The following Fedora 21 Security updates need testing: Age URL 180 https://admin.fedoraproject.org/updates/FEDORA-2015-1467/openstack-glance-2014.1.3-4.fc21 125 https://admin.fedoraproject.org/updates/FEDORA-2015-4689/quassel-0.11.0-2.fc21 70 https://admin.fedoraproject.org/updates/FEDORA-2015-8168/cabal-install-1.16.1.0-1.fc21,haskell-platform-2013.2.0.0-39.fc21 60 https://admin.fedoraproject.org/updates/FEDORA-2015-9090/fossil-1.33-1.fc21 60 https://admin.fedoraproject.org/updates/FEDORA-2015-9141/ceph-deploy-1.5.25-1.fc21 49 https://admin.fedoraproject.org/updates/FEDORA-2015-5247/strongswan-5.3.2-1.fc21 49 https://admin.fedoraproject.org/updates/FEDORA-2015-9744/squid-3.4.13-1.fc21 39 https://admin.fedoraproject.org/updates/FEDORA-2015-10175/opensaml-java-openws-1.5.5-2.fc21,opensaml-java-2.5.3-9.fc21 39 https://admin.fedoraproject.org/updates/FEDORA-2015-10301/389-ds-base-1.3.3.12-1.fc21 16 https://admin.fedoraproject.org/updates/FEDORA-2015-11368/nx-libs-3.5.0.32-1.fc21 7 https://admin.fedoraproject.org/updates/FEDORA-2015-11936/community-mysql-5.6.25-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2015-12032/uwsgi-2.0.11.1-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2015-11995/bzr-2.6.0-7.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2015-12028/drupal6-cck-2.10-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2015-12012/openssh-6.6.1p1-14.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2015-12010/mantis-1.2.19-3.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12250/lighttpd-1.4.36-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12064/libuser-0.62-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12357/bind-9.9.6-10.P1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12054/openssh-6.6.1p1-15.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12148/wordpress-4.2.3-1.fc21 The following Fedora 21 Critical Path updates have yet to be approved: Age URL 1 https://admin.fedoraproject.org/updates/FEDORA-2015-12049/selinux-policy-3.13.1-105.20.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12332/kernel-4.1.3-100.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12357/bind-9.9.6-10.P1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12054/openssh-6.6.1p1-15.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12277/libfm-1.2.3-12.D20150713gitf47c9ae7ae.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12310/dbus-1.8.20-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12212/perl-Filter-1.55-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12064/libuser-0.62-1.fc21 The following builds have been pushed to Fedora 21 updates-testing bind-9.9.6-10.P1.fc21 digikam-4.12.0-1.fc21 globus-gssapi-gsi-11.20-1.fc21 globus-xio-gsi-driver-3.8-1.fc21 golang-github-cenkalti-backoff-0-0.2.git9831e1e.fc21 golang-github-kr-pretty-0-0.5.gitf31442d.fc21 golang-github-kr-text-0-0.5.git6807e77.fc21 golang-github-onsi-gomega-0-0.4.git8adf9e1.fc21 golang-github-tonnerre-golang-pretty-0-0.3.gite7fccc0.fc21 golang-github-vaughan0-go-ini-0-0.5.gita98ad7e.fc21 golang-github-vishvananda-netlink-0-0.4.git991a7a2.fc21 golang-github-vishvananda-netns-0-0.4.git5478c06.fc21 golang-github-vmware-govcloudair-0-0.2.git0d7be90.fc21 golang-gopkg-check-0-6.fc21 kernel-4.1.3-100.fc21 mate-themes-1.10.3-1.fc21 myproxy-6.1.15-1.fc21 pulseaudio-equalizer-2.7-16.fc21 python-pillow-2.6.2-2.fc21 remind-03.01.15-1.fc21 systemtap-2.8-1.fc21 thefuck-1.48-1.fc21 Details about builds: ================================================================================ bind-9.9.6-10.P1.fc21 (FEDORA-2015-12357) The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server -------------------------------------------------------------------------------- Update Information: Include fix for CVE-2015-5477 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 Tomas Hozza <thozza@xxxxxxxxxx> - 32:9.9.6-10.P1 - Include fix for CVE-2015-5477 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1247361 - CVE-2015-5477 bind: TKEY query handling flaw leading to denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1247361 -------------------------------------------------------------------------------- ================================================================================ digikam-4.12.0-1.fc21 (FEDORA-2015-12326) A digital camera accessing & photo management application -------------------------------------------------------------------------------- Update Information: digiKam 4.12.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 Alexey Kurov <nucleo@xxxxxxxxxxxxxxxxx> - 4.12.0-1 - digikam-4.12.0 - old PicasaWeb export removed - renamed googledrive to googleservices * Mon Jun 22 2015 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 4.11.0-2 - drop BR: pkgconfig(exiv2), only need libkexiv2-devel these days -------------------------------------------------------------------------------- ================================================================================ globus-gssapi-gsi-11.20-1.fc21 (FEDORA-2015-12339) Globus Toolkit - GSSAPI library -------------------------------------------------------------------------------- Update Information: Globus Toolkit updates from upstream * globus-gssapi-gsi 11.20 * globus-xio-gsi-driver 3.8 * myproxy 6.1.15 https://globus.atlassian.net/browse/GT-614 https://globus.atlassian.net/browse/GT-615 https://globus.atlassian.net/browse/GT-616 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 11.20-1 - GT6 update - GT-614: GLOBUS_GSS_C_NT_HOST_IP doesn't allow host-only imports and comparisons -------------------------------------------------------------------------------- ================================================================================ globus-xio-gsi-driver-3.8-1.fc21 (FEDORA-2015-12339) Globus Toolkit - Globus XIO GSI Driver -------------------------------------------------------------------------------- Update Information: Globus Toolkit updates from upstream * globus-gssapi-gsi 11.20 * globus-xio-gsi-driver 3.8 * myproxy 6.1.15 https://globus.atlassian.net/browse/GT-614 https://globus.atlassian.net/browse/GT-615 https://globus.atlassian.net/browse/GT-616 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 3.8-1 - GT6 update - GT-615: GSI XIO driver uses resolved IP address when importing names * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ golang-github-cenkalti-backoff-0-0.2.git9831e1e.fc21 (FEDORA-2015-12333) The exponential backoff algorithm in Go -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.2.git9831e1e - Update of spec file to spec-2.0 resolves: #1248129 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248129 - Tracker for golang-github-cenkalti-backoff https://bugzilla.redhat.com/show_bug.cgi?id=1248129 -------------------------------------------------------------------------------- ================================================================================ golang-github-kr-pretty-0-0.5.gitf31442d.fc21 (FEDORA-2015-12331) Provides pretty-printing for go values -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.5.gitf31442d - Update of spec file to spec-2.0 resolves: #1248169 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.4.gitf31442d - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248169 - Tracker for golang-github-kr-pretty https://bugzilla.redhat.com/show_bug.cgi?id=1248169 -------------------------------------------------------------------------------- ================================================================================ golang-github-kr-text-0-0.5.git6807e77.fc21 (FEDORA-2015-12338) Go package for manipulating paragraphs of text -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.5.git6807e77 - Update of spec file to spec-2.0 resolves: #1248175 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.4.git6807e77 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Fri Sep 19 2014 Jan Chaloupka <jchaloup@xxxxxxxxxxxxxxxxx> - 0-0.3.git6807e77 - add golang version with necessary golang macros - quiet setup -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248175 - Tracker for golang-github-kr-text https://bugzilla.redhat.com/show_bug.cgi?id=1248175 -------------------------------------------------------------------------------- ================================================================================ golang-github-onsi-gomega-0-0.4.git8adf9e1.fc21 (FEDORA-2015-12343) Ginkgo's Preferred Matcher Library -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 Fridolin Pokorny <fpokorny@xxxxxxxxxx> - 0-0.1.git8adf9e1 - Update of spec file to spec-2.0 resolves: #1248013 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.4.git8adf9e1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248013 - Tracker for golang-github-onsi-gomega https://bugzilla.redhat.com/show_bug.cgi?id=1248013 -------------------------------------------------------------------------------- ================================================================================ golang-github-tonnerre-golang-pretty-0-0.3.gite7fccc0.fc21 (FEDORA-2015-12346) Pretty printing for Go values http://godoc.org/github.com/kr/pretty -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.3.gite7fccc0 - Update of spec file to spec-2.0 resolves: #1248184 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.2.gite7fccc0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248184 - Tracker for golang-github-tonnerre-golang-pretty https://bugzilla.redhat.com/show_bug.cgi?id=1248184 -------------------------------------------------------------------------------- ================================================================================ golang-github-vaughan0-go-ini-0-0.5.gita98ad7e.fc21 (FEDORA-2015-12342) INI parsing library for Go -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.5.gita98ad7e - Update of spec file to spec-2.0 resolves: #1248163 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.4.gita98ad7e - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248163 - Tracker for golang-github-vaughan0-go-ini https://bugzilla.redhat.com/show_bug.cgi?id=1248163 -------------------------------------------------------------------------------- ================================================================================ golang-github-vishvananda-netlink-0-0.4.git991a7a2.fc21 (FEDORA-2015-12352) Simple netlink library for go -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.4.git991a7a2 - Update of spec file to spec-2.0 resolves: #1248155 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.3.git991a7a2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248155 - Tracker for golang-github-vishvananda-netlink https://bugzilla.redhat.com/show_bug.cgi?id=1248155 -------------------------------------------------------------------------------- ================================================================================ golang-github-vishvananda-netns-0-0.4.git5478c06.fc21 (FEDORA-2015-12351) Simple network namespace handling for go -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.4.git5478c06 - Update of spec file to spec-2.0 resolves: #1248150 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.3.git5478c06 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Sat Jun 6 2015 Adam Miller <maxamillion@xxxxxxxxxxxxxxxxx> - 0-0.2.git5478c06 - Update to latest upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248150 - Tracker for golang-github-vishvananda-netns https://bugzilla.redhat.com/show_bug.cgi?id=1248150 -------------------------------------------------------------------------------- ================================================================================ golang-github-vmware-govcloudair-0-0.2.git0d7be90.fc21 (FEDORA-2015-12350) VCloud Air API bindings for Golang -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.2.git0d7be90 - Update of spec file to spec-2.0 resolves: #1248147 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248147 - Tracker for golang-github-vmware-govcloudair https://bugzilla.redhat.com/show_bug.cgi?id=1248147 -------------------------------------------------------------------------------- ================================================================================ golang-gopkg-check-0-6.fc21 (FEDORA-2015-12354) Rich testing for the Go language -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-6 - Update of spec file to spec-2.0 resolves: #1248138 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248138 - Tracker for golang-gopkg-check https://bugzilla.redhat.com/show_bug.cgi?id=1248138 -------------------------------------------------------------------------------- ================================================================================ kernel-4.1.3-100.fc21 (FEDORA-2015-12332) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 4.1.3 rebase contains a number of important fixes across the tree The 4.0.9 update contains a number of important fixes across the tree -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 Laura Abbott <labbott@xxxxxxxxxxxxxxxxx> - 4.1.3-100 - Change tag for build since a previous build never happened * Mon Jul 27 2015 Laura Abbott <labbott@xxxxxxxxxxxxxxxxx> - CVE-2015-3290 CVE-2015-3291 NMI issues (rhbz 1243465 1245927) * Mon Jul 27 2015 Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx> - CVE-2015-1333 add_key memory leak (rhbz 1244171) * Thu Jul 23 2015 Laura Abbott <labbott@xxxxxxxxxxxxxxxxx> - Linux v4.1.3 rebase - Fix warning from pcmcia (rhbz 1180920 1206724) * Wed Jul 22 2015 Laura Abbott <labbott@xxxxxxxxxxxxxxxxx> - 4.0.9-200 - Linux v4.0.9 - Add patches for Ideapad RF switches (rhbz 1192270) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1192270 - ideapad-laptop probably needs to be blacklisted on Lenovo g50-30 https://bugzilla.redhat.com/show_bug.cgi?id=1192270 -------------------------------------------------------------------------------- ================================================================================ mate-themes-1.10.3-1.fc21 (FEDORA-2015-12363) MATE Desktop themes -------------------------------------------------------------------------------- Update Information: - update to 1.10.3 release -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 Wolfgang Ulbrich <chat-to-me@xxxxxxxxx> - 1.10.3-1 - update to 1.10.3 release -------------------------------------------------------------------------------- ================================================================================ myproxy-6.1.15-1.fc21 (FEDORA-2015-12339) Manage X.509 Public Key Infrastructure (PKI) security credentials -------------------------------------------------------------------------------- Update Information: Globus Toolkit updates from upstream * globus-gssapi-gsi 11.20 * globus-xio-gsi-driver 3.8 * myproxy 6.1.15 https://globus.atlassian.net/browse/GT-614 https://globus.atlassian.net/browse/GT-615 https://globus.atlassian.net/browse/GT-616 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 6.1.15-1 - Update to 6.1.15 - GT-616: Myproxy uses resolved IP address when importing names -------------------------------------------------------------------------------- ================================================================================ pulseaudio-equalizer-2.7-16.fc21 (FEDORA-2015-12360) A 15 Bands Equalizer for PulseAudio -------------------------------------------------------------------------------- Update Information: * Fixing unwanted audio mute when adjusting the equalizer -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 Jaromir Capik <jcapik@xxxxxxxxxx> - 2.7-16 - Fixing audio mute when adjusting the equalizer (#1046589) * Thu Jun 18 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2.7-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1046589 - Enable/disable/adjust pulseaudio-equalizer and audio mutes https://bugzilla.redhat.com/show_bug.cgi?id=1046589 -------------------------------------------------------------------------------- ================================================================================ python-pillow-2.6.2-2.fc21 (FEDORA-2015-12361) Python image processing library -------------------------------------------------------------------------------- Update Information: This update fixes python3-pillow-tk incorrectly depending on tkinter instead of python3-tkinter. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 Sandro Mani <manisandro@xxxxxxxxx> - 2.6.2-2 - Fix python3-pillow-tk Requires: tkinter -> python3-tkinter (#1248085) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248085 - python3-pillow-tk must depend of python3-tkinter, not tkinter https://bugzilla.redhat.com/show_bug.cgi?id=1248085 -------------------------------------------------------------------------------- ================================================================================ remind-03.01.15-1.fc21 (FEDORA-2015-12340) A sophisticated calendar and alarm program -------------------------------------------------------------------------------- Update Information: * Fix a buffer overflow found by Alexander Keller * Fix a typo in the NEWS * Make parser reject an AT followed by more than one time. * Make parser reject epeated delta or *repeat values. * The "-n" command-line option need to run in "ADVANCE_MODE" rather than "CAL_MODE" internally; otherwise, the substitution sequences may be misinterpreted. * A typo in clearing out MD5 sum context has been fixed. * Typo in Spanish translation was fixed. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 Jaromir Capik <jcapik@xxxxxxxxxx> - 03.01.15-1 - Updating to 03.01.15 (#1215295) * Thu Jun 18 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 03.01.13-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1215295 - remind-03.01.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=1215295 -------------------------------------------------------------------------------- ================================================================================ systemtap-2.8-1.fc21 (FEDORA-2015-12349) Programmable system-wide instrumentation system -------------------------------------------------------------------------------- Update Information: Upstream release. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 17 2015 Abegail Jakop <ajakop@xxxxxxxxxx> - 2.8-1 - Upstream release. * Tue May 12 2015 Josh Stone <jistone@xxxxxxxxxx> - 2.7-2 - Disable ICF when checking for available tracepoints. -------------------------------------------------------------------------------- ================================================================================ thefuck-1.48-1.fc21 (FEDORA-2015-12365) App that corrects your previous console command -------------------------------------------------------------------------------- Update Information: Initial spec -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test