The following Fedora 21 Security updates need testing: Age URL 275 https://bodhi.fedoraproject.org/updates/FEDORA-2015-1467 openstack-glance-2014.1.3-4.fc21 155 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9141 ceph-deploy-1.5.25-1.fc21 144 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9744 squid-3.4.13-1.fc21 88 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12773 python-kdcproxy-0.3.2-1.fc21 71 https://bodhi.fedoraproject.org/updates/FEDORA-2015-1fed73bab8 conntrack-tools-1.4.2-9.fc21 67 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14179 libreswan-3.15-1.fc21 67 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14200 sblim-sfcb-1.4.8-5.fc21 59 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14852 libwmf-0.2.8.4-46.fc21 42 https://bodhi.fedoraproject.org/updates/FEDORA-2015-16238 nagios-4.0.8-1.fc21 29 https://bodhi.fedoraproject.org/updates/FEDORA-2015-af1b712fce python-pymongo-3.0.3-1.fc21 29 https://bodhi.fedoraproject.org/updates/FEDORA-2015-d292a98f01 cyrus-imapd-2.4.18-1.fc21 29 https://bodhi.fedoraproject.org/updates/FEDORA-2015-048e95ac1d thunderbird-38.3.0-1.fc21 23 https://bodhi.fedoraproject.org/updates/FEDORA-2015-d683ebb786 postgresql-9.3.10-1.fc21 21 https://bodhi.fedoraproject.org/updates/FEDORA-2015-1f9e79df21 audiofile-0.3.6-9.fc21 17 https://bodhi.fedoraproject.org/updates/FEDORA-2015-15290 ipsilon-1.1.1-2.fc21 15 https://bodhi.fedoraproject.org/updates/FEDORA-2015-b8534a1aec firefox-41.0.2-2.fc21 15 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6542ab6d3a libreport-2.3.0-10.fc21 abrt-2.3.0-12.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-a381facfd9 php-horde-passwd-5.0.4-1.fc21 php-horde-imp-6.2.11-1.fc21 php-horde-ingo-3.2.7-1.fc21 php-horde-horde-5.2.8-1.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-97fe05f788 mediawiki-1.24.4-1.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9e842ac36e seqan-1.4.2-21.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-54365c8fc7 drupal7-7.41-1.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-77bfbc1bcd ntp-4.2.6p5-34.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-adfd729dbc xscreensaver-5.34-1.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-ebfe46536f lxc-1.0.7-4.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-f1e18131bc php-ZendFramework-1.12.16-1.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-5c06260c4b php-udan11-sql-parser-3.0.4-1.fc21 phpMyAdmin-4.5.1-1.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-e6791ce284 krb5-1.12.2-18.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-47cf97f125 git-2.1.0-6.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-0253d1f070 kernel-4.1.12-101.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-780302029a dovecot-2.2.19-1.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-fed35dffd7 perl-HTML-Scrubber-0.15-1.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-242be2c240 xen-4.4.3-7.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-69e6c3607f miniupnpc-1.9-6.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-d0e48b2eb1 icecat-38.3.0-10.fc21 The following Fedora 21 Critical Path updates have yet to be approved: Age URL 93 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12402 gstreamer1-plugins-good-1.4.5-3.fc21 81 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13239 yum-3.4.3-154.fc21 71 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13877 libteam-1.18-1.fc21 71 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13805 tigervnc-1.5.0-2.fc21 71 https://bodhi.fedoraproject.org/updates/FEDORA-2015-90d3a9ce48 dracut-038-40.git20150819.fc21 71 https://bodhi.fedoraproject.org/updates/FEDORA-2015-37e78bb9af btrfs-progs-4.1.2-1.fc21 29 https://bodhi.fedoraproject.org/updates/FEDORA-2015-048e95ac1d thunderbird-38.3.0-1.fc21 29 https://bodhi.fedoraproject.org/updates/FEDORA-2015-ff9eaa3e01 device-mapper-multipath-0.4.9-68.fc21.6 25 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9e6a99b895 gnome-terminal-3.14.3-2.fc21 19 https://bodhi.fedoraproject.org/updates/FEDORA-2015-fda676f6c9 perl-generators-1.06-1.fc21 19 https://bodhi.fedoraproject.org/updates/FEDORA-2015-d5ebbad574 nss-3.20.0-1.1.1.fc21 16 https://bodhi.fedoraproject.org/updates/FEDORA-2015-f01da0e4b8 spatialite-tools-4.2.0-15.fc21 sqlite-3.9.0-1.fc21 15 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6542ab6d3a libreport-2.3.0-10.fc21 abrt-2.3.0-12.fc21 15 https://bodhi.fedoraproject.org/updates/FEDORA-2015-b8534a1aec firefox-41.0.2-2.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-311e897518 dnsmasq-2.75-2.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-830a68baaa createrepo_c-0.9.1-1.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-272674923f perl-Thread-Queue-3.07-1.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-06f119f03c hwdata-0.283-1.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2a2f9442ac mingw-libwebp-0.4.4-1.fc21 libwebp-0.4.4-1.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-38c68e7875 linux-firmware-20151030-58.git66d3d8d7.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-607cc1b079 gdisk-1.0.1-1.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-0253d1f070 kernel-4.1.12-101.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-e6791ce284 krb5-1.12.2-18.fc21 The following builds have been pushed to Fedora 21 updates-testing Lmod-6.0.15-2.fc21 RBTools-0.7.5-2.fc21 Zim-0.64-1.fc21 amsynth-1.6.3-1.fc21 bugwarrior-1.3.0-1.fc21 caja-actions-1.8.1-1.fc21 calamares-1.1.4.2-1.fc21 codec2-0.5-1.fc21 dnf-plugin-system-upgrade-0.5.0-1.fc21 dovecot-2.2.19-1.fc21 dpm-dsi-1.9.5-10.fc21 dpm-dsi-1.9.5-9.fc21 efibootmgr-0.12-2.fc21 efivar-0.21-1.fc21 fedmsg-0.16.2-3.fc21 gdisk-1.0.1-1.fc21 git-2.1.0-6.fc21 globus-common-16.0-1.fc21 globus-ftp-client-8.25-1.fc21 globus-ftp-control-6.8-1.fc21 globus-gridftp-server-8.9-1.fc21 globus-gridftp-server-9.0-2.fc21 globus-xio-udt-driver-1.19-1.fc21 golang-github-coreos-go-etcd-2.0.0-0.5.git68b33a3.fc21 golang-github-miekg-dns-0-0.6.git034c247.fc21 groonga-5.0.9-1.fc21 icecat-38.3.0-10.fc21 kernel-4.1.12-101.fc21 krb5-1.12.2-18.fc21 libgphoto2-2.5.8-1.fc21 libodfgen-0.1.5-1.fc21 libsbml-5.11.6-5.fc21 libwebp-0.4.4-1.fc21 liferea-1.10.17-1.fc21 links-2.12-1.fc21 linux-firmware-20151030-58.git66d3d8d7.fc21 lnst-10-1.fc21 mate-themes-1.11.0-1.fc21 mingw-libwebp-0.4.4-1.fc21 miniupnpc-1.9-6.fc21 nml-0.4.2-1.fc21 nx-libs-3.5.0.32-3.fc21 openblas-0.2.15-1.fc21 openttd-1.5.2-1.fc21 openttd-opengfx-0.5.3-1.fc21 opus-1.1.1-0.4.rc.fc21 opus-tools-0.1.9-1.fc21 pcp-3.10.8-1.fc21 perl-HTML-Scrubber-0.15-1.fc21 perl-MooX-Log-Any-0.004003-1.fc21 pesign-0.111-1.fc21 php-5.6.15-1.fc21 php-horde-content-2.0.5-1.fc21 php-horde-kronolith-4.2.11-1.fc21 php-horde-mnemo-4.2.8-1.fc21 php-horde-nag-4.2.6-1.fc21 php-horde-turba-4.2.11-1.fc21 python-shadowsocks-2.8.2-2.fc21 python-wikitcms-1.13.2-1.fc21 recoll-1.21.3-1.fc21 routino-3.0-3.fc21 rubygem-power_assert-0.2.5-100.fc21 tktable-2.10-7.fc21 xen-4.4.3-7.fc21 Details about builds: ================================================================================ Lmod-6.0.15-2.fc21 (FEDORA-2015-7b69824877) Environmental Modules System in Lua -------------------------------------------------------------------------------- Update Information: Lmod-6.0.15-2 - Set PS path - Add BR zsh ---- Update to 6.0.15 ---- Update to 6.0.12: - Support generic and non-bash shells - See https://github.com/TACC/Lmod/blob/master/README -------------------------------------------------------------------------------- ================================================================================ RBTools-0.7.5-2.fc21 (FEDORA-2015-3f1dfb5015) Tools for use with ReviewBoard -------------------------------------------------------------------------------- Update Information: RBTools-0.7.5-2.fc21 - New upstream release 0.7.5 - https://www.reviewboard.org/docs/releasenotes/rbtools/0.7.5/ RBTools-0.7.5-2.fc22 - New upstream release 0.7.5 - https://www.reviewboard.org/docs/releasenotes/rbtools/0.7.5/ RBTools-0.7.5-2.el6 - New upstream release 0.7.5 - https://www.reviewboard.org/docs/releasenotes/rbtools/0.7.5/ RBTools-0.7.5-2.el7 - New upstream release 0.7.5 - https://www.reviewboard.org/docs/releasenotes/rbtools/0.7.5/ RBTools-0.7.5-2.fc23 - New upstream release 0.7.5 - https://www.reviewboard.org/docs/releasenotes/rbtools/0.7.5/ -------------------------------------------------------------------------------- ================================================================================ Zim-0.64-1.fc21 (FEDORA-2015-2bf1aa611b) Desktop wiki & notekeeper -------------------------------------------------------------------------------- Update Information: Zim-0.64-1.fc21 * Bookmark plugin - by Pavel M * Updated spell plugin to allow using gtkspellcheck as backend * Updated attachmentbrowser plugin with new thumbnailing logic * Speed up of sqlite indexing * Updated support for OS X - by Brecht Machiels * Bug fixes for the Fossil version control support * Bug fixes for locale in strftime and strxfrm functions * Bug fix to avoid overwriting the accelmap config file -------------------------------------------------------------------------------- References: [ 1 ] Bug #1275861 - Zim-0.64 is available https://bugzilla.redhat.com/show_bug.cgi?id=1275861 -------------------------------------------------------------------------------- ================================================================================ amsynth-1.6.3-1.fc21 (FEDORA-2015-0813843ab8) A classic synthesizer with dual oscillators -------------------------------------------------------------------------------- Update Information: Update to new maintenance upstream 1.6.3 -------------------------------------------------------------------------------- ================================================================================ bugwarrior-1.3.0-1.fc21 (FEDORA-2015-0ada9e3073) Sync github, bitbucket, and trac issues with taskwarrior -------------------------------------------------------------------------------- Update Information: https://github.com/ralphbean/bugwarrior/blob/develop/CHANGELOG.rst -------------------------------------------------------------------------------- References: [ 1 ] Bug #1276766 - bugwarrior-1.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1276766 -------------------------------------------------------------------------------- ================================================================================ caja-actions-1.8.1-1.fc21 (FEDORA-2015-d2521f005b) Caja extension for customizing the context menu -------------------------------------------------------------------------------- Update Information: caja-actions-1.8.1-1.fc21 - update to 1.8.1 release -------------------------------------------------------------------------------- ================================================================================ calamares-1.1.4.2-1.fc21 (FEDORA-2015-dee1256278) Installer from a live CD/DVD/USB to disk -------------------------------------------------------------------------------- Update Information: An update of Calamares to the latest upstream bugfix release, version 1.1.4.2. The change log for this release includes two important partitioning related fixes: * Fixed a bug with swap partitions needlessly getting new UUIDs. * Fixed a bug with alongside install being allowed even if the DOS MBR partition table limit of 4 primary partitions is reached. -------------------------------------------------------------------------------- ================================================================================ codec2-0.5-1.fc21 (FEDORA-2015-f66664d05f) Next-Generation Digital Voice for Two-Way Radio -------------------------------------------------------------------------------- Update Information: Update to latest upstream release. -------------------------------------------------------------------------------- ================================================================================ dnf-plugin-system-upgrade-0.5.0-1.fc21 (FEDORA-2015-7627ff59ca) System Upgrade plugin for DNF -------------------------------------------------------------------------------- Update Information: This package provides the `dnf system-upgrade` command, which replaces `fedup` for performing system upgrades. Version 0.5.0 is a backport of 0.7.0 to dnf 0.6.x (Fedora 21). Here's what's new: * Sends upgrade progress to text console * Made `--distro-sync` the default upgrade behavior * Added `--no-downgrade` flag (turns off `--distro-sync`) * Added `log` subcommand for viewing upgrade logs * Fixed upgrades using `--best` or `--allowerasing` * Fixed upgrades on systems without `plymouth` * Various other bugfixes and improvements -------------------------------------------------------------------------------- References: [ 1 ] Bug #1273390 - upgrade progress is not shown in Fedora 21 https://bugzilla.redhat.com/show_bug.cgi?id=1273390 -------------------------------------------------------------------------------- ================================================================================ dovecot-2.2.19-1.fc21 (FEDORA-2015-780302029a) Secure imap and pop3 server -------------------------------------------------------------------------------- Update Information: * dovecot updated to 2.2.19 * mdbox: Rebuilding could have caused message's reference count to overflow the 16bit number in some situations, causing problems when trying to expunge the duplicates. * Various search fixes (fts, solr, tika, lib-charset, indexer) * Various virtual plugin fixes * Various fixes and optimizations to dsync, imapc and pop3-migration * imap: Various RFC compliancy and crash fixes to NOTIFY * pigeonhole updated to 0.4.9 * ManageSieve: Fixed an assert failure occurring when a client disconnects during the GETSCRIPT command. - doveadm sieve plugin: Fixed incorrect initialization (mem leaks) of mail user. - sieve-filter command line tool: Fixed handling of failure-related implicit keep when there is an explicit default destination folder. - lib-sieve: Fixed bug in RFC5322 header folding. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1276607 - dovecot: Buffer overflow when handling pop3_deleted_flag setting https://bugzilla.redhat.com/show_bug.cgi?id=1276607 -------------------------------------------------------------------------------- ================================================================================ dpm-dsi-1.9.5-10.fc21 (FEDORA-2015-6c2e77b300) Disk Pool Manager (DPM) plugin for the Globus GridFTP server -------------------------------------------------------------------------------- Update Information: globus-common-16.0-1.fc21 - GT6 update (add globus_extension_get_module_version) globus-gridftp-server-9.0-2.fc21 - GT6 update (Home directory fixes) - GT6 update (add SITE STORATTR command and associated DSI api) dpm-dsi-1.9.5-10.fc23 - Rebuilt for globus-gridftp-server 9.0 -------------------------------------------------------------------------------- ================================================================================ dpm-dsi-1.9.5-9.fc21 (FEDORA-2015-9aee7b0a68) Disk Pool Manager (DPM) plugin for the Globus GridFTP server -------------------------------------------------------------------------------- Update Information: globus-gridftp-server-8.9-1 - GT6 update (Home directory fixes) globus-xio- udt-driver-1.19-1 - GT6 update (Ignore other end's attempts at ipv6 negotiation) dpm-dsi-1.9.5-9 - Rebuilt for globus-gridftp-server 8.9 -------------------------------------------------------------------------------- ================================================================================ efibootmgr-0.12-2.fc21 (FEDORA-2015-ca5275b6ed) EFI Boot Manager -------------------------------------------------------------------------------- Update Information: Rebase pesign to 0.111, and split the test certificates out so kernel builders can avoid them. Pull newer efivar (and efibootmgr, which depends on it.) This is so we can update the fedora builders to newer pesign, so that we can update the /clients/ to newer pesign. Hopefully this update should get us away from them having to match all the time. -------------------------------------------------------------------------------- ================================================================================ efivar-0.21-1.fc21 (FEDORA-2015-ca5275b6ed) Tools to manage UEFI variables -------------------------------------------------------------------------------- Update Information: Rebase pesign to 0.111, and split the test certificates out so kernel builders can avoid them. Pull newer efivar (and efibootmgr, which depends on it.) This is so we can update the fedora builders to newer pesign, so that we can update the /clients/ to newer pesign. Hopefully this update should get us away from them having to match all the time. -------------------------------------------------------------------------------- ================================================================================ fedmsg-0.16.2-3.fc21 (FEDORA-2015-c884ab9cda) Tools for Fedora Infrastructure real-time messaging -------------------------------------------------------------------------------- Update Information: Latest upstream. https://github.com/fedora- infra/fedmsg/blob/develop/CHANGELOG.rst#0162 -------------------------------------------------------------------------------- ================================================================================ gdisk-1.0.1-1.fc21 (FEDORA-2015-607cc1b079) An fdisk-like partitioning tool for GPT disks -------------------------------------------------------------------------------- Update Information: Update to latest upstream release gdisk 1.0.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1272797 - gdisk-1.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1272797 -------------------------------------------------------------------------------- ================================================================================ git-2.1.0-6.fc21 (FEDORA-2015-47cf97f125) Fast Version Control System -------------------------------------------------------------------------------- Update Information: git-2.1.0-6.fc21 - fix arbitrary code execution via crafted URLs Resolves: #1269797 git-2.4.3-7.fc22 - fix arbitrary code execution via crafted URLs Resolves: #1269797 git-2.5.0-2.fc23 - fix arbitrary code execution via crafted URLs Resolves: #1269797 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1269794 - git: arbitrary code execution via crafted URLs https://bugzilla.redhat.com/show_bug.cgi?id=1269794 -------------------------------------------------------------------------------- ================================================================================ globus-common-16.0-1.fc21 (FEDORA-2015-6c2e77b300) Globus Toolkit - Common Library -------------------------------------------------------------------------------- Update Information: globus-common-16.0-1.fc21 - GT6 update (add globus_extension_get_module_version) globus-gridftp-server-9.0-2.fc21 - GT6 update (Home directory fixes) - GT6 update (add SITE STORATTR command and associated DSI api) dpm-dsi-1.9.5-10.fc23 - Rebuilt for globus-gridftp-server 9.0 -------------------------------------------------------------------------------- ================================================================================ globus-ftp-client-8.25-1.fc21 (FEDORA-2015-bd42d3d808) Globus Toolkit - GridFTP Client Library -------------------------------------------------------------------------------- Update Information: - Fix for GT-604: fix ipv6 negotiation when source does not pre-connect -------------------------------------------------------------------------------- ================================================================================ globus-ftp-control-6.8-1.fc21 (FEDORA-2015-615239e9a7) Globus Toolkit - GridFTP Control Library -------------------------------------------------------------------------------- Update Information: - GT6 update (GT-594: enable keepalives) -------------------------------------------------------------------------------- ================================================================================ globus-gridftp-server-8.9-1.fc21 (FEDORA-2015-9aee7b0a68) Globus Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information: globus-gridftp-server-8.9-1 - GT6 update (Home directory fixes) globus-xio- udt-driver-1.19-1 - GT6 update (Ignore other end's attempts at ipv6 negotiation) dpm-dsi-1.9.5-9 - Rebuilt for globus-gridftp-server 8.9 -------------------------------------------------------------------------------- ================================================================================ globus-gridftp-server-9.0-2.fc21 (FEDORA-2015-6c2e77b300) Globus Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information: globus-common-16.0-1.fc21 - GT6 update (add globus_extension_get_module_version) globus-gridftp-server-9.0-2.fc21 - GT6 update (Home directory fixes) - GT6 update (add SITE STORATTR command and associated DSI api) dpm-dsi-1.9.5-10.fc23 - Rebuilt for globus-gridftp-server 9.0 -------------------------------------------------------------------------------- ================================================================================ globus-xio-udt-driver-1.19-1.fc21 (FEDORA-2015-9aee7b0a68) Globus Toolkit - Globus XIO UDT Driver -------------------------------------------------------------------------------- Update Information: globus-gridftp-server-8.9-1 - GT6 update (Home directory fixes) globus-xio- udt-driver-1.19-1 - GT6 update (Ignore other end's attempts at ipv6 negotiation) dpm-dsi-1.9.5-9 - Rebuilt for globus-gridftp-server 8.9 -------------------------------------------------------------------------------- ================================================================================ golang-github-coreos-go-etcd-2.0.0-0.5.git68b33a3.fc21 (FEDORA-2015-616118b00a) Go client library for etcd -------------------------------------------------------------------------------- Update Information: Update for skydns ---- Bump to upstream 4cceaf7283b76f27c4a732b20730dcdb61053bf5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1246214 - Tracker for golang-github-coreos-go-etcd https://bugzilla.redhat.com/show_bug.cgi?id=1246214 -------------------------------------------------------------------------------- ================================================================================ golang-github-miekg-dns-0-0.6.git034c247.fc21 (FEDORA-2015-3efd1bca15) DNS library in Go -------------------------------------------------------------------------------- Update Information: Update for skydns ---- Update spec file to spec-2.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1250494 - Tracker for golang-github-miekg-dns https://bugzilla.redhat.com/show_bug.cgi?id=1250494 -------------------------------------------------------------------------------- ================================================================================ groonga-5.0.9-1.fc21 (FEDORA-2015-0867d5e8d6) An Embeddable Fulltext Search Engine -------------------------------------------------------------------------------- Update Information: See http://groonga.org/docs/news.html#release-5-0-9-2015-10-29 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1276017 - groonga-5.0.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1276017 -------------------------------------------------------------------------------- ================================================================================ icecat-38.3.0-10.fc21 (FEDORA-2015-d0e48b2eb1) GNU version of Firefox browser -------------------------------------------------------------------------------- Update Information: icecat-38.3.0-10.fc23 - Rebuild with RPM_LD_FLAGS - Activated hardened_build icecat-38.3.0-10.fc22 - Rebuild with RPM_LD_FLAGS - Activated hardened_build icecat-38.3.0-10.fc21 - Rebuild with RPM_LD_FLAGS - Activated hardened_build -------------------------------------------------------------------------------- ================================================================================ kernel-4.1.12-101.fc21 (FEDORA-2015-0253d1f070) The Linux kernel -------------------------------------------------------------------------------- Update Information: kernel-4.1.12-101.fc21 - Linux v4.1.12 ---- kernel-4.1.12-100.fc21 - Linux v4.1.12 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1243852 - CVE-2015-5156 kernel: buffer overflow with fraglist larger than MAX_SKB_FRAGS + 2 in virtio-net https://bugzilla.redhat.com/show_bug.cgi?id=1243852 -------------------------------------------------------------------------------- ================================================================================ krb5-1.12.2-18.fc21 (FEDORA-2015-e6791ce284) The Kerberos network authentication system -------------------------------------------------------------------------------- Update Information: krb5-1.12.2-18.fc21 - Fix CVE-2015-2695, CVE-2015-2696, CVE-2015-2697 krb5-1.13.2-9.fc22 - Fix CVE-2015-2695, CVE-2015-2696, CVE-2015-2697 krb5-1.13.2-12.fc23 - Fix CVE-2015-2695, CVE-2015-2696, CVE-2015-2697 -------------------------------------------------------------------------------- ================================================================================ libgphoto2-2.5.8-1.fc21 (FEDORA-2015-b24828a93a) Library for accessing digital cameras -------------------------------------------------------------------------------- Update Information: Update to 2.5.8 for new device support -------------------------------------------------------------------------------- ================================================================================ libodfgen-0.1.5-1.fc21 (FEDORA-2015-32e2987a43) An ODF generator library -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ================================================================================ libsbml-5.11.6-5.fc21 (FEDORA-2015-f64c540a93) Systems Biology Markup Language library -------------------------------------------------------------------------------- Update Information: libsbml-5.11.6-5.fc21 - Rebuild for cmake upgrade - Disabled Perl and Ruby bindings test libsbml-5.11.6-5.fc22 - Rebuild for cmake upgrade - Disabled Perl and Ruby bindings test libsbml-5.11.6-6.fc23 - perl-Test required on F24 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1197715 - libsbml-5.11.0-11.fc23 FTBFS: test_sbml_package_fbc': free(): invalid pointer https://bugzilla.redhat.com/show_bug.cgi?id=1197715 [ 2 ] Bug #1270689 - libsbml-5.11.6-4.fc24 FTBFS: get_filename_component called with incorrect number of arguments https://bugzilla.redhat.com/show_bug.cgi?id=1270689 -------------------------------------------------------------------------------- ================================================================================ libwebp-0.4.4-1.fc21 (FEDORA-2015-2a2f9442ac) Library and tools for the WebP graphics format -------------------------------------------------------------------------------- Update Information: Update to version 0.4.4, see https://chromium.googlesource.com/webm/libwebp/+/0.4.4/NEWS for details. -------------------------------------------------------------------------------- ================================================================================ liferea-1.10.17-1.fc21 (FEDORA-2015-135aad9e36) An RSS/RDF feed reader -------------------------------------------------------------------------------- Update Information: New upsteam release 1.10.17 fixes a number of GTK3 issues. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1275106 - [abrt] liferea: _g_log_abort(): liferea killed by SIGTRAP https://bugzilla.redhat.com/show_bug.cgi?id=1275106 -------------------------------------------------------------------------------- ================================================================================ links-2.12-1.fc21 (FEDORA-2015-c9bfb82809) Web browser running in both graphics and text mode -------------------------------------------------------------------------------- Update Information: links-2.12-1.fc21 - New release - Drop the SSL verification patch; upstream does it now -------------------------------------------------------------------------------- ================================================================================ linux-firmware-20151030-58.git66d3d8d7.fc21 (FEDORA-2015-38c68e7875) Firmware files used by the Linux kernel -------------------------------------------------------------------------------- Update Information: linux-firmware-20151030-58.git66d3d8d7.fc21 - Update to latest upstream snapshot - Includes ath10k and mwlwifi firmware updates (rhbz 1276360) - Includes skylake and intel bluetooth firmware updates - Updates for nvidia, bnx2x, and atmel devices -------------------------------------------------------------------------------- References: [ 1 ] Bug #1276360 - Firmware for Qualcomm Atheros QCA6174 802.11ac Wireless Network Adapter (rev 20) not included https://bugzilla.redhat.com/show_bug.cgi?id=1276360 [ 2 ] Bug #1259542 - [Radeon/Tonga] initrd ramdisk is missing ucode needed for AMDGPU https://bugzilla.redhat.com/show_bug.cgi?id=1259542 -------------------------------------------------------------------------------- ================================================================================ lnst-10-1.fc21 (FEDORA-2015-ee73c934ea) Common code for lnst-ctl and lnst-slave -------------------------------------------------------------------------------- Update Information: lnst-10-1.fc21 - Updating to stable release 10 - fixed selinux label for binaries - added wizard -------------------------------------------------------------------------------- ================================================================================ mate-themes-1.11.0-1.fc21 (FEDORA-2015-92a7a154d8) MATE Desktop themes -------------------------------------------------------------------------------- Update Information: mate-themes-1.11.0-1.fc21 - update to 1.11.0-1 release -------------------------------------------------------------------------------- ================================================================================ mingw-libwebp-0.4.4-1.fc21 (FEDORA-2015-2a2f9442ac) MinGW compilation of Library and tools for the WebP format -------------------------------------------------------------------------------- Update Information: Update to version 0.4.4, see https://chromium.googlesource.com/webm/libwebp/+/0.4.4/NEWS for details. -------------------------------------------------------------------------------- ================================================================================ miniupnpc-1.9-6.fc21 (FEDORA-2015-69e6c3607f) Library and tool to control NAT in UPnP-enabled routers -------------------------------------------------------------------------------- Update Information: Correct buffer overflow in XML parsing (#1270842, #1270182) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1270842 - miniupnpc: Buffer overflow vulnerability in XML parser functionality [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1270842 [ 2 ] Bug #1270182 - Buffer Overflow in XML Parsing https://bugzilla.redhat.com/show_bug.cgi?id=1270182 -------------------------------------------------------------------------------- ================================================================================ nml-0.4.2-1.fc21 (FEDORA-2015-ae3033fec4) NewGRF Meta Language compiler -------------------------------------------------------------------------------- Update Information: Update OpenTTD stack -------------------------------------------------------------------------------- ================================================================================ nx-libs-3.5.0.32-3.fc21 (FEDORA-2015-2942221585) NX X11 protocol compression libraries -------------------------------------------------------------------------------- Update Information: nx-libs-3.5.0.32-3 - Fix libXinerama symlink (bug #1256724) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1256724 - xclients must load the patched libXinerama https://bugzilla.redhat.com/show_bug.cgi?id=1256724 -------------------------------------------------------------------------------- ================================================================================ openblas-0.2.15-1.fc21 (FEDORA-2015-5a84eb29c2) An optimized BLAS library based on GotoBLAS2 -------------------------------------------------------------------------------- Update Information: Update to version 0.2.15 containing further optimizations and bugfixes. See full list at http://www.openblas.net/Changelog.txt. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1275858 - openblas-v0.2.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=1275858 -------------------------------------------------------------------------------- ================================================================================ openttd-1.5.2-1.fc21 (FEDORA-2015-ae3033fec4) Transport system simulation game -------------------------------------------------------------------------------- Update Information: Update OpenTTD stack -------------------------------------------------------------------------------- ================================================================================ openttd-opengfx-0.5.3-1.fc21 (FEDORA-2015-ae3033fec4) OpenGFX replacement graphics for OpenTTD -------------------------------------------------------------------------------- Update Information: Update OpenTTD stack -------------------------------------------------------------------------------- ================================================================================ opus-1.1.1-0.4.rc.fc21 (FEDORA-2015-39db0c817e) An audio codec for use in low-delay speech and audio communication -------------------------------------------------------------------------------- Update Information: Update to 1.1.1 RC (further ARM optimisations), opus-tools 0.1.9 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1275726 - new version 0.1.9 released https://bugzilla.redhat.com/show_bug.cgi?id=1275726 -------------------------------------------------------------------------------- ================================================================================ opus-tools-0.1.9-1.fc21 (FEDORA-2015-39db0c817e) A set of tools for the opus audio codec -------------------------------------------------------------------------------- Update Information: Update to 1.1.1 RC (further ARM optimisations), opus-tools 0.1.9 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1275726 - new version 0.1.9 released https://bugzilla.redhat.com/show_bug.cgi?id=1275726 -------------------------------------------------------------------------------- ================================================================================ pcp-3.10.8-1.fc21 (FEDORA-2015-3fc0cf98a1) System-level performance monitoring and performance management -------------------------------------------------------------------------------- Update Information: pcp-3.10.8-1.fc21 - Update pmlogger to log an immediate sample first (BZ 1269921) - Add pmOption host and archive setter python APIs (BZ 1270176) - Replace old pmatop(1) man page with pcp-atop(1) (BZ 1270761) - Update to latest PCP sources. - CHANGELOG : - pmdaslurm: new PMDA exporting HPC scheduler metrics - pmdalinux: correctly report high speed network link speeds - pmdalinux: support for wireless network interfaces - pmdalinux: add support for NVME devices - pmie: fqdn functionality, added %c for action strings - pmlogextract: runtime reducing instance optimizations - pmlogrewrite: metric name lex pattern change - pmlogger: change semantics for first logging operation - rc_pmlogger: shell escape for control file "directory" field - pcp-atop: update with latest atop features (esp. NFS) - pcp- atop: fix initial fetch time offset for the globals - pcp-atop: fix -b/-e options to match man page description - docs: update Quick Ref Guide with pcp-atop/pcp-atopsar - docs: remove outdated pmatop man page, see pcp- atop(1) - python api: fix local-context mode type error - python api: improve handling of non-ascii instance names - python api: simple debugging interface to access pmDebug - python api: ensure an interruptible sleep is used - python api: add single host/archive pmOption setter methods - libpcp: add $PCP_DEBUG to initialize pmDebug - libpcp: extend __pmAF* family with __pmAFsetup - libpcp: resolve false-context-sharing corner cases - pcp2graphite: provide a local-context mode option - pmmgr: add the subtarget-containers option - pmmgr: add pmlogreduce support - rc_pmcd: be more careful with auto-install/-remove - pmcd: allow dynamic switching of monitored containers - pmdapmcd: add pmcd.client.container diagnostic metric - pmdaroot: new metric mapping containers to their cgroups - pmdaroot: add cgroup heuristics for non-systemd setups - pmdaroot: fix timeliness of creation of socket connection - pmdads389: add normalized dn cache metrics - pmdads389: instantaneous vs discrete metric corrections - pmdads389: send correct error codes when not connected - pmdamounts: correct a number of 32-bit unsafe calculations - pmdanfsclient: improve PMDA error handling - pmdaperfevent: fix invalid metric names - pmdaperfevent: add reference clock cycles for NHM and WSM - docs: added upgrade instructions to pmdaperfevent man page - containers: bindmount /dev/log for syslog messages - build: fix FreeBSD 10.2 with dtrace probes auto-enabled pcp-3.10.8-1.fc22 - Update pmlogger to log an immediate sample first (BZ 1269921) - Add pmOption host and archive setter python APIs (BZ 1270176) - Replace old pmatop(1) man page with pcp-atop(1) (BZ 1270761) - Update to latest PCP sources. - CHANGELOG - pmdaslurm: new PMDA exporting HPC scheduler metrics - pmdalinux: correctly report high speed network link speeds - pmdalinux: support for wireless network interfaces - pmdalinux: add support for NVME devices - pmie: fqdn functionality, added %c for action strings - pmlogextract: runtime reducing instance optimizations - pmlogrewrite: metric name lex pattern change - pmlogger: change semantics for first logging operation - rc_pmlogger: shell escape for control file "directory" field - pcp-atop: update with latest atop features (esp. NFS) - pcp-atop: fix initial fetch time offset for the globals - pcp-atop: fix -b/-e options to match man page description - docs: update Quick Ref Guide with pcp-atop/pcp-atopsar - docs: remove outdated pmatop man page, see pcp-atop(1) - python api: fix local-context mode type error - python api: improve handling of non-ascii instance names - python api: simple debugging interface to access pmDebug - python api: ensure an interruptible sleep is used - python api: add single host/archive pmOption setter methods - libpcp: add $PCP_DEBUG to initialize pmDebug - libpcp: extend __pmAF* family with __pmAFsetup - libpcp: resolve false-context-sharing corner cases - pcp2graphite: provide a local- context mode option - pmmgr: add the subtarget-containers option - pmmgr: add pmlogreduce support - rc_pmcd: be more careful with auto- install/-remove - pmcd: allow dynamic switching of monitored containers - pmdapmcd: add pmcd.client.container diagnostic metric - pmdaroot: new metric mapping containers to their cgroups - pmdaroot: add cgroup heuristics for non-systemd setups - pmdaroot: fix timeliness of creation of socket connection - pmdads389: add normalized dn cache metrics - pmdads389: instantaneous vs discrete metric corrections - pmdads389: send correct error codes when not connected - pmdamounts: correct a number of 32-bit unsafe calculations - pmdanfsclient: improve PMDA error handling - pmdaperfevent: fix invalid metric names - pmdaperfevent: add reference clock cycles for NHM and WSM - docs: added upgrade instructions to pmdaperfevent man page - containers: bindmount /dev/log for syslog messages - build: fix FreeBSD 10.2 with dtrace probes auto-enabled pcp-3.10.8-1.el5 - Update pmlogger to log an immediate sample first (BZ 1269921) - Add pmOption host and archive setter python APIs (BZ 1270176) - Replace old pmatop(1) man page with pcp-atop(1) (BZ 1270761) - Update to latest PCP sources. - CHANGELOG - pmdaslurm: new PMDA exporting HPC scheduler metrics - pmdalinux: correctly report high speed network link speeds - pmdalinux: support for wireless network interfaces - pmdalinux: add support for NVME devices - pmie: fqdn functionality, added %c for action strings - pmlogextract: runtime reducing instance optimizations - pmlogrewrite: metric name lex pattern change - pmlogger: change semantics for first logging operation - rc_pmlogger: shell escape for control file "directory" field - pcp-atop: update with latest atop features (esp. NFS) - pcp-atop: fix initial fetch time offset for the globals - pcp-atop: fix -b/-e options to match man page description - docs: update Quick Ref Guide with pcp-atop/pcp-atopsar - docs: remove outdated pmatop man page, see pcp-atop(1) - python api: fix local-context mode type error - python api: improve handling of non-ascii instance names - python api: simple debugging interface to access pmDebug - python api: ensure an interruptible sleep is used - python api: add single host/archive pmOption setter methods - libpcp: add $PCP_DEBUG to initialize pmDebug - libpcp: extend __pmAF* family with __pmAFsetup - libpcp: resolve false-context-sharing corner cases - pcp2graphite: provide a local- context mode option - pmmgr: add the subtarget-containers option - pmmgr: add pmlogreduce support - rc_pmcd: be more careful with auto- install/-remove - pmcd: allow dynamic switching of monitored containers - pmdapmcd: add pmcd.client.container diagnostic metric - pmdaroot: new metric mapping containers to their cgroups - pmdaroot: add cgroup heuristics for non-systemd setups - pmdaroot: fix timeliness of creation of socket connection - pmdads389: add normalized dn cache metrics - pmdads389: instantaneous vs discrete metric corrections - pmdads389: send correct error codes when not connected - pmdamounts: correct a number of 32-bit unsafe calculations - pmdanfsclient: improve PMDA error handling - pmdaperfevent: fix invalid metric names - pmdaperfevent: add reference clock cycles for NHM and WSM - docs: added upgrade instructions to pmdaperfevent man page - containers: bindmount /dev/log for syslog messages - build: fix FreeBSD 10.2 with dtrace probes auto-enabled pcp-3.10.8-1.fc23.1 - Update pmlogger to log an immediate sample first (BZ 1269921) - Add pmOption host and archive setter python APIs (BZ 1270176) - Replace old pmatop(1) man page with pcp-atop(1) (BZ 1270761) - Update to latest PCP sources. - CHANGELOG - pmdaslurm: new PMDA exporting HPC scheduler metrics - pmdalinux: correctly report high speed network link speeds - pmdalinux: support for wireless network interfaces - pmdalinux: add support for NVME devices - pmie: fqdn functionality, added %c for action strings - pmlogextract: runtime reducing instance optimizations - pmlogrewrite: metric name lex pattern change - pmlogger: change semantics for first logging operation - rc_pmlogger: shell escape for control file "directory" field - pcp-atop: update with latest atop features (esp. NFS) - pcp-atop: fix initial fetch time offset for the globals - pcp-atop: fix -b/-e options to match man page description - docs: update Quick Ref Guide with pcp-atop/pcp-atopsar - docs: remove outdated pmatop man page, see pcp-atop(1) - python api: fix local-context mode type error - python api: improve handling of non-ascii instance names - python api: simple debugging interface to access pmDebug - python api: ensure an interruptible sleep is used - python api: add single host/archive pmOption setter methods - libpcp: add $PCP_DEBUG to initialize pmDebug - libpcp: extend __pmAF* family with __pmAFsetup - libpcp: resolve false-context-sharing corner cases - pcp2graphite: provide a local- context mode option - pmmgr: add the subtarget-containers option - pmmgr: add pmlogreduce support - rc_pmcd: be more careful with auto- install/-remove - pmcd: allow dynamic switching of monitored containers - pmdapmcd: add pmcd.client.container diagnostic metric - pmdaroot: new metric mapping containers to their cgroups - pmdaroot: add cgroup heuristics for non-systemd setups - pmdaroot: fix timeliness of creation of socket connection - pmdads389: add normalized dn cache metrics - pmdads389: instantaneous vs discrete metric corrections - pmdads389: send correct error codes when not connected - pmdamounts: correct a number of 32-bit unsafe calculations - pmdanfsclient: improve PMDA error handling - pmdaperfevent: fix invalid metric names - pmdaperfevent: add reference clock cycles for NHM and WSM - docs: added upgrade instructions to pmdaperfevent man page - containers: bindmount /dev/log for syslog messages - build: fix FreeBSD 10.2 with dtrace probes auto-enabled -------------------------------------------------------------------------------- References: [ 1 ] Bug #1270761 - pmatop -h does not work https://bugzilla.redhat.com/show_bug.cgi?id=1270761 [ 2 ] Bug #1270176 - Python PMAPI pmSetOptionHostList no workie https://bugzilla.redhat.com/show_bug.cgi?id=1270176 [ 3 ] Bug #1269921 - pmRecordControl misses the first sample https://bugzilla.redhat.com/show_bug.cgi?id=1269921 -------------------------------------------------------------------------------- ================================================================================ perl-HTML-Scrubber-0.15-1.fc21 (FEDORA-2015-fed35dffd7) Library for scrubbing/sanitizing html -------------------------------------------------------------------------------- Update Information: perl-HTML-Scrubber-0.15-1.fc21 - update to 0.15 perl-HTML- Scrubber-0.15-1.fc22 - update to 0.15 perl-HTML-Scrubber-0.15-1.fc23 - update to 0.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1276647 - CVE-2015-5667 perl-HTML-Scrubber: XSS vulnerability when function "comment" is enabled [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1276647 -------------------------------------------------------------------------------- ================================================================================ perl-MooX-Log-Any-0.004003-1.fc21 (FEDORA-2015-b5c30b3f81) A Moose role to add support for logging via Log::Any -------------------------------------------------------------------------------- Update Information: Update to 0.004003 (#1276810) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1276810 - perl-MooX-Log-Any-0.004003 is available https://bugzilla.redhat.com/show_bug.cgi?id=1276810 -------------------------------------------------------------------------------- ================================================================================ pesign-0.111-1.fc21 (FEDORA-2015-ca5275b6ed) Signing utility for UEFI binaries -------------------------------------------------------------------------------- Update Information: Rebase pesign to 0.111, and split the test certificates out so kernel builders can avoid them. Pull newer efivar (and efibootmgr, which depends on it.) This is so we can update the fedora builders to newer pesign, so that we can update the /clients/ to newer pesign. Hopefully this update should get us away from them having to match all the time. -------------------------------------------------------------------------------- ================================================================================ php-5.6.15-1.fc21 (FEDORA-2015-393cfeaf7c) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information: 29 Oct 2015, **PHP 5.6.15** **Core:** * Fixed bug php#70681 (Segfault when binding $this of internal instance method to null). (Nikita) * Fixed bug php#70685 (Segfault for getClosure() internal method rebind with invalid $this). (Nikita) **Date:** * Fixed bug php#70619 (DateTimeImmutable segfault). (Laruence) **Mcrypt:** * Fixed bug php#70625 (mcrypt_encrypt() won't return data when no IV was specified under RC4). (Nikita) **Mysqlnd:** * Fixed bug php#70384 (mysqli_real_query():Unknown type 245 sent by the server). (Andrey) * Fixed bug php#70572 segfault in mysqlnd_connect. (Andrey, Remi) **Opcache:** * Fixed bug php#70632 (Third one of segfault in gc_remove_from_buffer). (Laruence) * Fixed bug php#70631 (Another Segfault in gc_remove_from_buffer()). (Laruence) * Fixed bug php#70601 (Segfault in gc_remove_from_buffer()). (Laruence) -------------------------------------------------------------------------------- ================================================================================ php-horde-content-2.0.5-1.fc21 (FEDORA-2015-d2c998e002) Tagging application -------------------------------------------------------------------------------- Update Information: **content 2.0.5** * [mjr] Fix bug that was causing tag stats to be incorrectly incremented (Bug #14112). * [mjr] Add Content_Objects_Manager::delete(). * [jan] Add unit tests for Oracle. **kronolith 4.2.11** * [mjr] Fix issue when replacing an event via the API and the attendee list changes (Bug #14118). * [mjr] Fix fatal test error related to Content_Tagger. **kronolith 4.2.10** * [mjr] Fix exporting events from Horde_Perms::SHOW calendars over DAV (Bug #14128). * [mjr] Send CACNEL iTip when attendee is removed from a meeting (Request #14118). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Fix incorrect offset of freebusy times in certain cases (Bug #14084). * [mjr] Fix handling of email groups as attendees (Bug #14093). * [mjr] Fix importing text/calendar data via API (Bug #14089). **mnemo 4.2.8** * [jan] Update Italian translation. * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). **nag 4.2.6** * [jan] Update Italian translation. * [mjr] Fix indentation level when searching (Bug #14138). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). * [jan] Fix linking to external tasks from smartmobile view. **turba 4.2.11** * [mjr] Fix regression in removing all contacts from a single address book in the Sql driver (Bug #14145, Guenter Bartsch). **turba 4.2.10** * [mjr] Fix fatal test error related to Content_Tagger. **turba 4.2.9** * [mjr] Better prevention of importing duplicate contacts with same email addresses via the API (Bug #14119). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). * [mjr] Allow API to search all email type fields when calling getField(). * [mjr] Fix removing all contacts owned by a specific user. * [jan] Fix inserting and updating photos with Oracle backends. * [mjr] Fix incorrectly populating email field when importing vCard (Bug #14046). -------------------------------------------------------------------------------- ================================================================================ php-horde-kronolith-4.2.11-1.fc21 (FEDORA-2015-d2c998e002) A web based calendar -------------------------------------------------------------------------------- Update Information: **content 2.0.5** * [mjr] Fix bug that was causing tag stats to be incorrectly incremented (Bug #14112). * [mjr] Add Content_Objects_Manager::delete(). * [jan] Add unit tests for Oracle. **kronolith 4.2.11** * [mjr] Fix issue when replacing an event via the API and the attendee list changes (Bug #14118). * [mjr] Fix fatal test error related to Content_Tagger. **kronolith 4.2.10** * [mjr] Fix exporting events from Horde_Perms::SHOW calendars over DAV (Bug #14128). * [mjr] Send CACNEL iTip when attendee is removed from a meeting (Request #14118). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Fix incorrect offset of freebusy times in certain cases (Bug #14084). * [mjr] Fix handling of email groups as attendees (Bug #14093). * [mjr] Fix importing text/calendar data via API (Bug #14089). **mnemo 4.2.8** * [jan] Update Italian translation. * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). **nag 4.2.6** * [jan] Update Italian translation. * [mjr] Fix indentation level when searching (Bug #14138). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). * [jan] Fix linking to external tasks from smartmobile view. **turba 4.2.11** * [mjr] Fix regression in removing all contacts from a single address book in the Sql driver (Bug #14145, Guenter Bartsch). **turba 4.2.10** * [mjr] Fix fatal test error related to Content_Tagger. **turba 4.2.9** * [mjr] Better prevention of importing duplicate contacts with same email addresses via the API (Bug #14119). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). * [mjr] Allow API to search all email type fields when calling getField(). * [mjr] Fix removing all contacts owned by a specific user. * [jan] Fix inserting and updating photos with Oracle backends. * [mjr] Fix incorrectly populating email field when importing vCard (Bug #14046). -------------------------------------------------------------------------------- ================================================================================ php-horde-mnemo-4.2.8-1.fc21 (FEDORA-2015-d2c998e002) A web based notes manager -------------------------------------------------------------------------------- Update Information: **content 2.0.5** * [mjr] Fix bug that was causing tag stats to be incorrectly incremented (Bug #14112). * [mjr] Add Content_Objects_Manager::delete(). * [jan] Add unit tests for Oracle. **kronolith 4.2.11** * [mjr] Fix issue when replacing an event via the API and the attendee list changes (Bug #14118). * [mjr] Fix fatal test error related to Content_Tagger. **kronolith 4.2.10** * [mjr] Fix exporting events from Horde_Perms::SHOW calendars over DAV (Bug #14128). * [mjr] Send CACNEL iTip when attendee is removed from a meeting (Request #14118). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Fix incorrect offset of freebusy times in certain cases (Bug #14084). * [mjr] Fix handling of email groups as attendees (Bug #14093). * [mjr] Fix importing text/calendar data via API (Bug #14089). **mnemo 4.2.8** * [jan] Update Italian translation. * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). **nag 4.2.6** * [jan] Update Italian translation. * [mjr] Fix indentation level when searching (Bug #14138). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). * [jan] Fix linking to external tasks from smartmobile view. **turba 4.2.11** * [mjr] Fix regression in removing all contacts from a single address book in the Sql driver (Bug #14145, Guenter Bartsch). **turba 4.2.10** * [mjr] Fix fatal test error related to Content_Tagger. **turba 4.2.9** * [mjr] Better prevention of importing duplicate contacts with same email addresses via the API (Bug #14119). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). * [mjr] Allow API to search all email type fields when calling getField(). * [mjr] Fix removing all contacts owned by a specific user. * [jan] Fix inserting and updating photos with Oracle backends. * [mjr] Fix incorrectly populating email field when importing vCard (Bug #14046). -------------------------------------------------------------------------------- ================================================================================ php-horde-nag-4.2.6-1.fc21 (FEDORA-2015-d2c998e002) A web based task list manager -------------------------------------------------------------------------------- Update Information: **content 2.0.5** * [mjr] Fix bug that was causing tag stats to be incorrectly incremented (Bug #14112). * [mjr] Add Content_Objects_Manager::delete(). * [jan] Add unit tests for Oracle. **kronolith 4.2.11** * [mjr] Fix issue when replacing an event via the API and the attendee list changes (Bug #14118). * [mjr] Fix fatal test error related to Content_Tagger. **kronolith 4.2.10** * [mjr] Fix exporting events from Horde_Perms::SHOW calendars over DAV (Bug #14128). * [mjr] Send CACNEL iTip when attendee is removed from a meeting (Request #14118). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Fix incorrect offset of freebusy times in certain cases (Bug #14084). * [mjr] Fix handling of email groups as attendees (Bug #14093). * [mjr] Fix importing text/calendar data via API (Bug #14089). **mnemo 4.2.8** * [jan] Update Italian translation. * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). **nag 4.2.6** * [jan] Update Italian translation. * [mjr] Fix indentation level when searching (Bug #14138). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). * [jan] Fix linking to external tasks from smartmobile view. **turba 4.2.11** * [mjr] Fix regression in removing all contacts from a single address book in the Sql driver (Bug #14145, Guenter Bartsch). **turba 4.2.10** * [mjr] Fix fatal test error related to Content_Tagger. **turba 4.2.9** * [mjr] Better prevention of importing duplicate contacts with same email addresses via the API (Bug #14119). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). * [mjr] Allow API to search all email type fields when calling getField(). * [mjr] Fix removing all contacts owned by a specific user. * [jan] Fix inserting and updating photos with Oracle backends. * [mjr] Fix incorrectly populating email field when importing vCard (Bug #14046). -------------------------------------------------------------------------------- ================================================================================ php-horde-turba-4.2.11-1.fc21 (FEDORA-2015-d2c998e002) A web based address book -------------------------------------------------------------------------------- Update Information: **content 2.0.5** * [mjr] Fix bug that was causing tag stats to be incorrectly incremented (Bug #14112). * [mjr] Add Content_Objects_Manager::delete(). * [jan] Add unit tests for Oracle. **kronolith 4.2.11** * [mjr] Fix issue when replacing an event via the API and the attendee list changes (Bug #14118). * [mjr] Fix fatal test error related to Content_Tagger. **kronolith 4.2.10** * [mjr] Fix exporting events from Horde_Perms::SHOW calendars over DAV (Bug #14128). * [mjr] Send CACNEL iTip when attendee is removed from a meeting (Request #14118). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Fix incorrect offset of freebusy times in certain cases (Bug #14084). * [mjr] Fix handling of email groups as attendees (Bug #14093). * [mjr] Fix importing text/calendar data via API (Bug #14089). **mnemo 4.2.8** * [jan] Update Italian translation. * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). **nag 4.2.6** * [jan] Update Italian translation. * [mjr] Fix indentation level when searching (Bug #14138). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). * [jan] Fix linking to external tasks from smartmobile view. **turba 4.2.11** * [mjr] Fix regression in removing all contacts from a single address book in the Sql driver (Bug #14145, Guenter Bartsch). **turba 4.2.10** * [mjr] Fix fatal test error related to Content_Tagger. **turba 4.2.9** * [mjr] Better prevention of importing duplicate contacts with same email addresses via the API (Bug #14119). * [mjr] Remove object reference from Content when object is deleted (Bug #14112). * [mjr] Remove tags from Content when tagged object is deleted (Bug #14112). * [mjr] Allow API to search all email type fields when calling getField(). * [mjr] Fix removing all contacts owned by a specific user. * [jan] Fix inserting and updating photos with Oracle backends. * [mjr] Fix incorrectly populating email field when importing vCard (Bug #14046). -------------------------------------------------------------------------------- ================================================================================ python-shadowsocks-2.8.2-2.fc21 (FEDORA-2015-1505ff0c77) A fast tunnel proxy that help you get through firewalls -------------------------------------------------------------------------------- Update Information: python-shadowsocks-2.8.2-2.fc21 - Update to 2.8.2 - License changed to ASL 2.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1173067 - python-shadowsocks-2.8.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1173067 -------------------------------------------------------------------------------- ================================================================================ python-wikitcms-1.13.2-1.fc21 (FEDORA-2015-0474c5b894) Fedora QA wiki test management Python library -------------------------------------------------------------------------------- Update Information: This update provides the latest python-wikitcms release, 1.13.2. The visible improvements here all relate to event/page sorting; the behaviour of both the string and tuple sorter functions has been improved. Note the string *unsort* function has been removed (as it could never work reliably), constituting an API change - in practice, I doubt anyone was using it. -------------------------------------------------------------------------------- ================================================================================ recoll-1.21.3-1.fc21 (FEDORA-2015-9db3e464ed) Desktop full text search tool with Qt GUI -------------------------------------------------------------------------------- Update Information: Update to latest upstream release recoll 1.21.3. -------------------------------------------------------------------------------- ================================================================================ routino-3.0-3.fc21 (FEDORA-2015-691e4480a0) Router for OpenStreetMap Data -------------------------------------------------------------------------------- Update Information: An update of Routino to the latest upstream release, version 3.0. The main enhancement is the addition of a shared library. As a result, the routino package is now split into subpackages: `routino`, `routino-libs`, `routino- data`, `routino-devel` and `routino-doc`. New in 3.0 compared to the version 2.7.3 previously in Fedora (excerpt from the upstream `NEWS.txt`, changes not relevant to the Fedora package removed): Bug fixes: * Use a single definition of `MAX_SEG_PER_NODE` to avoid confusion. * Fix bug with built-in translation strings if no XML translations available. * Fix bug with makefiles related to creating new translations. * Remove some pthread code that was still there when compiling without pthreads. * Fix a use-after-free memory error and use of uninitialized allocated memory. * Ensure that allocated strings are long enough for temporary filenames. Programs: * Add a `--version` option to all of the programs. API: * Create a library API that can perform routing functions. OSM tagging: * Remove `cycle_barrier` and `bicycle_barrier` since they do not block bicycles. Translations: * Updated Dutch and German translations. * Added Hungarian and Polish translations provided through translation web page. Documentation: * Add meta tags to HTML to help mobile devices, tidy up the CSS. * Create API description for Routino library usage. Note: This version is compatible with databases from versions 2.7.1 - 2.7.3. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1262582 - routino-3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1262582 -------------------------------------------------------------------------------- ================================================================================ rubygem-power_assert-0.2.5-100.fc21 (FEDORA-2015-eef902054b) Power Assert for Ruby -------------------------------------------------------------------------------- Update Information: New version 0.2.5 is released. -------------------------------------------------------------------------------- ================================================================================ tktable-2.10-7.fc21 (FEDORA-2015-58b43d0843) Table/matrix widget extension to Tcl/Tk -------------------------------------------------------------------------------- Update Information: - Update to 2.10 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1272652 - Review Request: tktable - Table/matrix widget extension to Tcl/Tk https://bugzilla.redhat.com/show_bug.cgi?id=1272652 -------------------------------------------------------------------------------- ================================================================================ xen-4.4.3-7.fc21 (FEDORA-2015-242be2c240) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information: nine security updates CVE-2015-7969 CVE-2015-7970 CVE-2015-7813 CVE-2015-7814 CVE-2015-7812 CVE-2015-7971 CVE-2015-7835 CVE-2015-7972 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1272519 - CVE-2015-7969 xen: leak of main per-domain vcpu pointer array https://bugzilla.redhat.com/show_bug.cgi?id=1272519 [ 2 ] Bug #1272529 - CVE-2015-7970 xen: Long latency populate-on-demand operation is not preemptible on x86 https://bugzilla.redhat.com/show_bug.cgi?id=1272529 [ 3 ] Bug #1271626 - CVE-2015-7813 xen: Various unimplemented hypercalls log without rate limiting on ARM https://bugzilla.redhat.com/show_bug.cgi?id=1271626 [ 4 ] Bug #1271630 - CVE-2015-7814 xen: Race between domain destruction and memory allocation decrease on ARM https://bugzilla.redhat.com/show_bug.cgi?id=1271630 [ 5 ] Bug #1271621 - CVE-2015-7812 xen: Host crash when preempting a multicall on ARM https://bugzilla.redhat.com/show_bug.cgi?id=1271621 [ 6 ] Bug #1272525 - CVE-2015-7971 xen: Some pmu and profiling hypercalls log without rate limiting on x86 https://bugzilla.redhat.com/show_bug.cgi?id=1272525 [ 7 ] Bug #1271971 - CVE-2015-7835 xen: Uncontrolled creation of large page mappings by PV guests on x86 https://bugzilla.redhat.com/show_bug.cgi?id=1271971 [ 8 ] Bug #1276120 - CVE-2015-7972 xen: populate-on-demand balloon size inaccuracy can crash guests on x86 https://bugzilla.redhat.com/show_bug.cgi?id=1276120 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
