The following Fedora 21 Security updates need testing: Age URL 16 https://admin.fedoraproject.org/updates/FEDORA-2014-10766/mod_gnutls-0.5.10-13.fc21 16 https://admin.fedoraproject.org/updates/FEDORA-2014-10767/squid-3.4.7-2.fc21 4 https://admin.fedoraproject.org/updates/FEDORA-2014-11302/suricata-2.0.4-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2014-11717/mediawiki-1.23.4-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2014-11643/seamonkey-2.29.1-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2014-11677/rubygem-bundler-1.7.3-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2014-11685/libvncserver-0.9.10-0.6.20140718git9453be42.fc21 The following Fedora 21 Critical Path updates have yet to be approved: Age URL 9 https://admin.fedoraproject.org/updates/FEDORA-2014-11103/cronie-1.4.12-1.fc21 9 https://admin.fedoraproject.org/updates/FEDORA-2014-11161/anaconda-21.48.7-1.fc21 9 https://admin.fedoraproject.org/updates/FEDORA-2014-11127/python-blivet-0.61.2-2.fc21 9 https://admin.fedoraproject.org/updates/FEDORA-2014-11108/python-backports-ssl_match_hostname-3.4.0.2-4.fc21 4 https://admin.fedoraproject.org/updates/FEDORA-2014-11279/qtwebkit-2.3.3-18.fc21 4 https://admin.fedoraproject.org/updates/FEDORA-2014-11329/lorax-21.23-1.fc21 4 https://admin.fedoraproject.org/updates/FEDORA-2014-11214/xdg-utils-1.1.0-0.28.rc2.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2014-11740/koji-1.9.0-7.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2014-11698/util-linux-2.25.1-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2014-11636/dnsmasq-2.72-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2014-11707/samba-4.1.12-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-11673/glibc-2.20-5.fc21 The following builds have been pushed to Fedora 21 updates-testing disper-0.3.1-3.fc21 gedit-3.14.0-2.fc21 glibc-2.20-5.fc21 gnome-chemistry-utils-0.14.9-2.fc21 gnote-3.14.0-1.fc21 gnumeric-1.12.18-1.fc21 goffice-0.10.18-1.fc21 hwloc-1.9.1-1.fc21 innotop-1.9.1-7.fc21 jenkins-1.581-2.fc21 jenkins-ant-plugin-1.2-1.fc21 jenkins-executable-war-1.29-3.fc21 jenkins-external-monitor-job-plugin-1.2-1.fc21 jenkins-javadoc-plugin-1.2-1.fc21 jenkins-junit-plugin-1.1-1.fc21 jenkins-mailer-plugin-1.11-1.fc21 js-yui2-2.9.0-6.fc21 palapeli-4.14.1-2.fc21 perl-App-CSV-0.08-4.fc21 perl-MooX-Cmd-0.009-1.fc21 php-horde-Horde-Core-2.14.1-2.fc21 php-horde-Horde-Mime-Viewer-2.0.7-3.fc21 php-horde-horde-5.2.1-2.fc21 rhythmbox-3.1-1.fc21 speedtest-cli-0.3.0-1.fc21 srm-1.2.14-1.fc21 stapler-adjunct-timeline-1.4-3.fc21 tig-2.0.3-1.fc21 Details about builds: ================================================================================ disper-0.3.1-3.fc21 (FEDORA-2014-11798) On-the-fly display switch utility -------------------------------------------------------------------------------- Update Information: Update to latest upstream + Install in python_sitelib -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 27 2014 François Cami <fcami@xxxxxxxxxxxxxxxxx> - 0.3.1-3 - Gratuitous rebuild. * Wed Sep 24 2014 François Cami <fcami@xxxxxxxxxxxxxxxxx> - 0.3.1-2 - Install in python_sitelib instead of /usr/share/disper/src/ * Wed Sep 17 2014 François Cami <fcami@xxxxxxxxxxxxxxxxx> - 0.3.1-1 - Update disper to 0.3.1 -------------------------------------------------------------------------------- ================================================================================ gedit-3.14.0-2.fc21 (FEDORA-2014-11800) Text editor for the GNOME desktop -------------------------------------------------------------------------------- Update Information: Add obsoletes for retired gedit-collaboration package. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 28 2014 Kalev Lember <kalevlember@xxxxxxxxx> - 2:3.14.0-2 - Obsolete retired gedit-collaboration -------------------------------------------------------------------------------- ================================================================================ glibc-2.20-5.fc21 (FEDORA-2014-11673) The GNU libc libraries -------------------------------------------------------------------------------- Update Information: Update glibc at the same time or before upgrading microcode_ctl on Intel Haswell hardware that has hardware transactional memory support. If you upgrade microcode_ctl before upgrading glibc your system will fail to boot and you will need to rescue your system (downgrade microcode_ctl). Intel errata HSW136 identifies a defect in hardware transactional memory support that requires the user to install a new microcode update to disable this cpu feature. Unfortunately the present method for updating microcode (microcode_ctl) happens too late in the system boot order causing all already running threads that use this feature to die with invalid opcode errors. In order to prevent users from damaging their systems this glibc update completely disables hardware transactional memory support in POSIX threads for Intel devices until such a time as the microcode update can be done earlier in the boot process. -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 27 2014 Carlos O'Donell <carlos@xxxxxxxxxx> - 2.20-5 - Disable more Intel TSX usage in rwlocks (#1146967). * Fri Sep 26 2014 Carlos O'Donell <carlos@xxxxxxxxxx> - 2.20-4 - Disable lock elision support for Intel hardware until microcode updates can be done in early bootup (#1146967). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146967 - Latest firmware update causes SIGILL on xbeginq instruction on Haswell processors https://bugzilla.redhat.com/show_bug.cgi?id=1146967 -------------------------------------------------------------------------------- ================================================================================ gnome-chemistry-utils-0.14.9-2.fc21 (FEDORA-2014-11774) A set of chemical utilities -------------------------------------------------------------------------------- Update Information: This is an update to the latest upstream releases of gnumeric and goffice: * http://gnumeric.org/announcements/1.12/gnumeric-1.12.18.html -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 27 2014 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 0.14.9-2 - Rebuilt for gnumeric-1.12.18 -------------------------------------------------------------------------------- ================================================================================ gnote-3.14.0-1.fc21 (FEDORA-2014-11793) Note-taking application -------------------------------------------------------------------------------- Update Information: gnote 3.14.0 release. See https://mail.gnome.org/archives/ftp-release-list/2014-September/msg00308.html for details. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 28 2014 Kalev Lember <kalevlember@xxxxxxxxx> - 3.14.0-1 - Update to 3.14.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1147135 - gnote-3.14.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1147135 -------------------------------------------------------------------------------- ================================================================================ gnumeric-1.12.18-1.fc21 (FEDORA-2014-11774) Spreadsheet program for GNOME -------------------------------------------------------------------------------- Update Information: This is an update to the latest upstream releases of gnumeric and goffice: * http://gnumeric.org/announcements/1.12/gnumeric-1.12.18.html -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 27 2014 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 1:1.12.18-1 - Updated to 1.12.18 * Thu Aug 28 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1:1.12.17-3 - Perl 5.20 rebuild -------------------------------------------------------------------------------- ================================================================================ goffice-0.10.18-1.fc21 (FEDORA-2014-11774) G Office support libraries -------------------------------------------------------------------------------- Update Information: This is an update to the latest upstream releases of gnumeric and goffice: * http://gnumeric.org/announcements/1.12/gnumeric-1.12.18.html -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 27 2014 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 0.10.18-1 - Updated to 0.10.18 -------------------------------------------------------------------------------- ================================================================================ hwloc-1.9.1-1.fc21 (FEDORA-2014-11787) Portable Hardware Locality - portable abstraction of hierarchical architectures -------------------------------------------------------------------------------- Update Information: Update to version 1.9.1 -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 26 2014 Jirka Hladky <hladky.jiri@xxxxxxxxx> - 1.9.1-1 - Update to version 1.9.1 - Added support for plugins -------------------------------------------------------------------------------- ================================================================================ innotop-1.9.1-7.fc21 (FEDORA-2014-11772) A MySQL and InnoDB monitor program -------------------------------------------------------------------------------- Update Information: Add a couple of patches (for which I already got in touch with upstream) to fix some bad behaviours with some IPs -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 28 2014 Fabio Alessandro Locati <fabiolocati@xxxxxxxxx> - 1.9.1-7 - Add patch innotop-fix-hostname-width-in-querylist made by me (already got in touch with upstream) - Add patch innotop-fix-host-in-transactions made by me (already got in touch with upstream) -------------------------------------------------------------------------------- ================================================================================ jenkins-1.581-2.fc21 (FEDORA-2014-11773) An extendable open source continuous integration server -------------------------------------------------------------------------------- Update Information: Latest Jenkins version 1.581 with some plugins and updated dependencies. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 28 2014 Michal Srb <msrb@xxxxxxxxxx> - 1.581-2 - Add R: jenkins-junit-plugin * Mon Sep 22 2014 Michal Srb <msrb@xxxxxxxxxx> - 1.581-1 - Update to upstream version 1.581 - Migrate to jenkins-winstone - Initial support for plugins from RPMs - Bugfixes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146010 - Incorrect symlink to jcommon-1.0.17.jar https://bugzilla.redhat.com/show_bug.cgi?id=1146010 -------------------------------------------------------------------------------- ================================================================================ jenkins-ant-plugin-1.2-1.fc21 (FEDORA-2014-11773) Jenkins Ant Plugin -------------------------------------------------------------------------------- Update Information: Latest Jenkins version 1.581 with some plugins and updated dependencies. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146010 - Incorrect symlink to jcommon-1.0.17.jar https://bugzilla.redhat.com/show_bug.cgi?id=1146010 -------------------------------------------------------------------------------- ================================================================================ jenkins-executable-war-1.29-3.fc21 (FEDORA-2014-11773) Jenkins Executable War -------------------------------------------------------------------------------- Update Information: Latest Jenkins version 1.581 with some plugins and updated dependencies. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2014 Michal Srb <msrb@xxxxxxxxxx> - 1.29-3 - Work with exploded WAR -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146010 - Incorrect symlink to jcommon-1.0.17.jar https://bugzilla.redhat.com/show_bug.cgi?id=1146010 -------------------------------------------------------------------------------- ================================================================================ jenkins-external-monitor-job-plugin-1.2-1.fc21 (FEDORA-2014-11773) Jenkins External Monitor Job Plugin -------------------------------------------------------------------------------- Update Information: Latest Jenkins version 1.581 with some plugins and updated dependencies. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146010 - Incorrect symlink to jcommon-1.0.17.jar https://bugzilla.redhat.com/show_bug.cgi?id=1146010 -------------------------------------------------------------------------------- ================================================================================ jenkins-javadoc-plugin-1.2-1.fc21 (FEDORA-2014-11773) Jenkins Javadoc Plugin -------------------------------------------------------------------------------- Update Information: Latest Jenkins version 1.581 with some plugins and updated dependencies. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146010 - Incorrect symlink to jcommon-1.0.17.jar https://bugzilla.redhat.com/show_bug.cgi?id=1146010 -------------------------------------------------------------------------------- ================================================================================ jenkins-junit-plugin-1.1-1.fc21 (FEDORA-2014-11773) Jenkins JUnit Plugin -------------------------------------------------------------------------------- Update Information: Latest Jenkins version 1.581 with some plugins and updated dependencies. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146010 - Incorrect symlink to jcommon-1.0.17.jar https://bugzilla.redhat.com/show_bug.cgi?id=1146010 -------------------------------------------------------------------------------- ================================================================================ jenkins-mailer-plugin-1.11-1.fc21 (FEDORA-2014-11773) Jenkins Mailer Plugin -------------------------------------------------------------------------------- Update Information: Latest Jenkins version 1.581 with some plugins and updated dependencies. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Michal Srb <msrb@xxxxxxxxxx> - 1.11-1 - Update to upstream version 1.11 - Install as Jenkins plugin -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146010 - Incorrect symlink to jcommon-1.0.17.jar https://bugzilla.redhat.com/show_bug.cgi?id=1146010 -------------------------------------------------------------------------------- ================================================================================ js-yui2-2.9.0-6.fc21 (FEDORA-2014-11773) Yahoo User Interface JavaScript library -------------------------------------------------------------------------------- Update Information: Latest Jenkins version 1.581 with some plugins and updated dependencies. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 26 2014 Michal Srb <msrb@xxxxxxxxxx> - 2.9.0-6 - Add jenkins subpackage -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146010 - Incorrect symlink to jcommon-1.0.17.jar https://bugzilla.redhat.com/show_bug.cgi?id=1146010 -------------------------------------------------------------------------------- ================================================================================ palapeli-4.14.1-2.fc21 (FEDORA-2014-11775) A jigsaw puzzle game -------------------------------------------------------------------------------- Update Information: optimize mime scriptlets (which speeds multipackage install/upgrade transactions). -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 27 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.14.1-2 - optimize mime scriptlet -------------------------------------------------------------------------------- ================================================================================ perl-App-CSV-0.08-4.fc21 (FEDORA-2014-11797) App::CSV Perl module -------------------------------------------------------------------------------- Update Information: Add MooseX::getopt missing dependency -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 28 2014 Fabio Alessandro Locati <fabiolocati@xxxxxxxxx> - 0.08-4 - Add MooseX::Getopt for running too as pointed out in bug 1146184 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146184 - CSV package is missing perl-MooseX-Getopt as dependency https://bugzilla.redhat.com/show_bug.cgi?id=1146184 -------------------------------------------------------------------------------- ================================================================================ perl-MooX-Cmd-0.009-1.fc21 (FEDORA-2014-11799) Giving an easy Moo style way to make command organized CLI apps -------------------------------------------------------------------------------- Update Information: Initial release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1134361 - Review Request: perl-MooX-Cmd - Giving an easy Moo style way to make command organized CLI apps https://bugzilla.redhat.com/show_bug.cgi?id=1134361 -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Core-2.14.1-2.fc21 (FEDORA-2014-11203) Horde Core Framework libraries -------------------------------------------------------------------------------- Update Information: Packaging changes: - don't use system javascript libraries as this breaks horde and its cache system - use /var/log/horde for logging - use /var/lib/horde/cache for caching - use /var/lib/horde/static for js and css cache - fix regex filter, fix missing horde-power*.png Horde_Core 2.14.1 * [mjr] Fix handling of EAS categories containing spaces in the name. * [jan] Catch exceptions if not being able to find an LDAP user DN (Bug #13571). * [mms] Fix using master SMTP credentials when a CLI script uses the 'user_admin' registry flag. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.14.1-2 - don't use system prototype and scriptaculous as this breaks horde and its cache system * Fri Sep 19 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.14.1-1 - Update to 2.14.1 -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Mime-Viewer-2.0.7-3.fc21 (FEDORA-2014-11203) Horde MIME Viewer Library -------------------------------------------------------------------------------- Update Information: Packaging changes: - don't use system javascript libraries as this breaks horde and its cache system - use /var/log/horde for logging - use /var/lib/horde/cache for caching - use /var/lib/horde/static for js and css cache - fix regex filter, fix missing horde-power*.png Horde_Core 2.14.1 * [mjr] Fix handling of EAS categories containing spaces in the name. * [jan] Catch exceptions if not being able to find an LDAP user DN (Bug #13571). * [mms] Fix using master SMTP credentials when a CLI script uses the 'user_admin' registry flag. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.0.7-3 - don't use system syntaxhighlighter as this breaks horde and its cache system -------------------------------------------------------------------------------- ================================================================================ php-horde-horde-5.2.1-2.fc21 (FEDORA-2014-11203) Horde Application Framework -------------------------------------------------------------------------------- Update Information: Packaging changes: - don't use system javascript libraries as this breaks horde and its cache system - use /var/log/horde for logging - use /var/lib/horde/cache for caching - use /var/lib/horde/static for js and css cache - fix regex filter, fix missing horde-power*.png Horde_Core 2.14.1 * [mjr] Fix handling of EAS categories containing spaces in the name. * [jan] Catch exceptions if not being able to find an LDAP user DN (Bug #13571). * [mms] Fix using master SMTP credentials when a CLI script uses the 'user_admin' registry flag. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 23 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 5.2.1-2 - don't use system javascript libraries as this breaks horde and its cache system - use /var/log/horde for logging - use /var/lib/horde/cache for caching - use /var/lib/horde/static for js and css cache - fix regex filter, fix missing horde-power*.png -------------------------------------------------------------------------------- ================================================================================ rhythmbox-3.1-1.fc21 (FEDORA-2014-11792) Music Management Application -------------------------------------------------------------------------------- Update Information: Rhythmbox 3.1 release. >From upstream release notes: * Assorted bug fixes * GTK+ 3.14 compatible * Now includes an AppData file Bugs fixed: - 637747 - "Edit > Preferences > General > Visibile Columns > BPM" missing mnemonic - 686082 - UPNP servers do not get removed after they become unavailable - 702885 - SendTo plugin does not work with music files containing apostrophe - 723020 - Rhythmbox incorrectly reads the year tag of m4a files - 725884 - support libsecret 0.18 (SecretUnstable to Secret API change) - 729373 - rhythmbox crashes upon "Jump to Playing Song" - 731025 - Song properties dialog "Basic" tab, "Comment" keyboard mnemonic is same as "Composer" - 731202 - Notification disappears when I pause my music - 731236 - New Radio Paradise URLs - 732764 - The latest rhythmbox needs atleast libglib 2.34 - 732880 - Wording used for importing music in import screen is not clear - 733499 - rhythmbox crashes with SIGSEGV due to double free in rb_podcast_parse_channel_free - 733526 - rhythmbox / audioscrobbler fails if built from separate build dir - 733586 - Inequal sizing and alignment in rhythmbox UI. - 733636 - grilo: Do not free GrlRegistry - 734057 - rhythmbox-client --stop - 734123 - Rhythmbox 3.0.2 crashes if attempting to load pls stream before any other type - 734235 - AAC tags are improperly parsed for the "year" field - 735021 - daap source compilation failure with ubuntu 14.04 - 735056 - Rating stars are not vertically aligned in GtkTreeView listing - 735083 - Rhythmbox crash when adding songs to a playlist - 735954 - Right-clicking on song causes Segmentation fault - 737053 - song-info ui files need update - 737368 - rhythmbox.appdata.xml.in is in wrong location -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 28 2014 Kalev Lember <kalevlember@xxxxxxxxx> - 3.1-1 - Update to 3.1 - Tighten subpackage deps -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146287 - old version of rhythmbox https://bugzilla.redhat.com/show_bug.cgi?id=1146287 -------------------------------------------------------------------------------- ================================================================================ speedtest-cli-0.3.0-1.fc21 (FEDORA-2014-11778) Command line interface for testing internet bandwidth -------------------------------------------------------------------------------- Update Information: Initial spec -------------------------------------------------------------------------------- ================================================================================ srm-1.2.14-1.fc21 (FEDORA-2014-11794) Secure file deletion -------------------------------------------------------------------------------- Update Information: Update to new upstream version 1.2.14 -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 27 2014 Fabian Affolter <mail@xxxxxxxxxxxxxxxxxx> - 1.2.14-1 - Update to new upstream version 1.2.14 -------------------------------------------------------------------------------- ================================================================================ stapler-adjunct-timeline-1.4-3.fc21 (FEDORA-2014-11773) Timeline widget support for Stapler web framework -------------------------------------------------------------------------------- Update Information: Latest Jenkins version 1.581 with some plugins and updated dependencies. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 26 2014 Michal Srb <msrb@xxxxxxxxxx> - 1.4-3 - Enable javascript -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146010 - Incorrect symlink to jcommon-1.0.17.jar https://bugzilla.redhat.com/show_bug.cgi?id=1146010 -------------------------------------------------------------------------------- ================================================================================ tig-2.0.3-1.fc21 (FEDORA-2014-11789) Text-mode interface for the git revision control system -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 28 2014 Johan Cwiklinski <johan AT x-tnd DOT be> - 2.0.3-1 - New upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1135417 - tig-2.0.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1135417 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test