The following Fedora 24 Security updates need testing: Age URL 50 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e339a7779 optipng-0.7.6-1.fc24 22 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4a4d504509 obs-signd-2.2.1-8.fc24 5 https://bodhi.fedoraproject.org/updates/FEDORA-2016-95edf19d8a squid-3.5.19-2.fc24 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-b86ae2068d openslp-2.0.0-9.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-dfa325d31b community-mysql-5.7.12-1.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-b967ac1a74 php-5.6.22-1.fc24 The following Fedora 24 Critical Path updates have yet to be approved: Age URL 9 https://bodhi.fedoraproject.org/updates/FEDORA-2016-aa49938267 pungi-4.0.15-2.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-f054bc3f5d bind99-9.9.9-1.P1.fc24 dhcp-4.3.4-2.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2cc35d3631 linux-firmware-20160526-65.git80d463be.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-43d1395a18 selinux-policy-3.13.1-189.fc24 The following builds have been pushed to Fedora 24 updates-testing appstream-data-24-6.fc24 atomic-reactor-1.6.9-1.fc24 bind99-9.9.9-1.P1.fc24 castxml-0.1-0.11.20160510git9a83414.fc24 dhcp-4.3.4-2.fc24 dnfdaemon-0.3.16-1.fc24 erlang-goldrush-0.1.9-1.fc24 flatpak-0.6.2-1.fc24 ghdl-0.34dev-0.20160503git6ccb80e.0.fc24 gnome-software-3.20.2-4.fc24 golang-github-codegangsta-cli-1.17.0-1.fc24 golang-github-seccomp-libseccomp-golang-0-0.4.git60c9953.fc24 libs3-2.0-0.4.20160322git0759f1d.fc24 linux-firmware-20160526-65.git80d463be.fc24 mingw-wine-gecko-2.47-0.1.fc24 mongodb-3.2.6-4.fc24 nordugrid-arc-5.1.1-1.fc24 nordugrid-arc-doc-2.0.7-1.fc24 openfst-1.5.3-1.fc24 opengrm-ngram-1.3.0-1.fc24 perl-HTML-Selector-XPath-0.20-1.fc24 perl-MCE-1.707-1.fc24 pg_journal-0.2.0-12.fc24 php-5.6.22-1.fc24 python-nectar-1.5.2-1.fc24 python-raven-5.18.0-1.fc24 rabbitmq-server-3.6.2-3.fc24 rebase-helper-0.7.3-2.fc24 rubygem-bundler_ext-0.4.1-1.fc24 rubygem-yard-0.8.7.6-3.fc24 runc-0.1.1-3.git57b9972.fc24 skylable-sx-2.1-1.fc24 sphinxtrain-1.0.8-28.fc24 subversion-1.9.4-2.fc24 wine-1.9.10-2.fc24 xscreensaver-5.35-1.fc24 Details about builds: ================================================================================ appstream-data-24-6.fc24 (FEDORA-2016-292c59882c) Fedora AppStream metadata -------------------------------------------------------------------------------- Update Information: New metadata version -------------------------------------------------------------------------------- ================================================================================ atomic-reactor-1.6.9-1.fc24 (FEDORA-2016-aed2912a8d) Improved builder for Docker images -------------------------------------------------------------------------------- Update Information: New upstream release. ---- Build JSON API changes ================== * Exit plugins can now fail the build. All exit plugins are run at the end of the build regardless of whether the build has failed. Exit plugin failures for plugins marked as required for a successful build would previously not cause the build to fail, but they now do. * koji_promote: now accepts optional target parameter * pull_base_image: this plugin is no longer added if missing * tag_and_push: this plugin is no longer added if missing Bug fixes ======= * docker build: fix logging so that it is properly decoded from JSON * koji_promote: use component, not name, to determine the name-version-release for the Koji build. Improvements =========== * add_filesystem: new plugin for creating base images via Koji * koji_promote: * store originating Koji task ID in Koji build metadata * show upload progress in log output * store resulting Koji build ID as OpenShift build label * tag build in Koji if target provided -------------------------------------------------------------------------------- References: [ 1 ] Bug #1329778 - atomic-reactor-1.6.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1329778 [ 2 ] Bug #1340074 - atomic-reactor-1.6.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1340074 -------------------------------------------------------------------------------- ================================================================================ bind99-9.9.9-1.P1.fc24 (FEDORA-2016-f054bc3f5d) The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries -------------------------------------------------------------------------------- Update Information: New version of bind99 -------------------------------------------------------------------------------- ================================================================================ castxml-0.1-0.11.20160510git9a83414.fc24 (FEDORA-2016-450e97cc8d) C-family abstract syntax tree XML output tool -------------------------------------------------------------------------------- Update Information: Latest snapshot. -------------------------------------------------------------------------------- ================================================================================ dhcp-4.3.4-2.fc24 (FEDORA-2016-f054bc3f5d) Dynamic host configuration protocol software -------------------------------------------------------------------------------- Update Information: New version of bind99 -------------------------------------------------------------------------------- ================================================================================ dnfdaemon-0.3.16-1.fc24 (FEDORA-2016-fe54f920b2) DBus daemon for dnf package actions -------------------------------------------------------------------------------- Update Information: Fixed issues with dnf-1.1.9 in yumex-dnf -------------------------------------------------------------------------------- References: [ 1 ] Bug #1338564 - Update fails with "AttributeError: 'Base' object has no attribute 'sigCheckPkg' (36)" https://bugzilla.redhat.com/show_bug.cgi?id=1338564 -------------------------------------------------------------------------------- ================================================================================ erlang-goldrush-0.1.9-1.fc24 (FEDORA-2016-e3af26f0a4) Small, fast event processing and monitoring for Erlang/OTP applications -------------------------------------------------------------------------------- Update Information: * Ver. 0.1.9 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1339847 - erlang-goldrush-0.1.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1339847 -------------------------------------------------------------------------------- ================================================================================ flatpak-0.6.2-1.fc24 (FEDORA-2016-8a483bb84c) Application deployment framework for desktop apps -------------------------------------------------------------------------------- Update Information: Initial flatpak build, replacing xdg-app. This update also includes a rebuild of gnome-software that disables xdg-app support. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1337434 - Review Request: flatpak - Application deployment framework for desktop apps https://bugzilla.redhat.com/show_bug.cgi?id=1337434 -------------------------------------------------------------------------------- ================================================================================ ghdl-0.34dev-0.20160503git6ccb80e.0.fc24 (FEDORA-2016-2f33009a4c) A VHDL simulator, using the GCC technology -------------------------------------------------------------------------------- Update Information: - update to git 6ccb80e -------------------------------------------------------------------------------- ================================================================================ gnome-software-3.20.2-4.fc24 (FEDORA-2016-8a483bb84c) A software center for GNOME -------------------------------------------------------------------------------- Update Information: Initial flatpak build, replacing xdg-app. This update also includes a rebuild of gnome-software that disables xdg-app support. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1337434 - Review Request: flatpak - Application deployment framework for desktop apps https://bugzilla.redhat.com/show_bug.cgi?id=1337434 -------------------------------------------------------------------------------- ================================================================================ golang-github-codegangsta-cli-1.17.0-1.fc24 (FEDORA-2016-80a93db51c) Package for building command line apps in Go -------------------------------------------------------------------------------- Update Information: Bump to upstream 01857ac33766ce0c93856370626f9799281c14f4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248680 - Tracker for golang-github-codegangsta-cli https://bugzilla.redhat.com/show_bug.cgi?id=1248680 -------------------------------------------------------------------------------- ================================================================================ golang-github-seccomp-libseccomp-golang-0-0.4.git60c9953.fc24 (FEDORA-2016-daea7853b4) The libseccomp golang bindings repository -------------------------------------------------------------------------------- Update Information: Bump to upstream 60c9953736798c4a04e90d0f3da2f933d44fd4c4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1340137 - Tracker for golang-github-seccomp-libseccomp-golang https://bugzilla.redhat.com/show_bug.cgi?id=1340137 -------------------------------------------------------------------------------- ================================================================================ libs3-2.0-0.4.20160322git0759f1d.fc24 (FEDORA-2016-ce888c0868) C Library and Tools for Amazon S3 Access -------------------------------------------------------------------------------- Update Information: ARC Release 15.03u7 http://www.nordugrid.org/arc/releases/15.03u7/release_notes_15.03u7.html -------------------------------------------------------------------------------- ================================================================================ linux-firmware-20160526-65.git80d463be.fc24 (FEDORA-2016-2cc35d3631) Firmware files used by the Linux kernel -------------------------------------------------------------------------------- Update Information: - Update to the latest upstream snapshot - amdgpu, Skylake audio, and rt2xxx wifi firmware updates -------------------------------------------------------------------------------- ================================================================================ mingw-wine-gecko-2.47-0.1.fc24 (FEDORA-2016-ca7f75eb16) Gecko library required for Wine -------------------------------------------------------------------------------- Update Information: - CSMT patch has been updated and enabled again (disabled since 1.9.5) - High resolution ("Retina") rendering option on Mac OS X. - More compatible directory enumeration. - A number of C++ runtime fixes. - Video output improvements. - Various bug fixes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1336605 - wine-1.9.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1336605 -------------------------------------------------------------------------------- ================================================================================ mongodb-3.2.6-4.fc24 (FEDORA-2016-eae91c887b) High-performance, schema-free document-oriented database -------------------------------------------------------------------------------- Update Information: Removed excutable stack. MongoDB now use also reserved GID. Added mongobridge tool. ---- Fixed mmapv1 storage driver for ARM (was not detected properly). ---- Upgrade to latest upstream minor release. ---- Upgrade to latest upstream minor release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1334640 - mongod does not start on armv7: The default storage engine 'mmapv1' is not available with this build of mongod https://bugzilla.redhat.com/show_bug.cgi?id=1334640 [ 2 ] Bug #1339899 - Rebuild mongodb for new boost-1.60.0-5 build https://bugzilla.redhat.com/show_bug.cgi?id=1339899 -------------------------------------------------------------------------------- ================================================================================ nordugrid-arc-5.1.1-1.fc24 (FEDORA-2016-ce888c0868) Advanced Resource Connector Grid Middleware -------------------------------------------------------------------------------- Update Information: ARC Release 15.03u7 http://www.nordugrid.org/arc/releases/15.03u7/release_notes_15.03u7.html -------------------------------------------------------------------------------- ================================================================================ nordugrid-arc-doc-2.0.7-1.fc24 (FEDORA-2016-ce888c0868) Advanced Resource Connector Documentation -------------------------------------------------------------------------------- Update Information: ARC Release 15.03u7 http://www.nordugrid.org/arc/releases/15.03u7/release_notes_15.03u7.html -------------------------------------------------------------------------------- ================================================================================ openfst-1.5.3-1.fc24 (FEDORA-2016-ddafceae7b) Weighted finite-state transducer library -------------------------------------------------------------------------------- Update Information: Changes in openfst 1.5.2 and 1.5.3: - FarReader's GetFst method now returns a pointer - Fixed FSTERROR macro - Fixed build flags for dlopen - Consolidated Python extension into single module - Adds optional minimization of non- deterministic FSTs - Python add_arc now takes an Arc object - Mutation methods of the Python Fst object can now be chained - Scripting API and Python weight objects now support semiring arithmetic Changes in opengrm-ngram 1.3.0: - Templated Arc to provide new hist-arc counting, supporting fractional count based Katz backoff models. - Updated error handling. - Updated code to better conform to Google C++ guidelines. - Added Bayesian model merging. - Some re- factoring of functions to improve efficiency, particularly those for distributed model building, such as ngram-complete and ngram-split. - Updated unit tests to run more quickly and to be less bash-specific. sphinxtrain was rebuilt for the updated openfst and opengrm-ngram libraries. -------------------------------------------------------------------------------- ================================================================================ opengrm-ngram-1.3.0-1.fc24 (FEDORA-2016-ddafceae7b) Library for making and modifying n-gram language models -------------------------------------------------------------------------------- Update Information: Changes in openfst 1.5.2 and 1.5.3: - FarReader's GetFst method now returns a pointer - Fixed FSTERROR macro - Fixed build flags for dlopen - Consolidated Python extension into single module - Adds optional minimization of non- deterministic FSTs - Python add_arc now takes an Arc object - Mutation methods of the Python Fst object can now be chained - Scripting API and Python weight objects now support semiring arithmetic Changes in opengrm-ngram 1.3.0: - Templated Arc to provide new hist-arc counting, supporting fractional count based Katz backoff models. - Updated error handling. - Updated code to better conform to Google C++ guidelines. - Added Bayesian model merging. - Some re- factoring of functions to improve efficiency, particularly those for distributed model building, such as ngram-complete and ngram-split. - Updated unit tests to run more quickly and to be less bash-specific. sphinxtrain was rebuilt for the updated openfst and opengrm-ngram libraries. -------------------------------------------------------------------------------- ================================================================================ perl-HTML-Selector-XPath-0.20-1.fc24 (FEDORA-2016-5d13fc40f0) CSS Selector to XPath compiler -------------------------------------------------------------------------------- Update Information: Minor upstream bug fixes. -------------------------------------------------------------------------------- ================================================================================ perl-MCE-1.707-1.fc24 (FEDORA-2016-ff73f4e786) Many-core Engine for Perl providing parallel processing capabilities -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1339851 - perl-MCE-1.707 is available https://bugzilla.redhat.com/show_bug.cgi?id=1339851 -------------------------------------------------------------------------------- ================================================================================ pg_journal-0.2.0-12.fc24 (FEDORA-2016-cd4e3d9254) Module for sending log messages directly to the systemd journal -------------------------------------------------------------------------------- Update Information: This update fixes startup failure due to memory exhaustion. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1337710 - pg_journal causes postgreSQL to experience a fatal 'out of memory' error on start-up. https://bugzilla.redhat.com/show_bug.cgi?id=1337710 -------------------------------------------------------------------------------- ================================================================================ php-5.6.22-1.fc24 (FEDORA-2016-b967ac1a74) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information: 26 May 2016, **PHP 5.6.22** **Core:** * Fixed bug #72172 (zend_hex_strtod should not use strlen). (bwitz at hotmail dot com ) * Fixed bug #72114 (Integer underflow / arbitrary null write in fread/gzread). (Stas) * Fixed bug #72135 (Integer Overflow in php_html_entities). (Stas) **GD:** * Fixed bug #72227 (imagescale out-of-bounds read). (Stas) **Intl:** * Fixed bug #64524 (Add intl.use_exceptions to php.ini-*). (Anatol) * Fixed bug #72241 (get_icu_value_internal out-of-bounds read). (Stas) **Postgres:** * Fixed bug #72151 (mysqli_fetch_object changed behaviour). (Anatol) -------------------------------------------------------------------------------- ================================================================================ python-nectar-1.5.2-1.fc24 (FEDORA-2016-45d766e31c) A download library that separates workflow from implementation details -------------------------------------------------------------------------------- Update Information: Making a new release of package -------------------------------------------------------------------------------- ================================================================================ python-raven-5.18.0-1.fc24 (FEDORA-2016-a29aad957c) Python client for Sentry -------------------------------------------------------------------------------- Update Information: Update to latest upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #1328649 - python-raven-5.18.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1328649 -------------------------------------------------------------------------------- ================================================================================ rabbitmq-server-3.6.2-3.fc24 (FEDORA-2016-47f099a9aa) The RabbitMQ server -------------------------------------------------------------------------------- Update Information: * Fixed access for guest user (allows connection via loopback) * Reverted error codes to the same scheme as in a older ones -------------------------------------------------------------------------------- ================================================================================ rebase-helper-0.7.3-2.fc24 (FEDORA-2016-9d3cc66f52) The tool which helps you with rebase package -------------------------------------------------------------------------------- Update Information: Clear output data on Application initialization Fixes rebase-helper issue [#174](https://github.com/phracek/rebase-helper/issues/174) -------------------------------------------------------------------------------- ================================================================================ rubygem-bundler_ext-0.4.1-1.fc24 (FEDORA-2016-57035e1a53) Load system gems via Bundler DSL -------------------------------------------------------------------------------- Update Information: - Update to bundler_ext 0.4.1. (rhbz#1332928) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1332928 - Fails to require namespaced gem names, e.g. net-ssh https://bugzilla.redhat.com/show_bug.cgi?id=1332928 [ 2 ] Bug #1339844 - rubygem-bundler_ext-0.4.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1339844 -------------------------------------------------------------------------------- ================================================================================ rubygem-yard-0.8.7.6-3.fc24 (FEDORA-2016-0353b8a3b7) Documentation tool for consistent and usable documentation in Ruby -------------------------------------------------------------------------------- Update Information: - Fix test suite for Ruby 2.3 compatibility. (rhbz#1308100) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1308100 - rubygem-yard: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1308100 -------------------------------------------------------------------------------- ================================================================================ runc-0.1.1-3.git57b9972.fc24 (FEDORA-2016-c791bb6712) CLI for running Open Containers -------------------------------------------------------------------------------- Update Information: Add bash completion ---- add selinux to BUILDTAGS in addition to the default seccomp tag -------------------------------------------------------------------------------- References: [ 1 ] Bug #1340119 - Could you add bash completions to runc package. https://bugzilla.redhat.com/show_bug.cgi?id=1340119 -------------------------------------------------------------------------------- ================================================================================ skylable-sx-2.1-1.fc24 (FEDORA-2016-0154e973a6) A reliable and scalable storage cluster -------------------------------------------------------------------------------- Update Information: new upstream SX 2.1 -------------------------------------------------------------------------------- ================================================================================ sphinxtrain-1.0.8-28.fc24 (FEDORA-2016-ddafceae7b) Acoustic model trainer for CMU's Sphinx tools -------------------------------------------------------------------------------- Update Information: Changes in openfst 1.5.2 and 1.5.3: - FarReader's GetFst method now returns a pointer - Fixed FSTERROR macro - Fixed build flags for dlopen - Consolidated Python extension into single module - Adds optional minimization of non- deterministic FSTs - Python add_arc now takes an Arc object - Mutation methods of the Python Fst object can now be chained - Scripting API and Python weight objects now support semiring arithmetic Changes in opengrm-ngram 1.3.0: - Templated Arc to provide new hist-arc counting, supporting fractional count based Katz backoff models. - Updated error handling. - Updated code to better conform to Google C++ guidelines. - Added Bayesian model merging. - Some re- factoring of functions to improve efficiency, particularly those for distributed model building, such as ngram-complete and ngram-split. - Updated unit tests to run more quickly and to be less bash-specific. sphinxtrain was rebuilt for the updated openfst and opengrm-ngram libraries. -------------------------------------------------------------------------------- ================================================================================ subversion-1.9.4-2.fc24 (FEDORA-2016-fcbb7c0289) A Modern Concurrent Version Control System -------------------------------------------------------------------------------- Update Information: Enable tests; Revert one of Ruby 2.2 fixes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1299502 - swig breaks ruby tests when building subversion https://bugzilla.redhat.com/show_bug.cgi?id=1299502 -------------------------------------------------------------------------------- ================================================================================ wine-1.9.10-2.fc24 (FEDORA-2016-ca7f75eb16) A compatibility layer for windows applications -------------------------------------------------------------------------------- Update Information: - CSMT patch has been updated and enabled again (disabled since 1.9.5) - High resolution ("Retina") rendering option on Mac OS X. - More compatible directory enumeration. - A number of C++ runtime fixes. - Video output improvements. - Various bug fixes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1336605 - wine-1.9.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1336605 -------------------------------------------------------------------------------- ================================================================================ xscreensaver-5.35-1.fc24 (FEDORA-2016-5e21dafba6) X screen saver and locker -------------------------------------------------------------------------------- Update Information: New version 5.35 is released. -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://lists.fedoraproject.org/admin/lists/test@xxxxxxxxxxxxxxxxxxxxxxx
