The following Fedora 21 Security updates need testing: Age URL 3 https://admin.fedoraproject.org/updates/FEDORA-2014-14697/drupal7-ckeditor-1.16-2.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2014-14734/gnutls-3.3.10-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-14895/kde-workspace-4.11.14-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-14892/libdigidoc-3.9.1.1191-1.fc21 The following Fedora 21 Critical Path updates have yet to be approved: Age URL 8 https://admin.fedoraproject.org/updates/FEDORA-2014-14342/cdrkit-1.1.11-25.fc21 7 https://admin.fedoraproject.org/updates/FEDORA-2014-14433/libteam-1.14-1.fc21 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14639/pcre-8.35-7.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2014-14757/xkeyboard-config-2.13-3.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2014-14752/createrepo_c-0.7.3-1.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2014-14715/augeas-1.3.0-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-15039/perl-Pod-Usage-1.64-2.fc21,perl-Pod-Checker-1.71-2.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-15058/man-db-2.6.7.1-12.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-15014/cogl-1.18.2-8.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-15064/nautilus-3.14.1-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-14858/libevdev-1.2.2-4.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-14941/device-mapper-persistent-data-0.4.1-2.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-14882/pciutils-3.3.0-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-14795/libtdb-1.3.1-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2014-14961/createrepo_c-0.7.4-1.fc21 The following builds have been pushed to Fedora 21 updates-testing abrt-2.3.0-3.fc21 brasero-3.12.0-1.fc21 cogl-1.18.2-8.fc21 eclipse-4.4.1-5.fc21 eclipse-mylyn-3.13.0-2.fc21 firefox-33.1-2.fc21 gnome-documents-3.14.2-1.fc21 gpsim-0.28.0-0.fc21 labiryntowy-fonts-1.53-1.fc21 libmediainfo-0.7.71-1.fc21 libreport-2.3.0-4.fc21 libzen-0.4.30-1.fc21 lightdm-1.10.4-1.fc21 lucene-4.10.2-1.fc21 man-db-2.6.7.1-12.fc21 mediainfo-0.7.71-1.fc21 msitools-0.93.48-1.fc21 nautilus-3.14.1-1.fc21 nfs-utils-1.3.1-2.1.fc21 nomacs-2.2.0-1.fc21 openbabel-2.3.2-9.fc21 openssh-6.6.1p1-8.fc21 perl-Class-Load-XS-0.09-1.fc21 perl-Devel-PatchPerl-1.28-1.fc21 perl-File-ShareDir-Install-0.09-1.fc21 perl-Import-Into-1.002004-1.fc21 perl-JSON-MaybeXS-1.003001-1.fc21 perl-Pod-Checker-1.71-2.fc21 perl-Pod-Coverage-TrustPod-0.100003-1.fc21 perl-Pod-Usage-1.64-2.fc21 perl-Test-Class-0.48-1.fc21 perl-Test-CleanNamespaces-0.16-2.fc21 perl-Test-Deep-0.113-1.fc21 perl-Test-Harness-3.34-1.fc21 perl-Text-MultiMarkdown-1.000035-1.fc21 perl-Time-Warp-0.51-1.fc21 php-5.6.3-1.fc21 php-twig-extensions-1.2.0-2.fc21 python-django-openstack-auth-1.1.5-4.fc21 python-qpid-0.30-2.fc21 python-qt5-5.3.2-6.fc21 qgis-2.6.0-2.fc21 satyr-0.15-2.fc21 sugar-read-114-1.fc21 whois-5.2.2-1.fc21 youtube-dl-2014.11.13-1.fc21 zsh-5.0.7-2.fc21 Details about builds: ================================================================================ abrt-2.3.0-3.fc21 (FEDORA-2014-14718) Automatic bug detection and reporting tool -------------------------------------------------------------------------------- Update Information: abrt: - re-enable GPGCheck: report only signed packages - koops: improve 'reason' text for page faults - do not detect Firefox crashes - make ABRT queiter - update Package URL libreport: - Prevent duplicate values for CODE_* fields being logged to journal - update Package URL satyr: - Add function name into reason text for kernel page faults -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 10 2014 Jakub Filak <jfilak@xxxxxxxxxx> - 2.3.0-3 - re-enable GPGCheck: report only signed packages - koops: improve 'reason' text for page faults - do not detect Firefox crashes - make ABRT queiter - update Package URL - Resolves: #1151234, #1159469 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1151234 - abrt logs mundane message at elevated priorities https://bugzilla.redhat.com/show_bug.cgi?id=1151234 [ 2 ] Bug #1159469 - CRITICAL:faf:Action failed unexpectedly: KeyError: u'kernel-PAE-debuginfo' https://bugzilla.redhat.com/show_bug.cgi?id=1159469 [ 3 ] Bug #1163381 - ImportError: No module named rhsm.config https://bugzilla.redhat.com/show_bug.cgi?id=1163381 -------------------------------------------------------------------------------- ================================================================================ brasero-3.12.0-1.fc21 (FEDORA-2014-15062) Gnome CD/DVD burning application -------------------------------------------------------------------------------- Update Information: Brasero 3.12.0 release. - Fix crash in plugin dialog - Translation updates -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Kalev Lember <kalevlember@xxxxxxxxx> - 3.12.0-1 - Update to 3.12.0 -------------------------------------------------------------------------------- ================================================================================ cogl-1.18.2-8.fc21 (FEDORA-2014-15014) A library for using 3D graphics hardware to draw pretty pictures -------------------------------------------------------------------------------- Update Information: This update disables gstreamer support in cogl in order to make sure that clutter gst element remains the default. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Kalev Lember <kalevlember@xxxxxxxxx> - 1.18.2-8 - Disable cogl-gst as long as we don't have clutter-gst3 (#1158676) * Sat Nov 1 2014 Richard Hughes <rhughes@xxxxxxxxxx> - 1.18.2-7 - Fix compile on RHEL, harder * Mon Oct 27 2014 Richard Hughes <rhughes@xxxxxxxxxx> - 1.18.2-6 - Fix compile on RHEL -------------------------------------------------------------------------------- References: [ 1 ] Bug #1158676 - cogl-gst: coglsink has a higher rank than cluttersink https://bugzilla.redhat.com/show_bug.cgi?id=1158676 -------------------------------------------------------------------------------- ================================================================================ eclipse-4.4.1-5.fc21 (FEDORA-2014-15060) An open, extensible IDE -------------------------------------------------------------------------------- Update Information: Backport patch to make workspace selection dialog visible in the task manager and rebuild for latest lucene. -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 12 2014 Mat Booth <mat.booth@xxxxxxxxxx> - 1:4.4.1-5 - Backport patch to make workspace selection dialog visible in the task manager - Tidy up SWT symlinks -------------------------------------------------------------------------------- ================================================================================ eclipse-mylyn-3.13.0-2.fc21 (FEDORA-2014-15040) Eclipse Mylyn main feature. -------------------------------------------------------------------------------- Update Information: Fix warning during tasks indexing. It's harmless but disturbing as this has always been Lucene behavior but only recently it started to complain that some terms are ignored. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Alexander Kurtakov <akurtako@xxxxxxxxxx> 3.13.0-2 - Update lucene4 patch to work properly. -------------------------------------------------------------------------------- ================================================================================ firefox-33.1-2.fc21 (FEDORA-2014-15073) Mozilla Firefox Web browser -------------------------------------------------------------------------------- Update Information: New upstream release - 33.1. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Martin Stransky <stransky@xxxxxxxxxx> - 33.1-2 - Disabled downloads non-free OpenH264 blob on first start (rhbz#1155499) * Tue Nov 11 2014 Martin Stransky <stransky@xxxxxxxxxx> - 33.1-1 - Update to 33.1 build 3 * Mon Nov 10 2014 Martin Stransky <stransky@xxxxxxxxxx> - 33.0-5 - Fixed rhbz#1161110 - /usr/bin/firefox should not mess with TMPDIR * Tue Nov 4 2014 Martin Stransky <stransky@xxxxxxxxxx> - 33.0-4 - Do not use system libjpeg-turbo on rawhide * Mon Nov 3 2014 Martin Stransky <stransky@xxxxxxxxxx> - 33.0-3 - Added Gtk3 support * Wed Oct 15 2014 Martin Stransky <stransky@xxxxxxxxxx> - 33.0-2 - Added patches from mozbz#858919 -------------------------------------------------------------------------------- ================================================================================ gnome-documents-3.14.2-1.fc21 (FEDORA-2014-15025) A document manager application for GNOME -------------------------------------------------------------------------------- Update Information: This update disables SSLv3 to prevent POODLE attacks. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Kalev Lember <kalevlember@xxxxxxxxx> - 3.14.2-1 - Update to 3.14.2 * Mon Nov 10 2014 Debarshi Ray <rishi@xxxxxxxxxxxxxxxxx> - 3.14.1-3 - Revert unoconv dependency because it pulls in other LO applications. We will rely on comps for the time being. * Fri Oct 24 2014 Debarshi Ray <rishi@xxxxxxxxxxxxxxxxx> - 3.14.1-2 - Require unoconv. -------------------------------------------------------------------------------- ================================================================================ gpsim-0.28.0-0.fc21 (FEDORA-2014-15051) A simulator for Microchip (TM) PIC (TM) microcontrollers -------------------------------------------------------------------------------- Update Information: Upstream 0.28.0 upgrade, add desktop -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Roy Rankin <rrankin@xxxxxxxxxxx> - 0.28.0-0 - Upstream update to 0.28.0 - Add desktop file * Tue Oct 28 2014 Lubomir Rintel <lkundrak@xxxxx> - 0.27.0-4 - Fix CTRL+C crash - Fix command line option parsing -------------------------------------------------------------------------------- References: [ 1 ] Bug #1148976 - [abrt] gpsim: SourceWindow::SetPC(): gpsim killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1148976 [ 2 ] Bug #1127646 - [abrt] gpsim: PicCodProgramFileType::read_block(): gpsim killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=1127646 -------------------------------------------------------------------------------- ================================================================================ labiryntowy-fonts-1.53-1.fc21 (FEDORA-2014-15072) Artificial font consisting of vertical and horizontal bars -------------------------------------------------------------------------------- Update Information: Initial packaging. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1162148 - Review Request: labiryntowy-fonts - Conscript (artifical font) letters consist of vertical and horizontal bars. No matter their thickness. https://bugzilla.redhat.com/show_bug.cgi?id=1162148 -------------------------------------------------------------------------------- ================================================================================ libmediainfo-0.7.71-1.fc21 (FEDORA-2014-15035) Library for supplies technical and tag information about a video or audio file -------------------------------------------------------------------------------- Update Information: Update libzen and mediainfo -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 12 2014 Vasiliy N. Glazov <vascom2@xxxxxxxxx> 0.7.71-1 - Update to 0.7.71 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163166 - libzen-0.4.30 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163166 -------------------------------------------------------------------------------- ================================================================================ libreport-2.3.0-4.fc21 (FEDORA-2014-14718) Generic library for reporting various problems -------------------------------------------------------------------------------- Update Information: abrt: - re-enable GPGCheck: report only signed packages - koops: improve 'reason' text for page faults - do not detect Firefox crashes - make ABRT queiter - update Package URL libreport: - Prevent duplicate values for CODE_* fields being logged to journal - update Package URL satyr: - Add function name into reason text for kernel page faults -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Jakub Filak <jfilak@xxxxxxxxxx> 2.3.0-4 - ureport: do not use 'rhsm' SSL auth by default - Resolves: #1163381 * Thu Nov 6 2014 Jakub Filak <jfilak@xxxxxxxxxx> 2.3.0-3 - Prevent duplicate values for CODE_* fields being logged to journal - ureport and rhtsupport bug fixes - update Package URL -------------------------------------------------------------------------------- References: [ 1 ] Bug #1151234 - abrt logs mundane message at elevated priorities https://bugzilla.redhat.com/show_bug.cgi?id=1151234 [ 2 ] Bug #1159469 - CRITICAL:faf:Action failed unexpectedly: KeyError: u'kernel-PAE-debuginfo' https://bugzilla.redhat.com/show_bug.cgi?id=1159469 [ 3 ] Bug #1163381 - ImportError: No module named rhsm.config https://bugzilla.redhat.com/show_bug.cgi?id=1163381 -------------------------------------------------------------------------------- ================================================================================ libzen-0.4.30-1.fc21 (FEDORA-2014-15035) Shared library for libmediainfo and medianfo* -------------------------------------------------------------------------------- Update Information: Update libzen and mediainfo -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 12 2014 Vasiliy N. Glazov <vascom2@xxxxxxxxx> 0.4.30-1 - update to 0.4.30 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163166 - libzen-0.4.30 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163166 -------------------------------------------------------------------------------- ================================================================================ lightdm-1.10.4-1.fc21 (FEDORA-2014-15018) Lightweight Display Manager -------------------------------------------------------------------------------- Update Information: Latest upstream bugfix LTS release. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.10.4-1 - lightdm-1.10.4, update URL to 1.10-specific branch -------------------------------------------------------------------------------- ================================================================================ lucene-4.10.2-1.fc21 (FEDORA-2014-15060) High-performance, full-featured text search engine -------------------------------------------------------------------------------- Update Information: Backport patch to make workspace selection dialog visible in the task manager and rebuild for latest lucene. -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 12 2014 Alexander Kurtakov <akurtako@xxxxxxxxxx> 0:4.10.2-1 - Update to upstream 4.10.2. -------------------------------------------------------------------------------- ================================================================================ man-db-2.6.7.1-12.fc21 (FEDORA-2014-15058) Tools for searching and reading man pages -------------------------------------------------------------------------------- Update Information: man -k -l attribute does not truncate lines to terminal width remove deps on systemd, run *.timer only when systemd is installed preun missing condition on number of man-db packages installed, this will not 'disable and stop' man-db timer after update remove executable flag for *.service and *.timer file -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 jchaloup <jchaloup@xxxxxxxxxx> - 2.6.7.1-12 - src/man.c (do_extern): Pass the -l option through resolves: #1161747 * Thu Oct 16 2014 jchaloup <jchaloup@xxxxxxxxxx> - 2.6.7.1-11 - remove deps on systemd, run *.timer only when systemd is installed related: #1148559 - spec file polishing (due to rpmlint warnings) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1161747 - "man -k -l word" does not show full header line https://bugzilla.redhat.com/show_bug.cgi?id=1161747 [ 2 ] Bug #1148559 - man-db: consider using timers, or removing dep on cron ? https://bugzilla.redhat.com/show_bug.cgi?id=1148559 -------------------------------------------------------------------------------- ================================================================================ mediainfo-0.7.71-1.fc21 (FEDORA-2014-15035) Supplies technical and tag information about a video or audio file (CLI) -------------------------------------------------------------------------------- Update Information: Update libzen and mediainfo -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 12 2014 Vasiliy N. Glazov <vascom2@xxxxxxxxx> 0.7.71-1 - Update to 0.7.71 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163166 - libzen-0.4.30 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163166 -------------------------------------------------------------------------------- ================================================================================ msitools-0.93.48-1.fc21 (FEDORA-2014-15075) Windows Installer tools -------------------------------------------------------------------------------- Update Information: Update to upstream msitools-0.93.48-146e, which includes: Update gtk2.wxi for f21, rhbz#1157780 Set the ALLUSERS=1 property when the install scope is perMachine, rhbz#1146586 -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Fabiano Fidêncio <fidencio@xxxxxxxxxx> - 0.93.48-1 - Update to upstream msitools-0.93.48-146e, which includes: Revert "wixl-heat: generate stable dir id" * Wed Oct 29 2014 Fabiano Fidêncio <fidencio@xxxxxxxxxx> - 0.93.43-2 - Update gtk2.wxi for f21, rhbz#1157780 - Update libgcrypt.wxi for f21, rhbz#1157779 * Sun Sep 7 2014 Marc-André Lureau <marcandre.lureau@xxxxxxxxxx> - 0.93.43-1 - Set the ALLUSERS=1 property when the install scope is perMachine, rhbz#1146586 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1157780 - gtk-update-icon-cache.exe-manifest no longer exists https://bugzilla.redhat.com/show_bug.cgi?id=1157780 [ 2 ] Bug #1157779 - Outdated DLL name for libgcrypt https://bugzilla.redhat.com/show_bug.cgi?id=1157779 [ 3 ] Bug #1146586 - When building msi file with default install scope, the installed Application Shortcut is written to wrong location. https://bugzilla.redhat.com/show_bug.cgi?id=1146586 -------------------------------------------------------------------------------- ================================================================================ nautilus-3.14.1-1.fc21 (FEDORA-2014-15064) File manager for GNOME -------------------------------------------------------------------------------- Update Information: Nautilus 3.14.1 release. * Fix regression with --new-window option (Lubomir Rintel) * Use mount name if available for file operations progress report * Set max-width for value labels in properties (Lars Uebernickel) * Increase default window width (Michael Catanzaro) -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Kalev Lember <kalevlember@xxxxxxxxx> - 3.14.1-1 - Update to 3.14.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1123635 - Nautilus does not start in Gnome Classic. https://bugzilla.redhat.com/show_bug.cgi?id=1123635 [ 2 ] Bug #1147357 - [f21 regression] "Files" no longer work in GNOME Classic https://bugzilla.redhat.com/show_bug.cgi?id=1147357 -------------------------------------------------------------------------------- ================================================================================ nfs-utils-1.3.1-2.1.fc21 (FEDORA-2014-15038) NFS utilities and supporting clients and daemons for the kernel NFS server -------------------------------------------------------------------------------- Update Information: commit e4569a0961ff9f059b9ae71327d291cf95399597 Author: Bodo Stroesser <bstroesser@xxxxxxxxxxxxxx> Date: Wed Nov 12 09:43:29 2014 -0500 rpc.mountd: set libtirpc nonblocking mode to avoid DOS In works fine in that it removes the vulnerability against a DOS attack. rpc.mountd can be blocked by a bad client, that sends many RPC requests but never reads the responses. This might happen intentionally or caused by a wrong network config (MTU). The patch switches on the nonblocking mode of libtirpc. In that mode writes can block for a max of 2 seconds. Attackers are forced to send requests slower, as libtirpc will close a connection if it finds two requests to read at the same time. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Steve Dickson <steved@xxxxxxxxxx> 1.3.1-2.1 - Fixed a mount DOS (bz 1163886) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163886 - rpc.mountd can be blocked by a bad client https://bugzilla.redhat.com/show_bug.cgi?id=1163886 -------------------------------------------------------------------------------- ================================================================================ nomacs-2.2.0-1.fc21 (FEDORA-2014-15005) Lightweight image viewer -------------------------------------------------------------------------------- Update Information: Version bump. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 TI_Eugene <ti.eugene@xxxxxxxxx> 2.2.0-1 - Version bump. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163190 - nomacs-2.2.0/nomacs-2.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163190 -------------------------------------------------------------------------------- ================================================================================ openbabel-2.3.2-9.fc21 (FEDORA-2014-15012) Chemistry software file format converter -------------------------------------------------------------------------------- Update Information: fix build on s390(x) by disabling the same tests as for ppc* -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Dan Horák <dan[at]danny.cz> - 2.3.2-9 - disable some tests also on s390(x) -------------------------------------------------------------------------------- ================================================================================ openssh-6.6.1p1-8.fc21 (FEDORA-2014-15016) An open source implementation of SSH protocol versions 1 and 2 -------------------------------------------------------------------------------- Update Information: This update fixes log in using GSSAPI key exhange -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Petr Lautrbach <plautrba@xxxxxxxxxx> 6.6.1p1-8 + 0.9.3-3 - fix gsskex patch to correctly handle MONITOR_REQ_GSSSIGN request (#1118005) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1118005 - fatal: monitor_read: unsupported request: 82 on server while attempting GSSAPI key exchange https://bugzilla.redhat.com/show_bug.cgi?id=1118005 -------------------------------------------------------------------------------- ================================================================================ perl-Class-Load-XS-0.09-1.fc21 (FEDORA-2014-15052) XS implementation of parts of Class::Load -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.09-1 - Updated to 0.09 - Optimized some perl API calls - Use %license * Fri Aug 29 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 0.08-4 - Perl 5.20 rebuild -------------------------------------------------------------------------------- ================================================================================ perl-Devel-PatchPerl-1.28-1.fc21 (FEDORA-2014-15042) Patch perl source a la Devel::PPPort's buildperl.pl -------------------------------------------------------------------------------- Update Information: Update to the latest version -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.28-1 - 1.28 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163225 - perl-Devel-PatchPerl-1.28 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163225 -------------------------------------------------------------------------------- ================================================================================ perl-File-ShareDir-Install-0.09-1.fc21 (FEDORA-2014-15049) Install shared files -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.09-1 - Update to 0.09 - Get rid of DB::single - Don't do POD tests by default - Specify all dependencies * Wed Aug 27 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 0.08-3 - Perl 5.20 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163234 - perl-File-ShareDir-Install-0.09 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163234 -------------------------------------------------------------------------------- ================================================================================ perl-Import-Into-1.002004-1.fc21 (FEDORA-2014-15030) Import packages into other packages -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 1.002004-1 - Update to 1.002004 - Module loading is now done while importing, making it unnecessary to load them beforehand (CPAN RT#96995) - Fix prerequisite declarations for older toolchain * Tue Aug 26 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.002002-3 - Perl 5.20 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163244 - perl-Import-Into-1.002004 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163244 -------------------------------------------------------------------------------- ================================================================================ perl-JSON-MaybeXS-1.003001-1.fc21 (FEDORA-2014-15043) Use Cpanel::JSON::XS with a fallback to JSON::XS and JSON::PP -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 1.003001-1 - Update to 1.003001 - Add :legacy tag to support legacy apps - Fix boolean interoperability with older Cpanel::JSON::MaybeXS * Wed Oct 22 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 1.002006-1 - Update to 1.002006 - Add some additional test diagnostics, to help find bad version combinations of JSON backends -------------------------------------------------------------------------------- ================================================================================ perl-Pod-Checker-1.71-2.fc21 (FEDORA-2014-15039) Check POD documents for syntax errors -------------------------------------------------------------------------------- Update Information: Increase package epoch value to compete with dual-living perl.spec's sub-packages properly. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 4:1.71-2 - Compete with perl.spec's epoch (bug #1163490) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163490 - Dual-lived perl-Pod-Usage needs to compete with perl.spec's epoch https://bugzilla.redhat.com/show_bug.cgi?id=1163490 -------------------------------------------------------------------------------- ================================================================================ perl-Pod-Coverage-TrustPod-0.100003-1.fc21 (FEDORA-2014-15006) Allow a module's pod to contain Pod::Coverage hints -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.100003-1 - Update to 0.100003 - The string *EVERYTHING* is now a pattern meaning "trust everything" - Only anchor the regex from Pod; trustme regex are again non-anchored - Use %license - Make %files list more explicit * Thu Aug 28 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 0.100002-9 - Perl 5.20 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163284 - perl-Pod-Coverage-TrustPod-0.100003 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163284 -------------------------------------------------------------------------------- ================================================================================ perl-Pod-Usage-1.64-2.fc21 (FEDORA-2014-15039) Print a usage message from embedded POD documentation -------------------------------------------------------------------------------- Update Information: Increase package epoch value to compete with dual-living perl.spec's sub-packages properly. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 4:1.64-2 - Compete with perl.spec's epoch (bug #1163490) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163490 - Dual-lived perl-Pod-Usage needs to compete with perl.spec's epoch https://bugzilla.redhat.com/show_bug.cgi?id=1163490 -------------------------------------------------------------------------------- ================================================================================ perl-Test-Class-0.48-1.fc21 (FEDORA-2014-15015) Easily create test classes in an xUnit/JUnit style -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.48-1 - Update to 0.48 - Replace a few bare evals with more modern alternatives * Mon Sep 29 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.47-1 - 0.47 bump; test and documentation changes only - Drop Module::Build version patch since we need a later Test::More than is in EL-7 - No need to clean the buildroot * Thu Aug 28 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 0.46-2 - Perl 5.20 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163307 - perl-Test-Class-0.48 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163307 -------------------------------------------------------------------------------- ================================================================================ perl-Test-CleanNamespaces-0.16-2.fc21 (FEDORA-2014-15056) Check for uncleaned imports -------------------------------------------------------------------------------- Update Information: This is the Fedora/EPEL release of perl-Test-CleanNamespaces. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1162217 - Review Request: perl-Test-CleanNamespaces - Check for uncleaned imports https://bugzilla.redhat.com/show_bug.cgi?id=1162217 -------------------------------------------------------------------------------- ================================================================================ perl-Test-Deep-0.113-1.fc21 (FEDORA-2014-15036) Extremely flexible deep comparison -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 0.113-1 - Update to 0.113 - Fix a compile error (!!) in RegexpOnly - Fix some documentation typos - Add license to META file * Wed Aug 27 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 0.112-3 - Perl 5.20 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163309 - perl-Test-Deep-0.113 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163309 -------------------------------------------------------------------------------- ================================================================================ perl-Test-Harness-3.34-1.fc21 (FEDORA-2014-15034) Run Perl standard test scripts with statistics -------------------------------------------------------------------------------- Update Information: This release enables printing CPU times spent per test. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 3.34-1 - 3.34 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163310 - perl-Test-Harness-3.34 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163310 -------------------------------------------------------------------------------- ================================================================================ perl-Text-MultiMarkdown-1.000035-1.fc21 (FEDORA-2014-15047) Convert MultiMarkdown syntax to (X)HTML -------------------------------------------------------------------------------- Update Information: This release fixes encoding of XML metacharacters. It introduces a new self_url constructor configuration parameter to define footnote link prefix. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 1.000035-1 - 1.000035 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163316 - perl-Text-MultiMarkdown-1.000035 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163316 -------------------------------------------------------------------------------- ================================================================================ perl-Time-Warp-0.51-1.fc21 (FEDORA-2014-15037) Control over the flow of time -------------------------------------------------------------------------------- Update Information: This relase corrects encoding of the documentation. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 0.51-1 - 0.51 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163318 - perl-Time-Warp-0.51 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163318 -------------------------------------------------------------------------------- ================================================================================ php-5.6.3-1.fc21 (FEDORA-2014-15053) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information: 13 Nov 2014, PHP 5.6.3 Core: * Implemented 64-bit format codes for pack() and unpack(). (Leigh) * Fixed bug #51800 (proc_open on Windows hangs forever). (Anatol) * Fixed bug #67633 (A foreach on an array returned from a function not doing copy-on-write). (Nikita) * Fixed bug #67739 (Windows 8.1/Server 2012 R2 OS build number reported as 6.2 (instead of 6.3)). (Christian Wenz) * Fixed bug #67949 (DOMNodeList elements should be accessible through array notation) (Florian) * Fixed bug #68095 (AddressSanitizer reports a heap buffer overflow in php_getopt()). (Stas) * Fixed bug #68118 ($a->foo .= 'test'; can leave $a->foo undefined). (Nikita) * Fixed bug #68129 (parse_url() - incomplete support for empty usernames and passwords) (Tjerk) * Fixed bug #68365 (zend_mm_heap corrupted after memory overflow in zend_hash_copy). (Dmitry) CURL: * Add CURL_SSLVERSION_TLSv1_0, CURL_SSLVERSION_TLSv1_1, and CURL_SSLVERSION_TLSv1_2 constants if supported by libcurl (Rasmus) Fileinfo: * Fixed bug #66242 (libmagic: don't assume char is signed). (ArdB) * Fixed bug #68224 (buffer-overflow in libmagic/readcdf.c caught by AddressSanitizer). (Remi) * Fixed bug #68283 (fileinfo: out-of-bounds read in elf note headers). (CVE-2014-3710) (Remi) FPM: * Fixed bug #65641 (PHP-FPM incorrectly defines the SCRIPT_NAME variable when using Apache, mod_proxy-fcgi and ProxyPass). (Remi) * Implemented FR #55508 (listen and listen.allowed_clients should take IPv6 addresses). (Robin Gloster) GD: * Fixed bug #65171 (imagescale() fails without height param). (Remi) GMP: * Implemented gmp_random_range() and gmp_random_bits(). (Leigh) * Fixed bug #63595 (GMP memory management conflicts with other libraries using GMP). (Remi) Mysqli: * Fixed bug #68114 (linker error on some OS X machines with fixed width decimal support) (Keyur Govande) ODBC: * Fixed bug #68087 (ODBC not correctly reading DATE column when preceded by a VARCHAR column) (Keyur Govande) OpenSSL: * Fixed bug #68074 (Allow to use system cipher list instead of hardcoded value). (Remi) PDO_pgsql: * Fixed bug #68199 (PDO::pgsqlGetNotify doesn't support NOTIFY payloads) (Matteo, Alain Laporte) * Fixed bug #66584 (Segmentation fault on statement deallocation) (Matteo) Reflection: * Fixed bug #68103 (Duplicate entry in Reflection for class alias). (Remi) SPL: * Fixed bug #68128 (Regression in RecursiveRegexIterator) (Tjerk) Packaging changes: * fix case sensitivity for some timezones * disable opcache.fast_shutdown in default config -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> 5.6.3-1 - Update to PHP 5.6.3 http://php.net/releases/5_6_3.php * Fri Oct 31 2014 Remi Collet <rcollet@xxxxxxxxxx> 5.6.3-0.2.RC1 - php 5.6.3RC1 (refreshed, phpdbg changes reverted) - new version of systzdata patch, fix case sensitivity - ignore Factory in date tests * Wed Oct 29 2014 Remi Collet <rcollet@xxxxxxxxxx> 5.6.3-0.1.RC1 - php 5.6.3RC1 - disable opcache.fast_shutdown in default config - enable phpdbg_webhelper new extension (in php-dbg) -------------------------------------------------------------------------------- ================================================================================ php-twig-extensions-1.2.0-2.fc21 (FEDORA-2014-15071) Twig extensions -------------------------------------------------------------------------------- Update Information: Common additional features for Twig that do not directly belong in core Twig. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1159601 - Review Request: php-twig-extensions - Twig extensions https://bugzilla.redhat.com/show_bug.cgi?id=1159601 -------------------------------------------------------------------------------- ================================================================================ python-django-openstack-auth-1.1.5-4.fc21 (FEDORA-2014-15033) Django authentication backend for OpenStack Keystone -------------------------------------------------------------------------------- Update Information: own language files dirs (rhbz#1163362) -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Matthias Runge <mrunge@xxxxxxxxxx> - 1.1.5-4 - own language files dirs (rhbz#1163362) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163362 - python-django-openstack-auth leaves directory behind on uninstall https://bugzilla.redhat.com/show_bug.cgi?id=1163362 -------------------------------------------------------------------------------- ================================================================================ python-qpid-0.30-2.fc21 (FEDORA-2014-15023) Python client library for AMQP -------------------------------------------------------------------------------- Update Information: Added runtime dependency on python-saslwrapper. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Darryl L. Pierce <dpierce@xxxxxxxxxx> - 0.30-2 - Added runtime dependency on python-saslwrapper. - Resolves: BZ#1163638 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163638 - python-qpid should depend on python-saslwrapper since it imports it https://bugzilla.redhat.com/show_bug.cgi?id=1163638 -------------------------------------------------------------------------------- ================================================================================ python-qt5-5.3.2-6.fc21 (FEDORA-2014-14962) Python bindings for Qt5 -------------------------------------------------------------------------------- Update Information: Fix errant build dependency on Qt4 -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 5.3.2-6 - restore python3 support * Tue Nov 11 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 5.3.2-5 - pkgconfig(QtOpenGL) being satisfied by qt4 devel (#1162415) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1162415 - pkgconfig(QtOpenGL) being satisfied by qt4 devel https://bugzilla.redhat.com/show_bug.cgi?id=1162415 -------------------------------------------------------------------------------- ================================================================================ qgis-2.6.0-2.fc21 (FEDORA-2014-15013) A user friendly Open Source Geographic Information System -------------------------------------------------------------------------------- Update Information: http://changelog.linfiniti.com/qgis/version/2.6.0/ -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 2 2014 Volker Fröhlich <volker27@xxxxxx> - 2.6.0-2 - Fix the build on ARMv7hl, thanks to Sandro Mani! - Updated the removing of executable permissions from source code files - Add qscintilla-python-devel as BR - Don't build the dxf converter plug-in - Remove the Python directory definitions that were necessary on EL5 * Sun Nov 2 2014 Volker Fröhlich <volker27@xxxxxx> - 2.6.0-1 - New upstream release, drop obsolete patch, update the sip patch -------------------------------------------------------------------------------- ================================================================================ satyr-0.15-2.fc21 (FEDORA-2014-14718) Tools to create anonymous, machine-friendly problem reports -------------------------------------------------------------------------------- Update Information: abrt: - re-enable GPGCheck: report only signed packages - koops: improve 'reason' text for page faults - do not detect Firefox crashes - make ABRT queiter - update Package URL libreport: - Prevent duplicate values for CODE_* fields being logged to journal - update Package URL satyr: - Add function name into reason text for kernel page faults -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 7 2014 Jakub Filak <jfilak@xxxxxxxxxx> 0.15-2 - Add function name into reason text for kernel page faults -------------------------------------------------------------------------------- References: [ 1 ] Bug #1151234 - abrt logs mundane message at elevated priorities https://bugzilla.redhat.com/show_bug.cgi?id=1151234 [ 2 ] Bug #1159469 - CRITICAL:faf:Action failed unexpectedly: KeyError: u'kernel-PAE-debuginfo' https://bugzilla.redhat.com/show_bug.cgi?id=1159469 [ 3 ] Bug #1163381 - ImportError: No module named rhsm.config https://bugzilla.redhat.com/show_bug.cgi?id=1163381 -------------------------------------------------------------------------------- ================================================================================ sugar-read-114-1.fc21 (FEDORA-2014-15068) A document reader for Sugar -------------------------------------------------------------------------------- Update Information: Release 114 -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 114-1 - Release 114 -------------------------------------------------------------------------------- ================================================================================ whois-5.2.2-1.fc21 (FEDORA-2014-15008) Improved WHOIS client -------------------------------------------------------------------------------- Update Information: This release fixes removing traling dots from domain names. It also adds support for мкд. and გე. national TLDs and support for bloomberg., delivery., emerck., energy., sydney., and taipei. new generic TLDs. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Petr Pisar <ppisar@xxxxxxxxxx> - 5.2.2-1 - 5.2.2 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163354 - whois-5.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163354 -------------------------------------------------------------------------------- ================================================================================ youtube-dl-2014.11.13-1.fc21 (FEDORA-2014-15020) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information: Latest upstream. - Update to latest upstream release - add zsh completion -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Jon Ciesla <limburgher@xxxxxxxxx> - 2014.11.13-1 - Update to latest release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1146499 - youtube-dl-2014.11.02.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1146499 -------------------------------------------------------------------------------- ================================================================================ zsh-5.0.7-2.fc21 (FEDORA-2014-15026) Powerful interactive shell -------------------------------------------------------------------------------- Update Information: - make the wait built-in work for already exited processes (#1162198) -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 10 2014 Kamil Dudka <kdudka@xxxxxxxxxx> - 5.0.7-2 - make the wait built-in work for already exited processes (#1162198) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1162198 - zsh wait builtin does not work for already exited processes [Fedora] https://bugzilla.redhat.com/show_bug.cgi?id=1162198 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test