Fedora 21 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Mon Nov 16 22:22:39 UTC 2015


The following Fedora 21 Security updates need testing:
 Age  URL
 289  https://bodhi.fedoraproject.org/updates/FEDORA-2015-1467   openstack-glance-2014.1.3-4.fc21
 170  https://bodhi.fedoraproject.org/updates/FEDORA-2015-9141   ceph-deploy-1.5.25-1.fc21
 159  https://bodhi.fedoraproject.org/updates/FEDORA-2015-9744   squid-3.4.13-1.fc21
 102  https://bodhi.fedoraproject.org/updates/FEDORA-2015-12773   python-kdcproxy-0.3.2-1.fc21
  86  https://bodhi.fedoraproject.org/updates/FEDORA-2015-1fed73bab8   conntrack-tools-1.4.2-9.fc21
  82  https://bodhi.fedoraproject.org/updates/FEDORA-2015-14179   libreswan-3.15-1.fc21
  82  https://bodhi.fedoraproject.org/updates/FEDORA-2015-14200   sblim-sfcb-1.4.8-5.fc21
  74  https://bodhi.fedoraproject.org/updates/FEDORA-2015-14852   libwmf-0.2.8.4-46.fc21
  57  https://bodhi.fedoraproject.org/updates/FEDORA-2015-16238   nagios-4.0.8-1.fc21
  43  https://bodhi.fedoraproject.org/updates/FEDORA-2015-af1b712fce   python-pymongo-3.0.3-1.fc21
  43  https://bodhi.fedoraproject.org/updates/FEDORA-2015-d292a98f01   cyrus-imapd-2.4.18-1.fc21
  43  https://bodhi.fedoraproject.org/updates/FEDORA-2015-048e95ac1d   thunderbird-38.3.0-1.fc21
  38  https://bodhi.fedoraproject.org/updates/FEDORA-2015-d683ebb786   postgresql-9.3.10-1.fc21
  36  https://bodhi.fedoraproject.org/updates/FEDORA-2015-1f9e79df21   audiofile-0.3.6-9.fc21
  29  https://bodhi.fedoraproject.org/updates/FEDORA-2015-6542ab6d3a   libreport-2.3.0-10.fc21 abrt-2.3.0-12.fc21
  14  https://bodhi.fedoraproject.org/updates/FEDORA-2015-47cf97f125   git-2.1.0-6.fc21
  14  https://bodhi.fedoraproject.org/updates/FEDORA-2015-fed35dffd7   perl-HTML-Scrubber-0.15-1.fc21
  14  https://bodhi.fedoraproject.org/updates/FEDORA-2015-69e6c3607f   miniupnpc-1.9-6.fc21
  13  https://bodhi.fedoraproject.org/updates/FEDORA-2015-240dd21cb6   perl-IPTables-Parse-1.5-2.fc21
  10  https://bodhi.fedoraproject.org/updates/FEDORA-2015-0080239274   sudo-1.8.15-1.fc21
  10  https://bodhi.fedoraproject.org/updates/FEDORA-2015-446074b60f   m2crypto-0.22.5-2.fc21
   8  https://bodhi.fedoraproject.org/updates/FEDORA-2015-200d2dfd9f   krb5-1.12.2-19.fc21
   8  https://bodhi.fedoraproject.org/updates/FEDORA-2015-0f405832d3   libsndfile-1.0.25-16.fc21
   7  https://bodhi.fedoraproject.org/updates/FEDORA-2015-f92fd549f1   libreoffice-4.3.7.2-13.fc21
   6  https://bodhi.fedoraproject.org/updates/FEDORA-2015-e75992a62a   putty-0.65-2.fc21
   6  https://bodhi.fedoraproject.org/updates/FEDORA-2015-a3965fd800   pdns-3.4.7-1.fc21
   4  https://bodhi.fedoraproject.org/updates/FEDORA-2015-a275fd68f2   zarafa-7.1.14-1.fc21
   4  https://bodhi.fedoraproject.org/updates/FEDORA-2015-f150b2a8c8   xen-4.4.3-8.fc21
   3  https://bodhi.fedoraproject.org/updates/FEDORA-2015-f2c534bc12   kernel-4.1.13-100.fc21
   3  https://bodhi.fedoraproject.org/updates/FEDORA-2015-501493d853   libpng10-1.0.64-1.fc21
   3  https://bodhi.fedoraproject.org/updates/FEDORA-2015-038912089d   sundials-2.6.2-11.fc21
   1  https://bodhi.fedoraproject.org/updates/FEDORA-2015-68f5a5ba94   ProDy-1.7.1-1.fc21
   1  https://bodhi.fedoraproject.org/updates/FEDORA-2015-5a9d60c28e   potrace-1.13-2.fc21
   0  https://bodhi.fedoraproject.org/updates/FEDORA-2015-bee38cd15f   monitorix-3.8.1-1.fc21


The following Fedora 21 Critical Path updates have yet to be approved:
 Age URL
 108  https://bodhi.fedoraproject.org/updates/FEDORA-2015-12402   gstreamer1-plugins-good-1.4.5-3.fc21
  96  https://bodhi.fedoraproject.org/updates/FEDORA-2015-13239   yum-3.4.3-154.fc21
  86  https://bodhi.fedoraproject.org/updates/FEDORA-2015-13877   libteam-1.18-1.fc21
  86  https://bodhi.fedoraproject.org/updates/FEDORA-2015-90d3a9ce48   dracut-038-40.git20150819.fc21
  86  https://bodhi.fedoraproject.org/updates/FEDORA-2015-37e78bb9af   btrfs-progs-4.1.2-1.fc21
  43  https://bodhi.fedoraproject.org/updates/FEDORA-2015-048e95ac1d   thunderbird-38.3.0-1.fc21
  43  https://bodhi.fedoraproject.org/updates/FEDORA-2015-ff9eaa3e01   device-mapper-multipath-0.4.9-68.fc21.6
  31  https://bodhi.fedoraproject.org/updates/FEDORA-2015-f01da0e4b8   spatialite-tools-4.2.0-15.fc21 sqlite-3.9.0-1.fc21
  29  https://bodhi.fedoraproject.org/updates/FEDORA-2015-6542ab6d3a   libreport-2.3.0-10.fc21 abrt-2.3.0-12.fc21
  21  https://bodhi.fedoraproject.org/updates/FEDORA-2015-311e897518   dnsmasq-2.75-2.fc21
  21  https://bodhi.fedoraproject.org/updates/FEDORA-2015-830a68baaa   createrepo_c-0.9.1-1.fc21
  19  https://bodhi.fedoraproject.org/updates/FEDORA-2015-06f119f03c   hwdata-0.283-1.fc21
  14  https://bodhi.fedoraproject.org/updates/FEDORA-2015-38c68e7875   linux-firmware-20151030-58.git66d3d8d7.fc21
  14  https://bodhi.fedoraproject.org/updates/FEDORA-2015-607cc1b079   gdisk-1.0.1-1.fc21
  13  https://bodhi.fedoraproject.org/updates/FEDORA-2015-cd8384936c   perl-Getopt-Long-2.48-1.fc21
  11  https://bodhi.fedoraproject.org/updates/FEDORA-2015-315b5f87f0   vim-7.4.909-1.fc21
  11  https://bodhi.fedoraproject.org/updates/FEDORA-2015-64068a1f08   crda-3.18_2015.10.22-1.fc21
  10  https://bodhi.fedoraproject.org/updates/FEDORA-2015-0080239274   sudo-1.8.15-1.fc21
   8  https://bodhi.fedoraproject.org/updates/FEDORA-2015-0f405832d3   libsndfile-1.0.25-16.fc21
   8  https://bodhi.fedoraproject.org/updates/FEDORA-2015-0cef72c8c6   livecd-tools-21.7-1.fc21
   8  https://bodhi.fedoraproject.org/updates/FEDORA-2015-200d2dfd9f   krb5-1.12.2-19.fc21
   5  https://bodhi.fedoraproject.org/updates/FEDORA-2015-bef3629320   perl-Carp-1.38-1.fc21
   3  https://bodhi.fedoraproject.org/updates/FEDORA-2015-f2c534bc12   kernel-4.1.13-100.fc21
   0  https://bodhi.fedoraproject.org/updates/FEDORA-2015-b60333a0f1   perl-Time-HiRes-1.9728-1.fc21


The following builds have been pushed to Fedora 21 updates-testing

    monitorix-3.8.1-1.fc21
    perl-Time-HiRes-1.9728-1.fc21
    zanata-parent-25-2.fc21

Details about builds:


================================================================================
 monitorix-3.8.1-1.fc21 (FEDORA-2015-bee38cd15f)
 A free, open source, lightweight system monitoring tool
--------------------------------------------------------------------------------
Update Information:

This is a maintenance release that mainly fixes a Document Object Model
(DOM)-based cross-site scripting (XSS) vulnerability in the monitorix.cgi file.
Such vulnerability is by injection a JS code in the when parameter of the URL
shown after generating the graphs. Additionally, a potential denial of service
(DoS) issue was discovered in the same when parameter of the URL which could
lead in the creation of an enormous amount of .png files in the imgs directory
of the server.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1281979 - monitorix-3.8.1 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1281979
--------------------------------------------------------------------------------


================================================================================
 perl-Time-HiRes-1.9728-1.fc21 (FEDORA-2015-b60333a0f1)
 High resolution alarm, sleep, gettimeofday, interval timers
--------------------------------------------------------------------------------
Update Information:

This release fixes type castings, compiler warnings, build script and does not
use deprecated thread API.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1282021 - perl-Time-HiRes-1.9728 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1282021
--------------------------------------------------------------------------------


================================================================================
 zanata-parent-25-2.fc21 (FEDORA-2015-3a561e9d01)
 The Project Object Model(pom) files for the Zanata packages
--------------------------------------------------------------------------------
Update Information:

- The resteasy.version is 3.0.6.Final  ----  - Upstream update to 25. - RHEL
uses resteasy-base-resteasy-pom instead.
--------------------------------------------------------------------------------



More information about the test mailing list