The following Fedora 24 Security updates need testing: Age URL 167 https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08 squid-3.5.23-1.fc24 160 https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24 123 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba runc-1.0.0-5.rc2.gitc91b5be.fc24 103 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4b176c1694 redis-3.2.8-1.fc24 59 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8330a48ca2 python-XStatic-jquery-ui-1.12.0.1-1.fc24 31 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7a0e2d58f8 thunderbird-52.1.0-1.fc24 24 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4de07172f4 postgresql-9.5.7-1.fc24 14 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1f11501a9f perltidy-20170521-1.fc24 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0a1b2d495a systemd-229-20.fc24 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d39099ea6a webkitgtk4-2.16.3-1.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f942f19ff4 picocom-2.2-2.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5c55ef46ee yara-3.6.0-1.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d6d0067f oniguruma-5.9.6-4.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-486a536b62 mosquitto-1.4.12-1.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7e6f5f6957 poppler-0.41.0-4.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3258a7e433 dolphin-emu-5.0-14.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-eadc5f410e mingw-poppler-0.41.0-2.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ed1c665a3f wget-1.18-2.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-facd994774 sudo-1.8.20p2-1.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-212f07c853 perl-File-Path-2.12-3.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6aff7475b7 ansible-2.3.1.0-1.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7e0ff7f73a log4j12-1.2.17-19.fc24 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d5e7e65f30 mariadb-10.1.24-1.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-36c7e7ef06 ettercap-0.8.2-4.2.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a3d6e1a7bf libsndfile-1.0.28-2.fc24 The following Fedora 24 Critical Path updates have yet to be approved: Age URL 46 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e1905fd566 koji-1.12.0-2.fc24 31 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7a0e2d58f8 thunderbird-52.1.0-1.fc24 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c54e3353b6 p11-kit-0.23.2-4.fc24 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d39099ea6a webkitgtk4-2.16.3-1.fc24 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0a1b2d495a systemd-229-20.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-dc75cff415 firefox-53.0.3-1.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-212f07c853 perl-File-Path-2.12-3.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-facd994774 sudo-1.8.20p2-1.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-09ed8ebe2c sssd-1.15.2-5.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-fabdb3303a testdisk-7.0-9.fc24 ntfs-3g-2017.3.23-1.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7e6f5f6957 poppler-0.41.0-4.fc24 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d5e7e65f30 mariadb-10.1.24-1.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a3d6e1a7bf libsndfile-1.0.28-2.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-41792497d9 vim-8.0.617-1.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2f817084d3 hwdata-0.301-1.fc24 The following builds have been pushed to Fedora 24 updates-testing ettercap-0.8.2-4.2.fc24 hwdata-0.301-1.fc24 libsndfile-1.0.28-2.fc24 perl-PAR-Packer-1.030-2.fc24 python-py-1.4.34-1.fc24 vim-8.0.617-1.fc24 yank-0.8.3-1.fc24 Details about builds: ================================================================================ ettercap-0.8.2-4.2.fc24 (FEDORA-2017-36c7e7ef06) Network traffic sniffer/analyser, NCURSES interface version -------------------------------------------------------------------------------- Update Information: FIx for CVE-2017-8366 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1447318 - CVE-2017-8366 ettercap: Heap-based buffer overflow in strescape function in ec_strings.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1447318 -------------------------------------------------------------------------------- ================================================================================ hwdata-0.301-1.fc24 (FEDORA-2017-2f817084d3) Hardware identification and configuration data -------------------------------------------------------------------------------- Update Information: Updated pci, usb and vendor ids. -------------------------------------------------------------------------------- ================================================================================ libsndfile-1.0.28-2.fc24 (FEDORA-2017-a3d6e1a7bf) Library for reading and writing sound files -------------------------------------------------------------------------------- Update Information: fixes buffer overflows for flac and pcm -------------------------------------------------------------------------------- References: [ 1 ] Bug #1458694 - CVE-2017-8363 libsndfile: Heap buffer over-read in the flac_buffer_copy function https://bugzilla.redhat.com/show_bug.cgi?id=1458694 [ 2 ] Bug #1449520 - CVE-2017-8365 libsndfile: Buffer over-read in the l2les_array function https://bugzilla.redhat.com/show_bug.cgi?id=1449520 [ 3 ] Bug #1449519 - CVE-2017-8362 libsndfile: Out-of-bounds read in the flac_buffer_copy function https://bugzilla.redhat.com/show_bug.cgi?id=1449519 [ 4 ] Bug #1449518 - CVE-2017-8361 libsndfile: Buffer overflow in the flac_buffer_copy function https://bugzilla.redhat.com/show_bug.cgi?id=1449518 -------------------------------------------------------------------------------- ================================================================================ perl-PAR-Packer-1.030-2.fc24 (FEDORA-2017-82b9fabc26) PAR Packager -------------------------------------------------------------------------------- Update Information: This release fixes displaying Tkpp icon in a desktop menu. -------------------------------------------------------------------------------- ================================================================================ python-py-1.4.34-1.fc24 (FEDORA-2017-928959cf22) Library with cross-python path, ini-parsing, io, code, log facilities -------------------------------------------------------------------------------- Update Information: #### 1.4.34 ### - fix issue119 / pytest issue708 where tmpdir may fail to make numbered directories when the filesystem is case-insensitive. -------------------------------------------------------------------------------- ================================================================================ vim-8.0.617-1.fc24 (FEDORA-2017-41792497d9) The VIM editor -------------------------------------------------------------------------------- Update Information: The newest upstream commit. -------------------------------------------------------------------------------- ================================================================================ yank-0.8.3-1.fc24 (FEDORA-2017-d7289336ab) Tool for selecting and copying text from stdin without a mouse -------------------------------------------------------------------------------- Update Information: Update to 0.8.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1458771 - yank-0.8.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1458771 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
