The following Fedora 21 Security updates need testing:
Age URL
180
https://admin.fedoraproject.org/updates/FEDORA-2015-1467/openstack-glance...
125
https://admin.fedoraproject.org/updates/FEDORA-2015-4689/quassel-0.11.0-2...
70
https://admin.fedoraproject.org/updates/FEDORA-2015-8168/cabal-install-1....
60
https://admin.fedoraproject.org/updates/FEDORA-2015-9090/fossil-1.33-1.fc21
60
https://admin.fedoraproject.org/updates/FEDORA-2015-9141/ceph-deploy-1.5....
49
https://admin.fedoraproject.org/updates/FEDORA-2015-5247/strongswan-5.3.2...
49
https://admin.fedoraproject.org/updates/FEDORA-2015-9744/squid-3.4.13-1.fc21
39
https://admin.fedoraproject.org/updates/FEDORA-2015-10175/opensaml-java-o...
39
https://admin.fedoraproject.org/updates/FEDORA-2015-10301/389-ds-base-1.3...
16
https://admin.fedoraproject.org/updates/FEDORA-2015-11368/nx-libs-3.5.0.3...
7
https://admin.fedoraproject.org/updates/FEDORA-2015-11936/community-mysql...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-12032/uwsgi-2.0.11.1-...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-11995/bzr-2.6.0-7.fc21
1
https://admin.fedoraproject.org/updates/FEDORA-2015-12028/drupal6-cck-2.1...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-12012/openssh-6.6.1p1...
1
https://admin.fedoraproject.org/updates/FEDORA-2015-12010/mantis-1.2.19-3...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-12250/lighttpd-1.4.36...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-12064/libuser-0.62-1....
0
https://admin.fedoraproject.org/updates/FEDORA-2015-12357/bind-9.9.6-10.P...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-12054/openssh-6.6.1p1...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-12148/wordpress-4.2.3...
The following Fedora 21 Critical Path updates have yet to be approved:
Age URL
1
https://admin.fedoraproject.org/updates/FEDORA-2015-12049/selinux-policy-...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-12332/kernel-4.1.3-10...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-12357/bind-9.9.6-10.P...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-12054/openssh-6.6.1p1...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-12277/libfm-1.2.3-12....
0
https://admin.fedoraproject.org/updates/FEDORA-2015-12310/dbus-1.8.20-1.fc21
0
https://admin.fedoraproject.org/updates/FEDORA-2015-12212/perl-Filter-1.5...
0
https://admin.fedoraproject.org/updates/FEDORA-2015-12064/libuser-0.62-1....
The following builds have been pushed to Fedora 21 updates-testing
bind-9.9.6-10.P1.fc21
digikam-4.12.0-1.fc21
globus-gssapi-gsi-11.20-1.fc21
globus-xio-gsi-driver-3.8-1.fc21
golang-github-cenkalti-backoff-0-0.2.git9831e1e.fc21
golang-github-kr-pretty-0-0.5.gitf31442d.fc21
golang-github-kr-text-0-0.5.git6807e77.fc21
golang-github-onsi-gomega-0-0.4.git8adf9e1.fc21
golang-github-tonnerre-golang-pretty-0-0.3.gite7fccc0.fc21
golang-github-vaughan0-go-ini-0-0.5.gita98ad7e.fc21
golang-github-vishvananda-netlink-0-0.4.git991a7a2.fc21
golang-github-vishvananda-netns-0-0.4.git5478c06.fc21
golang-github-vmware-govcloudair-0-0.2.git0d7be90.fc21
golang-gopkg-check-0-6.fc21
kernel-4.1.3-100.fc21
mate-themes-1.10.3-1.fc21
myproxy-6.1.15-1.fc21
pulseaudio-equalizer-2.7-16.fc21
python-pillow-2.6.2-2.fc21
remind-03.01.15-1.fc21
systemtap-2.8-1.fc21
thefuck-1.48-1.fc21
Details about builds:
================================================================================
bind-9.9.6-10.P1.fc21 (FEDORA-2015-12357)
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
--------------------------------------------------------------------------------
Update Information:
Include fix for CVE-2015-5477
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 Tomas Hozza <thozza(a)redhat.com> - 32:9.9.6-10.P1
- Include fix for CVE-2015-5477
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1247361 - CVE-2015-5477 bind: TKEY query handling flaw leading to denial of
service
https://bugzilla.redhat.com/show_bug.cgi?id=1247361
--------------------------------------------------------------------------------
================================================================================
digikam-4.12.0-1.fc21 (FEDORA-2015-12326)
A digital camera accessing & photo management application
--------------------------------------------------------------------------------
Update Information:
digiKam 4.12.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 Alexey Kurov <nucleo(a)fedoraproject.org> - 4.12.0-1
- digikam-4.12.0
- old PicasaWeb export removed
- renamed googledrive to googleservices
* Mon Jun 22 2015 Rex Dieter <rdieter(a)fedoraproject.org> 4.11.0-2
- drop BR: pkgconfig(exiv2), only need libkexiv2-devel these days
--------------------------------------------------------------------------------
================================================================================
globus-gssapi-gsi-11.20-1.fc21 (FEDORA-2015-12339)
Globus Toolkit - GSSAPI library
--------------------------------------------------------------------------------
Update Information:
Globus Toolkit updates from upstream
* globus-gssapi-gsi 11.20
* globus-xio-gsi-driver 3.8
* myproxy 6.1.15
https://globus.atlassian.net/browse/GT-614
https://globus.atlassian.net/browse/GT-615
https://globus.atlassian.net/browse/GT-616
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 11.20-1
- GT6 update
- GT-614: GLOBUS_GSS_C_NT_HOST_IP doesn't allow host-only imports and
comparisons
--------------------------------------------------------------------------------
================================================================================
globus-xio-gsi-driver-3.8-1.fc21 (FEDORA-2015-12339)
Globus Toolkit - Globus XIO GSI Driver
--------------------------------------------------------------------------------
Update Information:
Globus Toolkit updates from upstream
* globus-gssapi-gsi 11.20
* globus-xio-gsi-driver 3.8
* myproxy 6.1.15
https://globus.atlassian.net/browse/GT-614
https://globus.atlassian.net/browse/GT-615
https://globus.atlassian.net/browse/GT-616
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 3.8-1
- GT6 update
- GT-615: GSI XIO driver uses resolved IP address when importing names
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-github-cenkalti-backoff-0-0.2.git9831e1e.fc21 (FEDORA-2015-12333)
The exponential backoff algorithm in Go
--------------------------------------------------------------------------------
Update Information:
Update of spec file to spec-2.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.2.git9831e1e
- Update of spec file to spec-2.0
resolves: #1248129
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248129 - Tracker for golang-github-cenkalti-backoff
https://bugzilla.redhat.com/show_bug.cgi?id=1248129
--------------------------------------------------------------------------------
================================================================================
golang-github-kr-pretty-0-0.5.gitf31442d.fc21 (FEDORA-2015-12331)
Provides pretty-printing for go values
--------------------------------------------------------------------------------
Update Information:
Update of spec file to spec-2.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.5.gitf31442d
- Update of spec file to spec-2.0
resolves: #1248169
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0-0.4.gitf31442d
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248169 - Tracker for golang-github-kr-pretty
https://bugzilla.redhat.com/show_bug.cgi?id=1248169
--------------------------------------------------------------------------------
================================================================================
golang-github-kr-text-0-0.5.git6807e77.fc21 (FEDORA-2015-12338)
Go package for manipulating paragraphs of text
--------------------------------------------------------------------------------
Update Information:
Update of spec file to spec-2.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.5.git6807e77
- Update of spec file to spec-2.0
resolves: #1248175
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0-0.4.git6807e77
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Fri Sep 19 2014 Jan Chaloupka <jchaloup(a)fedoraproject.org> - 0-0.3.git6807e77
- add golang version with necessary golang macros
- quiet setup
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248175 - Tracker for golang-github-kr-text
https://bugzilla.redhat.com/show_bug.cgi?id=1248175
--------------------------------------------------------------------------------
================================================================================
golang-github-onsi-gomega-0-0.4.git8adf9e1.fc21 (FEDORA-2015-12343)
Ginkgo's Preferred Matcher Library
--------------------------------------------------------------------------------
Update Information:
Update of spec file to spec-2.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 Fridolin Pokorny <fpokorny(a)redhat.com> - 0-0.1.git8adf9e1
- Update of spec file to spec-2.0
resolves: #1248013
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0-0.4.git8adf9e1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248013 - Tracker for golang-github-onsi-gomega
https://bugzilla.redhat.com/show_bug.cgi?id=1248013
--------------------------------------------------------------------------------
================================================================================
golang-github-tonnerre-golang-pretty-0-0.3.gite7fccc0.fc21 (FEDORA-2015-12346)
Pretty printing for Go values
http://godoc.org/github.com/kr/pretty
--------------------------------------------------------------------------------
Update Information:
Update of spec file to spec-2.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.3.gite7fccc0
- Update of spec file to spec-2.0
resolves: #1248184
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0-0.2.gite7fccc0
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248184 - Tracker for golang-github-tonnerre-golang-pretty
https://bugzilla.redhat.com/show_bug.cgi?id=1248184
--------------------------------------------------------------------------------
================================================================================
golang-github-vaughan0-go-ini-0-0.5.gita98ad7e.fc21 (FEDORA-2015-12342)
INI parsing library for Go
--------------------------------------------------------------------------------
Update Information:
Update of spec file to spec-2.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.5.gita98ad7e
- Update of spec file to spec-2.0
resolves: #1248163
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0-0.4.gita98ad7e
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248163 - Tracker for golang-github-vaughan0-go-ini
https://bugzilla.redhat.com/show_bug.cgi?id=1248163
--------------------------------------------------------------------------------
================================================================================
golang-github-vishvananda-netlink-0-0.4.git991a7a2.fc21 (FEDORA-2015-12352)
Simple netlink library for go
--------------------------------------------------------------------------------
Update Information:
Update of spec file to spec-2.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.4.git991a7a2
- Update of spec file to spec-2.0
resolves: #1248155
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0-0.3.git991a7a2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248155 - Tracker for golang-github-vishvananda-netlink
https://bugzilla.redhat.com/show_bug.cgi?id=1248155
--------------------------------------------------------------------------------
================================================================================
golang-github-vishvananda-netns-0-0.4.git5478c06.fc21 (FEDORA-2015-12351)
Simple network namespace handling for go
--------------------------------------------------------------------------------
Update Information:
Update of spec file to spec-2.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.4.git5478c06
- Update of spec file to spec-2.0
resolves: #1248150
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0-0.3.git5478c06
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat Jun 6 2015 Adam Miller <maxamillion(a)fedoraproject.org> - 0-0.2.git5478c06
- Update to latest upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248150 - Tracker for golang-github-vishvananda-netns
https://bugzilla.redhat.com/show_bug.cgi?id=1248150
--------------------------------------------------------------------------------
================================================================================
golang-github-vmware-govcloudair-0-0.2.git0d7be90.fc21 (FEDORA-2015-12350)
VCloud Air API bindings for Golang
--------------------------------------------------------------------------------
Update Information:
Update of spec file to spec-2.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 jchaloup <jchaloup(a)redhat.com> - 0-0.2.git0d7be90
- Update of spec file to spec-2.0
resolves: #1248147
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248147 - Tracker for golang-github-vmware-govcloudair
https://bugzilla.redhat.com/show_bug.cgi?id=1248147
--------------------------------------------------------------------------------
================================================================================
golang-gopkg-check-0-6.fc21 (FEDORA-2015-12354)
Rich testing for the Go language
--------------------------------------------------------------------------------
Update Information:
Update of spec file to spec-2.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 jchaloup <jchaloup(a)redhat.com> - 0-6
- Update of spec file to spec-2.0
resolves: #1248138
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248138 - Tracker for golang-gopkg-check
https://bugzilla.redhat.com/show_bug.cgi?id=1248138
--------------------------------------------------------------------------------
================================================================================
kernel-4.1.3-100.fc21 (FEDORA-2015-12332)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.1.3 rebase contains a number of important fixes across the tree
The 4.0.9 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 Laura Abbott <labbott(a)fedoraproject.org> - 4.1.3-100
- Change tag for build since a previous build never happened
* Mon Jul 27 2015 Laura Abbott <labbott(a)fedoraproject.org>
- CVE-2015-3290 CVE-2015-3291 NMI issues (rhbz 1243465 1245927)
* Mon Jul 27 2015 Josh Boyer <jwboyer(a)fedoraproject.org>
- CVE-2015-1333 add_key memory leak (rhbz 1244171)
* Thu Jul 23 2015 Laura Abbott <labbott(a)fedoraproject.org>
- Linux v4.1.3 rebase
- Fix warning from pcmcia (rhbz 1180920 1206724)
* Wed Jul 22 2015 Laura Abbott <labbott(a)fedoraproject.org> - 4.0.9-200
- Linux v4.0.9
- Add patches for Ideapad RF switches (rhbz 1192270)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1192270 - ideapad-laptop probably needs to be blacklisted on Lenovo g50-30
https://bugzilla.redhat.com/show_bug.cgi?id=1192270
--------------------------------------------------------------------------------
================================================================================
mate-themes-1.10.3-1.fc21 (FEDORA-2015-12363)
MATE Desktop themes
--------------------------------------------------------------------------------
Update Information:
- update to 1.10.3 release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 1.10.3-1
- update to 1.10.3 release
--------------------------------------------------------------------------------
================================================================================
myproxy-6.1.15-1.fc21 (FEDORA-2015-12339)
Manage X.509 Public Key Infrastructure (PKI) security credentials
--------------------------------------------------------------------------------
Update Information:
Globus Toolkit updates from upstream
* globus-gssapi-gsi 11.20
* globus-xio-gsi-driver 3.8
* myproxy 6.1.15
https://globus.atlassian.net/browse/GT-614
https://globus.atlassian.net/browse/GT-615
https://globus.atlassian.net/browse/GT-616
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 6.1.15-1
- Update to 6.1.15
- GT-616: Myproxy uses resolved IP address when importing names
--------------------------------------------------------------------------------
================================================================================
pulseaudio-equalizer-2.7-16.fc21 (FEDORA-2015-12360)
A 15 Bands Equalizer for PulseAudio
--------------------------------------------------------------------------------
Update Information:
* Fixing unwanted audio mute when adjusting the equalizer
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 Jaromir Capik <jcapik(a)redhat.com> - 2.7-16
- Fixing audio mute when adjusting the equalizer (#1046589)
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
2.7-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1046589 - Enable/disable/adjust pulseaudio-equalizer and audio mutes
https://bugzilla.redhat.com/show_bug.cgi?id=1046589
--------------------------------------------------------------------------------
================================================================================
python-pillow-2.6.2-2.fc21 (FEDORA-2015-12361)
Python image processing library
--------------------------------------------------------------------------------
Update Information:
This update fixes python3-pillow-tk incorrectly depending on tkinter instead of
python3-tkinter.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 Sandro Mani <manisandro(a)gmail.com> - 2.6.2-2
- Fix python3-pillow-tk Requires: tkinter -> python3-tkinter (#1248085)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248085 - python3-pillow-tk must depend of python3-tkinter, not tkinter
https://bugzilla.redhat.com/show_bug.cgi?id=1248085
--------------------------------------------------------------------------------
================================================================================
remind-03.01.15-1.fc21 (FEDORA-2015-12340)
A sophisticated calendar and alarm program
--------------------------------------------------------------------------------
Update Information:
* Fix a buffer overflow found by Alexander Keller
* Fix a typo in the NEWS
* Make parser reject an AT followed by more than one time.
* Make parser reject epeated delta or *repeat values.
* The "-n" command-line option need to run in "ADVANCE_MODE" rather
than "CAL_MODE" internally; otherwise, the substitution sequences may be
misinterpreted.
* A typo in clearing out MD5 sum context has been fixed.
* Typo in Spanish translation was fixed.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 29 2015 Jaromir Capik <jcapik(a)redhat.com> - 03.01.15-1
- Updating to 03.01.15 (#1215295)
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
03.01.13-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1215295 - remind-03.01.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1215295
--------------------------------------------------------------------------------
================================================================================
systemtap-2.8-1.fc21 (FEDORA-2015-12349)
Programmable system-wide instrumentation system
--------------------------------------------------------------------------------
Update Information:
Upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 17 2015 Abegail Jakop <ajakop(a)redhat.com> - 2.8-1
- Upstream release.
* Tue May 12 2015 Josh Stone <jistone(a)redhat.com> - 2.7-2
- Disable ICF when checking for available tracepoints.
--------------------------------------------------------------------------------
================================================================================
thefuck-1.48-1.fc21 (FEDORA-2015-12365)
App that corrects your previous console command
--------------------------------------------------------------------------------
Update Information:
Initial spec
--------------------------------------------------------------------------------