Fedora 20 updates-testing report
updates at fedoraproject.org
updates at fedoraproject.org
Tue Apr 21 19:35:19 UTC 2015
The following Fedora 20 Security updates need testing:
Age URL
141 https://admin.fedoraproject.org/updates/FEDORA-2014-15988/fail2ban-0.9.1-1.fc20
129 https://admin.fedoraproject.org/updates/FEDORA-2014-16845/resteasy-3.0.6-3.fc20
120 https://admin.fedoraproject.org/updates/FEDORA-2014-17089/aeskulap-0.2.2-0.20beta1.fc20,orthanc-0.8.5-2.fc20,dcmtk-3.6.1-1.fc20
76 https://admin.fedoraproject.org/updates/FEDORA-2015-1648/lcms-1.19-13.fc20
75 https://admin.fedoraproject.org/updates/FEDORA-2015-1718/389-admin-1.1.38-1.fc20
73 https://admin.fedoraproject.org/updates/FEDORA-2015-1790/fcgi-2.4.0-26.fc20
58 https://admin.fedoraproject.org/updates/FEDORA-2015-0951/xdg-utils-1.1.0-0.38.rc3.fc20
43 https://admin.fedoraproject.org/updates/FEDORA-2015-3417/389-ds-base-1.3.2.27-1.fc20
39 https://admin.fedoraproject.org/updates/FEDORA-2015-3738/ImageMagick-6.8.6.3-6.fc20
25 https://admin.fedoraproject.org/updates/FEDORA-2015-4672/quassel-0.11.0-2.fc20
19 https://admin.fedoraproject.org/updates/FEDORA-2015-5398/thunderbird-31.6.0-1.fc20
12 https://admin.fedoraproject.org/updates/FEDORA-2015-5809/chrony-1.31.1-1.fc20
12 https://admin.fedoraproject.org/updates/FEDORA-2015-5864/zarafa-7.1.12-1.fc20
11 https://admin.fedoraproject.org/updates/FEDORA-2015-5910/netcf-0.2.8-1.fc20
10 https://admin.fedoraproject.org/updates/FEDORA-2015-5972/yourls-1.7-3.20150410gitabc7d6c.fc20
10 https://admin.fedoraproject.org/updates/FEDORA-2015-5970/asterisk-11.17.1-1.fc20
10 https://admin.fedoraproject.org/updates/FEDORA-2015-5978/krb5-1.11.5-20.fc20
8 https://admin.fedoraproject.org/updates/FEDORA-2015-6084/icu-50.1.2-12.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2015-6279/cherokee-1.2.103-6.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2015-6280/wesnoth-1.12.2-1.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2015-6315/qt5-qtbase-5.4.1-9.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2015-6401/proftpd-1.3.4e-2.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2015-6339/realmd-0.14.6-6.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2015-6349/spatialite-tools-4.1.1-12.fc20,sqlite-3.8.9-1.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2015-6357/java-1.8.0-openjdk-1.8.0.45-31.b13.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2015-6399/php-5.5.24-1.fc20
0 https://admin.fedoraproject.org/updates/FEDORA-2015-6428/prosody-0.9.8-1.fc20
0 https://admin.fedoraproject.org/updates/FEDORA-2015-6417/dpkg-1.16.16-1.fc20
0 https://admin.fedoraproject.org/updates/FEDORA-2015-6505/mksh-50f-1.fc20
0 https://admin.fedoraproject.org/updates/FEDORA-2015-6517/ax25-tools-0.0.10-0.12.rc2.fc20
The following Fedora 20 Critical Path updates have yet to be approved:
Age URL
58 https://admin.fedoraproject.org/updates/FEDORA-2015-0951/xdg-utils-1.1.0-0.38.rc3.fc20
12 https://admin.fedoraproject.org/updates/FEDORA-2015-5859/testdisk-6.14-4.fc20,ntfs-3g-2015.3.14-1.fc20
12 https://admin.fedoraproject.org/updates/FEDORA-2015-5809/chrony-1.31.1-1.fc20
10 https://admin.fedoraproject.org/updates/FEDORA-2015-5978/krb5-1.11.5-20.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2015-6317/python-slip-0.6.1-1.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2015-6333/linux-firmware-20150410-47.gitec89525b.fc20
3 https://admin.fedoraproject.org/updates/FEDORA-2015-6339/realmd-0.14.6-6.fc20
0 https://admin.fedoraproject.org/updates/FEDORA-2015-6418/lua-socket-3.0-0.7rc1.fc20
The following builds have been pushed to Fedora 20 updates-testing
Thunar-1.6.7-1.fc20
ax25-tools-0.0.10-0.12.rc2.fc20
dpkg-1.16.16-1.fc20
fedup-0.9.2-1.fc20
libmediainfo-0.7.73-1.fc20
libzen-0.4.31-1.fc20
lua-expat-1.3.0-4.fc20
lua-filesystem-1.6.2-7.fc20
lua-sec-0.5-3.fc20
lua-socket-3.0-0.7rc1.fc20
mediainfo-0.7.73-1.fc20
mksh-50f-1.fc20
phpMyAdmin-4.4.3-1.fc20
prosody-0.9.8-1.fc20
python-mailer-0.8.0-1.fc20
python-mistune-0.5.1-1.fc20
quodlibet-3.4.0-2.fc20
rubygem-domain_name-0.5.24-1.fc20
rubygem-unf_ext-0.0.7.1-1.fc20
salt-2014.7.5-1.fc20
sflphone-1.4.1-7.fc20
spacefm-1.0.0-1.fc20
texworks-0.4.6-2.fc20
wine-1.7.41-1.fc20
xscreensaver-5.32-12.fc20
zsh-5.0.7-7.fc20
Details about builds:
================================================================================
Thunar-1.6.7-1.fc20 (FEDORA-2015-6446)
Thunar File Manager
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.7. Fixes bug #1183644
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2015 Kevin Fenzi <kevin at scrye.com> 1.6.7-1
- Update to 1.6.7. Fixes bug #1183644
* Thu Mar 26 2015 Richard Hughes <rhughes at redhat.com> - 1.6.6-2
- Add an AppData file for the software center
* Sat Feb 28 2015 Mukundan Ragavan <nonamedotc at fedoraproject.org> - 1.6.6-1
- Update to 1.6.6
* Sat Feb 21 2015 Till Maas <opensource at till.name> - 1.6.5-2
- Rebuilt for Fedora 23 Change
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
* Thu Feb 19 2015 Mukundan Ragavan <nonamedotc at fedoraproject.org> - 1.6.5-1
- Update to 1.6.5
- Moved COPYING file to license directory
- Thunar-tpa desktop file moved to ..xfce4/panel/plugins/..
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1183644 - [abrt] Thunar: _dbus_watch_invalidate(): thunar killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1183644
--------------------------------------------------------------------------------
================================================================================
ax25-tools-0.0.10-0.12.rc2.fc20 (FEDORA-2015-6517)
Tools used to configure an ax.25 enabled computer
--------------------------------------------------------------------------------
Update Information:
This is an update fixing crash when processing ROSE packets.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2015 Jaroslav Škarvada <jskarvad at redhat.com> - 0.0.10-0.12.rc2
- Fixed crash when processing ROSE packets (by rose-fix patch)
Resolves: rhbz#1210008
--------------------------------------------------------------------------------
================================================================================
dpkg-1.16.16-1.fc20 (FEDORA-2015-6417)
Package maintenance system for Debian Linux
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2014-8625 and Security fix for CVE-2015-0840
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 19 2015 Sérgio Basto <sergio at serjux.com> - 1.16.16-1
- Security update to 1.16.16
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.16.15-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1210748 - CVE-2015-0840 dpkg: source package integrity verification bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1210748
[ 2 ] Bug #1162166 - CVE-2014-8625 dpkg: format string vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1162166
--------------------------------------------------------------------------------
================================================================================
fedup-0.9.2-1.fc20 (FEDORA-2015-6467)
The Fedora Upgrade tool
--------------------------------------------------------------------------------
Update Information:
* Fixes problems unlocking encrypted disks due to wrong keyboard layout
* Improves feedback about possible upgrade problems
* Prompts user to import GPG key if we can't auto-trust it
* Other minor bugs squashed
* Removed `--reboot` (use `fedup [args] && reboot` instead)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 16 2015 Will Woods <wwoods at redhat.com> 0.9.2-1
- Improved feedback about possible upgrade problems
- Prompt user to import key if we can't auto-trust it
- Handle early_cpio initrds so we get your keyboard locale etc. (#1207251)
- Handle lzo-compressed initrd (#1177862)
- Fix crash with --debuglog=<badfile> (#1175480)
- Remove --reboot (use fedup [args] && reboot if you want to do that)
- Fix crash for people who use `su` wrong (tip: do `su -`; see su(1))
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1175480 - traceback if tilde is in debug file name
https://bugzilla.redhat.com/show_bug.cgi?id=1175480
[ 2 ] Bug #1207251 - Fedup fail to decrypt disk with French keyboard layout (AZERTY)
https://bugzilla.redhat.com/show_bug.cgi?id=1207251
[ 3 ] Bug #1098886 - mod_auth_ntlm_winbind-0.0.0-0.16.20070129svn713.fc20.x86_64 requires httpd-2.4.9-2.fc20.x86_64
https://bugzilla.redhat.com/show_bug.cgi?id=1098886
[ 4 ] Bug #1162408 - fedup automatically proceeds with upgrade to F21 despite advising against it
https://bugzilla.redhat.com/show_bug.cgi?id=1162408
[ 5 ] Bug #1177862 - fedup fails with "cpio: Malformed number <binary data>" errors
https://bugzilla.redhat.com/show_bug.cgi?id=1177862
--------------------------------------------------------------------------------
================================================================================
libmediainfo-0.7.73-1.fc20 (FEDORA-2015-6050)
Library for supplies technical and tag information about a video or audio file
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 0.7.73
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 10 2015 Vasiliy N. Glazov <vascom2 at gmail.com> 0.7.73-1
- Update to 0.7.73
* Tue Jan 13 2015 Vasiliy N. Glazov <vascom2 at gmail.com> 0.7.72-1
- Update to 0.7.72
- Drop some patches
* Wed Dec 10 2014 Ivan Romanov <drizt at land.ru> - 0.7.71-3
- fixed epel7 building
* Sun Dec 7 2014 Ivan Romanov <drizt at land.ru> - 0.7.71-2
- use cmake
--------------------------------------------------------------------------------
================================================================================
libzen-0.4.31-1.fc20 (FEDORA-2015-5977)
Shared library for libmediainfo and medianfo*
--------------------------------------------------------------------------------
Update Information:
update to 0.4.31
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 9 2015 Vasiliy N. Glazov <vascom2 at gmail.com> - 0.4.31-1
- update to 0.4.31
* Thu Jan 15 2015 Ivan Romanov <drizt at land.ru> - 0.4.30-4
- added patch to fix building MediaInfo
* Tue Dec 16 2014 Vasiliy N. Glazov <vascom2 at gmail.com> 0.4.30-3
- Add BR pkgconfig(zlib)
* Sun Dec 7 2014 Ivan Romanov <drizt at land.ru> - 0.4.30-2
- use cmake
* Wed Nov 12 2014 Vasiliy N. Glazov <vascom2 at gmail.com> 0.4.30-1
- update to 0.4.30
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.4.29-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Fri Jun 6 2014 Vasiliy N. Glazov <vascom2 at gmail.com> 0.4.29-3
- Remove conflicted libzen-config from devel subpackage
--------------------------------------------------------------------------------
================================================================================
lua-expat-1.3.0-4.fc20 (FEDORA-2015-6553)
SAX XML parser based on the Expat library
--------------------------------------------------------------------------------
Update Information:
Apply patch by jkaluza (fix RHBZ# 1100238) to build -compat subpackage against compat-lua
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.3.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.3.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue May 27 2014 Matěj Cepl <mcepl at redhat.com> - 1.3.0-2
- Apply patch by jkaluza (fix RHBZ# 1100238) to build -compat subpackage
against compat-lua
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1100238 - [PATCH] Build lua-expat also against compat-lua
https://bugzilla.redhat.com/show_bug.cgi?id=1100238
--------------------------------------------------------------------------------
================================================================================
lua-filesystem-1.6.2-7.fc20 (FEDORA-2015-6511)
File System Library for the Lua Programming Language
--------------------------------------------------------------------------------
Update Information:
Build -compat subpackage against compat-lua
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.6.2-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.6.2-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu May 22 2014 Jan Kaluza <jkaluza at redhat.com> - 1.6.2-5
- build -compat subpackage against compat-lua
--------------------------------------------------------------------------------
================================================================================
lua-sec-0.5-3.fc20 (FEDORA-2015-6430)
Lua binding for OpenSSL library
--------------------------------------------------------------------------------
Update Information:
- Update to luasec-0.5 (#1000622)
- Build -compat subpackage against compat-lua
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.5-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed May 14 2014 Jan Kaluza <jkaluza at redhat.com> - 0.5-1
- update to luasec-0.5 (#1000622)
- build -compat subpackage against compat-lua
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1000622 - Upgrade lua-sec to support prosody 0.9
https://bugzilla.redhat.com/show_bug.cgi?id=1000622
--------------------------------------------------------------------------------
================================================================================
lua-socket-3.0-0.7rc1.fc20 (FEDORA-2015-6418)
Network support for the Lua language
--------------------------------------------------------------------------------
Update Information:
Build -compat subpackage against compat-lua
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.0-0.7rc1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 3.0-0.6rc1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu May 22 2014 Jan Kaluza <jkaluza at redhat.com> - 3.0-0.5rc1
- build -compat subpackage against compat-lua
* Mon Sep 9 2013 Matěj Cepl <mcepl at redhat.com> - 3.0-0.4rc1
- Add -devel package.
* Fri Aug 23 2013 Matěj Cepl <mcepl at redhat.com> - 3.0-0.3rc1
- update to the 3.0rc1 from git
--------------------------------------------------------------------------------
================================================================================
mediainfo-0.7.73-1.fc20 (FEDORA-2015-6050)
Supplies technical and tag information about a video or audio file (CLI)
--------------------------------------------------------------------------------
Update Information:
Update mediainfo to 0.7.73
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 10 2015 Vasiliy N. Glazov <vascom2 at gmail.com> 0.7.73-1
- Update to 0.7.73
* Wed Jan 14 2015 Vasiliy N. Glazov <vascom2 at gmail.com> 0.7.72-1
- Update to 0.7.72
--------------------------------------------------------------------------------
================================================================================
mksh-50f-1.fc20 (FEDORA-2015-6505)
MirBSD enhanced version of the Korn Shell
--------------------------------------------------------------------------------
Update Information:
R50f is a required security and bugfix release:
* Add a patch marker for vendor patch versioning to mksh.1
* SECURITY: make unset HISTFILE actually work
* Document some more issues with the current history code
* Remove some unused code
* RCSID-only sync with OpenBSD, for bogus and irrelevant changes
* Also disable field splitting for alias 'local= ypeset'
* Fix read -n-1 to not be identical to read -N-1
* Several fixes and improvements to lksh(1) and mksh(1) manpages
* More code (int → size_t), comment and testsuite fixes
* Make dot.mkshrc more robust (LP#1441853)
* Fix issues with IFS='' read, found by edualbus
* Fix integer overflows related to file descriptor parsing, found by Pawel Wylecial (LP#1440685); reduce memory usage for I/O redirs
* Document in the manpage how to set ±U according to the current locale settings via LANG/LC_* parameters (cf. Debian #782225)
* Some code cleanup and restructuring
* Handle number parsing and storing more carefully
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2015 Robert Scheck <robert at fedoraproject.org> 50f-1
- Upgrade to 50f
--------------------------------------------------------------------------------
================================================================================
phpMyAdmin-4.4.3-1.fc20 (FEDORA-2015-6539)
Handle the administration of MySQL over the World Wide Web
--------------------------------------------------------------------------------
Update Information:
phpMyAdmin 4.4.3.0 (2015-04-20)
===============================
- PHP errors in login dialogue
- White screen (Cloudflare)
- json_encode error due to strftime returning non utf8 chars in Windows 8.1 Chinese version
- Server error viewing table content
- Fix issues related to number of decimal places in time
- Relation view between 1600 and 1780 px
- PHP 7 compatibility in php-gettext
- PHP 7 compatibility in bfShapeFiles
- PHP 7 session_regenerate_id() warning
- Alter table after changing column name error
- Maximum execution time exceeded in Util.class.php
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2015 Robert Scheck <robert at fedoraproject.org> 4.4.3-1
- Upgrade to 4.4.3
--------------------------------------------------------------------------------
================================================================================
prosody-0.9.8-1.fc20 (FEDORA-2015-6428)
Flexible communications server for Jabber/XMPP
--------------------------------------------------------------------------------
Update Information:
Prosody 0.9.8
=============
A summary of changes in this release:
High
----
* Ensure only valid UTF-8 is passed to libidn. It was found (CVE-2015-2059) that libidn can read beyond the boundaries of the provided buffer when an input string contains invalid UTF-8 sequences.
Systems where Prosody is compiled to use libICU are not affected by this issue.
Medium
------
* DNS: Fix traceback caused when DNS server IP is unroutable (issue 473)
* HTTP client: More robust handling of chunked encoding across packet boundaries
* Stanza router: Fix handling of 'error' <iq>'s with multiple children
Minor
-----
* c2s: Fix error reply when clients try to bind multiple resources on the same stream (issue 484)
* s2s: Ensure to/from attributes are always present on stream headers, even if empty (issue 468)
* Build scripts: Add --libdir option to ./configure to simplify building on some platforms
* Fix traceback in datamanager when used outside of Prosody (e.g. in some migration tools)
* mod_admin_telnet: Fix potential traceback in server:memory() command (issue 471)
* HTTP server: Improved debug logging
Prosody 0.9.7
=============
A summary of changes in this release:
* util.stanza: Don't XML-escape whitespace
* prosodyctl: Fix traceback in 'about' command with LuaRocks 2.2.0
Prosody 0.9.6
=============
Note: This release disables SSLv3 by default, which has been shown to be insecure when used by clients. Clients that only support SSLv3 will no longer be able to connect. There are not many of these nowadays, but they exist.
A summary of changes in this release:
* certmanager, net.http: Disable SSLv3 by default
* net.http.parser: Support status code 101 and allow handling of the received data by plugins
* util.filters: Ignore filters being added twice (fixes issues on removal, i.e. when some plugins are reloaded/unloaded)
* mod_s2s: Close offending s2s streams missing an 'id' attribute with a stream error instead of throwing an unhandled error
* Networking API: Add 'ondetach' callback for listener objects, to prevent leaks when connections have their listener changed
* core.stanza_router: Stricter validation of stanzas
* mod_admin_adhoc: Mark 'accountjids' field as required in 'end user sessions' command (thanks Lloyd)
* mod_admin_adhoc: Add required to field in user deletion form too
* net.dns: Avoid duplicate cache entries
* util.stanza: Escape newlines and tabs (
) when serializing stanzas.
* util/dataforms: Make sure we iterate over field tags only
* mod_s2s: Capitalize log message
* mod_pubsub: Fix error type of 'forbidden' (change from 'cancel' to 'auth')
Prosody 0.9.5
=============
A summary of changes in this release:
* C2S: Fix traceback if a client opens a stream to component, which could cause a crash in combination with some versions of LuaEvent
* C2S, S2S: Log received invalid stream headers
* S2S: Fix case where stream headers were sometimes sent twice
* DNS: Ensure all pending requests get notified of a timeout when looking up a record
* DNS: Fix duplicated cache insertions by limiting outstanding queries per name to one
* xmppstream: Disable LuaExpat's buffering
* xmppstream: Disable CharacterData merging after stream restarts
* xmppstream: Pass invalid stream headers to error handling
* Privacy lists: Correctly sort privacy list rules by order
* prosody: Check dependencies later in the startup sequence
* Config: Delay importing LuaFileSystem until needed by an Include line
* Config: Normalize VirtualHost and Component names
* prosodyctl: Normalize JIDs for adduser/passwd/deluser
* POSIX: Fix error reporting from disk space allocation
* POSIX: Verify that 'pidfile' is a string, show friendly error otherwise
* Dependency checking: Check that prosody is running under Lua 5.1. We don't currently support any other versions. (LuaJIT identifies as 5.1)
* Compliance: Reset stream ID when resetting stream
* Compression: Log compression setup errors
* Console: Fix commands for adding and replacing name servers
* Console MUC commands: Fix error when a non-existent host is entered
* Filters: Prevent filters from being added twice
* Network: Transfer all available data between linked sockets
* dataforms: Add support for XEP-0221: Data Forms Media Element
Prosody 0.9.4
=============
A summary of changes in this release:
* Compression: Disallow compression on unauthenticated streams
* Core: Limit default read size and maximum stanza size
* Core: Enable SASL EXTERNAL by default for component s2s
* S2S: Warn if `s2s_secure_auth` and `s2s_require_encryption` have been set in conflicting ways
* S2S: Warn if no local network addresses were found, preventing successful s2s
* MUC: Fix traceback when a non-occupant tried to change an occupant's role
* MUC: API: Fire an event when temporary rooms are destroyed after the last person leaves
* Telnet: Fixed traceback when listing users
* Telnet: Apply normalization to JIDs in user management commands
* HTTP: Fix directory detection in file server on Windows
* Plugins: Fix paths on Windows
* MOTD: Don't strip blank lines from the message provided in the config
* prosodyctl: Better error reporting when generating certificates
* Makefile: Improve FreeBSD compatibility
* Multiple fixes to our migration tools, and support for importing MUCs from ejabberd
Prosody 0.9.3
=============
A summary of changes in this release:
* A config file passed as command line argument is no longer forgotten when config is reloaded
* MUC: Allow admins to always bypass restrict_room_creation
* Strip trailing '.' when normalizing hostnames
* HTTP: Prevent silent connection failures
* Components: Alow easier overriding of component authentication by plugins
* Components: Enable TCP keepalives
* Migrator: Better error reporting and improved robustness
* S2S: Include IP in log messages, if hostname is unavailable
* TLS: Log error when initialization fails
Prosody 0.9.2
=============
Note: If you are upgrading from 0.8.x or earlier, please read the 0.9.0 upgrade notes at http://prosody.im/doc/release/0.9.0!
A summary of changes in this release:
* Debian/Ubuntu packages fixed to always generate per-system certs
* TLS: Improved cipher string, and use Prosody's preferred ciphers instead of the client's
* MUC: Fix for Spark clients not displaying room lists
For more details behind the security improvements, see the release announcement at http://blog.prosody.im/prosody-0-9-2-released/.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 18 2015 Robert Scheck <robert at fedoraproject.org> 0.9.8-1
- Upgrade to 0.9.8 (#1152126)
* Sat Feb 14 2015 Robert Scheck <robert at fedoraproject.org> 0.9.7-1
- Upgrade to 0.9.7 (#985563, #1152126)
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.9.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.9.4-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue Jun 3 2014 Jan Kaluza <jkaluza at redhat.com> - 0.9.4-2
- add missing lua-socket-compat dependency
* Fri May 30 2014 Jan Kaluza <jkaluza at redhat.com> - 0.9.4-1
- update to version 0.9.4
- build with luajit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #985563 - Logging, conf.d and log rotation
https://bugzilla.redhat.com/show_bug.cgi?id=985563
[ 2 ] Bug #1085693 - prosody: resource consumption denial of service when using XMPP application-layer compression [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1085693
[ 3 ] Bug #1091499 - Please use luajit instead of lua in F20+ (prosody requires lua 5.1; lua 5.2 is packaged)
https://bugzilla.redhat.com/show_bug.cgi?id=1091499
[ 4 ] Bug #1152126 - prosody-0.9.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1152126
--------------------------------------------------------------------------------
================================================================================
python-mailer-0.8.0-1.fc20 (FEDORA-2015-6506)
A module that simplifies sending email
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 0.8.0 (rhbz#902981)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 18 2015 Fabian Affolter <mail at fabian-affolter.ch> - 0.8.0-1
- Update to latest upstream release 0.8.0 (rhbz#902981)
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.7-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue Jan 14 2014 Fabian Affolter <mail at fabian-affolter.ch> - 0.7-7
- Update python macros
* Mon Aug 26 2013 Fabian Affolter <mail at fabian-affolter.ch> - 0.7-6
- Spec file updated
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #902981 - python mailer don`t use simple SSL
https://bugzilla.redhat.com/show_bug.cgi?id=902981
--------------------------------------------------------------------------------
================================================================================
python-mistune-0.5.1-1.fc20 (FEDORA-2015-6524)
Markdown parser for Python
--------------------------------------------------------------------------------
Update Information:
new upstream release (0.5.1)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2015 Christian Dersch <lupinix at fedoraproject.org> - 0.5.1-1
- new upstream release (0.5.1)
--------------------------------------------------------------------------------
================================================================================
quodlibet-3.4.0-2.fc20 (FEDORA-2015-6076)
A music management program
--------------------------------------------------------------------------------
Update Information:
- update to 3.4.0
- http://quodlibet.readthedocs.org/en/latest/changelog.html#she-knew-every-of-the-things
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 19 2015 Johannes Lips <hannes at fedoraproject.org> - 3.4.0-2
- added call to update-desktop-database
* Sun Apr 12 2015 Johannes Lips <hannes at fedoraproject.org> - 3.4.0-1
- update to recent upstream release 3.4.0
- changed upstream url
--------------------------------------------------------------------------------
================================================================================
rubygem-domain_name-0.5.24-1.fc20 (FEDORA-2015-6487)
Domain Name manipulation library for Ruby
--------------------------------------------------------------------------------
Update Information:
New version 0.5.24 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 17 2015 Mamoru TASAKA <mtasaka at fedoraproject.org> - 0.5.24-1
- 0.5.24
--------------------------------------------------------------------------------
================================================================================
rubygem-unf_ext-0.0.7.1-1.fc20 (FEDORA-2015-6498)
Unicode Normalization Form support library for CRuby
--------------------------------------------------------------------------------
Update Information:
New version 0.0.7.1 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2015 Mamoru TASAKA <mtasaka at fedoraproject.org> - 0.0.7.1-1
- 0.0.7.1
* Fri Jan 16 2015 Mamoru TASAKA <mtasaka at fedoraproject.org> - 0.0.6-8
- F-22: Rebuild for ruby 2.2
* Fri Nov 14 2014 Mamoru TASAKA <mtasaka at fedoraproject.org> - 0.0.6-7
- F-21 shoulda is now 3.5.0, fix test case
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.0.6-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.0.6-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue Apr 22 2014 Mamoru TASAKA <mtasaka at fedoraproject.org> - 0.0.6-4
- Use minitest/autorun instead of minitest/unit
* Tue Apr 22 2014 Mamoru TASAKA <mtasaka at fedoraproject.org> - 0.0.6-3
- F-21: rebuild for ruby 2.1 / rubygems 2.2
--------------------------------------------------------------------------------
================================================================================
salt-2014.7.5-1.fc20 (FEDORA-2015-6535)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to bugfix release 2014.7.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 17 2015 Erik Johnson <erik at saltstack.com> - 2014.7.5-1
- Update to bugfix release 2014.7.5
* Tue Apr 7 2015 Erik Johnson <erik at saltstack.com> - 2014.7.4-4
- Fix RH bug #1210316 and Salt bug #22003
* Tue Apr 7 2015 Erik Johnson <erik at saltstack.com> - 2014.7.4-2
- Update to bugfix release 2014.7.4
* Tue Feb 17 2015 Erik Johnson <erik at saltstack.com> - 2014.7.2-1
- Update to bugfix release 2014.7.2
--------------------------------------------------------------------------------
================================================================================
sflphone-1.4.1-7.fc20 (FEDORA-2015-6554)
SIP/IAX2 compatible enterprise-class software phone
--------------------------------------------------------------------------------
Update Information:
This update correctly disables video support also in the gnome client, fixing a crash when opening the preferences dialog.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 18 2015 Sandro Mani <manisandro at gmail.com> - 1.4.1-7
- Pass --disable-video to Gnome client configure
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1213076 - [abrt] sflphone-gnome: fill_devices(): sflphone-client-gnome killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1213076
--------------------------------------------------------------------------------
================================================================================
spacefm-1.0.0-1.fc20 (FEDORA-2015-6420)
Multi-panel tabbed file and desktop manager
--------------------------------------------------------------------------------
Update Information:
New version 1.0.0 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2015 Mamoru TASAKA <mtasaka at fedoraproject.org> - 1.0.0-1
- 1.0.0
* Thu Oct 2 2014 Rex Dieter <rdieter at fedoraproject.org> 0.9.4-4
- update mime scriptlets
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.9.4-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.9.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
texworks-0.4.6-2.fc20 (FEDORA-2015-6461)
A simple IDE for authoring TeX documents
--------------------------------------------------------------------------------
Update Information:
* Implement character-level synchronization by using text searching to assist SyncTeX
* Lift hardwrap line length limitation and implement (hard) unwrap
* Always show console output tab while typesetting to show progress
* Improve the handling of UTF-8 byte order marks
* Improve the log parsing script
* Improve the handling of script errors
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 17 2015 Robin Lee <cheeselee at fedoraproject.org> - 0.4.6-2
- Fix Qt4/ARM build with Tw_ARM2.patch
- Use Qt5 on Fedora >= 22
* Sat Apr 11 2015 Robin Lee <cheeselee at fedoraproject.org> - 0.4.6-1
- Update to 0.4.6
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.4.5-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.4.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
wine-1.7.41-1.fc20 (FEDORA-2015-6460)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
* More Known Folders supported in the shell.
* Some more support for kernel job objects.
* More MSI patches improvements.
* Some theming fixes.
* Various bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 18 2015 Michael Cronenworth <mike at cchtml.com> 1.7.41-1
- version upgrade
- Disable gstreamer support (rhbz#1204185)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1213037 - wine-1.7.41 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1213037
[ 2 ] Bug #1206271 - Can't log into uplay 5 -- patch available
https://bugzilla.redhat.com/show_bug.cgi?id=1206271
[ 3 ] Bug #1204185 - wine uses obsolete gstreamer-0.10
https://bugzilla.redhat.com/show_bug.cgi?id=1204185
--------------------------------------------------------------------------------
================================================================================
xscreensaver-5.32-12.fc20 (FEDORA-2015-6423)
X screen saver and locker
--------------------------------------------------------------------------------
Update Information:
A bug was found on providence hack which may lead to make this hack crash. This new rpm will fix this issue.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 19 2015 Mamoru TASAKA <mtasaka at fedoraproject.org> - 1:5.32-12
- providence:update_particles: aviod one byte ahead access
* Mon Mar 23 2015 Mamoru TASAKA <mtasaka at fedoraproject.org>
- Make it sure that perl interpreter is recognized
as /usr/bin/perl
* Sat Mar 21 2015 Mamoru TASAKA <mtasaka at fedoraproject.org> - 1:5.32-11
- Fix up gdk_pixbuf BR dep, per F-23 gdk_pixbuf packaging change
--------------------------------------------------------------------------------
================================================================================
zsh-5.0.7-7.fc20 (FEDORA-2015-6466)
Powerful interactive shell
--------------------------------------------------------------------------------
Update Information:
- fix SIGSEGV when handling heredocs and keyboard interrupt (#972624)
- queue signals when manipulating global state to avoid deadlock
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 20 2015 Kamil Dudka <kdudka at redhat.com> - 5.0.7-7
- fix SIGSEGV when handling heredocs and keyboard interrupt (#972624)
- queue signals when manipulating global state to avoid deadlock
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #972624 - [abrt] zsh-5.0.2-1.fc18: setheredoc: Process /usr/bin/zsh was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=972624
--------------------------------------------------------------------------------
More information about the test
mailing list