The following Fedora 20 Security updates need testing: Age URL 172 https://admin.fedoraproject.org/updates/FEDORA-2014-5897/nrpe-2.15-2.fc20 66 https://admin.fedoraproject.org/updates/FEDORA-2014-9474/pipelight-0.2.7.3-3.fc20 41 https://admin.fedoraproject.org/updates/FEDORA-2014-10451/geary-0.6.3-1.fc20 41 https://admin.fedoraproject.org/updates/FEDORA-2014-10468/icecream-1.0.1-8.20140822git.fc20 25 https://admin.fedoraproject.org/updates/FEDORA-2014-11430/ca-certificates-2014.2.1-1.1.fc20 18 https://admin.fedoraproject.org/updates/FEDORA-2014-11969/krb5-1.11.5-16.fc20 10 https://admin.fedoraproject.org/updates/FEDORA-2014-12475/python-oauth2-1.5.211-8.fc20 10 https://admin.fedoraproject.org/updates/FEDORA-2014-12308/sddm-0.9.0-2.20141007git6a28c29b.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2014-12699/facter-1.7.6-1.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-12910/sysklogd-1.5-18.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-13040/rubygem-httpclient-2.4.0-2.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-13063/devscripts-2.14.10-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-13030/drupal7-7.32-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-12991/deluge-1.3.10-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-13013/php-5.5.18-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-13302/php-ZendFramework2-2.3.3-2.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-13356/xulrunner-33.0-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-13371/asterisk-11.13.1-1.fc20 The following Fedora 20 Critical Path updates have yet to be approved: Age URL 0 https://admin.fedoraproject.org/updates/FEDORA-2014-13347/qtwebkit-2.3.4-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-13366/btrfs-progs-3.17-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-13361/gdbm-1.10-8.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-13374/xdg-utils-1.1.0-0.30.rc2.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-13353/perl-Encode-2.54-3.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-13348/libpcap-1.5.3-2.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-13356/xulrunner-33.0-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-13377/libfm-1.2.3-1.fc20,pcmanfm-1.2.3-1.fc20 The following builds have been pushed to Fedora 20 updates-testing asterisk-11.13.1-1.fc20 btrfs-progs-3.17-1.fc20 cobbler-2.6.6-1.fc20 cp2k-2.5.1-2.fc20 dovecot-2.2.14-1.fc20 efibootmgr-0.10.0-1.fc20 fence-agents-4.0.12-1.fc20 gdbm-1.10-8.fc20 golang-github-docker-libcontainer-1.2.0-1.gitc907e40.fc20 grib_api-1.12.3-5.fc20 ioprocess-0.14.0-1.fc20 libfm-1.2.3-1.fc20 libpcap-1.5.3-2.fc20 lis-1.4.63-1.fc20 miniz-1.15-1.r4.fc20 oxygen-fonts-5.1.0-2.fc20 pcmanfm-1.2.3-1.fc20 perl-Encode-2.54-3.fc20 php-aws-sdk-2.7.1-1.fc20 postfix-2.10.5-1.fc20 postgresql-9.3.5-2.fc20 protobuf-2.5.0-11.fc20 pyhoca-cli-0.5.0.0-1.fc20 pyhoca-gui-0.5.0.0-1.fc20 python-SimpleCV-1.3-3.fc20 python-drat-0.4.2-1.fc20 python-x2go-0.5.0.0-1.fc20 qtwebkit-2.3.4-1.fc20 torbrowser-launcher-0.1.6-2.fc20 xdg-utils-1.1.0-0.30.rc2.fc20 xulrunner-33.0-1.fc20 Details about builds: ================================================================================ asterisk-11.13.1-1.fc20 (FEDORA-2014-13371) The Open Source PBX -------------------------------------------------------------------------------- Update Information: * Mon Oct 20 2014 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 11.13.1-1 - The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.28 and 11.6 and Asterisk 1.8, 11, 12, and 13. The available - security releases are released as versions 1.8.28-cert2, 11.6-cert7, 1.8.31.1, - 11.13.1, 12.6.1, and 13.0.0-beta3. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolves the following security vulnerability: - - * AST-2014-011: Asterisk Susceptibility to POODLE Vulnerability - - Asterisk is susceptible to the POODLE vulnerability in two ways: - 1) The res_jabber and res_xmpp module both use SSLv3 exclusively for their - encrypted connections. - 2) The core TLS handling in Asterisk, which is used by the chan_sip channel - driver, Asterisk Manager Interface (AMI), and Asterisk HTTP Server, by - default allow a TLS connection to fallback to SSLv3. This allows for a - MITM to potentially force a connection to fallback to SSLv3, exposing it - to the POODLE vulnerability. - - These issues have been resolved in the versions released in conjunction with - this security advisory. - - For more information about the details of this vulnerability, please read - security advisory AST-2014-011, which was released at the same time as this - announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.28-cert2 - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert7 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.31.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.13.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.6.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-13.0.0-beta3 - - The security advisory is available at: - - * http://downloads.asterisk.org/pub/security/AST-2014-011.pdf * Mon Oct 20 2014 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 11.13.0-1 - The Asterisk Development Team has announced the release of Asterisk 11.13.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.13.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-24032 - Gentoo compilation emits warning: - "_FORTIFY_SOURCE" redefined (Reported by Kilburn) - * ASTERISK-24225 - Dial option z is broken (Reported by - dimitripietro) - * ASTERISK-24178 - [patch]fromdomainport used even if not set - (Reported by Elazar Broad) - * ASTERISK-22252 - res_musiconhold cleanup - REF_DEBUG reload - warnings and ref leaks (Reported by Walter Doekes) - * ASTERISK-23997 - chan_sip: port incorrectly incremented for RTCP - ICE candidates in SDP answer (Reported by Badalian Vyacheslav) - * ASTERISK-24019 - When a Music On Hold stream starts it restarts - at beginning of file. (Reported by Jason Richards) - * ASTERISK-23767 - [patch] Dynamic IAX2 registration stops trying - if ever not able to resolve (Reported by David Herselman) - * ASTERISK-24211 - testsuite: Fix the dial_LS_options test - (Reported by Matt Jordan) - * ASTERISK-24249 - SIP debugs do not stop (Reported by Avinash - Mohod) - * ASTERISK-23577 - res_rtp_asterisk: Crash in - ast_rtp_on_turn_rtp_state when RTP instance is NULL (Reported by - Jay Jideliov) - * ASTERISK-23634 - With TURN Asterisk crashes on multiple (7-10) - concurrent WebRTC (avpg/encryption/icesupport) calls (Reported - by Roman Skvirsky) - * ASTERISK-24301 - Security: Out of call MESSAGE requests - processed via Message channel driver can crash Asterisk - (Reported by Matt Jordan) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-24171 - [patch] Provide a manpage for the aelparse - utility (Reported by Jeremy Lainé) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.13.0 * Mon Oct 20 2014 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 11.12.1-1 - The Asterisk Development Team has announced security releases for Certified - Asterisk 11.6 and Asterisk 11 and 12. The available security releases are - released as versions 11.6-cert6, 11.12.1, and 12.5.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - Please note that the release of these versions resolves the following security - vulnerability: - - * AST-2014-010: Remote Crash when Handling Out of Call Message in Certain - Dialplan Configurations - - Additionally, the release of Asterisk 12.5.1 resolves the following security - vulnerability: - - * AST-2014-009: Remote Crash Based on Malformed SIP Subscription Requests - - Note that the crash described in AST-2014-010 can be worked around through - dialplan configuration. Given the likelihood of the issue, an advisory was - deemed to be warranted. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2014-009 and AST-2014-010, which were released at the - same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert6 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.12.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.5.1 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2014-009.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-010.pdf * Mon Oct 20 2014 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 11.12.0-1 - The Asterisk Development Team has announced the release of Asterisk 11.12.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.12.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-23911 - URIENCODE/URIDECODE: WARNING about passing an - empty string is a bit over zealous (Reported by Matt Jordan) - * ASTERISK-23985 - PresenceState Action response does not contain - ActionID; duplicates Message Header (Reported by Matt Jordan) - * ASTERISK-23814 - No call started after peer dialed (Reported by - Igor Goncharovsky) - * ASTERISK-24087 - [patch]chan_sip: sip_subscribe_mwi_destroy - should not call sip_destroy (Reported by Corey Farrell) - * ASTERISK-23818 - PBX_Lua: after asterisk startup module is - loaded, but dialplan not available (Reported by Dennis Guse) - * ASTERISK-18345 - [patch] sips connection dropped by asterisk - with a large INVITE (Reported by Stephane Chazelas) - * ASTERISK-23508 - Memory Corruption in - __ast_string_field_ptr_build_va (Reported by Arnd Schmitter) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-21178 - Improve documentation for manager command - Getvar, Setvar (Reported by Rusty Newton) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.12.0 * Mon Oct 20 2014 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 11.11.0-1 - The Asterisk Development Team has announced the release of Asterisk 11.11.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.11.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-22551 - Session timer : UAS (Asterisk) starts counting - at Invite, UAC starts counting at 200 OK. (Reported by i2045) - * ASTERISK-23792 - Mutex left locked in chan_unistim.c (Reported - by Peter Whisker) - * ASTERISK-23582 - [patch]Inconsistent column length in *odbc - (Reported by Walter Doekes) - * ASTERISK-23803 - AMI action UpdateConfig EmptyCat clears all - categories but the requested one (Reported by zvision) - * ASTERISK-23035 - ConfBridge with name longer than max (32 chars) - results in several bridges with same conf_name (Reported by - Iñaki Cívico) - * ASTERISK-23824 - ConfBridge: Users cannot be muted via CLI or - AMI when waiting to enter a conference (Reported by Matt Jordan) - * ASTERISK-23683 - #includes - wildcard character in a path more - than one directory deep - results in no config parsing on module - reload (Reported by tootai) - * ASTERISK-23827 - autoservice thread doesn't exit at shutdown - (Reported by Corey Farrell) - * ASTERISK-23609 - Security: AMI action MixMonitor allows - arbitrary programs to be run (Reported by Corey Farrell) - * ASTERISK-23673 - Security: DOS by consuming the number of - allowed HTTP connections. (Reported by Richard Mudgett) - * ASTERISK-23246 - DEBUG messages in sdp_crypto.c display despite - a DEBUG level of zero (Reported by Rusty Newton) - * ASTERISK-23766 - [patch] Specify timeout for database write in - SQLite (Reported by Igor Goncharovsky) - * ASTERISK-23844 - Load of pbx_lua fails on sample extensions.lua - with Lua 5.2 or greater due to addition of goto statement - (Reported by Rusty Newton) - * ASTERISK-23818 - PBX_Lua: after asterisk startup module is - loaded, but dialplan not available (Reported by Dennis Guse) - * ASTERISK-23834 - res_rtp_asterisk debug message gives wrong - length if ICE (Reported by Richard Kenner) - * ASTERISK-23790 - [patch] - SIP From headers longer than 256 - characters result in dropped call and 'No closing bracket' - warnings. (Reported by uniken1) - * ASTERISK-23917 - res_http_websocket: Delay in client processing - large streams of data causes disconnect and stuck socket - (Reported by Matt Jordan) - * ASTERISK-23908 - [patch]When using FEC error correction, - asterisk tries considers negative sequence numbers as missing - (Reported by Torrey Searle) - * ASTERISK-23921 - refcounter.py uses excessive ram for large refs - files (Reported by Corey Farrell) - * ASTERISK-23948 - REF_DEBUG fails to record ao2_ref against - objects that were already freed (Reported by Corey Farrell) - * ASTERISK-23916 - [patch]SIP/SDP fmtp line may include whitespace - between attributes (Reported by Alexander Traud) - * ASTERISK-23984 - Infinite loop possible in ast_careful_fwrite() - (Reported by Steve Davies) - * ASTERISK-23897 - [patch]Change in SETUP ACK handling (checking - PI) in revision 413765 breaks working environments (Reported by - Pavel Troller) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-23492 - Add option to safe_asterisk to disable - backgrounding (Reported by Walter Doekes) - * ASTERISK-22961 - [patch] DTLS-SRTP not working with SHA-256 - (Reported by Jay Jideliov) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.11.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 11.13.1-1 - The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.28 and 11.6 and Asterisk 1.8, 11, 12, and 13. The available - security releases are released as versions 1.8.28-cert2, 11.6-cert7, 1.8.31.1, - 11.13.1, 12.6.1, and 13.0.0-beta3. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - The release of these versions resolves the following security vulnerability: - - * AST-2014-011: Asterisk Susceptibility to POODLE Vulnerability - - Asterisk is susceptible to the POODLE vulnerability in two ways: - 1) The res_jabber and res_xmpp module both use SSLv3 exclusively for their - encrypted connections. - 2) The core TLS handling in Asterisk, which is used by the chan_sip channel - driver, Asterisk Manager Interface (AMI), and Asterisk HTTP Server, by - default allow a TLS connection to fallback to SSLv3. This allows for a - MITM to potentially force a connection to fallback to SSLv3, exposing it - to the POODLE vulnerability. - - These issues have been resolved in the versions released in conjunction with - this security advisory. - - For more information about the details of this vulnerability, please read - security advisory AST-2014-011, which was released at the same time as this - announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.28-cert2 - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert7 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.31.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.13.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.6.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-13.0.0-beta3 - - The security advisory is available at: - - * http://downloads.asterisk.org/pub/security/AST-2014-011.pdf * Mon Oct 20 2014 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 11.13.0-1 - The Asterisk Development Team has announced the release of Asterisk 11.13.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.13.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-24032 - Gentoo compilation emits warning: - "_FORTIFY_SOURCE" redefined (Reported by Kilburn) - * ASTERISK-24225 - Dial option z is broken (Reported by - dimitripietro) - * ASTERISK-24178 - [patch]fromdomainport used even if not set - (Reported by Elazar Broad) - * ASTERISK-22252 - res_musiconhold cleanup - REF_DEBUG reload - warnings and ref leaks (Reported by Walter Doekes) - * ASTERISK-23997 - chan_sip: port incorrectly incremented for RTCP - ICE candidates in SDP answer (Reported by Badalian Vyacheslav) - * ASTERISK-24019 - When a Music On Hold stream starts it restarts - at beginning of file. (Reported by Jason Richards) - * ASTERISK-23767 - [patch] Dynamic IAX2 registration stops trying - if ever not able to resolve (Reported by David Herselman) - * ASTERISK-24211 - testsuite: Fix the dial_LS_options test - (Reported by Matt Jordan) - * ASTERISK-24249 - SIP debugs do not stop (Reported by Avinash - Mohod) - * ASTERISK-23577 - res_rtp_asterisk: Crash in - ast_rtp_on_turn_rtp_state when RTP instance is NULL (Reported by - Jay Jideliov) - * ASTERISK-23634 - With TURN Asterisk crashes on multiple (7-10) - concurrent WebRTC (avpg/encryption/icesupport) calls (Reported - by Roman Skvirsky) - * ASTERISK-24301 - Security: Out of call MESSAGE requests - processed via Message channel driver can crash Asterisk - (Reported by Matt Jordan) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-24171 - [patch] Provide a manpage for the aelparse - utility (Reported by Jeremy Lainé) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.13.0 * Mon Oct 20 2014 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 11.12.1-1 - The Asterisk Development Team has announced security releases for Certified - Asterisk 11.6 and Asterisk 11 and 12. The available security releases are - released as versions 11.6-cert6, 11.12.1, and 12.5.1. - - These releases are available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk/releases - - Please note that the release of these versions resolves the following security - vulnerability: - - * AST-2014-010: Remote Crash when Handling Out of Call Message in Certain - Dialplan Configurations - - Additionally, the release of Asterisk 12.5.1 resolves the following security - vulnerability: - - * AST-2014-009: Remote Crash Based on Malformed SIP Subscription Requests - - Note that the crash described in AST-2014-010 can be worked around through - dialplan configuration. Given the likelihood of the issue, an advisory was - deemed to be warranted. - - For more information about the details of these vulnerabilities, please read - security advisories AST-2014-009 and AST-2014-010, which were released at the - same time as this announcement. - - For a full list of changes in the current releases, please see the ChangeLogs: - - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert6 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.12.1 - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.5.1 - - The security advisories are available at: - - * http://downloads.asterisk.org/pub/security/AST-2014-009.pdf - * http://downloads.asterisk.org/pub/security/AST-2014-010.pdf * Mon Oct 20 2014 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 11.12.0-1 - The Asterisk Development Team has announced the release of Asterisk 11.12.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.12.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-23911 - URIENCODE/URIDECODE: WARNING about passing an - empty string is a bit over zealous (Reported by Matt Jordan) - * ASTERISK-23985 - PresenceState Action response does not contain - ActionID; duplicates Message Header (Reported by Matt Jordan) - * ASTERISK-23814 - No call started after peer dialed (Reported by - Igor Goncharovsky) - * ASTERISK-24087 - [patch]chan_sip: sip_subscribe_mwi_destroy - should not call sip_destroy (Reported by Corey Farrell) - * ASTERISK-23818 - PBX_Lua: after asterisk startup module is - loaded, but dialplan not available (Reported by Dennis Guse) - * ASTERISK-18345 - [patch] sips connection dropped by asterisk - with a large INVITE (Reported by Stephane Chazelas) - * ASTERISK-23508 - Memory Corruption in - __ast_string_field_ptr_build_va (Reported by Arnd Schmitter) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-21178 - Improve documentation for manager command - Getvar, Setvar (Reported by Rusty Newton) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.12.0 * Mon Oct 20 2014 Jeffrey C. Ollie <jeff@xxxxxxxxxx> - 11.11.0-1 - The Asterisk Development Team has announced the release of Asterisk 11.11.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk - - The release of Asterisk 11.11.0 resolves several issues reported by the - community and would have not been possible without your participation. - Thank you! - - The following are the issues resolved in this release: - - Bugs fixed in this release: - ----------------------------------- - * ASTERISK-22551 - Session timer : UAS (Asterisk) starts counting - at Invite, UAC starts counting at 200 OK. (Reported by i2045) - * ASTERISK-23792 - Mutex left locked in chan_unistim.c (Reported - by Peter Whisker) - * ASTERISK-23582 - [patch]Inconsistent column length in *odbc - (Reported by Walter Doekes) - * ASTERISK-23803 - AMI action UpdateConfig EmptyCat clears all - categories but the requested one (Reported by zvision) - * ASTERISK-23035 - ConfBridge with name longer than max (32 chars) - results in several bridges with same conf_name (Reported by - Iñaki Cívico) - * ASTERISK-23824 - ConfBridge: Users cannot be muted via CLI or - AMI when waiting to enter a conference (Reported by Matt Jordan) - * ASTERISK-23683 - #includes - wildcard character in a path more - than one directory deep - results in no config parsing on module - reload (Reported by tootai) - * ASTERISK-23827 - autoservice thread doesn't exit at shutdown - (Reported by Corey Farrell) - * ASTERISK-23609 - Security: AMI action MixMonitor allows - arbitrary programs to be run (Reported by Corey Farrell) - * ASTERISK-23673 - Security: DOS by consuming the number of - allowed HTTP connections. (Reported by Richard Mudgett) - * ASTERISK-23246 - DEBUG messages in sdp_crypto.c display despite - a DEBUG level of zero (Reported by Rusty Newton) - * ASTERISK-23766 - [patch] Specify timeout for database write in - SQLite (Reported by Igor Goncharovsky) - * ASTERISK-23844 - Load of pbx_lua fails on sample extensions.lua - with Lua 5.2 or greater due to addition of goto statement - (Reported by Rusty Newton) - * ASTERISK-23818 - PBX_Lua: after asterisk startup module is - loaded, but dialplan not available (Reported by Dennis Guse) - * ASTERISK-23834 - res_rtp_asterisk debug message gives wrong - length if ICE (Reported by Richard Kenner) - * ASTERISK-23790 - [patch] - SIP From headers longer than 256 - characters result in dropped call and 'No closing bracket' - warnings. (Reported by uniken1) - * ASTERISK-23917 - res_http_websocket: Delay in client processing - large streams of data causes disconnect and stuck socket - (Reported by Matt Jordan) - * ASTERISK-23908 - [patch]When using FEC error correction, - asterisk tries considers negative sequence numbers as missing - (Reported by Torrey Searle) - * ASTERISK-23921 - refcounter.py uses excessive ram for large refs - files (Reported by Corey Farrell) - * ASTERISK-23948 - REF_DEBUG fails to record ao2_ref against - objects that were already freed (Reported by Corey Farrell) - * ASTERISK-23916 - [patch]SIP/SDP fmtp line may include whitespace - between attributes (Reported by Alexander Traud) - * ASTERISK-23984 - Infinite loop possible in ast_careful_fwrite() - (Reported by Steve Davies) - * ASTERISK-23897 - [patch]Change in SETUP ACK handling (checking - PI) in revision 413765 breaks working environments (Reported by - Pavel Troller) - - Improvements made in this release: - ----------------------------------- - * ASTERISK-23492 - Add option to safe_asterisk to disable - backgrounding (Reported by Walter Doekes) - * ASTERISK-22961 - [patch] DTLS-SRTP not working with SHA-256 - (Reported by Jay Jideliov) - - For a full list of changes in this release, please see the ChangeLog: - - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.11.0 * Thu Aug 28 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 11.10.2-2.2 - Perl 5.20 rebuild * Fri Aug 15 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 11.10.2-2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1154894 - asterisk vulnerable to CVE-2014-3566/POODLE (AST-2014-011) https://bugzilla.redhat.com/show_bug.cgi?id=1154894 -------------------------------------------------------------------------------- ================================================================================ btrfs-progs-3.17-1.fc20 (FEDORA-2014-13366) Userspace programs for btrfs -------------------------------------------------------------------------------- Update Information: New upstream version -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Eric Sandeen <sandeen@xxxxxxxxxx> 3.17-1 - New upstream release -------------------------------------------------------------------------------- ================================================================================ cobbler-2.6.6-1.fc20 (FEDORA-2014-13343) Boot server configurator -------------------------------------------------------------------------------- Update Information: Update to 2.6.6: Feature improvements - Add proxy support for get-loaders, signature update and reposync (#1286) - Support virtio26 for generic qemu fallback (Koan) Bugfixes - Post install report mails are not mailed when ignorelist is empty (#1248) - Regression: kickstart edit in cobbler-web fixed - Regression: kickstart filepath validation - Blacklist gpgkey as an invalid option to the repo statement - gpgcheck / enabled are not valid in kickstart, only in config.repo - Updated man page to reflect the removal of URL support for kickstarts - Regression: inherit was not available as kickstart value - Return right value from TftpdPyManager.what method - Fixed a typo in the power management API - Ensure all variables are available in PXE generation (#505) - Dont reset CONFIG_ARGS as it might have been sourced from sysconfig/defaults (#1141) Feature improvements * Make kickstart selectable from a pulldown list in cobbler-web (#991) * Minor adjustment to the error_page template (cobbler-web) * Minor improvements to edit snippets/kickstarts template (cobbler-web) * Allow for empty system status Bugfixes * Exit with an error if cobblerd executable can't be found (#1108 #1135) * Fix cobbler sync bug through xmlrpc api (NoneType object has no attribute info) * Changes (edit/add) to multiple interfaces in cobbler-web now actually work (#687) * Don't send the Puppet environment when system status is empty (#560) * Add strict kickstart check in the API (again for #939) * Do not allow kickstarts in /etc/cobbler * Fix broken gitdate, gitstamp values in version file (cobbler version) * Prevent disappearing profiles after cobblerd restart (#1030) Upgrade notes This release makes the use of --parent and --distro mutually exclusive. The consequence is that subprofiles always have the same distro as the parent profile. This has been the intended behaviour ever since subprofiles got introduced. Please check if you have subprofiles with different distros than the parent profile and reconsider and adjust your configuration. Bugfixes * Add missing _validate_ks_template_path function so that kickstarts for systems can now be changed again (#1156) * Remove root= argument from boot when using grubby and replace-self to avoid booting the currently running OS (#638) Feature improvements * Make kickstart selectable from a pulldown list in cobbler-web (#991) * Minor adjustment to the error_page template (cobbler-web) * Minor improvements to edit snippets/kickstarts template (cobbler-web) * Allow for empty system status Bugfixes * Exit with an error if cobblerd executable can't be found (#1108 #1135) * Fix cobbler sync bug through xmlrpc api (NoneType object has no attribute info) * Changes (edit/add) to multiple interfaces in cobbler-web now actually work (#687) * Don't send the Puppet environment when system status is empty (#560) * Add strict kickstart check in the API (again for #939) * Do not allow kickstarts in /etc/cobbler * Fix broken gitdate, gitstamp values in version file (cobbler version) * Prevent disappearing profiles after cobblerd restart (#1030) Upgrade notes This release makes the use of --parent and --distro mutually exclusive. The consequence is that subprofiles always have the same distro as the parent profile. This has been the intended behaviour ever since subprofiles got introduced. Please check if you have subprofiles with different distros than the parent profile and reconsider and adjust your configuration. Update to 2.6.2: - Add EL7 (RHEL/CentOS) to distro signatures - Add CloudLinux6 support to distro signatures - Minor update to CSS; make better use of screen (tables) - pre_install_network_config: only use slaves with a valid MAC address - Remove colon from VLAN regex pattern - Improve exception logging in BootCLI (Issue 148) - Item.set_name optimizations - Minor improvement to LDAP configuration (Issue 217) - Add a distro_signature for Ubuntu 14.04 - Improve performance of the "cobbler sync" operation - Add support for a wget repo breed - Improve support for running inside chroot() and/or containers - Added missing docs to the RPM packages - Fixed typos in default kickstart files - Initial support for Nexenta 4: distro import and manual PXE booting - Added support for ESXi 6 - Added a config setting (always_write_dhcp_entries) to always write DHCP entries regardless of netboot setting Update to 2.6.2: - Add EL7 (RHEL/CentOS) to distro signatures - Add CloudLinux6 support to distro signatures - Minor update to CSS; make better use of screen (tables) - pre_install_network_config: only use slaves with a valid MAC address - Remove colon from VLAN regex pattern - Improve exception logging in BootCLI (Issue 148) - Item.set_name optimizations - Minor improvement to LDAP configuration (Issue 217) - Add a distro_signature for Ubuntu 14.04 - Improve performance of the "cobbler sync" operation - Add support for a wget repo breed - Improve support for running inside chroot() and/or containers - Added missing docs to the RPM packages - Fixed typos in default kickstart files - Initial support for Nexenta 4: distro import and manual PXE booting - Added support for ESXi 6 - Added a config setting (always_write_dhcp_entries) to always write DHCP entries regardless of netboot setting Feature improvements * Make kickstart selectable from a pulldown list in cobbler-web (#991) * Minor adjustment to the error_page template (cobbler-web) * Minor improvements to edit snippets/kickstarts template (cobbler-web) * Allow for empty system status Bugfixes * Exit with an error if cobblerd executable can't be found (#1108 #1135) * Fix cobbler sync bug through xmlrpc api (NoneType object has no attribute info) * Changes (edit/add) to multiple interfaces in cobbler-web now actually work (#687) * Don't send the Puppet environment when system status is empty (#560) * Add strict kickstart check in the API (again for #939) * Do not allow kickstarts in /etc/cobbler * Fix broken gitdate, gitstamp values in version file (cobbler version) * Prevent disappearing profiles after cobblerd restart (#1030) Upgrade notes This release makes the use of --parent and --distro mutually exclusive. The consequence is that subprofiles always have the same distro as the parent profile. This has been the intended behaviour ever since subprofiles got introduced. Please check if you have subprofiles with different distros than the parent profile and reconsider and adjust your configuration. Update to 2.6.2: - Add EL7 (RHEL/CentOS) to distro signatures - Add CloudLinux6 support to distro signatures - Minor update to CSS; make better use of screen (tables) - pre_install_network_config: only use slaves with a valid MAC address - Remove colon from VLAN regex pattern - Improve exception logging in BootCLI (Issue 148) - Item.set_name optimizations - Minor improvement to LDAP configuration (Issue 217) - Add a distro_signature for Ubuntu 14.04 - Improve performance of the "cobbler sync" operation - Add support for a wget repo breed - Improve support for running inside chroot() and/or containers - Added missing docs to the RPM packages - Fixed typos in default kickstart files - Initial support for Nexenta 4: distro import and manual PXE booting - Added support for ESXi 6 - Added a config setting (always_write_dhcp_entries) to always write DHCP entries regardless of netboot setting Update to 2.6.2: - Add EL7 (RHEL/CentOS) to distro signatures - Add CloudLinux6 support to distro signatures - Minor update to CSS; make better use of screen (tables) - pre_install_network_config: only use slaves with a valid MAC address - Remove colon from VLAN regex pattern - Improve exception logging in BootCLI (Issue 148) - Item.set_name optimizations - Minor improvement to LDAP configuration (Issue 217) - Add a distro_signature for Ubuntu 14.04 - Improve performance of the "cobbler sync" operation - Add support for a wget repo breed - Improve support for running inside chroot() and/or containers - Added missing docs to the RPM packages - Fixed typos in default kickstart files - Initial support for Nexenta 4: distro import and manual PXE booting - Added support for ESXi 6 - Added a config setting (always_write_dhcp_entries) to always write DHCP entries regardless of netboot setting Bugfixes * Add missing _validate_ks_template_path function so that kickstarts for systems can now be changed again (#1156) * Remove root= argument from boot when using grubby and replace-self to avoid booting the currently running OS (#638) Feature improvements * Make kickstart selectable from a pulldown list in cobbler-web (#991) * Minor adjustment to the error_page template (cobbler-web) * Minor improvements to edit snippets/kickstarts template (cobbler-web) * Allow for empty system status Bugfixes * Exit with an error if cobblerd executable can't be found (#1108 #1135) * Fix cobbler sync bug through xmlrpc api (NoneType object has no attribute info) * Changes (edit/add) to multiple interfaces in cobbler-web now actually work (#687) * Don't send the Puppet environment when system status is empty (#560) * Add strict kickstart check in the API (again for #939) * Do not allow kickstarts in /etc/cobbler * Fix broken gitdate, gitstamp values in version file (cobbler version) * Prevent disappearing profiles after cobblerd restart (#1030) Upgrade notes This release makes the use of --parent and --distro mutually exclusive. The consequence is that subprofiles always have the same distro as the parent profile. This has been the intended behaviour ever since subprofiles got introduced. Please check if you have subprofiles with different distros than the parent profile and reconsider and adjust your configuration. Update to 2.6.2: - Add EL7 (RHEL/CentOS) to distro signatures - Add CloudLinux6 support to distro signatures - Minor update to CSS; make better use of screen (tables) - pre_install_network_config: only use slaves with a valid MAC address - Remove colon from VLAN regex pattern - Improve exception logging in BootCLI (Issue 148) - Item.set_name optimizations - Minor improvement to LDAP configuration (Issue 217) - Add a distro_signature for Ubuntu 14.04 - Improve performance of the "cobbler sync" operation - Add support for a wget repo breed - Improve support for running inside chroot() and/or containers - Added missing docs to the RPM packages - Fixed typos in default kickstart files - Initial support for Nexenta 4: distro import and manual PXE booting - Added support for ESXi 6 - Added a config setting (always_write_dhcp_entries) to always write DHCP entries regardless of netboot setting Update to 2.6.2: - Add EL7 (RHEL/CentOS) to distro signatures - Add CloudLinux6 support to distro signatures - Minor update to CSS; make better use of screen (tables) - pre_install_network_config: only use slaves with a valid MAC address - Remove colon from VLAN regex pattern - Improve exception logging in BootCLI (Issue 148) - Item.set_name optimizations - Minor improvement to LDAP configuration (Issue 217) - Add a distro_signature for Ubuntu 14.04 - Improve performance of the "cobbler sync" operation - Add support for a wget repo breed - Improve support for running inside chroot() and/or containers - Added missing docs to the RPM packages - Fixed typos in default kickstart files - Initial support for Nexenta 4: distro import and manual PXE booting - Added support for ESXi 6 - Added a config setting (always_write_dhcp_entries) to always write DHCP entries regardless of netboot setting Feature improvements * Make kickstart selectable from a pulldown list in cobbler-web (#991) * Minor adjustment to the error_page template (cobbler-web) * Minor improvements to edit snippets/kickstarts template (cobbler-web) * Allow for empty system status Bugfixes * Exit with an error if cobblerd executable can't be found (#1108 #1135) * Fix cobbler sync bug through xmlrpc api (NoneType object has no attribute info) * Changes (edit/add) to multiple interfaces in cobbler-web now actually work (#687) * Don't send the Puppet environment when system status is empty (#560) * Add strict kickstart check in the API (again for #939) * Do not allow kickstarts in /etc/cobbler * Fix broken gitdate, gitstamp values in version file (cobbler version) * Prevent disappearing profiles after cobblerd restart (#1030) Upgrade notes This release makes the use of --parent and --distro mutually exclusive. The consequence is that subprofiles always have the same distro as the parent profile. This has been the intended behaviour ever since subprofiles got introduced. Please check if you have subprofiles with different distros than the parent profile and reconsider and adjust your configuration. Update to 2.6.2: - Add EL7 (RHEL/CentOS) to distro signatures - Add CloudLinux6 support to distro signatures - Minor update to CSS; make better use of screen (tables) - pre_install_network_config: only use slaves with a valid MAC address - Remove colon from VLAN regex pattern - Improve exception logging in BootCLI (Issue 148) - Item.set_name optimizations - Minor improvement to LDAP configuration (Issue 217) - Add a distro_signature for Ubuntu 14.04 - Improve performance of the "cobbler sync" operation - Add support for a wget repo breed - Improve support for running inside chroot() and/or containers - Added missing docs to the RPM packages - Fixed typos in default kickstart files - Initial support for Nexenta 4: distro import and manual PXE booting - Added support for ESXi 6 - Added a config setting (always_write_dhcp_entries) to always write DHCP entries regardless of netboot setting Update to 2.6.2: - Add EL7 (RHEL/CentOS) to distro signatures - Add CloudLinux6 support to distro signatures - Minor update to CSS; make better use of screen (tables) - pre_install_network_config: only use slaves with a valid MAC address - Remove colon from VLAN regex pattern - Improve exception logging in BootCLI (Issue 148) - Item.set_name optimizations - Minor improvement to LDAP configuration (Issue 217) - Add a distro_signature for Ubuntu 14.04 - Improve performance of the "cobbler sync" operation - Add support for a wget repo breed - Improve support for running inside chroot() and/or containers - Added missing docs to the RPM packages - Fixed typos in default kickstart files - Initial support for Nexenta 4: distro import and manual PXE booting - Added support for ESXi 6 - Added a config setting (always_write_dhcp_entries) to always write DHCP entries regardless of netboot setting -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 19 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 2.6.6-1 - Update to 2.6.6 * Fri Aug 15 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 2.6.5-1 - Update to 2.6.5 * Wed Aug 13 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 2.6.4-2 - Require Django >= 1.4 * Mon Aug 11 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 2.6.4-1 - Update to 2.6.4 -------------------------------------------------------------------------------- ================================================================================ cp2k-2.5.1-2.fc20 (FEDORA-2014-13357) Ab Initio Molecular Dynamics -------------------------------------------------------------------------------- Update Information: This update is built against external ELPA library and bring the following upstream bug fixes: * Bug fix on dispersion energy (D3) for atoms with extreme coordination numbers * Fix compilation of fes -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 14 2014 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> - 2.5.1-2 - try to fix "orte_plm_base_select failed" error in all tests under OpenMPI * Sun Oct 12 2014 Dominik Mierzejewski <rpm@xxxxxxxxxxxxxx> - 2.5.1-1 - add ELPA support - fix download link for reference test data - run tests with openmpi on 2 cores - update to upstream 2.5.1 release - drop backported compilation fix * Tue May 13 2014 Thomas Spura <tomspur@xxxxxxxxxxxxxxxxx> - 2.5.0-2 - add upstream reference data for evaluating tests -------------------------------------------------------------------------------- ================================================================================ dovecot-2.2.14-1.fc20 (FEDORA-2014-13370) Secure imap and pop3 server -------------------------------------------------------------------------------- Update Information: - Fixed several race conditions with dovecot.index.cache handling that may have caused unnecessary "cache is corrupted" errors. - auth: If auth client listed userdb and disconnected before finishing, the auth worker process got stuck (and eventually all workers could get used up and requests would start failing). - lmtp: Delivered-To: header no longer contains <> around the email address. Other MDAs don't have it either. - "Out of disk space" errors are now treated as temporary errors (not the same as "Out of disk quota"). - replication plugin: Use replication only for users who have a non-empty mail_replica setting. - lmtp proxy: Log a line about each mail delivery. - Added login_source_ips setting. This can be used to set the source IP address round-robin from a pool of IPs (in case you run out of TCP ports). - Rawlog settings can use tcp:<host>:<port> as the path. - virtual plugin: Don't keep more than virtual_max_open_mailboxes (default 64) number of backend mailboxes open. - SSL/TLS compression can be disabled with ssl_options=no_compression - acl: Global ACL file now supports "quotes" around patterns. - Added last-login plugin to set user's last-login timestamp on login. - LDAP auth: Allow passdb credentials lookup also with auth_bind=yes - IMAP: MODSEQ was sent in FETCH reply even if CONDSTORE/QRESYNC wasn't enabled. This broke at least old Outlooks. - passdb static treated missing password field the same as an empty password field. - mdbox: Fixed potential infinite looping when scanning a broken mdbox file. - imap-login, pop3-login: Fixed potential crashes when client disconnected unexpectedly. - imap proxy: The connection was hanging in some usage patterns. This mainly affected older Outlooks. - lmtp proxy: The proxy sometimes delivered empty mails in error situations or potentially delivered truncated mails. - fts-lucene: If whitespace_chars was set, we may have ended up indexing some garbage words, growing the index size unnecessarily. - -c and -i parameters for dovecot/doveadm commands were ignored if the config socket was readable. - quota: Quota recalculation didn't include INBOX in some setups. - Mail headers were sometimes added to dovecot.index.cache in wrong order. The main problem this caused was with dsync+imapc incremental syncing when the second sync thought the local mailbox had changed. - doveadm backup didn't notice if emails were missing from the middle of the destination mailbox. Now it deletes and resyncs the mailbox. -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 17 2014 Michal Hlavinka <mhlavink@xxxxxxxxxx> - 1:2.2.14-1 - dovecot updated to 2.2.14, pigeonhole updated to 0.4.3 - fixed several race conditions with dovecot.index.cache handling that may have caused unnecessary "cache is corrupted" errors. - auth: If auth client listed userdb and disconnected before finishing, the auth worker process got stuck - imap-login, pop3-login: Fixed potential crashes when client disconnected unexpectedly. - imap proxy: The connection was hanging in some usage patterns. * Thu Aug 21 2014 Michal Hlavinka <mhlavink@xxxxxxxxxx> - 1:2.2.13-2 - use network-online target instead of just network (#1119814) -------------------------------------------------------------------------------- ================================================================================ efibootmgr-0.10.0-1.fc20 (FEDORA-2014-13354) EFI Boot Manager -------------------------------------------------------------------------------- Update Information: Update to 0.10.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Peter Jones <pjones@xxxxxxxxxx> - 0.10.0-1 - Update to 0.10.0 - Make -o parameter validation work better and be more informative - Better exit values - Fix a segfault with appending ascii arguments. * Tue Oct 14 2014 Peter Jones <pjones@xxxxxxxxxx> - 0.9.0-1 - Update to 0.9.0 * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.7.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Fri Aug 1 2014 Peter Jones <pjones@xxxxxxxxxx> - 0.7.0-4 - Rebase to current upstream master (in preperation for 0.8.0) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1123682 - [abrt] efibootmgr: unparse_media_hard_drive_path(): efibootmgr killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=1123682 -------------------------------------------------------------------------------- ================================================================================ fence-agents-4.0.12-1.fc20 (FEDORA-2014-13367) Fence Agents for Red Hat Cluster -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 16 2014 Marek Grac <mgrac@xxxxxxxxxx> - 4.0.12-1 - new upstream release - new package fence-agents-ilo-ssh -------------------------------------------------------------------------------- ================================================================================ gdbm-1.10-8.fc20 (FEDORA-2014-13361) A GNU set of database routines which use extensible hashing -------------------------------------------------------------------------------- Update Information: Removed Rpath (#1154644) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Marek Skalicky <mskalicky@xxxxxxxxxx> - 1.10-8 - Removed Rpath (#1154644) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1154644 - rpath issue with gdbm in f20 https://bugzilla.redhat.com/show_bug.cgi?id=1154644 -------------------------------------------------------------------------------- ================================================================================ golang-github-docker-libcontainer-1.2.0-1.gitc907e40.fc20 (FEDORA-2014-13358) Configuration options for containers -------------------------------------------------------------------------------- Update Information: bump to v1.2.0 commit c907e406fe81320d87b58edf74953ceb08facc13 Update to db65c35051d05f3fb218a0e84a11267e0894fe0a for docker 1.2.0 Resolves: rhbz#1130500 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Lokesh Mandvekar <lsm5@xxxxxxxxxxxxxxxxx> - 1.2.0-1.gitc907e40 - bump to v1.2.0 commit c907e406fe81320d87b58edf74953ceb08facc13 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1130500 - nsinit stats doesnt work https://bugzilla.redhat.com/show_bug.cgi?id=1130500 -------------------------------------------------------------------------------- ================================================================================ grib_api-1.12.3-5.fc20 (FEDORA-2014-13344) WMO FM-92 GRIB (v1,v2) interface accessible from C and FORTRAN programs -------------------------------------------------------------------------------- Update Information: - Add BR libpng-devel - Add png support (bug #1154192) - Fix python install location (bug #1098516) - Add png support (bug #1154192) - Add png support (bug #1154192) - Add png support (bug #1154192) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 1.12.3-5 - Add BR libpng-devel * Fri Oct 17 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 1.12.3-4 - Add png support (bug #1154192) * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.12.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1154192 - Request for recompile grib_api with PNG support https://bugzilla.redhat.com/show_bug.cgi?id=1154192 -------------------------------------------------------------------------------- ================================================================================ ioprocess-0.14.0-1.fc20 (FEDORA-2014-13346) Slave process to perform risky IO -------------------------------------------------------------------------------- Update Information: Fix poll timeout -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Saggi Mizrahi <smizrahi@xxxxxxxxxx> 0.14.0-1 - Fix poll timeout - Add support for zombiereaper where available - Fix IOProcesses being referenced by commincation thread - build: update INSTALL - specfile: Add missing dependency to glib2 -------------------------------------------------------------------------------- ================================================================================ libfm-1.2.3-1.fc20 (FEDORA-2014-13377) GIO-based library for file manager-like programs -------------------------------------------------------------------------------- Update Information: libfm / pcmanfm 1.2.3 are released. -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 17 2014 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1.2.3-1 - 1.2.3 -------------------------------------------------------------------------------- ================================================================================ libpcap-1.5.3-2.fc20 (FEDORA-2014-13348) A system-independent interface for user-level packet capture -------------------------------------------------------------------------------- Update Information: disable TPACKET_V3 support (#1131500) -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 29 2014 Michal Sekletar <msekleta@xxxxxxxxxx> - 14:1.5.3-2 - disable TPACKET_V3 support (#1131500) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1131500 - wash (reaver suite) fails with current libpcap (no output) https://bugzilla.redhat.com/show_bug.cgi?id=1131500 -------------------------------------------------------------------------------- ================================================================================ lis-1.4.63-1.fc20 (FEDORA-2014-13368) A library for solving linear equations and eigenvalue problems -------------------------------------------------------------------------------- Update Information: Update to 1.4.63 Update to 1.4.62 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.63-1 - Update to 1.4.63 * Sat Oct 18 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.62-1 - Update to 1.4.62 -------------------------------------------------------------------------------- ================================================================================ miniz-1.15-1.r4.fc20 (FEDORA-2014-13350) Compression library implementing the zlib and Deflate -------------------------------------------------------------------------------- Update Information: This package brings a compression library implementing the zlib and Deflate. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1152653 - Review Request: miniz - Compression library implementing the zlib and Deflate https://bugzilla.redhat.com/show_bug.cgi?id=1152653 -------------------------------------------------------------------------------- ================================================================================ oxygen-fonts-5.1.0-2.fc20 (FEDORA-2014-13375) Oxygen fonts created by the KDE Community -------------------------------------------------------------------------------- Update Information: Provide oxygen-fonts (meta)package, fixes upgrade path. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 5.1.0-2 - provide oxygen-fonts (meta)package, fixes upgrade path (#1154369) -------------------------------------------------------------------------------- ================================================================================ pcmanfm-1.2.3-1.fc20 (FEDORA-2014-13377) Extremly fast and lightweight file manager -------------------------------------------------------------------------------- Update Information: libfm / pcmanfm 1.2.3 are released. -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 17 2014 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1.2.3-1 - 1.2.3 -------------------------------------------------------------------------------- ================================================================================ perl-Encode-2.54-3.fc20 (FEDORA-2014-13353) Character encodings in Perl -------------------------------------------------------------------------------- Update Information: This relase fixes perl stack manipulation. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 1:2.54-3 - Fix perl stack handling after a subroutine call -------------------------------------------------------------------------------- ================================================================================ php-aws-sdk-2.7.1-1.fc20 (FEDORA-2014-13376) Amazon Web Services framework for PHP -------------------------------------------------------------------------------- Update Information: 2.7.1 (2014-10-16) ------------------ * Updated the Amazon RDS client to the 2014-09-01 API version. * Added support for advanced Japanese language processing to the Amazon CloudSearch client. 2.7.0 (2014-10-08) ------------------ * Added document model support to the Amazon DynamoDB client, including support for the new data types (`L`, `M`, `BOOL`, and `NULL`), nested attributes, and expressions. * Deprecated the `Aws\DynamoDb\Model\Attribute`, `Aws\DynamoDb\Model\Item`, and `Aws\DynamoDb\Iterator\ItemIterator` classes, and the `Aws\DynamoDb\DynamoDbClient::formatValue` and `Aws\DynamoDb\DynamoDbClient::formatAttribute` methods, since they do not support the new types in the DynamoDB document model. These deprecated classes and methods still work reliably with `S`, `N`, `B`, `SS`, `NS`, and `BS` attributes. * Updated the Amazon DynamoDB client to permanently disable client-side parameter validation. This needed to be done in order to support the new document model features. * Updated the Amazon EC2 client to sign requests with Signature V4. * Fixed an issue in the S3 service description to make the `VersionId` work in `S3Client::restoreObject`. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Shawn Iwinski <shawn.iwinski@xxxxxxxxx> - 2.7.1-1 - Updated to 2.7.1 (BZ #1151012) - Doctrine Cache, Monolog, and Symfony YAML are now optional -------------------------------------------------------------------------------- References: [ 1 ] Bug #1151012 - php-aws-sdk-2.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1151012 -------------------------------------------------------------------------------- ================================================================================ postfix-2.10.5-1.fc20 (FEDORA-2014-13349) Postfix Mail Transport Agent -------------------------------------------------------------------------------- Update Information: This is new bugfix release, for details see upstream announcement: http://www.postfix.org/announcements/postfix-2.11.3.html This is an update fixing several bugs, for details see upstream announcement: http://www.postfix.org/announcements/postfix-2.11.2.html -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 2:2.10.5-1 - New version Resolves: rhbz#1154587 * Tue Oct 14 2014 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 2:2.10.4-1 - New version Resolves: rhbz#1152488 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1154587 - postfix-2.11.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1154587 [ 2 ] Bug #1152488 - postfix-2.11.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1152488 -------------------------------------------------------------------------------- ================================================================================ postgresql-9.3.5-2.fc20 (FEDORA-2014-13369) PostgreSQL client programs -------------------------------------------------------------------------------- Update Information: be forgiving of variant spellings of locale names in pg_upgrade (#1007802) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Pavel Raiskup <praiskup@xxxxxxxxxx> - 9.3.5-2 - be forgiving of variant spellings of locale names in pg_upgrade (#1007802) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1007802 - pg_upgrade can fail when environment changed with error "lc_collate cluster values do not match..." https://bugzilla.redhat.com/show_bug.cgi?id=1007802 -------------------------------------------------------------------------------- ================================================================================ protobuf-2.5.0-11.fc20 (FEDORA-2014-13339) Protocol Buffers - Google's data interchange format -------------------------------------------------------------------------------- Update Information: Fixes Requires for -emacs subpackages to avoid pulling in X. -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 19 2014 Conrad Meyer <cemeyer@xxxxxx> - 2.5.0-11 - protobuf-emacs requires emacs(bin), not emacs (rh# 1154456) * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.5.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Mon Jun 16 2014 Mikolaj Izdebski <mizdebsk@xxxxxxxxxx> - 2.5.0-9 - Update to current Java packaging guidelines * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.5.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Tue Mar 4 2014 Stanislav Ochotnicky <sochotnicky@xxxxxxxxxx> - 2.5.0-7 - Use Requires: java-headless rebuild (#1067528) * Thu Dec 12 2013 Conrad Meyer <cemeyer@xxxxxx> - 2.5.0-6 - BR python-setuptools-devel -> python-setuptools -------------------------------------------------------------------------------- References: [ 1 ] Bug #1154456 - protobuf-emacs should require emacs(bin) instead of emacs https://bugzilla.redhat.com/show_bug.cgi?id=1154456 -------------------------------------------------------------------------------- ================================================================================ pyhoca-cli-0.5.0.0-1.fc20 (FEDORA-2014-13341) Command line X2Go client written in Python -------------------------------------------------------------------------------- Update Information: Update to 0.5.0.0: o HTTP X2Go Session Broker support o Telekinesis / mTelePlayer support (requires X2Go Server >= 4.1.0.0) o Selection of clipboard mode (bidirectional, server->client, client->server) o More exception catching when some error occurs during a running session / connected session o Great improvements concerning session cleanup o Require that X2Go Server commands are in $PATH o Handle duplicate session profile names gracefully o Deepen the undetstanding of SSH forwarding tunnels o Various other fixes around stability -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 0.5.0.0-1 - Update to 0.5.0.0 * Fri Aug 22 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 0.4.0.2-3 - Drop notify-python requires * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.4.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1098201 - [abrt] pyhoca-gui: _file.py:330:to_profile_id:X2GoProfileException: The sessions config file contains multiple session profiles with name: nbecker7 https://bugzilla.redhat.com/show_bug.cgi?id=1098201 [ 2 ] Bug #1130523 - [abrt] pyhoca-gui: _stdout.py:112:get_session_type:IndexError: list index out of range https://bugzilla.redhat.com/show_bug.cgi?id=1130523 [ 3 ] Bug #1139023 - [abrt] pyhoca-gui: ConfigParser.py:279:options:NoSectionError: No section: '20140907080911543827' https://bugzilla.redhat.com/show_bug.cgi?id=1139023 [ 4 ] Bug #1141430 - [abrt] pyhoca-gui: _file.py:423:update_value:X2GoProfileException: a profile of name ,,0.klausk@bren'' already exists https://bugzilla.redhat.com/show_bug.cgi?id=1141430 -------------------------------------------------------------------------------- ================================================================================ pyhoca-gui-0.5.0.0-1.fc20 (FEDORA-2014-13341) Graphical X2Go client written in (wx)Python -------------------------------------------------------------------------------- Update Information: Update to 0.5.0.0: o HTTP X2Go Session Broker support o Telekinesis / mTelePlayer support (requires X2Go Server >= 4.1.0.0) o Selection of clipboard mode (bidirectional, server->client, client->server) o More exception catching when some error occurs during a running session / connected session o Great improvements concerning session cleanup o Require that X2Go Server commands are in $PATH o Handle duplicate session profile names gracefully o Deepen the undetstanding of SSH forwarding tunnels o Various other fixes around stability -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 0.5.0.0-1 - Update to 0.5.0.0 * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.4.0.9-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed Jan 22 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 0.4.0.9-2 - No python-cups, use system-config-printer-libs on EL6 (bug #1056434) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1098201 - [abrt] pyhoca-gui: _file.py:330:to_profile_id:X2GoProfileException: The sessions config file contains multiple session profiles with name: nbecker7 https://bugzilla.redhat.com/show_bug.cgi?id=1098201 [ 2 ] Bug #1130523 - [abrt] pyhoca-gui: _stdout.py:112:get_session_type:IndexError: list index out of range https://bugzilla.redhat.com/show_bug.cgi?id=1130523 [ 3 ] Bug #1139023 - [abrt] pyhoca-gui: ConfigParser.py:279:options:NoSectionError: No section: '20140907080911543827' https://bugzilla.redhat.com/show_bug.cgi?id=1139023 [ 4 ] Bug #1141430 - [abrt] pyhoca-gui: _file.py:423:update_value:X2GoProfileException: a profile of name ,,0.klausk@bren'' already exists https://bugzilla.redhat.com/show_bug.cgi?id=1141430 -------------------------------------------------------------------------------- ================================================================================ python-SimpleCV-1.3-3.fc20 (FEDORA-2014-13372) Open source framework for building computer vision applications -------------------------------------------------------------------------------- Update Information: Open source framework for building computer vision applications -------------------------------------------------------------------------------- References: [ 1 ] Bug #1070946 - Review Request: python-SimpleCV - Open source framework for building computer vision applications https://bugzilla.redhat.com/show_bug.cgi?id=1070946 -------------------------------------------------------------------------------- ================================================================================ python-drat-0.4.2-1.fc20 (FEDORA-2014-13352) A reading text analysis tool -------------------------------------------------------------------------------- Update Information: update to upstream 0.4.2 release -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 19 2014 Parag Nemade <pnemade AT redhat DOT com> - 0.4.2-1 - Update to 0.4.2 release -------------------------------------------------------------------------------- ================================================================================ python-x2go-0.5.0.0-1.fc20 (FEDORA-2014-13341) Python module providing X2Go client API -------------------------------------------------------------------------------- Update Information: Update to 0.5.0.0: o HTTP X2Go Session Broker support o Telekinesis / mTelePlayer support (requires X2Go Server >= 4.1.0.0) o Selection of clipboard mode (bidirectional, server->client, client->server) o More exception catching when some error occurs during a running session / connected session o Great improvements concerning session cleanup o Require that X2Go Server commands are in $PATH o Handle duplicate session profile names gracefully o Deepen the undetstanding of SSH forwarding tunnels o Various other fixes around stability -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Orion Poplawski <orion@xxxxxxxxxxxxx> - 0.5.0.0-1 - Update to 0.5.0.0 * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.4.0.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1098201 - [abrt] pyhoca-gui: _file.py:330:to_profile_id:X2GoProfileException: The sessions config file contains multiple session profiles with name: nbecker7 https://bugzilla.redhat.com/show_bug.cgi?id=1098201 [ 2 ] Bug #1130523 - [abrt] pyhoca-gui: _stdout.py:112:get_session_type:IndexError: list index out of range https://bugzilla.redhat.com/show_bug.cgi?id=1130523 [ 3 ] Bug #1139023 - [abrt] pyhoca-gui: ConfigParser.py:279:options:NoSectionError: No section: '20140907080911543827' https://bugzilla.redhat.com/show_bug.cgi?id=1139023 [ 4 ] Bug #1141430 - [abrt] pyhoca-gui: _file.py:423:update_value:X2GoProfileException: a profile of name ,,0.klausk@bren'' already exists https://bugzilla.redhat.com/show_bug.cgi?id=1141430 -------------------------------------------------------------------------------- ================================================================================ qtwebkit-2.3.4-1.fc20 (FEDORA-2014-13347) Qt WebKit bindings -------------------------------------------------------------------------------- Update Information: New QtWebKit 2.3.4 bugfix release, enable hardened build. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 16 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.3.4-1 - qtwebkit-2.3.4 * Tue Sep 23 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.3.3-18 - enable hardened build (#1051790) * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.3.3-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sun Jul 20 2014 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> 2.3.3-16 - build against GStreamer1 on F21+ (#1092642, patch from openSUSE) * Fri Jun 20 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.3.3-15 - use pkgconfig deps for qt-mobility * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.3.3-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed May 7 2014 Jaromir Capik <jcapik@xxxxxxxxxx> - 2.3.3-13 - ppc64le support * Mon May 5 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.3.3-12 - Requires: mozilla-filesystem (#1000673) * Fri May 2 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.3.3-11 - no need to set empty qtdefines macro - no rpath for real, drop chrpath hacks * Sat Mar 8 2014 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> 2.3.3-10 - rebuild against fixed qt to fix -debuginfo (#1074041) * Thu Mar 6 2014 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 2.3.3-9 - update aarch64 patchset * Fri Feb 28 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 2.3.3-8 - initial backport aarch64 javascriptcore fixes, needswork (#1070446) - apply downstream patches *after* upstream ones -------------------------------------------------------------------------------- References: [ 1 ] Bug #1051790 - no hardening builds - KDE typically is "long running" https://bugzilla.redhat.com/show_bug.cgi?id=1051790 -------------------------------------------------------------------------------- ================================================================================ torbrowser-launcher-0.1.6-2.fc20 (FEDORA-2014-13373) Tor Browser Bundle managing tool -------------------------------------------------------------------------------- Update Information: Tor Browser Bundle managing tool which helps updating and verifying your TBB easily. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1151635 - Review Request: torbrowser-launcher - Tor Browser Bundle managing tool https://bugzilla.redhat.com/show_bug.cgi?id=1151635 -------------------------------------------------------------------------------- ================================================================================ xdg-utils-1.1.0-0.30.rc2.fc20 (FEDORA-2014-13374) Basic desktop integration functions -------------------------------------------------------------------------------- Update Information: Fixed build where recent patches were not applied properly (which in particular, resulted in broken/regressed plasma5 support). -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 20 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.1.0-0.30.rc2 - workaround %autosetup failure, again (#1084309) -------------------------------------------------------------------------------- ================================================================================ xulrunner-33.0-1.fc20 (FEDORA-2014-13356) XUL Runtime for Gecko Applications -------------------------------------------------------------------------------- Update Information: Update to latest upstream - Xulrunner 33. Update to latest upstream - Firefox 31. -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 16 2014 Martin Stransky <stransky@xxxxxxxxxx> - 33.0-1 - Update to 33.0 * Sat Sep 20 2014 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 32.0.2-1 - Update to 32.0.2 - sync fixes to the same as firefox * Tue Sep 9 2014 Martin Stransky <stransky@xxxxxxxxxx> - 32.0-2 - move /sdk/bin to xulrunner libdir -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
