The following Fedora 24 Security updates need testing:
Age URL
40
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b3f93ead5b moin-1.9.8-1.fc24
23
https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0ef628998f
chicken-4.11.0-3.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9743cce120
canl-c-2.1.7-1.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8749c58855
ganglia-3.7.2-10.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2eef68e635
phpMyAdmin-4.6.4-2.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-af3b0af887
mediawiki-1.26.4-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e5ebfed6d
kernel-4.7.2-201.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-508767e6b7 elog-3.1.1-7.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-985b68721b slock-1.3-2.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
21
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ddadfe403c pungi-4.1.8-1.fc24
python-productmd-1.2-2.fc24
13
https://bodhi.fedoraproject.org/updates/FEDORA-2016-aa32e6e85b
libfm-1.2.4-6.D20160627git2a537414de.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-11303fb003
selinux-policy-3.13.1-191.14.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0edc0e1794
livecd-tools-23.4-1.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-33b409649c
xorg-x11-server-1.18.4-4.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-88d8834106
pcmanfm-1.2.4-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6cc6fd707c pcre-8.39-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e5ebfed6d
kernel-4.7.2-201.fc24
The following builds have been pushed to Fedora 24 updates-testing
criu-2.5-1.fc24
dhcpcd-6.11.3-1.fc24
elog-3.1.1-7.fc24
emacs-25.1-0.3.rc2.fc24
enki-16.04.1-3.fc24
gap-pkg-automata-1.13-1.fc24
git-cola-2.8-1.fc24
gmp-ecm-7.0.3-2.fc24
gnustep-base-1.24.9-1.fc24
hid-replay-0.7.1-2.fc24
java-1.8.0-openjdk-aarch32-1.8.0.102-2.160812.fc24
jpnevulator-2.3.4-1.fc24
kdevelop-5.0.0-1.fc24
kdevelop-pg-qt-2.0.0-1.fc24
kdevelop-php-5.0.0-1.fc24
kdevplatform-5.0.0-1.fc24
libinput-1.4.2-2.fc24
mpdecimal-2.4.2-4.fc24
ostree-2016.7-2.fc24
pki-core-10.3.5-4.fc24
postfix-3.1.2-1.fc24
python-biopython-1.68-1.fc24
python-fedimg-0.7-1.fc24
shotwell-0.23.6-1.fc24
slic3r-1.2.9-8.fc24
slock-1.3-2.fc24
spasm-ng-0.5-0.4.beta.2.fc24
tomboy-1.15.5-1.fc24
vagrant-sshfs-1.2.0-2.fc24
vdr-epg-daemon-1.1.14-1.fc24
Details about builds:
================================================================================
criu-2.5-1.fc24 (FEDORA-2016-817eb8d467)
Tool for Checkpoint/Restore in User-space
--------------------------------------------------------------------------------
Update Information:
Update to 2.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1368758 - criu-2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1368758
--------------------------------------------------------------------------------
================================================================================
dhcpcd-6.11.3-1.fc24 (FEDORA-2016-0cec85d122)
A minimalistic network configuration daemon with DHCPv4, rdisc and DHCPv6 support
--------------------------------------------------------------------------------
Update Information:
Enhancement update.
--------------------------------------------------------------------------------
================================================================================
elog-3.1.1-7.fc24 (FEDORA-2016-508767e6b7)
Logbook system to manage notes through a Web interface
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-6342
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1371328 - CVE-2016-6342 elog: posting entry as arbitrary username by improper
authentication
https://bugzilla.redhat.com/show_bug.cgi?id=1371328
--------------------------------------------------------------------------------
================================================================================
emacs-25.1-0.3.rc2.fc24 (FEDORA-2016-97b42b497f)
GNU Emacs text editor
--------------------------------------------------------------------------------
Update Information:
update to 25.1 rc2
--------------------------------------------------------------------------------
================================================================================
enki-16.04.1-3.fc24 (FEDORA-2016-b2a7a2bab0)
Text editor for programmers
--------------------------------------------------------------------------------
Update Information:
drop dependency to pyparsing (and python2-pyparsing) in favor of
python3-pyparsing
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1365138 - enki requires pyparsing and python2-pyparsing
https://bugzilla.redhat.com/show_bug.cgi?id=1365138
--------------------------------------------------------------------------------
================================================================================
gap-pkg-automata-1.13-1.fc24 (FEDORA-2016-d2daee767e)
Finite automata algorithms
--------------------------------------------------------------------------------
Update Information:
This package contains algorithms for working with finite automata in GAP. It
can do the following: - compute a rational expression for the language
recognized by a finite automaton; - compute an automaton for the language given
by a rational expression; - minimalize a finite automaton; - visualize automata.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370874 - Review Request: gap-pkg-automata - Finite automata algorithms
https://bugzilla.redhat.com/show_bug.cgi?id=1370874
--------------------------------------------------------------------------------
================================================================================
git-cola-2.8-1.fc24 (FEDORA-2016-71dd9f8e79)
A sleek and powerful git GUI
--------------------------------------------------------------------------------
Update Information:
git-cola update to 2.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1371413 - git-cola 2.7 fails to launch
https://bugzilla.redhat.com/show_bug.cgi?id=1371413
[ 2 ] Bug #1371529 - git-cola-2.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1371529
--------------------------------------------------------------------------------
================================================================================
gmp-ecm-7.0.3-2.fc24 (FEDORA-2016-14ada97cdd)
Elliptic Curve Method for Integer Factorization
--------------------------------------------------------------------------------
Update Information:
Add proposed upstream fix for RHBZ#1367571.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1367571 - gmp-ecm FTBFS on aarch64
https://bugzilla.redhat.com/show_bug.cgi?id=1367571
--------------------------------------------------------------------------------
================================================================================
gnustep-base-1.24.9-1.fc24 (FEDORA-2016-cd736503ef)
GNUstep Base library package
--------------------------------------------------------------------------------
Update Information:
- Update to 1.24.9 - Utilize system-wide crypto-policies (bz#1179297)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1312706 - update 1.24.8
https://bugzilla.redhat.com/show_bug.cgi?id=1312706
[ 2 ] Bug #1204510 - gnustep-base should have Requires: make
https://bugzilla.redhat.com/show_bug.cgi?id=1204510
[ 3 ] Bug #1179297 - Utilize system-wide crypto-policies
https://bugzilla.redhat.com/show_bug.cgi?id=1179297
--------------------------------------------------------------------------------
================================================================================
hid-replay-0.7.1-2.fc24 (FEDORA-2016-01fe1cb578)
HID Input device recorder and replay
--------------------------------------------------------------------------------
Update Information:
Bump for rebuilding for f24
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-aarch32-1.8.0.102-2.160812.fc24 (FEDORA-2016-b34c61281b)
OpenJDK Runtime Environment in a preview of the OpenJDK AArch32 project
--------------------------------------------------------------------------------
Update Information:
This update introduces C1 JIT compiler that greatly improves jdk performance.
--------------------------------------------------------------------------------
================================================================================
jpnevulator-2.3.4-1.fc24 (FEDORA-2016-b88038d509)
Serial line sniffer including very simple terminal emulator
--------------------------------------------------------------------------------
Update Information:
This is new version of the package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370757 - jpnevulator-2.3.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370757
--------------------------------------------------------------------------------
================================================================================
kdevelop-5.0.0-1.fc24 (FEDORA-2016-6abcb3edad)
Integrated Development Environment for C++/C
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
================================================================================
kdevelop-pg-qt-2.0.0-1.fc24 (FEDORA-2016-6abcb3edad)
A parser generator
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
================================================================================
kdevelop-php-5.0.0-1.fc24 (FEDORA-2016-8c9c425606)
Php language and documentation plugins for KDevelop
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
================================================================================
kdevplatform-5.0.0-1.fc24 (FEDORA-2016-b07a9f9ea5)
Libraries for use by KDE development tools
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
================================================================================
libinput-1.4.2-2.fc24 (FEDORA-2016-c4c3b886ca)
Input device library
--------------------------------------------------------------------------------
Update Information:
Add quirk for the HP 8510w touchpad (#1351285)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1351285 - Synaptics TouchPad erroneously shown as supporting two-finger
scroll
https://bugzilla.redhat.com/show_bug.cgi?id=1351285
--------------------------------------------------------------------------------
================================================================================
mpdecimal-2.4.2-4.fc24 (FEDORA-2016-6ac4eb28d7)
Library for general decimal arithmetic
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
================================================================================
ostree-2016.7-2.fc24 (FEDORA-2016-e5f8e5e4ab)
Tool for managing bootable, immutable filesystem trees
--------------------------------------------------------------------------------
Update Information:
This update fixes a possible crash when doing a flatpak update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1347293 - [abrt] flatpak: mkdir_p_at_internal(): flatpak killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1347293
--------------------------------------------------------------------------------
================================================================================
pki-core-10.3.5-4.fc24 (FEDORA-2016-36fa3fd8c3)
Certificate System - PKI Core Components
--------------------------------------------------------------------------------
Update Information:
PKI TRAC Tickets #1578,2414,2423,2439 ---- PKI TRAC Tickets
#690,833,2429,2431,2432,2436,2437,2440
--------------------------------------------------------------------------------
================================================================================
postfix-3.1.2-1.fc24 (FEDORA-2016-5e76045cd3)
Postfix Mail Transport Agent
--------------------------------------------------------------------------------
Update Information:
This is new version of postfix, for details see upstream announcement:
http://www.postfix.org/announcements/postfix-3.1.2.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370899 - postfix-3.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370899
--------------------------------------------------------------------------------
================================================================================
python-biopython-1.68-1.fc24 (FEDORA-2016-87208ad1c3)
Python tools for computational molecular biology
--------------------------------------------------------------------------------
Update Information:
- Update to 1.68
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370687 - python-biopython-1.68 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370687
--------------------------------------------------------------------------------
================================================================================
python-fedimg-0.7-1.fc24 (FEDORA-2016-84d50ef431)
Automatically upload Fedora Cloud images to cloud providers
--------------------------------------------------------------------------------
Update Information:
Migrate to compose-based uploading
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1371241 - python-fedimg-0.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1371241
--------------------------------------------------------------------------------
================================================================================
shotwell-0.23.6-1.fc24 (FEDORA-2016-b9ea5f493b)
A photo organizer for the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
#### Shotwell 0.23.6 - 29 Aug 2016 #### * Fix locale-dependent times * Use
nl_langinfo instead of custom LConv * Fix renaming of tags and saved searches
* Improve message shown on empty camera * Make thm a recognized extension for
JPEG files
--------------------------------------------------------------------------------
================================================================================
slic3r-1.2.9-8.fc24 (FEDORA-2016-8850c67eb6)
G-code generator for 3D printers (RepRap, Makerbot, Ultimaker etc.)
--------------------------------------------------------------------------------
Update Information:
Fix bug that crashes slic3r when about dialog is opened (#1285807)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285807 - Opening About Slic3r dialog window crashes slic3r
https://bugzilla.redhat.com/show_bug.cgi?id=1285807
--------------------------------------------------------------------------------
================================================================================
slock-1.3-2.fc24 (FEDORA-2016-985b68721b)
Simple X display locker
--------------------------------------------------------------------------------
Update Information:
This release fixes CVE-2016-6866, a crash when verifying a password for a user
without a valid shadow hash entry.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1368369 - CVE-2016-6866 slock: Null pointer dereference results in
segmentation fault
https://bugzilla.redhat.com/show_bug.cgi?id=1368369
--------------------------------------------------------------------------------
================================================================================
spasm-ng-0.5-0.4.beta.2.fc24 (FEDORA-2016-7b735b0d04)
A z80 assembler with extra features for TI calculators
--------------------------------------------------------------------------------
Update Information:
A z80 assembler with extra features for TI calculators
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1325378 - Review Request: spasm-ng - A z80 assembler with extra features for
TI calculators
https://bugzilla.redhat.com/show_bug.cgi?id=1325378
--------------------------------------------------------------------------------
================================================================================
tomboy-1.15.5-1.fc24 (FEDORA-2016-e40c2aa574)
Note-taking application
--------------------------------------------------------------------------------
Update Information:
Update tomboy to 1.15.5. From the upstream changelog: * Translation updates:
zh_CN, sr, hu, lt, id, es, el, eu, sv, fi, ro, cs, tr,
ca, bs, oc, pl, pt, de, pt_BR * Update copyright to 2016 * gitignore additions
for newer autotools, Visual Studio * Updated FSF address (Daniel Mustieles) *
Updated DOAP file: corrected URLs, added category, description
and programming-language (Piotr Dr��g, Alex Tereschenko) * Use gacutil when
searching for Mono.Cairo in configure instead of hardcoded paths * Fix icon
loading on Windows (Benjamin Podszun, #734399) * Help corrections: index and
pin-notes pages (Ekaterina Gerasimova, #730502) * Typo fixes in
tomboy.schemas.in and FuseSyncServiceAddin (Anders Jonsson)
--------------------------------------------------------------------------------
================================================================================
vagrant-sshfs-1.2.0-2.fc24 (FEDORA-2016-e26e1867ba)
A Vagrant synced folder plugin that mounts folders via SSHFS
--------------------------------------------------------------------------------
Update Information:
Bump release to 2 because vagrant-sshfs-1.2.0-1.fc2{2,3,4} is what
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1343814 - Review Request: vagrant-sshfs - A Vagrant synced folder plugin that
mounts folders via SSHFS.
https://bugzilla.redhat.com/show_bug.cgi?id=1343814
--------------------------------------------------------------------------------
================================================================================
vdr-epg-daemon-1.1.14-1.fc24 (FEDORA-2016-c480845958)
A daemon to download EPG data from internet and manage it in a mysql database
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.14 ---- Update to 1.1.12
--------------------------------------------------------------------------------