The following Fedora 23 Security updates need testing:
Age URL
113
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12739
python-kdcproxy-0.3.2-1.fc23
96
https://bodhi.fedoraproject.org/updates/FEDORA-2015-5eb2131441
conntrack-tools-1.4.2-9.fc23
67
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16240 nagios-4.0.8-1.fc23
54
https://bodhi.fedoraproject.org/updates/FEDORA-2015-dd52a54fa1
python-pymongo-3.0.3-1.fc23
54
https://bodhi.fedoraproject.org/updates/FEDORA-2015-c76c1c84cf
mod_nss-1.0.12-1.fc23
41
https://bodhi.fedoraproject.org/updates/FEDORA-2015-66439aa9e2
openstack-glance-2015.1.2-1.fc23
25
https://bodhi.fedoraproject.org/updates/FEDORA-2015-84a95e39d4
perl-HTML-Scrubber-0.15-1.fc23
25
https://bodhi.fedoraproject.org/updates/FEDORA-2015-81ded368fe
miniupnpc-1.9-6.fc23
16
https://bodhi.fedoraproject.org/updates/FEDORA-2015-3d17682c15 putty-0.66-1.fc23
11
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7852ea201b
potrace-1.13-2.fc23
8
https://bodhi.fedoraproject.org/updates/FEDORA-2015-28e56e52e7
seamonkey-2.39-1.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2015-8b5ea2dc53
rubygem-flexmock-2.0.2-1.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2015-4ad4998d00
libpng-1.6.17-3.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2015-1943310658
libpng15-1.5.22-3.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2015-5d1f935811
imapsync-1.644-2.fc23
6
https://bodhi.fedoraproject.org/updates/FEDORA-2015-13668fff74
mingw-libpng-1.6.19-1.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2015-79c1758468 abrt-2.7.1-1.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2015-e3ec4cbf8f lxdm-0.5.3-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2015-a8c8f60fbd
python-django-1.8.7-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2015-df0f324367 knot-2.0.2-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2015-0efcb5fbc5
php-symfony-2.7.7-2.fc23 php-twig-1.23.1-2.fc23
The following Fedora 23 Critical Path updates have yet to be approved:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2015-37706c9c35 mash-0.6.19-1.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2015-cf51e6b9dc
evolution-data-server-3.18.2-2.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2015-4ad4998d00
libpng-1.6.17-3.fc23
6
https://bodhi.fedoraproject.org/updates/FEDORA-2015-82bc055b3f
perl-PathTools-3.60-1.fc23
6
https://bodhi.fedoraproject.org/updates/FEDORA-2015-22dbc37884
perl-Socket-2.021-1.fc23
3
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9b1b3e9a5c
xkeyboard-config-2.16-1.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2ae867c402
NetworkManager-vpnc-1.0.8-1.fc23 NetworkManager-openconnect-1.0.8-1.fc23
NetworkManager-openvpn-1.0.8-1.fc23 NetworkManager-openswan-1.0.8-1.fc23
NetworkManager-fortisslvpn-1.0.8-1.fc23 NetworkManager-1.0.8-1.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2015-3e75abf2a3 krb5-1.14-2.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2015-498b25667e
perl-BSD-Resource-1.290.900-1.fc23
The following builds have been pushed to Fedora 23 updates-testing
apitrace-7.1-1.fc23
c2esp-2.7-7.fc23
dpm-dsi-1.9.5-13.fc23
foo2zjs-0.20151111-2.fc23
foo2zjs-0.20151111-3.fc23
foomatic-4.0.12-5.fc23
foomatic-db-4.0-49.20150819.fc23
gammu-1.36.6-3.fc23
globus-authz-3.11-1.fc23
globus-ftp-client-8.27-1.fc23
globus-gass-copy-9.18-1.fc23
globus-gridftp-server-9.3-1.fc23
globus-gridftp-server-control-4.0-1.fc23
globus-net-manager-0.13-1.fc23
globus-xio-5.11-1.fc23
golang-github-coreos-go-systemd-4-1.fc23
golang-github-godbus-dbus-3-0.1.gitc7fdd8b.fc23
golang-github-syndtr-gocapability-0-0.12.git2c00dae.fc23
golang-github-vishvananda-netlink-0-0.5.git1e2e08e.fc23
libmwaw-0.3.7-1.fc23
librvngabw-0.0.1-1.fc23
linsmith-0.99.30-1.fc23
meson-0.27.0-1.fc23
mozjs38-38.2.1-5.fc23
openchange-2.3-7.fc23
opus-1.1.1-1.fc23
pbuilder-0.221-1.fc23
pbuilder-0.221.1-1.fc23
perl-XML-LibXML-2.0121-6.fc23
perl-gettext-1.07-1.fc23
php-5.6.16-1.fc23
php-bartlett-PHP-CompatInfo-4.5.2-1.fc23
php-goutte-1.0.7-1.fc23
php-horde-Horde-Core-2.22.2-1.fc23
php-horde-Horde-Imap-Client-2.29.4-1.fc23
php-jsonlint-1.4.0-1.fc23
php-pear-PHP-CodeSniffer-2.4.0-1.fc23
php-pecl-amqp-1.6.1-1.fc23
php-pecl-mongo-1.6.12-1.fc23
php-symfony-2.7.7-2.fc23
php-twig-1.23.1-2.fc23
pngquant-2.5.2-1.fc23
pypy-4.0.0-3.fc23
python-joblib-0.9.3-2.fc23
python-libpagure-0.5-1.fc23
python-pytest-multihost-0.9-1.fc23
python-scikit-learn-0.17-1.fc23
radcli-1.2.3-2.fc23
splix-2.0.1-0.27.20130902svn.fc23
suricata-2.0.10-1.fc23
virt-manager-1.3.0-1.fc23
Details about builds:
================================================================================
apitrace-7.1-1.fc23 (FEDORA-2015-7599564235)
Tools for tracing OpenGL
--------------------------------------------------------------------------------
Update Information:
Update to version 7.1, see
https://github.com/apitrace/apitrace/releases/tag/7.1 for details.
--------------------------------------------------------------------------------
================================================================================
c2esp-2.7-7.fc23 (FEDORA-2015-3711998223)
CUPS driver for Kodak AiO printers
--------------------------------------------------------------------------------
Update Information:
This update fixes postscriptdriver tags in RPMs so the packages can be installed
automatically when corresponding printer is attached for the first time.
--------------------------------------------------------------------------------
================================================================================
dpm-dsi-1.9.5-13.fc23 (FEDORA-2015-1e58daa00c)
Disk Pool Manager (DPM) plugin for the Globus GridFTP server
--------------------------------------------------------------------------------
Update Information:
globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems
that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent
endless loop when auto-retrying failed pasv on other server (8.27) - Disable
mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests
globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused
code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth
error code globus-gridftp-server-9.3-1 - Add configuration to require
encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13
- Rebuilt for globus-gridftp-server 9.3
--------------------------------------------------------------------------------
================================================================================
foo2zjs-0.20151111-2.fc23 (FEDORA-2015-329c3c3c51)
Linux printer driver for ZjStream protocol
--------------------------------------------------------------------------------
Update Information:
Add subpackage dependency on parent package ---- Add foo2zjs and associated
drivers as new package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #970393 - Review Request: foo2zjs - Driver for printers of various wire
protocols
https://bugzilla.redhat.com/show_bug.cgi?id=970393
--------------------------------------------------------------------------------
================================================================================
foo2zjs-0.20151111-3.fc23 (FEDORA-2015-b6687a7b2d)
Linux printer driver for ZjStream protocol
--------------------------------------------------------------------------------
Update Information:
Add BuildRequires dependency on cups for driver autodetection
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #970393 - Review Request: foo2zjs - Driver for printers of various wire
protocols
https://bugzilla.redhat.com/show_bug.cgi?id=970393
[ 2 ] Bug #1285749 - Add BuildRequires: python3-cups, cups
https://bugzilla.redhat.com/show_bug.cgi?id=1285749
--------------------------------------------------------------------------------
================================================================================
foomatic-4.0.12-5.fc23 (FEDORA-2015-bc23c69657)
Tools for using the foomatic database of printers and printer drivers
--------------------------------------------------------------------------------
Update Information:
This update fixes postscriptdriver tags in RPMs so the packages can be installed
automatically when corresponding printer is attached for the first time.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1284093 - higher version "5.2.10-15.fc23" of package
gutenprint-cups.x86_64 is already installed
https://bugzilla.redhat.com/show_bug.cgi?id=1284093
--------------------------------------------------------------------------------
================================================================================
foomatic-db-4.0-49.20150819.fc23 (FEDORA-2015-bc23c69657)
Database of printers and printer drivers
--------------------------------------------------------------------------------
Update Information:
This update fixes postscriptdriver tags in RPMs so the packages can be installed
automatically when corresponding printer is attached for the first time.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1284093 - higher version "5.2.10-15.fc23" of package
gutenprint-cups.x86_64 is already installed
https://bugzilla.redhat.com/show_bug.cgi?id=1284093
--------------------------------------------------------------------------------
================================================================================
gammu-1.36.6-3.fc23 (FEDORA-2015-f573575dae)
Command Line utility to work with mobile phones
--------------------------------------------------------------------------------
Update Information:
Took some ideas from gammu.spec in upstream. ---- Update to gammu-1.36 with
indepent python-gammu package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1257375 - gammu-1.36.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1257375
--------------------------------------------------------------------------------
================================================================================
globus-authz-3.11-1.fc23 (FEDORA-2015-1e58daa00c)
Globus Toolkit - Globus authz library
--------------------------------------------------------------------------------
Update Information:
globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems
that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent
endless loop when auto-retrying failed pasv on other server (8.27) - Disable
mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests
globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused
code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth
error code globus-gridftp-server-9.3-1 - Add configuration to require
encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13
- Rebuilt for globus-gridftp-server 9.3
--------------------------------------------------------------------------------
================================================================================
globus-ftp-client-8.27-1.fc23 (FEDORA-2015-1e58daa00c)
Globus Toolkit - GridFTP Client Library
--------------------------------------------------------------------------------
Update Information:
globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems
that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent
endless loop when auto-retrying failed pasv on other server (8.27) - Disable
mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests
globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused
code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth
error code globus-gridftp-server-9.3-1 - Add configuration to require
encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13
- Rebuilt for globus-gridftp-server 9.3
--------------------------------------------------------------------------------
================================================================================
globus-gass-copy-9.18-1.fc23 (FEDORA-2015-1e58daa00c)
Globus Toolkit - Globus Gass Copy
--------------------------------------------------------------------------------
Update Information:
globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems
that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent
endless loop when auto-retrying failed pasv on other server (8.27) - Disable
mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests
globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused
code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth
error code globus-gridftp-server-9.3-1 - Add configuration to require
encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13
- Rebuilt for globus-gridftp-server 9.3
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-9.3-1.fc23 (FEDORA-2015-1e58daa00c)
Globus Toolkit - Globus GridFTP Server
--------------------------------------------------------------------------------
Update Information:
globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems
that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent
endless loop when auto-retrying failed pasv on other server (8.27) - Disable
mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests
globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused
code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth
error code globus-gridftp-server-9.3-1 - Add configuration to require
encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13
- Rebuilt for globus-gridftp-server 9.3
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-control-4.0-1.fc23 (FEDORA-2015-1e58daa00c)
Globus Toolkit - Globus GridFTP Server Library
--------------------------------------------------------------------------------
Update Information:
globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems
that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent
endless loop when auto-retrying failed pasv on other server (8.27) - Disable
mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests
globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused
code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth
error code globus-gridftp-server-9.3-1 - Add configuration to require
encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13
- Rebuilt for globus-gridftp-server 9.3
--------------------------------------------------------------------------------
================================================================================
globus-net-manager-0.13-1.fc23 (FEDORA-2015-1e58daa00c)
Globus Toolkit - Network Manager
--------------------------------------------------------------------------------
Update Information:
globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems
that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent
endless loop when auto-retrying failed pasv on other server (8.27) - Disable
mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests
globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused
code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth
error code globus-gridftp-server-9.3-1 - Add configuration to require
encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13
- Rebuilt for globus-gridftp-server 9.3
--------------------------------------------------------------------------------
================================================================================
globus-xio-5.11-1.fc23 (FEDORA-2015-1e58daa00c)
Globus Toolkit - Globus XIO Framework
--------------------------------------------------------------------------------
Update Information:
globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems
that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent
endless loop when auto-retrying failed pasv on other server (8.27) - Disable
mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests
globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused
code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth
error code globus-gridftp-server-9.3-1 - Add configuration to require
encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13
- Rebuilt for globus-gridftp-server 9.3
--------------------------------------------------------------------------------
================================================================================
golang-github-coreos-go-systemd-4-1.fc23 (FEDORA-2015-a0f97e0154)
Go bindings to systemd socket activation, journal and D-BUS APIs
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248722 - Tracker for golang-github-coreos-go-systemd
https://bugzilla.redhat.com/show_bug.cgi?id=1248722
--------------------------------------------------------------------------------
================================================================================
golang-github-godbus-dbus-3-0.1.gitc7fdd8b.fc23 (FEDORA-2015-0faf26cacf)
Go client bindings for D-Bus
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1249043 - Tracker for golang-github-godbus-dbus
https://bugzilla.redhat.com/show_bug.cgi?id=1249043
--------------------------------------------------------------------------------
================================================================================
golang-github-syndtr-gocapability-0-0.12.git2c00dae.fc23 (FEDORA-2015-238ada9664)
POSIX capability library for the Go programming language
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1254599 - Tracker for golang-github-syndtr-gocapability
https://bugzilla.redhat.com/show_bug.cgi?id=1254599
--------------------------------------------------------------------------------
================================================================================
golang-github-vishvananda-netlink-0-0.5.git1e2e08e.fc23 (FEDORA-2015-8aab9e6b12)
Simple netlink library for go
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248155 - Tracker for golang-github-vishvananda-netlink
https://bugzilla.redhat.com/show_bug.cgi?id=1248155
--------------------------------------------------------------------------------
================================================================================
libmwaw-0.3.7-1.fc23 (FEDORA-2015-50827c4595)
A library for import of many old Mac document formats
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
================================================================================
librvngabw-0.0.1-1.fc23 (FEDORA-2015-7141b5a80c)
An AbiWord document generator library
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
================================================================================
linsmith-0.99.30-1.fc23 (FEDORA-2015-cfe6737d7b)
A Smith charting program
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream version 0.99.30 fixes rhbz #1285579
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285579 - linsmith-0.99.30 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1285579
--------------------------------------------------------------------------------
================================================================================
meson-0.27.0-1.fc23 (FEDORA-2015-e005d027e3)
High productivity build system
--------------------------------------------------------------------------------
Update Information:
0.27.0
--------------------------------------------------------------------------------
================================================================================
mozjs38-38.2.1-5.fc23 (FEDORA-2015-7c2272a08a)
JavaScript interpreter and libraries
--------------------------------------------------------------------------------
Update Information:
- fix build on s390 (rhbz#1219542) ---- Makes two functions from
CharacterEncoding.cpp visible in shared library (needed by MongoDB) ----
Handle all Fedora 64-bit architectures. ---- New package mozjs-38
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1269539 - Review Request: mozjs38 - JavaScript interpreter and libraries
https://bugzilla.redhat.com/show_bug.cgi?id=1269539
--------------------------------------------------------------------------------
================================================================================
openchange-2.3-7.fc23 (FEDORA-2015-b273e4a581)
Provides access to Microsoft Exchange servers using native protocols
--------------------------------------------------------------------------------
Update Information:
Rebuild against newer samba.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1277023 - openchange-2.3-5.fc23.x86_64 requires
libsamba-debug-samba4.so(SAMBA_4.3.0RC4)(64bit)
https://bugzilla.redhat.com/show_bug.cgi?id=1277023
--------------------------------------------------------------------------------
================================================================================
opus-1.1.1-1.fc23 (FEDORA-2015-d4554daa88)
An audio codec for use in low-delay speech and audio communication
--------------------------------------------------------------------------------
Update Information:
Update 1.1.1 GA
--------------------------------------------------------------------------------
================================================================================
pbuilder-0.221-1.fc23 (FEDORA-2015-1a82418815)
Personal package builder for Debian packages
--------------------------------------------------------------------------------
Update Information:
Update to version 0.221, see
http://metadata.ftp-
master.debian.org/changelogs//main/p/pbuilder/pbuilder_0.221_changelog for
details. ---- Update to version 0.220, see
http://metadata.ftp-
master.debian.org/changelogs//main/p/pbuilder/pbuilder_0.220_changelog for
details.
--------------------------------------------------------------------------------
================================================================================
pbuilder-0.221.1-1.fc23 (FEDORA-2015-6fc6558caa)
Personal package builder for Debian packages
--------------------------------------------------------------------------------
Update Information:
Update to version 0.221.1, see
http://metadata.ftp-
master.debian.org/changelogs//main/p/pbuilder/pbuilder_0.221.1_changelog for
details.
--------------------------------------------------------------------------------
================================================================================
perl-XML-LibXML-2.0121-6.fc23 (FEDORA-2015-42fe6c3ee4)
Perl interface to the libxml2 library
--------------------------------------------------------------------------------
Update Information:
Rebuild against new libxml2
--------------------------------------------------------------------------------
================================================================================
perl-gettext-1.07-1.fc23 (FEDORA-2015-45c9e44659)
Interface to gettext family of functions
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285418 - Upgrade perl-gettext to 1.07
https://bugzilla.redhat.com/show_bug.cgi?id=1285418
--------------------------------------------------------------------------------
================================================================================
php-5.6.16-1.fc23 (FEDORA-2015-b6106691ab)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
26 Nov 2015, **PHP 5.6.16** **Core:** * Fixed bug #70828 (php-fpm 5.6 with
opcache crashes when referencing a non-existent constant). (Laruence) * Fixed
bug #70748 (Segfault in ini_lex () at Zend/zend_ini_scanner.l). (Laruence)
**Mysqlnd:** * Fixed bug #68344 (MySQLi does not provide way to disable peer
certificate validation) by introducing MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT
connection flag. (Andrey) **PDO_DBlib:** * Fixed bug #69757 (Segmentation
fault on nextRowset). (miracle at rpz dot name) **SOAP:** * Fixed bug #70875
(Segmentation fault if wsdl has no targetNamespace attribute). (Matteo)
**SPL:** * Fixed bug #70852 (Segfault getting NULL offset of an ArrayObject).
(Reeze Xia)
--------------------------------------------------------------------------------
================================================================================
php-bartlett-PHP-CompatInfo-4.5.2-1.fc23 (FEDORA-2015-f9ca00be77)
Find out version and the extensions required for a piece of code to run
--------------------------------------------------------------------------------
Update Information:
Refresh the reference DB
--------------------------------------------------------------------------------
================================================================================
php-goutte-1.0.7-1.fc23 (FEDORA-2015-28a68268ea)
A simple PHP web scraper
--------------------------------------------------------------------------------
Update Information:
Updated to 1.0.7
https://github.com/FriendsOfPHP/Goutte/compare/v1.0.6...v1.0.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1100719 - php-goutte-v3.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1100719
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.22.2-1.fc23 (FEDORA-2015-14e03c502c)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.22.2** * [mjr] Small logging improvements for ActiveSync. *
[mjr] Match various session parameters in the NULL driver. **Horde_Imap_Client
2.29.4** * [jan] Fix parsing IMAP responses with tilde characters.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Imap-Client-2.29.4-1.fc23 (FEDORA-2015-14e03c502c)
Horde IMAP abstraction interface
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.22.2** * [mjr] Small logging improvements for ActiveSync. *
[mjr] Match various session parameters in the NULL driver. **Horde_Imap_Client
2.29.4** * [jan] Fix parsing IMAP responses with tilde characters.
--------------------------------------------------------------------------------
================================================================================
php-jsonlint-1.4.0-1.fc23 (FEDORA-2015-c03f68e8fb)
JSON Lint for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.4.0 (2015-11-21)** * Added a DuplicateKeyException allowing for
more specific error detection and handling
--------------------------------------------------------------------------------
================================================================================
php-pear-PHP-CodeSniffer-2.4.0-1.fc23 (FEDORA-2015-6f4d71f493)
PHP coding standards enforcement tool
--------------------------------------------------------------------------------
Update Information:
Upstream Changelog, **version 2.4.0** - Added support for PHP 7 anonymous
classes - Anonymous classes are now tokenized as T_ANON_CLASS and ignored by
normal class sniffs - Added support for PHP 7 function return type declarations
- Return types are now tokenized as T_RETURN_TYPE - Fixed tokenizing of the XOR
operator, which was incorrectly identified as a power operator (bug #765) - The
T_POWER token has been removed and replaced by the T_BITWISE_XOR token - The
PHP-supplied T_POW token has been replicated for PHP versions before 5.6 -
Traits are now tokenized in PHP versions before 5.4 to make testing easier -
Improved regular expression detection in JS files - PEAR
FunctionCallSignatureSniff now properly detects indents in more mixed HTML/PHP
code blocks - Full report now properly indents lines when newlines are found
inside error messages - Generating documentation without specifying a standard
now uses the default standard instead. Thanks to Ken Guest for the patch -
Generic InlineControlStructureSniff now supports braceless do/while loops in JS.
Thanks to Pieter Frenssen for the patch - Added more guard code for function
declarations with syntax errors. Thanks to Yun Young-jin for the patch - Added
more guard code for foreach declarations with syntax errors. Thanks to Johan de
Ruijter for the patch - Added more guard code for class declarations with syntax
errors - Squiz ArrayDeclarationSniff now has guard code for arrays with syntax
errors - Generic InlineControlStructureSniff now correctly fixes ELSEIF
statements - Fixed bug #601 : Expected type hint int[]; found array in Squiz
FunctionCommentSniff. Thanks to Scato Eggen for the patch - Fixed bug #625 :
Consider working around T_HASHBANG in HHVM 3.5.x and 3.6.x. Thanks to Kunal
Mehta for the patch - Fixed bug #692 : Comment tokenizer can break when using
mbstring function overloading - Fixed bug #694 : Long sniff codes can cause PHP
warnings in source report when showing error codes - Fixed bug #698 :
PSR2.Methods.FunctionCallSignature.Indent forces exact indent of ternary
operator parameters - Fixed bug #704 : ScopeIndent can fail when an opening
parenthesis is on a line by itself - Fixed bug #707 : Squiz MethodScopeSniff
doesn't handle nested functions - Fixed bug #709 :
Squiz.Sniffs.Whitespace.ScopeClosingBraceSniff marking indented endif in mixed
inline HTML blocks - Fixed bug #711 : Sniffing from STDIN shows
Generic.Files.LowercasedFilename.NotFound error - Fixed bug #714 : Fixes
suppression of errors using docblocks. Thanks to Andrzej Karmazyn for the patch
- Fixed bug #716 : JSON report is invalid when messages contain newlines or
tabs. Thanks to Pieter Frenssen for the patch - Fixed bug #723 : ScopeIndent can
fail when multiple array closers are on the same line - Fixed bug #730 :
ScopeIndent can fail when a short array opening square bracket is on a line by
itself - Fixed bug #732 : PHP Notice if @package name is made up of all invalid
characters. Adds new error code PEAR.Commenting.FileComment.InvalidPackageValue
- Fixed bug #748 : Auto fix for Squiz.Commenting.BlockComment.WrongEnd is
incorrect. Thanks to J.D. Grimes for the patch - Fixed bug #753 : PSR2 standard
shouldn't require space after USE block when next code is a closing tag - Fixed
bug #768 : PEAR FunctionCallSignature sniff forbids comments after opening
parenthesis of a multiline call - Fixed bug #769 : Incorrect detection of
variable reference operator when used with short array syntax. Thanks to Klaus
Purer for the patch - Fixed bug #772 : Syntax error when using PHPCBF on
alternative style foreach loops - Fixed bug #773 : Syntax error when stripping
trailing PHP close tag and previous statement has no semicolon - Fixed bug #778
: PHPCBF creates invalid PHP for inline FOREACH containing multiple control
structures - Fixed bug #781 : Incorrect checking for PHP7 return types on multi-
line function declartions - Fixed bug #782 : Conditional function declarations
cause fixing conflicts in Squiz standard.
Squiz.ControlStructures.ControlSignature no longer enforces a single newline
after open brace. Squiz.WhiteSpace.ControlStructureSpacing can be used to checl
spacing at the start/end of control structures
--------------------------------------------------------------------------------
================================================================================
php-pecl-amqp-1.6.1-1.fc23 (FEDORA-2015-bae66365b1)
Communicate with any AMQP compliant server
--------------------------------------------------------------------------------
Update Information:
**1.6.1 Release:** * Fix invalid amqp_table_t arguments population and
freeing * Fix not properly deleted connection resource
--------------------------------------------------------------------------------
================================================================================
php-pecl-mongo-1.6.12-1.fc23 (FEDORA-2015-4d5cc3b040)
PHP MongoDB database driver
--------------------------------------------------------------------------------
Update Information:
**Version 1.6.12** * [PHP-1494] - We don't allocate enough space for the
hash buffer
--------------------------------------------------------------------------------
================================================================================
php-symfony-2.7.7-2.fc23 (FEDORA-2015-0efcb5fbc5)
PHP framework for web projects
--------------------------------------------------------------------------------
Update Information:
**Twig 1.23.1** (2015-11-05) * fixed some exception messages which triggered
PHP warnings * fixed BC on Twig_Test_NodeTestCase **Twig 1.23.0** (2015-10-29)
* deprecated the possibility to override an extension by registering another one
with the same name * deprecated Twig_ExtensionInterface::getGlobals() (added
Twig_Extension_GlobalsInterface for BC) * deprecated
Twig_ExtensionInterface::initRuntime() (added
Twig_Extension_InitRuntimeInterface for BC) * deprecated
Twig_Environment::computeAlternatives() **Symfony 2.7.7** (2015-11-23) *
security #16631 CVE-2015-8124: Session Fixation in the "Remember Me" Login
Feature (xabbuh) * security #16630 CVE-2015-8125: Potential Remote Timing
Attack Vulnerability in Security Remember-Me Service (xabbuh) * bug #16588
Sent out a status text for unknown HTTP headers. (dawehner) * bug #16295
[DependencyInjection] Unescape parameters for all types of injection (Nicofuma)
* bug #16574 [Process] Fix PhpProcess with phpdbg runtime (nicolas-grekas) *
bug #16578 [Console] Fix bug in windows detection (kbond) * bug #16546
[Serializer] ObjectNormalizer: don't serialize static methods and props
(dunglas) * bug #16352 Fix the server variables in the router_*.php files
(leofeyer) * bug #16537 [Validator] Allow an empty path with a non empty
fragment or a query (jakzal) * bug #16528 [Translation] Add support for
Armenian pluralization. (marcosdsanchez) * bug #16510 [Process] fix Proccess
run with pts enabled (ewgRa) * bug #16292 fix race condition at mkdir
(#16258) (ewgRa) * bug #15945 [Form] trigger deprecation warning when using
empty_value (xabbuh) * bug #16384 [FrameworkBundle] JsonDescriptor - encode
container params only once (xabbuh) * bug #16480 [VarDumper] Fix PHP7 type-
hints compat (nicolas-grekas) * bug #16463 [PropertyAccess] Port of the
performance optimization from 2.3 (dunglas) * bug #16462 [PropertyAccess] Fix
dynamic property accessing. (dunglas) * bug #16454 [Serializer]
GetSetNormalizer shouldn't set/get static methods (boekkooi) * bug #16453
[Serializer] PropertyNormalizer shouldn't set static properties (boekkooi) *
bug #16471 [VarDumper] Fix casting for ReflectionParameter (nicolas-grekas) *
bug #16294 [PropertyAccess] Major performance improvement (dunglas) * bug
#16331 fixed Twig deprecation notices (fabpot) * bug #16306 [DoctrineBridge]
Fix issue which prevent the profiler to explain a query (Baachi) * bug #16359
Use mb_detect_encoding with $strict = true (nicolas-grekas) * bug #16144
[Security] don't allow to install the split Security packages (xabbuh)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285263 - CVE-2015-8124 CVE-2015-8125 php-symfony: Session fixation and
remote timing attack vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1285263
--------------------------------------------------------------------------------
================================================================================
php-twig-1.23.1-2.fc23 (FEDORA-2015-0efcb5fbc5)
The flexible, fast, and secure template engine for PHP
--------------------------------------------------------------------------------
Update Information:
**Twig 1.23.1** (2015-11-05) * fixed some exception messages which triggered
PHP warnings * fixed BC on Twig_Test_NodeTestCase **Twig 1.23.0** (2015-10-29)
* deprecated the possibility to override an extension by registering another one
with the same name * deprecated Twig_ExtensionInterface::getGlobals() (added
Twig_Extension_GlobalsInterface for BC) * deprecated
Twig_ExtensionInterface::initRuntime() (added
Twig_Extension_InitRuntimeInterface for BC) * deprecated
Twig_Environment::computeAlternatives() **Symfony 2.7.7** (2015-11-23) *
security #16631 CVE-2015-8124: Session Fixation in the "Remember Me" Login
Feature (xabbuh) * security #16630 CVE-2015-8125: Potential Remote Timing
Attack Vulnerability in Security Remember-Me Service (xabbuh) * bug #16588
Sent out a status text for unknown HTTP headers. (dawehner) * bug #16295
[DependencyInjection] Unescape parameters for all types of injection (Nicofuma)
* bug #16574 [Process] Fix PhpProcess with phpdbg runtime (nicolas-grekas) *
bug #16578 [Console] Fix bug in windows detection (kbond) * bug #16546
[Serializer] ObjectNormalizer: don't serialize static methods and props
(dunglas) * bug #16352 Fix the server variables in the router_*.php files
(leofeyer) * bug #16537 [Validator] Allow an empty path with a non empty
fragment or a query (jakzal) * bug #16528 [Translation] Add support for
Armenian pluralization. (marcosdsanchez) * bug #16510 [Process] fix Proccess
run with pts enabled (ewgRa) * bug #16292 fix race condition at mkdir
(#16258) (ewgRa) * bug #15945 [Form] trigger deprecation warning when using
empty_value (xabbuh) * bug #16384 [FrameworkBundle] JsonDescriptor - encode
container params only once (xabbuh) * bug #16480 [VarDumper] Fix PHP7 type-
hints compat (nicolas-grekas) * bug #16463 [PropertyAccess] Port of the
performance optimization from 2.3 (dunglas) * bug #16462 [PropertyAccess] Fix
dynamic property accessing. (dunglas) * bug #16454 [Serializer]
GetSetNormalizer shouldn't set/get static methods (boekkooi) * bug #16453
[Serializer] PropertyNormalizer shouldn't set static properties (boekkooi) *
bug #16471 [VarDumper] Fix casting for ReflectionParameter (nicolas-grekas) *
bug #16294 [PropertyAccess] Major performance improvement (dunglas) * bug
#16331 fixed Twig deprecation notices (fabpot) * bug #16306 [DoctrineBridge]
Fix issue which prevent the profiler to explain a query (Baachi) * bug #16359
Use mb_detect_encoding with $strict = true (nicolas-grekas) * bug #16144
[Security] don't allow to install the split Security packages (xabbuh)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285263 - CVE-2015-8124 CVE-2015-8125 php-symfony: Session fixation and
remote timing attack vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1285263
--------------------------------------------------------------------------------
================================================================================
pngquant-2.5.2-1.fc23 (FEDORA-2015-417a2e8149)
PNG quantization tool for reducing image file size
--------------------------------------------------------------------------------
Update Information:
Update to 2.5.2 (#1285589)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285589 - pngquant-2.5.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1285589
--------------------------------------------------------------------------------
================================================================================
pypy-4.0.0-3.fc23 (FEDORA-2015-ca4272870b)
Python implementation with a Just-In-Time compiler
--------------------------------------------------------------------------------
Update Information:
Add support for Power 64 platforms ---- Update to 4.0.0
--------------------------------------------------------------------------------
================================================================================
python-joblib-0.9.3-2.fc23 (FEDORA-2015-93f2497cbb)
Lightweight pipelining: using Python functions as pipeline jobs
--------------------------------------------------------------------------------
Update Information:
* joblib 0.9.3 * scikit-learn 0.17 along with py3 packages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1239857 - python-scikit-learn: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1239857
[ 2 ] Bug #1285054 - python-scikit-learn 0.17
https://bugzilla.redhat.com/show_bug.cgi?id=1285054
[ 3 ] Bug #1285053 - python-scikit-learn0.17
https://bugzilla.redhat.com/show_bug.cgi?id=1285053
--------------------------------------------------------------------------------
================================================================================
python-libpagure-0.5-1.fc23 (FEDORA-2015-78a26442ab)
A Python library for Pagure APIs
--------------------------------------------------------------------------------
Update Information:
Update the source to 0.5 ---- Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1281739 - Review Request: python-libpagure - A Python library for Pagure
APIs
https://bugzilla.redhat.com/show_bug.cgi?id=1281739
--------------------------------------------------------------------------------
================================================================================
python-pytest-multihost-0.9-1.fc23 (FEDORA-2015-f8ecd33065)
Utility for writing multi-host tests for pytest
--------------------------------------------------------------------------------
Update Information:
Update to upstream 0.9
--------------------------------------------------------------------------------
================================================================================
python-scikit-learn-0.17-1.fc23 (FEDORA-2015-93f2497cbb)
Machine learning in Python
--------------------------------------------------------------------------------
Update Information:
* joblib 0.9.3 * scikit-learn 0.17 along with py3 packages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1239857 - python-scikit-learn: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1239857
[ 2 ] Bug #1285054 - python-scikit-learn 0.17
https://bugzilla.redhat.com/show_bug.cgi?id=1285054
[ 3 ] Bug #1285053 - python-scikit-learn0.17
https://bugzilla.redhat.com/show_bug.cgi?id=1285053
--------------------------------------------------------------------------------
================================================================================
radcli-1.2.3-2.fc23 (FEDORA-2015-d7bf43de7f)
RADIUS protocol client library
--------------------------------------------------------------------------------
Update Information:
Fixed overflow in rc_ipaddr_local()
--------------------------------------------------------------------------------
================================================================================
splix-2.0.1-0.27.20130902svn.fc23 (FEDORA-2015-af0c05ec3f)
Driver for QPDL/SPL2 printers (Samsung and several Xerox printers)
--------------------------------------------------------------------------------
Update Information:
This update fixes postscriptdriver tags in RPMs so the packages can be installed
automatically when corresponding printer is attached for the first time.
--------------------------------------------------------------------------------
================================================================================
suricata-2.0.10-1.fc23 (FEDORA-2015-3cdd7cefa4)
Intrusion Detection System
--------------------------------------------------------------------------------
Update Information:
Fixes malformed DNS packet crashing Suricata. ---- suricata-2.0.9-1.fc23 - New
upstream bug fix release One DoS bug and several detection bugs were fixed.
--------------------------------------------------------------------------------
================================================================================
virt-manager-1.3.0-1.fc23 (FEDORA-2015-7dfc5692ef)
Desktop tool for managing virtual machines via libvirt
--------------------------------------------------------------------------------
Update Information:
* Rebased to version 1.3.0 * Error when trying to modify existing 9p share (bz
#1257565) * virt-manager tries to create vmport device on non-x86 backends (bz
#1259998) * Details/Virtual networks: Allow manually specifying a bridge for
qemu:///session (bz #1212443) * [RFE] Improve Solaris 10 x86-64 support in virt-
manager (bz #1262093) * No system tray icon in Cinnamon session (bz #1257949) *
virt-install does not remove orphaned images on failure (bz #1212617) * virt-
manager does not warn if it cannot find the network (bz #1212616) * Storage
volume manager looses focus when a volume is deleted (bz #1279861) * Storage
volume manager does not update free space (bz #1279940) * Reboot/Shutdown
buttons does not work on aarch64 (bz #1212826)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1212617 - virt-install does not remove orphaned images on failure
https://bugzilla.redhat.com/show_bug.cgi?id=1212617
[ 2 ] Bug #1212616 - virt-manager does not warn if it cannot find the network
https://bugzilla.redhat.com/show_bug.cgi?id=1212616
[ 3 ] Bug #1279861 - Storage volume manager looses focus when a volume is deleted
https://bugzilla.redhat.com/show_bug.cgi?id=1279861
[ 4 ] Bug #1279940 - Storage volume manager does not update free space
https://bugzilla.redhat.com/show_bug.cgi?id=1279940
[ 5 ] Bug #1212826 - Reboot/Shutdown buttons does not work on aarch64
https://bugzilla.redhat.com/show_bug.cgi?id=1212826
--------------------------------------------------------------------------------