F-21 Branched report: 20141204 changes

Thu Dec 4 11:29:28 UTC 2014

Compose started at Thu Dec  4 07:15:03 UTC 2014
Broken deps for armhfp
----------------------------------------------------------
[avro]
	avro-mapred-1.7.5-9.fc21.noarch requires hadoop-mapreduce
	avro-mapred-1.7.5-9.fc21.noarch requires hadoop-client
[openstack-nova]
	openstack-nova-compute-2014.1.2-1.fc21.noarch requires libvirt-daemon-xen
[ostree]
	ostree-grub2-2014.11-1.fc21.armv7hl requires grub2
[spring-maps-default]
	spring-maps-default-0.1-12.fc21.noarch requires spring
[syntastic]
	syntastic-d-3.5.0-1.fc21.noarch requires ldc

Updated Packages:

docker-io-1.3.2-2.fc21
----------------------
* Tue Nov 25 2014 Lokesh Mandvekar <lsm5 at fedoraproject.org> - 1.3.2-2
- install sources skipped prior

* Tue Nov 25 2014 Lokesh Mandvekar <lsm5 at fedoraproject.org> - 1.3.2-1
- Resolves: rhbz#1167642 - Update to upstream v1.3.2
- Resolves: rhbz#1167505, rhbz#1167507 - CVE-2014-6407
- Resolves: rhbz#1167506 - CVE-2014-6408
- use vendor/ dir for golang deps for this NVR (fix deps soon after)

* Wed Nov 19 2014 Lokesh Mandvekar <lsm5 at fedoraproject.org> - 1.3.1-3
- Resolves: rhbz#1165615

* Fri Oct 31 2014 Lokesh Mandvekar <lsm5 at fedoraproject.org> - 1.3.1-2
- Remove pandoc from build reqs

* Fri Oct 31 2014 Lokesh Mandvekar <lsm5 at fedoraproject.org> - 1.3.1-1
- update to v1.3.1

* Mon Oct 20 2014 Lokesh Mandvekar <lsm5 at fedoraproject.org> - 1.3.0-1
- Resolves: rhbz#1153936 - update to v1.3.0
- don't install zsh files
- iptables=false => ip-masq=false

Size change: -1075088 bytes

fedora-productimg-cloud-21-8.fc21
---------------------------------
* Mon Dec 01 2014 Stephen Gallagher <sgallagh at redhat.com> 21-8
- Manually merge the product CSS with the anaconda CSS
  This is a hacky workaround and needs to be fixed immediately after we
  release F21.

* Wed Nov 26 2014 Matthew Miller <mattdm at fedoraproject.org> 21-7
- correctly pregenerate product.img cpio archive

Size change: 2305 bytes

fedora-productimg-server-21-8.fc21
----------------------------------
* Mon Dec 01 2014 Stephen Gallagher <sgallagh at redhat.com> 21-8
- Manually merge the product CSS with the anaconda CSS
  This is a hacky workaround and needs to be fixed immediately after we
  release F21.

* Wed Nov 26 2014 Matthew Miller <mattdm at fedoraproject.org> 21-7
- correctly pregenerate product.img cpio archive

Size change: 2307 bytes

fedora-productimg-workstation-21-8.fc21
---------------------------------------
* Mon Dec 01 2014 Stephen Gallagher <sgallagh at redhat.com> 21-8
- Manually merge the product CSS with the anaconda CSS
  This is a hacky workaround and needs to be fixed immediately after we
  release F21.

* Wed Nov 26 2014 Matthew Miller <mattdm at fedoraproject.org> 21-7
- correctly pregenerate product.img cpio archive

Size change: 2285 bytes

kde-runtime-4.14.3-2.fc21
-------------------------
* Mon Nov 17 2014 Than Ngo <than at redhat.com> - 4.14.3-2
- fix bz#1164609, CVE-2014-8600, Insufficient Input Validation By IO Slaves

Size change: 798 bytes

kwebkitpart-1.3.4-5.fc21
------------------------
* Fri Nov 14 2014 Rex Dieter <rdieter at fedoraproject.org> 1.3.4-5
- CVE-2014-8600 Insufficient Input Validation (#1164293)

* Sun Aug 17 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.3.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

Size change: 1542 bytes

octomap-1.6.8-1.fc21
--------------------
* Mon Oct 06 2014 Rich Mattes <richmattes at gmail.com> - 1.6.8-1
- Update to release 1.6.8

* Wed Sep 03 2014 Rich Mattes <richmattes at gmail.com> - 1.6.7-1
- Update to release 1.6.7

Size change: 308 bytes

selinux-policy-3.13.1-99.fc21
-----------------------------
* Thu Nov 20 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-99
- Allow NetworkManager stream connect on openvpn. BZ(1165110)

* Wed Nov 19 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-98
- Allow networkmanager manage also openvpn sock pid files.

* Wed Nov 19 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-97
- Allow login programs to write to processes at all levels.
- Fix seutil_dontaudit_access_check_semanage_read_lock()
- Fix audit_access interfaces to make it sense in seutils.if.
- Label sock file charon.vici as ipsec_var_run_t. BZ(1165065)
- Add seutil_access_check_module_store() interfaces.
- Add seutil_access_check_semanage_read_lock().
- Add seutil_access_check_setfiles() interface.
- Add additional interfaces for access checks on load_policy
- Allow sendmail to create dead.letter. BZ(1165443)
- Add support for /usr/bin/start-puppet-ca helper script.
- Allow rpm scripts to enable/disable transient systemd units.
- Allow openvpn to create uuid connections in /var/run/NetworkManager with NM labeling.
- Make kpropdas nsswitch domain
- Make all glance domain as nsswitch domains.
- Allow selinux_child running as sssd access check on /etc/selinux/targeted/modules/active.
- Allow access checks on setfiles/load_policy/semanage_lock for selinux_child running as sssd_t.

* Fri Nov 14 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-96
- Allow bumblebee to use nsswitch. BZ(1155339)
- Allow openvpn to stream connect to networkmanager. BZ(1164182)
- Allow smbd to create HOMEDIRS is pam_oddjob_mkhomedir in MLS.
- Allow cpuplug rw virtual memory sysctl. BZ (1077831)
- Docker needs to write to sysfs, needs back port to F20,F21, RHEL7

* Mon Nov 10 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-95
- Allow ifconfig to read/write inhertited kdumpctl pipes.
- Label /etc/strongimcv as ipsec_conf_file_t.
- Add dontaudit interfaces for audit_access in seutil.
- Fix seutil_dontaudit_access_check_load_policy()
- Dontaudit access check on setfiles/load_policy for sssd_t.
- Add kdump_rw_inherited_kdumpctl_tmp_pipes()
- Make linuxptp services as unconfined.
- Added new policy linuxptp.
- Label keystone cgi files as keystone_cgi_script_exec_t. BZ(1138424)
- Dontaudit policykit_auth_t to access to user home dirs. BZ (1157256)

* Fri Nov 07 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-94
- Added interface userdom_dontaudit_manage_user_home_dirs
- New interface dev_rw_uhid_dev
- Fix unconfined_server_dbus_chat() interface.
- Allow login domains to create kernel keyring with different level.
- Dontaudit policykit_auth_t to write to user home dirs. BZ (1157256)
- Make tuned as unconfined domain.
- Allow bluetooth read/write uhid devices. BZ (1161169)
- Add fixes for hypervkvp daemon
- make zoneminder as dbus client by default.
- Allow guest to connect to libvirt using unix_stream_socket.
- Allow all bus client domains to dbus chat with unconfined_service_t.
- Allow inetd service without own policy to run in inetd_child_t which is unconfined domain.
- Make opensm as nsswitch domain to make it working with sssd.
- Allow brctl to read meminfo.
- Allow winbind-helper to execute ntlm_auth in the caller domain.
- Make plymouthd as nsswitch domain to make it working with sssd.
- Make drbd as nsswitch domain to make it working with sssd
- Make conman as nsswitch domain to make ipmitool.exp runing as conman_t working.
- Add support for /var/lib/sntp directory.

* Mon Nov 03 2014 Lukas Vrabec <lvrabec at redhat.com> 3.13.1-93
- Add 15672 as amqp_port_t
- Add support for /dev/nvme controllerdevice nodes created by nvme driver.
- Label also logrotate.status.tmp as logrotate_var_lib_t. BZ(1158835)
- Allow dovecot to create user's home directory when they log into IMAP.
- Allow nslcd to read /dev/urandom.
- Allow snapperd to dbus chat with system cron jobs.
- Add suppor for keepalived unconfined scripts and allow keepalived to read all domain state and kill capability.
- Fix rhcs_signull_haproxy() interface.
- Allow nslcd to execute netstat.
- Allow abrt to read software raid state. BZ (1157770)

Size change: 7712 bytes

systemd-216-12.fc21
-------------------
* Thu Nov 27 2014 Jan Synáček <jsynacek at redhat.com> - 216-12
- unicode_start is not started on boot (#1150384)

Size change: 929 bytes

Summary:
Added Packages: 0
Removed Packages: 0
Modified Packages: 9
Size of added packages: 0 (0 )
Size change of modified packages: -1056902 (-1.0 M)
Size of removed packages: 0 (0 )
Size change: -1056902 (-1.0 M)
Compose finished at Thu Dec  4 11:26:25 UTC 2014