The following Fedora 24 Security updates need testing: Age URL 5 https://bodhi.fedoraproject.org/updates/FEDORA-2016-9d6b6d0689 php-pecl-http-2.5.6-1.fc24 5 https://bodhi.fedoraproject.org/updates/FEDORA-2016-cdb5052362 python-tgcaptcha2-0.3.1-1.fc24 5 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2982f06845 libotr-4.1.1-1.fc24 5 https://bodhi.fedoraproject.org/updates/FEDORA-2016-f0bb0dad51 drupal6-emfield-2.7-1.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-e722fe8b4d criu-2.0-1.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-dce6dbe6a8 bind99-9.9.8-4.P4.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-ac3587be9a proftpd-1.3.5b-1.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-75f31fbb0a bind-9.10.3-12.P4.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-bc45faa824 dropbear-2016.72-1.fc24 The following Fedora 24 Critical Path updates have yet to be approved: Age URL 5 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d85d9ad927 anaconda-24.13.1-1.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-75f31fbb0a bind-9.10.3-12.P4.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-1350c96015 selinux-policy-3.13.1-178.fc24 The following builds have been pushed to Fedora 24 updates-testing ceph-ansible-1.0.1-4.fc24 dropbear-2016.72-1.fc24 freefem++-3.45-1.fc24 hamster-time-tracker-2.0-0.7.rc1.fc24 hexchat-2.12.0-1.fc24 httrack-3.48.21-1.fc24 iotop-0.6-10.fc24 nqc-3.1.7-18.fc24 nsd-4.1.8-1.fc24 nut-2.7.4-1.fc24 openshift-restclient-java-3.0.1-1.fc24 openteacher-3.2-5.fc24 php-Faker-1.5.0-5.fc24 php-composer-installers-1.0.23-1.fc24 php-kdyby-events-2.4.0-1.fc24 php-paragonie-random-compat-1.2.2-1.fc24 php-zendframework-zend-mvc-2.7.3-1.fc24 php-zendframework-zend-psr7bridge-0.2.1-1.fc24 php-zendframework-zend-test-2.6.1-1.fc24 php-zendframework-zend-view-2.6.4-1.fc24 plasma-desktop-5.5.5-2.fc24 plasma-workspace-5.5.5-4.fc24 qt5-qtbase-5.6.0-0.41.rc.fc24 rubygem-diffy-3.1.0-2.fc24 saga-2.2.4-1.fc24 tkgate-2.0-24.beta10.fc24 Details about builds: ================================================================================ ceph-ansible-1.0.1-4.fc24 (FEDORA-2016-a7e2d35421) Ansible playbooks for Ceph -------------------------------------------------------------------------------- Update Information: First Fedora 24 release. ceph-ansible provides Ansible playbooks for installing and maintaining Ceph. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1313477 - Review Request: ceph-ansible - Ansible playbooks for Ceph https://bugzilla.redhat.com/show_bug.cgi?id=1313477 -------------------------------------------------------------------------------- ================================================================================ dropbear-2016.72-1.fc24 (FEDORA-2016-bc45faa824) Lightweight SSH server and client -------------------------------------------------------------------------------- Update Information: CVE-2016-3116 dropbear: X11 forwarding input not validated properly -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316826 - CVE-2016-3116 dropbear: X11 forwarding input not validated properly [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1316826 -------------------------------------------------------------------------------- ================================================================================ freefem++-3.45-1.fc24 (FEDORA-2016-8b8f525b46) PDE solving tool -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ================================================================================ hamster-time-tracker-2.0-0.7.rc1.fc24 (FEDORA-2016-1b469d9a2d) The Linux time tracker -------------------------------------------------------------------------------- Update Information: - add Requires: python-gobject, rhbz#1316230 - fix crash cause of old API, rhbz#1317087 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1317087 - [abrt] hamster-time-tracker: module.py:137:__getattr__:AttributeError: 'gi.repository.Gtk' object has no attribute 'TARGET_SAME_APP' https://bugzilla.redhat.com/show_bug.cgi?id=1317087 [ 2 ] Bug #1316383 - [abrt] hamster-time-tracker: facttree.py:260:on_mouse_down:ValueError: <hamster.lib.Fact object at 0x7f4d9806f510> is not in list https://bugzilla.redhat.com/show_bug.cgi?id=1316383 [ 3 ] Bug #1316230 - Dependency on pygobject3 missing https://bugzilla.redhat.com/show_bug.cgi?id=1316230 -------------------------------------------------------------------------------- ================================================================================ hexchat-2.12.0-1.fc24 (FEDORA-2016-7d73cb0448) A popular and easy to use graphical IRC (chat) client -------------------------------------------------------------------------------- Update Information: Version bump to 2.12.0 -------------------------------------------------------------------------------- ================================================================================ httrack-3.48.21-1.fc24 (FEDORA-2016-a6b0824112) Website copier and offline browser -------------------------------------------------------------------------------- Update Information: Bugfix from upstream ---- Fix FT24BFS -------------------------------------------------------------------------------- References: [ 1 ] Bug #1202070 - httrack-3.48.21 is available https://bugzilla.redhat.com/show_bug.cgi?id=1202070 [ 2 ] Bug #1307626 - httrack: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1307626 -------------------------------------------------------------------------------- ================================================================================ iotop-0.6-10.fc24 (FEDORA-2016-794825c2b8) Top like utility for I/O -------------------------------------------------------------------------------- Update Information: Run on Python 3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1282186 - The iotop package for Fedora doesn't support python3 while upstream does https://bugzilla.redhat.com/show_bug.cgi?id=1282186 -------------------------------------------------------------------------------- ================================================================================ nqc-3.1.7-18.fc24 (FEDORA-2016-8e338abf47) Not Quite C compiler -------------------------------------------------------------------------------- Update Information: Add Supplements: for https://fedoraproject.org/wiki/Packaging:Langpacks guidelines -------------------------------------------------------------------------------- ================================================================================ nsd-4.1.8-1.fc24 (FEDORA-2016-f34719ba08) Fast and lean authoritative DNS Name Server -------------------------------------------------------------------------------- Update Information: New bugfix version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316527 - nsd-4.1.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1316527 -------------------------------------------------------------------------------- ================================================================================ nut-2.7.4-1.fc24 (FEDORA-2016-0c26d3143d) Network UPS Tools -------------------------------------------------------------------------------- Update Information: Updated to upstream version 2.7.4 -------------------------------------------------------------------------------- ================================================================================ openshift-restclient-java-3.0.1-1.fc24 (FEDORA-2016-729f5f7830) OpenShift Java REST Client -------------------------------------------------------------------------------- Update Information: Initial build -------------------------------------------------------------------------------- ================================================================================ openteacher-3.2-5.fc24 (FEDORA-2016-2f61e0d06a) An application that helps you learn a foreign language -------------------------------------------------------------------------------- Update Information: Fix x-pauker mimetype to not hijack xml.gz -------------------------------------------------------------------------------- References: [ 1 ] Bug #1251637 - Installing OpenTeacher breaks Gnome Software https://bugzilla.redhat.com/show_bug.cgi?id=1251637 -------------------------------------------------------------------------------- ================================================================================ php-Faker-1.5.0-5.fc24 (FEDORA-2016-2c8c0f0306) A PHP library that generates fake data -------------------------------------------------------------------------------- Update Information: See https://github.com/fzaninotto/Faker/releases/tag/v1.5.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1226339 - php-Faker-v1.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1226339 -------------------------------------------------------------------------------- ================================================================================ php-composer-installers-1.0.23-1.fc24 (FEDORA-2016-d3b3430f45) A multi-framework Composer library installer -------------------------------------------------------------------------------- Update Information: Changes since 1.0.22: https://github.com/composer/installers/compare/v1.0.22...v1.0.23 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1302488 - php-composer-installers-1.0.23 is available https://bugzilla.redhat.com/show_bug.cgi?id=1302488 -------------------------------------------------------------------------------- ================================================================================ php-kdyby-events-2.4.0-1.fc24 (FEDORA-2016-2233f6c5f1) Events for Nette Framework -------------------------------------------------------------------------------- Update Information: This extension is here to provide robust events system for Nette Framework. To use this library, you just have to add, in your project: require_once '/usr/share/php/Kdyby/Events/autoload.php'; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277493 - Review Request: php-kdyby-events - Events for Nette Framework https://bugzilla.redhat.com/show_bug.cgi?id=1277493 -------------------------------------------------------------------------------- ================================================================================ php-paragonie-random-compat-1.2.2-1.fc24 (FEDORA-2016-50e79640da) PHP 5.x polyfill for random_bytes() and random_int() from PHP 7 -------------------------------------------------------------------------------- Update Information: ### Version 1.2.2 - 2016-03-11 * To prevent applications from hanging, if `/dev/urandom` is not accessible to PHP, skip mcrypt (which just fails before giving OpenSSL a chance and was morally equivalent to not offering OpenSSL at all). ### Version 1.2.1 - 2016-02-29 * PHP 5.6.10 - 5.6.12 will hang when mcrypt is used on Unix-based operating systems ([PHP bug 69833](https://bugs.php.net/bug.php?id=69833)). If you are running one of these versions, please upgrade (or make sure `/dev/urandom` is readable) otherwise you're relying on OpenSSL. ### Version 1.2.0 - 2016-02-05 * Whitespace and other cosmetic changes * Added a changelog. ### Version 1.1.6 - 2016-01-29 * Eliminate `open_basedir` warnings by detecting this configuration setting. (Thanks [@oucil](https://github.com/oucil) for reporting this.) * Added install instructions to the README. * Documentation cleanup (there is, in fact, no `MCRYPT_CREATE_IV` constant, I meant to write `MCRYPT_DEV_URANDOM`) ### Version 1.1.5 - 2016-01-06 * Prevent fatal errors on platforms with older versions of libsodium. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1296738 - php-paragonie-random-compat-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1296738 [ 2 ] Bug #1317102 - php-paragonie-random-compat-1.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1317102 -------------------------------------------------------------------------------- ================================================================================ php-zendframework-zend-mvc-2.7.3-1.fc24 (FEDORA-2016-817826d398) Zend Framework Mvc component -------------------------------------------------------------------------------- Update Information: Latest PHP 7 compatible components in ZF 2 framework. -------------------------------------------------------------------------------- ================================================================================ php-zendframework-zend-psr7bridge-0.2.1-1.fc24 (FEDORA-2016-3fcf85d0d7) Zend Framework Psr7Bridge component -------------------------------------------------------------------------------- Update Information: Code for converting PSR-7 messages to zend-http messages, and vice versa. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1313683 - Review Request: php-zendframework-zend-psr7bridge - Zend Framework Psr7Bridge component https://bugzilla.redhat.com/show_bug.cgi?id=1313683 -------------------------------------------------------------------------------- ================================================================================ php-zendframework-zend-test-2.6.1-1.fc24 (FEDORA-2016-817826d398) Zend Framework Test component -------------------------------------------------------------------------------- Update Information: Latest PHP 7 compatible components in ZF 2 framework. -------------------------------------------------------------------------------- ================================================================================ php-zendframework-zend-view-2.6.4-1.fc24 (FEDORA-2016-817826d398) Zend Framework View component -------------------------------------------------------------------------------- Update Information: Latest PHP 7 compatible components in ZF 2 framework. -------------------------------------------------------------------------------- ================================================================================ plasma-desktop-5.5.5-2.fc24 (FEDORA-2016-78c4110a26) Plasma Desktop shell -------------------------------------------------------------------------------- Update Information: drop dependency on kde-style-breeze , one step to making it possible to have a qt/kdelibs-free plasma5 environment -------------------------------------------------------------------------------- ================================================================================ plasma-workspace-5.5.5-4.fc24 (FEDORA-2016-13bc6572ac) Plasma workspace, applications and applets -------------------------------------------------------------------------------- Update Information: qt5-qtbase: Pull in candidate fixes for various QtDBus deadlocks (QTBUG-51648, QTBUG-51649, QTBUG-51676) plasma-workspace: backport "Avoid blocking DBus calls in SNI startup" (kde#359611) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1293055 - Black screen after logout https://bugzilla.redhat.com/show_bug.cgi?id=1293055 -------------------------------------------------------------------------------- ================================================================================ qt5-qtbase-5.6.0-0.41.rc.fc24 (FEDORA-2016-13bc6572ac) Qt5 - QtBase components -------------------------------------------------------------------------------- Update Information: qt5-qtbase: Pull in candidate fixes for various QtDBus deadlocks (QTBUG-51648, QTBUG-51649, QTBUG-51676) plasma-workspace: backport "Avoid blocking DBus calls in SNI startup" (kde#359611) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1293055 - Black screen after logout https://bugzilla.redhat.com/show_bug.cgi?id=1293055 -------------------------------------------------------------------------------- ================================================================================ rubygem-diffy-3.1.0-2.fc24 (FEDORA-2016-7d23d830bd) A convenient way to diff string in ruby -------------------------------------------------------------------------------- Update Information: update to 3.1.0 -------------------------------------------------------------------------------- ================================================================================ saga-2.2.4-1.fc24 (FEDORA-2016-e06e0bdc18) Geographic information system with an API for processing geodata -------------------------------------------------------------------------------- Update Information: https://sourceforge.net/p/saga-gis/wiki/Changelog%202.2.4/ https://sourceforge.net/p/saga-gis/wiki/Changelog%202.2.3/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #1308105 - saga: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1308105 -------------------------------------------------------------------------------- ================================================================================ tkgate-2.0-24.beta10.fc24 (FEDORA-2016-bc014dfb67) An event driven digital circuit simulator -------------------------------------------------------------------------------- Update Information: Add Supplements: for https://fedoraproject.org/wiki/Packaging:Langpacks guidelines -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: http://lists.fedoraproject.org/admin/lists/test@xxxxxxxxxxxxxxxxxxxxxxx