The following Fedora 21 Security updates need testing:
Age URL
213
https://bodhi.fedoraproject.org/updates/FEDORA-2015-1467
openstack-glance-2014.1.3-4.fc21
94
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9090 fossil-1.33-1.fc21
94
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9141
ceph-deploy-1.5.25-1.fc21
83
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9744 squid-3.4.13-1.fc21
72
https://bodhi.fedoraproject.org/updates/FEDORA-2015-10301
389-ds-base-1.3.3.12-1.fc21
26
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12773
python-kdcproxy-0.3.2-1.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13700
drupal6-views_bulk_operations-1.17-1.fc21
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13423 php-twig-1.20.0-1.fc21
10
https://bodhi.fedoraproject.org/updates/conntrack-tools-1.4.2-9.fc21
conntrack-tools-1.4.2-9.fc21
10
https://bodhi.fedoraproject.org/updates/mediawiki-1.24.3-1.fc21
mediawiki-1.24.3-1.fc21
10
https://bodhi.fedoraproject.org/updates/ca-certificates-2015.2.5-1.0.fc21
ca-certificates-2015.2.5-1.0.fc21
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13917 drupal7-7.39-1.fc21
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13926
gdk-pixbuf2-2.31.6-1.fc21
9
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14010
mingw-gdk-pixbuf-2.31.6-1.fc21
6
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14179 libreswan-3.15-1.fc21
6
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14200 sblim-sfcb-1.4.8-5.fc21
6
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14211 ntp-4.2.6p5-33.fc21
6
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14242 pcre-8.35-14.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14330
drupal6-ctools-1.14-1.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14363 xen-4.4.3-1.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14442 drupal6-6.37-1.fc21
0
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14715 onionshare-0.7.1-1.fc21
0
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14785 qemu-2.1.3-10.fc21
The following Fedora 21 Critical Path updates have yet to be approved:
Age URL
158
https://bodhi.fedoraproject.org/updates/FEDORA-2015-4638 lcms2-2.7-1.fc21
45
https://bodhi.fedoraproject.org/updates/FEDORA-2015-11787
redhat-rpm-config-29-1.fc21
33
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12212 perl-Filter-1.55-1.fc21
32
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12402
gstreamer1-plugins-good-1.4.5-3.fc21
31
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12575 perl-Encode-2.76-1.fc21
20
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13233
yum-utils-1.1.31-28.fc21
20
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13239 yum-3.4.3-154.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13654 bash-4.3.42-1.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13747 hwdata-0.281-1.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13745 kernel-4.1.6-100.fc21
13
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13673
python-slip-0.6.3-1.fc21
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13926
gdk-pixbuf2-2.31.6-1.fc21
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13908 librsvg2-2.40.10-1.fc21
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13885
thunderbird-38.2.0-2.fc21
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13877 libteam-1.18-1.fc21
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13805 tigervnc-1.5.0-2.fc21
10
https://bodhi.fedoraproject.org/updates/dracut-038-40.git20150819.fc21
dracut-038-40.git20150819.fc21
10
https://bodhi.fedoraproject.org/updates/ca-certificates-2015.2.5-1.0.fc21
ca-certificates-2015.2.5-1.0.fc21
10
https://bodhi.fedoraproject.org/updates/btrfs-progs-4.1.2-1.fc21
btrfs-progs-4.1.2-1.fc21
9
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14019 nss-3.20.0-1.0.fc21
nss-softokn-3.20.0-1.0.fc21 nss-util-3.20.0-1.0.fc21
7
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14135
libpwquality-1.2.4-3.fc21
7
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14070
selinux-policy-3.13.1-105.21.fc21
7
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14065
perl-generators-1.04-1.fc21
6
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14242 pcre-8.35-14.fc21
6
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14209 vim-7.4.827-1.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14405 abrt-2.3.0-10.fc21
libreport-2.3.0-9.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14323 dnf-0.6.4-6.fc21
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-14307
perl-Thread-Queue-3.06-1.fc21
The following builds have been pushed to Fedora 21 updates-testing
Pound-2.7-1.fc21
golang-github-coreos-go-etcd-2.0.0-0.3.git4cceaf7.fc21
golang-github-coreos-go-iptables-0-0.1.git74b0926.fc21
groonga-5.0.7-1.fc21
java-atk-wrapper-0.33.2-0.fc21
nodejs-typeahead.js-0.10.5-3.fc21
publicsuffix-list-20150831-1.fc21
qemu-2.1.3-10.fc21
rear-1.17.2-1.fc21
shellinabox-2.18-1.fc21
udiskie-1.2.1-1.fc21
wine-1.7.50-1.fc21
Details about builds:
================================================================================
Pound-2.7-1.fc21 (FEDORA-2015-14781)
Reverse proxy and load balancer
--------------------------------------------------------------------------------
Update Information:
* update to 2.7 final (#1258262) * drop huge downstream patch which caused PID
file related issues (#1097409)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1258262 - weak Diffie-Hellman keys
https://bugzilla.redhat.com/show_bug.cgi?id=1258262
[ 2 ] Bug #1097409 - Pound PID file issue
https://bugzilla.redhat.com/show_bug.cgi?id=1097409
--------------------------------------------------------------------------------
================================================================================
golang-github-coreos-go-etcd-2.0.0-0.3.git4cceaf7.fc21 (FEDORA-2015-14733)
Go client library for etcd
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 4cceaf7283b76f27c4a732b20730dcdb61053bf5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1246214 - Tracker for golang-github-coreos-go-etcd
https://bugzilla.redhat.com/show_bug.cgi?id=1246214
--------------------------------------------------------------------------------
================================================================================
golang-github-coreos-go-iptables-0-0.1.git74b0926.fc21 (FEDORA-2015-14793)
Go wrapper around iptables utility
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1258878 - Review Request: golang-github-coreos-go-iptables - Go wrapper
around iptables utility
https://bugzilla.redhat.com/show_bug.cgi?id=1258878
--------------------------------------------------------------------------------
================================================================================
groonga-5.0.7-1.fc21 (FEDORA-2015-14778)
An Embeddable Fulltext Search Engine
--------------------------------------------------------------------------------
Update Information:
new upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1258450 - groonga-5.0.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1258450
--------------------------------------------------------------------------------
================================================================================
java-atk-wrapper-0.33.2-0.fc21 (FEDORA-2015-14740)
Java ATK Wrapper
--------------------------------------------------------------------------------
Update Information:
updated t 0.33.2
--------------------------------------------------------------------------------
================================================================================
nodejs-typeahead.js-0.10.5-3.fc21 (FEDORA-2015-14729)
Autocomplete library for JavaScript
--------------------------------------------------------------------------------
Update Information:
Inspired by twitter.com's autocomplete search functionality, typeahead.js is a
flexible JavaScript library that provides a strong foundation for building
robust typeaheads.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1151818 - Review Request: nodejs-typeahead.js - Autocomplete library for
JavaScript
https://bugzilla.redhat.com/show_bug.cgi?id=1151818
--------------------------------------------------------------------------------
================================================================================
publicsuffix-list-20150831-1.fc21 (FEDORA-2015-14730)
Cross-vendor public domain suffix database
--------------------------------------------------------------------------------
Update Information:
The latest revision - 20150831
--------------------------------------------------------------------------------
================================================================================
qemu-2.1.3-10.fc21 (FEDORA-2015-14785)
QEMU is a FAST! processor emulator
--------------------------------------------------------------------------------
Update Information:
* CVE-2015-5225: heap memory corruption in vnc_refresh_server_surface (bz
#1255899)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1255896 - CVE-2015-5225 Qemu: ui: vnc: heap memory corruption in
vnc_refresh_server_surface
https://bugzilla.redhat.com/show_bug.cgi?id=1255896
--------------------------------------------------------------------------------
================================================================================
rear-1.17.2-1.fc21 (FEDORA-2015-14770)
Relax-and-Recover is a Linux disaster recovery and system migration tool
--------------------------------------------------------------------------------
Update Information:
For a changelog see the rear-release-notes.txt file.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1239009 - rear: Insecure temporary file usage
https://bugzilla.redhat.com/show_bug.cgi?id=1239009
--------------------------------------------------------------------------------
================================================================================
shellinabox-2.18-1.fc21 (FEDORA-2015-14777)
Web based AJAX terminal emulator
--------------------------------------------------------------------------------
Update Information:
- Fixed handling of large HTTP packets - Fixed services cleanup on session
timeout - Added logging to system log files for important/fatal errors - Support
for perfect forward secrecy (SSL) - Disabled secure client initiated
renegotiations (SSL) - Minor CSS fixes - SSL security issues - Firefox
international keyboard issue - 256 color support - Message passing support for
embedded shellinabox - Unix domain socket support - Real IP recognition over
proxy - Other minor bug fixes and improvements - Packaging: add license macro,
switch to GitHub sources
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1252109 - We package an unmaintained fork of shellinabox
https://bugzilla.redhat.com/show_bug.cgi?id=1252109
--------------------------------------------------------------------------------
================================================================================
udiskie-1.2.1-1.fc21 (FEDORA-2015-14753)
Removable disk auto-mounter
--------------------------------------------------------------------------------
Update Information:
udiskie-1.2.1-1.fc21 - Update to 1.2.1. udiskie-1.2.1-1.fc22 - Update to
1.2.1. udiskie-1.2.1-1.el7 - Update to 1.2.1. udiskie-1.2.1-1.fc23 -
Update to 1.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1258675 - udiskie-1.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1258675
--------------------------------------------------------------------------------
================================================================================
wine-1.7.50-1.fc21 (FEDORA-2015-14728)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
* First steps of the Direct3D 11 implementation. * Better font matching in
DirectWrite. * Support for OpenMP on ARM platforms * Various bug fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1256197 - wine-1.7.50 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1256197
--------------------------------------------------------------------------------