The following Fedora 23 Security updates need testing:
Age URL
425
https://bodhi.fedoraproject.org/updates/FEDORA-2015-16240 nagios-4.0.8-1.fc23
383
https://bodhi.fedoraproject.org/updates/FEDORA-2015-81ded368fe
miniupnpc-1.9-6.fc23
356
https://bodhi.fedoraproject.org/updates/FEDORA-2015-27392b3324
jbig2dec-0.12-2.fc23
306
https://bodhi.fedoraproject.org/updates/FEDORA-2015-dd52a54fa1
python-pymongo-3.0.3-1.fc23
306
https://bodhi.fedoraproject.org/updates/FEDORA-2015-06a7c972e8
thttpd-2.25b-37.fc23
271
https://bodhi.fedoraproject.org/updates/FEDORA-2016-637618fcd4
mingw-nsis-2.50-1.fc23
113
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d79ade826 flex-2.6.0-2.fc23
102
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c2ec9c716e redis-3.2.3-1.fc23
95
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d6288f555c
libarchive-3.2.1-3.fc23 python-libarchive-c-2.5-1.fc23
79
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b3a6435b14
dhcpcd-6.11.3-1.fc23
45
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1649cc31e0
ca-certificates-2016.2.10-1.0.fc23
37
https://bodhi.fedoraproject.org/updates/FEDORA-2016-17ea599651
compat-guile18-1.8.8-14.fc23
21
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b89e991e63
nodejs-0.10.48-1.fc23
13
https://bodhi.fedoraproject.org/updates/FEDORA-2016-15d4c05a19
ghostscript-9.20-5.fc23
11
https://bodhi.fedoraproject.org/updates/FEDORA-2016-272fa6b96e dracut-043-67.fc23
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-48614c8b69
sudo-1.8.18p1-1.fc23
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-605fd98c32
bind-9.10.4-2.P4.fc23
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d2828a4793
firewalld-0.4.4.1-1.fc23
7
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8e39076950
bind99-9.9.9-4.P4.fc23
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4f7d4df7b3
moodle-3.0.7-1.fc23
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a77985b7c7 moin-1.9.9-1.fc23
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e39b7c826b
firefox-50.0-1.fc23
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2edfd75312
zathura-pdf-mupdf-0.3.0-3.fc23 mujs-0-6.20161031gita0ceaf5.fc23
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ee3a114958
kernel-4.8.8-100.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ff9a74c6dc
drupal7-7.52-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7b335750d8
vagrant-1.8.1-3.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-7470a63cd1
teeworlds-0.6.4-1.fc23
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5afe06026b
jenkins-1.625.3-5.fc23 jenkins-remoting-2.62.3-1.fc23
The following Fedora 23 Critical Path updates have yet to be approved:
Age URL
122
https://bodhi.fedoraproject.org/updates/FEDORA-2016-98a7a1b6e0 abrt-2.8.0-6.fc23
libreport-2.6.4-3.fc23
95
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d6288f555c
libarchive-3.2.1-3.fc23 python-libarchive-c-2.5-1.fc23
56
https://bodhi.fedoraproject.org/updates/FEDORA-2016-79072fd70e
python-virtkey-0.63.0-1.fc23
49
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d26923757a
koji-1.10.1-13.fc23
45
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1649cc31e0
ca-certificates-2016.2.10-1.0.fc23
30
https://bodhi.fedoraproject.org/updates/FEDORA-2016-79669f13cf
dmidecode-3.0-6.fc23
28
https://bodhi.fedoraproject.org/updates/FEDORA-2016-86a2119f42 nspr-4.13.1-1.fc23
13
https://bodhi.fedoraproject.org/updates/FEDORA-2016-0906f64ec8 rpm-4.13.0-1.fc23
13
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6acb5c3dcb
ntfs-3g-2016.2.22-3.fc23
13
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f3a79ea051
hwdata-0.294-1.fc23
11
https://bodhi.fedoraproject.org/updates/FEDORA-2016-272fa6b96e dracut-043-67.fc23
11
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3082a2ecdc
perl-5.22.2-355.fc23
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-48614c8b69
sudo-1.8.18p1-1.fc23
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-3a43754667
lxsession-0.5.2-12.D20161106git7b9a9580da.fc23
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-bead55ff97
libfm-1.2.4-9.D20161105gitc2989af015.fc23
9
https://bodhi.fedoraproject.org/updates/FEDORA-2016-be9d874c86
menu-cache-1.0.2-1.fc23
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c72c2c5531
dnsmasq-2.76-2.fc23
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-605fd98c32
bind-9.10.4-2.P4.fc23
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-4122513640
libsndfile-1.0.27-1.fc23
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-62b8930463
pciutils-3.5.2-1.fc23
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e39b7c826b
firefox-50.0-1.fc23
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ee3a114958
kernel-4.8.8-100.fc23
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-03d76071b6
nss-3.27.0-1.3.fc23
The following builds have been pushed to Fedora 23 updates-testing
daq-2.0.6-1.fc23
drupal7-7.52-1.fc23
drupal7-ctools-1.11-1.fc23
drupal7-panels-3.8-2.fc23
drupal8-8.2.2-2.fc23
golang-1.5.4-4.fc23
gtk-gnutella-1.1.11-1.fc23
hitch-1.4.3-1.fc23
ibus-typing-booster-1.5.11-1.fc23
jenkins-1.625.3-5.fc23
jenkins-remoting-2.62.3-1.fc23
knot-2.3.2-1.fc23
modulemd-1.0.2-1.fc23
percolator-3.01-1.fc23
php-SymfonyCmfRouting-1.4.0-1.fc23
radeontop-0.9-5.20161118gitc0abadf.fc23
ruby-2.2.6-50.fc23
rubygem-openscap-0.4.7-1.fc23
teeworlds-0.6.4-1.fc23
vagrant-1.8.1-3.fc23
xmms-1.2.11-27.20071117cvs.fc23
xsensors-0.80-2.fc23
Details about builds:
================================================================================
daq-2.0.6-1.fc23 (FEDORA-2016-cfa2bbcf17)
Data Acquisition Library
--------------------------------------------------------------------------------
Update Information:
initial version, based on Lawrence R. Rogers's daq.spec from
forensics.cert.org
--------------------------------------------------------------------------------
================================================================================
drupal7-7.52-1.fc23 (FEDORA-2016-ff9a74c6dc)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
https://www.drupal.org/SA-CORE-2016-005
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1395917 - drupal7-7.52 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1395917
[ 2 ] Bug #1396423 - drupal7: drupal: Multiple vulnerabilities fixed in 7.52
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1396423
--------------------------------------------------------------------------------
================================================================================
drupal7-ctools-1.11-1.fc23 (FEDORA-2016-f875bf0e4f)
Primarily a set of APIs and tools to improve the developer experience
--------------------------------------------------------------------------------
Update Information:
### drupal7-ctools -
[
7.x-3.8](https://www.drupal.org/project/panels/releases/7.x-3.8) ###
drupal7-panels -
[
7.x-1.11](https://www.drupal.org/project/ctools/releases/7.x-1.11)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1385610 - drupal7-panels-3.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1385610
[ 2 ] Bug #1385608 - drupal7-ctools-1.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1385608
--------------------------------------------------------------------------------
================================================================================
drupal7-panels-3.8-2.fc23 (FEDORA-2016-f875bf0e4f)
Allows a site administrator to create customized layouts
--------------------------------------------------------------------------------
Update Information:
### drupal7-ctools -
[
7.x-3.8](https://www.drupal.org/project/panels/releases/7.x-3.8) ###
drupal7-panels -
[
7.x-1.11](https://www.drupal.org/project/ctools/releases/7.x-1.11)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1385610 - drupal7-panels-3.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1385610
[ 2 ] Bug #1385608 - drupal7-ctools-1.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1385608
--------------------------------------------------------------------------------
================================================================================
drupal8-8.2.2-2.fc23 (FEDORA-2016-703de272dd)
An open source content management platform
--------------------------------------------------------------------------------
Update Information:
## drupal8 Drupal is an open source content management platform powering
millions of websites and applications. It���s built, used, and supported by an
active and diverse community of people around the world. ## php-
SymfonyCmfRouting ### 1.4.0 * **2016-02-27**: Added ContentRepositoryEnhancer
that can look up a content by ID from a content repository.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1383483 - drupal8-8.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1383483
[ 2 ] Bug #1297159 - php-SymfonyCmfRouting-1.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1297159
--------------------------------------------------------------------------------
================================================================================
golang-1.5.4-4.fc23 (FEDORA-2016-109c7b5f68)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
Re-enable p224 curve.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379484 - P224 support for golang
https://bugzilla.redhat.com/show_bug.cgi?id=1379484
[ 2 ] Bug #1038683 - golang appears to contain an ECC implementation
https://bugzilla.redhat.com/show_bug.cgi?id=1038683
--------------------------------------------------------------------------------
================================================================================
gtk-gnutella-1.1.11-1.fc23 (FEDORA-2016-083f401b72)
GUI based Gnutella Client
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.11
--------------------------------------------------------------------------------
================================================================================
hitch-1.4.3-1.fc23 (FEDORA-2016-55acf6f492)
Network proxy that terminates TLS/SSL connections
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.4.3. A maintenance release. See the upstream changelog at
https://github.com/varnish/hitch/blob/master/CHANGES.rst for details. The Fedora
package has included a patch for OpenSSL-1.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1392880 - hitch-1.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1392880
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-1.5.11-1.fc23 (FEDORA-2016-fb3ffa7411)
A typing booster engine for the IBus platform
--------------------------------------------------------------------------------
Update Information:
update to 1.5.11; Add feature to define custom shortcuts ---- update to
1.5.10; Make accent insensitive matching also work in the user database
--------------------------------------------------------------------------------
================================================================================
jenkins-1.625.3-5.fc23 (FEDORA-2016-5afe06026b)
An extendable open source continuous integration server
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-9299
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1395172 - CVE-2016-9299 jenkins: Java deserialization flaw leads to RCE
https://bugzilla.redhat.com/show_bug.cgi?id=1395172
--------------------------------------------------------------------------------
================================================================================
jenkins-remoting-2.62.3-1.fc23 (FEDORA-2016-5afe06026b)
Jenkins remoting module
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-9299
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1395172 - CVE-2016-9299 jenkins: Java deserialization flaw leads to RCE
https://bugzilla.redhat.com/show_bug.cgi?id=1395172
--------------------------------------------------------------------------------
================================================================================
knot-2.3.2-1.fc23 (FEDORA-2016-42a0e354f3)
High-performance authoritative DNS server
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
================================================================================
modulemd-1.0.2-1.fc23 (FEDORA-2016-7c6969bdc6)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1376035 - Review Request: modulemd - Module metadata manipulation library
https://bugzilla.redhat.com/show_bug.cgi?id=1376035
--------------------------------------------------------------------------------
================================================================================
percolator-3.01-1.fc23 (FEDORA-2016-e87942ac88)
Software for postprocessing of shotgun proteomics data
--------------------------------------------------------------------------------
Update Information:
- Update to 3.01
--------------------------------------------------------------------------------
================================================================================
php-SymfonyCmfRouting-1.4.0-1.fc23 (FEDORA-2016-703de272dd)
Extends the Symfony2 routing component for dynamic routes and chaining
--------------------------------------------------------------------------------
Update Information:
## drupal8 Drupal is an open source content management platform powering
millions of websites and applications. It���s built, used, and supported by an
active and diverse community of people around the world. ## php-
SymfonyCmfRouting ### 1.4.0 * **2016-02-27**: Added ContentRepositoryEnhancer
that can look up a content by ID from a content repository.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1383483 - drupal8-8.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1383483
[ 2 ] Bug #1297159 - php-SymfonyCmfRouting-1.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1297159
--------------------------------------------------------------------------------
================================================================================
radeontop-0.9-5.20161118gitc0abadf.fc23 (FEDORA-2016-f4afda7a4e)
View GPU utilization of AMD/ATI Radeon devices
--------------------------------------------------------------------------------
Update Information:
Latest git snapshot
--------------------------------------------------------------------------------
================================================================================
ruby-2.2.6-50.fc23 (FEDORA-2016-48b11aaba3)
An interpreter of object-oriented scripting language
--------------------------------------------------------------------------------
Update Information:
* Update to Ruby 2.2.6. * Add gemspec_add_dep and gemspec_remove_dep macros.
--------------------------------------------------------------------------------
================================================================================
rubygem-openscap-0.4.7-1.fc23 (FEDORA-2016-bbd5a9a236)
A FFI wrapper around the OpenSCAP library
--------------------------------------------------------------------------------
Update Information:
rubygem-openscap-0.4.7-1
--------------------------------------------------------------------------------
================================================================================
teeworlds-0.6.4-1.fc23 (FEDORA-2016-7470a63cd1)
Online multi-player platform 2D shooter
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2016-9400
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1396380 - CVE-2016-9400 teeworlds: Possible remote code execution on
teeworlds client [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1396380
--------------------------------------------------------------------------------
================================================================================
vagrant-1.8.1-3.fc23 (FEDORA-2016-7b335750d8)
Build and distribute virtualized development environments
--------------------------------------------------------------------------------
Update Information:
Fix nfs_cleanup security race and permissions (rhbz#1395040).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1395040 - vagrant nfs exports race
https://bugzilla.redhat.com/show_bug.cgi?id=1395040
--------------------------------------------------------------------------------
================================================================================
xmms-1.2.11-27.20071117cvs.fc23 (FEDORA-2016-1e0c46f409)
The X MultiMedia System, a media player
--------------------------------------------------------------------------------
Update Information:
Enable mp3 playback support (and Provides/Obsoletes xmms-mp3).
--------------------------------------------------------------------------------
================================================================================
xsensors-0.80-2.fc23 (FEDORA-2016-ee5879e01e)
An X11 interface to lm_sensors
--------------------------------------------------------------------------------
Update Information:
Fix icon cache not being refreshed after installing
--------------------------------------------------------------------------------