The following Fedora 24 Security updates need testing:
Age URL
102
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
95
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24
58
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba
runc-1.0.0-5.rc2.gitc91b5be.fc24
38
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4b176c1694 redis-3.2.8-1.fc24
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-68cdc567e9
php-onelogin-php-saml-2.10.5-1.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0f5fe1913f
sane-backends-1.0.25-7.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7accc8010b pcs-0.9.156-2.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-72323a442f
ntp-4.2.6p5-44.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-97e65f13bb
python-sleekxmpp-1.3.2-1.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-97d7758431
firebird-2.5.7.27050.0-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e6419b416d xen-4.6.5-4.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-712a186f5f
icecat-52.0.1-5.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8eac23007d
xorgxrdp-0.2.1-1.fc24 xrdp-0.9.2-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-461ce095b5
samba-4.4.13-0.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ec01954fe9
chromium-57.0.2987.133-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-02174df32f
kernel-4.10.8-100.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3d7c3f66ae pcre-8.40-6.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-47eb254e1c vim-8.0.514-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-58d5521965
linux-firmware-20170313-72.git695f2d6d.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6189eb6f22 gvfs-1.28.4-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e50ea71b16 audit-2.7.4-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2b5b9751fd
firefox-52.0-7.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-af9f3f0102 cups-2.1.4-4.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-470e502a7d
libdrm-2.4.76-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-02174df32f
kernel-4.10.8-100.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-461ce095b5
samba-4.4.13-0.fc24
The following builds have been pushed to Fedora 24 updates-testing
backintime-1.1.18-1.fc24
kernel-4.10.8-100.fc24
libmwaw-0.3.11-1.fc24
php-cs-fixer-2.2.0-1.fc24
php-horde-Horde-Core-2.28.3-1.fc24
snapd-2.23.6-2.fc24
snapd-glib-1.9-2.fc24
sssd-1.15.2-1.fc24
vulkan-1.0.42.2-1.fc24
xcircuit-3.9.65-1.fc24
Details about builds:
================================================================================
backintime-1.1.18-1.fc24 (FEDORA-2017-1941a828be)
Simple backup tool inspired from the Flyback project and TimeVault
--------------------------------------------------------------------------------
Update Information:
- update to 1.1.18 - bugfix release, which only includes backported bugfixes
from 1.2: Fix bug: manual snapshots from GUI didn't work backport bug
fix: start a new ssh-agent instance only if necessary Fix bug: OSError when
running backup-job from systemd backport bug fix: udev schedule not
working backport bug fix: Keyring doesn't work with KDE Plasma5
backport bug fix: nameError in tools.make_dirs backport bug fix: use
current folder if no file is selected in files view Fix critical bug:
restore filesystem-root without 'Full rsync mode' with ACL and/or xargs
activated broke whole system
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1396279 - [abrt] backintime-common: snapshots.py:1754:_free_space:IndexError:
list index out of range
https://bugzilla.redhat.com/show_bug.cgi?id=1396279
--------------------------------------------------------------------------------
================================================================================
kernel-4.10.8-100.fc24 (FEDORA-2017-02174df32f)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.10.8 stable update contains a number of important fixes across the tree.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1435153 - CVE-2017-7184 kernel: Out-of-bounds heap access in xfrm
https://bugzilla.redhat.com/show_bug.cgi?id=1435153
[ 2 ] Bug #1436629 - CVE-2017-7277 kernel: Mishandling SCM_TIMESTAMPING_OPT_STATS
feature causes out-of-bounds read
https://bugzilla.redhat.com/show_bug.cgi?id=1436629
[ 3 ] Bug #1435719 - CVE-2017-7261 kernel: drm/vmwgfx: check that number of mip levels
is above zero
https://bugzilla.redhat.com/show_bug.cgi?id=1435719
--------------------------------------------------------------------------------
================================================================================
libmwaw-0.3.11-1.fc24 (FEDORA-2017-ccfdd76d2a)
A library for import of many old Mac document formats
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
================================================================================
php-cs-fixer-2.2.0-1.fc24 (FEDORA-2017-7be4865e81)
A tool to automatically fix PHP code style
--------------------------------------------------------------------------------
Update Information:
**Changelog for v2.2.0** * bug #2640 NoExtraConsecutiveBlankLinesFixer - Fix
single indent characters not working (ntzm) * feature #2220 Doctrine annotation
fixers (julienfalque) * feature #2431 MethodArgumentSpaceFixer: allow to retain
multiple spaces after comma (Slamdunk) * feature #2459 BracesFixer - Add option
for keeping opening brackets on the same line (jtojnar, SpacePossum) * feature
#2486 Add FunctionToConstantFixer (SpacePossum, keradus) * feature #2505
FunctionDeclarationFixer - Make space after anonymous function configurable
(jtojnar, keradus) * feature #2509 FullOpeningTagFixer - Ensure opening PHP tag
is lowercase (jtojnar) * feature #2532 FixCommand - add stop-on-violation option
(keradus) * feature #2591 Improve process output (julienfalque) * feature #2603
Add InvisibleSymbols Fixer (ivan1986, keradus) * feature #2642 Add
MagicConstantCasingFixer (ntzm) * feature #2657 PhpdocToCommentFixer - Allow
phpdoc for language constructs (ceeram, SpacePossum) * minor #2500 Configuration
resolver (julienfalque, SpacePossum, keradus) * minor #2566 Show more details on
errors and exceptions. (SpacePossum, julienfalque) * minor #2597 HHVM - bump
required version to 3.18 (keradus) * minor #2606 FixCommand - fix missing
comment close tag (keradus) * minor #2623 OrderedClassElementsFixer - remove
dead code (SpacePossum) * minor #2625 Update Symfony and Symfony:risky rulesets
(keradus) * minor #2626 TernaryToNullCoalescingFixer - adjust ruleset membership
and description (keradus) * minor #2635 ProjectCodeTest - watch that all classes
have dedicated tests (keradus) * minor #2647 DescribeCommandTest - remove
deprecated code usage (julienfalque) * minor #2648 Move non-code covering tests
to AutoReview subnamespace (keradus) * minor #2652 NoSpacesAroundOffsetFixerTest
- fix deprecation (keradus) * minor #2656 Code grooming (keradus) * minor #2659
Travis - speed up preparation for phar building (keradus) * minor #2660 Fixed
typo in suggest for ext-mbstring (pascal-hofmann) * minor #2661
NonPrintableCharacterFixer - include into Symfony:risky ruleset (keradus)
**Changelog for v2.1.3** * bug #2358 Cache - Deal with signature encoding
(keradus, GrahamCampbell) * bug #2475 Add shorthand array destructing support
(SpacePossum, keradus) * bug #2595 NoUnusedImportsFixer - Fix import usage
detection with properties (julienfalque) * bug #2605
PhpdocAddMissingParamAnnotationFixer, PhpdocOrderFixer - fix priority issue
(SpacePossum) * bug #2607 Fixers - better comments handling (SpacePossum) * bug
#2612 BracesFixer - Fix early bracket close for do-while loop inside an if
without brackets (felixgomez) * bug #2614 Ensure that '*Fixer::fix()' won't
crash when running on non-candidate collection (keradus) * bug #2630
HeaderCommentFixer - Fix trailing whitespace not removed after <?php
(julienfalque) * bug #2637 ToolInfo - use static dir check for composer
discovery (Slamdunk) * bug #2639 SemicolonAfterInstructionFixer - Handle
alternative syntax (SpacePossum) * bug #2645 HHVM: handle T_HH_ERROR (keradus) *
bug #2653 IsNullFixer - fix edge case (localheinz, kalessil) * bug #2654
PhpdocAddMissingParamAnnotationFixer - handle one-line docblocks (keradus) *
minor #2594 Travis - generate coverage report at 7.1 and clean up build matrix
(keradus) * minor #2613 HeaderCommentFixer - add missing case for exception
raising (keradus) * minor #2615 Add DescribeCommand test (julienfalque) * minor
#2616 Exclude more tests in phar version (keradus) * minor #2618 Update
README.rst (mhitza) * minor #2620 Finder - Remove `*.twig` as default
(SpacePossum) * minor #2641 Cookbook - remove information about levels (keradus)
* minor #2644 DescribeCommandTest - fix test execution on decorated console
(keradus) * minor #2655 AppVeyor - Cache Composer Installation (julienfalque)
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.28.3-1.fc24 (FEDORA-2017-0e0946d9aa)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.28.3** * [mjr] Fix regression in loading vhost config files (Bug
#14605). ---- **Horde_Core 2.28.2** * [jan] Fix unpacking encrypted session
data ("User not authorized for ..." log messages). * [jan] Throw an exception
when accessing a non-existing API through the registry.
--------------------------------------------------------------------------------
================================================================================
snapd-2.23.6-2.fc24 (FEDORA-2017-ce0fdd87a4)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
`snapd` 2.23.6 and `snapd-glib` 1.9 introduce support for using Snaps in Fedora.
`snapd` provides the Snappy system functionality, while `snapd-glib` enables
various applications to interact and integrate with `snapd`. See
https://snapcraft.io/ for more information on Snappy.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1390616 - Review Request: snapd-glib - Library providing a GLib interface to
snapd
https://bugzilla.redhat.com/show_bug.cgi?id=1390616
[ 2 ] Bug #1367825 - Review Request: snapd - The snapd and snap tools enable systems to
work with .snap files
https://bugzilla.redhat.com/show_bug.cgi?id=1367825
[ 3 ] Bug #1421274 - Is this ever going to be built?
https://bugzilla.redhat.com/show_bug.cgi?id=1421274
--------------------------------------------------------------------------------
================================================================================
snapd-glib-1.9-2.fc24 (FEDORA-2017-ce0fdd87a4)
Library providing a GLib interface to snapd
--------------------------------------------------------------------------------
Update Information:
`snapd` 2.23.6 and `snapd-glib` 1.9 introduce support for using Snaps in Fedora.
`snapd` provides the Snappy system functionality, while `snapd-glib` enables
various applications to interact and integrate with `snapd`. See
https://snapcraft.io/ for more information on Snappy.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1390616 - Review Request: snapd-glib - Library providing a GLib interface to
snapd
https://bugzilla.redhat.com/show_bug.cgi?id=1390616
[ 2 ] Bug #1367825 - Review Request: snapd - The snapd and snap tools enable systems to
work with .snap files
https://bugzilla.redhat.com/show_bug.cgi?id=1367825
[ 3 ] Bug #1421274 - Is this ever going to be built?
https://bugzilla.redhat.com/show_bug.cgi?id=1421274
--------------------------------------------------------------------------------
================================================================================
sssd-1.15.2-1.fc24 (FEDORA-2017-6364bdf141)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.15.2
--------------------------------------------------------------------------------
================================================================================
vulkan-1.0.42.2-1.fc24 (FEDORA-2017-b668dc8a00)
Vulkan loader and validation layers
--------------------------------------------------------------------------------
Update Information:
Update to vulkan-1.0.42.2
--------------------------------------------------------------------------------
================================================================================
xcircuit-3.9.65-1.fc24 (FEDORA-2017-56a350d0c2)
Electronic circuit schematic drawing program
--------------------------------------------------------------------------------
Update Information:
New version 3.9.65 is released.
--------------------------------------------------------------------------------