The following Fedora 20 Security updates need testing: Age URL 92 https://admin.fedoraproject.org/updates/FEDORA-2014-11969/krb5-1.11.5-16.fc20 45 https://admin.fedoraproject.org/updates/FEDORA-2014-15371/rubygem-actionpack-4.0.0-5.fc20 43 https://admin.fedoraproject.org/updates/FEDORA-2014-15489/rubygem-sprockets-2.8.2-5.fc20 30 https://admin.fedoraproject.org/updates/FEDORA-2014-16250/cpio-2.11-28.fc20 22 https://admin.fedoraproject.org/updates/FEDORA-2014-16494/mutt-1.5.23-4.fc20 21 https://admin.fedoraproject.org/updates/FEDORA-2014-16845/resteasy-3.0.6-3.fc20 21 https://admin.fedoraproject.org/updates/FEDORA-2014-16825/asterisk-11.14.2-1.fc20 21 https://admin.fedoraproject.org/updates/FEDORA-2014-16869/docker-io-1.4.0-1.fc20 21 https://admin.fedoraproject.org/updates/FEDORA-2014-16932/libhtp-0.5.6-2.fc20 19 https://admin.fedoraproject.org/updates/FEDORA-2014-16964/mpfr-3.1.2-5.fc20 16 https://admin.fedoraproject.org/updates/FEDORA-2014-16530/nss-util-3.17.3-1.fc20,nss-3.17.3-2.fc20,nss-softokn-3.17.3-1.fc20 16 https://admin.fedoraproject.org/updates/FEDORA-2014-17153/httpd-2.4.10-2.fc20 16 https://admin.fedoraproject.org/updates/FEDORA-2014-17222/subversion-1.8.11-1.fc20 15 https://admin.fedoraproject.org/updates/FEDORA-2014-16349/jasper-1.900.1-27.fc20 15 https://admin.fedoraproject.org/updates/FEDORA-2014-17272/ca-certificates-2014.2.2-1.0.fc20 13 https://admin.fedoraproject.org/updates/FEDORA-2014-17415/thermostat-1.0.6-1.fc20 12 https://admin.fedoraproject.org/updates/FEDORA-2014-17089/aeskulap-0.2.2-0.20beta1.fc20,orthanc-0.8.5-2.fc20,dcmtk-3.6.1-1.fc20 12 https://admin.fedoraproject.org/updates/FEDORA-2014-17461/roundcubemail-1.0.4-2.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2014-17559/mapserver-6.2.2-1.fc20 7 https://admin.fedoraproject.org/updates/FEDORA-2014-17641/dokuwiki-0-0.23.20140929b.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2015-0072/drupal6-flag-2.1-3.fc20 The following Fedora 20 Critical Path updates have yet to be approved: Age URL 11 https://admin.fedoraproject.org/updates/FEDORA-2014-17528/xorg-x11-drv-synaptics-1.7.7-1.fc20 3 https://admin.fedoraproject.org/updates/FEDORA-2014-17748/kdelibs-4.14.3-8.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2015-0082/btrfs-progs-3.18-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2015-0069/gawk-4.1.0-4.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2015-0086/perl-Filter-1.53-1.fc20 The following builds have been pushed to Fedora 20 updates-testing btrfs-progs-3.18-1.fc20 ctstream-23-1.fc20 devscripts-2.15.1-1.fc20 drupal6-flag-2.1-3.fc20 gawk-4.1.0-4.fc20 gnurobbo-0.66-6.20141028svn412.fc20 golang-github-Sirupsen-logrus-0.6.2-1.fc20 golang-github-docker-libtrust-0-0.2.git6b78349.fc20 jetring-0.21-1.fc20 mingw-crt-3.3.0-2.fc20 mingw-headers-3.3.0-2.fc20 nodejs-requirejs-2.1.11-3.fc20 nordugrid-arc-4.2.0-4.fc20 oniguruma-5.9.6-1.fc20 otter-browser-0.9.05-0.1.beta5gitd998eb4.fc20 perl-DB_File-1.835-1.fc20 perl-Filter-1.53-1.fc20 photocollage-1.2.1-1.fc20 python-django-ckeditor-4.4.7-1.fc20 python-nose-parameterized-0.3.5-1.fc20 qt5-qtconnectivity-5.4.0-2.fc20 scidavis-1.D8-7.fc20 sinfo-0.0.48-1.fc20 torrent-file-editor-0.1.0-3.fc20 Details about builds: ================================================================================ btrfs-progs-3.18-1.fc20 (FEDORA-2015-0082) Userspace programs for btrfs -------------------------------------------------------------------------------- Update Information: New upstream release\nNew upstream release -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 Eric Sandeen <sandeen@xxxxxxxxxx> 3.18-1 - New upstream release * Fri Dec 5 2014 Eric Sandeen <sandeen@xxxxxxxxxx> 3.17.3-1 - New upstream release * Fri Nov 21 2014 Eric Sandeen <sandeen@xxxxxxxxxx> 3.17.2-1 - New upstream release -------------------------------------------------------------------------------- ================================================================================ ctstream-23-1.fc20 (FEDORA-2015-0094) Get URLs of Czech Television video streams -------------------------------------------------------------------------------- Update Information: This release adapts to server changes effective since 2014-12-18. Please note that RTMP stream does not work.\nAdapt to changes in SMIL URL generator definition as needed since beginning of December 2014 and support ct24 portal links -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 Petr Pisar <ppisar@xxxxxxxxxx> - 23-1 - Version 23 bump * Wed Dec 17 2014 Petr Šabata <contyk@xxxxxxxxxx> - 22-1 - Version 22 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1176864 - ctstream-23 is available https://bugzilla.redhat.com/show_bug.cgi?id=1176864 [ 2 ] Bug #1175143 - ctstream-22 is available https://bugzilla.redhat.com/show_bug.cgi?id=1175143 -------------------------------------------------------------------------------- ================================================================================ devscripts-2.15.1-1.fc20 (FEDORA-2015-0096) Scripts for Debian Package maintainers -------------------------------------------------------------------------------- Update Information: Update to version 2.15.1, see http://metadata.ftp-master.debian.org/changelogs//main/d/devscripts/devscripts_2.15.1_changelog for details. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 Sandro Mani <manisandro@xxxxxxxxx> - 2.15.1-1 - Updatet to 2.15.1 -------------------------------------------------------------------------------- ================================================================================ drupal6-flag-2.1-3.fc20 (FEDORA-2015-0072) Create customized flags that users can set on content -------------------------------------------------------------------------------- Update Information: CVE-2014-3453\r\n\r\n* https://access.redhat.com/security/cve/CVE-2014-3453\r\n* http://www.openwall.com/lists/oss-security/2014/05/12/2 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 31 2014 Shawn Iwinski <shawn.iwinski@xxxxxxxxx> - 2.1-3 - CVE-2014-3453 (BZ #1096604, #1096607) - Spec cleanup - %license usage * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1096604 - CVE-2014-3453 drupal6-flag: code execution flaw in flag importer https://bugzilla.redhat.com/show_bug.cgi?id=1096604 -------------------------------------------------------------------------------- ================================================================================ gawk-4.1.0-4.fc20 (FEDORA-2015-0069) The GNU version of the awk text processing utility -------------------------------------------------------------------------------- Update Information: Change build dependency to bison, fix make check -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 jchaloup <jchaloup@xxxxxxxxxx> - 4.1.0-4 - Change build dependency to bison, fix make check resolves: #1176993 resolves: #1177001 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1176993 - gawk spec file %check rule is incorrect https://bugzilla.redhat.com/show_bug.cgi?id=1176993 [ 2 ] Bug #1177001 - gawk is being built with byacc instead of bison https://bugzilla.redhat.com/show_bug.cgi?id=1177001 -------------------------------------------------------------------------------- ================================================================================ gnurobbo-0.66-6.20141028svn412.fc20 (FEDORA-2015-0074) Port of an once famous game named Robbo from 1989 -------------------------------------------------------------------------------- Update Information: * Adding gnurobbo-tronic free skins to requires so that the game works out of the box after the non-free data removal\r\n* Removing original levels as these are very probably also non-free\r\n\r\n -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 Jaromir Capik <jcapik@xxxxxxxxxx> - 0.66-6.20141028svn412 - Removing original levels to avoid distributing possibly illegal content (#1157664) * Fri Jan 2 2015 Jaromir Capik <jcapik@xxxxxxxxxx> - 0.66-5.20141028svn412 - R: gnurobbo-tronic as it seems to be the only legal skin now (#1171461) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171461 - gnurobbo should depend on gnurobbo-tronic https://bugzilla.redhat.com/show_bug.cgi?id=1171461 -------------------------------------------------------------------------------- ================================================================================ golang-github-Sirupsen-logrus-0.6.2-1.fc20 (FEDORA-2015-0102) Structured logger for Go -------------------------------------------------------------------------------- Update Information: Update to 0.6.2 -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0.6.2-1 - Update to 0.6.2 related: #1158670 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1158670 - Review Request: golang-github-Sirupsen-logrus - Structured logger for Go https://bugzilla.redhat.com/show_bug.cgi?id=1158670 -------------------------------------------------------------------------------- ================================================================================ golang-github-docker-libtrust-0-0.2.git6b78349.fc20 (FEDORA-2015-0079) Library for managing authentication and authorization -------------------------------------------------------------------------------- Update Information: update to latest upstream master -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 17 2014 Lokesh Mandvekar <lsm5@xxxxxxxxxxxxxxxxx> - 0-0.2.git6b78349 - update to latest upstream master -------------------------------------------------------------------------------- ================================================================================ jetring-0.21-1.fc20 (FEDORA-2015-0051) GPG keyring maintenance using changesets -------------------------------------------------------------------------------- Update Information: Update to version 0.21, see http://metadata.ftp-master.debian.org/changelogs//main/j/jetring/jetring_0.21_changelog dor details. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 Sandro Mani <manisandro@xxxxxxxxx> - 0.21-1 - Update to 0.21 * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.20-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ mingw-crt-3.3.0-2.fc20 (FEDORA-2015-0058) MinGW Windows cross-compiler runtime -------------------------------------------------------------------------------- Update Information: Backported various commits which are needed to get the latest wine-gecko built -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 31 2014 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 3.3.0-2 - Add 32bit wintrust.a import library as it's needed by mingw-wine-gecko - Make sure CLSID_InternetSecurityManager is in libuuid.a as it's needed by mingw-wine-gecko -------------------------------------------------------------------------------- ================================================================================ mingw-headers-3.3.0-2.fc20 (FEDORA-2015-0058) Win32/Win64 header files -------------------------------------------------------------------------------- Update Information: Backported various commits which are needed to get the latest wine-gecko built -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 31 2014 Erik van Pienbroek <epienbro@xxxxxxxxxxxxxxxxx> - 3.3.0-2 - Backport various upstream commits which are required to build the most recent mingw-wine-gecko and mingw-angleproject -------------------------------------------------------------------------------- ================================================================================ nodejs-requirejs-2.1.11-3.fc20 (FEDORA-2015-0108) Node.js adapter for RequireJS, for loading AMD modules -------------------------------------------------------------------------------- Update Information: add link to /usr/bin/r.js -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 Jamie Nguyen <jamielinux@xxxxxxxxxxxxxxxxx> - 2.1.11-3 - add link to /usr/bin/r.js * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.1.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1172290 - the r.js script is not executable and not in the default PATH https://bugzilla.redhat.com/show_bug.cgi?id=1172290 -------------------------------------------------------------------------------- ================================================================================ nordugrid-arc-4.2.0-4.fc20 (FEDORA-2015-0053) Advanced Resource Connector Grid Middleware -------------------------------------------------------------------------------- Update Information: Backport fix for broken sed statement in configure.ac\r\nFixes compilation issues with globus-io >= 10.\r\n -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 22 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 4.2.0-4 - Backport fix for broken sed statement in configure.ac * Sat Aug 23 2014 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 4.2.0-3 - Enable xmlsec1 support for EPEL 7 * Thu Aug 21 2014 Kevin Fenzi <kevin@xxxxxxxxx> - 4.2.0-2 - Rebuild for rpm bug 1131960 -------------------------------------------------------------------------------- ================================================================================ oniguruma-5.9.6-1.fc20 (FEDORA-2015-0060) Regular expressions library -------------------------------------------------------------------------------- Update Information: New version 5.9.6 is released. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 <mtasaka@xxxxxxxxxxxxxxxxx> - 5.9.6-1 - 5.9.6 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 5.9.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 5.9.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ otter-browser-0.9.05-0.1.beta5gitd998eb4.fc20 (FEDORA-2015-0057) Web browser controlled by the user, not vice-versa -------------------------------------------------------------------------------- Update Information: Update to 0.9.05-01.beta5 -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 1 2015 Martin Gansser <martinkg@xxxxxxxxxxxxxxxxx> - 0.9.05-0.1.beta5gitd998eb4 - Update to 0.9.05-01.beta5 - added BR qt5-qtmultimedia-devel -------------------------------------------------------------------------------- ================================================================================ perl-DB_File-1.835-1.fc20 (FEDORA-2015-0080) Perl5 access to Berkeley DB version 1.x -------------------------------------------------------------------------------- Update Information: This release fixes some compiler warnings. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 Petr Pisar <ppisar@xxxxxxxxxx> - 1.835-1 - 1.835 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1176932 - perl-DB_File-1.835 is available https://bugzilla.redhat.com/show_bug.cgi?id=1176932 -------------------------------------------------------------------------------- ================================================================================ perl-Filter-1.53-1.fc20 (FEDORA-2015-0086) Perl source filters -------------------------------------------------------------------------------- Update Information: This release fixes Filter::Util::Call regression from 1.50 when filter_add() got reference to array or hash. The regression broken Switch modue. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 Petr Pisar <ppisar@xxxxxxxxxx> - 1:1.53-1 - 1.53 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1176933 - perl-Filter-1.53 is available https://bugzilla.redhat.com/show_bug.cgi?id=1176933 -------------------------------------------------------------------------------- ================================================================================ photocollage-1.2.1-1.fc20 (FEDORA-2015-0049) Graphical tool to make photo collage posters -------------------------------------------------------------------------------- Update Information: Update to new upstream version\nFix outdated screenshot\\nUpdate to new upstream version -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 1 2015 Adrien Vergé <adrienverge@xxxxxxxxx> - 1.2.1-1 - Update to new upstream version * Wed Dec 31 2014 Adrien Vergé <adrienverge@xxxxxxxxx> - 1.2.0-2 - Fix outdated screenshot * Tue Dec 30 2014 Adrien Vergé <adrienverge@xxxxxxxxx> - 1.2.0-1 - Update to new upstream version -------------------------------------------------------------------------------- ================================================================================ python-django-ckeditor-4.4.7-1.fc20 (FEDORA-2015-0087) Django admin CKEditor integration -------------------------------------------------------------------------------- Update Information: Update to new version -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 1 2015 Eduardo Echeverria <echevemaster@xxxxxxxxx> - 4.4.7-1 - Update to new version * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 4.0.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-nose-parameterized-0.3.5-1.fc20 (FEDORA-2015-0055) Decorator for parameterized testing with Nose -------------------------------------------------------------------------------- Update Information: Update to new upstream version -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 1 2015 Eduardo Echeverria <echevemaster@xxxxxxxxx> 0.3.5-1 - Update to new upstream version - removed unneeded patch, six already not a bundled library anymore * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.3.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed May 28 2014 Kalev Lember <kalevlember@xxxxxxxxx> - 0.3.3-3 - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 -------------------------------------------------------------------------------- ================================================================================ qt5-qtconnectivity-5.4.0-2.fc20 (FEDORA-2015-0105) Qt5 - Connectivity components -------------------------------------------------------------------------------- Update Information: fix big endian builds (s390, ppc) -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 Dan Horák <dan[at]danny.cz> 5.4.0-2 - include the bswap patch in F-20 and F-21 builds too -------------------------------------------------------------------------------- ================================================================================ scidavis-1.D8-7.fc20 (FEDORA-2015-0097) Application for Scientific Data Analysis and Visualization -------------------------------------------------------------------------------- Update Information: added patch to fix http://sourceforge.net/p/scidavis/svn/1458/ -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 Christian Dersch <lupinix@xxxxxxxxxxxxxxxxx> - 1.D8-7 - added patch to fix http://sourceforge.net/p/scidavis/svn/1458/ -------------------------------------------------------------------------------- ================================================================================ sinfo-0.0.48-1.fc20 (FEDORA-2015-0050) Show an overview of the available computers an their current load -------------------------------------------------------------------------------- Update Information: updated to 0.0.48 version -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 2 2015 Eduardo Echeverria <echevemaster@xxxxxxxxx> - 0.0.48-1 - no needed sinfo-0.0.47-boost_mt.patch anymore - updated to 0.0.48 version * removed some warnings from newer g++s * changed configure to locate boost by AX_BOOST_BASE * many changes to make cppcheck more happy * updated for newer boost libraries i.e. no -mt any more * removed bashisms in scripts * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.0.47-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.0.47-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri May 23 2014 David Tardon <dtardon@xxxxxxxxxx> - 0.0.47-6 - rebuild for boost 1.55.0 -------------------------------------------------------------------------------- ================================================================================ torrent-file-editor-0.1.0-3.fc20 (FEDORA-2015-0083) Qt based GUI tool designed to create and edit .torrent files -------------------------------------------------------------------------------- Update Information: a new package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1176307 - Review Request: torrent-file-editor - Qt based GUI tool designed to create and edit .torrent files https://bugzilla.redhat.com/show_bug.cgi?id=1176307 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test