The following Fedora 22 Security updates need testing: Age URL 314 https://bodhi.fedoraproject.org/updates/FEDORA-2015-5878 echoping-6.1-0.beta.r434svn.1.fc22 263 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9185 ceph-deploy-1.5.25-1.fc22 195 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12781 python-kdcproxy-0.3.2-1.fc22 150 https://bodhi.fedoraproject.org/updates/FEDORA-2015-16239 nagios-4.0.8-1.fc22 144 https://bodhi.fedoraproject.org/updates/FEDORA-2015-05490fc42d squid-3.4.13-3.fc22 138 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2d37e7dacf openstack-swift-2.2.0-6.fc22 107 https://bodhi.fedoraproject.org/updates/FEDORA-2015-0552500cd7 python-pygments-2.0.2-3.fc22 107 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9039c25f1d miniupnpc-1.9-6.fc22 90 https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4 libpng-1.6.16-4.fc22 90 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6 libpng-1.6.16-5.fc22 72 https://bodhi.fedoraproject.org/updates/FEDORA-2015-3a5cebb105 ImageMagick-6.9.2.7-1.fc22 62 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6efa349a85 subversion-1.8.15-1.fc22 57 https://bodhi.fedoraproject.org/updates/FEDORA-2015-b9e4c97ff1 sos-3.2-2.fc22 31 https://bodhi.fedoraproject.org/updates/FEDORA-2015-f683150aa0 thttpd-2.25b-37.fc22 25 https://bodhi.fedoraproject.org/updates/FEDORA-2016-1323b9078a bind99-9.9.8-2.P3.fc22 25 https://bodhi.fedoraproject.org/updates/FEDORA-2016-34bc10a2c8 ntp-4.2.6p5-36.fc22 19 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0 xulrunner-44.0-1.fc22 7 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3d1183830b php-horde-horde-5.2.9-1.fc22 7 https://bodhi.fedoraproject.org/updates/FEDORA-2016-560802e52b xdelta-3.0.7-7.fc22 7 https://bodhi.fedoraproject.org/updates/FEDORA-2016-8ee88aee21 nettle-2.7.1-6.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2302ed02a7 kscreenlocker-5.5.4-3.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3a2606f993 rubygem-rails-html-sanitizer-1.0.1-2.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-cb30088b06 rubygem-activesupport-4.2.0-4.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-fa0dec2360 rubygem-actionview-4.2.0-3.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-94e71ee673 rubygem-activemodel-4.2.0-2.fc22 rubygem-actionpack-4.2.0-3.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-73fe05d878 rubygem-activerecord-4.2.0-2.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-8925b6119f nodejs-0.10.42-4.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4d00dca15a python-pillow-2.8.2-4.fc22 5 https://bodhi.fedoraproject.org/updates/FEDORA-2016-b0c2412ab2 postgresql-9.4.6-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3d9efe44d8 nghttp2-1.7.1-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-49bf88cd29 GraphicsMagick-1.3.23-1.fc22 gdl-0.9.5-10.fc22 octave-3.8.2-19.fc22 vdr-skinenigmang-0.1.2-27.fc22 vdr-skinnopacity-1.1.3-9.fc22 vdr-tvguide-1.2.2-9.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-0609474cf6 389-ds-base-1.3.4.8-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-5cb344dd7e community-mysql-5.6.29-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-e21be93421 gummi-0.6.6-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-868c170507 mariadb-10.0.23-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-1c08d77b96 qt-creator-3.6.0-6.fc22 qca-2.1.1-4.fc22 code-editor-2.8.1-13.fc22 monotone-1.1-13.fc22 botan-1.10.12-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-c97f297cd6 hamster-time-tracker-2.0-0.3.rc1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-be042f7e6f qemu-2.3.1-12.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-a25ee90150 graphite2-1.3.5-1.fc22 The following Fedora 22 Critical Path updates have yet to be approved: Age URL 189 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13210 yum-3.4.3-508.fc22 107 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2123de044f libgphoto2-2.5.8-1.fc22 104 https://bodhi.fedoraproject.org/updates/FEDORA-2015-48f718ed1b vim-7.4.909-1.fc22 90 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6 libpng-1.6.16-5.fc22 90 https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4 libpng-1.6.16-4.fc22 44 https://bodhi.fedoraproject.org/updates/FEDORA-2016-46b611abb8 httpd-2.4.18-1.fc22 19 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0 xulrunner-44.0-1.fc22 19 https://bodhi.fedoraproject.org/updates/FEDORA-2016-6427e041df libgdata-0.17.4-2.fc22 15 https://bodhi.fedoraproject.org/updates/FEDORA-2016-16a5625f33 kernel-4.3.5-200.fc22 14 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d5fbc3b7eb gnutls-3.3.21-1.fc22 14 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3fce30d64 mobile-broadband-provider-info-1.20151214-1.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-1ec4dabbd5 pcre-8.38-2.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-0a3cd0a405 enca-1.18-1.fc22 5 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2f0441bc7b nss-softokn-3.22.0-1.0.fc22 nss-util-3.22.0-1.0.fc22 nss-3.22.0-1.0.fc22 nspr-4.11.0-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e3261008b htdig-3.2.0-0.21.b6.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-b37af739e7 spatialite-tools-4.2.0-20.fc22 sqlite-3.11.0-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-72a831c739 libical-1.0.1-3.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-bdc07e5732 kde-runtime-15.12.2-1.fc22 kdelibs-4.14.17-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d25f4327b1 kdepim-4.14.10-10.fc22 kdepim-runtime-4.14.10-6.fc22 kdepimlibs-4.14.10-8.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-ce419c9cab selinux-policy-3.13.1-128.27.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-c865c44c3d breeze-icon-theme-5.19.0-1.fc22 extra-cmake-modules-5.19.0-1.fc22 kf5-5.19.0-1.fc22 kf5-attica-5.19.0-1.fc22 kf5-baloo-5.19.0-1.fc22 kf5-bluez-qt-5.19.0-1.fc22 kf5-frameworkintegration-5.19.0-1.fc22 kf5-kactivities-5.19.0-1.fc22 kf5-kapidox-5.19.0-1.fc22 kf5-karchive-5.19.0-1.fc22 kf5-kauth-5.19.0-1.fc22 kf5-kbookmarks-5.19.0-1.fc22 kf5-kcmutils-5.19.0-1.fc22 kf5-kcodecs-5.19.0-1.fc22 kf5-kcompletion-5.19.0-1.fc22 kf5-kconfig-5.19.0-1.fc22 kf5-kconfigwidgets-5.19.0-1.fc22 kf5-kcoreaddons-5.19.0-1.fc22 kf5-kcrash-5.19.0-1.fc22 kf5-kdbusaddons-5.19.0-1.fc22 kf5-kdeclarative-5.19.0-2.fc22 kf5-kded-5.19.0-1.fc22 kf5-kdelibs4support-5.19.0-1.fc22 kf5-kdesignerplugin-5.19.0-1.fc22 kf5-kdesu-5.19.0-1.fc22 kf5-kdewebkit-5.19.0-1.fc22 kf5-kdnssd-5.19.0-1.fc22 kf5-kdoctools-5.19.0-1.fc22 kf5-kemoticons-5.19.0-1.fc22 kf5-kfilemetadata-5.19.0-1.fc22 kf5-kglobalaccel-5.19.0-1.fc22 kf5-kguiaddons-5.19.0-1.fc22 kf5-khtml -5.19.0- 1.fc22 kf5-ki18n-5.19.0-1.fc22 kf5-kiconthemes-5.19.0-1.fc22 kf5-kidletime-5.19.0-1.fc22 kf5-kimageformats-5.19.0-1.fc22 kf5-kinit-5.19.0-1.fc22 kf5-kio-5.19.0-1.fc22 kf5-kitemmodels-5.19.0-1.fc22 kf5-kitemviews-5.19.0-1.fc22 kf5-kjobwidgets-5.19.0-1.fc22 kf5-kjs-5.19.0-1.fc22 kf5-kjsembed-5.19.0-1.fc22 kf5-kmediaplayer-5.19.0-1.fc22 kf5-knewstuff-5.19.0-1.fc22 kf5-knotifications-5.19.0-1.fc22 kf5-knotifyconfig-5.19.0-1.fc22 kf5-kpackage-5.19.0-1.fc22 kf5-kparts-5.19.0-1.fc22 kf5-kpeople-5.19.0-1.fc22 kf5-kplotting-5.19.0-1.fc22 kf5-kpty-5.19.0-1.fc22 kf5-kross-5.19.0-1.fc22 kf5-krunner-5.19.0-1.fc22 kf5-kservice-5.19.0-1.fc22 kf5-ktexteditor-5.19.0-1.fc22 kf5-ktextwidgets-5.19.0-1.fc22 kf5-kunitconversion-5.19.0-1.fc22 kf5-kwallet-5.19.0-1.fc22 kf5-kwidgetsaddons-5.19.0-1.fc22 kf5-kwindowsystem-5.19.0-1.fc22 kf5-kxmlgui-5.19.0-1.fc22 kf5-kxmlrpcclient-5.19.0-1.fc22 kf5-modemmanager-qt-5.19.0-1.fc22 kf5-networkmanager-qt-5.19.0-1.fc22 kf5-plasma-5.19.0-2.fc22 kf5-solid-5.19. 0-1.fc22 kf5-sonnet-5.19.0-1.fc22 kf5-threadweaver-5.19.0-1.fc22 oxygen-icon-theme-5.19.0-3.fc22 The following builds have been pushed to Fedora 22 updates-testing cachefilesd-0.10.9-1.fc22 graphite2-1.3.5-1.fc22 htdig-3.2.0-0.21.b6.fc22 spatialite-tools-4.2.0-20.fc22 sqlite-3.11.0-1.fc22 xawtv-3.103-8.fc22 Details about builds: ================================================================================ cachefilesd-0.10.9-1.fc22 (FEDORA-2016-dc7dbdf6de) CacheFiles user-space management daemon -------------------------------------------------------------------------------- Update Information: Update cachefilesd to interact with systemd in the correct way to change the status of the cachefilesd during installation, fix the service file to refer to /usr/sbin rather than /sbin and turn on build hardening (RELRO and PIE). -------------------------------------------------------------------------------- References: [ 1 ] Bug #850053 - Introduce new systemd-rpm macros in cachefilesd spec file https://bugzilla.redhat.com/show_bug.cgi?id=850053 -------------------------------------------------------------------------------- ================================================================================ graphite2-1.3.5-1.fc22 (FEDORA-2016-a25ee90150) Font rendering capabilities for complex non-Roman writing systems -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-1521, CVE-2016-1522, CVE-2016-1523 and CVE-2016-1526 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1305806 - CVE-2016-1521 graphite2: Two out-of-bound read vulnerabilities triggered by crafted fonts [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1305806 [ 2 ] Bug #1308591 - CVE-2016-1526 graphite2: Out-of-bounds read vulnerability in TfUtil:LocaLookup [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1308591 [ 3 ] Bug #1305814 - CVE-2016-1523 graphite2: Heap-based buffer overflow in context item handling functionality [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1305814 [ 4 ] Bug #1305811 - CVE-2016-1522 graphite2: Null pointer dereference and out-of-bounds access vulnerabilities [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1305811 -------------------------------------------------------------------------------- ================================================================================ htdig-3.2.0-0.21.b6.fc22 (FEDORA-2016-2e3261008b) ht://Dig - Web search engine -------------------------------------------------------------------------------- Update Information: one bug fixed -------------------------------------------------------------------------------- References: [ 1 ] Bug #1230897 - RPM does not contain binary for htsearch https://bugzilla.redhat.com/show_bug.cgi?id=1230897 -------------------------------------------------------------------------------- ================================================================================ spatialite-tools-4.2.0-20.fc22 (FEDORA-2016-b37af739e7) A set of useful CLI tools for SpatiaLite -------------------------------------------------------------------------------- Update Information: Update to the latest upstream version, with rebuilt spatialite-tools. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1288606 - Split library from binary to drop unnecessary dependencies. https://bugzilla.redhat.com/show_bug.cgi?id=1288606 [ 2 ] Bug #1308765 - sqlite-3.11.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1308765 -------------------------------------------------------------------------------- ================================================================================ sqlite-3.11.0-1.fc22 (FEDORA-2016-b37af739e7) Library that implements an embeddable SQL database engine -------------------------------------------------------------------------------- Update Information: Update to the latest upstream version, with rebuilt spatialite-tools. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1288606 - Split library from binary to drop unnecessary dependencies. https://bugzilla.redhat.com/show_bug.cgi?id=1288606 [ 2 ] Bug #1308765 - sqlite-3.11.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1308765 -------------------------------------------------------------------------------- ================================================================================ xawtv-3.103-8.fc22 (FEDORA-2016-8526675e06) TV applications for video4linux compliant devices -------------------------------------------------------------------------------- Update Information: - Bring in several bugfix patch from upstream - Fix crash with saa7134 driver - Use png instead of xpm for icons - Add appdata - Build motv and mtt now that we have a FOSS motif, put them in xawtv-motv resp xawtv-mtt sub- packages -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: http://lists.fedoraproject.org/admin/lists/test@xxxxxxxxxxxxxxxxxxxxxxx