The following Fedora 22 Security updates need testing: Age URL 339 https://bodhi.fedoraproject.org/updates/FEDORA-2015-5878 echoping-6.1-0.beta.r434svn.1.fc22 288 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9185 ceph-deploy-1.5.25-1.fc22 221 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12781 python-kdcproxy-0.3.2-1.fc22 175 https://bodhi.fedoraproject.org/updates/FEDORA-2015-16239 nagios-4.0.8-1.fc22 163 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2d37e7dacf openstack-swift-2.2.0-6.fc22 133 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9039c25f1d miniupnpc-1.9-6.fc22 115 https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4 libpng-1.6.16-4.fc22 115 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6 libpng-1.6.16-5.fc22 97 https://bodhi.fedoraproject.org/updates/FEDORA-2015-3a5cebb105 ImageMagick-6.9.2.7-1.fc22 82 https://bodhi.fedoraproject.org/updates/FEDORA-2015-b9e4c97ff1 sos-3.2-2.fc22 56 https://bodhi.fedoraproject.org/updates/FEDORA-2015-f683150aa0 thttpd-2.25b-37.fc22 44 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0 xulrunner-44.0-1.fc22 32 https://bodhi.fedoraproject.org/updates/FEDORA-2016-560802e52b xdelta-3.0.7-7.fc22 21 https://bodhi.fedoraproject.org/updates/FEDORA-2016-24d134e494 mingw-nsis-2.50-1.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2016-338a7e9925 graphite2-1.3.6-1.fc22 10 https://bodhi.fedoraproject.org/updates/FEDORA-2016-0f490eea10 jenkins-1.609.3-6.fc22 jenkins-remoting-2.53.3-1.fc22 10 https://bodhi.fedoraproject.org/updates/FEDORA-2016-11537160e9 websvn-2.3.3-12.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3cbe9ad765 python-pygments-2.1.3-1.fc22 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-b004d6d8f7 python-django-1.8.11-1.fc22 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3954061e32 rubygem-actionpack-4.2.0-4.fc22 rubygem-actionview-4.2.0-5.fc22 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-7b40eb9e29 libecap-1.0.0-1.fc22 squid-3.5.10-1.fc22 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-c71532c5e2 putty-0.67-1.fc22 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-5b2c402bb1 firefox-45.0-4.fc22 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-bb7bdd7063 php-pecl-http-2.5.6-1.fc22 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-5f44e89fe0 python-tgcaptcha2-0.3.1-1.fc22 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-fde759f627 libotr-4.1.1-1.fc22 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-9f4012116e drupal6-emfield-2.7-1.fc22 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-38b20aa50f xen-4.5.2-9.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d339d610c1 openssh-6.9p1-11.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-dc3740c56e apache-commons-collections-3.2.2-1.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-e6651efbaf tomcat-7.0.68-3.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-161b73fc2c bind99-9.9.8-4.P4.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-364c0a9df4 bind-9.10.3-9.P4.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-052ce8d545 webkitgtk4-2.10.8-1.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-40a657cee1 dropbear-2016.72-1.fc22 The following Fedora 22 Critical Path updates have yet to be approved: Age URL 214 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13210 yum-3.4.3-508.fc22 133 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2123de044f libgphoto2-2.5.8-1.fc22 129 https://bodhi.fedoraproject.org/updates/FEDORA-2015-48f718ed1b vim-7.4.909-1.fc22 115 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6 libpng-1.6.16-5.fc22 115 https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4 libpng-1.6.16-4.fc22 69 https://bodhi.fedoraproject.org/updates/FEDORA-2016-46b611abb8 httpd-2.4.18-1.fc22 44 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0 xulrunner-44.0-1.fc22 39 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3fce30d64 mobile-broadband-provider-info-1.20151214-1.fc22 21 https://bodhi.fedoraproject.org/updates/FEDORA-2016-ce419c9cab selinux-policy-3.13.1-128.28.fc22 17 https://bodhi.fedoraproject.org/updates/FEDORA-2016-b37af739e7 spatialite-tools-4.2.0-20.fc22 sqlite-3.11.0-2.fc22 13 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3b03252507 rpm-4.12.0.1-16.fc22 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-f9789605ac NetworkManager-1.0.10-3.fc22 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-c0444d26e4 sqlite-3.11.0-3.fc22 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-706c28d619 koji-1.10.1-3.fc22 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-a4155fbf34 sendmail-8.15.2-2.fc22 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-9f7a319b77 pcmanfm-1.2.4-1.fc22 libfm-1.2.4-1.fc22 10 https://bodhi.fedoraproject.org/updates/FEDORA-2016-bf56b612e9 libbluray-0.9.2-1.fc22 10 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4d5434d82f parted-3.2-16.fc22 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-5b2c402bb1 firefox-45.0-4.fc22 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-a5ac55135e nspr-4.12.0-1.fc22 nss-3.23.0-1.0.fc22 nss-softokn-3.23.0-1.0.fc22 nss-util-3.23.0-1.0.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-364c0a9df4 bind-9.10.3-9.P4.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-11b32d067d gtk2-2.24.30-1.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-76aa957f67 gnutls-3.3.22-1.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-a55a84a795 kernel-4.4.5-200.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d339d610c1 openssh-6.9p1-11.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4072c51267 dracut-041-15.fc22 The following builds have been pushed to Fedora 22 updates-testing abi-dumper-0.99.15-1.fc22 abi-tracker-1.5-1.fc22 ceph-ansible-1.0.1-4.fc22 dropbear-2016.72-1.fc22 gimp-dbp-1.1.9-9.fc22 hamster-time-tracker-2.0-0.7.rc1.fc22 httrack-3.48.21-1.fc22 nsd-4.1.8-1.fc22 nut-2.7.4-1.fc22 openshift-restclient-java-3.0.1-1.fc22 openteacher-3.2-5.fc22 php-Faker-1.5.0-5.fc22 php-composer-installers-1.0.23-1.fc22 php-kdyby-events-2.4.0-1.fc22 qbittorrent-3.3.3-6.fc22 quassel-0.12.3-2.fc22 rb_libtorrent-1.0.9-1.fc22 Details about builds: ================================================================================ abi-dumper-0.99.15-1.fc22 (FEDORA-2016-b4d167cf6e) Tool to dump ABI of an ELF object containing DWARF debug info -------------------------------------------------------------------------------- Update Information: * Support for analysis of the Linux kernel. * Added a new target to build graph of ABI symbols (target=graph). * Ability to regenerate objects report (target=objectsreport). * Carefully map headers when creating headers diff. * Added ABIDiff, CompatRate, SkipHeaders, Mode, Soname, ReportHeader, ContentHeader and ReportStyle options of the profile. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1317204 - abi-tracker-1.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1317204 [ 2 ] Bug #1317203 - abi-dumper-0.99.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=1317203 -------------------------------------------------------------------------------- ================================================================================ abi-tracker-1.5-1.fc22 (FEDORA-2016-b4d167cf6e) Tool to visualize ABI changes timeline of a C/C++ library -------------------------------------------------------------------------------- Update Information: * Support for analysis of the Linux kernel. * Added a new target to build graph of ABI symbols (target=graph). * Ability to regenerate objects report (target=objectsreport). * Carefully map headers when creating headers diff. * Added ABIDiff, CompatRate, SkipHeaders, Mode, Soname, ReportHeader, ContentHeader and ReportStyle options of the profile. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1317204 - abi-tracker-1.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1317204 [ 2 ] Bug #1317203 - abi-dumper-0.99.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=1317203 -------------------------------------------------------------------------------- ================================================================================ ceph-ansible-1.0.1-4.fc22 (FEDORA-2016-eeabad7869) Ansible playbooks for Ceph -------------------------------------------------------------------------------- Update Information: First Fedora 22 release. ceph-ansible provides Ansible playbooks for installing and maintaining Ceph. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1313477 - Review Request: ceph-ansible - Ansible playbooks for Ceph https://bugzilla.redhat.com/show_bug.cgi?id=1313477 -------------------------------------------------------------------------------- ================================================================================ dropbear-2016.72-1.fc22 (FEDORA-2016-40a657cee1) Lightweight SSH server and client -------------------------------------------------------------------------------- Update Information: CVE-2016-3116 dropbear: X11 forwarding input not validated properly -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316826 - CVE-2016-3116 dropbear: X11 forwarding input not validated properly [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1316826 -------------------------------------------------------------------------------- ================================================================================ gimp-dbp-1.1.9-9.fc22 (FEDORA-2016-9ccbe63eb2) Graphical batch processing for Gimp, no scripting knowledge required -------------------------------------------------------------------------------- Update Information: This update allows Gnome Software (or appstream applications) to easily discover this add-on. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1317193 - Ship AppStream metadata file https://bugzilla.redhat.com/show_bug.cgi?id=1317193 -------------------------------------------------------------------------------- ================================================================================ hamster-time-tracker-2.0-0.7.rc1.fc22 (FEDORA-2016-c8d09c09ea) The Linux time tracker -------------------------------------------------------------------------------- Update Information: - add Requires: python-gobject, rhbz#1316230 - fix crash cause of old API, rhbz#1317087 ---- fix a possible ZeroDivisionError when there are bogus database entries -------------------------------------------------------------------------------- References: [ 1 ] Bug #1317087 - [abrt] hamster-time-tracker: module.py:137:__getattr__:AttributeError: 'gi.repository.Gtk' object has no attribute 'TARGET_SAME_APP' https://bugzilla.redhat.com/show_bug.cgi?id=1317087 [ 2 ] Bug #1316383 - [abrt] hamster-time-tracker: facttree.py:260:on_mouse_down:ValueError: <hamster.lib.Fact object at 0x7f4d9806f510> is not in list https://bugzilla.redhat.com/show_bug.cgi?id=1316383 [ 3 ] Bug #1316230 - Dependency on pygobject3 missing https://bugzilla.redhat.com/show_bug.cgi?id=1316230 [ 4 ] Bug #1309613 - [abrt] hamster-time-tracker: connection.py:651:call_blocking:DBusException: org.freedesktop.DBus.Python.ZeroDivisionError: Traceback (most recent call last): https://bugzilla.redhat.com/show_bug.cgi?id=1309613 -------------------------------------------------------------------------------- ================================================================================ httrack-3.48.21-1.fc22 (FEDORA-2016-d69b612169) Website copier and offline browser -------------------------------------------------------------------------------- Update Information: Bugfix from upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #1202070 - httrack-3.48.21 is available https://bugzilla.redhat.com/show_bug.cgi?id=1202070 -------------------------------------------------------------------------------- ================================================================================ nsd-4.1.8-1.fc22 (FEDORA-2016-0adaffe8b7) Fast and lean authoritative DNS Name Server -------------------------------------------------------------------------------- Update Information: New bugfix version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316527 - nsd-4.1.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1316527 -------------------------------------------------------------------------------- ================================================================================ nut-2.7.4-1.fc22 (FEDORA-2016-ec0768fefe) Network UPS Tools -------------------------------------------------------------------------------- Update Information: Updated to upstream version 2.7.4 -------------------------------------------------------------------------------- ================================================================================ openshift-restclient-java-3.0.1-1.fc22 (FEDORA-2016-e5826e8261) OpenShift Java REST Client -------------------------------------------------------------------------------- Update Information: Initial build -------------------------------------------------------------------------------- ================================================================================ openteacher-3.2-5.fc22 (FEDORA-2016-de6dc42561) An application that helps you learn a foreign language -------------------------------------------------------------------------------- Update Information: Fix x-pauker mimetype to not hijack xml.gz -------------------------------------------------------------------------------- References: [ 1 ] Bug #1251637 - Installing OpenTeacher breaks Gnome Software https://bugzilla.redhat.com/show_bug.cgi?id=1251637 -------------------------------------------------------------------------------- ================================================================================ php-Faker-1.5.0-5.fc22 (FEDORA-2016-e57cfb874c) A PHP library that generates fake data -------------------------------------------------------------------------------- Update Information: See https://github.com/fzaninotto/Faker/releases/tag/v1.5.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1226339 - php-Faker-v1.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1226339 -------------------------------------------------------------------------------- ================================================================================ php-composer-installers-1.0.23-1.fc22 (FEDORA-2016-612220960a) A multi-framework Composer library installer -------------------------------------------------------------------------------- Update Information: Changes since 1.0.22: https://github.com/composer/installers/compare/v1.0.22...v1.0.23 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1302488 - php-composer-installers-1.0.23 is available https://bugzilla.redhat.com/show_bug.cgi?id=1302488 -------------------------------------------------------------------------------- ================================================================================ php-kdyby-events-2.4.0-1.fc22 (FEDORA-2016-84540d683f) Events for Nette Framework -------------------------------------------------------------------------------- Update Information: This extension is here to provide robust events system for Nette Framework. To use this library, you just have to add, in your project: require_once '/usr/share/php/Kdyby/Events/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277493 - Review Request: php-kdyby-events - Events for Nette Framework https://bugzilla.redhat.com/show_bug.cgi?id=1277493 -------------------------------------------------------------------------------- ================================================================================ qbittorrent-3.3.3-6.fc22 (FEDORA-2016-26179400c1) A Bittorrent Client -------------------------------------------------------------------------------- Update Information: Update rb_libtorrent version, with the following changes: * fix issue in checking outgoing interfaces (when that option is enabled) * python binding fix for boost-1.60.0 * optimize enumeration of network interfaces on windows * improve reliability of binding listen sockets * support SNI in https web seeds and trackers * fix unhandled exception in DHT when receiving a DHT packet over IPv6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1294336 - Headless qbittorrent has gui as prerequisite https://bugzilla.redhat.com/show_bug.cgi?id=1294336 [ 2 ] Bug #1301942 - rb_libtorrent-1.0.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1301942 -------------------------------------------------------------------------------- ================================================================================ quassel-0.12.3-2.fc22 (FEDORA-2016-07573f73f7) A modern distributed IRC system -------------------------------------------------------------------------------- Update Information: Merged patch from John Villalovos to add a systemd service file; this also adds a quassel user/group to run the core in. -------------------------------------------------------------------------------- References: [ 1 ] Bug #602539 - quassel-core lacks an init.d script https://bugzilla.redhat.com/show_bug.cgi?id=602539 -------------------------------------------------------------------------------- ================================================================================ rb_libtorrent-1.0.9-1.fc22 (FEDORA-2016-26179400c1) A C++ BitTorrent library aiming to be the best alternative -------------------------------------------------------------------------------- Update Information: Update rb_libtorrent version, with the following changes: * fix issue in checking outgoing interfaces (when that option is enabled) * python binding fix for boost-1.60.0 * optimize enumeration of network interfaces on windows * improve reliability of binding listen sockets * support SNI in https web seeds and trackers * fix unhandled exception in DHT when receiving a DHT packet over IPv6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1294336 - Headless qbittorrent has gui as prerequisite https://bugzilla.redhat.com/show_bug.cgi?id=1294336 [ 2 ] Bug #1301942 - rb_libtorrent-1.0.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1301942 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: http://lists.fedoraproject.org/admin/lists/test@xxxxxxxxxxxxxxxxxxxxxxx