The firefox update from 50.0.0 to 50.0.2 [1] isn't being pushed to updates-testing or
updates in F25 and F24 for more than 24 hours. This update is urgent because it fixes a
0-day remote code execution bug in SVG handling plus another critical bug in same-origin
handling [2]. This bug has reached stable karma on 2016-12-01 11:09:59 (UTC) but still
hasn't even landed in updates-testing. Is this update stuck in bodhi again as
python-fuse did yesterday [3]? Then why has the F23 package landed in updates-testing, but
F24 and F25 haven't?
[1]
F25:
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2967f5f965
F24:
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5748592807
F23:
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d2cbcd602d
[2]
https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/#fir...
[3]
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.o...