The following Fedora 24 Security updates need testing:
Age URL
33
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b3f93ead5b moin-1.9.8-1.fc24
16
https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-53cc023dd6
uClibc-0.9.33.2-10.fc24
12
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2b0c16fd82
tomcat-8.0.36-2.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1ebd9e116b lcms2-2.8-2.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c07d18b2a5
java-1.8.0-openjdk-aarch32-1.8.0.102-1.160812.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-92a3655b70
freeipa-4.3.2-2.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b4919ffe56
rubygem-activerecord-4.2.5.2-2.fc24 rubygem-actionpack-4.2.5.2-3.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-20014bf2bd
borgbackup-1.0.7-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9864953aa3
gnupg-1.4.21-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c654464bce
kernel-4.7.2-200.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7810e24465
openvpn-2.3.12-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0ef628998f
chicken-4.11.0-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9743cce120
canl-c-2.1.7-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8749c58855
ganglia-3.7.2-10.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4728dfe3ec
webkitgtk4-2.12.4-1.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
28
https://bodhi.fedoraproject.org/updates/FEDORA-2016-494a721a73
ModemManager-1.6.0-1.fc24 libmbim-1.14.0-1.fc24 libqmi-1.16.0-1.fc24
usb_modeswitch-2.4.0-4.fc24 usb_modeswitch-data-20160612-3.fc24
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ddadfe403c pungi-4.1.8-1.fc24
python-productmd-1.2-2.fc24
11
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ced841e94b
menu-cache-1.0.1-2.D20160506git2932d67f30.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-74811dcebf
linux-firmware-20160816-67.git7c3dfc0b.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1ebd9e116b lcms2-2.8-2.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-aa32e6e85b
libfm-1.2.4-6.D20160627git2a537414de.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9864953aa3
gnupg-1.4.21-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9821d32bad
evolution-data-server-3.20.5-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-adf8ab8a29
koji-1.10.1-12.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c654464bce
kernel-4.7.2-200.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-14be43242c
cronie-1.5.1-2.fc24
The following builds have been pushed to Fedora 24 updates-testing
canl-c-2.1.7-1.fc24
chicken-4.11.0-3.fc24
docker-1.10.3-28.git78aa320.fc24
evolution-data-server-3.20.5-3.fc24
fedora-user-agent-chrome-0.0.0.4-1.fc24
ganglia-3.7.2-10.fc24
google-noto-fonts-20150929-2.fc24
ibacm-1.2.1-1.fc24
ibus-table-1.9.14-1.fc24
icaro-1.0.5-2.fc24
jemalloc-4.2.1-1.fc24
kid3-3.4.2-1.fc24
knot-resolver-1.1.1-1.fc24
libesedb-20120102-10.fc24
librdmacm-1.1.0-1.fc24
lshw-B.02.18-5.fc24
mingw-gcc-6.2.0-1.fc24
mstflint-4.4.0-1.12.gd1edd58.1.fc24
php-5.6.25-1.fc24
pki-core-10.3.5-3.fc24
plasma-applet-weather-widget-1.6.7-4.fc24
pspp-0.10.2-1.fc24
python-cvss-1.3-1.fc24
python-smartcols-0.1.1-2.fc24
runc-1.0.0-1.rc1.git04f275d.fc24
slapi-nis-0.56.1-1.fc24
webkitgtk4-2.12.4-1.fc24
Details about builds:
================================================================================
canl-c-2.1.7-1.fc24 (FEDORA-2016-9743cce120)
EMI Common Authentication library - bindings for C
--------------------------------------------------------------------------------
Update Information:
This is a hotfix for proxy DN manipulation vulnerabilities.
--------------------------------------------------------------------------------
================================================================================
chicken-4.11.0-3.fc24 (FEDORA-2016-0ef628998f)
A practical and portable Scheme system
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-6830, CVE-2016-6831
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1369108 - CVE-2016-6830 CVE-2016-6831 chicken: Buffer overflow and a memory
leak in the POSIX unit's procedures process-execute and process-spawn
https://bugzilla.redhat.com/show_bug.cgi?id=1369108
--------------------------------------------------------------------------------
================================================================================
docker-1.10.3-28.git78aa320.fc24 (FEDORA-2016-89e0043ff5)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
built docker @projectatomic/fedora-1.10.3 commit 78aa320 ---- built docker
@projectatomic/fedora-1.10.3 commit 128f146
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1368426 - Docker stats not reporting metrics for containers that use
another's network
https://bugzilla.redhat.com/show_bug.cgi?id=1368426
--------------------------------------------------------------------------------
================================================================================
evolution-data-server-3.20.5-3.fc24 (FEDORA-2016-9821d32bad)
Backend data server for Evolution
--------------------------------------------------------------------------------
Update Information:
Added fix for the related bug report.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1346228 - CalDAV fails to recognize "Daily Limit Exceeded" error
from Google/GOA
https://bugzilla.redhat.com/show_bug.cgi?id=1346228
--------------------------------------------------------------------------------
================================================================================
fedora-user-agent-chrome-0.0.0.4-1.fc24 (FEDORA-2016-d794baffa1)
User-Agent Fedora branding for Google Chrome/Chromium browser
--------------------------------------------------------------------------------
Update Information:
Add support for Chromium browser.
--------------------------------------------------------------------------------
================================================================================
ganglia-3.7.2-10.fc24 (FEDORA-2016-8749c58855)
Distributed Monitoring System
--------------------------------------------------------------------------------
Update Information:
Update to ganglia-web 3.7.2, fixing a XSS issue.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1369843 - ganglia: ganglia-web: Reflected XSS in the metrics API
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1369843
--------------------------------------------------------------------------------
================================================================================
google-noto-fonts-20150929-2.fc24 (FEDORA-2016-a613beeab9)
Hinted and Non Hinted OpenType fonts for Unicode scripts
--------------------------------------------------------------------------------
Update Information:
This is an update that provides correct LICENSE file.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1368772 - Licenses not distributed with google-noto-fonts-common
https://bugzilla.redhat.com/show_bug.cgi?id=1368772
--------------------------------------------------------------------------------
================================================================================
ibacm-1.2.1-1.fc24 (FEDORA-2016-e925bd3a7a)
InfiniBand Communication Manager Assistant
--------------------------------------------------------------------------------
Update Information:
Rebase ibacm to latest upstream release 1.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1369718 - Update ibacm to release 1.2.1
https://bugzilla.redhat.com/show_bug.cgi?id=1369718
--------------------------------------------------------------------------------
================================================================================
ibus-table-1.9.14-1.fc24 (FEDORA-2016-22f64dd844)
The Table engine for IBus platform
--------------------------------------------------------------------------------
Update Information:
update to 1.9.14; Fix bug in Unihan_Variants.txt, ��� U+4E7E is both simplified
and traditional Chinese (thanks to Heiher <r(a)hev.cc>)
--------------------------------------------------------------------------------
================================================================================
icaro-1.0.5-2.fc24 (FEDORA-2016-f70334cd56)
Robotic Educational Project
--------------------------------------------------------------------------------
Update Information:
+ Requires: python-matplotlib
--------------------------------------------------------------------------------
================================================================================
jemalloc-4.2.1-1.fc24 (FEDORA-2016-955f50c18d)
General-purpose scalable concurrent malloc implementation
--------------------------------------------------------------------------------
Update Information:
New upstream release. A bugfix release. See the upstream changelog for details.
It is included in the package, and also available online at
https://raw.githubusercontent.com/jemalloc/jemalloc/master/ChangeLog
--------------------------------------------------------------------------------
================================================================================
kid3-3.4.2-1.fc24 (FEDORA-2016-14b5ef1894)
Efficient KDE ID3 tag editor
--------------------------------------------------------------------------------
Update Information:
Update to 3.4.2,
http://kid3.sourceforge.net/#history
--------------------------------------------------------------------------------
================================================================================
knot-resolver-1.1.1-1.fc24 (FEDORA-2016-b4f8b77890)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
================================================================================
libesedb-20120102-10.fc24 (FEDORA-2016-e45ac52a07)
Library to access the Extensible Storage Engine (ESE) Database File (EDB) format
--------------------------------------------------------------------------------
Update Information:
Rebuild, just to fix FTBFS.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1239642 - libesedb: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1239642
--------------------------------------------------------------------------------
================================================================================
librdmacm-1.1.0-1.fc24 (FEDORA-2016-b5b3fd6f3d)
Userspace RDMA Connection Manager
--------------------------------------------------------------------------------
Update Information:
Update librdmacm to latest upstream release 1.1.0. And do not build against
valgrind on MIPS as valgrind is unavailable for MIPS.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1369801 - Update librdmacm to latest upstream release librdmacm-1.1.0
https://bugzilla.redhat.com/show_bug.cgi?id=1369801
[ 2 ] Bug #1366708 - No valgrind on MIPS
https://bugzilla.redhat.com/show_bug.cgi?id=1366708
--------------------------------------------------------------------------------
================================================================================
lshw-B.02.18-5.fc24 (FEDORA-2016-041537a100)
Hardware lister
--------------------------------------------------------------------------------
Update Information:
Fix issue when starting lshw from menu.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1368404 - lshw-gui does not start from gnome-shell-extension-apps-menu
https://bugzilla.redhat.com/show_bug.cgi?id=1368404
--------------------------------------------------------------------------------
================================================================================
mingw-gcc-6.2.0-1.fc24 (FEDORA-2016-7097045300)
MinGW Windows cross-compiler (GCC) for C
--------------------------------------------------------------------------------
Update Information:
MinGW gcc 6.2.0 release.
--------------------------------------------------------------------------------
================================================================================
mstflint-4.4.0-1.12.gd1edd58.1.fc24 (FEDORA-2016-620df59da0)
Mellanox firmware burning tool
--------------------------------------------------------------------------------
Update Information:
Update mstflint to latest upstream release 4.4.0-1.12.gd1edd58.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1369683 - Update mstflint to latest upstream release
mstflint-4.4.0-1.12.gd1edd58
https://bugzilla.redhat.com/show_bug.cgi?id=1369683
--------------------------------------------------------------------------------
================================================================================
php-5.6.25-1.fc24 (FEDORA-2016-16b577cdef)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
18 Aug 2016, PHP 5.6.25 **Bz2:** * Fixed [bug
#72837](https://bugs.php.net/bug.php?id=72837) (integer overflow in bzdecompress
caused heap corruption). (Stas) **Core:**: * Fixed [bug
#70436](https://bugs.php.net/bug.php?id=70436) (Use After Free Vulnerability in
unserialize()). (Taoguang Chen) * Fixed [bug
#72024](https://bugs.php.net/bug.php?id=72024) (microtime() leaks memory).
(maroszek at gmx dot net) * Fixed [bug
#72581](https://bugs.php.net/bug.php?id=72581) (previous property undefined in
Exception after deserialization). (Laruence) * Implemented FR #72614 (Support
"nmake test" on building extensions by phpize). (Yuji Uchiyama) * Fixed [bug
#72641](https://bugs.php.net/bug.php?id=72641) (phpize (on Windows) ignores
PHP_PREFIX). (Yuji Uchiyama) * Fixed [bug
#72663](https://bugs.php.net/bug.php?id=72663) (Create an Unexpected Object and
Don't Invoke __wakeup() in Deserialization). (Stas) * Fixed [bug
#72681](https://bugs.php.net/bug.php?id=72681) (PHP Session Data Injection
Vulnerability). (Stas) **Calendar:**: * Fixed [bug
#67976](https://bugs.php.net/bug.php?id=67976) (cal_days_month() fails for final
month of the French calendar). (cmb) * Fixed [bug
#71894](https://bugs.php.net/bug.php?id=71894) (AddressSanitizer: global-buffer-
overflow in zif_cal_from_jd). (cmb) **Curl:**: * Fixed [bug
#71144](https://bugs.php.net/bug.php?id=71144) (Segmentation fault when using
cURL with ZTS). * Fixed [bug #71929](https://bugs.php.net/bug.php?id=71929)
(Certification information (CERTINFO) data parsing error).(Pierrick) * Fixed
[bug #72807](https://bugs.php.net/bug.php?id=72807) (integer overflow in
curl_escape caused heap corruption). (Stas) **DOM:**: * Fixed [bug
#66502](https://bugs.php.net/bug.php?id=66502) (DOM document dangling
reference). (Sean Heelan, cmb) **Ereg:**: * Fixed [bug
#72838](https://bugs.php.net/bug.php?id=72838) (Integer overflow lead to heap
corruption in sql_regcase). (Stas) **EXIF:**: * Fixed [bug
#72627](https://bugs.php.net/bug.php?id=72627) (Memory Leakage In
exif_process_IFD_in_TIFF). (Stas) * Fixed [bug
#72735](https://bugs.php.net/bug.php?id=72735) (Samsung picture thumb not read
(zero size)). (Kalle, Remi) **Filter:**: * Fixed [bug
#71745](https://bugs.php.net/bug.php?id=71745) (FILTER_FLAG_NO_RES_RANGE does
not cover whole 127.0.0.0/8 range). (bugs dot php dot net at majkl578 dot cz)
**FPM:**: * Fixed [bug #72575](https://bugs.php.net/bug.php?id=72575) (using
--allow-to-run-as-root should ignore missing user). (gooh) **GD:**: * Fixed
[bug #43828](https://bugs.php.net/bug.php?id=43828) (broken transparency of
imagearc for truecolor in blendingmode). (cmb) * Fixed [bug
#66555](https://bugs.php.net/bug.php?id=66555) (Always false condition in
ext/gd/libgd/gdkanji.c). (cmb) * Fixed [bug
#68712](https://bugs.php.net/bug.php?id=68712) (suspicious if-else statements).
(cmb) * Fixed [bug #70315](https://bugs.php.net/bug.php?id=70315) (500 Server
Error but page is fully rendered). (cmb) * Fixed [bug
#72596](https://bugs.php.net/bug.php?id=72596) (imagetypes function won't
advertise WEBP support). (cmb) * Fixed [bug
#72604](https://bugs.php.net/bug.php?id=72604) (imagearc() ignores thickness for
full arcs). (cmb) * Fixed [bug #72697](https://bugs.php.net/bug.php?id=72697)
(select_colors write out-of-bounds). (Stas) * Fixed [bug
#72709](https://bugs.php.net/bug.php?id=72709) (imagesetstyle() causes OOB read
for empty $styles). (cmb) * Fixed [bug
#72730](https://bugs.php.net/bug.php?id=72730) (imagegammacorrect allows
arbitrary write access). (Stas) **Intl:**: * Partially fixed #72506
(idn_to_ascii for UTS #46 incorrect for long domain names). (cmb)
**mbstring:**: * Fixed [bug #72691](https://bugs.php.net/bug.php?id=72691)
(mb_ereg_search raises a warning if a match zero-width). (cmb) * Fixed [bug
#72693](https://bugs.php.net/bug.php?id=72693) (mb_ereg_search increments search
position when a match zero-width). (cmb) * Fixed [bug
#72694](https://bugs.php.net/bug.php?id=72694) (mb_ereg_search_setpos does not
accept a string's last position). (cmb) * Fixed [bug
#72710](https://bugs.php.net/bug.php?id=72710) (`mb_ereg` causes buffer overflow
on regexp compile error). (ju1ius) **PCRE:**: * Fixed [bug
#72688](https://bugs.php.net/bug.php?id=72688) (preg_match missing group names
in matches). (cmb) **PDO_pgsql:**: * Fixed [bug
#70313](https://bugs.php.net/bug.php?id=70313) (PDO statement fails to throw
exception). (Matteo) **Reflection:**: * Fixed [bug
#72222](https://bugs.php.net/bug.php?id=72222) (ReflectionClass::export doesn't
handle array constants). (Nikita Nefedov) **SNMP:**: * Fixed [bug
#72708](https://bugs.php.net/bug.php?id=72708) (php_snmp_parse_oid integer
overflow in memory allocation). (djodjo at gmail dot com) **Standard:**: *
Fixed [bug #72330](https://bugs.php.net/bug.php?id=72330) (CSV fields
incorrectly split if escape char followed by UTF chars). (cmb) * Fixed [bug
#72836](https://bugs.php.net/bug.php?id=72836) (integer overflow in
base64_decode). (Stas) * Fixed [bug
#72848](https://bugs.php.net/bug.php?id=72848) (integer overflow in
quoted_printable_encode). (Stas) * Fixed [bug
#72849](https://bugs.php.net/bug.php?id=72849) (integer overflow in urlencode).
(Stas) * Fixed [bug #72850](https://bugs.php.net/bug.php?id=72850) (integer
overflow in php_uuencode). (Stas) * Fixed [bug
#72716](https://bugs.php.net/bug.php?id=72716) (initialize buffer before read).
(Stas) **Streams:**: * Fixed [bug
#41021](https://bugs.php.net/bug.php?id=41021) (Problems with the ftps wrapper).
(vhuk) * Fixed [bug #54431](https://bugs.php.net/bug.php?id=54431) (opendir does
not work with ftps wrapper). (vhuk) * Fixed [bug
#72667](https://bugs.php.net/bug.php?id=72667) (opendir with ftp attempts to
open data stream for non-existent directories). (vhuk) * Fixed [bug
#72764](https://bugs.php.net/bug.php?id=72764) (ftps opendir wrapper data
channel encryption fails with IIS FTP 7.5, 8.5). (vhuk) * Fixed [bug
#72771](https://bugs.php.net/bug.php?id=72771) (ftps wrapper is vulnerable to
protocol downgrade attack). (Stas) **SPL:**: * Fixed [bug
#72122](https://bugs.php.net/bug.php?id=72122) (IteratorIterator breaks '@'
error suppression). (kinglozzer) * Fixed [bug
#72646](https://bugs.php.net/bug.php?id=72646) (SplFileObject::getCsvControl
does not return the escape character). (cmb) * Fixed [bug
#72684](https://bugs.php.net/bug.php?id=72684) (AppendIterator segfault with
closed generator). (Pierrick) **SQLite3:**: * Implemented FR #72653 (SQLite
should allow opening with empty filename). (cmb) **Wddx:**: * Fixed [bug
#72142](https://bugs.php.net/bug.php?id=72142) (WDDX Packet Injection
Vulnerability in wddx_serialize_value()). (Taoguang Chen) * Fixed [bug
#72749](https://bugs.php.net/bug.php?id=72749) (wddx_deserialize allows illegal
memory access) (Stas) * Fixed [bug
#72750](https://bugs.php.net/bug.php?id=72750) (wddx_deserialize null
dereference). (Stas) * Fixed [bug #72790](https://bugs.php.net/bug.php?id=72790)
(wddx_deserialize null dereference with invalid xml). (Stas) * Fixed [bug
#72799](https://bugs.php.net/bug.php?id=72799) (wddx_deserialize null
dereference in php_wddx_pop_element). (Stas)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1362571 - php-5.6.24-2.fc24.x86_64 not returning full results for
exif_read_data function
https://bugzilla.redhat.com/show_bug.cgi?id=1362571
--------------------------------------------------------------------------------
================================================================================
pki-core-10.3.5-3.fc24 (FEDORA-2016-a882c9fdc3)
Certificate System - PKI Core Components
--------------------------------------------------------------------------------
Update Information:
PKI TRAC Tickets #690,833,2429,2431,2432,2436,2437,2440
--------------------------------------------------------------------------------
================================================================================
plasma-applet-weather-widget-1.6.7-4.fc24 (FEDORA-2016-e8809eec46)
Plasma applet for displaying weather information
--------------------------------------------------------------------------------
Update Information:
Remove changes made in 1.6.7-3; rhbz#1367971 ---- Remove icon cache
processing, not required rhbz#1367971
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1367971 - Review Request: plasma-applet-weather-widget
https://bugzilla.redhat.com/show_bug.cgi?id=1367971
--------------------------------------------------------------------------------
================================================================================
pspp-0.10.2-1.fc24 (FEDORA-2016-f996b0513e)
A program for statistical analysis of sampled data
--------------------------------------------------------------------------------
Update Information:
* Ver. 0.10.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1359452 - pspp-0.10.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1359452
--------------------------------------------------------------------------------
================================================================================
python-cvss-1.3-1.fc24 (FEDORA-2016-1b23100ecb)
CVSS2/3 library with interactive calculator
--------------------------------------------------------------------------------
Update Information:
New package python-cvss: CVSS2/3 library with interactive calculator
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1334611 - Review Request: python-cvss - CVSS2/3 library with interactive
calculator
https://bugzilla.redhat.com/show_bug.cgi?id=1334611
--------------------------------------------------------------------------------
================================================================================
python-smartcols-0.1.1-2.fc24 (FEDORA-2016-e10b515100)
Python bindings for util-linux libsmartcols-library
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1369558 - Review Request: python-smartcols - Python bindings for util-linux
libsmartcols-library
https://bugzilla.redhat.com/show_bug.cgi?id=1369558
--------------------------------------------------------------------------------
================================================================================
runc-1.0.0-1.rc1.git04f275d.fc24 (FEDORA-2016-bd864d2bda)
CLI for running Open Containers
--------------------------------------------------------------------------------
Update Information:
Resolves: #1342707 - bump to v1.0.0-rc1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1342707 - runc-v1.0.0-rc1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1342707
--------------------------------------------------------------------------------
================================================================================
slapi-nis-0.56.1-1.fc24 (FEDORA-2016-138ed996fd)
NIS Server and Schema Compatibility plugins for Directory Server
--------------------------------------------------------------------------------
Update Information:
new upstream release: - do not clobber target of the pblock for idview - fix
double free on ldap entry during priming thread - resolve IPA groups with fully
qualified suffix - for users with aliases, return alias as uid
--------------------------------------------------------------------------------
================================================================================
webkitgtk4-2.12.4-1.fc24 (FEDORA-2016-4728dfe3ec)
GTK+ Web content engine library
--------------------------------------------------------------------------------
Update Information:
This update addresses the following vulnerabilities: *
[
CVE-2016-4622](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4622),
[
CVE-2016-4624](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4624),
[
CVE-2016-4591](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4591),
[
CVE-2016-4590](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4590)
Additional fixes: * Fix performance in accelerated compositing mode with the
modesetting intel driver and DRI3 enabled. * Reduce the amount of file
descriptors that the Web Process keeps open. * Fix Web Process deadlocks when
loading HLS videos. * Make CSS and SVG animations run at 60fps. * Make meter
elements accessible. * Improve accessibility name and description of elements to
make it more compatible with W3C specs and fix several bugs in which the
accessible name of objects was missing or broken. * Fix a crash when running
windowed plugins under Wayland. * Fix a crash at process exit under Wayland. *
Fix several crashes and rendering issues. Translation updates: * German.
--------------------------------------------------------------------------------