The following Fedora 24 Security updates need testing:
Age URL
134
https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24
118
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0ef628998f
chicken-4.11.0-3.fc24
69
https://bodhi.fedoraproject.org/updates/FEDORA-2016-990e2012ea
compat-guile18-1.8.8-14.fc24
31
https://bodhi.fedoraproject.org/updates/FEDORA-2016-93679a91df
jenkins-1.651.3-2.fc24 jenkins-remoting-2.62.3-1.fc24
15
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b465090499
ipsilon-2.0.2-2.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7de64a450f
botan-1.10.14-3.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-bcbae0781f xen-4.6.4-4.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a1f774c3d7
FlightGear-2016.1.2-5.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-04383482b4
game-music-emu-0.6.1-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2b1f91e9bd
kernel-4.8.15-200.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-608be17784
python-wikitcms-2.1.10-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-631737a49a
tracker-1.8.2-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d337166907
freeipa-4.3.2-4.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8586235698
nagios-plugins-2.1.4-2.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c7e60a9fd4
community-mysql-5.7.17-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3b7f39a8c1
openjpeg2-2.1.2-3.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-52a1b18397
mingw-openjpeg2-2.1.2-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-09dc3efcd2 samba-4.4.8-0.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-76b646637e
tor-0.2.8.12-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-06e8a3f776
js-jquery1-1.12.4-2.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8516b7d6fb
js-jquery-2.2.4-1.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
34
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cddf0ec383
nss-3.27.0-1.3.fc24
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-90bd4d7d33
selinux-policy-3.13.1-191.23.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d4be615424 libfm-1.2.5-1.fc24
lxsession-0.5.3-2.fc24 pcmanfm-1.2.5-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d2820fc67d
libvorbis-1.3.5-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-700f16d3f3
gnome-online-accounts-3.20.5-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0281ab71ff vim-8.0.134-2.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2b1f91e9bd
kernel-4.8.15-200.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ab5b9ae96b audit-2.7-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8b3063d71c meson-0.36.0-4.fc24
redhat-rpm-config-42-2.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f5c57e05b6
openssl-1.0.2j-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-09dc3efcd2 samba-4.4.8-0.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-85dffa754f
perl-5.22.2-365.fc24
The following builds have been pushed to Fedora 24 updates-testing
bubblewrap-0.1.5-1.fc24
cinch-0.2.1-3.fc24
fedpkg-1.26-4.fc24
file-roller-3.20.4-1.fc24
flatpak-0.8.0-1.fc24
gupnp-tools-0.8.13-1.fc24
jabberd-2.4.0-6.fc24
js-jquery-2.2.4-1.fc24
js-jquery1-1.12.4-2.fc24
libspf2-1.2.10-12.20150405gitd57d79fd.fc24
lis-1.7.20-1.fc24
meson-0.37.1-1.fc24
monkeysphere-0.41-1.fc24
opendkim-2.11.0-0.1.fc24
openssl-1.0.2j-3.fc24
perl-CPAN-Perl-Releases-3.02-1.fc24
perl-Module-CoreList-5.20161220-1.fc24
pgRouting-2.2.4-1.fc24
rpkg-1.47-7.fc24
spatialite-gui-1.7.1-10.fc24
tor-0.2.8.12-1.fc24
uwsgi-2.0.14-3.fc24
Details about builds:
================================================================================
bubblewrap-0.1.5-1.fc24 (FEDORA-2016-2c48ad7b5c)
Core execution tool for unprivileged containers
--------------------------------------------------------------------------------
Update Information:
flatpak 0.8.0 release. For details, see
https://github.com/flatpak/flatpak/releases/tag/0.8.0
--------------------------------------------------------------------------------
================================================================================
cinch-0.2.1-3.fc24 (FEDORA-2016-d05af72e68)
A tool for provisioning Jenkins components for CI
--------------------------------------------------------------------------------
Update Information:
Updated Source0 with name macro substitution
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1393947 - Review Request: cinch - A tool for provisioning Jenkins components
for CI
https://bugzilla.redhat.com/show_bug.cgi?id=1393947
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.26-4.fc24 (FEDORA-2016-1146121922)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
Fixed issues: - [#87](https://pagure.io/fedpkg/issue/87) - fedpkg is
incompatible with bodhi 2.x
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1404724 - ���fedpkg update��� fails when the last git log message contains
non-ASCII.
https://bugzilla.redhat.com/show_bug.cgi?id=1404724
[ 2 ] Bug #1241059 - Could not execute new_sources: unsupported second type in tuple
https://bugzilla.redhat.com/show_bug.cgi?id=1241059
[ 3 ] Bug #1404102 - __init__.py:237 (login_koji_session): AttributeError:
'module' object has no attribute 'ssl'
https://bugzilla.redhat.com/show_bug.cgi?id=1404102
--------------------------------------------------------------------------------
================================================================================
file-roller-3.20.4-1.fc24 (FEDORA-2016-9cf67b8569)
Tool for viewing and creating archives
--------------------------------------------------------------------------------
Update Information:
file-roller 3.20.4 release, fixing an issue with file-roller not respecting sort
order for folders.
--------------------------------------------------------------------------------
================================================================================
flatpak-0.8.0-1.fc24 (FEDORA-2016-2c48ad7b5c)
Application deployment framework for desktop apps
--------------------------------------------------------------------------------
Update Information:
flatpak 0.8.0 release. For details, see
https://github.com/flatpak/flatpak/releases/tag/0.8.0
--------------------------------------------------------------------------------
================================================================================
gupnp-tools-0.8.13-1.fc24 (FEDORA-2016-c72ee33a20)
A collection of dev tools utilising GUPnP and GTK+
--------------------------------------------------------------------------------
Update Information:
gupnp-tools 0.8.13 release. For details, please see
https://mail.gnome.org/archives/ftp-release-list/2016-November/msg00089.html
--------------------------------------------------------------------------------
================================================================================
jabberd-2.4.0-6.fc24 (FEDORA-2016-fb40414eb1)
OpenSource server implementation of the Jabber protocols
--------------------------------------------------------------------------------
Update Information:
Added patches to fix "segfaut in 'sm' component when blocking users"
(#1406062)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1406062 - segfaut in 'sm' component when blocking users
https://bugzilla.redhat.com/show_bug.cgi?id=1406062
--------------------------------------------------------------------------------
================================================================================
js-jquery-2.2.4-1.fc24 (FEDORA-2016-8516b7d6fb)
JavaScript DOM manipulation, event handling, and AJAX library
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.4 with backport for XSS vulnerability.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1307666 - js-jquery: FTBFS in F24
https://bugzilla.redhat.com/show_bug.cgi?id=1307666
[ 2 ] Bug #1399550 - js-jquery: Cross-site scripting via cross-domain ajax requests
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1399550
[ 3 ] Bug #1399549 - js-jquery: Cross-site scripting via cross-domain ajax requests
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1399549
--------------------------------------------------------------------------------
================================================================================
js-jquery1-1.12.4-2.fc24 (FEDORA-2016-06e8a3f776)
JavaScript DOM manipulation, event handling, and AJAX library
--------------------------------------------------------------------------------
Update Information:
Update to latest jquery1 stable, with backport fix for XSS vulnerability.)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1307668 - js-jquery1: FTBFS in F24
https://bugzilla.redhat.com/show_bug.cgi?id=1307668
[ 2 ] Bug #1257589 - Upgrade js-jquery1 to 1.11.3
https://bugzilla.redhat.com/show_bug.cgi?id=1257589
[ 3 ] Bug #1399548 - js-jquery1: js-jquery: Cross-site scripting via cross-domain ajax
requests [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1399548
[ 4 ] Bug #1399547 - js-jquery1: js-jquery: Cross-site scripting via cross-domain ajax
requests [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1399547
--------------------------------------------------------------------------------
================================================================================
libspf2-1.2.10-12.20150405gitd57d79fd.fc24 (FEDORA-2016-162bee9133)
An implementation of the SPF specification
--------------------------------------------------------------------------------
Update Information:
Simplify release numbers (same for both library and perl module)
--------------------------------------------------------------------------------
================================================================================
lis-1.7.20-1.fc24 (FEDORA-2016-e850117b0c)
A library for solving linear equations and eigenvalue problems
--------------------------------------------------------------------------------
Update Information:
Update to 1.7.20 ---- Add new binaries ---- Update to 1.6.24 ---- Update
to 1.6.10 ---- Update to 1.6.2 ---- Update to 1.5.76
--------------------------------------------------------------------------------
================================================================================
meson-0.37.1-1.fc24 (FEDORA-2016-b9ecaa6f9f)
High productivity build system
--------------------------------------------------------------------------------
Update Information:
Update to 0.37.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1401062 - %meson -Denable_gudev=true does not work
https://bugzilla.redhat.com/show_bug.cgi?id=1401062
--------------------------------------------------------------------------------
================================================================================
monkeysphere-0.41-1.fc24 (FEDORA-2016-be6e876b82)
Use the OpenPGP web of trust to verify SSH connections
--------------------------------------------------------------------------------
Update Information:
Update monkeysphere to 0.41 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1402815 - monkeysphere-0.41 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1402815
--------------------------------------------------------------------------------
================================================================================
opendkim-2.11.0-0.1.fc24 (FEDORA-2016-b7f873f53e)
A DomainKeys Identified Mail (DKIM) milter to sign and/or verify mail
--------------------------------------------------------------------------------
Update Information:
Updating to the 2.11.Alpha0 upstream source @
https://sourceforge.net/projects/opendkim/, which has been stable since 2015.
Patches included for: * openssl 1.1.0 support
(
https://sourceforge.net/p/opendkim/patches/35/) * strl.h location
(
https://sourceforge.net/p/opendkim/patches/37/) Thanks @adamwill for the nudge
on re-diffing patches.
--------------------------------------------------------------------------------
================================================================================
openssl-1.0.2j-3.fc24 (FEDORA-2016-f5c57e05b6)
Utilities from the general purpose cryptography library with TLS implementation
--------------------------------------------------------------------------------
Update Information:
Bug fix for a dead lock problem in FIPS mode
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1400922 - OpenSSL 1.0.2j deadlock in FIPS mode
https://bugzilla.redhat.com/show_bug.cgi?id=1400922
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.02-1.fc24 (FEDORA-2016-ce23d3f1e5)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1406581 - perl-CPAN-Perl-Releases-3.02 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1406581
--------------------------------------------------------------------------------
================================================================================
perl-Module-CoreList-5.20161220-1.fc24 (FEDORA-2016-d3c00ae2d6)
What modules are shipped with versions of perl
--------------------------------------------------------------------------------
Update Information:
This release provides data for Perl 5.25.8.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1406587 - perl-Module-CoreList-5.20161220 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1406587
--------------------------------------------------------------------------------
================================================================================
pgRouting-2.2.4-1.fc24 (FEDORA-2016-8d1b130bac)
Provides routing functionality to PostGIS/PostgreSQL
--------------------------------------------------------------------------------
Update Information:
Fixed Regression error pgr_nodeNetwork
--------------------------------------------------------------------------------
================================================================================
rpkg-1.47-7.fc24 (FEDORA-2016-1146121922)
Utility for interacting with rpm+git packaging systems
--------------------------------------------------------------------------------
Update Information:
Fixed issues: - [#87](https://pagure.io/fedpkg/issue/87) - fedpkg is
incompatible with bodhi 2.x
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1404724 - ���fedpkg update��� fails when the last git log message contains
non-ASCII.
https://bugzilla.redhat.com/show_bug.cgi?id=1404724
[ 2 ] Bug #1241059 - Could not execute new_sources: unsupported second type in tuple
https://bugzilla.redhat.com/show_bug.cgi?id=1241059
[ 3 ] Bug #1404102 - __init__.py:237 (login_koji_session): AttributeError:
'module' object has no attribute 'ssl'
https://bugzilla.redhat.com/show_bug.cgi?id=1404102
--------------------------------------------------------------------------------
================================================================================
spatialite-gui-1.7.1-10.fc24 (FEDORA-2016-ab7bb31059)
GUI to manage Spatialite databases
--------------------------------------------------------------------------------
Update Information:
Fixed the linking issues that broke building this package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1308147 - spatialite-gui: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1308147
--------------------------------------------------------------------------------
================================================================================
tor-0.2.8.12-1.fc24 (FEDORA-2016-76b646637e)
Anonymizing overlay network for TCP
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-1254
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1406314 - CVE-2016-1254 tor: Remote DoS via parsing problem
https://bugzilla.redhat.com/show_bug.cgi?id=1406314
--------------------------------------------------------------------------------
================================================================================
uwsgi-2.0.14-3.fc24 (FEDORA-2016-ca7bccc3cc)
Fast, self-healing, application container server
--------------------------------------------------------------------------------
Update Information:
enable psgi plugin on el7
--------------------------------------------------------------------------------