The firefox update from 50.0.0 to 50.0.2 [1] isn't being pushed to updates-testing or updates in F25 and F24 for more than 24 hours. This update is urgent because it fixes a 0-day remote code execution bug in SVG handling plus another critical bug in same-origin handling [2]. This bug has reached stable karma on 2016-12-01 11:09:59 (UTC) but still hasn't even landed in updates-testing. Is this update stuck in bodhi again as python-fuse did yesterday [3]? Then why has the F23 package landed in updates-testing, but F24 and F25 haven't?
[1] F25: https://bodhi.fedoraproject.org/updates/FEDORA-2016-2967f5f965 F24: https://bodhi.fedoraproject.org/updates/FEDORA-2016-5748592807 F23: https://bodhi.fedoraproject.org/updates/FEDORA-2016-d2cbcd602d [2] https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/#firefox50.0.2 [3] https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/HXCDLIOX7TYMASWLQMM6AH7IS7APJ2TQ/ _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org
