl-5.20.3-330.fc22
perl-Config-General-2.61-1.fc22
perl-File-Touch-0.11-1.fc22
perl-Image-ExifTool-10.15-1.fc22
perl-Inline-C-0.76-3.fc22
php-drush-drush-6.2.0-6.fc22
php-horde-Horde-Css-Parser-1.0.10-1.fc22
php-kdyby-events-2.4.1-1.fc22
php-league-climate-3.2.1-1.fc22
php-pecl-apcu-4.0.11-1.fc22
php-phpmd-PHP-PMD-2.4.3-1.fc22
py3status-2.9-1.fc22
pythia8-8.2.15-2.fc22
python-debian-0.1.27-3.fc22
python-justbytes-0.7-1.fc22
python-ly-0.9.4-1.fc22
python-wikitcms-2.1.6-1.fc22
rasdaemon-0.5.8-2.fc22
recoll-1.21.6-1.fc22
rkhunter-1.4.2-11.fc22
roundcubemail-1.1.5-1.fc22
rubygem-gettext-3.2.2-1.fc22
sssd-1.13.4-1.fc22
tellico-2.3.11-1.fc22
tiled-0.16.0-1.fc22
tito-0.6.6-1.fc22
trac-mercurial-plugin-1.0.0.4-1.fc22
wavpack-4.80.0-1.fc22
xen-4.5.3-2.fc22
youtube-dl-2016.04.13-2.fc22
zanata-client-3.8.4-1.fc22
zanata-python-client-1.5.0-2.fc22
Details about builds:
================================================================================
R-qtl-1.39.5-1.fc22 (FEDORA-2016-60adf1a1bc)
Tools for analyzing QTL experiments
--------------------------------------------------------------------------------
Update Information:
Version 1.39, 2016-03-04 Major changes: * Fixed a bug in scantwo() when using
weights with multiple phenotypes when some of the phenotypes contain missing
values. (This is the same as the bug fix in scanone in version 1.38. Reminder
of important principle: when you find a bug, look for other possible
instances of the same bug.) * Changed the color scheme for plot.scantwo and
plot.rf from red/blue rainbow to Viridis (see Option D at
https://bids.github.io/colormap/) The plot.rf function has a new argument
col.scheme; if you want to use the old red/blue scheme, use
col.scheme="redblue". * Fixed a bug in cim() that was causing a segmentation
fault. Minor changes: * Added a function table2map() for converting a data
frame with marker positions (chr, position) into a map object. * Added a bit
more detail in the help file for readMWril().
--------------------------------------------------------------------------------
================================================================================
amsynth-1.6.4-1.fc22 (FEDORA-2016-aa7829fccf)
A classic synthesizer with dual oscillators
--------------------------------------------------------------------------------
Update Information:
Update to new maintenance upstream
--------------------------------------------------------------------------------
================================================================================
ansible-2.0.2.0-1.fc22 (FEDORA-2016-ab154c56dd)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.2.0.
https://github.com/ansible/ansible/blob/stable-2.0/CHANGELOG.md
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1322925 - CVE-2016-3096 ansible: Code execution vulnerability in
lxc_container
https://bugzilla.redhat.com/show_bug.cgi?id=1322925
--------------------------------------------------------------------------------
================================================================================
apigen-4.1.2-2.fc22 (FEDORA-2016-bab63f328a)
PHP source code API generator
--------------------------------------------------------------------------------
Update Information:
Smart and Readable Documentation for your PHP project.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1277504 - Review Request: apigen - PHP source code API generator
https://bugzilla.redhat.com/show_bug.cgi?id=1277504
--------------------------------------------------------------------------------
================================================================================
armadillo-6.700.4-1.fc22 (FEDORA-2016-d8d106de47)
Fast C++ matrix library with interfaces to LAPACK and ATLAS
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release. Changes regarding the previous stable
version: * added `logmat()` for calculating the matrix logarithm * added
`regspace()` for generating vectors with regularly spaced elements * added
`logspace()` for generating vectors with logarithmically spaced elements *
added `approx_equal()` for determining approximate equality * added `trapz()`
for numerical integration * expanded `.save()` and `.load()` with
`hdf5_binary_trans` file type, to save/load data with columns transposed to rows
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1320978 - armadillo-6.700.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1320978
--------------------------------------------------------------------------------
================================================================================
clementine-1.3.1-1.fc22 (FEDORA-2016-5d038d82e4)
A music player and library organizer
--------------------------------------------------------------------------------
Update Information:
Clementine 1.3.1 release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1328638 - clementine-1.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1328638
--------------------------------------------------------------------------------
================================================================================
composer-1.0.2-1.fc22 (FEDORA-2016-751bacef13)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.2** * Fixed regression in 1.0.1 on systems with
mbstring.func_overload enabled * Fixed regression in 1.0.1 that made dev
packages update to the latest reference even if not whitelisted in a partial
update * Fixed init command ignoring the COMPOSER env var for choosing the
json file name * Fixed error reporting bug when the dependency resolution
fails * Fixed handling of $ sign in composer config command in some cases it
could corrupt the json file ---- **Version 1.0.1** * Fixed URL updating
when a package's URL changes, composer.lock now contains the right URL including
correct reference * Fixed URL updating of the origin git remote as well for
packages installed as git clone * Fixed binary .bat files generated from linux
being incompatible with windows cmd * Fixed handling of paths with trailing
slashes in path repository * Fixed create-project not using platform config when
selecting a package * Fixed self-update not showing the channel it uses to
perform the update * Fixed file downloads not failing loudly when the content
does not match the Content-Length header * Fixed secure-http detecting some
malformed URLs as insecure * Updated CA bundle Notice system CA is always
preferred, bundled copy is only used as a last chance fallback.
--------------------------------------------------------------------------------
================================================================================
conntrack-tools-1.4.3-1.fc22 (FEDORA-2016-0e5c418d12)
Manipulate netfilter connection tracking table and run High Availability
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1261220 1.4.3 is available
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1261220 - conntrack-tools-1.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1261220
--------------------------------------------------------------------------------
================================================================================
davix-0.6.3-1.fc22 (FEDORA-2016-540767061d)
Toolkit for Http-based file management
--------------------------------------------------------------------------------
Update Information:
davix 0.6.3 upstream release
--------------------------------------------------------------------------------
================================================================================
dejagnu-1.6-1.fc22 (FEDORA-2016-d1aed6a5e3)
A front end for testing other programs
--------------------------------------------------------------------------------
Update Information:
Rebase to new upstream version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1327685 - dejagnu-1.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1327685
--------------------------------------------------------------------------------
================================================================================
dhcp-forwarder-0.11-1.fc22 (FEDORA-2016-674d6359d8)
DHCP relay agent
--------------------------------------------------------------------------------
Update Information:
Upgrade to 0.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #856667 - Introduce new systemd-rpm macros in dhcp-forwarder spec file
https://bugzilla.redhat.com/show_bug.cgi?id=856667
--------------------------------------------------------------------------------
================================================================================
dnsperf-2.1.0.0-1.fc22 (FEDORA-2016-b396fd5925)
Benchmarking authorative and recursing DNS servers
--------------------------------------------------------------------------------
Update Information:
Updated to 2.1.0.0 (rhbz#1305929) which adds -C option to resperf and the -T
option to dnsperf
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1305929 - New version: dnsperf 2.1.0.0
https://bugzilla.redhat.com/show_bug.cgi?id=1305929
--------------------------------------------------------------------------------
================================================================================
evolution-ews-3.16.5-2.fc22 (FEDORA-2016-476f32d4ec)
Evolution extension for Exchange Web Services
--------------------------------------------------------------------------------
Update Information:
Fixes a bug in the NTLM authentication, which was uncovered with the latest
samba-winbind-clients update. This bug could prevent login to Exchange Web
Services (EWS) accounts (usually used by the evolution-ews package).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1327072 - NTLM auth failure with latest samba
https://bugzilla.redhat.com/show_bug.cgi?id=1327072
--------------------------------------------------------------------------------
================================================================================
fedfind-2.4.5-1.fc22 (FEDORA-2016-21b3c07212)
Fedora Finder finds Fedora
--------------------------------------------------------------------------------
Update Information:
This update provides a new release of fedfind, which improves the `pdc_query`
function and adds a `get_weight` function to the helpers module, both needed for
the new [fedora_nightlies](https://pagure.io/fedora_nightlies) project.
--------------------------------------------------------------------------------
================================================================================
flex-2.6.0-1.fc22 (FEDORA-2016-57fa638dd8)
A tool for creating scanners (text pattern recognizers)
--------------------------------------------------------------------------------
Update Information:
Rebase to 2.6.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1281976 - flex-2.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1281976
--------------------------------------------------------------------------------
================================================================================
gcstar-1.7.1-1.fc22 (FEDORA-2016-a2cb362ee7)
Personal collections manager
--------------------------------------------------------------------------------
Update Information:
This update provides gcstar 1.7.1, which brings a number of improvements: *
When generating statistics, they can be grouped per dates. * Export to GCstar
Viewer generates a collection that loads faster in image mode * Updated
languages * Bugs fixes
--------------------------------------------------------------------------------
================================================================================
gnome-shell-3.16.4-2.fc22 (FEDORA-2016-89e3334638)
Window management and application launching for GNOME
--------------------------------------------------------------------------------
Update Information:
Backport memory leak fix
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1327856 - Add upstream patch for memory leak
https://bugzilla.redhat.com/show_bug.cgi?id=1327856
--------------------------------------------------------------------------------
================================================================================
golang-github-go-tomb-tomb-0-0.6.git14b3d72.fc22 (FEDORA-2016-b76e8ae3bf)
Helps with clean goroutine termination in the Go language
--------------------------------------------------------------------------------
Update Information:
Extend with gopkg.in/tomb.v1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1249041 - Tracker for golang-github-go-tomb-tomb
https://bugzilla.redhat.com/show_bug.cgi?id=1249041
--------------------------------------------------------------------------------
================================================================================
golang-github-smartystreets-assertions-1.6.0-0.1.git287b434.fc22
(FEDORA-2016-5b5f2b782b)
Fluent assertion-style functions
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 287b4346dc4e71a038c346375a9d572453bc469b Polish the spec file
---- Update for mongo-tools ---- internal packages can not be provided since
go-1.5 Update spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250509 - Tracker for golang-github-smartystreets-assertions
https://bugzilla.redhat.com/show_bug.cgi?id=1250509
--------------------------------------------------------------------------------
================================================================================
golang-github-smartystreets-goconvey-1.6.1-0.1.gitbf58a9a.fc22 (FEDORA-2016-1a71c91bdc)
Behavioral testing in the browser, integrates with go test
--------------------------------------------------------------------------------
Update Information:
Bump to upstream bf58a9a1291224109919756b4dcc469c670cc7e4 Polish the spec file
---- Update for mongo-tools ---- Update spec file to spec-2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250511 - Tracker for golang-github-smartystreets-goconvey
https://bugzilla.redhat.com/show_bug.cgi?id=1250511
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-1.4.1-1.fc22 (FEDORA-2016-652104a1bb)
A typing booster engine for the IBus platform
--------------------------------------------------------------------------------
Update Information:
update to 1.4.1; Add property menu to choose the current preedit input method
--------------------------------------------------------------------------------
================================================================================
inxi-2.3.0-1.fc22 (FEDORA-2016-8a5ceb9743)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.0. ---- Update to 2.2.38.
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-1.8.0.91-1.b14.fc22 (FEDORA-2016-ff9e0c574c)
OpenJDK Runtime Environment
--------------------------------------------------------------------------------
Update Information:
Updated to security u91
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1325423
https://bugzilla.redhat.com/show_bug.cgi?id=1325423
--------------------------------------------------------------------------------
================================================================================
julietaula-montserrat-fonts-20151221-5.fc22 (FEDORA-2016-1ea698f52c)
Sans-serif typeface created by Julieta Ulanovsky
--------------------------------------------------------------------------------
Update Information:
Improve appdata support for applications like Gnome Software
--------------------------------------------------------------------------------
================================================================================
kernel-4.4.8-200.fc22 (FEDORA-2016-373c063e79)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.4.8 update contains a number of important fixes across the tree ---- The
4.4.7 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1323956 - CVE-2016-3961 xsa174 xen: hugetlbfs use may crash PV Linux guests
(XSA-174)
https://bugzilla.redhat.com/show_bug.cgi?id=1323956
[ 2 ] Bug #1328478 - CVE-2016-3955 Kernel: usbip: buffer overflow by trusting length of
incoming packets
https://bugzilla.redhat.com/show_bug.cgi?id=1328478
[ 3 ] Bug #1324749 - CVE-2016-3672 kernel: unlimiting the stack disables ASLR
https://bugzilla.redhat.com/show_bug.cgi?id=1324749
[ 4 ] Bug #1323577 - CVE-2015-8839 kernel: ext4 filesystem page fault race condition
with fallocate call.
https://bugzilla.redhat.com/show_bug.cgi?id=1323577
[ 5 ] Bug #1324782 - CVE-2016-3951 kernel: crash on invalid USB device descriptors
(usbnet driver)
https://bugzilla.redhat.com/show_bug.cgi?id=1324782
--------------------------------------------------------------------------------
================================================================================
ldns-1.6.17-18.fc22 (FEDORA-2016-f7d4067417)
Low-level DNS(SEC) library with API
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1190724 Missing dependency - openssl-devel
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1190724 - Missing dependency - openssl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=1190724
--------------------------------------------------------------------------------
================================================================================
libkml-1.3.0-2.fc22 (FEDORA-2016-37e9302a4c)
Reference implementation of OGC KML 2.2
--------------------------------------------------------------------------------
Update Information:
Revive the libkml package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1324367 - Review Request: libkml - Reference implementation of OGC KML 2.2
https://bugzilla.redhat.com/show_bug.cgi?id=1324367
--------------------------------------------------------------------------------
================================================================================
libsoup-2.50.0-2.fc22 (FEDORA-2016-476f32d4ec)
Soup, an HTTP library implementation
--------------------------------------------------------------------------------
Update Information:
Fixes a bug in the NTLM authentication, which was uncovered with the latest
samba-winbind-clients update. This bug could prevent login to Exchange Web
Services (EWS) accounts (usually used by the evolution-ews package).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1327072 - NTLM auth failure with latest samba
https://bugzilla.redhat.com/show_bug.cgi?id=1327072
--------------------------------------------------------------------------------
================================================================================
liveusb-creator-3.93.1-1.fc22 (FEDORA-2016-77e613d54d)
Fedora Media Writer
--------------------------------------------------------------------------------
Update Information:
Updated to another upstream pre-release
--------------------------------------------------------------------------------
================================================================================
lldpad-1.0.1-4.git036e314.fc22 (FEDORA-2016-41df7ccbc8)
Intel LLDP Agent
--------------------------------------------------------------------------------
Update Information:
Update F22 and F23 to upstream v1.0.1-26-g036e314 by syncing with rawhide
packages, to satisfy a request for upstream fixes.
--------------------------------------------------------------------------------
================================================================================
mingw-webkitgtk3-2.4.11-1.fc22 (FEDORA-2016-900b128f63)
MinGW Windows GTK+ Web content engine library
--------------------------------------------------------------------------------
Update Information:
MinGW build of webkitgtk 2.4.11 release. Notably, this build once again includes
binary packages for mingw64, in addition to mingw32.
--------------------------------------------------------------------------------
================================================================================
perl-5.20.3-330.fc22 (FEDORA-2016-5a9313e4b4)
Practical Extraction and Report Language
--------------------------------------------------------------------------------
Update Information:
This release fixes CVE-2015-8853 (regexp matching hangs indefinitely on illegal
UTF-8 input).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1329106 - CVE-2015-8853 perl: regexp matching hangs indefinitely on illegal
UTF-8 input
https://bugzilla.redhat.com/show_bug.cgi?id=1329106
--------------------------------------------------------------------------------
================================================================================
perl-Config-General-2.61-1.fc22 (FEDORA-2016-2b8e783097)
Generic configuration module for Perl
--------------------------------------------------------------------------------
Update Information:
Updated to upstream 2.61
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1328283 - perl-Config-General-2.61 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1328283
--------------------------------------------------------------------------------
================================================================================
perl-File-Touch-0.11-1.fc22 (FEDORA-2016-c2ba71482e)
Update access, modification timestamps, creating nonexistent files
--------------------------------------------------------------------------------
Update Information:
New upstream release: 0.11 ---- New upstream release: 0.10.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1322442 - Upgrade perl-File-Touch to 0.11
https://bugzilla.redhat.com/show_bug.cgi?id=1322442
[ 2 ] Bug #1285407 - Upgrade perl-File-Touch to 0.10
https://bugzilla.redhat.com/show_bug.cgi?id=1285407
--------------------------------------------------------------------------------
================================================================================
perl-Image-ExifTool-10.15-1.fc22 (FEDORA-2016-e1f1b5ca9f)
Utility for reading and writing image meta info
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release - 10.15
--------------------------------------------------------------------------------
================================================================================
perl-Inline-C-0.76-3.fc22 (FEDORA-2016-bd2d156a04)
Write Perl subroutines in C
--------------------------------------------------------------------------------
Update Information:
This release adds missing dependencies required for the Inline::C to work.
--------------------------------------------------------------------------------
================================================================================
php-drush-drush-6.2.0-6.fc22 (FEDORA-2016-7071475513)
Command line shell and Unix scripting interface for Drupal
--------------------------------------------------------------------------------
Update Information:
Updates the `/usr/bin/drush` command to search for `php` bin (i.e. `which php`)
rather than `php-cli` bin (i.e. `which php-cli`).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Css-Parser-1.0.10-1.fc22 (FEDORA-2016-17e98a1da4)
Horde CSS Parser
--------------------------------------------------------------------------------
Update Information:
**Horde_Css_Parser 1.0.10** * [jan] Fix upstream regression causing infite
loops with empty CSS documents (Bug #14318).
--------------------------------------------------------------------------------
================================================================================
php-kdyby-events-2.4.1-1.fc22 (FEDORA-2016-6d0126a045)
Events for Nette Framework
--------------------------------------------------------------------------------
Update Information:
**Release 2.4.1** * Moved aliases hack to aliases.php and removed eval. by
Zemistr * Fixed removing listeners with aliased method name by brabijan *
DI: Ignore accessors in autowireEvents by matej21 * Add namespace to events
in LifeCycleEvent * Fixed duplicate service creation using alias in Nette 2.3
by richard-ejem * Panel: fixed callback typehint by matej21 & klimesf *
Drop PHP 5.3 compatibility * Fix #95 compatibility with nette/di v2.4; thx
enumag * Fix #87 removeEventListener(): fixed emptying list of sorted events;
thx matej21
--------------------------------------------------------------------------------
================================================================================
php-league-climate-3.2.1-1.fc22 (FEDORA-2016-d127f0584e)
Allows you to easily output colored text, special formats, and more
--------------------------------------------------------------------------------
Update Information:
If you���re running PHP from the command line, CLImate is your new best bud.
CLImate allows you to easily output colored text, special formatting, and more.
It makes output to the terminal clearer and debugging a lot simpler.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1326169 - Review Request: php-league-climate - Allows you to easily output
colored text, special formats, and more
https://bugzilla.redhat.com/show_bug.cgi?id=1326169
--------------------------------------------------------------------------------
================================================================================
php-pecl-apcu-4.0.11-1.fc22 (FEDORA-2016-a65ba34786)
APC User Cache
--------------------------------------------------------------------------------
Update Information:
**Version 4.0.11** - fix #176 segfault when apc.preload_path contains bad data
- fix bad data used in test suite
--------------------------------------------------------------------------------
================================================================================
php-phpmd-PHP-PMD-2.4.3-1.fc22 (FEDORA-2016-461d312a64)
PHPMD - PHP Mess Detector
--------------------------------------------------------------------------------
Update Information:
Upstream version 2.4.3 (no changelog)
--------------------------------------------------------------------------------
================================================================================
py3status-2.9-1.fc22 (FEDORA-2016-355cbbbab9)
An extensible i3status wrapper written in python
--------------------------------------------------------------------------------
Update Information:
* Upgrade to new upstream version * Use python3 as default
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1282483 - py3status: Build with python3
https://bugzilla.redhat.com/show_bug.cgi?id=1282483
[ 2 ] Bug #1296512 - py3status-2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1296512
--------------------------------------------------------------------------------
================================================================================
pythia8-8.2.15-2.fc22 (FEDORA-2016-d97cf2c03f)
Pythia Event Generator for High Energy Physics
--------------------------------------------------------------------------------
Update Information:
Add missing obsoletes for the pythia8-hepmcinterface and pythia8-hepmcinterface-
devel packages
--------------------------------------------------------------------------------
================================================================================
python-debian-0.1.27-3.fc22 (FEDORA-2016-1c72aeb468)
Modules for Debian-related data formats
--------------------------------------------------------------------------------
Update Information:
Added support for lzma compression.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1021625 - Some Debian Packages are doesn't "appear as packages"
by rhnpush
https://bugzilla.redhat.com/show_bug.cgi?id=1021625
--------------------------------------------------------------------------------
================================================================================
python-justbytes-0.7-1.fc22 (FEDORA-2016-09ecd64414)
A library for handling computation with address ranges in bytes
--------------------------------------------------------------------------------
Update Information:
New upstream version. Significant API changes. But this should be no problem as
no clients yet in Fedora.
--------------------------------------------------------------------------------
================================================================================
python-ly-0.9.4-1.fc22 (FEDORA-2016-88b1f6fe42)
Tool and library for manipulating LilyPond files
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1328650 - python-ly-0.9.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1328650
--------------------------------------------------------------------------------
================================================================================
python-wikitcms-2.1.6-1.fc22 (FEDORA-2016-cc363a7622)
Fedora QA wiki test management Python library
--------------------------------------------------------------------------------
Update Information:
This update provides the latest release of [python-
wikitcms](https://www.happyassassin.net/wikitcms). It re-adds support for the
`end` argument to `listing.TcmsPageList` and a couple of generators in the
`Wiki` class, which had been removed in earlier releases; I thought it was no
longer used but in fact the 'testdays' CLI app was using this feature.
--------------------------------------------------------------------------------
================================================================================
rasdaemon-0.5.8-2.fc22 (FEDORA-2016-530fa7bdc2)
Utility to receive RAS error tracings
--------------------------------------------------------------------------------
Update Information:
Add support for newer Intel Broadwell CPUs. Closes BZ#104321.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1041321 - rasdaemon: undeclared bundling of kernel event library
https://bugzilla.redhat.com/show_bug.cgi?id=1041321
--------------------------------------------------------------------------------
================================================================================
recoll-1.21.6-1.fc22 (FEDORA-2016-4ef69afdd6)
Desktop full text search tool with Qt GUI
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream releae 1.21.6, kio support is now enabled in both
Konqueror and Dolphin.
--------------------------------------------------------------------------------
================================================================================
rkhunter-1.4.2-11.fc22 (FEDORA-2016-ac44f3205f)
A host-based tool to scan for rootkits, backdoors and local exploits
--------------------------------------------------------------------------------
Update Information:
Add /dev/shm/lldpad.state to whitelist
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1293059 - When the lldpad package is upgraded, /dev/shm/lldpad.state is
created but rkhunter isn't told
https://bugzilla.redhat.com/show_bug.cgi?id=1293059
--------------------------------------------------------------------------------
================================================================================
roundcubemail-1.1.5-1.fc22 (FEDORA-2016-a9c8f9dcff)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
**Release 1.1.5** * Plugin API: Added html2text hook * Plugin API: Added
addressbook_export hook * Fix missing emoticons on html-to-text conversion *
Fix random "access to this resource is secured against CSRF" message at logout
(#4956) * Fix missing language name in "Add to Dictionary" request in HTML
mode (#4951) * Enable use of TLSv1.1 and TLSv1.2 for IMAP (#4955) * Fix
XSS issue in SVG images handling (#4949) * Fix (again) security issue in
DBMail driver of password plugin (CVE-2015-2181) (#4958) * Fix bug in long
recipients list parsing for cases where recipient name contained @-char (#4964)
* Fix additional_message_headers plugin compatibility with Mail_Mime >= 1.9
(#4966) * Hide DSN option in Preferences when smtp_server is not used (#4967)
* Protect download urls against CSRF using unique request tokens (#4957) *
newmail_notifier Plugin: Refactored desktop notifications * Fix so
contactlist_fields option can be set via config file * Fix so SPECIAL-USE
assignments are forced only until user sets special folders (#4782) * Fix
performance in reverting order of THREAD result * Fix converting mail
addresses with www. into mailto links (#5197)
--------------------------------------------------------------------------------
================================================================================
rubygem-gettext-3.2.2-1.fc22 (FEDORA-2016-a8f942c096)
RubyGem of Localization Library and Tools for Ruby
--------------------------------------------------------------------------------
Update Information:
New version 3.2.2 is released.
--------------------------------------------------------------------------------
================================================================================
sssd-1.13.4-1.fc22 (FEDORA-2016-a526e53c73)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.13.4
--------------------------------------------------------------------------------
================================================================================
tellico-2.3.11-1.fc22 (FEDORA-2016-94555cd814)
A collection manager
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release. Features: * Improved support for
importing PDF files from Science Direct. * Enabled optional build support for
QImageBlitz library. Bug Fixes * Fixed scrolling problem with large tables
(Bug 348189). * Fixed HTML exported titles with quotation marks (Bug 348381). *
Fixed crashing bug with file listing importer (Bug 345458). * Fixed crashing
bug with importing MODS files with external fetcher. * Fixed accelerator key
conflict (Bug 351226). * Fixed bug with image importing for Discogs data
source.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1289090 - tellico-2.9.91 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1289090
--------------------------------------------------------------------------------
================================================================================
tiled-0.16.0-1.fc22 (FEDORA-2016-d9939eb158)
Tiled Map Editor
--------------------------------------------------------------------------------
Update Information:
New feature release 0.16.0 Main new feature: - Improved object categories For
further information read:
http://forum.mapeditor.org/t/tiled-0-16-0-released/1206
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1321694 - tiled-v0.16.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1321694
--------------------------------------------------------------------------------
================================================================================
tito-0.6.6-1.fc22 (FEDORA-2016-f323888ab0)
A tool for managing rpm based git projects
--------------------------------------------------------------------------------
Update Information:
Added ability to specify changelog lines on tagging CLI with --changelog (can be
used multple times), and support for the new %autosetup macro.
--------------------------------------------------------------------------------
================================================================================
trac-mercurial-plugin-1.0.0.4-1.fc22 (FEDORA-2016-2ab850b61c)
Mercurial plugin for Trac
--------------------------------------------------------------------------------
Update Information:
Update to [
1.0.0.4](https://trac.edgewall.org/browser/mercurial-
pluin?rev=c91c42e)
--------------------------------------------------------------------------------
================================================================================
wavpack-4.80.0-1.fc22 (FEDORA-2016-83b47a28ce)
A completely open audiocodec
--------------------------------------------------------------------------------
Update Information:
Update wavpack to 4.80.0 ---- Update to 4.75.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1328590 - wavpack-4.75.2-1.fc23.x86_64 has its stack marked executable
https://bugzilla.redhat.com/show_bug.cgi?id=1328590
[ 2 ] Bug #1218453 - wavpack-4.80.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1218453
--------------------------------------------------------------------------------
================================================================================
xen-4.5.3-2.fc22 (FEDORA-2016-75063477ca)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
x86 shadow pagetables: address width overflow [XSA-173, CVE-2016-3960] Qemu:
net: buffer overflow in stellaris_enet emulator [CVE-2016-4001] Qemu: net:
buffer overflow in MIPSnet emulator [CVE-2016-4002] qemu: Infinite loop
vulnerability in usb_ehci using siTD process [CVE-2016-4037]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1323955 - CVE-2016-3960 xsa173 xen: x86 shadow pagetables: address width
overflow (XSA-173)
https://bugzilla.redhat.com/show_bug.cgi?id=1323955
[ 2 ] Bug #1325884 - CVE-2016-4001 Qemu: net: buffer overflow in stellaris_enet
emulator
https://bugzilla.redhat.com/show_bug.cgi?id=1325884
[ 3 ] Bug #1326082 - CVE-2016-4002 Qemu: net: buffer overflow in MIPSnet emulator
https://bugzilla.redhat.com/show_bug.cgi?id=1326082
[ 4 ] Bug #1325129 - CVE-2016-4037 Qemu: usb: Infinite loop vulnerability in usb_ehci
using siTD process
https://bugzilla.redhat.com/show_bug.cgi?id=1325129
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2016.04.13-2.fc22 (FEDORA-2016-4eac1ad2e1)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to new release with bug fixes for several web sites.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1317502 - youtube-dl-2016.04.06 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1317502
--------------------------------------------------------------------------------
================================================================================
zanata-client-3.8.4-1.fc22 (FEDORA-2016-a949ba95ad)
Zanata client module
--------------------------------------------------------------------------------
Update Information:
- Upstream update to 3.8.4
--------------------------------------------------------------------------------
================================================================================
zanata-python-client-1.5.0-2.fc22 (FEDORA-2016-c87860c6c0)
Python Client for Zanata Server
--------------------------------------------------------------------------------
Update Information:
add build requires, v1.5.0 release notes:
--------------------------------------------------------------------------------