The following Fedora 20 Security updates need testing: Age URL 109 https://admin.fedoraproject.org/updates/FEDORA-2014-5897/nrpe-2.15-2.fc20 59 https://admin.fedoraproject.org/updates/FEDORA-2014-7551/asterisk-11.10.2-2.fc20 58 https://admin.fedoraproject.org/updates/FEDORA-2014-7613/perl-Email-Address-1.905-1.fc20 40 https://admin.fedoraproject.org/updates/FEDORA-2014-8065/rubygem-activerecord-4.0.0-4.fc20 18 https://admin.fedoraproject.org/updates/FEDORA-2014-9092/libplist-1.11-2.fc20,libusbmuxd-1.0.9-2.fc20,libimobiledevice-1.1.6-2.fc20,usbmuxd-1.0.9-0.4.c24463e.fc20,ifuse-1.1.3-3.fc20,libgpod-0.8.3-2.fc20,upower-0.9.23-3.fc20,gvfs-1.18.3-3.fc20 18 https://admin.fedoraproject.org/updates/FEDORA-2014-9052/drupal7-date-2.8-1.fc20 10 https://admin.fedoraproject.org/updates/FEDORA-2014-9281/drupal6-6.33-1.fc20 10 https://admin.fedoraproject.org/updates/FEDORA-2014-9278/drupal7-7.31-1.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2014-9264/wordpress-3.9.2-3.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-9361/php-htmlpurifier-htmlpurifier-4.6.0-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-9344/sks-1.1.5-2.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-9412/ppp-2.4.5-34.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-9380/struts-1.3.10-10.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-9367/libserf-1.3.7-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-9407/fish-2.1.0-11.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-9476/cinnamon-screensaver-2.2.4-3.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-9472/xen-4.3.2-7.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-9474/pipelight-0.2.7.3-3.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-9457/pen-0.25.1-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-9540/python-pillow-2.2.1-5.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-9542/perl-Plack-1.0031-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-9555/phpMyAdmin-4.2.7.1-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-9583/mediawiki-1.23.2-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-9581/jakarta-commons-httpclient-3.1-15.fc20 The following Fedora 20 Critical Path updates have yet to be approved: Age URL 4 https://admin.fedoraproject.org/updates/FEDORA-2014-9412/ppp-2.4.5-34.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-9459/satyr-0.14-2.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-9492/chrony-1.30-2.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-9437/gdb-7.7.1-18.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-9462/poppler-data-0.4.7-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-9443/vim-7.4.402-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-8287/dhcp-4.2.7-2.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-9527/perl-Socket-2.015-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-9530/hwdata-0.269-1.fc20 The following builds have been pushed to Fedora 20 updates-testing baloo-4.13.3-2.fc20 bustle-0.4.7-1.fc20 ceph-0.80.5-6.fc20 digikam-4.2.0-5.fc20 emacs-24.3-24.fc20 engrampa-1.8.0-3.fc20 fedora-dockerfiles-0-0.10.git0d2f49b.fc20 fedora-review-0.5.2-1.fc20 gparted-0.18.0-2.fc20 httraqt-1.4.4-2.fc20 hwdata-0.269-1.fc20 jakarta-commons-httpclient-3.1-15.fc20 java-1.8.0-openjdk-1.8.0.11-8.b12.fc20 jemalloc-3.6.0-8.fc20 libwapcaplet-0.2.1-2.fc20 lifeograph-1.1.0-1.fc20 lis-1.4.57-1.fc20 makepasswd-0.5.3-6.fc20 mediawiki-1.23.2-1.fc20 mingw-p11-kit-0.20.4-1.fc20 mingw-postgresql-9.3.5-1.fc20 mlmmj-1.2.18.1-1.fc20 moarvm-0.2014.04-3.fc20 nodejs-pac-resolver-1.2.2-1.fc20 nodejs-rainbowsocks-0.1.2-1.fc20 nodejs-regenerator-0.4.9-2.fc20 nqp-0.0.2014.04-1.fc20 openttd-1.4.2-1.fc20 pcc-1.1.0-0.2.20140817cvs.fc20.1 perl-Log-Dispatch-2.42-1.fc20 perl-Plack-1.0031-1.fc20 perl-Socket-2.015-1.fc20 perl-Test-Warn-0.30-1.fc20 perl-XML-TreeBuilder-5.4-0.fc20 php-gliph-0.1.8-1.fc20 php-guzzlehttp-streams-1.5.1-1.fc20 php-horde-Horde-Util-2.5.1-1.fc20 php-htmLawed-1.1.18-1.fc20 phpMyAdmin-4.2.7.1-1.fc20 pidgin-sipe-1.18.3-1.fc20 python-pillow-2.2.1-5.fc20 quodlibet-3.2.1-1.fc20 rakudo-star-0.0.2014.04_6.1.0-1.fc20 streamtuner-2.1.3-1.fc20 subsurface-4.2-1.fc20 w_scan-20140727-1.fc20 wine-1.7.24-1.fc20 zeitgeist-0.9.14-4.fc20 Details about builds: ================================================================================ baloo-4.13.3-2.fc20 (FEDORA-2014-9576) A framework for searching and managing metadata -------------------------------------------------------------------------------- Update Information: Improve coinstallability with kf5-baloo -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 Daniel Vrátil <dvratil@xxxxxxxxxx> - 4.13.3-2 - Improve coinstallability with kf5-baloo - Move Akonadi indexer to -akonadi subpackage - Move stores and plugins to -libs subpackage -------------------------------------------------------------------------------- ================================================================================ bustle-0.4.7-1.fc20 (FEDORA-2014-9573) Draw pretty sequence diagrams of D-Bus traffic -------------------------------------------------------------------------------- Update Information: spec file generated by cabal-rpm-0.8.11 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1129484 - Review Request: bustle - Draw pretty sequence diagrams of D-Bus traffic https://bugzilla.redhat.com/show_bug.cgi?id=1129484 -------------------------------------------------------------------------------- ================================================================================ ceph-0.80.5-6.fc20 (FEDORA-2014-9535) User space components of the Ceph file system -------------------------------------------------------------------------------- Update Information: We need to downgrade the package to the latest stable version for fedora 20 as well. This package also fixes many bugs (several of them filed against rawhide). -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Kalev Lember <kalevlember@xxxxxxxxx> - 1:0.80.5-6 - Obsolete ceph-libcephfs * Sat Aug 16 2014 Boris Ranto <branto@xxxxxxxxxx> - 1:0.80.5-5 - Do not require xfsprogs/xfsprogs-devel for el6 - Require gperftools-devel for non-ppc*/s390* architectures only - Do not require junit -- no need to build libcephfs-test.jar - Build without libxfs for el6 - Build without tcmalloc for ppc*/s390* architectures - Location of mkcephfs must depend on a rhel release - Use epoch in the Requires fields [1130700] * Sat Aug 16 2014 Boris Ranto <branto@xxxxxxxxxx> - 1:0.80.5-4 - Use the proper version name in Obsoletes * Fri Aug 15 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1:0.80.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Fri Aug 15 2014 Boris Ranto <branto@xxxxxxxxxx> - 1:0.80.5-2 - Add the arm pthread hack * Fri Aug 15 2014 Boris Ranto <branto@xxxxxxxxxx> - 1:0.80.5-1 - Bump the Epoch, we need to keep the latest stable, not development, ceph version in fedora - Use the upstream spec file with the ceph-libs split - Add libs-compat subpackage [1116546] - use fedora in rhel 7 checks - obsolete libcephfs [1116614] - depend on redhat-lsb-core for the initscript [1108696] * Wed Aug 13 2014 Kalev Lember <kalevlember@xxxxxxxxx> - 0.81.0-6 - Add obsoletes to keep the upgrade path working (#1118510) * Mon Jul 7 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 0.81.0-5 - revert to old spec until after f21 branch * Fri Jul 4 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - temporary exclude f21/armv7hl. N.B. it builds fine on f20/armv7hl. * Fri Jul 4 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 0.81.0-4 - upstream ceph.spec file * Tue Jul 1 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 0.81.0-3 - upstream ceph.spec file * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.81.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu Jun 5 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - el6 ppc64 likewise for tcmalloc, merge from origin/el6 * Thu Jun 5 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - el6 ppc64 does not have gperftools, merge from origin/el6 * Thu Jun 5 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 0.81.0-1 - ceph-0.81.0 * Wed Jun 4 2014 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 0.80.1-5 - gperftools now available on aarch64/ppc64 * Fri May 23 2014 Petr Machata <pmachata@xxxxxxxxxx> - 0.80.1-4 - Rebuild for boost 1.55.0 * Fri May 23 2014 David Tardon <dtardon@xxxxxxxxxx> - 0.80.1-3 - rebuild for boost 1.55.0 * Wed May 14 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 0.80.1-2 - build epel-6 - exclude %{_libdir}/ceph/erasure-code in base package * Tue May 13 2014 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 0.80.1-1 - Update to latest stable upstream release, BZ 1095201 - PIE, _hardened_build, BZ 955174 * Thu Feb 6 2014 Ken Dreyer <ken.dreyer@xxxxxxxxxxx> - 0.72.2-2 - Move plugins from -devel into -libs package (#891993). Thanks Michael Schwendt. * Mon Jan 6 2014 Ken Dreyer <ken.dreyer@xxxxxxxxxxx> 0.72.2-1 - Update to latest stable upstream release - Use HTTPS for URLs - Submit Automake 1.12 patch upstream - Move unversioned shared libs from ceph-libs into ceph-devel * Wed Dec 18 2013 Marcin Juszkiewicz <mjuszkiewicz@xxxxxxxxxx> 0.67.3-4 - build without tcmalloc on aarch64 (no gperftools) * Sat Nov 30 2013 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 0.67.3-3 - gperftools not currently available on aarch64 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1108696 - Ceph missing dependency on redhat-lsb-core https://bugzilla.redhat.com/show_bug.cgi?id=1108696 [ 2 ] Bug #1116546 - ceph-libs are obsoleted but not provided https://bugzilla.redhat.com/show_bug.cgi?id=1116546 -------------------------------------------------------------------------------- ================================================================================ digikam-4.2.0-5.fc20 (FEDORA-2014-9563) A digital camera accessing & photo management application -------------------------------------------------------------------------------- Update Information: digiKam 4.2.0 See release notes https://www.digikam.org/node/715 -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 13 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.2.0-5 - core/CMakeLists.txt too (#1119036) * Wed Aug 13 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.2.0-4 - hack to allow build with older opencv (#1119036) * Thu Aug 7 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.2.0-3 - rebuild (marble) * Wed Aug 6 2014 Alexey Kurov <nucleo@xxxxxxxxxxxxxxxxx> - 4.2.0-2 - enable kdepimlibs support disabled by default in 4.2.0 (kde#338055) * Mon Aug 4 2014 Alexey Kurov <nucleo@xxxxxxxxxxxxxxxxx> - 4.2.0-1 - digikam-4.2.0 * Sun Aug 3 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.1.0-4 - make kio_mtp fedora only * Wed Jul 23 2014 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> - 4.1.0-3 - apply upstream patch to handle QtGstreamer API 1.0 in VideoSlideShow tool; whether to build against QtGStreamer 0.10 or 1.x is autodetected (#1092659) * Mon Jul 14 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.1.0-2 - rebuild (marble) * Sun Jun 29 2014 Alexey Kurov <nucleo@xxxxxxxxxxxxxxxxx> - 4.1.0-1 - digikam-4.1.0 - OpenCV >= 2.4.9 required for libkface -------------------------------------------------------------------------------- References: [ 1 ] Bug #1119036 - Digikam 4.1+ not yet available for Fedora 20 https://bugzilla.redhat.com/show_bug.cgi?id=1119036 [ 2 ] Bug #1128494 - flickr plugin: cannot login anymore, flickr API now requires HTTPS https://bugzilla.redhat.com/show_bug.cgi?id=1128494 [ 3 ] Bug #1123841 - Resized images cannot be viewed properly https://bugzilla.redhat.com/show_bug.cgi?id=1123841 -------------------------------------------------------------------------------- ================================================================================ emacs-24.3-24.fc20 (FEDORA-2014-9582) GNU Emacs text editor -------------------------------------------------------------------------------- Update Information: unremove emacs from emacs-nox package, emacs and emacs-nox co-exist emacs.service file for systemd (#1128723) -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 jchaloup <jchaloup@xxxxxxxxxx> - 1:24.3-24 - resolves: #1130587 unremove emacs from emacs-nox package, emacs and emacs-nox co-exist * Mon Aug 11 2014 Petr Hracek <phracek@xxxxxxxxxx> - 1:24.3-23 - emacs.service file for systemd (#1128723) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1130587 - emacs-nox no longer provides /usr/bin/emacs https://bugzilla.redhat.com/show_bug.cgi?id=1130587 [ 2 ] Bug #1128723 - Emacs should provide emacs service file https://bugzilla.redhat.com/show_bug.cgi?id=1128723 -------------------------------------------------------------------------------- ================================================================================ engrampa-1.8.0-3.fc20 (FEDORA-2014-9585) MATE Desktop file archiver -------------------------------------------------------------------------------- Update Information: - add json-glib-devel as BR - fix https://github.com/mate-desktop/engrampa/issues/59 -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1.8.0-3 - add json-glib-devel as BR - fix https://github.com/mate-desktop/engrampa/issues/59 -------------------------------------------------------------------------------- ================================================================================ fedora-dockerfiles-0-0.10.git0d2f49b.fc20 (FEDORA-2014-9541) Example dockerfiles to assist standing up containers quickly -------------------------------------------------------------------------------- Update Information: * fixes the deprecation of -rm flag by upstream * adds new dockerfiles archful as per docker-io -------------------------------------------------------------------------------- ChangeLog: * Sat Aug 16 2014 Aditya Patawari <adimania@xxxxxxxxxxxxxxxxx> - 0-0.10.git - fixing the source file with a version bump * Sat Aug 16 2014 Aditya Patawari <adimania@xxxxxxxxxxxxxxxxx> - 0-0.9.git - more dockerfiles with bugfixes * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.8.git122ef5d - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Tue Jul 1 2014 Lokesh Mandvekar <lsm5@xxxxxxxxxxxxxxxxx> - 0-0.7.git - archful as per docker-io * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.6.git122ef5d - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1121111 - various README.md is out of date for shipped version of docker https://bugzilla.redhat.com/show_bug.cgi?id=1121111 -------------------------------------------------------------------------------- ================================================================================ fedora-review-0.5.2-1.fc20 (FEDORA-2014-9519) Review tool for fedora rpm packages -------------------------------------------------------------------------------- Update Information: Update to latest bugfix release -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 14 2014 Stanislav Ochotnicky <sochotnicky@xxxxxxxxxx> - 0.5.2-1 - Update to latest upstream bugfix release * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.5.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ gparted-0.18.0-2.fc20 (FEDORA-2014-9523) Gnome Partition Editor -------------------------------------------------------------------------------- Update Information: disabled online-resize - bugfix update -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Mukundan Ragavan <nonamedotc@xxxxxxxxxxxxxxxxx> - 0.18.0-2 - Removed enable-online-resize option since parted <3.2 does not support this - Fixes bz #1121350 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1121350 - GParted compiled with online resize support when when libparted doesn't support it https://bugzilla.redhat.com/show_bug.cgi?id=1121350 -------------------------------------------------------------------------------- ================================================================================ httraqt-1.4.4-2.fc20 (FEDORA-2014-9562) HTTrack Qt GUI -------------------------------------------------------------------------------- Update Information: Qt GUI of httrack -------------------------------------------------------------------------------- References: [ 1 ] Bug #1123690 - Review Request: httraqt - HTTrack Qt GUI https://bugzilla.redhat.com/show_bug.cgi?id=1123690 -------------------------------------------------------------------------------- ================================================================================ hwdata-0.269-1.fc20 (FEDORA-2014-9530) Hardware identification and configuration data -------------------------------------------------------------------------------- Update Information: Updated pci, usb and vendor ids. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 Michal Minar <miminar@xxxxxxxxxx> 0.269-1.fc20 - Updated pci, usb and vendor ids. -------------------------------------------------------------------------------- ================================================================================ jakarta-commons-httpclient-3.1-15.fc20 (FEDORA-2014-9581) Jakarta Commons HTTPClient implements the client side of HTTP standards -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2014-3577, CVE-2012-6153 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 Michal Srb <msrb@xxxxxxxxxx> - 1:3.1-15 - Fix MITM security vulnerability - Resolves: CVE-2014-3577 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1129074 - CVE-2014-3577 Apache HttpComponents client: Hostname verification susceptible to MITM attack https://bugzilla.redhat.com/show_bug.cgi?id=1129074 [ 2 ] Bug #1129916 - CVE-2012-6153 Apache HttpComponents client: Hostname verification susceptible to MITM attack https://bugzilla.redhat.com/show_bug.cgi?id=1129916 -------------------------------------------------------------------------------- ================================================================================ java-1.8.0-openjdk-1.8.0.11-8.b12.fc20 (FEDORA-2014-9537) OpenJDK Runtime Environment -------------------------------------------------------------------------------- Update Information: This update modifies src.zip to include sources for all Java compiled into OpenJDK. -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 15 2014 Omair Majid <omajid@xxxxxxxxxx> - 1:1.8.0.11-8.b12 - Include all sources in src.zip - Resolves rhbz#1130490 * Mon Jul 21 2014 Jiri Vanek <jvanek@xxxxxxxxxx> - 1:1.8.0.11-7.b12 - removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers - added patch patch9999 enableArm64.patch to enable new hotspot -------------------------------------------------------------------------------- References: [ 1 ] Bug #1130490 - java-1.8.0-openjdk: src.zip is incomplete https://bugzilla.redhat.com/show_bug.cgi?id=1130490 -------------------------------------------------------------------------------- ================================================================================ jemalloc-3.6.0-8.fc20 (FEDORA-2014-9553) General-purpose scalable concurrent malloc implementation -------------------------------------------------------------------------------- Update Information: s390 build fix Added valgrind-devel to BuildRequires, fixing bz #974270. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 Ingvar Hagelund <ingvar@xxxxxxxxxxxxxxxxxx> - 3.6.0-8 - valgrind-devel is not available on s390, closes #1131014 * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.6.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Fri Aug 15 2014 Ingvar Hagelund <ingvar@xxxxxxxxxxxxxxxxxx> - 3.6.0-6 - bz #1106933 fix only for fedora 21 and above * Fri Aug 15 2014 Ingvar Hagelund <ingvar@xxxxxxxxxxxxxxxxxx> - 3.6.0-5 - Added valgrind-devel to BuildRequires, fixing bz #974270 * Fri Aug 15 2014 Ingvar Hagelund <ingvar@xxxxxxxxxxxxxxxxxx> - 3.6.0-4 - Added an i686 build fixing bz #1106933 * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.6.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Tue Apr 1 2014 Ingvar Hagelund <ingvar@xxxxxxxxxxxxxxxxxx> - 3.6.0-2 - Patch that removes explicit altivec on el5/ppc -------------------------------------------------------------------------------- References: [ 1 ] Bug #1131014 - jemalloc: build fails on s390 https://bugzilla.redhat.com/show_bug.cgi?id=1131014 [ 2 ] Bug #974270 - Build dependencies should include valgrind-devel https://bugzilla.redhat.com/show_bug.cgi?id=974270 -------------------------------------------------------------------------------- ================================================================================ libwapcaplet-0.2.1-2.fc20 (FEDORA-2014-9551) A string internment library -------------------------------------------------------------------------------- Update Information: For netsurf -------------------------------------------------------------------------------- ================================================================================ lifeograph-1.1.0-1.fc20 (FEDORA-2014-9518) A diary program -------------------------------------------------------------------------------- Update Information: ** Update to latest upstream release - 1.1.0 ** **Release notes ** 1.1.0 is a new version that has huge improvements over the already wonderful 1.0 release. It offers extensive improvements on many aspects but the main improvements are the to-do entries, integration of themes into tags, and the new filtering system. To be on the safe side, please consider backing up your diaries before upgrading. ** Changelog ** * Added options for changing the format dates are displayed in * Added a new entry type for todo items * Added many new icons and updated some of the existing ones * Updated the main window layout * Improved the presentation of favored and trashed entries in the list * Merged themes into the tags * Modified the tag widget to render each tag using the themes associated with them * Added the ability to import chapters from other diaries * Created a new WYSIWYG like theme editing widget * Created a metatag called "Untagged" for theming and filtering entries not associated with any tag * A new filtering system where filtering status can be edited in a dedicated view and can be saved to the diary * Upgraded the diary file format serve the new features * Lifeograph now itself creates a backup copy of the old diaries when upgrading * Added a hidden option to disable scaling in the entry and tag lists to solve the problems in some high resolution setups * Minimum required Gtk+ version bumped to 3.6 * Fixed crash on Gtk+ 3.12 * Miscellaneous bug fixes * Translation updates -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Ankur Sinha <ankursinha AT fedoraproject DOT org> 1.1.0-1 - Update to latest upstream release * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.1-3.r1642 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri Apr 11 2014 Ankur Sinha <ankursinha AT fedoraproject DOT org> 1.0.1-2.r1642 - Update to revision 1642 to fix gnome 3.12 crash * Mon Feb 24 2014 Ankur Sinha <ankursinha AT fedoraproject DOT org> 1.0.1-1 - Update to latest upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1096861 - lifeograph does not start https://bugzilla.redhat.com/show_bug.cgi?id=1096861 -------------------------------------------------------------------------------- ================================================================================ lis-1.4.57-1.fc20 (FEDORA-2014-9586) A library for solving linear equations and eigenvalue problems -------------------------------------------------------------------------------- Update Information: Update to 1.4.57 Update to 1.4.56 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.57-1 - Update to 1.4.57 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.4.56-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Tue Aug 12 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.56-1 - Update to 1.4.56 - Drop group-tag - Fix permission for AUTHORS and COPYING * Mon Aug 11 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.55-1 - Update to 1.4.55 - Add noarch to subpackage doc - Remove requires from subpackage doc * Sun Aug 10 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.53-2 - Remove defattr at the beginning of the files-section - Use default buildroot instead of making its own - Remove unnecessary clean-section - Use pushd and popd instead of cd * Sat Aug 9 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.53-1 - Update to 1.4.53 * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.4.20-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sun Dec 15 2013 Susi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 1.4.20-1 - Update to 1.4.20. * Mon Sep 9 2013 Susi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 1.4.13-1 - Update to 1.4.13. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1128366 - Review Request: lis - A library for solving linear equations and eigenvalue problems https://bugzilla.redhat.com/show_bug.cgi?id=1128366 -------------------------------------------------------------------------------- ================================================================================ makepasswd-0.5.3-6.fc20 (FEDORA-2014-9569) Generates (pseudo-)random passwords of a desired length -------------------------------------------------------------------------------- Update Information: Fix for BZ#1126076 -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Johan Swensson <kupo@xxxxxxx> - 0.5.3-6 - Fix for BZ#1126076 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.5.3-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.5.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1126076 - [abrt] makepasswd: _makepasswd_password(): makepasswd killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1126076 -------------------------------------------------------------------------------- ================================================================================ mediawiki-1.23.2-1.fc20 (FEDORA-2014-9583) A wiki engine -------------------------------------------------------------------------------- Update Information: This is a major update from the 1.21 branch to the 1.23 long term support branch. * (bug 68187) SECURITY: Prepend jsonp callback with comment. - CVE-2014-5241 * (bug 66608) SECURITY: Fix for XSS issue in bug 66608: Generate the URL used for loading a new page in Javascript,instead of relying on the URL in the link that has been clicked. - CVE-2014-5242 * (bug 65778) SECURITY: Copy prevent-clickjacking between OutputPage and ParserOutput. - CVE-2014-5243 -------------------------------------------------------------------------------- ChangeLog: * Sat Aug 16 2014 Michael Cronenworth <mike@xxxxxxxxxx> - 1.23.2-1 - Update to 1.23.2 (long term support branch) - (bug 68187) SECURITY: Prepend jsonp callback with comment. - (bug 66608) SECURITY: Fix for XSS issue in bug 66608: Generate the URL used for loading a new page in Javascript,instead of relying on the URL in the link that has been clicked. - (bug 65778) SECURITY: Copy prevent-clickjacking between OutputPage and ParserOutput. - (bug 68313) Preferences: Turn stubthreshold back into a combo box. - (bug 65214) Fix initSiteStats.php maintenance script. - (bug 67594) Special:ActiveUsers: Fix to work with PostgreSQL. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1125111 - CVE-2014-5241,CVE-2014-5242,CVE-2014-5243 mediawiki: security issues fixed in the 1.19.18, 1.22.9, and 1.23.2 releases https://bugzilla.redhat.com/show_bug.cgi?id=1125111 -------------------------------------------------------------------------------- ================================================================================ mingw-p11-kit-0.20.4-1.fc20 (FEDORA-2014-9554) MinGW Library for loading and sharing PKCS#11 modules -------------------------------------------------------------------------------- Update Information: 0.20.4 (stable) * Don't complain about C_Finalize after a fork * Fix typo 0.20.3 (stable) * Fix problems reinitializing managed modules after fork * Fix bad bookeeping when fail initializing one of the modules * Fix case where module would be unloaded while in use [#74919] * Remove assertions when module used before initialized [#74919] * Fix handling of mmap failure and mapping empty files [#74773] * Stable p11_kit_be_quiet() and p11_kit_be_loud() functions * Require automake 1.12 or later * Build fixes for Windows [#76594 #74149] -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Michael Cronenworth <mike@xxxxxxxxxx> - 0.20.4-1 - New upstream release. -------------------------------------------------------------------------------- ================================================================================ mingw-postgresql-9.3.5-1.fc20 (FEDORA-2014-9522) MinGW Windows PostgreSQL library -------------------------------------------------------------------------------- Update Information: update to 9.3.5 per release notes http://www.postgresql.org/docs/9.3/static/release-9-3-5.html -------------------------------------------------------------------------------- ChangeLog: * Sat Aug 16 2014 Michael Cronenworth <mike@xxxxxxxxxx> - 9.3.5-1 - New upstream release. * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 9.3.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ mlmmj-1.2.18.1-1.fc20 (FEDORA-2014-9572) A simple and slim mailing list manager inspired by ezmlm -------------------------------------------------------------------------------- Update Information: 1.2.18.1 * Stop mlmmj-maintd deleting list posts while they are being sent * Fix +list from crashing Mlmmj * Fix bug that made double subscription possible -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 Christopher Meng <rpm@xxxxxxxx> - 1.2.18.1-1 - Update to 1.2.18.1 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2.18.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2.18.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ moarvm-0.2014.04-3.fc20 (FEDORA-2014-9574) Short for "Metamodel On A Runtime", MoarVM is a virtual machine as a backend for NQP and then Rakudo Perl 6 at the top. -------------------------------------------------------------------------------- Update Information: initial commit for the f20 branch -------------------------------------------------------------------------------- References: [ 1 ] Bug #1071163 - Review Request: moarvm - Short for "Metamodel On A Runtime", MoarVM is a virtual machine as a backend for NQP and then Rakudo Perl 6 at the top. https://bugzilla.redhat.com/show_bug.cgi?id=1071163 -------------------------------------------------------------------------------- ================================================================================ nodejs-pac-resolver-1.2.2-1.fc20 (FEDORA-2014-9517) Generates an asynchronous resolver function from a PAC file -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1122229 - Review Request: nodejs-pac-resolver - Generates an asynchronous resolver function from a PAC file https://bugzilla.redhat.com/show_bug.cgi?id=1122229 -------------------------------------------------------------------------------- ================================================================================ nodejs-rainbowsocks-0.1.2-1.fc20 (FEDORA-2014-9588) SOCKS4a proxy client -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1122232 - Review Request: nodejs-rainbowsocks - SOCKS4a proxy client https://bugzilla.redhat.com/show_bug.cgi?id=1122232 -------------------------------------------------------------------------------- ================================================================================ nodejs-regenerator-0.4.9-2.fc20 (FEDORA-2014-9520) Source transformer enabling ECMAScript 6 generators -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1122235 - Review Request: nodejs-regenerator - Source transformer enabling ECMAScript 6 generators https://bugzilla.redhat.com/show_bug.cgi?id=1122235 -------------------------------------------------------------------------------- ================================================================================ nqp-0.0.2014.04-1.fc20 (FEDORA-2014-9526) Not Quite Perl (6) -------------------------------------------------------------------------------- Update Information: add subpackage moar -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 15 2014 Gerd Pokorra <gp@xxxxxxxxxxxxxxxxxx> 0.0.2014.04-1 - add subpackage moar - update to 20014.04 -------------------------------------------------------------------------------- ================================================================================ openttd-1.4.2-1.fc20 (FEDORA-2014-9560) Transport system simulation game -------------------------------------------------------------------------------- Update Information: Update to 1.4.2 containing a few minor bugfixes -------------------------------------------------------------------------------- ChangeLog: * Sat Aug 16 2014 Felix Kaechele <heffer@xxxxxxxxxxxxxxxxx> - 1.4.2-1 - update to 1.4.2 -------------------------------------------------------------------------------- ================================================================================ pcc-1.1.0-0.2.20140817cvs.fc20.1 (FEDORA-2014-9524) The Portable C Compiler -------------------------------------------------------------------------------- Update Information: Update to 20140817 by request of upstream. -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Susi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 1.1.0-0.1.20140817cvs - Update to 20140817. * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.1.0-0.2.20140420cvs.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Fri Jun 6 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.1.0-0.1.20140420cvs.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ perl-Log-Dispatch-2.42-1.fc20 (FEDORA-2014-9579) Dispatches messages to one or more outputs -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 2.42-1 - Upstream update. - Reflect dep changes. - Add Log-Dispatch-2.42.diff. - Remove Log-Dispatch-2.38.diff * Mon Apr 7 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 2.41-2 - Build-require a sendmail program for tests (bug #1083418) -------------------------------------------------------------------------------- ================================================================================ perl-Plack-1.0031-1.fc20 (FEDORA-2014-9542) Perl Superglue for Web frameworks and Web Servers (PSGI toolkit) -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 8 2014 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 1.0031-1 - Upstream update. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1128978 - CVE-2014-5269 perl-Plack: trailing slashes removed leading to source code disclosure https://bugzilla.redhat.com/show_bug.cgi?id=1128978 -------------------------------------------------------------------------------- ================================================================================ perl-Socket-2.015-1.fc20 (FEDORA-2014-9527) Networking constants and support functions -------------------------------------------------------------------------------- Update Information: This release fixes recognizing dotted IPv4 address and it corrects internal tests. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 1:2.015-1 - 0.15 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1131080 - perl-Socket-2.015 is available https://bugzilla.redhat.com/show_bug.cgi?id=1131080 -------------------------------------------------------------------------------- ================================================================================ perl-Test-Warn-0.30-1.fc20 (FEDORA-2014-9584) Perl extension to test methods for warnings -------------------------------------------------------------------------------- Update Information: This is the current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 5 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.30-1 - Update to 0.30 - Important note in documentation how check for warning category is done; if you use Test::Warn with categories, you should check that it does what you expect - Category tree is now dynamic and does not use Tree::DAG_Node * Tue Feb 18 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 0.24-8 - Specify all dependencies -------------------------------------------------------------------------------- References: [ 1 ] Bug #1130869 - Please update to upstream version >= 0.30 https://bugzilla.redhat.com/show_bug.cgi?id=1130869 -------------------------------------------------------------------------------- ================================================================================ perl-XML-TreeBuilder-5.4-0.fc20 (FEDORA-2014-9587) Parser that builds a tree of XML::Element objects -------------------------------------------------------------------------------- Update Information: New upstream: Thu May 29 2014 Jeff Fearn <Jeff.Fearn@xxxxxxxxx> Release 5.4 Do not escape CDATA content. Tue May 27 2014 Jeff Fearn <Jeff.Fearn@xxxxxxxxx> Release 5.3 Fix CDATA not being printed properly by as_XML. RT #95970 Fix Devel::Cover declared as build_requires but not used RT #93155 Fix XML::Catalog version number mismatch. RT #93154 Mon Dec 9 2013 Jeff Fearn <Jeff.Fearn@xxxxxxxxx> Release 5.2 Fix local path resolution. RT #90464 -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 6 2014 Rüdiger Landmann <rlandmann@xxxxxxxxxx> - 5.4-0 - New upstream -------------------------------------------------------------------------------- ================================================================================ php-gliph-0.1.8-1.fc20 (FEDORA-2014-9570) A graph library for PHP -------------------------------------------------------------------------------- Update Information: [0.1.8](https://github.com/sdboyer/gliph/releases/tag/0.1.8) ------- * Detach the right splos [0.1.7](https://github.com/sdboyer/gliph/releases/tag/0.1.7) ------- * Add _cleanupSplosTraversal() for callability in closures. -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Shawn Iwinski <shawn.iwinski@xxxxxxxxx> - 0.1.8-1 - Updated to 0.1.8 (BZ #1125361) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1125361 - php-gliph-0.1.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1125361 -------------------------------------------------------------------------------- ================================================================================ php-guzzlehttp-streams-1.5.1-1.fc20 (FEDORA-2014-9528) Provides a simple abstraction over streams of data -------------------------------------------------------------------------------- Update Information: [1.5.1 (2014-09-10)](https://github.com/guzzle/streams/releases/tag/1.5.1) -------------------- * Stream metadata is grabbed from the underlying stream each time `getMetadata` is called rather than returning a value from a cache. * Properly closing all underlying streams when AppendStream is closed. * Seek functions no longer throw exceptions. * LazyOpenStream now correctly returns the underlying stream resource when detached. [1.5.0 (2014-08-07)](https://github.com/guzzle/streams/releases/tag/1.5.0) -------------------- * Added `Stream\safe_open` to open stream resources and throw exceptions instead of raising errors. -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Shawn Iwinski <shawn.iwinski@xxxxxxxxx> - 1.5.1-1 - Updated to 1.5.1 (BZ #1128102) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1128102 - php-guzzlehttp-streams-1.5.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1128102 -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Util-2.5.1-1.fc20 (FEDORA-2014-9333) Horde Utility Libraries -------------------------------------------------------------------------------- Update Information: Horde_Util 2.5.1 * [mms] Fix another issue with older versions of PHP in Horde_String_Transliterate. Horde_Util 2.5.0 * [mms] Fix regression in Horde_String_Transliterate for PHP 5.3 (Bug #13419). * [mms] Added Horde_String::ipos() and Horde_String::ripos(). -------------------------------------------------------------------------------- ChangeLog: * Sat Aug 16 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.5.1-1 - Update to 2.5.1 * Mon Aug 11 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.5.0-1 - Update to 2.5.0 -------------------------------------------------------------------------------- ================================================================================ php-htmLawed-1.1.18-1.fc20 (FEDORA-2014-9556) PHP code to purify and filter HTML -------------------------------------------------------------------------------- Update Information: Version 1.1.18 - 2 August 2014. * Fix for a potential security vulnerability arising from specially encoded text with serial opening tags -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 1.1.18-1 - update to 1.1.18 (security) - fix license handling -------------------------------------------------------------------------------- ================================================================================ phpMyAdmin-4.2.7.1-1.fc20 (FEDORA-2014-9555) Handle the administration of MySQL over the World Wide Web -------------------------------------------------------------------------------- Update Information: phpMyAdmin 4.2.7.1 (2014-08-17) =============================== - [security] XSS in table browse page - [security] Self-XSS in enum value editor - [security] Self-XSSes in monitor - [security] Self-XSS in query charts - [security] XSS in view operations page - [security] XSS in relation view -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 4.2.7.1-1 - Upgrade to 4.2.7.1 (#1130865, #1130866, #1131104) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1130865 - CVE-2014-5273 phpMyAdmin: multiple cross-site scripting issues (PMASA-2014-8) https://bugzilla.redhat.com/show_bug.cgi?id=1130865 [ 2 ] Bug #1130866 - CVE-2014-5274 phpMyAdmin: cross-site scripting flaw on view operations page (PMASA-2014-9) https://bugzilla.redhat.com/show_bug.cgi?id=1130866 -------------------------------------------------------------------------------- ================================================================================ pidgin-sipe-1.18.3-1.fc20 (FEDORA-2014-9531) Pidgin protocol plugin to connect to MS Office Communicator -------------------------------------------------------------------------------- Update Information: New upstream release: * fixes audio/video call if host has IPv6 address (bz #1124510) * fixes assert triggered by EWS autodiscover in older libxml2 versions * fixes crash triggered by EWS autodiscover when glib2 < 2.30.0 -------------------------------------------------------------------------------- ChangeLog: * Sat Aug 16 2014 Stefan Becker <chemobejk@xxxxxxxxx> - 1.18.3-1 - update to 1.18.3: - fixes audio/video call if host has IPv6 address (bz #1124510) - fixes assert triggered by EWS autodiscover in older libxml2 versions - fixes crash triggered by EWS autodiscover when glib2 < 2.30.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1124510 - upgrade to 1.18.2 breaks voice calls https://bugzilla.redhat.com/show_bug.cgi?id=1124510 -------------------------------------------------------------------------------- ================================================================================ python-pillow-2.2.1-5.fc20 (FEDORA-2014-9540) Python image processing library -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2014-3589 -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Sandro Mani <manisandro@xxxxxxxxx> - 2.2.1-5 - Fix CVE-2014-3589 (rhbz #1130712) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1130711 - CVE-2014-3589 python-pillow: DoS in IcnsImagePlugin https://bugzilla.redhat.com/show_bug.cgi?id=1130711 -------------------------------------------------------------------------------- ================================================================================ quodlibet-3.2.1-1.fc20 (FEDORA-2014-9543) A music management program -------------------------------------------------------------------------------- Update Information: - update to bugfix release 3.2.1 - https://quodlibet.readthedocs.org/en/latest/changelog.html -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Johannes Lips <hannes@xxxxxxxxxxxxxxxxx> - 3.2.1-1 - update to recent upstream bugfix release 3.2.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1130704 - exfalso NameError: global name 'set_columns' is not defined https://bugzilla.redhat.com/show_bug.cgi?id=1130704 -------------------------------------------------------------------------------- ================================================================================ rakudo-star-0.0.2014.04_6.1.0-1.fc20 (FEDORA-2014-9590) Rakudo, Perl6-modules and documentation -------------------------------------------------------------------------------- Update Information: updated to 2014.04 -------------------------------------------------------------------------------- ChangeLog: * Sat Aug 16 2014 Gerd Pokorra <gp@xxxxxxxxxxxxxxxxxx> - 0.0.2014.04_6.1.0-1 - updated to 2014.04 - prepare for JVM and MoarVM -------------------------------------------------------------------------------- ================================================================================ streamtuner-2.1.3-1.fc20 (FEDORA-2014-9557) An internet radio browser -------------------------------------------------------------------------------- Update Information: - update to 2.1.3 (fixed shoutcast plugin) - readd live365 plugin -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Leigh Scott <leigh123linux@xxxxxxxxxxxxxx> - 2.1.3-1 - update to 2.1.3 - drop upstream patch - readd live365 plugin - drop requires gtk-doc * Thu Jul 3 2014 Leigh Scott <leigh123linux@xxxxxxxxxxxxxx> - 2.1.1-8 - add requires youtube-dl (required for youtube record) * Thu Jul 3 2014 Leigh Scott <leigh123linux@xxxxxxxxxxxxxx> - 2.1.1-7 - fix issue with totem playing youtube video * Thu Jul 3 2014 Leigh Scott <leigh123linux@xxxxxxxxxxxxxx> - 2.1.1-6 - fix myoggradio plugin -------------------------------------------------------------------------------- ================================================================================ subsurface-4.2-1.fc20 (FEDORA-2014-9538) A feature-full divelog in Qt -------------------------------------------------------------------------------- Update Information: Update to 4.2 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 Pierre-Yves Chibon <pingou@xxxxxxxxxxxx> - 4.2-1 - Update to 4.2 * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 4.0.3-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Wed Aug 6 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.0.3-5 - rebuild (marble) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1096145 - subsurface-4.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1096145 -------------------------------------------------------------------------------- ================================================================================ w_scan-20140727-1.fc20 (FEDORA-2014-9578) Tool for scanning DVB transponders -------------------------------------------------------------------------------- Update Information: Contains some minor bugfixes, especially for users of DVB-T/T2 in Finland -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 17 2014 Felix Kaechele <heffer@xxxxxxxxxxxxxxxxx> - 20140727-1 - update to 20140727 * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 20140118-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ wine-1.7.24-1.fc20 (FEDORA-2014-9533) A compatibility layer for windows applications -------------------------------------------------------------------------------- Update Information: * Wine fonts are no longer installed in the system folder. Version 1.7.24 * Beginning of some DirectWrite classes implementation. * Initial wrapper dll for the packet capture library. * Some crypto improvements. * Various bug fixes. Version 1.7.23 * Better support for files drag & drop. * Improvements to the HTTP cookie management. * Initial support for 64-bit Android builds. * Fixes to crypto certificates management. * Various bug fixes. -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 15 2014 Michael Cronenworth <mike@xxxxxxxxxx> - 1.7.24-1 - version upgrade - No longer install Wine fonts into system directory (rhbz#1039763) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1124297 - wine-1.7.24 is available https://bugzilla.redhat.com/show_bug.cgi?id=1124297 [ 2 ] Bug #1039763 - wine-courier-fonts overrides system courier font with limited .fon file https://bugzilla.redhat.com/show_bug.cgi?id=1039763 -------------------------------------------------------------------------------- ================================================================================ zeitgeist-0.9.14-4.fc20 (FEDORA-2014-9568) Framework providing Desktop activity awareness -------------------------------------------------------------------------------- Update Information: Cherry-pick commit to fix SQL errors when built with vala-0.24 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 18 2014 Christopher Meng <rpm@xxxxxxxx> - 0.9.14-4 - Cherry-pick commit to fix SQL errors when built with vala-0.24, Fix BZ#1130769 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1130769 - Empathy and Contacts crash on start https://bugzilla.redhat.com/show_bug.cgi?id=1130769 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
