The following Fedora 25 Security updates need testing: Age URL 323 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25 222 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e python-XStatic-jquery-ui-1.12.0.1-4.fc25 161 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f nodejs-brace-expansion-1.1.7-1.fc25 115 https://bodhi.fedoraproject.org/updates/FEDORA-2017-99c0118c0c memcached-1.4.39-1.fc25 111 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2232fe97b4 docker-distribution-2.6.2-1.git48294d9.fc25 33 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6967efb3f0 thunderbird-52.4.0-2.fc25 27 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7089c6e789 suricata-3.2.4-1.fc25 19 https://bodhi.fedoraproject.org/updates/FEDORA-2017-51f49ebbce apr-1.6.3-1.fc25 19 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f563b201ba apr-util-1.5.4-4.fc25 19 https://bodhi.fedoraproject.org/updates/FEDORA-2017-45ed341e61 httpd-2.4.29-1.fc25 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ab57a100f3 rpm-4.13.0.2-1.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f5ad4107cc fedpkg-1.30-4.fc25 rpkg-1.51-2.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c7514691cb perl-Net-Ping-External-0.15-11.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6e67e4e45b poppler-0.45.0-10.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0188f21212 postgresql-9.5.10-1.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-481e4f6f8c ldns-1.6.17-22.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e5bbb657c5 chromium-62.0.3202.89-1.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1a9068594d python-copr-1.84-1.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8016cc0bd0 backintime-1.1.24-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-55a3247cfd openssl-1.0.2m-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-077334783e webkitgtk4-2.18.3-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9a6569beb6 firefox-57.0-2.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f58bbbbdb0 konversation-1.7.4-1.fc25
The following Fedora 25 Critical Path updates have yet to be approved: Age URL 165 https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25 44 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3fc5429e7e iproute-4.12.0-1.fc25 33 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6967efb3f0 thunderbird-52.4.0-2.fc25 14 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b89e9f62d8 bind99-9.9.10-3.P3.fc25 14 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b9a00d98e5 python-productmd-1.9-1.fc25 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-dbf347055a hwdata-0.306-1.fc25 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ab57a100f3 rpm-4.13.0.2-1.fc25 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e64b02d1b1 pcre2-10.23-10.fc25 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-65b10e63d5 pungi-4.1.20-1.fc25 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ec5efbcfc6 pcre-8.41-3.fc25 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e91585cd60 ethtool-4.13-1.fc25 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-560cebc111 menu-cache-1.1.0-1.fc25 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a7f307017b python-lxml-4.1.1-1.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e82231f2c7 libglvnd-1.0.0-1.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6e67e4e45b poppler-0.45.0-10.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9a6569beb6 firefox-57.0-2.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-077334783e webkitgtk4-2.18.3-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-55a3247cfd openssl-1.0.2m-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-15b7f781f0 nss-3.34.0-1.0.fc25 nss-softokn-3.34.0-1.0.fc25 nss-util-3.34.0-1.0.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-dc8c38e976 man-db-2.7.5-5.fc25
The following builds have been pushed to Fedora 25 updates-testing
fedfind-3.8.1-1.fc25 konversation-1.7.4-1.fc25 man-db-2.7.5-5.fc25 module-build-service-1.4.7-1.fc25 nss-3.34.0-1.0.fc25 nss-softokn-3.34.0-1.0.fc25 nss-util-3.34.0-1.0.fc25 openscap-1.2.16-1.fc25 perl-Sereal-4.004-1.fc25 perl-Sereal-Decoder-4.004-1.fc25 perl-Sereal-Encoder-4.004-1.fc25 perl-Tk-GraphViz-1.01-18.fc25 perl-experimental-0.017-1.fc25 perl-libnet-3.11-1.fc25 python-streamlink-0.9.0-1.fc25 python-wikitcms-2.2.0-1.fc25 qxtglobalshortcut-0.0.1-0.7.20171021git1644620.fc25 relval-2.2.0-1.fc25 vym-2.6.11-1.fc25
Details about builds:
================================================================================ fedfind-3.8.1-1.fc25 (FEDORA-2017-a113080467) Fedora compose and image finder -------------------------------------------------------------------------------- Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the Modular Server candidate composes which are currently being produced. fedfind 3.8.1 returns to using the pkgdb `collections` API end point for `get_current_release`, as it is now being manually updated until PDC is ready to replace it. --------------------------------------------------------------------------------
================================================================================ konversation-1.7.4-1.fc25 (FEDORA-2017-f58bbbbdb0) A user friendly IRC client -------------------------------------------------------------------------------- Update Information:
Latest stable release, see also ���https://konversation.kde.org/ --------------------------------------------------------------------------------
================================================================================ man-db-2.7.5-5.fc25 (FEDORA-2017-dc8c38e976) Tools for searching and reading man pages -------------------------------------------------------------------------------- Update Information:
This update makes file trigger scriptlets run man-db cache update in a transient service configured to prevent system from reboot/shutdown until it finishes. So long-running cache update should no longer block dnf transaction, but at the same time it shouldn't be possible to interrupt the update prematurely leaving man page index corrupted. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1318058 - postransaction mandb run takes an unreasonably long time https://bugzilla.redhat.com/show_bug.cgi?id=1318058 --------------------------------------------------------------------------------
================================================================================ module-build-service-1.4.7-1.fc25 (FEDORA-2017-8942acf95b) The Module Build Service for Modularity -------------------------------------------------------------------------------- Update Information:
Changes: * Change the MBS builders into setuptools plugins so now you can now create your own builder plugin * Updated some documentation * mbs-build local now builds only from yaml files (this bypasses the need for SCM) * Only complete the module build when all components are tagged and a KojiRepoRegen message is received * Don't trigger init handler when importing a local build and mark the build as done after import * Validate component git refs when a commit is explicitly stated in the modulemd before starting the module build * Set Access- Control-Allow-Origin to "*" on GET API routes * Fix duplicate module build state traces * Make the module build log name configurable --------------------------------------------------------------------------------
================================================================================ nss-3.34.0-1.0.fc25 (FEDORA-2017-15b7f781f0) Network Security Services -------------------------------------------------------------------------------- Update Information:
Updates the nss family of packages to upstream NSS 3.34. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1500655 - nss-pem error while updating to fedora 27 https://bugzilla.redhat.com/show_bug.cgi?id=1500655 [ 2 ] Bug #1512906 - nss-3.34 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512906 [ 3 ] Bug #1482798 - Illegal instruction in SHA1_Update() when used by chronyd https://bugzilla.redhat.com/show_bug.cgi?id=1482798 --------------------------------------------------------------------------------
================================================================================ nss-softokn-3.34.0-1.0.fc25 (FEDORA-2017-15b7f781f0) Network Security Services Softoken Module -------------------------------------------------------------------------------- Update Information:
Updates the nss family of packages to upstream NSS 3.34. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1500655 - nss-pem error while updating to fedora 27 https://bugzilla.redhat.com/show_bug.cgi?id=1500655 [ 2 ] Bug #1512906 - nss-3.34 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512906 [ 3 ] Bug #1482798 - Illegal instruction in SHA1_Update() when used by chronyd https://bugzilla.redhat.com/show_bug.cgi?id=1482798 --------------------------------------------------------------------------------
================================================================================ nss-util-3.34.0-1.0.fc25 (FEDORA-2017-15b7f781f0) Network Security Services Utilities Library -------------------------------------------------------------------------------- Update Information:
Updates the nss family of packages to upstream NSS 3.34. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1500655 - nss-pem error while updating to fedora 27 https://bugzilla.redhat.com/show_bug.cgi?id=1500655 [ 2 ] Bug #1512906 - nss-3.34 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512906 [ 3 ] Bug #1482798 - Illegal instruction in SHA1_Update() when used by chronyd https://bugzilla.redhat.com/show_bug.cgi?id=1482798 --------------------------------------------------------------------------------
================================================================================ openscap-1.2.16-1.fc25 (FEDORA-2017-ce6414c880) Set of open source libraries enabling integration of the SCAP line of standards -------------------------------------------------------------------------------- Update Information:
Update to the latest upstream release OpenSCAP 1.2.16. - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed. - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. --------------------------------------------------------------------------------
================================================================================ perl-Sereal-4.004-1.fc25 (FEDORA-2017-82b4e97e48) Fast, compact, powerful binary (de-)serialization -------------------------------------------------------------------------------- Update Information:
This release brings support for zstd compression. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1512189 - perl-Sereal-Decoder-4.004 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512189 [ 2 ] Bug #1512187 - perl-Sereal-4.004 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512187 [ 3 ] Bug #1512190 - perl-Sereal-Encoder-4.004 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512190 --------------------------------------------------------------------------------
================================================================================ perl-Sereal-Decoder-4.004-1.fc25 (FEDORA-2017-82b4e97e48) Perl deserialization for Sereal format -------------------------------------------------------------------------------- Update Information:
This release brings support for zstd compression. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1512189 - perl-Sereal-Decoder-4.004 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512189 [ 2 ] Bug #1512187 - perl-Sereal-4.004 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512187 [ 3 ] Bug #1512190 - perl-Sereal-Encoder-4.004 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512190 --------------------------------------------------------------------------------
================================================================================ perl-Sereal-Encoder-4.004-1.fc25 (FEDORA-2017-82b4e97e48) Perl serialization into Serial format -------------------------------------------------------------------------------- Update Information:
This release brings support for zstd compression. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1512189 - perl-Sereal-Decoder-4.004 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512189 [ 2 ] Bug #1512187 - perl-Sereal-4.004 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512187 [ 3 ] Bug #1512190 - perl-Sereal-Encoder-4.004 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512190 --------------------------------------------------------------------------------
================================================================================ perl-Tk-GraphViz-1.01-18.fc25 (FEDORA-2017-14e4b126e2) Render an interactive GraphViz graph -------------------------------------------------------------------------------- Update Information:
This release removes bogus RPM provide. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #829700 - perl-Tk-GraphViz : Duplicate Provides https://bugzilla.redhat.com/show_bug.cgi?id=829700 --------------------------------------------------------------------------------
================================================================================ perl-experimental-0.017-1.fc25 (FEDORA-2017-c2b07746ab) Experimental features made easy -------------------------------------------------------------------------------- Update Information:
This release corrects support for auto_deref and adds support for const_attr feature. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1513202 - perl-experimental-0.017 is available https://bugzilla.redhat.com/show_bug.cgi?id=1513202 --------------------------------------------------------------------------------
================================================================================ perl-libnet-3.11-1.fc25 (FEDORA-2017-2b77bfa72a) Perl clients for various network protocols -------------------------------------------------------------------------------- Update Information:
This release fixes parsing MLSD fact names in the FTP protocol. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1513203 - perl-libnet-3.11 is available https://bugzilla.redhat.com/show_bug.cgi?id=1513203 --------------------------------------------------------------------------------
================================================================================ python-streamlink-0.9.0-1.fc25 (FEDORA-2017-cd274e6a3a) Python library for extracting streams from various websites -------------------------------------------------------------------------------- Update Information:
This release is mostly code refactoring as well as module inclusion. Features: * Updates to multiple plugins (electrecetv, tvplayer, Teve2, cnnturk, kanald) * SOCKS module being included in the Streamlink installer (PySocks) --------------------------------------------------------------------------------
================================================================================ python-wikitcms-2.2.0-1.fc25 (FEDORA-2017-a113080467) Fedora QA wiki test management Python library -------------------------------------------------------------------------------- Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the Modular Server candidate composes which are currently being produced. fedfind 3.8.1 returns to using the pkgdb `collections` API end point for `get_current_release`, as it is now being manually updated until PDC is ready to replace it. --------------------------------------------------------------------------------
================================================================================ qxtglobalshortcut-0.0.1-0.7.20171021git1644620.fc25 (FEDORA-2017-47845b54b1) Cross-platform library for handling system-wide shortcuts in Qt applications -------------------------------------------------------------------------------- Update Information:
- Add RR cmake-filesystem%{?_isa} - Remove %%dir %%{_includedir}/%%{name,private} - Remove %%dir %%{_libdir}/cmake/%%{name}/ Package owns this directory and all files/directories inside it ---- - Remove BR pkgconfig(Qt5Widgets) - Remove RR qt-devel from subpackage devel - Add BR pkgconfig(Qt5) --------------------------------------------------------------------------------
================================================================================ relval-2.2.0-1.fc25 (FEDORA-2017-a113080467) Tool for interacting with Fedora QA wiki pages -------------------------------------------------------------------------------- Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the Modular Server candidate composes which are currently being produced. fedfind 3.8.1 returns to using the pkgdb `collections` API end point for `get_current_release`, as it is now being manually updated until PDC is ready to replace it. --------------------------------------------------------------------------------
================================================================================ vym-2.6.11-1.fc25 (FEDORA-2017-6d154eab34) View your mind -------------------------------------------------------------------------------- Update Information:
2.6.11 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1513217 - vym-2.6.11-3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1513217 --------------------------------------------------------------------------------