The following Fedora 20 Security updates need testing: Age URL 115 https://admin.fedoraproject.org/updates/FEDORA-2014-11969/krb5-1.11.5-16.fc20 68 https://admin.fedoraproject.org/updates/FEDORA-2014-15371/rubygem-actionpack-4.0.0-5.fc20 67 https://admin.fedoraproject.org/updates/FEDORA-2014-15489/rubygem-sprockets-2.8.2-5.fc20 45 https://admin.fedoraproject.org/updates/FEDORA-2014-16494/mutt-1.5.23-4.fc20 44 https://admin.fedoraproject.org/updates/FEDORA-2014-16845/resteasy-3.0.6-3.fc20 44 https://admin.fedoraproject.org/updates/FEDORA-2014-16825/asterisk-11.14.2-1.fc20 39 https://admin.fedoraproject.org/updates/FEDORA-2014-17153/httpd-2.4.10-2.fc20 36 https://admin.fedoraproject.org/updates/FEDORA-2014-17089/aeskulap-0.2.2-0.20beta1.fc20,orthanc-0.8.5-2.fc20,dcmtk-3.6.1-1.fc20 32 https://admin.fedoraproject.org/updates/FEDORA-2014-17559/mapserver-6.2.2-1.fc20 30 https://admin.fedoraproject.org/updates/FEDORA-2014-17641/dokuwiki-0-0.23.20140929b.fc20 14 https://admin.fedoraproject.org/updates/FEDORA-2015-0577/strongswan-5.2.2-1.fc20 12 https://admin.fedoraproject.org/updates/FEDORA-2015-0633/chicken-4.9.0.1-3.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2015-0773/arc-5.21p-5.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2015-0753/qpid-cpp-0.30-5.fc20 9 https://admin.fedoraproject.org/updates/FEDORA-2015-0809/thunderbird-31.4.0-1.fc20 6 https://admin.fedoraproject.org/updates/FEDORA-2015-0951/xdg-utils-1.1.0-0.35.rc3.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2015-1007/dump-0.4-0.24.b44.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2015-0991/polarssl-1.2.12-3.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2015-1151/rubygem-passenger-4.0.53-3.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2015-1085/puppetlabs-stdlib-4.5.1-1.20150121git7a91f20.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2015-1133/seamonkey-2.32-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2015-1101/php-5.5.21-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2015-1162/community-mysql-5.5.41-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2015-1125/mingw-jasper-1.900.1-26.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2015-1159/jasper-1.900.1-28.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2015-1165/patch-2.7.3-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2015-1176/privoxy-3.0.23-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2015-1191/vorbis-tools-1.4.0-13.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2015-1263/maradns-2.0.10-1.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2015-1267/unzip-6.0-15.fc20 The following Fedora 20 Critical Path updates have yet to be approved: Age URL 9 https://admin.fedoraproject.org/updates/FEDORA-2015-0787/gnome-online-accounts-3.10.6-1.fc20 6 https://admin.fedoraproject.org/updates/FEDORA-2015-0951/xdg-utils-1.1.0-0.35.rc3.fc20 6 https://admin.fedoraproject.org/updates/FEDORA-2015-0959/redhat-rpm-config-9.1.0-55.fc20 5 https://admin.fedoraproject.org/updates/FEDORA-2015-1033/sddm-0.10.0-3.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2015-1095/perl-Filter-1.54-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2015-1165/patch-2.7.3-1.fc20 1 https://admin.fedoraproject.org/updates/FEDORA-2015-1159/jasper-1.900.1-28.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2015-1267/unzip-6.0-15.fc20 0 https://admin.fedoraproject.org/updates/FEDORA-2015-1214/hwdata-0.274-2.fc20 The following builds have been pushed to Fedora 20 updates-testing antimicro-2.10.1-2.fc20 apx-0-0.7.20150118gite978d95.fc20 cdsclient-3.78-3.fc20 eigen3-3.2.4-1.fc20 freecad-0.14-5.fc20.1 ganyremote-6.3.3-1.fc20 gecode-4.3.3-1.fc20 ghc-deepseq-generics-0.1.1.2-1.fc20 ghc-haddock-library-1.1.1-1.fc20 gnome-commander-1.4.5-1.fc20 gnuradio-3.7.3-3.fc20 golang-github-vaughan0-go-ini-0-0.3.gita98ad7e.fc20 golang-googlecode-goprotobuf-0-0.10.git7f07925.fc20 hwdata-0.274-2.fc20 josm-0-0.64.7906svn.fc20 kanyremote-6.3.5-1.fc20 maradns-2.0.10-1.fc20 mingw-eigen3-3.2.4-1.fc20 pcp-3.10.2-1.fc20 perl-Date-Easter-1.22-1.fc20 perl-MooX-Cmd-0.011-1.fc20 perl-MooX-HandlesVia-0.001006-1.fc20 perl-MooX-Options-4.015-1.fc20 perl-Test-SharedFork-0.29-1.fc20 perl-Tree-Simple-1.25-1.fc20 perl-WWW-Shorten-3.06-1.fc20 php-sebastian-recursion-context-1.0.0-1.fc20 phpMyAdmin-4.3.7-1.fc20 pkgwat-0.11-1.fc20 privoxy-3.0.23-1.fc20 python-glob2-0.4.1-2.fc20 python-sep-0.2.0-1.fc20 python-urllib2_kerberos-0.1.6-16.fc20 python-velruse-1.1.1-1.fc20 rubygem-nokogiri-1.6.6.2-1.fc20 smesh-6.5.3.1-1.fc20 unzip-6.0-15.fc20 vorbis-tools-1.4.0-13.fc20 wine-1.7.35-1.fc20 wkhtmltopdf-0.12.2.1-1.fc20 yash-2.37-1.fc20 zsh-5.0.7-6.fc20 Details about builds: ================================================================================ antimicro-2.10.1-2.fc20 (FEDORA-2015-1259) Graphical program used to map keyboard buttons and mouse controls to a gamepad -------------------------------------------------------------------------------- Update Information: added appdata support -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 3 2015 Jeff Backus <jeff.backus@xxxxxxxxx> - 2.10.1-2 - added appdata support -------------------------------------------------------------------------------- ================================================================================ apx-0-0.7.20150118gite978d95.fc20 (FEDORA-2015-1251) QIX clone, cut into and claim the square area -------------------------------------------------------------------------------- Update Information: new upstream snapshot -------------------------------------------------------------------------------- References: [ 1 ] Bug #1151842 - Review Request: apx - QIX clone, cut into and claim the square area https://bugzilla.redhat.com/show_bug.cgi?id=1151842 -------------------------------------------------------------------------------- ================================================================================ cdsclient-3.78-3.fc20 (FEDORA-2015-1180) Tools to query databases at CDS -------------------------------------------------------------------------------- Update Information: Add cdsclient to Fedora 20 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1181193 - Review Request: cdsclient - Tools to query databases at CDS https://bugzilla.redhat.com/show_bug.cgi?id=1181193 -------------------------------------------------------------------------------- ================================================================================ eigen3-3.2.4-1.fc20 (FEDORA-2015-1195) A lightweight C++ template library for vector and matrix math -------------------------------------------------------------------------------- Update Information: Update to release 3.2.4, see http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.2.4 for details. -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 22 2015 Sandro Mani <manisandro@xxxxxxxxx> - 3.2.4-1 - Update to release 3.2.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1184780 - eigen3-3.2.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1184780 -------------------------------------------------------------------------------- ================================================================================ freecad-0.14-5.fc20.1 (FEDORA-2015-0487) A general purpose 3D CAD modeler -------------------------------------------------------------------------------- Update Information: * Updated DraftSnap patch that fixes new bug introduces (BZ#1178672) * Updated to latest smesh from new fork which better aligns with the version bundled in freecad. -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 6 2015 Richard Shaw <hobbes1069@xxxxxxxxx> - 0.14-5 - Fix bug introduced by PythonSnap patch, fixes BZ#1178672. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1178672 - [abrt] freecad: DraftSnap.py:580:snapToPolar:AttributeError: 'module' object has no attribute 'OCCError' https://bugzilla.redhat.com/show_bug.cgi?id=1178672 -------------------------------------------------------------------------------- ================================================================================ ganyremote-6.3.3-1.fc20 (FEDORA-2015-1190) GTK frontend for anyRemote -------------------------------------------------------------------------------- Update Information: v 6.3.3 -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 11 2015 Mikhail Fedotov <anyremote at mail.ru> - 6.3.3 - Avahi support -------------------------------------------------------------------------------- ================================================================================ gecode-4.3.3-1.fc20 (FEDORA-2015-1211) Generic constraint development environment -------------------------------------------------------------------------------- Update Information: Update to 4.3.3 -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 23 2015 Julian C. Dunn <jdunn@xxxxxxxxxxxx> - 4.3.3-1 - Update to 4.3.3 * Mon Sep 29 2014 Julian C. Dunn <jdunn@xxxxxxxxxxxx> - 4.3.0-1 - Update to 4.3.0 * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 4.2.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 4.2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri May 23 2014 Petr Machata <pmachata@xxxxxxxxxx> - 4.2.1-2 - Rebuild for boost 1.55.0 -------------------------------------------------------------------------------- ================================================================================ ghc-deepseq-generics-0.1.1.2-1.fc20 (FEDORA-2015-1269) Generics-based normal form reduction for deepseq -------------------------------------------------------------------------------- Update Information: Generics-based normal form reduction for deepseq -------------------------------------------------------------------------------- References: [ 1 ] Bug #1182431 - Review Request: ghc-deepseq-generics - Generics-based normal form reduction for deepseq https://bugzilla.redhat.com/show_bug.cgi?id=1182431 -------------------------------------------------------------------------------- ================================================================================ ghc-haddock-library-1.1.1-1.fc20 (FEDORA-2015-1178) Library exposing some functionality of Haddock -------------------------------------------------------------------------------- Update Information: Library exposing some functionality of Haddock -------------------------------------------------------------------------------- References: [ 1 ] Bug #1182435 - Review Request: ghc-haddock-library - Library exposing some functionality of Haddock https://bugzilla.redhat.com/show_bug.cgi?id=1182435 -------------------------------------------------------------------------------- ================================================================================ gnome-commander-1.4.5-1.fc20 (FEDORA-2015-1177) A nice and fast file manager for the GNOME desktop -------------------------------------------------------------------------------- Update Information: New version 1.4.5 is released. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 26 2015 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 4:1.4.5-1 - Update to 1.4.5 -------------------------------------------------------------------------------- ================================================================================ gnuradio-3.7.3-3.fc20 (FEDORA-2015-1186) Software defined radio framework -------------------------------------------------------------------------------- Update Information: This is an update adding workaround for volk memalign. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 26 2015 Jaroslav Škarvada <jskarvad@xxxxxxxxxx> - 3.7.3-3 - Workaround for volk memalign (by volk-memalign-fix patch) Resolves: rhbz#1185710 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1185710 - gnuradio / volk library problem https://bugzilla.redhat.com/show_bug.cgi?id=1185710 -------------------------------------------------------------------------------- ================================================================================ golang-github-vaughan0-go-ini-0-0.3.gita98ad7e.fc20 (FEDORA-2015-1196) INI parsing library for Go -------------------------------------------------------------------------------- Update Information: Choose the correct architecture -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 26 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.3.gita98ad7e - Choose the correct architecture related: #1142398 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1142398 - Review Request: golang-github-vaughan0-go-ini - INI parsing library for Go https://bugzilla.redhat.com/show_bug.cgi?id=1142398 -------------------------------------------------------------------------------- ================================================================================ golang-googlecode-goprotobuf-0-0.10.git7f07925.fc20 (FEDORA-2015-1274) Go support for Google protocol buffers -------------------------------------------------------------------------------- Update Information: Bump to 7f07925444bb51fa4cf9dfe6f7661876f8852275 -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 26 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.10.git7f07925 - Bump to 7f07925444bb51fa4cf9dfe6f7661876f8852275 related: #1018057 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1018057 - Review Request: golang-googlecode-goprotobuf - Go support for Google protocol buffers https://bugzilla.redhat.com/show_bug.cgi?id=1018057 -------------------------------------------------------------------------------- ================================================================================ hwdata-0.274-2.fc20 (FEDORA-2015-1214) Hardware identification and configuration data -------------------------------------------------------------------------------- Update Information: Updated id files. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 26 2015 Michal Minar <miminar@xxxxxxxxxx> 0.274-2 - Removed wrong entry from usb ids file. - Resolves #1185630 * Mon Jan 19 2015 Michal Minar <miminar@xxxxxxxxxx> 0.274-1 - Updated pci, usb and vendor ids. -------------------------------------------------------------------------------- ================================================================================ josm-0-0.64.7906svn.fc20 (FEDORA-2015-1179) An editor for OpenStreetMap (OSM) -------------------------------------------------------------------------------- Update Information: Fix bug in launcher Adding dependency apache-commons-compress -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 24 2015 Cédric OLIVIER <cedric.olivier@xxxxxxx> 0-0.64.7906svn - Fix bug in launcher * Sat Jan 17 2015 Cédric OLIVIER <cedric.olivier@xxxxxxx> 0-0.63.7906svn - Adding dependency apache-commons-compress * Sat Jan 17 2015 Cédric OLIVIER <cedric.olivier@xxxxxxx> 0-0.62.7906svn - Update to 7906 svn revision * Wed Dec 24 2014 Cédric OLIVIER <cedric.olivier@xxxxxxx> 0-0.61.7777svn - Update to 7777 svn revision -------------------------------------------------------------------------------- References: [ 1 ] Bug #1177125 - Can't commit anything with josm 0.60.7643svn.fc21 and java https://bugzilla.redhat.com/show_bug.cgi?id=1177125 [ 2 ] Bug #1185177 - [abrt] josm-0-0.63.7906svn.fc21: Uncaught exception java.lang.ClassNotFoundException in method java.lang.ClassLoader.loadClass() https://bugzilla.redhat.com/show_bug.cgi?id=1185177 [ 3 ] Bug #1172592 - josm-7906 is available https://bugzilla.redhat.com/show_bug.cgi?id=1172592 -------------------------------------------------------------------------------- ================================================================================ kanyremote-6.3.5-1.fc20 (FEDORA-2015-1233) KDE frontend for anyRemote -------------------------------------------------------------------------------- Update Information: v6.3.5 -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 16 2015 Mikhail Fedotov <anyremote at mail.ru> - 6.3.5 - Avahi support -------------------------------------------------------------------------------- ================================================================================ maradns-2.0.10-1.fc20 (FEDORA-2015-1263) Authoritative and recursive DNS server made with security in mind -------------------------------------------------------------------------------- Update Information: This upgrade fixes CERT VU#264212 (infinite referral loop) along with few other fixes. Full details at http://samiam.org/blog/2015-01-25.html -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 25 2015 Tomasz Torcz <ttorcz@xxxxxxxxxxxxxxxxx> - 2.0.10-1 - new upstream version with important security fix - http://samiam.org/blog/2015-01-25.html -------------------------------------------------------------------------------- ================================================================================ mingw-eigen3-3.2.4-1.fc20 (FEDORA-2015-1220) MinGW lightweight C++ template library for vector and matrix math -------------------------------------------------------------------------------- Update Information: Update to release 3.2.4, see http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.2.4 for details. -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 24 2015 Sandro Mani <manisandro@xxxxxxxxx> - 3.2.4-1 - Update to release 3.2.4 -------------------------------------------------------------------------------- ================================================================================ pcp-3.10.2-1.fc20 (FEDORA-2015-1240) System-level performance monitoring and performance management -------------------------------------------------------------------------------- Update Information: Update to latest PCP sources. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 23 2015 Dave Brolley <brolley@xxxxxxxxxx> - 3.10.2-1 - Update to latest PCP sources. - Improve pmdaInit diagnostics for DSO helptext (BZ 1182949) - Tighten up PMDA termination on pmcd stop (BZ 1180109) - Correct units for cgroup memory metrics (BZ 1180351) - Add the pcp2graphite(1) export script (BZ 1163986) * Mon Jan 19 2015 Lukas Berk <lberk@xxxxxxxxxx> - 3.10.2-0.309.g3c90ff9 - Automated weekly rawhide release * Mon Jan 12 2015 Lukas Berk <lberk@xxxxxxxxxx> - 3.10.2-0.305.g64a0d4b - Automated weekly rawhide release * Mon Jan 5 2015 Lukas Berk <lberk@xxxxxxxxxx> - 3.10.2-0.292.g764a0fb - Automated weekly rawhide release * Mon Dec 22 2014 Lukas Berk <lberk@xxxxxxxxxx> - 3.10.2-0.222.g77dcbbf - Automated weekly rawhide release - Applied spec changes from upstream git * Mon Dec 15 2014 Lukas Berk <lberk@xxxxxxxxxx> - 3.10.2-0.124.g1e0c939 - Automated weekly rawhide release * Mon Dec 8 2014 Lukas Berk <lberk@xxxxxxxxxx> - 3.10.2-0.21.g6bad98e - Automated weekly rawhide release - Applied spec changes from upstream git -------------------------------------------------------------------------------- References: [ 1 ] Bug #1182949 - Don't complain when helptext is null https://bugzilla.redhat.com/show_bug.cgi?id=1182949 [ 2 ] Bug #1180351 - Incorrect units for cgroup memory metrics https://bugzilla.redhat.com/show_bug.cgi?id=1180351 [ 3 ] Bug #1163986 - pcp-graphite script https://bugzilla.redhat.com/show_bug.cgi?id=1163986 -------------------------------------------------------------------------------- ================================================================================ perl-Date-Easter-1.22-1.fc20 (FEDORA-2015-1185) Calculates Easter for any given year -------------------------------------------------------------------------------- Update Information: Upgrade to 1.22 -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 24 2015 David Dick <ddick@xxxxxxxx> - 1.22-1 - Upgrade to 1.22 * Tue Aug 26 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.21-2 - Perl 5.20 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1184825 - perl-Date-Easter-1.22 is available https://bugzilla.redhat.com/show_bug.cgi?id=1184825 -------------------------------------------------------------------------------- ================================================================================ perl-MooX-Cmd-0.011-1.fc20 (FEDORA-2015-1210) Giving an easy Moo style way to make command organized CLI apps -------------------------------------------------------------------------------- Update Information: Upgrade to 0.11 -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 24 2015 David Dick <ddick@xxxxxxxx> - 0.011-1 - Upgrade to 0.11 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1171037 - perl-MooX-Cmd-0.011 is available https://bugzilla.redhat.com/show_bug.cgi?id=1171037 -------------------------------------------------------------------------------- ================================================================================ perl-MooX-HandlesVia-0.001006-1.fc20 (FEDORA-2015-1219) NativeTrait-like behavior for Moo -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 26 2015 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 0.001006-1 - Upstream update. -------------------------------------------------------------------------------- ================================================================================ perl-MooX-Options-4.015-1.fc20 (FEDORA-2015-1250) Explicit Options eXtension for Object Class -------------------------------------------------------------------------------- Update Information: Generate warning when missing required params -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 24 2015 David Dick <ddick@xxxxxxxx> - 4.015-1 - Generate warning when missing required params -------------------------------------------------------------------------------- References: [ 1 ] Bug #1183582 - perl-MooX-Options-4.015 is available https://bugzilla.redhat.com/show_bug.cgi?id=1183582 -------------------------------------------------------------------------------- ================================================================================ perl-Test-SharedFork-0.29-1.fc20 (FEDORA-2015-1222) Fork test -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 22 2014 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 0.29-1 - Upstream update. - Reflect upstream URL having changed. -------------------------------------------------------------------------------- ================================================================================ perl-Tree-Simple-1.25-1.fc20 (FEDORA-2015-1202) Tree::Simple Perl module -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 26 2015 Ralf Corsépius <corsepiu@xxxxxxxxxxxxxxxxx> - 1.25-1 - Upstream update. -------------------------------------------------------------------------------- ================================================================================ perl-WWW-Shorten-3.06-1.fc20 (FEDORA-2015-1226) Interface to URL shortening sites -------------------------------------------------------------------------------- Update Information: Upgrade to 3.06 (bz#1142983) -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 23 2015 Julian C. Dunn <jdunn@xxxxxxxxxxxx> - 3.06-1 - Upgrade to 3.06 (bz#1142983) * Fri Aug 29 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 3.05-2 - Perl 5.20 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1142983 - perl-WWW-Shorten-3.06 is available https://bugzilla.redhat.com/show_bug.cgi?id=1142983 -------------------------------------------------------------------------------- ================================================================================ php-sebastian-recursion-context-1.0.0-1.fc20 (FEDORA-2015-1228) Recursively process PHP variables -------------------------------------------------------------------------------- Update Information: Provides functionality to recursively process PHP variables. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1185606 - Review Request: php-sebastian-recursion-context - Recursively process PHP variables https://bugzilla.redhat.com/show_bug.cgi?id=1185606 -------------------------------------------------------------------------------- ================================================================================ phpMyAdmin-4.3.7-1.fc20 (FEDORA-2015-1207) Handle the administration of MySQL over the World Wide Web -------------------------------------------------------------------------------- Update Information: phpMyAdmin 4.3.7.0 (2015-01-15) =============================== - js error on marking table as favorite in Safari (in private mode) - Changing $cfg['DefaultTabTable'] doesn't update link and title - Undefined index menuswork - Undefined index navwork - Undefined index central_columnswork - Server Status refresh not behaving as expected - Null argument in array_multisort() - Navigation panel should not hide icons based on 'TableNavigationLinksMode'; - Unsaved schema page exported as pdf.pdf - Call to undefined method PMA_Schema_PDF::dieSchema() - URL is non RFC-2396 compatible in get_scripts.js.php -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 24 2015 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 4.3.7-1 - Upgrade to 4.3.7 (#1183602) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1183602 - phpMyAdmin-4.3.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1183602 -------------------------------------------------------------------------------- ================================================================================ pkgwat-0.11-1.fc20 (FEDORA-2015-1184) CLI tool for querying the fedora packages webapp -------------------------------------------------------------------------------- Update Information: Latest upstream. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 23 2015 Ralph Bean <rbean@xxxxxxxxxx> - 0.11-1 - Latest upstream. * Wed Oct 1 2014 Ralph Bean <rbean@xxxxxxxxxx> - 0.10-3 - Define python2 macros for el6. * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1112119 - [abrt] pkgwat: subcommands.py:340:take_action:KeyError: 'version' https://bugzilla.redhat.com/show_bug.cgi?id=1112119 -------------------------------------------------------------------------------- ================================================================================ privoxy-3.0.23-1.fc20 (FEDORA-2015-1176) Privacy enhancing proxy -------------------------------------------------------------------------------- Update Information: It was reported [1] that Privoxy 3.0.23 contains fixes for the following security issues: - Fixed a DoS issue in case of client requests with incorrect chunk-encoded body. When compiled with assertions enabled (the default) they could previously cause Privoxy to abort(). Reported by Matthew Daley. http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/jcc.c?r1=1.433&r2=1.434 - Fixed multiple segmentation faults and memory leaks in the pcrs code. This fix also increases the chances that an invalid pcrs command is rejected as such. Previously some invalid commands would be loaded without error. Note that Privoxy's pcrs sources (action and filter files) are considered trustworthy input and should not be writable by untrusted third-parties. http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/pcrs.c?r1=1.46&r2=1.47 - Fixed an 'invalid read' bug which could at least theoretically cause Privoxy to crash. http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/parsers.c?r1=1.297&r2=1.298 [1]: http://seclists.org/oss-sec/2015/q1/259 -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 26 2015 Jon Ciesla <limburgher@xxxxxxxxx> - 3.0.23-1 - Latest upstream, BZ 1185925. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1185926 - privoxy: security fixes in 3.0.23 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1185926 [ 2 ] Bug #1185925 - privoxy: security fixes in 3.0.23 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1185925 -------------------------------------------------------------------------------- ================================================================================ python-glob2-0.4.1-2.fc20 (FEDORA-2015-1270) Glob module recursive wildcards support -------------------------------------------------------------------------------- Update Information: Glob module recursive wildcards support -------------------------------------------------------------------------------- References: [ 1 ] Bug #1178687 - Review Request: python-glob2 - Glob module recursive wildcards support https://bugzilla.redhat.com/show_bug.cgi?id=1178687 -------------------------------------------------------------------------------- ================================================================================ python-sep-0.2.0-1.fc20 (FEDORA-2015-1230) Astronomical source extraction and photometry in Python -------------------------------------------------------------------------------- Update Information: Python for source extraction and photometry in astronomy -------------------------------------------------------------------------------- ================================================================================ python-urllib2_kerberos-0.1.6-16.fc20 (FEDORA-2015-1205) Kerberos over HTTP Negotiate/SPNEGO support for urllib2 -------------------------------------------------------------------------------- Update Information: Don’t change debugging level ... RHBZ #1185370 -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 23 2015 Matej Cepl <mcepl@xxxxxxxxxx> - 0.1.6-15 - Don’t change debugging level ... RHBZ #1185370 * Wed Oct 8 2014 Steve Traylen <steve.traylen@xxxxxxx> - 0.1.6-14 - Remove debug from add-logging.patch. #1065576 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1185370 - hardcoded loglevel DEBUG https://bugzilla.redhat.com/show_bug.cgi?id=1185370 -------------------------------------------------------------------------------- ================================================================================ python-velruse-1.1.1-1.fc20 (FEDORA-2015-1216) Simplify third-party authentication for web applications -------------------------------------------------------------------------------- Update Information: Latest upstream. http://pythonhosted.org//velruse/changes.html -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 23 2015 Ralph Bean <rbean@xxxxxxxxxx> - 1.1.1-1 - Latest upstream. * Sun Jun 8 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.3-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rubygem-nokogiri-1.6.6.2-1.fc20 (FEDORA-2015-1255) An HTML, XML, SAX, and Reader parser -------------------------------------------------------------------------------- Update Information: New version 1.6.6.2 is released. -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 25 2015 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1.6.6.2-1 - 1.6.6.2 * Fri Jan 23 2015 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1.6.6.1-1 - 1.6.6.1 * Thu Jan 15 2015 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 1.6.5-2 - Rebuild for ruby 2.2 -------------------------------------------------------------------------------- ================================================================================ smesh-6.5.3.1-1.fc20 (FEDORA-2015-0487) OpenCascade based MESH framework -------------------------------------------------------------------------------- Update Information: * Updated DraftSnap patch that fixes new bug introduces (BZ#1178672) * Updated to latest smesh from new fork which better aligns with the version bundled in freecad. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 9 2014 Richard Shaw <hobbes1069@xxxxxxxxx> - 6.5.3.1-1 - Update to latest upstream release. * Fri Nov 28 2014 Richard Shaw <hobbes1069@xxxxxxxxx> - 5.1.2.4-1 - Move to forked project as original is no longer maintained. * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1178672 - [abrt] freecad: DraftSnap.py:580:snapToPolar:AttributeError: 'module' object has no attribute 'OCCError' https://bugzilla.redhat.com/show_bug.cgi?id=1178672 -------------------------------------------------------------------------------- ================================================================================ unzip-6.0-15.fc20 (FEDORA-2015-1267) A utility for unpacking zip files -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2014-9636 -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 26 2015 Petr Stodulka <pstodulk@xxxxxxxxxx> - 6.0-15 - Fix security bug - CVE-2014-9636 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1184985 - CVE-2014-9636 unzip: out-of-bounds read/write in test_compr_eb() in extract.c https://bugzilla.redhat.com/show_bug.cgi?id=1184985 -------------------------------------------------------------------------------- ================================================================================ vorbis-tools-1.4.0-13.fc20 (FEDORA-2015-1191) The Vorbis General Audio Compression Codec tools -------------------------------------------------------------------------------- Update Information: - do not use stack variable out of its scope of validity (CVE-2014-9640) -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 26 2015 Kamil Dudka <kdudka@xxxxxxxxxx> - 1:1.4.0-13 - do not use stack variable out of its scope of validity (#1185558) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1185272 - CVE-2014-9640 vorbis-tools: segfault when trying to encode trivial raw input https://bugzilla.redhat.com/show_bug.cgi?id=1185272 -------------------------------------------------------------------------------- ================================================================================ wine-1.7.35-1.fc20 (FEDORA-2015-1173) A compatibility layer for windows applications -------------------------------------------------------------------------------- Update Information: **This update switches wine to use 'alternatives' for keeping track of the wine binaries when multi-arch is used.** * Beginnings of support for OpenGL core contexts. * Initial support for glyph placement in DirectWrite. * Some more WBEM objects. * Various bug fixes. -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 25 2015 Michael Cronenworth <mike@xxxxxxxxxx> - 1.7.35-1 - version upgrade - use alternatives system, remove wow sub-package * Tue Jan 20 2015 Peter Robinson <pbrobinson@xxxxxxxxxxxxxxxxx> 1.7.34-2 - Rebuild (libgphoto2) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1033870 - F21-RC5 x68_64: wine conflicts with wine-wow-1.7.30-1.fc21.i686 when using kickstart option --multilib https://bugzilla.redhat.com/show_bug.cgi?id=1033870 -------------------------------------------------------------------------------- ================================================================================ wkhtmltopdf-0.12.2.1-1.fc20 (FEDORA-2015-1172) Simple shell utility to convert html to pdf -------------------------------------------------------------------------------- Update Information: New version 0.12.2.1 is released. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 21 2015 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 0.12.2.1-1 - 0.12.2.1 -------------------------------------------------------------------------------- ================================================================================ yash-2.37-1.fc20 (FEDORA-2015-1236) Yet Another SHell -------------------------------------------------------------------------------- Update Information: New version 2.37 is released. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 26 2015 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 2.37-1 - 2.37 * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.36-2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Thu Jun 12 2014 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 2.36-2 - Fix broken dependency * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.36-1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ zsh-5.0.7-6.fc20 (FEDORA-2015-1203) Powerful interactive shell -------------------------------------------------------------------------------- Update Information: - suppress a warning about closing an already closed file descriptor (#1184002) - improve handling of NULL in the 'cd' built-in (#1183238) - use correct allocation function in the new 'cd' code (#1183238) -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 25 2015 Kamil Dudka <kdudka@xxxxxxxxxx> - 5.0.7-6 - use correct allocation function in the new 'cd' code (#1183238) * Fri Jan 23 2015 Kamil Dudka <kdudka@xxxxxxxxxx> - 5.0.7-5 - suppress a warning about closing an already closed file descriptor (#1184002) - improve handling of NULL in the 'cd' built-in (#1183238) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1184002 - warning about closing an already closed file descriptor https://bugzilla.redhat.com/show_bug.cgi?id=1184002 [ 2 ] Bug #1183238 - [abrt] zsh: unmeta(): zsh killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1183238 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
