Fedora 22 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Sat Feb 28 16:42:13 UTC 2015


The following Fedora 22 Security updates need testing:
 Age  URL
   3  https://admin.fedoraproject.org/updates/FEDORA-2015-2563/compat-libuv010-0.10.34-1.fc22
   1  https://admin.fedoraproject.org/updates/FEDORA-2015-2673/jetty-9.2.9-1.fc22
   1  https://admin.fedoraproject.org/updates/FEDORA-2015-2638/echoping-6.1-0.1.beta.r434svn.fc22
   1  https://admin.fedoraproject.org/updates/FEDORA-2015-2677/lftp-4.6.1-4.fc22
   0  https://admin.fedoraproject.org/updates/FEDORA-2015-2872/gnupg-1.4.19-1.fc22
   0  https://admin.fedoraproject.org/updates/FEDORA-2015-2765/libpng10-1.0.63-1.fc22
   0  https://admin.fedoraproject.org/updates/FEDORA-2015-2790/suricata-2.0.7-1.fc22
   0  https://admin.fedoraproject.org/updates/FEDORA-2015-2783/drupal7-entity-1.6-1.fc22
   0  https://admin.fedoraproject.org/updates/FEDORA-2015-2866/qt-4.8.6-25.fc22
   0  https://admin.fedoraproject.org/updates/FEDORA-2015-2869/qt3-3.3.8b-62.fc22


The following Fedora 22 Critical Path updates have yet to be approved:
 Age URL
   1  https://admin.fedoraproject.org/updates/FEDORA-2015-2645/spatialite-tools-4.2.0-8.fc22,sqlite-3.8.8.3-1.fc22
   0  https://admin.fedoraproject.org/updates/FEDORA-2015-2884/xorg-x11-drv-intel-2.99.917-6.20150211.fc22
   0  https://admin.fedoraproject.org/updates/FEDORA-2015-2775/librsvg2-2.40.8-1.fc22


The following builds have been pushed to Fedora 22 updates-testing

    BibTool-2.58-1.fc22
    SIMVoleon-2.0.1-20.fc22
    antimicro-2.11.1-1.fc22
    atomic-0-0.7.gita7ff4cb.fc22
    darkhttpd-1.11-1.fc22
    dbmail-3.2.3-1.fc22
    dnf-plugins-extras-0.0.5-3.fc22
    epiphany-3.15.90-3.fc22
    gdm-3.15.91-1.fc22
    ghc-Decimal-0.4.2-1.fc22
    ghc-control-monad-free-0.6.1-3.fc22
    ghc-prelude-extras-0.4-2.fc22
    ghc-tabular-0.2.2.7-2.fc22
    ghc-wizards-1.0.1-1.fc22
    gnupg-1.4.19-1.fc22
    hledger-0.23.2-1.fc22
    libticonv-1.1.4-4.fc22
    mate-themes-extras-3.14.6-2.fc22
    maven-3.2.5-2.fc22
    perl-Tie-Cache-0.21-1.fc22
    qt-4.8.6-25.fc22
    qt3-3.3.8b-62.fc22
    qt5-qtbase-5.4.1-3.fc22
    qt5-qtconnectivity-5.4.1-1.fc22
    qt5-qtdeclarative-5.4.1-1.fc22
    qt5-qtdoc-5.4.1-1.fc22
    qt5-qtgraphicaleffects-5.4.1-1.fc22
    qt5-qtimageformats-5.4.1-1.fc22
    qt5-qtlocation-5.4.1-1.fc22
    qt5-qtmultimedia-5.4.1-1.fc22
    qt5-qtquick1-5.4.1-1.fc22
    qt5-qtquickcontrols-5.4.1-1.fc22
    qt5-qtscript-5.4.1-1.fc22
    qt5-qtsensors-5.4.1-1.fc22
    qt5-qtsvg-5.4.1-1.fc22
    qt5-qttools-5.4.1-1.fc22
    qt5-qttranslations-5.4.1-1.fc22
    qt5-qtwayland-5.4.1-1.fc22
    qt5-qtwebkit-5.4.1-1.fc22
    qt5-qtx11extras-5.4.1-1.fc22
    qt5-qtxmlpatterns-5.4.1-1.fc22
    redis-2.8.19-1.fc22.1
    xmvn-2.2.1-4.fc22
    xorg-x11-drv-intel-2.99.917-6.20150211.fc22

Details about builds:


================================================================================
 BibTool-2.58-1.fc22 (FEDORA-2015-2870)
 A Tool for manipulating BibTeX data bases
--------------------------------------------------------------------------------
Update Information:

rebase to BibTool 2.58
--------------------------------------------------------------------------------
ChangeLog:

* Sat Feb 28 2015 Michael J Gruber <mjg at fedoraproject.org> - 2.58-1
- rebase to BibTool 2.58
- drop obsolete patch
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1133194 - BibTool-2.58 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1133194
--------------------------------------------------------------------------------


================================================================================
 SIMVoleon-2.0.1-20.fc22 (FEDORA-2015-2883)
 Volume rendering library for Coin
--------------------------------------------------------------------------------
Update Information:

 
 
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Ralf Corsépius <corsepiu at fedoraproject.org> - 2.0.1-20
- Add Provides: Coin3-SIMVoleon, Coin3-SIMVoleon.
* Thu Feb 26 2015 Ralf Corsépius <corsepiu at fedoraproject.org> - 2.0.1-19
- Rebuild against Coin3.
- Modernise spec.
- Remove %optflags and %__global_ld_flags from *.cfg.
--------------------------------------------------------------------------------


================================================================================
 antimicro-2.11.1-1.fc22 (FEDORA-2015-2877)
 Graphical program used to map keyboard buttons and mouse controls to a gamepad
--------------------------------------------------------------------------------
Update Information:

new upstream release v2.11.1
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Jeff Backus <jeff.backus at gmail.com> - 2.11.1-1
- new upstream release v2.11.1
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1196447 - antimicro-2.11.1 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1196447
--------------------------------------------------------------------------------


================================================================================
 atomic-0-0.7.gita7ff4cb.fc22 (FEDORA-2015-2878)
 Tool for managing ProjectAtomic systems and containers
--------------------------------------------------------------------------------
Update Information:

remove pylint for rhel/centos
runtime requirement: python-docker-py
build commit#a7ff4cb
--------------------------------------------------------------------------------


================================================================================
 darkhttpd-1.11-1.fc22 (FEDORA-2015-2874)
 A secure, lightweight, fast, single-threaded HTTP/1.1 server
--------------------------------------------------------------------------------
Update Information:

* Call setgroups() before setgid().

== Fedora package ==
* Fix erroneous %post section
* Add mimetype option for users in darkhttpd.sysconfig
* /bin/darkhttpd -> /sbin/darkhttpd
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jan 17 2015 Christopher Meng <rpm at cicku.me> - 1.11-1
- Update to 1.11
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1178330 - darkhttpd-1.11 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1178330
--------------------------------------------------------------------------------


================================================================================
 dbmail-3.2.3-1.fc22 (FEDORA-2015-2868)
 A database backed mail storage system
--------------------------------------------------------------------------------
Update Information:

v 3.2.3
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Bernard Johnson <bjohnson at symetrix.com> - 3.2.3-1
- v 3.2.3
- Introduce new systemd-rpm macros in dbmail spec file (bz #850081)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #850081 - Introduce new systemd-rpm macros in dbmail spec file
        https://bugzilla.redhat.com/show_bug.cgi?id=850081
--------------------------------------------------------------------------------


================================================================================
 dnf-plugins-extras-0.0.5-3.fc22 (FEDORA-2015-2793)
 Extras Plugins for DNF
--------------------------------------------------------------------------------
Update Information:

fixes in packaging for f23+ to use py3 version, some fixes in plugins, new plugin: debug
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Igor Gnatenko <i.gnatenko.brain at gmail.com> - 0.0.5-3
- packaging: add real package python-dnf-plugins-extras (Igor Gnatenko)
* Fri Feb 27 2015 Igor Gnatenko <i.gnatenko.brain at gmail.com> - 0.0.5-2
- packaging: handle tracer and snapper plugins (Igor Gnatenko)
* Fri Feb 27 2015 Igor Gnatenko <i.gnatenko.brain at gmail.com> - 0.0.5-1
- po: update translations (Igor Gnatenko)
- packaging: adapt to dnf 0.6.4-2 package split (Jan Silhan)
- plugins: add debug plugin (Michael Mraka)
- tracer: fix printing binary on py3 (RhBug:1192779) (Igor Gnatenko)
- tracer: define installed, erased vars (RhBug:1187763) (Igor Gnatenko)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1192779 - [abrt] python3-dnf: tracer.py:93:_print_output:TypeError: Type str doesn't support the buffer API
        https://bugzilla.redhat.com/show_bug.cgi?id=1192779
  [ 2 ] Bug #1187763 - [abrt] dnf: tracer.py:59:transaction:NameError: global name 'installed' is not defined
        https://bugzilla.redhat.com/show_bug.cgi?id=1187763
--------------------------------------------------------------------------------


================================================================================
 epiphany-3.15.90-3.fc22 (FEDORA-2015-2873)
 Web browser for GNOME
--------------------------------------------------------------------------------
Update Information:

Update to 3.15.90. Also, add several patches to fix crashes and minor issues.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Feb 26 2015 Michael Catanzaro <mcatanzaro at gnome.org> - 1:3.15.90-3
- Add patch for rbz#1196847
* Thu Feb 26 2015 Michael Catanzaro <mcatanzaro at gnome.org> - 1:3.15.90-2
- Add several patches that haven't made it upstream yet
* Wed Feb 25 2015 Richard Hughes <rhughes at redhat.com> - 1:3.15.90-1
- Update to 3.15.90
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1196847 - [abrt] webkitgtk4: __strcmp_sse2_unaligned(): WebKitWebProcess killed by SIGSEGV
        https://bugzilla.redhat.com/show_bug.cgi?id=1196847
  [ 2 ] Bug #1197284 - [abrt] epiphany: ephy_history_service_find_url_rows(): epiphany-search-provider killed by SIGTRAP
        https://bugzilla.redhat.com/show_bug.cgi?id=1197284
--------------------------------------------------------------------------------


================================================================================
 gdm-3.15.91-1.fc22 (FEDORA-2015-2882)
 The GNOME Display Manager
--------------------------------------------------------------------------------
Update Information:

Update for 3.15.91.  This update reduces flicker, addresses an autologin ahng, and makes disabling root requirements in /etc/X11/Xwrapper.conf work.
Update to 3.15.90.5. Fixes gnome-initial-setup
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Ray Strode <rstrode at redhat.com> 3.15.91-1
- Update for 3.15.91
- Reduces flicker
- Fixes hang for autologin
  Resolves: #1197224
- Fixes users that disable root running X in /etc/X11/Xwrapper.conf
- Fixes intermittent crash at login
* Tue Feb 24 2015 Ray Strode <rstrode at redhat.com> - 1:3.15.90.5-1
- Update to 3.15.90.5
- gnome-initial-setup should work again
  Resolves: #1194948
- X will work better when configured to not need root
  (still not perfect though)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1197224 - System sometimes gets stuck during gdm init when autologin is enabled (e.g. live images)
        https://bugzilla.redhat.com/show_bug.cgi?id=1197224
  [ 2 ] Bug #1194948 - gnome-initial-setup fails to start after Fedora 22 Workstation 2015-02-18 install
        https://bugzilla.redhat.com/show_bug.cgi?id=1194948
--------------------------------------------------------------------------------


================================================================================
 ghc-Decimal-0.4.2-1.fc22 (FEDORA-2015-2871)
 Decimal numbers with variable precision
--------------------------------------------------------------------------------
Update Information:

Decimal numbers with variable precision
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1195557 - Review Request: ghc-Decimal - Decimal numbers with variable precision
        https://bugzilla.redhat.com/show_bug.cgi?id=1195557
--------------------------------------------------------------------------------


================================================================================
 ghc-control-monad-free-0.6.1-3.fc22 (FEDORA-2015-2880)
 Free monads and monad transformers
--------------------------------------------------------------------------------
Update Information:

Update hledger to 0.23.2.

- new dependencies: wizards, control-monad-free, tabular, prelude-extras
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #839234 - hledger-0.23.2 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=839234
  [ 2 ] Bug #992478 - [ARM] hledger: FTBFS in rawhide
        https://bugzilla.redhat.com/show_bug.cgi?id=992478
  [ 3 ] Bug #1195551 - Review Request: ghc-prelude-extras - Haskell98 higher order versions of Prelude classes
        https://bugzilla.redhat.com/show_bug.cgi?id=1195551
  [ 4 ] Bug #1195555 - Review Request: ghc-tabular - Two-dimensional data tables with rendering functions
        https://bugzilla.redhat.com/show_bug.cgi?id=1195555
  [ 5 ] Bug #1195553 - Review Request: ghc-control-monad-free - Free monads and monad transformers
        https://bugzilla.redhat.com/show_bug.cgi?id=1195553
  [ 6 ] Bug #1195554 - Review Request: ghc-wizards - High level, generic library for interrogative user interfaces
        https://bugzilla.redhat.com/show_bug.cgi?id=1195554
--------------------------------------------------------------------------------


================================================================================
 ghc-prelude-extras-0.4-2.fc22 (FEDORA-2015-2880)
 Haskell98 higher order versions of Prelude classes
--------------------------------------------------------------------------------
Update Information:

Update hledger to 0.23.2.

- new dependencies: wizards, control-monad-free, tabular, prelude-extras
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #839234 - hledger-0.23.2 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=839234
  [ 2 ] Bug #992478 - [ARM] hledger: FTBFS in rawhide
        https://bugzilla.redhat.com/show_bug.cgi?id=992478
  [ 3 ] Bug #1195551 - Review Request: ghc-prelude-extras - Haskell98 higher order versions of Prelude classes
        https://bugzilla.redhat.com/show_bug.cgi?id=1195551
  [ 4 ] Bug #1195555 - Review Request: ghc-tabular - Two-dimensional data tables with rendering functions
        https://bugzilla.redhat.com/show_bug.cgi?id=1195555
  [ 5 ] Bug #1195553 - Review Request: ghc-control-monad-free - Free monads and monad transformers
        https://bugzilla.redhat.com/show_bug.cgi?id=1195553
  [ 6 ] Bug #1195554 - Review Request: ghc-wizards - High level, generic library for interrogative user interfaces
        https://bugzilla.redhat.com/show_bug.cgi?id=1195554
--------------------------------------------------------------------------------


================================================================================
 ghc-tabular-0.2.2.7-2.fc22 (FEDORA-2015-2880)
 Two-dimensional data tables with rendering functions
--------------------------------------------------------------------------------
Update Information:

Update hledger to 0.23.2.

- new dependencies: wizards, control-monad-free, tabular, prelude-extras
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #839234 - hledger-0.23.2 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=839234
  [ 2 ] Bug #992478 - [ARM] hledger: FTBFS in rawhide
        https://bugzilla.redhat.com/show_bug.cgi?id=992478
  [ 3 ] Bug #1195551 - Review Request: ghc-prelude-extras - Haskell98 higher order versions of Prelude classes
        https://bugzilla.redhat.com/show_bug.cgi?id=1195551
  [ 4 ] Bug #1195555 - Review Request: ghc-tabular - Two-dimensional data tables with rendering functions
        https://bugzilla.redhat.com/show_bug.cgi?id=1195555
  [ 5 ] Bug #1195553 - Review Request: ghc-control-monad-free - Free monads and monad transformers
        https://bugzilla.redhat.com/show_bug.cgi?id=1195553
  [ 6 ] Bug #1195554 - Review Request: ghc-wizards - High level, generic library for interrogative user interfaces
        https://bugzilla.redhat.com/show_bug.cgi?id=1195554
--------------------------------------------------------------------------------


================================================================================
 ghc-wizards-1.0.1-1.fc22 (FEDORA-2015-2880)
 High level, generic library for interrogative user interfaces
--------------------------------------------------------------------------------
Update Information:

Update hledger to 0.23.2.

- new dependencies: wizards, control-monad-free, tabular, prelude-extras
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #839234 - hledger-0.23.2 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=839234
  [ 2 ] Bug #992478 - [ARM] hledger: FTBFS in rawhide
        https://bugzilla.redhat.com/show_bug.cgi?id=992478
  [ 3 ] Bug #1195551 - Review Request: ghc-prelude-extras - Haskell98 higher order versions of Prelude classes
        https://bugzilla.redhat.com/show_bug.cgi?id=1195551
  [ 4 ] Bug #1195555 - Review Request: ghc-tabular - Two-dimensional data tables with rendering functions
        https://bugzilla.redhat.com/show_bug.cgi?id=1195555
  [ 5 ] Bug #1195553 - Review Request: ghc-control-monad-free - Free monads and monad transformers
        https://bugzilla.redhat.com/show_bug.cgi?id=1195553
  [ 6 ] Bug #1195554 - Review Request: ghc-wizards - High level, generic library for interrogative user interfaces
        https://bugzilla.redhat.com/show_bug.cgi?id=1195554
--------------------------------------------------------------------------------


================================================================================
 gnupg-1.4.19-1.fc22 (FEDORA-2015-2872)
 A GNU utility for secure communication and data storage
--------------------------------------------------------------------------------
Update Information:

New upstream v1.4.19
- Use ciphertext blinding for Elgamal decryption [CVE-2014-3591]
- Fixed data-dependent timing variations in modular exponentiation [related to CVE-2015-0837]
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Brian C. Lane <bcl at redhat.com> 1.4.19-1
- New upstream v1.4.19
- Use ciphertext blinding for Elgamal decryption [CVE-2014-3591]
- Fixed data-dependent timing variations in modular exponentiation [related to CVE-2015-0837]
- Drop patches now included upstream
--------------------------------------------------------------------------------


================================================================================
 hledger-0.23.2-1.fc22 (FEDORA-2015-2880)
 A double-entry accounting tool
--------------------------------------------------------------------------------
Update Information:

Update hledger to 0.23.2.

- new dependencies: wizards, control-monad-free, tabular, prelude-extras
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb  6 2015 Jens Petersen <petersen at redhat.com> - 0.23.2-1
- update to 0.23.2
- cblrpm refresh
- patch out pretty-show for now
- try re-enabling armv7
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #839234 - hledger-0.23.2 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=839234
  [ 2 ] Bug #992478 - [ARM] hledger: FTBFS in rawhide
        https://bugzilla.redhat.com/show_bug.cgi?id=992478
  [ 3 ] Bug #1195551 - Review Request: ghc-prelude-extras - Haskell98 higher order versions of Prelude classes
        https://bugzilla.redhat.com/show_bug.cgi?id=1195551
  [ 4 ] Bug #1195555 - Review Request: ghc-tabular - Two-dimensional data tables with rendering functions
        https://bugzilla.redhat.com/show_bug.cgi?id=1195555
  [ 5 ] Bug #1195553 - Review Request: ghc-control-monad-free - Free monads and monad transformers
        https://bugzilla.redhat.com/show_bug.cgi?id=1195553
  [ 6 ] Bug #1195554 - Review Request: ghc-wizards - High level, generic library for interrogative user interfaces
        https://bugzilla.redhat.com/show_bug.cgi?id=1195554
--------------------------------------------------------------------------------


================================================================================
 libticonv-1.1.4-4.fc22 (FEDORA-2015-2876)
 Texas Instruments calculators charsets library
--------------------------------------------------------------------------------
Update Information:

Fixed doc subpackage to be noarch and not contain duplicate files.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 'Ben Rosser' <rosser.bjr at gmail.com> 1.1.4-4
- Fixed doc subpackage to be noarch and not contain duplicate files.
--------------------------------------------------------------------------------


================================================================================
 mate-themes-extras-3.14.6-2.fc22 (FEDORA-2015-2867)
 Extra gtk-2/3 themes for gtk based desktops
--------------------------------------------------------------------------------
Update Information:

- re-work of submarine themes GTK3
- disable spinner animation to avoid high cpu load , all themes
- some improvements for GnomishBeige
--------------------------------------------------------------------------------
ChangeLog:

* Sat Feb 28 2015 Wolfgang Ulbrich <chat-to-me at raveit.de> - 3.14.6.2
- build with a fixed tarball
* Sat Feb 28 2015 Wolfgang Ulbrich <chat-to-me at raveit.de> - 3.14.6.1
- update to 3.14.6 release
- re-work of submarine themes GTK3
- disable spinner animation to avoid high cpu load , all themes
- some improvements for GnomishBeige
--------------------------------------------------------------------------------


================================================================================
 maven-3.2.5-2.fc22 (FEDORA-2015-2881)
 Java project management and project comprehension tool
--------------------------------------------------------------------------------
Update Information:

This update fixes rhbz#1197125
--------------------------------------------------------------------------------
ChangeLog:

* Wed Feb 18 2015 Mikolaj Izdebski <mizdebsk at redhat.com> - 3.2.5-2
- Add objectweb-asm to plexus.core
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1197125 - maven builds failing on F22 with java.lang.CNFE: org.objectweb.asm.ClassVisitor
        https://bugzilla.redhat.com/show_bug.cgi?id=1197125
--------------------------------------------------------------------------------


================================================================================
 perl-Tie-Cache-0.21-1.fc22 (FEDORA-2015-2879)
 LRU Cache in Memory
--------------------------------------------------------------------------------
Update Information:

perl-Tie-Cache: Initial release
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1196763 - Review Request: perl-Tie-Cache - LRU Cache in Memory
        https://bugzilla.redhat.com/show_bug.cgi?id=1196763
--------------------------------------------------------------------------------


================================================================================
 qt-4.8.6-25.fc22 (FEDORA-2015-2866)
 Qt toolkit
--------------------------------------------------------------------------------
Update Information:

DoS vulnerability in the BMP image handler (CVE-2015-0295)
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Rex Dieter <rdieter at fedoraproject.org> 1:4.8.6-25
- DoS vulnerability in the BMP image handler (CVE-2015-0295)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1197273 - CVE-2015-0295 QT: BMP image handler crash
        https://bugzilla.redhat.com/show_bug.cgi?id=1197273
--------------------------------------------------------------------------------


================================================================================
 qt3-3.3.8b-62.fc22 (FEDORA-2015-2869)
 The shared library for the Qt 3 GUI toolkit
--------------------------------------------------------------------------------
Update Information:

This update fixes CVE-2015-0295, a division by zero when loading some specific invalid BMP/DIB image files, which could be exploited for denial of service (application crash) attacks. The security patch is backported from Qt 4.
--------------------------------------------------------------------------------
ChangeLog:

* Sat Feb 28 2015 Kevin Kofler <Kevin at tigcc.ticalc.org> - 3.3.8b-62
- backport CVE-2015-0295 (BMP image handler DoS, #1197275) fix from Qt 4
* Fri Feb 27 2015 Rex Dieter <rdieter at fedoraproject.org> 3.3.8b-61
- rebuild (gcc5)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1197273 - CVE-2015-0295 QT: BMP image handler crash
        https://bugzilla.redhat.com/show_bug.cgi?id=1197273
--------------------------------------------------------------------------------


================================================================================
 qt5-qtbase-5.4.1-3.fc22 (FEDORA-2015-2639)
 Qt5 - QtBase components
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Rex Dieter <rdieter at fedoraproject.org> - 5.4.1-3
- pull in handful of upstream fixes, particularly...
- Fix a division by zero when processing malformed BMP files (QTBUG-44547, CVE-2015-0295)
* Wed Feb 25 2015 Rex Dieter <rdieter at fedoraproject.org> 5.4.1-2
- try bootstrap=1 (f23)
* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- update to 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qtconnectivity-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - Connectivity components
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qtdeclarative-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - QtDeclarative component
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
* Mon Feb 16 2015 Rex Dieter <rdieter at fedoraproject.org> 5.4.0-3
- rebuild (gcc)
* Sat Feb 14 2015 Ville Skyttä <ville.skytta at iki.fi> - 5.4.0-2
- Fix cmake dir ownerhips
--------------------------------------------------------------------------------


================================================================================
 qt5-qtdoc-5.4.1-1.fc22 (FEDORA-2015-2639)
 Main Qt5 Reference Documentation
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qtgraphicaleffects-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - QtGraphicalEffects component
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qtimageformats-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - QtImageFormats component
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qtlocation-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - Location component
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
* Mon Feb 16 2015 Rex Dieter <rdieter at fedoraproject.org> 5.4.0-3
- rebuild (gcc5)
--------------------------------------------------------------------------------


================================================================================
 qt5-qtmultimedia-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - Multimedia support
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qtquick1-5.4.1-1.fc22 (FEDORA-2015-2639)
 A declarative language for describing user interfaces in Qt5
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qtquickcontrols-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - module with set of QtQuick controls
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qtscript-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - QtScript component
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
* Mon Feb 16 2015 Rex Dieter <rdieter at fedoraproject.org> 5.4.0-2
- rebuild (gcc5)
--------------------------------------------------------------------------------


================================================================================
 qt5-qtsensors-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - Sensors component
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
* Mon Feb 16 2015 Rex Dieter <rdieter at fedoraproject.org> 5.4.0-3
- rebuild (gcc5)
--------------------------------------------------------------------------------


================================================================================
 qt5-qtsvg-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - Support for rendering and displaying SVG
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qttools-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - QtTool components
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
* Thu Feb 19 2015 Rex Dieter <rdieter at fedoraproject.org> - 5.4.0-2
- rebuild (gcc5)
--------------------------------------------------------------------------------


================================================================================
 qt5-qttranslations-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - QtTranslations module
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qtwayland-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - Wayland platform support and QtCompositor module
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Rex Dieter <rdieter at fedoraproject.org> 5.4.1-1
- 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qtwebkit-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - QtWebKit components
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qtx11extras-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - X11 support library
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
--------------------------------------------------------------------------------


================================================================================
 qt5-qtxmlpatterns-5.4.1-1.fc22 (FEDORA-2015-2639)
 Qt5 - QtXmlPatterns component
--------------------------------------------------------------------------------
Update Information:

Qt 5.4.1 release. http://blog.qt.io/blog/2015/02/24/qt-5-4-1-released/
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 24 2015 Jan Grulich <jgrulich at redhat.com> 5.4.1-1
- 5.4.1
* Mon Feb 16 2015 Rex Dieter <rdieter at fedoraproject.org> 5.4.0-2
- rebuild (gcc5)
--------------------------------------------------------------------------------


================================================================================
 redis-2.8.19-1.fc22.1 (FEDORA-2015-2875)
 A persistent key-value database
--------------------------------------------------------------------------------
Update Information:

Upstream 2.8.19 (RHBZ #1175232)
Upstream 2.8.19 (RHBZ #1175232)
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Haïkel Guémar <hguemar at fedoraproject.org> - 2.8.19-1
- Upstream 2.8.19 (RHBZ #1175232)
- Fix permissions for tmpfiles (RHBZ #1182913)
- Add limits config files
- Spec cleanups
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1175232 - redis-2.8.19 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1175232
  [ 2 ] Bug #1182913 - Permission in the rpm do not correspond to tmpfiles one
        https://bugzilla.redhat.com/show_bug.cgi?id=1182913
--------------------------------------------------------------------------------


================================================================================
 xmvn-2.2.1-4.fc22 (FEDORA-2015-2881)
 Local Extensions for Apache Maven
--------------------------------------------------------------------------------
Update Information:

This update fixes rhbz#1197125
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb 27 2015 Mikolaj Izdebski <mizdebsk at redhat.com> - 2.2.1-4
- Remove temporary explicit ASM symlinks
* Fri Feb 27 2015 Mikolaj Izdebski <mizdebsk at redhat.com> - 2.2.1-3
- Temporarly add explicit symlinks to ASM
* Fri Feb 27 2015 Michal Srb <msrb at redhat.com> - 2.2.1-2
- Rebuild for rhbz#1197125
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1197125 - maven builds failing on F22 with java.lang.CNFE: org.objectweb.asm.ClassVisitor
        https://bugzilla.redhat.com/show_bug.cgi?id=1197125
--------------------------------------------------------------------------------


================================================================================
 xorg-x11-drv-intel-2.99.917-6.20150211.fc22 (FEDORA-2015-2884)
 Xorg X11 Intel video driver
--------------------------------------------------------------------------------
Update Information:

- Add missing BuildRequires so that intel-virtual-output gets build
--------------------------------------------------------------------------------
ChangeLog:

* Thu Feb 26 2015 Hans de Goede <hdegoede at redhat.com> - 2.99.917-6
- Really really build intel-virtual-output (rhbz#1195962)
* Thu Feb 26 2015 Hans de Goede <hdegoede at redhat.com> - 2.99.917-5
- Add more missing BuildRequires so that intel-virtual-output really gets
  build (rhbz#1195962)
* Thu Feb 26 2015 Hans de Goede <hdegoede at redhat.com> - 2.99.917-4
- Add missing BuildRequires libXext-devel so that intel-virtual-output gets
  build (rhbz#1195962)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1195962 - Missing tool intel-virtual-output
        https://bugzilla.redhat.com/show_bug.cgi?id=1195962
--------------------------------------------------------------------------------



More information about the test mailing list