The following Fedora 24 Security updates need testing:
Age URL
178
https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24
76
https://bodhi.fedoraproject.org/updates/FEDORA-2016-93679a91df
jenkins-1.651.3-2.fc24 jenkins-remoting-2.62.3-1.fc24
45
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
38
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0d7ef286d1
drupal7-title-1.0-0.7.alpha9.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-294c23bb1d
phpMyAdmin-4.6.6-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0f44f2b8c8
mariadb-10.1.21-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-efed73a87c
calibre-2.78.0-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6694f5cd3a
bitlbee-3.5.1-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4cb58f0bda
java-1.8.0-openjdk-aarch32-1.8.0.112-3.161109.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2bce6ed778
viewvc-1.1.26-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9d7f592a03
wavpack-5.1.0-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ba9c6a3634
quagga-0.99.24.1-5.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba
runc-1.0.0-5.rc2.gitc91b5be.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-48e59edf94
thunderbird-45.7.0-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b3130f212a
iio-sensor-proxy-2.1-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-392b319bb5
kernel-4.9.7-101.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2b2696b823 vim-8.0.238-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a18a784b84
wpa_supplicant-2.5-6.fc24 wpa_supplicant-2.5-6.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7fac567c88
systemd-229-17.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9d7f592a03
wavpack-5.1.0-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-48e59edf94
thunderbird-45.7.0-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-392b319bb5
kernel-4.9.7-101.fc24
The following builds have been pushed to Fedora 24 updates-testing
bcm283x-firmware-20170131-1.72b44d8.fc24
copy-jdk-configs-2.1-1.fc24
cpuid-20170122-1.fc24
darktable-2.2.3-1.fc24
kernel-4.9.7-101.fc24
libappstream-glib-0.6.8-2.fc24
liblognorm-2.0.1-2.fc24
libmypaint-1.3.0-1.fc24
librelp-1.2.12-2.fc24
libzrtpcpp-4.6.5-1.fc24
magic-8.1.142-1.fc24
mozjs45-45.7.0-1.fc24
origin-1.4.0-1.fc24
perl-Class-Std-Fast-0.0.8-2.fc24
perl-Type-Tiny-1.000006-1.fc24
python-fmn-1.1.0-1.fc24
python-fmn-sse-0.2.1-2.fc24
python-resultsdb_api-2.0.0-1.fc24
python3-py3dns-3.1.1-1.fc24
qdigidoc-3.12.5-3.fc24
resultsdb-2.0.4-1.fc24
resultsdb_frontend-2.0.0-1.fc24
rsyslog-8.24.0-2.fc24
scim-pinyin-0.5.92-9.fc24
socat-1.7.3.2-1.fc24
tripwire-2.4.3.2-1.fc24
xcircuit-3.9.61-1.fc24
Details about builds:
================================================================================
bcm283x-firmware-20170131-1.72b44d8.fc24 (FEDORA-2017-e9e0cc0cf5)
Broadcom bcm283x firmware for the Raspberry Pi
--------------------------------------------------------------------------------
Update Information:
Latest firmware fixes
--------------------------------------------------------------------------------
================================================================================
copy-jdk-configs-2.1-1.fc24 (FEDORA-2017-454f7b4c14)
JDKs configuration files copier
--------------------------------------------------------------------------------
Update Information:
moved to newest release 2.1, added support for rpmorig
--------------------------------------------------------------------------------
================================================================================
cpuid-20170122-1.fc24 (FEDORA-2017-eb1c66e94f)
Dumps information about the CPU(s)
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 20170122 (rhbz#1415518)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1415518 - cpuid-20170122.src is available
https://bugzilla.redhat.com/show_bug.cgi?id=1415518
--------------------------------------------------------------------------------
================================================================================
darktable-2.2.3-1.fc24 (FEDORA-2017-d1cdd486bb)
Utility to organize and develop raw images
--------------------------------------------------------------------------------
Update Information:
2.2.3 release
--------------------------------------------------------------------------------
================================================================================
kernel-4.9.7-101.fc24 (FEDORA-2017-392b319bb5)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.9.7 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1417812 - CVE-2017-2596 Kernel: kvm: page reference leakage in handle_vmon
https://bugzilla.redhat.com/show_bug.cgi?id=1417812
--------------------------------------------------------------------------------
================================================================================
libappstream-glib-0.6.8-2.fc24 (FEDORA-2017-beb115a7eb)
Library for AppStream metadata
--------------------------------------------------------------------------------
Update Information:
libappstream-glib 0.6.8 release. New Features: - Make gperf a hard dep -
Read and write the <custom> tag - Support AppData components with no desktop
files Bugfixes: - Add a destructor for AsRefString - Add a dummy
update_contact to appdata-from-desktop - Do not ignore type=replace merge
components - Fix the build with gperf 3.1 - Fix use after free with hash table
keys - Hold a ref in the store to avoid use-after-free - Ignore -Wconversion
and -Wsign-conversion warnings from generated file - Support reading
metainfo.xml files when using appstream-compose - Tighten a rule that
classifies apps as web-apps
--------------------------------------------------------------------------------
================================================================================
liblognorm-2.0.1-2.fc24 (FEDORA-2017-8a8a92b52e)
Fast samples-based log normalization library
--------------------------------------------------------------------------------
Update Information:
This is the same update as in f25. I haven't time to get this into f24 so far.
--------------------------------------------------------------------------------
================================================================================
libmypaint-1.3.0-1.fc24 (FEDORA-2017-a80caa430d)
Library for making brush strokes
--------------------------------------------------------------------------------
Update Information:
Initial release of libmypaint for Fedora.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1361883 - Review Request: libmypaint - Library for making brush strokes
https://bugzilla.redhat.com/show_bug.cgi?id=1361883
--------------------------------------------------------------------------------
================================================================================
librelp-1.2.12-2.fc24 (FEDORA-2017-8a8a92b52e)
The Reliable Event Logging Protocol library
--------------------------------------------------------------------------------
Update Information:
This is the same update as in f25. I haven't time to get this into f24 so far.
--------------------------------------------------------------------------------
================================================================================
libzrtpcpp-4.6.5-1.fc24 (FEDORA-2017-f26dfb0de3)
ZRTP support library for the GNU ccRTP stack
--------------------------------------------------------------------------------
Update Information:
Update to version 4.6.5, see
https://github.com/wernerd/ZRTPCPP/blob/master/NEWS.md for details.
--------------------------------------------------------------------------------
================================================================================
magic-8.1.142-1.fc24 (FEDORA-2017-7b28594aee)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.1.142 is released.
--------------------------------------------------------------------------------
================================================================================
mozjs45-45.7.0-1.fc24 (FEDORA-2017-50b3718df1)
JavaScript interpreter and libraries
--------------------------------------------------------------------------------
Update Information:
Update to latest ESR release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1415867 - mozjs45-45.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1415867
--------------------------------------------------------------------------------
================================================================================
origin-1.4.0-1.fc24 (FEDORA-2017-f59a12cc17)
Open Source Container Management by Red Hat
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release: 1.4.0 Note: Follow [OpenShift upgrade guidel
ines](https://docs.openshift.org/latest/install_config/upgrading/index.html) for
cluster upgrades.
--------------------------------------------------------------------------------
================================================================================
perl-Class-Std-Fast-0.0.8-2.fc24 (FEDORA-2017-c20e7d1d4c)
Faster but less secure replacement for Class::Std
--------------------------------------------------------------------------------
Update Information:
Class::Std::Fast allows you to use the beautiful API of Class::Std in a faster
way than Class::Std does. You can get the object's identity via scalar-ifying
our object. Getting the objects identity is still possible via the ident method.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1418208 - Review Request: perl-Class-Std-Fast - Faster but less secure
replacement for Class::Std
https://bugzilla.redhat.com/show_bug.cgi?id=1418208
--------------------------------------------------------------------------------
================================================================================
perl-Type-Tiny-1.000006-1.fc24 (FEDORA-2017-ad8a8863f9)
Tiny, yet Moo(se)-compatible type constraint
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix update.
--------------------------------------------------------------------------------
================================================================================
python-fmn-1.1.0-1.fc24 (FEDORA-2017-82cca28be0)
A system for generic fedmsg-driven notifications for end users
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1410901 - Review Request: python-fmn - A system for generic fedmsg-driven
notifications for end users
https://bugzilla.redhat.com/show_bug.cgi?id=1410901
--------------------------------------------------------------------------------
================================================================================
python-fmn-sse-0.2.1-2.fc24 (FEDORA-2017-4967928b60)
A server-sent events server that integrates with FMN
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1412798 - Review Request: python-fmn-sse - A server-sent events server that
integrates with FMN
https://bugzilla.redhat.com/show_bug.cgi?id=1412798
--------------------------------------------------------------------------------
================================================================================
python-resultsdb_api-2.0.0-1.fc24 (FEDORA-2017-5ce867d36c)
Interface api to ResultsDB
--------------------------------------------------------------------------------
Update Information:
ResultsDB: - Fix pagination issue - Add config options to resultsdb for
requiring fields ResultsDB API: - fix like: filter - synchronize major version
number with resultsdb major number - disable the test suite until it is fixed
ResultsDB Frontend: - remove flask-restful dependency - fix testcase info links
- point default config to resultsdb 2.0 API - fix search box - synchronize major
version number with resultsdb major number
--------------------------------------------------------------------------------
================================================================================
python3-py3dns-3.1.1-1.fc24 (FEDORA-2017-b6bcc20b0c)
Python3 DNS library
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408273 - "OSError: [Errno 98] Address already in use"
https://bugzilla.redhat.com/show_bug.cgi?id=1408273
--------------------------------------------------------------------------------
================================================================================
qdigidoc-3.12.5-3.fc24 (FEDORA-2017-74b87e5cfa)
Estonian digital signature application
--------------------------------------------------------------------------------
Update Information:
Bump version number
--------------------------------------------------------------------------------
================================================================================
resultsdb-2.0.4-1.fc24 (FEDORA-2017-5ce867d36c)
Results store for automated tasks
--------------------------------------------------------------------------------
Update Information:
ResultsDB: - Fix pagination issue - Add config options to resultsdb for
requiring fields ResultsDB API: - fix like: filter - synchronize major version
number with resultsdb major number - disable the test suite until it is fixed
ResultsDB Frontend: - remove flask-restful dependency - fix testcase info links
- point default config to resultsdb 2.0 API - fix search box - synchronize major
version number with resultsdb major number
--------------------------------------------------------------------------------
================================================================================
resultsdb_frontend-2.0.0-1.fc24 (FEDORA-2017-5ce867d36c)
Frontend for the ResultsDB
--------------------------------------------------------------------------------
Update Information:
ResultsDB: - Fix pagination issue - Add config options to resultsdb for
requiring fields ResultsDB API: - fix like: filter - synchronize major version
number with resultsdb major number - disable the test suite until it is fixed
ResultsDB Frontend: - remove flask-restful dependency - fix testcase info links
- point default config to resultsdb 2.0 API - fix search box - synchronize major
version number with resultsdb major number
--------------------------------------------------------------------------------
================================================================================
rsyslog-8.24.0-2.fc24 (FEDORA-2017-8a8a92b52e)
Enhanced system logging and kernel message trapping daemon
--------------------------------------------------------------------------------
Update Information:
This is the same update as in f25. I haven't time to get this into f24 so far.
--------------------------------------------------------------------------------
================================================================================
scim-pinyin-0.5.92-9.fc24 (FEDORA-2017-648c3dd787)
Smart Pinyin IMEngine for Smart Common Input Method platform
--------------------------------------------------------------------------------
Update Information:
Fixes bug in scim-pinyin when load data.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1415391 - scim-pinyin does not add smart pinyin as an input option
https://bugzilla.redhat.com/show_bug.cgi?id=1415391
--------------------------------------------------------------------------------
================================================================================
socat-1.7.3.2-1.fc24 (FEDORA-2017-de7e691b8b)
Bidirectional data relay between two data channels ('netcat++')
--------------------------------------------------------------------------------
Update Information:
Addresses a crasher when DNS failed to resolve properly
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1404290 - socat build failure on rawhide (fc26)
https://bugzilla.redhat.com/show_bug.cgi?id=1404290
[ 2 ] Bug #1416597 - socat-1.7.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1416597
[ 3 ] Bug #1417483 - Failed DNS resolution causes SIGSEGV and endless loop
https://bugzilla.redhat.com/show_bug.cgi?id=1417483
--------------------------------------------------------------------------------
================================================================================
tripwire-2.4.3.2-1.fc24 (FEDORA-2017-a61733c059)
IDS (Intrusion Detection System)
--------------------------------------------------------------------------------
Update Information:
update to 2.4.3.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #830999 - tripwire cron should send mail to configured recipients
https://bugzilla.redhat.com/show_bug.cgi?id=830999
--------------------------------------------------------------------------------
================================================================================
xcircuit-3.9.61-1.fc24 (FEDORA-2017-abb1b76b6c)
Electronic circuit schematic drawing program
--------------------------------------------------------------------------------
Update Information:
New version 3.9.61 is released.
--------------------------------------------------------------------------------