The following Fedora 24 Security updates need testing:
Age URL
55
https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24
38
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0ef628998f
chicken-4.11.0-3.fc24
11
https://bodhi.fedoraproject.org/updates/FEDORA-2016-89060100d7
mongodb-3.2.8-2.fc24
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ea3b7e6556 links-2.13-1.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a64716084e
irssi-0.8.20-2.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7f193a0c59
php-ZendFramework-1.12.20-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5706eeb875
python-django-1.9.10-1.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-861b8c46b7
nodejs-4.6.0-5.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c23a8ce9e5
mingw-openjpeg2-2.1.2-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cca77daf70
bind99-9.9.9-2.P3.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c75bdc394a
zathura-pdf-mupdf-0.3.0-2.fc24 mujs-0-5.20160921git5c337af.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-328754be1c
libdwarf-20160929-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1cc00cde2d
c-ares-1.12.0-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a7f9e86df7
mingw-c-ares-1.12.0-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e1d4972701 nsd-4.1.13-1.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-229e5b4143 lorax-24.21-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2bf9743359 pungi-4.1.9-2.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cf7725e102
koji-1.10.1-13.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a300f36043
perl-Scalar-List-Utils-1.46-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-30619f42ce
python-2.7.12-6.fc24
The following builds have been pushed to Fedora 24 updates-testing
acd_cli-0.3.2-2.fc24
blender-2.78-1.fc24
checksec-1.7.4-2.fc24
cmap-resources-2016.09.04-2.fc24
edgar-1.25-1.fc24
embree-2.11.0-1.fc24
ganglia-3.7.2-11.fc24
gdouros-aegean-fonts-9.00-2.fc24
git-2.7.4-3.fc24
grin-1.2.1-13.fc24
gtengine-3.3-1.fc24
js-web-socket-js-1.0.2-5.fc24
lis-1.6.24-1.fc24
logstalgia-1.0.7-1.fc24
mawk-1.3.4-9.20160927.fc24
moserial-3.0.10-3.fc24
nsd-4.1.13-1.fc24
otter-browser-0.9.11-0.1.beta11gitc051a5e.fc24
perl-Cookie-Baker-0.07-1.fc24
perl-ExtUtils-AutoInstall-0.64-1.fc24
perl-Specio-0.27-1.fc24
pgcenter-0.3.0-1.fc24
php-doctrine-dbal-2.5.5-1.fc24
python-keyring-5.0-5.fc24
python-rencode-1.0.5-2.fc24
python26-2.6.9-1.fc24
rubygem-sequel-4.39.0-1.fc24
sway-0.10-0.1.rc1.fc24
tor-0.2.8.8-1.fc24
unbound-1.5.10-1.fc24
yarock-1.1.6-1.fc24
Details about builds:
================================================================================
acd_cli-0.3.2-2.fc24 (FEDORA-2016-0b6220ad22)
A command line interface and FUSE filesystem for Amazon Cloud Drive
--------------------------------------------------------------------------------
Update Information:
Update dependencies. If you have `python3-requests-toolbelt` and
`python3-dateutil` installed, you don't need this update.
--------------------------------------------------------------------------------
================================================================================
blender-2.78-1.fc24 (FEDORA-2016-f5a10d726e)
3D modeling, animation, rendering and post-production
--------------------------------------------------------------------------------
Update Information:
Latest stable release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1331713 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1331713
[ 2 ] Bug #1304143 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1304143
[ 3 ] Bug #1256068 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1256068
[ 4 ] Bug #1380370 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380370
--------------------------------------------------------------------------------
================================================================================
checksec-1.7.4-2.fc24 (FEDORA-2016-94940dd2d3)
Tool to check system for binary-hardening
--------------------------------------------------------------------------------
Update Information:
###Update to 1.7.4 - Update to forked version - Add missing runtime-dependencies
- Add manpage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1240391 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1240391
[ 2 ] Bug #1380950 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380950
--------------------------------------------------------------------------------
================================================================================
cmap-resources-2016.09.04-2.fc24 (FEDORA-2016-f06331ab9c)
CMap Resources for Adobe's public character collections
--------------------------------------------------------------------------------
Update Information:
Remove bogus isa dep in cns1-6 on main package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379521 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1379521
--------------------------------------------------------------------------------
================================================================================
edgar-1.25-1.fc24 (FEDORA-2016-0ca485c715)
A platform game
--------------------------------------------------------------------------------
Update Information:
* Added Serbian translation * Updated German translation * Fixed the mine cart's
reset switch in the Fortress Dungeon * Fixed the scrolling in the medals table
--------------------------------------------------------------------------------
================================================================================
embree-2.11.0-1.fc24 (FEDORA-2016-7269c692da)
Collection of high-performance ray tracing kernels developed at Intel
--------------------------------------------------------------------------------
Update Information:
Latest upstream update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379103 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1379103
--------------------------------------------------------------------------------
================================================================================
ganglia-3.7.2-11.fc24 (FEDORA-2016-b1e252522e)
Distributed Monitoring System
--------------------------------------------------------------------------------
Update Information:
ganglia development package depends on other non-standard development packages.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1305736 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1305736
--------------------------------------------------------------------------------
================================================================================
gdouros-aegean-fonts-9.00-2.fc24 (FEDORA-2016-84d51eb659)
A font for ancient scripts in the greater Aegean vicinity
--------------------------------------------------------------------------------
Update Information:
version 9.00 update
--------------------------------------------------------------------------------
================================================================================
git-2.7.4-3.fc24 (FEDORA-2016-b596ee7ca9)
Fast Version Control System
--------------------------------------------------------------------------------
Update Information:
Fix resolve troubles with malfunction aliases under subdirs of worktrees created
by 'git worktree add'.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1377440 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1377440
--------------------------------------------------------------------------------
================================================================================
grin-1.2.1-13.fc24 (FEDORA-2016-a4eff3a2da)
Grep-like tool for source code
--------------------------------------------------------------------------------
Update Information:
Fixed minor issue in spec file.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1378954 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1378954
--------------------------------------------------------------------------------
================================================================================
gtengine-3.3-1.fc24 (FEDORA-2016-19375feb0a)
Library for computations in mathematics, graphics, image analysis, and physics
--------------------------------------------------------------------------------
Update Information:
- Update to 3.3
--------------------------------------------------------------------------------
================================================================================
js-web-socket-js-1.0.2-5.fc24 (FEDORA-2016-2829662f66)
HTML5 Web Socket implementation powered by Flash
--------------------------------------------------------------------------------
Update Information:
Fix building from scratch by minifying with uglifyjs.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1307671 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1307671
--------------------------------------------------------------------------------
================================================================================
lis-1.6.24-1.fc24 (FEDORA-2016-bb0ff62e92)
A library for solving linear equations and eigenvalue problems
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.24 ---- Update to 1.6.10 ---- Update to 1.6.2 ---- Update to
1.5.76
--------------------------------------------------------------------------------
================================================================================
logstalgia-1.0.7-1.fc24 (FEDORA-2016-e7d86e829f)
Web server access log visualizer
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release logstalgia 1.0.7.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379013 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1379013
--------------------------------------------------------------------------------
================================================================================
mawk-1.3.4-9.20160927.fc24 (FEDORA-2016-17c0c7a7ff)
Interpreter for the AWK programming language
--------------------------------------------------------------------------------
Update Information:
upgrade to 20160927 (RHBZ#1380058) ---- upgrade to 20160918
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380058 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380058
[ 2 ] Bug #1377148 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1377148
--------------------------------------------------------------------------------
================================================================================
moserial-3.0.10-3.fc24 (FEDORA-2016-3aa47caa4e)
Serial terminal for the gnome desktop
--------------------------------------------------------------------------------
Update Information:
Moserial has moved.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380997 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380997
--------------------------------------------------------------------------------
================================================================================
nsd-4.1.13-1.fc24 (FEDORA-2016-e1d4972701)
Fast and lean authoritative DNS Name Server
--------------------------------------------------------------------------------
Update Information:
Updated to 4.1.13 (CVE-2016-6173, OPENPGPKEY support)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1353577 - CVE-2016-6173 nsd: Improper restriction of zone size limit
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1353577
--------------------------------------------------------------------------------
================================================================================
otter-browser-0.9.11-0.1.beta11gitc051a5e.fc24 (FEDORA-2016-7c5a8bd374)
Web browser controlled by the user, not vice-versa
--------------------------------------------------------------------------------
Update Information:
- Update to 0.9.11-01.beta11 - Added BR qt5-qtwebengine-devel - Added BR
hunspell-devel
--------------------------------------------------------------------------------
================================================================================
perl-Cookie-Baker-0.07-1.fc24 (FEDORA-2016-d70885537e)
Cookie string generator / parser
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
================================================================================
perl-ExtUtils-AutoInstall-0.64-1.fc24 (FEDORA-2016-c8b57366df)
Automatic install of dependencies via CPAN
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
================================================================================
perl-Specio-0.27-1.fc24 (FEDORA-2016-a7239cd80d)
Type constraints and coercions for Perl
--------------------------------------------------------------------------------
Update Information:
Bug-fix release fixing some crashes and unintended exceptions.
--------------------------------------------------------------------------------
================================================================================
pgcenter-0.3.0-1.fc24 (FEDORA-2016-7befcf1afa)
Top-like PostgreSQL statistics viewer
--------------------------------------------------------------------------------
Update Information:
Update by mail author request to version 0.3.0.
--------------------------------------------------------------------------------
================================================================================
php-doctrine-dbal-2.5.5-1.fc24 (FEDORA-2016-3c344c3d81)
Doctrine Database Abstraction Layer (DBAL)
--------------------------------------------------------------------------------
Update Information:
### v2.5.5 * 842: Fixed incorrect handling of single quotes in SQL-Strings *
856: MySQL getListTableForeignKeysSQL: use current database if null passed *
861: Check for foreign table name on removed tables foreign key * 862: Quote
table and constraint names in drop foreign key / drop constraint SQL * 863:
Strip leading slash of databasename from URL * 925: Fixing the command when
option is CURRENT_SCHEMA * 1054: DBAL-1114: Problem with drop database on
PostgreSQL * 1106: DBAL-1164: Creating SQLite Connections via a URL Does Not
Work * 1151: DBAL-1205: getPlaceholderPositions finds placeholders which are
actually no placeholder if string contains single quotes * 1183: DBAL-1234:
Additional slash in dbname when providing settings as URL without scheme * 2182:
DBAL-939: schema update doesnt detect boolean type correctly * 2261: OCI8 -
bindValue overwrite previous values * 2262: Issue #2261 - OCI8 Driver PHP 7 -
Fix bindValue overwriting other params. * 2267: Pass "path" to pdo-sqlite
drivers from DriverManager instead of "dbname" * 2270: SqlitePlatform does not
escape table name on truncate * 2275: Quote reserved keywords in TRUNCATE TABLE
SQL * 2277: [DBAL-939] Fix reverse engineering boolean type columns on DB2 *
2279: Stop using template1 as default database for postgres drivers * 2286: Fix
list foreign keys SQL database parameter evaluation * 2287: Fix parsing
schemeless connection URLs * 2288: Preserve quotation of old column name in
ColumnDiff * 2291: The QueryBuilder::getSQLForSelect() always appends a FROM
clause for select queries * 2292: Do not generate FROM clause in QueryBuilder if
no tables specified * 2302: when use \Doctrine\DBAL\Schema\Comparator to compare
two table schema, has a problem * 2303: Fix another primary key alteration with
autoincrement column case on MySQL * 2310: [DB2] Move row number to the end of
the field list in query limit/offset modification * 2318: [Oracle] Fix list
table columns when using external or OS authentication with Oracle * 2384:
Fluent methods in QueryBuilder are now documented as returning $this * 2386: Fix
oci driver bindValue overwrite with php7 * 2390: Catch Throwable in
Connection::transactional() * 2403: fix grammar in DBALException messages *
2428: Modify Limit Query on SQLServer2012 with newline before ORDER BY * 2434:
Keep references to bound parameter values in oci8 driver * 2436:
MySqlPlatform::getListTableColumnsSQL() is not escaping names * 2440: No
parameters passed to logger when executing statement using bindParam * 2442:
Escape identifiers in metadata SQL properly when used as string literal * 2443:
Track the Values & Types Passed to Statement::bindParam * 2484: Allow usage of
symfony/console ^3.0 in dev dependencies * 2497: ResultStatement::fetch()
returns null instead of false with mysqli * 2500: Making sure that fetch returns
false if nothing is found
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1374891 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1374891
--------------------------------------------------------------------------------
================================================================================
python-keyring-5.0-5.fc24 (FEDORA-2016-68185dfc26)
Python 2 library to store and access passwords safely
--------------------------------------------------------------------------------
Update Information:
This fixes a warning on every call of openstack clients that use this module.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1259747 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1259747
--------------------------------------------------------------------------------
================================================================================
python-rencode-1.0.5-2.fc24 (FEDORA-2016-53aa6cf46e)
Web safe object pickling/unpickling
--------------------------------------------------------------------------------
Update Information:
Minor upstream bugfix release which fixes a bug with large numbers.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1312531 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1312531
--------------------------------------------------------------------------------
================================================================================
python26-2.6.9-1.fc24 (FEDORA-2016-af076fa537)
Version 2.6 of the Python programming language
--------------------------------------------------------------------------------
Update Information:
Version 2.6 of the Python programming language
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1375670 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1375670
--------------------------------------------------------------------------------
================================================================================
rubygem-sequel-4.39.0-1.fc24 (FEDORA-2016-0ea1f4e973)
The Database Toolkit for Ruby
--------------------------------------------------------------------------------
Update Information:
Upgrate to sequel 4.39.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381079 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1381079
--------------------------------------------------------------------------------
================================================================================
sway-0.10-0.1.rc1.fc24 (FEDORA-2016-6eb57378cd)
i3-compatible window manager for Wayland
--------------------------------------------------------------------------------
Update Information:
pre-release update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380075 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380075
--------------------------------------------------------------------------------
================================================================================
tor-0.2.8.8-1.fc24 (FEDORA-2016-1fce1e0993)
Anonymizing overlay network for TCP
--------------------------------------------------------------------------------
Update Information:
update to upstream release 0.2.8.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1375369 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1375369
[ 2 ] Bug #1380682 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380682
--------------------------------------------------------------------------------
================================================================================
unbound-1.5.10-1.fc24 (FEDORA-2016-c5f7bc39e9)
Validating, recursive, and caching DNS(SEC) resolver
--------------------------------------------------------------------------------
Update Information:
Updated to 1.5.10 (better TCP handling, bugfixes)
--------------------------------------------------------------------------------
================================================================================
yarock-1.1.6-1.fc24 (FEDORA-2016-0a0ec69b25)
Lightweight, beautiful music player
--------------------------------------------------------------------------------
Update Information:
version 1.1.6 - New : Add Opus audio file support [#1539942] - New : Enable
maximum volume level to 150 % (VLC/MPV engine) - New : Add drag and drop from
playqueue to playlist to add tracks to playlist - New : Add option to
enable/disable shorcuts [#1543410] - BugFix : Fix closing app with active
systray icon [#1627840] - BugFix : Allow media keys working when current song
info panel is displayed [#1624532] - BugFix : Fix wrong player stop notification
[#1539912] - BugFix : Translations fix
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380925 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380925
[ 2 ] Bug #1379411 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1379411
[ 3 ] Bug #1380929 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380929
--------------------------------------------------------------------------------