The following Fedora 23 Security updates need testing:
Age URL
452
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16240 nagios-4.0.8-1.fc23
410
https://bodhi.fedoraproject.org/updates/FEDORA-2015-81ded368fe
miniupnpc-1.9-6.fc23
383
https://bodhi.fedoraproject.org/updates/FEDORA-2015-27392b3324
jbig2dec-0.12-2.fc23
333
https://bodhi.fedoraproject.org/updates/FEDORA-2015-dd52a54fa1
python-pymongo-3.0.3-1.fc23
333
https://bodhi.fedoraproject.org/updates/FEDORA-2015-06a7c972e8
thttpd-2.25b-37.fc23
129
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c2ec9c716e redis-3.2.3-1.fc23
122
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d6288f555c
libarchive-3.2.1-3.fc23 python-libarchive-c-2.5-1.fc23
106
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b3a6435b14
dhcpcd-6.11.3-1.fc23
71
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1649cc31e0
ca-certificates-2016.2.10-1.0.fc23
64
https://bodhi.fedoraproject.org/updates/FEDORA-2016-17ea599651
compat-guile18-1.8.8-14.fc23
48
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b89e991e63
nodejs-0.10.48-1.fc23
38
https://bodhi.fedoraproject.org/updates/FEDORA-2016-272fa6b96e dracut-043-67.fc23
26
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5afe06026b
jenkins-1.625.3-5.fc23 jenkins-remoting-2.62.3-1.fc23
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-bf6c3ea62c
perl-DBD-MySQL-4.033-4.fc23
13
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a400e4cd90
thunderbird-45.5.1-1.fc23
10
https://bodhi.fedoraproject.org/updates/FEDORA-2016-30077d1b37
ipsilon-2.0.2-2.fc23
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3c01772ff6
httpd-2.4.23-5.fc23
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cad9307ce0 gd-2.1.1-11.fc23
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7eea952041
golang-1.5.4-5.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-570c603276
openjpeg2-2.1.2-2.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5f5d42d2d8
mingw-openjpeg2-2.1.2-2.fc23
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ad82c71a1b
dovecot-2.2.27-1.fc23
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-98aed7ae50
libgsf-1.14.33-3.fc23
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cc2916dcf4 xen-4.5.5-5.fc23
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8a0533d057
firewalld-0.4.4.2-2.fc23 selinux-policy-3.13.1-158.25.fc23
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1b64186cbd
botan-1.10.14-3.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b69734181b
kernel-4.8.14-100.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b0dcb9cab6
chromium-55.0.2883.87-1.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-85eae56259
firefox-50.1.0-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3ec9fcf8e4
FlightGear-3.4.0-9.fc23
The following Fedora 23 Critical Path updates have yet to be approved:
Age URL
149
https://bodhi.fedoraproject.org/updates/FEDORA-2016-98a7a1b6e0 abrt-2.8.0-6.fc23
libreport-2.6.4-3.fc23
122
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d6288f555c
libarchive-3.2.1-3.fc23 python-libarchive-c-2.5-1.fc23
83
https://bodhi.fedoraproject.org/updates/FEDORA-2016-79072fd70e
python-virtkey-0.63.0-1.fc23
76
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d26923757a
koji-1.10.1-13.fc23
71
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1649cc31e0
ca-certificates-2016.2.10-1.0.fc23
55
https://bodhi.fedoraproject.org/updates/FEDORA-2016-86a2119f42 nspr-4.13.1-1.fc23
40
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0906f64ec8 rpm-4.13.0-1.fc23
38
https://bodhi.fedoraproject.org/updates/FEDORA-2016-272fa6b96e dracut-043-67.fc23
29
https://bodhi.fedoraproject.org/updates/FEDORA-2016-03d76071b6
nss-3.27.0-1.3.fc23
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-bf6c3ea62c
perl-DBD-MySQL-4.033-4.fc23
13
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6064f86234 vim-8.0.118-1.fc23
13
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a400e4cd90
thunderbird-45.5.1-1.fc23
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cad9307ce0 gd-2.1.1-11.fc23
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3c01772ff6
httpd-2.4.23-5.fc23
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-09abe47360
boost-1.58.0-12.fc23
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6ecaf251f6
poppler-data-0.4.7-5.fc23
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8a0533d057
firewalld-0.4.4.2-2.fc23 selinux-policy-3.13.1-158.25.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-85eae56259
firefox-50.1.0-1.fc23
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b69734181b
kernel-4.8.14-100.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7eebc08556
libvorbis-1.3.5-1.fc23
The following builds have been pushed to Fedora 23 updates-testing
FlightGear-3.4.0-9.fc23
R-3.3.2-3.fc23
byobu-5.113-2.fc23
geany-plugins-1.29-2.fc23
html2ps-1.0-0.21.b7.fc23
libvorbis-1.3.5-1.fc23
openblas-0.2.19-4.fc23
resultsdb-2.0.2-1.fc23
sdlhack-1.4-1.fc23
Details about builds:
================================================================================
FlightGear-3.4.0-9.fc23 (FEDORA-2016-3ec9fcf8e4)
The FlightGear Flight Simulator
--------------------------------------------------------------------------------
Update Information:
This update fixes a security problem, where the route manager can potentially
overwrite arbitrary files. CVE-2016-9956.
--------------------------------------------------------------------------------
================================================================================
R-3.3.2-3.fc23 (FEDORA-2016-46ffd0fe13)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
R now uses openblas instead of the unoptimized blas bundled with R (on all
architectures where openblas is supported). In the previous update, this was
done by symlinking /usr/lib64/R/lib/libRblas.so to /usr/lib64/libopenblas.so.0.
While this worked fine for R, it did not work for anything linking to libR.so or
trying to dynload libRblas.so. To resolve this, a new openblas subpackage
(openblas-Rblas) has been added, which contains a copy of openblas built as
libRblas.so (and reporting libRblas.so as its soname). R now depends on
openblas-Rblas on all architectures which support openblas and on all targets
new enough to build openblas (RHEL 7+, Fedora 23+). Older targets or
incompatible architectures use the unoptimized Rblas. If you wish to switch
from the openblas libRblas.so to the R provided blas, simply rename
/usr/lib64/R/lib/libRrefblas.so to /usr/lib64/R/lib/libRblas.so.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1392192 - segfault during normal usage
https://bugzilla.redhat.com/show_bug.cgi?id=1392192
[ 2 ] Bug #1404662 - libR.so doesn't contain full path of libRblas.so
https://bugzilla.redhat.com/show_bug.cgi?id=1404662
[ 3 ] Bug #1404796 - libRblas.so()(64bit) is needed by package
R-core-3.3.2-2.el5.x86_64
https://bugzilla.redhat.com/show_bug.cgi?id=1404796
--------------------------------------------------------------------------------
================================================================================
byobu-5.113-2.fc23 (FEDORA-2016-49f33ccdaa)
Light-weight, configurable window manager built upon GNU screen
--------------------------------------------------------------------------------
Update Information:
- Fixed an issue with .desktop file (thanks to mastaiza for all tests/bug
reports) - Rebuilt for new upstream release 5.113, fixes rhbz #1276014 ----
Rebuilt for new upstream release 5.113, fixes rhbz #1276014
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1276014 - byobu-5.113 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1276014
--------------------------------------------------------------------------------
================================================================================
geany-plugins-1.29-2.fc23 (FEDORA-2016-f5158c1e2b)
Plugins for Geany
--------------------------------------------------------------------------------
Update Information:
This update should fix an issue with the Geany-Plugin Lipsum.
--------------------------------------------------------------------------------
================================================================================
html2ps-1.0-0.21.b7.fc23 (FEDORA-2016-70a3ee4a0d)
HTML to PostScript converter
--------------------------------------------------------------------------------
Update Information:
This release fixes warnings about deprecated calls in Perl 5.22 and later.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1404275 - Perl warnings on html2ps
https://bugzilla.redhat.com/show_bug.cgi?id=1404275
--------------------------------------------------------------------------------
================================================================================
libvorbis-1.3.5-1.fc23 (FEDORA-2016-7eebc08556)
The Vorbis General Audio Compression Codec
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.5 (#1197923)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1197923 - libvorbis-1.3.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1197923
--------------------------------------------------------------------------------
================================================================================
openblas-0.2.19-4.fc23 (FEDORA-2016-46ffd0fe13)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
R now uses openblas instead of the unoptimized blas bundled with R (on all
architectures where openblas is supported). In the previous update, this was
done by symlinking /usr/lib64/R/lib/libRblas.so to /usr/lib64/libopenblas.so.0.
While this worked fine for R, it did not work for anything linking to libR.so or
trying to dynload libRblas.so. To resolve this, a new openblas subpackage
(openblas-Rblas) has been added, which contains a copy of openblas built as
libRblas.so (and reporting libRblas.so as its soname). R now depends on
openblas-Rblas on all architectures which support openblas and on all targets
new enough to build openblas (RHEL 7+, Fedora 23+). Older targets or
incompatible architectures use the unoptimized Rblas. If you wish to switch
from the openblas libRblas.so to the R provided blas, simply rename
/usr/lib64/R/lib/libRrefblas.so to /usr/lib64/R/lib/libRblas.so.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1392192 - segfault during normal usage
https://bugzilla.redhat.com/show_bug.cgi?id=1392192
[ 2 ] Bug #1404662 - libR.so doesn't contain full path of libRblas.so
https://bugzilla.redhat.com/show_bug.cgi?id=1404662
[ 3 ] Bug #1404796 - libRblas.so()(64bit) is needed by package
R-core-3.3.2-2.el5.x86_64
https://bugzilla.redhat.com/show_bug.cgi?id=1404796
--------------------------------------------------------------------------------
================================================================================
resultsdb-2.0.2-1.fc23 (FEDORA-2016-15a4721fba)
Results store for automated tasks
--------------------------------------------------------------------------------
Update Information:
Make the migration less memory consuming ---- Do not replace config file. Fix
the migration, so it deals with duplicate job uuids.
--------------------------------------------------------------------------------
================================================================================
sdlhack-1.4-1.fc23 (FEDORA-2016-70b1361762)
Force full-screen games to minimize
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream release 1.4
--------------------------------------------------------------------------------