The following Fedora 25 Security updates need testing:
Age URL
128
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9b3ed5f170
chicken-4.11.0-3.fc25
79
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6dd3bc37c3
compat-guile18-1.8.8-14.fc25
21
https://bodhi.fedoraproject.org/updates/FEDORA-2016-daf90926d4
dovecot-2.2.27-1.fc25
15
https://bodhi.fedoraproject.org/updates/FEDORA-2016-01eba63bcc
FlightGear-2016.3.1-3.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2016-89ee54c661
mingw-openjpeg2-2.1.2-3.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c614315d29
squid-4.0.17-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f341d71730
springframework-3.2.18-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2bca1021a3
seamonkey-2.46-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6e66f01186
borgbackup-1.0.9-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d8d7d6d47
tinymce-4.5.1-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6941d25875
php-PHPMailer-5.2.21-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-12c39f958b sway-0.11-4.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-87dc28b1a0
w3m-0.5.3-27.git20161120.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f7ef82c1b4
php-swiftmailer-5.4.5-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a4b06a036b
libpng10-1.0.67-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-aaf771b7a7
libpng-1.6.27-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5c8dce58c9
mingw-libpng-1.6.27-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e7b46c92ae
bzip2-1.0.6-21.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
35
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a1231ada78
python-productmd-1.3-1.fc25
35
https://bodhi.fedoraproject.org/updates/FEDORA-2016-940ecb5c59
wpa_supplicant-2.6-1.fc25
21
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9c25320b71
pungi-4.1.11-3.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2016-469935a9d1
xorg-x11-server-1.19.0-3.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2016-be5fa630c5 vim-8.0.134-2.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-37c1b46c83
python-mako-1.0.6-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2016-184e121855
lxpanel-0.9.2-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e7b46c92ae
bzip2-1.0.6-21.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d720054f2b
desktop-file-utils-0.23-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-c843353e72
perl-Scalar-List-Utils-1.47-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-aaf771b7a7
libpng-1.6.27-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-57fb167433
appstream-data-25-12.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-06be5d9fb4
breeze-icon-theme-5.29.0-1.fc25 extra-cmake-modules-5.29.0-1.fc25 kf5-5.29.0-1.fc25
kf5-attica-5.29.0-1.fc25 kf5-baloo-5.29.0-1.fc25 kf5-bluez-qt-5.29.0-1.fc25
kf5-frameworkintegration-5.29.0-1.fc25 kf5-kactivities-5.29.0-1.fc25
kf5-kactivities-stats-5.29.0-1.fc25 kf5-kapidox-5.29.0-1.fc25 kf5-karchive-5.29.0-1.fc25
kf5-kauth-5.29.0-1.fc25 kf5-kbookmarks-5.29.0-1.fc25 kf5-kcmutils-5.29.0-1.fc25
kf5-kcodecs-5.29.0-1.fc25 kf5-kcompletion-5.29.0-1.fc25 kf5-kconfig-5.29.0-1.fc25
kf5-kconfigwidgets-5.29.0-1.fc25 kf5-kcoreaddons-5.29.0-1.fc25 kf5-kcrash-5.29.0-1.fc25
kf5-kdbusaddons-5.29.0-1.fc25 kf5-kdeclarative-5.29.0-1.fc25 kf5-kded-5.29.0-1.fc25
kf5-kdelibs4support-5.29.0-1.fc25 kf5-kdesignerplugin-5.29.0-1.fc25
kf5-kdesu-5.29.0-1.fc25 kf5-kdewebkit-5.29.0-1.fc25 kf5-kdnssd-5.29.0-1.fc25
kf5-kdoctools-5.29.0-1.fc25 kf5-kemoticons-5.29.0-1.fc25 kf5-kfilemetadata-5.29.0-1.fc25
kf5-kglobalaccel-5.29.0-1.fc25 kf5-kguiad
dons-5.29.0-1.fc25 kf5-khtml-5.29.0-1.fc25 kf5-ki18n-5.29.0-1.fc25
kf5-kiconthemes-5.29.0-1.fc25 kf5-kidletime-5.29.0-1.fc25 kf5-kimageformats-5.29.0-1.fc25
kf5-kinit-5.29.0-1.fc25 kf5-kio-5.29.0-1.fc25 kf5-kitemmodels-5.29.0-1.fc25
kf5-kitemviews-5.29.0-1.fc25 kf5-kjobwidgets-5.29.0-1.fc25 kf5-kjs-5.29.0-1.fc25
kf5-kjsembed-5.29.0-1.fc25 kf5-kmediaplayer-5.29.0-1.fc25 kf5-knewstuff-5.29.0-1.fc25
kf5-knotifications-5.29.0-1.fc25 kf5-knotifyconfig-5.29.0-1.fc25
kf5-kpackage-5.29.1-3.fc25 kf5-kparts-5.29.0-1.fc25 kf5-kpeople-5.29.0-1.fc25
kf5-kplotting-5.29.0-1.fc25 kf5-kpty-5.29.0-1.fc25 kf5-kross-5.29.0-1.fc25
kf5-krunner-5.29.0-1.fc25 kf5-kservice-5.29.0-1.fc25 kf5-ktexteditor-5.29.0-1.fc25
kf5-ktextwidgets-5.29.0-1.fc25 kf5-kunitconversion-5.29.0-1.fc25 kf5-kwallet-5.29.0-1.fc25
kf5-kwayland-5.29.0-1.fc25 kf5-kwidgetsaddons-5.29.0-1.fc25
kf5-kwindowsystem-5.29.0-1.fc25 kf5-kxmlgui-5.29.0-1.fc25 kf5-kxmlrpcclient-5.29.0-1.fc25
kf5-modemmanager-qt-5.29.0-1.fc25 kf5-networkmanager-qt
-5.29.0-1.fc25 kf5-plasma-5.29.0-1.fc25 kf5-solid-5.29.0-1.fc25 kf5-sonnet-5.29.0-1.fc25
kf5-syntax-highlighting-5.29.0-1.fc25 kf5-threadweaver-5.29.0-1.fc25
oxygen-icon-theme-5.29.0-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-5f51425625
libgweather-3.20.4-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-ab324eaf7a
libnl3-3.2.29-1.fc25
The following builds have been pushed to Fedora 25 updates-testing
OpenSceneGraph-3.4.0-6.fc25
bird-1.6.3-1.fc25
bzip2-1.0.6-21.fc25
cxsc-2.5.4-2.fc25
desktop-file-utils-0.23-2.fc25
hatari-2.0.0-4.fc25
perl-App-PFT-1.1.0-3.fc25
perl-Scalar-List-Utils-1.47-1.fc25
python-jinja2-2.8.1-1.fc25
python-mutagen-1.36-2.fc25
python-sphinx-1.4.9-2.fc25
rubygem-domain_name-0.5.20161129-1.fc25
rubygem-rake-compiler-1.0.3-1.fc25
rubygem-ruby-ntlm-0.0.3-1.fc25
Details about builds:
================================================================================
OpenSceneGraph-3.4.0-6.fc25 (FEDORA-2016-dbc4444111)
High performance real-time graphics toolkit
--------------------------------------------------------------------------------
Update Information:
Add OSG-OpenEXR and OSG-Collada plugins.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408498 - [PATCH] OpenSceneGraph.spec: missing BuildRequires for Collada and
EXR support
https://bugzilla.redhat.com/show_bug.cgi?id=1408498
--------------------------------------------------------------------------------
================================================================================
bird-1.6.3-1.fc25 (FEDORA-2016-8e97569b3a)
BIRD Internet Routing Daemon
--------------------------------------------------------------------------------
Update Information:
BIRD 1.6.3 (2016-12-22) ======================= * Large BGP communities *
BFD authentication (MD5, SHA1) * SHA1 and SHA2 authentication for RIP and OSPF
* Improved documentation * Several bug fixes BIRD 1.6.2 (2016-09-29)
======================= * Fixes serious bug introduced in the previous
version BIRD 1.6.1 (2016-09-22) ======================= * Support for IPv6
ECMP * Better handling of IPv6 tentative addresses * Several updates and
fixes in Babel protocol * Filter: New !~ operator * Filter: ASN ranges in
bgpmask * KRT: New kernel protocol option 'metric' * KRT: New route
attribute 'krt_scope' * Improved BIRD help messages * Fixes memory leak in
BGP multipath * Fixes handling of empty path segments in BGP AS_PATH *
Several bug fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1378434 - bird-1.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1378434
--------------------------------------------------------------------------------
================================================================================
bzip2-1.0.6-21.fc25 (FEDORA-2016-e7b46c92ae)
A file compression utility
--------------------------------------------------------------------------------
Update Information:
CVE-2016-3189 bzip2: heap use after free in bzip2recover
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1348179 - CVE-2016-3189 bzip2: heap use after free in bzip2recover
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1348179
--------------------------------------------------------------------------------
================================================================================
cxsc-2.5.4-2.fc25 (FEDORA-2016-cd457d0b3a)
C++ library for Extended Scientific Computing
--------------------------------------------------------------------------------
Update Information:
This update contains fixes for 64-bit builds and also fixes some endianness
issues.
--------------------------------------------------------------------------------
================================================================================
desktop-file-utils-0.23-2.fc25 (FEDORA-2016-d720054f2b)
Utilities for manipulating .desktop files
--------------------------------------------------------------------------------
Update Information:
This update adds Pantheon to the list of valid desktop environments. (This
change was already accepted upstream and committed to the upstream git.)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1333550 - Pantheon not a valid "registered value" for desktop
environment
https://bugzilla.redhat.com/show_bug.cgi?id=1333550
--------------------------------------------------------------------------------
================================================================================
hatari-2.0.0-4.fc25 (FEDORA-2016-1c8c8941c0)
An Atari ST/STE/TT/Falcon emulator suitable for playing games
--------------------------------------------------------------------------------
Update Information:
* Support both hatari config file locations in hatariui * Support hatari v2.0
option changes in hatariui
--------------------------------------------------------------------------------
================================================================================
perl-App-PFT-1.1.0-3.fc25 (FEDORA-2016-1ad0fb0f1b)
Hacker friendly static blog generator
--------------------------------------------------------------------------------
Update Information:
This is the first update for perl-App-PFT (aka
[
App::PFT](https://github.com/dacav/app-pft)), a group of perl executables which
handle a PFT website. This package relies on the
[
PFT](https://github.com/dacav/PFT/) library, which abstracts the file system
access. See
[
this](https://bodhi.fedoraproject.org/updates/FEDORA-2016-173acf8830) Bodhi
update. The package installs `/usr/bin/pft`, which calls in chain sub-commands
in `/usr/libexec/perl-App-PFT` (e.g. `pft init` will call `/usr/libexec/perl-
App-PFT/pft-init`). The package provides manpages (one for `pft` and one for
each subcommand) and a couple of shared files (currently two templates for the
generated site) ## Example of usage `pft init` initializes the local directory
with a structure for the content and a configuration file (`pft.yaml`). The `pft
edit` command can be used to create a new content (i.e. a page, a blog entry, a
tag page or a month page). `pft make` compiles the site according to the
template specified in the configuration file.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1368790 - Review Request: perl-App-PFT - Hacker friendly static blog
generator, command line utilities
https://bugzilla.redhat.com/show_bug.cgi?id=1368790
--------------------------------------------------------------------------------
================================================================================
perl-Scalar-List-Utils-1.47-1.fc25 (FEDORA-2016-c843353e72)
A selection of general-utility scalar and list subroutines
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream version 1.47.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408347 - perl-Scalar-List-Utils-1.47 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1408347
--------------------------------------------------------------------------------
================================================================================
python-jinja2-2.8.1-1.fc25 (FEDORA-2016-1102072017)
General purpose template engine
--------------------------------------------------------------------------------
Update Information:
#### Jinja2 2.8.1 #### * Fixed the for_qs flag for urlencode. * Fixed
regression when applying int to non-string values. * SECURITY: if the sandbox
mode is used format expressions are now sandboxed with the same rules as in
Jinja. This solves various information leakage problems that can occur with
format strings.
--------------------------------------------------------------------------------
================================================================================
python-mutagen-1.36-2.fc25 (FEDORA-2016-629fa94860)
Mutagen is a Python module to handle audio meta-data
--------------------------------------------------------------------------------
Update Information:
Update to 1.36
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408342 - python-mutagen-1.36 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1408342
--------------------------------------------------------------------------------
================================================================================
python-sphinx-1.4.9-2.fc25 (FEDORA-2016-db30d55c10)
Python documentation generator
--------------------------------------------------------------------------------
Update Information:
Replaces use of alternatives with environment modules so that users do not need
root access to switch between python2 and python3 versions of the sphinx
programs.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1382405 - sphinx-quickstart not working. Alternatives is not the right
solution
https://bugzilla.redhat.com/show_bug.cgi?id=1382405
--------------------------------------------------------------------------------
================================================================================
rubygem-domain_name-0.5.20161129-1.fc25 (FEDORA-2016-172d81d29d)
Domain Name manipulation library for Ruby
--------------------------------------------------------------------------------
Update Information:
New version 0.5.20161129 is released.
--------------------------------------------------------------------------------
================================================================================
rubygem-rake-compiler-1.0.3-1.fc25 (FEDORA-2016-bd6f707233)
Rake-based Ruby C Extension task generator
--------------------------------------------------------------------------------
Update Information:
New version 1.0.3 is released.
--------------------------------------------------------------------------------
================================================================================
rubygem-ruby-ntlm-0.0.3-1.fc25 (FEDORA-2016-9ba0bc3390)
NTLM implementation for Ruby
--------------------------------------------------------------------------------
Update Information:
New version 0.0.3 is now available.
--------------------------------------------------------------------------------