The following Fedora 25 Security updates need testing:
Age URL
250
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
148
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
88
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
47
https://bodhi.fedoraproject.org/updates/FEDORA-2017-86cfcbbae8
libstaroffice-0.0.4-1.fc25
42
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99c0118c0c
memcached-1.4.39-1.fc25
38
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2232fe97b4
docker-distribution-2.6.2-1.git48294d9.fc25
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7e5ac0896e
botan-1.10.16-1.fc25
19
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fa1d8ad61a
mercurial-3.8.1-4.fc25
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-270ab2baa3 glibc-2.24-10.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a00a087fd4
tomcat-8.0.46-1.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-902970c18f
drupal8-8.3.7-1.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bdd0b565ef
thunderbird-52.3.0-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f0b31bc9c5
mingw-libzip-1.1.3-2.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7dacb3c21c
augeas-1.8.1-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8ab30db61c
copr-dist-git-0.36-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3a568adb31
ImageMagick-6.9.9.9-1.fc25 WindowMaker-0.95.7-3.fc25.1 autotrace-0.31.1-49.fc25
converseen-0.9.6.2-3.fc25 drawtiming-0.7.1-22.fc25 emacs-25.2-5.fc25 gtatool-2.2.0-6.fc25
imageinfo-0.05-27.fc25 inkscape-0.92.1-4.20170510bzr15686.fc25.1 k3d-0.8.0.6-8.fc25
kxstitch-1.2.0-9.fc25 perl-Image-SubImageFind-0.03-13.fc25 pfstools-2.0.6-3.fc25
php-pecl-imagick-3.4.3-2.fc25 psiconv-0.9.8-22.fc25 q-7.11-29.fc25 ripright-0.11-5.fc25
rss-glx-0.9.1.p-27.fc25.1 rubygem-rmagick-2.16.0-4.fc25.2 synfig-1.2.0-1.fc25.1
synfigstudio-1.2.0-5.fc25 techne-0.2.3-20.fc25
vdr-scraper2vdr-1.0.5-4.20170611git254122b.fc25 vips-8.4.4-1.fc25.1
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3abea58794
mbedtls-2.6.0-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c708c044e3
chromium-60.0.3112.113-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a69b0bb52d gd-2.2.5-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ed735463e3 xen-4.7.3-4.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-deefb26e8b
mingw-openjpeg2-2.2.0-2.fc25 openjpeg2-2.2.0-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f285db3668
openjpeg2-2.2.0-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f7a73de98d
mingw-openjpeg2-2.2.0-3.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
92
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-67705933e3
glusterfs-3.10.5-1.fc25
19
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0c6291cd4b
pango-1.40.9-1.fc25
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e22c6d53db
mariadb-10.1.26-2.fc25
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-270ab2baa3 glibc-2.24-10.fc25
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bb07876a1c nspr-4.16.0-1.fc25
nss-3.32.0-1.1.fc25 nss-softokn-3.32.0-1.2.fc25 nss-util-3.32.0-1.0.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-08a8ae97e7
gnutls-3.5.15-1.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a2f2ef5a3c
NetworkManager-1.4.6-1.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bdd0b565ef
thunderbird-52.3.0-1.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-966ff8db5a
pungi-4.1.18-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7dacb3c21c
augeas-1.8.1-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9badc4b4fa
upower-0.99.5-2.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e8df43a1e0
python3-3.5.4-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-66902d17b7
firefox-55.0.2-2.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d027c0b6ef
appstream-data-25-22.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-deefb26e8b
mingw-openjpeg2-2.2.0-2.fc25 openjpeg2-2.2.0-2.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ed735463e3 xen-4.7.3-4.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c4ab9b29f2
publicsuffix-list-20170809-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3a568adb31
ImageMagick-6.9.9.9-1.fc25 WindowMaker-0.95.7-3.fc25.1 autotrace-0.31.1-49.fc25
converseen-0.9.6.2-3.fc25 drawtiming-0.7.1-22.fc25 emacs-25.2-5.fc25 gtatool-2.2.0-6.fc25
imageinfo-0.05-27.fc25 inkscape-0.92.1-4.20170510bzr15686.fc25.1 k3d-0.8.0.6-8.fc25
kxstitch-1.2.0-9.fc25 perl-Image-SubImageFind-0.03-13.fc25 pfstools-2.0.6-3.fc25
php-pecl-imagick-3.4.3-2.fc25 psiconv-0.9.8-22.fc25 q-7.11-29.fc25 ripright-0.11-5.fc25
rss-glx-0.9.1.p-27.fc25.1 rubygem-rmagick-2.16.0-4.fc25.2 synfig-1.2.0-1.fc25.1
synfigstudio-1.2.0-5.fc25 techne-0.2.3-20.fc25
vdr-scraper2vdr-1.0.5-4.20170611git254122b.fc25 vips-8.4.4-1.fc25.1
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d0b5a22cb8 sssd-1.15.3-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cd99047b28
vim-8.0.1030-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d4f3635ee
selinux-policy-3.13.1-225.22.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f285db3668
openjpeg2-2.2.0-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ddd99a339e
samba-4.5.13-0.fc25
The following builds have been pushed to Fedora 25 updates-testing
abi-compliance-checker-2.2-1.fc25
abi-dumper-1.1-1.fc25
abi-tracker-1.11-1.fc25
cargo-0.21.0-1.fc25
casync-2-4.fc25
cinnamon-3.4.6-14.fc25
cinnamon-settings-daemon-3.4.4-3.fc25
dumpasn1-20170309-1.fc25
fedpkg-1.29-3.fc25
gnome-pkg-tools-0.19.10-1.fc25
gnome-shell-extension-sustmi-3.0-16.git.e3def68.fc25
golang-bazil-fuse-0-0.1.20160811git371fbbd.fc25
golang-github-cheggaaa-pb-1.0.12-0.1.git9a180eb.fc25
golang-github-ncw-go-acd-0-0.1.20170306git96a49aa.fc25
golang-github-nsf-termbox-go-0-0.1.20170710git4ed959e.fc25
golang-github-rfjakob-eme-1.1-1.fc25
golang-github-xanzy-ssh-agent-0-0.1.20151215gitba9c9e3.fc25
hamlib-3.1-9.fc25
icecat-52.3.0-2.fc25
koschei-2.0.1-1.fc25
lightdm-1.18.3-4.fc25
mingw-openjpeg2-2.2.0-3.fc25
mycli-1.12.1-1.fc25
nuvolasdk-4.7.0-1.fc25
openjpeg2-2.2.0-3.fc25
php-clue-stream-filter-1.4.0-1.fc25
purple-mattermost-1.1-4.20170805git4524538.fc25
pyhunspell-0.5.0-1.fc25
python-agate-1.6.0-2.gited9e179.fc25
python-gertty-1.5.0-1.fc25
rpkg-1.50-2.fc25
rust-1.20.0-1.fc25
samba-4.5.13-0.fc25
selinux-policy-3.13.1-225.22.fc25
sssd-1.15.3-3.fc25
vim-8.0.1030-1.fc25
xmms-1.2.11-32.20071117cvs.fc25
xrdhttpvoms-0.2.5-2.fc25
youtube-dl-2017.09.02-1.fc25
Details about builds:
================================================================================
abi-compliance-checker-2.2-1.fc25 (FEDORA-2017-f64d4ff4c8)
An ABI Compliance Checker
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream releases.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1486717 - abi-compliance-checker-2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1486717
[ 2 ] Bug #1486719 - abi-dumper-1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1486719
[ 3 ] Bug #1486720 - abi-tracker-1.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1486720
--------------------------------------------------------------------------------
================================================================================
abi-dumper-1.1-1.fc25 (FEDORA-2017-f64d4ff4c8)
Tool to dump ABI of an ELF object containing DWARF debug info
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream releases.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1486717 - abi-compliance-checker-2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1486717
[ 2 ] Bug #1486719 - abi-dumper-1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1486719
[ 3 ] Bug #1486720 - abi-tracker-1.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1486720
--------------------------------------------------------------------------------
================================================================================
abi-tracker-1.11-1.fc25 (FEDORA-2017-f64d4ff4c8)
Tool to visualize ABI changes timeline of a C/C++ library
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream releases.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1486717 - abi-compliance-checker-2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1486717
[ 2 ] Bug #1486719 - abi-dumper-1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1486719
[ 3 ] Bug #1486720 - abi-tracker-1.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1486720
--------------------------------------------------------------------------------
================================================================================
cargo-0.21.0-1.fc25 (FEDORA-2017-a8cbc52d0f)
Rust's package manager and build tool
--------------------------------------------------------------------------------
Update Information:
New versions of Rust and Cargo -- see the release notes for [1.20](https://blog
.rust-lang.org/2017/08/31/Rust-1.20.html).
--------------------------------------------------------------------------------
================================================================================
casync-2-4.fc25 (FEDORA-2017-7dbbc09eff)
Content Addressable Data Synchronizer
--------------------------------------------------------------------------------
Update Information:
Backport fix for setting chunk-size
--------------------------------------------------------------------------------
================================================================================
cinnamon-3.4.6-14.fc25 (FEDORA-2017-d41673db11)
Window management and application launching for GNOME
--------------------------------------------------------------------------------
Update Information:
- Remove sharing plugin from Cinnamon
--------------------------------------------------------------------------------
================================================================================
cinnamon-settings-daemon-3.4.4-3.fc25 (FEDORA-2017-d41673db11)
The daemon sharing settings from CINNAMON to GTK+/KDE applications
--------------------------------------------------------------------------------
Update Information:
- Remove sharing plugin from Cinnamon
--------------------------------------------------------------------------------
================================================================================
dumpasn1-20170309-1.fc25 (FEDORA-2017-5eb1f0bae2)
ASN.1 object dump utility
--------------------------------------------------------------------------------
Update Information:
update to 20170309
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1486722 - dumpasn1-20170309 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1486722
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.29-3.fc25 (FEDORA-2017-f0d9aff598)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
# Highlight - Read Koji configuration from profile. - fedpkg-stage is usable -
Non-zero is returned when local command fails - More Python 3 compatible - Allow
container builds from any namespace - Supply namespace to lookaside (if enabled)
UPDATED: Please test command ``container-build``. # rpkg - Fix PEP8 error
(cqi) - Spelling fixes (ville.skytta) - Reword help and description of new-
sources and upload commands - 1248737 (cqi) - Set autorebuild enabled by
default (bfontecc) - Add commands to whitelist_externals (cqi) - Declare Python
3 versions to support in setup.py (cqi) - Replace unicode with six.text_type
(cqi) - Run tests in both Python 2 and 3 with tox (cqi) - Make tests and covered
code compatible with Py3 (cqi) - Add requirements files (cqi) - Do not build
srpm in test (cqi) - Do not actually run git-diff in tests (cqi) - Remove
deprecated modules used in koji (cqi) - Non-zero exit when rpmbuild fails in
local command (cqi) - Report deprecation of config via logger (lsedlar) - Print
--dist deprecation warning explicitly (lsedlar) - utils: Avoid
DeprecationWarning for messages for users (lsedlar) - Supply namespace to
lookaside (if enabled) (lsedlar) - Support reading koji config from profile -
#187 (cqi) - Remove kitchen (cqi) - Fix string format (cqi) - Recommend
--release instead of --dist in mockbuild --help (tmz) - Allow overriding
container build target by downstream (lsedlar) - Add a separate property for
namespace (lsedlar) - Allow container builds from any namespace (maxamillion) -
Make osbs support optional (cqi) - make osbs dependency optional (pavlix) -
Allow explicit namespaces with slashes (lsedlar) - Do not hang indefinitely when
lookaside cache server stops sending data (jkaluza) - Make --module-name work
with namespaces - #216 (lsedlar) - Include README.rst in dist package (cqi) -
More document in README - #189 (cqi) - Make new command be able to print unicode
- #205 (cqi) - Allow to specify custom info to a dummy commit (cqi) - Load
module name correctly even if push url ends in slash - #192 (cqi) - Replace
fedorahosted.org with pagure.io - #202 (cqi) - Fix rpm command to get changelog
from SPEC - rhbz#1412224 (cqi) - Rewrite tests to avoid running rpmbuild and
rpmlint (cqi) - Use fake value to make Command in test (cqi) - Python 3.6
invalid escape sequence deprecation fixes (ville.skytta) # fedpkg - Remove
unused variable in Commands.retire (cqi) - No more pkgdb. (rbean) - Add --arches
to build completions (ville.skytta) - Add ppc64le to arch completions
(ville.skytta) - Explain how to write a note in multiple lines in update
template - #123 (cqi) - Remove code that handles secondary arch (cqi) - Simplify
passing arguments when creating Command object - #14 (cqi) - Set koji profile
for secondary arch immediately (cqi) - Use profile to load Koji configuration -
#97 (cqi) - Remove push.default from clone_default - #109 (cqi) - remove special
handling of s390 specific packages (dan) - Replace
fedorahosted.org with
pagure.io in manpage - #113 (cqi) - Remove tracbaseurl from conf file - #112
(cqi) - Set disttag properly (cqi) - koji stage config moved, update fedpkg
defaults (maxamillion) - Specific help of --release for fedpkg - rhbz#1054440
(cqi)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1487383 - cannot do build
https://bugzilla.redhat.com/show_bug.cgi?id=1487383
[ 2 ] Bug #1248737 - What is the difference between new-sources and upload?
https://bugzilla.redhat.com/show_bug.cgi?id=1248737
[ 3 ] Bug #1412224 - fedpkg update fails: Could not execute update: error: Unable to
open /home/jsynacek/rpmbuild/SOURCES/triggers.systemd: No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=1412224
[ 4 ] Bug #1410300 - "fedpkg local" should return nonzero exitcode when build
fails
https://bugzilla.redhat.com/show_bug.cgi?id=1410300
--------------------------------------------------------------------------------
================================================================================
gnome-pkg-tools-0.19.10-1.fc25 (FEDORA-2017-9677fd3aa6)
Tools for the Debian GNOME Packaging Team
--------------------------------------------------------------------------------
Update Information:
Update to version 0.19.10, see
http://metadata.ftp-
master.debian.org/changelogs/main/g/gnome-pkg-tools/gnome-pkg-
tools_0.19.10_changelog for details.
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-sustmi-3.0-16.git.e3def68.fc25 (FEDORA-2017-d58b94c474)
Include two extensions, windowoverlay-icons and historymanager-prefix-search
--------------------------------------------------------------------------------
Update Information:
Fix Requires and Recommends in subpackages. Fix locale directory. ---- First
update in years. (Previous package maintainer had disappeared.) This is two
GNOME Shell extensions in subpackages, because the upstream tracks them both in
a single git repository. Upstream changes since the last package update include:
* updates to keep up with changes to the GNOME Shell API (from relatively early
in the GNOME 3.x life cycle) * additional translations * various bug fixes
--------------------------------------------------------------------------------
================================================================================
golang-bazil-fuse-0-0.1.20160811git371fbbd.fc25 (FEDORA-2017-7470f3d312)
Go library for writing FUSE userspace filesystems
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475750 - Review Request: golang-bazil-fuse - Go library for writing FUSE
userspace filesystems
https://bugzilla.redhat.com/show_bug.cgi?id=1475750
--------------------------------------------------------------------------------
================================================================================
golang-github-cheggaaa-pb-1.0.12-0.1.git9a180eb.fc25 (FEDORA-2017-2aa3d2daca)
Console progress bar for Golang
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 9a180eb4617eb2112e01ca3fa25c61a6303afcaf
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1440773 - golang-github-cheggaaa-pb is outdated and needs to be updated to
latest upstream
https://bugzilla.redhat.com/show_bug.cgi?id=1440773
--------------------------------------------------------------------------------
================================================================================
golang-github-ncw-go-acd-0-0.1.20170306git96a49aa.fc25 (FEDORA-2017-9af7568a73)
Go library for accessing the Amazon Cloud Drive
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475841 - Review Request: golang-github-ncw-go-acd - Go library for accessing
the Amazon Cloud Drive
https://bugzilla.redhat.com/show_bug.cgi?id=1475841
--------------------------------------------------------------------------------
================================================================================
golang-github-nsf-termbox-go-0-0.1.20170710git4ed959e.fc25 (FEDORA-2017-a6534329da)
A minimalistic API which allows programmers to write text-based user interfaces
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475846 - Review Request: golang-github-nsf-termbox-go - A minimalistic API
which allows programmers to write text-based user interfaces
https://bugzilla.redhat.com/show_bug.cgi?id=1475846
--------------------------------------------------------------------------------
================================================================================
golang-github-rfjakob-eme-1.1-1.fc25 (FEDORA-2017-e700e45e90)
Encrypt-Mix-Encrypt for Go
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475850 - Review Request: golang-github-rfjakob-eme - Encrypt-Mix-Encrypt for
Go
https://bugzilla.redhat.com/show_bug.cgi?id=1475850
--------------------------------------------------------------------------------
================================================================================
golang-github-xanzy-ssh-agent-0-0.1.20151215gitba9c9e3.fc25 (FEDORA-2017-2703e7b297)
Create a ssh-agent on any type of OS from any Go application
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475863 - Review Request: golang-github-xanzy-ssh-agent - Create a ssh-agent
on any type of OS from any Go application
https://bugzilla.redhat.com/show_bug.cgi?id=1475863
--------------------------------------------------------------------------------
================================================================================
hamlib-3.1-9.fc25 (FEDORA-2017-7bbf51f160)
Run-time library to control radio transceivers and receivers
--------------------------------------------------------------------------------
Update Information:
- Update upstream URL for package, fixes RHBZ#1487568. - Patch pkgconfig file to
correct lib dir, fixes RHBZ#1487575.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1487568 - Please fix URL in SPEC
https://bugzilla.redhat.com/show_bug.cgi?id=1487568
[ 2 ] Bug #1487575 - Hardcoded libdir in pkgconfig
https://bugzilla.redhat.com/show_bug.cgi?id=1487575
--------------------------------------------------------------------------------
================================================================================
icecat-52.3.0-2.fc25 (FEDORA-2017-50ae7f6d96)
GNU version of Firefox browser
--------------------------------------------------------------------------------
Update Information:
- Enable language files
--------------------------------------------------------------------------------
================================================================================
koschei-2.0.1-1.fc25 (FEDORA-2017-44c860b6ac)
Continuous integration for Fedora packages
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 2.0.1
--------------------------------------------------------------------------------
================================================================================
lightdm-1.18.3-4.fc25 (FEDORA-2017-53eda1017e)
A cross-desktop Display Manager
--------------------------------------------------------------------------------
Update Information:
- Start lightdm after dbus.service
--------------------------------------------------------------------------------
================================================================================
mingw-openjpeg2-2.2.0-3.fc25 (FEDORA-2017-f7a73de98d)
MinGW Windows openjpeg2 library
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2017-14040, CVE-2017-14041 and two other security
vulnerabilities.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1487390 - openjpeg: Heap-based buffer overflow in opj_mqc_flush in mqc.c
https://bugzilla.redhat.com/show_bug.cgi?id=1487390
[ 2 ] Bug #1487389 - openjpeg: Heap-based buffer overflow in opj_write_bytes_LE in
cio.c
https://bugzilla.redhat.com/show_bug.cgi?id=1487389
[ 3 ] Bug #1487361 - CVE-2017-14040 openjpeg: Invalid write access in bin/jp2/convert.c
https://bugzilla.redhat.com/show_bug.cgi?id=1487361
[ 4 ] Bug #1487347 - CVE-2017-14041 openjpeg: Stack-based buffer over-write in
pgxtoimage function in bin/jp2/convert.c
https://bugzilla.redhat.com/show_bug.cgi?id=1487347
--------------------------------------------------------------------------------
================================================================================
mycli-1.12.1-1.fc25 (FEDORA-2017-0c5e46f952)
Interactive CLI for MySQL Database with auto-completion and syntax highlighting
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release mycli 1.12.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450637 - new mycli needs python-cli-helpers
https://bugzilla.redhat.com/show_bug.cgi?id=1450637
[ 2 ] Bug #1469847 - mycli-1.12.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1469847
--------------------------------------------------------------------------------
================================================================================
nuvolasdk-4.7.0-1.fc25 (FEDORA-2017-3d0ef6e0d1)
SDK for building Nuvola Player's web app scripts
--------------------------------------------------------------------------------
Update Information:
- Update to stable 4.7.0 - Add BR gobject-introspection-devel
--------------------------------------------------------------------------------
================================================================================
openjpeg2-2.2.0-3.fc25 (FEDORA-2017-f285db3668)
C-Library for JPEG 2000
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2017-14040, CVE-2017-14041 and two other security
vulnerabilities.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1487390 - openjpeg: Heap-based buffer overflow in opj_mqc_flush in mqc.c
https://bugzilla.redhat.com/show_bug.cgi?id=1487390
[ 2 ] Bug #1487389 - openjpeg: Heap-based buffer overflow in opj_write_bytes_LE in
cio.c
https://bugzilla.redhat.com/show_bug.cgi?id=1487389
[ 3 ] Bug #1487361 - CVE-2017-14040 openjpeg: Invalid write access in bin/jp2/convert.c
https://bugzilla.redhat.com/show_bug.cgi?id=1487361
[ 4 ] Bug #1487347 - CVE-2017-14041 openjpeg: Stack-based buffer over-write in
pgxtoimage function in bin/jp2/convert.c
https://bugzilla.redhat.com/show_bug.cgi?id=1487347
--------------------------------------------------------------------------------
================================================================================
php-clue-stream-filter-1.4.0-1.fc25 (FEDORA-2017-2200949637)
A simple and modern approach to stream filtering in PHP
--------------------------------------------------------------------------------
Update Information:
## 1.4.0 (2017-08-18) * Feature / Fix: The `fun()` function does not pass
filter parameter `null` to underlying `stream_filter_append()` by default
(#15 by @Nyholm) Certain filters (such as `convert.quoted-printable-
encode`) do not accept a filter parameter at all. If no explicit filter
parameter is given, we no longer pass a default `null` value. ```php
$encode = Filter\fun('convert.quoted-printable-encode');
assert('t=C3=A4st'
=== $encode('t��st')); ``` * Add examples and improve documentation
(#13 and #20 by @clue and #18 by @Nyholm) * Improve test suite by adding
PHPUnit to require-dev, fix HHVM build for now again and ignore future HHVM
build errors, lock Travis distro so new future defaults will not break the
build and test on PHP 7.1 (#12, #14 and #19 by @clue and #16 by @Nyholm)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482951 - php-clue-stream-filter-1.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1482951
--------------------------------------------------------------------------------
================================================================================
purple-mattermost-1.1-4.20170805git4524538.fc25 (FEDORA-2017-b6275a251b)
Pidgin protocol plugin to connect to Mattermost
--------------------------------------------------------------------------------
Update Information:
Pidgin protocol plugin to connect to Mattermost
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1485046 - Review Request: purple-mattermost - Pidgin protocol plugin to
connect to Mattermost
https://bugzilla.redhat.com/show_bug.cgi?id=1485046
--------------------------------------------------------------------------------
================================================================================
pyhunspell-0.5.0-1.fc25 (FEDORA-2017-b9174e24f7)
Python bindings for hunspell
--------------------------------------------------------------------------------
Update Information:
update to 0.5.0
--------------------------------------------------------------------------------
================================================================================
python-agate-1.6.0-2.gited9e179.fc25 (FEDORA-2017-f39ba6e765)
Data analysis library that is optimized for humans instead of machines
--------------------------------------------------------------------------------
Update Information:
Add python-unittest2 to BR for tests to pass on koji
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431420 - Review Request: python-agate - Data analysis library that is
optimized for humans instead of machines
https://bugzilla.redhat.com/show_bug.cgi?id=1431420
--------------------------------------------------------------------------------
================================================================================
python-gertty-1.5.0-1.fc25 (FEDORA-2017-0b65f77da2)
Gertty is a console-based interface to the Gerrit Code Review system
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.5.0
--------------------------------------------------------------------------------
================================================================================
rpkg-1.50-2.fc25 (FEDORA-2017-f0d9aff598)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
# Highlight - Read Koji configuration from profile. - fedpkg-stage is usable -
Non-zero is returned when local command fails - More Python 3 compatible - Allow
container builds from any namespace - Supply namespace to lookaside (if enabled)
UPDATED: Please test command ``container-build``. # rpkg - Fix PEP8 error
(cqi) - Spelling fixes (ville.skytta) - Reword help and description of new-
sources and upload commands - 1248737 (cqi) - Set autorebuild enabled by
default (bfontecc) - Add commands to whitelist_externals (cqi) - Declare Python
3 versions to support in setup.py (cqi) - Replace unicode with six.text_type
(cqi) - Run tests in both Python 2 and 3 with tox (cqi) - Make tests and covered
code compatible with Py3 (cqi) - Add requirements files (cqi) - Do not build
srpm in test (cqi) - Do not actually run git-diff in tests (cqi) - Remove
deprecated modules used in koji (cqi) - Non-zero exit when rpmbuild fails in
local command (cqi) - Report deprecation of config via logger (lsedlar) - Print
--dist deprecation warning explicitly (lsedlar) - utils: Avoid
DeprecationWarning for messages for users (lsedlar) - Supply namespace to
lookaside (if enabled) (lsedlar) - Support reading koji config from profile -
#187 (cqi) - Remove kitchen (cqi) - Fix string format (cqi) - Recommend
--release instead of --dist in mockbuild --help (tmz) - Allow overriding
container build target by downstream (lsedlar) - Add a separate property for
namespace (lsedlar) - Allow container builds from any namespace (maxamillion) -
Make osbs support optional (cqi) - make osbs dependency optional (pavlix) -
Allow explicit namespaces with slashes (lsedlar) - Do not hang indefinitely when
lookaside cache server stops sending data (jkaluza) - Make --module-name work
with namespaces - #216 (lsedlar) - Include README.rst in dist package (cqi) -
More document in README - #189 (cqi) - Make new command be able to print unicode
- #205 (cqi) - Allow to specify custom info to a dummy commit (cqi) - Load
module name correctly even if push url ends in slash - #192 (cqi) - Replace
fedorahosted.org with pagure.io - #202 (cqi) - Fix rpm command to get changelog
from SPEC - rhbz#1412224 (cqi) - Rewrite tests to avoid running rpmbuild and
rpmlint (cqi) - Use fake value to make Command in test (cqi) - Python 3.6
invalid escape sequence deprecation fixes (ville.skytta) # fedpkg - Remove
unused variable in Commands.retire (cqi) - No more pkgdb. (rbean) - Add --arches
to build completions (ville.skytta) - Add ppc64le to arch completions
(ville.skytta) - Explain how to write a note in multiple lines in update
template - #123 (cqi) - Remove code that handles secondary arch (cqi) - Simplify
passing arguments when creating Command object - #14 (cqi) - Set koji profile
for secondary arch immediately (cqi) - Use profile to load Koji configuration -
#97 (cqi) - Remove push.default from clone_default - #109 (cqi) - remove special
handling of s390 specific packages (dan) - Replace
fedorahosted.org with
pagure.io in manpage - #113 (cqi) - Remove tracbaseurl from conf file - #112
(cqi) - Set disttag properly (cqi) - koji stage config moved, update fedpkg
defaults (maxamillion) - Specific help of --release for fedpkg - rhbz#1054440
(cqi)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1487383 - cannot do build
https://bugzilla.redhat.com/show_bug.cgi?id=1487383
[ 2 ] Bug #1248737 - What is the difference between new-sources and upload?
https://bugzilla.redhat.com/show_bug.cgi?id=1248737
[ 3 ] Bug #1412224 - fedpkg update fails: Could not execute update: error: Unable to
open /home/jsynacek/rpmbuild/SOURCES/triggers.systemd: No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=1412224
[ 4 ] Bug #1410300 - "fedpkg local" should return nonzero exitcode when build
fails
https://bugzilla.redhat.com/show_bug.cgi?id=1410300
--------------------------------------------------------------------------------
================================================================================
rust-1.20.0-1.fc25 (FEDORA-2017-a8cbc52d0f)
The Rust Programming Language
--------------------------------------------------------------------------------
Update Information:
New versions of Rust and Cargo -- see the release notes for [1.20](https://blog
.rust-lang.org/2017/08/31/Rust-1.20.html).
--------------------------------------------------------------------------------
================================================================================
samba-4.5.13-0.fc25 (FEDORA-2017-ddd99a339e)
Server and Client software to interoperate with Windows machines
--------------------------------------------------------------------------------
Update Information:
Update to Samba 4.5.13
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.13.1-225.22.fc25 (FEDORA-2017-5d4f3635ee)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
More info:
https://koji.fedoraproject.org/koji/buildinfo?buildID=964395
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1468095 - SELinux is preventing postgres from 'remove_name' accesses
on the directory postmaster.pid.
https://bugzilla.redhat.com/show_bug.cgi?id=1468095
[ 2 ] Bug #1440187 - SELinux is preventing 57656220436F6E74656E74 from 'create'
accesses on the file 1934492876-Suivi_poste-canada.
https://bugzilla.redhat.com/show_bug.cgi?id=1440187
[ 3 ] Bug #1417512 - SELinux is preventing dovecot connection to Postgresql (policy is
not included)
https://bugzilla.redhat.com/show_bug.cgi?id=1417512
[ 4 ] Bug #1412696 - PrivateDevices=true in systemd unit file prevents postfix from
starting
https://bugzilla.redhat.com/show_bug.cgi?id=1412696
[ 5 ] Bug #1409107 - SELinux prevents Postfix from starting
https://bugzilla.redhat.com/show_bug.cgi?id=1409107
[ 6 ] Bug #1403186 - cannot start postfix anymore with selinux
https://bugzilla.redhat.com/show_bug.cgi?id=1403186
[ 7 ] Bug #1398007 - postfix: no log entries for sent mails
https://bugzilla.redhat.com/show_bug.cgi?id=1398007
[ 8 ] Bug #1395018 - SELinux is preventing postalias from 'read' accesses on the
lnk_file log.
https://bugzilla.redhat.com/show_bug.cgi?id=1395018
[ 9 ] Bug #1389863 - postfix service fails to start, unable to access /dev/null
https://bugzilla.redhat.com/show_bug.cgi?id=1389863
[ 10 ] Bug #1383905 - SELinux is preventing postfix from 'read' accesses on the
lnk_file log.
https://bugzilla.redhat.com/show_bug.cgi?id=1383905
[ 11 ] Bug #1323224 - mailx fails when used with mail server other than Sendmail Inc
sendmail or postfix
https://bugzilla.redhat.com/show_bug.cgi?id=1323224
[ 12 ] Bug #1389882 - SELinux is preventing postgrey from execute access on the file
/usr/bin/perl
https://bugzilla.redhat.com/show_bug.cgi?id=1389882
--------------------------------------------------------------------------------
================================================================================
sssd-1.15.3-3.fc25 (FEDORA-2017-d0b5a22cb8)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
Backport few upstream patches/fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483517 - Own the %{_libdir}/%{name}/conf dir
https://bugzilla.redhat.com/show_bug.cgi?id=1483517
--------------------------------------------------------------------------------
================================================================================
vim-8.0.1030-1.fc25 (FEDORA-2017-cd99047b28)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit. ---- The newest upstream commit (fixes guicursor
blinking) ---- The newest upstream commit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483539 - cursor blink setting broken
https://bugzilla.redhat.com/show_bug.cgi?id=1483539
--------------------------------------------------------------------------------
================================================================================
xmms-1.2.11-32.20071117cvs.fc25 (FEDORA-2017-0282e5207b)
The X MultiMedia System, a media player
--------------------------------------------------------------------------------
Update Information:
Add support for A-B repeat functionality. Because, why not?
__ / *_) ? _.----. _ /../
/............./ __/..(...|.(...| /__.- |_| |_|
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1480259 - A-B repeat functionality
https://bugzilla.redhat.com/show_bug.cgi?id=1480259
--------------------------------------------------------------------------------
================================================================================
xrdhttpvoms-0.2.5-2.fc25 (FEDORA-2017-b3c81e02a2)
VOMS security extractor plugin for XrdHTTP
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2017.09.02-1.fc25 (FEDORA-2017-a0868ef3ef)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482730 - youtube-dl-2017.09.02 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1482730
--------------------------------------------------------------------------------