The following Fedora 24 Security updates need testing:
Age URL
54
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e339a7779
optipng-0.7.6-1.fc24
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-95edf19d8a
squid-3.5.19-2.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b86ae2068d
openslp-2.0.0-9.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-dfa325d31b
community-mysql-5.7.12-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e3240782ec
phpMyAdmin-4.6.2-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d23d2712de
roundcubemail-1.2.0-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e5f722a9a7
docker-1.10.3-12.git4158ccc.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2016-aa49938267
pungi-4.0.15-2.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3d4c0d27b6
sqlite-3.12.2-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5f8a34340d systemd-229-8.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-fa807cca6f nss-3.24.0-1.1.fc24
nss-softokn-3.24.0-1.0.fc24 nss-util-3.24.0-1.0.fc24
The following builds have been pushed to Fedora 24 updates-testing
NetworkManager-l2tp-1.2.2-1.fc24
bcm283x-firmware-20160513-1.c17fa41.fc24
cinnamon-menus-3.0.2-1.fc24
cinnamon-screensaver-3.0.1-1.fc24
compose-utils-0.1.6-1.fc24
dmidecode-3.0-3.fc24
docker-1.10.3-12.git4158ccc.fc24
gecode-4.4.0-11.fc24
gnome-gmail-2.1-1.fc24
gtengine-2.5-1.fc24
jboss-logging-3.3.0-1.fc24
jboss-logging-tools-2.0.1-1.fc24
jboss-logmanager-2.0.3-1.fc24
jboss-modules-1.5.1-1.fc24
jboss-parent-19-1.fc24
jdeparser-2.0.0-1.fc24
knot-2.2.1-1.fc24
libinput-1.3.1-1.fc24
libsolv-0.6.20-3.fc24
log4j-jboss-logmanager-1.1.2-1.fc24
lyx-2.2.0-1.fc24
mailcap-2.1.46-1.fc24
mozjs45-45.1.1-4.fc24
nfs-ganesha-2.4.0-0.6dev19.fc24
nss-3.24.0-1.1.fc24
nss-softokn-3.24.0-1.0.fc24
nss-util-3.24.0-1.0.fc24
openblas-0.2.18-1.fc24
php-guzzlehttp-promises-1.2.0-1.fc24
php-guzzlehttp-psr7-1.3.0-1.fc24
php-latte-2.3.12-1.fc24
php-pear-Net-SMTP-1.7.2-1.fc24
php-tracy-2.3.11-1.fc24
php-twig-1.24.1-1.fc24
python-copr-1.70-1.fc24
slapi-nis-0.55-3.fc24
slf4j-jboss-logmanager-1.0.3-1.fc24
systemd-229-8.fc24
texstudio-2.11.0-1.fc24
uboot-tools-2016.05-3.fc24
ugene-1.22.0-5.fc24
wildfly-build-tools-1.1.6-1.fc24
Details about builds:
================================================================================
NetworkManager-l2tp-1.2.2-1.fc24 (FEDORA-2016-6738cc1889)
NetworkManager VPN plugin for L2TP and L2TP/IPSec
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1336282 - Update NetworkManager-l2tp to 1.2.2
https://bugzilla.redhat.com/show_bug.cgi?id=1336282
--------------------------------------------------------------------------------
================================================================================
bcm283x-firmware-20160513-1.c17fa41.fc24 (FEDORA-2016-d2c78abc06)
Broadcom bcm283x firmware for the Raspberry Pi
--------------------------------------------------------------------------------
Update Information:
Update to u-boot 2016.05 GA enabling new features and numerous new ARMv7 and
aarch64 devices
--------------------------------------------------------------------------------
================================================================================
cinnamon-menus-3.0.2-1.fc24 (FEDORA-2016-272da20d39)
A menu system for the Cinnamon project
--------------------------------------------------------------------------------
Update Information:
updates
--------------------------------------------------------------------------------
================================================================================
cinnamon-screensaver-3.0.1-1.fc24 (FEDORA-2016-272da20d39)
Cinnamon Screensaver
--------------------------------------------------------------------------------
Update Information:
updates
--------------------------------------------------------------------------------
================================================================================
compose-utils-0.1.6-1.fc24 (FEDORA-2016-9edc277e2e)
Utilities for working with composes
--------------------------------------------------------------------------------
Update Information:
* Fix getting SRPM summary * Add utility for listing composes (It allows
listing all composes in a directory in a sorted way, finding latest compose in a
directory, generating next compose id to be used, finding preceding compose for
a given compose etc.) * Add better error message on missing metadata ---- Add
image diff to changelog.
--------------------------------------------------------------------------------
================================================================================
dmidecode-3.0-3.fc24 (FEDORA-2016-1215cc6d1d)
Tool to analyse BIOS DMI data
--------------------------------------------------------------------------------
Update Information:
Hide irrelevant fixup message
--------------------------------------------------------------------------------
================================================================================
docker-1.10.3-12.git4158ccc.fc24 (FEDORA-2016-e5f722a9a7)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
built docker @projectatomic/fedora-1.10.3 commit 4158ccc ---- Resolves:
#1335649 - enable Red Hat subscription use in Docker containers on Fedora ----
built docker @projectatomic/fedora-1.10.3 commit 8ecd47f
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1335649 - Enable use of Red Hat subscriptions in docker containers on Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=1335649
[ 2 ] Bug #1329454 - CVE-2016-3697 docker: privilege escalation via confusion of
usernames and UIDs [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1329454
[ 3 ] Bug #1340921 - "Failed to get pwuid struct: user: unknown userid " log
spam
https://bugzilla.redhat.com/show_bug.cgi?id=1340921
--------------------------------------------------------------------------------
================================================================================
gecode-4.4.0-11.fc24 (FEDORA-2016-ebdb7d840b)
Generic constraint development environment
--------------------------------------------------------------------------------
Update Information:
fix the typo bug which causes the build failure on powerpc
--------------------------------------------------------------------------------
================================================================================
gnome-gmail-2.1-1.fc24 (FEDORA-2016-4f865d88e0)
Integrate GMail into the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
Update to 2.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1340600 - gnome-gmail-2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1340600
--------------------------------------------------------------------------------
================================================================================
gtengine-2.5-1.fc24 (FEDORA-2016-7ba517b15a)
Library for computations in mathematics, graphics, image analysis, and physics
--------------------------------------------------------------------------------
Update Information:
- Update to 2.5
--------------------------------------------------------------------------------
================================================================================
jboss-logging-3.3.0-1.fc24 (FEDORA-2016-f252af26c6)
The JBoss Logging Framework
--------------------------------------------------------------------------------
Update Information:
update to 3.3.0.Final
--------------------------------------------------------------------------------
================================================================================
jboss-logging-tools-2.0.1-1.fc24 (FEDORA-2016-6a2a052517)
JBoss Logging I18n Annotation Processor
--------------------------------------------------------------------------------
Update Information:
update to 2.0.1.Final
--------------------------------------------------------------------------------
================================================================================
jboss-logmanager-2.0.3-1.fc24 (FEDORA-2016-2c2aab6b63)
JBoss Log Manager
--------------------------------------------------------------------------------
Update Information:
update to 2.0.3.Final
--------------------------------------------------------------------------------
================================================================================
jboss-modules-1.5.1-1.fc24 (FEDORA-2016-c7e0a4c060)
A Modular Classloading System
--------------------------------------------------------------------------------
Update Information:
update to 1.5.1.Final
--------------------------------------------------------------------------------
================================================================================
jboss-parent-19-1.fc24 (FEDORA-2016-c077837b04)
JBoss Parent POM
--------------------------------------------------------------------------------
Update Information:
update to 19
--------------------------------------------------------------------------------
================================================================================
jdeparser-2.0.0-1.fc24 (FEDORA-2016-3699105670)
Source generator library for Java
--------------------------------------------------------------------------------
Update Information:
update to 2.0.0.Final
--------------------------------------------------------------------------------
================================================================================
knot-2.2.1-1.fc24 (FEDORA-2016-069f2b911b)
High-performance authoritative DNS server
--------------------------------------------------------------------------------
Update Information:
new upstream release ---- Fix default configuration file.
--------------------------------------------------------------------------------
================================================================================
libinput-1.3.1-1.fc24 (FEDORA-2016-d8355f57d3)
Input device library
--------------------------------------------------------------------------------
Update Information:
libinput 1.3.1, we already had most of the fixes anyway
--------------------------------------------------------------------------------
================================================================================
libsolv-0.6.20-3.fc24 (FEDORA-2016-f0fdbfc2e4)
Package dependency solver
--------------------------------------------------------------------------------
Update Information:
Enable/Disable some options. Shouldn't affect anyone
--------------------------------------------------------------------------------
================================================================================
log4j-jboss-logmanager-1.1.2-1.fc24 (FEDORA-2016-58e2182359)
JBoss Log4j Emulation
--------------------------------------------------------------------------------
Update Information:
update to 1.1.2.Final
--------------------------------------------------------------------------------
================================================================================
lyx-2.2.0-1.fc24 (FEDORA-2016-c5a1e5369a)
WYSIWYM (What You See Is What You Mean) document processor
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release. Among the most important of these are: *
HiDPI display support * Qt5 support * New text display algorithm * Horizontal
scrolling for large insets * Improved control of paragraph breaks * Improved
text color support * Reworked instant preview
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1249411 - [abrt] lyx: lyx::error_handler(): lyx killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1249411
[ 2 ] Bug #1208209 - [abrt] lyx-common: configure.py:1289:checkLatexConfig:IOError:
[Errno 2] No such file or directory: 'chkconfig.vars'
https://bugzilla.redhat.com/show_bug.cgi?id=1208209
[ 3 ] Bug #1297051 - [abrt] lyx: lyx::error_handler(): lyx killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1297051
--------------------------------------------------------------------------------
================================================================================
mailcap-2.1.46-1.fc24 (FEDORA-2016-273c1fcd94)
Helper application and MIME type associations for file types
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.46
--------------------------------------------------------------------------------
================================================================================
mozjs45-45.1.1-4.fc24 (FEDORA-2016-7c6aef3b6c)
JavaScript interpreter and libraries
--------------------------------------------------------------------------------
Update Information:
fix build on s390 ---- New package mozjs45 - contains JS engine from Firefox
45.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1336728 - Review Request: mozjs45 - JavaScript interpreter and libraries
https://bugzilla.redhat.com/show_bug.cgi?id=1336728
--------------------------------------------------------------------------------
================================================================================
nfs-ganesha-2.4.0-0.6dev19.fc24 (FEDORA-2016-5ddb4fa649)
NFS-Ganesha is a NFS Server running in user space
--------------------------------------------------------------------------------
Update Information:
2.4-dev-19
--------------------------------------------------------------------------------
================================================================================
nss-3.24.0-1.1.fc24 (FEDORA-2016-fa807cca6f)
Network Security Services
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.24. For details about new
functionality and a list of bugs fixed in this release please see the upstream
releases notes
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.24_release_notes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1336849 - nss-3.24 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1336849
--------------------------------------------------------------------------------
================================================================================
nss-softokn-3.24.0-1.0.fc24 (FEDORA-2016-fa807cca6f)
Network Security Services Softoken Module
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.24. For details about new
functionality and a list of bugs fixed in this release please see the upstream
releases notes
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.24_release_notes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1336849 - nss-3.24 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1336849
--------------------------------------------------------------------------------
================================================================================
nss-util-3.24.0-1.0.fc24 (FEDORA-2016-fa807cca6f)
Network Security Services Utilities Library
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.24. For details about new
functionality and a list of bugs fixed in this release please see the upstream
releases notes
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.24_release_notes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1336849 - nss-3.24 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1336849
--------------------------------------------------------------------------------
================================================================================
openblas-0.2.18-1.fc24 (FEDORA-2016-e2ff7a908d)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Optimizations on ARM and Power architectures.
--------------------------------------------------------------------------------
================================================================================
php-guzzlehttp-promises-1.2.0-1.fc24 (FEDORA-2016-4dea6beb61)
Guzzle promises library
--------------------------------------------------------------------------------
Update Information:
## 1.2.0 - 2016-05-18 * Update to now catch `\Throwable` on PHP 7+
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1337366 - php-guzzlehttp-promises-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1337366
--------------------------------------------------------------------------------
================================================================================
php-guzzlehttp-psr7-1.3.0-1.fc24 (FEDORA-2016-1911def7e5)
PSR-7 message implementation
--------------------------------------------------------------------------------
Update Information:
## 1.3.0 - 2016-04-13 * Added remaining interfaces needed for full PSR7
compatibility (ServerRequestInterface, UploadedFileInterface, etc.). * Added
support for stream_for from scalars. * Can now extend Uri. * Fixed a bug in
validating request methods by making it more permissive.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1326975 - php-guzzlehttp-psr7-1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1326975
--------------------------------------------------------------------------------
================================================================================
php-latte-2.3.12-1.fc24 (FEDORA-2016-a009f1421b)
Latte: the amazing template engine for PHP
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.12** * Filter strip: fixed bug when input begins with
`<pre> <script>` or `<textarea>` * Filters::escapeHtml escapes all
entities *
Compiler: pretty whitespace around comments * MacroTokens: added new
operators <=> ** ... * Compiler: improved error messages
--------------------------------------------------------------------------------
================================================================================
php-pear-Net-SMTP-1.7.2-1.fc24 (FEDORA-2016-e30bb66a1b)
Provides an implementation of the SMTP protocol
--------------------------------------------------------------------------------
Update Information:
**Version 1.7.2** - Fix size calculation when headers are provided (#27)
--------------------------------------------------------------------------------
================================================================================
php-tracy-2.3.11-1.fc24 (FEDORA-2016-3a97cf2876)
Tracy: useful PHP debugger
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.11** * Dumper: fixed missing escape for & (#187) *
bar.js: fixed evaluating script tags in panels in window-mode (#174) *
Bluescreen: rel=noopener for target=_blank * BlueScreen::highlightLine() line
may be out of range #148 * Bar: versioning of data in session #146 #149
--------------------------------------------------------------------------------
================================================================================
php-twig-1.24.1-1.fc24 (FEDORA-2016-798e6cdb5c)
The flexible, fast, and secure template engine for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.24.1** (2016-05-30) * fixed reserved keywords (forbids true,
false, null and none keywords for variables names) * fixed support for PHP7
(Throwable support) * marked the following methods as being internals on
Twig_Environment: getFunctions(), getFilters(), getTests(), getFunction(),
getFilter(), getTest(), getTokenParsers(), getTags(), getNodeVisitors(),
getUnaryOperators(), getBinaryOperators(), getFunctions(), getFilters(),
getGlobals(), initGlobals(), initExtensions(), and initExtension()
--------------------------------------------------------------------------------
================================================================================
python-copr-1.70-1.fc24 (FEDORA-2016-bcc2133857)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
This release mainly fixes bug Bug 1340650 - SRPM builds submitted from CLI fail:
"invalid request".
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1335163 - Add fork subcommand to Copr CLI
https://bugzilla.redhat.com/show_bug.cgi?id=1335163
[ 2 ] Bug #1340650 - SRPM builds submitted from CLI fail: "invalid request"
https://bugzilla.redhat.com/show_bug.cgi?id=1340650
--------------------------------------------------------------------------------
================================================================================
slapi-nis-0.55-3.fc24 (FEDORA-2016-66da0c4188)
NIS Server and Schema Compatibility plugins for Directory Server
--------------------------------------------------------------------------------
Update Information:
Support shutdown for priming data thread. Required for FreeIPA trust to Active
Directory feature support for legacy clients (Compat tree).
--------------------------------------------------------------------------------
================================================================================
slf4j-jboss-logmanager-1.0.3-1.fc24 (FEDORA-2016-8386afb678)
SLF4J backend for JBoss LogManager
--------------------------------------------------------------------------------
Update Information:
Upstream 1.0.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1340406 - slf4j-jboss-logmanager-1.0.3.GA is available
https://bugzilla.redhat.com/show_bug.cgi?id=1340406
--------------------------------------------------------------------------------
================================================================================
systemd-229-8.fc24 (FEDORA-2016-5f8a34340d)
A System and Service Manager
--------------------------------------------------------------------------------
Update Information:
Patches for linked bugs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1316964 - .../include/systemd/sd-login.h:241:1: error: expected '=',
',', ';', 'asm' or '__attribute__' before 'void'
https://bugzilla.redhat.com/show_bug.cgi?id=1316964
[ 2 ] Bug #1317928 - nspawn does not set SELinux label correctly (/dev/console)
https://bugzilla.redhat.com/show_bug.cgi?id=1317928
[ 3 ] Bug #1338823 - certain udev properties getting bad data (the data starts with a
'\n' among other things)
https://bugzilla.redhat.com/show_bug.cgi?id=1338823
[ 4 ] Bug #1333998 - After Russian install, console keymap is 'us', not
'ru'
https://bugzilla.redhat.com/show_bug.cgi?id=1333998
[ 5 ] Bug #1206936 - Laptop does not resume from hibernate, boots instead
https://bugzilla.redhat.com/show_bug.cgi?id=1206936
--------------------------------------------------------------------------------
================================================================================
texstudio-2.11.0-1.fc24 (FEDORA-2016-dcbddc10c1)
A feature-rich editor for LaTeX documents
--------------------------------------------------------------------------------
Update Information:
- update to 2.11.0 -
http://texstudio.sourceforge.net/manual/current/CHANGELOG.txt
--------------------------------------------------------------------------------
================================================================================
uboot-tools-2016.05-3.fc24 (FEDORA-2016-d2c78abc06)
U-Boot utilities
--------------------------------------------------------------------------------
Update Information:
Update to u-boot 2016.05 GA enabling new features and numerous new ARMv7 and
aarch64 devices
--------------------------------------------------------------------------------
================================================================================
ugene-1.22.0-5.fc24 (FEDORA-2016-54554f20d4)
Integrated bioinformatics toolkit
--------------------------------------------------------------------------------
Update Information:
* Fixes FTBFS in Rawhide / F24.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1308203 - ugene: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1308203
[ 2 ] Bug #1306561 - ugene cannot be updated due to broken dependencies
https://bugzilla.redhat.com/show_bug.cgi?id=1306561
[ 3 ] Bug #1107023 - ugene: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1107023
[ 4 ] Bug #890427 - ugene-1.22.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=890427
--------------------------------------------------------------------------------
================================================================================
wildfly-build-tools-1.1.6-1.fc24 (FEDORA-2016-4edc2565b1)
Wildfly build and provisioning tools
--------------------------------------------------------------------------------
Update Information:
Initial import (#1328065).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1328065 - Review Request: wildfly-build-tools - Wildfly build and
provisioning tools
https://bugzilla.redhat.com/show_bug.cgi?id=1328065
--------------------------------------------------------------------------------