The following Fedora 21 Security updates need testing:
Age URL
260
https://bodhi.fedoraproject.org/updates/FEDORA-2015-1467
openstack-glance-2014.1.3-4.fc21
140
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9141
ceph-deploy-1.5.25-1.fc21
129
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9744 squid-3.4.13-1.fc21
73
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12773
python-kdcproxy-0.3.2-1.fc21
56
https://bodhi.fedoraproject.org/updates/FEDORA-2015-1fed73bab8
conntrack-tools-1.4.2-9.fc21
52
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14179 libreswan-3.15-1.fc21
52
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14200 sblim-sfcb-1.4.8-5.fc21
52
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14211 ntp-4.2.6p5-33.fc21
44
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14852 libwmf-0.2.8.4-46.fc21
33
https://bodhi.fedoraproject.org/updates/FEDORA-2015-15768 bugzilla-4.4.10-1.fc21
27
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16238 nagios-4.0.8-1.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-71973a6d71
pixman-0.32.8-1.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-af1b712fce
python-pymongo-3.0.3-1.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-d292a98f01
cyrus-imapd-2.4.18-1.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-048e95ac1d
thunderbird-38.3.0-1.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-111f449417
community-mysql-5.6.27-1.fc21
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-d7e074ba30
kernel-4.1.10-100.fc21
9
https://bodhi.fedoraproject.org/updates/FEDORA-2015-cdea5324a8 sssd-1.12.5-4.fc21
8
https://bodhi.fedoraproject.org/updates/FEDORA-2015-d683ebb786
postgresql-9.3.10-1.fc21
8
https://bodhi.fedoraproject.org/updates/FEDORA-2015-3ca3f2138b
libvdpau-1.1.1-2.fc21
6
https://bodhi.fedoraproject.org/updates/FEDORA-2015-1f9e79df21
audiofile-0.3.6-9.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-accdc7ebfc
ganglia-3.7.2-6.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-bb714cae5f
drupal7-jquery_update-2.6-1.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-012399857d
seamonkey-2.38-1.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-30a417bea9
mbedtls-1.3.14-1.fc21
3
https://bodhi.fedoraproject.org/updates/FEDORA-2015-d8510319c0 xen-4.4.3-6.fc21
2
https://bodhi.fedoraproject.org/updates/FEDORA-2015-15290 ipsilon-1.1.1-2.fc21
2
https://bodhi.fedoraproject.org/updates/FEDORA-2015-ee8299a008
drupal7-active_tags-2.0-0.9.alpha1.fc21
0
https://bodhi.fedoraproject.org/updates/FEDORA-2015-b8534a1aec
firefox-41.0.2-2.fc21
0
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6542ab6d3a
libreport-2.3.0-10.fc21 abrt-2.3.0-12.fc21
The following Fedora 21 Critical Path updates have yet to be approved:
Age URL
205
https://bodhi.fedoraproject.org/updates/FEDORA-2015-4638 lcms2-2.7-1.fc21
91
https://bodhi.fedoraproject.org/updates/FEDORA-2015-11787
redhat-rpm-config-29-1.fc21
78
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12402
gstreamer1-plugins-good-1.4.5-3.fc21
66
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13239 yum-3.4.3-154.fc21
56
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13877 libteam-1.18-1.fc21
56
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13805 tigervnc-1.5.0-2.fc21
56
https://bodhi.fedoraproject.org/updates/FEDORA-2015-90d3a9ce48
dracut-038-40.git20150819.fc21
56
https://bodhi.fedoraproject.org/updates/FEDORA-2015-37e78bb9af
btrfs-progs-4.1.2-1.fc21
20
https://bodhi.fedoraproject.org/updates/FEDORA-2015-5d4e159c10
python-2.7.8-15.fc21 python3-3.4.1-18.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-048e95ac1d
thunderbird-38.3.0-1.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-b22ba553bf
kde-baseapps-15.04.3-1.fc21.1 kde-runtime-15.08.1-1.fc21 kdelibs-4.14.12-1.fc21
kdepimlibs-4.14.10-3.fc21 oxygen-icon-theme-15.04.3-2.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-ff9eaa3e01
device-mapper-multipath-0.4.9-68.fc21.6
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-71973a6d71
pixman-0.32.8-1.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16119 avahi-0.6.31-43.fc21
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9e6a99b895
gnome-terminal-3.14.3-2.fc21
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-145685a32d
perl-Encode-2.78-1.fc21
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-d7e074ba30
kernel-4.1.10-100.fc21
7
https://bodhi.fedoraproject.org/updates/FEDORA-2015-aabc904fe3
elfutils-0.163-4.fc21
7
https://bodhi.fedoraproject.org/updates/FEDORA-2015-a1ee5e3a32 fuse-2.9.4-3.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-1eb4524928
linux-firmware-20151012-57.gitd82d3c1e.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-fda676f6c9
perl-generators-1.06-1.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-d5ebbad574
nss-3.20.0-1.1.1.fc21
1
https://bodhi.fedoraproject.org/updates/FEDORA-2015-f01da0e4b8
spatialite-tools-4.2.0-15.fc21 sqlite-3.9.0-1.fc21
0
https://bodhi.fedoraproject.org/updates/FEDORA-2015-6542ab6d3a
libreport-2.3.0-10.fc21 abrt-2.3.0-12.fc21
0
https://bodhi.fedoraproject.org/updates/FEDORA-2015-b8534a1aec
firefox-41.0.2-2.fc21
The following builds have been pushed to Fedora 21 updates-testing
abrt-2.3.0-12.fc21
firefox-41.0.2-2.fc21
fldigi-3.23.04-1.fc21
gnome-shell-extension-openweather-1-0.7.20151017git34aa242.fc21
gnome-software-3.14.7-2.fc21
golang-github-MakeNowJust-heredoc-0-0.1.git1d91351.fc21
golang-github-RangelReale-osincli-0-0.1.git23618ea.fc21
hamlib-3.0-3.fc21
libreport-2.3.0-10.fc21
magic-8.0.210-1.fc21
mate-screensaver-1.10.2-3.fc21
openscap-1.2.6-3.fc21
perl-CPANPLUS-0.91.56-1.fc21
php-pdepend-PHP-Depend-2.2.2-1.fc21
python-alembic-0.8.3-1.fc21
qtspell-0.8.0-1.fc21
smb4k-1.2.1-1.fc21
zookeeper-3.4.6-11.fc21
Details about builds:
================================================================================
abrt-2.3.0-12.fc21 (FEDORA-2015-6542ab6d3a)
Automatic bug detection and reporting tool
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2015-5302 abrt-2.3.0-12.fc21 - doc: fix default
DumpLocation in abrt.conf man page - bodhi: fix typo in error messages - abrt-
dump-xorg: support Xorg log backtraces prefixed by (EE libreport-2.3.0-10.fc21
- fix save users changes after reviewing dump dir files - Resolves CVE-2015-5302
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1270903 - CVE-2015-5302 libreport: Possible private data leak in Bugzilla
bugs opened by ABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1270903
--------------------------------------------------------------------------------
================================================================================
firefox-41.0.2-2.fc21 (FEDORA-2015-b8534a1aec)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
firefox-41.0.2-2.fc21 - Update to 41.0.2 firefox-41.0.2-2.fc22 - Update to
41.0.2 firefox-41.0.2-2.fc23 - Update to 41.0.2 ---- firefox-41.0-6.fc21
- Rebuilt for old sqlite which is available in updates firefox-41.0-6.fc22 -
Rebuilt for old sqlite which is available in updates firefox-41.0-6.fc23 -
Rebuilt for old sqlite which is available in updates ----
firefox-41.0-4.fc21 - New upstream 41.0 firefox-41.0-4.fc22 - New upstream 41.0
firefox-41.0-4.fc23 - New upstream 41.0
--------------------------------------------------------------------------------
================================================================================
fldigi-3.23.04-1.fc21 (FEDORA-2015-d74ce6f302)
Digital modem program for Linux
--------------------------------------------------------------------------------
Update Information:
fldigi-3.23.04: CW filter * Corrected implementation of CW filter bandwidth
thor-image * add image transfer to thor based on IFKP image processing -
supported by THOR-11, THOR-16 and THOR-22 - image modes are identical to
IFKP images, fixed sizes and avatar. Update Check * change update check
location to Source Forge fsq abort * correct escape key abort behavior on
Win platform log merge * change merge behavior when parsing unknown field
name hamlib-3.0-3: - Fix devel package dependency on tcl-hamlib.
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-openweather-1-0.7.20151017git34aa242.fc21 (FEDORA-2015-b1924702b4)
Display weather information from many locations in the world
--------------------------------------------------------------------------------
Update Information:
Bug fix: warn message for empty forecast.io api-key was shown if the key exists
--------------------------------------------------------------------------------
================================================================================
gnome-software-3.14.7-2.fc21 (FEDORA-2015-a57301c682)
A software center for GNOME
--------------------------------------------------------------------------------
Update Information:
This update fixes a potential crash when repeatedly installing/removing apps.
--------------------------------------------------------------------------------
================================================================================
golang-github-MakeNowJust-heredoc-0-0.1.git1d91351.fc21 (FEDORA-2015-0415afb5d5)
Package heredoc provides the here-document with keeping indent
--------------------------------------------------------------------------------
Update Information:
New package in Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1269576 - Review Request: golang-github-MakeNowJust-heredoc - Package heredoc
provides the here-document with keeping inden
https://bugzilla.redhat.com/show_bug.cgi?id=1269576
--------------------------------------------------------------------------------
================================================================================
golang-github-RangelReale-osincli-0-0.1.git23618ea.fc21 (FEDORA-2015-3f2c29f7db)
Golang OAuth2 client library
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1269579 - Review Request: golang-github-RangelReale-osincli - Golang OAuth2
client library
https://bugzilla.redhat.com/show_bug.cgi?id=1269579
--------------------------------------------------------------------------------
================================================================================
hamlib-3.0-3.fc21 (FEDORA-2015-d74ce6f302)
Run-time library to control radio transceivers and receivers
--------------------------------------------------------------------------------
Update Information:
fldigi-3.23.04: CW filter * Corrected implementation of CW filter bandwidth
thor-image * add image transfer to thor based on IFKP image processing -
supported by THOR-11, THOR-16 and THOR-22 - image modes are identical to
IFKP images, fixed sizes and avatar. Update Check * change update check
location to Source Forge fsq abort * correct escape key abort behavior on
Win platform log merge * change merge behavior when parsing unknown field
name hamlib-3.0-3: - Fix devel package dependency on tcl-hamlib.
--------------------------------------------------------------------------------
================================================================================
libreport-2.3.0-10.fc21 (FEDORA-2015-6542ab6d3a)
Generic library for reporting various problems
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2015-5302 abrt-2.3.0-12.fc21 - doc: fix default
DumpLocation in abrt.conf man page - bodhi: fix typo in error messages - abrt-
dump-xorg: support Xorg log backtraces prefixed by (EE libreport-2.3.0-10.fc21
- fix save users changes after reviewing dump dir files - Resolves CVE-2015-5302
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1270903 - CVE-2015-5302 libreport: Possible private data leak in Bugzilla
bugs opened by ABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1270903
--------------------------------------------------------------------------------
================================================================================
magic-8.0.210-1.fc21 (FEDORA-2015-a3de73b8e1)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.0.210 is released. ---- Some tcl related files were missing.
This new rpm should fix this issue.
--------------------------------------------------------------------------------
================================================================================
mate-screensaver-1.10.2-3.fc21 (FEDORA-2015-877efe384a)
MATE Screensaver
--------------------------------------------------------------------------------
Update Information:
mate-screensaver-1.10.2-3.fc21 - revert 'Lock the screen on systemd sleep
under systemd'
--------------------------------------------------------------------------------
================================================================================
openscap-1.2.6-3.fc21 (FEDORA-2015-392856f9e5)
Set of open source libraries enabling integration of the SCAP line of standards
--------------------------------------------------------------------------------
Update Information:
fix oscap-docker shebang
--------------------------------------------------------------------------------
================================================================================
perl-CPANPLUS-0.91.56-1.fc21 (FEDORA-2015-6a7ef4da1f)
Ameliorated interface to the Comprehensive Perl Archive Network
--------------------------------------------------------------------------------
Update Information:
This release fixes handling distribution names that end with numerals and it
performs builds in uniquely named directories.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1272278 - perl-CPANPLUS-0.9156 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1272278
--------------------------------------------------------------------------------
================================================================================
php-pdepend-PHP-Depend-2.2.2-1.fc21 (FEDORA-2015-ad318be7cc)
PHP_Depend design quality metrics for PHP package
--------------------------------------------------------------------------------
Update Information:
**Version 2.2.2** This release adds a new analyzer that can be used to
visualize namespace dependencies. Features * Implemented #221: Added line
numbers to summary log. Implemented in commit #a975553. * Implemented #222:
Calculate type dependencies. Implemented in commit #8a924f6.
--------------------------------------------------------------------------------
================================================================================
python-alembic-0.8.3-1.fc21 (FEDORA-2015-2cdd10151a)
Database migration tool for SQLAlchemy
--------------------------------------------------------------------------------
Update Information:
https://alembic.readthedocs.org/en/latest/changelog.html#change-0.8.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1272623 - python-alembic-0.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1272623
--------------------------------------------------------------------------------
================================================================================
qtspell-0.8.0-1.fc21 (FEDORA-2015-7cfacb15bb)
Spell checking for Qt text widgets
--------------------------------------------------------------------------------
Update Information:
Update to version 0.8.0, see
https://github.com/manisandro/qtspell/releases/tag/0.8.0 for details.
--------------------------------------------------------------------------------
================================================================================
smb4k-1.2.1-1.fc21 (FEDORA-2015-fc0604e5ef)
The SMB/CIFS Share Browser for KDE
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1268662 - smb4k-1.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1268662
--------------------------------------------------------------------------------
================================================================================
zookeeper-3.4.6-11.fc21 (FEDORA-2015-d71fcc2e48)
A high-performance coordination service for distributed applications
--------------------------------------------------------------------------------
Update Information:
Fix bad rollback. Rollback to netty 3.6.6, not 3.7.0 (f21 only)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1261458 - Zookeeper service fails to start due to classpath errors, logging
no error
https://bugzilla.redhat.com/show_bug.cgi?id=1261458
--------------------------------------------------------------------------------