The following Fedora 21 Security updates need testing: Age URL 18 https://admin.fedoraproject.org/updates/FEDORA-2014-10171/apache-poi-3.10.1-1.fc21 12 https://admin.fedoraproject.org/updates/FEDORA-2014-10766/mod_gnutls-0.5.10-13.fc21 12 https://admin.fedoraproject.org/updates/FEDORA-2014-10767/squid-3.4.7-2.fc21 11 https://admin.fedoraproject.org/updates/FEDORA-2014-10809/python-oauth2-1.5.211-7.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11251/nginx-1.6.2-2.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11271/xen-4.4.1-4.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11309/nodejs-qs-0.6.6-3.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11289/nodejs-send-0.3.0-4.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11302/suricata-2.0.4-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11295/bash-4.3.22-3.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11236/seamonkey-2.29-1.fc21 The following Fedora 21 Critical Path updates have yet to be approved: Age URL 6 https://admin.fedoraproject.org/updates/FEDORA-2014-10926/libtasn1-4.2-1.fc21 6 https://admin.fedoraproject.org/updates/FEDORA-2014-10945/gdb-7.8-23.fc21 5 https://admin.fedoraproject.org/updates/FEDORA-2014-11154/gnutls-3.3.8-2.fc21 5 https://admin.fedoraproject.org/updates/FEDORA-2014-11134/man-db-2.6.7.1-7.fc21 5 https://admin.fedoraproject.org/updates/FEDORA-2014-11103/cronie-1.4.12-1.fc21 5 https://admin.fedoraproject.org/updates/FEDORA-2014-11161/anaconda-21.48.7-1.fc21 5 https://admin.fedoraproject.org/updates/FEDORA-2014-11127/python-blivet-0.61.2-2.fc21 5 https://admin.fedoraproject.org/updates/FEDORA-2014-11108/python-backports-ssl_match_hostname-3.4.0.2-4.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11279/qtwebkit-2.3.3-18.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11327/redhat-rpm-config-26-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11285/glibc-2.20-3.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11329/lorax-21.23-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11170/bluez-5.23-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11256/rygel-0.24.0-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11224/libosinfo-0.2.11-2.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11214/xdg-utils-1.1.0-0.28.rc2.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11211/wayland-1.6.0-1.fc21,weston-1.6.0-2.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11252/xorg-x11-server-1.16.0-10.fc21 The following builds have been pushed to Fedora 21 updates-testing armadillo-4.450.0-1.fc21 bash-4.3.22-3.fc21 bitten-0.6-3.fc21 calligra-2.8.6-1.fc21 calligra-l10n-2.8.6-1.fc21 cockpit-0.25-1.fc21 criu-1.3.1-1.fc21 djview4-4.9-6.fc21 eclipse-pdt-3.3.1-2.fc21 fido-1.1.2-1.fc21 gcl-2.6.11-2.fc21 glibc-2.20-3.fc21 gnat-srpm-macros-1-1.fc21 golang-github-kr-pretty-0-0.2.git5feda8d.fc21 golang-github-kr-text-0-0.2.git6807e77.fc21 golang-github-stretchr-objx-0-0.2.gitcbeaeb1.fc21 golang-github-stretchr-testify-0-0.3.gitda775f0.fc21 golang-github-vaughan0-go-ini-0-0.2.gita98ad7e.fc21 golang-googlecode-gcfg-0-0.2.gitc2d3050.fc21 hackrf-2014.08.1-1.fc21 kea-0.9-2.fc21 konsole-4.14.1-2.fc21 lcgdm-1.8.9-1.fc21 libreoffice-4.3.2.2-2.fc21 libvirt-1.2.8-6.fc21 logwatch-7.4.1-1.20140924svn242.fc21 lorax-21.23-1.fc21 marble-4.14.1-3.fc21 mingw-admesh-0.98.1-1.fc21 msr-tools-1.3-1.fc21 neon-0.30.1-1.fc21 netstat-monitor-1.1.1-3.fc21 nodejs-mapnik-reference-5.1.1-1.fc21 nodejs-qs-0.6.6-3.fc21 nodejs-send-0.3.0-4.fc21 openstack-cinder-2014.1.2-2.fc21 openttd-1.4.3-1.fc21 pcsc-lite-1.8.12-1.fc21 perl-Data-Dump-Color-0.21-2.fc21 perl-Sub-Name-0.12-1.fc21 perl-Test-Exception-0.35-1.fc21 perl-Test-File-1.41-1.fc21 perl-Test-Simple-1.001006-1.fc21 perl-Test-Version-1.003001-1.fc21 perl-Test-utf8-1.01-1.fc21 python-OWSLib-0.8.9-1.fc21 python-docker-py-0.5.0-1.fc21 python-dropbox-2.2.0-1.fc21 python-pyvmomi-5.5.0.2014.1.1-2.fc21 qtwebkit-2.3.3-18.fc21 redhat-rpm-config-26-1.fc21 rpy-2.4.3-1.fc21 rubygem-jquery-datatables-rails-2.2.3-1.fc21 rubygem-jquery-ui-rails-5.0.0-2.fc21 scap-workbench-1.0.2-1.fc21 scotch-6.0.1-1.fc21 slv2-0.6.6-17.fc21 spice-gtk-0.25-6.fc21 subversion-1.8.10-6.fc21 suricata-2.0.4-1.fc21 telegram-cli-1.0.5-1.fc21 tellico-2.3.9-1.fc21 virt-manager-1.1.0-3.git310f6527.fc21 xen-4.4.1-4.fc21 xorg-x11-xtrans-devel-1.3.5-1.fc21 xscreensaver-5.30-4.fc21 youtube-dl-2014.09.22.1-1.fc21 Details about builds: ================================================================================ armadillo-4.450.0-1.fc21 (FEDORA-2014-11324) Fast C++ matrix library with interfaces to LAPACK and ATLAS -------------------------------------------------------------------------------- Update Information: This release has several improvements and fixes: * faster handling of matrix transposes within compound expressions * expanded symmatu()/symmatl() to optionally disable taking the complex conjugate of elements * expanded sort_index() to handle complex vectors * expanded the gmm_diag class with functions to generate random samples * faster handling of subvectors by dot() * faster handling of aliasing by submatrix views * expanded batch insertion constructors for sparse matrices to add values at repeated locations * added clamp() for clamping values to be between lower and upper limits * added gmm_diag class for statistical modelling using Gaussian Mixture Models (GMM); * includes multi-threaded implementation of k-means clustering and Expectation Maximisation (EM) algorithms -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 José Matos <jamatos@xxxxxxxxxxxxxxxxx> - 4.450.0-1 - update to 4.450.0 -------------------------------------------------------------------------------- ================================================================================ bash-4.3.22-3.fc21 (FEDORA-2014-11295) The GNU Bourne Again shell -------------------------------------------------------------------------------- Update Information: Disclosure - http://www.openwall.com/lists/oss-security/2014/09/24/10 Behaviour prior to patch: $ env x='() { :;}; echo OOPS' bash -c /usr/sbin/nologin OOPS This account is currently not available. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Ondrej Oprala <ooprala@xxxxxxxxxx> - 4.3.22-3 - Inhibit code injection - patch by Stephane Chazelas * Fri Aug 15 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 4.3.22-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ bitten-0.6-3.fc21 (FEDORA-2014-11305) A continuous integration plugin for Trac -------------------------------------------------------------------------------- Update Information: Update to latest stable release Update to latest stable release -------------------------------------------------------------------------------- ================================================================================ calligra-2.8.6-1.fc21 (FEDORA-2014-11281) An integrated office suite -------------------------------------------------------------------------------- Update Information: New stable/bugfix calligra release. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.8.6-1 - 2.8.6 * Tue Aug 26 2014 David Tardon <dtardon@xxxxxxxxxx> - 2.8.5-6 - rebuild for ICU 53.1 -------------------------------------------------------------------------------- ================================================================================ calligra-l10n-2.8.6-1.fc21 (FEDORA-2014-11281) Language files for calligra -------------------------------------------------------------------------------- Update Information: New stable/bugfix calligra release. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.8.6-1 - 2.8.6 -------------------------------------------------------------------------------- ================================================================================ cockpit-0.25-1.fc21 (FEDORA-2014-11320) A user interface for Linux servers -------------------------------------------------------------------------------- Update Information: Update to 0.25 release Update to 0.24 release -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Stef Walter <stefw@xxxxxxxxxx> - 0.25-1 - Update to 0.25 release * Wed Sep 17 2014 Stef Walter <stefw@xxxxxxxxxx> - 0.24-1 - Update to 0.24 release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1142426 - extremely long real names in user accounts cause user display wrapping problems https://bugzilla.redhat.com/show_bug.cgi?id=1142426 [ 2 ] Bug #1142215 - Wrong images url in add server dialog https://bugzilla.redhat.com/show_bug.cgi?id=1142215 [ 3 ] Bug #1141571 - package contains embedded private copy of valgrind.h https://bugzilla.redhat.com/show_bug.cgi?id=1141571 [ 4 ] Bug #1142202 - Pretty host name changed incorrectly https://bugzilla.redhat.com/show_bug.cgi?id=1142202 -------------------------------------------------------------------------------- ================================================================================ criu-1.3.1-1.fc21 (FEDORA-2014-11307) Tool for Checkpoint/Restore in User-space -------------------------------------------------------------------------------- Update Information: Update to 1.3.1 (#1142896) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Adrian Reber <adrian@xxxxxxxx> - 1.3.1-1 - Update to 1.3.1 (#1142896) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1142896 - criu-1.3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1142896 -------------------------------------------------------------------------------- ================================================================================ djview4-4.9-6.fc21 (FEDORA-2014-11328) DjVu viewer -------------------------------------------------------------------------------- Update Information: Add AArch64 support -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 5 2014 Marcin Juszkiewicz <mjuszkiewicz@xxxxxxxxxx> - 4.9-6 - Add AArch64 support -------------------------------------------------------------------------------- ================================================================================ eclipse-pdt-3.3.1-2.fc21 (FEDORA-2014-11296) PHP Development Tools (PDT) Eclipse plug-in -------------------------------------------------------------------------------- Update Information: Update to latest maintenance release of PDT 3.3 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Mat Booth <mat.booth@xxxxxxxxxx> - 3.3.1-2 - Unzip feature bundles on installation - Add dep on commons-lang - Add appdata addon metadata - Drop mylyn sub-package, just install it with main package * Mon Sep 22 2014 Mat Booth <mat.booth@xxxxxxxxxx> - 3.3.1-1 - Update to latest upstream - Drop unneeded patch -------------------------------------------------------------------------------- ================================================================================ fido-1.1.2-1.fc21 (FEDORA-2014-11286) Multi-threaded file watch utility -------------------------------------------------------------------------------- Update Information: fix the possibility that fido misses some age tests and fails to fire an alert -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Roman Mohr <roman@xxxxxxxxxxxx> - 1.1.2-1 - fix the possibility that fido misses some age tests and fails to fire an alert -------------------------------------------------------------------------------- References: [ 1 ] Bug #1133199 - fido-1.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1133199 -------------------------------------------------------------------------------- ================================================================================ gcl-2.6.11-2.fc21 (FEDORA-2014-11301) GNU Common Lisp -------------------------------------------------------------------------------- Update Information: This update fixes a build failure on ppc64 and ppc64le. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Jerry James <loganjerry@xxxxxxxxx> - 2.6.11-2 - Add -ppc64 patch to fix build on ppc64/ppc64le (bz 1145521) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1145521 - FTBFS: Error: The assertion tp&~tp on line 185 of sfaslelf.c in function relocate failed https://bugzilla.redhat.com/show_bug.cgi?id=1145521 -------------------------------------------------------------------------------- ================================================================================ glibc-2.20-3.fc21 (FEDORA-2014-11285) The GNU libc libraries -------------------------------------------------------------------------------- Update Information: glibc-debuginfo and glibc-debuginfo-common incorrectly owned the common debuginfo directories, i.e. /usr/src/debug, /usr/lib/debug and some directories inside /usr/lib/debug. This update removes ownership of those directories. Fix cdefs.h so that __extern_always_inline is usable on llvm. This fixes the FTBFS issue for llvm. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Siddhesh Poyarekar <siddhesh@xxxxxxxxxx> - 2.20-3 - Don't own the common debuginfo directories (#1144853). * Tue Sep 16 2014 Siddhesh Poyarekar <siddhesh@xxxxxxxxxx> - 2.20-2 - Make __extern_always_inline usable on clang++ again (#1133508). * Mon Sep 8 2014 Siddhesh Poyarekar <siddhesh@xxxxxxxxxx> - 2.20-1 - Rebase to upstream release 2.20. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1144853 - glibc-common-debuginfo /usr/lib/debug/sbin error https://bugzilla.redhat.com/show_bug.cgi?id=1144853 [ 2 ] Bug #1133508 - llvm-3.4.16 and newer does not (re-)build against glibc-2.19.90-32.fc21 https://bugzilla.redhat.com/show_bug.cgi?id=1133508 -------------------------------------------------------------------------------- ================================================================================ gnat-srpm-macros-1-1.fc21 (FEDORA-2014-11299) RPM macros needed when source packages that need GNAT are built -------------------------------------------------------------------------------- Update Information: gnat-srpm-macros takes over the file /usr/lib/rpm/macros.d/macros.gnat-srpm from redhat-rpm-config. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1133632 - change :: Please add %{Gprbuild_Arches} https://bugzilla.redhat.com/show_bug.cgi?id=1133632 [ 2 ] Bug #1141544 - Review Request: gnat-srpm-macros - RPM macros needed when source packages that need GNAT are built https://bugzilla.redhat.com/show_bug.cgi?id=1141544 -------------------------------------------------------------------------------- ================================================================================ golang-github-kr-pretty-0-0.2.git5feda8d.fc21 (FEDORA-2014-11300) Provides pretty-printing for go values -------------------------------------------------------------------------------- Update Information: new package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141887 - Review Request: golang-github-kr-pretty - Provides pretty-printing for go values https://bugzilla.redhat.com/show_bug.cgi?id=1141887 -------------------------------------------------------------------------------- ================================================================================ golang-github-kr-text-0-0.2.git6807e77.fc21 (FEDORA-2014-11278) Go package for manipulating paragraphs of text -------------------------------------------------------------------------------- Update Information: new package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1140495 - Review Request: golang-github-kr-text - Go package for manipulating paragraphs of text https://bugzilla.redhat.com/show_bug.cgi?id=1140495 -------------------------------------------------------------------------------- ================================================================================ golang-github-stretchr-objx-0-0.2.gitcbeaeb1.fc21 (FEDORA-2014-11280) Go package for dealing with maps, slices, JSON and other data -------------------------------------------------------------------------------- Update Information: new package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141864 - Review Request: golang-github-stretchr-objx - Go package for dealing with maps, slices, JSON and other data https://bugzilla.redhat.com/show_bug.cgi?id=1141864 -------------------------------------------------------------------------------- ================================================================================ golang-github-stretchr-testify-0-0.3.gitda775f0.fc21 (FEDORA-2014-11267) Tools for testifying that your code will behave as you intend -------------------------------------------------------------------------------- Update Information: new package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141872 - Review Request: golang-github-stretchr-testify - Tools for testifying that your code will behave as you intend https://bugzilla.redhat.com/show_bug.cgi?id=1141872 -------------------------------------------------------------------------------- ================================================================================ golang-github-vaughan0-go-ini-0-0.2.gita98ad7e.fc21 (FEDORA-2014-11290) INI parsing library for Go -------------------------------------------------------------------------------- Update Information: new package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1142398 - Review Request: golang-github-vaughan0-go-ini - INI parsing library for Go https://bugzilla.redhat.com/show_bug.cgi?id=1142398 -------------------------------------------------------------------------------- ================================================================================ golang-googlecode-gcfg-0-0.2.gitc2d3050.fc21 (FEDORA-2014-11282) Gcfg reads INI-style configuration files into Go structs -------------------------------------------------------------------------------- Update Information: new package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1141880 - Review Request: golang-googlecode-gcfg - Gcfg reads INI-style configuration files into Go structs https://bugzilla.redhat.com/show_bug.cgi?id=1141880 -------------------------------------------------------------------------------- ================================================================================ hackrf-2014.08.1-1.fc21 (FEDORA-2014-11273) HackRF Utilities -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1144886 - Review Request: hackrf - Utilities for HackRF https://bugzilla.redhat.com/show_bug.cgi?id=1144886 -------------------------------------------------------------------------------- ================================================================================ kea-0.9-2.fc21 (FEDORA-2014-11318) DHCPv4, DHCPv6 and DDNS server from ISC -------------------------------------------------------------------------------- Update Information: fix build on s390 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Dan Horák <dan[at]danny.cz> - 0.9-2 - valgrind available only on selected arches -------------------------------------------------------------------------------- ================================================================================ konsole-4.14.1-2.fc21 (FEDORA-2014-11303) KDE Terminal emulator -------------------------------------------------------------------------------- Update Information: do not store history in /tmp (#990197) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.14.1-2 - do not store history in /tmp (#990197) -------------------------------------------------------------------------------- References: [ 1 ] Bug #990197 - do not store history in /tmp https://bugzilla.redhat.com/show_bug.cgi?id=990197 -------------------------------------------------------------------------------- ================================================================================ lcgdm-1.8.9-1.fc21 (FEDORA-2014-11283) LHC Computing Grid Data Management -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Alejandro Alvarez Ayllon <aalvarez@xxxxxxx> - 1.8.9-1 - Update for new upstream release -------------------------------------------------------------------------------- ================================================================================ libreoffice-4.3.2.2-2.fc21 (FEDORA-2014-11298) Free Software Productivity Suite -------------------------------------------------------------------------------- Update Information: fix hang on layout of certain .docs -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Caolán McNamara <caolanm@xxxxxxxxxx> - 1:4.3.2.2-2 - make brochure printing of impress/draw work out of the box - Resolves: rhbz#1133863 fix looping layout * Mon Sep 22 2014 David Tardon <dtardon@xxxxxxxxxx> - 1:4.3.2.2-1 - update to 4.3.2 rc2 * Wed Sep 17 2014 Caolán McNamara <caolanm@xxxxxxxxxx> - 1:4.3.2.1-3 - make n-up printing of impress notes work out of the box * Wed Sep 17 2014 Caolán McNamara <caolanm@xxxxxxxxxx> - 1:4.3.2.1-2 - Resolves: fdo#80911 don't swap notes page width height * Fri Sep 12 2014 David Tardon <dtardon@xxxxxxxxxx> - 1:4.3.2.1-1 - update to 4.3.2 rc1 * Wed Sep 10 2014 Caolán McNamara <caolanm@xxxxxxxxxx> - 1:4.3.1.2-5 - create a master document template type -------------------------------------------------------------------------------- References: [ 1 ] Bug #1133863 - Program freezes while trying to open a specific .doc file https://bugzilla.redhat.com/show_bug.cgi?id=1133863 -------------------------------------------------------------------------------- ================================================================================ libvirt-1.2.8-6.fc21 (FEDORA-2014-11310) Library providing a simple virtualization API -------------------------------------------------------------------------------- Update Information: * Fix labelling host devices (bz #1145968) * Fix specifying CPU for qemu aarch64 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Cole Robinson <crobinso@xxxxxxxxxx> - 1.2.8-6 - Fix labelling host devices (bz #1145968) * Tue Sep 23 2014 Cole Robinson <crobinso@xxxxxxxxxx> - 1.2.8-5 - Fix specifying CPU for qemu aarch64 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1145968 - [f21 regression] USB Redirection no longer works: Permission Denied https://bugzilla.redhat.com/show_bug.cgi?id=1145968 -------------------------------------------------------------------------------- ================================================================================ logwatch-7.4.1-1.20140924svn242.fc21 (FEDORA-2014-11275) A log file analysis program -------------------------------------------------------------------------------- Update Information: Update to 7.4.1 (revision 242) (rhbz#1145898) -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Jan Synacek <jsynacek@xxxxxxxxxx> - 7.4.1-1.20140924svn242 - Update to 7.4.1 (revision 242) (rhbz#1145898) - Fix bogus dates -------------------------------------------------------------------------------- References: [ 1 ] Bug #1145898 - Update logwatch to 7.4.1 https://bugzilla.redhat.com/show_bug.cgi?id=1145898 -------------------------------------------------------------------------------- ================================================================================ lorax-21.23-1.fc21 (FEDORA-2014-11329) Tool for creating the anaconda install images -------------------------------------------------------------------------------- Update Information: livemedia-creator: Make sure ROOT_PATH exists livemedia-creator: Add --no-recursion to mktar Remove at-spi (dshea@xxxxxxxxxx) (also includes ppc64le support from 21.22) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Brian C. Lane <bcl@xxxxxxxxxx> 21.23-1 - livemedia-creator: Make sure ROOT_PATH exists (#1144140) (bcl@xxxxxxxxxx) - livemedia-creator: Add --no-recursion to mktar (#1144140) (bcl@xxxxxxxxxx) - Remove at-spi (dshea@xxxxxxxxxx) -------------------------------------------------------------------------------- ================================================================================ marble-4.14.1-3.fc21 (FEDORA-2014-11317) Virtual globe and world atlas -------------------------------------------------------------------------------- Update Information: Add dependency to -common to all subpackages, helps appdata dependency resolution. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1:4.14.1-3 - fix -common deps (it's noarch, don't want %_isa here) * Tue Sep 23 2014 Richard Hughes <richard@xxxxxxxxxxx> - 1:4.14.1-2 - Add a hard requires on marble-common (which contains the icon) on the main applications. The AppStream generator only can cope with one layer of dep- resolution and the app->libs->common chain means the icons don't get included. -------------------------------------------------------------------------------- ================================================================================ mingw-admesh-0.98.1-1.fc21 (FEDORA-2014-11319) MinGW compiled ADMesh -------------------------------------------------------------------------------- Update Information: Updated to 0.98.1 (bugfix release) -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Miro Hrončok <mhroncok@xxxxxxxxxx> - 0.98.1-1 - Updated to 0.98.1 -------------------------------------------------------------------------------- ================================================================================ msr-tools-1.3-1.fc21 (FEDORA-2014-11321) Collection of tools for reading/writing CPU model specific registers -------------------------------------------------------------------------------- Update Information: Update to 1.3 Update URL to new location Rename cpuid to msr-cpuid to avoid conflict with existing Fedora package -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Greg Bailey <gbailey@xxxxxxxxx> - 1.3-1 - Update to 1.3 - Update URL to new location - Rename cpuid to msr-cpuid to avoid conflict with existing Fedora package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1035636 - msr-tools-1.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1035636 -------------------------------------------------------------------------------- ================================================================================ neon-0.30.1-1.fc21 (FEDORA-2014-11313) An HTTP and WebDAV client library -------------------------------------------------------------------------------- Update Information: Latest stable release of neon. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Joe Orton <jorton@xxxxxxxxxx> - 0.30.1-1 - update to 0.30.1; switch to OpenSSL -------------------------------------------------------------------------------- ================================================================================ netstat-monitor-1.1.1-3.fc21 (FEDORA-2014-11274) A command line tool to monitor network connections -------------------------------------------------------------------------------- Update Information: Fix changelog entries -------------------------------------------------------------------------------- References: [ 1 ] Bug #1070398 - Review Request: netstat-monitor - A command line tool to monitor network connections https://bugzilla.redhat.com/show_bug.cgi?id=1070398 -------------------------------------------------------------------------------- ================================================================================ nodejs-mapnik-reference-5.1.1-1.fc21 (FEDORA-2014-11322) Reference for Mapnik Styling Options -------------------------------------------------------------------------------- Update Information: Update to 5.1.1 upstream release -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Tom Hughes <tom@xxxxxxxxxx> - 5.1.1-1 - Update to 5.1.1 upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1145921 - nodejs-mapnik-reference-5.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1145921 -------------------------------------------------------------------------------- ================================================================================ nodejs-qs-0.6.6-3.fc21 (FEDORA-2014-11309) Query string parser for Node.js -------------------------------------------------------------------------------- Update Information: The qs module has the ability to create sparse arrays during parsing. By specifying a high index it is possible to create a large array that will eventually take up all the allocated memory of the running process, resulting in a crash. More information: https://github.com/visionmedia/node-querystring/issues/104 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 0.6.6-3 - backport security fix for memory exhaustion denial-of-service (RHBZ#1146054) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146054 - nodejs-qs: Denial-of-Service Memory Exhaustion https://bugzilla.redhat.com/show_bug.cgi?id=1146054 -------------------------------------------------------------------------------- ================================================================================ nodejs-send-0.3.0-4.fc21 (FEDORA-2014-11289) Better streaming static file server with Range and conditional-GET support -------------------------------------------------------------------------------- Update Information: When relying on the root option to restrict file access it may be possible for an application consumer to escape out of the restricted directory and access files in a similarly named directory. For example, static(_dirname + '/public') would allow access to _dirname + '/public-restricted'. https://nodesecurity.io/advisories/send-directory-traversal -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 0.3.0-4 - really apply the patch * Wed Sep 24 2014 T.C. Hollingsworth <tchollingsworth@xxxxxxxxx> - 0.3.0-3 - fix directory traversal vulnerability (RHBZ#1146063) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146063 - nodejs-send: directory traversal vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1146063 -------------------------------------------------------------------------------- ================================================================================ openstack-cinder-2014.1.2-2.fc21 (FEDORA-2014-11293) OpenStack Volume service -------------------------------------------------------------------------------- Update Information: Macroized systemd scriptlets -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Haïkel Guémar <hguemar@xxxxxxxxxxxxxxxxx> - 2014.1.2-2 - Macroized systemd scriptlets - Add EL6 support for RDO -------------------------------------------------------------------------------- ================================================================================ openttd-1.4.3-1.fc21 (FEDORA-2014-11304) Transport system simulation game -------------------------------------------------------------------------------- Update Information: Release 1.4.3 contains some bugfixes and enhances stability. Find the changelog at http://binaries.openttd.org/binaries/releases/1.4.3/changelog.txt -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Felix Kaechele <heffer@xxxxxxxxxxxxxxxxx> - 1.4.3-1 - update to 1.4.3 * Tue Aug 26 2014 David Tardon <dtardon@xxxxxxxxxx> - 1.4.2-3 - rebuild for ICU 53.1 -------------------------------------------------------------------------------- ================================================================================ pcsc-lite-1.8.12-1.fc21 (FEDORA-2014-11323) PC/SC Lite smart card framework and applications -------------------------------------------------------------------------------- Update Information: New upstream release (#1079514) -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Nikos Mavrogiannopoulos <nmav@xxxxxxxxxx> - 1.8.12-1 - New upstream release (#1079514) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1079514 - segv in pcscd, possibly related to unplugging https://bugzilla.redhat.com/show_bug.cgi?id=1079514 -------------------------------------------------------------------------------- ================================================================================ perl-Data-Dump-Color-0.21-2.fc21 (FEDORA-2014-11306) Like Data::Dump, but with color -------------------------------------------------------------------------------- Update Information: This module aims to be a drop-in replacement for Data::Dump. It adds colors to dumps. For more information, see Data::Dump. This documentation explains what's different between this module and Data::Dump. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1140223 - Review Request: perl-Data-Dump-Color - Like Data::Dump, but with color https://bugzilla.redhat.com/show_bug.cgi?id=1140223 -------------------------------------------------------------------------------- ================================================================================ perl-Sub-Name-0.12-1.fc21 (FEDORA-2014-11326) Name - or rename - a sub -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.12-1 - Update to 0.12 - Move variable declaration to fix warning under -Werror=declaration-after-statement, to allow compilation under MSVC (GH#3) - Converted distribution packaging to Dist::Zilla - Fix licence in LICENSE and pod - Package new upstream CONTRIBUTING and LICENSE files - Classify buildreqs by usage * Thu Aug 28 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 0.09-2 - Perl 5.20 rebuild -------------------------------------------------------------------------------- ================================================================================ perl-Test-Exception-0.35-1.fc21 (FEDORA-2014-11292) Library of test functions for exception based Perl code -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.35-1 - Update to 0.35 - Fix a bug when Test::Builder isn't new (better version) - Switch to ExtUtils::MakeMaker flow - Classify buildreqs by usage * Sat Sep 20 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.34-1 - Update to 0.34 - Fixed test broken by changes in Test::Builder and friends - This release by EXODIST → update source URL - Modernize spec * Thu Aug 28 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 0.32-5 - Perl 5.20 rebuild -------------------------------------------------------------------------------- ================================================================================ perl-Test-File-1.41-1.fc21 (FEDORA-2014-11284) Test file attributes through Test::Builder -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 1.41-1 - Update to 1.41 - Uncomment accidentally commented symlink_target_is_absolute_ok - Add mtime test functions (GH#8) - Allow tests to run in parallel (CPAN RT#89908, CPAN RT#91862) - Fix up tests for UTF-8 checks - This release by BDFOY → update source URL - Classify buildreqs by usage - Use %license * Thu Aug 28 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.36-3 - Perl 5.20 rebuild -------------------------------------------------------------------------------- ================================================================================ perl-Test-Simple-1.001006-1.fc21 (FEDORA-2014-11315) Basic utilities for writing tests -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 9 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 1.001006-1 - Update to 1.001006 - Documentation updates - Subtests accept args - Outdent subtest diag - Changed install path for perl 5.12 or higher * Tue Aug 26 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.001003-3 - Perl 5.20 rebuild -------------------------------------------------------------------------------- ================================================================================ perl-Test-Version-1.003001-1.fc21 (FEDORA-2014-11312) Check to see that versions in modules are sane -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 1.003001-1 - Update to 1.003001 - Skip packages unindexable by pause (GH#4) - Remove inline and remove _get_version; trying to skip test there won't work (GH#4) * Sun Sep 7 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.002004-6 - Perl 5.20 re-rebuild of bootstrapped packages * Thu Aug 28 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.002004-5 - Perl 5.20 rebuild -------------------------------------------------------------------------------- ================================================================================ perl-Test-utf8-1.01-1.fc21 (FEDORA-2014-11316) Handy utf8 tests -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 1.01-1 - Update to 1.01 - Fix unnecessary warning caused by using /x (CPAN RT#88189, https://github.com/2shortplanks/Test-utf8/pull/2) - Make %files list more explicit - Don't need to remove empty directories from the buildroot - Don't use macros for commands - Classify buildreqs by usage * Wed Aug 27 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.00-8 - Perl 5.20 rebuild -------------------------------------------------------------------------------- ================================================================================ python-OWSLib-0.8.9-1.fc21 (FEDORA-2014-11272) Client library for OGC web services -------------------------------------------------------------------------------- Update Information: - CSW: support gmi:MI_Metadata as gmd:MD_Metadata when parsing results (@FuhuXia) - CSW: add support for basic authentication - ISO: add support for instantiation of MD_Metadata objects (@kalxas) - ISO: add support for CI_ResponsibleParty as a responsible role attribute (@milokmet) - ISO: add title support for SV_ServiceIdentification (@dblodgett-usgs) - SOS: add 'om' back to namespace list (@ict4eo) - util: add support for race conditions for WPS (@TobiasKipp) -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Volker Fröhlich <volker27@xxxxxx> - 0.8.9-1 - New upstream release -------------------------------------------------------------------------------- ================================================================================ python-docker-py-0.5.0-1.fc21 (FEDORA-2014-11314) An API client for docker written in Python -------------------------------------------------------------------------------- Update Information: Resolves: rhbz#1145511 - version bump to 0.5.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2014 Tom Prince <tom.prince@xxxxxxxxxxxxx> - 0.5.0-1 - Resolves: rhbz#1145511 - version bump to 0.5.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1145511 - python-docker-py-0.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1145511 -------------------------------------------------------------------------------- ================================================================================ python-dropbox-2.2.0-1.fc21 (FEDORA-2014-11265) Official Dropbox REST API Client -------------------------------------------------------------------------------- Update Information: Updated to 2.2.0 (#1145025), bugfix release -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Miro Hrončok <mhroncok@xxxxxxxxxx> - 2.2.0-1 - Updated to 2.2.0 (#1145025) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1145025 - python-dropbox-2.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1145025 -------------------------------------------------------------------------------- ================================================================================ python-pyvmomi-5.5.0.2014.1.1-2.fc21 (FEDORA-2014-11276) VMware vSphere Python SDK -------------------------------------------------------------------------------- Update Information: pyVmomi is the Python SDK for the VMware vSphere API that allows you to manage ESX, ESXi, and vCenter. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1132971 - Review Request: python-pyvmomi - pyVmomi is the Python SDK for the VMware vSphere API that allows you to manage ESX, ESXi, and vCenter https://bugzilla.redhat.com/show_bug.cgi?id=1132971 -------------------------------------------------------------------------------- ================================================================================ qtwebkit-2.3.3-18.fc21 (FEDORA-2014-11279) Qt WebKit bindings -------------------------------------------------------------------------------- Update Information: Enable hardened build, providing an extra layer of security to webkit applications and services. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.3.3-18 - enable hardened build (#1051790) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1051790 - no hardening builds - KDE typically is "long running" https://bugzilla.redhat.com/show_bug.cgi?id=1051790 -------------------------------------------------------------------------------- ================================================================================ redhat-rpm-config-26-1.fc21 (FEDORA-2014-11327) Red Hat specific rpm configuration files -------------------------------------------------------------------------------- Update Information: This update moves gnat macros into a separate package, see https://admin.fedoraproject.org/updates/gnat-srpm-macros-1-1.fc21 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2014 Panu Matilainen <pmatilai@xxxxxxxxxx> - 26-1 - Gnat macros are now in a package of their own (#1133632) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1133632 - change :: Please add %{Gprbuild_Arches} https://bugzilla.redhat.com/show_bug.cgi?id=1133632 -------------------------------------------------------------------------------- ================================================================================ rpy-2.4.3-1.fc21 (FEDORA-2014-11268) Python interface to the R language -------------------------------------------------------------------------------- Update Information: Bugs fixed ---------- - `geom_raster` was missing from `rpy2.robjects.lib.ggplot2` - Fixed issue with SVG rendering in ipython notebook - Regression with `rx2()` introduced with new conversion - Fixed documentation (missing `import`) -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 José Matos <jamatos@xxxxxxxxxxxxxxxxx> - 2.4.3-1 - update to 2.4.3 * Tue Aug 26 2014 David Tardon <dtardon@xxxxxxxxxx> - 2.4.2-3 - rebuild for ICU 53.1 -------------------------------------------------------------------------------- ================================================================================ rubygem-jquery-datatables-rails-2.2.3-1.fc21 (FEDORA-2014-11287) jQuery datatables for rails -------------------------------------------------------------------------------- Update Information: jQuery datatables plugin for Rails. -------------------------------------------------------------------------------- ================================================================================ rubygem-jquery-ui-rails-5.0.0-2.fc21 (FEDORA-2014-11325) jQuery UI packaged for the Rails asset pipeline -------------------------------------------------------------------------------- Update Information: jQuery UI plugin for Rails -------------------------------------------------------------------------------- ================================================================================ scap-workbench-1.0.2-1.fc21 (FEDORA-2014-11294) Scanning, tailoring, editing and validation tool for SCAP content -------------------------------------------------------------------------------- Update Information: Updated to new upstream release 1.0.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Martin Preisler <mpreisle@xxxxxxxxxx> 1.0.2-1 - Updated to new upstream release 1.0.2 -------------------------------------------------------------------------------- ================================================================================ scotch-6.0.1-1.fc21 (FEDORA-2014-11288) Graph, mesh and hypergraph partitioning library -------------------------------------------------------------------------------- Update Information: Update to version 6.0.1, see https://gforge.inria.fr/forum/forum.php?forum_id=11406 for details. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Sandro Mani <manisandro@xxxxxxxxx> - 6.0.1-1 - Update to 6.0.1 -------------------------------------------------------------------------------- ================================================================================ slv2-0.6.6-17.fc21 (FEDORA-2014-11308) LV2 host library -------------------------------------------------------------------------------- Update Information: slv2 got the wrong dependencies on ppc64le, bump release and rebuild. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Karsten Hopp <karsten@xxxxxxxxxx> 0.6.6-17 - bump and rebuild to fix dependency issues on ppc64le -------------------------------------------------------------------------------- ================================================================================ spice-gtk-0.25-6.fc21 (FEDORA-2014-11311) A GTK+ widget for SPICE clients -------------------------------------------------------------------------------- Update Information: Fix crash of spicy at startup -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Christophe Fergeau <cfergeau@xxxxxxxxxx> 0.25-6 - Run make install in gtk3 build after doing so in gtk2 build, otherwise we'll end up packaging gtk2 builds of spicy et al in spice-client-tools instead of gtk3 ones (#1145829) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1145829 - spicy crashes at startup on f21 https://bugzilla.redhat.com/show_bug.cgi?id=1145829 -------------------------------------------------------------------------------- ================================================================================ subversion-1.8.10-6.fc21 (FEDORA-2014-11269) A Modern Concurrent Version Control System -------------------------------------------------------------------------------- Update Information: Rebuild to drop SysV conversion triggers, assert() calls. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Joe Orton <jorton@xxxxxxxxxx> - 1.8.10-6 - prevents assert()ions in library code (#1058693) * Tue Sep 23 2014 Joe Orton <jorton@xxxxxxxxxx> - 1.8.10-5 - drop sysv conversion trigger (#1133786) * Tue Sep 23 2014 Joe Orton <jorton@xxxxxxxxxx> - 1.8.10-4 - move svn-bench, fsfs-* to -tools * Tue Aug 26 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.8.10-3 - Perl 5.20 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1133786 - Drop systemd dependency https://bugzilla.redhat.com/show_bug.cgi?id=1133786 -------------------------------------------------------------------------------- ================================================================================ suricata-2.0.4-1.fc21 (FEDORA-2014-11302) Intrusion Detection System -------------------------------------------------------------------------------- Update Information: This update fixes a bug in the SSH parser, where a malformed banner could lead to evasion of SSH rules and missing log entries. In some cases it may also lead to a crash, CVE-2014-6603. Additionally, this release also addresses a new IPv6 issue that can lead to evasion. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Steve Grubb <sgrubb@xxxxxxxxxx> 2.0.4-1 - New upstream bug fix release - Fixes CVE-2014-6603 out-of-bounds access in SSH parser -------------------------------------------------------------------------------- ================================================================================ telegram-cli-1.0.5-1.fc21 (FEDORA-2014-11266) Linux Command-line interface for Telegram -------------------------------------------------------------------------------- Update Information: Update to 1.0.5 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 Antonio Trande <sagitterATfedoraproject.org> 1.0.5-1 - Update to 1.0.5 -------------------------------------------------------------------------------- ================================================================================ tellico-2.3.9-1.fc21 (FEDORA-2014-11270) A collection manager -------------------------------------------------------------------------------- Update Information: This update has some small enhancements and several bugs fixed. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2014 José Matos <jamatos@xxxxxxxxxxxxxxxxx> - 2.3.9-1 - update to 2.3.9 - add appdata file * Mon Sep 8 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.3.8-6 - update scriptlets, BR: +libkcddb-devel -kdemultimedia-devel -------------------------------------------------------------------------------- References: [ 1 ] Bug #1112295 - tellico-2.3.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1112295 -------------------------------------------------------------------------------- ================================================================================ virt-manager-1.1.0-3.git310f6527.fc21 (FEDORA-2014-11291) Virtual Machine Manager -------------------------------------------------------------------------------- Update Information: * Fix defaults for arm and aarch64 VMs * Fix app hanging at connection startup with remote host (bz #1123266) * Fix several issues creating host bridges (bz #1122743) * Only use 2 usb redir devs by default to free up USB ports (bz #1135488) * Create qemu-ga channels for rhel/centos 6/7 VMs (bz #1139109) * Rebased to version 1.1.0 * Switch to libosinfo as OS metadata database (Giuseppe Scrivano) * Use libosinfo for OS detection from CDROM media labels (Giuseppe Scrivano) * Use libosinfo for improved OS defaults, like recommended disk size (Giuseppe Scrivano) * virt-image tool has been removed, as previously announced * Enable Hyper-V enlightenments for Windows VMs * Revert virtio-console default, back to plain serial console * Experimental q35 option in new VM 'customize' dialog * UI for virtual network QoS settings (Giuseppe Scrivano) * virt-install: --disk discard= support (Jim Minter) * addhardware: Add spiceport UI (Marc-André Lureau) * virt-install: --events on_poweroff etc. support (Chen Hanxiao) * cli --network portgroup= support and UI support * cli --boot initargs= and UI support * addhardware: allow setting controller model (Chen Hanxiao) * virt-install: support setting hugepage options (Chen Hanxiao) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Cole Robinson <crobinso@xxxxxxxxxx> - 1.1.0-3.git310f6527 - Fix defaults for arm and aarch64 VMs * Mon Sep 22 2014 Cole Robinson <crobinso@xxxxxxxxxx> - 1.1.0-2.git30db9ece2 - Fix app hanging at connection startup with remote host (bz #1123266) - Fix several issues creating host bridges (bz #1122743) - Only use 2 usb redir devs by default to free up USB ports (bz #1135488) - Create qemu-ga channels for rhel/centos 6/7 VMs (bz #1139109) * Sun Sep 7 2014 Cole Robinson <crobinso@xxxxxxxxxx> - 1.1.0-1 - Rebased to version 1.1.0 - Switch to libosinfo as OS metadata database (Giuseppe Scrivano) - Use libosinfo for OS detection from CDROM media labels (Giuseppe Scrivano) - Use libosinfo for improved OS defaults, like recommended disk size (Giuseppe Scrivano) - virt-image tool has been removed, as previously announced - Enable Hyper-V enlightenments for Windows VMs - Revert virtio-console default, back to plain serial console - Experimental q35 option in new VM 'customize' dialog - UI for virtual network QoS settings (Giuseppe Scrivano) - virt-install: --disk discard= support (Jim Minter) - addhardware: Add spiceport UI (Marc-André Lureau) - virt-install: --events on_poweroff etc. support (Chen Hanxiao) - cli --network portgroup= support and UI support - cli --boot initargs= and UI support - addhardware: allow setting controller model (Chen Hanxiao) - virt-install: support setting hugepage options (Chen Hanxiao) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1123266 - virt-manager hangs on initial ssh connection (and other hangs) https://bugzilla.redhat.com/show_bug.cgi?id=1123266 [ 2 ] Bug #1139109 - virt-install should create Qemu guest agent channel for rhel6 https://bugzilla.redhat.com/show_bug.cgi?id=1139109 [ 3 ] Bug #1138746 - virt-manager needs to split the version filed of the .treeinfo file on _ and - not just - https://bugzilla.redhat.com/show_bug.cgi?id=1138746 -------------------------------------------------------------------------------- ================================================================================ xen-4.4.1-4.fc21 (FEDORA-2014-11271) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information: Race condition in HVMOP_track_dirty_vram [XSA-104] (#1145736) Missing privilege level checks in x86 HLT, LGDT, LIDT, and LMSW emulation [XSA-105] (#1145737) Missing privilege level checks in x86 emulation of software interrupts [XSA-106] (#1145738) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.4.1-4 - Race condition in HVMOP_track_dirty_vram [XSA-104] (#1145736) - Missing privilege level checks in x86 HLT, LGDT, LIDT, and LMSW emulation [XSA-105] (#1145737) - Missing privilege level checks in x86 emulation of software interrupts [XSA-106] (#1145738) * Sun Sep 14 2014 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.4.1-3 - disable building pngs from fig files which is currently broken in rawhide * Tue Sep 9 2014 Michael Young <m.a.young@xxxxxxxxxxxx> - 4.4.1-2 - Mishandling of uninitialised FIFO-based event channel control blocks [XSA-107, CVE-2014-6268] (#1140287) - delete a patch file that was dropped in the last update -------------------------------------------------------------------------------- References: [ 1 ] Bug #1140254 - CVE-2014-7154 kernel: xen: Race condition in HVMOP_track_dirty_vram (XSA-104) https://bugzilla.redhat.com/show_bug.cgi?id=1140254 [ 2 ] Bug #1140266 - CVE-2014-7155 kernel: xen: Missing privilege level checks in x86 HLT, LGDT, LIDT, and LMSW emulation (XSA-105) https://bugzilla.redhat.com/show_bug.cgi?id=1140266 [ 3 ] Bug #1140271 - CVE-2014-7156 kernel: xen: Missing privilege level checks in x86 emulation of software interrupts (XSA-106) https://bugzilla.redhat.com/show_bug.cgi?id=1140271 -------------------------------------------------------------------------------- ================================================================================ xorg-x11-xtrans-devel-1.3.5-1.fc21 (FEDORA-2014-11277) X.Org X11 developmental X transport library -------------------------------------------------------------------------------- Update Information: xtrans 1.3.5 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Adam Jackson <ajax@xxxxxxxxxx> 1.3.5-1 - xtrans 1.3.5 -------------------------------------------------------------------------------- ================================================================================ xscreensaver-5.30-4.fc21 (FEDORA-2014-11264) X screen saver and locker -------------------------------------------------------------------------------- Update Information: A potential crash was found on xscreensaver-demo and tessellimage. This rpm will fix these issues. Also some miscellaneous fixes for signed integer overflows are included. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1:5.30-4 - tessellimage/tessellate: return immediately when nthreshes is zero - Bunch of signed integer overflow fixes * Mon Sep 15 2014 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1:5.30-3 - gcc49 sanitizer fix for xscreensaver-demo wrt memmove usage on de_stringify * Sat Sep 13 2014 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1:5.30-2 - Some misc change on spec file for git usage * Fri Sep 12 2014 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1:5.30-1 - Update to 5.30 * Sat Sep 6 2014 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1:5.29-3 - Remove GtkDialog:has-separator usage to suppress warning for xscreensaver-demo on Fedora 21 and above -------------------------------------------------------------------------------- ================================================================================ youtube-dl-2014.09.22.1-1.fc21 (FEDORA-2014-11297) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information: This update contains various bug fixes and improvements. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Till Maas <opensource@xxxxxxxxx> - 2014.09.22.1-1 - Update to latest release - Exclude fish completion script * Sun Sep 7 2014 Till Maas <opensource@xxxxxxxxx> - 2014.09.06-1 - Update to 2014-09-06 - Add GPG signature -------------------------------------------------------------------------------- References: [ 1 ] Bug #1136306 - youtube-dl-2014.09.22 is available https://bugzilla.redhat.com/show_bug.cgi?id=1136306 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test