The following Fedora 24 Security updates need testing:
Age URL
128
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
121
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24
84
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba
runc-1.0.0-5.rc2.gitc91b5be.fc24
64
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4b176c1694 redis-3.2.8-1.fc24
34
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0f5fe1913f
sane-backends-1.0.25-7.fc24
26
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ec01954fe9
chromium-57.0.2987.133-1.fc24
21
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7de130a80d tnef-1.4.14-1.fc24
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8330a48ca2
python-XStatic-jquery-ui-1.12.0.1-1.fc24
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9941306740 yara-3.5.0-7.fc24
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-374389c196 qemu-2.6.2-8.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-edce28f24b
bind99-9.9.9-4.P8.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7a5363b41d
libnl3-3.2.28-5.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c2129c77ca
ansible-2.3.0.0-3.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4c3ac44551
bouncycastle-1.52-9.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e8767a2fbb
drupal8-8.3.1-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c2cefcc2b3 icu-56.1-8.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3b367c896f pcre-8.40-7.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7a7d2044c9
libreoffice-5.1.6.2-8.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-11938627fa
kernel-4.10.12-100.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2ccfbd650a log4j-2.5-3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0b6da97aa5
squirrelmail-1.4.22-19.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a90e43dc1b
thunderbird-52.0-1.fc24
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ae0e285fc1
libdrm-2.4.79-1.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e1905fd566 koji-1.12.0-2.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3b367c896f pcre-8.40-7.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c2cefcc2b3 icu-56.1-8.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0768d64843 nss-3.30.2-1.0.fc24
nss-softokn-3.30.2-1.0.fc24 nss-util-3.30.2-1.0.fc24 nspr-4.14.0-2.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-11938627fa
kernel-4.10.12-100.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-dc35d35e92 vim-8.0.586-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f808fd0be7
menu-cache-1.0.2-3.D20170419gitdffb1314ec.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-508fd2b9ca
json-c-0.12.1-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-878927210f
ca-certificates-2017.2.14-1.0.fc24
The following builds have been pushed to Fedora 24 updates-testing
ca-certificates-2017.2.14-1.0.fc24
getmail-4.54.0-1.fc24
json-c-0.12.1-1.fc24
mame-0.185-1.fc24
nsd-4.1.16-1.fc24
php-alcaeus-mongo-php-adapter-1.0.11-1.fc24
php-pear-1.10.4-1.fc24
php-zendframework-zend-form-2.10.1-1.fc24
python-nose_fixes-1.3-1.fc24
python-xml2rfc-2.5.2-2.fc24
rhythmbox-alternative-toolbar-0.17.3-6.fc24
squirrelmail-1.4.22-19.fc24
tcpreplay-4.2.4-1.fc24
Details about builds:
================================================================================
ca-certificates-2017.2.14-1.0.fc24 (FEDORA-2017-878927210f)
The Mozilla CA root certificate bundle
--------------------------------------------------------------------------------
Update Information:
This is an update to the Mozilla CA certificates list version 2.14, which has
been published as part of Mozilla NSS 3.30.2. For additional details, please
refer to the NSS 3.30.2 release notes:
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.30.2_release_notes As in previous versions
of the ca-certificates package, the CA list has been modified to keep several
legacy CAs still trusted for compatibility reasons. Please refer to
https://fedoraproject.org/wiki/CA-Certificates for details. If you prefer to
use the unchanged list provided by Mozilla, and if you accept any compatibility
issues it may cause, an administrator may configure the system by executing the
"ca-legacy disable" command. Please refer to the manual page of the ca-legacy
command for additional details.
--------------------------------------------------------------------------------
================================================================================
getmail-4.54.0-1.fc24 (FEDORA-2017-972eb53d63)
POP3, IMAP4 and SDPS mail retriever with Maildir delivery
--------------------------------------------------------------------------------
Update Information:
update to 4.54.0
--------------------------------------------------------------------------------
================================================================================
json-c-0.12.1-1.fc24 (FEDORA-2017-508fd2b9ca)
JSON implementation in C
--------------------------------------------------------------------------------
Update Information:
* Update to new upstream release * Unify %doc * General spec-file cleanup
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1361569 - json-c-0.12.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1361569
--------------------------------------------------------------------------------
================================================================================
mame-0.185-1.fc24 (FEDORA-2017-0a1cd0b1ad)
Multiple Arcade Machine Emulator
--------------------------------------------------------------------------------
Update Information:
An update to the latest mame release: *
http://mamedev.org/?p=442
--------------------------------------------------------------------------------
================================================================================
nsd-4.1.16-1.fc24 (FEDORA-2017-e39428728a)
Fast and lean authoritative DNS Name Server
--------------------------------------------------------------------------------
Update Information:
Updated to 4.1.16 (minimum response option)
--------------------------------------------------------------------------------
================================================================================
php-alcaeus-mongo-php-adapter-1.0.11-1.fc24 (FEDORA-2017-42cc1bcca0)
Mongo PHP Adapter
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.11** (2017-04-27) All issues and pull requests under this release
may be found under the [
1.0.11](https://github.com/alcaeus/mongo-php-
adapter/issues?q=milestone%3A1.0.11) milestone. *
[#170](https://github.com/alcaeus/mongo-php-adapter/pull/170) fixes a
`MongoCursor` object passing a `batchSize` of 0 by default, causing errors in
sharded setups.
--------------------------------------------------------------------------------
================================================================================
php-pear-1.10.4-1.fc24 (FEDORA-2017-aff2fcfb93)
PHP Extension and Application Repository framework
--------------------------------------------------------------------------------
Update Information:
**Version 1.10.4** * Bug pear#18102: pear install does not fail on error * PR
#67: fix warning during pecl list-all
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-form-2.10.1-1.fc24 (FEDORA-2017-4aa8f2ee04)
Zend Framework Form component
--------------------------------------------------------------------------------
Update Information:
**Version 2.10.1** - 2017-04-26 - [#134](https://github.com/zendframework/zend-
form/pull/134) fixes how the `FormElementManager` handles invokable classes
when the `autoAddInvokableClass` flag is enabled. Previously, it used the
built-in utilities from zend-servicemanager, but now correctly uses its own
`setInvokableClass()` method, which forces usage of the `ElementFactory` for
such classes, and thus ensures the name and options are passed to the element
constructor. - [#136](https://github.com/zendframework/zend-form/pull/136) fixes
how error messages are provided when an element uses a required `ArrayInput`,
but no values are submitted. Previously, no messages were returned; now they
are. - [#156](https://github.com/zendframework/zend-form/pull/156) fixes how
elements that act as `InputProvider`s are merged into parent
`CollectionInputFilter`s; previously, forms did not check if the element was
in the target input filter composed in a `CollectionInputFilter`, leading to
duplicate elements with varying behavior; now the inputs are correctly merged.
--------------------------------------------------------------------------------
================================================================================
python-nose_fixes-1.3-1.fc24 (FEDORA-2017-cba9e74b7b)
Plugin to make nose behave better
--------------------------------------------------------------------------------
Update Information:
* Initial import
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1445822 - Review Request: python-nose_fixes - Plugin to make nose behave
better
https://bugzilla.redhat.com/show_bug.cgi?id=1445822
--------------------------------------------------------------------------------
================================================================================
python-xml2rfc-2.5.2-2.fc24 (FEDORA-2017-f74ae609f8)
Convert IETF RFC-2629 XML into txt format
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1444858 xml2rfc: no xml2rfc executable is present
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1444858 - xml2rfc: no xml2rfc executable is present
https://bugzilla.redhat.com/show_bug.cgi?id=1444858
--------------------------------------------------------------------------------
================================================================================
rhythmbox-alternative-toolbar-0.17.3-6.fc24 (FEDORA-2017-845ee22f0e)
Client-side decorated compact toolbar for Rhythmbox
--------------------------------------------------------------------------------
Update Information:
Package summary improved ---- Removed the noarch label to resolv bug 1434240
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434240 - plugin doesn't appear under list of available plugins
https://bugzilla.redhat.com/show_bug.cgi?id=1434240
--------------------------------------------------------------------------------
================================================================================
squirrelmail-1.4.22-19.fc24 (FEDORA-2017-0b6da97aa5)
webmail client written in php
--------------------------------------------------------------------------------
Update Information:
fix insufficient escaping of user-supplied data (CVE-2017-7692)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1445165 - CVE-2017-7692 squirrelmail: Insufficient escaping of user-supplied
data
https://bugzilla.redhat.com/show_bug.cgi?id=1445165
--------------------------------------------------------------------------------
================================================================================
tcpreplay-4.2.4-1.fc24 (FEDORA-2017-a71ed39eff)
Replay captured network traffic
--------------------------------------------------------------------------------
Update Information:
Bug fixes. 4.2.4: - Fix spelling mistakes discovered by Lintian (#362) 4.2.3:
- Archive (remove) QuickTX until maintainer found (#357) - Ubuntu precise
32bit_build (#356) 4.2.2: - Missing symbol pcap_version on macOS 10.12.4
(#353)
--------------------------------------------------------------------------------