The following Fedora 22 Security updates need testing: Age URL 365 https://bodhi.fedoraproject.org/updates/FEDORA-2015-5878 echoping-6.1-0.beta.r434svn.1.fc22 314 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9185 ceph-deploy-1.5.25-1.fc22 246 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12781 python-kdcproxy-0.3.2-1.fc22 201 https://bodhi.fedoraproject.org/updates/FEDORA-2015-16239 nagios-4.0.8-1.fc22 189 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2d37e7dacf openstack-swift-2.2.0-6.fc22 158 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9039c25f1d miniupnpc-1.9-6.fc22 141 https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4 libpng-1.6.16-4.fc22 141 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6 libpng-1.6.16-5.fc22 122 https://bodhi.fedoraproject.org/updates/FEDORA-2015-3a5cebb105 ImageMagick-6.9.2.7-1.fc22 108 https://bodhi.fedoraproject.org/updates/FEDORA-2015-b9e4c97ff1 sos-3.2-2.fc22 82 https://bodhi.fedoraproject.org/updates/FEDORA-2015-f683150aa0 thttpd-2.25b-37.fc22 70 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0 xulrunner-44.0-1.fc22 58 https://bodhi.fedoraproject.org/updates/FEDORA-2016-560802e52b xdelta-3.0.7-7.fc22 47 https://bodhi.fedoraproject.org/updates/FEDORA-2016-24d134e494 mingw-nsis-2.50-1.fc22 38 https://bodhi.fedoraproject.org/updates/FEDORA-2016-338a7e9925 graphite2-1.3.6-1.fc22 34 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3cbe9ad765 python-pygments-2.1.3-1.fc22 30 https://bodhi.fedoraproject.org/updates/FEDORA-2016-7b40eb9e29 libecap-1.0.0-1.fc22 squid-3.5.10-1.fc22 29 https://bodhi.fedoraproject.org/updates/FEDORA-2016-5f44e89fe0 python-tgcaptcha2-0.3.1-1.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2016-250042b8a6 xstream-1.4.9-1.fc22 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-6ad4474058 python-pillow-2.8.2-5.fc22 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-7eb5caa94d parallel-20160222-1.fc22 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d4b68e412 imlib2-1.4.8-1.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d19ed2f80d squid-3.5.10-2.fc22 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-880b91c090 xerces-c-3.1.3-1.fc22 The following Fedora 22 Critical Path updates have yet to be approved: Age URL 240 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13210 yum-3.4.3-508.fc22 158 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2123de044f libgphoto2-2.5.8-1.fc22 141 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6c07ab1fa6 libpng-1.6.16-5.fc22 141 https://bodhi.fedoraproject.org/updates/FEDORA-2015-7dfbe09bb4 libpng-1.6.16-4.fc22 70 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4c57c232c0 xulrunner-44.0-1.fc22 64 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3fce30d64 mobile-broadband-provider-info-1.20151214-1.fc22 47 https://bodhi.fedoraproject.org/updates/FEDORA-2016-ce419c9cab selinux-policy-3.13.1-128.28.fc22 38 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3b03252507 rpm-4.12.0.1-16.fc22 36 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4d5434d82f parted-3.2-16.fc22 27 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4072c51267 dracut-041-15.fc22 23 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d4e6e32c1c upower-0.99.3-2.fc22 17 https://bodhi.fedoraproject.org/updates/FEDORA-2016-fe22f37fba hwdata-0.287-1.fc22 17 https://bodhi.fedoraproject.org/updates/FEDORA-2016-33be675c57 firefox-45.0.1-2.fc22 12 https://bodhi.fedoraproject.org/updates/FEDORA-2016-18d1833265 thunderbird-38.7.1-1.fc22 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-881765e99c systemtap-3.0-2.fc22 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-f5078f60f9 ntfs-3g-2016.2.22-1.fc22 testdisk-7.0-7.fc22 8 https://bodhi.fedoraproject.org/updates/FEDORA-2016-dedd49a5b7 lorax-22.14-1.fc22 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d4b68e412 imlib2-1.4.8-1.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-50cc0dbbde wavpack-4.75.2-1.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-060be75c14 webkitgtk3-2.4.10-2.fc22 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-6d6f111230 elfutils-0.166-1.fc22 The following builds have been pushed to Fedora 22 updates-testing 4Pane-4.0-1.fc22 autossh-1.4e-3.fc22 jhdf5-2.11.0-7.fc22 openbabel-2.3.2-12.fc22 php-league-plates-3.1.1-1.fc22 python-jenkinsapi-0.2.29-1.fc22 rats-2.4-5.fc22 recoverjpeg-2.6-1.fc22 rpmspectool-1.99.5-1.fc22 uget-2.0.6-1.fc22 webkitgtk4-2.12.0-2.fc22 xerces-c-3.1.3-1.fc22 xpra-0.16.3-1.fc22 Details about builds: ================================================================================ 4Pane-4.0-1.fc22 (FEDORA-2016-6402d0cbd6) Multi-pane, detailed-list file manager -------------------------------------------------------------------------------- Update Information: New version 4.0 is released. -------------------------------------------------------------------------------- ================================================================================ autossh-1.4e-3.fc22 (FEDORA-2016-d5cb71f96e) Utility to autorestart SSH tunnels -------------------------------------------------------------------------------- Update Information: Add systemd service -------------------------------------------------------------------------------- References: [ 1 ] Bug #1320539 - Add systemd service https://bugzilla.redhat.com/show_bug.cgi?id=1320539 -------------------------------------------------------------------------------- ================================================================================ jhdf5-2.11.0-7.fc22 (FEDORA-2016-e45f4c8fda) Java HDF5 Package -------------------------------------------------------------------------------- Update Information: No functional change, just adds maven depmaps so dependent packages using maven are easier to build. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1323010 - add maven depmap https://bugzilla.redhat.com/show_bug.cgi?id=1323010 -------------------------------------------------------------------------------- ================================================================================ openbabel-2.3.2-12.fc22 (FEDORA-2016-9e7cb1c296) Chemistry software file format converter -------------------------------------------------------------------------------- Update Information: Fixes compilation of user code against openbabel-devel provided headers with gcc 5.x. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1318062 - fedora 22 openbabel-devel rpm package uses tr1::shared_ptr https://bugzilla.redhat.com/show_bug.cgi?id=1318062 -------------------------------------------------------------------------------- ================================================================================ php-league-plates-3.1.1-1.fc22 (FEDORA-2016-4da62a78c2) Native PHP template system -------------------------------------------------------------------------------- Update Information: Plates is a native PHP template system that's fast, easy to use and easy to extend. It's inspired by the excellent Twig template engine and strives to bring modern template language functionality to native PHP templates. Plates is designed for developers who prefer to use native PHP templates over compiled template languages, such as Twig or Smarty. Autoloader: /usr/share/php/League/Plates/autoload.php -------------------------------------------------------------------------------- References: [ 1 ] Bug #1324861 - Review Request: php-league-plates - Native PHP template system https://bugzilla.redhat.com/show_bug.cgi?id=1324861 -------------------------------------------------------------------------------- ================================================================================ python-jenkinsapi-0.2.29-1.fc22 (FEDORA-2016-33beac4231) A Python API for accessing resources on a Jenkins(CI) server -------------------------------------------------------------------------------- Update Information: Update to 0.2.29, update spec to new packaging guidelines and introduce a Python 3 package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1188097 - python-jenkinsapi-0.2.26 is available https://bugzilla.redhat.com/show_bug.cgi?id=1188097 -------------------------------------------------------------------------------- ================================================================================ rats-2.4-5.fc22 (FEDORA-2016-70bafcbd48) Rough Auditing Tool for Security -------------------------------------------------------------------------------- Update Information: Fix bug -------------------------------------------------------------------------------- References: [ 1 ] Bug #1129580 - 0002-Fix-engine-output-and-php-extension.patch introduces new bug https://bugzilla.redhat.com/show_bug.cgi?id=1129580 -------------------------------------------------------------------------------- ================================================================================ recoverjpeg-2.6-1.fc22 (FEDORA-2016-efe9ca7281) Recover JPEG pictures and MOV movies from damaged devices -------------------------------------------------------------------------------- Update Information: Update to 2.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1270799 - recoverjpeg-2.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1270799 -------------------------------------------------------------------------------- ================================================================================ rpmspectool-1.99.5-1.fc22 (FEDORA-2016-559f1f9371) Utility for handling RPM spec files -------------------------------------------------------------------------------- Update Information: Previous versions wrote downloaded files with restrictive permissions, i.e. other users couldn't read them. This update changes that to applying a user's umask to the downloaded files. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1323692 - rpmspectool does not respect umask https://bugzilla.redhat.com/show_bug.cgi?id=1323692 -------------------------------------------------------------------------------- ================================================================================ uget-2.0.6-1.fc22 (FEDORA-2016-c026776ab2) Download manager using GTK+ and libcurl -------------------------------------------------------------------------------- Update Information: New version 2.0.6 is released. -------------------------------------------------------------------------------- ================================================================================ webkitgtk4-2.12.0-2.fc22 (FEDORA-2016-104977b1a1) GTK+ Web content engine library -------------------------------------------------------------------------------- Update Information: Update to 2.12.0: * Enable FTL by default in JavaScriptCore for x86_64. * Network process is now used unconditionally. The shared secondary process model is now the same as using the multiple process model and setting a process limit of 1. * Switch to use overlay scrollbars like all other GTK+ widgets and ensure the behavior is consistent with GTK+ too. * Support for windowless NPAPI plugins with no UI in non X11 platforms. * Enable GSS-Negotiate support when available in libsoup. * Improved general performance by better handling glib main loop sources. * New API to save and restore a WebView session. -------------------------------------------------------------------------------- ================================================================================ xerces-c-3.1.3-1.fc22 (FEDORA-2016-880b91c090) Validating XML Parser -------------------------------------------------------------------------------- Update Information: Update to xerces-c 3.1.3, fixing CVE-2016-0729 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1312231 - CVE-2016-0729 xerces-c: parser crashes on malformed input https://bugzilla.redhat.com/show_bug.cgi?id=1312231 -------------------------------------------------------------------------------- ================================================================================ xpra-0.16.3-1.fc22 (FEDORA-2016-46f14cc24c) Remote display server for applications and desktops -------------------------------------------------------------------------------- Update Information: This minor update contains a large number of fixes, including important performance issues and application compatibility fixes. Updating is recommended. Release notes: * fix xpra info major performance issues * fix restore windows when OSX dock is clicked * fix clipboard timeouts and high CPU usage * fix out- of-date bug report data * fix startup failures on some invalid MS Windows configurations * fix HTML5 client with Internet Exporer and zoom * fix visual corruption with transparent windows * fix pulseaudio starting before we request it * fix window decorations flag forwarding * fix undecorated window positioning adjustments * fix microphone forwarding, stop on disconnection or exit * fix sound-source options parsing errors * fix sound command line tools * fix sound error in duration message parsing * fix pulseaudio microphone input device selection * fix gstreamer automatic version selection errors * fix webp package detection * fix Vfb not getting killed on server startup error * fix handling of authentication setup errors * fix codec test code (some encodings were skipped) * fix NVENC handling of runtime speed and quality changes * fix video region detection off-by-one * fix error in unlikely error handler * fix deadlock on exit with HTML server * fix socket timeout code - use blocking sockets * fix for Java applications enabled by default * fix "AltGr" key event forwarding for MS Windows clients * fix encoding errors with zero dimension windows * fix example Xdummy command line in default config file * fix Xorg command line path expansion * fix honour XPRA_SCRIPT_BIN_DIR environment override * fix some automatic quality heuristics calculations * fix logging large packet warning * fix MS Windows shadow server key mapping * fix authentication errors with Python 2.6 and older * fix dbus menu forwarding component loading * more user friendly missing Xvfb error message * hide unusable tray menu entries * make it possible to tune or disable optimistic sending * make it possible to disable force-quit code * add shortcut for showing tray menu * add some new common resolutions to xorg.conf -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: http://lists.fedoraproject.org/admin/lists/test@xxxxxxxxxxxxxxxxxxxxxxx