The following Fedora 24 Security updates need testing:
Age URL
192
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
185
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24
148
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba
runc-1.0.0-5.rc2.gitc91b5be.fc24
84
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8330a48ca2
python-XStatic-jquery-ui-1.12.0.1-1.fc24
23
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5f1006afb1
libstaroffice-0.0.3-3.fc24
23
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a1f4c48c68
nodejs-brace-expansion-1.1.7-1.fc24
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bbae64fdc2
libmwaw-0.3.11-3.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b8d76bef4e
chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4932c9b886
c-ares-1.13.0-1.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2cfb239358
libsndfile-1.0.28-3.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b3bdaf58bc xen-4.6.5-7.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e0a9e51dd5
graphite2-1.3.10-1.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d191fb7fce
zabbix-3.0.9-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5f8ebbd2b1
globus-xio-5.16-1.fc24 globus-net-manager-0.17-1.fc24 globus-gass-cache-program-6.7-1.fc24
globus-gass-copy-9.27-1.fc24 globus-gssapi-gsi-12.16-1.fc24
globus-gram-job-manager-14.36-1.fc24 globus-gridftp-server-12.2-1.fc24
globus-io-11.9-1.fc24 globus-xio-gsi-driver-3.11-1.fc24 globus-xio-pipe-driver-3.10-1.fc24
globus-xio-udt-driver-1.27-1.fc24 myproxy-6.1.28-1.fc24 globus-ftp-client-8.35-2.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e8a2017b3c
drupal7-7.56-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-37f68e3534
webkitgtk4-2.16.5-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-299525e757
php-horde-Horde-Image-2.5.1-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b1f07acd9
flatpak-0.8.7-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d26266eb32
libmtp-1.1.13-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-014d67fa9d
libdb-5.3.28-24.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-56cf7067e7 irssi-1.0.3-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-72f0c1ea9c
systemd-229-22.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cf9599a306
httpd-2.4.26-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-06d7ff5a5d pius-2.2.4-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3b70d0b976
libgcrypt-1.7.8-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1206f87545
jetty-9.3.7-3.v20160115.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
71
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e1905fd566 koji-1.12.0-2.fc24
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-07fed9b000
libteam-1.27-1.fc24
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ce8c7053eb audit-2.7.7-1.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2cfb239358
libsndfile-1.0.28-3.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e0a9e51dd5
graphite2-1.3.10-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-014d67fa9d
libdb-5.3.28-24.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b1f07acd9
flatpak-0.8.7-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3e62f0d34b
perl-5.22.3-371.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-37f68e3534
webkitgtk4-2.16.5-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-72f0c1ea9c
systemd-229-22.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-af79986d5f
libsoup-2.54.1-2.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e8cb8fdad5 gsm-1.0.17-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6c2a7b1453
thunderbird-52.2.1-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3b70d0b976
libgcrypt-1.7.8-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8100aed299 rsync-3.1.2-4.fc24
The following builds have been pushed to Fedora 24 updates-testing
avr-gcc-6.3.0-1.fc24
gsm-1.0.17-1.fc24
jetty-9.3.7-3.v20160115.fc24
libsoup-2.54.1-2.fc24
pcp-3.12.0-1.fc24
python-batinfo-0.4.2-3.fc24
python-msrest-0.4.11-1.fc24
python-pyvo-0.6.1-1.fc24
python-streamlink-0.7.0-1.fc24
thermald-1.6-4.fc24
xed-1.4.4-2.fc24
xviewer-1.4.3-2.fc24
Details about builds:
================================================================================
avr-gcc-6.3.0-1.fc24 (FEDORA-2017-aceccf0f0d)
Cross Compiling GNU GCC targeted at avr
--------------------------------------------------------------------------------
Update Information:
avr-gcc updated to gcc version 6.3.0
--------------------------------------------------------------------------------
================================================================================
gsm-1.0.17-1.fc24 (FEDORA-2017-e8cb8fdad5)
Shared libraries for GSM speech compressor
--------------------------------------------------------------------------------
Update Information:
This update fixes undefined behaviour when doing left shifts on signed integers.
No API or ABI changes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465878 - gsm-1.0.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1465878
--------------------------------------------------------------------------------
================================================================================
jetty-9.3.7-3.v20160115.fc24 (FEDORA-2017-1206f87545)
Java Webserver and Servlet Container
--------------------------------------------------------------------------------
Update Information:
Backport fix for CVE-2017-9735
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1464158 - CVE-2017-9735 jetty: Timing channel attack in
util/security/Password.java
https://bugzilla.redhat.com/show_bug.cgi?id=1464158
--------------------------------------------------------------------------------
================================================================================
libsoup-2.54.1-2.fc24 (FEDORA-2017-af79986d5f)
Soup, an HTTP library implementation
--------------------------------------------------------------------------------
Update Information:
This update fixes the following problems: * Possible crashes when accessing
sites with GSSAPI authentication * Sites with GSSAPI authentication that
require closing the connection are not loaded at all * Some servers does not
follow the GSSAPI authentication workflow closely, weaken the libsoup
implemetation to behave like other clients (Firefox, cURL) to support them.
--------------------------------------------------------------------------------
================================================================================
pcp-3.12.0-1.fc24 (FEDORA-2017-d29400ff30)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
Fix pcp-atop failure in open-ended write mode (BZ 1431292)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431292 - pmatop -w fails, bad -T argument to pmlogger
https://bugzilla.redhat.com/show_bug.cgi?id=1431292
[ 2 ] Bug #1317515 - SELinux is preventing /usr/bin/bash from 'read' accesses on
the directory /var/lib/pcp/pmdas.
https://bugzilla.redhat.com/show_bug.cgi?id=1317515
[ 3 ] Bug #1376857 - poor pmlogconf performance, esp. with derived metrics
https://bugzilla.redhat.com/show_bug.cgi?id=1376857
--------------------------------------------------------------------------------
================================================================================
python-batinfo-0.4.2-3.fc24 (FEDORA-2017-2e0e392efc)
Python module to retrieve battery information
--------------------------------------------------------------------------------
Update Information:
Enable Python3 support by default
--------------------------------------------------------------------------------
================================================================================
python-msrest-0.4.11-1.fc24 (FEDORA-2017-c72568721e)
AutoRest swagger generator Python client runtime
--------------------------------------------------------------------------------
Update Information:
###Version 0.4.11 Bugfixes * Fix incorrect dependency to ���requests��� 2.14.x,
instead of 2.x meant in 0.4.8 ### Version 0.4.10 Features * Add requests
hooks to configuration
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1460050 - python-msrest-v0.4.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1460050
--------------------------------------------------------------------------------
================================================================================
python-pyvo-0.6.1-1.fc24 (FEDORA-2017-842704c722)
Access to remote data and services of the Virtual observatory (VO) using Python
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
================================================================================
python-streamlink-0.7.0-1.fc24 (FEDORA-2017-97cf264afb)
Python library for extracting streams from various websites
--------------------------------------------------------------------------------
Update Information:
0.7.0 of Streamlink! Since our May release, we've incorporated quite a few
changes! Outlined are the major features in this month's release: * Stream
types will now be sorted accordingly in terms of quality *
TeamLiquid.net Plugin
added * Numerous plugin & bug fixes * Updated HomeBrew package * Improved CLI
documentation Many thanks to those who've contributed in this release! If you
think that this application is helpful, please consider supporting the
maintainers by [donating](https://streamlink.github.io/donate.html). See
https://github.com/streamlink/streamlink/releases/tag/0.7.0 for more
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1466776 - python-streamlink-0.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1466776
--------------------------------------------------------------------------------
================================================================================
thermald-1.6-4.fc24 (FEDORA-2017-fb43fe33ec)
Thermal Management daemon
--------------------------------------------------------------------------------
Update Information:
* Add upstream patch to fix ThermalMonitor * Add several fixes from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1464548 - [abrt] thermald-monitor:
ThermaldInterface::getLowestValidTripTempForZone(): ThermalMonitor killed by signal 11
https://bugzilla.redhat.com/show_bug.cgi?id=1464548
--------------------------------------------------------------------------------
================================================================================
xed-1.4.4-2.fc24 (FEDORA-2017-85a71c57ba)
X-Apps [Text] Editor (Cross-DE, backward-compatible, GTK3, traditional UI)
--------------------------------------------------------------------------------
Update Information:
* Fix filtered provides
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463461 - xed-1.4.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1463461
--------------------------------------------------------------------------------
================================================================================
xviewer-1.4.3-2.fc24 (FEDORA-2017-9cbfb85d0e)
Fast and functional graphics viewer
--------------------------------------------------------------------------------
Update Information:
* Fix filtered provides
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465898 - xviewer-1.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1465898
--------------------------------------------------------------------------------