The following Fedora 25 Security updates need testing: Age URL 79 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-534e23bad9 rabbitmq-server-3.6.6-2.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-003fa5648c rpm-ostree-2017.3-2.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-df53d02da7 knot-resolver-1.2.4-1.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ae18216e75 rkward-0.6.5-5.fc25 rpy-2.8.5-3.fc25 R-3.3.3-1.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-47a4910f07 openslp-2.0.0-10.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9ed1b89530 mbedtls-2.4.2-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-837115524e cloud-init-0.7.8-6.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-06f4b88ceb php-onelogin-php-saml-2.10.5-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-31b976672b qemu-2.7.1-4.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9801754fd7 drupal8-8.2.7-1.fc25
The following Fedora 25 Critical Path updates have yet to be approved: Age URL 22 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c5dbde322a epiphany-3.22.6-2.fc25 9 https://bodhi.fedoraproject.org/updates/FEDORA-2017-803e6bacb4 pungi-4.1.13-1.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7799a1cc7c appliance-tools-008.0-4.fc25 livecd-tools-24.2-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4d66e799ca flatpak-0.9.1-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2b6eee582e python-wrapt-1.10.9-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-72e25d39ba gnome-settings-daemon-3.22.2-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0b5012df30 control-center-3.22.2-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-98301ada4c perl-Pod-Perldoc-3.28-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-eb8924136a sssd-1.15.2-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-cb0ff57e45 python-wrapt-1.10.10-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5936a5fed4 cryptsetup-1.7.4-1.fc25
The following builds have been pushed to Fedora 25 updates-testing
ampy-1.0.1-1.fc25 awscli-1.11.63-1.fc25 bacula-7.4.7-1.fc25 bacula-docs-7.4.7-1.fc25 cacti-1.0.6-1.fc25 cockpit-135-1.fc25 control-center-3.22.2-1.fc25 cryptsetup-1.7.4-1.fc25 dogtag-pki-10.4.0-1.fc25 dogtag-pki-theme-10.4.0-1.fc25 dpm-dsi-1.9.12-1.fc25 drupal8-8.2.7-1.fc25 erlang-19.3-1.fc25 execdb-0.0.8-1.fc25 gnome-settings-daemon-3.22.2-1.fc25 golang-1.7.5-2.fc25 golang-github-google-btree-0-0.9.git925471a.fc25 golang-github-oschwald-maxminddb-golang-1.1.0-1.git697da80.fc25 golang-github-pmezard-go-difflib-0-0.6.gitd8ed262.fc25 golang-github-remyoudompheng-bigfft-0-0.1.gita8e77dd.fc25 golang-github-ugorji-go-0-0.10.gitded73ea.fc25 golang-googlecode-goprotobuf-0-0.27.git4bd1920.fc25 golang-googlecode-net-0-0.37.gitf249948.fc25 ibus-typing-booster-1.5.26-1.fc25 jss-4.4.0-2.fc25 kf5-plasma-5.32.0-2.fc25 meson-0.39.1-1.fc25 mingw-wxWidgets-2.8.12-21.fc25 onboard-1.4.1-4.fc25 open-vm-tools-10.1.5-3.fc25 perl-Pod-Perldoc-3.28-1.fc25 php-PHPMailer-5.2.23-1.fc25 php-onelogin-php-saml-2.10.5-1.fc25 php-paragonie-constant-time-encoding-1.0.1-4.fc25 php-phpunit-PHPUnit-5.7.16-1.fc25 pki-console-10.4.0-1.fc25 pki-core-10.4.0-1.fc25 purple-hangouts-0-45.20170313hg462bb55.fc25 purple-skypeweb-1.2.2-8.20170226git19ba66e.fc25 python-botocore-1.5.26-1.fc25 python-mutagen-1.37-1.fc25 python-pynacl-1.1.1-1.fc25 python-sqlalchemy-1.0.17-1.fc25 python-wrapt-1.10.10-1.fc25 python-zeroconf-0.18.0-2.fc25 qemu-2.7.1-4.fc25 sssd-1.15.2-1.fc25 taskotron-trigger-0.4.7-1.fc25 tint2-0.13.1-1.fc25 tripwire-2.4.3.4-1.fc25 vdr-epg2vdr-1.1.47-1.fc25
Details about builds:
================================================================================ ampy-1.0.1-1.fc25 (FEDORA-2017-8cca426ffb) Command line tool to interact with a MicroPython board over a serial connection -------------------------------------------------------------------------------- Update Information:
Command line tool to interact with a MicroPython board over a serial connection -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1432230 - Review Request: ampy - Command line tool to interact with a MicroPython board over a serial connection https://bugzilla.redhat.com/show_bug.cgi?id=1432230 --------------------------------------------------------------------------------
================================================================================ awscli-1.11.63-1.fc25 (FEDORA-2017-391dac11a6) Universal Command Line Environment for AWS -------------------------------------------------------------------------------- Update Information:
update aws -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1428364 - python-botocore-1.5.25 is available https://bugzilla.redhat.com/show_bug.cgi?id=1428364 [ 2 ] Bug #1428187 - awscli-1.11.63 is available https://bugzilla.redhat.com/show_bug.cgi?id=1428187 --------------------------------------------------------------------------------
================================================================================ bacula-7.4.7-1.fc25 (FEDORA-2017-f0f733063a) Cross platform network backup for Linux, Unix, Mac and Windows -------------------------------------------------------------------------------- Update Information:
New version 7.4.7. ---- Update to 7.4.6. ---- Updated documentation. --------------------------------------------------------------------------------
================================================================================ bacula-docs-7.4.7-1.fc25 (FEDORA-2017-f0f733063a) Bacula documentation -------------------------------------------------------------------------------- Update Information:
New version 7.4.7. ---- Update to 7.4.6. ---- Updated documentation. --------------------------------------------------------------------------------
================================================================================ cacti-1.0.6-1.fc25 (FEDORA-2017-e75dd152a7) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information:
- Update to 1.0.6 Release notes: http://www.cacti.net/release_notes_1_0_5.php http://www.cacti.net/release_notes_1_0_6.php -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1430893 - cacti package is missing requires php-gd php-posix https://bugzilla.redhat.com/show_bug.cgi?id=1430893 [ 2 ] Bug #1431597 - cacti-1.0.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1431597 [ 3 ] Bug #1432443 - cacti-1.0.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1432443 --------------------------------------------------------------------------------
================================================================================ cockpit-135-1.fc25 (FEDORA-2017-a62662e93a) A user interface for Linux servers -------------------------------------------------------------------------------- Update Information:
- It is now possible to use file descriptors passed over the DBus API - Add "Disks" tab to Virtual Machines - Hide the top navigation bar if empty, i.e. if dashboard is not available - Redesign the page menu and machine switcher - Show "Locked/Unlocked" indicator for privilege escalation in the top bar - Make privilege escalation work with sudo reauthorization - Add developer tool for closing active pages - Use official /etc/ssh/ssh_known_hosts for adding remotely managed machines - Connect to other machines with SSH via cockpit-bridge instead of cockpit-ws --------------------------------------------------------------------------------
================================================================================ control-center-3.22.2-1.fc25 (FEDORA-2017-0b5012df30) Utilities to configure the GNOME desktop -------------------------------------------------------------------------------- Update Information:
gnome-control-center 3.22.2 release. Details: - Get renderer from gnome- session under Wayland - Show both GPUs on dual-GPU machines - Remove trailing spaces in renderer strings - Trim AMD renderer strings and add registered trademark symbol for AMD GPUs Keyboard: - Activate search-as-you-type in the scope of the panel - Untoggle Edit button on cancel - Ensure sensitive entries on creation mode - Fix headerbar state when adding shortcut Mouse: - Set min- content-height on the scrolled window - Handle trackpoint devices in GsdDeviceManagerX11 Network: - Fix missing page title on wired panel - Set a new SSID each time the hotspot is launched - Fix initial state of Wi-Fi device Search: - Better debug output when ignoring search providers Sharing: - Hide Vino when using Wayland User Accounts: - Fix crash when name is changed and dialogue closed --------------------------------------------------------------------------------
================================================================================ cryptsetup-1.7.4-1.fc25 (FEDORA-2017-5936a5fed4) A utility for setting up encrypted disks -------------------------------------------------------------------------------- Update Information:
Update to version 1.7.4. See [Release Notes](https://www.kernel.org/pub/linux/u tils/cryptsetup/v1.7/v1.7.4-ReleaseNotes) for more info. --------------------------------------------------------------------------------
================================================================================ dogtag-pki-10.4.0-1.fc25 (FEDORA-2017-e6e1f4ecdc) Dogtag Public Key Infrastructure (PKI) Suite -------------------------------------------------------------------------------- Update Information:
dogtagpki Pagure Issue #2541 - Re-base Dogtag pki packages to 10.4.x --------------------------------------------------------------------------------
================================================================================ dogtag-pki-theme-10.4.0-1.fc25 (FEDORA-2017-fe4649d665) Certificate System - Dogtag PKI Theme Components -------------------------------------------------------------------------------- Update Information:
dogtagpki Pagure Issue #2541 - Re-base Dogtag pki packages to 10.4.x --------------------------------------------------------------------------------
================================================================================ dpm-dsi-1.9.12-1.fc25 (FEDORA-2017-af3f218b49) Disk Pool Manager (DPM) plugin for the Globus GridFTP server -------------------------------------------------------------------------------- Update Information:
* new upstream release --------------------------------------------------------------------------------
================================================================================ drupal8-8.2.7-1.fc25 (FEDORA-2017-9801754fd7) An open source content management platform -------------------------------------------------------------------------------- Update Information:
[8.2.7](https://www.drupal.org/project/drupal/releases/8.2.7) ([SA- CORE-2017-001](https://www.drupal.org/SA-2017-001)) --------------------------------------------------------------------------------
================================================================================ erlang-19.3-1.fc25 (FEDORA-2017-539074c178) General-purpose programming language and runtime environment -------------------------------------------------------------------------------- Update Information:
* Ver. 19.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1432265 - erlang-19.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1432265 --------------------------------------------------------------------------------
================================================================================ execdb-0.0.8-1.fc25 (FEDORA-2017-e6b07aa52e) Execution status database for Taskotron -------------------------------------------------------------------------------- Update Information:
New release of execdb changes the job.taskname column from a 20 char string to a variable width char --------------------------------------------------------------------------------
================================================================================ gnome-settings-daemon-3.22.2-1.fc25 (FEDORA-2017-72e25d39ba) The daemon sharing settings from GNOME to GTK+/KDE applications -------------------------------------------------------------------------------- Update Information:
gnome-settings-daemon 3.22.2 release. Media keys: - Fix custom keyboard shortcuts not working in some hardware combinations, including potential crashes - Fix shutdown dialog delay when using kbd shortcut Smartcard: - Fix plugin not working due to a conflict with the Sharing plugin's use of NetworkManager client libraries --------------------------------------------------------------------------------
================================================================================ golang-1.7.5-2.fc25 (FEDORA-2017-6f8b437a1d) The Go Programming Language -------------------------------------------------------------------------------- Update Information:
Fix for tzdata 2017a, unblock ppc64le --------------------------------------------------------------------------------
================================================================================ golang-github-google-btree-0-0.9.git925471a.fc25 (FEDORA-2017-91c50f0a50) BTree implementation for Go -------------------------------------------------------------------------------- Update Information:
Bump to upstream 925471ac9e2131377a91e1595defec898166fe49 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1250460 - Tracker for golang-github-google-btree https://bugzilla.redhat.com/show_bug.cgi?id=1250460 --------------------------------------------------------------------------------
================================================================================ golang-github-oschwald-maxminddb-golang-1.1.0-1.git697da80.fc25 (FEDORA-2017-5f9006e5bc) MaxMind DB Reader for Go -------------------------------------------------------------------------------- Update Information:
New package for fedora. This go library is one of the dependencies of syncthing. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1431759 - Review Request: golang-github-oschwald-maxminddb-golang - MaxMind DB Reader for Go https://bugzilla.redhat.com/show_bug.cgi?id=1431759 --------------------------------------------------------------------------------
================================================================================ golang-github-pmezard-go-difflib-0-0.6.gitd8ed262.fc25 (FEDORA-2017-4fec6e0848) Partial port of Python difflib package to Go -------------------------------------------------------------------------------- Update Information:
Bump to upstream d8ed2627bdf02c080bf22230dbb337003b7aba2d -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1432934 - Tracker for golang-github-pmezard-go-difflib https://bugzilla.redhat.com/show_bug.cgi?id=1432934 --------------------------------------------------------------------------------
================================================================================ golang-github-remyoudompheng-bigfft-0-0.1.gita8e77dd.fc25 (FEDORA-2017-cef856b9f6) Big integer multiplication library using FFT for Go -------------------------------------------------------------------------------- Update Information:
New package for fedora. This go library is one of the (indirect) dependencies of syncthing. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1432887 - Review Request: golang-github-remyoudompheng-bigfft - Big integer multiplication library using FFT for Go https://bugzilla.redhat.com/show_bug.cgi?id=1432887 --------------------------------------------------------------------------------
================================================================================ golang-github-ugorji-go-0-0.10.gitded73ea.fc25 (FEDORA-2017-8a5a068273) Idiomatic codec and rpc lib for msgpack, cbor, json, etc -------------------------------------------------------------------------------- Update Information:
Bump to upstream ded73eae5db7e7a0ef6f55aace87a2873c5d2b74 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1250516 - Tracker for golang-github-ugorji-go https://bugzilla.redhat.com/show_bug.cgi?id=1250516 --------------------------------------------------------------------------------
================================================================================ golang-googlecode-goprotobuf-0-0.27.git4bd1920.fc25 (FEDORA-2017-4bee0decc4) Go support for Google protocol buffers -------------------------------------------------------------------------------- Update Information:
Bump to upstream 4bd1920723d7b7c925de087aa32e2187708897f7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1246113 - Tracker for golang-googlecode-goprotobuf https://bugzilla.redhat.com/show_bug.cgi?id=1246113 --------------------------------------------------------------------------------
================================================================================ golang-googlecode-net-0-0.37.gitf249948.fc25 (FEDORA-2017-7b6f1744c8) Supplementary Go networking libraries -------------------------------------------------------------------------------- Update Information:
Bump to upstream f2499483f923065a842d38eb4c7f1927e6fc6e6d -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1326890 - FTBFS with gcc-go on s390x https://bugzilla.redhat.com/show_bug.cgi?id=1326890 --------------------------------------------------------------------------------
================================================================================ ibus-typing-booster-1.5.26-1.fc25 (FEDORA-2017-62fed1700a) A completion input method -------------------------------------------------------------------------------- Update Information:
update to 1.5.26 --------------------------------------------------------------------------------
================================================================================ jss-4.4.0-2.fc25 (FEDORA-2017-95a6db27ea) Java Security Services (JSS) -------------------------------------------------------------------------------- Update Information:
Bugzilla Bug #1432568 - JSS 4.4.0 is incompatible with versions of tomcatjss < 7.2.1 ---- Bugzilla Bug #1431937 - Rebase jss to 4.4.0 in Fedora 25+ -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1432568 - JSS 4.4.0 is incompatible with versions of tomcatjss < 7.2.1 https://bugzilla.redhat.com/show_bug.cgi?id=1432568 [ 2 ] Bug #1431937 - Rebase jss to 4.4.0 in Fedora 25+ https://bugzilla.redhat.com/show_bug.cgi?id=1431937 --------------------------------------------------------------------------------
================================================================================ kf5-plasma-5.32.0-2.fc25 (FEDORA-2017-37f4d8c564) KDE Frameworks 5 Tier 3 framework is foundation to build a primary user interface -------------------------------------------------------------------------------- Update Information:
Backport upstream fix for folder containment/view selection regression --------------------------------------------------------------------------------
================================================================================ meson-0.39.1-1.fc25 (FEDORA-2017-36142df1e2) High productivity build system -------------------------------------------------------------------------------- Update Information:
Update to 0.39.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1432696 - meson-0.39.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1432696 --------------------------------------------------------------------------------
================================================================================ mingw-wxWidgets-2.8.12-21.fc25 (FEDORA-2017-fb7eb7c3dc) MinGW port of the wxWidgets GUI library -------------------------------------------------------------------------------- Update Information:
- rebuild for missing _imp___ZN10wxListCtrl9SortItemsEPU7stdcallFilllEl --------------------------------------------------------------------------------
================================================================================ onboard-1.4.1-4.fc25 (FEDORA-2017-9e075b2a9c) On-screen keyboard for TabletPC and mobility impaired users (Xorg only) -------------------------------------------------------------------------------- Update Information:
Fixed spec file in regard to #1431322 comment 7 (1431322#c7) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1431322 - Review Request: Onboard - On screen keyboard https://bugzilla.redhat.com/show_bug.cgi?id=1431322 --------------------------------------------------------------------------------
================================================================================ open-vm-tools-10.1.5-3.fc25 (FEDORA-2017-14d406bd8e) Open Virtual Machine Tools for virtual machines hosted on VMware -------------------------------------------------------------------------------- Update Information:
Need to add xmlsec1-openssl dependency explicitly. --------------------------------------------------------------------------------
================================================================================ perl-Pod-Perldoc-3.28-1.fc25 (FEDORA-2017-98301ada4c) Look up Perl documentation in Pod format -------------------------------------------------------------------------------- Update Information:
This release fixes pager arguments modification. It also fixes tests. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1432920 - perl-Pod-Perldoc-3.28 is available https://bugzilla.redhat.com/show_bug.cgi?id=1432920 --------------------------------------------------------------------------------
================================================================================ php-PHPMailer-5.2.23-1.fc25 (FEDORA-2017-e2d2eadf9a) PHP email transport class with a lot of features -------------------------------------------------------------------------------- Update Information:
**PHPMailer 5.2.23** This is a minor maintenance release. * Improve trapping of TLS errors during connection so that they don't cause warnings, and are reported better in debug output * Amend test suite so it uses PHPUnit version 4.8, compatible with older versions of PHP, instead of teh version supplied by Travis-CI * This forces pinning of some dev packages to older releases, but should make travis builds more reliable * Test suite now runs on HHVM, and thus so should PHPMailer in general * Improve Czech translations * Add links to CVE-2017-5223 resources --------------------------------------------------------------------------------
================================================================================ php-onelogin-php-saml-2.10.5-1.fc25 (FEDORA-2017-06f4b88ceb) SAML support for PHP -------------------------------------------------------------------------------- Update Information:
Update to 2.10.5 ---- Update to 2.10.4 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1432450 - php-onelogin-php-saml-v2.10.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1432450 [ 2 ] Bug #1429267 - php-onelogin-php-saml-v2.10.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1429267 --------------------------------------------------------------------------------
================================================================================ php-paragonie-constant-time-encoding-1.0.1-4.fc25 (FEDORA-2017-7bfb5f6f7f) Constant-Time Character Encoding in PHP Projects -------------------------------------------------------------------------------- Update Information:
new package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1431766 - Review Request: php-paragonie-constant-time-encoding - Constant-Time Character Encoding in PHP Projects https://bugzilla.redhat.com/show_bug.cgi?id=1431766 --------------------------------------------------------------------------------
================================================================================ php-phpunit-PHPUnit-5.7.16-1.fc25 (FEDORA-2017-7988067d87) The PHP Unit Testing framework -------------------------------------------------------------------------------- Update Information:
**Version 5.7.16** - 2017-03-15 * Fixed [#2547](https://github.com/sebastianbergmann/phpunit/issues/2547): Code Coverage data is collected for test annotated with `@coversNothing` * Fixed [#2558](https://github.com/sebastianbergmann/phpunit/issues/2558): `countOf()` function is missing --------------------------------------------------------------------------------
================================================================================ pki-console-10.4.0-1.fc25 (FEDORA-2017-1ee9370fd6) Certificate System - PKI Console -------------------------------------------------------------------------------- Update Information:
dogtagpki Pagure Issue #2541 - Re-base Dogtag pki packages to 10.4.x --------------------------------------------------------------------------------
================================================================================ pki-core-10.4.0-1.fc25 (FEDORA-2017-9c6007b406) Certificate System - PKI Core Components -------------------------------------------------------------------------------- Update Information:
dogtagpki Pagure Issue #2541 - Re-base Dogtag pki packages to 10.4.x ---- PKI TRAC Ticket #1710 - Add profile component that copies CN to SAN --------------------------------------------------------------------------------
================================================================================ purple-hangouts-0-45.20170313hg462bb55.fc25 (FEDORA-2017-f17086441f) Hangouts plugin for libpurple -------------------------------------------------------------------------------- Update Information:
Updated to latest snapshots. --------------------------------------------------------------------------------
================================================================================ purple-skypeweb-1.2.2-8.20170226git19ba66e.fc25 (FEDORA-2017-f17086441f) Adds support for Skype to Pidgin -------------------------------------------------------------------------------- Update Information:
Updated to latest snapshots. --------------------------------------------------------------------------------
================================================================================ python-botocore-1.5.26-1.fc25 (FEDORA-2017-391dac11a6) Low-level, data-driven core of boto 3 -------------------------------------------------------------------------------- Update Information:
update aws -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1428364 - python-botocore-1.5.25 is available https://bugzilla.redhat.com/show_bug.cgi?id=1428364 [ 2 ] Bug #1428187 - awscli-1.11.63 is available https://bugzilla.redhat.com/show_bug.cgi?id=1428187 --------------------------------------------------------------------------------
================================================================================ python-mutagen-1.37-1.fc25 (FEDORA-2017-8e47f9c5b9) Mutagen is a Python module to handle audio meta-data -------------------------------------------------------------------------------- Update Information:
- DSF: add mutagen.dsf module for DSF (DSD Stream File) support - MP3: Add mp3.MPEGInfo.encoder_settings containing a guess of the encoder settings used, for example "-V2" for LAME - ID3: add iTunes movement related frames id3.MVIN and id3.MVNM - MP4: support ��mvi, ��mvc, shwm, stik, rtng, tves, tvsn, plID, cnID, geID, atID, sfID, cmID, akID -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1426803 - python-mutagen-1.37 is available https://bugzilla.redhat.com/show_bug.cgi?id=1426803 --------------------------------------------------------------------------------
================================================================================ python-pynacl-1.1.1-1.fc25 (FEDORA-2017-928aea0f05) Python binding to the Networking and Cryptography (NaCl) library -------------------------------------------------------------------------------- Update Information:
- Fixed a circular import bug in nacl.utils. - Added shared_key() method on Box. - You can now pass None to nonce when encrypting with Box or SecretBox and it will automatically generate a random nonce. - Added support for siphash24. - Added support for blake2b. - Added support for scrypt. - All raised exceptions are defined mixing-in nacl.exceptions.CryptoError -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1432276 - python-pynacl-1.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1432276 --------------------------------------------------------------------------------
================================================================================ python-sqlalchemy-1.0.17-1.fc25 (FEDORA-2017-c6acb05701) Modular and flexible ORM library for python -------------------------------------------------------------------------------- Update Information:
This update contains a new upstream bugfix release. The upstream [changelog](ht tp://docs.sqlalchemy.org/en/latest/changelog/changelog_10.html#change-1.0.17) contains a list of all changes in version 1.0.17. --------------------------------------------------------------------------------
================================================================================ python-wrapt-1.10.10-1.fc25 (FEDORA-2017-cb0ff57e45) A Python module for decorators, wrappers and monkey patching -------------------------------------------------------------------------------- Update Information:
Latest upstream. --------------------------------------------------------------------------------
================================================================================ python-zeroconf-0.18.0-2.fc25 (FEDORA-2017-7ea7818e6e) Pure Python Multicast DNS Service Discovery Library -------------------------------------------------------------------------------- Update Information:
Pure Python Multicast DNS Service Discovery Library -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1432165 - doesn't this package need a python "enum-compat"? https://bugzilla.redhat.com/show_bug.cgi?id=1432165 [ 2 ] Bug #1401337 - Review Request: python-zeroconf - Pure Python Multicast DNS Service Discovery Library https://bugzilla.redhat.com/show_bug.cgi?id=1401337 --------------------------------------------------------------------------------
================================================================================ qemu-2.7.1-4.fc25 (FEDORA-2017-31b976672b) QEMU is a FAST! processor emulator -------------------------------------------------------------------------------- Update Information:
* CVE-2016-7907: net: imx: infinite loop (bz #1381182) * CVE-2017-5525: audio: memory leakage in ac97 (bz #1414110) * CVE-2017-5526: audio: memory leakage in es1370 (bz #1414210) * CVE-2016-10155 watchdog: memory leakage in i6300esb (bz #1415200) * CVE-2017-5552: virtio-gpu-3d: memory leakage (bz #1415283) * CVE-2017-5578: virtio-gpu: memory leakage (bz #1415797) * CVE-2017-5667: sd: sdhci OOB access during multi block transfer (bz #1417560) * CVE-2017-5856: scsi: megasas: memory leakage (bz #1418344) * CVE-2017-5857: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref (bz #1418383) * CVE-2017-5898: usb: integer overflow in emulated_apdu_from_guest (bz #1419700) * CVE-2017-5987: sd: infinite loop issue in multi block transfers (bz #1422001) * CVE-2017-6058: vmxnet3: OOB access when doing vlan stripping (bz #1423359) * CVE-2017-6505: usb: an infinite loop issue in ohci_service_ed_list (bz #1429434) * CVE-2017-2615: cirrus: oob access while doing bitblt copy backward (bz #1418206) * CVE-2017-2620: cirrus: potential arbitrary code execution (bz #1425419) * Fix spice GL with new mesa/libglvnd (bz #1431905) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1327206 - CVE-2016-7907 Qemu: net: inifinte loop in imx_fec_do_tx() function https://bugzilla.redhat.com/show_bug.cgi?id=1327206 [ 2 ] Bug #1414108 - CVE-2017-5525 Qemu: audio: memory leakage in ac97 device https://bugzilla.redhat.com/show_bug.cgi?id=1414108 [ 3 ] Bug #1414209 - CVE-2017-5526 Qemu: audio: memory leakage in es1370 device https://bugzilla.redhat.com/show_bug.cgi?id=1414209 [ 4 ] Bug #1415199 - CVE-2016-10155 Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb https://bugzilla.redhat.com/show_bug.cgi?id=1415199 [ 5 ] Bug #1415281 - CVE-2017-5552 Qemu: display: virtio-gpu-3d: memory leakage in virgl_resource_attach_backing https://bugzilla.redhat.com/show_bug.cgi?id=1415281 [ 6 ] Bug #1415795 - CVE-2017-5578 Qemu: display: virtio-gpu: host memory leakage in virtio_gpu_resource_attach_backing https://bugzilla.redhat.com/show_bug.cgi?id=1415795 [ 7 ] Bug #1417559 - CVE-2017-5667 Qemu: sd: sdhci OOB access during multi block SDMA transfer https://bugzilla.redhat.com/show_bug.cgi?id=1417559 [ 8 ] Bug #1418342 - CVE-2017-5856 Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd https://bugzilla.redhat.com/show_bug.cgi?id=1418342 [ 9 ] Bug #1418382 - CVE-2017-5857 Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref https://bugzilla.redhat.com/show_bug.cgi?id=1418382 [ 10 ] Bug #1419699 - CVE-2017-5898 Qemu: usb: integer overflow in emulated_apdu_from_guest https://bugzilla.redhat.com/show_bug.cgi?id=1419699 [ 11 ] Bug #1421995 - CVE-2017-5987 Qemu: sd: infinite loop issue in multi block transfers https://bugzilla.redhat.com/show_bug.cgi?id=1421995 [ 12 ] Bug #1423358 - CVE-2017-6058 Qemu: net: vmxnet3: OOB NetRxPkt::ehdr_buf access when doing vlan stripping https://bugzilla.redhat.com/show_bug.cgi?id=1423358 [ 13 ] Bug #1429432 - CVE-2017-6505 Qemu: usb: an infinite loop issue in ohci_service_ed_list https://bugzilla.redhat.com/show_bug.cgi?id=1429432 [ 14 ] Bug #1418200 - CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode https://bugzilla.redhat.com/show_bug.cgi?id=1418200 [ 15 ] Bug #1420484 - CVE-2017-2620 Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo https://bugzilla.redhat.com/show_bug.cgi?id=1420484 --------------------------------------------------------------------------------
================================================================================ sssd-1.15.2-1.fc25 (FEDORA-2017-eb8924136a) System Security Services Daemon -------------------------------------------------------------------------------- Update Information:
New upstream release 1.15.2 --------------------------------------------------------------------------------
================================================================================ taskotron-trigger-0.4.7-1.fc25 (FEDORA-2017-37d94567f5) Triggering Taskotron jobs via fedmsg -------------------------------------------------------------------------------- Update Information:
Fixes a bug in finding cloud images due to hard codded values --------------------------------------------------------------------------------
================================================================================ tint2-0.13.1-1.fc25 (FEDORA-2017-5845f5a2d6) A lightweight X11 desktop panel and task manager -------------------------------------------------------------------------------- Update Information:
- New version 0.13.1 - Fix un-owned directory - Remove 'create tint2 config directory' hack - Move sample configs from doc -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1429149 - tint2-v0.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=1429149 [ 2 ] Bug #1431475 - tint2-0.13.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1431475 --------------------------------------------------------------------------------
================================================================================ tripwire-2.4.3.4-1.fc25 (FEDORA-2017-f9e57ad4e5) IDS (Intrusion Detection System) -------------------------------------------------------------------------------- Update Information:
update to 2.4.3.4 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1429542 - tripwire cron.daily e-mail address check fails https://bugzilla.redhat.com/show_bug.cgi?id=1429542 --------------------------------------------------------------------------------
================================================================================ vdr-epg2vdr-1.1.47-1.fc25 (FEDORA-2017-aaf6321b54) A plugin to retrieve EPG data from a mysql database into VDR -------------------------------------------------------------------------------- Update Information:
Update to 1.1.47 ---- Update to 1.1.46 --------------------------------------------------------------------------------