The following Fedora 24 Security updates need testing:
Age URL
50
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e339a7779
optipng-0.7.6-1.fc24
22
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4a4d504509
obs-signd-2.2.1-8.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-95edf19d8a
squid-3.5.19-2.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b86ae2068d
openslp-2.0.0-9.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-dfa325d31b
community-mysql-5.7.12-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b967ac1a74 php-5.6.22-1.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-aa49938267
pungi-4.0.15-2.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f054bc3f5d
bind99-9.9.9-1.P1.fc24 dhcp-4.3.4-2.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2cc35d3631
linux-firmware-20160526-65.git80d463be.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-43d1395a18
selinux-policy-3.13.1-189.fc24
The following builds have been pushed to Fedora 24 updates-testing
appstream-data-24-6.fc24
atomic-reactor-1.6.9-1.fc24
bind99-9.9.9-1.P1.fc24
castxml-0.1-0.11.20160510git9a83414.fc24
dhcp-4.3.4-2.fc24
dnfdaemon-0.3.16-1.fc24
erlang-goldrush-0.1.9-1.fc24
flatpak-0.6.2-1.fc24
ghdl-0.34dev-0.20160503git6ccb80e.0.fc24
gnome-software-3.20.2-4.fc24
golang-github-codegangsta-cli-1.17.0-1.fc24
golang-github-seccomp-libseccomp-golang-0-0.4.git60c9953.fc24
libs3-2.0-0.4.20160322git0759f1d.fc24
linux-firmware-20160526-65.git80d463be.fc24
mingw-wine-gecko-2.47-0.1.fc24
mongodb-3.2.6-4.fc24
nordugrid-arc-5.1.1-1.fc24
nordugrid-arc-doc-2.0.7-1.fc24
openfst-1.5.3-1.fc24
opengrm-ngram-1.3.0-1.fc24
perl-HTML-Selector-XPath-0.20-1.fc24
perl-MCE-1.707-1.fc24
pg_journal-0.2.0-12.fc24
php-5.6.22-1.fc24
python-nectar-1.5.2-1.fc24
python-raven-5.18.0-1.fc24
rabbitmq-server-3.6.2-3.fc24
rebase-helper-0.7.3-2.fc24
rubygem-bundler_ext-0.4.1-1.fc24
rubygem-yard-0.8.7.6-3.fc24
runc-0.1.1-3.git57b9972.fc24
skylable-sx-2.1-1.fc24
sphinxtrain-1.0.8-28.fc24
subversion-1.9.4-2.fc24
wine-1.9.10-2.fc24
xscreensaver-5.35-1.fc24
Details about builds:
================================================================================
appstream-data-24-6.fc24 (FEDORA-2016-292c59882c)
Fedora AppStream metadata
--------------------------------------------------------------------------------
Update Information:
New metadata version
--------------------------------------------------------------------------------
================================================================================
atomic-reactor-1.6.9-1.fc24 (FEDORA-2016-aed2912a8d)
Improved builder for Docker images
--------------------------------------------------------------------------------
Update Information:
New upstream release. ---- Build JSON API changes ================== * Exit
plugins can now fail the build. All exit plugins are run at the end of the
build regardless of whether the build has failed. Exit plugin failures for
plugins marked as required for a successful build would previously not cause the
build to fail, but they now do. * koji_promote: now accepts optional target
parameter * pull_base_image: this plugin is no longer added if missing *
tag_and_push: this plugin is no longer added if missing Bug fixes ======= *
docker build: fix logging so that it is properly decoded from JSON *
koji_promote: use component, not name, to determine the name-version-release for
the Koji build. Improvements =========== * add_filesystem: new plugin for
creating base images via Koji * koji_promote: * store originating Koji task ID
in Koji build metadata * show upload progress in log output * store
resulting Koji build ID as OpenShift build label * tag build in Koji if target
provided
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1329778 - atomic-reactor-1.6.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1329778
[ 2 ] Bug #1340074 - atomic-reactor-1.6.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1340074
--------------------------------------------------------------------------------
================================================================================
bind99-9.9.9-1.P1.fc24 (FEDORA-2016-f054bc3f5d)
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries
--------------------------------------------------------------------------------
Update Information:
New version of bind99
--------------------------------------------------------------------------------
================================================================================
castxml-0.1-0.11.20160510git9a83414.fc24 (FEDORA-2016-450e97cc8d)
C-family abstract syntax tree XML output tool
--------------------------------------------------------------------------------
Update Information:
Latest snapshot.
--------------------------------------------------------------------------------
================================================================================
dhcp-4.3.4-2.fc24 (FEDORA-2016-f054bc3f5d)
Dynamic host configuration protocol software
--------------------------------------------------------------------------------
Update Information:
New version of bind99
--------------------------------------------------------------------------------
================================================================================
dnfdaemon-0.3.16-1.fc24 (FEDORA-2016-fe54f920b2)
DBus daemon for dnf package actions
--------------------------------------------------------------------------------
Update Information:
Fixed issues with dnf-1.1.9 in yumex-dnf
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1338564 - Update fails with "AttributeError: 'Base' object has
no attribute 'sigCheckPkg' (36)"
https://bugzilla.redhat.com/show_bug.cgi?id=1338564
--------------------------------------------------------------------------------
================================================================================
erlang-goldrush-0.1.9-1.fc24 (FEDORA-2016-e3af26f0a4)
Small, fast event processing and monitoring for Erlang/OTP applications
--------------------------------------------------------------------------------
Update Information:
* Ver. 0.1.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1339847 - erlang-goldrush-0.1.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1339847
--------------------------------------------------------------------------------
================================================================================
flatpak-0.6.2-1.fc24 (FEDORA-2016-8a483bb84c)
Application deployment framework for desktop apps
--------------------------------------------------------------------------------
Update Information:
Initial flatpak build, replacing xdg-app. This update also includes a rebuild of
gnome-software that disables xdg-app support.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1337434 - Review Request: flatpak - Application deployment framework for
desktop apps
https://bugzilla.redhat.com/show_bug.cgi?id=1337434
--------------------------------------------------------------------------------
================================================================================
ghdl-0.34dev-0.20160503git6ccb80e.0.fc24 (FEDORA-2016-2f33009a4c)
A VHDL simulator, using the GCC technology
--------------------------------------------------------------------------------
Update Information:
- update to git 6ccb80e
--------------------------------------------------------------------------------
================================================================================
gnome-software-3.20.2-4.fc24 (FEDORA-2016-8a483bb84c)
A software center for GNOME
--------------------------------------------------------------------------------
Update Information:
Initial flatpak build, replacing xdg-app. This update also includes a rebuild of
gnome-software that disables xdg-app support.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1337434 - Review Request: flatpak - Application deployment framework for
desktop apps
https://bugzilla.redhat.com/show_bug.cgi?id=1337434
--------------------------------------------------------------------------------
================================================================================
golang-github-codegangsta-cli-1.17.0-1.fc24 (FEDORA-2016-80a93db51c)
Package for building command line apps in Go
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 01857ac33766ce0c93856370626f9799281c14f4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248680 - Tracker for golang-github-codegangsta-cli
https://bugzilla.redhat.com/show_bug.cgi?id=1248680
--------------------------------------------------------------------------------
================================================================================
golang-github-seccomp-libseccomp-golang-0-0.4.git60c9953.fc24 (FEDORA-2016-daea7853b4)
The libseccomp golang bindings repository
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 60c9953736798c4a04e90d0f3da2f933d44fd4c4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1340137 - Tracker for golang-github-seccomp-libseccomp-golang
https://bugzilla.redhat.com/show_bug.cgi?id=1340137
--------------------------------------------------------------------------------
================================================================================
libs3-2.0-0.4.20160322git0759f1d.fc24 (FEDORA-2016-ce888c0868)
C Library and Tools for Amazon S3 Access
--------------------------------------------------------------------------------
Update Information:
ARC Release 15.03u7
http://www.nordugrid.org/arc/releases/15.03u7/release_notes_15.03u7.html
--------------------------------------------------------------------------------
================================================================================
linux-firmware-20160526-65.git80d463be.fc24 (FEDORA-2016-2cc35d3631)
Firmware files used by the Linux kernel
--------------------------------------------------------------------------------
Update Information:
- Update to the latest upstream snapshot - amdgpu, Skylake audio, and rt2xxx
wifi firmware updates
--------------------------------------------------------------------------------
================================================================================
mingw-wine-gecko-2.47-0.1.fc24 (FEDORA-2016-ca7f75eb16)
Gecko library required for Wine
--------------------------------------------------------------------------------
Update Information:
- CSMT patch has been updated and enabled again (disabled since 1.9.5) - High
resolution ("Retina") rendering option on Mac OS X. - More compatible
directory enumeration. - A number of C++ runtime fixes. - Video output
improvements. - Various bug fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1336605 - wine-1.9.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1336605
--------------------------------------------------------------------------------
================================================================================
mongodb-3.2.6-4.fc24 (FEDORA-2016-eae91c887b)
High-performance, schema-free document-oriented database
--------------------------------------------------------------------------------
Update Information:
Removed excutable stack. MongoDB now use also reserved GID. Added mongobridge
tool. ---- Fixed mmapv1 storage driver for ARM (was not detected properly).
---- Upgrade to latest upstream minor release. ---- Upgrade to latest
upstream minor release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1334640 - mongod does not start on armv7: The default storage engine
'mmapv1' is not available with this build of mongod
https://bugzilla.redhat.com/show_bug.cgi?id=1334640
[ 2 ] Bug #1339899 - Rebuild mongodb for new boost-1.60.0-5 build
https://bugzilla.redhat.com/show_bug.cgi?id=1339899
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-5.1.1-1.fc24 (FEDORA-2016-ce888c0868)
Advanced Resource Connector Grid Middleware
--------------------------------------------------------------------------------
Update Information:
ARC Release 15.03u7
http://www.nordugrid.org/arc/releases/15.03u7/release_notes_15.03u7.html
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-doc-2.0.7-1.fc24 (FEDORA-2016-ce888c0868)
Advanced Resource Connector Documentation
--------------------------------------------------------------------------------
Update Information:
ARC Release 15.03u7
http://www.nordugrid.org/arc/releases/15.03u7/release_notes_15.03u7.html
--------------------------------------------------------------------------------
================================================================================
openfst-1.5.3-1.fc24 (FEDORA-2016-ddafceae7b)
Weighted finite-state transducer library
--------------------------------------------------------------------------------
Update Information:
Changes in openfst 1.5.2 and 1.5.3: - FarReader's GetFst method now returns a
pointer - Fixed FSTERROR macro - Fixed build flags for dlopen - Consolidated
Python extension into single module - Adds optional minimization of non-
deterministic FSTs - Python add_arc now takes an Arc object - Mutation methods
of the Python Fst object can now be chained - Scripting API and Python weight
objects now support semiring arithmetic Changes in opengrm-ngram 1.3.0: -
Templated Arc to provide new hist-arc counting, supporting fractional count
based Katz backoff models. - Updated error handling. - Updated code to better
conform to Google C++ guidelines. - Added Bayesian model merging. - Some re-
factoring of functions to improve efficiency, particularly those for distributed
model building, such as ngram-complete and ngram-split. - Updated unit tests to
run more quickly and to be less bash-specific. sphinxtrain was rebuilt for the
updated openfst and opengrm-ngram libraries.
--------------------------------------------------------------------------------
================================================================================
opengrm-ngram-1.3.0-1.fc24 (FEDORA-2016-ddafceae7b)
Library for making and modifying n-gram language models
--------------------------------------------------------------------------------
Update Information:
Changes in openfst 1.5.2 and 1.5.3: - FarReader's GetFst method now returns a
pointer - Fixed FSTERROR macro - Fixed build flags for dlopen - Consolidated
Python extension into single module - Adds optional minimization of non-
deterministic FSTs - Python add_arc now takes an Arc object - Mutation methods
of the Python Fst object can now be chained - Scripting API and Python weight
objects now support semiring arithmetic Changes in opengrm-ngram 1.3.0: -
Templated Arc to provide new hist-arc counting, supporting fractional count
based Katz backoff models. - Updated error handling. - Updated code to better
conform to Google C++ guidelines. - Added Bayesian model merging. - Some re-
factoring of functions to improve efficiency, particularly those for distributed
model building, such as ngram-complete and ngram-split. - Updated unit tests to
run more quickly and to be less bash-specific. sphinxtrain was rebuilt for the
updated openfst and opengrm-ngram libraries.
--------------------------------------------------------------------------------
================================================================================
perl-HTML-Selector-XPath-0.20-1.fc24 (FEDORA-2016-5d13fc40f0)
CSS Selector to XPath compiler
--------------------------------------------------------------------------------
Update Information:
Minor upstream bug fixes.
--------------------------------------------------------------------------------
================================================================================
perl-MCE-1.707-1.fc24 (FEDORA-2016-ff73f4e786)
Many-core Engine for Perl providing parallel processing capabilities
--------------------------------------------------------------------------------
Update Information:
Current upstream maintenance release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1339851 - perl-MCE-1.707 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1339851
--------------------------------------------------------------------------------
================================================================================
pg_journal-0.2.0-12.fc24 (FEDORA-2016-cd4e3d9254)
Module for sending log messages directly to the systemd journal
--------------------------------------------------------------------------------
Update Information:
This update fixes startup failure due to memory exhaustion.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1337710 - pg_journal causes postgreSQL to experience a fatal 'out of
memory' error on start-up.
https://bugzilla.redhat.com/show_bug.cgi?id=1337710
--------------------------------------------------------------------------------
================================================================================
php-5.6.22-1.fc24 (FEDORA-2016-b967ac1a74)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
26 May 2016, **PHP 5.6.22** **Core:** * Fixed bug #72172 (zend_hex_strtod
should not use strlen). (bwitz at hotmail dot com ) * Fixed bug #72114 (Integer
underflow / arbitrary null write in fread/gzread). (Stas) * Fixed bug #72135
(Integer Overflow in php_html_entities). (Stas) **GD:** * Fixed bug #72227
(imagescale out-of-bounds read). (Stas) **Intl:** * Fixed bug #64524 (Add
intl.use_exceptions to php.ini-*). (Anatol) * Fixed bug #72241
(get_icu_value_internal out-of-bounds read). (Stas) **Postgres:** * Fixed bug
#72151 (mysqli_fetch_object changed behaviour). (Anatol)
--------------------------------------------------------------------------------
================================================================================
python-nectar-1.5.2-1.fc24 (FEDORA-2016-45d766e31c)
A download library that separates workflow from implementation details
--------------------------------------------------------------------------------
Update Information:
Making a new release of package
--------------------------------------------------------------------------------
================================================================================
python-raven-5.18.0-1.fc24 (FEDORA-2016-a29aad957c)
Python client for Sentry
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1328649 - python-raven-5.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1328649
--------------------------------------------------------------------------------
================================================================================
rabbitmq-server-3.6.2-3.fc24 (FEDORA-2016-47f099a9aa)
The RabbitMQ server
--------------------------------------------------------------------------------
Update Information:
* Fixed access for guest user (allows connection via loopback) * Reverted error
codes to the same scheme as in a older ones
--------------------------------------------------------------------------------
================================================================================
rebase-helper-0.7.3-2.fc24 (FEDORA-2016-9d3cc66f52)
The tool which helps you with rebase package
--------------------------------------------------------------------------------
Update Information:
Clear output data on Application initialization Fixes rebase-helper issue
[#174](https://github.com/phracek/rebase-helper/issues/174)
--------------------------------------------------------------------------------
================================================================================
rubygem-bundler_ext-0.4.1-1.fc24 (FEDORA-2016-57035e1a53)
Load system gems via Bundler DSL
--------------------------------------------------------------------------------
Update Information:
- Update to bundler_ext 0.4.1. (rhbz#1332928)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1332928 - Fails to require namespaced gem names, e.g. net-ssh
https://bugzilla.redhat.com/show_bug.cgi?id=1332928
[ 2 ] Bug #1339844 - rubygem-bundler_ext-0.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1339844
--------------------------------------------------------------------------------
================================================================================
rubygem-yard-0.8.7.6-3.fc24 (FEDORA-2016-0353b8a3b7)
Documentation tool for consistent and usable documentation in Ruby
--------------------------------------------------------------------------------
Update Information:
- Fix test suite for Ruby 2.3 compatibility. (rhbz#1308100)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1308100 - rubygem-yard: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1308100
--------------------------------------------------------------------------------
================================================================================
runc-0.1.1-3.git57b9972.fc24 (FEDORA-2016-c791bb6712)
CLI for running Open Containers
--------------------------------------------------------------------------------
Update Information:
Add bash completion ---- add selinux to BUILDTAGS in addition to the default
seccomp tag
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1340119 - Could you add bash completions to runc package.
https://bugzilla.redhat.com/show_bug.cgi?id=1340119
--------------------------------------------------------------------------------
================================================================================
skylable-sx-2.1-1.fc24 (FEDORA-2016-0154e973a6)
A reliable and scalable storage cluster
--------------------------------------------------------------------------------
Update Information:
new upstream SX 2.1
--------------------------------------------------------------------------------
================================================================================
sphinxtrain-1.0.8-28.fc24 (FEDORA-2016-ddafceae7b)
Acoustic model trainer for CMU's Sphinx tools
--------------------------------------------------------------------------------
Update Information:
Changes in openfst 1.5.2 and 1.5.3: - FarReader's GetFst method now returns a
pointer - Fixed FSTERROR macro - Fixed build flags for dlopen - Consolidated
Python extension into single module - Adds optional minimization of non-
deterministic FSTs - Python add_arc now takes an Arc object - Mutation methods
of the Python Fst object can now be chained - Scripting API and Python weight
objects now support semiring arithmetic Changes in opengrm-ngram 1.3.0: -
Templated Arc to provide new hist-arc counting, supporting fractional count
based Katz backoff models. - Updated error handling. - Updated code to better
conform to Google C++ guidelines. - Added Bayesian model merging. - Some re-
factoring of functions to improve efficiency, particularly those for distributed
model building, such as ngram-complete and ngram-split. - Updated unit tests to
run more quickly and to be less bash-specific. sphinxtrain was rebuilt for the
updated openfst and opengrm-ngram libraries.
--------------------------------------------------------------------------------
================================================================================
subversion-1.9.4-2.fc24 (FEDORA-2016-fcbb7c0289)
A Modern Concurrent Version Control System
--------------------------------------------------------------------------------
Update Information:
Enable tests; Revert one of Ruby 2.2 fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1299502 - swig breaks ruby tests when building subversion
https://bugzilla.redhat.com/show_bug.cgi?id=1299502
--------------------------------------------------------------------------------
================================================================================
wine-1.9.10-2.fc24 (FEDORA-2016-ca7f75eb16)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
- CSMT patch has been updated and enabled again (disabled since 1.9.5) - High
resolution ("Retina") rendering option on Mac OS X. - More compatible
directory enumeration. - A number of C++ runtime fixes. - Video output
improvements. - Various bug fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1336605 - wine-1.9.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1336605
--------------------------------------------------------------------------------
================================================================================
xscreensaver-5.35-1.fc24 (FEDORA-2016-5e21dafba6)
X screen saver and locker
--------------------------------------------------------------------------------
Update Information:
New version 5.35 is released.
--------------------------------------------------------------------------------