The following Fedora 20 Security updates need testing:
Age URL
107
https://admin.fedoraproject.org/updates/FEDORA-2014-5897/nrpe-2.15-2.fc20
56
https://admin.fedoraproject.org/updates/FEDORA-2014-7551/asterisk-11.10.2...
55
https://admin.fedoraproject.org/updates/FEDORA-2014-7613/perl-Email-Addre...
37
https://admin.fedoraproject.org/updates/FEDORA-2014-8065/rubygem-activere...
17
https://admin.fedoraproject.org/updates/FEDORA-2014-8976/libndp-1.4-1.fc20
15
https://admin.fedoraproject.org/updates/FEDORA-2014-9092/libplist-1.11-2....
15
https://admin.fedoraproject.org/updates/FEDORA-2014-9052/drupal7-date-2.8...
8
https://admin.fedoraproject.org/updates/FEDORA-2014-9281/drupal6-6.33-1.fc20
8
https://admin.fedoraproject.org/updates/FEDORA-2014-9278/drupal7-7.31-1.fc20
7
https://admin.fedoraproject.org/updates/FEDORA-2014-9264/wordpress-3.9.2-...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-9361/php-htmlpurifier...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-9344/sks-1.1.5-2.fc20
1
https://admin.fedoraproject.org/updates/FEDORA-2014-9412/ppp-2.4.5-34.fc20
1
https://admin.fedoraproject.org/updates/FEDORA-2014-9380/struts-1.3.10-10...
1
https://admin.fedoraproject.org/updates/FEDORA-2014-9367/libserf-1.3.7-1....
1
https://admin.fedoraproject.org/updates/FEDORA-2014-9407/fish-2.1.0-11.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9476/cinnamon-screens...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9472/xen-4.3.2-7.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9474/pipelight-0.2.7....
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9457/pen-0.25.1-1.fc20
The following Fedora 20 Critical Path updates have yet to be approved:
Age URL
1
https://admin.fedoraproject.org/updates/FEDORA-2014-9412/ppp-2.4.5-34.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9459/satyr-0.14-2.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9492/chrony-1.30-2.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9437/gdb-7.7.1-18.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9462/poppler-data-0.4...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9443/vim-7.4.402-1.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9454/selinux-policy-3...
0
https://admin.fedoraproject.org/updates/FEDORA-2014-9490/emacs-24.3-23.fc20
0
https://admin.fedoraproject.org/updates/FEDORA-2014-8287/dhcp-4.2.7-2.fc20
The following builds have been pushed to Fedora 20 updates-testing
atril-1.8.0-6.fc20
cobbler-2.6.5-1.fc20
etckeeper-1.13-1.fc20
golang-github-docker-libcontainer-1.1.0-7.git29363e2.fc20
perl-Data-Printer-0.35-1.fc20
php-ocramius-instantiator-1.1.2-2.fc20
python-gevent-0.13.8-4.fc20
strace-4.9-1.fc20
Details about builds:
================================================================================
atril-1.8.0-6.fc20 (FEDORA-2014-9510)
Document viewer
--------------------------------------------------------------------------------
Update Information:
- disable thumbnailer
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 15 2014 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.8.0-6
- disable thumbnailer
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1084701 - SELinux is preventing /usr/bin/evince-thumbnailer from
'write' accesses on the file .mate_desktop_thumbnail.6IWV5W.
https://bugzilla.redhat.com/show_bug.cgi?id=1084701
--------------------------------------------------------------------------------
================================================================================
cobbler-2.6.5-1.fc20 (FEDORA-2014-9515)
Boot server configurator
--------------------------------------------------------------------------------
Update Information:
Bugfixes
* Add missing _validate_ks_template_path function so that kickstarts for systems can now
be changed again (#1156)
* Remove root= argument from boot when using grubby and replace-self to avoid booting the
currently running OS (#638)
Feature improvements
* Make kickstart selectable from a pulldown list in cobbler-web (#991)
* Minor adjustment to the error_page template (cobbler-web)
* Minor improvements to edit snippets/kickstarts template (cobbler-web)
* Allow for empty system status
Bugfixes
* Exit with an error if cobblerd executable can't be found (#1108 #1135)
* Fix cobbler sync bug through xmlrpc api (NoneType object has no attribute info)
* Changes (edit/add) to multiple interfaces in cobbler-web now actually work (#687)
* Don't send the Puppet environment when system status is empty (#560)
* Add strict kickstart check in the API (again for #939)
* Do not allow kickstarts in /etc/cobbler
* Fix broken gitdate, gitstamp values in version file (cobbler version)
* Prevent disappearing profiles after cobblerd restart (#1030)
Upgrade notes
This release makes the use of --parent and --distro mutually exclusive. The consequence is
that subprofiles always have the same distro as the parent profile. This has been the
intended behaviour ever since subprofiles got introduced.
Please check if you have subprofiles with different distros than the parent profile and
reconsider and adjust your configuration.
Update to 2.6.2:
- Add EL7 (RHEL/CentOS) to distro signatures
- Add CloudLinux6 support to distro signatures
- Minor update to CSS; make better use of screen (tables)
- pre_install_network_config: only use slaves with a valid MAC address
- Remove colon from VLAN regex pattern
- Improve exception logging in BootCLI (Issue 148)
- Item.set_name optimizations
- Minor improvement to LDAP configuration (Issue 217)
- Add a distro_signature for Ubuntu 14.04
- Improve performance of the "cobbler sync" operation
- Add support for a wget repo breed
- Improve support for running inside chroot() and/or containers
- Added missing docs to the RPM packages
- Fixed typos in default kickstart files
- Initial support for Nexenta 4: distro import and manual PXE booting
- Added support for ESXi 6
- Added a config setting (always_write_dhcp_entries) to always write DHCP entries
regardless of netboot setting
Update to 2.6.2:
- Add EL7 (RHEL/CentOS) to distro signatures
- Add CloudLinux6 support to distro signatures
- Minor update to CSS; make better use of screen (tables)
- pre_install_network_config: only use slaves with a valid MAC address
- Remove colon from VLAN regex pattern
- Improve exception logging in BootCLI (Issue 148)
- Item.set_name optimizations
- Minor improvement to LDAP configuration (Issue 217)
- Add a distro_signature for Ubuntu 14.04
- Improve performance of the "cobbler sync" operation
- Add support for a wget repo breed
- Improve support for running inside chroot() and/or containers
- Added missing docs to the RPM packages
- Fixed typos in default kickstart files
- Initial support for Nexenta 4: distro import and manual PXE booting
- Added support for ESXi 6
- Added a config setting (always_write_dhcp_entries) to always write DHCP entries
regardless of netboot setting
Feature improvements
* Make kickstart selectable from a pulldown list in cobbler-web (#991)
* Minor adjustment to the error_page template (cobbler-web)
* Minor improvements to edit snippets/kickstarts template (cobbler-web)
* Allow for empty system status
Bugfixes
* Exit with an error if cobblerd executable can't be found (#1108 #1135)
* Fix cobbler sync bug through xmlrpc api (NoneType object has no attribute info)
* Changes (edit/add) to multiple interfaces in cobbler-web now actually work (#687)
* Don't send the Puppet environment when system status is empty (#560)
* Add strict kickstart check in the API (again for #939)
* Do not allow kickstarts in /etc/cobbler
* Fix broken gitdate, gitstamp values in version file (cobbler version)
* Prevent disappearing profiles after cobblerd restart (#1030)
Upgrade notes
This release makes the use of --parent and --distro mutually exclusive. The consequence is
that subprofiles always have the same distro as the parent profile. This has been the
intended behaviour ever since subprofiles got introduced.
Please check if you have subprofiles with different distros than the parent profile and
reconsider and adjust your configuration.
Update to 2.6.2:
- Add EL7 (RHEL/CentOS) to distro signatures
- Add CloudLinux6 support to distro signatures
- Minor update to CSS; make better use of screen (tables)
- pre_install_network_config: only use slaves with a valid MAC address
- Remove colon from VLAN regex pattern
- Improve exception logging in BootCLI (Issue 148)
- Item.set_name optimizations
- Minor improvement to LDAP configuration (Issue 217)
- Add a distro_signature for Ubuntu 14.04
- Improve performance of the "cobbler sync" operation
- Add support for a wget repo breed
- Improve support for running inside chroot() and/or containers
- Added missing docs to the RPM packages
- Fixed typos in default kickstart files
- Initial support for Nexenta 4: distro import and manual PXE booting
- Added support for ESXi 6
- Added a config setting (always_write_dhcp_entries) to always write DHCP entries
regardless of netboot setting
Update to 2.6.2:
- Add EL7 (RHEL/CentOS) to distro signatures
- Add CloudLinux6 support to distro signatures
- Minor update to CSS; make better use of screen (tables)
- pre_install_network_config: only use slaves with a valid MAC address
- Remove colon from VLAN regex pattern
- Improve exception logging in BootCLI (Issue 148)
- Item.set_name optimizations
- Minor improvement to LDAP configuration (Issue 217)
- Add a distro_signature for Ubuntu 14.04
- Improve performance of the "cobbler sync" operation
- Add support for a wget repo breed
- Improve support for running inside chroot() and/or containers
- Added missing docs to the RPM packages
- Fixed typos in default kickstart files
- Initial support for Nexenta 4: distro import and manual PXE booting
- Added support for ESXi 6
- Added a config setting (always_write_dhcp_entries) to always write DHCP entries
regardless of netboot setting
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 15 2014 Orion Poplawski <orion(a)cora.nwra.com> - 2.6.5-1
- Update to 2.6.5
* Wed Aug 13 2014 Orion Poplawski <orion(a)cora.nwra.com> - 2.6.4-2
- Require Django >= 1.4
* Mon Aug 11 2014 Orion Poplawski <orion(a)cora.nwra.com> - 2.6.4-1
- Update to 2.6.4
--------------------------------------------------------------------------------
================================================================================
etckeeper-1.13-1.fc20 (FEDORA-2014-9505)
Store /etc in a SCM system (git, mercurial, bzr or darcs)
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable version. From the upstream changelog:
* Ignore check-mk-agent-logwatch's FHS violating /etc/check_mk/logwatch.state. Closes:
http://bugs.debian.org/753903
* Only allow [-a-z_] in etckeeper commands to avoid any possible directory traversal etc
issues.
* update-ignore, uninit: Fix parsing of ignore files containing '\'
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 15 2014 Thomas Moschny <thomas.moschny(a)gmx.de> - 1.13-1
- Update to 1.13.
--------------------------------------------------------------------------------
================================================================================
golang-github-docker-libcontainer-1.1.0-7.git29363e2.fc20 (FEDORA-2014-9508)
Configuration options for containers
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1130500
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 15 2014 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.1.0-7.git
- Resolves: rhbz#1130500
- update to upstream commit 29363e2d2d7b8f62a5f353be333758f83df540a9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1130500 - nsinit stats doesnt work
https://bugzilla.redhat.com/show_bug.cgi?id=1130500
--------------------------------------------------------------------------------
================================================================================
perl-Data-Printer-0.35-1.fc20 (FEDORA-2014-9504)
Pretty printer for Perl data structures
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1123583 - Review Request: perl-Data-Printer - Pretty printer for Perl data
structures
https://bugzilla.redhat.com/show_bug.cgi?id=1123583
--------------------------------------------------------------------------------
================================================================================
php-ocramius-instantiator-1.1.2-2.fc20 (FEDORA-2014-9506)
Instantiate objects in PHP without invoking their constructors
--------------------------------------------------------------------------------
Update Information:
From upstream changelog:
* 14: Backporting tests from doctrine/instantiator#4
* 12: HHVM does not have a PDORow class - breaks test suite
* 6: PHP 5.6 fails on tests - may require a change in php-src before fixing
* 8: PHP 5.4.30 5.5.14 5.6.0-rc* compat
* 9: Please provide LICENSE
* 10: Sending code coverage reports to scrutinizer-ci
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 16 2014 Remi Collet <remi(a)fedoraproject.org> - 1.1.2-2
- fix test suite
* Sat Aug 16 2014 Remi Collet <remi(a)fedoraproject.org> - 1.1.2-1
- update to 1.1.2
- add LICENSE
--------------------------------------------------------------------------------
================================================================================
python-gevent-0.13.8-4.fc20 (FEDORA-2014-9516)
A coroutine-based Python networking library
--------------------------------------------------------------------------------
Update Information:
Rebuild with new libevent (bug #892034)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 15 2014 Orion Poplawski <orion(a)cora.nwra.com> - 0.13.8-4
- Rebuild with new libevent (bug #892034)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #892034 - Python-gevent package built against wrong version of libevent.
https://bugzilla.redhat.com/show_bug.cgi?id=892034
--------------------------------------------------------------------------------
================================================================================
strace-4.9-1.fc20 (FEDORA-2014-9512)
Tracks and displays system calls associated with a running process
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 15 2014 Dmitry V. Levin <ldv(a)altlinux.org> - 4.9-1
- New upstream release:
+ fixed build when <sys/ptrace.h> and <linux/ptrace.h> conflict (#993384);
+ updated CLOCK_* constants (#1088455);
+ enabled ppc64le support (#1122323);
+ fixed attach to a process on ppc64le (#1129569).
* Fri Jul 25 2014 Dan Horák <dan[at]danny.cz> - 4.8-5
- update for ppc64
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
4.8-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri Dec 6 2013 Peter Robinson <pbrobinson(a)fedoraproject.org> 4.8-3
- Fix FTBFS
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
4.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------