The following Fedora 24 Security updates need testing: Age URL 195 https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08 squid-3.5.23-1.fc24 188 https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24 151 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba runc-1.0.0-5.rc2.gitc91b5be.fc24 87 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8330a48ca2 python-XStatic-jquery-ui-1.12.0.1-1.fc24 26 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5f1006afb1 libstaroffice-0.0.3-3.fc24 26 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a1f4c48c68 nodejs-brace-expansion-1.1.7-1.fc24 17 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bbae64fdc2 libmwaw-0.3.11-3.fc24 13 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b8d76bef4e chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc24 13 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4932c9b886 c-ares-1.13.0-1.fc24 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2cfb239358 libsndfile-1.0.28-3.fc24 9 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e0a9e51dd5 graphite2-1.3.10-1.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-37f68e3534 webkitgtk4-2.16.5-1.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-299525e757 php-horde-Horde-Image-2.5.1-1.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b1f07acd9 flatpak-0.8.7-1.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d26266eb32 libmtp-1.1.13-1.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-014d67fa9d libdb-5.3.28-24.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-56cf7067e7 irssi-1.0.3-1.fc24 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-cf9599a306 httpd-2.4.26-1.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-06d7ff5a5d pius-2.2.4-1.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3b70d0b976 libgcrypt-1.7.8-1.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1206f87545 jetty-9.3.7-3.v20160115.fc24 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-001f135337 bind-dyndb-ldap-10.1-2.fc24 bind-9.10.5-2.P2.fc24 dnsperf-2.1.0.0-3.fc24 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-749f4c7d2a mosquitto-1.4.13-1.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-47487b1223 yara-3.6.2-1.fc24 The following Fedora 24 Critical Path updates have yet to be approved: Age URL 74 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e1905fd566 koji-1.12.0-2.fc24 19 https://bodhi.fedoraproject.org/updates/FEDORA-2017-07fed9b000 libteam-1.27-1.fc24 16 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ce8c7053eb audit-2.7.7-1.fc24 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2cfb239358 libsndfile-1.0.28-3.fc24 9 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e0a9e51dd5 graphite2-1.3.10-1.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-014d67fa9d libdb-5.3.28-24.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b1f07acd9 flatpak-0.8.7-1.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3e62f0d34b perl-5.22.3-371.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-37f68e3534 webkitgtk4-2.16.5-1.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6c2a7b1453 thunderbird-52.2.1-1.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3b70d0b976 libgcrypt-1.7.8-1.fc24 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8100aed299 rsync-3.1.2-4.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-af79986d5f libsoup-2.54.1-2.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e8cb8fdad5 gsm-1.0.17-1.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-655837782e json-c-0.12.1-2.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f1cfcaee24 hwdata-0.302-1.fc24 The following builds have been pushed to Fedora 24 updates-testing copyq-3.0.3-1.fc24 drupal7-ckeditor-1.18-1.fc24 drupal7-file_entity-2.2-1.fc24 drupal7-i18n-1.18-1.fc24 drupal7-module_filter-2.1-1.fc24 drupal7-views_slideshow-3.9-1.fc24 gitolite3-3.6.7-1.fc24 hwdata-0.302-1.fc24 javapackages-tools-4.6.0-16.fc24 jglobus-2.1.0-6.fc24 json-c-0.12.1-2.fc24 klavaro-3.03-1.fc24 mftrace-1.2.19-1.fc24 netpbm-10.79.00-1.fc24 perl-CPAN-Perl-Releases-3.26-1.fc24 php-aws-sdk3-3.31.0-1.fc24 php-theseer-fDOMDocument-1.6.6-1.fc24 purple-matrix-0-3.20170530gitbe53d53.fc24 qmc2-0.187-1.fc24 yara-3.6.2-1.fc24 Details about builds: ================================================================================ copyq-3.0.3-1.fc24 (FEDORA-2017-440e615dc3) Advanced clipboard manager -------------------------------------------------------------------------------- Update Information: Upstream release rhbz#1467112 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1467112 - copyq-v3.0.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1467112 -------------------------------------------------------------------------------- ================================================================================ drupal7-ckeditor-1.18-1.fc24 (FEDORA-2017-2df1dc8400) Enables the usage of CKEditor (WYSIWYG) instead of plain text fields -------------------------------------------------------------------------------- Update Information: * [1.18](https://www.drupal.org/project/ckeditor/releases/7.x-1.18) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1465189 - drupal7-ckeditor-1.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=1465189 -------------------------------------------------------------------------------- ================================================================================ drupal7-file_entity-2.2-1.fc24 (FEDORA-2017-a16831a38d) File entity (fieldable files) -------------------------------------------------------------------------------- Update Information: * [2.2](https://www.drupal.org/project/file_entity/releases/7.x-2.2) * [2.1](https://www.drupal.org/project/file_entity/releases/7.x-2.1) * [2.0](https://www.drupal.org/project/file_entity/releases/7.x-2.0) * [2.0-beta4](https://www.drupal.org/project/file_entity/releases/7.x-2.0-beta4) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1458526 - drupal7-file_entity-2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1458526 -------------------------------------------------------------------------------- ================================================================================ drupal7-i18n-1.18-1.fc24 (FEDORA-2017-fd848ebf2b) Enables multilingual content -------------------------------------------------------------------------------- Update Information: * [1.18](https://www.drupal.org/project/i18n/releases/7.x-1.18) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1462473 - drupal7-i18n-1.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=1462473 -------------------------------------------------------------------------------- ================================================================================ drupal7-module_filter-2.1-1.fc24 (FEDORA-2017-512a1921f8) Module filter gives the ability to quickly find the module -------------------------------------------------------------------------------- Update Information: * [2.1](https://www.drupal.org/project/module_filter/releases/7.x-2.1) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1460405 - drupal7-module_filter-2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1460405 -------------------------------------------------------------------------------- ================================================================================ drupal7-views_slideshow-3.9-1.fc24 (FEDORA-2017-cd86030010) Views Slideshow can be used to create a slideshow of any content -------------------------------------------------------------------------------- Update Information: * [3.9](https://www.drupal.org/project/views_slideshow/releases/7.x-3.9) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1459867 - drupal7-views_slideshow-3.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1459867 -------------------------------------------------------------------------------- ================================================================================ gitolite3-3.6.7-1.fc24 (FEDORA-2017-52697050b6) Highly flexible server for git directory version tracker -------------------------------------------------------------------------------- Update Information: subdirectories, and allow the multi-hook driver to be placed in some other location of your choice allow simple test code to be embedded within the gitolite.conf file; see contrib/utils/testconf for how. (This goes on the client side, not on the server) allow syslog "facility" to be changed, from the default of 'local0' allow @group names in config values to be expanded; it is replaced with a space separated list of members -------------------------------------------------------------------------------- ================================================================================ hwdata-0.302-1.fc24 (FEDORA-2017-f1cfcaee24) Hardware identification and configuration data -------------------------------------------------------------------------------- Update Information: Updated pci, usb and vendor ids. -------------------------------------------------------------------------------- ================================================================================ javapackages-tools-4.6.0-16.fc24 (FEDORA-2017-ab2e980e61) Macros and scripts for Java packaging support -------------------------------------------------------------------------------- Update Information: Fix pom_remove_parent -------------------------------------------------------------------------------- References: [ 1 ] Bug #1467347 - /usr/bin/python3 /usr/share/java-utils/pom_editor.py pom_remove_parent causes traceback in F24 https://bugzilla.redhat.com/show_bug.cgi?id=1467347 -------------------------------------------------------------------------------- ================================================================================ jglobus-2.1.0-6.fc24 (FEDORA-2017-f9ef154817) Globus Java client libraries -------------------------------------------------------------------------------- Update Information: * Relax proxy validation to be RFC-3820 compliant (non-repudiation key) * Fix javadoc -------------------------------------------------------------------------------- ================================================================================ json-c-0.12.1-2.fc24 (FEDORA-2017-655837782e) JSON implementation in C -------------------------------------------------------------------------------- Update Information: * Add patch to replace obsolete autotools macro -------------------------------------------------------------------------------- ================================================================================ klavaro-3.03-1.fc24 (FEDORA-2017-a0a5b564cc) Typing tutor -------------------------------------------------------------------------------- Update Information: Update to 3.03. -------------------------------------------------------------------------------- ================================================================================ mftrace-1.2.19-1.fc24 (FEDORA-2017-33a81e009a) Utility for converting TeX bitmap fonts to Type 1 or TrueType fonts -------------------------------------------------------------------------------- Update Information: 1.2.19 -------------------------------------------------------------------------------- ================================================================================ netpbm-10.79.00-1.fc24 (FEDORA-2017-c9dcae4fa0) A library for handling different graphics file formats -------------------------------------------------------------------------------- Update Information: New version of netpbm is available (10.79.00). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466772 - netpbm-10.79.00 is available https://bugzilla.redhat.com/show_bug.cgi?id=1466772 -------------------------------------------------------------------------------- ================================================================================ perl-CPAN-Perl-Releases-3.26-1.fc24 (FEDORA-2017-eecd31a7aa) Mapping Perl releases on CPAN to the location of the tarballs -------------------------------------------------------------------------------- Update Information: Updated to the latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1467066 - perl-CPAN-Perl-Releases-3.26 is available https://bugzilla.redhat.com/show_bug.cgi?id=1467066 -------------------------------------------------------------------------------- ================================================================================ php-aws-sdk3-3.31.0-1.fc24 (FEDORA-2017-47d90b654d) Amazon Web Services framework for PHP -------------------------------------------------------------------------------- Update Information: ## 3.31.0 - 2017-06-30 * `Aws\MarketplaceCommerceAnalytics` - Documentation updates for AWS Marketplace Commerce Analytics. * `Aws\S3` - API Update for S3: Adding Object Tagging Header to MultipartUpload Initialization * `Aws\S3` - A new `params` option is available in the `MultipartUploader` and `MultipartCopy` classes for parameters that should be applied to all sub-commands of their upload functionality. This also improves functionality around passing `params` directly to `ObjectUploader` and `ObjectCopier`. A new `before_lookup` callback has been added to `ObjectCopier` for operating on the `HeadObject` command directly; `params` will be passed to HeadObject as well. Since these are changes to existing options, they may alter current functionality. ## 3.30.4 - 2017-06-29 * `Aws\CloudWatchEvents` - CloudWatch Events now allows different AWS accounts to share events with each other through a new resource called event bus. Event buses accept events from AWS services, other AWS accounts and PutEvents API calls. Currently all AWS accounts have one default event bus. To send events to another account, customers simply write rules to match the events of interest and attach an event bus in the receiving account as the target to the rule. The PutTargets API has been updated to allow adding cross account event buses as targets. In addition, we have released two new APIs - PutPermission and RemovePermission - that enables customers to add/remove permissions to their default event bus. * `Aws\GameLift` - Allow developers to download GameLift fleet creation logs to assist with debugging. * `Aws\SSM` - Adding Resource Data Sync support to SSM Inventory. New APIs: * CreateResourceDataSync - creates a new resource data sync configuration, * ListResourceDataSync - lists existing resource data sync configurations, * DeleteResourceDataSync - deletes an existing resource data sync configuration. ## 3.30.3 - 2017-06-27 * `Aws\Greengrass` - AWS Greengrass is now available in new regions. * `Aws\ServiceCatalog` - Proper tagging of resources is critical to post-launch operations such as billing, cost allocation, and resource management. By using Service Catalog's TagOption Library, administrators can define a library of re-usable TagOptions that conform to company standards, and associate these with Service Catalog portfolios and products. Learn how to move your current tags to the new library, create new TagOptions, and view and associate your library items with portfolios and products. Understand how to ensure that the right tags are created on products launched through Service Catalog and how to provide users with defined selectable tags. ## 3.30.2 - 2017-06-23 * `Aws\Lambda` - The Lambda Invoke API will now throw new exception InvalidRuntimeException (status code 502) for invokes with deprecated runtimes. ## 3.30.1 - 2017-06-22 * `Aws\CodePipeline` - A new API, ListPipelineExecutions, enables you to retrieve summary information about the most recent executions in a pipeline, including pipeline execution ID, status, start time, and last updated time. You can request information for a maximum of 100 executions. Pipeline execution data is available for the most recent 12 months of activity. * `Aws\DatabaseMigrationService` - Added tagging for DMS certificates. * `Aws\ElasticLoadBalancing` - Add retry error state to InstanceInService waiter for ElasticLoadBalancer * `Aws\Lambda` - Lambda is now available in the Canada (Central) region. * `Aws\Lightsail` - This release adds a new nextPageToken property to the result of the GetOperationsForResource API. Developers can now get the next set of items in a list by making subsequent calls to GetOperationsForResource API with the token from the previous call. This release also deprecates the nextPageCount property, which previously returned null (use the nextPageToken property instead). This release also deprecates the customImageName property on the CreateInstancesRequest class, which was previously ignored by the API. * `Aws\Route53` - This release reintroduces the HealthCheckInUse exception. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1464279 - php-aws-sdk3-3.31.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1464279 -------------------------------------------------------------------------------- ================================================================================ php-theseer-fDOMDocument-1.6.6-1.fc24 (FEDORA-2017-9e4c80e2d2) An Extension to PHP standard DOM -------------------------------------------------------------------------------- Update Information: **Version 1.6.6** * Merge PRs 33+34: Add support for parameter "asTextNode" to fDOMElement::appendElement(), DOMElement::appendElementNS() and fDOMElement::appendElementPrefix -------------------------------------------------------------------------------- ================================================================================ purple-matrix-0-3.20170530gitbe53d53.fc24 (FEDORA-2017-55d244ccd7) Matrix plugin for libpurple -------------------------------------------------------------------------------- Update Information: Initial release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1464225 - Review Request: purple-matrix - Matrix plugin for libpurple https://bugzilla.redhat.com/show_bug.cgi?id=1464225 -------------------------------------------------------------------------------- ================================================================================ qmc2-0.187-1.fc24 (FEDORA-2017-aedc36ddbc) M.A.M.E. Catalog / Launcher II -------------------------------------------------------------------------------- Update Information: An update to the latest qmc2 release: * http://qmc2.batcom- it.net/index.php/2017/07/02/qmc2-0-187-released/#more-2475 -------------------------------------------------------------------------------- ================================================================================ yara-3.6.2-1.fc24 (FEDORA-2017-47487b1223) Pattern matching Swiss knife for malware researchers -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-9304, CVE-2017-9465 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1459490 - CVE-2017-9465 yara: Buffer over-read in yr_arena_write_data function https://bugzilla.redhat.com/show_bug.cgi?id=1459490 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx