The following Fedora 24 Security updates need testing:
Age URL
32
https://bodhi.fedoraproject.org/updates/FEDORA-2016-95edf19d8a
squid-3.5.19-2.fc24
27
https://bodhi.fedoraproject.org/updates/FEDORA-2016-dfa325d31b
community-mysql-5.7.12-1.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b38938aa8e
haproxy-1.6.5-3.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a84b3d73bc
drupal7-7.44-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-372b6f936e
xguest-1.0.10-34.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-105b80d1be
python3-3.5.1-9.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2869023091
python-2.7.11-6.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8b19472a3c
squidGuard-1.4-26.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-047a86f5b1
setroubleshoot-3.3.9.1-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7db496f6f2
wordpress-4.5.3-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d717fdcf74
struts-1.3.10-18.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-75ca94dee3
setroubleshoot-plugins-3.3.5.1-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a80eab65ba qemu-2.6.0-4.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
21
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3d4c0d27b6
clementine-1.3.1-2.fc24 sqlite-3.12.2-1.fc24
18
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3a7f36c0c1
vim-7.4.1868-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7553eb6439
selinux-policy-3.13.1-191.fc24.2
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-81e90d2724 texinfo-6.1-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3d9ca9424f
iputils-20160308-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e7c6a31485
hwdata-0.290-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-975b49148c
libjpeg-turbo-1.5.0-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8675db6984
libfm-1.2.4-4.D20160618gitb22c0995e7.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-852ae00fd6
lxsession-0.5.2-10.D20160417git9f8d613332.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2869023091
python-2.7.11-6.fc24
The following builds have been pushed to Fedora 24 updates-testing
Field3D-1.7.2-1.fc24
adwaita-qt-0.4-2.fc24
btrfs-sxbackup-0.6.8-1.fc24
cassandra-java-driver-3.0.0-1.fc24
ceph-10.2.2-2.fc24
disruptor-thrift-server-0.3.8-2.fc24
dyninst-9.1.0-5.fc24
fusioninventory-agent-2.3.18-2.fc24
galera-25.3.16-1.fc24
generic-release-24-1
ghex-3.18.2-1.fc24
gitg-3.20.1-1.fc24
gnome-chemistry-utils-0.14.12-3.fc24
gnome-screenshot-3.20.1-1.fc24
gnumeric-1.12.30-1.fc24
goffice-0.10.30-1.fc24
gtksourceview3-3.20.4-1.fc24
hplip-3.16.5-2.fc24
hwdata-0.290-1.fc24
iputils-20160308-3.fc24
libfm-1.2.4-4.D20160618gitb22c0995e7.fc24
libjpeg-turbo-1.5.0-1.fc24
libsoc-0.8.2-1.fc24
libtaskotron-0.4.13-3.fc24
libvirt-python-1.3.3-3.fc24
lilypond-2.19.44-1.fc24
lilypond-doc-2.19.44-1.fc24
lxsession-0.5.2-10.D20160417git9f8d613332.fc24
mdds-1.1.0-2.fc24
metrics-reporter-config-3.0.0-1.fc24
minetest-0.4.14-1.fc24
mongo-cxx-driver-1.1.2-1.fc24
msitools-0.95-5.fc24
ohc-0.4.2-4.fc24
origin-1.2.0-1.git.0.2e62fab.fc24
paraview-5.1.0-1.fc24
php-zendframework-2.5.3-3.fc24
php-zendframework-zend-view-2.8.0-1.fc24
python-concurrentloghandler-0.9.1-1.fc24
python-portalocker-0.5.6-1.fc24
python-pygit2-0.24.1-1.fc24
python-zope-testrunner-4.5.1-2.fc24
qemu-2.6.0-4.fc24
rubygem-github-linguist-4.8.7-1.fc24
rubygem-nokogiri-1.6.8-2.fc24
screen-4.4.0-1.fc24
selinux-policy-3.13.1-191.fc24.2
setroubleshoot-plugins-3.3.5.1-1.fc24
softhsm-2.1.0-1.fc24
strongswan-5.4.0-2.fc24
struts-1.3.10-18.fc24
texinfo-6.1-3.fc24
tunir-0.16-1.fc24
unicode-ucd-9.0.0-1.fc24
vala-0.32.1-1.fc24
valgrind-3.11.0-23.fc24
wireshark-2.1.0-2.fc24
wordpress-4.5.3-1.fc24
Details about builds:
================================================================================
Field3D-1.7.2-1.fc24 (FEDORA-2016-24be23b163)
Library for storing voxel data
--------------------------------------------------------------------------------
Update Information:
Minor update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1347967 - Field3D-v1.7.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1347967
--------------------------------------------------------------------------------
================================================================================
adwaita-qt-0.4-2.fc24 (FEDORA-2016-63a6f56204)
Adwaita theme for Qt-based applications
--------------------------------------------------------------------------------
Update Information:
Attempt to fix QtCreator missing menubar issue
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1340627 - Qt creator does not draw menu bar in GNOME
https://bugzilla.redhat.com/show_bug.cgi?id=1340627
--------------------------------------------------------------------------------
================================================================================
btrfs-sxbackup-0.6.8-1.fc24 (FEDORA-2016-af87ef0702)
Incremental btrfs snapshot backups with push/pull support via SSH
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.8
--------------------------------------------------------------------------------
================================================================================
cassandra-java-driver-3.0.0-1.fc24 (FEDORA-2016-51ca4a98c1)
DataStax Java Driver for Apache Cassandra
--------------------------------------------------------------------------------
Update Information:
Initial RPM release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1324734 - Review Request: cassandra-java-driver - DataStax Java Driver for
Apache Cassandra
https://bugzilla.redhat.com/show_bug.cgi?id=1324734
--------------------------------------------------------------------------------
================================================================================
ceph-10.2.2-2.fc24 (FEDORA-2016-4c6f65b4aa)
User space components of the Ceph file system
--------------------------------------------------------------------------------
Update Information:
New minor release update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1348347 - Please rebuild to fix rbd/boost/gcc issue
https://bugzilla.redhat.com/show_bug.cgi?id=1348347
--------------------------------------------------------------------------------
================================================================================
disruptor-thrift-server-0.3.8-2.fc24 (FEDORA-2016-a3b3b776b7)
Thrift Server implementation backed by LMAX Disruptor
--------------------------------------------------------------------------------
Update Information:
Tests are skipped during build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1306575 - Review Request: disruptor-thrift-server - Thrift Server
implementation backed by LMAX Disruptor
https://bugzilla.redhat.com/show_bug.cgi?id=1306575
--------------------------------------------------------------------------------
================================================================================
dyninst-9.1.0-5.fc24 (FEDORA-2016-5bd8277036)
An API for Run-time Code Generation
--------------------------------------------------------------------------------
Update Information:
Use static TLS for libdyninstAPI_RT.so
--------------------------------------------------------------------------------
================================================================================
fusioninventory-agent-2.3.18-2.fc24 (FEDORA-2016-d8cd648076)
FusionInventory agent
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1300870 - fusioninventory-agent-2.3.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1300870
--------------------------------------------------------------------------------
================================================================================
galera-25.3.16-1.fc24 (FEDORA-2016-1221aa126d)
Synchronous multi-master wsrep provider (replication engine)
--------------------------------------------------------------------------------
Update Information:
Update to 25.3.16
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1321039 - new version of galera available: 25.3.15
https://bugzilla.redhat.com/show_bug.cgi?id=1321039
--------------------------------------------------------------------------------
================================================================================
generic-release-24-1 (FEDORA-2016-f346026720)
Generic release files
--------------------------------------------------------------------------------
Update Information:
Don't cause pre-release builds in f24.
--------------------------------------------------------------------------------
================================================================================
ghex-3.18.2-1.fc24 (FEDORA-2016-a73a600a83)
Binary editor for GNOME
--------------------------------------------------------------------------------
Update Information:
ghex 3.18.2 release with translation updates.
--------------------------------------------------------------------------------
================================================================================
gitg-3.20.1-1.fc24 (FEDORA-2016-a73d77a8cc)
GTK+ graphical interface for the git revision control system
--------------------------------------------------------------------------------
Update Information:
gitg 3.20.1 release. - Updated translations - Disable burger menu in dash -
Set primary selection to selected commit SHA1 - Reduce hot area for action bar
to mitigate horizontal scrolling issue - Show the complete message, not only
the subject - Misc fixes
--------------------------------------------------------------------------------
================================================================================
gnome-chemistry-utils-0.14.12-3.fc24 (FEDORA-2016-5a63ef4d39)
A set of chemical utilities
--------------------------------------------------------------------------------
Update Information:
This is an update to the latest upstream releases of gnumeric and goffice: *
http://gnumeric.org/announcements/1.12/gnumeric-1.12.30.html
--------------------------------------------------------------------------------
================================================================================
gnome-screenshot-3.20.1-1.fc24 (FEDORA-2016-cdea27a78b)
A screenshot utility for GNOME
--------------------------------------------------------------------------------
Update Information:
This update fixes an issue that caused gnome-screenshot to show up untranslated.
--------------------------------------------------------------------------------
================================================================================
gnumeric-1.12.30-1.fc24 (FEDORA-2016-5a63ef4d39)
Spreadsheet program for GNOME
--------------------------------------------------------------------------------
Update Information:
This is an update to the latest upstream releases of gnumeric and goffice: *
http://gnumeric.org/announcements/1.12/gnumeric-1.12.30.html
--------------------------------------------------------------------------------
================================================================================
goffice-0.10.30-1.fc24 (FEDORA-2016-5a63ef4d39)
G Office support libraries
--------------------------------------------------------------------------------
Update Information:
This is an update to the latest upstream releases of gnumeric and goffice: *
http://gnumeric.org/announcements/1.12/gnumeric-1.12.30.html
--------------------------------------------------------------------------------
================================================================================
gtksourceview3-3.20.4-1.fc24 (FEDORA-2016-930b4a7574)
A library for viewing source files
--------------------------------------------------------------------------------
Update Information:
gtksourceview 3.20.4 release. * Fix a critical message when showing a
completion window * Fix a general syntax highlighting issue * Other smaller
bug fixes * Translation updates
--------------------------------------------------------------------------------
================================================================================
hplip-3.16.5-2.fc24 (FEDORA-2016-8aa96ab25a)
HP Linux Imaging and Printing Project
--------------------------------------------------------------------------------
Update Information:
[abrt] 'source_option' is not defined
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1341304 - [abrt] hplip: hp-scan:663:<module>:NameError: name
'source_option' is not defined
https://bugzilla.redhat.com/show_bug.cgi?id=1341304
--------------------------------------------------------------------------------
================================================================================
hwdata-0.290-1.fc24 (FEDORA-2016-e7c6a31485)
Hardware identification and configuration data
--------------------------------------------------------------------------------
Update Information:
Updated pci and vendor ids.
--------------------------------------------------------------------------------
================================================================================
iputils-20160308-3.fc24 (FEDORA-2016-3d9ca9424f)
Network monitoring tools including ping
--------------------------------------------------------------------------------
Update Information:
Fix: Failed to bind to device (#1348934)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1348934 - Failed to bind to device
https://bugzilla.redhat.com/show_bug.cgi?id=1348934
--------------------------------------------------------------------------------
================================================================================
libfm-1.2.4-4.D20160618gitb22c0995e7.fc24 (FEDORA-2016-8675db6984)
GIO-based library for file manager-like programs
--------------------------------------------------------------------------------
Update Information:
Update the the newest git to pull in some bug fixes by the upstream.
--------------------------------------------------------------------------------
================================================================================
libjpeg-turbo-1.5.0-1.fc24 (FEDORA-2016-975b49148c)
A MMX/SSE2 accelerated library for manipulating JPEG image files
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.5.0 (#1343786)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1343786 - libjpeg-turbo-1.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1343786
--------------------------------------------------------------------------------
================================================================================
libsoc-0.8.2-1.fc24 (FEDORA-2016-e312d7acf1)
Interface with common SoC peripherals through generic kernel interfaces
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.2
--------------------------------------------------------------------------------
================================================================================
libtaskotron-0.4.13-3.fc24 (FEDORA-2016-a3ca68110e)
Taskotron Support Library
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1344249 - Review Request: libtaskotron - Taskotron Support Library
https://bugzilla.redhat.com/show_bug.cgi?id=1344249
--------------------------------------------------------------------------------
================================================================================
libvirt-python-1.3.3-3.fc24 (FEDORA-2016-f9336762ec)
The libvirt virtualization API python2 binding
--------------------------------------------------------------------------------
Update Information:
* Fix crash in getAllDomainStats (bz #1339535)
--------------------------------------------------------------------------------
================================================================================
lilypond-2.19.44-1.fc24 (FEDORA-2016-19ec158270)
A typesetting system for music notation
--------------------------------------------------------------------------------
Update Information:
2.19.44
--------------------------------------------------------------------------------
================================================================================
lilypond-doc-2.19.44-1.fc24 (FEDORA-2016-19ec158270)
HTML documentation for LilyPond
--------------------------------------------------------------------------------
Update Information:
2.19.44
--------------------------------------------------------------------------------
================================================================================
lxsession-0.5.2-10.D20160417git9f8d613332.fc24 (FEDORA-2016-852ae00fd6)
Lightweight X11 session manager
--------------------------------------------------------------------------------
Update Information:
Update the the newest git to pull in some bug fixes by the upstream.
--------------------------------------------------------------------------------
================================================================================
mdds-1.1.0-2.fc24 (FEDORA-2016-4bd570a7dd)
A collection of multi-dimensional data structures and indexing algorithms
--------------------------------------------------------------------------------
Update Information:
fix double delete in mtv::swap
--------------------------------------------------------------------------------
================================================================================
metrics-reporter-config-3.0.0-1.fc24 (FEDORA-2016-60a5bca291)
Manages config for metrics from Coda Hale���s Metrics library
--------------------------------------------------------------------------------
Update Information:
Initial RPM release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1306629 - Review Request: metrics-reporter-config - Manages config for Coda
Hale���s Metrics-reporter
https://bugzilla.redhat.com/show_bug.cgi?id=1306629
--------------------------------------------------------------------------------
================================================================================
minetest-0.4.14-1.fc24 (FEDORA-2016-c3c8ec8c2e)
Multiplayer infinite-world block sandbox with survival mode
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1336243 - minetest-0.4.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1336243
--------------------------------------------------------------------------------
================================================================================
mongo-cxx-driver-1.1.2-1.fc24 (FEDORA-2016-32bb831c06)
A legacy C++ Driver for MongoDB
--------------------------------------------------------------------------------
Update Information:
Upgrade to latest minor version.
--------------------------------------------------------------------------------
================================================================================
msitools-0.95-5.fc24 (FEDORA-2016-a7a2db6109)
Windows Installer tools
--------------------------------------------------------------------------------
Update Information:
Add libpcre as glib dependency ---- Fix libvirt-glib's translations
--------------------------------------------------------------------------------
================================================================================
ohc-0.4.2-4.fc24 (FEDORA-2016-413823b182)
Java large off heap cache
--------------------------------------------------------------------------------
Update Information:
launchers revised, not final
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1306945 - Review Request: ohc - Java large off heap cache
https://bugzilla.redhat.com/show_bug.cgi?id=1306945
--------------------------------------------------------------------------------
================================================================================
origin-1.2.0-1.git.0.2e62fab.fc24 (FEDORA-2016-243e23356b)
OpenShift Open Source Container Management by Red Hat
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version 1.2.0
--------------------------------------------------------------------------------
================================================================================
paraview-5.1.0-1.fc24 (FEDORA-2016-359b86b0df)
Parallel visualization application
--------------------------------------------------------------------------------
Update Information:
Update to 5.1.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1346533 - paraview-v5.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1346533
--------------------------------------------------------------------------------
================================================================================
php-zendframework-2.5.3-3.fc24 (FEDORA-2016-ba0dd522c8)
Zend Framework
--------------------------------------------------------------------------------
Update Information:
**zend-view 2.8.0** - 2016-06-21 - [#67](https://github.com/zendframework/zend-
view/pull/67) adds a script, `templatemap_generator.php`, which is available
in `vendor/bin/templatemap_generator.php` once installed. This script replaces
the original present in the zendframework/zendframework package, and
simplifies it for the most common use case. Usage is: ```bash $ cd
module/ModuleName/config $ ../../../vendor/bin/templatemap_generator.php
../view > template_map.config.php ``` You can also provide a list of files
via globbing or usage of `find` after the initial directory argument; if
provided that list of files will be used to generate the map. (The directory
argument is then used to strip the path information when generating the
template name.)
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-view-2.8.0-1.fc24 (FEDORA-2016-ba0dd522c8)
Zend Framework View component
--------------------------------------------------------------------------------
Update Information:
**zend-view 2.8.0** - 2016-06-21 - [#67](https://github.com/zendframework/zend-
view/pull/67) adds a script, `templatemap_generator.php`, which is available
in `vendor/bin/templatemap_generator.php` once installed. This script replaces
the original present in the zendframework/zendframework package, and
simplifies it for the most common use case. Usage is: ```bash $ cd
module/ModuleName/config $ ../../../vendor/bin/templatemap_generator.php
../view > template_map.config.php ``` You can also provide a list of files
via globbing or usage of `find` after the initial directory argument; if
provided that list of files will be used to generate the map. (The directory
argument is then used to strip the path information when generating the
template name.)
--------------------------------------------------------------------------------
================================================================================
python-concurrentloghandler-0.9.1-1.fc24 (FEDORA-2016-3e0d63f0f9)
Concurrent logging handler (drop-in replacement for RotatingFileHandler)
--------------------------------------------------------------------------------
Update Information:
- Update to 0.9.1 - add python3 subpackage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1288893 - Update to 0.9.1; add py3 subpkg; other fixes
https://bugzilla.redhat.com/show_bug.cgi?id=1288893
--------------------------------------------------------------------------------
================================================================================
python-portalocker-0.5.6-1.fc24 (FEDORA-2016-a31c198e2f)
Library to provide an easy API to file locking
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1288886 - Review Request: python-portalocker - Library to provide an easy API
to file locking
https://bugzilla.redhat.com/show_bug.cgi?id=1288886
--------------------------------------------------------------------------------
================================================================================
python-pygit2-0.24.1-1.fc24 (FEDORA-2016-8bababc8a9)
Python bindings for libgit2
--------------------------------------------------------------------------------
Update Information:
Update to 0.24.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1348750 - python-pygit2-0.24.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1348750
--------------------------------------------------------------------------------
================================================================================
python-zope-testrunner-4.5.1-2.fc24 (FEDORA-2016-718d7c9fd9)
Zope testrunner script
--------------------------------------------------------------------------------
Update Information:
python-zope-testrunner-4.5.1-2.fc24: - Bug fix release: Using the -j option to
run tests in multiple processes caused tests that used the multiprocessing
package to hang (because the testrunner replaced sys.stdin with an unclosable
object).
--------------------------------------------------------------------------------
================================================================================
qemu-2.6.0-4.fc24 (FEDORA-2016-a80eab65ba)
QEMU is a FAST! processor emulator
--------------------------------------------------------------------------------
Update Information:
* CVE-2016-4002: net: buffer overflow in MIPSnet (bz #1326083) * CVE-2016-4952
scsi: pvscsi: out-of-bounds access issue * CVE-2016-4964: scsi: mptsas infinite
loop (bz #1339157) * CVE-2016-5106: scsi: megasas: out-of-bounds write (bz
#1339581) * CVE-2016-5105: scsi: megasas: stack information leakage (bz
#1339585) * CVE-2016-5107: scsi: megasas: out-of-bounds read (bz #1339573) *
CVE-2016-4454: display: vmsvga: out-of-bounds read (bz #1340740) *
CVE-2016-4453: display: vmsvga: infinite loop (bz #1340744) * CVE-2016-5126:
block: iscsi: buffer overflow (bz #1340925) * CVE-2016-5238: scsi: esp: OOB
write (bz #1341932) * CVE-2016-5338: scsi: esp: OOB r/w access (bz #1343325) *
CVE-2016-5337: scsi: megasas: information leakage (bz #1343910) * Fix crash with
-nodefaults -sdl (bz #1340931) * Add deps on edk2-ovmf and edk2-aarch64
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1326082 - CVE-2016-4002 Qemu: net: buffer overflow in MIPSnet emulator
https://bugzilla.redhat.com/show_bug.cgi?id=1326082
[ 2 ] Bug #1334384 - CVE-2016-4952 Qemu: scsi: pvscsi: out-of-bounds access issue in
pvsci_ring_init_msg/data routines
https://bugzilla.redhat.com/show_bug.cgi?id=1334384
[ 3 ] Bug #1339155 - CVE-2016-4964 Qemu: scsi: mptsas infinite loop in
mptsas_fetch_requests
https://bugzilla.redhat.com/show_bug.cgi?id=1339155
[ 4 ] Bug #1339578 - CVE-2016-5106 Qemu: scsi: megasas: out-of-bounds write while
setting controller properties
https://bugzilla.redhat.com/show_bug.cgi?id=1339578
[ 5 ] Bug #1339583 - CVE-2016-5105 Qemu: scsi: megasas: stack information leakage while
reading configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1339583
[ 6 ] Bug #1336461 - CVE-2016-5107 Qemu: scsi: megasas: out-of-bounds read in
megasas_lookup_frame() function
https://bugzilla.redhat.com/show_bug.cgi?id=1336461
[ 7 ] Bug #1336429 - CVE-2016-4454 Qemu: display: vmsvga: out-of-bounds read in
vmsvga_fifo_read_raw() routine
https://bugzilla.redhat.com/show_bug.cgi?id=1336429
[ 8 ] Bug #1336650 - CVE-2016-4453 Qemu: display: vmsvga: infinite loop in
vmsvga_fifo_run() routine
https://bugzilla.redhat.com/show_bug.cgi?id=1336650
[ 9 ] Bug #1340924 - CVE-2016-5126 Qemu: block: iscsi: buffer overflow in
iscsi_aio_ioctl
https://bugzilla.redhat.com/show_bug.cgi?id=1340924
[ 10 ] Bug #1341931 - CVE-2016-5238 Qemu: scsi: esp: OOB write when using non-DMA mode
in get_cmd
https://bugzilla.redhat.com/show_bug.cgi?id=1341931
[ 11 ] Bug #1343323 - CVE-2016-5338 Qemu: scsi: esp: OOB r/w access while processing
ESP_FIFO
https://bugzilla.redhat.com/show_bug.cgi?id=1343323
[ 12 ] Bug #1343909 - CVE-2016-5337 Qemu: scsi: megasas: information leakage in
megasas_ctrl_get_info
https://bugzilla.redhat.com/show_bug.cgi?id=1343909
--------------------------------------------------------------------------------
================================================================================
rubygem-github-linguist-4.8.7-1.fc24 (FEDORA-2016-fd8aec7587)
GitHub Language detection
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1348747 - rubygem-github-linguist-v4.8.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1348747
--------------------------------------------------------------------------------
================================================================================
rubygem-nokogiri-1.6.8-2.fc24 (FEDORA-2016-1102efec25)
An HTML, XML, SAX, and Reader parser
--------------------------------------------------------------------------------
Update Information:
New version 1.6.8 is released.
--------------------------------------------------------------------------------
================================================================================
screen-4.4.0-1.fc24 (FEDORA-2016-08b610cc1d)
A screen manager that supports multiple logins on one terminal
--------------------------------------------------------------------------------
Update Information:
New upstream release 4.4.0 (#1348015)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1348015 - screen-4.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1348015
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.13.1-191.fc24.2 (FEDORA-2016-7553eb6439)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
More info:
http://koji.fedoraproject.org/koji/buildinfo?buildID=774750
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1306243 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1306243
[ 2 ] Bug #1313464 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1313464
[ 3 ] Bug #1323177 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1323177
[ 4 ] Bug #1330448 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1330448
[ 5 ] Bug #1339641 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1339641
[ 6 ] Bug #1340849 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1340849
[ 7 ] Bug #1340952 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1340952
[ 8 ] Bug #1342931 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1342931
[ 9 ] Bug #1343683 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1343683
[ 10 ] Bug #1344341 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1344341
[ 11 ] Bug #1344849 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1344849
--------------------------------------------------------------------------------
================================================================================
setroubleshoot-plugins-3.3.5.1-1.fc24 (FEDORA-2016-75ca94dee3)
Analysis plugins for use with setroubleshoot
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-4446
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1339250 - CVE-2016-4446 setroubleshoot-plugins: insecure commands.getoutput
use in the allow_execstack plugin
https://bugzilla.redhat.com/show_bug.cgi?id=1339250
--------------------------------------------------------------------------------
================================================================================
softhsm-2.1.0-1.fc24 (FEDORA-2016-376bda6d1d)
Software version of a PKCS#11 Hardware Security Module
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1244461 Updated to 2.1.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1244461 - softhsm-2.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1244461
[ 2 ] Bug #1272423 - Softhsm PKCS#11 module not visible to NSS becasue it is not in the
search path
https://bugzilla.redhat.com/show_bug.cgi?id=1272423
[ 3 ] Bug #11 - shutdown -F failsfr works
https://bugzilla.redhat.com/show_bug.cgi?id=11
[ 4 ] Bug #1177086 - A marked as trusted certificate cannot be written in a softhsmv2
db
https://bugzilla.redhat.com/show_bug.cgi?id=1177086
[ 5 ] Bug #1272453 - A marked as CA certificate cannot be written in a softhsmv2 db
https://bugzilla.redhat.com/show_bug.cgi?id=1272453
[ 6 ] Bug #162 - dosemu is not able to handle subst command / lredir in default
configuration
https://bugzilla.redhat.com/show_bug.cgi?id=162
--------------------------------------------------------------------------------
================================================================================
strongswan-5.4.0-2.fc24 (FEDORA-2016-9bd3da2443)
An OpenSource IPsec-based VPN and TNC solution
--------------------------------------------------------------------------------
Update Information:
Enhancement update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1298230 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1298230
--------------------------------------------------------------------------------
================================================================================
struts-1.3.10-18.fc24 (FEDORA-2016-d717fdcf74)
Web application framework
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-1181, CVE-2016-1182
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1343538 - CVE-2016-1181 struts: Vulnerability in ActionForm allows unintended
remote operations against components on server memory
https://bugzilla.redhat.com/show_bug.cgi?id=1343538
[ 2 ] Bug #1343540 - CVE-2016-1182 struts: Improper input validation in Validator
https://bugzilla.redhat.com/show_bug.cgi?id=1343540
--------------------------------------------------------------------------------
================================================================================
texinfo-6.1-3.fc24 (FEDORA-2016-81e90d2724)
Tools needed to create Texinfo format documentation files
--------------------------------------------------------------------------------
Update Information:
install-info: use create-tmp-then-rename pattern because of OSTree
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1348671 - [PATCH] install-info: Use create-tmp-then-rename pattern
https://bugzilla.redhat.com/show_bug.cgi?id=1348671
--------------------------------------------------------------------------------
================================================================================
tunir-0.16-1.fc24 (FEDORA-2016-477fc49f80)
An ultra light testing system
--------------------------------------------------------------------------------
Update Information:
Updates to bugfix release 0.16
--------------------------------------------------------------------------------
================================================================================
unicode-ucd-9.0.0-1.fc24 (FEDORA-2016-b0e1deb0de)
Unicode Character Database
--------------------------------------------------------------------------------
Update Information:
Update to new Unicode 9 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1232539 - unicode-ucd-9.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1232539
--------------------------------------------------------------------------------
================================================================================
vala-0.32.1-1.fc24 (FEDORA-2016-04e0f713d6)
A modern programming language for GNOME
--------------------------------------------------------------------------------
Update Information:
vala 0.32.1 release with bug fixes and binding updates.
--------------------------------------------------------------------------------
================================================================================
valgrind-3.11.0-23.fc24 (FEDORA-2016-d448fefa4a)
Tool for finding memory management bugs in programs
--------------------------------------------------------------------------------
Update Information:
Fix a bug with the pselect syscall wrapper, more syscall wrappers on ppc64
(sync, waitid and name_to/open_by_handle_at) and arm64 (name_to_handle_at and
open_by_handle_at).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1344082 - valgrind mishandles pselect with null sigmask
https://bugzilla.redhat.com/show_bug.cgi?id=1344082
--------------------------------------------------------------------------------
================================================================================
wireshark-2.1.0-2.fc24 (FEDORA-2016-e15a2af179)
Network traffic analyzer
--------------------------------------------------------------------------------
Update Information:
Install ws_diag_control.h into standard include directory ---- Ver. 2.1.0
---- Ver. 2.0.3
--------------------------------------------------------------------------------
================================================================================
wordpress-4.5.3-1.fc24 (FEDORA-2016-7db496f6f2)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
See upstream announcement [WordPress 4.5.3 Maintenance and Security
Release](ttps://wordpress.org/news/2016/06/wordpress-4-5-3/) Packaging changes:
- provide nginx configuration (fedora) - drop mandatory dependency on httpd
(suggested) #1336091 - protect php files in uploads directory
--------------------------------------------------------------------------------