The following Fedora 24 Security updates need testing:
Age URL
36
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b3f93ead5b moin-1.9.8-1.fc24
19
https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24
15
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2b0c16fd82
tomcat-8.0.36-2.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c07d18b2a5
java-1.8.0-openjdk-aarch32-1.8.0.102-1.160812.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-92a3655b70
freeipa-4.3.2-2.fc24
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b4919ffe56
rubygem-activerecord-4.2.5.2-2.fc24 rubygem-actionpack-4.2.5.2-3.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-20014bf2bd
borgbackup-1.0.7-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c654464bce
kernel-4.7.2-200.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0ef628998f
chicken-4.11.0-3.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9743cce120
canl-c-2.1.7-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8749c58855
ganglia-3.7.2-10.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
31
https://bodhi.fedoraproject.org/updates/FEDORA-2016-494a721a73
ModemManager-1.6.0-1.fc24 libmbim-1.14.0-1.fc24 libqmi-1.16.0-1.fc24
usb_modeswitch-2.4.0-4.fc24 usb_modeswitch-data-20160612-3.fc24
17
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ddadfe403c pungi-4.1.8-1.fc24
python-productmd-1.2-2.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-aa32e6e85b
libfm-1.2.4-6.D20160627git2a537414de.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c654464bce
kernel-4.7.2-200.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-11303fb003
selinux-policy-3.13.1-191.14.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0edc0e1794
livecd-tools-23.4-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5e638095ea
libtasn1-4.9-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3889b0a2a curl-7.47.1-7.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-33b409649c
xorg-x11-server-1.18.4-4.fc24
The following builds have been pushed to Fedora 24 updates-testing
cbmc-5.5-1.fc24
findbugs-contrib-6.6.2-1.fc24
libnfsidmap-0.26-5.rc4.fc24
manuale-1.0.3-1.fc24
ncdu-1.12-1.fc24
ocaml-menhir-20160825-1.fc24
python-flask-principal-0.4.0-10.fc24
python-sqlparse-0.2.1-1.fc24
rpcbind-0.2.3-11.rc1.fc24
wxsqlite3-3.4.0-0.1git6feb9d1.fc24
Details about builds:
================================================================================
cbmc-5.5-1.fc24 (FEDORA-2016-d045b1594c)
Bounded Model Checker for ANSI-C and C++ programs
--------------------------------------------------------------------------------
Update Information:
Changes in version 5.5: - The option --all-properties is now the default; to
restore the previous behaviour, use --stop-on-fail. - The primary area of
attention was again the Java front-end. - We have furthermore added test-suite
generation for branch coverage, location coverage, condition coverage, decision
coverage and MC/DC.
--------------------------------------------------------------------------------
================================================================================
findbugs-contrib-6.6.2-1.fc24 (FEDORA-2016-5f1fb9129b)
Extra findbugs detectors
--------------------------------------------------------------------------------
Update Information:
New upstream version 6.6.2. Includes new detector
`LO_INVALID_STRING_FORMAT_NOTATION`.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370690 - findbugs-contrib-6.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370690
--------------------------------------------------------------------------------
================================================================================
libnfsidmap-0.26-5.rc4.fc24 (FEDORA-2016-9e6a97ea9b)
NFSv4 User and Group ID Mapping Library
--------------------------------------------------------------------------------
Update Information:
Updated to latest rc release: libnfsidmap-0-27-rc4
--------------------------------------------------------------------------------
================================================================================
manuale-1.0.3-1.fc24 (FEDORA-2016-d9e387f3b0)
A fully manual Let's Encrypt/ACME client
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.3
--------------------------------------------------------------------------------
================================================================================
ncdu-1.12-1.fc24 (FEDORA-2016-e5031820c6)
Text-based disk usage viewer
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.12 (2016-08-24). Changes in this version: * Add
`NCDU_SHELL` environment variable * Add `--confirm-quit` flag * Fix compilation
due to missing `sys/wait.h` include
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370824 - ncdu-1.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370824
--------------------------------------------------------------------------------
================================================================================
ocaml-menhir-20160825-1.fc24 (FEDORA-2016-b34501c6e2)
LR(1) parser generator for OCaml
--------------------------------------------------------------------------------
Update Information:
Changes in this release: - 2016/08/25: Makefile fix, undoing a change made on
2016/03/03, which caused installation to fail under (some versions of?) Windows
where dynamic linking is not supported. (Reported by Andrew Appel.) -
2016/08/05: %on_error_reduce declarations now have implicit priority levels, so
as to tell Menhir what to do when two such declarations are applicable. Also,
the well-formedness checks on %type and %on_error_reduce declarations have been
reinforced. - 2016/06/23: A small change in the generated code (both in the code
and table back-ends) so as to avoid OCaml's warning 41. The warning would arise
(when compiling a generated parser with OCaml 4.03) because Menhir's exception
[Error] has the same name as the data constructor [Error] in OCaml's pervasive
library. (Reported by Bernhard Schommer.)
--------------------------------------------------------------------------------
================================================================================
python-flask-principal-0.4.0-10.fc24 (FEDORA-2016-3fc31e713c)
Identity management for Flask applications
--------------------------------------------------------------------------------
Update Information:
Add python 2 and 3 subpackages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1312333 - python-flask-principal: Provide a Python 3 subpackage
https://bugzilla.redhat.com/show_bug.cgi?id=1312333
--------------------------------------------------------------------------------
================================================================================
python-sqlparse-0.2.1-1.fc24 (FEDORA-2016-edc68d409a)
Non-validating SQL parser for Python
--------------------------------------------------------------------------------
Update Information:
Release 0.2.1 (Aug 13, 2016) --------------------------- Notable Changes *
PostgreSQL: Function bodys are parsed as literal string. Previously sqlparse
assumed that all function bodys are parsable psql strings (see issue277). Bug
Fixes * Fix a regression to parse streams again (issue273, reported and test
case by gmccreight). * Improve Python 2/3 compatibility when using parsestream
(isseu190, by phdru). * Improve splitting of PostgreSQL functions (issue277).
Release 0.2.0 (Jul 20, 2016) ---------------------------- IMPORTANT: The
supported Python versions have changed with this release. sqlparse 0.2.x
supports Python 2.7 and Python >= 3.3. Thanks to the many contributors for
writing bug reports and working on pull requests who made this version possible!
Internal Changes * sqlparse.SQLParseError was removed from top-level module and
moved to sqlparse.exceptions. * sqlparse.sql.Token.to_unicode was removed. *
The signature of a filter's process method has changed from process(stack,
stream) -> to process(stream). Stack was never used at all. * Lots of code
cleanups and modernization (thanks esp. to vmuriart!). * Improved grouping
performance. (sjoerdjob) Enhancements * Support WHILE loops (issue215, by
shenlongxing). * Better support for CTEs (issue217, by Andrew Tipton). *
Recognize USING as a keyword more consistently (issue236, by koljonen). *
Improve alignment of columns (issue207, issue235, by vmuriat). * Add wrap_after
option for better alignment when formatting lists (issue248, by Dennis
Taylor). * Add reindent-aligned option for alternate formatting (Adam Greenhall)
* Improved grouping of operations (issue211, by vmuriat). Bug Fixes * Leading
whitespaces are now removed when format() is called with strip_whitespace=True
(issue213, by shenlongxing). * Fix typo in keywords list (issue229, by cbeloni).
* Fix parsing of functions in comparisons (issue230, by saaj). * Fix grouping of
identifiers (issue233). * Fix parsing of CREATE TABLE statements (issue242, by
Tenghuan). * Minor bug fixes (issue101). * Improve formatting of CASE WHEN
constructs (issue164, by vmuriat). Release 0.1.19 (Mar 07, 2016)
----------------------------- Bug Fixes * Fix IndexError when statement
contains WITH clauses (issue205).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1370693 - python-sqlparse-0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1370693
--------------------------------------------------------------------------------
================================================================================
rpcbind-0.2.3-11.rc1.fc24 (FEDORA-2016-d5ed976bf1)
Universal Addresses to RPC Program Number Mapper
--------------------------------------------------------------------------------
Update Information:
Stop enable rpcbind.socket with every update (bz 1324666) Removing the braces
from the ${RPCBIND_ARGS} in rpcbind.service (bz 1362201)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1362201 - Setting RPCBIND_ARGS results in rpcbind startup failure
'invalid option'
https://bugzilla.redhat.com/show_bug.cgi?id=1362201
[ 2 ] Bug #1324666 - stop enable rpcbind.socket with every update
https://bugzilla.redhat.com/show_bug.cgi?id=1324666
--------------------------------------------------------------------------------
================================================================================
wxsqlite3-3.4.0-0.1git6feb9d1.fc24 (FEDORA-2016-c96ab9d751)
C++ wrapper around the SQLite 3.x database
--------------------------------------------------------------------------------
Update Information:
Update to 3.4.0-0.1git6feb9d1
--------------------------------------------------------------------------------