The following Fedora 23 Security updates need testing:
Age URL
116
https://bodhi.fedoraproject.org/updates/FEDORA-2015-12739
python-kdcproxy-0.3.2-1.fc23
99
https://bodhi.fedoraproject.org/updates/FEDORA-2015-5eb2131441
conntrack-tools-1.4.2-9.fc23
70
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16240 nagios-4.0.8-1.fc23
57
https://bodhi.fedoraproject.org/updates/FEDORA-2015-dd52a54fa1
python-pymongo-3.0.3-1.fc23
57
https://bodhi.fedoraproject.org/updates/FEDORA-2015-c76c1c84cf
mod_nss-1.0.12-1.fc23
44
https://bodhi.fedoraproject.org/updates/FEDORA-2015-66439aa9e2
openstack-glance-2015.1.2-1.fc23
28
https://bodhi.fedoraproject.org/updates/FEDORA-2015-84a95e39d4
perl-HTML-Scrubber-0.15-1.fc23
28
https://bodhi.fedoraproject.org/updates/FEDORA-2015-81ded368fe
miniupnpc-1.9-6.fc23
19
https://bodhi.fedoraproject.org/updates/FEDORA-2015-3d17682c15 putty-0.66-1.fc23
14
https://bodhi.fedoraproject.org/updates/FEDORA-2015-7852ea201b
potrace-1.13-2.fc23
11
https://bodhi.fedoraproject.org/updates/FEDORA-2015-28e56e52e7
seamonkey-2.39-1.fc23
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-8b5ea2dc53
rubygem-flexmock-2.0.2-1.fc23
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-4ad4998d00
libpng-1.6.17-3.fc23
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-1943310658
libpng15-1.5.22-3.fc23
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-5d1f935811
imapsync-1.644-2.fc23
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-e3ec4cbf8f lxdm-0.5.3-1.fc23
3
https://bodhi.fedoraproject.org/updates/FEDORA-2015-a8c8f60fbd
python-django-1.8.7-1.fc23
3
https://bodhi.fedoraproject.org/updates/FEDORA-2015-df0f324367 knot-2.0.2-1.fc23
3
https://bodhi.fedoraproject.org/updates/FEDORA-2015-0efcb5fbc5
php-symfony-2.7.7-2.fc23 php-twig-1.23.1-2.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2015-27392b3324
jbig2dec-0.12-2.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2015-10f92d4d06 wget-1.17-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2015-28076d0830
thttpd-2.25b-35.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2015-06a7c972e8
thttpd-2.25b-36.fc23
The following Fedora 23 Critical Path updates have yet to be approved:
Age URL
15
https://bodhi.fedoraproject.org/updates/FEDORA-2015-37706c9c35 mash-0.6.19-1.fc23
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-cf51e6b9dc
evolution-data-server-3.18.2-2.fc23
10
https://bodhi.fedoraproject.org/updates/FEDORA-2015-4ad4998d00
libpng-1.6.17-3.fc23
9
https://bodhi.fedoraproject.org/updates/FEDORA-2015-82bc055b3f
perl-PathTools-3.60-1.fc23
9
https://bodhi.fedoraproject.org/updates/FEDORA-2015-22dbc37884
perl-Socket-2.021-1.fc23
6
https://bodhi.fedoraproject.org/updates/FEDORA-2015-9b1b3e9a5c
xkeyboard-config-2.16-1.fc23
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-2ae867c402
NetworkManager-vpnc-1.0.8-1.fc23 NetworkManager-openconnect-1.0.8-1.fc23
NetworkManager-openvpn-1.0.8-1.fc23 NetworkManager-openswan-1.0.8-1.fc23
NetworkManager-fortisslvpn-1.0.8-1.fc23 NetworkManager-1.0.8-1.fc23
4
https://bodhi.fedoraproject.org/updates/FEDORA-2015-3e75abf2a3 krb5-1.14-2.fc23
3
https://bodhi.fedoraproject.org/updates/FEDORA-2015-498b25667e
perl-BSD-Resource-1.290.900-1.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2015-18669069a5
menu-cache-1.0.0-4.D20151128git0b1e85c263.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2015-87a311850d
gnome-disk-utility-3.18.3.1-1.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2015-eef23ceb81
PackageKit-1.0.11-1.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2015-e185ec1a6a pcre-8.38-2.fc23
The following builds have been pushed to Fedora 23 updates-testing
antlr3-3.5.2-10.fc23
antlr32-3.2-12.fc23
bugyou-0.1-1.fc23
capstone-3.0.4-4.fc23
eclipse-4.5.1-5.fc23
eclipse-jgit-4.1.0-6.fc23
eclipse-pydev-4.4.0-3.fc23
eclipse-xtext-antlr-generator-2.1.1-3.git18383dd.fc23
findbugs-contrib-6.4.0-1.fc23
getdp-2.7.0-1.fc23
gifticlib-1.0.9-1.fc23
ioprocess-0.15.0-4.fc23
jreen-1.2.1-4.fc23
libminc-2.3.00-1.fc23
libreoffice-5.0.3.2-7.fc23
libva-vdpau-driver-0.7.4-13.fc23
mathic-1.0-1.20130827.git66b5d74.fc23
php-nette-caching-2.3.3-1.fc23
php-nette-di-2.3.6-1.fc23
php-nette-http-2.3.3-1.fc23
php-tracy-2.3.6-1.fc23
python-baker-1.3-1.git408295259ae5.fc23
python-gradunwarp-1.0.2-3.fc23
python-markdown-2.6.5-1.fc23
python-pyoptical-0.4-2.fc23
python-pyriemann-0.2.3-3.fc23
python-tabulate-0.7.5-2.fc23
tcalc-2.0-1.fc23
thttpd-2.25b-35.fc23
thttpd-2.25b-36.fc23
xfe-1.41-1.fc23
Details about builds:
================================================================================
antlr3-3.5.2-10.fc23 (FEDORA-2015-03f691b1fb)
ANother Tool for Language Recognition
--------------------------------------------------------------------------------
Update Information:
Pre-requisites for adding Xtext (Eclipse DSL tooling) to the Fedora
distribution.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1283166 - Review Request: eclipse-xtext-antlr-generator - Xtext adapter to
ANTLR's generator
https://bugzilla.redhat.com/show_bug.cgi?id=1283166
[ 2 ] Bug #1286387 - java.lang.NoClassDefFoundError: org/antlr/runtime/CharStream
https://bugzilla.redhat.com/show_bug.cgi?id=1286387
--------------------------------------------------------------------------------
================================================================================
antlr32-3.2-12.fc23 (FEDORA-2015-03f691b1fb)
ANother Tool for Language Recognition
--------------------------------------------------------------------------------
Update Information:
Pre-requisites for adding Xtext (Eclipse DSL tooling) to the Fedora
distribution.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1283166 - Review Request: eclipse-xtext-antlr-generator - Xtext adapter to
ANTLR's generator
https://bugzilla.redhat.com/show_bug.cgi?id=1283166
[ 2 ] Bug #1286387 - java.lang.NoClassDefFoundError: org/antlr/runtime/CharStream
https://bugzilla.redhat.com/show_bug.cgi?id=1286387
--------------------------------------------------------------------------------
================================================================================
bugyou-0.1-1.fc23 (FEDORA-2015-c8db9e20d1)
Automatic Bug Reporting Tool
--------------------------------------------------------------------------------
Update Information:
Initial packaging.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1284638 - Review Request: bugyou - An Automatic Bug Reporting Tool
https://bugzilla.redhat.com/show_bug.cgi?id=1284638
--------------------------------------------------------------------------------
================================================================================
capstone-3.0.4-4.fc23 (FEDORA-2015-f3a0a2d50e)
A lightweight multi-platform, multi-architecture disassembly framework
--------------------------------------------------------------------------------
Update Information:
A lightweight multi-platform, multi-architecture disassembly framework
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1098965 - Review Request: capstone - Multi-platform, multi-architecture
disassembly framework.
https://bugzilla.redhat.com/show_bug.cgi?id=1098965
--------------------------------------------------------------------------------
================================================================================
eclipse-4.5.1-5.fc23 (FEDORA-2015-3984ff045b)
An open, extensible IDE
--------------------------------------------------------------------------------
Update Information:
Fixes various GTK3 related bugs: * Truncated text in form-based editors *
Unable to drag-n-drop items in various views * Transient dialogs disappearing
when you attempt to resize them
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1026349 - eclipse-swt: Crash in gtk_print_backend_destroy (libgtk-x11)
https://bugzilla.redhat.com/show_bug.cgi?id=1026349
[ 2 ] Bug #1012336 - Methods in outline view with SWT_GTK3=1 not re-arrangable
https://bugzilla.redhat.com/show_bug.cgi?id=1012336
[ 3 ] Bug #1226738 - [abrt] java-1.8.0-openjdk-headless: signalHandler(): java killed by
SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1226738
--------------------------------------------------------------------------------
================================================================================
eclipse-jgit-4.1.0-6.fc23 (FEDORA-2015-4abd9cce77)
Eclipse JGit
--------------------------------------------------------------------------------
Update Information:
Fixes "NoClassDefFoundError" and "IllegalStateException" errors when
invoking
"jgit daemon" from the command line.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1228138 - jgit daemon fails with java.lang.NoClassDefFoundError
https://bugzilla.redhat.com/show_bug.cgi?id=1228138
--------------------------------------------------------------------------------
================================================================================
eclipse-pydev-4.4.0-3.fc23 (FEDORA-2015-03f691b1fb)
Eclipse Python development plug-in
--------------------------------------------------------------------------------
Update Information:
Pre-requisites for adding Xtext (Eclipse DSL tooling) to the Fedora
distribution.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1283166 - Review Request: eclipse-xtext-antlr-generator - Xtext adapter to
ANTLR's generator
https://bugzilla.redhat.com/show_bug.cgi?id=1283166
[ 2 ] Bug #1286387 - java.lang.NoClassDefFoundError: org/antlr/runtime/CharStream
https://bugzilla.redhat.com/show_bug.cgi?id=1286387
--------------------------------------------------------------------------------
================================================================================
eclipse-xtext-antlr-generator-2.1.1-3.git18383dd.fc23 (FEDORA-2015-03f691b1fb)
Xtext adapter to ANTLR's generator
--------------------------------------------------------------------------------
Update Information:
Pre-requisites for adding Xtext (Eclipse DSL tooling) to the Fedora
distribution.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1283166 - Review Request: eclipse-xtext-antlr-generator - Xtext adapter to
ANTLR's generator
https://bugzilla.redhat.com/show_bug.cgi?id=1283166
[ 2 ] Bug #1286387 - java.lang.NoClassDefFoundError: org/antlr/runtime/CharStream
https://bugzilla.redhat.com/show_bug.cgi?id=1286387
--------------------------------------------------------------------------------
================================================================================
findbugs-contrib-6.4.0-1.fc23 (FEDORA-2015-1e04f3b5f5)
Extra findbugs detectors
--------------------------------------------------------------------------------
Update Information:
Update to 6.4.0. New detectors added in this release: * [OPM] Overly Permissive
Method - Looks for methods that are declared more permissively than the code is
using. For instance, declaring a method public, when it could just be declared
private. * [STT] Stringified Types - Looks for string fields that appear to be
built with parsing or calling toString() on another object, or from objects that
are fields. * [IMC] Immature Class - Looks for classes that are not fully
implemented to be a well rounded class. While the class will likely work fine,
it is more difficult to use or understand than necessary. * [JXI] JAX-RS Issues
- Looks for problems with the use of the JAX-RS specification.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1285558 - findbugs-contrib-6.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1285558
--------------------------------------------------------------------------------
================================================================================
getdp-2.7.0-1.fc23 (FEDORA-2015-c1552878af)
General Environment for the Treatment of Discrete Problems
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1286367 - Review Request: getdp - General Environment for the Treatment of
Discrete Problems
https://bugzilla.redhat.com/show_bug.cgi?id=1286367
--------------------------------------------------------------------------------
================================================================================
gifticlib-1.0.9-1.fc23 (FEDORA-2015-9767674195)
IO library for the GIFTI cortical surface data format
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279202 - Review Request: gifticlib - IO library for the GIFTI cortical
surface data format
https://bugzilla.redhat.com/show_bug.cgi?id=1279202
--------------------------------------------------------------------------------
================================================================================
ioprocess-0.15.0-4.fc23 (FEDORA-2015-c8ea71676a)
Slave process to perform risky IO
--------------------------------------------------------------------------------
Update Information:
Fix string formatting for 32bit architecture
--------------------------------------------------------------------------------
================================================================================
jreen-1.2.1-4.fc23 (FEDORA-2015-ffe6710f5c)
Qt4 XMPP Library
--------------------------------------------------------------------------------
Update Information:
jreen-1.2.1-4 - drop JREEN_USE_IRISICE=ON, needs work (missing headers/symbols)
(#1282176) - pull in upstream fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1282176 - qutim - not working jabber plugin
https://bugzilla.redhat.com/show_bug.cgi?id=1282176
--------------------------------------------------------------------------------
================================================================================
libminc-2.3.00-1.fc23 (FEDORA-2015-a6ab47275f)
Core library and API of the MINC toolkit
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279056 - Review Request: libminc - Core library and API of the MINC toolkit
https://bugzilla.redhat.com/show_bug.cgi?id=1279056
--------------------------------------------------------------------------------
================================================================================
libreoffice-5.0.3.2-7.fc23 (FEDORA-2015-7f9fa67e1b)
Free Software Productivity Suite
--------------------------------------------------------------------------------
Update Information:
Improve quality of gtk3 drawing support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1283426 - [abrt] libreoffice-core: gdk_x11_screen_get_screen_number():
soffice.bin killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1283426
--------------------------------------------------------------------------------
================================================================================
libva-vdpau-driver-0.7.4-13.fc23 (FEDORA-2015-dc1b2eaea6)
HW video decode support for VDPAU platforms
--------------------------------------------------------------------------------
Update Information:
Disable automatic symlink for mesa vaapi backend drivers (should be handled by
mesa instead).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1286386 - web browser crash on specific videos (depending on codec)
https://bugzilla.redhat.com/show_bug.cgi?id=1286386
--------------------------------------------------------------------------------
================================================================================
mathic-1.0-1.20130827.git66b5d74.fc23 (FEDORA-2015-bf85086659)
Data structures for Groebner basis computations
--------------------------------------------------------------------------------
Update Information:
This new package is a C++ library of fast data structures designed for use in
Groebner basis computation. This includes data structures for ordering S-pairs,
performing divisor queries and ordering polynomial terms during polynomial
reduction.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1286322 - Review Request: mathic - Data structures for Groebner basis
computations
https://bugzilla.redhat.com/show_bug.cgi?id=1286322
--------------------------------------------------------------------------------
================================================================================
php-nette-caching-2.3.3-1.fc23 (FEDORA-2015-f1bce3ad1c)
Nette Caching Component
--------------------------------------------------------------------------------
Update Information:
Cache accelerates your application by storing data, once hardly retrieved, for
future use. To use this library, you just have to add, in your project:
require_once '/usr/share/php/Nette/Caching/autoload.php';
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1277409 - Review Request: php-nette-caching - Nette Caching Component
https://bugzilla.redhat.com/show_bug.cgi?id=1277409
--------------------------------------------------------------------------------
================================================================================
php-nette-di-2.3.6-1.fc23 (FEDORA-2015-d5b4979626)
Nette Dependency Injection Component
--------------------------------------------------------------------------------
Update Information:
Purpose of the Dependecy Injection (DI) is to free classes from the
responsibility for obtaining objects that they need for its operation (these
objects are called services). To pass them these services on their instantiation
instead. Nette DI is one of the most interesting part of framework. It is
compiled DI container, extremely fast and easy to configure. To use this
library, you just have to add, in your project: require_once
'/usr/share/php/Nette/DI/autoload.php';
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1277397 - Review Request: php-nette-di - Nette Dependency Injection
Component
https://bugzilla.redhat.com/show_bug.cgi?id=1277397
--------------------------------------------------------------------------------
================================================================================
php-nette-http-2.3.3-1.fc23 (FEDORA-2015-29c3aede0b)
Nette HTTP Component
--------------------------------------------------------------------------------
Update Information:
HTTP request and response are encapsulated in Nette\Http\Request and
Nette\Http\Response objects which offer comfortable API and also act as
sanitization filter. To use this library, you just have to add, in your
project: require_once '/usr/share/php/Nette/Http/autoload.php';
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1277415 - Review Request: php-nette-http - Nette HTTP Component
https://bugzilla.redhat.com/show_bug.cgi?id=1277415
--------------------------------------------------------------------------------
================================================================================
php-tracy-2.3.6-1.fc23 (FEDORA-2015-462070d8d0)
Tracy: useful PHP debugger
--------------------------------------------------------------------------------
Update Information:
Tracy library is a useful PHP everyday programmer's helper. It helps you to: -
quickly detect and correct errors - log errors - dump variables - measure the
time To use this library, you just have to add, in your project:
require_once '/usr/share/php/Tracy/autoload.php';
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1277400 - Review Request: php-tracy - Tracy: useful PHP debugger
https://bugzilla.redhat.com/show_bug.cgi?id=1277400
--------------------------------------------------------------------------------
================================================================================
python-baker-1.3-1.git408295259ae5.fc23 (FEDORA-2015-a348caae20)
Easy, powerful access to Python functions from the command line
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1284779 - Review Request: python-baker - Easy, powerful access to Python
functions from the command line
https://bugzilla.redhat.com/show_bug.cgi?id=1284779
--------------------------------------------------------------------------------
================================================================================
python-gradunwarp-1.0.2-3.fc23 (FEDORA-2015-203b00ea80)
Gradient Unwarping
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279211 - Review Request: python-gradunwarp - Gradient Unwarping
https://bugzilla.redhat.com/show_bug.cgi?id=1279211
--------------------------------------------------------------------------------
================================================================================
python-markdown-2.6.5-1.fc23 (FEDORA-2015-3d9885ab37)
Markdown implementation in Python
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable version 2.6.5 (a bugfix release). ---- Update to
the latest stable version 2.6.4 (a bugfix release).
--------------------------------------------------------------------------------
================================================================================
python-pyoptical-0.4-2.fc23 (FEDORA-2015-e1562fb56d)
Pure python interface to OptiCAL
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1279187 - Review Request: python-pyoptical - Pure python interface to
OptiCAL
https://bugzilla.redhat.com/show_bug.cgi?id=1279187
--------------------------------------------------------------------------------
================================================================================
python-pyriemann-0.2.3-3.fc23 (FEDORA-2015-88a579766b)
Covariance matrices manipulation and Biosignal classification
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1280490 - Review Request: python-pyriemann - Covariance matrices manipulation
and Biosignal classification
https://bugzilla.redhat.com/show_bug.cgi?id=1280490
--------------------------------------------------------------------------------
================================================================================
python-tabulate-0.7.5-2.fc23 (FEDORA-2015-4f0ef807ad)
Pretty-print tabular data in Python, a library and a command-line utility
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1284790 - Review Request: python-tabulate - Pretty-print tabular data in
Python, a library and a command-line utility
https://bugzilla.redhat.com/show_bug.cgi?id=1284790
--------------------------------------------------------------------------------
================================================================================
tcalc-2.0-1.fc23 (FEDORA-2015-59259d902f)
The terminal calculator
--------------------------------------------------------------------------------
Update Information:
Added Factorial function
--------------------------------------------------------------------------------
================================================================================
thttpd-2.25b-35.fc23 (FEDORA-2015-28076d0830)
Tiny, turbo, throttleable lightweight http server
--------------------------------------------------------------------------------
Update Information:
- Add patch to fix RHBZ #887451 / CVE-2012-5640 - Fix fedora logo issue (RHBZ
#1114423). - Enable PIE flags (RHBZ #955129) - Use systemd for post-rotate
script (RHBZ #1218259)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #887451 - CVE-2012-5640 thttpd: Denial of Service when using glibc, crypt()
can return NULL [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=887451
[ 2 ] Bug #1114423 - broken symlink to poweredby.png
https://bugzilla.redhat.com/show_bug.cgi?id=1114423
[ 3 ] Bug #955129 - thttpd package should be built with PIE flags
https://bugzilla.redhat.com/show_bug.cgi?id=955129
[ 4 ] Bug #1218259 - thttpd has incorrect logrotate postrotate script following move to
systemd
https://bugzilla.redhat.com/show_bug.cgi?id=1218259
--------------------------------------------------------------------------------
================================================================================
thttpd-2.25b-36.fc23 (FEDORA-2015-06a7c972e8)
Tiny, turbo, throttleable lightweight http server
--------------------------------------------------------------------------------
Update Information:
Add a patch to fix RHBZ #924857 / CVE-2013-0348
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #924857 - CVE-2013-0348 thttpd: World-readable log file
https://bugzilla.redhat.com/show_bug.cgi?id=924857
--------------------------------------------------------------------------------
================================================================================
xfe-1.41-1.fc23 (FEDORA-2015-5f29c4de33)
X File Explorer File Manager
--------------------------------------------------------------------------------
Update Information:
New version 1.41 is released.
--------------------------------------------------------------------------------