The following Fedora 21 Security updates need testing:
Age URL
93
https://admin.fedoraproject.org/updates/FEDORA-2014-16833/asterisk-11.14....
84
https://admin.fedoraproject.org/updates/FEDORA-2014-17139/aeskulap-0.2.2-...
81
https://admin.fedoraproject.org/updates/FEDORA-2014-17567/mapserver-6.2.2...
69
https://admin.fedoraproject.org/updates/FEDORA-2015-0264/gcab-0.4-7.fc21
61
https://admin.fedoraproject.org/updates/FEDORA-2015-0620/chicken-4.9.0.1-...
45
https://admin.fedoraproject.org/updates/FEDORA-2015-1467/openstack-glance...
37
https://admin.fedoraproject.org/updates/FEDORA-2015-1803/fcgi-2.4.0-26.fc21
29
https://admin.fedoraproject.org/updates/FEDORA-2015-2101/drupal7-views-3....
29
https://admin.fedoraproject.org/updates/FEDORA-2015-2055/openldap-2.4.40-...
18
https://admin.fedoraproject.org/updates/FEDORA-2015-2584/echoping-6.1-0.b...
17
https://admin.fedoraproject.org/updates/FEDORA-2015-2729/qpid-cpp-0.30-12...
16
https://admin.fedoraproject.org/updates/FEDORA-2015-2849/drupal7-entity-1...
11
https://admin.fedoraproject.org/updates/FEDORA-2015-3218/xterm-308-3.fc21
11
https://admin.fedoraproject.org/updates/FEDORA-2015-3186/dokuwiki-0-0.24....
7
https://admin.fedoraproject.org/updates/FEDORA-2015-3497/librsync-1.0.0-1...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-3556/patch-2.7.5-1.fc21
7
https://admin.fedoraproject.org/updates/FEDORA-2015-3489/libgcrypt-1.6.3-...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-3505/389-ds-base-1.3....
4
https://admin.fedoraproject.org/updates/FEDORA-2015-3569/icu-52.1-5.fc21
4
https://admin.fedoraproject.org/updates/FEDORA-2015-3574/qt-creator-3.3.2...
3
https://admin.fedoraproject.org/updates/FEDORA-2015-3612/ImageMagick-6.8....
3
https://admin.fedoraproject.org/updates/FEDORA-2015-3797/libssh2-1.5.0-1....
2
https://admin.fedoraproject.org/updates/FEDORA-2015-3902/php-ZendFramewor...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3944/xen-4.4.1-16.fc21
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3948/nx-libs-3.5.0.29...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-3984/ettercap-0.8.2-1...
The following Fedora 21 Critical Path updates have yet to be approved:
Age URL
12
https://admin.fedoraproject.org/updates/FEDORA-2015-3047/livecd-tools-21....
12
https://admin.fedoraproject.org/updates/FEDORA-2015-3009/perl-Pod-Usage-1...
10
https://admin.fedoraproject.org/updates/FEDORA-2015-3303/libsoup-2.48.1-2...
10
https://admin.fedoraproject.org/updates/FEDORA-2015-3324/crypto-policies-...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-3553/python-six-1.9.0...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-3556/patch-2.7.5-1.fc21
7
https://admin.fedoraproject.org/updates/FEDORA-2015-3476/selinux-policy-3...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-3379/gstreamer1-plugi...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-3363/glib-networking-...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-3489/libgcrypt-1.6.3-...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-3017/ModemManager-1.4...
4
https://admin.fedoraproject.org/updates/FEDORA-2015-3597/elfutils-0.161-6...
4
https://admin.fedoraproject.org/updates/FEDORA-2015-3569/icu-52.1-5.fc21
3
https://admin.fedoraproject.org/updates/FEDORA-2015-3774/control-center-3...
3
https://admin.fedoraproject.org/updates/FEDORA-2015-3730/libwebp-0.4.3-1....
3
https://admin.fedoraproject.org/updates/FEDORA-2015-3797/libssh2-1.5.0-1....
3
https://admin.fedoraproject.org/updates/FEDORA-2015-3595/kde-baseapps-14....
2
https://admin.fedoraproject.org/updates/FEDORA-2015-3835/system-config-ke...
2
https://admin.fedoraproject.org/updates/FEDORA-2015-3842/perl-Text-ParseW...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-3922/gnome-shell-3.14...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-3990/perl-Carp-1.35-1...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-4011/perl-Encode-2.72...
The following builds have been pushed to Fedora 21 updates-testing
cvsutils-0.2.6-1.fc21
ettercap-0.8.2-1.fc21
gpaste-3.14.2-1.fc21
jdns-2.0.1-1.fc21
perl-Carp-1.35-1.fc21
perl-Encode-2.72-1.fc21
php-horde-Horde-Compress-2.1.1-1.fc21
php-pecl-mongo-1.6.5-1.fc21
python-glue-0.9.4-1.fc21
quiterss-0.17.6-1.fc21
vile-9.8p-1.fc21
wildfly-8.1.0-4.fc21
Details about builds:
================================================================================
cvsutils-0.2.6-1.fc21 (FEDORA-2015-4016)
CVS Utilities
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 16 2015 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 0.2.6-1
- Upstream update.
- Modernize spec.
- Fix bogus %changelog dates.
--------------------------------------------------------------------------------
================================================================================
ettercap-0.8.2-1.fc21 (FEDORA-2015-3984)
Network traffic sniffer/analyser, NCURSES interface version
--------------------------------------------------------------------------------
Update Information:
0.8.2-Ferri
Bug Fix
!! Fixed some openssl deprecated functions usage
!! Fixed log file ownership
!! Fixed mixed output print
!! Fixed drop_privs function usage
!! Fixed nopromisc option usage.
!! Fixed missing break in parser code.
!! Improved redirect commands
!! Fix truncated VLAN packet headers
!! Fix ettercap.rc file (windows only)
!! Various cmake fixes
!! A ton of BSD bug fixes
!! Simplify macosx cmake files
!! Fix incorrect sequence number after TCP injection
!! Fix pcap length, and aligment problems with libpcap
!! Bug fixes and gtk code refactor (gtk box wrapper)
!! Fix some ipv6 send issues
!! Fixed sleep time on Windows (high CPU usage)
!! Fixed many CVE vulnerabilities (some of them already fixed in 0.8.1)
- CVE-2014-6395 (Length Parameter Inconsistency)
- CVE-2014-6396 (Arbitrary write)
- CVE-2014-9376 (Negative index/underflow)
- CVE-2014-9377 (Heap overflow)
- CVE-2014-9378 (Unchecked return value)
- CVE-2014-9379 (Incorrect cast)
- CVE-2014-9380 (Buffer over-read)
- CVE-2014-9381 (Signedness error)
New Features
+ Updated etter.finger.mac
+ Add TXT and ANY query support on dns_spoof
+ New macosx travis-ci build!
+ Enable again PDF generation
Removed
- Remove gprof support
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 16 2015 Jon Ciesla <limburgher(a)gmail.com> - 0.8.2-1
- Latest upstream.
--------------------------------------------------------------------------------
================================================================================
gpaste-3.14.2-1.fc21 (FEDORA-2015-4002)
Clipboard management system
--------------------------------------------------------------------------------
Update Information:
* improve zsh completion
* fix a bug causing the gnome-shell extension to randomly crash
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 16 2015 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.14.2-1
- Update to 3.14.2
--------------------------------------------------------------------------------
================================================================================
jdns-2.0.1-1.fc21 (FEDORA-2015-4007)
A simple DNS queries library
--------------------------------------------------------------------------------
Update Information:
new upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 15 2015 Ivan Romanov <drizt(a)land.ru> - 2.0.1-1
- new upstream version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1202165 - jdns-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1202165
--------------------------------------------------------------------------------
================================================================================
perl-Carp-1.35-1.fc21 (FEDORA-2015-3990)
Alternative warn and die for modules
--------------------------------------------------------------------------------
Update Information:
This release fixes working on non-ASCII platforms, it fixes handling DEL character on perl
older than 5.14 and relaxes check for Carp::Heavy version.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 16 2015 Petr Pisar <ppisar(a)redhat.com> - 1.35-1
- 1.35 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1202095 - perl-Carp-1.35 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1202095
--------------------------------------------------------------------------------
================================================================================
perl-Encode-2.72-1.fc21 (FEDORA-2015-4011)
Character encodings in Perl
--------------------------------------------------------------------------------
Update Information:
This release checks for unsupported EBCDIC platform at loading the encoding module instead
of later importing it.
This release adds aliases cp65000 and cp65001.
This release fixes license declaration to "(GPL+ or Artistic) and UCD".
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 16 2015 Petr Pisar <ppisar(a)redhat.com> - 1:2.72-1
- 2.72 bump
* Thu Mar 12 2015 Petr Pisar <ppisar(a)redhat.com> - 1:2.71-1
- 2.71 bump
* Wed Mar 4 2015 Petr Pisar <ppisar(a)redhat.com> - 1:2.70-2
- Correct license from (GPL+ or Artistic) to ((GPL+ or Artistic) and UCD)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1201998 - perl-Encode-2.72 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1201998
[ 2 ] Bug #1201267 - perl-Encode-2.71 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1201267
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Compress-2.1.1-1.fc21 (FEDORA-2015-4000)
Horde Compression API
--------------------------------------------------------------------------------
Update Information:
**Horde_Compress 2.1.1**
* [jan] Fix fatal error due to incorrect class name case (Ralph Becker)
* [mms] Fix leaking Horde_Date exceptions.
* [mjr] Improve detection of ORGANIZER when decoding MAPI encoded vTODOs.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 14 2015 Remi Collet <remi(a)fedoraproject.org> - 2.1.1-1
- Update to 2.1.1
--------------------------------------------------------------------------------
================================================================================
php-pecl-mongo-1.6.5-1.fc21 (FEDORA-2015-4012)
PHP MongoDB database driver
--------------------------------------------------------------------------------
Update Information:
**Bug**
* [PHP-1406] - Connecting through SSL no longer works in PHP 5.6 with 2.4.13, 2.6.6, and
later
* [PHP-1407] - Hostname matching with Replica Set doesn't work pre PHP 5.6
* [PHP-1412] - Compile error when OpenSSL is not available
**Improvement**
* [PHP-1410] - Add certification expiration matching
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 14 2015 Remi Collet <remi(a)fedoraproject.org> - 1.6.5-1
- update to 1.6.5 (stable)
- openssl-devel required for build
--------------------------------------------------------------------------------
================================================================================
python-glue-0.9.4-1.fc21 (FEDORA-2015-3980)
A simple command line tool to generate CSS sprites
--------------------------------------------------------------------------------
Update Information:
Update upstream version to 0.9.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 15 2015 Lorenzo Gil Sanchez <lorenzo.gil.sanchez(a)gmail.com> - 0.9.4-1
- Update upstream version to 0.9.4
- Removed the patch since my changes were accepted upstream so the patch
is not needed anymore.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1070172 - python-glue-0.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1070172
--------------------------------------------------------------------------------
================================================================================
quiterss-0.17.6-1.fc21 (FEDORA-2015-4018)
RSS/Atom aggregator
--------------------------------------------------------------------------------
Update Information:
Version bump
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 15 2015 TI_Eugene <ti.eugene(a)gmail.com> - 0.17.6-1
- Version bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1201394 - quiterss 0.17.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1201394
--------------------------------------------------------------------------------
================================================================================
vile-9.8p-1.fc21 (FEDORA-2015-4001)
VI Like Emacs
--------------------------------------------------------------------------------
Update Information:
upgrade to 9.8p (RHBZ#1188844)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 15 2015 Mark McKinstry <mmckinst(a)nexcess.net> - 9.8p-1
- upgrade to 9.8p (RHBZ#1188844)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1188844 - vile-9.8p is available
https://bugzilla.redhat.com/show_bug.cgi?id=1188844
--------------------------------------------------------------------------------
================================================================================
wildfly-8.1.0-4.fc21 (FEDORA-2015-3978)
WildFly Application Server
--------------------------------------------------------------------------------
Update Information:
Rebuild to fix rhbz#1173536
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 16 2015 Marek Goldmann <mgoldman(a)redhat.com> - 8.1.0-4
- Rebuild to fix rhbz#1173536
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1173536 - wildfly will not start after doing 'yum install wildfly'
and then 'systemctl start wildfly'
https://bugzilla.redhat.com/show_bug.cgi?id=1173536
--------------------------------------------------------------------------------