The following Fedora 21 Security updates need testing: Age URL 7 https://admin.fedoraproject.org/updates/FEDORA-2014-10171/apache-poi-3.10.1-1.fc21 7 https://admin.fedoraproject.org/updates/FEDORA-2014-10153/torque-4.2.8-1.fc21 7 https://admin.fedoraproject.org/updates/FEDORA-2014-10211/geary-0.7.2-1.fc21 7 https://admin.fedoraproject.org/updates/FEDORA-2014-10142/procmail-3.22-36.fc21 3 https://admin.fedoraproject.org/updates/FEDORA-2014-10507/knot-1.5.2-1.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2014-10617/xerces-j2-2.11.0-22.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2014-10600/pdns-recursor-3.6.1-1.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2014-10679/curl-7.37.0-7.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2014-10691/not-yet-commons-ssl-0.3.15-2.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2014-10693/kernel-3.16.2-301.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-10761/qemu-2.1.1-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-10770/moodle-2.7.2-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-10766/mod_gnutls-0.5.10-13.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-10767/squid-3.4.7-2.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-10809/python-oauth2-1.5.211-7.fc21 The following Fedora 21 Critical Path updates have yet to be approved: Age URL 11 https://admin.fedoraproject.org/updates/FEDORA-2014-9990/lz4-r122-1.fc21 7 https://admin.fedoraproject.org/updates/FEDORA-2014-10215/libbluray-0.6.2-1.fc21 7 https://admin.fedoraproject.org/updates/FEDORA-2014-10125/ppp-2.4.7-4.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2014-10608/usbmuxd-1.0.9-0.6.c24463e.fc21,libusbmuxd-1.0.9-4.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2014-10690/anaconda-21.48.6-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2014-10686/pungi-3.12-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-10781/orc-0.4.22-3.fc21 The following builds have been pushed to Fedora 21 updates-testing 389-ds-base-1.3.3.3-1.fc21 PackageKit-Qt-0.9.2-6.fc21 ack-2.14-1.fc21 dnsenum-1.2.4.1-1.fc21 freeipa-4.0.3-1.fc21 gnulib-0-10.20140910git.fc21.1 linux-firmware-20140912-39.git365e80cce.fc21 mingw-crt-3.9.999-0.1.trunk.git.b08afb.20140912.fc21 mingw-headers-3.9.999-0.1.trunk.git.b08afb.20140912.fc21 mingw-winpthreads-3.9.999-0.1.trunk.git.b08afb.20140912.fc21 mingw-winstorecompat-3.9.999-0.1.trunk.git.b08afb.20140912.fc21 perl-Mo-0.39-1.fc21 plplot-5.10.0-11.fc21 profile-sync-daemon-5.50-1.fc21 python-gmpy2-2.0.3-2.fc21 python-oauth2-1.5.211-7.fc21 python-qrcode-5.0.1-1.fc21 python-shadowsocks-2.2.1-1.fc21 python-swiftclient-2.1.0-3.fc21 redis-2.8.15-1.fc21 uwsgi-2.0.7-1.fc21 Details about builds: ================================================================================ 389-ds-base-1.3.3.3-1.fc21 (FEDORA-2014-10811) 389 Directory Server (base) -------------------------------------------------------------------------------- Update Information: Update FreeIPA to the latest 4.0.3 release This update addresses issues with Active Directory trusts. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Rich Megginson <rmeggins@xxxxxxxxxx> - 1.3.3.3-1 - Release 1.3.3.3 - Ticket #47892 - coverity defects found in 1.3.3.1 * Fri Sep 12 2014 Nathan Kinder <nkinder@xxxxxxxxxx> - 1.3.3.2-2 - Corrected source tarball * Thu Sep 11 2014 Noriko Hosoi <nhosoi@xxxxxxxxxx> - 1.3.3.2-1 - Release 1.3.3.2 - Ticket 47889 - DS crashed during ipa-server-install on test_ava_filter - Ticket 47895 - If no effective ciphers are available, disable security setting. - Ticket 47838 - harden the list of ciphers available by default - Ticket 47885 - did not always return a response control - Ticket 47890 - minor memory leaks in utilities - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check - Ticket 47875 - dirsrv not running with old openldap - Ticket 47885 - deref plugin should not return references with noc access rights * Wed Sep 3 2014 Noriko Hosoi <nhosoi@xxxxxxxxxx> - 1.3.3.0-1 - Release 1.3.3.0 - Ticket 47879 - coverity defects in plugins/replication/windows_protocol_util.c - Ticket 47876 - coverity defects in slapd/tools/mmldif.c - Ticket 47574 - start dirsrv after ntpd - Ticket 47838 - harden the list of ciphers available by default - Ticket 47579 - add dbmon.sh - Ticket 47819 - Fix memory leak - Ticket 47819 - Improve tombstone purging performance - Ticket 47714 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime. - Ticket 47812 - logconv.pl missing -U option from usage - Ticket 47664 - Page control does not work if effective rights control is specified - Ticket 47790 - Integer config attributes accept invalid values at server startup - Ticket 47710 - Missing warning for invalid replica backoff configuration - Ticket 47853 - Missing newline at end of the error log messages in memberof - Ticket 47853 - client hangs in add if memberof fails - Ticket 47746 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf - Ticket 47711 - improve dbgen rdn generation, output and man page. - Ticket 47855 - Fix previous commit - Ticket 47859 - Coverity: 12692 & 12717 - Ticket 47855 - clear tmp directory at the start of each test - Ticket 47844 - Fix hyphens used as minus signed and other manpage mistakes - Ticket 47843 - Fix various typos in manpages & code - Ticket 47832 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro - Ticket 47852 - Updating winsync one-way sync does not affect the behaviour dynamically - Ticket 47846 - server crashes deleting a replication agreement - Ticket 47823 - attribute uniqueness enforced on all subtrees - Ticket 47654 - Fix regression (deadlock/crash) - Ticket 47827 - Fix coverity issue 12695 - Ticket 47829: memberof scope: allow to exclude subtrees - Ticket 47815 - Add operations rejected by betxn plugins remain in cache - Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed - Ticket 555 - add fixup-memberuid.pl script - Ticket 47827 - online import crashes server if using verbose error logging - fix compiler error with alst coverity commit - fix coverity issue 12621 - Ticket 47810 - investigate betxn plugins to ensure they return the correct error code - Ticket 47602 - txn commit being performed too early - Ticket 47752 - Don't add unhashed password mod if we don't have an unhashed value - Ticket 47803 - syncrepl crash if attribute list is non-empty - Ticket 47466 - Fix coverity issue - Ticket 47644 - Managed Entry Plugin - transaction not aborted upon failure to create managed entry - Ticket 47791 - Negative value of nsSaslMapPriority is not reset to lowest priority - Ticket 47805 - syncrepl doesn't send notification when attribute in search filter changes - Ticket 47636 - errorlog-level 16384 is listed as 0 in cn=config - Ticket 47451 - Remove old code from linked attr plugin - Ticket 47756 - fix coverity issues - Ticket 47761 - Return all attributes in rootdse without explicit request - fix assertion failure introduced with fix for ticket 47667 - Ticket 47712 - betxn: retro changelog broken after cancelled transaction - Ticket 47667 - Allow nsDS5ReplicaBindDN to be a group DN - Ticket 47655 - Improve replication total update logging - Ticket 47756 - Improve import logging and abort processing - Ticket 47451 - add/enable/disable/remove plugins without server restart - Ticket 47553 - Enhance ACIs to have more control over MODRDN operations - Ticket 47727 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53 - Ticket 47725 - compiler error on daemon.c - Ticket 47701 - Make retro changelog trim interval programmable - Ticket 47453 - configure SASL/GSSAPI/Kerberos without server restart - Ticket 47701 - Make retro changelog trim interval programmable - Ticket 47602 - Make ldbm_back_seq independently support transactions - Ticket 47552 - logconv: unindexed report should list bind dn - Ticket 47619 - cannot reindex retrochangelog - Update test cases due to new modules: Schema, tasks, plugins and index - Ticket 47608 - change slapi_entry_attr_get_bool to handle "on"/"off" values, support default value - Ticket 47437 - Some attributes in cn=config should not be multivalued - Ticket 47573 - schema push can be erronously prevented - Ticket 47618 - Enable normalized DN cache by default - Ticket 47570 - slapi_ldap_init unusable during independent plugin development - Ticket 47659 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV - Ticket 47654 - fix double free - Ticket 47675 - logconv errors when search has invalid bind dn - Ticket 47657 - add schema test suite and tests for Ticket #47634 - Ticket 47668 - test: port ticket47490_test to Replica/Agreement interface (47600) - Ticket 47654 - Cleanup old memory leaks reported from valgrind - Ticket 47651 - Finaliser to remove instances backups - Ticket 47603 - should not modify pre op entry during config validation - Ticket 47628 - port testcases to new DirSrv interface - Ticket 47525 - Don't modify preop entry in memberOf config - Ticket 605 - support TLS 1.1 - Fixing "Coverity 12415 - Logically dead code" - Ticket 605 - support TLS 1.1 - lower the log level for the supported NSS version range - Ticket 47368 - fix memory leaks - Ticket 605 - support TLS 1.1 - adding backward compatibility - Ticket 605 - support TLS 1.1 - Ticket 47603 - Allow RI plugin to use alternate config area - Ticket 47586 - Need to rebind after a stop (fix to run direct python script) - Ticket 47525 - Need to add locking around config area access - Ticket 47457 - default nsslapd-sasl-max-buffer-size should be 2MB - Ticket 47525 - Fix memory leak - Ticket 381 - Recognize compressed log files - Ticket 47525 - Allow memberOf to use an alternate config area - Ticket 47529 - Automember plug-in should treat MODRDN operations as ADD operations - Ticket 47521 - Complex filter in a search request doen't work as expected. - Ticket 47582 - agmt_count in Replica could become (PRUint64)-1 - Ticket 47368 - Fix coverity issues - Ticket 47555 - db2bak.pl issue when specifying non-default directory - Ticket 47368 - Fix Jenkins errors - Ticket 47368 - IPA server dirsrv RUV entry data excluded from replication - Ticket 538 - - hardcoded sasl2 plugin path in ldaputil.c, saslbind.c - Ticket 47519 - memory leaks in access control - Ticket 47398 - memberOf on a user is converted to lowercase - Coverity Issue 12033 - Ticket 47530 - dbscan on entryrdn should show all matching values - Ticket 47422 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added - bump autoconf to 2.69, automake to 1.13.4, libtool to 2.4.2 - Ticket 47436 - 389-ds-base - shebang with /usr/bin/env - Ticket 47499 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message. - Ticket 47530 - dbscan on entryrdn should show all matching values - Ticket 47535 - update man page - Ticket 53 - Need to update supported locales Cleaning up typos and format. - Ticket 47535 - Logconv.pl - RFE - add on option for a minimum etime for unindexed search stats - Ticket 47491 - Update systemd service file to use PartOf directive * Wed Aug 27 2014 Noriko Hosoi <nhosoi@xxxxxxxxxx> - 1.3.2.23-1 - Release 1.3.2.23 - Ticket 47871 - 389-ds-base-1.3.2.21-1.fc20 crashed over the weekend - Ticket 47866 - Errors after upgrading related to attribute "dnaremotebindmethod" - Ticket 47816 - v2- internal syncrepl searches are flagged as unindexed - Ticket 47877 - check_and_add_entry fails for changetype: add and existing entry - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47875 - dirsrv not running with old openldap - Revert "Ticket #47875 - dirsrv not running with old openldap" - Ticket 47875 - dirsrv not running with old openldap - Ticket 47446 - logconv.pl memory continually grows - Ticket 47874 - Performance degradation with scope ONE after some load - Ticket 47872 - Filter AND with only one clause should be optimized - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47862 - repl-monitor fails to convert "*" to default values - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix. - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters - Ticket 346 - Fixing memory leaks - Ticket 47753 - Add switch to disable pre-hashed password checking - Ticket 47861 - Certain schema files are not replaced during upgrade - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server - Ticket 47797 - fix the indentation - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL - Ticket 47692 - single valued attribute replicated ADD does not work - Ticket 47781 - Server deadlock if online import started while server is under load -------------------------------------------------------------------------------- ================================================================================ PackageKit-Qt-0.9.2-6.fc21 (FEDORA-2014-10812) Qt support library for PackageKit -------------------------------------------------------------------------------- Update Information: This update makes PackageKit-Qt depend on PackageKit, because, well, PackageKit-Qt does nothing useful without PackageKit. Without this, it was possible to wind up with apper and PackageKit-Qt installed but no PackageKit, and then apper (KDE's package management tool) would not work correctly. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 4 2014 Adam Williamson <awilliam@xxxxxxxxxx> - 0.9.2-6 - require PackageKit (#1003122) * Wed Aug 27 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.9.2-5 - drop Properly-export-cmake-targets.patch, breaks apper build * Tue Aug 26 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 0.9.2-4 - pull in some upstream fixes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1003122 - PackageKit-Qt should depend on PackageKit https://bugzilla.redhat.com/show_bug.cgi?id=1003122 -------------------------------------------------------------------------------- ================================================================================ ack-2.14-1.fc21 (FEDORA-2014-10807) Grep-like text finder -------------------------------------------------------------------------------- Update Information: Upstream bug-fix release -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 13 2014 Robin Lee <cheeselee@xxxxxxxxxxxxxxxxx> - 2.14-1 - Update to 2.14 - Update URL * Thu Aug 28 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 2.12-5 - Perl 5.20 rebuild * Fri Aug 1 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 2.12-4 - Specify all dependencies -------------------------------------------------------------------------------- References: [ 1 ] Bug #1138236 - ack-2.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=1138236 -------------------------------------------------------------------------------- ================================================================================ dnsenum-1.2.4.1-1.fc21 (FEDORA-2014-10813) A tool to enumerate DNS info about domains -------------------------------------------------------------------------------- Update Information: Update to latest upstream release 1.2.4.1 -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.2.4.1-1 - Update to latest upstream release 1.2.4.1 * Wed Aug 27 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.2-15 - Perl 5.20 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1037827 - Missing requirements https://bugzilla.redhat.com/show_bug.cgi?id=1037827 [ 2 ] Bug #1057290 - New dnsenum release available https://bugzilla.redhat.com/show_bug.cgi?id=1057290 -------------------------------------------------------------------------------- ================================================================================ freeipa-4.0.3-1.fc21 (FEDORA-2014-10811) The Identity, Policy and Audit system -------------------------------------------------------------------------------- Update Information: Update FreeIPA to the latest 4.0.3 release This update addresses issues with Active Directory trusts. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Petr Viktorin <pviktori@xxxxxxxxxx> - 4.0.3-1 - Update to upstream 4.0.3 - see http://www.freeipa.org/page/Releases/4.0.3 -------------------------------------------------------------------------------- ================================================================================ gnulib-0-10.20140910git.fc21.1 (FEDORA-2014-10814) GNU Portability Library -------------------------------------------------------------------------------- Update Information: Update to latest upstream version. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 11 2014 Zbigniew Jędrzejewski-Szmek <zbyszek@xxxxxxxxx> - 0-9.20140910git - Update to latest git. -------------------------------------------------------------------------------- ================================================================================ linux-firmware-20140912-39.git365e80cce.fc21 (FEDORA-2014-10819) Firmware files used by the Linux kernel -------------------------------------------------------------------------------- Update Information: Update to the latest upstream git snapshot. Includes some updates for radeon and Intel wireless cards -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> 20140912-39.git365e80cce.fc21 - Update to the latest upstream git snapshot -------------------------------------------------------------------------------- ================================================================================ mingw-crt-3.9.999-0.1.trunk.git.b08afb.20140912.fc21 (FEDORA-2014-10816) MinGW Windows cross-compiler runtime -------------------------------------------------------------------------------- Update Information: * Update to more recent mingw-w64 snapshot * This update is needed to avoid breaking upgrade paths as upstream released mingw-w64 v3.2.0 recently (which is based on a different branch than master) -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 3.9.999-0.1.trunk.git.b08afb.20140912 - Update to 20140912 snapshot (git rev b08afb) - Bump version as upstream released mingw-w64 v3.2.0 recently (which is not based on the trunk branch) -------------------------------------------------------------------------------- ================================================================================ mingw-headers-3.9.999-0.1.trunk.git.b08afb.20140912.fc21 (FEDORA-2014-10816) Win32/Win64 header files -------------------------------------------------------------------------------- Update Information: * Update to more recent mingw-w64 snapshot * This update is needed to avoid breaking upgrade paths as upstream released mingw-w64 v3.2.0 recently (which is based on a different branch than master) -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 3.9.999-0.1.trunk.git.b08afb.20140912 - Update to 20140912 snapshot (git rev b08afb) - Bump version as upstream released mingw-w64 v3.2.0 recently (which is not based on the trunk branch) -------------------------------------------------------------------------------- ================================================================================ mingw-winpthreads-3.9.999-0.1.trunk.git.b08afb.20140912.fc21 (FEDORA-2014-10816) MinGW pthread library -------------------------------------------------------------------------------- Update Information: * Update to more recent mingw-w64 snapshot * This update is needed to avoid breaking upgrade paths as upstream released mingw-w64 v3.2.0 recently (which is based on a different branch than master) -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 3.9.999-0.1.trunk.git.b08afb.20140912 - Update to 20140912 snapshot (git rev b08afb) - Bump version as upstream released mingw-w64 v3.2.0 recently (which is not based on the trunk branch) -------------------------------------------------------------------------------- ================================================================================ mingw-winstorecompat-3.9.999-0.1.trunk.git.b08afb.20140912.fc21 (FEDORA-2014-10816) MinGW library to help porting to Windows Store -------------------------------------------------------------------------------- Update Information: * Update to more recent mingw-w64 snapshot * This update is needed to avoid breaking upgrade paths as upstream released mingw-w64 v3.2.0 recently (which is based on a different branch than master) -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 3.9.999-0.1.trunk.git.b08afb.20140912 - Update to 20140912 snapshot (git rev b08afb) - Bump version as upstream released mingw-w64 v3.2.0 recently (which is not based on the trunk branch) -------------------------------------------------------------------------------- ================================================================================ perl-Mo-0.39-1.fc21 (FEDORA-2014-10818) Perl micro-object system -------------------------------------------------------------------------------- Update Information: Upgrade to 0.39 -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 13 2014 David Dick <ddick@xxxxxxxx> - 0.39-1 - Upgrade to 0.39 * Wed Sep 3 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 0.38-2 - Perl 5.20 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1138279 - perl-Mo-0.39 is available https://bugzilla.redhat.com/show_bug.cgi?id=1138279 -------------------------------------------------------------------------------- ================================================================================ plplot-5.10.0-11.fc21 (FEDORA-2014-10815) Library of functions for making scientific plots -------------------------------------------------------------------------------- Update Information: Exclude ocaml tests on ppc64le (bug #1140767) -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 5.10.0-11 - Exclude ocaml tests on ppc64le (bug #1140767) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1140767 - plplot FTBFS failed for ppc64le arch https://bugzilla.redhat.com/show_bug.cgi?id=1140767 -------------------------------------------------------------------------------- ================================================================================ profile-sync-daemon-5.50-1.fc21 (FEDORA-2014-10810) Offload browser profiles to RAM for speed a wear reduction -------------------------------------------------------------------------------- Update Information: == Add support for == * Opera * Palemoon * Icecat == Fix == * Start rsync automatically via target requires. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 10 2014 Christopher Meng <rpm@xxxxxxxx> - 5.50-1 - Update to 5.50 -------------------------------------------------------------------------------- ================================================================================ python-gmpy2-2.0.3-2.fc21 (FEDORA-2014-10805) Python 2 interface to GMP, MPFR, and MPC -------------------------------------------------------------------------------- Update Information: This package contains a C-coded Python extension module that supports multiple-precision arithmetic. It is the successor to the original gmpy module. The gmpy module only supported the GMP multiple-precision library. Gmpy2 adds support for the MPFR (correctly rounded real floating-point arithmetic) and MPC (correctly rounded complex floating-point arithmetic) libraries. It also updates the API and naming conventions to be more consistent and support the additional functionality. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1138892 - Review Request: python-gmpy2 - Python 2 interface to GMP, MPFR, and MPC https://bugzilla.redhat.com/show_bug.cgi?id=1138892 -------------------------------------------------------------------------------- ================================================================================ python-oauth2-1.5.211-7.fc21 (FEDORA-2014-10809) Python support for improved oauth -------------------------------------------------------------------------------- Update Information: Fix CVE-2013-4346 and CVE-2013-4347, thanks to Philippe Makowski. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 1.5.211-7 - Fix CVE-2013-4346 and CVE-2013-4347 (thanks to Philippe Makowski) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1007746 - CVE-2013-4346 python-oauth2: _check_signature() ignores the nonce value when validating signed urls https://bugzilla.redhat.com/show_bug.cgi?id=1007746 [ 2 ] Bug #1007758 - CVE-2013-4347 python-oauth2: Uses poor PRNG in nonce https://bugzilla.redhat.com/show_bug.cgi?id=1007758 -------------------------------------------------------------------------------- ================================================================================ python-qrcode-5.0.1-1.fc21 (FEDORA-2014-10811) Python QR Code image generator -------------------------------------------------------------------------------- Update Information: Update FreeIPA to the latest 4.0.3 release This update addresses issues with Active Directory trusts. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 10 2014 Nathaniel McCallum <npmccallum@xxxxxxxxxx> - 5.0.1-1 - Update to 5.0.1 * Tue Sep 9 2014 Nathaniel McCallum <npmccallum@xxxxxxxxxx> - 2.4.1-7 - Create -core subpackage for minimal dependencies -------------------------------------------------------------------------------- ================================================================================ python-shadowsocks-2.2.1-1.fc21 (FEDORA-2014-10817) A fast tunnel proxy that help you get through firewalls -------------------------------------------------------------------------------- Update Information: Upstream new release -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 13 2014 Robin Lee <cheeselee@xxxxxxxxxxxxxxxxx> - 2.2.1-1 - Update to 2.2.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1124244 - python-shadowsocks-2.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1124244 -------------------------------------------------------------------------------- ================================================================================ python-swiftclient-2.1.0-3.fc21 (FEDORA-2014-10808) Client Library for OpenStack Object Storage API -------------------------------------------------------------------------------- Update Information: This update resolves a problem with the swift(1) crashing if it attempts to download a "pseudo-directory" key. Such keys are created by the Web UI "Horizon" of OpenStack. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 12 2014 Pete Zaitcev <zaitcev@xxxxxxxxxx> 2.1.0-3 - Fix bz#1126942 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1126942 - Swift pseudo-folder cannot be interacted with after creation https://bugzilla.redhat.com/show_bug.cgi?id=1126942 -------------------------------------------------------------------------------- ================================================================================ redis-2.8.15-1.fc21 (FEDORA-2014-10806) A persistent key-value database -------------------------------------------------------------------------------- Update Information: Upstream 2.8.15 (critical bugfix for sentinel) Upstream 2.8.14 (RHBZ #1136287) Backport Warren Togami fixes from EPEL7 Closes *many* pending tickets in RHBZ -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 13 2014 Haïkel Guémar <hguemar@xxxxxxxxxxxxxxxxx> - 2.8.15-1 - Upstream 2.8.15 (critical bugfix for sentinel) - Fix to sentinel systemd service and configuration (thanks Remi) - Refresh patch management * Thu Sep 11 2014 Haïkel Guémar <hguemar@xxxxxxxxxxxxxxxxx> - 2.8.14-2 - Cleanup spec - Fix shutdown for redis-{server,sentinel} - Backport fixes from Remi Collet repository (ie: sentinel working) * Thu Sep 11 2014 Haïkel Guémar <hguemar@xxxxxxxxxxxxxxxxx> - 2.8.14-1 - Upstream 2.8.14 (RHBZ #1136287) - Bugfix for lua scripting users (server crash) - Refresh patches - backport spec from EPEL7 (thanks Warren) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1136287 - redis-2.8.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=1136287 [ 2 ] Bug #1123626 - missing redis-sentinel command https://bugzilla.redhat.com/show_bug.cgi?id=1123626 [ 3 ] Bug #1126246 - yum install https://bugzilla.redhat.com/show_bug.cgi?id=1126246 [ 4 ] Bug #1123627 - Bad systemd init file. https://bugzilla.redhat.com/show_bug.cgi?id=1123627 [ 5 ] Bug #1123630 - Service rename break update https://bugzilla.redhat.com/show_bug.cgi?id=1123630 -------------------------------------------------------------------------------- ================================================================================ uwsgi-2.0.7-1.fc21 (FEDORA-2014-10804) Fast, self-healing, application container server -------------------------------------------------------------------------------- Update Information: Bunch of improvements, most of which is the exhaust breaking into several sub-packages. Please to test upgrade path, specially from -routers and -loggers -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 8 2014 Jorge A Gallegos <kad@xxxxxxxxx> - 2.0.7-1 - I am just done now, and there's a new version out already. Go figure. * Sun Sep 7 2014 Jorge A Gallegos <kad@xxxxxxxxx> - 2.0.6-1 - Adding -stats-pusher-zabbix (Jorge Gallegos) - Adding -plugin-xslt (Jorge Gallegos) - Adding -plugin-webdav (Jorge Gallegos) - Adding -plugin-v8 (Jorge Gallegos) - Adding -router-tuntap (Jorge Gallegos) - Adding http transformation plugins (Jorge Gallegos) - Adding -plugin-tornado and -plugin-tornado3 (Jorge Gallegos) - Adding all -stats-pusher-* plugins (Jorge Gallegos) - Adding -plugin-ssi (Jorge Gallegos) - Adding -plugin-ldap (Jorge Gallegos) - Adding -plugin-sqlite3 (Jorge Gallegos) - Adding -plugin-spooler (Jorge Gallegos) - Adding -plugin-jwsgi (Jorge Gallegos) - Adding -plugin-ring (Jorge Gallegos) - Adding -plugin-rbthreads (Jorge Gallegos) - Adding -plugin-pty (Jorge Gallegos) - Adding -log-encoder-msgpack (Jorge Gallegos) - Adding -plugin-mono (Jorge Gallegos) - Adding -plugin-mongrel2 (Jorge Gallegos) - Adding -plugin-gridfs (Jorge Gallegos) - Adding -logger-graylog2 (Jorge Gallegos) - Adding -plugin-glusterfs (Jorge Gallegos) - Adding -plugin-gevent (Jorge Gallegos) - Adding -plugin-geoip (Jorge Gallegos) - Adding -plugin-gccgo (Jorge Gallegos) - Adding -plugin-fiber (Jorge Gallegos) - Adding -plugin-dumbloop (Jorge Gallegos) - Adding -plugin-curl-cron (Jorge Gallegos) - Adding -plugin-cplusplus (Jorge Gallegos) - Adding -plugin-coroae (Jorge Gallegos) - Adding -alarm-xmpp (Jorge Gallegos) - Adding -alarm-curl (Jorge Gallegos) - Packaging -plugin-airbrake (Jorge Gallegos) - Broke up -routers into its individual -router-* (Jorge Gallegos) - Renaming -plugin-sslrouter to -router-ssl (Jorge Gallegos) - Renaming -plugin-rawrouter to -router-raw (Jorge Gallegos) - Splitting off the documentation to its subpackage (Jorge Gallegos) - Splitting off some non-essential embedded plugins: (Jorge Gallegos) - Splitting off -logger-syslog (Jorge Gallegos) - Splitting off -logger-rsyslog (Jorge Gallegos) - Splitting off -logger-redis (Jorge Gallegos) - Splitting off -logger-mongodb (Jorge Gallegos) - Splitting off -logger-socket (Jorge Gallegos) - Splitting off -logger-file (Jorge Gallegos) - Splitting off -logger-pipe (Jorge Gallegos) - Splitting off -logger-crypto instead (Jorge Gallegos) - Break out the major/minor/release numbers properly (Jorge Gallegos) - Reorganized spec, alphabetical and type (Jorge Gallegos) - Splitting -router-fastrouter out of -common (Jorge Gallegos) - Splitting out the README, I will be putting more stuff in here (Jorge Gallegos) - Adding -logger-systemd plugin (Jorge Gallegos) - Adding -logger-zeromq plugin (Jorge Gallegos) - Adding new sources for newest stable (Jorge Gallegos) * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.9.19-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #911686 - Many uwsgi plugins are not packaged https://bugzilla.redhat.com/show_bug.cgi?id=911686 [ 2 ] Bug #1113307 - uwsgi should not depend on java-1.7.0-openjdk https://bugzilla.redhat.com/show_bug.cgi?id=1113307 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
