The following Fedora 24 Security updates need testing:
Age URL
118
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
112
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24
74
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba
runc-1.0.0-5.rc2.gitc91b5be.fc24
54
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4b176c1694 redis-3.2.8-1.fc24
32
https://bodhi.fedoraproject.org/updates/FEDORA-2017-68cdc567e9
php-onelogin-php-saml-2.10.5-1.fc24
24
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0f5fe1913f
sane-backends-1.0.25-7.fc24
17
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ec01954fe9
chromium-57.0.2987.133-1.fc24
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a66ca10c22
tigervnc-1.7.1-4.fc24
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7de130a80d tnef-1.4.14-1.fc24
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8330a48ca2
python-XStatic-jquery-ui-1.12.0.1-1.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d9d620366e
php-pear-CAS-1.3.5-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-da4ed58fd5
dovecot-2.2.29.1-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5764721de5
xstream-1.4.9-5.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-db6864b797
jenkins-xstream-1.4.7-11.jenkins1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7c9a9b2b36
backintime-1.1.20-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-33355c425d
ansible-2.3.0.0-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9941306740 yara-3.5.0-7.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b639afc9c
collectd-5.6.2-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-374389c196 qemu-2.6.2-8.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d5aa7c77d6
tomcat-8.0.43-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0a876b0ba5
bind-9.10.4-3.P8.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-edce28f24b
bind99-9.9.9-4.P8.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c372fa4dbc
sudo-1.8.19p2-1.fc24
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a66ca10c22
tigervnc-1.7.1-4.fc24
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a90e43dc1b
thunderbird-52.0-1.fc24
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-185a953346 libfm-1.2.5-3.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6ec305fa93
dbus-1.11.12-1.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ae0e285fc1
libdrm-2.4.79-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c8186b8423 audit-2.7.5-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3753e75f72
ca-certificates-2017.2.11-1.1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-01fa93cbeb
menu-cache-1.0.2-2.D20170417git54ab9e4576.fc24
The following builds have been pushed to Fedora 24 updates-testing
bind-9.10.4-3.P8.fc24
bind99-9.9.9-4.P8.fc24
glogg-1.1.3-1.fc24
golang-github-AudriusButkevicius-pfilter-0-0.1.20170209.git09b3cfd.fc24
golang-github-ccding-go-stun-0-0.1.20170323.git04a4eed.fc24
golang-github-cznic-b-0-0.1.20170413.git6955404.fc24
golang-github-oschwald-geoip2-golang-1.0.0-1.20170314.git0fd242d.fc24
ibus-typing-booster-1.5.31-1.fc24
luminance-hdr-2.5.0-3.fc24
menu-cache-1.0.2-2.D20170417git54ab9e4576.fc24
rhythmbox-alternative-toolbar-0.17.3-5.fc24
stunnel-5.41-1.fc24
superlu_dist-5.1.3-2.fc24
Details about builds:
================================================================================
bind-9.10.4-3.P8.fc24 (FEDORA-2017-0a876b0ba5)
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-3136, CVE-2017-3137 and CVE-2017-3138
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1441125 - CVE-2017-3136 bind: Incorrect error handling causes assertion
failure when using DNS64 with "break-dnssec yes;"
https://bugzilla.redhat.com/show_bug.cgi?id=1441125
[ 2 ] Bug #1441133 - CVE-2017-3137 bind: Processing a response containing CNAME or DNAME
with unusual order can crash resolver
https://bugzilla.redhat.com/show_bug.cgi?id=1441133
[ 3 ] Bug #1441137 - CVE-2017-3138 bind: REQUIRE assertion failure when null command
string on control channel is received
https://bugzilla.redhat.com/show_bug.cgi?id=1441137
--------------------------------------------------------------------------------
================================================================================
bind99-9.9.9-4.P8.fc24 (FEDORA-2017-edce28f24b)
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-3136, CVE-2017-3137 and CVE-2017-3138
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1441125 - CVE-2017-3136 bind: Incorrect error handling causes assertion
failure when using DNS64 with "break-dnssec yes;"
https://bugzilla.redhat.com/show_bug.cgi?id=1441125
[ 2 ] Bug #1441133 - CVE-2017-3137 bind: Processing a response containing CNAME or DNAME
with unusual order can crash resolver
https://bugzilla.redhat.com/show_bug.cgi?id=1441133
[ 3 ] Bug #1441137 - CVE-2017-3138 bind: REQUIRE assertion failure when null command
string on control channel is received
https://bugzilla.redhat.com/show_bug.cgi?id=1441137
--------------------------------------------------------------------------------
================================================================================
glogg-1.1.3-1.fc24 (FEDORA-2017-0515c332b5)
Smart interactive log explorer
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.1.3, rhbz#1434627
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434627 - glogg-1.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1434627
--------------------------------------------------------------------------------
================================================================================
golang-github-AudriusButkevicius-pfilter-0-0.1.20170209.git09b3cfd.fc24
(FEDORA-2017-a0940eda30)
Simple Packet Filtering package written in Go
--------------------------------------------------------------------------------
Update Information:
New package for fedora. This is one of the dependencies of syncthing.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434421 - Review Request: golang-github-AudriusButkevicius-pfilter - Simple
Packet Filtering package written in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1434421
--------------------------------------------------------------------------------
================================================================================
golang-github-ccding-go-stun-0-0.1.20170323.git04a4eed.fc24 (FEDORA-2017-f8fc1bd3f5)
STUN client (RFC 3489 and RFC 5389) implementation in Go
--------------------------------------------------------------------------------
Update Information:
New package for fedora. This is one of the dependencies of syncthing.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1437389 - Review Request: golang-github-ccding-go-stun - STUN client (RFC
3489 and RFC 5389) implementation in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1437389
--------------------------------------------------------------------------------
================================================================================
golang-github-cznic-b-0-0.1.20170413.git6955404.fc24 (FEDORA-2017-900cdba78a)
B+ Tree implementation in Go
--------------------------------------------------------------------------------
Update Information:
New package for fedora. This is one of the dependencies of syncthing.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431741 - Review Request: golang-github-cznic-b - B+ Tree implementation in
Go
https://bugzilla.redhat.com/show_bug.cgi?id=1431741
--------------------------------------------------------------------------------
================================================================================
golang-github-oschwald-geoip2-golang-1.0.0-1.20170314.git0fd242d.fc24
(FEDORA-2017-6261d56f95)
GeoIP2 lookup library for Go
--------------------------------------------------------------------------------
Update Information:
New package for fedora. This is one of the dependencies of syncthing.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431763 - Review Request: golang-github-oschwald-geoip2-golang - GeoIP2
lookup library for Go
https://bugzilla.redhat.com/show_bug.cgi?id=1431763
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-1.5.31-1.fc24 (FEDORA-2017-5692359e73)
A completion input method
--------------------------------------------------------------------------------
Update Information:
update to 1.5.31
--------------------------------------------------------------------------------
================================================================================
luminance-hdr-2.5.0-3.fc24 (FEDORA-2017-964d2cf638)
A graphical tool for creating and tone-mapping HDR images
--------------------------------------------------------------------------------
Update Information:
Update to new release 2.5.0. This version brings two new tonemapping operators
within other enhancements and fixes.
--------------------------------------------------------------------------------
================================================================================
menu-cache-1.0.2-2.D20170417git54ab9e4576.fc24 (FEDORA-2017-01fa93cbeb)
Caching mechanism for
freedesktop.org compliant menus
--------------------------------------------------------------------------------
Update Information:
Update to the current latest git. This contains a fix for menu-cache-gen
segfault.
--------------------------------------------------------------------------------
================================================================================
rhythmbox-alternative-toolbar-0.17.3-5.fc24 (FEDORA-2017-74bac8298b)
Rhythmbox plugin
--------------------------------------------------------------------------------
Update Information:
Removed the noarch label to resolv bug 1434240
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434240 - plugin doesn't appear under list of available plugins
https://bugzilla.redhat.com/show_bug.cgi?id=1434240
--------------------------------------------------------------------------------
================================================================================
stunnel-5.41-1.fc24 (FEDORA-2017-2962c2446a)
A TLS-encrypting socket wrapper
--------------------------------------------------------------------------------
Update Information:
New upstream release 5.41
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1373918 - stunnel-5.41 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1373918
--------------------------------------------------------------------------------
================================================================================
superlu_dist-5.1.3-2.fc24 (FEDORA-2017-cbc1eb72fc)
Solution of large, sparse, nonsymmetric systems of linear equations
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1398400 - Review Request: superlu_dist - Solution of large, sparse,
nonsymmetric systems of linear equations
https://bugzilla.redhat.com/show_bug.cgi?id=1398400
--------------------------------------------------------------------------------