The following Fedora 24 Security updates need testing: Age URL 54 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e339a7779 optipng-0.7.6-1.fc24 10 https://bodhi.fedoraproject.org/updates/FEDORA-2016-95edf19d8a squid-3.5.19-2.fc24 7 https://bodhi.fedoraproject.org/updates/FEDORA-2016-b86ae2068d openslp-2.0.0-9.fc24 5 https://bodhi.fedoraproject.org/updates/FEDORA-2016-dfa325d31b community-mysql-5.7.12-1.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-e3240782ec phpMyAdmin-4.6.2-1.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d23d2712de roundcubemail-1.2.0-1.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-e5f722a9a7 docker-1.10.3-12.git4158ccc.fc24 The following Fedora 24 Critical Path updates have yet to be approved: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-2016-aa49938267 pungi-4.0.15-2.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3d4c0d27b6 sqlite-3.12.2-1.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-5f8a34340d systemd-229-8.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-fa807cca6f nss-3.24.0-1.1.fc24 nss-softokn-3.24.0-1.0.fc24 nss-util-3.24.0-1.0.fc24 The following builds have been pushed to Fedora 24 updates-testing NetworkManager-l2tp-1.2.2-1.fc24 bcm283x-firmware-20160513-1.c17fa41.fc24 cinnamon-menus-3.0.2-1.fc24 cinnamon-screensaver-3.0.1-1.fc24 compose-utils-0.1.6-1.fc24 dmidecode-3.0-3.fc24 docker-1.10.3-12.git4158ccc.fc24 gecode-4.4.0-11.fc24 gnome-gmail-2.1-1.fc24 gtengine-2.5-1.fc24 jboss-logging-3.3.0-1.fc24 jboss-logging-tools-2.0.1-1.fc24 jboss-logmanager-2.0.3-1.fc24 jboss-modules-1.5.1-1.fc24 jboss-parent-19-1.fc24 jdeparser-2.0.0-1.fc24 knot-2.2.1-1.fc24 libinput-1.3.1-1.fc24 libsolv-0.6.20-3.fc24 log4j-jboss-logmanager-1.1.2-1.fc24 lyx-2.2.0-1.fc24 mailcap-2.1.46-1.fc24 mozjs45-45.1.1-4.fc24 nfs-ganesha-2.4.0-0.6dev19.fc24 nss-3.24.0-1.1.fc24 nss-softokn-3.24.0-1.0.fc24 nss-util-3.24.0-1.0.fc24 openblas-0.2.18-1.fc24 php-guzzlehttp-promises-1.2.0-1.fc24 php-guzzlehttp-psr7-1.3.0-1.fc24 php-latte-2.3.12-1.fc24 php-pear-Net-SMTP-1.7.2-1.fc24 php-tracy-2.3.11-1.fc24 php-twig-1.24.1-1.fc24 python-copr-1.70-1.fc24 slapi-nis-0.55-3.fc24 slf4j-jboss-logmanager-1.0.3-1.fc24 systemd-229-8.fc24 texstudio-2.11.0-1.fc24 uboot-tools-2016.05-3.fc24 ugene-1.22.0-5.fc24 wildfly-build-tools-1.1.6-1.fc24 Details about builds: ================================================================================ NetworkManager-l2tp-1.2.2-1.fc24 (FEDORA-2016-6738cc1889) NetworkManager VPN plugin for L2TP and L2TP/IPSec -------------------------------------------------------------------------------- Update Information: Update to 1.2.2. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1336282 - Update NetworkManager-l2tp to 1.2.2 https://bugzilla.redhat.com/show_bug.cgi?id=1336282 -------------------------------------------------------------------------------- ================================================================================ bcm283x-firmware-20160513-1.c17fa41.fc24 (FEDORA-2016-d2c78abc06) Broadcom bcm283x firmware for the Raspberry Pi -------------------------------------------------------------------------------- Update Information: Update to u-boot 2016.05 GA enabling new features and numerous new ARMv7 and aarch64 devices -------------------------------------------------------------------------------- ================================================================================ cinnamon-menus-3.0.2-1.fc24 (FEDORA-2016-272da20d39) A menu system for the Cinnamon project -------------------------------------------------------------------------------- Update Information: updates -------------------------------------------------------------------------------- ================================================================================ cinnamon-screensaver-3.0.1-1.fc24 (FEDORA-2016-272da20d39) Cinnamon Screensaver -------------------------------------------------------------------------------- Update Information: updates -------------------------------------------------------------------------------- ================================================================================ compose-utils-0.1.6-1.fc24 (FEDORA-2016-9edc277e2e) Utilities for working with composes -------------------------------------------------------------------------------- Update Information: * Fix getting SRPM summary * Add utility for listing composes (It allows listing all composes in a directory in a sorted way, finding latest compose in a directory, generating next compose id to be used, finding preceding compose for a given compose etc.) * Add better error message on missing metadata ---- Add image diff to changelog. -------------------------------------------------------------------------------- ================================================================================ dmidecode-3.0-3.fc24 (FEDORA-2016-1215cc6d1d) Tool to analyse BIOS DMI data -------------------------------------------------------------------------------- Update Information: Hide irrelevant fixup message -------------------------------------------------------------------------------- ================================================================================ docker-1.10.3-12.git4158ccc.fc24 (FEDORA-2016-e5f722a9a7) Automates deployment of containerized applications -------------------------------------------------------------------------------- Update Information: built docker @projectatomic/fedora-1.10.3 commit 4158ccc ---- Resolves: #1335649 - enable Red Hat subscription use in Docker containers on Fedora ---- built docker @projectatomic/fedora-1.10.3 commit 8ecd47f -------------------------------------------------------------------------------- References: [ 1 ] Bug #1335649 - Enable use of Red Hat subscriptions in docker containers on Fedora https://bugzilla.redhat.com/show_bug.cgi?id=1335649 [ 2 ] Bug #1329454 - CVE-2016-3697 docker: privilege escalation via confusion of usernames and UIDs [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1329454 [ 3 ] Bug #1340921 - "Failed to get pwuid struct: user: unknown userid " log spam https://bugzilla.redhat.com/show_bug.cgi?id=1340921 -------------------------------------------------------------------------------- ================================================================================ gecode-4.4.0-11.fc24 (FEDORA-2016-ebdb7d840b) Generic constraint development environment -------------------------------------------------------------------------------- Update Information: fix the typo bug which causes the build failure on powerpc -------------------------------------------------------------------------------- ================================================================================ gnome-gmail-2.1-1.fc24 (FEDORA-2016-4f865d88e0) Integrate GMail into the GNOME desktop -------------------------------------------------------------------------------- Update Information: Update to 2.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1340600 - gnome-gmail-2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1340600 -------------------------------------------------------------------------------- ================================================================================ gtengine-2.5-1.fc24 (FEDORA-2016-7ba517b15a) Library for computations in mathematics, graphics, image analysis, and physics -------------------------------------------------------------------------------- Update Information: - Update to 2.5 -------------------------------------------------------------------------------- ================================================================================ jboss-logging-3.3.0-1.fc24 (FEDORA-2016-f252af26c6) The JBoss Logging Framework -------------------------------------------------------------------------------- Update Information: update to 3.3.0.Final -------------------------------------------------------------------------------- ================================================================================ jboss-logging-tools-2.0.1-1.fc24 (FEDORA-2016-6a2a052517) JBoss Logging I18n Annotation Processor -------------------------------------------------------------------------------- Update Information: update to 2.0.1.Final -------------------------------------------------------------------------------- ================================================================================ jboss-logmanager-2.0.3-1.fc24 (FEDORA-2016-2c2aab6b63) JBoss Log Manager -------------------------------------------------------------------------------- Update Information: update to 2.0.3.Final -------------------------------------------------------------------------------- ================================================================================ jboss-modules-1.5.1-1.fc24 (FEDORA-2016-c7e0a4c060) A Modular Classloading System -------------------------------------------------------------------------------- Update Information: update to 1.5.1.Final -------------------------------------------------------------------------------- ================================================================================ jboss-parent-19-1.fc24 (FEDORA-2016-c077837b04) JBoss Parent POM -------------------------------------------------------------------------------- Update Information: update to 19 -------------------------------------------------------------------------------- ================================================================================ jdeparser-2.0.0-1.fc24 (FEDORA-2016-3699105670) Source generator library for Java -------------------------------------------------------------------------------- Update Information: update to 2.0.0.Final -------------------------------------------------------------------------------- ================================================================================ knot-2.2.1-1.fc24 (FEDORA-2016-069f2b911b) High-performance authoritative DNS server -------------------------------------------------------------------------------- Update Information: new upstream release ---- Fix default configuration file. -------------------------------------------------------------------------------- ================================================================================ libinput-1.3.1-1.fc24 (FEDORA-2016-d8355f57d3) Input device library -------------------------------------------------------------------------------- Update Information: libinput 1.3.1, we already had most of the fixes anyway -------------------------------------------------------------------------------- ================================================================================ libsolv-0.6.20-3.fc24 (FEDORA-2016-f0fdbfc2e4) Package dependency solver -------------------------------------------------------------------------------- Update Information: Enable/Disable some options. Shouldn't affect anyone -------------------------------------------------------------------------------- ================================================================================ log4j-jboss-logmanager-1.1.2-1.fc24 (FEDORA-2016-58e2182359) JBoss Log4j Emulation -------------------------------------------------------------------------------- Update Information: update to 1.1.2.Final -------------------------------------------------------------------------------- ================================================================================ lyx-2.2.0-1.fc24 (FEDORA-2016-c5a1e5369a) WYSIWYM (What You See Is What You Mean) document processor -------------------------------------------------------------------------------- Update Information: Update to the latest stable release. Among the most important of these are: * HiDPI display support * Qt5 support * New text display algorithm * Horizontal scrolling for large insets * Improved control of paragraph breaks * Improved text color support * Reworked instant preview -------------------------------------------------------------------------------- References: [ 1 ] Bug #1249411 - [abrt] lyx: lyx::error_handler(): lyx killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=1249411 [ 2 ] Bug #1208209 - [abrt] lyx-common: configure.py:1289:checkLatexConfig:IOError: [Errno 2] No such file or directory: 'chkconfig.vars' https://bugzilla.redhat.com/show_bug.cgi?id=1208209 [ 3 ] Bug #1297051 - [abrt] lyx: lyx::error_handler(): lyx killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=1297051 -------------------------------------------------------------------------------- ================================================================================ mailcap-2.1.46-1.fc24 (FEDORA-2016-273c1fcd94) Helper application and MIME type associations for file types -------------------------------------------------------------------------------- Update Information: Update to 2.1.46 -------------------------------------------------------------------------------- ================================================================================ mozjs45-45.1.1-4.fc24 (FEDORA-2016-7c6aef3b6c) JavaScript interpreter and libraries -------------------------------------------------------------------------------- Update Information: fix build on s390 ---- New package mozjs45 - contains JS engine from Firefox 45. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1336728 - Review Request: mozjs45 - JavaScript interpreter and libraries https://bugzilla.redhat.com/show_bug.cgi?id=1336728 -------------------------------------------------------------------------------- ================================================================================ nfs-ganesha-2.4.0-0.6dev19.fc24 (FEDORA-2016-5ddb4fa649) NFS-Ganesha is a NFS Server running in user space -------------------------------------------------------------------------------- Update Information: 2.4-dev-19 -------------------------------------------------------------------------------- ================================================================================ nss-3.24.0-1.1.fc24 (FEDORA-2016-fa807cca6f) Network Security Services -------------------------------------------------------------------------------- Update Information: Updates the nss family of packages to upstream NSS 3.24. For details about new functionality and a list of bugs fixed in this release please see the upstream releases notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.24_release_notes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1336849 - nss-3.24 is available https://bugzilla.redhat.com/show_bug.cgi?id=1336849 -------------------------------------------------------------------------------- ================================================================================ nss-softokn-3.24.0-1.0.fc24 (FEDORA-2016-fa807cca6f) Network Security Services Softoken Module -------------------------------------------------------------------------------- Update Information: Updates the nss family of packages to upstream NSS 3.24. For details about new functionality and a list of bugs fixed in this release please see the upstream releases notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.24_release_notes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1336849 - nss-3.24 is available https://bugzilla.redhat.com/show_bug.cgi?id=1336849 -------------------------------------------------------------------------------- ================================================================================ nss-util-3.24.0-1.0.fc24 (FEDORA-2016-fa807cca6f) Network Security Services Utilities Library -------------------------------------------------------------------------------- Update Information: Updates the nss family of packages to upstream NSS 3.24. For details about new functionality and a list of bugs fixed in this release please see the upstream releases notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.24_release_notes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1336849 - nss-3.24 is available https://bugzilla.redhat.com/show_bug.cgi?id=1336849 -------------------------------------------------------------------------------- ================================================================================ openblas-0.2.18-1.fc24 (FEDORA-2016-e2ff7a908d) An optimized BLAS library based on GotoBLAS2 -------------------------------------------------------------------------------- Update Information: Optimizations on ARM and Power architectures. -------------------------------------------------------------------------------- ================================================================================ php-guzzlehttp-promises-1.2.0-1.fc24 (FEDORA-2016-4dea6beb61) Guzzle promises library -------------------------------------------------------------------------------- Update Information: ## 1.2.0 - 2016-05-18 * Update to now catch `\Throwable` on PHP 7+ -------------------------------------------------------------------------------- References: [ 1 ] Bug #1337366 - php-guzzlehttp-promises-1.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1337366 -------------------------------------------------------------------------------- ================================================================================ php-guzzlehttp-psr7-1.3.0-1.fc24 (FEDORA-2016-1911def7e5) PSR-7 message implementation -------------------------------------------------------------------------------- Update Information: ## 1.3.0 - 2016-04-13 * Added remaining interfaces needed for full PSR7 compatibility (ServerRequestInterface, UploadedFileInterface, etc.). * Added support for stream_for from scalars. * Can now extend Uri. * Fixed a bug in validating request methods by making it more permissive. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1326975 - php-guzzlehttp-psr7-1.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1326975 -------------------------------------------------------------------------------- ================================================================================ php-latte-2.3.12-1.fc24 (FEDORA-2016-a009f1421b) Latte: the amazing template engine for PHP -------------------------------------------------------------------------------- Update Information: **Released version 2.3.12** * Filter strip: fixed bug when input begins with `<pre> <script>` or `<textarea>` * Filters::escapeHtml escapes all entities * Compiler: pretty whitespace around comments * MacroTokens: added new operators <=> ** ... * Compiler: improved error messages -------------------------------------------------------------------------------- ================================================================================ php-pear-Net-SMTP-1.7.2-1.fc24 (FEDORA-2016-e30bb66a1b) Provides an implementation of the SMTP protocol -------------------------------------------------------------------------------- Update Information: **Version 1.7.2** - Fix size calculation when headers are provided (#27) -------------------------------------------------------------------------------- ================================================================================ php-tracy-2.3.11-1.fc24 (FEDORA-2016-3a97cf2876) Tracy: useful PHP debugger -------------------------------------------------------------------------------- Update Information: **Released version 2.3.11** * Dumper: fixed missing escape for & (#187) * bar.js: fixed evaluating script tags in panels in window-mode (#174) * Bluescreen: rel=noopener for target=_blank * BlueScreen::highlightLine() line may be out of range #148 * Bar: versioning of data in session #146 #149 -------------------------------------------------------------------------------- ================================================================================ php-twig-1.24.1-1.fc24 (FEDORA-2016-798e6cdb5c) The flexible, fast, and secure template engine for PHP -------------------------------------------------------------------------------- Update Information: **Version 1.24.1** (2016-05-30) * fixed reserved keywords (forbids true, false, null and none keywords for variables names) * fixed support for PHP7 (Throwable support) * marked the following methods as being internals on Twig_Environment: getFunctions(), getFilters(), getTests(), getFunction(), getFilter(), getTest(), getTokenParsers(), getTags(), getNodeVisitors(), getUnaryOperators(), getBinaryOperators(), getFunctions(), getFilters(), getGlobals(), initGlobals(), initExtensions(), and initExtension() -------------------------------------------------------------------------------- ================================================================================ python-copr-1.70-1.fc24 (FEDORA-2016-bcc2133857) Python interface for Copr -------------------------------------------------------------------------------- Update Information: This release mainly fixes bug Bug 1340650 - SRPM builds submitted from CLI fail: "invalid request". -------------------------------------------------------------------------------- References: [ 1 ] Bug #1335163 - Add fork subcommand to Copr CLI https://bugzilla.redhat.com/show_bug.cgi?id=1335163 [ 2 ] Bug #1340650 - SRPM builds submitted from CLI fail: "invalid request" https://bugzilla.redhat.com/show_bug.cgi?id=1340650 -------------------------------------------------------------------------------- ================================================================================ slapi-nis-0.55-3.fc24 (FEDORA-2016-66da0c4188) NIS Server and Schema Compatibility plugins for Directory Server -------------------------------------------------------------------------------- Update Information: Support shutdown for priming data thread. Required for FreeIPA trust to Active Directory feature support for legacy clients (Compat tree). -------------------------------------------------------------------------------- ================================================================================ slf4j-jboss-logmanager-1.0.3-1.fc24 (FEDORA-2016-8386afb678) SLF4J backend for JBoss LogManager -------------------------------------------------------------------------------- Update Information: Upstream 1.0.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1340406 - slf4j-jboss-logmanager-1.0.3.GA is available https://bugzilla.redhat.com/show_bug.cgi?id=1340406 -------------------------------------------------------------------------------- ================================================================================ systemd-229-8.fc24 (FEDORA-2016-5f8a34340d) A System and Service Manager -------------------------------------------------------------------------------- Update Information: Patches for linked bugs -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316964 - .../include/systemd/sd-login.h:241:1: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'void' https://bugzilla.redhat.com/show_bug.cgi?id=1316964 [ 2 ] Bug #1317928 - nspawn does not set SELinux label correctly (/dev/console) https://bugzilla.redhat.com/show_bug.cgi?id=1317928 [ 3 ] Bug #1338823 - certain udev properties getting bad data (the data starts with a '\n' among other things) https://bugzilla.redhat.com/show_bug.cgi?id=1338823 [ 4 ] Bug #1333998 - After Russian install, console keymap is 'us', not 'ru' https://bugzilla.redhat.com/show_bug.cgi?id=1333998 [ 5 ] Bug #1206936 - Laptop does not resume from hibernate, boots instead https://bugzilla.redhat.com/show_bug.cgi?id=1206936 -------------------------------------------------------------------------------- ================================================================================ texstudio-2.11.0-1.fc24 (FEDORA-2016-dcbddc10c1) A feature-rich editor for LaTeX documents -------------------------------------------------------------------------------- Update Information: - update to 2.11.0 - http://texstudio.sourceforge.net/manual/current/CHANGELOG.txt -------------------------------------------------------------------------------- ================================================================================ uboot-tools-2016.05-3.fc24 (FEDORA-2016-d2c78abc06) U-Boot utilities -------------------------------------------------------------------------------- Update Information: Update to u-boot 2016.05 GA enabling new features and numerous new ARMv7 and aarch64 devices -------------------------------------------------------------------------------- ================================================================================ ugene-1.22.0-5.fc24 (FEDORA-2016-54554f20d4) Integrated bioinformatics toolkit -------------------------------------------------------------------------------- Update Information: * Fixes FTBFS in Rawhide / F24. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1308203 - ugene: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1308203 [ 2 ] Bug #1306561 - ugene cannot be updated due to broken dependencies https://bugzilla.redhat.com/show_bug.cgi?id=1306561 [ 3 ] Bug #1107023 - ugene: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1107023 [ 4 ] Bug #890427 - ugene-1.22.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=890427 -------------------------------------------------------------------------------- ================================================================================ wildfly-build-tools-1.1.6-1.fc24 (FEDORA-2016-4edc2565b1) Wildfly build and provisioning tools -------------------------------------------------------------------------------- Update Information: Initial import (#1328065). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1328065 - Review Request: wildfly-build-tools - Wildfly build and provisioning tools https://bugzilla.redhat.com/show_bug.cgi?id=1328065 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://lists.fedoraproject.org/admin/lists/test@xxxxxxxxxxxxxxxxxxxxxxx