The following Fedora 21 Security updates need testing: Age URL 289 https://bodhi.fedoraproject.org/updates/FEDORA-2015-1467 openstack-glance-2014.1.3-4.fc21 170 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9141 ceph-deploy-1.5.25-1.fc21 159 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9744 squid-3.4.13-1.fc21 102 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12773 python-kdcproxy-0.3.2-1.fc21 86 https://bodhi.fedoraproject.org/updates/FEDORA-2015-1fed73bab8 conntrack-tools-1.4.2-9.fc21 82 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14179 libreswan-3.15-1.fc21 82 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14200 sblim-sfcb-1.4.8-5.fc21 74 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14852 libwmf-0.2.8.4-46.fc21 57 https://bodhi.fedoraproject.org/updates/FEDORA-2015-16238 nagios-4.0.8-1.fc21 43 https://bodhi.fedoraproject.org/updates/FEDORA-2015-af1b712fce python-pymongo-3.0.3-1.fc21 43 https://bodhi.fedoraproject.org/updates/FEDORA-2015-d292a98f01 cyrus-imapd-2.4.18-1.fc21 43 https://bodhi.fedoraproject.org/updates/FEDORA-2015-048e95ac1d thunderbird-38.3.0-1.fc21 38 https://bodhi.fedoraproject.org/updates/FEDORA-2015-d683ebb786 postgresql-9.3.10-1.fc21 36 https://bodhi.fedoraproject.org/updates/FEDORA-2015-1f9e79df21 audiofile-0.3.6-9.fc21 29 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6542ab6d3a libreport-2.3.0-10.fc21 abrt-2.3.0-12.fc21 14 https://bodhi.fedoraproject.org/updates/FEDORA-2015-47cf97f125 git-2.1.0-6.fc21 14 https://bodhi.fedoraproject.org/updates/FEDORA-2015-fed35dffd7 perl-HTML-Scrubber-0.15-1.fc21 14 https://bodhi.fedoraproject.org/updates/FEDORA-2015-69e6c3607f miniupnpc-1.9-6.fc21 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-240dd21cb6 perl-IPTables-Parse-1.5-2.fc21 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-0080239274 sudo-1.8.15-1.fc21 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-446074b60f m2crypto-0.22.5-2.fc21 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-200d2dfd9f krb5-1.12.2-19.fc21 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-0f405832d3 libsndfile-1.0.25-16.fc21 7 https://bodhi.fedoraproject.org/updates/FEDORA-2015-f92fd549f1 libreoffice-4.3.7.2-13.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-e75992a62a putty-0.65-2.fc21 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-a3965fd800 pdns-3.4.7-1.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-a275fd68f2 zarafa-7.1.14-1.fc21 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-f150b2a8c8 xen-4.4.3-8.fc21 3 https://bodhi.fedoraproject.org/updates/FEDORA-2015-f2c534bc12 kernel-4.1.13-100.fc21 3 https://bodhi.fedoraproject.org/updates/FEDORA-2015-501493d853 libpng10-1.0.64-1.fc21 3 https://bodhi.fedoraproject.org/updates/FEDORA-2015-038912089d sundials-2.6.2-11.fc21 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-68f5a5ba94 ProDy-1.7.1-1.fc21 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-5a9d60c28e potrace-1.13-2.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-bee38cd15f monitorix-3.8.1-1.fc21
The following Fedora 21 Critical Path updates have yet to be approved: Age URL 108 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12402 gstreamer1-plugins-good-1.4.5-3.fc21 96 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13239 yum-3.4.3-154.fc21 86 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13877 libteam-1.18-1.fc21 86 https://bodhi.fedoraproject.org/updates/FEDORA-2015-90d3a9ce48 dracut-038-40.git20150819.fc21 86 https://bodhi.fedoraproject.org/updates/FEDORA-2015-37e78bb9af btrfs-progs-4.1.2-1.fc21 43 https://bodhi.fedoraproject.org/updates/FEDORA-2015-048e95ac1d thunderbird-38.3.0-1.fc21 43 https://bodhi.fedoraproject.org/updates/FEDORA-2015-ff9eaa3e01 device-mapper-multipath-0.4.9-68.fc21.6 31 https://bodhi.fedoraproject.org/updates/FEDORA-2015-f01da0e4b8 spatialite-tools-4.2.0-15.fc21 sqlite-3.9.0-1.fc21 29 https://bodhi.fedoraproject.org/updates/FEDORA-2015-6542ab6d3a libreport-2.3.0-10.fc21 abrt-2.3.0-12.fc21 21 https://bodhi.fedoraproject.org/updates/FEDORA-2015-311e897518 dnsmasq-2.75-2.fc21 21 https://bodhi.fedoraproject.org/updates/FEDORA-2015-830a68baaa createrepo_c-0.9.1-1.fc21 19 https://bodhi.fedoraproject.org/updates/FEDORA-2015-06f119f03c hwdata-0.283-1.fc21 14 https://bodhi.fedoraproject.org/updates/FEDORA-2015-38c68e7875 linux-firmware-20151030-58.git66d3d8d7.fc21 14 https://bodhi.fedoraproject.org/updates/FEDORA-2015-607cc1b079 gdisk-1.0.1-1.fc21 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-cd8384936c perl-Getopt-Long-2.48-1.fc21 11 https://bodhi.fedoraproject.org/updates/FEDORA-2015-315b5f87f0 vim-7.4.909-1.fc21 11 https://bodhi.fedoraproject.org/updates/FEDORA-2015-64068a1f08 crda-3.18_2015.10.22-1.fc21 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-0080239274 sudo-1.8.15-1.fc21 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-0f405832d3 libsndfile-1.0.25-16.fc21 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-0cef72c8c6 livecd-tools-21.7-1.fc21 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-200d2dfd9f krb5-1.12.2-19.fc21 5 https://bodhi.fedoraproject.org/updates/FEDORA-2015-bef3629320 perl-Carp-1.38-1.fc21 3 https://bodhi.fedoraproject.org/updates/FEDORA-2015-f2c534bc12 kernel-4.1.13-100.fc21 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-b60333a0f1 perl-Time-HiRes-1.9728-1.fc21 The following builds have been pushed to Fedora 21 updates-testing monitorix-3.8.1-1.fc21 perl-Time-HiRes-1.9728-1.fc21 zanata-parent-25-2.fc21 Details about builds: ================================================================================ monitorix-3.8.1-1.fc21 (FEDORA-2015-bee38cd15f) A free, open source, lightweight system monitoring tool -------------------------------------------------------------------------------- Update Information: This is a maintenance release that mainly fixes a Document Object Model (DOM)-based cross-site scripting (XSS) vulnerability in the monitorix.cgi file. Such vulnerability is by injection a JS code in the when parameter of the URL shown after generating the graphs. Additionally, a potential denial of service (DoS) issue was discovered in the same when parameter of the URL which could lead in the creation of an enormous amount of .png files in the imgs directory of the server. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1281979 - monitorix-3.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1281979 -------------------------------------------------------------------------------- ================================================================================ perl-Time-HiRes-1.9728-1.fc21 (FEDORA-2015-b60333a0f1) High resolution alarm, sleep, gettimeofday, interval timers -------------------------------------------------------------------------------- Update Information: This release fixes type castings, compiler warnings, build script and does not use deprecated thread API. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1282021 - perl-Time-HiRes-1.9728 is available https://bugzilla.redhat.com/show_bug.cgi?id=1282021 -------------------------------------------------------------------------------- ================================================================================ zanata-parent-25-2.fc21 (FEDORA-2015-3a561e9d01) The Project Object Model(pom) files for the Zanata packages -------------------------------------------------------------------------------- Update Information: - The resteasy.version is 3.0.6.Final ---- - Upstream update to 25. - RHEL uses resteasy-base-resteasy-pom instead. -------------------------------------------------------------------------------- -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
