The following Fedora 24 Security updates need testing:
Age URL
185
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
178
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24
141
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba
runc-1.0.0-5.rc2.gitc91b5be.fc24
77
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8330a48ca2
python-XStatic-jquery-ui-1.12.0.1-1.fc24
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5f1006afb1
libstaroffice-0.0.3-3.fc24
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a1f4c48c68
nodejs-brace-expansion-1.1.7-1.fc24
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e4638a345c
tomcat-8.0.44-1.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bbae64fdc2
libmwaw-0.3.11-3.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b154ff2892
mercurial-3.7.3-2.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c2e1dc46a1
chromium-59.0.3071.104-1.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bff00a1c35
thunderbird-52.2.0-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b8d76bef4e
chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4932c9b886
c-ares-1.13.0-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-698daef73c
glibc-2.23.1-12.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-37f68e3534
webkitgtk4-2.16.4-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5596f2f94d
openvpn-2.3.17-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2cfb239358
libsndfile-1.0.28-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3159dd230a
drupal8-8.3.4-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5e34cd1c37
php-horde-Horde-Image-2.5.0-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b3bdaf58bc xen-4.6.5-7.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
64
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e1905fd566 koji-1.12.0-2.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-07fed9b000
libteam-1.27-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ce8c7053eb audit-2.7.7-1.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bff00a1c35
thunderbird-52.2.0-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-698daef73c
glibc-2.23.1-12.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2cfb239358
libsndfile-1.0.28-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-37f68e3534
webkitgtk4-2.16.4-1.fc24
The following builds have been pushed to Fedora 24 updates-testing
casync-1-4.gitcc63fcd.fc24
glusterfs-3.8.13-1.fc24
gnome-shell-extension-activities-configurator-56-1.fc24
mozilla-https-everywhere-5.2.19-1.fc24
perl-Parse-ErrorString-Perl-0.24-1.fc24
php-horde-Horde-Auth-2.2.2-1.fc24
php-horde-Horde-Cli-2.2.4-1.fc24
php-horde-Horde-Core-2.29.1-1.fc24
php-horde-Horde-Crypt-2.7.9-1.fc24
php-horde-Horde-Idna-1.1.1-1.fc24
php-horde-Horde-Imap-Client-2.29.13-1.fc24
php-horde-Horde-JavascriptMinify-1.1.4-1.fc24
php-horde-Horde-ListHeaders-1.2.5-1.fc24
php-horde-Horde-Mail-2.6.4-1.fc24
php-horde-Horde-Smtp-1.9.5-1.fc24
xen-4.6.5-7.fc24
Details about builds:
================================================================================
casync-1-4.gitcc63fcd.fc24 (FEDORA-2017-499e3cbc82)
Content Addressable Data Synchronizer
--------------------------------------------------------------------------------
Update Information:
Fixes casync on non-amd64 architectures. ---- New package, see
http://0pointer.net/blog/casync-a-tool-for-distributing-file-system-image....
---- New package, see
http://0pointer.net/blog/casync-a-tool-for-distributing-
file-system-images.html.
--------------------------------------------------------------------------------
================================================================================
glusterfs-3.8.13-1.fc24 (FEDORA-2017-e50a248b69)
Distributed File System
--------------------------------------------------------------------------------
Update Information:
3.8.13 GA
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-activities-configurator-56-1.fc24 (FEDORA-2017-78f631db86)
Configure the top bar and Activities button in GNOME Shell
--------------------------------------------------------------------------------
Update Information:
Bump to upstream version 56, which fixes a minor UI bug.
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-5.2.19-1.fc24 (FEDORA-2017-3b53a573d0)
HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
--------------------------------------------------------------------------------
Update Information:
Someone at my workplace decided the best place to put a switch was dangling off
the back of a desk. Bad idea, people.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463450 - mozilla-https-everywhere-5.2.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1463450
--------------------------------------------------------------------------------
================================================================================
perl-Parse-ErrorString-Perl-0.24-1.fc24 (FEDORA-2017-8fe3214e5e)
Module for parsing error messages
--------------------------------------------------------------------------------
Update Information:
This release corrects misspellings in the documentation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1464431 - perl-Parse-ErrorString-Perl-0.24 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1464431
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Auth-2.2.2-1.fc24 (FEDORA-2017-da026baca5)
Horde Authentication API
--------------------------------------------------------------------------------
Update Information:
**Horde_Auth 2.2.2** * [jan] Add Turkish translation (��T�� B��DB).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Cli-2.2.4-1.fc24 (FEDORA-2017-b7732669e0)
Horde Command Line Interface API
--------------------------------------------------------------------------------
Update Information:
**Horde_Cli 2.2.4** * [jan] Fix returning to normal font after text with light
colors.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.29.1-1.fc24 (FEDORA-2017-57cc3e1e93)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.29.1** * [jan] Fix JavaScript minifying with recent Closure
compilers (Bug #14650).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Crypt-2.7.9-1.fc24 (FEDORA-2017-0dc5ab0dea)
Horde Cryptography API
--------------------------------------------------------------------------------
Update Information:
**Horde_Crypt 2.7.9** * [jan] More fixes for GnuPG 2 (Mathieu Parent). * [jan]
Remove dependency on openssl executable (Hadi Nategh).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Idna-1.1.1-1.fc24 (FEDORA-2017-14a71bc40d)
IDNA backend normalization package
--------------------------------------------------------------------------------
Update Information:
**Horde_Idna 1.1.1** * [jan] Add Turkish translation (��T�� B��DB).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Imap-Client-2.29.13-1.fc24 (FEDORA-2017-4926fdb137)
Horde IMAP abstraction interface
--------------------------------------------------------------------------------
Update Information:
**Horde_Imap_Client 2.29.13** * [jan] Add Turkish translation (��T�� B��DB).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-JavascriptMinify-1.1.4-1.fc24 (FEDORA-2017-e6abd5db72)
Javascript Minification
--------------------------------------------------------------------------------
Update Information:
**Horde_JavascriptMinify 1.1.4** * [jan] Add unit tests.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-ListHeaders-1.2.5-1.fc24 (FEDORA-2017-fcc9817014)
Horde List Headers Parsing Library
--------------------------------------------------------------------------------
Update Information:
**Horde_ListHeaders 1.2.5** * [jan] Add Turkish translation (��T�� B��DB).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Mail-2.6.4-1.fc24 (FEDORA-2017-bb4b494085)
Horde Mail Library
--------------------------------------------------------------------------------
Update Information:
**Horde_Mail 2.6.4** * [jan] Add Turkish translation (��T�� B��DB).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Smtp-1.9.5-1.fc24 (FEDORA-2017-ebfa81c338)
Horde SMTP Client
--------------------------------------------------------------------------------
Update Information:
**Horde_Smtp 1.9.5** * [jan] Add Turkish translation (��T�� B��DB).
--------------------------------------------------------------------------------
================================================================================
xen-4.6.5-7.fc24 (FEDORA-2017-b3bdaf58bc)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
xen: various flaws (#1463247) blkif responses leak backend stack data [XSA-216]
page transfer may allow PV guest to elevate privilege [XSA-217] Races in the
grant table unmap code [XSA-218] x86: insufficient reference counts during
shadow emulation [XSA-219] x86: PKRU and BND* leakage between vCPU-s [XSA-220]
stale P2M mappings due to insufficient error checking [XSA-222] ARM guest
disabling interrupt may crash Xen [XSA-223] grant table operations mishandle
reference counts [XSA-224] arm: vgic: Out-of-bound access when sending SGIs
[XSA-225] NULL pointer deref in event channel poll [XSA-221] (#1463231)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1458870 - xsa216 xen: blkif responses leak backend stack data (XSA-216)
https://bugzilla.redhat.com/show_bug.cgi?id=1458870
[ 2 ] Bug #1458871 - xsa217 xen: page transfer may allow PV guest to elevate privilege
(XSA-217)
https://bugzilla.redhat.com/show_bug.cgi?id=1458871
[ 3 ] Bug #1458872 - xsa218 xen: Races in the grant table unmap code (XSA-218)
https://bugzilla.redhat.com/show_bug.cgi?id=1458872
[ 4 ] Bug #1458873 - xsa219 xen: x86: insufficient reference counts during shadow
emulation (XSA-219)
https://bugzilla.redhat.com/show_bug.cgi?id=1458873
[ 5 ] Bug #1458874 - xsa220 xen: x86: PKRU and BND* leakage between vCPU-s (XSA-220)
https://bugzilla.redhat.com/show_bug.cgi?id=1458874
[ 6 ] Bug #1458876 - xsa222 xen: stale P2M mappings due to insufficient error checking
(XSA-222)
https://bugzilla.redhat.com/show_bug.cgi?id=1458876
[ 7 ] Bug #1458877 - xsa223 xen: ARM guest disabling interrupt may crash Xen (XSA-223)
https://bugzilla.redhat.com/show_bug.cgi?id=1458877
[ 8 ] Bug #1458878 - xsa224 xen: grant table operations mishandle reference counts
(XSA-224)
https://bugzilla.redhat.com/show_bug.cgi?id=1458878
[ 9 ] Bug #1459515 - xsa225 xen: arm: vgic: Out-of-bound access when sending SGIs
(XSA-225)
https://bugzilla.redhat.com/show_bug.cgi?id=1459515
[ 10 ] Bug #1458875 - xsa221 xen: NULL pointer deref in event channel poll (XSA-221)
https://bugzilla.redhat.com/show_bug.cgi?id=1458875
--------------------------------------------------------------------------------