The following Fedora 20 Security updates need testing: Age URL 79 https://admin.fedoraproject.org/updates/FEDORA-2014-11969/krb5-1.11.5-16.fc20 31 https://admin.fedoraproject.org/updates/FEDORA-2014-15371/rubygem-actionpack-4.0.0-5.fc20 30 https://admin.fedoraproject.org/updates/FEDORA-2014-15489/rubygem-sprockets-2.8.2-5.fc20 17 https://admin.fedoraproject.org/updates/FEDORA-2014-16250/cpio-2.11-28.fc20 15 https://admin.fedoraproject.org/updates/FEDORA-2014-16357/pyxdg-0.25-5.fc20 14 https://admin.fedoraproject.org/updates/FEDORA-2014-16459/gpgme-1.3.2-5.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2014-16572/links-2.8-4.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2014-16626/qemu-1.6.2-12.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2014-16494/mutt-1.5.23-4.fc20 7 https://admin.fedoraproject.org/updates/FEDORA-2014-16845/resteasy-3.0.6-3.fc20 7 https://admin.fedoraproject.org/updates/FEDORA-2014-16825/asterisk-11.14.2-1.fc20 7 https://admin.fedoraproject.org/updates/FEDORA-2014-16869/docker-io-1.4.0-1.fc20 7 https://admin.fedoraproject.org/updates/FEDORA-2014-16854/freetype-2.5.0-7.fc20 7 https://admin.fedoraproject.org/updates/FEDORA-2014-16932/libhtp-0.5.6-2.fc20 7 https://admin.fedoraproject.org/updates/FEDORA-2014-16838/rpm-4.11.3-2.fc20 6 https://admin.fedoraproject.org/updates/FEDORA-2014-16964/mpfr-3.1.2-5.fc20 4 https://admin.fedoraproject.org/updates/FEDORA-2014-17067/denyhosts-2.6-29.fc20.1 3 https://admin.fedoraproject.org/updates/FEDORA-2014-17107/ettercap-0.8.1-2.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16530/nss-util-3.17.3-1.fc20,nss-3.17.3-2.fc20,nss-softokn-3.17.3-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-17153/httpd-2.4.10-2.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-17219/seamonkey-2.31-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-17222/subversion-1.8.11-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-16349/jasper-1.900.1-27.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-17245/mailx-12.5-11.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-17228/mediawiki-1.23.8-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-17229/php-5.5.20-2.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-17272/ca-certificates-2014.2.2-1.0.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-17274/mingw-jasper-1.900.1-25.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-17303/libssh-0.6.4-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-17415/thermostat-1.0.6-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2014-17361/ntp-4.2.6p5-19.fc20 The following Fedora 20 Critical Path updates have yet to be approved: Age URL 7 https://admin.fedoraproject.org/updates/FEDORA-2014-16810/ppp-2.4.5-35.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-16530/nss-util-3.17.3-1.fc20,nss-3.17.3-2.fc20,nss-softokn-3.17.3-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-17287/btrfs-progs-3.17.3-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-16705/ibus-1.5.9-8.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2014-16349/jasper-1.900.1-27.fc20 The following builds have been pushed to Fedora 20 updates-testing anyremote-6.5-1.fc20 freerouting-1.2.43-2.20140513git265f040.fc20 iperf3-3.0.10-1.fc20 nodejs-camel-case-1.0.2-1.fc20 nodejs-change-case-2.1.5-1.fc20 nodejs-constant-case-1.0.0-1.fc20 nodejs-dot-case-1.0.1-1.fc20 nodejs-is-lower-case-1.0.0-1.fc20 nodejs-is-upper-case-1.0.1-1.fc20 nodejs-param-case-1.0.1-1.fc20 nodejs-pascal-case-1.0.0-1.fc20 nodejs-path-case-1.0.1-1.fc20 nodejs-snake-case-1.0.1-1.fc20 nodejs-stream-combiner-0.2.1-1.fc20 nodejs-title-case-1.0.1-1.fc20 root-5.34.24-1.fc20 thermostat-1.0.6-1.fc20 xscreensaver-5.32-3.fc20 zabbix-2.0.14-1.fc20 Details about builds: ================================================================================ anyremote-6.5-1.fc20 (FEDORA-2014-17409) Remote control through bluetooth or Wi-Fi connection -------------------------------------------------------------------------------- Update Information: v6.5 -------------------------------------------------------------------------------- ChangeLog: * Sat Dec 20 2014 Mikhail Fedotov <anyremote at mail.ru> - 6.5 - Avahi support. -------------------------------------------------------------------------------- ================================================================================ freerouting-1.2.43-2.20140513git265f040.fc20 (FEDORA-2014-17393) Circuit Board Routing Tool -------------------------------------------------------------------------------- Update Information: Add the package -------------------------------------------------------------------------------- ================================================================================ iperf3-3.0.10-1.fc20 (FEDORA-2014-17399) Measurement tool for TCP/UDP bandwidth performance -------------------------------------------------------------------------------- Update Information: update to 3.0.10 -------------------------------------------------------------------------------- ChangeLog: * Sat Dec 20 2014 Susant Sahani <ssahani@xxxxxxxxxx> 3.0.10-1 - Update to 3.0.10 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1176274 - iperf3-3.0.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1176274 -------------------------------------------------------------------------------- ================================================================================ nodejs-camel-case-1.0.2-1.fc20 (FEDORA-2014-17417) Camel case a string -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171306 - Review Request: nodejs-camel-case - Camel case a string https://bugzilla.redhat.com/show_bug.cgi?id=1171306 -------------------------------------------------------------------------------- ================================================================================ nodejs-change-case-2.1.5-1.fc20 (FEDORA-2014-17408) Convert a string between camelCase, PascalCase, Title Case, snake_case and more -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171350 - Review Request: nodejs-change-case - Convert a string between camelCase, PascalCase, Title Case, snake_case and more https://bugzilla.redhat.com/show_bug.cgi?id=1171350 -------------------------------------------------------------------------------- ================================================================================ nodejs-constant-case-1.0.0-1.fc20 (FEDORA-2014-17423) Constant case a string -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171345 - Review Request: nodejs-constant-case - Constant case a string https://bugzilla.redhat.com/show_bug.cgi?id=1171345 -------------------------------------------------------------------------------- ================================================================================ nodejs-dot-case-1.0.1-1.fc20 (FEDORA-2014-17431) Dot case a string -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171341 - Review Request: nodejs-dot-case - Dot case a string https://bugzilla.redhat.com/show_bug.cgi?id=1171341 -------------------------------------------------------------------------------- ================================================================================ nodejs-is-lower-case-1.0.0-1.fc20 (FEDORA-2014-17421) Check if a string is lower cased -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171338 - Review Request: nodejs-is-lower-case - Check if a string is lower cased https://bugzilla.redhat.com/show_bug.cgi?id=1171338 -------------------------------------------------------------------------------- ================================================================================ nodejs-is-upper-case-1.0.1-1.fc20 (FEDORA-2014-17430) Check if a string is upper cased -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171336 - Review Request: nodejs-is-upper-case - Check if a string is upper cased https://bugzilla.redhat.com/show_bug.cgi?id=1171336 -------------------------------------------------------------------------------- ================================================================================ nodejs-param-case-1.0.1-1.fc20 (FEDORA-2014-17407) Param case a string -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171335 - Review Request: nodejs-param-case - Param case a string https://bugzilla.redhat.com/show_bug.cgi?id=1171335 -------------------------------------------------------------------------------- ================================================================================ nodejs-pascal-case-1.0.0-1.fc20 (FEDORA-2014-17385) Pascal case a string -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171334 - Review Request: nodejs-pascal-case - Pascal case a string https://bugzilla.redhat.com/show_bug.cgi?id=1171334 -------------------------------------------------------------------------------- ================================================================================ nodejs-path-case-1.0.1-1.fc20 (FEDORA-2014-17414) Path case a string -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171327 - Review Request: nodejs-path-case - Path case a string https://bugzilla.redhat.com/show_bug.cgi?id=1171327 -------------------------------------------------------------------------------- ================================================================================ nodejs-snake-case-1.0.1-1.fc20 (FEDORA-2014-17419) Snake case a string -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171314 - Review Request: nodejs-snake-case - Snake case a string https://bugzilla.redhat.com/show_bug.cgi?id=1171314 -------------------------------------------------------------------------------- ================================================================================ nodejs-stream-combiner-0.2.1-1.fc20 (FEDORA-2014-17410) Turn a pipeline into a single stream -------------------------------------------------------------------------------- Update Information: Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1172972 - Review Request: nodejs-stream-combiner - Turn a pipeline into a single stream https://bugzilla.redhat.com/show_bug.cgi?id=1172972 -------------------------------------------------------------------------------- ================================================================================ nodejs-title-case-1.0.1-1.fc20 (FEDORA-2014-17386) Title case a string -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171320 - Review Request: nodejs-title-case - Title case a string https://bugzilla.redhat.com/show_bug.cgi?id=1171320 -------------------------------------------------------------------------------- ================================================================================ root-5.34.24-1.fc20 (FEDORA-2014-17424) Numerical data analysis framework -------------------------------------------------------------------------------- Update Information: http://root.cern.ch/drupal/content/root-version-v5-34-00-patch-release-notes\r\n -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 19 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 5.34.24-1 - Update to 5.34.24 - Drop patch root-bsd-misc.patch -------------------------------------------------------------------------------- ================================================================================ thermostat-1.0.6-1.fc20 (FEDORA-2014-17415) A monitoring and serviceability tool for OpenJDK -------------------------------------------------------------------------------- Update Information: Update to latest maintenance release. It was discovered that, in certain configurations, the Thermostat agent disclosed JMX management URLs of all local Java virtual machines to any local user. A local, unprivileged user could use this flaw to escalate their privileges on the system. (CVE-2014-8120) -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 18 2014 Elliott Baron <ebaron@xxxxxxxxxx> - 1.0.6-1 - Update to latest maintenance release. - Resolves: CVE-2014-8120 * Mon Oct 13 2014 Severin Gehwolf <sgehwolf@xxxxxxxxxx> - 1.0.4-4.5 - Use /etc/alternatives/java_sdk_openjdk as jdk_base. * Mon Oct 13 2014 Severin Gehwolf <sgehwolf@xxxxxxxxxx> - 1.0.4-4.4 - Remove obsolete requires on gnome-icon-theme. * Thu Sep 4 2014 Severin Gehwolf <sgehwolf@xxxxxxxxxx> - 1.0.4-4.3 - Fix hawtjni-runtime symlink and use OpenJDK 8 in scripts, R/BRs. * Tue Sep 2 2014 Severin Gehwolf <sgehwolf@xxxxxxxxxx> - 1.0.4-4.2 - Rebuild for updated jcommon/jfreechart versions. * Tue Aug 19 2014 Severin Gehwolf <sgehwolf@xxxxxxxxxx> - 1.0.4-4.1 - Rebuild for updated httpcomponents-client version (v4.3.5). * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Tue Jun 10 2014 Severin Gehwolf <sgehwolf@xxxxxxxxxx> - 1.0.4-3 - Drop manual requires in favour of mvn()-style auto-requires. - Switch to mvn()-style BRs. - Use io.netty:netty over org.jboss.netty:netty in order to keep thermostat installable. * Fri Jun 6 2014 Severin Gehwolf <sgehwolf@xxxxxxxxxx> - 1.0.4-2 - Rebuild for updated httpcomonents-client (v4.3.4) and apache-commons-beanutils (v1.9.2) builds. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1168977 - CVE-2014-8120 thermostat: local JMX URL disclosure https://bugzilla.redhat.com/show_bug.cgi?id=1168977 -------------------------------------------------------------------------------- ================================================================================ xscreensaver-5.32-3.fc20 (FEDORA-2014-17428) X screen saver and locker -------------------------------------------------------------------------------- Update Information: Make noof hack really show image on screensaver mode. -------------------------------------------------------------------------------- ChangeLog: * Sat Dec 20 2014 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1:5.32-3 - Enable double buffer on noof (Ubuntu bug 1390304) -------------------------------------------------------------------------------- ================================================================================ zabbix-2.0.14-1.fc20 (FEDORA-2014-17387) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information: http://www.zabbix.com/rn2.0.14.php -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 17 2014 Volker Fröhlich <volker27@xxxxxx> - 2.0.14-1 - New upstream release -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test