The following Fedora 24 Security updates need testing:
Age URL
149
https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24
133
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0ef628998f
chicken-4.11.0-3.fc24
84
https://bodhi.fedoraproject.org/updates/FEDORA-2016-990e2012ea
compat-guile18-1.8.8-14.fc24
47
https://bodhi.fedoraproject.org/updates/FEDORA-2016-93679a91df
jenkins-1.651.3-2.fc24 jenkins-remoting-2.62.3-1.fc24
20
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a1f774c3d7
FlightGear-2016.1.2-5.fc24
16
https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08
squid-3.5.23-1.fc24
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0b6ee25a07
php-PHPMailer-5.2.21-1.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c6ae9b6cf8 sway-0.11-4.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-76d9809fd4
w3m-0.5.3-27.git20161120.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b65e546846
php-swiftmailer-5.4.5-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1a7e14d084
libpng10-1.0.67-1.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0eb1d4ad19
mingw-libpng-1.6.27-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7af4c910c2
thunderbird-45.6.0-2.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8311440c55
pcsc-lite-1.8.20-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d0a537062c samba-4.4.9-0.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cdf8277947
onionshare-0.9.1-1.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
49
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cddf0ec383
nss-3.27.0-1.3.fc24
29
https://bodhi.fedoraproject.org/updates/FEDORA-2016-90bd4d7d33
selinux-policy-3.13.1-191.23.fc24
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1979eafeae
libgweather-3.20.4-1.fc24
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6c9a495a48
elfutils-0.168-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-67fddcb6a4
hwdata-0.296-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8b3063d71c
redhat-rpm-config-42-2.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d0a537062c samba-4.4.9-0.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7af4c910c2
thunderbird-45.6.0-2.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-16600585a4
mobile-broadband-provider-info-1.20170105git-1.fc24
The following builds have been pushed to Fedora 24 updates-testing
cargo-0.15.0-2.fc24
cura-lulzbot-21.03-1.fc24
dolphin-emu-5.0-10.fc24
lulzbot-marlin-firmware-21.03-1.fc24
lz4-1.7.5-1.fc24
magic-8.1.134-1.fc24
mobile-broadband-provider-info-1.20170105git-1.fc24
nmap-7.40-1.fc24
onionshare-0.9.1-1.fc24
openqa-4.4-36.20170104git3d6640e.fc24
os-autoinst-4.4-12.20170104git84d91e6.fc24
php-sabre-http-4.2.2-1.fc24
php-udan11-sql-parser-3.4.15-1.fc24
python-beautifulsoup4-4.5.3-1.fc24
python-btchip-0.1.18-3.fc24
python-marathon-0.8.8-1.fc24
rust-1.14.0-2.fc24
Details about builds:
================================================================================
cargo-0.15.0-2.fc24 (FEDORA-2017-b3bf3118df)
Rust's package manager and build tool
--------------------------------------------------------------------------------
Update Information:
New versions of Rust and Cargo -- see the release notes for [1.14](https://blog
.rust-lang.org/2016/12/22/Rust-1.14.html).
--------------------------------------------------------------------------------
================================================================================
cura-lulzbot-21.03-1.fc24 (FEDORA-2017-c7268081a8)
Cura LulzBot Edition, 3D printer control software
--------------------------------------------------------------------------------
Update Information:
Update to 21.03, new mini firmware.
--------------------------------------------------------------------------------
================================================================================
dolphin-emu-5.0-10.fc24 (FEDORA-2017-04d527e226)
GameCube / Wii / Triforce Emulator
--------------------------------------------------------------------------------
Update Information:
App-data updates, LTO is now enabled for extra optimization, and XWayland is now
properly supported. Binaries are now suffixed with "-x11" and launcher scripts
are provided under the original binary names to make sure dolphin launches
correctly under both XWayland and X11. All changes should be transparent to the
user. ---- App-data updates and workaround added for Wayland: XWayland is
forced via the dolphin desktop launcher (i.e. if open from a GUI application
launcher). This can be done manually on the command line by running:
GDK_BACKEND=x11 dolphin or GDK_BACKEND=x11 dolphin-nogui This is only an
interim solution that only affects Wayland users.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408525 - [abrt] dolphin-emu: pthread_cond_wait@(a)GLIBC_2.3.2(): dolphin-emu
killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1408525
--------------------------------------------------------------------------------
================================================================================
lulzbot-marlin-firmware-21.03-1.fc24 (FEDORA-2017-c7268081a8)
Marlin firmware files for the Lulzbot family of 3D printers
--------------------------------------------------------------------------------
Update Information:
Update to 21.03, new mini firmware.
--------------------------------------------------------------------------------
================================================================================
lz4-1.7.5-1.fc24 (FEDORA-2017-5d473ea609)
Extremely fast compression algorithm
--------------------------------------------------------------------------------
Update Information:
Update to 1.7.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1410352 - Missing symbol LZ4_versionString
https://bugzilla.redhat.com/show_bug.cgi?id=1410352
[ 2 ] Bug #1410367 - lz4-1.7.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1410367
--------------------------------------------------------------------------------
================================================================================
magic-8.1.134-1.fc24 (FEDORA-2017-eacc4fd01e)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.1.134 is released.
--------------------------------------------------------------------------------
================================================================================
mobile-broadband-provider-info-1.20170105git-1.fc24 (FEDORA-2017-16600585a4)
Mobile broadband provider database
--------------------------------------------------------------------------------
Update Information:
* Updates to latest upstream git snapshot 20170105git * Fixes #1408187
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408187 - missing italian service provider: Vodafone Internet Key
https://bugzilla.redhat.com/show_bug.cgi?id=1408187
--------------------------------------------------------------------------------
================================================================================
nmap-7.40-1.fc24 (FEDORA-2017-3eb2c5f739)
Network exploration tool and security scanner
--------------------------------------------------------------------------------
Update Information:
updated to nmap 7.40
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409728 - Please update to 7.40
https://bugzilla.redhat.com/show_bug.cgi?id=1409728
--------------------------------------------------------------------------------
================================================================================
onionshare-0.9.1-1.fc24 (FEDORA-2017-cdf8277947)
Securely and anonymously share files of any size
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1339510 - CVE-2016-5026 onionshare: /tmp usage race condition [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1339510
--------------------------------------------------------------------------------
================================================================================
openqa-4.4-36.20170104git3d6640e.fc24 (FEDORA-2017-bdd03d8685)
OS-level automated testing framework
--------------------------------------------------------------------------------
Update Information:
This update provides updated git snapshots of openQA and os-autoinst, with
various fixes and enhancements, including changes that should make openQA better
at upgrade its database when the schema changes (so admins should no longer have
to do the database upgrade manually, with the server offline, to avoid problems,
though doing so is probably still the absolute safest choice for critical
deployments).
--------------------------------------------------------------------------------
================================================================================
os-autoinst-4.4-12.20170104git84d91e6.fc24 (FEDORA-2017-bdd03d8685)
OS-level test automation
--------------------------------------------------------------------------------
Update Information:
This update provides updated git snapshots of openQA and os-autoinst, with
various fixes and enhancements, including changes that should make openQA better
at upgrade its database when the schema changes (so admins should no longer have
to do the database upgrade manually, with the server offline, to avoid problems,
though doing so is probably still the absolute safest choice for critical
deployments).
--------------------------------------------------------------------------------
================================================================================
php-sabre-http-4.2.2-1.fc24 (FEDORA-2017-20d659e033)
Library for dealing with http requests and responses
--------------------------------------------------------------------------------
Update Information:
**Version 4.2.2** (2017-01-02) * fix #72: Handling clients that send invalid
`Content-Length` headers.
--------------------------------------------------------------------------------
================================================================================
php-udan11-sql-parser-3.4.15-1.fc24 (FEDORA-2017-ac92d00fc4)
A validating SQL lexer and parser with a focus on MySQL dialect
--------------------------------------------------------------------------------
Update Information:
**Version 3.4.15** - 2017-01-02 * Fix return value of Formatter.toString() when
type is text * Fix parsing of FIELDS and LINES options in SELECT..INTO * PHP 7.2
compatibility. * Better parameter passing to query formatter.
--------------------------------------------------------------------------------
================================================================================
python-beautifulsoup4-4.5.3-1.fc24 (FEDORA-2017-951b08dce6)
HTML/XML parser for quick-turnaround applications like screen-scraping
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release beautifulsoup4 4.5.3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409673 - python-beautifulsoup4-4.5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1409673
--------------------------------------------------------------------------------
================================================================================
python-btchip-0.1.18-3.fc24 (FEDORA-2017-6fd7ecc578)
Python communication library for Ledger Hardware Wallet products
--------------------------------------------------------------------------------
Update Information:
Final finishing touches after package review
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409867 - Review Request: python-btchip - 'btchip-python' is a
library used to interface with Ledger hardware devices (Cryptocurrency)
https://bugzilla.redhat.com/show_bug.cgi?id=1409867
--------------------------------------------------------------------------------
================================================================================
python-marathon-0.8.8-1.fc24 (FEDORA-2017-a0b85e75f9)
Python client library/interface to the Mesos Marathon REST API
--------------------------------------------------------------------------------
Update Information:
First version
--------------------------------------------------------------------------------
================================================================================
rust-1.14.0-2.fc24 (FEDORA-2017-b3bf3118df)
The Rust Programming Language
--------------------------------------------------------------------------------
Update Information:
New versions of Rust and Cargo -- see the release notes for [1.14](https://blog
.rust-lang.org/2016/12/22/Rust-1.14.html).
--------------------------------------------------------------------------------