The following Fedora 21 Security updates need testing: Age URL 213 https://bodhi.fedoraproject.org/updates/FEDORA-2015-1467 openstack-glance-2014.1.3-4.fc21 94 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9090 fossil-1.33-1.fc21 94 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9141 ceph-deploy-1.5.25-1.fc21 83 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9744 squid-3.4.13-1.fc21 72 https://bodhi.fedoraproject.org/updates/FEDORA-2015-10301 389-ds-base-1.3.3.12-1.fc21 26 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12773 python-kdcproxy-0.3.2-1.fc21 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13700 drupal6-views_bulk_operations-1.17-1.fc21 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13423 php-twig-1.20.0-1.fc21 10 https://bodhi.fedoraproject.org/updates/conntrack-tools-1.4.2-9.fc21 conntrack-tools-1.4.2-9.fc21 10 https://bodhi.fedoraproject.org/updates/mediawiki-1.24.3-1.fc21 mediawiki-1.24.3-1.fc21 10 https://bodhi.fedoraproject.org/updates/ca-certificates-2015.2.5-1.0.fc21 ca-certificates-2015.2.5-1.0.fc21 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13917 drupal7-7.39-1.fc21 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13926 gdk-pixbuf2-2.31.6-1.fc21 9 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14010 mingw-gdk-pixbuf-2.31.6-1.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14179 libreswan-3.15-1.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14200 sblim-sfcb-1.4.8-5.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14211 ntp-4.2.6p5-33.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14242 pcre-8.35-14.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14330 drupal6-ctools-1.14-1.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14363 xen-4.4.3-1.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14442 drupal6-6.37-1.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14715 onionshare-0.7.1-1.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14785 qemu-2.1.3-10.fc21 The following Fedora 21 Critical Path updates have yet to be approved: Age URL 158 https://bodhi.fedoraproject.org/updates/FEDORA-2015-4638 lcms2-2.7-1.fc21 45 https://bodhi.fedoraproject.org/updates/FEDORA-2015-11787 redhat-rpm-config-29-1.fc21 33 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12212 perl-Filter-1.55-1.fc21 32 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12402 gstreamer1-plugins-good-1.4.5-3.fc21 31 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12575 perl-Encode-2.76-1.fc21 20 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13233 yum-utils-1.1.31-28.fc21 20 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13239 yum-3.4.3-154.fc21 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13654 bash-4.3.42-1.fc21 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13747 hwdata-0.281-1.fc21 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13745 kernel-4.1.6-100.fc21 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13673 python-slip-0.6.3-1.fc21 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13926 gdk-pixbuf2-2.31.6-1.fc21 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13908 librsvg2-2.40.10-1.fc21 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13885 thunderbird-38.2.0-2.fc21 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13877 libteam-1.18-1.fc21 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13805 tigervnc-1.5.0-2.fc21 10 https://bodhi.fedoraproject.org/updates/dracut-038-40.git20150819.fc21 dracut-038-40.git20150819.fc21 10 https://bodhi.fedoraproject.org/updates/ca-certificates-2015.2.5-1.0.fc21 ca-certificates-2015.2.5-1.0.fc21 10 https://bodhi.fedoraproject.org/updates/btrfs-progs-4.1.2-1.fc21 btrfs-progs-4.1.2-1.fc21 9 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14019 nss-3.20.0-1.0.fc21 nss-softokn-3.20.0-1.0.fc21 nss-util-3.20.0-1.0.fc21 7 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14135 libpwquality-1.2.4-3.fc21 7 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14070 selinux-policy-3.13.1-105.21.fc21 7 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14065 perl-generators-1.04-1.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14242 pcre-8.35-14.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14209 vim-7.4.827-1.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14405 abrt-2.3.0-10.fc21 libreport-2.3.0-9.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14323 dnf-0.6.4-6.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14307 perl-Thread-Queue-3.06-1.fc21 The following builds have been pushed to Fedora 21 updates-testing Pound-2.7-1.fc21 golang-github-coreos-go-etcd-2.0.0-0.3.git4cceaf7.fc21 golang-github-coreos-go-iptables-0-0.1.git74b0926.fc21 groonga-5.0.7-1.fc21 java-atk-wrapper-0.33.2-0.fc21 nodejs-typeahead.js-0.10.5-3.fc21 publicsuffix-list-20150831-1.fc21 qemu-2.1.3-10.fc21 rear-1.17.2-1.fc21 shellinabox-2.18-1.fc21 udiskie-1.2.1-1.fc21 wine-1.7.50-1.fc21 Details about builds: ================================================================================ Pound-2.7-1.fc21 (FEDORA-2015-14781) Reverse proxy and load balancer -------------------------------------------------------------------------------- Update Information: * update to 2.7 final (#1258262) * drop huge downstream patch which caused PID file related issues (#1097409) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1258262 - weak Diffie-Hellman keys https://bugzilla.redhat.com/show_bug.cgi?id=1258262 [ 2 ] Bug #1097409 - Pound PID file issue https://bugzilla.redhat.com/show_bug.cgi?id=1097409 -------------------------------------------------------------------------------- ================================================================================ golang-github-coreos-go-etcd-2.0.0-0.3.git4cceaf7.fc21 (FEDORA-2015-14733) Go client library for etcd -------------------------------------------------------------------------------- Update Information: Bump to upstream 4cceaf7283b76f27c4a732b20730dcdb61053bf5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1246214 - Tracker for golang-github-coreos-go-etcd https://bugzilla.redhat.com/show_bug.cgi?id=1246214 -------------------------------------------------------------------------------- ================================================================================ golang-github-coreos-go-iptables-0-0.1.git74b0926.fc21 (FEDORA-2015-14793) Go wrapper around iptables utility -------------------------------------------------------------------------------- Update Information: First package for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1258878 - Review Request: golang-github-coreos-go-iptables - Go wrapper around iptables utility https://bugzilla.redhat.com/show_bug.cgi?id=1258878 -------------------------------------------------------------------------------- ================================================================================ groonga-5.0.7-1.fc21 (FEDORA-2015-14778) An Embeddable Fulltext Search Engine -------------------------------------------------------------------------------- Update Information: new upstream release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1258450 - groonga-5.0.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1258450 -------------------------------------------------------------------------------- ================================================================================ java-atk-wrapper-0.33.2-0.fc21 (FEDORA-2015-14740) Java ATK Wrapper -------------------------------------------------------------------------------- Update Information: updated t 0.33.2 -------------------------------------------------------------------------------- ================================================================================ nodejs-typeahead.js-0.10.5-3.fc21 (FEDORA-2015-14729) Autocomplete library for JavaScript -------------------------------------------------------------------------------- Update Information: Inspired by twitter.com's autocomplete search functionality, typeahead.js is a flexible JavaScript library that provides a strong foundation for building robust typeaheads. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1151818 - Review Request: nodejs-typeahead.js - Autocomplete library for JavaScript https://bugzilla.redhat.com/show_bug.cgi?id=1151818 -------------------------------------------------------------------------------- ================================================================================ publicsuffix-list-20150831-1.fc21 (FEDORA-2015-14730) Cross-vendor public domain suffix database -------------------------------------------------------------------------------- Update Information: The latest revision - 20150831 -------------------------------------------------------------------------------- ================================================================================ qemu-2.1.3-10.fc21 (FEDORA-2015-14785) QEMU is a FAST! processor emulator -------------------------------------------------------------------------------- Update Information: * CVE-2015-5225: heap memory corruption in vnc_refresh_server_surface (bz #1255899) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1255896 - CVE-2015-5225 Qemu: ui: vnc: heap memory corruption in vnc_refresh_server_surface https://bugzilla.redhat.com/show_bug.cgi?id=1255896 -------------------------------------------------------------------------------- ================================================================================ rear-1.17.2-1.fc21 (FEDORA-2015-14770) Relax-and-Recover is a Linux disaster recovery and system migration tool -------------------------------------------------------------------------------- Update Information: For a changelog see the rear-release-notes.txt file. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1239009 - rear: Insecure temporary file usage https://bugzilla.redhat.com/show_bug.cgi?id=1239009 -------------------------------------------------------------------------------- ================================================================================ shellinabox-2.18-1.fc21 (FEDORA-2015-14777) Web based AJAX terminal emulator -------------------------------------------------------------------------------- Update Information: - Fixed handling of large HTTP packets - Fixed services cleanup on session timeout - Added logging to system log files for important/fatal errors - Support for perfect forward secrecy (SSL) - Disabled secure client initiated renegotiations (SSL) - Minor CSS fixes - SSL security issues - Firefox international keyboard issue - 256 color support - Message passing support for embedded shellinabox - Unix domain socket support - Real IP recognition over proxy - Other minor bug fixes and improvements - Packaging: add license macro, switch to GitHub sources -------------------------------------------------------------------------------- References: [ 1 ] Bug #1252109 - We package an unmaintained fork of shellinabox https://bugzilla.redhat.com/show_bug.cgi?id=1252109 -------------------------------------------------------------------------------- ================================================================================ udiskie-1.2.1-1.fc21 (FEDORA-2015-14753) Removable disk auto-mounter -------------------------------------------------------------------------------- Update Information: udiskie-1.2.1-1.fc21 - Update to 1.2.1. udiskie-1.2.1-1.fc22 - Update to 1.2.1. udiskie-1.2.1-1.el7 - Update to 1.2.1. udiskie-1.2.1-1.fc23 - Update to 1.2.1. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1258675 - udiskie-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1258675 -------------------------------------------------------------------------------- ================================================================================ wine-1.7.50-1.fc21 (FEDORA-2015-14728) A compatibility layer for windows applications -------------------------------------------------------------------------------- Update Information: * First steps of the Direct3D 11 implementation. * Better font matching in DirectWrite. * Support for OpenMP on ARM platforms * Various bug fixes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1256197 - wine-1.7.50 is available https://bugzilla.redhat.com/show_bug.cgi?id=1256197 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
