The following Fedora 20 Security updates need testing: Age URL 75 https://admin.fedoraproject.org/updates/FEDORA-2014-11969/krb5-1.11.5-16.fc20 27 https://admin.fedoraproject.org/updates/FEDORA-2014-15371/rubygem-actionpack-4.0.0-5.fc20 26 https://admin.fedoraproject.org/updates/FEDORA-2014-15489/rubygem-sprockets-2.8.2-5.fc20 12 https://admin.fedoraproject.org/updates/FEDORA-2014-16215/pcre-8.33-8.fc20 12 https://admin.fedoraproject.org/updates/FEDORA-2014-16250/cpio-2.11-28.fc20 11 https://admin.fedoraproject.org/updates/FEDORA-2014-16350/pam-1.1.8-2.fc20 11 https://admin.fedoraproject.org/updates/FEDORA-2014-16349/jasper-1.900.1-26.fc20 11 https://admin.fedoraproject.org/updates/FEDORA-2014-16357/pyxdg-0.25-5.fc20 10 https://admin.fedoraproject.org/updates/FEDORA-2014-16459/gpgme-1.3.2-5.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16524/firebird-2.5.2.26539.0-10.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16572/links-2.8-4.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16626/qemu-1.6.2-12.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16494/mutt-1.5.23-4.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16671/unbound-1.5.1-2.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16607/bind-9.9.4-17.P2.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16546/mantis-1.2.18-1.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16667/sagemath-6.1.1-6.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16742/ctdb-2.5.4-2.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16861/tcpdump-4.5.1-3.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16845/resteasy-3.0.6-3.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16825/asterisk-11.14.2-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16838/rpm-4.11.3-2.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16869/docker-io-1.4.0-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16854/freetype-2.5.0-7.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16932/libhtp-0.5.6-2.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-16964/mpfr-3.1.2-5.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-17067/denyhosts-2.6-29.fc20.1 The following Fedora 20 Critical Path updates have yet to be approved: Age URL 12 https://admin.fedoraproject.org/updates/FEDORA-2014-16253/crda-1.1.3_2014.11.18-1.fc20 11 https://admin.fedoraproject.org/updates/FEDORA-2014-16350/pam-1.1.8-2.fc20 11 https://admin.fedoraproject.org/updates/FEDORA-2014-16367/firewalld-0.3.13-1.fc20 11 https://admin.fedoraproject.org/updates/FEDORA-2014-16357/pyxdg-0.25-5.fc20 11 https://admin.fedoraproject.org/updates/FEDORA-2014-16349/jasper-1.900.1-26.fc20 10 https://admin.fedoraproject.org/updates/FEDORA-2014-16459/gpgme-1.3.2-5.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16607/bind-9.9.4-17.P2.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16724/hicolor-icon-theme-0.14-1.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16705/ibus-1.5.9-7.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2014-16230/mesa-10.3.5-1.20141207.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16838/rpm-4.11.3-2.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16808/poppler-0.24.3-5.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16885/sqlite-3.8.7.4-1.fc20,spatialite-tools-4.1.1-9.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16854/freetype-2.5.0-7.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16810/ppp-2.4.5-35.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16858/perl-Filter-1.51-1.fc20 2 https://admin.fedoraproject.org/updates/FEDORA-2014-16964/mpfr-3.1.2-5.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-17064/dbus-1.6.28-2.fc20 The following builds have been pushed to Fedora 20 updates-testing dbus-1.6.28-2.fc20 denyhosts-2.6-29.fc20.1 gfal2-2.7.8-3.fc20 gnulib-0-13.20141214git.fc20 goldendict-1.5-0.6.RC2.fc20 osgearth-2.6-3.fc20 php-symfony-2.5.8-1.fc20 python-factory-boy-2.4.1-2.fc20 qhexedit2-0.6.3-2.20141212svnr41.fc20 qtspell-0.5.0-2.fc20 rng-tools-5-4.fc20 the_silver_searcher-0.27.0-1.fc20 vim-omnicppcomplete-0.41-3.fc20 Details about builds: ================================================================================ dbus-1.6.28-2.fc20 (FEDORA-2014-17064) D-BUS message bus -------------------------------------------------------------------------------- Update Information: Several fixes for packaging bugs * Remove obsolete dbus.target.wants (#1084087) * Use --with-tests to conditionalize test dependencies * Tighten subpackage dependencies by using %%{?_isa} * Add some more documentation from the upstream tarball * Use macroized systemd scriptlets (#850083) * Correct license description for multiple licenses * fix license handling * BR systemd-devel * Adapt to unversioned docdirs; don't ship all docs in main package. * Fix bogus dates in %changelog and tabs vs spaces warning. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 4 2014 David King <amigadave@xxxxxxxxxxxxx> - 1:1.6.28-2 - Remove obsolete dbus.target.wants (#1084087) - Use --with-tests to conditionalize test dependencies - Tighten subpackage dependencies by using %{?_isa} - Add some more documentation from the upstream tarball - Use macroized systemd scriptlets (#850083) - Correct license description for multiple licenses - fix license handling - BR systemd-devel - Adapt to unversioned docdirs; don't ship all docs in main package. - Fix bogus dates in %changelog and tabs vs spaces warning. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1084087 - dbus provides unused files https://bugzilla.redhat.com/show_bug.cgi?id=1084087 [ 2 ] Bug #850083 - Introduce new systemd-rpm macros in dbus spec file https://bugzilla.redhat.com/show_bug.cgi?id=850083 -------------------------------------------------------------------------------- ================================================================================ denyhosts-2.6-29.fc20.1 (FEDORA-2014-17067) A script to help thwart ssh server attacks -------------------------------------------------------------------------------- Update Information: Fix security bug -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 14 2014 Till Maas <opensource@xxxxxxxxx> - 2.6-29.1 - Add patch from master for CVE-2013-6890 (rhbz #1045983) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1045982 - CVE-2013-6890 denyhosts: remote denial of ssh service https://bugzilla.redhat.com/show_bug.cgi?id=1045982 -------------------------------------------------------------------------------- ================================================================================ gfal2-2.7.8-3.fc20 (FEDORA-2014-16659) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: - Patching a bug in a call to gfal2_set_error that causes a segfault - Moving a buffer to heap to avoid stack overflows -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 15 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.7.8-3 - Applied patch moving buffer to heap to avoid SIGSEGV when the stack size is limited * Tue Dec 2 2014 Alejandro Alvarez Ayllon <aalvarez at cern.ch> - 2.7.8-2 - Patched a bug in a call to gfal2_set_error -------------------------------------------------------------------------------- ================================================================================ gnulib-0-13.20141214git.fc20 (FEDORA-2014-17076) GNU Portability Library -------------------------------------------------------------------------------- Update Information: UPDATE ON 20141214 -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 14 2014 Mosaab Alzoubi <moceap@xxxxxxxxxxx> - 0-13.20141214git - Update on 20141214. -------------------------------------------------------------------------------- ================================================================================ goldendict-1.5-0.6.RC2.fc20 (FEDORA-2014-17065) A feature-rich dictionary lookup program -------------------------------------------------------------------------------- Update Information: Update on 20141214 UPDATE on 20141214 -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 14 2014 Ville Skyttä <ville.skytta@xxxxxx> - 1.5-0.6.RC1 - Use system qtsingleapplication instead of bundled one * Sun Dec 14 2014 Mosaab Alzoubi <moceap@xxxxxxxxxxx> - 1.5-0.5.RC2 - Update on 20141214 - Add libtiff-devel as BR - Add eb-devel as BR - Add -docs subpackage * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.5-0.4.RC1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.5-0.3.RC1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1088035 - Use system qtsingleapplication instead of bundled one https://bugzilla.redhat.com/show_bug.cgi?id=1088035 [ 2 ] Bug #1074326 - [abrt] goldendict: g_malloc0(): goldendict killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1074326 [ 3 ] Bug #1087725 - [abrt] goldendict: QString::free(): goldendict killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=1087725 -------------------------------------------------------------------------------- ================================================================================ osgearth-2.6-3.fc20 (FEDORA-2014-17083) Dynamic map generation toolkit for OpenSceneGraph -------------------------------------------------------------------------------- Update Information: Initial package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1173378 - Review Request: osgearth - Dynamic map generation toolkit for OpenSceneGraph https://bugzilla.redhat.com/show_bug.cgi?id=1173378 -------------------------------------------------------------------------------- ================================================================================ php-symfony-2.5.8-1.fc20 (FEDORA-2014-17045) PHP framework for web projects -------------------------------------------------------------------------------- Update Information: Release notes: http://symfony.com/blog/symfony-2-5-8-released -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 15 2014 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 2.5.8-1 - Update to 2.5.8 -------------------------------------------------------------------------------- ================================================================================ python-factory-boy-2.4.1-2.fc20 (FEDORA-2014-17037) A versatile test fixtures replacement based on thoughtbot's factory_girl -------------------------------------------------------------------------------- Update Information: A versatile test fixtures replacement based on thoughtbot's factory_girl -------------------------------------------------------------------------------- References: [ 1 ] Bug #1170159 - Review Request: python-factory-boy - A versatile test fixtures replacement based on thoughtbot's factory_girl https://bugzilla.redhat.com/show_bug.cgi?id=1170159 -------------------------------------------------------------------------------- ================================================================================ qhexedit2-0.6.3-2.20141212svnr41.fc20 (FEDORA-2014-17043) Binary Editor for Qt -------------------------------------------------------------------------------- Update Information: Initial package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1128393 - Review Request: qhexedit2 - Binary Editor for Qt https://bugzilla.redhat.com/show_bug.cgi?id=1128393 -------------------------------------------------------------------------------- ================================================================================ qtspell-0.5.0-2.fc20 (FEDORA-2014-17073) Spell checking for Qt text widgets -------------------------------------------------------------------------------- Update Information: Initial package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1173373 - Review Request: qtspell - Spell checking for Qt text widgets https://bugzilla.redhat.com/show_bug.cgi?id=1173373 -------------------------------------------------------------------------------- ================================================================================ rng-tools-5-4.fc20 (FEDORA-2014-17066) Random number generator related utilities -------------------------------------------------------------------------------- Update Information: Update to release version 5 (Support RDRAND capable systems that don't have AES-NI, Don't use fixed AES key for data reduction, Fix RDRAND data reduction, Enable RDSEED instruction, spelling fixes), exit cleanly on error, use hardening flags. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 10 2014 Zbigniew Jędrzejewski-Szmek <zbyszek@xxxxxxxxx> - 5-4 - Build with hardening flags (#1051344) - Fail nicely if no hardware generator is found (#892178) - Drop unneeded dependency * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed Apr 23 2014 Luke Macken <lmacken@xxxxxxxxxx> - 5-1 - Update to release version 5. - Remove rng-tools-man.patch -------------------------------------------------------------------------------- ================================================================================ the_silver_searcher-0.27.0-1.fc20 (FEDORA-2014-17072) Super-fast text searching tool (ag) -------------------------------------------------------------------------------- Update Information: update to 0.27.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 15 2014 Kenjiro Nakayama <nakayamakenjiro@xxxxxxxxx> - 0.27.0-1 - update to 0.27.0 -------------------------------------------------------------------------------- ================================================================================ vim-omnicppcomplete-0.41-3.fc20 (FEDORA-2014-17078) vim c++ completion omnifunc with a ctags database -------------------------------------------------------------------------------- Update Information: First import into f20 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
