The following Fedora 24 Security updates need testing:
Age URL
207
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
200
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24
163
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba
runc-1.0.0-5.rc2.gitc91b5be.fc24
99
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8330a48ca2
python-XStatic-jquery-ui-1.12.0.1-1.fc24
38
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5f1006afb1
libstaroffice-0.0.3-3.fc24
38
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a1f4c48c68
nodejs-brace-expansion-1.1.7-1.fc24
29
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bbae64fdc2
libmwaw-0.3.11-3.fc24
24
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4932c9b886
c-ares-1.13.0-1.fc24
18
https://bodhi.fedoraproject.org/updates/FEDORA-2017-37f68e3534
webkitgtk4-2.16.5-1.fc24
18
https://bodhi.fedoraproject.org/updates/FEDORA-2017-56cf7067e7 irssi-1.0.3-1.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5ade380ab2 php-5.6.31-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bd6aa662fc knot-2.4.5-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-21c0e9b25b
qt5-qtwebkit-5.212.0-0.5.alpha2.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-405453f285
groovy18-1.8.9-28.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-081fc9ad77
knot-resolver-1.3.1-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-61689edaf4
spice-0.12.8-3.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9b752904ed
sqlite-3.13.0-2.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-06c1422db8
evince-3.20.1-3.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5ce9d89b82
kernel-4.11.10-100.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-93868169a0
mingw-poppler-0.41.0-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-aa44293a53
nodejs-4.8.4-6.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1a8bebaab4
phpldapadmin-1.2.3-10.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
18
https://bodhi.fedoraproject.org/updates/FEDORA-2017-37f68e3534
webkitgtk4-2.16.5-1.fc24
15
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6c2a7b1453
thunderbird-52.2.1-1.fc24
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-af79986d5f
libsoup-2.54.1-2.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bc6b0dec8a
gnome-keyring-3.20.1-1.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-94b2c5e120 pcre-8.41-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9b752904ed
sqlite-3.13.0-2.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5a6f49afbd
mariadb-10.1.25-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-de05b989aa
net-snmp-5.7.3-14.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5ce9d89b82
kernel-4.11.10-100.fc24
The following builds have been pushed to Fedora 24 updates-testing
cacti-1.1.13-1.fc24
copr-dist-git-0.32-1.fc24
copr-frontend-1.115-1.fc24
golang-github-cznic-lldb-1.1.0-1.fc24
libtaskotron-0.4.24-1.fc24
nodejs-4.8.4-6.fc24
phpldapadmin-1.2.3-10.fc24
Details about builds:
================================================================================
cacti-1.1.13-1.fc24 (FEDORA-2017-3aa3bd6d58)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.13 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.13
--------------------------------------------------------------------------------
================================================================================
copr-dist-git-0.32-1.fc24 (FEDORA-2017-656c6abb47)
Copr services for Dist Git server
--------------------------------------------------------------------------------
Update Information:
- srpms are now not being built on dist-git - MockSCM and Tito methods unified
into single source ---- .spec method implemented ---- - import build task
only once - remove unsupported --depth from git svn command - add dep on git-svn
- better exception handling in MockScmProvider - fix 'git svn clone' and add
exception handling for clone part in MockScm provider ---- - add --depth 1 for
git clone in GitProvider - add missing 'which' for tito && git-annex
builds -
arbitrary dist-git branching support - use MockScmProvider without mock-scm to
solve performance problems - add "powerpc64le" into list of archs to allow
building for - Bug 1457888 - Mock SCM method fails to build a package - increase
depth for git clone so that required tags that tito needs are downloaded ----
Fixes problem with fedpkg builds, see
https://bugzilla.redhat.com/show_bug.cgi?id=1447102
--------------------------------------------------------------------------------
================================================================================
copr-frontend-1.115-1.fc24 (FEDORA-2017-c10aba3ee8)
Frontend for Copr
--------------------------------------------------------------------------------
Update Information:
Changes in tips and url of an uploaded file now being composed on frontend
(before it was being composed on copr-dist-git). ---- .spec method implemented
--------------------------------------------------------------------------------
================================================================================
golang-github-cznic-lldb-1.1.0-1.fc24 (FEDORA-2017-1e6526c32d)
Low-level database engine implementation in Go
--------------------------------------------------------------------------------
Update Information:
Initial package for fedora. This is one of the (indirect) dependencies of
syncthing.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431745 - Review Request: golang-github-cznic-lldb - Low-level database
engine implementation in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1431745
--------------------------------------------------------------------------------
================================================================================
libtaskotron-0.4.24-1.fc24 (FEDORA-2017-238d89b478)
Taskotron Support Library
--------------------------------------------------------------------------------
Update Information:
- documentation improvements - DNF_REPO item type removed - default task
artifact now points to artifacts root dir instead of task log - fix rpm deps
handling via dnf on Fedora 26 (but only support package names and filepaths as
deps in task formulas) - mark Fedora 26 as stable in yumrepoinfo - remove check
for installed packages because it was problematic - do not use --cacheonly for
dnf operations
--------------------------------------------------------------------------------
================================================================================
nodejs-4.8.4-6.fc24 (FEDORA-2017-aa44293a53)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
[Security
update](https://nodejs.org/en/blog/vulnerability/july-2017-security-
releases/)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463137 - CVE-2017-1000381 nodejs: c-ares: NAPTR parser out of bounds access
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1463137
--------------------------------------------------------------------------------
================================================================================
phpldapadmin-1.2.3-10.fc24 (FEDORA-2017-1a8bebaab4)
Web-based tool for managing LDAP servers
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2017-11107 (#1471112)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471112 - CVE-2017-11107 phpldapadmin: XSS in htdocs/entry_chooser.php via
form, element, rdn, or container parameter
https://bugzilla.redhat.com/show_bug.cgi?id=1471112
--------------------------------------------------------------------------------