The following Fedora 25 Security updates need testing:
Age URL
113
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cc029be02d tnef-1.4.14-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c0ef6054d7
python-django-1.9.13-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2a90185a04
php-pear-CAS-1.3.5-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b83c0eeab0
xstream-1.4.9-5.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a902f8db61
jenkins-xstream-1.4.7-11.jenkins1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6ef28e38d6
dovecot-2.2.29.1-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8dce7a3940
backintime-1.1.20-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-db77ca450f
ansible-2.3.0.0-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-11ac1e31eb yara-3.5.0-7.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-80763c8c03
collectd-5.7.1-3.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-15e7445d67
libdwarf-20170416-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5261ba4605
tomcat-8.0.43-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9c6430c2e2 pcre2-10.23-6.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-34f6e70fdd
libnl3-3.2.29-3.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
21
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ea86a8123b
pungi-4.1.14-1.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b19d9e3c3d
gnutls-3.5.11-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4efaae68fe
thunderbird-52.0-2.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3c25dd541a
livecd-tools-24.3-2.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-19451b76d6
highlight-3.36-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0bc9e0eb4e
kernel-4.10.11-200.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-34f6e70fdd
libnl3-3.2.29-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9c6430c2e2 pcre2-10.23-6.fc25
The following builds have been pushed to Fedora 25 updates-testing
fedfind-3.5.4-1.fc25
fts-3.6.8-1.fc25
fts-monitoring-3.6.8-1.fc25
gsignond-1.0.6-2.fc25
kde-cli-tools-5.9.4-2.fc25
kernel-4.10.11-200.fc25
kf5-plasma-5.33.0-2.fc25
libnl3-3.2.29-3.fc25
libyui-3.3.2-1.fc25
lziprecover-1.19-1.fc25
numix-gtk-theme-2.6.6-2.fc25
numix-icon-theme-0.1.0-15.git271471c.fc25
numix-icon-theme-circle-0.1.0-13.git5a11140.fc25
openqa-4.4-49.20170409gitfead7af.fc25
os-autoinst-4.4-18.20170410git97928a2.fc25
pcre2-10.23-6.fc25
perl-Getopt-Lucid-1.08-1.fc25
perl-Mojolicious-7.30-1.fc25
perl-Mojolicious-Plugin-AssetPack-1.41-1.fc25
perl-Perl-Critic-Pulp-93-1.fc25
perl-Time-HiRes-1.9742-1.fc25
plasma-desktop-5.9.4-2.fc25
python-jedi-0.10.2-1.fc25
rsyslog-8.26.0-1.fc25
stress-ng-0.07.29-1.fc25
Details about builds:
================================================================================
fedfind-3.5.4-1.fc25 (FEDORA-2017-7afb2f970d)
Fedora compose and image finder
--------------------------------------------------------------------------------
Update Information:
This new version of fedfind handles an unusual situation where its local cache
directory (which is usually `~/.cache/fedfind`, but can be a temporary directory
if that location is not writeable) disappears during the lifetime of a fedfind-
using process. Previously, this would cause the process to crash, as fedfind
wasn't written to handle this eventuality. There are no other changes in this
update.
--------------------------------------------------------------------------------
================================================================================
fts-3.6.8-1.fc25 (FEDORA-2017-da6256c64f)
File Transfer Service V3
--------------------------------------------------------------------------------
Update Information:
New upstream release 3.6.8
--------------------------------------------------------------------------------
================================================================================
fts-monitoring-3.6.8-1.fc25 (FEDORA-2017-08a0b72076)
FTS3 Web Application for monitoring
--------------------------------------------------------------------------------
Update Information:
New upstream release 3.6.8
--------------------------------------------------------------------------------
================================================================================
gsignond-1.0.6-2.fc25 (FEDORA-2017-edda6d990d)
GSignOn daemon
--------------------------------------------------------------------------------
Update Information:
Fix subpackage descriptions. ---- New package for fedora. This is one of the
last missing dependencies for a complete Pantheon Desktop Environment.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442547 - Review Request: gsignond - GSignOn daemon
https://bugzilla.redhat.com/show_bug.cgi?id=1442547
--------------------------------------------------------------------------------
================================================================================
kde-cli-tools-5.9.4-2.fc25 (FEDORA-2017-6baad2181b)
Tools based on KDE Frameworks 5 to better interact with the system
--------------------------------------------------------------------------------
Update Information:
Backport upstream fix for getting a more-complete output from "kcmshell5
--list"
--------------------------------------------------------------------------------
================================================================================
kernel-4.10.11-200.fc25 (FEDORA-2017-0bc9e0eb4e)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.10.11 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
================================================================================
kf5-plasma-5.33.0-2.fc25 (FEDORA-2017-bc1574b703)
KDE Frameworks 5 Tier 3 framework is foundation to build a primary user interface
--------------------------------------------------------------------------------
Update Information:
Backport upstream fixes, notably for inconsistent plasma icon sizes
--------------------------------------------------------------------------------
================================================================================
libnl3-3.2.29-3.fc25 (FEDORA-2017-34f6e70fdd)
Convenience library for kernel netlink sockets
--------------------------------------------------------------------------------
Update Information:
lib: check for integer overflow in nlmsg_reserve() (rh#1440789, CVE-2017-0553)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1440789 - CVE-2017-0553 libnl3: libnl: Integer overflow in nlmsg_reserve()
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1440789
--------------------------------------------------------------------------------
================================================================================
libyui-3.3.2-1.fc25 (FEDORA-2017-a15a381b38)
GUI-abstraction library
--------------------------------------------------------------------------------
Update Information:
* New upstream release * Set preferred UI-plugin using
$YUI_PREFERRED_BACKEND in $ENV * Avoid several warnings from CMake * Improve
macros-file
--------------------------------------------------------------------------------
================================================================================
lziprecover-1.19-1.fc25 (FEDORA-2017-a517758125)
Data recovery tool and decompressor for files in the lzip compressed format
--------------------------------------------------------------------------------
Update Information:
1.19
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442896 - lziprecover-1.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442896
--------------------------------------------------------------------------------
================================================================================
numix-gtk-theme-2.6.6-2.fc25 (FEDORA-2017-685dde844d)
Numix Gtk Theme
--------------------------------------------------------------------------------
Update Information:
move directories prior to symlink creation
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1352499 - numix-gtk-theme-2.6.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1352499
[ 2 ] Bug #1379883 - File conflict file /usr/share/themes/Numix/gtk-3.0/assets with
latest update
https://bugzilla.redhat.com/show_bug.cgi?id=1379883
[ 3 ] Bug #1405837 - Numix theme messes up the desktop icons in Xfce
https://bugzilla.redhat.com/show_bug.cgi?id=1405837
--------------------------------------------------------------------------------
================================================================================
numix-icon-theme-0.1.0-15.git271471c.fc25 (FEDORA-2017-52138162ea)
Numix Project icon theme
--------------------------------------------------------------------------------
Update Information:
rebuilt ---- rebuilt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1439707 - numix-icon-theme-17-04-05 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1439707
--------------------------------------------------------------------------------
================================================================================
numix-icon-theme-circle-0.1.0-13.git5a11140.fc25 (FEDORA-2017-14da770c2f)
Numix Project circle icon theme
--------------------------------------------------------------------------------
Update Information:
rebuilt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1391795 - numix-icon-theme-circle-17-04-05 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1391795
--------------------------------------------------------------------------------
================================================================================
openqa-4.4-49.20170409gitfead7af.fc25 (FEDORA-2017-a675854dad)
OS-level automated testing framework
--------------------------------------------------------------------------------
Update Information:
This update provides new git snapshots of openQA and os-autoinst with various
bugfixes and enhancements. It also provides bugfix updates to Mojolicious and
the AssetPack plugin; the newer versions are now required by the latest openQA
code. There should be no incompatible changes in either Mojolicious or
AssetPack.
--------------------------------------------------------------------------------
================================================================================
os-autoinst-4.4-18.20170410git97928a2.fc25 (FEDORA-2017-a675854dad)
OS-level test automation
--------------------------------------------------------------------------------
Update Information:
This update provides new git snapshots of openQA and os-autoinst with various
bugfixes and enhancements. It also provides bugfix updates to Mojolicious and
the AssetPack plugin; the newer versions are now required by the latest openQA
code. There should be no incompatible changes in either Mojolicious or
AssetPack.
--------------------------------------------------------------------------------
================================================================================
pcre2-10.23-6.fc25 (FEDORA-2017-9c6430c2e2)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes a crash when finding a Unicode property for a character with
a code point greater than 0x10ffff in UTF-32 library while UTF mode is disabled
and JIT mode is enabled. It also fixes an incortect cast in UTF validation
routine.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434504 - CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7,
10.24/2)
https://bugzilla.redhat.com/show_bug.cgi?id=1434504
--------------------------------------------------------------------------------
================================================================================
perl-Getopt-Lucid-1.08-1.fc25 (FEDORA-2017-099e214daa)
Clear, readable syntax for command line processing
--------------------------------------------------------------------------------
Update Information:
This release fixes building on Perl without "." in @INC path.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442608 - perl-Getopt-Lucid-1.08 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442608
--------------------------------------------------------------------------------
================================================================================
perl-Mojolicious-7.30-1.fc25 (FEDORA-2017-a675854dad)
A next generation web framework for Perl
--------------------------------------------------------------------------------
Update Information:
This update provides new git snapshots of openQA and os-autoinst with various
bugfixes and enhancements. It also provides bugfix updates to Mojolicious and
the AssetPack plugin; the newer versions are now required by the latest openQA
code. There should be no incompatible changes in either Mojolicious or
AssetPack.
--------------------------------------------------------------------------------
================================================================================
perl-Mojolicious-Plugin-AssetPack-1.41-1.fc25 (FEDORA-2017-a675854dad)
Compress and convert CSS, Less, Sass, JavaScript and CoffeeScript files
--------------------------------------------------------------------------------
Update Information:
This update provides new git snapshots of openQA and os-autoinst with various
bugfixes and enhancements. It also provides bugfix updates to Mojolicious and
the AssetPack plugin; the newer versions are now required by the latest openQA
code. There should be no incompatible changes in either Mojolicious or
AssetPack.
--------------------------------------------------------------------------------
================================================================================
perl-Perl-Critic-Pulp-93-1.fc25 (FEDORA-2017-5e63a8960a)
Some add-on perlcritic policies
--------------------------------------------------------------------------------
Update Information:
This release improves a build script. We deliver it only to provide up-to-date
version string.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442380 - perl-Perl-Critic-Pulp-93 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442380
--------------------------------------------------------------------------------
================================================================================
perl-Time-HiRes-1.9742-1.fc25 (FEDORA-2017-a12488eb86)
High resolution alarm, sleep, gettimeofday, interval timers
--------------------------------------------------------------------------------
Update Information:
This release fixes building on Perl without "." in @INC path. It also corrects
bthe build script to use safer 3-argument open() calls. We deliver it only to
provide up-to-date version string.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442609 - perl-Time-HiRes-1.9742 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442609
--------------------------------------------------------------------------------
================================================================================
plasma-desktop-5.9.4-2.fc25 (FEDORA-2017-bc1574b703)
Plasma Desktop shell
--------------------------------------------------------------------------------
Update Information:
Backport upstream fixes, notably for inconsistent plasma icon sizes
--------------------------------------------------------------------------------
================================================================================
python-jedi-0.10.2-1.fc25 (FEDORA-2017-0c19da6f4c)
An auto completion tool for Python that can be used for text editors
--------------------------------------------------------------------------------
Update Information:
### [upstream
changelog](https://github.com/davidhalter/jedi/blob/v0.10.2/CHANGELOG.rst) ###
0.10.2 (2017-04-05) - Python Packaging sucks. Some files were not included in
0.10.1. ### 0.10.1 (2017-04-05) - Fixed a few very annoying bugs. - Prepared
the parser to be factored out of Jedi.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1438985 - python-jedi-0.10.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1438985
--------------------------------------------------------------------------------
================================================================================
rsyslog-8.26.0-1.fc25 (FEDORA-2017-716d0a2a67)
Enhanced system logging and kernel message trapping daemon
--------------------------------------------------------------------------------
Update Information:
rebase to 8.26.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1436113 - rsyslog documentation manual page horribly out-of-date
https://bugzilla.redhat.com/show_bug.cgi?id=1436113
[ 2 ] Bug #1438789 - rsyslog-8.26.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1438789
--------------------------------------------------------------------------------
================================================================================
stress-ng-0.07.29-1.fc25 (FEDORA-2017-e3d9412367)
Stress test a computer system in various ways
--------------------------------------------------------------------------------
Update Information:
new version ---- initial version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1398624 - stress-ng-0.07.29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1398624
[ 2 ] Bug #1346407 - Review Request: stress-ng - Stress test a computer system in
various ways
https://bugzilla.redhat.com/show_bug.cgi?id=1346407
--------------------------------------------------------------------------------