The following Fedora 24 Security updates need testing: Age URL 207 https://bodhi.fedoraproject.org/updates/FEDORA-2016-26f9817b08 squid-3.5.23-1.fc24 200 https://bodhi.fedoraproject.org/updates/FEDORA-2016-eaaa9c4a08 exim-4.87.1-1.fc24 163 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ece16ba6ba runc-1.0.0-5.rc2.gitc91b5be.fc24 99 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8330a48ca2 python-XStatic-jquery-ui-1.12.0.1-1.fc24 38 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5f1006afb1 libstaroffice-0.0.3-3.fc24 38 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a1f4c48c68 nodejs-brace-expansion-1.1.7-1.fc24 29 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bbae64fdc2 libmwaw-0.3.11-3.fc24 24 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4932c9b886 c-ares-1.13.0-1.fc24 18 https://bodhi.fedoraproject.org/updates/FEDORA-2017-37f68e3534 webkitgtk4-2.16.5-1.fc24 18 https://bodhi.fedoraproject.org/updates/FEDORA-2017-56cf7067e7 irssi-1.0.3-1.fc24 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5ade380ab2 php-5.6.31-1.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bd6aa662fc knot-2.4.5-1.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-21c0e9b25b qt5-qtwebkit-5.212.0-0.5.alpha2.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-405453f285 groovy18-1.8.9-28.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-081fc9ad77 knot-resolver-1.3.1-1.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-61689edaf4 spice-0.12.8-3.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9b752904ed sqlite-3.13.0-2.fc24 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-06c1422db8 evince-3.20.1-3.fc24 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5ce9d89b82 kernel-4.11.10-100.fc24 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-93868169a0 mingw-poppler-0.41.0-3.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-aa44293a53 nodejs-4.8.4-6.fc24 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1a8bebaab4 phpldapadmin-1.2.3-10.fc24 The following Fedora 24 Critical Path updates have yet to be approved: Age URL 18 https://bodhi.fedoraproject.org/updates/FEDORA-2017-37f68e3534 webkitgtk4-2.16.5-1.fc24 15 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6c2a7b1453 thunderbird-52.2.1-1.fc24 14 https://bodhi.fedoraproject.org/updates/FEDORA-2017-af79986d5f libsoup-2.54.1-2.fc24 9 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bc6b0dec8a gnome-keyring-3.20.1-1.fc24 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-94b2c5e120 pcre-8.41-1.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9b752904ed sqlite-3.13.0-2.fc24 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5a6f49afbd mariadb-10.1.25-1.fc24 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-de05b989aa net-snmp-5.7.3-14.fc24 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5ce9d89b82 kernel-4.11.10-100.fc24 The following builds have been pushed to Fedora 24 updates-testing cacti-1.1.13-1.fc24 copr-dist-git-0.32-1.fc24 copr-frontend-1.115-1.fc24 golang-github-cznic-lldb-1.1.0-1.fc24 libtaskotron-0.4.24-1.fc24 nodejs-4.8.4-6.fc24 phpldapadmin-1.2.3-10.fc24 Details about builds: ================================================================================ cacti-1.1.13-1.fc24 (FEDORA-2017-3aa3bd6d58) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information: - Update to 1.1.13 Release notes: https://www.cacti.net/release_notes.php?version=1.1.13 -------------------------------------------------------------------------------- ================================================================================ copr-dist-git-0.32-1.fc24 (FEDORA-2017-656c6abb47) Copr services for Dist Git server -------------------------------------------------------------------------------- Update Information: - srpms are now not being built on dist-git - MockSCM and Tito methods unified into single source ---- .spec method implemented ---- - import build task only once - remove unsupported --depth from git svn command - add dep on git-svn - better exception handling in MockScmProvider - fix 'git svn clone' and add exception handling for clone part in MockScm provider ---- - add --depth 1 for git clone in GitProvider - add missing 'which' for tito && git-annex builds - arbitrary dist-git branching support - use MockScmProvider without mock-scm to solve performance problems - add "powerpc64le" into list of archs to allow building for - Bug 1457888 - Mock SCM method fails to build a package - increase depth for git clone so that required tags that tito needs are downloaded ---- Fixes problem with fedpkg builds, see https://bugzilla.redhat.com/show_bug.cgi?id=1447102 -------------------------------------------------------------------------------- ================================================================================ copr-frontend-1.115-1.fc24 (FEDORA-2017-c10aba3ee8) Frontend for Copr -------------------------------------------------------------------------------- Update Information: Changes in tips and url of an uploaded file now being composed on frontend (before it was being composed on copr-dist-git). ---- .spec method implemented -------------------------------------------------------------------------------- ================================================================================ golang-github-cznic-lldb-1.1.0-1.fc24 (FEDORA-2017-1e6526c32d) Low-level database engine implementation in Go -------------------------------------------------------------------------------- Update Information: Initial package for fedora. This is one of the (indirect) dependencies of syncthing. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1431745 - Review Request: golang-github-cznic-lldb - Low-level database engine implementation in Go https://bugzilla.redhat.com/show_bug.cgi?id=1431745 -------------------------------------------------------------------------------- ================================================================================ libtaskotron-0.4.24-1.fc24 (FEDORA-2017-238d89b478) Taskotron Support Library -------------------------------------------------------------------------------- Update Information: - documentation improvements - DNF_REPO item type removed - default task artifact now points to artifacts root dir instead of task log - fix rpm deps handling via dnf on Fedora 26 (but only support package names and filepaths as deps in task formulas) - mark Fedora 26 as stable in yumrepoinfo - remove check for installed packages because it was problematic - do not use --cacheonly for dnf operations -------------------------------------------------------------------------------- ================================================================================ nodejs-4.8.4-6.fc24 (FEDORA-2017-aa44293a53) JavaScript runtime -------------------------------------------------------------------------------- Update Information: [Security update](https://nodejs.org/en/blog/vulnerability/july-2017-security- releases/) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1463137 - CVE-2017-1000381 nodejs: c-ares: NAPTR parser out of bounds access [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1463137 -------------------------------------------------------------------------------- ================================================================================ phpldapadmin-1.2.3-10.fc24 (FEDORA-2017-1a8bebaab4) Web-based tool for managing LDAP servers -------------------------------------------------------------------------------- Update Information: Fix CVE-2017-11107 (#1471112) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1471112 - CVE-2017-11107 phpldapadmin: XSS in htdocs/entry_chooser.php via form, element, rdn, or container parameter https://bugzilla.redhat.com/show_bug.cgi?id=1471112 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx