The following Fedora 24 Security updates need testing:
Age URL
217
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
210
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24
173
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba
runc-1.0.0-5.rc2.gitc91b5be.fc24
109
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8330a48ca2
python-XStatic-jquery-ui-1.12.0.1-1.fc24
48
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5f1006afb1
libstaroffice-0.0.3-3.fc24
48
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a1f4c48c68
nodejs-brace-expansion-1.1.7-1.fc24
39
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bbae64fdc2
libmwaw-0.3.11-3.fc24
28
https://bodhi.fedoraproject.org/updates/FEDORA-2017-56cf7067e7 irssi-1.0.3-1.fc24
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-21c0e9b25b
qt5-qtwebkit-5.212.0-0.5.alpha2.fc24
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-405453f285
groovy18-1.8.9-28.fc24
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-06c1422db8
evince-3.20.1-3.fc24
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-93868169a0
mingw-poppler-0.41.0-3.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-31af7a849d
minicom-2.7.1-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0b8c45ebf7
mingw-librsvg2-2.40.18-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-60410804eb
moodle-3.1.7-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8df9efed5f
jackson-databind-2.6.3-3.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-59127a606c dhcp-4.3.4-4.fc24
bind99-9.9.10-2.P3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-544eef948f
kernel-4.11.12-100.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9d572cc64a
webkitgtk4-2.16.6-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7a827cf42a
community-mysql-5.7.19-1.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
25
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6c2a7b1453
thunderbird-52.2.1-1.fc24
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5a6f49afbd
mariadb-10.1.25-1.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c7a7826a49
perl-5.22.4-372.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-28275fd181
libdrm-2.4.82-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-59127a606c dhcp-4.3.4-4.fc24
bind99-9.9.10-2.P3.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ea3b1c1767
gnupg-1.4.22-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9d572cc64a
webkitgtk4-2.16.6-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-544eef948f
kernel-4.11.12-100.fc24
The following builds have been pushed to Fedora 24 updates-testing
cacti-1.1.15-1.fc24
cmake-fedora-2.8.0-1.fc24
community-mysql-5.7.19-1.fc24
dist-git-1.4-1.fc24
gnuchess-6.2.5-1.fc24
kompose-1.0.0-1.fc24
perl-HTML-FormFu-MultiForm-1.03-1.fc24
webkitgtk4-2.16.6-1.fc24
Details about builds:
================================================================================
cacti-1.1.15-1.fc24 (FEDORA-2017-15c61c89ed)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.15 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.15 ---- - Update to 1.1.14
Release notes:
https://www.cacti.net/release_notes.php?version=1.1.14
--------------------------------------------------------------------------------
================================================================================
cmake-fedora-2.8.0-1.fc24 (FEDORA-2017-992301e7a7)
CMake helper modules for fedora developers
--------------------------------------------------------------------------------
Update Information:
Migrate changes like fedorahosted to pagure. And move from pkgdb to product
definition center (PDC). - Enhancement: + cmake-fedora-pkgdb new sub-commands:
- git-branch package: List the git-branches of package - newest-nvr: Return
NVR of master branch - newest-changelog: Return the latest ChangeLog in
master branch. - Changes: + koji-build-scratch is now back to use koji build
--scratch + MANAGE_UPLOAD_FEDORAHOSTED is marked as depreciated But
MANAGE_UPLOAD_PAGURE is not implemented yet, as pagure does not support scp
upload yet - Bugs: + Fixed RHBZ#1424757 - cmake-fedora: failed to handle
f26-pending + Fixed RHBZ#1425263 - cmake-fedora: migrate from fedorahosted to
pagure + Fixed fedpkg --dist depreciate warning
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1424757 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1424757
[ 2 ] Bug #1425263 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1425263
--------------------------------------------------------------------------------
================================================================================
community-mysql-5.7.19-1.fc24 (FEDORA-2017-7a827cf42a)
MySQL client programs and shared libraries
--------------------------------------------------------------------------------
Update Information:
**Update to version 5.7.19** Replication tests in the testsuite enabled, they
don't fail anymore **Resolves:** #1462688; /run
#1406172; random failures of the testsuite #1417880, #1417883,
#1417885, #1417887, #1417890, #1417891, #1417893, #1417894, #1417896;
replication tests **CVE fixes:** #1472716 CVE-2017-3633,
CVE-2017-3634, CVE-2017-3635, CVE-2017-3641, CVE-2017-3647
CVE-2017-3648, CVE-2017-3649, CVE-2017-3651, CVE-2017-3652, CVE-2017-3653
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1472716 - CVE-2017-3633 CVE-2017-3634 CVE-2017-3635 CVE-2017-3636
CVE-2017-3641 CVE-2017-3647 CVE-2017-3648 CVE-2017-3649 CVE-2017-3651 CVE-2017-3652
CVE-2017-3653 community-mysql: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1472716
[ 2 ] Bug #1417896 - Test case failure: /CoreOS/mysql/testsuite - main.audit_plugin_2
https://bugzilla.redhat.com/show_bug.cgi?id=1417896
[ 3 ] Bug #1417894 - Test case failure: /CoreOS/mysql/testsuite -
rpl.rpl_multi_source_basic 'stmt'
https://bugzilla.redhat.com/show_bug.cgi?id=1417894
[ 4 ] Bug #1417893 - Test case failure: /CoreOS/mysql/testsuite -
rpl.rpl_multi_source_basic 'row'
https://bugzilla.redhat.com/show_bug.cgi?id=1417893
[ 5 ] Bug #1417891 - Test case failure: /CoreOS/mysql/testsuite -
rpl.rpl_multi_source_basic 'mix'
https://bugzilla.redhat.com/show_bug.cgi?id=1417891
[ 6 ] Bug #1417890 - Test case failure: /CoreOS/mysql/testsuite - rpl.rpl_loaddata_m
'stmt'
https://bugzilla.redhat.com/show_bug.cgi?id=1417890
[ 7 ] Bug #1417887 - Test case failure: /CoreOS/mysql/testsuite - rpl.rpl_loaddata_m
'row'
https://bugzilla.redhat.com/show_bug.cgi?id=1417887
[ 8 ] Bug #1417885 - Test case failure: /CoreOS/mysql/testsuite - rpl.rpl_loaddata_m
'mix'
https://bugzilla.redhat.com/show_bug.cgi?id=1417885
[ 9 ] Bug #1417883 - Test case failure: /CoreOS/mysql/testsuite -
rpl.rpl_semi_sync_future_logpos 'row'
https://bugzilla.redhat.com/show_bug.cgi?id=1417883
[ 10 ] Bug #1417880 - Test case failure: /CoreOS/mysql/testsuite -
rpl.rpl_semi_sync_event 'mix'
https://bugzilla.redhat.com/show_bug.cgi?id=1417880
[ 11 ] Bug #1406172 - Tracker: Tests fails obstruct community-mysql from build
https://bugzilla.redhat.com/show_bug.cgi?id=1406172
[ 12 ] Bug #1472014 - community-mysql-5.7.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1472014
[ 13 ] Bug #1462688 - fix %global pidfiledir and other references to legacy /var/run
https://bugzilla.redhat.com/show_bug.cgi?id=1462688
--------------------------------------------------------------------------------
================================================================================
dist-git-1.4-1.fc24 (FEDORA-2017-7aebd07b5c)
Package source version control system
--------------------------------------------------------------------------------
Update Information:
md5 uploading is now disabled by default
--------------------------------------------------------------------------------
================================================================================
gnuchess-6.2.5-1.fc24 (FEDORA-2017-3224993765)
The GNU chess program
--------------------------------------------------------------------------------
Update Information:
6.2.5
--------------------------------------------------------------------------------
================================================================================
kompose-1.0.0-1.fc24 (FEDORA-2017-f6c8f39a58)
Tool to move from 'docker-compose' to Kubernetes
--------------------------------------------------------------------------------
Update Information:
Update to latest version 1.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473669 - kompose-v1.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473669
--------------------------------------------------------------------------------
================================================================================
perl-HTML-FormFu-MultiForm-1.03-1.fc24 (FEDORA-2017-3dd0610412)
Handle multi-page/stage forms
--------------------------------------------------------------------------------
Update Information:
This release corrects CPAN dependencies declaration. We deliver it only to
provide up-to-date version string. ---- This release fixes tests.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1474802 - perl-HTML-FormFu-MultiForm-1.03 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1474802
[ 2 ] Bug #1474549 - perl-HTML-FormFu-MultiForm-1.02 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1474549
--------------------------------------------------------------------------------
================================================================================
webkitgtk4-2.16.6-1.fc24 (FEDORA-2017-9d572cc64a)
GTK+ Web content engine library
--------------------------------------------------------------------------------
Update Information:
This update addresses the following vulnerabilities: *
[
CVE-2017-7018](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7018),
[
CVE-2017-7030](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7030),
[
CVE-2017-7034](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7034),
[
CVE-2017-7037](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7037),
[
CVE-2017-7039](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7039),
[
CVE-2017-7046](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7046),
[
CVE-2017-7048](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7048),
[
CVE-2017-7055](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7055),
[
CVE-2017-7056](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7056),
[
CVE-2017-7061](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7061),
[
CVE-2017-7064](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7064)
Additional fixes: * Fix rendering of spin buttons with GTK+ >= 3.20 when the
entry width is too short. * Fix the build when Wayland target is enabled and X11
disabled. * Fix several crashes and rendering issues.
--------------------------------------------------------------------------------