The following Fedora 24 Security updates need testing:
Age URL
52
https://bodhi.fedoraproject.org/updates/FEDORA-2016-32eaf0c41e redis-3.2.3-1.fc24
35
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0ef628998f
chicken-4.11.0-3.fc24
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-89060100d7
mongodb-3.2.8-2.fc24
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ea3b7e6556 links-2.13-1.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a64716084e
irssi-0.8.20-2.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-328754be1c
libdwarf-20160923-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7f193a0c59
php-ZendFramework-1.12.20-1.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5706eeb875
python-django-1.9.10-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-861b8c46b7
nodejs-4.6.0-5.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-58a8f32c86
openjpeg2-2.1.2-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c23a8ce9e5
mingw-openjpeg2-2.1.2-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2d9825f7c1
bind-9.10.4-2.P3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cca77daf70
bind99-9.9.9-2.P3.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a3054bda14
systemd-229-14.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c75bdc394a
zathura-pdf-mupdf-0.3.0-2.fc24 mujs-0-5.20160921git5c337af.fc24
The following Fedora 24 Critical Path updates have yet to be approved:
Age URL
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f022f61d98
selinux-policy-3.13.1-191.17.fc24
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-429a6242ef
polkit-qt-0.112.0-8.fc24
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-229e5b4143 lorax-24.21-1.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2bf9743359 pungi-4.1.9-2.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a3054bda14
systemd-229-14.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cf7725e102
koji-1.10.1-13.fc24
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-eb3ca41e5d gdb-7.11.1-86.fc24
The following builds have been pushed to Fedora 24 updates-testing
bind-9.10.4-2.P3.fc24
bind99-9.9.9-2.P3.fc24
ccache-3.3.2-1.fc24
dbxtool-7-2.fc24
efibootmgr-14-3.fc24
efivar-30-3.fc24
exodusii-6.02-4.fc24
fwupd-0.7.2-4.fc24
fwupdate-8-2.fc24
gap-4.8.5-1.fc24
gdb-7.11.1-86.fc24
ibus-libzhuyin-1.7.9-1.fc24
icecat-45.3.0-0.5.beta.fc24
javadocofflinesearch-2.2-2.fc24
koji-1.10.1-13.fc24
libfm-qt-0.11.1-2.fc24
liblxqt-0.11.0-1.fc24
libqtxdg-2.0.0-2.fc24
lximage-qt-0.5.0-1.fc24
lxqt-about-0.11.0-1.fc24
lxqt-common-0.11.0-1.fc24
lxqt-config-0.11.0-2.fc24
lxqt-globalkeys-0.11.0-2.fc24
lxqt-notificationd-0.11.0-1.fc24
lxqt-openssh-askpass-0.11.0-2.fc24
lxqt-panel-0.11.0-2.fc24
lxqt-policykit-0.11.0-2.fc24
lxqt-powermanagement-0.11.0-1.fc24
lxqt-qtplugin-0.11.0-1.fc24
lxqt-runner-0.11.0-7.fc24
lxqt-session-0.11.0-1.fc24
lxqt-sudo-0.11.0-1.fc24
mame-0.178-1.fc24
mokutil-0.3.0-2.fc24
mujs-0-5.20160921git5c337af.fc24
pavucontrol-qt-0.1.0-2.fc24
pcmanfm-qt-0.11.1-1.fc24
perl-Authen-SASL-SASLprep-1.100-1.fc24
perl-CPAN-Perl-Releases-2.94-1.fc24
perl-Canary-Stability-2012-1.fc24
perl-Config-Model-2.092-1.fc24
perl-Config-Model-Itself-2.006-1.fc24
perl-PDF-Reuse-0.39-1.fc24
pesign-0.112-4.fc24
pungi-4.1.9-2.fc24
python-amqpclt-0.6-1.fc24
python-epi-0.1-3.fc24
python-rpmfluff-0.5.2-1.fc24
roundcubemail-1.2.2-1.fc24
systemd-229-14.fc24
tarantool-1.6.9.11-1.fc24
zathura-pdf-mupdf-0.3.0-2.fc24
Details about builds:
================================================================================
bind-9.10.4-2.P3.fc24 (FEDORA-2016-2d9825f7c1)
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version due to CVE-2016-2776
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1378380 - CVE-2016-2776 bind: assertion failure in buffer.c while building
responses to a specifically constructed request
https://bugzilla.redhat.com/show_bug.cgi?id=1378380
--------------------------------------------------------------------------------
================================================================================
bind99-9.9.9-2.P3.fc24 (FEDORA-2016-cca77daf70)
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream version due to CVE-2016-2776
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1378380 - CVE-2016-2776 bind: assertion failure in buffer.c while building
responses to a specifically constructed request
https://bugzilla.redhat.com/show_bug.cgi?id=1378380
--------------------------------------------------------------------------------
================================================================================
ccache-3.3.2-1.fc24 (FEDORA-2016-1e40b4f3a8)
C/C++ compiler cache
--------------------------------------------------------------------------------
Update Information:
Update to 3.3.2,
https://ccache.samba.org/releasenotes.html#_ccache_3_3_2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380213 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380213
--------------------------------------------------------------------------------
================================================================================
dbxtool-7-2.fc24 (FEDORA-2016-c6141386ba)
Secure Boot DBX updater
--------------------------------------------------------------------------------
Update Information:
This update brings fwupdate to a signed version in F24, and also adds the newest
version of the Secure Boot dbx.
--------------------------------------------------------------------------------
================================================================================
efibootmgr-14-3.fc24 (FEDORA-2016-c6141386ba)
EFI Boot Manager
--------------------------------------------------------------------------------
Update Information:
This update brings fwupdate to a signed version in F24, and also adds the newest
version of the Secure Boot dbx.
--------------------------------------------------------------------------------
================================================================================
efivar-30-3.fc24 (FEDORA-2016-c6141386ba)
Tools to manage UEFI variables
--------------------------------------------------------------------------------
Update Information:
This update brings fwupdate to a signed version in F24, and also adds the newest
version of the Secure Boot dbx.
--------------------------------------------------------------------------------
================================================================================
exodusii-6.02-4.fc24 (FEDORA-2016-ef86cfeae3)
Library to store and retrieve transient finite element data
--------------------------------------------------------------------------------
Update Information:
Initial import
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1336552 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1336552
--------------------------------------------------------------------------------
================================================================================
fwupd-0.7.2-4.fc24 (FEDORA-2016-c6141386ba)
Firmware update daemon
--------------------------------------------------------------------------------
Update Information:
This update brings fwupdate to a signed version in F24, and also adds the newest
version of the Secure Boot dbx.
--------------------------------------------------------------------------------
================================================================================
fwupdate-8-2.fc24 (FEDORA-2016-c6141386ba)
Tools to manage UEFI firmware updates
--------------------------------------------------------------------------------
Update Information:
This update brings fwupdate to a signed version in F24, and also adds the newest
version of the Secure Boot dbx.
--------------------------------------------------------------------------------
================================================================================
gap-4.8.5-1.fc24 (FEDORA-2016-8736068c5c)
Computational discrete algebra
--------------------------------------------------------------------------------
Update Information:
See
http://gap-system.org/Manuals/doc/changes/chap2.html#X84E1F4618181F6A3 for
changes in gap version 4.8.5.
--------------------------------------------------------------------------------
================================================================================
gdb-7.11.1-86.fc24 (FEDORA-2016-eb3ca41e5d)
A GNU source-level debugger for C, C++, Fortran, Go and other languages
--------------------------------------------------------------------------------
Update Information:
Fix attachment of JIT-debug-enabled inf. (7.11.1 regression, RH BZ 1375553).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1375553 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1375553
--------------------------------------------------------------------------------
================================================================================
ibus-libzhuyin-1.7.9-1.fc24 (FEDORA-2016-a2a16471b2)
New Zhuyin engine based on libzhuyin for IBus
--------------------------------------------------------------------------------
Update Information:
Fixes input behavior.
--------------------------------------------------------------------------------
================================================================================
icecat-45.3.0-0.5.beta.fc24 (FEDORA-2016-83d3ed6dfc)
GNU version of Firefox browser
--------------------------------------------------------------------------------
Update Information:
- Drop obsolete patch
--------------------------------------------------------------------------------
================================================================================
javadocofflinesearch-2.2-2.fc24 (FEDORA-2016-a7e1639359)
Tool for offline searching in your docs via browser
--------------------------------------------------------------------------------
Update Information:
added lucene-backward-codecs depndences
--------------------------------------------------------------------------------
================================================================================
koji-1.10.1-13.fc24 (FEDORA-2016-cf7725e102)
Build system tools
--------------------------------------------------------------------------------
Update Information:
Add --new-chroot option for runroot plugin, allowing mock inside koji to use
systemd-nspawn style chroot.
--------------------------------------------------------------------------------
================================================================================
libfm-qt-0.11.1-2.fc24 (FEDORA-2016-e5604e9cc2)
Companion library for PCManFM
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
liblxqt-0.11.0-1.fc24 (FEDORA-2016-e5604e9cc2)
Core shared library for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
libqtxdg-2.0.0-2.fc24 (FEDORA-2016-e5604e9cc2)
QtXdg, a Qt5 implementation of XDG standards
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lximage-qt-0.5.0-1.fc24 (FEDORA-2016-e5604e9cc2)
The image viewer and screenshot tool for LXQt
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-about-0.11.0-1.fc24 (FEDORA-2016-e5604e9cc2)
About application for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-common-0.11.0-1.fc24 (FEDORA-2016-e5604e9cc2)
Common resources for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-config-0.11.0-2.fc24 (FEDORA-2016-e5604e9cc2)
Config tools for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-globalkeys-0.11.0-2.fc24 (FEDORA-2016-e5604e9cc2)
Global keys utility for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-notificationd-0.11.0-1.fc24 (FEDORA-2016-e5604e9cc2)
Notification daemon for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-openssh-askpass-0.11.0-2.fc24 (FEDORA-2016-e5604e9cc2)
Askpass openssh transition dialog for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-panel-0.11.0-2.fc24 (FEDORA-2016-e5604e9cc2)
Main panel bar for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-policykit-0.11.0-2.fc24 (FEDORA-2016-e5604e9cc2)
PolicyKit agent for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-powermanagement-0.11.0-1.fc24 (FEDORA-2016-e5604e9cc2)
Powermanagement daemon for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-qtplugin-0.11.0-1.fc24 (FEDORA-2016-e5604e9cc2)
Qt plugin framework for LXQt Desktop Suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-runner-0.11.0-7.fc24 (FEDORA-2016-e5604e9cc2)
Application runner agent for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-session-0.11.0-1.fc24 (FEDORA-2016-e5604e9cc2)
Main session for LXQt desktop suite
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
lxqt-sudo-0.11.0-1.fc24 (FEDORA-2016-e5604e9cc2)
GUI frontend for sudo/su
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
mame-0.178-1.fc24 (FEDORA-2016-db3b258428)
Multiple Arcade Machine Emulator
--------------------------------------------------------------------------------
Update Information:
An update to the latest mame release: *
http://mamedev.org/?p=431
--------------------------------------------------------------------------------
================================================================================
mokutil-0.3.0-2.fc24 (FEDORA-2016-c6141386ba)
Tool to manage UEFI Secure Boot MoK Keys
--------------------------------------------------------------------------------
Update Information:
This update brings fwupdate to a signed version in F24, and also adds the newest
version of the Secure Boot dbx.
--------------------------------------------------------------------------------
================================================================================
mujs-0-5.20160921git5c337af.fc24 (FEDORA-2016-c75bdc394a)
An embeddable Javascript interpreter
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-7563, CVE-2016-7564
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380323 - CVE-2016-7563 CVE-2016-7564 mujs: Multiple issues fixed in latest
version
https://bugzilla.redhat.com/show_bug.cgi?id=1380323
--------------------------------------------------------------------------------
================================================================================
pavucontrol-qt-0.1.0-2.fc24 (FEDORA-2016-e5604e9cc2)
Qt port of volume control pavucontrol
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
pcmanfm-qt-0.11.1-1.fc24 (FEDORA-2016-e5604e9cc2)
LxQt file manager PCManFM
--------------------------------------------------------------------------------
Update Information:
New upstream lxqt package set 0.11.0
--------------------------------------------------------------------------------
================================================================================
perl-Authen-SASL-SASLprep-1.100-1.fc24 (FEDORA-2016-d27f230895)
Stringprep profile for user names and passwords (RFC 4013)
--------------------------------------------------------------------------------
Update Information:
This release adds "stored strings" capability to saslprep() routine.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380044 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380044
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-2.94-1.fc24 (FEDORA-2016-71c0b12e45)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1377902 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1377902
--------------------------------------------------------------------------------
================================================================================
perl-Canary-Stability-2012-1.fc24 (FEDORA-2016-fd1d329b7f)
Canary to check perl compatibility for Schmorp's modules
--------------------------------------------------------------------------------
Update Information:
This release removes coloring of an introduction text.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379997 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1379997
--------------------------------------------------------------------------------
================================================================================
perl-Config-Model-2.092-1.fc24 (FEDORA-2016-84083ad174)
Framework to create configuration validation tools and editors
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
================================================================================
perl-Config-Model-Itself-2.006-1.fc24 (FEDORA-2016-aa435c6ce2)
Model editor for Config::Model
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
================================================================================
perl-PDF-Reuse-0.39-1.fc24 (FEDORA-2016-a86d0ce350)
Reuse and mass produce PDF documents
--------------------------------------------------------------------------------
Update Information:
This release removes unneeded files form source tar ball. We deliver it only to
provide recent version string. ---- This release closes TTF file handles,
fixes warnings in prStrWidth() and prText(), handling bookmarks, reading PDF 1.5
version, CPU excessive usage when parsing bad PDF, handling zero coordinates in
prMbox(). It also adds support for file handles, IO::String, and in-memory
files.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380054 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380054
[ 2 ] Bug #1379025 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1379025
--------------------------------------------------------------------------------
================================================================================
pesign-0.112-4.fc24 (FEDORA-2016-c6141386ba)
Signing utility for UEFI binaries
--------------------------------------------------------------------------------
Update Information:
This update brings fwupdate to a signed version in F24, and also adds the newest
version of the Secure Boot dbx.
--------------------------------------------------------------------------------
================================================================================
pungi-4.1.9-2.fc24 (FEDORA-2016-2bf9743359)
Distribution compose tool
--------------------------------------------------------------------------------
Update Information:
add patch to enable use of --new-chroot for ostree tasks
--------------------------------------------------------------------------------
================================================================================
python-amqpclt-0.6-1.fc24 (FEDORA-2016-bc4e688ac4)
Versatile AMQP client
--------------------------------------------------------------------------------
Update Information:
Updated to upstream version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380074 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1380074
--------------------------------------------------------------------------------
================================================================================
python-epi-0.1-3.fc24 (FEDORA-2016-7df2442f2a)
Tool for looking at the entry point plugins on a system
--------------------------------------------------------------------------------
Update Information:
Fixed source macro in prep section
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379709 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1379709
--------------------------------------------------------------------------------
================================================================================
python-rpmfluff-0.5.2-1.fc24 (FEDORA-2016-745c5e50c8)
Lightweight way of building RPMs, and sabotaging them
--------------------------------------------------------------------------------
Update Information:
Lots of fixes by Dan Callaghan <dcallagh(a)redhat.com>
--------------------------------------------------------------------------------
================================================================================
roundcubemail-1.2.2-1.fc24 (FEDORA-2016-a421a3c9cb)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
**Version 1.2.2** * Enigma: Add possibility to configure gpg-agent binary
location (enigma_pgp_agent) * Enigma: Fix signature verification with some
IMAP servers, e.g. Gmail, DBMail (#5371) * Enigma: Make recipient key
searches case-insensitive (#5434) * Fix regression in resizing JPEG images
with Imagick (#5376) * Managesieve: Fix parsing of vacation date-time with
non-default date_format (#5372) * Use SymLinksIfOwnerMatch in .htaccess
instead of FollowSymLinks disabled on some hosts for security reasons (#5370) *
Wash position:fixed style in HTML mail for better security (#5264) * Fix bug
where memcache_debug didn't work for session operations * Fix bug where
Message-ID domain part was tied to username instead of current identity (#5385)
* Fix bug where blocked.gif couldn't be attached to reply/forward with
insecure content * Fix E_DEPRECATED warning when using Auth_SASL::factory()
(#5401) * Fix bug where names of downloaded files could be malformed when
derived from the message subject (#5404) * Fix so "All" messages selection
is
resetted on search reset (#5413) * Fix bug where folder creation could fail
if personal namespace contained more than one entry (#5403) * Fix error
causing empty INBOX listing in Firefox when using an URL with user:password
specified (#5400) * Fix PHP warning when handling shared namespace with empty
prefix (#5420) * Fix so folders list is scrolled to the selected folder on
page load (#5424) * Fix so when moving to Trash we make sure the folder
exists (#5192) * Fix displaying size of attachments with zero size * Fix
so "Action disabled" error uses more appropriate 404 code (#5440)
--------------------------------------------------------------------------------
================================================================================
systemd-229-14.fc24 (FEDORA-2016-a3054bda14)
A System and Service Manager
--------------------------------------------------------------------------------
Update Information:
Fix for crash on empty notification message.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380287 - systemd: Assertion failure when PID 1 receives a zero-length
message over notify socket [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1380287
--------------------------------------------------------------------------------
================================================================================
tarantool-1.6.9.11-1.fc24 (FEDORA-2016-266e0b69b2)
In-memory database and Lua application server
--------------------------------------------------------------------------------
Update Information:
A new bugfix release from upstream.
https://github.com/tarantool/tarantool/releases/tag/1.6.9
--------------------------------------------------------------------------------
================================================================================
zathura-pdf-mupdf-0.3.0-2.fc24 (FEDORA-2016-c75bdc394a)
PDF support for zathura via mupdf
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-7563, CVE-2016-7564
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1380323 - CVE-2016-7563 CVE-2016-7564 mujs: Multiple issues fixed in latest
version
https://bugzilla.redhat.com/show_bug.cgi?id=1380323
--------------------------------------------------------------------------------