The following Fedora 24 Security updates need testing:
Age URL
103
https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24
87
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0ef628998f
chicken-4.11.0-3.fc24
38
https://bodhi.fedoraproject.org/updates/FEDORA-2016-990e2012ea
compat-guile18-1.8.8-14.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-026ee97af7
moodle-3.1.3-1.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d40c768095 moin-1.9.9-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-54fd3bf412
perl-DBD-MySQL-4.039-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-49a72fb9bd
zathura-pdf-mupdf-0.3.0-3.fc24 mujs-0-6.20161031gita0ceaf5.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1cc5edde49
drupal7-7.52-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-24ffcb9a47
vagrant-1.8.1-5.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-16a522f9a6
teeworlds-0.6.4-2.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a0dc2c43d0 icu-56.1-7.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-93679a91df
jenkins-1.651.3-2.fc24 jenkins-remoting-2.62.3-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5c7e9b8778
calamares-2.4.4-5.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-dbbd3d43fe
drupal8-8.2.3-1.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
42
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f00a05d7b9
pungi-4.1.10-1.fc24
15
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f5e78ec298 rpm-4.13.0-1.fc24
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-188fa26fbc
lxsession-0.5.2-12.D20161106git7b9a9580da.fc24
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6466d563cc
libfm-1.2.4-9.D20161105gitc2989af015.fc24
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-92b77eef65
menu-cache-1.0.2-1.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-47a1d520ae
bluedevil-5.8.3-1.fc24 breeze-gtk-5.8.3-1.fc24 grub2-breeze-theme-5.8.3-1.fc24
kactivitymanagerd-5.8.3-1.fc24 kde-cli-tools-5.8.3-1.fc24 kde-gtk-config-5.8.3-1.fc24
kde-settings-24-8.fc24 kdecoration-5.8.3-1.fc24 kdeplasma-addons-5.8.3-1.fc24
kgamma-5.8.3-1.fc24 khotkeys-5.8.3-1.fc24 kinfocenter-5.8.3-1.fc24 kmenuedit-5.8.3-1.fc24
kscreen-5.8.3-1.fc24 kscreenlocker-5.8.3-1.fc24 ksshaskpass-5.8.3-1.fc24
ksysguard-5.8.3-1.fc24 kwayland-integration-5.8.3-1.fc24 kwin-5.8.3-1.fc24
kwrited-5.8.3-1.fc24 libkscreen-qt5-5.8.3-1.fc24 libksysguard-5.8.3-1.fc24
pam-kwallet-5.8.3-1.fc24 plasma-breeze-5.8.3-1.fc24 plasma-desktop-5.8.3-2.fc24
plasma-discover-5.8.3-1.fc24 plasma-integration-5.8.3-1.fc24 plasma-milou-5.8.3-1.fc24
plasma-nm-5.8.3-1.fc24 plasma-oxygen-5.8.3-1.fc24 plasma-pa-5.8.3-1.fc24
plasma-sdk-5.8.3-1.fc24 plasma-systemsettings-5.8.3-1.fc24
plasma-user-manager-5.8.3-1.fc24 plasma-workspace-5.8.3-1.fc24 plasma-wo
rkspace-wallpapers-5.8.3-1.fc24 plymouth-theme-breeze-5.8.3-1.fc24
polkit-kde-5.8.3-1.fc24 powerdevil-5.8.3-1.fc24 sddm-kcm-5.8.3-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cddf0ec383
nss-3.27.0-1.3.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3d5eef287e
ModemManager-1.6.4-1.fc24 libqmi-1.16.2-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a0dc2c43d0 icu-56.1-7.fc24
The following builds have been pushed to Fedora 24 updates-testing
NetworkManager-l2tp-1.2.4-1.fc24
batctl-2016.4-1.fc24
calamares-2.4.4-5.fc24
clamtk-5.24-1.fc24
debootstrap-1.0.87-1.fc24
drupal8-8.2.3-1.fc24
findbugs-contrib-6.8.1-1.fc24
gnudos-1.10-1.fc24
kbilliards-0.8.7b-23.fc24
libxsmm-1.5.2-2.fc24
lz4-1.7.3-1.fc24
orthorobot-1.1-6.fc24
php-horde-Horde-Core-2.27.3-1.fc24
php-udan11-sql-parser-3.4.13-1.fc24
pwmd-3.0.18-2.fc24
python-pygit2-0.24.2-1.fc24
sng-1.1.0-1.fc24
vdr-epg-daemon-1.1.46-1.fc24
w_scan-20161022-1.fc24
xcircuit-3.9.59-1.fc24
Details about builds:
================================================================================
NetworkManager-l2tp-1.2.4-1.fc24 (FEDORA-2016-863a28c489)
NetworkManager VPN plugin for L2TP and L2TP/IPsec
--------------------------------------------------------------------------------
Update Information:
Updated to 1.2.4 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1088675 - Please move nm-l2tp-auth-dialog (which depends on gtk3) to a
subpackage
https://bugzilla.redhat.com/show_bug.cgi?id=1088675
[ 2 ] Bug #1366832 - we require IKEv1 peer to have ID '(a)ip.addr' , but peer
declares 'ip.addr'
https://bugzilla.redhat.com/show_bug.cgi?id=1366832
--------------------------------------------------------------------------------
================================================================================
batctl-2016.4-1.fc24 (FEDORA-2016-d110d26664)
B.A.T.M.A.N. advanced control and management tool
--------------------------------------------------------------------------------
Update Information:
* integrate support for batman-adv netlink * fix endless loop in TP meter on
some platforms
--------------------------------------------------------------------------------
================================================================================
calamares-2.4.4-5.fc24 (FEDORA-2016-5c7e9b8778)
Installer from a live CD/DVD/USB to disk
--------------------------------------------------------------------------------
Update Information:
A security update that fixes Calamares bug CAL-405:
https://calamares.io/bugs/browse/CAL-405 When installing with a LUKS-encrypted
`/` partition, Calamares was always creating a keyfile to decode `/` and storing
it in the initramfs. It did that even with an unencrypted separate `/boot`
partition. As a result, the keyfile would be stored in cleartext on the `/boot`
partition, and it was possible to unlock the `/` partition without ever entering
a passphrase. This completely defeated the security of LUKS. Please note that
this only affects manual partitioning. The automatic partitioning never leaves
`/boot` unencrypted (and it is, in fact, recommended to also always encrypt
`/boot` when doing manual partitioning). This update fixes the `dracutlukscfg`
module to not add the keyfile to `install_items` in the `dracut` configuration
(so that `dracut` will not include it onto the initramfs) if `/boot` is separate
and unencrypted.
--------------------------------------------------------------------------------
================================================================================
clamtk-5.24-1.fc24 (FEDORA-2016-85b597d334)
Easy to use graphical user interface for Clam anti virus
--------------------------------------------------------------------------------
Update Information:
Update to 5.24, fixing the gtk-new icon issue. Help documentation removed.
Updated language files.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1386370 - clamtk works on Fedora 25 Workstation, but doesn't start on
Fedora 25 KDE
https://bugzilla.redhat.com/show_bug.cgi?id=1386370
--------------------------------------------------------------------------------
================================================================================
debootstrap-1.0.87-1.fc24 (FEDORA-2016-b300f224f3)
Debian GNU/Linux bootstrapper
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
================================================================================
drupal8-8.2.3-1.fc24 (FEDORA-2016-dbbd3d43fe)
An open source content management platform
--------------------------------------------------------------------------------
Update Information:
* [8.2.3 Release
Notes](https://www.drupal.org/project/drupal/releases/8.2.3)
* [Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-
CORE-2016-005](https://www.drupal.org/SA-CORE-2016-005)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1395919 - drupal8-8.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1395919
--------------------------------------------------------------------------------
================================================================================
findbugs-contrib-6.8.1-1.fc24 (FEDORA-2016-41ec0eef51)
Extra findbugs detectors
--------------------------------------------------------------------------------
Update Information:
Update to 6.8.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1396311 - findbugs-contrib-6.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1396311
--------------------------------------------------------------------------------
================================================================================
gnudos-1.10-1.fc24 (FEDORA-2016-bbdfed7996)
The GnuDOS library for GNU/Linux
--------------------------------------------------------------------------------
Update Information:
Bug fixes in mino
--------------------------------------------------------------------------------
================================================================================
kbilliards-0.8.7b-23.fc24 (FEDORA-2016-63d1df65d3)
A Fun Billiards Simulator Game
--------------------------------------------------------------------------------
Update Information:
This KBilliards update fixes corrupt PNG images that were not displayed.
--------------------------------------------------------------------------------
================================================================================
libxsmm-1.5.2-2.fc24 (FEDORA-2016-e9e3962e27)
Small dense or sparse matrix multiplications and convolutions for x86_64
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1389016 - Review Request: libxsmm - Library for small matrix-matrix
multiplications on Intel x86_64 (e.g. for cp2k)
https://bugzilla.redhat.com/show_bug.cgi?id=1389016
--------------------------------------------------------------------------------
================================================================================
lz4-1.7.3-1.fc24 (FEDORA-2016-ce3db625c8)
Extremely fast compression algorithm
--------------------------------------------------------------------------------
Update Information:
Update to 1.7.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1395458 - lz4-v1.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1395458
--------------------------------------------------------------------------------
================================================================================
orthorobot-1.1-6.fc24 (FEDORA-2016-2cd20b9334)
A perspective based puzzle game
--------------------------------------------------------------------------------
Update Information:
Fix bug where mouse clicks are not registered on f24+
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.27.3-1.fc24 (FEDORA-2016-6ea510254e)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.27.3** * [mjr] Improve handling of certain ActiveSync failures.
* [jan] Fix parsing abbreviated Norwegian month names too (Bug #14503). ----
**Horde_Core 2.27.2** * [mjr] Prevent building invalid HTML when building an
email from a SMART_REPLY (Bug #14500). ---- **Horde_Core 2.27.1** * [jan]
Allow administrators to log in if preference backend is not available. * [mjr]
Log message headers on error when sending email via ActiveSync. * [jan] Fix
warning if an old locale is longer than 255 characters (Bug #14489). * [jan] Fix
abbreviated Norwegian month names in JavaScript to include trailing dot (Bug
#14488). * [jan] Fix reading session data from the command line with PHP 7.
--------------------------------------------------------------------------------
================================================================================
php-udan11-sql-parser-3.4.13-1.fc24 (FEDORA-2016-41d7de6e7d)
A validating SQL lexer and parser with a focus on MySQL dialect
--------------------------------------------------------------------------------
Update Information:
**Version 3.4.13** - 2016-11-15 * Fix broken incorrect clause order detection
for Joins. * Add parsing of end options in Select statements. ---- **Version
3.4.12** - 2016-11-09 * Added verification order of SELECT statement clauses.
--------------------------------------------------------------------------------
================================================================================
pwmd-3.0.18-2.fc24 (FEDORA-2016-2fae32d5e1)
A server for storing application data at a central location
--------------------------------------------------------------------------------
Update Information:
Fix dependencies for FBTFS (rhbz: 1239812, 1307885)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1239812 - pwmd: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1239812
[ 2 ] Bug #1307885 - pwmd: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1307885
--------------------------------------------------------------------------------
================================================================================
python-pygit2-0.24.2-1.fc24 (FEDORA-2016-0ea52ce8af)
Python bindings for libgit2
--------------------------------------------------------------------------------
Update Information:
Update to 0.24.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1390796 - python-pygit2-0.24.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1390796
--------------------------------------------------------------------------------
================================================================================
sng-1.1.0-1.fc24 (FEDORA-2016-c4fdb9cf6e)
Lossless editing of PNGs via a textual representation
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
================================================================================
vdr-epg-daemon-1.1.46-1.fc24 (FEDORA-2016-82282366c0)
A daemon to download EPG data from internet and manage it in a mysql database
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.46 ---- Update to 1.1.44 ---- Update to 1.1.42
--------------------------------------------------------------------------------
================================================================================
w_scan-20161022-1.fc24 (FEDORA-2016-1de158a3be)
Tool for scanning DVB transponders
--------------------------------------------------------------------------------
Update Information:
Update to latest version.
--------------------------------------------------------------------------------
================================================================================
xcircuit-3.9.59-1.fc24 (FEDORA-2016-e5ca0b4ff4)
Electronic circuit schematic drawing program
--------------------------------------------------------------------------------
Update Information:
New version 3.9.59 is released.
--------------------------------------------------------------------------------