The bugzilla devs discovered that a specially crafted bug summary could trigger XSS in dependency graphs (CVE-2016-2803). This release fixes the issue.
A bug in Bugzilla caused it to send improperly formatted email addresses. This update contains the fix to this problem.
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2016-6cdcddef2cPlease log in to add feedback.
This update has been submitted for testing by eseyman.
This update has obsoleted bugzilla-4.4.11-2.fc23, and has inherited its bugs and notes.
This update has been pushed to testing.
This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes
This update has been submitted for stable by eseyman.
This update has been pushed to stable.