The following Fedora 23 Security updates need testing: Age URL 134 https://bodhi.fedoraproject.org/updates/FEDORA-2015-16240 nagios-4.0.8-1.fc23 92 https://bodhi.fedoraproject.org/updates/FEDORA-2015-81ded368fe miniupnpc-1.9-6.fc23 65 https://bodhi.fedoraproject.org/updates/FEDORA-2015-27392b3324 jbig2dec-0.12-2.fc23 55 https://bodhi.fedoraproject.org/updates/FEDORA-2015-abf9659276 php-PHPMailer-5.2.14-1.fc23 15 https://bodhi.fedoraproject.org/updates/FEDORA-2015-dd52a54fa1 python-pymongo-3.0.3-1.fc23 15 https://bodhi.fedoraproject.org/updates/FEDORA-2015-06a7c972e8 thttpd-2.25b-37.fc23 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-fe5b9da308 openstack-heat-2015.1.2-2.fc23 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-25ab518a58 nodejs-is-my-json-valid-2.12.4-1.fc23 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-b02ad4e424 ecryptfs-utils-109-1.fc23 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-a69ee02554 xulrunner-44.0-1.fc23 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-5a5c85c5a8 prosody-0.9.10-1.fc23 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2ec7f779f2 claws-mail-3.13.2-1.fc23 1 https://bodhi.fedoraproject.org/updates/FEDORA-2016-e55278763e phpMyAdmin-4.5.4.1-1.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-4509765b4b gsi-openssh-7.1p2-3.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-97002ad37b rubygem-actionview-4.2.3-3.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-f486068393 rubygem-actionpack-4.2.3-4.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-eb4d6e8aab rubygem-activemodel-4.2.3-2.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-3ede04cd79 rubygem-activesupport-4.2.3-3.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-cc465a34df rubygem-activerecord-4.2.3-2.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-ec05afb364 webkitgtk4-2.10.7-1.fc23 The following Fedora 23 Critical Path updates have yet to be approved: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-a69ee02554 xulrunner-44.0-1.fc23 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-69c039b644 taglib-1.10-1.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3fc0f9415 systemd-222-14.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-bc263ac241 pixman-0.34.0-1.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-fd30ad26a9 kernel-4.3.5-300.fc23 The following builds have been pushed to Fedora 23 updates-testing atomic-reactor-1.6.2-1.fc23 awesome-3.5.8-1.fc23 cobbler-2.6.11-3.fc23 devtodo2-2.1-14.20120711git8dee6.fc23 glusterfs-3.7.7-1.fc23 gnome-chemistry-utils-0.14.10-13.fc23 google-api-python-client-1.4.2-5.fc23 gsi-openssh-7.1p2-3.fc23 kdevelop-4.7.3-1.fc23 kdevelop-php-1.7.3-1.fc23 kdevelop-python-1.7.3-1.py3.fc23 kdevplatform-1.7.3-1.fc23 kernel-4.3.5-300.fc23 liferea-1.10.18-1.fc23 lilypond-2.19.36-1.fc23 lilypond-doc-2.19.36-1.fc23 milter-greylist-4.5.16-2.fc23 opendnssec-1.4.9-1.fc23 perl-App-cpm-0.113-1.fc23 perl-HTTP-BrowserDetect-2.08-1.fc23 perl-Net-GitHub-0.83-1.fc23 perl-Tk-Pod-0.9943-1.fc23 php-pear-Mail-1.3.0-1.fc23 php-twig-1.24.0-1.fc23 pixman-0.34.0-1.fc23 python-acoustid-1.1.0-1.fc23 python-contexttimer-0.3.1-1.fc23 python-fedmsg-meta-fedora-infrastructure-0.15.8-1.fc23 python-flexmock-0.10.2-1.fc23 python-importanize-0.4.1-2.fc23 python-livereload-2.4.1-1.fc23 python-port-for-0.3.1-2.fc23 python-rhsm-1.17.1-1.fc23 python-simplepath-0.3.2-2.fc23 python-sphinx-autobuild-0.5.2-2.fc23 q-text-as-data-1.5.0-2.fc23 rubygem-activemodel-4.2.3-2.fc23 rubygem-activerecord-4.2.3-2.fc23 rubygem-activesupport-4.2.3-3.fc23 smuxi-1.0.3-1.fc23 subscription-manager-1.17.1-1.fc23 system-config-language-3.3.0-2.fc23 systemd-222-14.fc23 webkitgtk4-2.10.7-1.fc23 Details about builds: ================================================================================ atomic-reactor-1.6.2-1.fc23 (FEDORA-2016-3e8d7d99e5) Improved builder for Docker images -------------------------------------------------------------------------------- Update Information: New upstream version. -------------------------------------------------------------------------------- ================================================================================ awesome-3.5.8-1.fc23 (FEDORA-2016-6e58ca0128) Highly configurable, framework window manager for X. Fast, light and extensible -------------------------------------------------------------------------------- Update Information: Awesome 3.5.8 fixes a bug where keyboard bindings stopped working when the keyboard layout was changed. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1303307 - Awesome WM: Some key bindings (e.g. window close) sporadically stop to work for already open clients https://bugzilla.redhat.com/show_bug.cgi?id=1303307 -------------------------------------------------------------------------------- ================================================================================ cobbler-2.6.11-3.fc23 (FEDORA-2016-2b47b62640) Boot server configurator -------------------------------------------------------------------------------- Update Information: Update to 2.6.11: Feature improvements - Add support for FreeBSD 9.1, 9.2, 9.3, 10.1 and 10.2 - Add support for SLES 12.1 in signatures (#1597) - Koan: use new dracut ip option for configuring static interfaces Bugfixes - Improve handling of yum-utils/dnf, rsync in cobbler check and RPM packaging (#1611, #1586, #1543, #1427, #791) - Change online Cobbler resource URL's from cobbler.github.com to cobbler.github.io - Fix bonding for RHEL 6 and RHEL 7 - Koan: fix incompatibility with F21 virt-install (#1398) - Koan: fix os_version conditionals -------------------------------------------------------------------------------- ================================================================================ devtodo2-2.1-14.20120711git8dee6.fc23 (FEDORA-2016-6f12ec4b2c) Manage a prioritized list of to do items organized by directory -------------------------------------------------------------------------------- Update Information: Rebuild because of golang soname bump. -------------------------------------------------------------------------------- ================================================================================ glusterfs-3.7.7-1.fc23 (FEDORA-2016-9b46b6701a) Distributed File System -------------------------------------------------------------------------------- Update Information: GlusterFS 3.7.7 GA -------------------------------------------------------------------------------- ================================================================================ gnome-chemistry-utils-0.14.10-13.fc23 (FEDORA-2016-482a02f6a3) A set of chemical utilities -------------------------------------------------------------------------------- Update Information: This update fixes a crash in gchemtable -------------------------------------------------------------------------------- References: [ 1 ] Bug #1302135 - [abrt] gchemtable: gcu::Dialog::SetRealName(): gchemtable-0.14 killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=1302135 -------------------------------------------------------------------------------- ================================================================================ google-api-python-client-1.4.2-5.fc23 (FEDORA-2016-eecc9b66cc) Google APIs Client Library for Python -------------------------------------------------------------------------------- Update Information: Create build for f23: make oauth2client/uri-template deps resolvable in f23 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1303527 - Bring package in F23 https://bugzilla.redhat.com/show_bug.cgi?id=1303527 -------------------------------------------------------------------------------- ================================================================================ gsi-openssh-7.1p2-3.fc23 (FEDORA-2016-4509765b4b) An implementation of the SSH protocol with GSI authentication -------------------------------------------------------------------------------- Update Information: Sync with latest openssh package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1298741 - CVE-2016-1908 openssh: possible fallback from untrusted to trusted X11 forwarding https://bugzilla.redhat.com/show_bug.cgi?id=1298741 -------------------------------------------------------------------------------- ================================================================================ kdevelop-4.7.3-1.fc23 (FEDORA-2016-015ca8d3c3) Integrated Development Environment for C++/C -------------------------------------------------------------------------------- Update Information: KDevelop 4.7.3 release. -------------------------------------------------------------------------------- ================================================================================ kdevelop-php-1.7.3-1.fc23 (FEDORA-2016-015ca8d3c3) Php language and documentation plugins for KDevelop -------------------------------------------------------------------------------- Update Information: KDevelop 4.7.3 release. -------------------------------------------------------------------------------- ================================================================================ kdevelop-python-1.7.3-1.py3.fc23 (FEDORA-2016-015ca8d3c3) Python 3 Plugin for KDevelop -------------------------------------------------------------------------------- Update Information: KDevelop 4.7.3 release. -------------------------------------------------------------------------------- ================================================================================ kdevplatform-1.7.3-1.fc23 (FEDORA-2016-015ca8d3c3) Libraries for use by KDE development tools -------------------------------------------------------------------------------- Update Information: KDevelop 4.7.3 release. -------------------------------------------------------------------------------- ================================================================================ kernel-4.3.5-300.fc23 (FEDORA-2016-fd30ad26a9) The Linux kernel -------------------------------------------------------------------------------- Update Information: Update to latest upstream stable release, Linux v4.3.5. Fixes across the tree. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1255235 - None https://bugzilla.redhat.com/show_bug.cgi?id=1255235 [ 2 ] Bug #1278942 - None https://bugzilla.redhat.com/show_bug.cgi?id=1278942 [ 3 ] Bug #1302037 - None https://bugzilla.redhat.com/show_bug.cgi?id=1302037 -------------------------------------------------------------------------------- ================================================================================ liferea-1.10.18-1.fc23 (FEDORA-2016-3e291b9f03) An RSS/RDF feed reader -------------------------------------------------------------------------------- Update Information: This updates liferea to 1.10.18 which fixes a number of issues: * Fixes #287: media:content support broken (patch by Leiaz) * Fixes #279: Rules not visible in searchdialog (patch by Leiaz) * Fixes #83: Segfault when sorting feeds in folder (patch by Leiaz) * Fixes #302: Broken compilation with --disable-notify (reported by vostorga) -------------------------------------------------------------------------------- ================================================================================ lilypond-2.19.36-1.fc23 (FEDORA-2016-fa022c8eaa) A typesetting system for music notation -------------------------------------------------------------------------------- Update Information: Latest upstream release. -------------------------------------------------------------------------------- ================================================================================ lilypond-doc-2.19.36-1.fc23 (FEDORA-2016-fa022c8eaa) HTML documentation for LilyPond -------------------------------------------------------------------------------- Update Information: Latest upstream release. -------------------------------------------------------------------------------- ================================================================================ milter-greylist-4.5.16-2.fc23 (FEDORA-2016-582891c62e) Milter for greylisting, the next step in the spam control war -------------------------------------------------------------------------------- Update Information: This update adds SPF support, on by default. Mail from domains that publish SPF DNS records and originates from domain-approved servers will bypass the greylisting. -------------------------------------------------------------------------------- ================================================================================ opendnssec-1.4.9-1.fc23 (FEDORA-2016-cb5ff28112) DNSSEC key and zone management software -------------------------------------------------------------------------------- Update Information: Updated to 1.4.9 -------------------------------------------------------------------------------- ================================================================================ perl-App-cpm-0.113-1.fc23 (FEDORA-2016-cb3cd25310) Fast CPAN module installer -------------------------------------------------------------------------------- Update Information: A new version of App::cpm is available. This release introduces the --target- perl option. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1303363 - perl-App-cpm-0.113 is available https://bugzilla.redhat.com/show_bug.cgi?id=1303363 -------------------------------------------------------------------------------- ================================================================================ perl-HTTP-BrowserDetect-2.08-1.fc23 (FEDORA-2016-6c9158c9d6) Determine the Web browser, version, and platform from an HTTP user agent string -------------------------------------------------------------------------------- Update Information: A new version of HTTP::BrowserDetect is available. This release adds support for the Brave browser. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1303376 - perl-HTTP-BrowserDetect-2.08 is available https://bugzilla.redhat.com/show_bug.cgi?id=1303376 -------------------------------------------------------------------------------- ================================================================================ perl-Net-GitHub-0.83-1.fc23 (FEDORA-2016-cff662a605) Perl interface for github.com -------------------------------------------------------------------------------- Update Information: A new version of Net::GitHub is available. This release introduces a new API for .gitignore templates. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1303385 - perl-Net-GitHub-0.83 is available https://bugzilla.redhat.com/show_bug.cgi?id=1303385 -------------------------------------------------------------------------------- ================================================================================ perl-Tk-Pod-0.9943-1.fc23 (FEDORA-2016-7616c5e1a0) Pod browser top-level widget -------------------------------------------------------------------------------- Update Information: This release fixes geo IP URI provider, exiting forked processes, WWWBrowser class. It also improves tests. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1303480 - perl-Tk-Pod-0.9943 is available https://bugzilla.redhat.com/show_bug.cgi?id=1303480 -------------------------------------------------------------------------------- ================================================================================ php-pear-Mail-1.3.0-1.fc23 (FEDORA-2016-cb613fa471) Class that provides multiple interfaces for sending emails -------------------------------------------------------------------------------- Update Information: **Version 1.3.0** * Updated code to use PHP 5 method signatures. Implemented requests: * 17888, #17865: Reduce peak memory usage when using the smtp/smtpmx backend [alec] * Ability to pass socket options to Net_SMTP Fixed bugs: * 18109: New "pipelining" parameter for SMTP backend never used [alec] * 17317: Invalid periods in mailbox not marked as invalid [alec] * 17388: Deprecated assigning the return value of new by reference [alec] * 17866, #20424, #12071, #17553: Non-static method Mail_RFC822::parseAddressList called statically [alec] * 17178: Mail_RFC822::parseAddressList does not accept RFC-valid empty-group syntax [alec] -------------------------------------------------------------------------------- ================================================================================ php-twig-1.24.0-1.fc23 (FEDORA-2016-438bca7103) The flexible, fast, and secure template engine for PHP -------------------------------------------------------------------------------- Update Information: **Version 1.24.0** * adding support for the ?? operator * fixed the defined test when used on a constant, a map, or a sequence * undeprecated _self (should only be used to get the template name, not the template instance) * fixed parsing on PHP7 -------------------------------------------------------------------------------- ================================================================================ pixman-0.34.0-1.fc23 (FEDORA-2016-bc263ac241) Pixel manipulation library -------------------------------------------------------------------------------- Update Information: Update to 0.34.0 (#1249357) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1249357 - pixman-0.34.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1249357 -------------------------------------------------------------------------------- ================================================================================ python-acoustid-1.1.0-1.fc23 (FEDORA-2016-63a0874c45) Python bindings for Chromaprint acoustic fingerprinting and the Acoustid API -------------------------------------------------------------------------------- Update Information: Update to latest upstream release pyacoustid 1.1.0. Also adds Python 3 version of the package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1303708 - python-acoustid-1.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1303708 [ 2 ] Bug #1303458 - python-acoustid: Provide a Python 3 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1303458 -------------------------------------------------------------------------------- ================================================================================ python-contexttimer-0.3.1-1.fc23 (FEDORA-2016-ecbd8587be) A timer context manager measuring time of the code block it contains -------------------------------------------------------------------------------- Update Information: Initial RPM Package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1297425 - Review Request: python-contexttimer - A timer context manager measuring time of the code block it contains https://bugzilla.redhat.com/show_bug.cgi?id=1297425 -------------------------------------------------------------------------------- ================================================================================ python-fedmsg-meta-fedora-infrastructure-0.15.8-1.fc23 (FEDORA-2016-17492a2577) Metadata providers for Fedora Infrastructure's fedmsg deployment -------------------------------------------------------------------------------- Update Information: Handle new releng and pagure message types. -------------------------------------------------------------------------------- ================================================================================ python-flexmock-0.10.2-1.fc23 (FEDORA-2016-3219f033d5) Testing library that makes it easy to create mocks, stubs and fakes -------------------------------------------------------------------------------- Update Information: Update to latest stable version, there should be no backward incompatible changes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1300284 - python-flexmock-0.10.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1300284 -------------------------------------------------------------------------------- ================================================================================ python-importanize-0.4.1-2.fc23 (FEDORA-2016-0b13d942cd) Utility for organizing Python imports using PEP8 or custom rules -------------------------------------------------------------------------------- Update Information: Removed tests directory. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1297413 - Review Request: python-importanize - Utility for organizing Python imports using PEP8 or custom rules https://bugzilla.redhat.com/show_bug.cgi?id=1297413 -------------------------------------------------------------------------------- ================================================================================ python-livereload-2.4.1-1.fc23 (FEDORA-2016-4552e30907) An awesome tool for web developers -------------------------------------------------------------------------------- Update Information: Initial RPM Package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1302197 - Review Request: python-livereload - LiveReload server in Python https://bugzilla.redhat.com/show_bug.cgi?id=1302197 -------------------------------------------------------------------------------- ================================================================================ python-port-for-0.3.1-2.fc23 (FEDORA-2016-61d63926a6) Utility that helps with local TCP ports management -------------------------------------------------------------------------------- Update Information: Fix binary shebang in python3 package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1301008 - Review Request: python-port-for - Utility that helps with local TCP ports management https://bugzilla.redhat.com/show_bug.cgi?id=1301008 -------------------------------------------------------------------------------- ================================================================================ python-rhsm-1.17.1-1.fc23 (FEDORA-2016-791c625514) A Python library to communicate with a Red Hat Unified Entitlement Platform -------------------------------------------------------------------------------- Update Information: * Fixes for several ppc64 related bugs * Man page updates * GUI usability fixes * Translation updates -------------------------------------------------------------------------------- ================================================================================ python-simplepath-0.3.2-2.fc23 (FEDORA-2016-a8f623e1bb) A python library for data-structure lookup -------------------------------------------------------------------------------- Update Information: Removed tests directory. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1293909 - Review Request: python-simplepath - A python library for data-structure lookups. https://bugzilla.redhat.com/show_bug.cgi?id=1293909 -------------------------------------------------------------------------------- ================================================================================ python-sphinx-autobuild-0.5.2-2.fc23 (FEDORA-2016-17853a9fe2) Watch a Sphinx directory and rebuild the documentation -------------------------------------------------------------------------------- Update Information: Fix binary shebang in python3 subpackage -------------------------------------------------------------------------------- References: [ 1 ] Bug #1301023 - Review Request: python-sphinx-autobuild - Watch a Sphinx directory and rebuild the documentation https://bugzilla.redhat.com/show_bug.cgi?id=1301023 -------------------------------------------------------------------------------- ================================================================================ q-text-as-data-1.5.0-2.fc23 (FEDORA-2016-0c4c01223d) Direct execution of SQL-like queries on tabular text files -------------------------------------------------------------------------------- Update Information: Cleanups -------------------------------------------------------------------------------- References: [ 1 ] Bug #1271379 - Review Request: q-text-as-data - Q - Text as Data https://bugzilla.redhat.com/show_bug.cgi?id=1271379 -------------------------------------------------------------------------------- ================================================================================ rubygem-activemodel-4.2.3-2.fc23 (FEDORA-2016-eb4d6e8aab) A toolkit for building modeling frameworks -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-0753 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1301973 - CVE-2016-0753 rubygem-activemodel: Possible Input Validation Circumvention in Active Model https://bugzilla.redhat.com/show_bug.cgi?id=1301973 -------------------------------------------------------------------------------- ================================================================================ rubygem-activerecord-4.2.3-2.fc23 (FEDORA-2016-cc465a34df) Implements the ActiveRecord pattern for ORM -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2015-7577 Security fix for CVE-2016-0753 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1301973 - CVE-2016-0753 rubygem-activemodel: Possible Input Validation Circumvention in Active Model https://bugzilla.redhat.com/show_bug.cgi?id=1301973 [ 2 ] Bug #1301957 - CVE-2015-7577 rubygem-activerecord: Nested attributes rejection proc bypass in Active Record https://bugzilla.redhat.com/show_bug.cgi?id=1301957 -------------------------------------------------------------------------------- ================================================================================ rubygem-activesupport-4.2.3-3.fc23 (FEDORA-2016-3ede04cd79) Support and utility classes used by the Rails framework -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2015-7576 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1301933 - CVE-2015-7576 rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller https://bugzilla.redhat.com/show_bug.cgi?id=1301933 -------------------------------------------------------------------------------- ================================================================================ smuxi-1.0.3-1.fc23 (FEDORA-2016-cbdbe4d217) Powerful, flexible, user-friendly chat client -------------------------------------------------------------------------------- Update Information: - Update to 1.0.3 -------------------------------------------------------------------------------- ================================================================================ subscription-manager-1.17.1-1.fc23 (FEDORA-2016-791c625514) Tools and libraries for subscription and repository management -------------------------------------------------------------------------------- Update Information: * Fixes for several ppc64 related bugs * Man page updates * GUI usability fixes * Translation updates -------------------------------------------------------------------------------- ================================================================================ system-config-language-3.3.0-2.fc23 (FEDORA-2016-6b5931fb72) A graphical interface for modifying the system language -------------------------------------------------------------------------------- Update Information: Resolves:rh#1303425: [bn_BD] Country name is Not there, but Country code only -------------------------------------------------------------------------------- References: [ 1 ] Bug #1303425 - [bn_BD] Country name is Not there, but Country code only https://bugzilla.redhat.com/show_bug.cgi?id=1303425 -------------------------------------------------------------------------------- ================================================================================ systemd-222-14.fc23 (FEDORA-2016-d3fc0f9415) A System and Service Manager -------------------------------------------------------------------------------- Update Information: - Stopping services using glob patterns does not work as stated in man page ( rhbz#1288851) - systemd asking for password on boot: ask_password_tty() prints multiple asterisks when typing special characters ( rhbz#1301984) - RFE: Please provide option RandomSec= to systemd timer ( rhbz#1303552) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1303552 - RFE: Please provide option RandomSec= to systemd timer https://bugzilla.redhat.com/show_bug.cgi?id=1303552 [ 2 ] Bug #1301984 - systemd asking for password on boot: ask_password_tty() prints multiple asterisks when typing special characters https://bugzilla.redhat.com/show_bug.cgi?id=1301984 [ 3 ] Bug #1288851 - Stopping services using glob patterns does not work as stated in man page https://bugzilla.redhat.com/show_bug.cgi?id=1288851 -------------------------------------------------------------------------------- ================================================================================ webkitgtk4-2.10.7-1.fc23 (FEDORA-2016-ec05afb364) GTK+ Web content engine library -------------------------------------------------------------------------------- Update Information: This update together with previous releases addresses the following vulnerabilities: - CVE-2015-7096 - CVE-2015-7098 Additional fixes: - Disable DNS prefetch when a proxy is configured. - Reduce the maximum simultaneous network connections to match other browsers. - Make WebKitWebView always propagate motion-notify-event signal. - Add a way to force accelerating compositing mode at runtime using an environment variable. - Fix input elements and scrollbars rendering with GTK+ 3.19. - Fix rendering of lines when using solid colors. - Fix UI process crashes related to not having a main resource response when the load is committed for pages restored from the history cache. - Fix a WebProcess crash when loading large contents with custom URI schemes API. - Fix a crash in the UI process when the WebView is destroyed while the screensaver DBus proxy is being created. - Fix WebProcess crashes due to BadDrawable X errors in accelerated compositing mode. - Fix crashes on PPC64 due to mprotect() on address not aligned to the page size. - Fix std::bad_function_call exception raised in dispatchDecidePolicyForNavigationAction. - Fix downloads of data URLs. - Fix runtime critical warnings when closing a page containing windowed plugins. - Fix several crashes and rendering issues. - Fix a deadlock in the Web Process when JavaScript garbage collector was running for a web worker thread that made google maps to hang. - Fix media controls displaying without controls attribute. - Fix a Web Process crash when quickly attempting many DnD operations. - Fix the build with GTK+ < 3.16. - Translation updates: French, German, Italian, Turkish. -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: http://lists.fedoraproject.org/admin/lists/test@xxxxxxxxxxxxxxxxxxxxxxx