The following Fedora 22 Security updates need testing: Age URL 147 https://bodhi.fedoraproject.org/updates/FEDORA-2015-5878 echoping-6.1-0.beta.r434svn.1.fc22 96 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9110 fossil-1.33-1.fc22 96 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9185 ceph-deploy-1.5.25-1.fc22 65 https://bodhi.fedoraproject.org/updates/FEDORA-2015-10944 openhpi-3.4.0-2.fc22 52 https://bodhi.fedoraproject.org/updates/FEDORA-2015-11473 squid-3.4.13-2.fc22 29 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12781 python-kdcproxy-0.3.2-1.fc22 15 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13758 drupal6-views_bulk_operations-1.17-1.fc22 15 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13616 mod_nss-1.0.11-4.fc22 14 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13823 python-django-1.8.4-1.fc22 13 https://bodhi.fedoraproject.org/updates/conntrack-tools-1.4.2-9.fc22 conntrack-tools-1.4.2-9.fc22 13 https://bodhi.fedoraproject.org/updates/ca-certificates-2015.2.5-1.0.fc22 ca-certificates-2015.2.5-1.0.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13916 drupal7-7.39-1.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13918 ipsilon-1.0.0-5.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13925 gdk-pixbuf2-2.31.6-1.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13945 wireshark-1.12.7-2.fc22 11 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14011 mingw-gdk-pixbuf-2.31.6-1.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14199 sblim-sfcb-1.4.9-2.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14212 ntp-4.2.6p5-33.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14235 pcre-8.37-4.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14331 drupal6-ctools-1.14-1.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14362 xen-4.5.1-6.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14444 drupal6-6.37-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14663 vorbis-tools-1.4.0-20.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14716 onionshare-0.7.1-1.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14761 qemu-2.3.1-2.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14848 libwmf-0.2.8.4-46.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14851 libvdpau-1.1.1-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14902 ipython-2.4.1-8.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14952 pdns-3.4.6-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14958 bind99-9.9.7-7.P3.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14970 golang-1.5-6.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14977 php-5.6.13-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14983 pcs-0.9.139-7.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14988 moodle-2.8.7-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-15001 rolekit-0.3.2-2.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-15041 bind-9.10.2-5.P4.fc22 The following Fedora 22 Critical Path updates have yet to be approved: Age URL 93 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9342 perl-Curses-1.32-1.fc22 23 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13210 yum-3.4.3-508.fc22 15 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13652 hwdata-0.281-1.fc22 15 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13646 libreport-2.6.2-2.fc22,abrt-2.6.1-3.fc22,gnome-abrt-1.2.0-4.fc22 14 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13833 gvfs-1.24.2-1.fc22 14 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13826 evolution-3.16.5-2.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13954 xfdesktop-4.12.3-2.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13925 gdk-pixbuf2-2.31.6-1.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13909 librsvg2-2.40.10-1.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13899 mutter-3.16.3-3.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13860 PackageKit-1.0.8-2.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13801 tigervnc-1.5.0-2.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13797 fontconfig-2.11.94-4.fc22 13 https://bodhi.fedoraproject.org/updates/ca-certificates-2015.2.5-1.0.fc22 ca-certificates-2015.2.5-1.0.fc22 13 https://bodhi.fedoraproject.org/updates/freetype-2.5.5-2.fc22 freetype-2.5.5-2.fc22 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14145 curl-7.40.0-6.fc22 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14134 libpwquality-1.2.4-3.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14243 binutils-2.25-9.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14235 pcre-8.37-4.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14218 xulrunner-40.0-1.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14450 pyparted-3.10.7-1.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14403 libreport-2.6.2-3.fc22 abrt-2.6.1-4.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14682 libldb-1.1.21-1.fc22 libtdb-1.3.7-1.fc22 libtevent-0.9.25-1.fc22 libtalloc-2.1.3-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14579 gnome-packagekit-3.16.0-2.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14533 parted-3.2-10.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14742 samba-4.2.3-0.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-10143 NetworkManager-1.0.6-2.fc22 NetworkManager-openswan-1.0.6-2.fc22 NetworkManager-openvpn-1.0.6-3.fc22 NetworkManager-vpnc-1.0.6-3.fc22 network-manager-applet-1.0.6-2.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-15041 bind-9.10.2-5.P4.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14931 systemd-219-23.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14913 gdb-7.9.1-18.fc22 The following builds have been pushed to Fedora 22 updates-testing SDL_mixer-1.2.12-10.fc22 bind-9.10.2-5.P4.fc22 bind99-9.9.7-7.P3.fc22 bluedevil-5.4.0-1.fc22 btrfs-progs-4.2-1.fc22 cpanspec-1.78-23.fc22 cross-gcc-5.2.1-3.fc22 cscppc-1.3.0-1.fc22 dnf-plugin-system-upgrade-0.4.0-1.fc22 ghc-gtk3-0.14.1-1.fc22 golang-1.5-6.fc22 golang-1.5-7.fc22 gtk2hs-buildtools-0.13.0.4-1.fc22 kde-cli-tools-5.4.0-1.fc22 kde-gtk-config-5.4.0-1.fc22 kdecoration-5.4.0-1.fc22 kdeplasma-addons-5.4.0-1.fc22 kf5-baloo-5.13.0-1.fc22 kf5-kwayland-5.4.0-1.fc22 khelpcenter-5.4.0-1.fc22 khotkeys-5.4.0-1.fc22 kinfocenter-5.4.0-1.fc22 kio-extras-15.08.0-1.fc22 kmenuedit-5.4.0-1.fc22 kscreen-5.4.0-1.fc22 ksshaskpass-5.4.0-1.fc22 ksysguard-5.4.0-1.fc22 kwayland-integration-5.4.0-1.fc22 kwin-5.4.0-4.fc22 kwrited-5.4.0-1.fc22 libinput-1.0.1-1.fc22 libkscreen-qt5-5.4.0-1.fc22 libksysguard-5.4.0-1.fc22 libreoffice-4.4.5.2-5.fc22 minimodem-0.22.1-1.fc22 mod_auth_gssapi-1.3.1-1.fc22 moodle-2.8.7-1.fc22 mosquitto-1.4.3-1.fc22 most-5.0.0-12.a.1.fc22 nodejs-single-line-log-1.0.0-1.fc22 ovirt-engine-sdk-java-3.5.4.0-1.fc22 owncloud-client-1.8.4-3.fc22 oxygen-fonts-5.4.0-1.fc22 pcs-0.9.139-7.fc22 pdns-3.4.6-1.fc22 perl-Log-Dispatch-2.50-1.fc22 php-5.6.13-1.fc22 php-horde-Horde-Imap-Client-2.29.2-1.fc22 php-horde-Horde-Mime-2.9.2-1.fc22 plasma-breeze-5.4.0-1.fc22 plasma-desktop-5.4.0-2.fc22 plasma-milou-5.4.0-1.fc22 plasma-nm-5.4.0-1.fc22 plasma-oxygen-5.4.0-1.fc22 plasma-pa-5.4.0-1.fc22 plasma-sdk-5.4.0-1.fc22 plasma-systemsettings-5.4.0-1.fc22 plasma-workspace-5.4.0-6.fc22.1 plasma-workspace-wallpapers-5.4.0-1.fc22 polkit-kde-5.4.0-1.fc22 powerdevil-5.4.0-1.fc22 python-cliapp-1.20150829-1.fc22 python-phyghtmap-1.74-1.fc22 python-rpmfluff-0.4.3-1.fc22 qxmpp-0.9.2-1.fc22 rabbitmq-server-3.5.4-3.fc22 rolekit-0.3.2-2.fc22 ruby-ncurses-1.3.1-16.fc22 sddm-kcm-5.4.0-1.fc22 shinken-2.4.1-5.fc22 socket_wrapper-1.1.4-1.fc22 statscache-0.0.1-1.fc22 subunit-1.1.0-5.fc22 systemd-219-23.fc22 udiskie-1.3.0-1.fc22 xiphos-4.0.4-1.fc22 Details about builds: ================================================================================ SDL_mixer-1.2.12-10.fc22 (FEDORA-2015-14991) Simple DirectMedia Layer - Sample Mixer Library -------------------------------------------------------------------------------- Update Information: SDL_mixer-1.2.12-10.fc22 - Enable fluidsynth support, BZ 1218776. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1218776 - Please, enable support for fluidsynth https://bugzilla.redhat.com/show_bug.cgi?id=1218776 -------------------------------------------------------------------------------- ================================================================================ bind-9.10.2-5.P4.fc22 (FEDORA-2015-15041) The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server -------------------------------------------------------------------------------- Update Information: Fixed https://bugzilla.redhat.com/show_bug.cgi?id=1259690 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1259690 - CVE-2015-5722 bind: malformed DNSSEC key failed assertion denial of service [fedora-21] https://bugzilla.redhat.com/show_bug.cgi?id=1259690 -------------------------------------------------------------------------------- ================================================================================ bind99-9.9.7-7.P3.fc22 (FEDORA-2015-14958) The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries -------------------------------------------------------------------------------- Update Information: Fixed https://bugzilla.redhat.com/show_bug.cgi?id=1259563 https://bugzilla.redhat.com/show_bug.cgi?id=1259691 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1259085 - CVE-2015-5986 Bind: fromwire_openpgpkey() incorrect boundary check Denial of Service https://bugzilla.redhat.com/show_bug.cgi?id=1259085 [ 2 ] Bug #1259087 - CVE-2015-5722 bind: malformed DNSSEC key failed assertion denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1259087 -------------------------------------------------------------------------------- ================================================================================ bluedevil-5.4.0-1.fc22 (FEDORA-2015-14430) Bluetooth stack for KDE -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ btrfs-progs-4.2-1.fc22 (FEDORA-2015-15044) Userspace programs for btrfs -------------------------------------------------------------------------------- Update Information: btrfs-progs-4.2-1.fc22 - New upstream release btrfs-progs-4.2-1.fc23 - New upstream release ---- New upstream release 4.1.2. Also fix mkfs to not proceed with invalid options. -------------------------------------------------------------------------------- ================================================================================ cpanspec-1.78-23.fc22 (FEDORA-2015-14969) RPM spec file generation utility -------------------------------------------------------------------------------- Update Information: cpanspec now prefers dnf over yum's repoquery, if available. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1259553 - cpanspec needs to use dnf repoquery https://bugzilla.redhat.com/show_bug.cgi?id=1259553 -------------------------------------------------------------------------------- ================================================================================ cross-gcc-5.2.1-3.fc22 (FEDORA-2015-14934) Cross C compiler -------------------------------------------------------------------------------- Update Information: Rebase on gcc-5.2.1 and add ppcle and ppc64le support in binutils [BZ 1255946] ---- Rebase on gcc-5.2.1 and add ppcle and ppc64le support in binutils [BZ 1255946] -------------------------------------------------------------------------------- ================================================================================ cscppc-1.3.0-1.fc22 (FEDORA-2015-14975) A compiler wrapper that runs cppcheck in background -------------------------------------------------------------------------------- Update Information: - update to latest upstream -------------------------------------------------------------------------------- ================================================================================ dnf-plugin-system-upgrade-0.4.0-1.fc22 (FEDORA-2015-15002) System Upgrade plugin for DNF -------------------------------------------------------------------------------- Update Information: This is the first release of the `dnf system-upgrade` plugin, which replaces `fedup`. -------------------------------------------------------------------------------- ================================================================================ ghc-gtk3-0.14.1-1.fc22 (FEDORA-2015-14925) Binding to the Gtk+ 3 graphical user interface library -------------------------------------------------------------------------------- Update Information: New ghc-gtk3-0.14.1-1.fc22 - Haskell gtk3 binding gtk2hs- buildtools-0.13.0.4-1.fc22 - update to 0.13.0.4 - remove aarch64 build-tools hacks - use %license -------------------------------------------------------------------------------- References: [ 1 ] Bug #1234110 - gtk2hs-buildtools-0.13.0.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1234110 [ 2 ] Bug #1045963 - Review Request: ghc-gtk3 - Binding to the Gtk+ graphical user interface library https://bugzilla.redhat.com/show_bug.cgi?id=1045963 -------------------------------------------------------------------------------- ================================================================================ golang-1.5-6.fc22 (FEDORA-2015-14970) The Go Programming Language -------------------------------------------------------------------------------- Update Information: update to go1.5; shared objects for x86_64; gdb fixes; full http smuggle fix; fixes for tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #1250352 - CVE-2015-5739 CVE-2015-5740 CVE-2015-5741 golang: HTTP request smuggling in net/http library https://bugzilla.redhat.com/show_bug.cgi?id=1250352 -------------------------------------------------------------------------------- ================================================================================ golang-1.5-7.fc22 (FEDORA-2015-15017) The Go Programming Language -------------------------------------------------------------------------------- Update Information: bz1258166 remove srpm macros, for go-srpm-macros -------------------------------------------------------------------------------- References: [ 1 ] Bug #1258166 - Please remove macros.golang from golang https://bugzilla.redhat.com/show_bug.cgi?id=1258166 -------------------------------------------------------------------------------- ================================================================================ gtk2hs-buildtools-0.13.0.4-1.fc22 (FEDORA-2015-14925) Tools to build the Gtk2Hs suite of User Interface libraries -------------------------------------------------------------------------------- Update Information: New ghc-gtk3-0.14.1-1.fc22 - Haskell gtk3 binding gtk2hs- buildtools-0.13.0.4-1.fc22 - update to 0.13.0.4 - remove aarch64 build-tools hacks - use %license -------------------------------------------------------------------------------- References: [ 1 ] Bug #1234110 - gtk2hs-buildtools-0.13.0.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1234110 [ 2 ] Bug #1045963 - Review Request: ghc-gtk3 - Binding to the Gtk+ graphical user interface library https://bugzilla.redhat.com/show_bug.cgi?id=1045963 -------------------------------------------------------------------------------- ================================================================================ kde-cli-tools-5.4.0-1.fc22 (FEDORA-2015-14430) Tools based on KDE Frameworks 5 to better interact with the system -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ kde-gtk-config-5.4.0-1.fc22 (FEDORA-2015-14430) Configure the appearance of GTK apps in KDE -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ kdecoration-5.4.0-1.fc22 (FEDORA-2015-14430) A plugin-based library to create window decorations -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ kdeplasma-addons-5.4.0-1.fc22 (FEDORA-2015-14430) Additional Plasmoids for Plasma 5. -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ kf5-baloo-5.13.0-1.fc22 (FEDORA-2015-14430) A Tier 3 KDE Frameworks 5 module that provides indexing and search functionality -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ kf5-kwayland-5.4.0-1.fc22 (FEDORA-2015-14430) KDE Frameworks 5 library that wraps Client and Server Wayland libraries -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ khelpcenter-5.4.0-1.fc22 (FEDORA-2015-14430) Application to show KDE Application's documentation -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ khotkeys-5.4.0-1.fc22 (FEDORA-2015-14430) Application to configure hotkeys in KDE -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ kinfocenter-5.4.0-1.fc22 (FEDORA-2015-14430) KDE Info Center -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ kio-extras-15.08.0-1.fc22 (FEDORA-2015-14430) Additional components to increase the functionality of KIO Framework -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ kmenuedit-5.4.0-1.fc22 (FEDORA-2015-14430) KDE menu editor -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ kscreen-5.4.0-1.fc22 (FEDORA-2015-14430) KDE Display Management software -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ ksshaskpass-5.4.0-1.fc22 (FEDORA-2015-14430) A ssh-add helper that uses kwallet and kpassworddialog -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ ksysguard-5.4.0-1.fc22 (FEDORA-2015-14430) KDE Process Management application -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ kwayland-integration-5.4.0-1.fc22 (FEDORA-2015-14430) Provides integration plugins for various KDE Frameworks for Wayland -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ kwin-5.4.0-4.fc22 (FEDORA-2015-14430) KDE Window manager -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ kwrited-5.4.0-1.fc22 (FEDORA-2015-14430) KDE Write Daemon -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ libinput-1.0.1-1.fc22 (FEDORA-2015-14944) Input device library -------------------------------------------------------------------------------- Update Information: libinput 1.0.1, fixes touchpad scrolling on the lenovo x230 ---- libinput 1.0 libinput 1.0RC1, improves short touchpad scroll motions -------------------------------------------------------------------------------- References: [ 1 ] Bug #1249365 - Two finger scrolling is insensitive for small movements, then too sensitive https://bugzilla.redhat.com/show_bug.cgi?id=1249365 -------------------------------------------------------------------------------- ================================================================================ libkscreen-qt5-5.4.0-1.fc22 (FEDORA-2015-14430) KDE display configuration library -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ libksysguard-5.4.0-1.fc22 (FEDORA-2015-14430) Library for managing processes running on the system -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ libreoffice-4.4.5.2-5.fc22 (FEDORA-2015-14942) Free Software Productivity Suite -------------------------------------------------------------------------------- Update Information: libreoffice-4.4.5.2-5.fc22 - Resolves: tdf#92379 Writer ODF style import background compatibility - Resolves: tdf#89245 Calc ODF header/footer export background image loss - Resolves: rhbz#1256843 no obvious means to close template dialog - Related: rhbz#1255200 apparent missing stylesheet - implement undo of delete impress cell contents ---- libreoffice-4.4.5.2-4.fc22 - implement undo for equalize objects - time stamp object selections and use newest as ref for equalization ---- Fix copy and paste of writer comment text resulting in black character background ---- checkboxes inverted with opengl enabled -------------------------------------------------------------------------------- References: [ 1 ] Bug #1255200 - None https://bugzilla.redhat.com/show_bug.cgi?id=1255200 [ 2 ] Bug #1242183 - Icons and theme incorrectly rendered with enabled OpenGL option https://bugzilla.redhat.com/show_bug.cgi?id=1242183 -------------------------------------------------------------------------------- ================================================================================ minimodem-0.22.1-1.fc22 (FEDORA-2015-14926) General-purpose software audio FSK modem -------------------------------------------------------------------------------- Update Information: Latest upstream release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1164134 - minimodem-0.22 is available https://bugzilla.redhat.com/show_bug.cgi?id=1164134 -------------------------------------------------------------------------------- ================================================================================ mod_auth_gssapi-1.3.1-1.fc22 (FEDORA-2015-15032) A GSSAPI Authentication module for Apache -------------------------------------------------------------------------------- Update Information: mod_auth_gssapi-1.3.1-1.fc22 - Viking 2 landing (1976) release (1.3.1) mod_auth_gssapi-1.3.1-1.fc23 - Viking 2 landing (1976) release (1.3.1) -------------------------------------------------------------------------------- ================================================================================ moodle-2.8.7-1.fc22 (FEDORA-2015-14988) A Course Management System -------------------------------------------------------------------------------- Update Information: moodle-2.8.7-1.fc22 - Latest upstream release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1242777 - CVE-2015-3273 CVE-2015-3272 CVE-2015-3275 CVE-2015-3274 moodle: multiple flaws fixed in 2.9.1, 2.8.7, and 2.7.9 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1242777 [ 2 ] Bug #1222602 - CVE-2015-3181 CVE-2015-3180 CVE-2015-3178 CVE-2015-3179 CVE-2015-3176 CVE-2015-3177 CVE-2015-3174 CVE-2015-3175 moodle: several flaws fixed in 2.9, 2.8.6, 2.7.8, 2.6.11 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1222602 [ 3 ] Bug #1221278 - moodle: multiple unspecified flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1221278 -------------------------------------------------------------------------------- ================================================================================ mosquitto-1.4.3-1.fc22 (FEDORA-2015-14930) An Open Source MQTT v3.1/v3.1.1 Broker -------------------------------------------------------------------------------- Update Information: Update to new upstream version 1.4.3 -------------------------------------------------------------------------------- ================================================================================ most-5.0.0-12.a.1.fc22 (FEDORA-2015-15018) more, less, most -------------------------------------------------------------------------------- Update Information: Fixed "color overstrike and color underline in .mostrc have no effect" -------------------------------------------------------------------------------- References: [ 1 ] Bug #1230278 - color overstrike and color underline in .mostrc have no effect https://bugzilla.redhat.com/show_bug.cgi?id=1230278 -------------------------------------------------------------------------------- ================================================================================ nodejs-single-line-log-1.0.0-1.fc22 (FEDORA-2015-15012) Keep writing to the same line in the terminal -------------------------------------------------------------------------------- Update Information: New nodejs packages -------------------------------------------------------------------------------- References: [ 1 ] Bug #1257340 - Review Request: nodejs-single-line-log - Keep writing to the same line in the terminal https://bugzilla.redhat.com/show_bug.cgi?id=1257340 -------------------------------------------------------------------------------- ================================================================================ ovirt-engine-sdk-java-3.5.4.0-1.fc22 (FEDORA-2015-15037) oVirt Engine Software Development Kit (Java) -------------------------------------------------------------------------------- Update Information: Update to upstream 3.5.4.0 -------------------------------------------------------------------------------- ================================================================================ owncloud-client-1.8.4-3.fc22 (FEDORA-2015-14998) The ownCloud Client -------------------------------------------------------------------------------- Update Information: Package rename -------------------------------------------------------------------------------- References: [ 1 ] Bug #1202805 - Review Request: owncloud-client - The ownCloud Client https://bugzilla.redhat.com/show_bug.cgi?id=1202805 -------------------------------------------------------------------------------- ================================================================================ oxygen-fonts-5.4.0-1.fc22 (FEDORA-2015-14430) Oxygen fonts created by the KDE Community -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ pcs-0.9.139-7.fc22 (FEDORA-2015-14983) Pacemaker Configuration System -------------------------------------------------------------------------------- Update Information: pcs-0.9.139-7.fc22 - Fix for CVE-2015-5189 incorrect authorization - Fix for CVE-2015-5190 command injection -------------------------------------------------------------------------------- ================================================================================ pdns-3.4.6-1.fc22 (FEDORA-2015-14952) A modern, advanced and high performance authoritative-only nameserver -------------------------------------------------------------------------------- Update Information: - Upstream released new version - Security fix for CVE-2015-5230 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1257229 - CVE-2015-5230 pdns: denial of service due to memory leak in exception handling routines https://bugzilla.redhat.com/show_bug.cgi?id=1257229 -------------------------------------------------------------------------------- ================================================================================ perl-Log-Dispatch-2.50-1.fc22 (FEDORA-2015-14960) Dispatches messages to one or more outputs -------------------------------------------------------------------------------- Update Information: perl-Log-Dispatch-2.50-1.fc22 - Upstream update. perl-Log- Dispatch-2.50-1.fc21 - Upstream update. perl-Log-Dispatch-2.50-1.fc23 - Upstream update. ---- perl-Log-Dispatch-2.49-1.fc23 - Upstream update. perl-Log-Dispatch-2.49-1.fc22 - Upstream update. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1258940 - None https://bugzilla.redhat.com/show_bug.cgi?id=1258940 -------------------------------------------------------------------------------- ================================================================================ php-5.6.13-1.fc22 (FEDORA-2015-14977) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information: 03 Sep 2015, **PHP 5.6.13** **Core:** * Fixed bug #69900 (Too long timeout on pipes). (Anatol) * Fixed bug #69487 (SAPI may truncate POST data). (cmb) * Fixed bug #70198 (Checking liveness does not work as expected). (Shafreeck Sea, Anatol Belski) * Fixed bug #70172 (Use After Free Vulnerability in unserialize()). (Stas) * Fixed bug #70219 (Use after free vulnerability in session deserializer). (taoguangchen at icloud dot com) **CLI server:** * Fixed bug #66606 (Sets HTTP_CONTENT_TYPE but not CONTENT_TYPE). (wusuopu, cmb) * Fixed bug #70264 (CLI server directory traversal). (cmb) **Date:** * Fixed bug #70266 (DateInterval::__construct.interval_spec is not supposed to be optional). (cmb) * Fixed bug #70277 (new DateTimeZone($foo) is ignoring text after null byte). (cmb) **EXIF:** * Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes). (Stas) **hash:** * Fixed bug #70312 (HAVAL gives wrong hashes in specific cases). (letsgolee at naver dot com) **MCrypt:** * Fixed bug #69833 (mcrypt fd caching not working). (Anatol) **Opcache:** * Fixed bug #70237 (Empty while and do-while segmentation fault with opcode on CLI enabled). (Dmitry, Laruence) **PCRE:** * Fixed bug #70232 (Incorrect bump-along behavior with \K and empty string match). (cmb) * Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions). (Anatol Belski) **SOAP:** * Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE). (Stas) **SPL:** * Fixed bug #70290 (Null pointer deref (segfault) in spl_autoload via ob_start). (hugh at allthethings dot co dot nz) * Fixed bug #70303 (Incorrect constructor reflection for ArrayObject). (cmb) * Fixed bug #70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage). (taoguangchen at icloud dot com) * Fixed bug #70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList). (taoguangchen at icloud dot com) **Standard:** * Fixed bug #70052 (getimagesize() fails for very large and very small WBMP). (cmb) * Fixed bug #70157 (parse_ini_string() segmentation fault with INI_SCANNER_TYPED). (Tjerk) **XSLT:** * Fixed bug #69782 (NULL pointer dereference). (Stas) **ZIP:** * Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories). (neal at fb dot com) -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Imap-Client-2.29.2-1.fc22 (FEDORA-2015-14980) Horde IMAP abstraction interface -------------------------------------------------------------------------------- Update Information: **Horde_Mime 2.9.2** * [mjr] Correctly work around PHP bug 65776. **Horde_Imap_Client 2.29.2** * [mms] Improved performance of Horde_Imap_Client_Data_Thread object when containing large number of messages (Request 14075). * [mms] Catch translation errors when creating Exceptions (PR 143; baso10dev). -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Mime-2.9.2-1.fc22 (FEDORA-2015-14980) Horde MIME Library -------------------------------------------------------------------------------- Update Information: **Horde_Mime 2.9.2** * [mjr] Correctly work around PHP bug 65776. **Horde_Imap_Client 2.29.2** * [mms] Improved performance of Horde_Imap_Client_Data_Thread object when containing large number of messages (Request 14075). * [mms] Catch translation errors when creating Exceptions (PR 143; baso10dev). -------------------------------------------------------------------------------- ================================================================================ plasma-breeze-5.4.0-1.fc22 (FEDORA-2015-14430) Artwork, styles and assets for the Breeze visual style for the Plasma Desktop -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ plasma-desktop-5.4.0-2.fc22 (FEDORA-2015-14430) Plasma Desktop shell -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ plasma-milou-5.4.0-1.fc22 (FEDORA-2015-14430) A dedicated KDE search application built on top of Baloo -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ plasma-nm-5.4.0-1.fc22 (FEDORA-2015-14430) Plasma Next applet written in QML for managing network connections -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ plasma-oxygen-5.4.0-1.fc22 (FEDORA-2015-14430) Plasma and Qt widget style and window decorations for Plasma 5 and KDE 4 -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ plasma-pa-5.4.0-1.fc22 (FEDORA-2015-14430) Plasma applet for audio volume management using PulseAudio -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ plasma-sdk-5.4.0-1.fc22 (FEDORA-2015-14430) Development tools for Plasma 5 -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ plasma-systemsettings-5.4.0-1.fc22 (FEDORA-2015-14430) KDE's System Settings application -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ plasma-workspace-5.4.0-6.fc22.1 (FEDORA-2015-14430) Plasma workspace, applications and applets -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ plasma-workspace-wallpapers-5.4.0-1.fc22 (FEDORA-2015-14430) Additional wallpapers for Plasma workspace -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ polkit-kde-5.4.0-1.fc22 (FEDORA-2015-14430) PolicyKit integration for KDE Desktop -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ powerdevil-5.4.0-1.fc22 (FEDORA-2015-14430) Manages the power consumption settings of a Plasma Shell -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ python-cliapp-1.20150829-1.fc22 (FEDORA-2015-15006) Python framework for Unix command line programs -------------------------------------------------------------------------------- Update Information: Important, backwards incompatible bug fixes: * Jan Gerber fixed string list option handling. Command line options no longer parse values by commas, so that `--foo=bar,foobar` results in a single value `bar,foobar`, instead of two values (`bar` and `foobar`). Also, in configuration files, values may be quoted with double quotes. Bug fixes: * Memory use profiling with Meliae was fixed. New features: * Richard Ipsum added the `cliapp.Application.get_subcommand_usage` method to return a short usage text for a subcommand. This allows better error message. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1258184 - python-cliapp-1.20150829.orig is available https://bugzilla.redhat.com/show_bug.cgi?id=1258184 -------------------------------------------------------------------------------- ================================================================================ python-phyghtmap-1.74-1.fc22 (FEDORA-2015-15027) Generate OSM contour lines from NASA SRTM data -------------------------------------------------------------------------------- Update Information: * Fixed bug causing phyghtmap crashes when writing single output files using parallelization. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1258852 - python-phyghtmap-1.74.orig is available https://bugzilla.redhat.com/show_bug.cgi?id=1258852 -------------------------------------------------------------------------------- ================================================================================ python-rpmfluff-0.4.3-1.fc22 (FEDORA-2015-14935) Lightweight way of building RPMs, and sabotaging them -------------------------------------------------------------------------------- Update Information: python3-rpmfluff depends on rpm-build now as well ---- python- rpmfluff-0.4.2-1.fc22 - John Dulaney implemented weak dependencies -------------------------------------------------------------------------------- References: [ 1 ] Bug #1259500 - None https://bugzilla.redhat.com/show_bug.cgi?id=1259500 [ 2 ] Bug #1253059 - Add support for rpm Recommends, patch included https://bugzilla.redhat.com/show_bug.cgi?id=1253059 -------------------------------------------------------------------------------- ================================================================================ qxmpp-0.9.2-1.fc22 (FEDORA-2015-14947) Qt XMPP Library -------------------------------------------------------------------------------- Update Information: qxmpp-0.9.2-1.fc21 - v0.9.2. Introducing libraries for qt5. Documentation into the separate package qxmpp-0.9.2-1.fc22 - v0.9.2. Introducing libraries for qt5. Documentation into the separate package qxmpp-0.9.2-1.fc23 - v0.9.2. Introducing libraries for qt5. Documentation into the separate package ---- qxmpp-0.9.0-1.fc21 - v0.9.0 qxmpp-0.9.0-1.fc22 - v0.9.0 qxmpp-0.9.0-1.fc23 - v0.9.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1258229 - None https://bugzilla.redhat.com/show_bug.cgi?id=1258229 [ 2 ] Bug #1131114 - qxmpp-v0.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1131114 -------------------------------------------------------------------------------- ================================================================================ rabbitmq-server-3.5.4-3.fc22 (FEDORA-2015-15009) The RabbitMQ server -------------------------------------------------------------------------------- Update Information: Fix service restart on package upgrade (RHBZ#1259564) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1259564 - rabbitmq-server stops (instead of restart) during update to rabbitmq-server-3.3.5-5.el7.noarch https://bugzilla.redhat.com/show_bug.cgi?id=1259564 -------------------------------------------------------------------------------- ================================================================================ rolekit-0.3.2-2.fc22 (FEDORA-2015-15001) A server daemon with D-Bus interface providing a server roles -------------------------------------------------------------------------------- Update Information: rolekit-0.3.2-2.fc22 - Fix permissions on role JSON settings files to avoid leaking sensitive info -------------------------------------------------------------------------------- ================================================================================ ruby-ncurses-1.3.1-16.fc22 (FEDORA-2015-14937) A module for ruby applications for using ncurses interfaces -------------------------------------------------------------------------------- Update Information: ruby-ncurses-1.3.1-16.fc22 - Fix Ruby 2.2 compatibility. -------------------------------------------------------------------------------- ================================================================================ sddm-kcm-5.4.0-1.fc22 (FEDORA-2015-14430) SDDM KDE configuration module -------------------------------------------------------------------------------- Update Information: Plasma 5.4.0, see also https://www.kde.org/announcements/plasma-5.4.0.php -------------------------------------------------------------------------------- ================================================================================ shinken-2.4.1-5.fc22 (FEDORA-2015-15010) Python Monitoring tool -------------------------------------------------------------------------------- Update Information: Fix Bug 1257871 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1257871 - shinken-broker systemd script failed to restart broker daemon https://bugzilla.redhat.com/show_bug.cgi?id=1257871 -------------------------------------------------------------------------------- ================================================================================ socket_wrapper-1.1.4-1.fc22 (FEDORA-2015-14959) A library passing all socket communications through Unix sockets -------------------------------------------------------------------------------- Update Information: Update to version 1.1.4 -------------------------------------------------------------------------------- ================================================================================ statscache-0.0.1-1.fc22 (FEDORA-2015-15022) A daemon to build and keep fedmsg statistics -------------------------------------------------------------------------------- Update Information: Initial packaging. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1234605 - Review Request: statscache - A daemon to build and keep fedmsg statistics https://bugzilla.redhat.com/show_bug.cgi?id=1234605 -------------------------------------------------------------------------------- ================================================================================ subunit-1.1.0-5.fc22 (FEDORA-2015-14967) C bindings for subunit -------------------------------------------------------------------------------- Update Information: Backport upstream patches (RHBZ#1259286) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1259286 - subunit tests throw Expecting a string b https://bugzilla.redhat.com/show_bug.cgi?id=1259286 -------------------------------------------------------------------------------- ================================================================================ systemd-219-23.fc22 (FEDORA-2015-14931) A System and Service Manager -------------------------------------------------------------------------------- Update Information: systemd-219-23.fc22 - Fix: Document the need to regenerate initrd in order to mask files under /usr (#1256966) - Fix: Laptop sometimes doesn't suspend when the lid is closed (#1249822) - Fix: systemctl edit falls back to 'nano' when EDITOR contains spaces (#1231949) - Fix: failure should be logged (#1241371) - Fix: journalctl -f broken with initially empty filter result (#1253649) -------------------------------------------------------------------------------- ================================================================================ udiskie-1.3.0-1.fc22 (FEDORA-2015-14950) Removable disk auto-mounter -------------------------------------------------------------------------------- Update Information: udiskie-1.3.0-1.fc21 - Update to 1.3.0 udiskie-1.3.0-1.fc22 - Update to 1.3.0 udiskie-1.3.0-1.el7 - Update to 1.3.0 udiskie-1.3.0-1.fc23 - Update to 1.3.0 ---- udiskie-1.2.1-1.fc21 - Update to 1.2.1. udiskie-1.2.1-1.fc22 - Update to 1.2.1. udiskie-1.2.1-1.el7 - Update to 1.2.1. udiskie-1.2.1-1.fc23 - Update to 1.2.1. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1258675 - udiskie-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1258675 [ 2 ] Bug #1259101 - None https://bugzilla.redhat.com/show_bug.cgi?id=1259101 -------------------------------------------------------------------------------- ================================================================================ xiphos-4.0.4-1.fc22 (FEDORA-2015-14966) Bible study and research tool -------------------------------------------------------------------------------- Update Information: Update to new versions -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test