The following Fedora 21 Security updates need testing:
Age URL
146
https://admin.fedoraproject.org/updates/FEDORA-2015-1467/openstack-glance...
91
https://admin.fedoraproject.org/updates/FEDORA-2015-4689/quassel-0.11.0-2...
76
https://admin.fedoraproject.org/updates/FEDORA-2015-6005/asterisk-11.17.1...
43
https://admin.fedoraproject.org/updates/FEDORA-2015-8170/rawstudio-2.1-0....
37
https://admin.fedoraproject.org/updates/FEDORA-2015-8168/cabal-install-1....
27
https://admin.fedoraproject.org/updates/FEDORA-2015-9090/fossil-1.33-1.fc21
27
https://admin.fedoraproject.org/updates/FEDORA-2015-9141/ceph-deploy-1.5....
20
https://admin.fedoraproject.org/updates/FEDORA-2015-9488/redis-2.8.21-1.fc21
16
https://admin.fedoraproject.org/updates/FEDORA-2015-5247/strongswan-5.3.2...
16
https://admin.fedoraproject.org/updates/FEDORA-2015-9744/squid-3.4.13-1.fc21
12
https://admin.fedoraproject.org/updates/FEDORA-2015-9925/postgresql-9.3.9...
5
https://admin.fedoraproject.org/updates/FEDORA-2015-10144/rubygem-jquery-...
5
https://admin.fedoraproject.org/updates/FEDORA-2015-10169/php-htmLawed-1....
5
https://admin.fedoraproject.org/updates/FEDORA-2015-10175/opensaml-java-o...
5
https://admin.fedoraproject.org/updates/FEDORA-2015-10249/python-jwt-1.3....
5
https://admin.fedoraproject.org/updates/FEDORA-2015-10301/389-ds-base-1.3...
5
https://admin.fedoraproject.org/updates/FEDORA-2015-10389/drupal6-6.36-1....
5
https://admin.fedoraproject.org/updates/FEDORA-2015-10165/chicken-4.9.0.1...
5
https://admin.fedoraproject.org/updates/FEDORA-2015-10189/drupal7-7.38-1....
5
https://admin.fedoraproject.org/updates/FEDORA-2015-10254/openstack-cinde...
4
https://admin.fedoraproject.org/updates/FEDORA-2015-10450/cups-x2go-3.0.1...
4
https://admin.fedoraproject.org/updates/FEDORA-2015-10514/openvas-cli-1.4...
3
https://admin.fedoraproject.org/updates/FEDORA-2015-10520/trafficserver-5...
3
https://admin.fedoraproject.org/updates/FEDORA-2015-10545/rubygem-actives...
3
https://admin.fedoraproject.org/updates/FEDORA-2015-10193/gnome-abrt-1.0....
2
https://admin.fedoraproject.org/updates/FEDORA-2015-10581/ecryptfs-utils-...
2
https://admin.fedoraproject.org/updates/FEDORA-2015-10601/libwmf-0.2.8.4-...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-10678/kernel-4.0.6-20...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-10760/squashfs-tools-...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-10807/ansible-1.9.2-1...
The following Fedora 21 Critical Path updates have yet to be approved:
Age URL
5
https://admin.fedoraproject.org/updates/FEDORA-2015-10387/lz4-r130-1.fc21
5
https://admin.fedoraproject.org/updates/FEDORA-2015-10251/nautilus-3.14.3...
3
https://admin.fedoraproject.org/updates/FEDORA-2015-10522/thunderbird-38....
2
https://admin.fedoraproject.org/updates/FEDORA-2015-10648/libsolv-0.6.11-...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-10708/selinux-policy-...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-10699/hwdata-0.279-1....
1
https://admin.fedoraproject.org/updates/FEDORA-2015-10666/notification-da...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-10801/zip-3.0-14.fc21
0
https://admin.fedoraproject.org/updates/FEDORA-2015-10777/perl-Encode-2.7...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-10765/perl-Socket-2.0...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-10760/squashfs-tools-...
The following builds have been pushed to Fedora 21 updates-testing
ansible-1.9.2-1.fc21
geany-plugins-1.24-4.fc21
libxmp-4.3.9-1.fc21
nordugrid-arc-5.0.1-1.fc21
nordugrid-arc-doc-2.0.1-1.fc21
openjpeg2-2.1.0-5.fc21
perl-Inline-Python-0.49-3.fc21
php-doctrine-annotations-1.2.6-1.fc21
php-doctrine-cache-1.4.1-1.fc21
php-doctrine-collections-1.3.0-2.fc21
php-doctrine-inflector-1.0.1-4.fc21
php-doctrine-lexer-1.0.1-4.fc21
python-gevent-1.0.2-2.fc21
readosm-1.0.0e-1.fc21
sflphone-1.4.1-13.fc21
speech-dispatcher-0.8.3-1.fc21
terminator-0.97-7.fc21
trojita-0.5-6.fc21
zip-3.0-14.fc21
Details about builds:
================================================================================
ansible-1.9.2-1.fc21 (FEDORA-2015-10807)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 1.9.2. Fixes CVE-2015-3908 (hostname and cert matching in some modules and
plugins) and another not yet issued CVE on chroot/jail/zone connection plugins as well as
a number of bugfixes.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 25 2015 Kevin Fenzi <kevin(a)scrye.com> 1.9.2-1
- Update to 1.9.2
* Tue Jun 16 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.9.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
geany-plugins-1.24-4.fc21 (FEDORA-2015-10800)
Plugins for Geany
--------------------------------------------------------------------------------
Update Information:
This update fixes issues with icons in Geany Plugins not displayed properly
(RHBZ#1174989)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 25 2015 Dominic Hopf <dmaphy(a)fedoraproject.org> - 1.24-4
- run gtk-update-icon-cache in %post and %postun (RHBZ#1174989)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1174989 - GProject geany plugin fails to display icons
https://bugzilla.redhat.com/show_bug.cgi?id=1174989
--------------------------------------------------------------------------------
================================================================================
libxmp-4.3.9-1.fc21 (FEDORA-2015-10784)
A multi-format module playback library
--------------------------------------------------------------------------------
Update Information:
Fix bugs caught in the OpenMPT test cases:
* fix IT tone portamento on sample change and NNA
* fix IT tone portamento with offset
Fix problems caused by fuzz files (reported by Lionel Debroux):
* add sanity check to RTM/MMD/MDL/DBM/SFX/MASI/DT loaders
* add sanity check to Starpack/Fuzzac converter
* add sanity check to Oxm/vorbis depacker
* add sanity check to lha/MMCMP/s404 depacker
* fix memory leak in vorbis decoder
Fix problems caused by fuzz files (reported by Jonathan Neuschäfer):
* add sanity check to IT instrument name loader
* add sanity check to IT loader instrument mapping
* add sanity check to AMF module parameters and event loading
* initialize IT loader last event data
Other changes:
* detect Amiga frequency limits in MOD (reported by Mirko Buffoni)
* fix problems in Amiga split channels (reported by Gabriele Orioli)
* fix global volume on restart to invalid row (reported by Adam Purkrt)
* fix Oktalyzer note slide effect (by Dennis Lindroos)
* fix Oktalyzer volume setting in split channels (by Dennis Lindroos)
* fix external sample mixer for IT files (reported by honguito98)
* allow short sample reads (reported by Adam Purkrt)
* address problems reported by clang sanitizer
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 25 2015 Dominik Mierzejewski <rpm(a)greysector.net> - 4.3.9-1
- update to 4.3.9 (
http://sourceforge.net/projects/xmp/files/libxmp/4.3.9/Changelog/view)
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
4.3.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1235493 - libxmp-4.3.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1235493
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-5.0.1-1.fc21 (FEDORA-2015-10781)
Advanced Resource Connector Grid Middleware
--------------------------------------------------------------------------------
Update Information:
Release Notes for **NorduGrid ARC 15.03 update 1**
June 25, 2015
This is a bugfix release, addressing an issue with excessive logging in A-REX as well as
fixing a number of bugs.
NorduGrid ARC 15.03 has received an update to:
* core, clients, CE, Infosys and gridftp - from version 5.0.0 to 5.0.1
* documents - from 2.0.0 to 2.0.1
**Detailed notes**
* ARC Server and core components
** The following issues were fixed in the ARC core:
** Excessive logging in A-REX (note that underlying problem still exists, only logging is
reduced).
** Changed priority calculation for SGE jobs to only negative priorities.
** Fixed file permission filter in submit-condor-job.
** Added correct free slot number to SLURM partition.
* Accounting
** Extended JURA's log to long format
** Added mistakenly omitted accounting records re-report functionality to JURA.
* Information system
** Restored use of defaulttl from arc.conf in infoproviders.
** Fixed an issue where infosys_heartbeat file was not deleted.
** Fixed an issue with GLUE2 having negative ComputingShareLocalRunningJobs.
* ARC Clients
** Improved checking of python examples.
** Re-enabled WS interface submission with string-based credentials.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 26 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 5.0.1-1
- 5.0.1 Final Release
- Drop patch nordugrid-arc-pytest.patch
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
5.0.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat May 2 2015 Kalev Lember <kalevlember(a)gmail.com> - 5.0.0-3
- Rebuilt for GCC 5 C++11 ABI change
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-doc-2.0.1-1.fc21 (FEDORA-2015-10781)
Advanced Resource Connector Documentation
--------------------------------------------------------------------------------
Update Information:
Release Notes for **NorduGrid ARC 15.03 update 1**
June 25, 2015
This is a bugfix release, addressing an issue with excessive logging in A-REX as well as
fixing a number of bugs.
NorduGrid ARC 15.03 has received an update to:
* core, clients, CE, Infosys and gridftp - from version 5.0.0 to 5.0.1
* documents - from 2.0.0 to 2.0.1
**Detailed notes**
* ARC Server and core components
** The following issues were fixed in the ARC core:
** Excessive logging in A-REX (note that underlying problem still exists, only logging is
reduced).
** Changed priority calculation for SGE jobs to only negative priorities.
** Fixed file permission filter in submit-condor-job.
** Added correct free slot number to SLURM partition.
* Accounting
** Extended JURA's log to long format
** Added mistakenly omitted accounting records re-report functionality to JURA.
* Information system
** Restored use of defaulttl from arc.conf in infoproviders.
** Fixed an issue where infosys_heartbeat file was not deleted.
** Fixed an issue with GLUE2 having negative ComputingShareLocalRunningJobs.
* ARC Clients
** Improved checking of python examples.
** Re-enabled WS interface submission with string-based credentials.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 26 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.0.1-1
- 2.0.1 Final Release
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.0.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
openjpeg2-2.1.0-5.fc21 (FEDORA-2015-10782)
C-Library for JPEG 2000
--------------------------------------------------------------------------------
Update Information:
This update adds a patch which fixes a bigendian byte order issue.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 25 2015 Sandro Mani <manisandro(a)gmail.com> - 2.1.0-5
- Add openjpeg2_bigendian.patch (#1232739)
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.1.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1232739 - validate-formats-* tests fail when built with openjpeg2 support on
big endian arches
https://bugzilla.redhat.com/show_bug.cgi?id=1232739
--------------------------------------------------------------------------------
================================================================================
perl-Inline-Python-0.49-3.fc21 (FEDORA-2015-10803)
Write Perl subs and classes in Python
--------------------------------------------------------------------------------
Update Information:
New package to write Perl subs and classes in Python.
--------------------------------------------------------------------------------
================================================================================
php-doctrine-annotations-1.2.6-1.fc21 (FEDORA-2015-10795)
PHP docblock annotations parser library
--------------------------------------------------------------------------------
Update Information:
## v1.2.6
* Revert a small change from v1.2.5 that removed a check for the wrong reasons
## v1.2.5
* Make AnnotationReader PHP7 compatible by fixing code that checks for removed ini
variable
## v1.2.4
* Issue #51: `FileCacheReader#saveCacheFile()` `unlink()` call fix
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2015 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.2.6-1
- Updated to 1.2.6 (RHBZ #1211816)
- Added autoloader
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1211816 - php-doctrine-annotations-v1.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1211816
--------------------------------------------------------------------------------
================================================================================
php-doctrine-cache-1.4.1-1.fc21 (FEDORA-2015-10812)
Doctrine Cache
--------------------------------------------------------------------------------
Update Information:
## v1.4.1
* Issue #60: Redis MGET support
* Issue #61: Void cache.
* Issue #64: Reduce memory usage in SQLite3 cache
* Issue #67: `Memcache::doContains` incorrectly returns `FALSE` for some values
* Issue #69: Improved `PhpFileCache` performance by removing useless stat calls
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2015 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.4.1-1
- Updated to 1.4.1 (RHBZ #1211817)
- Added autoloader
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1211817 - php-doctrine-cache-v1.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1211817
--------------------------------------------------------------------------------
================================================================================
php-doctrine-collections-1.3.0-2.fc21 (FEDORA-2015-10810)
Collections abstraction library
--------------------------------------------------------------------------------
Update Information:
## v1.3.0
* Issue #26: Explicit casting of first and max results
* Issue #30: typo fix.
* Issue #31: CS fixes and tidy up of tests
* Issue #36: Tidy up and CS fixes
* Issue #42: small style changes to comply with PSR2
* Issue #49: Keep keys when using array collection's matching()
* Issue #52: Made initialized protected for extensibility.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2015 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.3.0-2
- Added autoloader dependencies
* Wed Jun 24 2015 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.3.0-1
- Updated to 1.3.0 (RHBZ #1211818)
- Added autoloader
- %license usage
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1211818 - php-doctrine-collections-v1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1211818
--------------------------------------------------------------------------------
================================================================================
php-doctrine-inflector-1.0.1-4.fc21 (FEDORA-2015-10791)
Common string manipulations with regard to casing and singular/plural rules
--------------------------------------------------------------------------------
Update Information:
Added autoloader
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2015 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.0.1-4
- Added autoloader
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-doctrine-lexer-1.0.1-4.fc21 (FEDORA-2015-10791)
Base library for a lexer that can be used in top-down, recursive descent parsers
--------------------------------------------------------------------------------
Update Information:
Added autoloader
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2015 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.0.1-4
- Added autoloader dependency
* Tue Jun 23 2015 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.0.1-3
- Added autoloader
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-gevent-1.0.2-2.fc21 (FEDORA-2015-10543)
A coroutine-based Python networking library
--------------------------------------------------------------------------------
Update Information:
Bug fix release 1.0.2:
https://github.com/gevent/gevent/blob/v1.0.2/changelog.rst#release-102-ma...
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 26 2015 Dan Callaghan <dcallagh(a)redhat.com> - 1.0.2-2
- removed version requirement for greenlet
* Mon Jun 22 2015 Dan Callaghan <dcallagh(a)redhat.com> - 1.0.2-1
- bug fix release 1.0.2:
https://github.com/gevent/gevent/blob/v1.0.2/changelog.rst#release-102-ma...
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
readosm-1.0.0e-1.fc21 (FEDORA-2015-10789)
Library to extract data from Open Streetmap input files
--------------------------------------------------------------------------------
Update Information:
When reading from Protobuf (PBF) input, all Relation Member Role values were incorrectly
set. The bug did not affected XML input.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 25 2015 Volker Fröhlich <volker27(a)gmx.at> - 1.0.0e-1
- New upstream release
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.0.0c-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1235673 - readosm-1.0.0e is available
https://bugzilla.redhat.com/show_bug.cgi?id=1235673
--------------------------------------------------------------------------------
================================================================================
sflphone-1.4.1-13.fc21 (FEDORA-2015-10806)
SIP/IAX2 compatible enterprise-class software phone
--------------------------------------------------------------------------------
Update Information:
This update fixes some memory corruption issues.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 25 2015 Sandro Mani <manisandro(a)gmail.com> - 1.4.1-13
- Add patch to fix memory corruption issues (#1222301)
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.4.1-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
speech-dispatcher-0.8.3-1.fc21 (FEDORA-2015-10786)
To provide a high-level device independent layer for speech synthesis
--------------------------------------------------------------------------------
Update Information:
0.8.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 26 2015 Peter Robinson <pbrobinson(a)fedoraproject.org> 0.8.3-1
- 0.8.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1235999 - [abrt] speech-dispatcher: cst_val_consp(): sd_flite killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1235999
--------------------------------------------------------------------------------
================================================================================
terminator-0.97-7.fc21 (FEDORA-2015-10780)
Store and run multiple GNOME terminals in one window
--------------------------------------------------------------------------------
Update Information:
This update fixes a dependency issue to the python-keybinder package. Under the
circumstances when the python-keybinder package is not installed it is possible that
specific Terminator functions will not work properly (RHBZ#1174989).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 25 2015 Dominic Hopf <dmaphy(a)fedoraproject.org> - 0.97-7
- add dependency to python-keybinder (RHBZ#1234627)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1234627 - terminator broken dependency: python-keybinder
https://bugzilla.redhat.com/show_bug.cgi?id=1234627
--------------------------------------------------------------------------------
================================================================================
trojita-0.5-6.fc21 (FEDORA-2015-10793)
IMAP e-mail client
--------------------------------------------------------------------------------
Update Information:
Initial package (rhbz#1208582)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1208582 - Review Request: trojita - IMAP e-mail client
https://bugzilla.redhat.com/show_bug.cgi?id=1208582
--------------------------------------------------------------------------------
================================================================================
zip-3.0-14.fc21 (FEDORA-2015-10801)
A file compression and packaging utility compatible with PKZIP
--------------------------------------------------------------------------------
Update Information:
added requirements for unzip due to "zip -T" for integrity check. See bug.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 26 2015 Petr Stodulka <pstodulk(a)redhat.com> - 3.0-14
- Added requirement for unzip (#1235956)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1235956 - zip - missing requirements for unzip
https://bugzilla.redhat.com/show_bug.cgi?id=1235956
--------------------------------------------------------------------------------