The following Fedora 23 Security updates need testing:
Age URL
381
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16240 nagios-4.0.8-1.fc23
339
https://bodhi.fedoraproject.org/updates/FEDORA-2015-81ded368fe
miniupnpc-1.9-6.fc23
312
https://bodhi.fedoraproject.org/updates/FEDORA-2015-27392b3324
jbig2dec-0.12-2.fc23
262
https://bodhi.fedoraproject.org/updates/FEDORA-2015-dd52a54fa1
python-pymongo-3.0.3-1.fc23
262
https://bodhi.fedoraproject.org/updates/FEDORA-2015-06a7c972e8
thttpd-2.25b-37.fc23
227
https://bodhi.fedoraproject.org/updates/FEDORA-2016-637618fcd4
mingw-nsis-2.50-1.fc23
103
https://bodhi.fedoraproject.org/updates/FEDORA-2016-fcccb0a547
nodejs-0.10.46-1.fc23
81
https://bodhi.fedoraproject.org/updates/FEDORA-2016-70b5173c05
ecryptfs-utils-111-1.fc23
68
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d79ade826 flex-2.6.0-2.fc23
58
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c2ec9c716e redis-3.2.3-1.fc23
51
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d6288f555c
libarchive-3.2.1-3.fc23 python-libarchive-c-2.5-1.fc23
49
https://bodhi.fedoraproject.org/updates/FEDORA-2016-47dc2b203f
firewalld-0.4.3.3-1.fc23
34
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b3a6435b14
dhcpcd-6.11.3-1.fc23
26
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ed1c402851
thunderbird-45.3.0-1.fc23
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-97454404fe
openssl-1.0.2j-1.fc23
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0551065fe0
irssi-0.8.20-2.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-77e5105570
php-ZendFramework-1.12.20-1.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3795497354
python-django-1.8.15-1.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ad1871cf02
openjpeg2-2.1.2-1.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-fe55f449e0
mingw-openjpeg2-2.1.2-1.fc23
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3af8b344f1
bind-9.10.4-2.P3.fc23
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cbef6c8619
bind99-9.9.9-2.P3.fc23
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1b9d24c2b6
zathura-pdf-mupdf-0.3.0-2.fc23 mujs-0-5.20160921git5c337af.fc23
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7aa3c89e7b
c-ares-1.12.0-1.fc23
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-66d9389548
mingw-c-ares-1.12.0-1.fc23
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f15168439d bash-4.3.42-5.fc23
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-bb007a4097
openssh-7.2p2-6.fc23
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8e4e733bef
systemd-222-17.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c0f589bd32
perl-DBD-MySQL-4.033-3.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2e50862950
chromium-53.0.2785.143-1.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-94bdf707d4
ghostscript-9.16-5.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5cbcad7a9a
freeimage-3.17.0-7.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cca868c95f
mingw-freeimage-3.17.0-4.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a29a0e8250
python-pillow-3.0.0-6.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1649cc31e0
ca-certificates-2016.2.10-1.0.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-689f240960 xen-4.5.5-2.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0e7694c456
libXfixes-5.0.3-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d045c2c7b3
libXrandr-1.5.1-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7abdfc5a52 libXi-1.7.7-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b26b497381
libXtst-1.2.3-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-49d560da23
libXrender-0.9.10-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d286ffb801
libXvMC-1.0.10-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3b41a9eaa8
libXv-1.0.11-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f8fd3891f8
perl-Image-Info-1.38-6.fc23
The following Fedora 23 Critical Path updates have yet to be approved:
Age URL
78
https://bodhi.fedoraproject.org/updates/FEDORA-2016-98a7a1b6e0 abrt-2.8.0-6.fc23
libreport-2.6.4-3.fc23
51
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d6288f555c
libarchive-3.2.1-3.fc23 python-libarchive-c-2.5-1.fc23
26
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ed1c402851
thunderbird-45.3.0-1.fc23
12
https://bodhi.fedoraproject.org/updates/FEDORA-2016-79072fd70e
python-virtkey-0.63.0-1.fc23
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ab35400bb1
poppler-0.34.0-4.fc23
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7aef55393a
polkit-qt-0.112.0-8.fc23
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-97454404fe
openssl-1.0.2j-1.fc23
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6a3e81a5be
linux-firmware-20160923-68.git42ad5367.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cf2b06f96f
libass-0.13.3-1.fc23
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3af8b344f1
bind-9.10.4-2.P3.fc23
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d26923757a
koji-1.10.1-13.fc23
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-bb007a4097
openssh-7.2p2-6.fc23
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f15168439d bash-4.3.42-5.fc23
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9d283ed227
python-2.7.11-11.fc23
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7b1087bfe4 nss-3.27.0-1.1.fc23
nss-softokn-3.27.0-1.0.fc23 nss-util-3.27.0-1.0.fc23 nspr-4.13.0-1.fc23
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8e4e733bef
systemd-222-17.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-fdf15e65fd
hwdata-0.293-1.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c0f589bd32
perl-DBD-MySQL-4.033-3.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3646279587
libgdata-0.17.5-2.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3b41a9eaa8
libXv-1.0.11-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d286ffb801
libXvMC-1.0.10-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-49d560da23
libXrender-0.9.10-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b26b497381
libXtst-1.2.3-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7abdfc5a52 libXi-1.7.7-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d045c2c7b3
libXrandr-1.5.1-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0e7694c456
libXfixes-5.0.3-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1649cc31e0
ca-certificates-2016.2.10-1.0.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-59b840dd69
kernel-4.7.6-100.fc23
The following builds have been pushed to Fedora 23 updates-testing
dpm-xrootd-3.6.1-2.fc23
emacs-common-ddskk-16.1-1.fc23
esmtp-1.0-16.fc23
fldigi-3.23.14-1.fc23
kde-connect-1.0.1-1.fc23.1
libXfixes-5.0.3-1.fc23
libXi-1.7.7-1.fc23
libXrandr-1.5.1-1.fc23
libXrender-0.9.10-1.fc23
libXtst-1.2.3-1.fc23
libXv-1.0.11-1.fc23
libXvMC-1.0.10-1.fc23
libgdata-0.17.5-2.fc23
libmediainfo-0.7.89-1.fc23
mediainfo-0.7.89-1.fc23
perl-Image-Info-1.38-6.fc23
php-webmozart-assert-1.1.0-1.fc23
php-webmozart-path-util-2.3.0-1.fc23
python-asciitree-0.3.3-1.fc23
wxGTK3-3.0.2-26.fc23
xrootd-4.4.1-1.fc23
Details about builds:
================================================================================
dpm-xrootd-3.6.1-2.fc23 (FEDORA-2016-a96a0ce39b)
XROOT interface to the Disk Pool Manager (DPM)
--------------------------------------------------------------------------------
Update Information:
- fix wrong dependency to dmlite ---- * new upstream release
--------------------------------------------------------------------------------
================================================================================
emacs-common-ddskk-16.1-1.fc23 (FEDORA-2016-565d8116ff)
Daredevil SKK - Simple Kana to Kanji conversion program for Emacs
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381020 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1381020
--------------------------------------------------------------------------------
================================================================================
esmtp-1.0-16.fc23 (FEDORA-2016-8991b160df)
User configurable send-only Mail Transfer Agent
--------------------------------------------------------------------------------
Update Information:
Fixed patch esmtp-1.0-cron-fix.patch from the last release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1303305 - errors from esmtp in /var/log/messages every time my cron job runs
https://bugzilla.redhat.com/show_bug.cgi?id=1303305
--------------------------------------------------------------------------------
================================================================================
fldigi-3.23.14-1.fc23 (FEDORA-2016-253c81536c)
Digital modem program for Linux
--------------------------------------------------------------------------------
Update Information:
Version 3.23.14 - Changes since 3.23.13 Documentation update trx inhibit
* Inhibit trx loop rx decoding when file select dialog is open. -
Native file select dialogs block while waiting for user to make
selection Log Reports * Add missing fields * Remove debugging stdout
lines N3FJP application interface * Create tcpip interface to various
N3FJP log and contest applications Field Day * Added SECTION, CLASS
support for tracking field day exchanges * Added full support for accessing
the tcltk field day server application fdserver.tcl. - includes new
dialog "fd_viewer" that provides a snapshot view of the state of the
contest - add record to fdserver - automatically query fdserver for
duplicates based on band, mode and call PSK IMD Emulator * Remove
TX filtering unless testing for ALC emulation Wave file * Changed wave
file read/write from monaural to stereo and/or manaural * Changed right
channel PTT signal generator * Changed CW right channel QSK generator
UTF8 file access * Change all occurrences of open(...) to fl_open(...) *
Change all occurrences of fopen(...) to fl_fopen(...) * This should allow
fldigi to reside in foreign language UTF8 directory structures logbook merge
* Fix merger of foreign logbook adif record which does not contain a field
for QSO_DATE_OFF. Initialize Macros * fixed initial display of macro file
read NOAA wx access * NOAA changed access url to -
http://tgftp.nws.noaa.gov/data/observations/metar/decoded Revert "logbook
read" This reverts commit f02228e913a36a3930df2217b543802c60356fae.
--------------------------------------------------------------------------------
================================================================================
kde-connect-1.0.1-1.fc23.1 (FEDORA-2016-b44144a955)
KDE Connect client for communication with smartphones
--------------------------------------------------------------------------------
Update Information:
Fix issue of incompatible libraries.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381786 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1381786
[ 2 ] Bug #1374869 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1374869
--------------------------------------------------------------------------------
================================================================================
libXfixes-5.0.3-1.fc23 (FEDORA-2016-0e7694c456)
X Fixes library
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-7944
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381865 - CVE-2016-7944 libXfixes: Insufficient validation of server
responses results in Integer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1381865
--------------------------------------------------------------------------------
================================================================================
libXi-1.7.7-1.fc23 (FEDORA-2016-7abdfc5a52)
X.Org X11 libXi runtime library
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-7945, CVE-2016-7946
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381868 - CVE-2016-7945 libXi: Insufficient validation of server responses
result in Integer overflows
https://bugzilla.redhat.com/show_bug.cgi?id=1381868
[ 2 ] Bug #1381869 - CVE-2016-7946 libXi: Insufficient validation of server responses
result in various data mishandlings
https://bugzilla.redhat.com/show_bug.cgi?id=1381869
--------------------------------------------------------------------------------
================================================================================
libXrandr-1.5.1-1.fc23 (FEDORA-2016-d045c2c7b3)
X.Org X11 libXrandr runtime library
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-7947, CVE-2016-7948
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381872 - CVE-2016-7947 libXrandr: Insufficient validation of server
responses result in Integer overflows
https://bugzilla.redhat.com/show_bug.cgi?id=1381872
[ 2 ] Bug #1381873 - CVE-2016-7948 libXrandr: Insufficient validation of server
responses result in various data mishandlings
https://bugzilla.redhat.com/show_bug.cgi?id=1381873
--------------------------------------------------------------------------------
================================================================================
libXrender-0.9.10-1.fc23 (FEDORA-2016-49d560da23)
X.Org X11 libXrender runtime library
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-7949, CVE-2016-7950
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381927 - CVE-2016-7949 libXrender: Insufficient validation of server
responses results in overflow of previously reserved memory
https://bugzilla.redhat.com/show_bug.cgi?id=1381927
[ 2 ] Bug #1381928 - CVE-2016-7950 libXrender: Insufficient validation of server
responses results out-of-bounds write in XRenderQueryFilters
https://bugzilla.redhat.com/show_bug.cgi?id=1381928
--------------------------------------------------------------------------------
================================================================================
libXtst-1.2.3-1.fc23 (FEDORA-2016-b26b497381)
X.Org X11 libXtst runtime library
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-7951, CVE-2016-7952
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381919 - CVE-2016-7951 libXtst: Insufficient validation of server responses
result in Integer overflows
https://bugzilla.redhat.com/show_bug.cgi?id=1381919
[ 2 ] Bug #1381922 - CVE-2016-7952 libXtst: Insufficient validation of server responses
result in various data mishandlings
https://bugzilla.redhat.com/show_bug.cgi?id=1381922
--------------------------------------------------------------------------------
================================================================================
libXv-1.0.11-1.fc23 (FEDORA-2016-3b41a9eaa8)
X.Org X11 libXv runtime library
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-5407
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381931 - CVE-2016-5407 libXv: Insufficient validation of server responses
results in out-of bounds accesses
https://bugzilla.redhat.com/show_bug.cgi?id=1381931
--------------------------------------------------------------------------------
================================================================================
libXvMC-1.0.10-1.fc23 (FEDORA-2016-d286ffb801)
X.Org X11 libXvMC runtime library
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-7953
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381933 - CVE-2016-7953 libXvMC: Insufficient validation of server responses
results in buffer underflow
https://bugzilla.redhat.com/show_bug.cgi?id=1381933
--------------------------------------------------------------------------------
================================================================================
libgdata-0.17.5-2.fc23 (FEDORA-2016-3646279587)
Library for the GData protocol
--------------------------------------------------------------------------------
Update Information:
Fix gvfsd-google crash when trying to open a zero-length file from Google Drive.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1364782 - [abrt] gvfs-goa: gdata_download_stream_read(): gvfsd-google killed
by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1364782
--------------------------------------------------------------------------------
================================================================================
libmediainfo-0.7.89-1.fc23 (FEDORA-2016-6bdf6e81c3)
Library for supplies technical and tag information about a video or audio file
--------------------------------------------------------------------------------
Update Information:
Update to 0.7.89.
--------------------------------------------------------------------------------
================================================================================
mediainfo-0.7.89-1.fc23 (FEDORA-2016-6bdf6e81c3)
Supplies technical and tag information about a video or audio file (CLI)
--------------------------------------------------------------------------------
Update Information:
Update to 0.7.89.
--------------------------------------------------------------------------------
================================================================================
perl-Image-Info-1.38-6.fc23 (FEDORA-2016-f8fd3891f8)
Image meta information extraction module for Perl
--------------------------------------------------------------------------------
Update Information:
Security fix for XXE SVG issue.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379556 - perl-Image-Info: XXE in SVG files
https://bugzilla.redhat.com/show_bug.cgi?id=1379556
--------------------------------------------------------------------------------
================================================================================
php-webmozart-assert-1.1.0-1.fc23 (FEDORA-2016-d6f1b38df0)
Assertions to validate method input/output with nice error messages
--------------------------------------------------------------------------------
Update Information:
## php-webmozart-assert This library contains efficient assertions to test the
input and output of your methods. With these assertions, you can greatly reduce
the amount of coding needed to write a safe implementation. All assertions in
the Assert class throw an \InvalidArgumentException if they fail. ## php-
webmozart-path-util This package provides robust, cross-platform utility
functions for normalizing, comparing and modifying file paths and URLs.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380155 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380155
[ 2 ] Bug #1380156 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380156
--------------------------------------------------------------------------------
================================================================================
php-webmozart-path-util-2.3.0-1.fc23 (FEDORA-2016-d6f1b38df0)
Cross-platform utilities for file paths
--------------------------------------------------------------------------------
Update Information:
## php-webmozart-assert This library contains efficient assertions to test the
input and output of your methods. With these assertions, you can greatly reduce
the amount of coding needed to write a safe implementation. All assertions in
the Assert class throw an \InvalidArgumentException if they fail. ## php-
webmozart-path-util This package provides robust, cross-platform utility
functions for normalizing, comparing and modifying file paths and URLs.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380155 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380155
[ 2 ] Bug #1380156 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380156
--------------------------------------------------------------------------------
================================================================================
python-asciitree-0.3.3-1.fc23 (FEDORA-2016-43f233d02a)
Draws ASCII trees
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1375735 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1375735
--------------------------------------------------------------------------------
================================================================================
wxGTK3-3.0.2-26.fc23 (FEDORA-2016-324dcf78ae)
GTK port of the wxWidgets GUI library
--------------------------------------------------------------------------------
Update Information:
Fixes problems with files containing percent signs or non-ASCII characters.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1381767 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1381767
--------------------------------------------------------------------------------
================================================================================
xrootd-4.4.1-1.fc23 (FEDORA-2016-f3d97d8a63)
Extended ROOT file server
--------------------------------------------------------------------------------
Update Information:
Version 4.4.1 ------------- **Major bug fixes** * **[XrdCl]** Use posix
semaphores for fedora >= 22. * **[XrdCl]** Disable omit-frame-pointer for gcc
= 4.9.3 (only if custom semaphores are being used). * **[XrdCl]**
Fix
deadlock in XrdCl::PollerBuiltIn during finalize.
--------------------------------------------------------------------------------