The following Fedora 24 Security updates need testing: Age URL 41 https://bodhi.fedoraproject.org/updates/FEDORA-2016-b3f93ead5b moin-1.9.8-1.fc24 23 https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24 7 https://bodhi.fedoraproject.org/updates/FEDORA-2016-0ef628998f chicken-4.11.0-3.fc24 7 https://bodhi.fedoraproject.org/updates/FEDORA-2016-8749c58855 ganglia-3.7.2-10.fc24 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2eef68e635 phpMyAdmin-4.6.4-2.fc24 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-af3b0af887 mediawiki-1.26.4-1.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-508767e6b7 elog-3.1.1-7.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-985b68721b slock-1.3-2.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-dcf5cad792 python-jwcrypto-0.3.2-1.fc24 The following Fedora 24 Critical Path updates have yet to be approved: Age URL 21 https://bodhi.fedoraproject.org/updates/FEDORA-2016-ddadfe403c pungi-4.1.8-1.fc24 python-productmd-1.2-2.fc24 13 https://bodhi.fedoraproject.org/updates/FEDORA-2016-aa32e6e85b libfm-1.2.4-6.D20160627git2a537414de.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-0edc0e1794 livecd-tools-23.4-1.fc24 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-88d8834106 pcmanfm-1.2.4-3.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3687780371 libcdio-0.93-8.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d425ad02f orc-0.4.26-1.fc24 The following builds have been pushed to Fedora 24 updates-testing NetworkManager-ssh-1.2.1-0.fc24 adobe-source-serif-pro-fonts-1.017-2.fc24 astigmatic-grand-hotel-fonts-1.000-3.fc24 fedpkg-1.25-1.fc24 feh-2.17.1-1.fc24 gpodder-3.9.1-1.fc24 gr-air-modes-0-0.49.20160831git3bad1f5d.fc24 haproxy-1.6.9-1.fc24 hub-2.2.5-1.fc24 krop-0.4.11-2.fc24 libcdio-0.93-8.fc24 libmfx-1.16-1.20160317git7adf2e4.fc24 lilypond-2.19.47-1.fc24 lilypond-doc-2.19.47-1.fc24 lis-1.5.76-1.fc24 mingw-mediawriter-0-1.1git19b13a8.fc24 openfst-1.5.4-1.fc24 opengrm-ngram-1.3.1-1.fc24 orc-0.4.26-1.fc24 python-cvss-1.4-1.fc24 python-fauxquests-1.1-1.fc24 python-jwcrypto-0.3.2-1.fc24 python-pytest-mock-1.1-3.fc24 python-simpletal-4.3-11.fc24 python-toml-0.9.2-1.fc24 python3-simpletal-5.2-1.fc24 setroubleshoot-3.3.11-1.fc24 setroubleshoot-plugins-3.3.6-1.fc24 sphinxtrain-1.0.8-30.fc24 tlock-1.6-1.fc24 typetype-molot-fonts-1.000-4.fc24 varnish-agent-4.1.1-1.fc24 Details about builds: ================================================================================ NetworkManager-ssh-1.2.1-0.fc24 (FEDORA-2016-94b9224d4c) NetworkManager VPN plugin for SSH -------------------------------------------------------------------------------- Update Information: Update to 1.2.1 release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1350244 - NetworkManager-ssh not working https://bugzilla.redhat.com/show_bug.cgi?id=1350244 -------------------------------------------------------------------------------- ================================================================================ adobe-source-serif-pro-fonts-1.017-2.fc24 (FEDORA-2016-0aa7a43b4b) A set of OpenType fonts designed to complement Source Sans Pro -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1371635 - Review Request: adobe-source-serif-pro-fonts - A set of OpenType fonts designed to complement Source Sans Pro https://bugzilla.redhat.com/show_bug.cgi?id=1371635 -------------------------------------------------------------------------------- ================================================================================ astigmatic-grand-hotel-fonts-1.000-3.fc24 (FEDORA-2016-8b432f332a) Script retro style fonts -------------------------------------------------------------------------------- Update Information: New fonts for Fedora repository -------------------------------------------------------------------------------- References: [ 1 ] Bug #1368606 - Review Request: astigmatic-grand-hotel-fonts - Script retro style fonts https://bugzilla.redhat.com/show_bug.cgi?id=1368606 -------------------------------------------------------------------------------- ================================================================================ fedpkg-1.25-1.fc24 (FEDORA-2016-316df24b5a) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information: - update project URL (mattdm) - Allow fedpkg to be compatible with both bodhi 1 and bodhi 2. (randy) - Modify the bodhi cli usage for `fedpkg update`. (lmacken) - Add nosetest configuration (cqi) - replace gitbuildurl with gitbuildhash (cqi) -------------------------------------------------------------------------------- ================================================================================ feh-2.17.1-1.fc24 (FEDORA-2016-65c22ebdee) Fast command line image viewer using Imlib2 -------------------------------------------------------------------------------- Update Information: * Fix compilation on systems where HOST_NAME_MAX is not defined, such as FreeBSD (patch by Niclas Zeising) * Install feh icon (both 48x48 and scalable SVG) to /usr/share/icons when running make install app=1 * Fix --sort not being respected after the first reload when used in conjunction with --reload * All key actions can now also be bound to a button by specifying them in .config/feh/buttons. However, note that button actions can not be bound to keys. * Rename menu key action to toggle_menu, prev to prev_img and next to next_img. The old names are still supported, but no longer documented. * feh now also sets the X11 _NET_WM_PID and WM_CLIENT_MACHINE window properties -------------------------------------------------------------------------------- References: [ 1 ] Bug #1371137 - feh-2.17.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1371137 -------------------------------------------------------------------------------- ================================================================================ gpodder-3.9.1-1.fc24 (FEDORA-2016-81cefdab69) Podcast receiver/catcher written in Python -------------------------------------------------------------------------------- Update Information: 3.9.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1372109 - gpodder-3.9.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1372109 -------------------------------------------------------------------------------- ================================================================================ gr-air-modes-0-0.49.20160831git3bad1f5d.fc24 (FEDORA-2016-856f6c8cb5) SDR receiver for Mode S transponder signals (ADS-B) -------------------------------------------------------------------------------- Update Information: This is new git snapshot, it should resolve some problems. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1369923 - Planes not displayed on the map https://bugzilla.redhat.com/show_bug.cgi?id=1369923 -------------------------------------------------------------------------------- ================================================================================ haproxy-1.6.9-1.fc24 (FEDORA-2016-2b5ae05b5e) HAProxy reverse proxy for high availability environments -------------------------------------------------------------------------------- Update Information: Update to 1.6.9 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1370709 - haproxy-1.6.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1370709 -------------------------------------------------------------------------------- ================================================================================ hub-2.2.5-1.fc24 (FEDORA-2016-ee9213e044) A command-line wrapper for git with github shortcuts -------------------------------------------------------------------------------- Update Information: Update to the latest and greatest hub (now rewritten in go). Many new features are available; please see https://hub.github.com/hub.1.html for full details. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1321183 - Can hub be updated? https://bugzilla.redhat.com/show_bug.cgi?id=1321183 [ 2 ] Bug #1359165 - Upstream zsh completion script not installed https://bugzilla.redhat.com/show_bug.cgi?id=1359165 -------------------------------------------------------------------------------- ================================================================================ krop-0.4.11-2.fc24 (FEDORA-2016-028bf5abc6) Tool to crop PDF files with an eye towards eReaders -------------------------------------------------------------------------------- Update Information: version 0.4.11 with support for python3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1370721 - krop-0.4.11 is available with support for python3 https://bugzilla.redhat.com/show_bug.cgi?id=1370721 -------------------------------------------------------------------------------- ================================================================================ libcdio-0.93-8.fc24 (FEDORA-2016-3687780371) CD-ROM input and control library -------------------------------------------------------------------------------- Update Information: Fixes #1366718 (Bug in libcdio preventing it from use in c++ applications) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1366718 - Bug in libcdio preventing it from use in c++ applications https://bugzilla.redhat.com/show_bug.cgi?id=1366718 -------------------------------------------------------------------------------- ================================================================================ libmfx-1.16-1.20160317git7adf2e4.fc24 (FEDORA-2016-54f5cde109) Intel hardware video acceleration dispatcher library -------------------------------------------------------------------------------- Update Information: A library to provide access to video transcoding acceleration core (QuickSync Video) present in Intel CPUs. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1370948 - Review Request: libmfx - Intel hardware video acceleration dispatcher library https://bugzilla.redhat.com/show_bug.cgi?id=1370948 -------------------------------------------------------------------------------- ================================================================================ lilypond-2.19.47-1.fc24 (FEDORA-2016-c83bc9ba22) A typesetting system for music notation -------------------------------------------------------------------------------- Update Information: 2.19.47 -------------------------------------------------------------------------------- ================================================================================ lilypond-doc-2.19.47-1.fc24 (FEDORA-2016-c83bc9ba22) HTML documentation for LilyPond -------------------------------------------------------------------------------- Update Information: 2.19.47 -------------------------------------------------------------------------------- ================================================================================ lis-1.5.76-1.fc24 (FEDORA-2016-fe28c3b4cf) A library for solving linear equations and eigenvalue problems -------------------------------------------------------------------------------- Update Information: Update to 1.5.76 -------------------------------------------------------------------------------- ================================================================================ mingw-mediawriter-0-1.1git19b13a8.fc24 (FEDORA-2016-a008518f56) Fedora Media Writer -------------------------------------------------------------------------------- Update Information: Initial release -------------------------------------------------------------------------------- ================================================================================ openfst-1.5.4-1.fc24 (FEDORA-2016-eb1957827b) Weighted finite-state transducer library -------------------------------------------------------------------------------- Update Information: Changes in openfst 1.5.4: - Adds RemoveSymbol method to SymbolTable - Prevents underflow when using LogProbArcSelector in random generation - Makes random weight generators a single template class - Makes weight Properties constexpr where possible - Adds check for error when opening files when compiling strings into FARs - Adds routines for parsing string flags to the scripting API Changes in opengrm-ngram 1.3.1: - Updated unit test scripts to use random file names and directories, to avoid collisions with multiple processes. - Fixed ill- formatting in error handling. - Improved reading of large files of ngram counts with ngramread. The sphinxtrain build is a simple rebuild due to the other two updates. -------------------------------------------------------------------------------- ================================================================================ opengrm-ngram-1.3.1-1.fc24 (FEDORA-2016-eb1957827b) Library for making and modifying n-gram language models -------------------------------------------------------------------------------- Update Information: Changes in openfst 1.5.4: - Adds RemoveSymbol method to SymbolTable - Prevents underflow when using LogProbArcSelector in random generation - Makes random weight generators a single template class - Makes weight Properties constexpr where possible - Adds check for error when opening files when compiling strings into FARs - Adds routines for parsing string flags to the scripting API Changes in opengrm-ngram 1.3.1: - Updated unit test scripts to use random file names and directories, to avoid collisions with multiple processes. - Fixed ill- formatting in error handling. - Improved reading of large files of ngram counts with ngramread. The sphinxtrain build is a simple rebuild due to the other two updates. -------------------------------------------------------------------------------- ================================================================================ orc-0.4.26-1.fc24 (FEDORA-2016-8d425ad02f) The Oil Run-time Compiler -------------------------------------------------------------------------------- Update Information: Update to 0.4.26 -------------------------------------------------------------------------------- ================================================================================ python-cvss-1.4-1.fc24 (FEDORA-2016-7f00da57d6) CVSS2/3 library with interactive calculator -------------------------------------------------------------------------------- Update Information: - New release v1.4 - License changed to LGPLv3+ ---- New package python-cvss: CVSS2/3 library with interactive calculator -------------------------------------------------------------------------------- References: [ 1 ] Bug #1334611 - Review Request: python-cvss - CVSS2/3 library with interactive calculator https://bugzilla.redhat.com/show_bug.cgi?id=1334611 -------------------------------------------------------------------------------- ================================================================================ python-fauxquests-1.1-1.fc24 (FEDORA-2016-e6f141ca60) Mock HTTP requests sent with the requests package -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1370473 - Review Request: python-fauxquests - Mock HTTP requests sent with the requests package https://bugzilla.redhat.com/show_bug.cgi?id=1370473 -------------------------------------------------------------------------------- ================================================================================ python-jwcrypto-0.3.2-1.fc24 (FEDORA-2016-dcf5cad792) Implements JWK,JWS,JWE specifications using python-cryptography -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-6298 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1371799 - CVE-2016-6298 jwcrypto: million messages attack vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1371799 -------------------------------------------------------------------------------- ================================================================================ python-pytest-mock-1.1-3.fc24 (FEDORA-2016-2018bc3322) Thin-wrapper around the mock package for easier use with py.test -------------------------------------------------------------------------------- Update Information: Use %summary instead of custom %sum macro -------------------------------------------------------------------------------- References: [ 1 ] Bug #1360365 - Review Request: python-pytest-mock - Thin-wrapper around the mock package for easier use with py.test https://bugzilla.redhat.com/show_bug.cgi?id=1360365 -------------------------------------------------------------------------------- ================================================================================ python-simpletal-4.3-11.fc24 (FEDORA-2016-90e96d8803) An XML based template processor for TAL, TALES and METAL specifications -------------------------------------------------------------------------------- Update Information: Packaging updates: - Modernize spec file. - Include HTML documentation. - Create a python2 subpackage only. - Run test suite. - Fix wrong date in %changelog. -------------------------------------------------------------------------------- ================================================================================ python-toml-0.9.2-1.fc24 (FEDORA-2016-24cc70e316) Python Library for Tom's Obvious, Minimal Language -------------------------------------------------------------------------------- Update Information: Update to 0.9.2 -------------------------------------------------------------------------------- ================================================================================ python3-simpletal-5.2-1.fc24 (FEDORA-2016-485f60f683) An XML based template processor for TAL, TALES and METAL specifications -------------------------------------------------------------------------------- Update Information: This is the Python 3 version of the simpletal package. SimpleTAL is a stand alone Python implementation of the TAL, TALES and METAL specifications used in Zope to power HTML and XML templates. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1366635 - Review Request: python3-simpletal - An XML based template processor for TAL, TALES and METAL specifications https://bugzilla.redhat.com/show_bug.cgi?id=1366635 -------------------------------------------------------------------------------- ================================================================================ setroubleshoot-3.3.11-1.fc24 (FEDORA-2016-f674585532) Helps troubleshoot SELinux problems -------------------------------------------------------------------------------- Update Information: * sealert didn't know "capability2" class which caused capability2 denials (e.g. block_suspend) to be reported as "access" denials, this is fixed now. * The list of all alerts works now. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1270778 - None https://bugzilla.redhat.com/show_bug.cgi?id=1270778 [ 2 ] Bug #1360392 - None https://bugzilla.redhat.com/show_bug.cgi?id=1360392 [ 3 ] Bug #1332485 - None https://bugzilla.redhat.com/show_bug.cgi?id=1332485 [ 4 ] Bug #1370272 - None https://bugzilla.redhat.com/show_bug.cgi?id=1370272 -------------------------------------------------------------------------------- ================================================================================ setroubleshoot-plugins-3.3.6-1.fc24 (FEDORA-2016-f674585532) Analysis plugins for use with setroubleshoot -------------------------------------------------------------------------------- Update Information: * sealert didn't know "capability2" class which caused capability2 denials (e.g. block_suspend) to be reported as "access" denials, this is fixed now. * The list of all alerts works now. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1270778 - None https://bugzilla.redhat.com/show_bug.cgi?id=1270778 [ 2 ] Bug #1360392 - None https://bugzilla.redhat.com/show_bug.cgi?id=1360392 [ 3 ] Bug #1332485 - None https://bugzilla.redhat.com/show_bug.cgi?id=1332485 [ 4 ] Bug #1370272 - None https://bugzilla.redhat.com/show_bug.cgi?id=1370272 -------------------------------------------------------------------------------- ================================================================================ sphinxtrain-1.0.8-30.fc24 (FEDORA-2016-eb1957827b) Acoustic model trainer for CMU's Sphinx tools -------------------------------------------------------------------------------- Update Information: Changes in openfst 1.5.4: - Adds RemoveSymbol method to SymbolTable - Prevents underflow when using LogProbArcSelector in random generation - Makes random weight generators a single template class - Makes weight Properties constexpr where possible - Adds check for error when opening files when compiling strings into FARs - Adds routines for parsing string flags to the scripting API Changes in opengrm-ngram 1.3.1: - Updated unit test scripts to use random file names and directories, to avoid collisions with multiple processes. - Fixed ill- formatting in error handling. - Improved reading of large files of ngram counts with ngramread. The sphinxtrain build is a simple rebuild due to the other two updates. -------------------------------------------------------------------------------- ================================================================================ tlock-1.6-1.fc24 (FEDORA-2016-2ab7d7723b) Terminal lock -------------------------------------------------------------------------------- Update Information: New release v1.6. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1330697 - Unknown TERM leaves terminal unlocked https://bugzilla.redhat.com/show_bug.cgi?id=1330697 -------------------------------------------------------------------------------- ================================================================================ typetype-molot-fonts-1.000-4.fc24 (FEDORA-2016-4bb5b0a8f2) A display sans-serif font -------------------------------------------------------------------------------- Update Information: New packaged fonts -------------------------------------------------------------------------------- References: [ 1 ] Bug #1368611 - Review Request: typetype-molot-fonts - Display sans-serif fonts https://bugzilla.redhat.com/show_bug.cgi?id=1368611 -------------------------------------------------------------------------------- ================================================================================ varnish-agent-4.1.1-1.fc24 (FEDORA-2016-c28ffe0655) Administration agent for Varnish Cache -------------------------------------------------------------------------------- Update Information: It fixes a broken dependency with Varnish. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1303543 - varnish-agent needs update after varnish-4.1.1 was pushed to rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1303543 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://lists.fedoraproject.org/admin/lists/test@xxxxxxxxxxxxxxxxxxxxxxx