The following Fedora 21 Security updates need testing: Age URL 181 https://admin.fedoraproject.org/updates/FEDORA-2015-1467/openstack-glance-2014.1.3-4.fc21 126 https://admin.fedoraproject.org/updates/FEDORA-2015-4689/quassel-0.11.0-2.fc21 71 https://admin.fedoraproject.org/updates/FEDORA-2015-8168/cabal-install-1.16.1.0-1.fc21,haskell-platform-2013.2.0.0-39.fc21 61 https://admin.fedoraproject.org/updates/FEDORA-2015-9090/fossil-1.33-1.fc21 61 https://admin.fedoraproject.org/updates/FEDORA-2015-9141/ceph-deploy-1.5.25-1.fc21 50 https://admin.fedoraproject.org/updates/FEDORA-2015-5247/strongswan-5.3.2-1.fc21 50 https://admin.fedoraproject.org/updates/FEDORA-2015-9744/squid-3.4.13-1.fc21 40 https://admin.fedoraproject.org/updates/FEDORA-2015-10175/opensaml-java-openws-1.5.5-2.fc21,opensaml-java-2.5.3-9.fc21 40 https://admin.fedoraproject.org/updates/FEDORA-2015-10301/389-ds-base-1.3.3.12-1.fc21 17 https://admin.fedoraproject.org/updates/FEDORA-2015-11368/nx-libs-3.5.0.32-1.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2015-12032/uwsgi-2.0.11.1-1.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2015-11995/bzr-2.6.0-7.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2015-12028/drupal6-cck-2.10-1.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2015-12012/openssh-6.6.1p1-14.fc21 2 https://admin.fedoraproject.org/updates/FEDORA-2015-12010/mantis-1.2.19-3.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2015-12250/lighttpd-1.4.36-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2015-12064/libuser-0.62-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2015-12054/openssh-6.6.1p1-15.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2015-12148/wordpress-4.2.3-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12406/xfsprogs-3.2.2-2.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12357/bind-9.9.6-10.P1.fc21 The following Fedora 21 Critical Path updates have yet to be approved: Age URL 2 https://admin.fedoraproject.org/updates/FEDORA-2015-12049/selinux-policy-3.13.1-105.20.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2015-12277/libfm-1.2.3-12.D20150713gitf47c9ae7ae.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2015-12212/perl-Filter-1.55-1.fc21 1 https://admin.fedoraproject.org/updates/FEDORA-2015-12064/libuser-0.62-1.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12406/xfsprogs-3.2.2-2.fc21 0 https://admin.fedoraproject.org/updates/FEDORA-2015-12402/gstreamer1-plugins-good-1.4.5-3.fc21 The following builds have been pushed to Fedora 21 updates-testing devscripts-2.15.6-1.fc21 dpm-dsi-1.9.5-6.fc21 edg-mkgridmap-4.0.3-1.fc21 golang-github-abbot-go-http-auth-0-0.3.gitc0ef453.fc21 golang-github-appc-spec-0.5.1-4.git37bef67.fc21 golang-github-armon-circbuf-0-0.2.gitf092b4f.fc21 golang-github-armon-go-metrics-0-0.2.gita54701e.fc21 golang-github-armon-gomdb-0-0.3.git151f2e0.fc21 golang-github-beorn7-perks-0-0.3.gitb965b61.fc21 golang-github-bmizerany-assert-0-0.3.gite17e998.fc21 golang-github-bmizerany-pat-0-0.3.gitb8a3500.fc21 golang-github-bmizerany-perks-0-0.3.gitd9a9656.fc21 golang-github-boltdb-bolt-1.0-0.2.git980670a.fc21 golang-github-codegangsta-cli-1.2.0-4.fc21 golang-github-coreos-go-log-0-0.9.git840af6b.fc21 golang-github-coreos-go-semver-0-0.5.git568e959.fc21 golang-github-coreos-go-systemd-2-8.fc21 gstreamer1-plugins-good-1.4.5-3.fc21 icecat-31.8.0-3.fc21 kf5-kdeclarative-5.12.0-2.fc21 nodejs-validate-npm-package-name-2.2.2-2.fc21 perl-File-Find-Rule-Age-0.302-3.fc21 php-nrk-Predis-1.0.2-1.fc21 piglit-1-0.25.20150206GITi9c8b329.fc21 stoken-0.9-1.fc21 whois-5.2.10-1.fc21 xfsprogs-3.2.2-2.fc21 zsh-5.0.8-5.fc21 Details about builds: ================================================================================ devscripts-2.15.6-1.fc21 (FEDORA-2015-12446) Scripts for Debian Package maintainers -------------------------------------------------------------------------------- Update Information: Update to version 2.15.6, see http://metadata.ftp-master.debian.org/changelogs//main/d/devscripts/devscripts_2.15.6_changelog for details. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 29 2015 Sandro Mani <manisandro@xxxxxxxxx> - 2.15.6-1 - Update to 2.15.6 -------------------------------------------------------------------------------- ================================================================================ dpm-dsi-1.9.5-6.fc21 (FEDORA-2015-12417) Disk Pool Manager (DPM) plugin for the Globus GridFTP server -------------------------------------------------------------------------------- Update Information: Rebuilt for Globus 8.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 28 2015 Alejandro Alvarez Ayllon <aalvarez@xxxxxxx> - 1.9.5-6 - Rebuilt for globus-gridftp-server 8.0 -------------------------------------------------------------------------------- ================================================================================ edg-mkgridmap-4.0.3-1.fc21 (FEDORA-2015-12395) A tool to build the grid map-file from VO servers -------------------------------------------------------------------------------- Update Information: Fixed for CentOS7 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 Alejandro Alvarez Ayllon <aalvarez@xxxxxxx> - 4.0.3-1 - Mainly adaptations to changes in underlying libraries on CentOS/EL7 -------------------------------------------------------------------------------- ================================================================================ golang-github-abbot-go-http-auth-0-0.3.gitc0ef453.fc21 (FEDORA-2015-12401) Basic and Digest HTTP Authentication for golang http -------------------------------------------------------------------------------- Update Information: Move test.htpasswd and test.htdigest to test unit -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 Fridolin Pokorny <fpokorny@xxxxxxxxxx> - 0-0.3.gitc0ef453 - Move test.htpasswd and test.htdigest to test unit related: #1248477 * Thu Jul 30 2015 Fridolin Pokorny <fpokorny@xxxxxxxxxx> - 0-0.2.gitc0ef453 - Update of spec file to spec-2.0 resolves: #1248477 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.2.gitc0ef453 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248477 - Tracker for golang-github-abbot-go-http-auth https://bugzilla.redhat.com/show_bug.cgi?id=1248477 -------------------------------------------------------------------------------- ================================================================================ golang-github-appc-spec-0.5.1-4.git37bef67.fc21 (FEDORA-2015-12452) Schema defs and tools for app container specification -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0.5.1-4.git37bef67 - Update of spec file to spec-2.0 resolves: #1248491 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.5.1-3.git37bef67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248491 - Tracker for golang-github-appc-spec https://bugzilla.redhat.com/show_bug.cgi?id=1248491 -------------------------------------------------------------------------------- ================================================================================ golang-github-armon-circbuf-0-0.2.gitf092b4f.fc21 (FEDORA-2015-12447) Golang circular (ring) buffer -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 Fridolin Pokorny <fpokorny@xxxxxxxxxx> - 0-0.2.gitf092b4f - Update of spec file to spec-2.0 resolves: #1248497 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248497 - Tracker for golang-github-armon-circbuf https://bugzilla.redhat.com/show_bug.cgi?id=1248497 -------------------------------------------------------------------------------- ================================================================================ golang-github-armon-go-metrics-0-0.2.gita54701e.fc21 (FEDORA-2015-12434) Exporting performance and runtime metrics to external metrics systems -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 Fridolin Pokorny <fpokorny@xxxxxxxxxx> - 0-0.2.gita54701e - Update of spec file to spec-2.0 resolves: #1248645 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248645 - Tracker for golang-github-armon-go-metrics https://bugzilla.redhat.com/show_bug.cgi?id=1248645 -------------------------------------------------------------------------------- ================================================================================ golang-github-armon-gomdb-0-0.3.git151f2e0.fc21 (FEDORA-2015-12411) Go wrapper for LMDB - OpenLDAP Lightning Memory-Mapped Database -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 Fridolin Pokorny <fpokorny@xxxxxxxxxx> - 0-0.3.git151f2e0 - Update of spec file to spec-2.0 resolves: #1248536 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248536 - Tracker for golang-github-armon-gomdb https://bugzilla.redhat.com/show_bug.cgi?id=1248536 -------------------------------------------------------------------------------- ================================================================================ golang-github-beorn7-perks-0-0.3.gitb965b61.fc21 (FEDORA-2015-12408) Effective Computation of Things -------------------------------------------------------------------------------- Update Information: Update spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.3.gitb965b61 - Update spec file to spec-2.0 resolves: #1248633 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.2.gitb965b61 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248633 - Tracker for golang-github-beorn7-perks https://bugzilla.redhat.com/show_bug.cgi?id=1248633 -------------------------------------------------------------------------------- ================================================================================ golang-github-bmizerany-assert-0-0.3.gite17e998.fc21 (FEDORA-2015-12453) Assertions for Go tests -------------------------------------------------------------------------------- Update Information: Update spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.3.gite17e998 - Update spec file to spec-2.0 resolves: #1248646 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.2.gite17e998 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248646 - Tracker for golang-github-bmizerany-assert https://bugzilla.redhat.com/show_bug.cgi?id=1248646 -------------------------------------------------------------------------------- ================================================================================ golang-github-bmizerany-pat-0-0.3.gitb8a3500.fc21 (FEDORA-2015-12403) A Sinatra style pattern muxer for Go's net/http library -------------------------------------------------------------------------------- Update Information: Update spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.3.gitb8a3500 - Update spec file to spec-2.0 resolves: #1248652 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.2.gitb8a3500 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248652 - Tracker for golang-github-bmizerany-pat https://bugzilla.redhat.com/show_bug.cgi?id=1248652 -------------------------------------------------------------------------------- ================================================================================ golang-github-bmizerany-perks-0-0.3.gitd9a9656.fc21 (FEDORA-2015-12445) Effective Computation of Things -------------------------------------------------------------------------------- Update Information: Update spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.3.gitd9a9656 - Update spec file to spec-2.0 resolves: #1248668 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.2.gitd9a9656 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248668 - Tracker for golang-github-bmizerany-perks https://bugzilla.redhat.com/show_bug.cgi?id=1248668 -------------------------------------------------------------------------------- ================================================================================ golang-github-boltdb-bolt-1.0-0.2.git980670a.fc21 (FEDORA-2015-12429) A low-level key/value database for Go -------------------------------------------------------------------------------- Update Information: Update of spec file to spec-2.0 Bump to upstream 980670afcebfd86727505b3061d8667195234816 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 Fridolin Pokorny <fpokorny@xxxxxxxxxx> - 1.0-0.2.git980670a - Update of spec file to spec-2.0 resolves: #1246207 * Thu Jul 23 2015 jchaloup <jchaloup@xxxxxxxxxx> - 1.0-0.1.git980670a - Bump to upstream 980670afcebfd86727505b3061d8667195234816 resolves: #1246207 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1246207 - Tracker for golang-github-boltdb-bolt https://bugzilla.redhat.com/show_bug.cgi?id=1246207 -------------------------------------------------------------------------------- ================================================================================ golang-github-codegangsta-cli-1.2.0-4.fc21 (FEDORA-2015-12450) Package for building command line apps in Go -------------------------------------------------------------------------------- Update Information: Update spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 jchaloup <jchaloup@xxxxxxxxxx> - 1.2.0-4 - Update spec file to spec-2.0 resolves: #1248680 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248680 - Tracker for golang-github-codegangsta-cli https://bugzilla.redhat.com/show_bug.cgi?id=1248680 -------------------------------------------------------------------------------- ================================================================================ golang-github-coreos-go-log-0-0.9.git840af6b.fc21 (FEDORA-2015-12457) A golang library for logging to systemd -------------------------------------------------------------------------------- Update Information: Update spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.9.git840af6b - Update spec file to spec-2.0 resolves: #1248717 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.8.git840af6b - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248717 - Tracker for golang-github-coreos-go-log https://bugzilla.redhat.com/show_bug.cgi?id=1248717 -------------------------------------------------------------------------------- ================================================================================ golang-github-coreos-go-semver-0-0.5.git568e959.fc21 (FEDORA-2015-12440) Go semantic versioning library -------------------------------------------------------------------------------- Update Information: Update spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 jchaloup <jchaloup@xxxxxxxxxx> - 0-0.5.git568e959 - Update spec file to spec-2.0 resolves: #1248718 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0-0.4.git568e959 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248718 - Tracker for golang-github-coreos-go-semver https://bugzilla.redhat.com/show_bug.cgi?id=1248718 -------------------------------------------------------------------------------- ================================================================================ golang-github-coreos-go-systemd-2-8.fc21 (FEDORA-2015-12458) Go bindings to systemd socket activation, journal and D-BUS APIs -------------------------------------------------------------------------------- Update Information: Update spec file to spec-2.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 jchaloup <jchaloup@xxxxxxxxxx> - 2-8 - Update spec file to spec-2.0 resolves: #1248722 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248722 - Tracker for golang-github-coreos-go-systemd https://bugzilla.redhat.com/show_bug.cgi?id=1248722 -------------------------------------------------------------------------------- ================================================================================ gstreamer1-plugins-good-1.4.5-3.fc21 (FEDORA-2015-12402) GStreamer plugins with good code and licensing -------------------------------------------------------------------------------- Update Information: Add missing dependencies required by ximagesrc. (#1136317) -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 18 2015 Francesco Frassinelli <fraph24@xxxxxxxxx> - 1.4.5-3 - Add missing dependencies required by ximagesrc. (#1136317) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1136317 - ximagesrc returns black screen https://bugzilla.redhat.com/show_bug.cgi?id=1136317 -------------------------------------------------------------------------------- ================================================================================ icecat-31.8.0-3.fc21 (FEDORA-2015-12439) GNU version of Firefox browser -------------------------------------------------------------------------------- Update Information: - **Fixed on secondary arches** - **Un-bundle libvpx-1.4** -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 21 2015 Antonio Trande <sagitterATfedoraproject.org> - 31.8.0-3 - Fixed on secondary arches * Mon Jul 20 2015 Antonio Trande <sagitterATfedoraproject.org> - 31.8.0-2 - Un-bundle libvpx-1.4 -------------------------------------------------------------------------------- ================================================================================ kf5-kdeclarative-5.12.0-2.fc21 (FEDORA-2015-12420) KDE Frameworks 5 Tier 3 addon for Qt declarative -------------------------------------------------------------------------------- Update Information: Backport some upstream fixes, notably to address excessive cpu usage for certain rendering tasks. -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 28 2015 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 5.12.0-2 - backport some upstream patches, .spec cosmetics -------------------------------------------------------------------------------- References: [ 1 ] Bug #1235033 - High CPU usage by plasmashell while downloading files with Konqueror https://bugzilla.redhat.com/show_bug.cgi?id=1235033 [ 2 ] Bug #1219387 - High cpu usage monitoring widgets https://bugzilla.redhat.com/show_bug.cgi?id=1219387 -------------------------------------------------------------------------------- ================================================================================ nodejs-validate-npm-package-name-2.2.2-2.fc21 (FEDORA-2015-12413) Give me a string and I'll tell you if it's a valid npm package name -------------------------------------------------------------------------------- Update Information: Add nodejs_fixdep macro -------------------------------------------------------------------------------- References: [ 1 ] Bug #1237042 - Review Request: nodejs-validate-npm-package-name - Give me a string and I'll tell you if it's a valid npm package name https://bugzilla.redhat.com/show_bug.cgi?id=1237042 -------------------------------------------------------------------------------- ================================================================================ perl-File-Find-Rule-Age-0.302-3.fc21 (FEDORA-2015-12415) Rule to match on file age -------------------------------------------------------------------------------- Update Information: Initial import (#1242724) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1242724 - Review Request: perl-File-Find-Rule-Age - Rule to match on file age https://bugzilla.redhat.com/show_bug.cgi?id=1242724 -------------------------------------------------------------------------------- ================================================================================ php-nrk-Predis-1.0.2-1.fc21 (FEDORA-2015-12449) PHP client library for Redis -------------------------------------------------------------------------------- Update Information: **Version 1.0.2** (2015-07-30) * IPv6 is now fully supported. * Added `redis` as an accepted scheme for connection parameters. When using this scheme, the rules used to parse URI strings match the provisional registration [published by IANA](http://www.iana.org/assignments/uri-schemes/prov/redis). * Added new or missing commands: `HSTRLEN` (>= 3.2), `ZREVRANGEBYLEX` (>= 2.8) and `MIGRATE` (>= 2.6). * Implemented support for the `ZADD` modifiers `NX|XX`, `CH`, `INCR` (Redis >= 3.0.2) using the simplified signature where scores and members are passed as a named array. * __FIX__: `Predis\Configuration\Options` must not trigger the autoloader when option values are strings (ISSUE #257). * __FIX__: `BITPOS` was not defined in the key-prefix processor (ISSUE #265) and in the replication strategy. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 Remi Collet <remi@xxxxxxxxxxxxxxxxx> - 1.0.2-1 - Update to 1.0.2 -------------------------------------------------------------------------------- ================================================================================ piglit-1-0.25.20150206GITi9c8b329.fc21 (FEDORA-2015-12400) Collection of automated tests for OpenGL implementations -------------------------------------------------------------------------------- Update Information: Add python-mako Requires (RHBZ# 1247936) -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 Matej Cepl <mcepl@xxxxxxxxxx> - 1-0.25.20150206GITi9c8b329 - Add python-mako Requires (RHBZ# 1247936) * Thu Jun 18 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1-0.24.20150206GITi9c8b329 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Sat May 2 2015 Kalev Lember <kalevlember@xxxxxxxxx> - 1-0.23.20150206GITi9c8b329 - Rebuilt for GCC 5 C++11 ABI change -------------------------------------------------------------------------------- References: [ 1 ] Bug #1247936 - [RPM spec] Missing python-mako dependency https://bugzilla.redhat.com/show_bug.cgi?id=1247936 -------------------------------------------------------------------------------- ================================================================================ stoken-0.9-1.fc21 (FEDORA-2015-12424) Token code generator compatible with RSA SecurID 128-bit (AES) token -------------------------------------------------------------------------------- Update Information: STDID manipulation fixes -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 Simone Caronni <negativo17@xxxxxxxxx> - 0.9-1 - Update to 0.9. * Fri Jun 19 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.81-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Mon May 4 2015 Kalev Lember <kalevlember@xxxxxxxxx> - 0.81-4 - Rebuilt for nettle soname bump * Thu Mar 26 2015 Richard Hughes <rhughes@xxxxxxxxxx> - 0.81-3 - Add an AppData file for the software center * Tue Jan 13 2015 Simone Caronni <negativo17@xxxxxxxxx> - 0.81-2 - Use nettle instead of libtomcrypt (#1177180). * Wed Dec 10 2014 Simone Caronni <negativo17@xxxxxxxxx> - 0.81-1 - Update to 0.81. * Mon Sep 8 2014 Simone Caronni <negativo17@xxxxxxxxx> - 0.8-3.git.fd74297 - Update to git master. -------------------------------------------------------------------------------- ================================================================================ whois-5.2.10-1.fc21 (FEDORA-2015-12410) Improved WHOIS client -------------------------------------------------------------------------------- Update Information: This release adds records for new generic TLDs: aeg., airtel., app., barcelona., bcn., bentley., bet., bharti., bing., bnl., bradesco., cba., cloud., commbank., crown., delta., drive., forum., game., genting., hoteles., hotmail., hsbc., ice., iinet., ipiranga., ist., istanbul., itau., jlc., jprs., lancaster., lasalle., law., lexus., live., man., microsoft., movistar., netbank., nokia., office., omega., orange., pet., play., realty., ricoh., sakura., sanofi., scor., skype., srl., starhub., statoil., studio., swatch., tatamotors., telefonica., toyota., ubs., vista., vistaprint., windows., कॉम., 点看., คอม., קום., नेट., كوم., ком., 닷컴., 大拿., 닷넷., and コム. It also updates records for ki. and vg. TLDs. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 Petr Pisar <ppisar@xxxxxxxxxx> - 5.2.10-1 - 5.2.10 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248500 - whois-5.2.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1248500 -------------------------------------------------------------------------------- ================================================================================ xfsprogs-3.2.2-2.fc21 (FEDORA-2015-12406) Utilities for managing the XFS filesystem -------------------------------------------------------------------------------- Update Information: Gabriel Vlasiu reported that xfs_metadump, part of the xfsprogs suite of tools for the XFS filesystem, did not properly obfuscate data. xfs_metadump properly obfuscates active metadata, but the rest of the space within that fs block comes through in the clear. This could lead to exposure of stale disk data via the produced metadump image. The expectation of xfs_metadump is to obfuscate all but the shortest names in the metadata, as noted in the manpage: By default, xfs_metadump obfuscates most file (regular file, directory and symbolic link) names and extended attribute names to allow the dumps to be sent without revealing confidential information. Extended attribute values are zeroed and no data is copied. The only exceptions are file or attribute names that are 4 or less characters in length. Also file names that span extents (this can only occur with the mkfs.xfs(8) options where -n size > -b size) are not obfuscated. Names between 5 and 8 characters in length inclusively are partially obfuscated. While the xfs_metadump tool can be run by unprivileged users, it requires appropriate permissions to access block devices (such as root) where the sensitive data might be dumped. An unprivileged user, without access to the block device, could not use this flaw to obtain sensitive data they would not otherwise have permission to access. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 Eric Sandeen <sandeen@xxxxxxxxxx> 3.2.2-2 - Fix CVE-2012-2150 * Thu Dec 4 2014 Eric Sandeen <sandeen@xxxxxxxxxx> 3.2.2-1 - New upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #817696 - CVE-2012-2150 xfsprogs: xfs_metadump information disclosure flaw https://bugzilla.redhat.com/show_bug.cgi?id=817696 -------------------------------------------------------------------------------- ================================================================================ zsh-5.0.8-5.fc21 (FEDORA-2015-12416) Powerful interactive shell -------------------------------------------------------------------------------- Update Information: - fix handling of command substitution in math context: http://www.zsh.org/mla/workers/2015/msg01855.html - prevent infinite recursion in ihungetc() (#1245712) -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2015 Kamil Dudka <kdudka@xxxxxxxxxx> - 5.0.8-5 - fix handling of command substitution in math context * Wed Jul 22 2015 Kamil Dudka <kdudka@xxxxxxxxxx> - 5.0.8-4 - prevent infinite recursion in ihungetc() (#1245712) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1245712 - [abrt] [faf] zsh: ihungetc(): /usr/bin/zsh killed by 11 https://bugzilla.redhat.com/show_bug.cgi?id=1245712 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
