The following Fedora 24 Security updates need testing:
Age URL
39
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b3f93ead5b moin-1.9.8-1.fc24
22
https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24
18
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2b0c16fd82
tomcat-8.0.36-2.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0ef628998f
chicken-4.11.0-3.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9743cce120
canl-c-2.1.7-1.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8749c58855
ganglia-3.7.2-10.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2eef68e635
phpMyAdmin-4.6.4-2.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-af3b0af887
mediawiki-1.26.4-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4751a94476
libksba-1.3.5-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e5ebfed6d
kernel-4.7.2-201.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
20
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ddadfe403c pungi-4.1.8-1.fc24
python-productmd-1.2-2.fc24
12
https://bodhi.fedoraproject.org/updates/FEDORA-2016-aa32e6e85b
libfm-1.2.4-6.D20160627git2a537414de.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-11303fb003
selinux-policy-3.13.1-191.14.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0edc0e1794
livecd-tools-23.4-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-33b409649c
xorg-x11-server-1.18.4-4.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3c372ed4df
hwdata-0.292-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1a8b18ee44
hunspell-1.3.3-10.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1e985ae9f6
libgweather-3.20.3-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-88d8834106
pcmanfm-1.2.4-3.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-bb3200196b
lxsession-0.5.2-11.D20160817git699c1695c2.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6cc6fd707c pcre-8.39-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-087e6ea4ce krb5-1.14.3-8.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e5ebfed6d
kernel-4.7.2-201.fc24
The following builds have been pushed to Fedora 24 updates-testing
R-littler-0.3.1-1.fc24
SDL_mng-0.2.6-2.fc24
ardour5-5.3.0-1.fc24
beignet-1.2.0-1.fc24
cAudio-2.3.1-3.fc24
clatd-1.4-2.fc24
cpuid-20160814-1.fc24
cqrlog-2.0.2-1.fc24
entr-3.6-7.fc24
feedreader-1.6.2-1.fc24
fmt-3.0.0-1.fc24
gap-pkg-guava-3.13.1-2.fc24
gonvert-0.2.39-1.fc24
hplip-3.16.8-1.fc24
kde-connect-1.0-1.fc24
kernel-4.7.2-201.fc24
krb5-1.14.3-8.fc24
lasem-0.4.3-4.fc24
libinput-1.4.2-1.fc24
libpst-0.6.68-1.fc24
metamath-0.134-1.fc24
mpc-0.28-1.fc24
nfs-ganesha-2.4.0-0.17rc1.fc24
pcre-8.39-3.fc24
perl-MongoDB-1.2.3-2.fc24
pysubnettree-0.24-6.fc24
python-aiohttp-0.22.5-1.fc24
python-cycler-0.10.0-1.fc24
python-rpi-gpio-0.6.2-1.fc24
python2-faulthandler-2.4-1.fc24
quodlibet-3.7.0-1.fc24
rednotebook-1.13-1.fc24
rubygem-proxifier-1.0.3-1.fc24
tin-2.4.0-1.fc24
trace-summary-0.84-4.fc24
varnish-4.1.3-4.fc24
xonsh-0.4.5-2.fc24
Details about builds:
================================================================================
R-littler-0.3.1-1.fc24 (FEDORA-2016-51d7919efc)
littler: R at the Command-Line via 'r'
--------------------------------------------------------------------------------
Update Information:
New version - see
https://cran.r-project.org/web/packages/littler/news.html for
details.
--------------------------------------------------------------------------------
================================================================================
SDL_mng-0.2.6-2.fc24 (FEDORA-2016-fed1426efc)
Simple DirectMedia Layer - MNG Loading Library
--------------------------------------------------------------------------------
Update Information:
New library to open mng files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1227972 - Review Request: SDL_mng - Library to load MNG files for SDL
https://bugzilla.redhat.com/show_bug.cgi?id=1227972
--------------------------------------------------------------------------------
================================================================================
ardour5-5.3.0-1.fc24 (FEDORA-2016-b8df5a4d9b)
Digital Audio Workstation
--------------------------------------------------------------------------------
Update Information:
New upstream bugfix and enhancement release. For details refer to the upstream
release announcements: * [version
5.1](https://community.ardour.org/node/13890)
* [version
5.3](https://community.ardour.org/node/13901)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1371129 - ardour5-5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1371129
--------------------------------------------------------------------------------
================================================================================
beignet-1.2.0-1.fc24 (FEDORA-2016-bc629ef20a)
Open source implementation of the OpenCL for Intel GPUs
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1309087 - beignet: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1309087
[ 2 ] Bug #1328527 - beignet-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1328527
--------------------------------------------------------------------------------
================================================================================
cAudio-2.3.1-3.fc24 (FEDORA-2016-ea7d3fb1b8)
3D Audio Engine Based on Openal
--------------------------------------------------------------------------------
Update Information:
Build libEAXLegacyPreset plugin as part of cAudio.
--------------------------------------------------------------------------------
================================================================================
clatd-1.4-2.fc24 (FEDORA-2016-01a13b182f)
CLAT / SIIT-DC Edge Relay implementation for Linux
--------------------------------------------------------------------------------
Update Information:
clatd implements the CLAT component of the 464XLAT network architecture
specified in RFC 6877. It allows an IPv6-only host to have IPv4 connectivity
that is translated to IPv6 before being routed to an upstream PLAT (which is
typically a Stateful NAT64 operated by the ISP) and there translated back to
IPv4 before being routed to the IPv4 internet. For the actual package
shuffling, clatd uses tayga, a userspace nat64 daemon.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1302876 - Review Request: clatd - CLAT / SIIT-DC Edge Relay implementation
for Linux
https://bugzilla.redhat.com/show_bug.cgi?id=1302876
--------------------------------------------------------------------------------
================================================================================
cpuid-20160814-1.fc24 (FEDORA-2016-eaa0baa0ed)
Dumps information about the CPU(s)
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 20160814 (rhbz#20160814)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #20160814 - None
https://bugzilla.redhat.com/show_bug.cgi?id=20160814
--------------------------------------------------------------------------------
================================================================================
cqrlog-2.0.2-1.fc24 (FEDORA-2016-119e35f592)
An amateur radio contact logging program
--------------------------------------------------------------------------------
Update Information:
* QSLMSG added to ADIF export for eQSL * CW type window didn't show - fixed *
TRX control set LSB to 60M instead of USB - fixed * CW type window didn't show -
fixed
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1371136 - cqrlog-v2.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1371136
--------------------------------------------------------------------------------
================================================================================
entr-3.6-7.fc24 (FEDORA-2016-b80a4445c2)
Run arbitrary commands when files change
--------------------------------------------------------------------------------
Update Information:
A utility for running arbitrary commands when files change. Uses inotify to
avoid polling. It was written to make rapid feedback and automated testing
natural and completely ordinary.
--------------------------------------------------------------------------------
================================================================================
feedreader-1.6.2-1.fc24 (FEDORA-2016-7144df0cb1)
RSS desktop client
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.2
--------------------------------------------------------------------------------
================================================================================
fmt-3.0.0-1.fc24 (FEDORA-2016-70fa132149)
Small, safe and fast formatting library for C++
--------------------------------------------------------------------------------
Update Information:
Initial RPM release (rename of cppformat as part of
[
3.0.0](https://github.com/fmtlib/fmt/releases/tag/3.0.0))
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1350143 - Review Request: fmt - Small, safe and fast formating library for
C++
https://bugzilla.redhat.com/show_bug.cgi?id=1350143
--------------------------------------------------------------------------------
================================================================================
gap-pkg-guava-3.13.1-2.fc24 (FEDORA-2016-2547786f05)
Computing with error-correcting codes
--------------------------------------------------------------------------------
Update Information:
GUAVA is a package that implements coding theory algorithms in GAP. Codes can be
created and manipulated and information about codes can be calculated.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1367598 - Review Request: gap-pkg-guava - Computing with error-correcting
codes
https://bugzilla.redhat.com/show_bug.cgi?id=1367598
--------------------------------------------------------------------------------
================================================================================
gonvert-0.2.39-1.fc24 (FEDORA-2016-b3e5b83fc2)
Units conversion utility
--------------------------------------------------------------------------------
Update Information:
0.2.39
--------------------------------------------------------------------------------
================================================================================
hplip-3.16.8-1.fc24 (FEDORA-2016-98d38dd59a)
HP Linux Imaging and Printing Project
--------------------------------------------------------------------------------
Update Information:
rebase to 3.16.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1371142 - hplip-3.16.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1371142
--------------------------------------------------------------------------------
================================================================================
kde-connect-1.0-1.fc24 (FEDORA-2016-040488eeab)
KDE Connect client for communication with smartphones
--------------------------------------------------------------------------------
Update Information:
KDE Connect 1.0 release, see also
https://albertvaka.wordpress.com/2016/08/26
/kde-connect-1-0-is-here/
--------------------------------------------------------------------------------
================================================================================
kernel-4.7.2-201.fc24 (FEDORA-2016-2e5ebfed6d)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The -201 build is an incremental build. it contains several fixes for known
bugzillas and one fix for a known oom regression. ---- This is a rebase to the
4.7.2 kernel. The 4.7.2 update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1362466 - CVE-2016-6480 kernel: scsi: aacraid: double fetch in
ioctl_send_fib()
https://bugzilla.redhat.com/show_bug.cgi?id=1362466
[ 2 ] Bug #1367091 - CVE-2016-6828 kernel: Use after free in tcp_xmit_retransmit_queue
https://bugzilla.redhat.com/show_bug.cgi?id=1367091
--------------------------------------------------------------------------------
================================================================================
krb5-1.14.3-8.fc24 (FEDORA-2016-087e6ea4ce)
The Kerberos network authentication system
--------------------------------------------------------------------------------
Update Information:
Misc samba and sssd-related bugfixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370980 - Guess Samba client mutual flag using ap_options in gssapi krb5
mech
https://bugzilla.redhat.com/show_bug.cgi?id=1370980
[ 2 ] Bug #1370622 - Cannot authenticate with sssd-1.14 if there is no pre-auth
https://bugzilla.redhat.com/show_bug.cgi?id=1370622
--------------------------------------------------------------------------------
================================================================================
lasem-0.4.3-4.fc24 (FEDORA-2016-406d38c5ef)
A library for rendering SVG and Mathml, implementing a DOM like API
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1352408 - Review Request: lasem - A library for rendering SVG and Mathml,
implementing a DOM like API
https://bugzilla.redhat.com/show_bug.cgi?id=1352408
--------------------------------------------------------------------------------
================================================================================
libinput-1.4.2-1.fc24 (FEDORA-2016-6e552828e1)
Input device library
--------------------------------------------------------------------------------
Update Information:
libinput 1.4.2, fixes occasional cursor jumps when lifting a finger after two-
finger scrolling or tapping
--------------------------------------------------------------------------------
================================================================================
libpst-0.6.68-1.fc24 (FEDORA-2016-01b3131748)
Utilities to convert Outlook .pst files to other formats
--------------------------------------------------------------------------------
Update Information:
allow folders containing multiple item types, e.g. email and calendar; better
detection of valid internet headers
--------------------------------------------------------------------------------
================================================================================
metamath-0.134-1.fc24 (FEDORA-2016-9313a6dc1a)
Construct mathematics from basic axioms
--------------------------------------------------------------------------------
Update Information:
Changes in version 0.134: - mmwtex.c: added breadcrumbs to theorem pages; -
metamath.c, mmcmdl.c, mmhlpb.c, mminou.c,.h: added /TIME to SAVE PROOF, SHOW
STATEMENT.../[ALT}HTML, MINIMIZE_WITH
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370745 - metamath-0.134 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370745
--------------------------------------------------------------------------------
================================================================================
mpc-0.28-1.fc24 (FEDORA-2016-988f050f06)
Command-line client for MPD
--------------------------------------------------------------------------------
Update Information:
updated to 0.28
--------------------------------------------------------------------------------
================================================================================
nfs-ganesha-2.4.0-0.17rc1.fc24 (FEDORA-2016-fbe7e2f820)
NFS-Ganesha is a NFS Server running in user space
--------------------------------------------------------------------------------
Update Information:
2.4-rc1
--------------------------------------------------------------------------------
================================================================================
pcre-8.39-3.fc24 (FEDORA-2016-6cc6fd707c)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes just-in-time compilation on SSE2-enabled platforms. It also
fixes matching characters above 255 when a negative character type was used
without enabled UCP in a positive class.
--------------------------------------------------------------------------------
================================================================================
perl-MongoDB-1.2.3-2.fc24 (FEDORA-2016-90e5ecc4c3)
A MongoDB Driver for Perl
--------------------------------------------------------------------------------
Update Information:
This releases fixes authentication against hidden or uninitialized replica set
members.
--------------------------------------------------------------------------------
================================================================================
pysubnettree-0.24-6.fc24 (FEDORA-2016-43b661033e)
A Python Module for CIDR Lookups
--------------------------------------------------------------------------------
Update Information:
Fix FTBFS (rhbz#1307892)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1307892 - pysubnettree: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1307892
--------------------------------------------------------------------------------
================================================================================
python-aiohttp-0.22.5-1.fc24 (FEDORA-2016-a513c49a95)
Python HTTP client/server for asyncio
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 0.22.5
--------------------------------------------------------------------------------
================================================================================
python-cycler-0.10.0-1.fc24 (FEDORA-2016-e283f78b2e)
Cycle through lists in various ways (used by matplotlib)
--------------------------------------------------------------------------------
Update Information:
update to 0.10.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1371159 - python-cycler 0.10.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1371159
--------------------------------------------------------------------------------
================================================================================
python-rpi-gpio-0.6.2-1.fc24 (FEDORA-2016-51aac4ead8)
A class to control the GPIO on a Raspberry Pi
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1308352 - New upstream release of python-rpi-gpio
https://bugzilla.redhat.com/show_bug.cgi?id=1308352
--------------------------------------------------------------------------------
================================================================================
python2-faulthandler-2.4-1.fc24 (FEDORA-2016-aba642f93a)
Display the Python traceback on a crash
--------------------------------------------------------------------------------
Update Information:
Display the Python traceback on a crash.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1369374 - Review Request: python2-faulthandler - Display the Python traceback
on a crash
https://bugzilla.redhat.com/show_bug.cgi?id=1369374
--------------------------------------------------------------------------------
================================================================================
quodlibet-3.7.0-1.fc24 (FEDORA-2016-f8fc1dbbb0)
A music management program
--------------------------------------------------------------------------------
Update Information:
- update to 3.7.0 -
https://quodlibet.readthedocs.io/en/latest/changelog.html#release-3-7-0
--------------------------------------------------------------------------------
================================================================================
rednotebook-1.13-1.fc24 (FEDORA-2016-8ba1eb8e95)
Daily journal with calendar, templates and keyword searching
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 1.13
--------------------------------------------------------------------------------
================================================================================
rubygem-proxifier-1.0.3-1.fc24 (FEDORA-2016-bba316b80a)
Proxifier is a gem to force ruby to use a proxy
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
================================================================================
tin-2.4.0-1.fc24 (FEDORA-2016-aa13031c53)
Basic Internet news reader
--------------------------------------------------------------------------------
Update Information:
updated to 2.4.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1369576 - tin 2.4.0 available
https://bugzilla.redhat.com/show_bug.cgi?id=1369576
--------------------------------------------------------------------------------
================================================================================
trace-summary-0.84-4.fc24 (FEDORA-2016-5214e0b19d)
A script generating break-downs of network traffic
--------------------------------------------------------------------------------
Update Information:
Update for py3
--------------------------------------------------------------------------------
================================================================================
varnish-4.1.3-4.fc24 (FEDORA-2016-9a51c6b278)
High-performance HTTP accelerator
--------------------------------------------------------------------------------
Update Information:
Fixed a bug hindering varnishlog and varnishncsa to start up
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1371181 - varnishlog and varnishncsa fail to start
https://bugzilla.redhat.com/show_bug.cgi?id=1371181
--------------------------------------------------------------------------------
================================================================================
xonsh-0.4.5-2.fc24 (FEDORA-2016-e61d5810b1)
A general purpose, Python-ish shell
--------------------------------------------------------------------------------
Update Information:
Require python3-pygments and python3-setproctitle
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370833 - xonsh-0.4.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370833
--------------------------------------------------------------------------------