The following Fedora 20 Security updates need testing: Age URL 200 https://admin.fedoraproject.org/updates/FEDORA-2014-5897/nrpe-2.15-2.fc20 69 https://admin.fedoraproject.org/updates/FEDORA-2014-10451/geary-0.6.3-1.fc20 69 https://admin.fedoraproject.org/updates/FEDORA-2014-10468/icecream-1.0.1-8.20140822git.fc20 54 https://admin.fedoraproject.org/updates/FEDORA-2014-11430/ca-certificates-2014.2.1-1.1.fc20 46 https://admin.fedoraproject.org/updates/FEDORA-2014-11969/krb5-1.11.5-16.fc20 37 https://admin.fedoraproject.org/updates/FEDORA-2014-12699/facter-1.7.6-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14791/mariadb-galera-5.5.40-2.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14898/polarssl-1.2.12-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14883/python-pillow-2.2.1-7.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-15108/mantis-1.2.17-4.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-14963/avr-binutils-2.24-3.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-15102/moodle-2.5.9-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-14833/arm-none-eabi-binutils-cs-2014.05.28-3.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-15130/kwebkitpart-1.3.4-5.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-15228/libvirt-1.1.3.8-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-15200/kernel-3.17.3-200.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-15244/wireshark-1.10.11-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-15266/python-django14-1.4.16-1.fc20 The following Fedora 20 Critical Path updates have yet to be approved: Age URL 11 https://admin.fedoraproject.org/updates/FEDORA-2014-14389/colord-1.1.8-1.fc20 6 https://admin.fedoraproject.org/updates/FEDORA-2014-14728/xkeyboard-config-2.10.1-3.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-15054/perl-Pod-Usage-1.64-2.fc20,perl-Pod-Checker-1.60-292.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-15046/man-db-2.6.5-6.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14798/device-mapper-persistent-data-0.4.1-2.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14933/pciutils-3.3.0-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14964/libtdb-1.3.1-1.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-14861/libpipeline-1.2.4-3.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-15120/dosfstools-3.0.27-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-15326/pycairo-1.10.0-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-15165/llvm-3.4-10.fc20,libdrm-2.4.58-1.fc20,mesa-10.3.3-1.20141110.fc20 The following builds have been pushed to Fedora 20 updates-testing american-fuzzy-lop-0.50b-2.fc20 beignet-1.0.0-1.fc20 celestia-1.6.1-18.fc20 freecad-0.14-4.fc20 gfal2-2.7.8-1.fc20 golang-googlecode-google-api-client-0-0.3.alpha.hg98c781851970.fc20 htmlparser-1.5-1.fc20 labiryntowy-fonts-1.53-2.fc20 libdrm-2.4.58-1.fc20 llvm-3.4-10.fc20 mesa-10.3.3-1.20141110.fc20 nfs-utils-1.3.0-2.4.fc20 perl-Crypt-Rijndael-1.12-1.fc20 perl-Finance-Quote-1.35-1.fc20 php-pecl-xdebug-2.2.6-1.fc20 pycairo-1.10.0-1.fc20 python-django14-1.4.16-1.fc20 python-texttable-0.8.1-4.fc20 sazanami-fonts-0.20040629-23.fc20 sopwith-1.8.3-2.fc20 tilda-1.2.2-1.fc20 wireshark-1.10.11-1.fc20 xa-2.3.6-1.fc20 xca-1.0.0-2.fc20 Details about builds: ================================================================================ american-fuzzy-lop-0.50b-2.fc20 (FEDORA-2014-15305) Practical, instrumentation-driven fuzzer for binary formats -------------------------------------------------------------------------------- Update Information: Don't use epoch in requires. New upstream version 0.50b. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163666 - Review Request: american-fuzzy-lop - Practical, instrumentation-driven fuzzer for binary formats https://bugzilla.redhat.com/show_bug.cgi?id=1163666 -------------------------------------------------------------------------------- ================================================================================ beignet-1.0.0-1.fc20 (FEDORA-2014-15258) Open source implementation of the OpenCL for Intel GPUs -------------------------------------------------------------------------------- Update Information: 1.0.0 (RHBZ #1142892) -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 17 2014 Igor Gnatenko - <i.gnatenko.brain@xxxxxxxxx> - 1.0.0-1 - 1.0.0 (RHBZ #1142892) * Fri Aug 15 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.9.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1142892 - beignet-1.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1142892 -------------------------------------------------------------------------------- ================================================================================ celestia-1.6.1-18.fc20 (FEDORA-2014-15293) OpenGL real-time visual space simulation -------------------------------------------------------------------------------- Update Information: Repackaged source with .tar.xz -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 16 2014 Matias Kreder <mkreder@xxxxxxxxx> - 1.6.1-18 - Repackaged source with .tar.xz * Fri Aug 15 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.6.1-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #982380 - Use xz to compress tarball https://bugzilla.redhat.com/show_bug.cgi?id=982380 -------------------------------------------------------------------------------- ================================================================================ freecad-0.14-4.fc20 (FEDORA-2014-15281) A general purpose 3D CAD modeler -------------------------------------------------------------------------------- Update Information: Add patch from upstream to address BZ#1143814. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 18 2014 Richard Shaw <hobbes1069@xxxxxxxxx> - 0.14-3 - Patch PythonSnap, fixes BZ#1143814. * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.14-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1143814 - [abrt] freecad: DraftSnap.py:578:snapToPolar:Exception: Both points are equal https://bugzilla.redhat.com/show_bug.cgi?id=1143814 -------------------------------------------------------------------------------- ================================================================================ gfal2-2.7.8-1.fc20 (FEDORA-2014-14510) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: Update for gfal2 2.7.8 release -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 17 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.7.8-1 - Upstream backported fix for protocol honoring on SRM GET and PUT * Mon Nov 10 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.7.7-1 - Upgraded to upstream release 2.7.7 * Fri Nov 7 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.7.6-1 - New upstream release -------------------------------------------------------------------------------- ================================================================================ golang-googlecode-google-api-client-0-0.3.alpha.hg98c781851970.fc20 (FEDORA-2014-15276) Go libraries for "new style" Google APIs -------------------------------------------------------------------------------- Update Information: update to 98c78185197025f935947caac56a7b6d022f89d2 -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 14 2014 Eric Paris <eparis@xxxxxxxxxx> - 0-0.3.alpha.hg98c781851970 - update to 98c78185197025f935947caac56a7b6d022f89d2 -------------------------------------------------------------------------------- ================================================================================ htmlparser-1.5-1.fc20 (FEDORA-2014-15254) HTML Parser, a Java library used to parse HTML -------------------------------------------------------------------------------- Update Information: - Back to 1.5 due a bug with OmegaT http://sourceforge.net/p/omegat/mailman/message/32783657/ -------------------------------------------------------------------------------- ================================================================================ labiryntowy-fonts-1.53-2.fc20 (FEDORA-2014-15267) Artificial font consisting of vertical and horizontal bars -------------------------------------------------------------------------------- Update Information: Add font licence file, delete info. Initial packaging. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1162148 - Review Request: labiryntowy-fonts - Conscript (artifical font) letters consist of vertical and horizontal bars. No matter their thickness. https://bugzilla.redhat.com/show_bug.cgi?id=1162148 -------------------------------------------------------------------------------- ================================================================================ libdrm-2.4.58-1.fc20 (FEDORA-2014-15165) Direct Rendering Manager runtime library -------------------------------------------------------------------------------- Update Information: llvm and clang 3.4.2, libdrm 2.4.58, Mesa 10.3.3 -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 2 2014 Adam Jackson <ajax@xxxxxxxxxx> 2.4.58-1 - libdrm 2.4.58 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.4.56-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Mon Aug 4 2014 Dave Airlie <airlied@xxxxxxxxxx> 2.4.56-1 - libdrm 2.4.56 * Mon Jul 7 2014 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 2.4.54-3 - Build freedreno support on aarch64 too * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.4.54-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ llvm-3.4-10.fc20 (FEDORA-2014-15165) The Low Level Virtual Machine -------------------------------------------------------------------------------- Update Information: llvm and clang 3.4.2, libdrm 2.4.58, Mesa 10.3.3 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 24 2014 Adam Jackson <ajax@xxxxxxxxxx> 3.4-10 - llvm and clang 3.4.2 * Wed Jun 11 2014 Adam Jackson <ajax@xxxxxxxxxx> 3.4-9 - Different attempt to default to hard-float on arm (#803433) * Mon Jun 2 2014 Adam Jackson <ajax@xxxxxxxxxx> 3.4-8 - Attempt to default to hard-float on arm (#803433) * Thu May 29 2014 Adam Jackson <ajax@xxxxxxxxxx> 3.4-7 - Update to llvm 3.4.1 plus a few things from svn - Drop radeonsi patch, merged in 3.4.1 -------------------------------------------------------------------------------- ================================================================================ mesa-10.3.3-1.20141110.fc20 (FEDORA-2014-15165) Mesa graphics libraries -------------------------------------------------------------------------------- Update Information: llvm and clang 3.4.2, libdrm 2.4.58, Mesa 10.3.3 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 10 2014 Igor Gnatenko <i.gnatenko.brain@xxxxxxxxx> - 10.3.3-1.20141110 - 10.3.3 * Tue Oct 28 2014 Igor Gnatenko <i.gnatenko.brain@xxxxxxxxx> - 10.3.2-1.20141028 - 10.3.2 -------------------------------------------------------------------------------- ================================================================================ nfs-utils-1.3.0-2.4.fc20 (FEDORA-2014-15263) NFS utilities and supporting clients and daemons for the kernel NFS server -------------------------------------------------------------------------------- Update Information: commit e725def62c73b4aa269fefc4c0d96abb41927fcb Author: Steve Dickson <steved@xxxxxxxxxx> Date: Mon Nov 17 13:17:20 2014 -0500 exportfs: Do not fail on empty exports file. Commit 076dd80 introduced a regression that causes exportfs to fail when there is an empty /etc/exports file. A empty /etc/exports file is valid and should not cause exportfs to fail. -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 17 2014 Steve Dickson <steved@xxxxxxxxxx> 1.3.0-2.4 - Allow the server to start with an empty /etc/exports (bz 1164477) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1164477 - nfs server does not start with empty /etc/exports (and exports in /etc/exports.d) https://bugzilla.redhat.com/show_bug.cgi?id=1164477 -------------------------------------------------------------------------------- ================================================================================ perl-Crypt-Rijndael-1.12-1.fc20 (FEDORA-2014-15295) Crypt::CBC compliant Rijndael encryption module -------------------------------------------------------------------------------- Update Information: Updated to 1.12 -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 16 2014 Matias Kreder <mkreder@xxxxxxxxx> - 1.12-1 - Updated to 1.12 * Thu Aug 28 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.11-7 - Perl 5.20 rebuild * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.11-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.11-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163210 - perl-Crypt-Rijndael-1.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1163210 -------------------------------------------------------------------------------- ================================================================================ perl-Finance-Quote-1.35-1.fc20 (FEDORA-2014-15316) A Perl module that retrieves stock and mutual fund quotes -------------------------------------------------------------------------------- Update Information: This update, to the current upstream release, includes some fixes for existing data sources and a number of new data sources. -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 14 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 1.35-1 - Update to 1.35 - Clean up and modernize spec somewhat (can't build for EL < 7 as the module requires Mozilla::CA) * Fri Aug 29 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.20-4 - Perl 5.20 rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.20-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ php-pecl-xdebug-2.2.6-1.fc20 (FEDORA-2014-15284) PECL package for debugging PHP scripts -------------------------------------------------------------------------------- Update Information: Fri, Nov 14, 2014 - xdebug 2.2.6 Fixed bugs: * Fixed bug #1048: Can not get $GLOBAL variable by property_value on function context. * Fixed bug #1073 and #1075: Segmentation fault with internal functions calling internal functions. * Fixed bug #1085: Fixed the tracefile analyser as the format version had been bumbed. * Fixed memory leaks -------------------------------------------------------------------------------- ChangeLog: * Sun Nov 16 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.2.6-1 - Update to 2.2.6 (stable) -------------------------------------------------------------------------------- ================================================================================ pycairo-1.10.0-1.fc20 (FEDORA-2014-15326) Python bindings for the cairo library -------------------------------------------------------------------------------- Update Information: "new" upstream release -------------------------------------------------------------------------------- ChangeLog: * Sat Nov 15 2014 David Tardon <dtardon@xxxxxxxxxx> - 1.10.0-1 - "new" upstream release * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.8.10-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.8.10-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed May 21 2014 Jakub Čajka <jcajka@xxxxxxxxxx> - 1.8.10-10 - Resolves: #1079673 - Fixed build dependencies and enabled tests on ppc * Tue May 20 2014 Dan Horák <dan[at]danny.cz> - 1.8.10-9 - disable tests on big endians (#1079673) * Thu Feb 27 2014 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 1.8.10-8 - Enable xcb and xpyb (RHBZ 1045725, 1005447) - Spec cleanups - Run check -------------------------------------------------------------------------------- ================================================================================ python-django14-1.4.16-1.fc20 (FEDORA-2014-15266) A high-level Python Web framework -------------------------------------------------------------------------------- Update Information: update to latest stable release -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 17 2014 Matthias Runge <mrunge@xxxxxxxxxx> - 1.4.16-1 - update to 1.4.16 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1129950 - CVE-2014-0480 Django: reverse() can generate URLs pointing to other hosts, leading to phishing attacks https://bugzilla.redhat.com/show_bug.cgi?id=1129950 [ 2 ] Bug #1129952 - CVE-2014-0481 Django: file upload denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1129952 [ 3 ] Bug #1129954 - CVE-2014-0482 Django: RemoteUserMiddleware session hijacking https://bugzilla.redhat.com/show_bug.cgi?id=1129954 [ 4 ] Bug #1129959 - CVE-2014-0483 Django: data leakage via querystring manipulation in admin https://bugzilla.redhat.com/show_bug.cgi?id=1129959 -------------------------------------------------------------------------------- ================================================================================ python-texttable-0.8.1-4.fc20 (FEDORA-2014-15262) Python module to generate a formatted text table, using ASCII characters -------------------------------------------------------------------------------- Update Information: New Package: Python module to generate a formatted text table, using ASCII characters. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1123010 - Review Request: python-texttable - Python module to generate a formatted text table, using ASCII characters. https://bugzilla.redhat.com/show_bug.cgi?id=1123010 -------------------------------------------------------------------------------- ================================================================================ sazanami-fonts-0.20040629-23.fc20 (FEDORA-2014-15296) Sazanami Japanese TrueType fonts -------------------------------------------------------------------------------- Update Information: Rebuilt to get the proper fonts.scale with fixed xorg-x11-fonts-misc -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 4 2014 Akira TAGOH <tagoh@xxxxxxxxxx> - 0.20040629-23 - Rebuilt to get the proper fonts.scale with fixed xorg-x11-fonts-misc. (#1007493) * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.20040629-22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1007493 - shipped fonts.alias includes references to missing sazanami-times font https://bugzilla.redhat.com/show_bug.cgi?id=1007493 -------------------------------------------------------------------------------- ================================================================================ sopwith-1.8.3-2.fc20 (FEDORA-2014-15290) SDL port of the sopwith game -------------------------------------------------------------------------------- Update Information: updated to 1.8.3 (fixes #1102618) -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 17 2014 Adrian Reber <adrian@xxxxxxxx> - 1.8.3-2 - updated to 1.8.3 (fixes #1102618) - added patch for "Crash on start in single -> novice mode" (#1164516) - cleaned up spec * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.7.1-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.7.1-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1102618 - Update sopwith to version 1.8.3, please https://bugzilla.redhat.com/show_bug.cgi?id=1102618 [ 2 ] Bug #1164516 - sopwith: Crash on start in single -> novice mode https://bugzilla.redhat.com/show_bug.cgi?id=1164516 -------------------------------------------------------------------------------- ================================================================================ tilda-1.2.2-1.fc20 (FEDORA-2014-15259) A Gtk based drop down terminal for Linux and Unix -------------------------------------------------------------------------------- Update Information: - Bugfix release -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 17 2014 Johannes Lips <hannes@xxxxxxxxxxxxxxxxx> - 1.2.2-1 - update to upstream version 1.2.2 - fixed bug #1164476 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1164476 - On the first run tilda does not create necessary directories https://bugzilla.redhat.com/show_bug.cgi?id=1164476 -------------------------------------------------------------------------------- ================================================================================ wireshark-1.10.11-1.fc20 (FEDORA-2014-15244) Network traffic analyzer -------------------------------------------------------------------------------- Update Information: Ver. 1.10.11, Security fix for CVE-2014-8711, CVE-2014-8712, CVE-2014-8713, CVE-2014-8714, CVE-2014-8710 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 17 2014 Peter Hatina <phatina@xxxxxxxxxx> - 1.10.11-1 - Ver. 1.10.11 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1163581 - CVE-2014-8714 wireshark: TN5250 infinite loop (wnpa-sec-2014-23) https://bugzilla.redhat.com/show_bug.cgi?id=1163581 [ 2 ] Bug #1163582 - CVE-2014-8712 CVE-2014-8713 wireshark: NCP dissector crashes (wnpa-sec-2014-22) https://bugzilla.redhat.com/show_bug.cgi?id=1163582 [ 3 ] Bug #1163583 - CVE-2014-8711 wireshark: AMQP dissector crash (wnpa-sec-2014-21) https://bugzilla.redhat.com/show_bug.cgi?id=1163583 [ 4 ] Bug #1163584 - CVE-2014-8710 wireshark: SigComp dissector crash (wnpa-sec-2014-20) https://bugzilla.redhat.com/show_bug.cgi?id=1163584 -------------------------------------------------------------------------------- ================================================================================ xa-2.3.6-1.fc20 (FEDORA-2014-15324) 6502/65816 cross-assembler -------------------------------------------------------------------------------- Update Information: update to version 2.3.6 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 17 2014 Dan Horák <dan[at]danny.cz> - 2.3.6-1 - updated to version 2.3.6 * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.3.5-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.3.5-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sun Apr 20 2014 Dan Horák <dan[at]danny.cz> - 2.3.5-10 - spec cleanup -------------------------------------------------------------------------------- ================================================================================ xca-1.0.0-2.fc20 (FEDORA-2014-15260) Graphical X.509 certificate management tool -------------------------------------------------------------------------------- Update Information: Patch "nonstdext" avoids segfault when viewing cert with non-standard extension. https://bugzilla.redhat.com/show_bug.cgi?id=1164340 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 17 2014 Patrick Monnerat <pm@xxxxxxxxxxxxx> 1.0.0-2 - Patch "nonstdext" avoids segfault when viewing cert with non-standard extension. https://bugzilla.redhat.com/show_bug.cgi?id=1164340 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1164340 - segfault when viewing a RHEL entitlement certificate in X509V3_EXT_get v3_lib.c:15 https://bugzilla.redhat.com/show_bug.cgi?id=1164340 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test