The following Fedora 24 Security updates need testing:
Age URL
79
https://bodhi.fedoraproject.org/updates/FEDORA-2016-93679a91df
jenkins-1.651.3-2.fc24 jenkins-remoting-2.62.3-1.fc24
48
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
42
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0d7ef286d1
drupal7-title-1.0-0.7.alpha9.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0f44f2b8c8
mariadb-10.1.21-1.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-efed73a87c
calibre-2.78.0-1.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6694f5cd3a
bitlbee-3.5.1-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4cb58f0bda
java-1.8.0-openjdk-aarch32-1.8.0.112-3.161109.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2bce6ed778
viewvc-1.1.26-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ba9c6a3634
quagga-0.99.24.1-5.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba
runc-1.0.0-5.rc2.gitc91b5be.fc24
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b3130f212a
iio-sensor-proxy-2.1-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6938ef7591
epiphany-3.20.7-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-22828d4bdb redis-3.2.7-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-42df4eeb59
gnome-boxes-3.20.4-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e853b4144f
openssl-1.0.2k-1.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e853b4144f
openssl-1.0.2k-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ca32e43abd
hwdata-0.297-1.fc24
The following builds have been pushed to Fedora 24 updates-testing
dnf-plugin-spacewalk-2.6.3-1.fc24
gajim-0.16.7-1.fc24
gnome-boxes-3.20.4-1.fc24
hwdata-0.297-1.fc24
hyperrogue-8.3-3.j.fc24
jupp-30-1.fc24
mint-y-icons-1.0.4-4.fc24
noip-2.1.9-20.fc24
openssl-1.0.2k-1.fc24
perl-Net-Server-2.008-6.fc24
perl-Storable-2.53-350.fc24
php-nikic-php-parser3-3.0.3-1.fc24
php-phpunit-PHPUnit-5.7.11-1.fc24
php-phpunit-git-2.1.4-1.fc24
python-modestmaps-1.4.6-5.fc24
python-nbxmpp-0.5.5-1.fc24
xfce4-terminal-0.8.4-1.fc24
Details about builds:
================================================================================
dnf-plugin-spacewalk-2.6.3-1.fc24 (FEDORA-2017-cfc209b1df)
DNF plugin for Spacewalk
--------------------------------------------------------------------------------
Update Information:
Dnf-plugin-spacewalk package has been updated to the latest 2.6 stable version.
The update includes fix for bug BZ#1342491.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1342491 - dnf-plugin-spacewalk: dnf-plugin-spacewalk requires both Python 2
and Python 3
https://bugzilla.redhat.com/show_bug.cgi?id=1342491
--------------------------------------------------------------------------------
================================================================================
gajim-0.16.7-1.fc24 (FEDORA-2017-e935fe93cf)
Jabber client written in PyGTK
--------------------------------------------------------------------------------
Update Information:
Gajim 0.16.7. * Better compatibility with XEP-0191: Blocking Command * Many
bugfixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381214 - Missing plugin dependencies can make gajim unusable
https://bugzilla.redhat.com/show_bug.cgi?id=1381214
--------------------------------------------------------------------------------
================================================================================
gnome-boxes-3.20.4-1.fc24 (FEDORA-2017-42df4eeb59)
A simple GNOME 3 application to access remote or virtual systems
--------------------------------------------------------------------------------
Update Information:
gnome-boxes 3.20.4 release, fixing a possible security issue with storing the
express installation password in clear text. - Store the user password in the
keyring during an express installation. - Fix typo in debug string. - Fix printf
format strings.
--------------------------------------------------------------------------------
================================================================================
hwdata-0.297-1.fc24 (FEDORA-2017-ca32e43abd)
Hardware identification and configuration data
--------------------------------------------------------------------------------
Update Information:
Updated pci, usb and vendor ids.
--------------------------------------------------------------------------------
================================================================================
hyperrogue-8.3-3.j.fc24 (FEDORA-2017-52d7854872)
An SDL roguelike in a non-euclidean world
--------------------------------------------------------------------------------
Update Information:
Update for correct display in Gnome Software
--------------------------------------------------------------------------------
================================================================================
jupp-30-1.fc24 (FEDORA-2017-44d78f7e70)
Compact and feature-rich WordStar-compatible editor
--------------------------------------------------------------------------------
Update Information:
Changes for jupp 30 =================== * Fix spelling mistakes, some found
by lintian (thanks!) * Silence a GCC 6 warning about content of a comment
(WTF���) * Fix segfault trying to fnext a block-restricted search when no block
is active * Make Freedroidz macro (^KF) more reliable, simpler, run parserr
* Apply several bugfixes and optimisations to the code * Improve the jupp32
build script * Fix a few places where allocated memory was not properly zero���d
out * Unbreak syntax highlighting for n��n-UTF8 locales (tty I/O charmaps) *
For systems without setlocale, remove optional @modifier part from
LC_ALL/LC_CTYPE/LANG (if present) before testing for valid charmap * Disable
setlocale for old cygwin32; use the current codepage instead * Add JOECHARMAP
override for locale/codepage-detected I/O charmap * Display codes 128���159 in
the CharTable help card properly * Avoid the Win32 console beeping on U+2022 ���
by making it non-printable (WTF) * Improve some documentation fa��ets * Add
-CYGhack command line option; use it in right-click menu (WTF��) * Do not force
use of /usr/local in configure on Solaris * Use ~/.jupp/, not ~/.joe/, as
basepath for user charmap/syntax files
--------------------------------------------------------------------------------
================================================================================
mint-y-icons-1.0.4-4.fc24 (FEDORA-2017-b2eaf73e8b)
The Mint-Y icon theme
--------------------------------------------------------------------------------
Update Information:
* Fix License GPLv3+ ---> CC-BY-SA * Symlink files to save disk-space
--------------------------------------------------------------------------------
================================================================================
noip-2.1.9-20.fc24 (FEDORA-2017-16ccade673)
A dynamic DNS update client
--------------------------------------------------------------------------------
Update Information:
More improvements of systemd service
--------------------------------------------------------------------------------
================================================================================
openssl-1.0.2k-1.fc24 (FEDORA-2017-e853b4144f)
Utilities from the general purpose cryptography library with TLS implementation
--------------------------------------------------------------------------------
Update Information:
Minor upstream release fixing CVE-2016-8610, CVE-2017-3731, CVE-2017-3732.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1384743 - CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could
cause remote DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1384743
[ 2 ] Bug #1416856 - CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on
x86_64
https://bugzilla.redhat.com/show_bug.cgi?id=1416856
[ 3 ] Bug #1416852 - CVE-2017-3731 openssl: Truncated packet could crash via OOB read
https://bugzilla.redhat.com/show_bug.cgi?id=1416852
--------------------------------------------------------------------------------
================================================================================
perl-Net-Server-2.008-6.fc24 (FEDORA-2017-be111c323f)
Extensible, general Perl server engine
--------------------------------------------------------------------------------
Update Information:
Bug 1395714 - perl-Net-Server should depend on perl-IO-Socket-INET6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1395714 - perl-Net-Server should depend on perl-IO-Socket-INET6
https://bugzilla.redhat.com/show_bug.cgi?id=1395714
--------------------------------------------------------------------------------
================================================================================
perl-Storable-2.53-350.fc24 (FEDORA-2017-7ce19a5a20)
Persistence for Perl data structures
--------------------------------------------------------------------------------
Update Information:
This release fixes a stack buffer overflow when deserializing malformed class
name. It also fixes a memory leak when raising an exception with overly long
class name.
--------------------------------------------------------------------------------
================================================================================
php-nikic-php-parser3-3.0.3-1.fc24 (FEDORA-2017-8fb4c12425)
A PHP parser written in PHP
--------------------------------------------------------------------------------
Update Information:
**Version 3.0.3** (2017-02-03) * In `"$foo[0]"` the `0` is now parsed as an
`LNumber` rather than `String`. (#325) * Ensure integers and floats are always
pretty printed preserving semantics, even if the particular value can only be
manually constructed. * Throw a `LogicException` when trying to pretty-print an
`Error` node. Previously this resulted in an undefined method exception or
fatal error. * [PHP 7.1] Added support for negative interpolated offsets:
`"$foo[-1]"` * Added `preserveOriginalNames` option to `NameResolver`. If this
option is enabled, an `originalName` attribute, containing the unresolved
name, will be added to each resolved name. * Added `php-parse --with-positions`
option, which dumps nodes with position information. * The XML serializer has
been deprecated. In particular, the classes `Serializer\XML`,
`Unserializer\XML`, as well as the interfaces `Serializer` and `Unserializer`
are deprecated.
--------------------------------------------------------------------------------
================================================================================
php-phpunit-PHPUnit-5.7.11-1.fc24 (FEDORA-2017-0e8f66f541)
The PHP Unit Testing framework
--------------------------------------------------------------------------------
Update Information:
**Version 5.7.11** - 2017-02-05 * Deprecation errors when used with PHP 7.2
---- **Version 5.7.10** - 2017-02-04 * Fixed
[#2462](https://github.com/sebastianbergmann/phpunit/issues/2462): Code Coverage
blacklist is filled even if no code coverage data is to be collected ----
**Version 5.7.9** - 2017-01-28 * Fixed
[#2447](https://github.com/sebastianbergmann/phpunit/issues/2447): Reverted
backwards incompatible change to handling of boolean environment variable values
specified in XML ---- **Version 5.7.8** - 2017-01-26 * Fixed
[#2446](https://github.com/sebastianbergmann/phpunit/issues/2446): Reverted
backwards incompatible change to exit code in case of warnings ---- **Version
5.7.7** - 2017-01-25 * Fixed
[#1896](https://github.com/sebastianbergmann/phpunit/issues/1896): Wrong test
location when `@depends` and `@dataProvider` are combined * Fixed
[#1983](https://github.com/sebastianbergmann/phpunit/pull/1983): Tests with
`@expectedException` annotation cannot be skipped * Fixed
[#2137](https://github.com/sebastianbergmann/phpunit/issues/2137): Warnings for
invalid data providers are suppressed when test execution is filtered * Fixed
[#2275](https://github.com/sebastianbergmann/phpunit/pull/2275): Invalid UTF-8
characters can lead to missing output * Fixed
[#2299](https://github.com/sebastianbergmann/phpunit/issues/2299):
`expectExceptionMessage()` and `expectExceptionCode()` do not work without
`expectException()` * Fixed
[#2328](https://github.com/sebastianbergmann/phpunit/issues/2328):
`TestListener` callbacks `startTest()` and `endTest()` are not called when test
is skipped due to `@depends` * Fixed
[#2331](https://github.com/sebastianbergmann/phpunit/issues/2331): Boolean
environment variable values specified in XML get mangled * Fixed
[#2333](https://github.com/sebastianbergmann/phpunit/issues/2333):
`assertContains()` and `assertNotContains()` do not handle UTF-8 strings
correctly * Fixed
[#2340](https://github.com/sebastianbergmann/phpunit/pull/2340): Data providers
that use `yield` or implement `Iterator` cannot be combined * Fixed
[#2349](https://github.com/sebastianbergmann/phpunit/pull/2349):
`PHPUnit_TextUI_Command` does not `exit()` when it should * Fixed
[#2392](https://github.com/sebastianbergmann/phpunit/issues/2392): Empty (but
valid) data provider should skip the test * Fixed
[#2431](https://github.com/sebastianbergmann/phpunit/issues/2431):
`assertArraySubset()` does not support `ArrayAccess` * Fixed
[#2435](https://github.com/sebastianbergmann/phpunit/issues/2435): Empty
`@group` annotation causes error on PHP 7.2+ ---- **Version 5.7.6** -
2017-01-22 * Fixed
[#2424](https://github.com/sebastianbergmann/phpunit/issues/2424):
`TestCase::getStatus()` returns `STATUS_PASSED` instead of `STATUS_RISKY` for
risky test * Fixed
[#2427](https://github.com/sebastianbergmann/phpunit/issues/2427): TestDox group
configuration is not handled * Fixed
[#2428](https://github.com/sebastianbergmann/phpunit/pull/2428): Nested arrays
specificied in XML configuration file are not handled correctly
--------------------------------------------------------------------------------
================================================================================
php-phpunit-git-2.1.4-1.fc24 (FEDORA-2017-546fd342fe)
Simple wrapper for Git
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream **version 2.1.4**. Upstream seems to think changelog
have no value, if you disagree, please [file an
issue](https://github.com/sebastianbergmann/git/issues/new).
--------------------------------------------------------------------------------
================================================================================
python-modestmaps-1.4.6-5.fc24 (FEDORA-2017-2fe408572f)
Modest Maps python port
--------------------------------------------------------------------------------
Update Information:
Update to latest Fedora packaging guidelines
--------------------------------------------------------------------------------
================================================================================
python-nbxmpp-0.5.5-1.fc24 (FEDORA-2017-e935fe93cf)
Python library for non-blocking use of Jabber/XMPP
--------------------------------------------------------------------------------
Update Information:
Gajim 0.16.7. * Better compatibility with XEP-0191: Blocking Command * Many
bugfixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381214 - Missing plugin dependencies can make gajim unusable
https://bugzilla.redhat.com/show_bug.cgi?id=1381214
--------------------------------------------------------------------------------
================================================================================
xfce4-terminal-0.8.4-1.fc24 (FEDORA-2017-a27ce7a41c)
Terminal Emulator for the Xfce Desktop environment
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1414688 - Changing enabled screens causes dropdown terminal to show
https://bugzilla.redhat.com/show_bug.cgi?id=1414688
[ 2 ] Bug #1419677 - xfce4-terminal-0.8.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1419677
--------------------------------------------------------------------------------