The following Fedora 22 Security updates need testing: Age URL 338 https://bodhi.fedoraproject.org/updates/FEDORA-2015-5878 echoping-6.1-0.beta.r434svn.1.fc22 287 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9185 ceph-deploy-1.5.25-1.fc22 219 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12781 python-kdcproxy-0.3.2-1.fc22 174 https://bodhi.fedoraproject.org/updates/FEDORA-2015-16239 nagios-4.0.8-1.fc22 162 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2d37e7dacf openstack-swift-2.2.0-6.fc22 131 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9039c25f1d miniupnpc-1.9-6.fc22 114 https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4 libpng-1.6.16-4.fc22 114 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6 libpng-1.6.16-5.fc22 95 https://bodhi.fedoraproject.org/updates/FEDORA-2015-3a5cebb105 ImageMagick-6.9.2.7-1.fc22 81 https://bodhi.fedoraproject.org/updates/FEDORA-2015-b9e4c97ff1 sos-3.2-2.fc22 54 https://bodhi.fedoraproject.org/updates/FEDORA-2015-f683150aa0 thttpd-2.25b-37.fc22 43 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0 xulrunner-44.0-1.fc22 31 https://bodhi.fedoraproject.org/updates/FEDORA-2016-560802e52b xdelta-3.0.7-7.fc22 20 https://bodhi.fedoraproject.org/updates/FEDORA-2016-24d134e494 mingw-nsis-2.50-1.fc22 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-f5af8e27ce pcre-8.38-3.fc22 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-338a7e9925 graphite2-1.3.6-1.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2016-0f490eea10 jenkins-1.609.3-6.fc22 jenkins-remoting-2.53.3-1.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2016-11537160e9 websvn-2.3.3-12.fc22 7 https://bodhi.fedoraproject.org/updates/FEDORA-2016-7f334957cc hamster-time-tracker-2.0-0.5.rc1.fc22 7 https://bodhi.fedoraproject.org/updates/FEDORA-2016-02ee5b4002 php-udan11-sql-parser-3.4.0-1.fc22 phpMyAdmin-4.5.5.1-1.fc22 7 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3cbe9ad765 python-pygments-2.1.3-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-b004d6d8f7 python-django-1.8.11-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3954061e32 rubygem-actionpack-4.2.0-4.fc22 rubygem-actionview-4.2.0-5.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-7b40eb9e29 libecap-1.0.0-1.fc22 squid-3.5.10-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-c71532c5e2 putty-0.67-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-5b2c402bb1 firefox-45.0-4.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-bb7bdd7063 php-pecl-http-2.5.6-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-5f44e89fe0 python-tgcaptcha2-0.3.1-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-fde759f627 libotr-4.1.1-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-9f4012116e drupal6-emfield-2.7-1.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-38b20aa50f xen-4.5.2-9.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d339d610c1 openssh-6.9p1-11.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-dc3740c56e apache-commons-collections-3.2.2-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-e6651efbaf tomcat-7.0.68-3.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-161b73fc2c bind99-9.9.8-4.P4.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-364c0a9df4 bind-9.10.3-9.P4.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-052ce8d545 webkitgtk4-2.10.8-1.fc22 The following Fedora 22 Critical Path updates have yet to be approved: Age URL 213 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13210 yum-3.4.3-508.fc22 131 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2123de044f libgphoto2-2.5.8-1.fc22 128 https://bodhi.fedoraproject.org/updates/FEDORA-2015-48f718ed1b vim-7.4.909-1.fc22 114 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6 libpng-1.6.16-5.fc22 114 https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4 libpng-1.6.16-4.fc22 67 https://bodhi.fedoraproject.org/updates/FEDORA-2016-46b611abb8 httpd-2.4.18-1.fc22 43 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0 xulrunner-44.0-1.fc22 37 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3fce30d64 mobile-broadband-provider-info-1.20151214-1.fc22 20 https://bodhi.fedoraproject.org/updates/FEDORA-2016-ce419c9cab selinux-policy-3.13.1-128.28.fc22 16 https://bodhi.fedoraproject.org/updates/FEDORA-2016-b37af739e7 spatialite-tools-4.2.0-20.fc22 sqlite-3.11.0-2.fc22 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3b03252507 rpm-4.12.0.1-16.fc22 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-f5af8e27ce pcre-8.38-3.fc22 10 https://bodhi.fedoraproject.org/updates/FEDORA-2016-a4155fbf34 sendmail-8.15.2-2.fc22 10 https://bodhi.fedoraproject.org/updates/FEDORA-2016-9f7a319b77 pcmanfm-1.2.4-1.fc22 libfm-1.2.4-1.fc22 9 https://bodhi.fedoraproject.org/updates/FEDORA-2016-f9789605ac NetworkManager-1.0.10-3.fc22 9 https://bodhi.fedoraproject.org/updates/FEDORA-2016-c0444d26e4 sqlite-3.11.0-3.fc22 9 https://bodhi.fedoraproject.org/updates/FEDORA-2016-706c28d619 koji-1.10.1-3.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2016-bf56b612e9 libbluray-0.9.2-1.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4d5434d82f parted-3.2-16.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-5b2c402bb1 firefox-45.0-4.fc22 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-a5ac55135e nspr-4.12.0-1.fc22 nss-3.23.0-1.0.fc22 nss-softokn-3.23.0-1.0.fc22 nss-util-3.23.0-1.0.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-364c0a9df4 bind-9.10.3-9.P4.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-11b32d067d gtk2-2.24.30-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-76aa957f67 gnutls-3.3.22-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-a55a84a795 kernel-4.4.5-200.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d339d610c1 openssh-6.9p1-11.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4072c51267 dracut-041-15.fc22 The following builds have been pushed to Fedora 22 updates-testing apache-commons-collections-3.2.2-1.fc22 atoum-2.6.0-1.fc22 awake-1.0-9.fc22 bind-9.10.3-9.P4.fc22 bind99-9.9.8-4.P4.fc22 chordii-4.5.3-2.fc22 cycle-0.3.1-21.fc22 dcap-2.47.10-3.fc22 diffoscope-51-3.fc22 dracut-041-15.fc22 eclipse-cdt-8.8.1-9.fc22 eclipse-launchbar-1.0.1-1.gitedd5f69.fc22 eclipse-linuxtools-4.2.1-4.fc22 eclipse-ptp-9.0.2-0.2.git88a46f8.fc22 eclipse-remote-2.0.2-1.fc22 eclipse-tm-terminal-4.0.0-6.gitcf7ef3f.fc22 fedora-motd-0.1.1-1.fc22 gen-oath-safe-0.10.0-1.fc22 globus-proxy-utils-6.14-1.fc22 gnome-chemistry-utils-0.14.11-1.fc22 gnutls-3.3.22-1.fc22 golang-github-olekukonko-tablewriter-0-0.1.gita5eefc2.fc22 golang-github-yvasiyarov-go-metrics-0-0.1.git57bccd1.fc22 golang-github-yvasiyarov-gorelic-0-0.1.gita9bba5b.fc22 golang-github-yvasiyarov-newrelic_platform_go-0-0.1.gitb21fdbd.fc22 gtk2-2.24.30-1.fc22 kernel-4.4.5-200.fc22 lcgdm-dav-0.17.1-2.fc22 mock-1.2.17-1.fc22 munin-2.0.25-10.fc22 oidentd-2.0.8-17.fc22 openssh-6.9p1-11.fc22 osbs-client-0.18-1.fc22 owncloud-8.1.5-1.fc22 perl-Digest-MD5-2.55-1.fc22 perl-IPTables-libiptc-0.52-12.fc22 perl-Set-Tiny-0.04-4.fc22 php-guzzlehttp-psr7-1.2.3-1.fc22 php-league-flysystem-1.0.18-1.fc22 php-paragonie-random-compat-1.2.1-1.fc22 php-pdepend-PHP-Depend-2.2.4-1.fc22 php-pear-phing-2.14.0-1.fc22 php-pecl-pq-1.0.0-2.fc22 php-phpmd-PHP-PMD-2.4.2-1.fc22 php-sabre-dav-2.1.6-1.fc22 php-sabre-event-2.0.2-1.fc22 php-sabre-http-3.0.5-1.fc22 php-sabre-uri-1.1.0-1.fc22 php-sabre-vobject-3.4.6-1.fc22 proftpd-1.3.5b-1.fc22 python-fedmsg-meta-fedora-infrastructure-0.15.11-1.fc22 python-libarchive-c-2.2-3.fc22 python-mdp-3.5-3.fc22 qt-virt-manager-0.22.45-1.fc22 quiterss-0.18.4-1.fc22 subscription-manager-1.17.3-1.fc22 tlsh-3.4.5-1.fc22 tomcat-7.0.68-3.fc22 webkitgtk4-2.10.8-1.fc22 youtube-dl-2016.03.06-1.fc22 Details about builds: ================================================================================ apache-commons-collections-3.2.2-1.fc22 (FEDORA-2016-dc3740c56e) Provides new interfaces, implementations and utilities for Java Collections -------------------------------------------------------------------------------- Update Information: Update to upstream version 3.2.2 which fixes serialization vulnerability -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316430 - Version 3.2.1 has a CVSS 10.0 vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1316430 -------------------------------------------------------------------------------- ================================================================================ atoum-2.6.0-1.fc22 (FEDORA-2016-6377b98ebe) PHP Unit Testing framework -------------------------------------------------------------------------------- Update Information: **Version 2.6.0** Changes: * 569 Use in-memory cache for resolved asserters (jubianchi) * 567 Extract loop logic from runner and add a looper interface (jubianchi, agallou) Bugfix: * 583 Fix asserting on zeroes with the phpFloat asserter (jubianchi) * 581 Fix how arguments are passed when using loop mode (jubianchi) * 578 Fix arguments priority parsing when they have no priority (agallou) -------------------------------------------------------------------------------- ================================================================================ awake-1.0-9.fc22 (FEDORA-2016-81303dfeef) A command to 'wake on LAN' a remote host -------------------------------------------------------------------------------- Update Information: Remove shebang -------------------------------------------------------------------------------- ================================================================================ bind-9.10.3-9.P4.fc22 (FEDORA-2016-364c0a9df4) The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server -------------------------------------------------------------------------------- Update Information: New version fixing CVE-2016-1285 CVE-2016-1286 CVE-2016-2088 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316445 - CVE-2016-1285 CVE-2016-1286 CVE-2016-2088 bind: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1316445 -------------------------------------------------------------------------------- ================================================================================ bind99-9.9.8-4.P4.fc22 (FEDORA-2016-161b73fc2c) The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries -------------------------------------------------------------------------------- Update Information: New version fixing CVE-2016-1285 CVE-2016-1286 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316446 - CVE-2016-1285 CVE-2016-1286 bind99: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1316446 -------------------------------------------------------------------------------- ================================================================================ chordii-4.5.3-2.fc22 (FEDORA-2016-a274cea7ab) Print songsbooks (lyrics + chords) -------------------------------------------------------------------------------- Update Information: Actualize URLs. -------------------------------------------------------------------------------- ================================================================================ cycle-0.3.1-21.fc22 (FEDORA-2016-0ca1ddd3ca) Calendar program for women -------------------------------------------------------------------------------- Update Information: Make ladies using F22 happy as well. ---- Delayed attempt for a gift for the International Women's Day. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1315836 - cycle crashes upon use (after wxPython 3.0 transition) https://bugzilla.redhat.com/show_bug.cgi?id=1315836 -------------------------------------------------------------------------------- ================================================================================ dcap-2.47.10-3.fc22 (FEDORA-2016-3c34471605) Client Tools for dCache -------------------------------------------------------------------------------- Update Information: Fix broken postun scriptlet in dcap-libs. -------------------------------------------------------------------------------- ================================================================================ diffoscope-51-3.fc22 (FEDORA-2016-231f766829) In-depth comparison of files, archives, and directories -------------------------------------------------------------------------------- Update Information: New package, part of the "reproducible builds" effort. -------------------------------------------------------------------------------- ================================================================================ dracut-041-15.fc22 (FEDORA-2016-4072c51267) Initramfs generator using udev -------------------------------------------------------------------------------- Update Information: This update adds early microcode loading to the initramfs again. With 4.4 kernels the dracut check for this feature broke. dracut now just checks for microcode support, which will add microcode again for newer kernels. After updating you will have to run: # dracut --force to update your current 4.4 initramfs. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1314501 - dracut.sh: remove "_EARLY" from CONFIG_MICROCODE_* checks https://bugzilla.redhat.com/show_bug.cgi?id=1314501 -------------------------------------------------------------------------------- ================================================================================ eclipse-cdt-8.8.1-9.fc22 (FEDORA-2016-f5af280918) Eclipse C/C++ Development Tools (CDT) plugin -------------------------------------------------------------------------------- Update Information: Update to Mars.2 releases. -------------------------------------------------------------------------------- ================================================================================ eclipse-launchbar-1.0.1-1.gitedd5f69.fc22 (FEDORA-2016-f5af280918) Eclipse Launchbar plug-in -------------------------------------------------------------------------------- Update Information: Update to Mars.2 releases. -------------------------------------------------------------------------------- ================================================================================ eclipse-linuxtools-4.2.1-4.fc22 (FEDORA-2016-f5af280918) Linux specific Eclipse plugins -------------------------------------------------------------------------------- Update Information: Update to Mars.2 releases. -------------------------------------------------------------------------------- ================================================================================ eclipse-ptp-9.0.2-0.2.git88a46f8.fc22 (FEDORA-2016-f5af280918) Eclipse Parallel Tools Platform -------------------------------------------------------------------------------- Update Information: Update to Mars.2 releases. -------------------------------------------------------------------------------- ================================================================================ eclipse-remote-2.0.2-1.fc22 (FEDORA-2016-f5af280918) Eclipse Remote Services plug-in -------------------------------------------------------------------------------- Update Information: Update to Mars.2 releases. -------------------------------------------------------------------------------- ================================================================================ eclipse-tm-terminal-4.0.0-6.gitcf7ef3f.fc22 (FEDORA-2016-f5af280918) Terminal plugin for Eclipse -------------------------------------------------------------------------------- Update Information: Update to Mars.2 releases. -------------------------------------------------------------------------------- ================================================================================ fedora-motd-0.1.1-1.fc22 (FEDORA-2016-ed7cdc54b9) Fedora MOTD -------------------------------------------------------------------------------- Update Information: Bugfixes in fedora-motd: fix not caching updateinfo after running dnf transaction. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1309792 - Review Request: fedora-motd - Generate dynamic MOTD for Fedora https://bugzilla.redhat.com/show_bug.cgi?id=1309792 -------------------------------------------------------------------------------- ================================================================================ gen-oath-safe-0.10.0-1.fc22 (FEDORA-2016-1cb33dea37) Script for generating HOTP/TOTP keys (and QR code) -------------------------------------------------------------------------------- Update Information: New upstream update. -------------------------------------------------------------------------------- ================================================================================ globus-proxy-utils-6.14-1.fc22 (FEDORA-2016-e3321db2fd) Globus Toolkit - Globus GSI Proxy Utility Programs -------------------------------------------------------------------------------- Update Information: Better support for checking cert names. -------------------------------------------------------------------------------- ================================================================================ gnome-chemistry-utils-0.14.11-1.fc22 (FEDORA-2016-a1b6e4b407) A set of chemical utilities -------------------------------------------------------------------------------- Update Information: This is an update to the latest upstream release of gnome-chemistry-utils: * http://lists.nongnu.org/archive/html/gchemutils-main/2016-03/msg00000.html -------------------------------------------------------------------------------- ================================================================================ gnutls-3.3.22-1.fc22 (FEDORA-2016-76aa957f67) A TLS protocol implementation -------------------------------------------------------------------------------- Update Information: updated to 3.3.22 -------------------------------------------------------------------------------- ================================================================================ golang-github-olekukonko-tablewriter-0-0.1.gita5eefc2.fc22 (FEDORA-2016-f1e60d1ee3) ASCII table in golang -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1315099 - Review Request: golang-github-olekukonko-tablewriter - ASCII table in golang https://bugzilla.redhat.com/show_bug.cgi?id=1315099 -------------------------------------------------------------------------------- ================================================================================ golang-github-yvasiyarov-go-metrics-0-0.1.git57bccd1.fc22 (FEDORA-2016-af93bc8051) Go port of Coda Hale's Metrics library -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1314977 - Review Request: golang-github-yvasiyarov-go-metrics - Go port of Coda Hale's Metrics library https://bugzilla.redhat.com/show_bug.cgi?id=1314977 -------------------------------------------------------------------------------- ================================================================================ golang-github-yvasiyarov-gorelic-0-0.1.gita9bba5b.fc22 (FEDORA-2016-caa9f45f46) New Relic agent for Go lang -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1314978 - Review Request: golang-github-yvasiyarov-gorelic - New Relic agent for Go lang https://bugzilla.redhat.com/show_bug.cgi?id=1314978 -------------------------------------------------------------------------------- ================================================================================ golang-github-yvasiyarov-newrelic_platform_go-0-0.1.gitb21fdbd.fc22 (FEDORA-2016-dc347ec913) Newrelic Platform SDK for Go -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1314979 - Review Request: golang-github-yvasiyarov-newrelic_platform_go - Newrelic Platform SDK for Go https://bugzilla.redhat.com/show_bug.cgi?id=1314979 -------------------------------------------------------------------------------- ================================================================================ gtk2-2.24.30-1.fc22 (FEDORA-2016-11b32d067d) The GIMP ToolKit (GTK+), a library for creating GUIs for X -------------------------------------------------------------------------------- Update Information: gtk+ 2.24.30 release. X11: - Support Randr 1.5 monitor information Bug fixes: - 722815 OS X: Deliver GdkModifierType during 'drag-motion' - 612611 Fix interaction between scrolling menus and automatic mnemonics - 699652 win32: On focus restore the window if iconified - 698652 win32: Properly handle show and focus - OS X: Fix clipboard image retrieval - OS X: Fix a crash when fullscreening - 758893 Prevent status icon size dithering -------------------------------------------------------------------------------- ================================================================================ kernel-4.4.5-200.fc22 (FEDORA-2016-a55a84a795) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 4.4.5 update contains a number of important fixes across the tree -------------------------------------------------------------------------------- ================================================================================ lcgdm-dav-0.17.1-2.fc22 (FEDORA-2016-18b16ef1ee) HTTP/DAV front end to the DPM/LFC services -------------------------------------------------------------------------------- Update Information: New upstream release 0.17.1 -------------------------------------------------------------------------------- ================================================================================ mock-1.2.17-1.fc22 (FEDORA-2016-66229b4649) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: * Bugfix release * removed the sparc config -------------------------------------------------------------------------------- References: [ 1 ] Bug #1301953 - mock builds fail with nspawn, buildroot missing /bin/su https://bugzilla.redhat.com/show_bug.cgi?id=1301953 [ 2 ] Bug #1311796 - --new-chroot causes incorrect $PATH https://bugzilla.redhat.com/show_bug.cgi?id=1311796 [ 3 ] Bug #1312820 - Lots of WARNING: unable to delete selinux filesystems https://bugzilla.redhat.com/show_bug.cgi?id=1312820 -------------------------------------------------------------------------------- ================================================================================ munin-2.0.25-10.fc22 (FEDORA-2016-6586eecbb0) Network-wide graphing framework (grapher/gatherer) -------------------------------------------------------------------------------- Update Information: EL5/6 do not need to install firewalld files BZ# 1315810 - postgresql plugin default configuration (contrib) BZ# 1315990 - Please remove unnecessary requirements for munin-node BZ# 1315951 - move /etc/tmpfiles.d/munin.conf to /usr/lib/tmpfiles.d Remove firewalld Require and associated script. EPEL7 does not have them. BZ# 1300379 - Please include firewalld service file for munin- node in RPM package BZ# 1262751 - munin-common should be requires(pre) shadow- utils package Brought forward munin-2.0.26-406c67e ---- BZ# 1262751 - munin- common should be requires(pre) shadow-utils package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1315810 - postgresql plugin default configuration https://bugzilla.redhat.com/show_bug.cgi?id=1315810 [ 2 ] Bug #1315990 - Please remove unnecessary requirements for munin-node https://bugzilla.redhat.com/show_bug.cgi?id=1315990 [ 3 ] Bug #1315951 - move /etc/tmpfiles.d/munin.conf to /usr/lib/tmpfiles.d https://bugzilla.redhat.com/show_bug.cgi?id=1315951 [ 4 ] Bug #1300379 - Please include firewalld service file for munin-node in RPM package https://bugzilla.redhat.com/show_bug.cgi?id=1300379 [ 5 ] Bug #1262751 - munin-common should be requires(pre) shadow-utils package https://bugzilla.redhat.com/show_bug.cgi?id=1262751 -------------------------------------------------------------------------------- ================================================================================ oidentd-2.0.8-17.fc22 (FEDORA-2016-07b5dc88a6) Implementation of the RFC1413 identification server -------------------------------------------------------------------------------- Update Information: This release fixes error reporting when initializing oidentd. It also skips opening conntracking table if masquerading feature is not requested. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316308 - oidentd started from xinetd as a non-root user with loaded nf_conntrack kernel module fails to initialize: Error initializing core https://bugzilla.redhat.com/show_bug.cgi?id=1316308 -------------------------------------------------------------------------------- ================================================================================ openssh-6.9p1-11.fc22 (FEDORA-2016-d339d610c1) An open source implementation of SSH protocol versions 1 and 2 -------------------------------------------------------------------------------- Update Information: This update provides recent upstrem fix published with openssh-7.2p2 (#1316529). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316829 - CVE-2016-3115 openssh: missing sanitisation of input for X11 forwarding https://bugzilla.redhat.com/show_bug.cgi?id=1316829 -------------------------------------------------------------------------------- ================================================================================ osbs-client-0.18-1.fc22 (FEDORA-2016-d69c8798f9) Python command line client for OpenShift Build Service -------------------------------------------------------------------------------- Update Information: New upstream release. -------------------------------------------------------------------------------- ================================================================================ owncloud-8.1.5-1.fc22 (FEDORA-2016-bd14d5b92d) Private file sync and share server -------------------------------------------------------------------------------- Update Information: Update to 8.1.5 Note that it is important not to miss this update as it's a required path to the next update of 8.2.X and if not applied will require manual intervention to update to this via koji before 8.2.X if skipped. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1261011 - owncloud-9.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1261011 -------------------------------------------------------------------------------- ================================================================================ perl-Digest-MD5-2.55-1.fc22 (FEDORA-2016-d8ed45a6bc) Perl interface to the MD5 algorithm -------------------------------------------------------------------------------- Update Information: This release fixes warning handlings. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316317 - perl-Digest-MD5-2.55 is available https://bugzilla.redhat.com/show_bug.cgi?id=1316317 -------------------------------------------------------------------------------- ================================================================================ perl-IPTables-libiptc-0.52-12.fc22 (FEDORA-2016-f1bdc5d173) Perl extension for iptables libiptc -------------------------------------------------------------------------------- Update Information: This release removes wrong libiptc.so() RPM Provides symbol. -------------------------------------------------------------------------------- ================================================================================ perl-Set-Tiny-0.04-4.fc22 (FEDORA-2016-c53c494a8a) Simple sets of strings -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ================================================================================ php-guzzlehttp-psr7-1.2.3-1.fc22 (FEDORA-2016-cdddcb293b) PSR-7 message implementation -------------------------------------------------------------------------------- Update Information: ### 1.2.3 - 2016-02-18 * Fixed support in `GuzzleHttp\Psr7\CachingStream` for seeking forward on remote streams, which can sometimes return fewer bytes than requested with `fread`. * Fixed handling of gzipped responses with FNAME headers. ### 1.2.2 - 2016-01-22 * Added support for URIs without any authority. * Added support for HTTP 451 'Unavailable For Legal Reasons.' * Added support for using '0' as a filename. * Added support for including non-standard ports in Host headers. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1301276 - php-guzzlehttp-psr7-1.2.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1301276 -------------------------------------------------------------------------------- ================================================================================ php-league-flysystem-1.0.18-1.fc22 (FEDORA-2016-a1171166f1) Filesystem abstraction: Many filesystems, one API -------------------------------------------------------------------------------- Update Information: **Version 1.0.18** * Revert "Simplified Util::pathinfo, dirname key always exists." -------------------------------------------------------------------------------- ================================================================================ php-paragonie-random-compat-1.2.1-1.fc22 (FEDORA-2016-58d4852999) PHP 5.x polyfill for random_bytes() and random_int() from PHP 7 -------------------------------------------------------------------------------- Update Information: ### Version 1.2.1 - 2016-02-29 * PHP 5.6.10 - 5.6.12 will hang when mcrypt is used on Unix-based operating systems ([PHP bug 69833](https://bugs.php.net/bug.php?id=69833)). If you are running one of these versions, please upgrade (or make sure `/dev/urandom` is readable) otherwise you're relying on OpenSSL. ### Version 1.2.0 - 2016-02-05 * Whitespace and other cosmetic changes * Added a changelog. ### Version 1.1.6 - 2016-01-29 * Eliminate `open_basedir` warnings by detecting this configuration setting. (Thanks [@oucil](https://github.com/oucil) for reporting this.) * Added install instructions to the README. * Documentation cleanup (there is, in fact, no `MCRYPT_CREATE_IV` constant, I meant to write `MCRYPT_DEV_URANDOM`) ### Version 1.1.5 - 2016-01-06 * Prevent fatal errors on platforms with older versions of libsodium. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1296738 - php-paragonie-random-compat-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1296738 -------------------------------------------------------------------------------- ================================================================================ php-pdepend-PHP-Depend-2.2.4-1.fc22 (FEDORA-2016-e8d2955ced) PHP_Depend design quality metrics for PHP package -------------------------------------------------------------------------------- Update Information: **Version 2.2.4** * Fixed: Cannot create new nodes, when internal state is frozen. #328 -------------------------------------------------------------------------------- ================================================================================ php-pear-phing-2.14.0-1.fc22 (FEDORA-2016-1e852e6b00) A project build system based on Apache Ant -------------------------------------------------------------------------------- Update Information: Mar. 10, 2016 - **Phing 2.14** This release contains the following new or improved functionality: * Phing can now emit a specific status code on exit after failing * Added IsPropertyTrue/IsPropertyFalse conditions * Added IsWritable / IsReadable selectors * Added GitDescribe task * Added CutDirs mapper * Line breaks in property files on Windows machines fixed * FileSync task now supports excluding multiple files/directories * Various typo and bug fixes, documentation updates The following tickets were closed in this release: * [1245] ExecTask documentation has incorrect escape attribute default value * [1244] phpunit task -- problem when listener depends on bootstrap * [1242] symfonyConsoleTask does not quote path to console * [1241] SymfonyConsoleTask's checkreturn / propertyname are not documented * [1239] ResolvePath just concatenates if "dir" attribute is present * [1237] HttpGetTask should catch HTTP_Request2_Exception, throw BuildException * [1236] version-compare condition typo in documentation * [1235] misworded sentence in documentation * [1234] IsFailure condition always evaluates to TRUE * [1231] JsHintTask fails when filename contains double quotes * [1198] PropertyTask resolving UTF-8 special chars in file attribute * [1194] Update relax-ng schema * [1132] Provide SHA512 sum of all generated archives for a release * [1131] Verification of changelog file fails when your file is in a directory added in your classpathref * [1046] ReplaceTokensWithFile doesn't support begintoken/endtokens with / in them -------------------------------------------------------------------------------- ================================================================================ php-pecl-pq-1.0.0-2.fc22 (FEDORA-2016-f78676affb) PostgreSQL client library (libpq) binding -------------------------------------------------------------------------------- Update Information: PostgreSQL client library (libpq) binding. Documents: http://devel- m6w6.rhcloud.com/mdref/pq Highlights: * Nearly complete support for asynchronous usage * Extended type support by pg_type * Fetching simple multi- dimensional array maps * Working Gateway implementation -------------------------------------------------------------------------------- References: [ 1 ] Bug #1299907 - Review Request: php-pecl-pq - PostgreSQL client library (libpq) binding https://bugzilla.redhat.com/show_bug.cgi?id=1299907 -------------------------------------------------------------------------------- ================================================================================ php-phpmd-PHP-PMD-2.4.2-1.fc22 (FEDORA-2016-361b5ca1bf) PHPMD - PHP Mess Detector -------------------------------------------------------------------------------- Update Information: **Version 2.4.2** Features * Implemented #343: Trim exceptions for StaticAccess Bugfixes * Fixed #261: Prove Issue 261 and added tests for CamelCaseVariableName. * Fixed #328: Cannot create new nodes, when internal state is frozen. * Fixed #354: Replace plus by a dot as concat operator in filename creation. ---- This release adds a new helper method to access the full qualified name of an analyzed node. Upstream announcements: * [Version 2.4.1](https://phpmd.org/download/release/2.4.1/changelog.html) * [Version 2.4.0](https://phpmd.org/download/release/2.4.0/changelog.html) * [Version 2.3.3](https://phpmd.org/download/release/2.3.3/changelog.html) -------------------------------------------------------------------------------- ================================================================================ php-sabre-dav-2.1.6-1.fc22 (FEDORA-2016-fda6b62ef9) WebDAV Framework for PHP -------------------------------------------------------------------------------- Update Information: Update php-sabre packages as part of the requirements for owncloud 8.1+ -------------------------------------------------------------------------------- ================================================================================ php-sabre-event-2.0.2-1.fc22 (FEDORA-2016-fda6b62ef9) Lightweight library for event-based programming -------------------------------------------------------------------------------- Update Information: Update php-sabre packages as part of the requirements for owncloud 8.1+ -------------------------------------------------------------------------------- ================================================================================ php-sabre-http-3.0.5-1.fc22 (FEDORA-2016-fda6b62ef9) Library for dealing with http requests and responses -------------------------------------------------------------------------------- Update Information: Update php-sabre packages as part of the requirements for owncloud 8.1+ -------------------------------------------------------------------------------- ================================================================================ php-sabre-uri-1.1.0-1.fc22 (FEDORA-2016-7ddb59409b) Functions for making sense out of URIs -------------------------------------------------------------------------------- Update Information: sabre/uri is a lightweight library that provides several functions for working with URIs, staying true to the rules of RFC3986. Partially inspired by Node.js URL library, and created to solve real problems in PHP applications. 100% unitested and many tests are based on examples from RFC3986. The library provides the following functions: * resolve to resolve relative urls. * normalize to aid in comparing urls. * parse, which works like PHP's parse_url. * build to do the exact opposite of parse. * split to easily get the 'dirname' and 'basename' of a URL without all the problems those two functions have. Autoloader: /usr/share/php/Sabre/Uri/autoload.php -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316906 - Review Request: php-sabre-uri - Functions for making sense out of URIs https://bugzilla.redhat.com/show_bug.cgi?id=1316906 -------------------------------------------------------------------------------- ================================================================================ php-sabre-vobject-3.4.6-1.fc22 (FEDORA-2016-fda6b62ef9) Library to parse and manipulate iCalendar and vCard objects -------------------------------------------------------------------------------- Update Information: Update php-sabre packages as part of the requirements for owncloud 8.1+ -------------------------------------------------------------------------------- ================================================================================ proftpd-1.3.5b-1.fc22 (FEDORA-2016-f95d8ea3ad) Flexible, stable and highly-configurable FTP server -------------------------------------------------------------------------------- Update Information: Cumulative maintenance release from upstream. Highlights are: * SSH RSA hostkeys smaller than 2048 bits now work properly. * MLSD response lines are now properly CRLF terminated. Various other bug fixes are also included. -------------------------------------------------------------------------------- ================================================================================ python-fedmsg-meta-fedora-infrastructure-0.15.11-1.fc22 (FEDORA-2016-1a6e20585c) Metadata providers for Fedora Infrastructure's fedmsg deployment -------------------------------------------------------------------------------- Update Information: Handle a new pagure message format. Fix COPR links in long_form representation. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316958 - python-fedmsg-meta-fedora-infrastructure-0.15.11 is available https://bugzilla.redhat.com/show_bug.cgi?id=1316958 -------------------------------------------------------------------------------- ================================================================================ python-libarchive-c-2.2-3.fc22 (FEDORA-2016-231f766829) Python interface to libarchive -------------------------------------------------------------------------------- Update Information: New package, part of the "reproducible builds" effort. -------------------------------------------------------------------------------- ================================================================================ python-mdp-3.5-3.fc22 (FEDORA-2016-ccb4db2af3) Library for building data processing pipelines for machine learning -------------------------------------------------------------------------------- Update Information: New package. -------------------------------------------------------------------------------- ================================================================================ qt-virt-manager-0.22.45-1.fc22 (FEDORA-2016-9704f0f7c9) Qt Virtual Machine Manager -------------------------------------------------------------------------------- Update Information: enhancements for stability; -------------------------------------------------------------------------------- ================================================================================ quiterss-0.18.4-1.fc22 (FEDORA-2016-b39de2154a) RSS/Atom aggregator -------------------------------------------------------------------------------- Update Information: Version bump -------------------------------------------------------------------------------- ================================================================================ subscription-manager-1.17.3-1.fc22 (FEDORA-2016-afb2ad8cbe) Tools and libraries for subscription and repository management -------------------------------------------------------------------------------- Update Information: Assorted bug fixes -------------------------------------------------------------------------------- ================================================================================ tlsh-3.4.5-1.fc22 (FEDORA-2016-231f766829) Fuzzy text matching library -------------------------------------------------------------------------------- Update Information: New package, part of the "reproducible builds" effort. -------------------------------------------------------------------------------- ================================================================================ tomcat-7.0.68-3.fc22 (FEDORA-2016-e6651efbaf) Apache Servlet/JSP Engine, RI for Servlet 3.0/JSP 2.2 API -------------------------------------------------------------------------------- Update Information: - Revert sysconfig migration changes, resolves: rhbz#1311771, rhbz#1311905 - Add /etc/tomcat/conf.d/ with shell expansion support, resolves rhbz#1293636 ---- - Load sysconfig from tomcat.conf, resolves: rhbz#1311771, rhbz#1311905 - Set default javax.sql.DataSource factory to apache commons one, resolves rhbz#1214381 ---- - Updated to 7.0.68 - Fix symlinks from $CATALINA_HOME/lib perspective, resolves: rhbz#1308685 - Fix tomcat user shell, resolves rhbz#1302718 - Remove log4j support. It has never been working actually. See rhbz#1236297 - Move shipped config to /etc/sysconfig/tomcat. /etc/tomcat/tomcat.conf can now be used to override it with shell expansion, resolves rhbz#1293636 - Security fix for CVE-2016-0763 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1311093 - CVE-2016-0763 tomcat: security manager bypass via setGlobalContext() https://bugzilla.redhat.com/show_bug.cgi?id=1311093 -------------------------------------------------------------------------------- ================================================================================ webkitgtk4-2.10.8-1.fc22 (FEDORA-2016-052ce8d545) GTK+ Web content engine library -------------------------------------------------------------------------------- Update Information: Update to 2.10.8: * Limit the number of tiles according to the visible area. This was causing a huge memory consumption with some websites. * Fix flickering and rendering artifacts when entering accelerated compositing mode before the web view is realized. * Fix rendering of form controls and scrollbars with GTK+ >= 3.19. * Fix HTTP authentication dialog rendering when accelerated compositing mode is enabled. * Fix rendering artifacts when using a web view background color. * Fix a crash when creating a WebKitWebView without providing a WebKitWebContext. * Fix several crashes and rendering issues. * Security fixes: CVE-2016-1726. -------------------------------------------------------------------------------- ================================================================================ youtube-dl-2016.03.06-1.fc22 (FEDORA-2016-2d99c3e22f) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information: Update to latest release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1310644 - youtube-dl-2016.03.06 is available https://bugzilla.redhat.com/show_bug.cgi?id=1310644 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: http://lists.fedoraproject.org/admin/lists/test@xxxxxxxxxxxxxxxxxxxxxxx