The following Fedora 20 Security updates need testing: Age URL 198 https://admin.fedoraproject.org/updates/FEDORA-2014-5897/nrpe-2.15-2.fc20 67 https://admin.fedoraproject.org/updates/FEDORA-2014-10451/geary-0.6.3-1.fc20 67 https://admin.fedoraproject.org/updates/FEDORA-2014-10468/icecream-1.0.1-8.20140822git.fc20 52 https://admin.fedoraproject.org/updates/FEDORA-2014-11430/ca-certificates-2014.2.1-1.1.fc20 44 https://admin.fedoraproject.org/updates/FEDORA-2014-11969/krb5-1.11.5-16.fc20 35 https://admin.fedoraproject.org/updates/FEDORA-2014-12699/facter-1.7.6-1.fc20 6 https://admin.fedoraproject.org/updates/FEDORA-2014-14506/oath-toolkit-2.4.1-6.fc20 6 https://admin.fedoraproject.org/updates/FEDORA-2014-14493/python-requests-kerberos-0.6-1.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-14674/drupal7-ckeditor-1.16-2.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-14791/mariadb-galera-5.5.40-2.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-14898/polarssl-1.2.12-1.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-14883/python-pillow-2.2.1-7.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-15108/mantis-1.2.17-4.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-14963/avr-binutils-2.24-3.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-15102/moodle-2.5.9-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-14833/arm-none-eabi-binutils-cs-2014.05.28-3.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-15130/kwebkitpart-1.3.4-5.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-15200/kernel-3.17.3-200.fc20 The following Fedora 20 Critical Path updates have yet to be approved: Age URL 9 https://admin.fedoraproject.org/updates/FEDORA-2014-14389/colord-1.1.8-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14728/xkeyboard-config-2.10.1-3.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-15054/perl-Pod-Usage-1.64-2.fc20,perl-Pod-Checker-1.60-292.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-15046/man-db-2.6.5-6.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-14798/device-mapper-persistent-data-0.4.1-2.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-14933/pciutils-3.3.0-1.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-14964/libtdb-1.3.1-1.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-14861/libpipeline-1.2.4-3.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-15120/dosfstools-3.0.27-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-15165/llvm-3.4-10.fc20 The following builds have been pushed to Fedora 20 updates-testing cadvisor-0.5.0-0.0.git8c4f650.fc20 cgdb-0.6.8-1.fc20 globus-ftp-client-8.16-1.fc20 globus-ftp-control-6.3-1.fc20 globus-gass-copy-9.13-1.fc20 globus-gatekeeper-10.9-1.fc20 globus-gram-audit-4.4-1.fc20 globus-gram-client-13.11-1.fc20 globus-gram-job-manager-14.25-1.fc20 globus-gram-job-manager-slurm-2.5-1.fc20 globus-gram-protocol-12.12-2.fc20 globus-gridftp-server-7.15-1.fc20 globus-gss-assist-10.13-1.fc20 globus-gssapi-gsi-11.14-1.fc20 globus-io-11.2-1.fc20 globus-scheduler-event-generator-5.8-1.fc20 globus-simple-ca-4.17-1.fc20 globus-xio-4.17-1.fc20 gpsim-0.28.1-0.fc20 hg-git-0.7.0-1.fc20 id3lib-3.8.3-33.fc20 kernel-3.17.3-200.fc20 kobo-0.5.0-1.fc20 libreoffice-4.2.7.2-7.fc20 lis-1.5.13-1.fc20 llvm-3.4-10.fc20 lynis-1.6.4-1.fc20 mingw-id3lib-3.8.3-33.fc20 nwchem-6.5.26243-13.fc20 python-cryptography-vectors-0.6.1-1.fc20 scite-3.5.1-1.fc20 spring-98.0-2.fc20 ssh-installkeys-1.9-1.fc20 Details about builds: ================================================================================ cadvisor-0.5.0-0.0.git8c4f650.fc20 (FEDORA-2014-15214) Analyzes resource usage and performance characteristics of running containers -------------------------------------------------------------------------------- Update Information: update to 0.5.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Eric Paris <eparis@xxxxxxxxxx> - 0.5.0-0.0.git8c4f650 - update to 0.5.0 * Sat Oct 18 2014 jchaloup <jchaloup@xxxxxxxxxx> - 0.4.1-0.1.git6906a8c - update to 0.4.1 -------------------------------------------------------------------------------- ================================================================================ cgdb-0.6.8-1.fc20 (FEDORA-2014-15166) CGDB is a curses-based interface to the GNU Debugger (GDB) -------------------------------------------------------------------------------- Update Information: - New upstream release: 0.6.8. - New BR: help2man, flex, texinfo. -------------------------------------------------------------------------------- ChangeLog: * Sat Nov 15 2014 Gilboa Davara <gilboad [AT] gmail.com> - 0.6.8-1 - New upstream release: 0.6.8. - New BR: help2man, flex, texinfo. * Fri Aug 15 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.6.7-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.6.7-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ globus-ftp-client-8.16-1.fc20 (FEDORA-2014-15158) Globus Toolkit - GridFTP Client Library -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 8.16-1 - GT6 update - Drop patch globus-ftp-client-undef-macro.patch (fixed upstream) -------------------------------------------------------------------------------- ================================================================================ globus-ftp-control-6.3-1.fc20 (FEDORA-2014-15158) Globus Toolkit - GridFTP Control Library -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 6.3-1 - GT6 update - Drop patches globus-ftp-control-memleak.patch and globus-ftp-control-tests-localhost.patch (fixed upstream) -------------------------------------------------------------------------------- ================================================================================ globus-gass-copy-9.13-1.fc20 (FEDORA-2014-15158) Globus Toolkit - Globus Gass Copy -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 9.13-1 - GT6 update -------------------------------------------------------------------------------- ================================================================================ globus-gatekeeper-10.9-1.fc20 (FEDORA-2014-15158) Globus Toolkit - Globus Gatekeeper -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 10.9-1 - GT6 update -------------------------------------------------------------------------------- ================================================================================ globus-gram-audit-4.4-1.fc20 (FEDORA-2014-15158) Globus Toolkit - GRAM Jobmanager Auditing -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 4.4-1 - GT6 update - Drop patch globus-gram-audit-macro.patch (fixed upstream) -------------------------------------------------------------------------------- ================================================================================ globus-gram-client-13.11-1.fc20 (FEDORA-2014-15158) Globus Toolkit - GRAM Client Library -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 13.11-1 - GT6 update - Set GLOBUS_HOSTNAME during make check -------------------------------------------------------------------------------- ================================================================================ globus-gram-job-manager-14.25-1.fc20 (FEDORA-2014-15158) Globus Toolkit - GRAM Jobmanager -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 14.25-1 - GT6 update - Drop patch globus-gram-job-manager-personal-gk.patch (fixed upstream) -------------------------------------------------------------------------------- ================================================================================ globus-gram-job-manager-slurm-2.5-1.fc20 (FEDORA-2014-15158) Globus Toolkit - SLURM Job Manager Support -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 2.5-1 - GT6 update -------------------------------------------------------------------------------- ================================================================================ globus-gram-protocol-12.12-2.fc20 (FEDORA-2014-15158) Globus Toolkit - GRAM Protocol Library -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 14 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 12.12-2 - Set GLOBUS_HOSTNAME during make check -------------------------------------------------------------------------------- ================================================================================ globus-gridftp-server-7.15-1.fc20 (FEDORA-2014-15158) Globus Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 7.15-1 - GT6 update - Drop patch globus-gridftp-server-ipv6log.patch (fixed upstream) -------------------------------------------------------------------------------- ================================================================================ globus-gss-assist-10.13-1.fc20 (FEDORA-2014-15158) Globus Toolkit - GSSAPI Assist library -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 10.13-1 - GT6 update - Drop patch globus-gss-assist-doxygen.patch (fixed upstream) -------------------------------------------------------------------------------- ================================================================================ globus-gssapi-gsi-11.14-1.fc20 (FEDORA-2014-15158) Globus Toolkit - GSSAPI library -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 11.14-1 - GT6 update - Drop patch globus-gssapi-gsi-doxygen.patch (fixed upstream) -------------------------------------------------------------------------------- ================================================================================ globus-io-11.2-1.fc20 (FEDORA-2014-15158) Globus Toolkit - uniform I/O interface -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 11.2-1 - GT6 update - Drop patch globus-io-tests-localhost.patch (fixed upstream) -------------------------------------------------------------------------------- ================================================================================ globus-scheduler-event-generator-5.8-1.fc20 (FEDORA-2014-15158) Globus Toolkit - Scheduler Event Generator -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 5.8-1 - GT6 update - Drop patch globus-scheduler-event-generator-manpages.patch (fixed upstream) -------------------------------------------------------------------------------- ================================================================================ globus-simple-ca-4.17-1.fc20 (FEDORA-2014-15158) Globus Toolkit - Simple CA Utility -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 4.17-1 - GT6 update -------------------------------------------------------------------------------- ================================================================================ globus-xio-4.17-1.fc20 (FEDORA-2014-15158) Globus Toolkit - Globus XIO Framework -------------------------------------------------------------------------------- Update Information: Update to latest upstream sources. Drop most patches - now accepted upstream. Fix some tests. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 4.17-1 - GT6 update - Drop patches globus-xio-http-tests-localhost.patch and globus-xio-http-tests-header-name-value.patch (fixed upstream) -------------------------------------------------------------------------------- ================================================================================ gpsim-0.28.1-0.fc20 (FEDORA-2014-15155) A simulator for Microchip (TM) PIC (TM) microcontrollers -------------------------------------------------------------------------------- Update Information: Upstream bug fix release -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 16 2014 Roy Rankin <rrankin@xxxxxxxxxxx> - 0.28.1-0 - Upstream update to 0.28.1 - Add desktop and appdatta which is now delivered from upstream -------------------------------------------------------------------------------- ================================================================================ hg-git-0.7.0-1.fc20 (FEDORA-2014-15204) Mercurial Plugin for Communicating with Git Servers -------------------------------------------------------------------------------- Update Information: Update to 0.7.0 -------------------------------------------------------------------------------- ChangeLog: * Sat Nov 15 2014 Christopher Meng <rpm@xxxxxxxx> - 0.7.0-1 - Update to 0.7.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163145 - hg-git-0.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163145 -------------------------------------------------------------------------------- ================================================================================ id3lib-3.8.3-33.fc20 (FEDORA-2014-15163) Library for manipulating ID3v1 and ID3v2 tags -------------------------------------------------------------------------------- Update Information: Apply several fixes from the Debian package -------------------------------------------------------------------------------- ChangeLog: * Sat Nov 15 2014 David King <amigadave@xxxxxxxxxxxxx> - 3.8.3-33 - Fix typos in man page patch - Add UTF-16 string lists patch, adapted from Debian - Add NULL pointer check patch from Debian - Enable check, using make check * Thu Mar 6 2014 David King <amigadave@xxxxxxxxxxxxx> - 3.8.3-32 - Use autoreconf patch from mingw-id3lib package -------------------------------------------------------------------------------- ================================================================================ kernel-3.17.3-200.fc20 (FEDORA-2014-15200) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 3.17.3 stable update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 14 2014 Justin M. Forbes <jforbes@xxxxxxxxxxxxxxxxx> - 3.17.3-200 - Linux v3.17.3 * Fri Nov 14 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - Quiet WARN in i915 edp VDD handling - Enable I40EVF driver (rhbz 1164029) * Thu Nov 13 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - Add patch for MS Surface Pro 3 Type Cover (rhbz 1135338) - CVE-2014-7843 aarch64: copying from /dev/zero causes local DoS (rhbz 1163744 1163745) - CVE-2014-7842 kvm: reporting emulation failures to userspace (rhbz 1163762 1163767) * Wed Nov 12 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - CVE-2014-7841 sctp: NULL ptr deref on malformed packet (rhbz 1163087 1163095) * Mon Nov 10 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - Fix Samsung pci-e SSD handling on some macbooks (rhbz 1161805) - Add patch to fix crypto allocation issues on PAGE_SIZE > 4k * Fri Nov 7 2014 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - Fix iwlwifi oops (rhbz 1151836) - CVE-2014-7826 CVE-2014-7825 insufficient syscall number validation in perf and ftrace subsystems (rhbz 1161565 1161572) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163744 - CVE-2014-7843 kernel: aarch64: copying from /dev/zero causes local DoS https://bugzilla.redhat.com/show_bug.cgi?id=1163744 [ 2 ] Bug #1163762 - CVE-2014-7842 kernel: kvm: reporting emulation failures to userspace https://bugzilla.redhat.com/show_bug.cgi?id=1163762 [ 3 ] Bug #1163087 - CVE-2014-7841 kernel: net: sctp: NULL pointer dereference in af->from_addr_param on malformed packet https://bugzilla.redhat.com/show_bug.cgi?id=1163087 [ 4 ] Bug #1161565 - CVE-2014-7825 CVE-2014-7826 kernel: insufficient syscall number validation in perf and ftrace subsystems https://bugzilla.redhat.com/show_bug.cgi?id=1161565 -------------------------------------------------------------------------------- ================================================================================ kobo-0.5.0-1.fc20 (FEDORA-2014-15188) Python modules for tools development -------------------------------------------------------------------------------- Update Information: New upstream version. Bump to new upstream release: 0.4.3 Bump to new upstream release: 0.4.3 Bump to new upstream release: 0.4.3 -------------------------------------------------------------------------------- ChangeLog: * Sat Nov 15 2014 Daniel Mach <dmach@xxxxxxxxxx> - 0.5.0-1 - Modify shortcuts.run() to pass all **kwargs to Popen(). (Daniel Mach) - Admin page for kobo.auth.User (Tomas Kopecek) - Unset active menu if no other menu is active (Lubomír Sedlář) - Allow rendering menu for bootstrap's navbar (Lubomír Sedlář) - Handle menu items without text as dividers (Lubomír Sedlář) - allow --force in resubmit-tasks CLI command (Tomas Kopecek) - Django 1.6 db transaction model (Tomas Kopecek) - CLI command for viewing log files (Tomas Kopecek) - Display overall time in task page (Tomas Kopecek) - Fix shortcuts.run() to handle errno.EINTR correctly. (Tomas Tomecek) - Don't count assigned tasks into worker load. (Tomas Tomecek) - Human readable state exceptions. (Tomas Kopecek) - Human readable JSONField. (Tomas Kopecek) * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.4.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri Jan 17 2014 Daniel Mach <dmach@xxxxxxxxxx> - 0.4.3-1 - Rename User model to properly adjust to older db schema. (Tomas Kopecek) - Fix typo in login template. (Tomas Kopecek) - Switch from simplejson to json. (Daniel Mach) -------------------------------------------------------------------------------- ================================================================================ libreoffice-4.2.7.2-7.fc20 (FEDORA-2014-15205) Free Software Productivity Suite -------------------------------------------------------------------------------- Update Information: Improve wheel scrolling in sidebar as described at http://caolanm.blogspot.ie/2014/06/scrolling-sidebar-with-scroll-wheel.html -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 13 2014 Caolán McNamara <caolanm@xxxxxxxxxx> - 1:4.2.7.2-7 - Resolves: rhbz#1163477 improve wheel scrolling in sidebar -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163477 - libreoffice impress I can't scroll inside the sidebar deck https://bugzilla.redhat.com/show_bug.cgi?id=1163477 -------------------------------------------------------------------------------- ================================================================================ lis-1.5.13-1.fc20 (FEDORA-2014-15193) A library for solving linear equations and eigenvalue problems -------------------------------------------------------------------------------- Update Information: Update to 1.5.13 Update to 1.5.11 Update to 1.5.4 Update to 1.5.2 Update to 1.4.67 Update to 1.4.64 Update to 1.4.63 Update to 1.4.62 -------------------------------------------------------------------------------- ChangeLog: * Sat Nov 15 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.5.13-1 - Update to 1.5.13 * Wed Nov 12 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.5.11-1 - Update to 1.5.11 * Tue Nov 4 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.5.4-1 - Update to 1.5.4 * Sat Nov 1 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.5.2-1 - Update to 1.5.2 * Tue Oct 28 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.67-1 - Update to 1.4.67 * Mon Oct 27 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.66-1 - Update to 1.4.66 * Tue Oct 21 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.64-1 - Update to 1.4.64 * Mon Oct 20 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.63-1 - Update to 1.4.63 * Sat Oct 18 2014 Florian Lehner <dev@xxxxxxxxxxx> - 1.4.62-1 - Update to 1.4.62 -------------------------------------------------------------------------------- ================================================================================ llvm-3.4-10.fc20 (FEDORA-2014-15165) The Low Level Virtual Machine -------------------------------------------------------------------------------- Update Information: llvm and clang 3.4.2 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 24 2014 Adam Jackson <ajax@xxxxxxxxxx> 3.4-10 - llvm and clang 3.4.2 * Wed Jun 11 2014 Adam Jackson <ajax@xxxxxxxxxx> 3.4-9 - Different attempt to default to hard-float on arm (#803433) * Mon Jun 2 2014 Adam Jackson <ajax@xxxxxxxxxx> 3.4-8 - Attempt to default to hard-float on arm (#803433) * Thu May 29 2014 Adam Jackson <ajax@xxxxxxxxxx> 3.4-7 - Update to llvm 3.4.1 plus a few things from svn - Drop radeonsi patch, merged in 3.4.1 -------------------------------------------------------------------------------- ================================================================================ lynis-1.6.4-1.fc20 (FEDORA-2014-15209) Security and system auditing tool -------------------------------------------------------------------------------- Update Information: == 1.6.4 (2014-11-04) == New: - Boot loader detection for AIX [BOOT-5102] - Detection of getcap and lsvg binary - Added filesystem_ext to report - Detect rootsh Changes: - Hide errors when RPM database is faulty and show suggestion instead [PKGS-7308] - Allow OpenBSD to gather information on listening network ports [NETW-3012] - Don't trigger warning for Shellshock when doing segfault test [SHLL-6290] - Do not run Apache test on OpenBSD and strip control chars [HTTP-6624] - Extended AIDE test with configuration validation test [FIND-4314] - Improved Shellshock test regarding non-Linux support [SHLL-6290] - Added support for gathering volume groups on AIX [FILE-6311] - Properly parse PAM lines and add them to report [AUTH-9264] - Support for boot loader detection on OpenBSD [BOOT-5159] - Added uptime detection for OpenBSD systems [BOOT-5202] - Support for volume groups on AIX [FILE-6312] - Redirect errors when searching for readlink binary == * 1.6.3 (2014-10-14) == New: - Added tests for Shellshock bash vulnerability [SHLL-6290] - Added test to determine if Snoopy is used [ACCT-9636] - New test for qdaemon configuration file [PRNT-2416] - Test for GRUB boot loader password [BOOT-5122] - New test for qdaemon printer jobs [PRNT-2420] - Added ClamXav test for Mac OS X [MALW-3288] - Gentoo vulnerable packages test [PKGS-7393] - New test for qdaemon status [PRNT-2418] - Gentoo package listing [PKGS-7304] - Running Lynis without root permissions will start non-privileged scan - Systemd service and timer example file added - Added grub2-install to binaries Changes: - Adjustments so insecure SSL protocols are detected in nginx config [HTTP-6710] - Directories will be skipped when searching for nginx log files [HTTP-6720] - Only gather unique name servers from /etc/resolv.conf [NAME-2704] - Properly detect mod_evasive on Gentoo and others [HTTP-6640] - Improved swap partition detection in /etc/fstab [FILE-6336] - Improvements to kernel detection (e.g. Gentoo) [KRNL-5830] - Test for built-in security options in YUM [PKGS-7386] - Improved boot loader detection for GRUB2 [BOOT-5121] - Split GRUB test into two tests [BOOT-5122] - Added Mac OS uptime check [BOOT-5202] - Improved GetHostID function for systems having only ip binary - Improved testing for symlinked binary directories - Minor adjustments to log output - Renamed dev directory to extras == * 1.6.2 (2014-09-22) == New: - IsVirtualMachine function to check if system is running in VM VM types: Bochs CPU emulation, IBM z/VM, KVM, Linux Containers, libvirt LXC driver (Linux Containers), Microsoft Virtual PC, OpenVZ, Oracle VM VirtualBox, QEMU, Systemd Namespace container, User-Mode Linux (UML), VMware products, XEN - Detection for SaltStack configuration management tooling - ShowSymlinkPath function to check path behind a symlink - Check of configuration options of pacman [PKGS-7314] - Support for drill binary to check for Lynis update - FileIsEmpty function to check for empty files - Detect updates for Arch Linux [PKGS-7312] - Add detection for machine ID (systemd) - Added linux_config_file to report - Bash completion script for Lynis - Added detection of ss binary Changes: - Extended system reboot check, to enable it for most Linux versions[KRNL-5830] - Improved inetd test to avoid false positive with xinetd process [INSE-8002] - Permissions check has been adjusted to allow packaging and pentest mode - Added detection for compressed Linux config file [KRNL-5728] - Added support for compressed Linux config file [KRNL-5730] - Store PID file in home directory of the user, if needed - Added usage of ss to gather listening ports [NETW-3012] - Additional permission added to CUPS check [PRNT-2307] - Extended telnet in inetd test [INSE-8016] - Fix for reading at.deny file [SCHD-7720] - Removed individual warnings [BOOT-5184] - Several improvements for Arch Linux -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 14 2014 Christopher Meng <rpm@xxxxxxxx> - 1.6.4-1 - Update to 1.6.4 -------------------------------------------------------------------------------- ================================================================================ mingw-id3lib-3.8.3-33.fc20 (FEDORA-2014-15189) Library for manipulating ID3v1 and ID3v2 tags -------------------------------------------------------------------------------- Update Information: Apply several patches from the Debian package -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 14 2014 David King <amigadave@xxxxxxxxxxxxx> - 3.8.3-33 - Apply several patches from the Debian package * Mon Sep 29 2014 David King <amigadave@xxxxxxxxxxxxx> - 3.8.3-32 - Preserve timestamps during install -------------------------------------------------------------------------------- ================================================================================ nwchem-6.5.26243-13.fc20 (FEDORA-2014-15212) Delivering High-Performance Computational Chemistry to Science -------------------------------------------------------------------------------- Update Information: upstream update -------------------------------------------------------------------------------- ChangeLog: * Sat Nov 15 2014 Marcin Dulak <Marcin.Dulak@xxxxxxxxx> - 6.5.26243-13 - upstream update - MRCC_THEORY and NWCHEM_LONG_PATHS enabled - exclude aarch64 - mpich3 on el6 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 6.3.2-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Tue Jun 10 2014 Marcin Dulak <Marcin.Dulak@xxxxxxxxx> - 6.3.2-11 - explicit Requires needed bug #1105509 - excluding tests (hang on Fedora 21 i686) - added arm to ifarch (koji does: rpmbuild -bs --target arm --nodeps) -------------------------------------------------------------------------------- ================================================================================ python-cryptography-vectors-0.6.1-1.fc20 (FEDORA-2014-15199) Test vectors for the cryptography package -------------------------------------------------------------------------------- Update Information: New upstream release (fixes among others #1153501) -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 16 2014 Matej Cepl <mcepl@xxxxxxxxxx> - 0.6.1-1 - New upstream release (fixes among others #1153501) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1153501 - Missing LICENSE file https://bugzilla.redhat.com/show_bug.cgi?id=1153501 [ 2 ] Bug #1147149 - Review Request: python-cryptography-vectors - Test vectors for the cryptography package https://bugzilla.redhat.com/show_bug.cgi?id=1147149 -------------------------------------------------------------------------------- ================================================================================ scite-3.5.1-1.fc20 (FEDORA-2014-15192) SCIntilla based GTK2 text editor -------------------------------------------------------------------------------- Update Information: Update to 3.5.1 -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 16 2014 Johan Swensson <kupo@xxxxxxx> - 3.5.1-1 - Update to 3.5.1 -------------------------------------------------------------------------------- ================================================================================ spring-98.0-2.fc20 (FEDORA-2014-15185) Multiplayer, 3D realtime strategy combat game -------------------------------------------------------------------------------- Update Information: - Upstream release: 98.0. - Drop 96.0 specific patches. - New BR: SDL2-devel. -------------------------------------------------------------------------------- ChangeLog: * Sat Nov 15 2014 Gilboa Davara <gilboad [AT] gmail [DOT] com> - 98.0.2 - New BR: SDL2-devel. * Fri Nov 7 2014 Gilboa Davara <gilboad [AT] gmail [DOT] com> - 98.0.1 - Upstream release: 98.0. - Drop 96.0 specific patches. * Thu Oct 2 2014 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 96.0-7 - update icon/mime scriptlets * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 96.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sun Jun 15 2014 Gilboa Davara <gilboad [AT] gmail [DOT] com> - 96.0-3 - Rawhide build fix. * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 96.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu May 22 2014 Petr Machata <pmachata@xxxxxxxxxx> - 96.0-3 - Rebuild for boost 1.55.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1154424 - RFE: Spring 98 / Springlobby 0.201 released. https://bugzilla.redhat.com/show_bug.cgi?id=1154424 -------------------------------------------------------------------------------- ================================================================================ ssh-installkeys-1.9-1.fc20 (FEDORA-2014-15198) A tool for installing ssh keys on remote sites -------------------------------------------------------------------------------- Update Information: Fix permissions of $HOME/.ssh/authorized_keys. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 14 2014 Christopher Meng <rpm@xxxxxxxx> - 1.9-1 - Update to 1.9 * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.8-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test