The following Fedora 24 Security updates need testing:
Age URL
146
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
139
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24
101
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba
runc-1.0.0-5.rc2.gitc91b5be.fc24
82
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4b176c1694 redis-3.2.8-1.fc24
52
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0f5fe1913f
sane-backends-1.0.25-7.fc24
44
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ec01954fe9
chromium-57.0.2987.133-1.fc24
38
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8330a48ca2
python-XStatic-jquery-ui-1.12.0.1-1.fc24
17
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0b6da97aa5
squirrelmail-1.4.22-19.fc24
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c3ce061ea7 lynis-2.5.0-1.fc24
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7a0e2d58f8
thunderbird-52.1.0-1.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ebe41f3fd7
python-fedora-0.9.0-3.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-01a7989fc0 git-2.7.5-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8b4898ce81
kdelibs-4.14.30-2.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-aceb424894 smb4k-1.2.2-3.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-da0b00fd64
jasper-1.900.13-4.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4de07172f4
postgresql-9.5.7-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-947da3daa5
chicken-4.12.0-2.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-eaab38c11e
deluge-1.3.15-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3f2d5790d2
pcmanfm-1.2.5-2.fc24 menu-cache-1.0.2-4.D20170514git56f6668459.fc24
lxterminal-0.3.0-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fc10e3165a
FlightGear-2016.1.2-6.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
34
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ae0e285fc1
libdrm-2.4.79-1.fc24
25
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e1905fd566 koji-1.12.0-2.fc24
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3a209288cf audit-2.7.6-1.fc24
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-94e1a0cb77
libXdmcp-1.1.2-6.fc24
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-80497255ca
libICE-1.0.9-9.fc24
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a16494458f rsync-3.1.2-3.fc24
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7a0e2d58f8
thunderbird-52.1.0-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9a479a2cff
kernel-4.10.15-100.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1fa6f4f9bf cups-2.1.4-7.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1e4ebe1303
hwdata-0.300-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2dde77a642
python-beautifulsoup4-4.6.0-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6dfa4501e8
qt5-qtbase-5.6.2-4.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-830e540c85
python3-3.5.3-6.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-da0b00fd64
jasper-1.900.13-4.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-05913d5475
python-2.7.13-2.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ea08548d1a vim-8.0.596-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8b4898ce81
kdelibs-4.14.30-2.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-01a7989fc0 git-2.7.5-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3fa1357529
webkitgtk4-2.16.2-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3f2d5790d2
pcmanfm-1.2.5-2.fc24 menu-cache-1.0.2-4.D20170514git56f6668459.fc24
lxterminal-0.3.0-3.fc24
The following builds have been pushed to Fedora 24 updates-testing
FlightGear-2016.1.2-6.fc24
lxterminal-0.3.0-3.fc24
magic-8.1.166-1.fc24
menu-cache-1.0.2-4.D20170514git56f6668459.fc24
pcmanfm-1.2.5-2.fc24
perl-Devel-PPPort-3.36-1.fc24
perl-IPC-Cmd-0.98-1.fc24
perl-Inline-C-0.77-1.fc24
perl-Net-HTTP-6.15-1.fc24
php-egulias-email-validator-1.2.13-3.fc24
php-gitter-0.3.0-8.fc24
php-gliph-0.1.8-7.fc24
php-guzzlehttp-guzzle-5.3.1-3.fc24
php-guzzlehttp-ringphp-1.1.0-9.fc24
php-guzzlehttp-streams-3.0.0-9.fc24
python36-3.6.1-1.fc24
qmapshack-1.8.1-1.fc24
Details about builds:
================================================================================
FlightGear-2016.1.2-6.fc24 (FEDORA-2017-fc10e3165a)
The FlightGear Flight Simulator
--------------------------------------------------------------------------------
Update Information:
This updates fixes a security bug in the route manager, to prevent it from
overwriting arbitrary files (CVE-2017-8921)
--------------------------------------------------------------------------------
================================================================================
lxterminal-0.3.0-3.fc24 (FEDORA-2017-3f2d5790d2)
Desktop-independent VTE-based terminal emulator
--------------------------------------------------------------------------------
Update Information:
A potential security flaw is found on LXDE products, which create socket under
/tmp with some predictable names, which may leads to DOS. The security flow on
lxterminal is now assigned as CVE-2016-10369. Some other components also had
similar issues. These new rpms should fix these issues. At least relogin is
required to make this fix effect.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1449114 - CVE-2016-10369 lxterminal: Insecure use of /tmp for a socket file
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1449114
--------------------------------------------------------------------------------
================================================================================
magic-8.1.166-1.fc24 (FEDORA-2017-c0a6dc5d7f)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.1.166 is released.
--------------------------------------------------------------------------------
================================================================================
menu-cache-1.0.2-4.D20170514git56f6668459.fc24 (FEDORA-2017-3f2d5790d2)
Caching mechanism for
freedesktop.org compliant menus
--------------------------------------------------------------------------------
Update Information:
A potential security flaw is found on LXDE products, which create socket under
/tmp with some predictable names, which may leads to DOS. The security flow on
lxterminal is now assigned as CVE-2016-10369. Some other components also had
similar issues. These new rpms should fix these issues. At least relogin is
required to make this fix effect.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1449114 - CVE-2016-10369 lxterminal: Insecure use of /tmp for a socket file
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1449114
--------------------------------------------------------------------------------
================================================================================
pcmanfm-1.2.5-2.fc24 (FEDORA-2017-3f2d5790d2)
Extremly fast and lightweight file manager
--------------------------------------------------------------------------------
Update Information:
A potential security flaw is found on LXDE products, which create socket under
/tmp with some predictable names, which may leads to DOS. The security flow on
lxterminal is now assigned as CVE-2016-10369. Some other components also had
similar issues. These new rpms should fix these issues. At least relogin is
required to make this fix effect.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1449114 - CVE-2016-10369 lxterminal: Insecure use of /tmp for a socket file
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1449114
--------------------------------------------------------------------------------
================================================================================
perl-Devel-PPPort-3.36-1.fc24 (FEDORA-2017-1e4e09edce)
Perl Pollution Portability header generator
--------------------------------------------------------------------------------
Update Information:
This release fixes building on Perl without "." in @INC path.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450650 - perl-Devel-PPPort-3.36 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1450650
--------------------------------------------------------------------------------
================================================================================
perl-IPC-Cmd-0.98-1.fc24 (FEDORA-2017-e90bd93b0e)
Finding and running system commands made easy
--------------------------------------------------------------------------------
Update Information:
This release fixes can_run() test not to search working directory. It also adds
wait_loop_callback for run_forked().
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450538 - perl-IPC-Cmd-0.98 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1450538
--------------------------------------------------------------------------------
================================================================================
perl-Inline-C-0.77-1.fc24 (FEDORA-2017-dbd794e1f5)
Write Perl subroutines in C
--------------------------------------------------------------------------------
Update Information:
This release fixes tests and updates documentation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450537 - perl-Inline-C-0.77 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1450537
--------------------------------------------------------------------------------
================================================================================
perl-Net-HTTP-6.15-1.fc24 (FEDORA-2017-5d411c1588)
Low-level HTTP connection (client)
--------------------------------------------------------------------------------
Update Information:
This release fixes a test.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450543 - perl-Net-HTTP-6.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1450543
--------------------------------------------------------------------------------
================================================================================
php-egulias-email-validator-1.2.13-3.fc24 (FEDORA-2017-07e3422d39)
A library for validating emails
--------------------------------------------------------------------------------
Update Information:
Switch autoloader to `php-fedora-autoloader`
--------------------------------------------------------------------------------
================================================================================
php-gitter-0.3.0-8.fc24 (FEDORA-2017-07e3422d39)
Object oriented interaction with Git repositories
--------------------------------------------------------------------------------
Update Information:
Switch autoloader to `php-fedora-autoloader`
--------------------------------------------------------------------------------
================================================================================
php-gliph-0.1.8-7.fc24 (FEDORA-2017-07e3422d39)
A graph library for PHP
--------------------------------------------------------------------------------
Update Information:
Switch autoloader to `php-fedora-autoloader`
--------------------------------------------------------------------------------
================================================================================
php-guzzlehttp-guzzle-5.3.1-3.fc24 (FEDORA-2017-07e3422d39)
PHP HTTP client and webservice framework
--------------------------------------------------------------------------------
Update Information:
Switch autoloader to `php-fedora-autoloader`
--------------------------------------------------------------------------------
================================================================================
php-guzzlehttp-ringphp-1.1.0-9.fc24 (FEDORA-2017-07e3422d39)
Simple handler system used to power clients and servers in PHP
--------------------------------------------------------------------------------
Update Information:
Switch autoloader to `php-fedora-autoloader`
--------------------------------------------------------------------------------
================================================================================
php-guzzlehttp-streams-3.0.0-9.fc24 (FEDORA-2017-07e3422d39)
Provides a simple abstraction over streams of data
--------------------------------------------------------------------------------
Update Information:
Switch autoloader to `php-fedora-autoloader`
--------------------------------------------------------------------------------
================================================================================
python36-3.6.1-1.fc24 (FEDORA-2017-97b16fe12b)
Version 3.6 of the Python programming language aka Python 3000
--------------------------------------------------------------------------------
Update Information:
Update to 3.6.1
--------------------------------------------------------------------------------
================================================================================
qmapshack-1.8.1-1.fc24 (FEDORA-2017-ceeab41674)
GPS mapping and management tool
--------------------------------------------------------------------------------
Update Information:
- updated to 1.8.1 -
https://bitbucket.org/maproom/qmapshack/raw/87b93cd14edc78c
57da70b66b33b013965d6dfe2/changelog.txt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450653 - qmapshack-1.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1450653
--------------------------------------------------------------------------------