The following Fedora 24 Security updates need testing: Age URL 40 https://bodhi.fedoraproject.org/updates/FEDORA-2016-b3f93ead5b moin-1.9.8-1.fc24 23 https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-0ef628998f chicken-4.11.0-3.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-9743cce120 canl-c-2.1.7-1.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-8749c58855 ganglia-3.7.2-10.fc24 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2eef68e635 phpMyAdmin-4.6.4-2.fc24 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-af3b0af887 mediawiki-1.26.4-1.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e5ebfed6d kernel-4.7.2-201.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-508767e6b7 elog-3.1.1-7.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-985b68721b slock-1.3-2.fc24
The following Fedora 24 Critical Path updates have yet to be approved: Age URL 21 https://bodhi.fedoraproject.org/updates/FEDORA-2016-ddadfe403c pungi-4.1.8-1.fc24 python-productmd-1.2-2.fc24 13 https://bodhi.fedoraproject.org/updates/FEDORA-2016-aa32e6e85b libfm-1.2.4-6.D20160627git2a537414de.fc24 5 https://bodhi.fedoraproject.org/updates/FEDORA-2016-11303fb003 selinux-policy-3.13.1-191.14.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-0edc0e1794 livecd-tools-23.4-1.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-33b409649c xorg-x11-server-1.18.4-4.fc24 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-88d8834106 pcmanfm-1.2.4-3.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-6cc6fd707c pcre-8.39-3.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e5ebfed6d kernel-4.7.2-201.fc24
The following builds have been pushed to Fedora 24 updates-testing
criu-2.5-1.fc24 dhcpcd-6.11.3-1.fc24 elog-3.1.1-7.fc24 emacs-25.1-0.3.rc2.fc24 enki-16.04.1-3.fc24 gap-pkg-automata-1.13-1.fc24 git-cola-2.8-1.fc24 gmp-ecm-7.0.3-2.fc24 gnustep-base-1.24.9-1.fc24 hid-replay-0.7.1-2.fc24 java-1.8.0-openjdk-aarch32-1.8.0.102-2.160812.fc24 jpnevulator-2.3.4-1.fc24 kdevelop-5.0.0-1.fc24 kdevelop-pg-qt-2.0.0-1.fc24 kdevelop-php-5.0.0-1.fc24 kdevplatform-5.0.0-1.fc24 libinput-1.4.2-2.fc24 mpdecimal-2.4.2-4.fc24 ostree-2016.7-2.fc24 pki-core-10.3.5-4.fc24 postfix-3.1.2-1.fc24 python-biopython-1.68-1.fc24 python-fedimg-0.7-1.fc24 shotwell-0.23.6-1.fc24 slic3r-1.2.9-8.fc24 slock-1.3-2.fc24 spasm-ng-0.5-0.4.beta.2.fc24 tomboy-1.15.5-1.fc24 vagrant-sshfs-1.2.0-2.fc24 vdr-epg-daemon-1.1.14-1.fc24
Details about builds:
================================================================================ criu-2.5-1.fc24 (FEDORA-2016-817eb8d467) Tool for Checkpoint/Restore in User-space -------------------------------------------------------------------------------- Update Information:
Update to 2.5 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1368758 - criu-2.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1368758 --------------------------------------------------------------------------------
================================================================================ dhcpcd-6.11.3-1.fc24 (FEDORA-2016-0cec85d122) A minimalistic network configuration daemon with DHCPv4, rdisc and DHCPv6 support -------------------------------------------------------------------------------- Update Information:
Enhancement update. --------------------------------------------------------------------------------
================================================================================ elog-3.1.1-7.fc24 (FEDORA-2016-508767e6b7) Logbook system to manage notes through a Web interface -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2016-6342 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1371328 - CVE-2016-6342 elog: posting entry as arbitrary username by improper authentication https://bugzilla.redhat.com/show_bug.cgi?id=1371328 --------------------------------------------------------------------------------
================================================================================ emacs-25.1-0.3.rc2.fc24 (FEDORA-2016-97b42b497f) GNU Emacs text editor -------------------------------------------------------------------------------- Update Information:
update to 25.1 rc2 --------------------------------------------------------------------------------
================================================================================ enki-16.04.1-3.fc24 (FEDORA-2016-b2a7a2bab0) Text editor for programmers -------------------------------------------------------------------------------- Update Information:
drop dependency to pyparsing (and python2-pyparsing) in favor of python3-pyparsing -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1365138 - enki requires pyparsing and python2-pyparsing https://bugzilla.redhat.com/show_bug.cgi?id=1365138 --------------------------------------------------------------------------------
================================================================================ gap-pkg-automata-1.13-1.fc24 (FEDORA-2016-d2daee767e) Finite automata algorithms -------------------------------------------------------------------------------- Update Information:
This package contains algorithms for working with finite automata in GAP. It can do the following: - compute a rational expression for the language recognized by a finite automaton; - compute an automaton for the language given by a rational expression; - minimalize a finite automaton; - visualize automata. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1370874 - Review Request: gap-pkg-automata - Finite automata algorithms https://bugzilla.redhat.com/show_bug.cgi?id=1370874 --------------------------------------------------------------------------------
================================================================================ git-cola-2.8-1.fc24 (FEDORA-2016-71dd9f8e79) A sleek and powerful git GUI -------------------------------------------------------------------------------- Update Information:
git-cola update to 2.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1371413 - git-cola 2.7 fails to launch https://bugzilla.redhat.com/show_bug.cgi?id=1371413 [ 2 ] Bug #1371529 - git-cola-2.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1371529 --------------------------------------------------------------------------------
================================================================================ gmp-ecm-7.0.3-2.fc24 (FEDORA-2016-14ada97cdd) Elliptic Curve Method for Integer Factorization -------------------------------------------------------------------------------- Update Information:
Add proposed upstream fix for RHBZ#1367571. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1367571 - gmp-ecm FTBFS on aarch64 https://bugzilla.redhat.com/show_bug.cgi?id=1367571 --------------------------------------------------------------------------------
================================================================================ gnustep-base-1.24.9-1.fc24 (FEDORA-2016-cd736503ef) GNUstep Base library package -------------------------------------------------------------------------------- Update Information:
- Update to 1.24.9 - Utilize system-wide crypto-policies (bz#1179297) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1312706 - update 1.24.8 https://bugzilla.redhat.com/show_bug.cgi?id=1312706 [ 2 ] Bug #1204510 - gnustep-base should have Requires: make https://bugzilla.redhat.com/show_bug.cgi?id=1204510 [ 3 ] Bug #1179297 - Utilize system-wide crypto-policies https://bugzilla.redhat.com/show_bug.cgi?id=1179297 --------------------------------------------------------------------------------
================================================================================ hid-replay-0.7.1-2.fc24 (FEDORA-2016-01fe1cb578) HID Input device recorder and replay -------------------------------------------------------------------------------- Update Information:
Bump for rebuilding for f24 --------------------------------------------------------------------------------
================================================================================ java-1.8.0-openjdk-aarch32-1.8.0.102-2.160812.fc24 (FEDORA-2016-b34c61281b) OpenJDK Runtime Environment in a preview of the OpenJDK AArch32 project -------------------------------------------------------------------------------- Update Information:
This update introduces C1 JIT compiler that greatly improves jdk performance. --------------------------------------------------------------------------------
================================================================================ jpnevulator-2.3.4-1.fc24 (FEDORA-2016-b88038d509) Serial line sniffer including very simple terminal emulator -------------------------------------------------------------------------------- Update Information:
This is new version of the package. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1370757 - jpnevulator-2.3.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1370757 --------------------------------------------------------------------------------
================================================================================ kdevelop-5.0.0-1.fc24 (FEDORA-2016-6abcb3edad) Integrated Development Environment for C++/C -------------------------------------------------------------------------------- Update Information:
Upstream update --------------------------------------------------------------------------------
================================================================================ kdevelop-pg-qt-2.0.0-1.fc24 (FEDORA-2016-6abcb3edad) A parser generator -------------------------------------------------------------------------------- Update Information:
Upstream update --------------------------------------------------------------------------------
================================================================================ kdevelop-php-5.0.0-1.fc24 (FEDORA-2016-8c9c425606) Php language and documentation plugins for KDevelop -------------------------------------------------------------------------------- Update Information:
New upstream version --------------------------------------------------------------------------------
================================================================================ kdevplatform-5.0.0-1.fc24 (FEDORA-2016-b07a9f9ea5) Libraries for use by KDE development tools -------------------------------------------------------------------------------- Update Information:
Upstream update --------------------------------------------------------------------------------
================================================================================ libinput-1.4.2-2.fc24 (FEDORA-2016-c4c3b886ca) Input device library -------------------------------------------------------------------------------- Update Information:
Add quirk for the HP 8510w touchpad (#1351285) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1351285 - Synaptics TouchPad erroneously shown as supporting two-finger scroll https://bugzilla.redhat.com/show_bug.cgi?id=1351285 --------------------------------------------------------------------------------
================================================================================ mpdecimal-2.4.2-4.fc24 (FEDORA-2016-6ac4eb28d7) Library for general decimal arithmetic -------------------------------------------------------------------------------- Update Information:
New package. --------------------------------------------------------------------------------
================================================================================ ostree-2016.7-2.fc24 (FEDORA-2016-e5f8e5e4ab) Tool for managing bootable, immutable filesystem trees -------------------------------------------------------------------------------- Update Information:
This update fixes a possible crash when doing a flatpak update. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1347293 - [abrt] flatpak: mkdir_p_at_internal(): flatpak killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=1347293 --------------------------------------------------------------------------------
================================================================================ pki-core-10.3.5-4.fc24 (FEDORA-2016-36fa3fd8c3) Certificate System - PKI Core Components -------------------------------------------------------------------------------- Update Information:
PKI TRAC Tickets #1578,2414,2423,2439 ---- PKI TRAC Tickets #690,833,2429,2431,2432,2436,2437,2440 --------------------------------------------------------------------------------
================================================================================ postfix-3.1.2-1.fc24 (FEDORA-2016-5e76045cd3) Postfix Mail Transport Agent -------------------------------------------------------------------------------- Update Information:
This is new version of postfix, for details see upstream announcement: http://www.postfix.org/announcements/postfix-3.1.2.html -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1370899 - postfix-3.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1370899 --------------------------------------------------------------------------------
================================================================================ python-biopython-1.68-1.fc24 (FEDORA-2016-87208ad1c3) Python tools for computational molecular biology -------------------------------------------------------------------------------- Update Information:
- Update to 1.68 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1370687 - python-biopython-1.68 is available https://bugzilla.redhat.com/show_bug.cgi?id=1370687 --------------------------------------------------------------------------------
================================================================================ python-fedimg-0.7-1.fc24 (FEDORA-2016-84d50ef431) Automatically upload Fedora Cloud images to cloud providers -------------------------------------------------------------------------------- Update Information:
Migrate to compose-based uploading -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1371241 - python-fedimg-0.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1371241 --------------------------------------------------------------------------------
================================================================================ shotwell-0.23.6-1.fc24 (FEDORA-2016-b9ea5f493b) A photo organizer for the GNOME desktop -------------------------------------------------------------------------------- Update Information:
#### Shotwell 0.23.6 - 29 Aug 2016 #### * Fix locale-dependent times * Use nl_langinfo instead of custom LConv * Fix renaming of tags and saved searches * Improve message shown on empty camera * Make thm a recognized extension for JPEG files --------------------------------------------------------------------------------
================================================================================ slic3r-1.2.9-8.fc24 (FEDORA-2016-8850c67eb6) G-code generator for 3D printers (RepRap, Makerbot, Ultimaker etc.) -------------------------------------------------------------------------------- Update Information:
Fix bug that crashes slic3r when about dialog is opened (#1285807) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1285807 - Opening About Slic3r dialog window crashes slic3r https://bugzilla.redhat.com/show_bug.cgi?id=1285807 --------------------------------------------------------------------------------
================================================================================ slock-1.3-2.fc24 (FEDORA-2016-985b68721b) Simple X display locker -------------------------------------------------------------------------------- Update Information:
This release fixes CVE-2016-6866, a crash when verifying a password for a user without a valid shadow hash entry. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1368369 - CVE-2016-6866 slock: Null pointer dereference results in segmentation fault https://bugzilla.redhat.com/show_bug.cgi?id=1368369 --------------------------------------------------------------------------------
================================================================================ spasm-ng-0.5-0.4.beta.2.fc24 (FEDORA-2016-7b735b0d04) A z80 assembler with extra features for TI calculators -------------------------------------------------------------------------------- Update Information:
A z80 assembler with extra features for TI calculators -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1325378 - Review Request: spasm-ng - A z80 assembler with extra features for TI calculators https://bugzilla.redhat.com/show_bug.cgi?id=1325378 --------------------------------------------------------------------------------
================================================================================ tomboy-1.15.5-1.fc24 (FEDORA-2016-e40c2aa574) Note-taking application -------------------------------------------------------------------------------- Update Information:
Update tomboy to 1.15.5. From the upstream changelog: * Translation updates: zh_CN, sr, hu, lt, id, es, el, eu, sv, fi, ro, cs, tr, ca, bs, oc, pl, pt, de, pt_BR * Update copyright to 2016 * gitignore additions for newer autotools, Visual Studio * Updated FSF address (Daniel Mustieles) * Updated DOAP file: corrected URLs, added category, description and programming-language (Piotr Dr��g, Alex Tereschenko) * Use gacutil when searching for Mono.Cairo in configure instead of hardcoded paths * Fix icon loading on Windows (Benjamin Podszun, #734399) * Help corrections: index and pin-notes pages (Ekaterina Gerasimova, #730502) * Typo fixes in tomboy.schemas.in and FuseSyncServiceAddin (Anders Jonsson) --------------------------------------------------------------------------------
================================================================================ vagrant-sshfs-1.2.0-2.fc24 (FEDORA-2016-e26e1867ba) A Vagrant synced folder plugin that mounts folders via SSHFS -------------------------------------------------------------------------------- Update Information:
Bump release to 2 because vagrant-sshfs-1.2.0-1.fc2{2,3,4} is what -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1343814 - Review Request: vagrant-sshfs - A Vagrant synced folder plugin that mounts folders via SSHFS. https://bugzilla.redhat.com/show_bug.cgi?id=1343814 --------------------------------------------------------------------------------
================================================================================ vdr-epg-daemon-1.1.14-1.fc24 (FEDORA-2016-c480845958) A daemon to download EPG data from internet and manage it in a mysql database -------------------------------------------------------------------------------- Update Information:
Update to 1.1.14 ---- Update to 1.1.12 --------------------------------------------------------------------------------