The following Fedora 23 Security updates need testing: Age URL 113 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12739 python-kdcproxy-0.3.2-1.fc23 96 https://bodhi.fedoraproject.org/updates/FEDORA-2015-5eb2131441 conntrack-tools-1.4.2-9.fc23 67 https://bodhi.fedoraproject.org/updates/FEDORA-2015-16240 nagios-4.0.8-1.fc23 54 https://bodhi.fedoraproject.org/updates/FEDORA-2015-dd52a54fa1 python-pymongo-3.0.3-1.fc23 54 https://bodhi.fedoraproject.org/updates/FEDORA-2015-c76c1c84cf mod_nss-1.0.12-1.fc23 41 https://bodhi.fedoraproject.org/updates/FEDORA-2015-66439aa9e2 openstack-glance-2015.1.2-1.fc23 25 https://bodhi.fedoraproject.org/updates/FEDORA-2015-84a95e39d4 perl-HTML-Scrubber-0.15-1.fc23 25 https://bodhi.fedoraproject.org/updates/FEDORA-2015-81ded368fe miniupnpc-1.9-6.fc23 16 https://bodhi.fedoraproject.org/updates/FEDORA-2015-3d17682c15 putty-0.66-1.fc23 11 https://bodhi.fedoraproject.org/updates/FEDORA-2015-7852ea201b potrace-1.13-2.fc23 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-28e56e52e7 seamonkey-2.39-1.fc23 7 https://bodhi.fedoraproject.org/updates/FEDORA-2015-8b5ea2dc53 rubygem-flexmock-2.0.2-1.fc23 7 https://bodhi.fedoraproject.org/updates/FEDORA-2015-4ad4998d00 libpng-1.6.17-3.fc23 7 https://bodhi.fedoraproject.org/updates/FEDORA-2015-1943310658 libpng15-1.5.22-3.fc23 7 https://bodhi.fedoraproject.org/updates/FEDORA-2015-5d1f935811 imapsync-1.644-2.fc23 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-13668fff74 mingw-libpng-1.6.19-1.fc23 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-79c1758468 abrt-2.7.1-1.fc23 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-e3ec4cbf8f lxdm-0.5.3-1.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-a8c8f60fbd python-django-1.8.7-1.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-df0f324367 knot-2.0.2-1.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-0efcb5fbc5 php-symfony-2.7.7-2.fc23 php-twig-1.23.1-2.fc23 The following Fedora 23 Critical Path updates have yet to be approved: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-2015-37706c9c35 mash-0.6.19-1.fc23 7 https://bodhi.fedoraproject.org/updates/FEDORA-2015-cf51e6b9dc evolution-data-server-3.18.2-2.fc23 7 https://bodhi.fedoraproject.org/updates/FEDORA-2015-4ad4998d00 libpng-1.6.17-3.fc23 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-82bc055b3f perl-PathTools-3.60-1.fc23 6 https://bodhi.fedoraproject.org/updates/FEDORA-2015-22dbc37884 perl-Socket-2.021-1.fc23 3 https://bodhi.fedoraproject.org/updates/FEDORA-2015-9b1b3e9a5c xkeyboard-config-2.16-1.fc23 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2ae867c402 NetworkManager-vpnc-1.0.8-1.fc23 NetworkManager-openconnect-1.0.8-1.fc23 NetworkManager-openvpn-1.0.8-1.fc23 NetworkManager-openswan-1.0.8-1.fc23 NetworkManager-fortisslvpn-1.0.8-1.fc23 NetworkManager-1.0.8-1.fc23 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-3e75abf2a3 krb5-1.14-2.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-498b25667e perl-BSD-Resource-1.290.900-1.fc23 The following builds have been pushed to Fedora 23 updates-testing apitrace-7.1-1.fc23 c2esp-2.7-7.fc23 dpm-dsi-1.9.5-13.fc23 foo2zjs-0.20151111-2.fc23 foo2zjs-0.20151111-3.fc23 foomatic-4.0.12-5.fc23 foomatic-db-4.0-49.20150819.fc23 gammu-1.36.6-3.fc23 globus-authz-3.11-1.fc23 globus-ftp-client-8.27-1.fc23 globus-gass-copy-9.18-1.fc23 globus-gridftp-server-9.3-1.fc23 globus-gridftp-server-control-4.0-1.fc23 globus-net-manager-0.13-1.fc23 globus-xio-5.11-1.fc23 golang-github-coreos-go-systemd-4-1.fc23 golang-github-godbus-dbus-3-0.1.gitc7fdd8b.fc23 golang-github-syndtr-gocapability-0-0.12.git2c00dae.fc23 golang-github-vishvananda-netlink-0-0.5.git1e2e08e.fc23 libmwaw-0.3.7-1.fc23 librvngabw-0.0.1-1.fc23 linsmith-0.99.30-1.fc23 meson-0.27.0-1.fc23 mozjs38-38.2.1-5.fc23 openchange-2.3-7.fc23 opus-1.1.1-1.fc23 pbuilder-0.221-1.fc23 pbuilder-0.221.1-1.fc23 perl-XML-LibXML-2.0121-6.fc23 perl-gettext-1.07-1.fc23 php-5.6.16-1.fc23 php-bartlett-PHP-CompatInfo-4.5.2-1.fc23 php-goutte-1.0.7-1.fc23 php-horde-Horde-Core-2.22.2-1.fc23 php-horde-Horde-Imap-Client-2.29.4-1.fc23 php-jsonlint-1.4.0-1.fc23 php-pear-PHP-CodeSniffer-2.4.0-1.fc23 php-pecl-amqp-1.6.1-1.fc23 php-pecl-mongo-1.6.12-1.fc23 php-symfony-2.7.7-2.fc23 php-twig-1.23.1-2.fc23 pngquant-2.5.2-1.fc23 pypy-4.0.0-3.fc23 python-joblib-0.9.3-2.fc23 python-libpagure-0.5-1.fc23 python-pytest-multihost-0.9-1.fc23 python-scikit-learn-0.17-1.fc23 radcli-1.2.3-2.fc23 splix-2.0.1-0.27.20130902svn.fc23 suricata-2.0.10-1.fc23 virt-manager-1.3.0-1.fc23 Details about builds: ================================================================================ apitrace-7.1-1.fc23 (FEDORA-2015-7599564235) Tools for tracing OpenGL -------------------------------------------------------------------------------- Update Information: Update to version 7.1, see https://github.com/apitrace/apitrace/releases/tag/7.1 for details. -------------------------------------------------------------------------------- ================================================================================ c2esp-2.7-7.fc23 (FEDORA-2015-3711998223) CUPS driver for Kodak AiO printers -------------------------------------------------------------------------------- Update Information: This update fixes postscriptdriver tags in RPMs so the packages can be installed automatically when corresponding printer is attached for the first time. -------------------------------------------------------------------------------- ================================================================================ dpm-dsi-1.9.5-13.fc23 (FEDORA-2015-1e58daa00c) Disk Pool Manager (DPM) plugin for the Globus GridFTP server -------------------------------------------------------------------------------- Update Information: globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent endless loop when auto-retrying failed pasv on other server (8.27) - Disable mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth error code globus-gridftp-server-9.3-1 - Add configuration to require encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13 - Rebuilt for globus-gridftp-server 9.3 -------------------------------------------------------------------------------- ================================================================================ foo2zjs-0.20151111-2.fc23 (FEDORA-2015-329c3c3c51) Linux printer driver for ZjStream protocol -------------------------------------------------------------------------------- Update Information: Add subpackage dependency on parent package ---- Add foo2zjs and associated drivers as new package -------------------------------------------------------------------------------- References: [ 1 ] Bug #970393 - Review Request: foo2zjs - Driver for printers of various wire protocols https://bugzilla.redhat.com/show_bug.cgi?id=970393 -------------------------------------------------------------------------------- ================================================================================ foo2zjs-0.20151111-3.fc23 (FEDORA-2015-b6687a7b2d) Linux printer driver for ZjStream protocol -------------------------------------------------------------------------------- Update Information: Add BuildRequires dependency on cups for driver autodetection -------------------------------------------------------------------------------- References: [ 1 ] Bug #970393 - Review Request: foo2zjs - Driver for printers of various wire protocols https://bugzilla.redhat.com/show_bug.cgi?id=970393 [ 2 ] Bug #1285749 - Add BuildRequires: python3-cups, cups https://bugzilla.redhat.com/show_bug.cgi?id=1285749 -------------------------------------------------------------------------------- ================================================================================ foomatic-4.0.12-5.fc23 (FEDORA-2015-bc23c69657) Tools for using the foomatic database of printers and printer drivers -------------------------------------------------------------------------------- Update Information: This update fixes postscriptdriver tags in RPMs so the packages can be installed automatically when corresponding printer is attached for the first time. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1284093 - higher version "5.2.10-15.fc23" of package gutenprint-cups.x86_64 is already installed https://bugzilla.redhat.com/show_bug.cgi?id=1284093 -------------------------------------------------------------------------------- ================================================================================ foomatic-db-4.0-49.20150819.fc23 (FEDORA-2015-bc23c69657) Database of printers and printer drivers -------------------------------------------------------------------------------- Update Information: This update fixes postscriptdriver tags in RPMs so the packages can be installed automatically when corresponding printer is attached for the first time. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1284093 - higher version "5.2.10-15.fc23" of package gutenprint-cups.x86_64 is already installed https://bugzilla.redhat.com/show_bug.cgi?id=1284093 -------------------------------------------------------------------------------- ================================================================================ gammu-1.36.6-3.fc23 (FEDORA-2015-f573575dae) Command Line utility to work with mobile phones -------------------------------------------------------------------------------- Update Information: Took some ideas from gammu.spec in upstream. ---- Update to gammu-1.36 with indepent python-gammu package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1257375 - gammu-1.36.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1257375 -------------------------------------------------------------------------------- ================================================================================ globus-authz-3.11-1.fc23 (FEDORA-2015-1e58daa00c) Globus Toolkit - Globus authz library -------------------------------------------------------------------------------- Update Information: globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent endless loop when auto-retrying failed pasv on other server (8.27) - Disable mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth error code globus-gridftp-server-9.3-1 - Add configuration to require encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13 - Rebuilt for globus-gridftp-server 9.3 -------------------------------------------------------------------------------- ================================================================================ globus-ftp-client-8.27-1.fc23 (FEDORA-2015-1e58daa00c) Globus Toolkit - GridFTP Client Library -------------------------------------------------------------------------------- Update Information: globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent endless loop when auto-retrying failed pasv on other server (8.27) - Disable mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth error code globus-gridftp-server-9.3-1 - Add configuration to require encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13 - Rebuilt for globus-gridftp-server 9.3 -------------------------------------------------------------------------------- ================================================================================ globus-gass-copy-9.18-1.fc23 (FEDORA-2015-1e58daa00c) Globus Toolkit - Globus Gass Copy -------------------------------------------------------------------------------- Update Information: globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent endless loop when auto-retrying failed pasv on other server (8.27) - Disable mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth error code globus-gridftp-server-9.3-1 - Add configuration to require encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13 - Rebuilt for globus-gridftp-server 9.3 -------------------------------------------------------------------------------- ================================================================================ globus-gridftp-server-9.3-1.fc23 (FEDORA-2015-1e58daa00c) Globus Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information: globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent endless loop when auto-retrying failed pasv on other server (8.27) - Disable mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth error code globus-gridftp-server-9.3-1 - Add configuration to require encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13 - Rebuilt for globus-gridftp-server 9.3 -------------------------------------------------------------------------------- ================================================================================ globus-gridftp-server-control-4.0-1.fc23 (FEDORA-2015-1e58daa00c) Globus Toolkit - Globus GridFTP Server Library -------------------------------------------------------------------------------- Update Information: globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent endless loop when auto-retrying failed pasv on other server (8.27) - Disable mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth error code globus-gridftp-server-9.3-1 - Add configuration to require encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13 - Rebuilt for globus-gridftp-server 9.3 -------------------------------------------------------------------------------- ================================================================================ globus-net-manager-0.13-1.fc23 (FEDORA-2015-1e58daa00c) Globus Toolkit - Network Manager -------------------------------------------------------------------------------- Update Information: globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent endless loop when auto-retrying failed pasv on other server (8.27) - Disable mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth error code globus-gridftp-server-9.3-1 - Add configuration to require encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13 - Rebuilt for globus-gridftp-server 9.3 -------------------------------------------------------------------------------- ================================================================================ globus-xio-5.11-1.fc23 (FEDORA-2015-1e58daa00c) Globus Toolkit - Globus XIO Framework -------------------------------------------------------------------------------- Update Information: globus-xio-5.11-1 - Fix failures connecting to IPv4 mapped addresses on systems that disable dual stack sockets by default) globus-ftp-client-8.27-1 - Prevent endless loop when auto-retrying failed pasv on other server (8.27) - Disable mandatory IPv6 in tests (8.26) globus-gass-copy-9.18-1 - updated tests globus-authz-3.11-1 - updated tests globus-net-manager-0.13-1 - Remove unused code globus-gridftp-server-control-4.0-1 - Add correct behavior for data auth error code globus-gridftp-server-9.3-1 - Add configuration to require encrypted data channels (9.3) - More robust cmp function (9.2) dpm-dsi-1.9.5-13 - Rebuilt for globus-gridftp-server 9.3 -------------------------------------------------------------------------------- ================================================================================ golang-github-coreos-go-systemd-4-1.fc23 (FEDORA-2015-a0f97e0154) Go bindings to systemd socket activation, journal and D-BUS APIs -------------------------------------------------------------------------------- Update Information: Update -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248722 - Tracker for golang-github-coreos-go-systemd https://bugzilla.redhat.com/show_bug.cgi?id=1248722 -------------------------------------------------------------------------------- ================================================================================ golang-github-godbus-dbus-3-0.1.gitc7fdd8b.fc23 (FEDORA-2015-0faf26cacf) Go client bindings for D-Bus -------------------------------------------------------------------------------- Update Information: Update -------------------------------------------------------------------------------- References: [ 1 ] Bug #1249043 - Tracker for golang-github-godbus-dbus https://bugzilla.redhat.com/show_bug.cgi?id=1249043 -------------------------------------------------------------------------------- ================================================================================ golang-github-syndtr-gocapability-0-0.12.git2c00dae.fc23 (FEDORA-2015-238ada9664) POSIX capability library for the Go programming language -------------------------------------------------------------------------------- Update Information: Update -------------------------------------------------------------------------------- References: [ 1 ] Bug #1254599 - Tracker for golang-github-syndtr-gocapability https://bugzilla.redhat.com/show_bug.cgi?id=1254599 -------------------------------------------------------------------------------- ================================================================================ golang-github-vishvananda-netlink-0-0.5.git1e2e08e.fc23 (FEDORA-2015-8aab9e6b12) Simple netlink library for go -------------------------------------------------------------------------------- Update Information: Update -------------------------------------------------------------------------------- References: [ 1 ] Bug #1248155 - Tracker for golang-github-vishvananda-netlink https://bugzilla.redhat.com/show_bug.cgi?id=1248155 -------------------------------------------------------------------------------- ================================================================================ libmwaw-0.3.7-1.fc23 (FEDORA-2015-50827c4595) A library for import of many old Mac document formats -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ================================================================================ librvngabw-0.0.1-1.fc23 (FEDORA-2015-7141b5a80c) An AbiWord document generator library -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ================================================================================ linsmith-0.99.30-1.fc23 (FEDORA-2015-cfe6737d7b) A Smith charting program -------------------------------------------------------------------------------- Update Information: - Rebuilt for new upstream version 0.99.30 fixes rhbz #1285579 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1285579 - linsmith-0.99.30 is available https://bugzilla.redhat.com/show_bug.cgi?id=1285579 -------------------------------------------------------------------------------- ================================================================================ meson-0.27.0-1.fc23 (FEDORA-2015-e005d027e3) High productivity build system -------------------------------------------------------------------------------- Update Information: 0.27.0 -------------------------------------------------------------------------------- ================================================================================ mozjs38-38.2.1-5.fc23 (FEDORA-2015-7c2272a08a) JavaScript interpreter and libraries -------------------------------------------------------------------------------- Update Information: - fix build on s390 (rhbz#1219542) ---- Makes two functions from CharacterEncoding.cpp visible in shared library (needed by MongoDB) ---- Handle all Fedora 64-bit architectures. ---- New package mozjs-38 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1269539 - Review Request: mozjs38 - JavaScript interpreter and libraries https://bugzilla.redhat.com/show_bug.cgi?id=1269539 -------------------------------------------------------------------------------- ================================================================================ openchange-2.3-7.fc23 (FEDORA-2015-b273e4a581) Provides access to Microsoft Exchange servers using native protocols -------------------------------------------------------------------------------- Update Information: Rebuild against newer samba. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1277023 - openchange-2.3-5.fc23.x86_64 requires libsamba-debug-samba4.so(SAMBA_4.3.0RC4)(64bit) https://bugzilla.redhat.com/show_bug.cgi?id=1277023 -------------------------------------------------------------------------------- ================================================================================ opus-1.1.1-1.fc23 (FEDORA-2015-d4554daa88) An audio codec for use in low-delay speech and audio communication -------------------------------------------------------------------------------- Update Information: Update 1.1.1 GA -------------------------------------------------------------------------------- ================================================================================ pbuilder-0.221-1.fc23 (FEDORA-2015-1a82418815) Personal package builder for Debian packages -------------------------------------------------------------------------------- Update Information: Update to version 0.221, see http://metadata.ftp- master.debian.org/changelogs//main/p/pbuilder/pbuilder_0.221_changelog for details. ---- Update to version 0.220, see http://metadata.ftp- master.debian.org/changelogs//main/p/pbuilder/pbuilder_0.220_changelog for details. -------------------------------------------------------------------------------- ================================================================================ pbuilder-0.221.1-1.fc23 (FEDORA-2015-6fc6558caa) Personal package builder for Debian packages -------------------------------------------------------------------------------- Update Information: Update to version 0.221.1, see http://metadata.ftp- master.debian.org/changelogs//main/p/pbuilder/pbuilder_0.221.1_changelog for details. -------------------------------------------------------------------------------- ================================================================================ perl-XML-LibXML-2.0121-6.fc23 (FEDORA-2015-42fe6c3ee4) Perl interface to the libxml2 library -------------------------------------------------------------------------------- Update Information: Rebuild against new libxml2 -------------------------------------------------------------------------------- ================================================================================ perl-gettext-1.07-1.fc23 (FEDORA-2015-45c9e44659) Interface to gettext family of functions -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1285418 - Upgrade perl-gettext to 1.07 https://bugzilla.redhat.com/show_bug.cgi?id=1285418 -------------------------------------------------------------------------------- ================================================================================ php-5.6.16-1.fc23 (FEDORA-2015-b6106691ab) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information: 26 Nov 2015, **PHP 5.6.16** **Core:** * Fixed bug #70828 (php-fpm 5.6 with opcache crashes when referencing a non-existent constant). (Laruence) * Fixed bug #70748 (Segfault in ini_lex () at Zend/zend_ini_scanner.l). (Laruence) **Mysqlnd:** * Fixed bug #68344 (MySQLi does not provide way to disable peer certificate validation) by introducing MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT connection flag. (Andrey) **PDO_DBlib:** * Fixed bug #69757 (Segmentation fault on nextRowset). (miracle at rpz dot name) **SOAP:** * Fixed bug #70875 (Segmentation fault if wsdl has no targetNamespace attribute). (Matteo) **SPL:** * Fixed bug #70852 (Segfault getting NULL offset of an ArrayObject). (Reeze Xia) -------------------------------------------------------------------------------- ================================================================================ php-bartlett-PHP-CompatInfo-4.5.2-1.fc23 (FEDORA-2015-f9ca00be77) Find out version and the extensions required for a piece of code to run -------------------------------------------------------------------------------- Update Information: Refresh the reference DB -------------------------------------------------------------------------------- ================================================================================ php-goutte-1.0.7-1.fc23 (FEDORA-2015-28a68268ea) A simple PHP web scraper -------------------------------------------------------------------------------- Update Information: Updated to 1.0.7 https://github.com/FriendsOfPHP/Goutte/compare/v1.0.6...v1.0.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1100719 - php-goutte-v3.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1100719 -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Core-2.22.2-1.fc23 (FEDORA-2015-14e03c502c) Horde Core Framework libraries -------------------------------------------------------------------------------- Update Information: **Horde_Core 2.22.2** * [mjr] Small logging improvements for ActiveSync. * [mjr] Match various session parameters in the NULL driver. **Horde_Imap_Client 2.29.4** * [jan] Fix parsing IMAP responses with tilde characters. -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Imap-Client-2.29.4-1.fc23 (FEDORA-2015-14e03c502c) Horde IMAP abstraction interface -------------------------------------------------------------------------------- Update Information: **Horde_Core 2.22.2** * [mjr] Small logging improvements for ActiveSync. * [mjr] Match various session parameters in the NULL driver. **Horde_Imap_Client 2.29.4** * [jan] Fix parsing IMAP responses with tilde characters. -------------------------------------------------------------------------------- ================================================================================ php-jsonlint-1.4.0-1.fc23 (FEDORA-2015-c03f68e8fb) JSON Lint for PHP -------------------------------------------------------------------------------- Update Information: **Version 1.4.0 (2015-11-21)** * Added a DuplicateKeyException allowing for more specific error detection and handling -------------------------------------------------------------------------------- ================================================================================ php-pear-PHP-CodeSniffer-2.4.0-1.fc23 (FEDORA-2015-6f4d71f493) PHP coding standards enforcement tool -------------------------------------------------------------------------------- Update Information: Upstream Changelog, **version 2.4.0** - Added support for PHP 7 anonymous classes - Anonymous classes are now tokenized as T_ANON_CLASS and ignored by normal class sniffs - Added support for PHP 7 function return type declarations - Return types are now tokenized as T_RETURN_TYPE - Fixed tokenizing of the XOR operator, which was incorrectly identified as a power operator (bug #765) - The T_POWER token has been removed and replaced by the T_BITWISE_XOR token - The PHP-supplied T_POW token has been replicated for PHP versions before 5.6 - Traits are now tokenized in PHP versions before 5.4 to make testing easier - Improved regular expression detection in JS files - PEAR FunctionCallSignatureSniff now properly detects indents in more mixed HTML/PHP code blocks - Full report now properly indents lines when newlines are found inside error messages - Generating documentation without specifying a standard now uses the default standard instead. Thanks to Ken Guest for the patch - Generic InlineControlStructureSniff now supports braceless do/while loops in JS. Thanks to Pieter Frenssen for the patch - Added more guard code for function declarations with syntax errors. Thanks to Yun Young-jin for the patch - Added more guard code for foreach declarations with syntax errors. Thanks to Johan de Ruijter for the patch - Added more guard code for class declarations with syntax errors - Squiz ArrayDeclarationSniff now has guard code for arrays with syntax errors - Generic InlineControlStructureSniff now correctly fixes ELSEIF statements - Fixed bug #601 : Expected type hint int[]; found array in Squiz FunctionCommentSniff. Thanks to Scato Eggen for the patch - Fixed bug #625 : Consider working around T_HASHBANG in HHVM 3.5.x and 3.6.x. Thanks to Kunal Mehta for the patch - Fixed bug #692 : Comment tokenizer can break when using mbstring function overloading - Fixed bug #694 : Long sniff codes can cause PHP warnings in source report when showing error codes - Fixed bug #698 : PSR2.Methods.FunctionCallSignature.Indent forces exact indent of ternary operator parameters - Fixed bug #704 : ScopeIndent can fail when an opening parenthesis is on a line by itself - Fixed bug #707 : Squiz MethodScopeSniff doesn't handle nested functions - Fixed bug #709 : Squiz.Sniffs.Whitespace.ScopeClosingBraceSniff marking indented endif in mixed inline HTML blocks - Fixed bug #711 : Sniffing from STDIN shows Generic.Files.LowercasedFilename.NotFound error - Fixed bug #714 : Fixes suppression of errors using docblocks. Thanks to Andrzej Karmazyn for the patch - Fixed bug #716 : JSON report is invalid when messages contain newlines or tabs. Thanks to Pieter Frenssen for the patch - Fixed bug #723 : ScopeIndent can fail when multiple array closers are on the same line - Fixed bug #730 : ScopeIndent can fail when a short array opening square bracket is on a line by itself - Fixed bug #732 : PHP Notice if @package name is made up of all invalid characters. Adds new error code PEAR.Commenting.FileComment.InvalidPackageValue - Fixed bug #748 : Auto fix for Squiz.Commenting.BlockComment.WrongEnd is incorrect. Thanks to J.D. Grimes for the patch - Fixed bug #753 : PSR2 standard shouldn't require space after USE block when next code is a closing tag - Fixed bug #768 : PEAR FunctionCallSignature sniff forbids comments after opening parenthesis of a multiline call - Fixed bug #769 : Incorrect detection of variable reference operator when used with short array syntax. Thanks to Klaus Purer for the patch - Fixed bug #772 : Syntax error when using PHPCBF on alternative style foreach loops - Fixed bug #773 : Syntax error when stripping trailing PHP close tag and previous statement has no semicolon - Fixed bug #778 : PHPCBF creates invalid PHP for inline FOREACH containing multiple control structures - Fixed bug #781 : Incorrect checking for PHP7 return types on multi- line function declartions - Fixed bug #782 : Conditional function declarations cause fixing conflicts in Squiz standard. Squiz.ControlStructures.ControlSignature no longer enforces a single newline after open brace. Squiz.WhiteSpace.ControlStructureSpacing can be used to checl spacing at the start/end of control structures -------------------------------------------------------------------------------- ================================================================================ php-pecl-amqp-1.6.1-1.fc23 (FEDORA-2015-bae66365b1) Communicate with any AMQP compliant server -------------------------------------------------------------------------------- Update Information: **1.6.1 Release:** * Fix invalid amqp_table_t arguments population and freeing * Fix not properly deleted connection resource -------------------------------------------------------------------------------- ================================================================================ php-pecl-mongo-1.6.12-1.fc23 (FEDORA-2015-4d5cc3b040) PHP MongoDB database driver -------------------------------------------------------------------------------- Update Information: **Version 1.6.12** * [PHP-1494] - We don't allocate enough space for the hash buffer -------------------------------------------------------------------------------- ================================================================================ php-symfony-2.7.7-2.fc23 (FEDORA-2015-0efcb5fbc5) PHP framework for web projects -------------------------------------------------------------------------------- Update Information: **Twig 1.23.1** (2015-11-05) * fixed some exception messages which triggered PHP warnings * fixed BC on Twig_Test_NodeTestCase **Twig 1.23.0** (2015-10-29) * deprecated the possibility to override an extension by registering another one with the same name * deprecated Twig_ExtensionInterface::getGlobals() (added Twig_Extension_GlobalsInterface for BC) * deprecated Twig_ExtensionInterface::initRuntime() (added Twig_Extension_InitRuntimeInterface for BC) * deprecated Twig_Environment::computeAlternatives() **Symfony 2.7.7** (2015-11-23) * security #16631 CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature (xabbuh) * security #16630 CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service (xabbuh) * bug #16588 Sent out a status text for unknown HTTP headers. (dawehner) * bug #16295 [DependencyInjection] Unescape parameters for all types of injection (Nicofuma) * bug #16574 [Process] Fix PhpProcess with phpdbg runtime (nicolas-grekas) * bug #16578 [Console] Fix bug in windows detection (kbond) * bug #16546 [Serializer] ObjectNormalizer: don't serialize static methods and props (dunglas) * bug #16352 Fix the server variables in the router_*.php files (leofeyer) * bug #16537 [Validator] Allow an empty path with a non empty fragment or a query (jakzal) * bug #16528 [Translation] Add support for Armenian pluralization. (marcosdsanchez) * bug #16510 [Process] fix Proccess run with pts enabled (ewgRa) * bug #16292 fix race condition at mkdir (#16258) (ewgRa) * bug #15945 [Form] trigger deprecation warning when using empty_value (xabbuh) * bug #16384 [FrameworkBundle] JsonDescriptor - encode container params only once (xabbuh) * bug #16480 [VarDumper] Fix PHP7 type- hints compat (nicolas-grekas) * bug #16463 [PropertyAccess] Port of the performance optimization from 2.3 (dunglas) * bug #16462 [PropertyAccess] Fix dynamic property accessing. (dunglas) * bug #16454 [Serializer] GetSetNormalizer shouldn't set/get static methods (boekkooi) * bug #16453 [Serializer] PropertyNormalizer shouldn't set static properties (boekkooi) * bug #16471 [VarDumper] Fix casting for ReflectionParameter (nicolas-grekas) * bug #16294 [PropertyAccess] Major performance improvement (dunglas) * bug #16331 fixed Twig deprecation notices (fabpot) * bug #16306 [DoctrineBridge] Fix issue which prevent the profiler to explain a query (Baachi) * bug #16359 Use mb_detect_encoding with $strict = true (nicolas-grekas) * bug #16144 [Security] don't allow to install the split Security packages (xabbuh) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1285263 - CVE-2015-8124 CVE-2015-8125 php-symfony: Session fixation and remote timing attack vulnerabilities https://bugzilla.redhat.com/show_bug.cgi?id=1285263 -------------------------------------------------------------------------------- ================================================================================ php-twig-1.23.1-2.fc23 (FEDORA-2015-0efcb5fbc5) The flexible, fast, and secure template engine for PHP -------------------------------------------------------------------------------- Update Information: **Twig 1.23.1** (2015-11-05) * fixed some exception messages which triggered PHP warnings * fixed BC on Twig_Test_NodeTestCase **Twig 1.23.0** (2015-10-29) * deprecated the possibility to override an extension by registering another one with the same name * deprecated Twig_ExtensionInterface::getGlobals() (added Twig_Extension_GlobalsInterface for BC) * deprecated Twig_ExtensionInterface::initRuntime() (added Twig_Extension_InitRuntimeInterface for BC) * deprecated Twig_Environment::computeAlternatives() **Symfony 2.7.7** (2015-11-23) * security #16631 CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature (xabbuh) * security #16630 CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service (xabbuh) * bug #16588 Sent out a status text for unknown HTTP headers. (dawehner) * bug #16295 [DependencyInjection] Unescape parameters for all types of injection (Nicofuma) * bug #16574 [Process] Fix PhpProcess with phpdbg runtime (nicolas-grekas) * bug #16578 [Console] Fix bug in windows detection (kbond) * bug #16546 [Serializer] ObjectNormalizer: don't serialize static methods and props (dunglas) * bug #16352 Fix the server variables in the router_*.php files (leofeyer) * bug #16537 [Validator] Allow an empty path with a non empty fragment or a query (jakzal) * bug #16528 [Translation] Add support for Armenian pluralization. (marcosdsanchez) * bug #16510 [Process] fix Proccess run with pts enabled (ewgRa) * bug #16292 fix race condition at mkdir (#16258) (ewgRa) * bug #15945 [Form] trigger deprecation warning when using empty_value (xabbuh) * bug #16384 [FrameworkBundle] JsonDescriptor - encode container params only once (xabbuh) * bug #16480 [VarDumper] Fix PHP7 type- hints compat (nicolas-grekas) * bug #16463 [PropertyAccess] Port of the performance optimization from 2.3 (dunglas) * bug #16462 [PropertyAccess] Fix dynamic property accessing. (dunglas) * bug #16454 [Serializer] GetSetNormalizer shouldn't set/get static methods (boekkooi) * bug #16453 [Serializer] PropertyNormalizer shouldn't set static properties (boekkooi) * bug #16471 [VarDumper] Fix casting for ReflectionParameter (nicolas-grekas) * bug #16294 [PropertyAccess] Major performance improvement (dunglas) * bug #16331 fixed Twig deprecation notices (fabpot) * bug #16306 [DoctrineBridge] Fix issue which prevent the profiler to explain a query (Baachi) * bug #16359 Use mb_detect_encoding with $strict = true (nicolas-grekas) * bug #16144 [Security] don't allow to install the split Security packages (xabbuh) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1285263 - CVE-2015-8124 CVE-2015-8125 php-symfony: Session fixation and remote timing attack vulnerabilities https://bugzilla.redhat.com/show_bug.cgi?id=1285263 -------------------------------------------------------------------------------- ================================================================================ pngquant-2.5.2-1.fc23 (FEDORA-2015-417a2e8149) PNG quantization tool for reducing image file size -------------------------------------------------------------------------------- Update Information: Update to 2.5.2 (#1285589) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1285589 - pngquant-2.5.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1285589 -------------------------------------------------------------------------------- ================================================================================ pypy-4.0.0-3.fc23 (FEDORA-2015-ca4272870b) Python implementation with a Just-In-Time compiler -------------------------------------------------------------------------------- Update Information: Add support for Power 64 platforms ---- Update to 4.0.0 -------------------------------------------------------------------------------- ================================================================================ python-joblib-0.9.3-2.fc23 (FEDORA-2015-93f2497cbb) Lightweight pipelining: using Python functions as pipeline jobs -------------------------------------------------------------------------------- Update Information: * joblib 0.9.3 * scikit-learn 0.17 along with py3 packages -------------------------------------------------------------------------------- References: [ 1 ] Bug #1239857 - python-scikit-learn: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1239857 [ 2 ] Bug #1285054 - python-scikit-learn 0.17 https://bugzilla.redhat.com/show_bug.cgi?id=1285054 [ 3 ] Bug #1285053 - python-scikit-learn0.17 https://bugzilla.redhat.com/show_bug.cgi?id=1285053 -------------------------------------------------------------------------------- ================================================================================ python-libpagure-0.5-1.fc23 (FEDORA-2015-78a26442ab) A Python library for Pagure APIs -------------------------------------------------------------------------------- Update Information: Update the source to 0.5 ---- Initial packaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #1281739 - Review Request: python-libpagure - A Python library for Pagure APIs https://bugzilla.redhat.com/show_bug.cgi?id=1281739 -------------------------------------------------------------------------------- ================================================================================ python-pytest-multihost-0.9-1.fc23 (FEDORA-2015-f8ecd33065) Utility for writing multi-host tests for pytest -------------------------------------------------------------------------------- Update Information: Update to upstream 0.9 -------------------------------------------------------------------------------- ================================================================================ python-scikit-learn-0.17-1.fc23 (FEDORA-2015-93f2497cbb) Machine learning in Python -------------------------------------------------------------------------------- Update Information: * joblib 0.9.3 * scikit-learn 0.17 along with py3 packages -------------------------------------------------------------------------------- References: [ 1 ] Bug #1239857 - python-scikit-learn: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1239857 [ 2 ] Bug #1285054 - python-scikit-learn 0.17 https://bugzilla.redhat.com/show_bug.cgi?id=1285054 [ 3 ] Bug #1285053 - python-scikit-learn0.17 https://bugzilla.redhat.com/show_bug.cgi?id=1285053 -------------------------------------------------------------------------------- ================================================================================ radcli-1.2.3-2.fc23 (FEDORA-2015-d7bf43de7f) RADIUS protocol client library -------------------------------------------------------------------------------- Update Information: Fixed overflow in rc_ipaddr_local() -------------------------------------------------------------------------------- ================================================================================ splix-2.0.1-0.27.20130902svn.fc23 (FEDORA-2015-af0c05ec3f) Driver for QPDL/SPL2 printers (Samsung and several Xerox printers) -------------------------------------------------------------------------------- Update Information: This update fixes postscriptdriver tags in RPMs so the packages can be installed automatically when corresponding printer is attached for the first time. -------------------------------------------------------------------------------- ================================================================================ suricata-2.0.10-1.fc23 (FEDORA-2015-3cdd7cefa4) Intrusion Detection System -------------------------------------------------------------------------------- Update Information: Fixes malformed DNS packet crashing Suricata. ---- suricata-2.0.9-1.fc23 - New upstream bug fix release One DoS bug and several detection bugs were fixed. -------------------------------------------------------------------------------- ================================================================================ virt-manager-1.3.0-1.fc23 (FEDORA-2015-7dfc5692ef) Desktop tool for managing virtual machines via libvirt -------------------------------------------------------------------------------- Update Information: * Rebased to version 1.3.0 * Error when trying to modify existing 9p share (bz #1257565) * virt-manager tries to create vmport device on non-x86 backends (bz #1259998) * Details/Virtual networks: Allow manually specifying a bridge for qemu:///session (bz #1212443) * [RFE] Improve Solaris 10 x86-64 support in virt- manager (bz #1262093) * No system tray icon in Cinnamon session (bz #1257949) * virt-install does not remove orphaned images on failure (bz #1212617) * virt- manager does not warn if it cannot find the network (bz #1212616) * Storage volume manager looses focus when a volume is deleted (bz #1279861) * Storage volume manager does not update free space (bz #1279940) * Reboot/Shutdown buttons does not work on aarch64 (bz #1212826) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1212617 - virt-install does not remove orphaned images on failure https://bugzilla.redhat.com/show_bug.cgi?id=1212617 [ 2 ] Bug #1212616 - virt-manager does not warn if it cannot find the network https://bugzilla.redhat.com/show_bug.cgi?id=1212616 [ 3 ] Bug #1279861 - Storage volume manager looses focus when a volume is deleted https://bugzilla.redhat.com/show_bug.cgi?id=1279861 [ 4 ] Bug #1279940 - Storage volume manager does not update free space https://bugzilla.redhat.com/show_bug.cgi?id=1279940 [ 5 ] Bug #1212826 - Reboot/Shutdown buttons does not work on aarch64 https://bugzilla.redhat.com/show_bug.cgi?id=1212826 -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: http://lists.fedoraproject.org/admin/lists/test@xxxxxxxxxxxxxxxxxxxxxxx