The following Fedora 24 Security updates need testing:
Age URL
150
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
143
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24
106
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba
runc-1.0.0-5.rc2.gitc91b5be.fc24
86
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4b176c1694 redis-3.2.8-1.fc24
42
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8330a48ca2
python-XStatic-jquery-ui-1.12.0.1-1.fc24
22
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0b6da97aa5
squirrelmail-1.4.22-19.fc24
15
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c3ce061ea7 lynis-2.5.0-1.fc24
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7a0e2d58f8
thunderbird-52.1.0-1.fc24
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ebe41f3fd7
python-fedora-0.9.0-3.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-01a7989fc0 git-2.7.5-1.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-aceb424894 smb4k-1.2.2-3.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4de07172f4
postgresql-9.5.7-1.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-947da3daa5
chicken-4.12.0-2.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-eaab38c11e
deluge-1.3.15-1.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3f2d5790d2
lxterminal-0.3.0-3.fc24 menu-cache-1.0.2-4.D20170514git56f6668459.fc24
pcmanfm-1.2.5-2.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fc10e3165a
FlightGear-2016.1.2-6.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-607352ce5f
FlightCrew-0.9.1-7.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e75602d3ed
kernel-4.10.16-100.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7d698eba8b
chromium-58.0.3029.110-2.fc24
chromium-native_client-58.0.3029.81-1.20170421gitc948e9b.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-46fcfd8c98
wordpress-4.7.5-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-dd5d2381e4
libvncserver-0.9.11-2.fc24.1
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1f15fde598
moodle-3.1.6-1.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
29
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e1905fd566 koji-1.12.0-2.fc24
15
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a16494458f rsync-3.1.2-3.fc24
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7a0e2d58f8
thunderbird-52.1.0-1.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-01a7989fc0 git-2.7.5-1.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3f2d5790d2
lxterminal-0.3.0-3.fc24 menu-cache-1.0.2-4.D20170514git56f6668459.fc24
pcmanfm-1.2.5-2.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2c9e5e8fe
tigervnc-1.8.0-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e75602d3ed
kernel-4.10.16-100.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-74470410b7
firefox-53.0.2-5.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-718c9992ef vim-8.0.600-1.fc24
The following builds have been pushed to Fedora 24 updates-testing
NetworkManager-l2tp-1.2.6-1.fc24
engrampa-1.16.1-1.fc24
keepassxc-2.1.4-1.fc24
mediawriter-4.1.0-1.fc24
metamath-0.144-1.fc24
mycli-1.10.0-1.fc24
owncloud-9.1.5-1.fc24
pcp-3.11.10-1.fc24
python-futures-3.1.1-1.fc24
python-pydns-2.3.6-7.fc24
recoll-1.23.2-1.fc24
salt-2016.11.5-3.fc24
snapd-2.26.3-1.fc24
snapd-glib-1.12-1.fc24
storhaug-0.13-6.fc24
vim-8.0.600-1.fc24
youtube-dl-2017.05.18.1-1.fc24
Details about builds:
================================================================================
NetworkManager-l2tp-1.2.6-1.fc24 (FEDORA-2017-e5f0d01b6f)
NetworkManager VPN plugin for L2TP and L2TP/IPsec
--------------------------------------------------------------------------------
Update Information:
Updated to 1.2.6 release
--------------------------------------------------------------------------------
================================================================================
engrampa-1.16.1-1.fc24 (FEDORA-2017-4f129713fe)
MATE Desktop file archiver
--------------------------------------------------------------------------------
Update Information:
update to 1.16.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1422004 - Wrong behavior of Skip button in Replace file dialog
https://bugzilla.redhat.com/show_bug.cgi?id=1422004
--------------------------------------------------------------------------------
================================================================================
keepassxc-2.1.4-1.fc24 (FEDORA-2017-c399ad6d88)
Cross-platform password manager
--------------------------------------------------------------------------------
Update Information:
First release
--------------------------------------------------------------------------------
================================================================================
mediawriter-4.1.0-1.fc24 (FEDORA-2017-5659dc6491)
Fedora Media Writer
--------------------------------------------------------------------------------
Update Information:
Update to 4.1.0 ---- Update to 4.0.95 ---- Update to 4.0.8
--------------------------------------------------------------------------------
================================================================================
metamath-0.144-1.fc24 (FEDORA-2017-f86311a038)
Construct mathematics from basic axioms
--------------------------------------------------------------------------------
Update Information:
Changes in version 0.142: - added "#define DATE_BELOW_PROOF" in mmdata.h that
if uncommented, will enable use of the (soon-to-be obsolete) date below the
proof - fixed memory leaks and warnings found by valgrind. - added xxChanged
flags to statement structure so that any part of the source can be changed -
removed /CLEAN qualifier of WRITE SOURCE - automatically put "(Contributed by
?who?..." during SAVE NEW_PROOF or SAVE PROOF when it is missing - more VERIFY
MARKUP checking. Changes in version 0.143: - added SET CONTRIBUTOR - for
missing "(Contributed by..." use date below proof if it exists, otherwise use
today's date, in order to update old .mm files. - fix memory leaks in ERASE
Changes in version 0.144: - Add "(Revised by..." tag for conversion of legacy
.mm's if there is a 2nd date under the proof
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450652 - metamath-0.143 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1450652
--------------------------------------------------------------------------------
================================================================================
mycli-1.10.0-1.fc24 (FEDORA-2017-c7d4b8609d)
Interactive CLI for MySQL Database with auto-completion and syntax highlighting
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release mycli 1.10.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1433707 - mycli-1.10.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1433707
--------------------------------------------------------------------------------
================================================================================
owncloud-9.1.5-1.fc24 (FEDORA-2017-d9256beb7e)
Private file sync and share server
--------------------------------------------------------------------------------
Update Information:
update to 9.1.5
--------------------------------------------------------------------------------
================================================================================
pcp-3.11.10-1.fc24 (FEDORA-2017-466341873d)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
Update to latest PCP Sources
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1289912 - Python PMAPI command line parsing
https://bugzilla.redhat.com/show_bug.cgi?id=1289912
[ 2 ] Bug #968823 - change timezone in pmtime doesn't refresh time scale in pmchart
(in archive mode)
https://bugzilla.redhat.com/show_bug.cgi?id=968823
--------------------------------------------------------------------------------
================================================================================
python-futures-3.1.1-1.fc24 (FEDORA-2017-2a3bc62bde)
Backport of the concurrent.futures package from Python 3.2
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release futures 3.1.1. ---- Update to 3.0.5 Ship
python2-futures
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442589 - python-futures-3.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442589
--------------------------------------------------------------------------------
================================================================================
python-pydns-2.3.6-7.fc24 (FEDORA-2017-a019b8c81f)
Python module for DNS (Domain Name Service)
--------------------------------------------------------------------------------
Update Information:
Fix failure to resolve DNS queries (rhbz#1305746)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1305746 - Failure to resolve DNS queries
https://bugzilla.redhat.com/show_bug.cgi?id=1305746
--------------------------------------------------------------------------------
================================================================================
recoll-1.23.2-1.fc24 (FEDORA-2017-dd5384016f)
Desktop full text search tool with Qt GUI
--------------------------------------------------------------------------------
Update Information:
Update latest upstream release recoll 1.23.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450929 - recoll-1.23.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1450929
--------------------------------------------------------------------------------
================================================================================
salt-2016.11.5-3.fc24 (FEDORA-2017-21e8c6f604)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Add patch for Fix ipv6 nameserver grains #41244 ---- Commented out check for
pycryptodomex on Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #41244 - None
https://bugzilla.redhat.com/show_bug.cgi?id=41244
--------------------------------------------------------------------------------
================================================================================
snapd-2.26.3-1.fc24 (FEDORA-2017-866e9643a8)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
Update to snapd v2.26.3 and snapd-glib v1.12. Some of the upstream snapd
v2.26.3 software highlights (from the Snappy team): * support tab-completion in
snaps, i.e a snap can ship a bash completion script and it will get exported to
the users shell * new `snap whoami` command * new `snap refresh --time` option
that displays information about refresh settings * new `snap tasks
--last={refresh,install,remove,connect,disconnect,configure,try}` option *
Improve `snap info` output * Improve tab completion for interfaces * Mediate
netlink sockets via seccomp * Go 1.8 fixes * Interface API improvements * new
interfaces: `random`, `network-status`, `online-account-service`, `storage-
framework` * Interface improvements: `browser-support`, `locale-control`, `dbus`
From snapd 2.25: * Improved aliases implementation, details in
https://forum.snapcraft.io/t/improving-the-aliases-implementation/18 * Improved
channels support (tracks), see
https://forum.snapcraft.io/t/channels-2-0-implementation/156 * Per-revision
snapshots of the snap configuration refresh schedule support, see
https://forum.snapcraft.io/t/refresh-schedule-via-core-config/434 * Cross distro
improvements (Xauthority handling, etc.) * Test improvements (more spread tests)
* More fine-grained seccomp support for ioctl and quotactl * Download robustness
improvements (auto retry on hashsum and RST issues) * New `snap tasks` command *
Speedup for device key generation on Pi 2 and Pi 3 * New interfaces: `media-
hub`, `kubernetes-support` * Interface improvements Highlights for snapd-glib
v1.12 since v1.10: * New API: - `snapd_client_install2_async` -
`snapd_client_install2_finish` - `snapd_client_install2_sync` -
`snapd_system_information_get_binaries_directory` -
`snapd_system_information_get_kernel_version` -
`snapd_system_information_get_mount_directory` * Fix calls not working inside
threads. * Fix reference counting error when calling
`snapd_client_get_interfaces` and `snapd_client_create_user`. * Deprecated
API: - `snapd_client_install_async` - `snapd_client_install_finish`
- `snapd_client_install_sync` Packaging specific improvements: * Final
removal of `snapd` will trigger removal of all Snappy content
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1444422 - /var/lib/snapd not removed when removing snapd
https://bugzilla.redhat.com/show_bug.cgi?id=1444422
[ 2 ] Bug #1446605 - snapd-2.25 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1446605
[ 3 ] Bug #1448027 - snapd-glib-1.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1448027
[ 4 ] Bug #1450242 - snapd-2.26.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1450242
--------------------------------------------------------------------------------
================================================================================
snapd-glib-1.12-1.fc24 (FEDORA-2017-866e9643a8)
Library providing a GLib interface to snapd
--------------------------------------------------------------------------------
Update Information:
Update to snapd v2.26.3 and snapd-glib v1.12. Some of the upstream snapd
v2.26.3 software highlights (from the Snappy team): * support tab-completion in
snaps, i.e a snap can ship a bash completion script and it will get exported to
the users shell * new `snap whoami` command * new `snap refresh --time` option
that displays information about refresh settings * new `snap tasks
--last={refresh,install,remove,connect,disconnect,configure,try}` option *
Improve `snap info` output * Improve tab completion for interfaces * Mediate
netlink sockets via seccomp * Go 1.8 fixes * Interface API improvements * new
interfaces: `random`, `network-status`, `online-account-service`, `storage-
framework` * Interface improvements: `browser-support`, `locale-control`, `dbus`
From snapd 2.25: * Improved aliases implementation, details in
https://forum.snapcraft.io/t/improving-the-aliases-implementation/18 * Improved
channels support (tracks), see
https://forum.snapcraft.io/t/channels-2-0-implementation/156 * Per-revision
snapshots of the snap configuration refresh schedule support, see
https://forum.snapcraft.io/t/refresh-schedule-via-core-config/434 * Cross distro
improvements (Xauthority handling, etc.) * Test improvements (more spread tests)
* More fine-grained seccomp support for ioctl and quotactl * Download robustness
improvements (auto retry on hashsum and RST issues) * New `snap tasks` command *
Speedup for device key generation on Pi 2 and Pi 3 * New interfaces: `media-
hub`, `kubernetes-support` * Interface improvements Highlights for snapd-glib
v1.12 since v1.10: * New API: - `snapd_client_install2_async` -
`snapd_client_install2_finish` - `snapd_client_install2_sync` -
`snapd_system_information_get_binaries_directory` -
`snapd_system_information_get_kernel_version` -
`snapd_system_information_get_mount_directory` * Fix calls not working inside
threads. * Fix reference counting error when calling
`snapd_client_get_interfaces` and `snapd_client_create_user`. * Deprecated
API: - `snapd_client_install_async` - `snapd_client_install_finish`
- `snapd_client_install_sync` Packaging specific improvements: * Final
removal of `snapd` will trigger removal of all Snappy content
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1444422 - /var/lib/snapd not removed when removing snapd
https://bugzilla.redhat.com/show_bug.cgi?id=1444422
[ 2 ] Bug #1446605 - snapd-2.25 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1446605
[ 3 ] Bug #1448027 - snapd-glib-1.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1448027
[ 4 ] Bug #1450242 - snapd-2.26.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1450242
--------------------------------------------------------------------------------
================================================================================
storhaug-0.13-6.fc24 (FEDORA-2017-683a3502b4)
High-Availability Add-on for NFS-Ganesha and Samba
--------------------------------------------------------------------------------
Update Information:
Requires storhaug.noarch, not storhaug.(x86-64), samba too
--------------------------------------------------------------------------------
================================================================================
vim-8.0.600-1.fc24 (FEDORA-2017-718c9992ef)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit.
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2017.05.18.1-1.fc24 (FEDORA-2017-cc50abfc7a)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Finally fixing
https://github.com/rg3/youtube-dl/issues/13123 which broke
YouTube. ---- 2017.05.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1449434 - youtube-dl-2017.05.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1449434
[ 2 ] Bug #1441014 - youtube-dl-2017.04.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1441014
--------------------------------------------------------------------------------