We pushed https://admin.fedoraproject.org/updates/FEDORA-2014-10298/freeipa-4.0.2-1.fc21 to stable yesterday in order to resolve https://bugzilla.redhat.com/show_bug.cgi?id=1135516 , but that causes a dependency issue with freeipa itself, because it requires an updated certmonger:

https://admin.fedoraproject.org/updates/FEDORA-2014-10127/certmonger-0.75.14-1.fc21

freeipa-server-4.0.2-1.fc21 requires certmonger >= 0.75.13 , F21 currently has 0.75.6-2.fc21.

Proposing as a release blocker, as until this is resolved FreeIPA won't install and the Server DVD probably won't compose or will have dependency errors - "here must be no errors in any package on the release-blocking images which cause the package to fail to install." , "All release-blocking images must boot in their supported configurations." (that one is held to be broken if a release-blocking image does not *exist* at all), and "It must be possible to join the system to a FreeIPA or Active Directory domain at install time and post-install, and the system must respect the identity, authentication and access control configuration provided by the domain."