The following Fedora 20 Security updates need testing: Age URL 70 https://admin.fedoraproject.org/updates/FEDORA-2013-23636/rubygem-actionpack-4.0.0-2.fc20 62 https://admin.fedoraproject.org/updates/FEDORA-2013-24018/varnish-3.0.5-1.fc20 44 https://admin.fedoraproject.org/updates/FEDORA-2014-0792/libinfinity-0.5.5-1.fc20 18 https://admin.fedoraproject.org/updates/FEDORA-2014-2221/NetworkManager-ssh-0.9.2-0.2.20140209git46247c2.fc20 16 https://admin.fedoraproject.org/updates/FEDORA-2014-2264/python-tahrir-0.5.1-1.fc20 16 https://admin.fedoraproject.org/updates/FEDORA-2014-2263/python-tahrir-0.5.2-1.fc20 14 https://admin.fedoraproject.org/updates/FEDORA-2014-2452/augeas-1.2.0-1.fc20 10 https://admin.fedoraproject.org/updates/FEDORA-2014-2693/openstack-glance-2013.2.2-1.fc20 8 https://admin.fedoraproject.org/updates/FEDORA-2014-2751/zabbix-2.0.11-2.fc20 6 https://admin.fedoraproject.org/updates/FEDORA-2014-2802/xen-4.3.2-1.fc20 6 https://admin.fedoraproject.org/updates/FEDORA-2014-2875/oath-toolkit-2.4.1-3.fc20 6 https://admin.fedoraproject.org/updates/FEDORA-2014-2804/easy-rsa-2.2.2-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-2999/perl-CGI-Application-4.50-9.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-3054/python-swiftclient-2.0.2-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-3169/rubygem-activerecord-4.0.0-2.fc20,rubygem-actionpack-4.0.0-3.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-3184/freeradius-3.0.1-4.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-3222/v8-3.14.5.10-6.fc20 The following Fedora 20 Critical Path updates have yet to be approved: Age URL 107 https://admin.fedoraproject.org/updates/FEDORA-2013-21163/libproxy-0.4.11-8.fc20 38 https://admin.fedoraproject.org/updates/FEDORA-2014-1197/colord-1.1.6-1.fc20 6 https://admin.fedoraproject.org/updates/FEDORA-2014-2834/evolution-data-server-3.10.4-2.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-3065/langtable-0.0.24-1.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-3120/librepo-1.6.0-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-3201/cryptsetup-1.6.4-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-3244/audit-2.3.4-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-3218/evolution-3.10.4-2.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-3203/testdisk-6.14-3.fc20,ntfs-3g-2014.2.15-1.fc20 The following builds have been pushed to Fedora 20 updates-testing NetworkManager-l2tp-0.9.8.6-1.fc20 advancecomp-1.18-1.fc20 audit-2.3.4-1.fc20 bcfg2-1.3.3-5.fc20 byobu-5.73-3.fc20 cryptsetup-1.6.4-1.fc20 devscripts-2.14.1-2.fc20 dnf-plugins-core-0.0.5-2.fc20 docker-io-0.8.1-1.fc20 eclipse-m2e-tycho-0.7.0-0.1.git4ec9311.fc20 eigen3-3.2.1-3.fc20 evolution-3.10.4-2.fc20 freeradius-3.0.1-4.fc20 gdesklets-goodweather-0.31-15.fc20 gfal2-2.5.5-1.fc20 ghc-shakespeare-js-1.1.3-1.fc20 glpi-0.84.5-1.fc20 gogoc-1.2-37.fc20 ibus-anthy-1.5.5-2.fc20 kdbg-2.5.4-1.fc20 kde-plasma-nm-0.9.3.3-1.fc20 kde-workspace-4.11.6-3.fc20 lancer-0.0.1-1.fc20 libaccounts-glib-1.16-1.fc20 libaccounts-qt-1.11-1.fc20 libmm-qt-1.0.1-1.fc20 libnm-qt-0.9.9.1-1.fc20 libqb-0.17.0-1.fc20 libtcd-2.2.6-1.fc20 marble-4.12.2-3.fc20 mingw-eigen3-3.2.1-1.fc20 ntfs-3g-2014.2.15-1.fc20 openlmi-scripts-0.2.7-5.fc20 openstack-neutron-2013.2.2-2.fc20 openstack-packstack-2013.2.1-0.32.dev987.fc20 oxygen-gtk3-1.3.3-3.fc20 perl-File-Slurp-Tiny-0.003-3.fc20 perl-Module-Build-Tiny-0.035-1.fc20 perl-Module-Extract-Namespaces-1.02-3.fc20 perl-PDL-2.7.0-3.fc20 perl-TAP-Harness-Env-3.30-3.fc20 perl-Time-Out-0.11-1.fc20 python-croniter-0.3.4-2.fc20 python-freezegun-0.1.12-1.fc20 python-neutronclient-2.3.1-3.fc20 python-pep8-1.4.6-2.fc20 python-pyghmi-0.5.9-1.fc20 python-pytest-cov-1.6-1.fc20 retrace-server-1.11-1.fc20 rubygem-actionpack-4.0.0-3.fc20 rubygem-activerecord-4.0.0-2.fc20 rubygem-coderay-1.1.0-1.fc20 rubygem-gettext-3.1.1-1.fc20 rubygem-rspec-mocks-2.14.6-1.fc20 scala-stm-0.7-2.fc20 scalaz-7.0.0-2.fc20 scap-security-guide-0.1.5-1.fc20 sensible-utils-0.0.9-1.fc20 spambayes-1.1-0.8.b1.fc20 sparse-0.5.0-1.fc20 spice-gtk-0.23-2.fc20 tagainijisho-1.0.1-2.fc20 testdisk-6.14-3.fc20 tmux-1.9a-2.fc20 tofrodos-1.7.13-2.fc20 tumbler-0.1.30-1.fc20 typesafe-config-1.2.0-2.fc20 uncommons-maths-1.2.3-1.fc20 v8-3.14.5.10-6.fc20 virt-viewer-0.6.0-1.fc20 xfdashboard-0.1.4-2.fc20 yawn-0-0.16.20140227svn630.fc20 zorba-2.9.1-4.fc20 Details about builds: ================================================================================ NetworkManager-l2tp-0.9.8.6-1.fc20 (FEDORA-2014-3197) NetworkManager VPN plugin for l2tp -------------------------------------------------------------------------------- Update Information: updated to 0.9.8.6 -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Ivan Romanov <drizt@xxxxxxx> - 0.9.8.6-1 - updated to 0.9.8.6 -------------------------------------------------------------------------------- ================================================================================ advancecomp-1.18-1.fc20 (FEDORA-2014-3251) Recompression utilities for .PNG, .MNG and .ZIP files -------------------------------------------------------------------------------- Update Information: AdvanceCOMP Version 1.18 2013/11 * Added build support for new powerpc architectures. * Fixed build with BZIP. AdvanceCOMP Version 1.17 2013/03 * Changed to GPL3. * Added zopfli support. It's enabled using -4, --shrink-insane. You can control the number of iterations with the new -i, --iter option. AdvanceCOMP Version 1.16 2013/03 * Allowed recompression with files with zero length. * Some other minor bugfixes. * Now in git repository. -------------------------------------------------------------------------------- ChangeLog: * Mon Feb 10 2014 Christopher Meng <rpm@xxxxxxxx> - 1.18-1 - Update to 1.18 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1062854 - advancecomp-1.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=1062854 [ 2 ] Bug #924974 - advancecomp: Does not support aarch64 in f19 and rawhide https://bugzilla.redhat.com/show_bug.cgi?id=924974 -------------------------------------------------------------------------------- ================================================================================ audit-2.3.4-1.fc20 (FEDORA-2014-3244) User space tools for 2.6 kernel auditing -------------------------------------------------------------------------------- Update Information: In audisp-remote, fix retry logic for temporary network failures. Audit event parsing bug fixes for search and reporting tools. Update translation tables for the 3.14 kernel. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Steve Grubb <sgrubb@xxxxxxxxxx> 2.3.4-1 - New upstream bugfix/enhancement release -------------------------------------------------------------------------------- ================================================================================ bcfg2-1.3.3-5.fc20 (FEDORA-2014-3234) A configuration management system -------------------------------------------------------------------------------- Update Information: Rebuild for release 5, which re-enables unit tests on the EPEL7 branch. It should be a no-op for other distros. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 John Morris <john@xxxxxxxxxxx> - 1.3.3-5 - EL7: Re-add deps and re-enable %check script; bz #1058427 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1058427 - Add bcfg2 package to EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1058427 -------------------------------------------------------------------------------- ================================================================================ byobu-5.73-3.fc20 (FEDORA-2014-3227) Light-weight, configurable window manager built upon GNU screen -------------------------------------------------------------------------------- Update Information: fix for : bg#1058747 - multiple sourcing of tmux/tmuxrc bg#1069419 - tmux backend does not remove date and time even if deselected in byobu-config various upstream patches Update to version 5.73 Update to version 5.73 update to latest version Update to latest version + bugfixes from fedora update to latest version Update to latest version + bugfixes from fedora various upstream patches Update to version 5.73 Update to version 5.73 update to latest version Update to latest version + bugfixes from fedora update to latest version Update to latest version + bugfixes from fedora various upstream patches Update to version 5.73 Update to version 5.73 update to latest version Update to latest version + bugfixes from fedora update to latest version Update to latest version + bugfixes from fedora various upstream patches Update to version 5.73 Update to version 5.73 update to latest version Update to latest version + bugfixes from fedora update to latest version Update to latest version + bugfixes from fedora -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Jan Klepek <jan.klepek at, gmail.com> - 5.73-3 - various upstream patches * Wed Feb 26 2014 Jan Klepek <jan.klepek at, gmail.com> - 5.73-2 - various upstream patches * Tue Feb 18 2014 Jan Klepek <jan.klepek at, gmail.com> - 5.73-1 - Update to latest release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1058747 - Byobu sources $BYOBU_CONFIG_DIR/.tmux.conf twice https://bugzilla.redhat.com/show_bug.cgi?id=1058747 [ 2 ] Bug #1069419 - Byobu with tmux backend does not remove date and time even if deselected in byobu-config https://bugzilla.redhat.com/show_bug.cgi?id=1069419 [ 3 ] Bug #1055258 - byobu-5.73 is available https://bugzilla.redhat.com/show_bug.cgi?id=1055258 -------------------------------------------------------------------------------- ================================================================================ cryptsetup-1.6.4-1.fc20 (FEDORA-2014-3201) A utility for setting up encrypted disks -------------------------------------------------------------------------------- Update Information: Update to 1.6.4 version, see Release Notes https://www.kernel.org/pub/linux/utils/cryptsetup/v1.6/v1.6.4-ReleaseNotes -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Milan Broz <gmazyland@xxxxxxxxx> - 1.6.4-1 - Update to cryptsetup 1.6.4. * Tue Jan 7 2014 Ondrej Kozina <okozina@xxxxxxxxxx> - 1.6.3-2 - remove useless hmac checksum -------------------------------------------------------------------------------- References: [ 1 ] Bug #1069595 - luksChangeKey needs to ask for the new password twice https://bugzilla.redhat.com/show_bug.cgi?id=1069595 -------------------------------------------------------------------------------- ================================================================================ devscripts-2.14.1-2.fc20 (FEDORA-2014-3250) Scripts for Debian Package maintainers -------------------------------------------------------------------------------- Update Information: This update adds a missing dependency on sensible-utils. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Sandro Mani <manisandro@xxxxxxxxx> - 2.14.1-2 - Require sensible-utils (rhbz#1067869) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1067869 - debchange executes sensible-editor which does not exist https://bugzilla.redhat.com/show_bug.cgi?id=1067869 -------------------------------------------------------------------------------- ================================================================================ dnf-plugins-core-0.0.5-2.fc20 (FEDORA-2014-3220) Core Plugins for DNF -------------------------------------------------------------------------------- Update Information: packaging: add debuginfo-install.py (Ales Kozumplik) packaging: add builddep.py to the RPM. (Ales Kozumplik) Couple of bugs fixed. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Aleš Kozumplík <ales@xxxxxxxxxx> - 0.0.5-2 - packaging: add debuginfo-install.py (Ales Kozumplik) * Wed Feb 26 2014 Aleš Kozumplík <ales@xxxxxxxxxx> - 0.0.5-1 - packaging: add builddep.py to the RPM. (Ales Kozumplik) * Tue Feb 25 2014 Radek Holý <rholy@xxxxxxxxxx> - 0.0.4-1 - refactor: use Base.install instead of installPkgs in kickstart plugin. (Radek Holy) - refactor: move kickstart arguments parsing to standalone method. (Radek Holy) - tests: test effects instead of mock calls. (Radek Holy) - Add debuginfo-install plugin. (RhBug:1045770) (Igor Gnatenko) - builddep: needs to be run under root. (RhBug:1065851) (Ales Kozumplik) -------------------------------------------------------------------------------- References: [ 1 ] Bug #905697 - [rfe] [plugin] yum-builddep like functionality through dnf https://bugzilla.redhat.com/show_bug.cgi?id=905697 [ 2 ] Bug #1065851 - dnf builddep command should check for root permissions https://bugzilla.redhat.com/show_bug.cgi?id=1065851 [ 3 ] Bug #1045770 - [PATCH] debuginfo-install https://bugzilla.redhat.com/show_bug.cgi?id=1045770 -------------------------------------------------------------------------------- ================================================================================ docker-io-0.8.1-1.fc20 (FEDORA-2014-3200) Automates deployment of containerized applications -------------------------------------------------------------------------------- Update Information: Bug 1066841 - upstream version bump to v0.8.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 19 2014 Lokesh Mandvekar <lsm5@xxxxxxxxxx> - 0.8.1-1 - Bug 1066841 - upstream version bump to v0.8.1 - use sysvinit files from upstream contrib - BR golang >= 1.2-7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1066841 - docker-io-0.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1066841 -------------------------------------------------------------------------------- ================================================================================ eclipse-m2e-tycho-0.7.0-0.1.git4ec9311.fc20 (FEDORA-2014-3215) M2E Tycho connector -------------------------------------------------------------------------------- Update Information: This update introduces new package eclipse-m2e-tycho - Tycho connector for Eclipse M2E. -------------------------------------------------------------------------------- ================================================================================ eigen3-3.2.1-3.fc20 (FEDORA-2014-3177) A lightweight C++ template library for vector and matrix math -------------------------------------------------------------------------------- Update Information: This update splits off the documentation to the eigen3-doc subpackage. Update to release 3.2.1, see http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.2.1 for details. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Sandro Mani <manisandro@xxxxxxxxx> - 3.2.1-3 - Make doc package noarch * Thu Feb 27 2014 Sandro Mani <manisandro@xxxxxxxxx> - 3.2.1-2 - Split off doc to a separate package * Wed Feb 26 2014 Sandro Mani <manisandro@xxxxxxxxx> - 3.2.1-1 - Udpate to release 3.2.1 -------------------------------------------------------------------------------- ================================================================================ evolution-3.10.4-2.fc20 (FEDORA-2014-3218) Mail and calendar client for GNOME -------------------------------------------------------------------------------- Update Information: Backport upstream fixes for GNOME bugs: Bug #724023 - Run EMailFormatter in the main/UI thread https://bugzilla.gnome.org/show_bug.cgi?id=724023 Bug #722041 - NNTP Messages are silently dropped from Outbox https://bugzilla.gnome.org/show_bug.cgi?id=722041 Bug #722698 - Crash creating a new folder https://bugzilla.gnome.org/show_bug.cgi?id=722698 -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Michael Kuhn <suraia@xxxxxxxxx> - 3.10.4-2 - Add upstream patches for GNOME bugs #724023, #722041 and #722698 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1070443 - Backport some upstream fixes https://bugzilla.redhat.com/show_bug.cgi?id=1070443 -------------------------------------------------------------------------------- ================================================================================ freeradius-3.0.1-4.fc20 (FEDORA-2014-3184) High-performance and highly configurable free RADIUS server -------------------------------------------------------------------------------- Update Information: Fix stack-based buffer overflow flaw in rlm_pap module: long password hashes used by the PAP module can cause a buffer overflow which may terminate the server. fixes bug 1068795, string attributes passed to rlm_perl module were being truncated. -------------------------------------------------------------------------------- ChangeLog: * Mon Feb 24 2014 Nikolai Kondrashov <Nikolai.Kondrashov@xxxxxxxxxx> - 3.0.1-4 - Fix CVE-2014-2015 "freeradius: stack-based buffer overflow flaw in rlm_pap module" - resolves: bug#1066984 (fedora 1066763) * Fri Feb 21 2014 John Dennis <jdennis@xxxxxxxxxx> - 3.0.1-3 - resolves: bug#1068798 (fedora 1068795) rlm_perl attribute values truncated -------------------------------------------------------------------------------- References: [ 1 ] Bug #1066763 - CVE-2014-2015 freeradius: stack-based buffer overflow flaw in rlm_pap module [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1066763 [ 2 ] Bug #1068795 - rlm_perl attribute values truncated https://bugzilla.redhat.com/show_bug.cgi?id=1068795 -------------------------------------------------------------------------------- ================================================================================ gdesklets-goodweather-0.31-15.fc20 (FEDORA-2014-3158) Themeable weather and condition display for gdesklet -------------------------------------------------------------------------------- Update Information: Removal of unnecessary files -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 25 2014 Luya Tshimbalanga <luya@xxxxxxxxxxxxxxxxx> - 0.31-15 - Removal of unnecessary files (rhbz #1069113) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1069113 - Unecessary files included in gdesklets-goodweather release https://bugzilla.redhat.com/show_bug.cgi?id=1069113 -------------------------------------------------------------------------------- ================================================================================ gfal2-2.5.5-1.fc20 (FEDORA-2014-3162) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: Release 2.5.5 of GFAL2 -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Adrien Devresse <adevress at cern.ch> - 2.5.5-1 - Release 2.5.5 of GFAL2 -------------------------------------------------------------------------------- ================================================================================ ghc-shakespeare-js-1.1.3-1.fc20 (FEDORA-2014-3163) Compile-time variable interpolation for Javascript -------------------------------------------------------------------------------- Update Information: Compile-time variable interpolation for Javascript - http://hackage.haskell.org/package/shakespeare-js -------------------------------------------------------------------------------- References: [ 1 ] Bug #986641 - Review Request: ghc-shakespeare-js - Compile-time variable interpolation for Javascript https://bugzilla.redhat.com/show_bug.cgi?id=986641 -------------------------------------------------------------------------------- ================================================================================ glpi-0.84.5-1.fc20 (FEDORA-2014-3194) Free IT asset management software -------------------------------------------------------------------------------- Update Information: Upstream Changelog: * Bug #4765: Validation for post-only * Bug #4771: Email subject bad decoded * Bug #4772: Clean HTML try to avoid extra spaces * Bug #4773: Delete Request source / update writer of followups * Bug #4779: Create ticket : changing type reload form but do not check if category is always valid * Bug #4789: Fix select Item for tickets when no create ticket right * Bug #4790: Migration of status for bookmark * Bug #4791: Create a ticket from an item * Bug #4792: Bug htmlLawed for embedded lists * Bug #4794: Display software installation with use of is_dynamic in glpi_computers_softwareversions * Bug #4806: Add recursivity on creation form of a user * Bug #4808: Computer loses licenses during transfer * Bug #4809: Trouble on regex result with quotes * Bug #4810: Delete task notification to users * Feature #4764: Add type of contract in search engine for an item * Feature #4776: Redirect after delete a group or a user in ticket, change, problem * Feature #4801: Add tag mobile phone -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 0.84.5-1 - update to 0.84.5 https://forge.indepnet.net/projects/glpi/versions/1011 -------------------------------------------------------------------------------- ================================================================================ gogoc-1.2-37.fc20 (FEDORA-2014-3199) IPv6 TSP client for gogo6 -------------------------------------------------------------------------------- Update Information: Allow gogoc to manage log files in SELinux policy. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Juan Orti Alcaine <jorti@xxxxxxxxxxxxxxxxx> - 1.2-37 - Allow gogoc to manage log files in SELinux policy. Bug #1070235 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1070235 - [abrt] gogoc: _IO_free_backup_area(): gogoc killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1070235 -------------------------------------------------------------------------------- ================================================================================ ibus-anthy-1.5.5-2.fc20 (FEDORA-2014-3186) The Anthy engine for IBus input platform -------------------------------------------------------------------------------- Update Information: This update enables property icon for input mode on non-GNONE. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Takao Fujiwara <tfujiwar@xxxxxxxxxx> - 1.5.5-2 - Updated ibus-anthy-HEAD.patch to enable property icon. -------------------------------------------------------------------------------- ================================================================================ kdbg-2.5.4-1.fc20 (FEDORA-2014-3211) A GUI for gdb, the GNU debugger, and KDE -------------------------------------------------------------------------------- Update Information: update to latest stable release 2.5.4 -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Lukáš Tinkl <ltinkl@xxxxxxxxxx> - 1:2.5.4-1 - update to latest stable release 2.5.4 - fixes rhbz#879328: can't open any executable -------------------------------------------------------------------------------- References: [ 1 ] Bug #879328 - [PATCH] can't open any executable (gdb api change?) https://bugzilla.redhat.com/show_bug.cgi?id=879328 -------------------------------------------------------------------------------- ================================================================================ kde-plasma-nm-0.9.3.3-1.fc20 (FEDORA-2014-3231) Plasma applet written in QML for managing network connections -------------------------------------------------------------------------------- Update Information: Plasma-nm 0.9.3.3 release. See http://grulja.wordpress.com/2014/02/27/plasma-nm-is-finally-out/ -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Jan Grulich <jgrulich@xxxxxxxxxx> - 0.9.3.3-1 - Update to 0.9.3.3 * Thu Feb 13 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 0.9.3.2-4 - add icon scriptlets -------------------------------------------------------------------------------- References: [ 1 ] Bug #1049135 - Connections not displayed correctly https://bugzilla.redhat.com/show_bug.cgi?id=1049135 [ 2 ] Bug #1063378 - kde-plasma-nm base package should not require ModemManager https://bugzilla.redhat.com/show_bug.cgi?id=1063378 -------------------------------------------------------------------------------- ================================================================================ kde-workspace-4.11.6-3.fc20 (FEDORA-2014-3168) KDE Workspace -------------------------------------------------------------------------------- Update Information: Fix broken suspend/resume with systemd >= 209 (kdebug#331403) -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Lukáš Tinkl <ltinkl@xxxxxxxxxx> 4.11.6-3 - fix broken suspend/resume with systemd >= 209 (kdebug331403) -------------------------------------------------------------------------------- ================================================================================ lancer-0.0.1-1.fc20 (FEDORA-2014-3214) Probability and statistics classes for Java -------------------------------------------------------------------------------- Update Information: Lancer provides reimplementations of some Colt functionality. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1070436 - Review Request: lancer - some statistics and probability classes for Java https://bugzilla.redhat.com/show_bug.cgi?id=1070436 -------------------------------------------------------------------------------- ================================================================================ libaccounts-glib-1.16-1.fc20 (FEDORA-2014-3180) Accounts framework for Linux and POSIX based platforms -------------------------------------------------------------------------------- Update Information: Update libaccounts-glib and libaccounts-qt to latest upstream release -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Daniel Vrátil <dvratil@xxxxxxxxxx> - 1.16-1 - Latest upstream release -------------------------------------------------------------------------------- ================================================================================ libaccounts-qt-1.11-1.fc20 (FEDORA-2014-3180) Accounts framework Qt bindings -------------------------------------------------------------------------------- Update Information: Update libaccounts-glib and libaccounts-qt to latest upstream release -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Daniel Vrátil <dvratil@xxxxxxxxxx> - 1.11-1 - Upodate to 1.11 * Sat Dec 14 2013 Michael Schwendt <mschwendt@xxxxxxxxxxxxxxxxx> - 1.6-4 - Fix duplicate documentation (#1001255) - Add %?_isa to -devel base package dep - Remove %defattr -------------------------------------------------------------------------------- ================================================================================ libmm-qt-1.0.1-1.fc20 (FEDORA-2014-3231) Qt-only wrapper for ModemManager DBus API -------------------------------------------------------------------------------- Update Information: Plasma-nm 0.9.3.3 release. See http://grulja.wordpress.com/2014/02/27/plasma-nm-is-finally-out/ -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 25 2014 Jan Grulich <jgrulich@xxxxxxxxxx> - 1:1.0.1-1 - Update to 1.0.1 - Remove ModemManager as dependency (#1063378) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1049135 - Connections not displayed correctly https://bugzilla.redhat.com/show_bug.cgi?id=1049135 [ 2 ] Bug #1063378 - kde-plasma-nm base package should not require ModemManager https://bugzilla.redhat.com/show_bug.cgi?id=1063378 -------------------------------------------------------------------------------- ================================================================================ libnm-qt-0.9.9.1-1.fc20 (FEDORA-2014-3231) Qt-only wrapper for NetworkManager DBus API -------------------------------------------------------------------------------- Update Information: Plasma-nm 0.9.3.3 release. See http://grulja.wordpress.com/2014/02/27/plasma-nm-is-finally-out/ -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 25 2014 Jan Grulich <jgrulich@xxxxxxxxxx> - 1:0.9.9.1-1.20140225gitb7f3d65 - Update to 0.9.9.1 (development version) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1049135 - Connections not displayed correctly https://bugzilla.redhat.com/show_bug.cgi?id=1049135 [ 2 ] Bug #1063378 - kde-plasma-nm base package should not require ModemManager https://bugzilla.redhat.com/show_bug.cgi?id=1063378 -------------------------------------------------------------------------------- ================================================================================ libqb-0.17.0-1.fc20 (FEDORA-2014-3207) An IPC library for high performance servers -------------------------------------------------------------------------------- Update Information: Rebase v0.17.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 19 2014 David Vossel <dvossel@xxxxxxxxxx> - 0.17.0-1 Fix: build: Allow 'make rpm' to work with lightweight tags for release candidates Fix: spec: reference correct url in spec file Doc: update broken doxygen link to something that exists Bump version to 0.17.0 Low: ipc_socket: further optimize max msg size calculations for fbsd portability tests Low: ipc_socket: Allow socket max msg size to be calculated more accurately Fix: fixes travis compile time error Low: tests: Fixes compile time issue with make check High: ipcs: Prevent ipc server use after free. Low: ipc: Remove ipc connection reference given to dispatch functions High: ipc: Fixes memory leak in server connection accept when client partially connects IPC: Increase the listen backlog of IPC server Low: ipcs: Clarifications to the ipcs server callback documentation. Fix rb.test to avoid overwriting memory during reading. Low: example: Update client/server example to use server enforced buffer size Low: Client side buffer retrieval regression test Feature: New api function to retrieve client buffer size Low: check_ipc.c: Verify server enforced buffer sizes work Feature: Enforce buffer size limits on the server side Low: regession tests for regex log filters Feature: Filter logs using regex patter on function, format, or filename ipc_setup: Set SO_PASSCRED on listener socket Fix: log: Filtering by function and file must match exactly, no substring matches Low: blackbox: Abort blackbox logging on ringbuffer overwrite reclaim error High: ipcs: Api function allowing server to retrieve client connection's ipc buffer size Low: ringbuffer: Abort during chunk reclaim if OVERWRITE flag is set and reclaim fails. High: blackbox: unique blackbox ringbuffer files per pid Low: ipc_socket: Fixes fd leak in socket ipc client disconnection Use sizeof to get the correct size of the sockaddr_un sun_path member in a portable way. Fixes corosync on Mac OS X. Detect the max signal value that can be used using NSIG macro Avoid double-decrement of level->todo -------------------------------------------------------------------------------- ================================================================================ libtcd-2.2.6-1.fc20 (FEDORA-2014-3223) Tide Constituent Database Library -------------------------------------------------------------------------------- Update Information: New version 2.2.6 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 2.2.6-1 - 2.2.6 -------------------------------------------------------------------------------- ================================================================================ marble-4.12.2-3.fc20 (FEDORA-2014-3206) Virtual globe and world atlas -------------------------------------------------------------------------------- Update Information: This update fixes Marble to use the current API for the geonames.org web services, making the Wikipedia, weather, postal codes and earthquakes services work again. See https://bugs.kde.org/show_bug.cgi?id=331004 for details. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> - 1:4.12.2-3 - apply upstream fix for geonames.org API change (kde#331004) - fix the hardcoded libmarblewidget version to actually match what is shipped * Thu Feb 6 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 1:4.12.2-2 - -libs: track libmarblewidget soname -------------------------------------------------------------------------------- ================================================================================ mingw-eigen3-3.2.1-1.fc20 (FEDORA-2014-3255) MinGW lightweight C++ template library for vector and matrix math -------------------------------------------------------------------------------- Update Information: Update to release 3.2.1, see http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.2.1 for details. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Sandro Mani <manisandro@xxxxxxxxx> - 3.2.1-1 - Update to release 3.2.1 * Mon Aug 5 2013 Sandro Mani <manisandro@xxxxxxxxx> - 3.2-3 - Add patch to work around gcc bug 58087 -------------------------------------------------------------------------------- ================================================================================ ntfs-3g-2014.2.15-1.fc20 (FEDORA-2014-3203) Linux NTFS userspace driver -------------------------------------------------------------------------------- Update Information: Update to the latest stable ntfs-3g code. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> 2:2014.2.15-1 - update to 2014.2.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #895431 - ntfs-3g-2014.2.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=895431 -------------------------------------------------------------------------------- ================================================================================ openlmi-scripts-0.2.7-5.fc20 (FEDORA-2014-3145) Client-side python modules and command line utilities -------------------------------------------------------------------------------- Update Information: New upstream version. Fixed storage mount list command. Support older OpenLMI Hardware providers. Added networking library. Documentation update on built-ins. Fixed thinlv checks in storage scripts. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Michal Minar <miminar@xxxxxxxxxx> 0.2.7-5 - Fixed error handling in service scripts. - Updated documentation for built-ins commands. - Fixed checking for thinlv provisioning in storage scripts. * Tue Feb 25 2014 Michal Minar <miminar@xxxxxxxxxx> 0.2.7-4 - Removed unstable features from hardware scripts. * Tue Feb 25 2014 Michal Minar <miminar@xxxxxxxxxx> 0.2.7-3 - Added account and powermanagement commands. * Tue Feb 25 2014 Michal Minar <miminar@xxxxxxxxxx> 0.2.7-2 - Fixed storage mount list command. * Tue Feb 25 2014 Michal Minar <miminar@xxxxxxxxxx> 0.2.7-1 - Support older OpenLMI Hardware providers. - Resolves: bz#1069320 * Mon Feb 24 2014 Michal Minar <miminar@xxxxxxxxxx> 0.2.7-0 - New upstream version. - Added system library. * Wed Jan 15 2014 Michal Minar <miminar@xxxxxxxxxx> 0.2.6-5 - Added networking library. * Mon Jan 13 2014 Michal Minar <miminar@xxxxxxxxxx> 0.2.5-4 - New upstream version. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1069320 - lmi hwinfo fails with no such class "LMI_DiskDrive" in "root/cimv2" namespace https://bugzilla.redhat.com/show_bug.cgi?id=1069320 [ 2 ] Bug #1051229 - lmi lv show fails with global name 'fcmd' is not defined https://bugzilla.redhat.com/show_bug.cgi?id=1051229 -------------------------------------------------------------------------------- ================================================================================ openstack-neutron-2013.2.2-2.fc20 (FEDORA-2014-2808) OpenStack Networking Service -------------------------------------------------------------------------------- Update Information: - Update to Havana 2013.2.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 19 2014 Pádraig Brady <pbrady@xxxxxxxxxx> - 2013.2.2-2 - Update to havana stable release 2013.2.2 - Sync up Quantum renaming changes from el6 branch * Fri Jan 24 2014 Terry Wilson <twilson@xxxxxxxxxx> - 2013.2.1-3 - Remove requirements.txt, bz#1057615 * Tue Jan 7 2014 Terry Wilson <twilson@xxxxxxxxxx> - 2013.2.1-1 - Add python-psutil requirement for openvswitch agent, bz#1049235 -------------------------------------------------------------------------------- ================================================================================ openstack-packstack-2013.2.1-0.32.dev987.fc20 (FEDORA-2014-3198) Openstack Install Utility -------------------------------------------------------------------------------- Update Information: This build contains ML2 support fixes - Fixes apache duplicated Listen statements - Adds back LibvirtHybridOVSBridgeDriver for OVS installations (rhbz#1052124) Havana bugfix release -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Martin Mágr <mmagr@xxxxxxxxxx> - 2013.2.1-0.32.dev987 - ML2 support fixes (rhbz#1066519, rhbz#1068962, rhbz#1069215) - Added allow_versions for swift storage all (#967308) * Fri Feb 14 2014 Martin Mágr <mmagr@xxxxxxxxxx> - 2013.2.1-0.31.dev982 - Fixes apache duplicated Listen statements - Adds back LibvirtHybridOVSBridgeDriver for OVS installations (rhbz#1052124) * Wed Feb 12 2014 Matthias Runge <mrunge@xxxxxxxxxx> - 2013.2.1-0.30.dev979 - fix build related issue on el7 - fix bogus date in changelogs * Fri Feb 7 2014 Martin Mágr <mmagr@xxxxxxxxxx> - 2013.2.1-0.30.dev979 - Update puppet-tempest module to stable/havana (rhbz#981116) - ML2 support (rhbz#1017144) - VXLAN support (rhbz#1021778) - Run keystone-manage token-flush every minute (rhbz#1029671) - Moved puppetlabs-firewall to upstream master (rhbz#1034538, rhbz#1018900) - Updated puppetlabs-mongodb module (rhbz#1028690, rhbz#1036207, rhbz#1029322) - Unified verbose and debug settings (rhbz#1048041) - Bugfix (rhbz#1050140) - Fixes nagios overwrite of apache configuration (rhbz#1054498) -------------------------------------------------------------------------------- References: [ 1 ] Bug #981116 - packstack fails with mysql-server dependency as a result of Fedora's switch to mariadb-server https://bugzilla.redhat.com/show_bug.cgi?id=981116 -------------------------------------------------------------------------------- ================================================================================ oxygen-gtk3-1.3.3-3.fc20 (FEDORA-2014-3175) Oxygen GTK+3 theme -------------------------------------------------------------------------------- Update Information: Fixed crash in firefox-gtk3. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Alexey Kurov <nucleo@xxxxxxxxxxxxxxxxx> - 1:1.3.3-3 - fix firefox-gtk3 crash (#1065099, kde#331020) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1065099 - [GTK3] firefox always crash [@ Oxygen::render_frame() ] https://bugzilla.redhat.com/show_bug.cgi?id=1065099 -------------------------------------------------------------------------------- ================================================================================ perl-File-Slurp-Tiny-0.003-3.fc20 (FEDORA-2014-3242) A simple, sane and efficient file slurper -------------------------------------------------------------------------------- Update Information: This is the first Fedora/EPEL release of perl-File-Slurp-Tiny. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1064995 - Review Request: perl-File-Slurp-Tiny - A simple, sane and efficient file slurper https://bugzilla.redhat.com/show_bug.cgi?id=1064995 -------------------------------------------------------------------------------- ================================================================================ perl-Module-Build-Tiny-0.035-1.fc20 (FEDORA-2014-3171) A tiny replacement for Module::Build -------------------------------------------------------------------------------- Update Information: This is an update to the current upstream release of Module-Build-Tiny, needed in order to update other packages by authors that auto-add a dependency on the latest and greatest version of Module::Build::Tiny for their releases. See https://github.com/Leont/dist-zilla-plugin-modulebuildtiny/issues/7 for a discussion with upstream about this practise. In order to support recent versions of Module-Build-Tiny, the TAP::Harness::Env module is introduced as a standalone package for Fedora 20. Upstream, this module is part of the Test-Harness distribution from version 3.29 onwards, but F-20 only has version 3.28 and since there is a backwards-incompatible change in version 3.29, there will be no update of Test-Harness in Fedora 20. -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 18 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.035-1 - Update to 0.035 - Fix install test in absence of a compiler * Wed Jan 22 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.034-1 - Update to 0.034 - Make install tests more platform independent * Tue Jan 21 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.033-1 - Update to 0.033 - Require Getopt::Long 2.36 - Add install tests * Mon Jan 20 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.032-1 - Update to 0.032 - Process argument sources separately - Use mod2fname appropriately - BR:/R: perl(DynaLoader) - BR: perl(GetOpt::Long) ≥ 2.36 for GetOptionsFromArray - Drop dependencies on TAP::Harness as we only use TAP::Harness::Env * Fri Oct 11 2013 Paul Howarth <paul@xxxxxxxxxxxx> - 0.030-1 - Update to 0.030 - Respect harness environmental variables - Add main dir to include path - 'include_dirs' must be a list ref, not just a string (CPAN RT#54606) - BR:/R: perl(TAP::Harness) ≥ 3.29 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1056343 - Please update perl-Module-Build-Tiny https://bugzilla.redhat.com/show_bug.cgi?id=1056343 [ 2 ] Bug #1067098 - Review Request: perl-TAP-Harness-Env - Parsing harness related environmental variables where appropriate https://bugzilla.redhat.com/show_bug.cgi?id=1067098 -------------------------------------------------------------------------------- ================================================================================ perl-Module-Extract-Namespaces-1.02-3.fc20 (FEDORA-2014-3196) Extract the package declarations from a module -------------------------------------------------------------------------------- Update Information: This is the first Fedora/EPEL release of perl-Module-Extract-Namespaces. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1069797 - Review Request: perl-Module-Extract-Namespaces - Extract the package declarations from a module https://bugzilla.redhat.com/show_bug.cgi?id=1069797 -------------------------------------------------------------------------------- ================================================================================ perl-PDL-2.7.0-3.fc20 (FEDORA-2014-3182) The Perl Data Language -------------------------------------------------------------------------------- Update Information: This release removes modules which are not usable if Slatec support is disabled. This affected 64-bit PowerPC architecture only. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 2.7.0-3 - Skip PDL::Slatec reverse dependencies if Slatec is disabled (bug #1041304) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1041304 - FTBFS: self check failures https://bugzilla.redhat.com/show_bug.cgi?id=1041304 -------------------------------------------------------------------------------- ================================================================================ perl-TAP-Harness-Env-3.30-3.fc20 (FEDORA-2014-3171) Parsing harness related environmental variables where appropriate -------------------------------------------------------------------------------- Update Information: This is an update to the current upstream release of Module-Build-Tiny, needed in order to update other packages by authors that auto-add a dependency on the latest and greatest version of Module::Build::Tiny for their releases. See https://github.com/Leont/dist-zilla-plugin-modulebuildtiny/issues/7 for a discussion with upstream about this practise. In order to support recent versions of Module-Build-Tiny, the TAP::Harness::Env module is introduced as a standalone package for Fedora 20. Upstream, this module is part of the Test-Harness distribution from version 3.29 onwards, but F-20 only has version 3.28 and since there is a backwards-incompatible change in version 3.29, there will be no update of Test-Harness in Fedora 20. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1056343 - Please update perl-Module-Build-Tiny https://bugzilla.redhat.com/show_bug.cgi?id=1056343 [ 2 ] Bug #1067098 - Review Request: perl-TAP-Harness-Env - Parsing harness related environmental variables where appropriate https://bugzilla.redhat.com/show_bug.cgi?id=1067098 -------------------------------------------------------------------------------- ================================================================================ perl-Time-Out-0.11-1.fc20 (FEDORA-2014-3165) Easily timeout long running operations -------------------------------------------------------------------------------- Update Information: Initial release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1068842 - Review Request: perl-Time-Out - Easily timeout long running operations https://bugzilla.redhat.com/show_bug.cgi?id=1068842 -------------------------------------------------------------------------------- ================================================================================ python-croniter-0.3.4-2.fc20 (FEDORA-2014-3229) Iteration for datetime object with cron like format -------------------------------------------------------------------------------- Update Information: - Iteration for datetime object with cron like format -------------------------------------------------------------------------------- References: [ 1 ] Bug #1068644 - Review Request: python-croniter - Iteration for datetime object with cron like format https://bugzilla.redhat.com/show_bug.cgi?id=1068644 -------------------------------------------------------------------------------- ================================================================================ python-freezegun-0.1.12-1.fc20 (FEDORA-2014-3247) Let your Python tests travel through time -------------------------------------------------------------------------------- Update Information: New package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1064576 - Review Request: python-freezegun - Let your Python tests travel through time https://bugzilla.redhat.com/show_bug.cgi?id=1064576 -------------------------------------------------------------------------------- ================================================================================ python-neutronclient-2.3.1-3.fc20 (FEDORA-2014-2808) Python API and CLI for OpenStack Neutron -------------------------------------------------------------------------------- Update Information: - Update to Havana 2013.2.2 -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 25 2014 Jakub Ruzicka <jruzicka@xxxxxxxxxx> 2.3.1-3 - Fixed get_auth_info() for pre-authenticated clients -------------------------------------------------------------------------------- ================================================================================ python-pep8-1.4.6-2.fc20 (FEDORA-2014-3208) Python style guide checker -------------------------------------------------------------------------------- Update Information: rename py3 version of pep8 to python3-pep8 (rhbz#1060408) -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Matthias Runge <mrunge@xxxxxxxxxx> -1.4.6-2 - rename py3 version of pep8 to python3-pep8 (rhbz#1060408) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1060408 - Missing %{_bindir}/python3-pep8 https://bugzilla.redhat.com/show_bug.cgi?id=1060408 -------------------------------------------------------------------------------- ================================================================================ python-pyghmi-0.5.9-1.fc20 (FEDORA-2014-3212) Python General Hardware Management Initiative (IPMI and others) -------------------------------------------------------------------------------- Update Information: Initial package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1067445 - Review Request: python-pyghmi - Python General Hardware Management Initiative https://bugzilla.redhat.com/show_bug.cgi?id=1067445 -------------------------------------------------------------------------------- ================================================================================ python-pytest-cov-1.6-1.fc20 (FEDORA-2014-3209) Pytest plugin for coverage reporting -------------------------------------------------------------------------------- Update Information: Py.test plugin for coverage reporting with support for both centralised and distributed testing, including subprocesses and multiprocessing. -------------------------------------------------------------------------------- ================================================================================ retrace-server-1.11-1.fc20 (FEDORA-2014-3239) Application for remote coredump analysis -------------------------------------------------------------------------------- Update Information: update to 1.11 -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Michal Toman <mtoman@xxxxxxxxxx> 1.11-1 - do not die trying to chmod a hardling - do not hardlink unpacked vmcores - print command line formatted correctly - allow submitting vmcores with spaces in file name - do not run makedumpfile when not necessary - allow to specify kernel VRA with custom cores - do not require the trailing slash in task manager URL - do not kill retrace-server-cleanup when retrace_log does not exist - cache kernel version into task directory - add support for ppc64, s390x - include floating point registers in userspace backtraces - execute ABRT's exploitability plugin if available -------------------------------------------------------------------------------- ================================================================================ rubygem-actionpack-4.0.0-3.fc20 (FEDORA-2014-3169) Web-flow and rendering framework putting the VC in MVC -------------------------------------------------------------------------------- Update Information: This fixes Ruby on Rails 4.0.3 security CVEs: - CVE-2014-0080 - CVE-2014-0081 -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Josef Stribny <jstribny@xxxxxxxxxx> - 1:4.0.0-3 - Fix CVE-2014-0081 * Mon Dec 16 2013 Josef Stribny <jstribny@xxxxxxxxxx> - 1:4.0.0-2 - Fixes for CVE-2013-6414, CVE-2013-6415, CVE-2013-6416, CVE-2013-6417, CVE-2013-4491 -------------------------------------------------------------------------------- ================================================================================ rubygem-activerecord-4.0.0-2.fc20 (FEDORA-2014-3169) Implements the ActiveRecord pattern for ORM -------------------------------------------------------------------------------- Update Information: This fixes Ruby on Rails 4.0.3 security CVEs: - CVE-2014-0080 - CVE-2014-0081 -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Josef Stribny <jstribny@xxxxxxxxxx> - 1:4.0.0-2 - Fix CVE-2014-0080: PostgreSQL array data injection vulnerability - Fix SQLite tests -------------------------------------------------------------------------------- ================================================================================ rubygem-coderay-1.1.0-1.fc20 (FEDORA-2014-3230) Fast syntax highlighter engine for many programming languages -------------------------------------------------------------------------------- Update Information: - update to new version (1.0.1) -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Jan Klepek <jan.klepek at, gmail.com> - 1.1.0-1 - update to new version * Mon Aug 19 2013 Jan Klepek <jan.klepek at, gmail.com> - 1.0.7-1 - update to new version -------------------------------------------------------------------------------- References: [ 1 ] Bug #834993 - rubygem-coderay-1.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=834993 -------------------------------------------------------------------------------- ================================================================================ rubygem-gettext-3.1.1-1.fc20 (FEDORA-2014-3226) RubyGem of Localization Library and Tools for Ruby -------------------------------------------------------------------------------- Update Information: New version 3.1.1 is released. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 3.1.1-1 - 3.1.1 -------------------------------------------------------------------------------- ================================================================================ rubygem-rspec-mocks-2.14.6-1.fc20 (FEDORA-2014-3183) Rspec-2 doubles (mocks and stubs) -------------------------------------------------------------------------------- Update Information: New version 2.14.6 is released. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 2.14.6-1 - 2.14.6 -------------------------------------------------------------------------------- ================================================================================ scala-stm-0.7-2.fc20 (FEDORA-2014-3160) Software Transactional Memory for Scala -------------------------------------------------------------------------------- Update Information: Initial update. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1069444 - Review Request: scala-stm - software transactional memory for Scala https://bugzilla.redhat.com/show_bug.cgi?id=1069444 -------------------------------------------------------------------------------- ================================================================================ scalaz-7.0.0-2.fc20 (FEDORA-2014-3228) extension to the core Scala library for functional programming -------------------------------------------------------------------------------- Update Information: Scalaz provides functional-programming extensions to the Scala library. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1055809 - Review Request: scalaz - functional programming for Scala https://bugzilla.redhat.com/show_bug.cgi?id=1055809 -------------------------------------------------------------------------------- ================================================================================ scap-security-guide-0.1.5-1.fc20 (FEDORA-2014-3172) Security guidance and baselines in SCAP formats -------------------------------------------------------------------------------- Update Information: Update to upstream 0.1.5 version. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Jan iankko Lieskovsky <jlieskov@xxxxxxxxxx> 0.1.5-1 - Fix fedora-srpm and fedora-rpm Make targets to work again - Include RHEL-6 and RHEL-7 datastream files to support remote RHEL system scans - EOL for Fedora 18 support - Include Fedora datastream file for remote Fedora system scans -------------------------------------------------------------------------------- References: [ 1 ] Bug #1070906 - [RFE] Generate datastream output format for Fedora SCAP content too (necessary for remote system scans) https://bugzilla.redhat.com/show_bug.cgi?id=1070906 -------------------------------------------------------------------------------- ================================================================================ sensible-utils-0.0.9-1.fc20 (FEDORA-2014-3167) Utilities for sensible alternative selection -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1067917 - Review Request: sensible-utils - Utilities for sensible alternative selection https://bugzilla.redhat.com/show_bug.cgi?id=1067917 -------------------------------------------------------------------------------- ================================================================================ spambayes-1.1-0.8.b1.fc20 (FEDORA-2014-3181) Bayesian anti-spam classifier written in Python -------------------------------------------------------------------------------- Update Information: spambayes-1.1b1, probably the last available version from upstream. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Christopher Meng <rpm@xxxxxxxx> - 1.1-0.8.b1 - Update to 1.1b1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1069446 - spambayes-1.1b1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1069446 -------------------------------------------------------------------------------- ================================================================================ sparse-0.5.0-1.fc20 (FEDORA-2014-3176) A semantic parser of source files -------------------------------------------------------------------------------- Update Information: This updates sparse to the latest upstream release. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Jeff Layton <jlayton@xxxxxxxxxx> - 0.5.0-1 - update to v0.5.0 -------------------------------------------------------------------------------- ================================================================================ spice-gtk-0.23-2.fc20 (FEDORA-2014-3210) A GTK+ widget for SPICE clients -------------------------------------------------------------------------------- Update Information: Fix crash on finishing display rhbz#1069546 Update to spice-gtk 0.23 -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 25 2014 Marc-André Lureau <marcandre.lureau@xxxxxxxxxx> - 0.23-2 - Fix crash on finishing display rhbz#1069546 * Mon Feb 10 2014 Marc-André Lureau <marcandre.lureau@xxxxxxxxxx> - 0.23-1 - Update to spice-gtk 0.23 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1069546 - [abrt] virt-viewer: g_slice_free1(): remote-viewer killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=1069546 -------------------------------------------------------------------------------- ================================================================================ tagainijisho-1.0.1-2.fc20 (FEDORA-2014-3240) A free Japanese dictionary and study assistant -------------------------------------------------------------------------------- Update Information: Update to 1.0.1. Remove skip code (non-redistributable). -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 25 2014 Martin Sourada <mso@xxxxxxxxxxxxxxxxx> - 1.0.1-2 - Update build-deps. * Mon Feb 24 2014 Martin Sourada <mso@xxxxxxxxxxxxxxxxx> - 1.0.1-1 - Update to 1.0.1 (rhbz #1033895) - Remove skip code from kanjidic2 (rhbz #969414) -- licence does not permit redistribution. -------------------------------------------------------------------------------- References: [ 1 ] Bug #969414 - tagainijisho included non-free contects https://bugzilla.redhat.com/show_bug.cgi?id=969414 -------------------------------------------------------------------------------- ================================================================================ testdisk-6.14-3.fc20 (FEDORA-2014-3203) Tool to check and undelete partition, PhotoRec recovers lost files -------------------------------------------------------------------------------- Update Information: Update to the latest stable ntfs-3g code. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Kalev Lember <kalevlember@xxxxxxxxx> - 6.14-3 - Rebuilt for ntfs-3g soname bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #895431 - ntfs-3g-2014.2.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=895431 -------------------------------------------------------------------------------- ================================================================================ tmux-1.9a-2.fc20 (FEDORA-2014-3161) A terminal multiplexer -------------------------------------------------------------------------------- Update Information: Fix rhbz #1069950, upstream [tmux:tickets] #105 New upstream release 1.9a New upstream release 1.9 -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Filipe Rosset <rosset.filipe@xxxxxxxxx> 1.9a-2 - Fix rhbz #1069950, upstream [tmux:tickets] #105 * Sun Feb 23 2014 Filipe Rosset <rosset.filipe@xxxxxxxxx> 1.9a-1 - New upstream release 1.9a * Sat Feb 22 2014 Filipe Rosset <rosset.filipe@xxxxxxxxx> 1.9-1 - New upstream release 1.9 - Fix rhbz #1067860 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1069950 - tmux 1.9a instantly segfaults with MALLOC_CHECK_=2 https://bugzilla.redhat.com/show_bug.cgi?id=1069950 [ 2 ] Bug #1067860 - [RFE]: Please update the RPM scriptlet based on the new guideline https://bugzilla.redhat.com/show_bug.cgi?id=1067860 [ 3 ] Bug #1067908 - tmux-1.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1067908 -------------------------------------------------------------------------------- ================================================================================ tofrodos-1.7.13-2.fc20 (FEDORA-2014-3238) Converts text files between MSDOS and Unix file formats -------------------------------------------------------------------------------- Update Information: Wheels reinvented like unix2dos. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1063140 - Review Request: tofrodos - Converts text files between MSDOS and Unix file formats https://bugzilla.redhat.com/show_bug.cgi?id=1063140 -------------------------------------------------------------------------------- ================================================================================ tumbler-0.1.30-1.fc20 (FEDORA-2014-3221) D-Bus service for applications to request thumbnails -------------------------------------------------------------------------------- Update Information: Update to 0.1.30. minor bugfixes and translation updates. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Kevin Fenzi <kevin@xxxxxxxxx> 0.1.30-1 - Update to 0.1.30 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1070201 - tumbler-0.1.30 is available https://bugzilla.redhat.com/show_bug.cgi?id=1070201 -------------------------------------------------------------------------------- ================================================================================ typesafe-config-1.2.0-2.fc20 (FEDORA-2014-3216) Configuration library for JVM languages -------------------------------------------------------------------------------- Update Information: Initial update. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1069399 - Review Request: typesafe-config - configuration library for JVM languages https://bugzilla.redhat.com/show_bug.cgi?id=1069399 -------------------------------------------------------------------------------- ================================================================================ uncommons-maths-1.2.3-1.fc20 (FEDORA-2014-3191) Random number generators library for Java -------------------------------------------------------------------------------- Update Information: Initial import (#1069495). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1069495 - Review Request: uncommons-maths - Random number generators library for Java https://bugzilla.redhat.com/show_bug.cgi?id=1069495 -------------------------------------------------------------------------------- ================================================================================ v8-3.14.5.10-6.fc20 (FEDORA-2014-3222) JavaScript Engine -------------------------------------------------------------------------------- Update Information: Common Vulnerabilities and Exposures assigned an identifier CVE-2013-6650 to the following vulnerability: Name: CVE-2013-6650 URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6650 The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors that trigger incorrect handling of "popular pages." -------------------------------------------------------------------------------- ChangeLog: * Mon Feb 24 2014 Tomas Hrcka <thrcka@xxxxxxxxxx> - 1:3.14.5.10-6 - Backport fix for incorrect handling of popular pages (RHBZ#1059070; CVE-2013-6640) * Fri Feb 14 2014 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 1:3.14.5.10-5 - rebuild for icu-52 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1059070 - CVE-2013-6650 v8: incorrect handling of popular pages https://bugzilla.redhat.com/show_bug.cgi?id=1059070 -------------------------------------------------------------------------------- ================================================================================ virt-viewer-0.6.0-1.fc20 (FEDORA-2014-3202) Virtual Machine Viewer -------------------------------------------------------------------------------- Update Information: Update to 0.6.0 release -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2014 Christophe Fergeau <cfergeau@xxxxxxxxxx> 0.6.0-1 - Update to 0.6.0 release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1044209 - remote-viewer not invoked from "xdg-open console.vv" command https://bugzilla.redhat.com/show_bug.cgi?id=1044209 -------------------------------------------------------------------------------- ================================================================================ xfdashboard-0.1.4-2.fc20 (FEDORA-2014-3248) GNOME shell like dashboard for Xfce -------------------------------------------------------------------------------- Update Information: Patch for enabling workspace switching added Update to version 0.1.4. This release also provides support for themes -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 25 2014 Mukundan Ragavan <nonamedotc@xxxxxxxxxxxxxxxxx> - 0.1.4-2 - Patch for enabling workspace switching added - Upstream bug - issue#1 on github * Mon Feb 24 2014 Mukundan Ragavan <nonamedotc@xxxxxxxxxxxxxxxxx> - 0.1.4-1 - Updated to the latest upstream version - Includes theming support (provides a default theme) -------------------------------------------------------------------------------- ================================================================================ yawn-0-0.16.20140227svn630.fc20 (FEDORA-2014-3189) Yet Another WBEM Navigator -------------------------------------------------------------------------------- Update Information: Fixed enumeration of instrumented classes. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 27 2014 Michal Minar <miminar@xxxxxxxxxx> 0-0.16.20140227svn630 - New upstream version fixing enumeration of instrumetned classes. -------------------------------------------------------------------------------- ================================================================================ zorba-2.9.1-4.fc20 (FEDORA-2014-3224) General purpose XQuery processor implemented in C++ -------------------------------------------------------------------------------- Update Information: - fix strtok(NULL, ...) on armv7hl and aarch64 (and ppc64 and s390x...) -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 25 2014 Kyle McMartin <kyle@xxxxxxxxxx> - 2.9.1-4 - fix strtok(NULL, ...) on armv7hl and aarch64 (and ppc64 and s390x...) * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.9.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Tue Jul 30 2013 Petr Machata <pmachata@xxxxxxxxxx> - 2.9.1-2 - Rebuild for boost 1.54.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1069294 - zorba fails to build for ARM https://bugzilla.redhat.com/show_bug.cgi?id=1069294 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
