The following Fedora 24 Security updates need testing:
Age URL
36
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b3f93ead5b moin-1.9.8-1.fc24
18
https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24
15
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2b0c16fd82
tomcat-8.0.36-2.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c07d18b2a5
java-1.8.0-openjdk-aarch32-1.8.0.102-1.160812.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-92a3655b70
freeipa-4.3.2-2.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b4919ffe56
rubygem-activerecord-4.2.5.2-2.fc24 rubygem-actionpack-4.2.5.2-3.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-20014bf2bd
borgbackup-1.0.7-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c654464bce
kernel-4.7.2-200.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0ef628998f
chicken-4.11.0-3.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9743cce120
canl-c-2.1.7-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8749c58855
ganglia-3.7.2-10.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
30
https://bodhi.fedoraproject.org/updates/FEDORA-2016-494a721a73
ModemManager-1.6.0-1.fc24 libmbim-1.14.0-1.fc24 libqmi-1.16.0-1.fc24
usb_modeswitch-2.4.0-4.fc24 usb_modeswitch-data-20160612-3.fc24
16
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ddadfe403c pungi-4.1.8-1.fc24
python-productmd-1.2-2.fc24
13
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ced841e94b
menu-cache-1.0.1-2.D20160506git2932d67f30.fc24
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-74811dcebf
linux-firmware-20160816-67.git7c3dfc0b.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-aa32e6e85b
libfm-1.2.4-6.D20160627git2a537414de.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c654464bce
kernel-4.7.2-200.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-11303fb003
selinux-policy-3.13.1-191.14.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0edc0e1794
livecd-tools-23.4-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5e638095ea
libtasn1-4.9-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3889b0a2a curl-7.47.1-7.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-33b409649c
xorg-x11-server-1.18.4-4.fc24
The following builds have been pushed to Fedora 24 updates-testing
abi-dumper-0.99.17-1.fc24
ardour5-5.1.0-1.fc24
btrfs-sxbackup-0.6.10-1.fc24
chromium-52.0.2743.116-10.fc24
cmst-2016.08.11-1.git75a3f0b.fc24
curl-7.47.1-7.fc24
eclipse-4.6.0-6.fc24
embree-2.10.0-7.fc24
etckeeper-1.18.5-1.fc24
fedfind-2.4.11-1.fc24
golang-googlecode-tools-0-13.1.git1cdaff4.fc24
irrlicht-1.8.4-1.fc24
java-1.8.0-openjdk-1.8.0.102-1.b14.fc24
kicad-4.0.3-1.fc24
libnl3-3.2.28-3.fc24
libtasn1-4.9-1.fc24
libteam-1.26-1.fc24
livecd-tools-23.4-1.fc24
nfs-utils-1.3.4-1.rc2.fc24
python-dict-sorted-1.0.0-1.fc24
python-impacket-0.9.15-3.fc24
python-twitter-3.1-1.fc24
python-whichcraft-0.4.0-2.fc24
rpmlint-1.9-3.fc24
tor-0.2.8.7-1.fc24
vdr-epg-daemon-1.1.12-1.fc24
vdr-epg2vdr-1.1.6-1.fc24
vdr-scraper2vdr-1.0.1-1.20160826gite441ec8.fc24
xcb-util-xrm-1.0-1.fc24
xcircuit-3.9.54-1.fc24
xorg-x11-server-1.18.4-4.fc24
Details about builds:
================================================================================
abi-dumper-0.99.17-1.fc24 (FEDORA-2016-d9bf3eb989)
Tool to dump ABI of an ELF object containing DWARF debug info
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370665 - abi-dumper-0.99.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370665
--------------------------------------------------------------------------------
================================================================================
ardour5-5.1.0-1.fc24 (FEDORA-2016-5a1cc5c48b)
Digital Audio Workstation
--------------------------------------------------------------------------------
Update Information:
New upstream bugfix and enhancement release. For details refer to the [upstream
release
announcement](https://community.ardour.org/node/13890).
--------------------------------------------------------------------------------
================================================================================
btrfs-sxbackup-0.6.10-1.fc24 (FEDORA-2016-693c294328)
Incremental btrfs snapshot backups with push/pull support via SSH
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.10: * FIXED username should be checked for None when building ssh
url
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370700 - btrfs-sxbackup-0.6.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370700
--------------------------------------------------------------------------------
================================================================================
chromium-52.0.2743.116-10.fc24 (FEDORA-2016-7f156038c8)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Disable gtk3 support. It causes issues with hidpi, Wayland, and has incorrect
color highlighting.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1364779 - Please update Chromium to 52.0.2743.116
https://bugzilla.redhat.com/show_bug.cgi?id=1364779
[ 2 ] Bug #1369767 - Chromium crashes from any keyboard input. Does not affect
google-chrome.
https://bugzilla.redhat.com/show_bug.cgi?id=1369767
[ 3 ] Bug #1367990 - segfault, GLib-GObject: invalid cast from
'GdkWaylandDisplay' to 'GdkX11Display'
https://bugzilla.redhat.com/show_bug.cgi?id=1367990
[ 4 ] Bug #1368313 - core dump on starting chromium
https://bugzilla.redhat.com/show_bug.cgi?id=1368313
--------------------------------------------------------------------------------
================================================================================
cmst-2016.08.11-1.git75a3f0b.fc24 (FEDORA-2016-810a9a309b)
A Qt based GUI front end for the connman connection manager with systemtray icon
--------------------------------------------------------------------------------
Update Information:
update to new git release
--------------------------------------------------------------------------------
================================================================================
curl-7.47.1-7.fc24 (FEDORA-2016-d3889b0a2a)
A utility for getting files from remote servers (FTP, HTTP, and others)
--------------------------------------------------------------------------------
Update Information:
- work around race condition in PK11_FindSlotByName() - fix incorrect use of a
previously loaded certificate from file (related to CVE-2016-5420)
--------------------------------------------------------------------------------
================================================================================
eclipse-4.6.0-6.fc24 (FEDORA-2016-a0258e01b8)
An open, extensible IDE
--------------------------------------------------------------------------------
Update Information:
Fix various issues relating to p2 Droplets.
--------------------------------------------------------------------------------
================================================================================
embree-2.10.0-7.fc24 (FEDORA-2016-208750d7bc)
Collection of high-performance ray tracing kernels developed at Intel
--------------------------------------------------------------------------------
Update Information:
New availability for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1364618 - Review Request: embree - Collection of high-performance ray tracing
kernels developed at Intel
https://bugzilla.redhat.com/show_bug.cgi?id=1364618
--------------------------------------------------------------------------------
================================================================================
etckeeper-1.18.5-1.fc24 (FEDORA-2016-1242a06d1e)
Store /etc in a SCM system (git, mercurial, bzr or darcs)
--------------------------------------------------------------------------------
Update Information:
Update etckeeper to 1.18.5. Relevant changes from the upstream changelog: *
Make etckeeper commit store metadata changes. The pre-commit hook has always
(and continues) to do that, but pre-commit is only run when there are changes to
tommit. This makes metadata-only changes get committed.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1347434 - etckeeper throws in defaults for yum in Fedora 23, while dnf is the
"official" package manager
https://bugzilla.redhat.com/show_bug.cgi?id=1347434
--------------------------------------------------------------------------------
================================================================================
fedfind-2.4.11-1.fc24 (FEDORA-2016-fc90179fcc)
Fedora Finder finds Fedora
--------------------------------------------------------------------------------
Update Information:
This update provides the latest release of fedfind, which fixes a single bug. If
you specified a date but not a respin, or you relied on fedfind to find a
nightly compose for the current date, and there is *no* completed compose for
the date in question, fedfind would previously crash with a somewhat confusing
error message. It now exits gracefully in this case.
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-tools-0-13.1.git1cdaff4.fc24 (FEDORA-2016-3771e70e17)
Supplementary tools and packages for Go
--------------------------------------------------------------------------------
Update Information:
Include missing templates and static directories ---- Do not ship vet and
cover binaries anymore, they are shipped via golang-bin
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370456 - golang-googlecode-tools - present utility unusable (missing
templates)
https://bugzilla.redhat.com/show_bug.cgi?id=1370456
[ 2 ] Bug #1268206 - golang-bin-1.5.1-0 file conflict with golang-vet-0.2.0
https://bugzilla.redhat.com/show_bug.cgi?id=1268206
--------------------------------------------------------------------------------
================================================================================
irrlicht-1.8.4-1.fc24 (FEDORA-2016-c86efe1904)
A high performance realtime 3D engine
--------------------------------------------------------------------------------
Update Information:
Update to 1.8.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1354135 - irrlicht-1.8.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1354135
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-1.8.0.102-1.b14.fc24 (FEDORA-2016-7e41b6802e)
OpenJDK Runtime Environment
--------------------------------------------------------------------------------
Update Information:
updated to aarch64-jdk8u102-b14 (from aarch64-port/jdk8u)
--------------------------------------------------------------------------------
================================================================================
kicad-4.0.3-1.fc24 (FEDORA-2016-74d07d50a5)
EDA software suite for creation of schematic diagrams and PCBs
--------------------------------------------------------------------------------
Update Information:
Update to KiCad 4.0.3 Stable Release. Upstream release notes:
http://kicad-
pcb.org/post/release-4.0.3/
--------------------------------------------------------------------------------
================================================================================
libnl3-3.2.28-3.fc24 (FEDORA-2016-5ad977bded)
Convenience library for kernel netlink sockets
--------------------------------------------------------------------------------
Update Information:
route: fix regression for nl_object_identical() comparing AF_INET addresses
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370526 - backport "route/addr: address attributes based on
object"
https://bugzilla.redhat.com/show_bug.cgi?id=1370526
--------------------------------------------------------------------------------
================================================================================
libtasn1-4.9-1.fc24 (FEDORA-2016-5e638095ea)
The ASN.1 library used in GNUTLS
--------------------------------------------------------------------------------
Update Information:
Update to 4.9 (#1360315)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1360315 - libtasn1-4.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1360315
--------------------------------------------------------------------------------
================================================================================
libteam-1.26-1.fc24 (FEDORA-2016-7a687d8ccc)
Library for controlling team network device
--------------------------------------------------------------------------------
Update Information:
- 1.26 release - teamd: lacp: Do not unselect port if it changes state to
"expired" - man: in lacp it's 'port_config', not
'port_options' - teamd: fix the
issue that network blocks when systemctl stop teamd - teamd: change to Before
=network-pre.target in systemd service file - man teamd.conf: fix indentation -
misc: fix an out-of-bound write with zero-length hardware address - teamd: LACP
runner does not set Agg bit on first slave
--------------------------------------------------------------------------------
================================================================================
livecd-tools-23.4-1.fc24 (FEDORA-2016-0edc0e1794)
Tools for building live CDs
--------------------------------------------------------------------------------
Update Information:
- Version 23.4 (bcl) - yuminst.LiveCDYum.runInstall: import yum.Errors
(sandro.bonazzola) - Wrap all parted calls in LC_ALL=C (#1350253) (bcl) - Fix
calling livecd-iso-to-pxeboot with a full path (cadegenn) - Stop truncating
/etc/resolv.conf in SELinux module -- fixes #31 (torrancew) - litp: Copy
ldlinux.c32 to tftpboot for PXE live setup. (bcl) - Always use rsync to copy
Packages (#1343645) (bcl) - Fix extended regular expression [0-9] (fgrose) -
Enable loop device as installation target (fgrose)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1365568 - On repository error: UnboundLocalError: local variable
'yum' referenced before assignment
https://bugzilla.redhat.com/show_bug.cgi?id=1365568
--------------------------------------------------------------------------------
================================================================================
nfs-utils-1.3.4-1.rc2.fc24 (FEDORA-2016-5f19497102)
NFS utilities and supporting clients and daemons for the kernel NFS server
--------------------------------------------------------------------------------
Update Information:
Updated to the latest RC release: nfs-utils-1-3-5-rc2 ---- Updated to the
latest RC release: nfs-utils-1-3-5-rc1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1334741 - nfs-utils includes a unit file for rpc.svcgssd, but not the daemon
https://bugzilla.redhat.com/show_bug.cgi?id=1334741
[ 2 ] Bug #1319196 - incorrect use of Requires(pre)?
https://bugzilla.redhat.com/show_bug.cgi?id=1319196
[ 3 ] Bug #1249046 - [gssd] code defects in gssd_search_krb5_keytab() can not return
right return code.
https://bugzilla.redhat.com/show_bug.cgi?id=1249046
[ 4 ] Bug #1369714 - nfs-server-generator segfaults when /etc/fstab does not exist
https://bugzilla.redhat.com/show_bug.cgi?id=1369714
[ 5 ] Bug #1364836 - preun script removes rpcuser and nfsnobody against packaging
guideline
https://bugzilla.redhat.com/show_bug.cgi?id=1364836
--------------------------------------------------------------------------------
================================================================================
python-dict-sorted-1.0.0-1.fc24 (FEDORA-2016-444c7206c8)
Dictionaries sorted by key or by comparison function
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370469 - Review Request: python-dict-sorted - Dictionaries sorted by key or
by comparison function
https://bugzilla.redhat.com/show_bug.cgi?id=1370469
--------------------------------------------------------------------------------
================================================================================
python-impacket-0.9.15-3.fc24 (FEDORA-2016-5f061db144)
Collection of Python classes providing access to network packets
--------------------------------------------------------------------------------
Update Information:
Fix FTBFS and bump to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1307918 - python-impacket: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1307918
--------------------------------------------------------------------------------
================================================================================
python-twitter-3.1-1.fc24 (FEDORA-2016-491b2bbcf6)
A python wrapper around the Twitter API
--------------------------------------------------------------------------------
Update Information:
Update to 3.1, new twitter API.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1366410 - python3-twitter appears to be out of date 3.0>3.1
https://bugzilla.redhat.com/show_bug.cgi?id=1366410
--------------------------------------------------------------------------------
================================================================================
python-whichcraft-0.4.0-2.fc24 (FEDORA-2016-4beb444a5f)
Cross-python shutil.which functionality
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1368626 - Review Request: python-whichcraft - Cross-python shutil.which
functionality
https://bugzilla.redhat.com/show_bug.cgi?id=1368626
--------------------------------------------------------------------------------
================================================================================
rpmlint-1.9-3.fc24 (FEDORA-2016-a513081e07)
Tool for checking common errors in RPM packages
--------------------------------------------------------------------------------
Update Information:
Ignore description-line-too-long check on debuginfo packages.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #768393 - E: description-line-too-long for debuginfo package should be
removed
https://bugzilla.redhat.com/show_bug.cgi?id=768393
--------------------------------------------------------------------------------
================================================================================
tor-0.2.8.7-1.fc24 (FEDORA-2016-a21297c7bc)
Anonymizing overlay network for TCP
--------------------------------------------------------------------------------
Update Information:
update to upstream release 0.2.8.7 ---- update to 0.2.8.6
--------------------------------------------------------------------------------
================================================================================
vdr-epg-daemon-1.1.12-1.fc24 (FEDORA-2016-895261ea6a)
A daemon to download EPG data from internet and manage it in a mysql database
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.12
--------------------------------------------------------------------------------
================================================================================
vdr-epg2vdr-1.1.6-1.fc24 (FEDORA-2016-9bdf309402)
A plugin to retrieve EPG data from a mysql database into VDR
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.6
--------------------------------------------------------------------------------
================================================================================
vdr-scraper2vdr-1.0.1-1.20160826gite441ec8.fc24 (FEDORA-2016-fa26eae882)
A client plugin which provides scraped metadata from EPGD to other plugins
--------------------------------------------------------------------------------
Update Information:
Bump version up to 1.0.1-1.20160826gite441ec8
--------------------------------------------------------------------------------
================================================================================
xcb-util-xrm-1.0-1.fc24 (FEDORA-2016-de5c7d599c)
XCB utility functions for the X resource manager
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1366741 - Review Request: xcb-util-xrm - XCB utility functions for the X
resource manager
https://bugzilla.redhat.com/show_bug.cgi?id=1366741
--------------------------------------------------------------------------------
================================================================================
xcircuit-3.9.54-1.fc24 (FEDORA-2016-b023c21ac3)
Electronic circuit schematic drawing program
--------------------------------------------------------------------------------
Update Information:
New version 3.9.54 is released.
--------------------------------------------------------------------------------
================================================================================
xorg-x11-server-1.18.4-4.fc24 (FEDORA-2016-33b409649c)
X.Org X11 X server
--------------------------------------------------------------------------------
Update Information:
- Various switchable-graphics / prime fixes from upstream, mostly related to
using the modesetting driver in prime setups - Fix Xorg -configure not working
(rhbz#1368502)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1368502 - Xorg: How to configure?
https://bugzilla.redhat.com/show_bug.cgi?id=1368502
--------------------------------------------------------------------------------