The following Fedora 25 Security updates need testing:
Age URL
130
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
29
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f85c37ae3d
squirrelmail-1.4.22-19.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cc029be02d tnef-1.4.14-2.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ede53aa845
roundcubemail-1.2.5-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-43b46cd2da batik-1.8-9.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4047180cd3
libplist-2.0.0-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9fbcf033f8
java-1.8.0-openjdk-aarch32-1.8.0.131-1.170420.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-20dd9f26cf
weechat-1.7.1-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2643ef1cad
mediawiki-1.27.3-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9a42f1cab3
php-horde-ingo-3.2.15-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8d625a8d2b lynis-2.5.0-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b9b1ac0d15
kernel-4.10.14-200.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5ae70ac6a5 xen-4.7.2-6.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2ab5baea0a
radicale-1.1.2-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d069d3faf9
python-fedora-0.9.0-3.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ac43ea8522 sssd-1.15.2-3.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4047180cd3
libplist-2.0.0-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b9b1ac0d15
kernel-4.10.14-200.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-61c75669ea
libldb-1.1.29-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9ecf41f097
python-productmd-1.7-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5ae70ac6a5 xen-4.7.2-6.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4eaa03c583
NetworkManager-1.4.4-5.fc25
The following builds have been pushed to Fedora 25 updates-testing
NetworkManager-1.4.4-5.fc25
assimp-3.3.1-4.fc25
blueberry-1.1.11-1.fc25
bochs-2.6.9-1.fc25
cmake-3.8.0-3.fc25
featherpad-0.6-1.fc25
findbugs-contrib-7.0.1-1.fc25
lightdm-settings-1.0.3-1.fc25
marco-1.16.0-2.fc25
mate-terminal-1.16.3-1.fc25
mate-utils-1.16.1-1.fc25
modulemd-1.2.0-1.fc25
pluma-1.16.2-1.fc25
python-fedora-0.9.0-3.fc25
python-supersmoother-0.4-1.fc25
python-xapp-1.0.0-1.fc25
radicale-1.1.2-1.fc25
rubygem-ruby-ntlm-0.0.4-1.fc25
slick-greeter-1.0.1-1.fc25
vdr-epg2vdr-1.1.59-1.fc25
xed-1.4.0-1.fc25
Details about builds:
================================================================================
NetworkManager-1.4.4-5.fc25 (FEDORA-2017-4eaa03c583)
Network connection manager and user applications
--------------------------------------------------------------------------------
Update Information:
build: fix build failure due to redefinition of __bitwise (rh#1444744)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1444744 - FTBFS due "error: "__bitwise" redefined"
https://bugzilla.redhat.com/show_bug.cgi?id=1444744
--------------------------------------------------------------------------------
================================================================================
assimp-3.3.1-4.fc25 (FEDORA-2017-187d0eea1b)
Library to import various 3D model formats into applications
--------------------------------------------------------------------------------
Update Information:
New upstream release with shared libraries
--------------------------------------------------------------------------------
================================================================================
blueberry-1.1.11-1.fc25 (FEDORA-2017-2ce7319044)
Bluetooth configuration tool
--------------------------------------------------------------------------------
Update Information:
* New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429156 - [abrt] blueberry: connection.py:651:call_blocking:DBusException:
org.freedesktop.systemd1.NoSuchUnit: Unit dbus-org.bluez.obex.service not found.
https://bugzilla.redhat.com/show_bug.cgi?id=1429156
[ 2 ] Bug #1429161 - [abrt] blueberry: connection.py:651:call_blocking:DBusException:
org.freedesktop.systemd1.NoSuchUnit: Unit dbus-org.bluez.obex.service not found.
https://bugzilla.redhat.com/show_bug.cgi?id=1429161
--------------------------------------------------------------------------------
================================================================================
bochs-2.6.9-1.fc25 (FEDORA-2017-6e54134f4c)
Portable x86 PC emulator
--------------------------------------------------------------------------------
Update Information:
2.6.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1180851 - missing symbol in libbx_usb_uhci.so
https://bugzilla.redhat.com/show_bug.cgi?id=1180851
[ 2 ] Bug #1447171 - bochs-2.6.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1447171
--------------------------------------------------------------------------------
================================================================================
cmake-3.8.0-3.fc25 (FEDORA-2017-bc3e5b4fdd)
Cross-platform make system
--------------------------------------------------------------------------------
Update Information:
- Update to 3.8.0 - Apply upstream FindGLUT fix
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1444563 - FindGLUT.cmake claims it needs libXi-devel, freeglut-devel does
not
https://bugzilla.redhat.com/show_bug.cgi?id=1444563
--------------------------------------------------------------------------------
================================================================================
featherpad-0.6-1.fc25 (FEDORA-2017-a4816d6939)
Lightweight Qt5 Plain-Text Editor
--------------------------------------------------------------------------------
Update Information:
Update to final 0.6 release
--------------------------------------------------------------------------------
================================================================================
findbugs-contrib-7.0.1-1.fc25 (FEDORA-2017-69243c8f79)
Extra findbugs detectors
--------------------------------------------------------------------------------
Update Information:
Update to 7.0.1. Detectors added in v7.0.0: * [SSCU] Suspicious Shaded Class
Use * Looks for use of classes that have been shaded into 3rdparty jars,
rather than using the real class, from the real jar. * [USFW] Unsynchronized
Singleton Field Writes * Looks for field writes to objects that are non
singletons, where the write is not synchronized * [OI] Optional Issues *
Looks for various issues around use of `java.util.Optional` * [UAC] Unnecessary
Api Conversion * Looks for code that appears to be using two forms of
similar apis, an older one, and a new one. It finds code that creates newer api
objects by first instantiating older api objects, and converting them into the
new form. It is simpler just to create the new object directly.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442499 - findbugs-contrib-7.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442499
--------------------------------------------------------------------------------
================================================================================
lightdm-settings-1.0.3-1.fc25 (FEDORA-2017-1a19dcd43d)
Configuration tool for the LightDM display manager
--------------------------------------------------------------------------------
Update Information:
* Update to new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448559 - Review Request: python-xapp - Python bindings for xapps
https://bugzilla.redhat.com/show_bug.cgi?id=1448559
--------------------------------------------------------------------------------
================================================================================
marco-1.16.0-2.fc25 (FEDORA-2017-7fd001e6c9)
MATE Desktop window manager
--------------------------------------------------------------------------------
Update Information:
- fix for
https://github.com/mate-desktop/marco/issues/251 -
https://bugzilla.redhat.com/show_bug.cgi?id=1419634
--------------------------------------------------------------------------------
================================================================================
mate-terminal-1.16.3-1.fc25 (FEDORA-2017-243df0136c)
Terminal emulator for MATE
--------------------------------------------------------------------------------
Update Information:
- update to 1.16.3
--------------------------------------------------------------------------------
================================================================================
mate-utils-1.16.1-1.fc25 (FEDORA-2017-96d95a53d0)
MATE utility programs
--------------------------------------------------------------------------------
Update Information:
- update to 1.16.1
--------------------------------------------------------------------------------
================================================================================
modulemd-1.2.0-1.fc25 (FEDORA-2017-961acb7fa9)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
A new version of modulemd is available. This release adds support for lists of
binary artifacts, custom component build optons and manipulation of modulemd
multidocuments used in module composes.
--------------------------------------------------------------------------------
================================================================================
pluma-1.16.2-1.fc25 (FEDORA-2017-111bb85fc8)
Text editor for the MATE desktop
--------------------------------------------------------------------------------
Update Information:
- update to 1.16.2
--------------------------------------------------------------------------------
================================================================================
python-fedora-0.9.0-3.fc25 (FEDORA-2017-d069d3faf9)
Python modules for talking to Fedora Infrastructure Services
--------------------------------------------------------------------------------
Update Information:
This update set fixed problems with Bodhi update submitting. It also includes
two security fixes for python-fedora.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1445294 - bodhi client cannot submit a new update
https://bugzilla.redhat.com/show_bug.cgi?id=1445294
--------------------------------------------------------------------------------
================================================================================
python-supersmoother-0.4-1.fc25 (FEDORA-2017-b9d3c343e8)
Python implementation of Friedman's Supersmoother
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448634 - python-supersmoother-0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1448634
--------------------------------------------------------------------------------
================================================================================
python-xapp-1.0.0-1.fc25 (FEDORA-2017-1a19dcd43d)
Python bindings for xapps
--------------------------------------------------------------------------------
Update Information:
* Update to new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448559 - Review Request: python-xapp - Python bindings for xapps
https://bugzilla.redhat.com/show_bug.cgi?id=1448559
--------------------------------------------------------------------------------
================================================================================
radicale-1.1.2-1.fc25 (FEDORA-2017-2ab5baea0a)
A simple CalDAV (calendar) and CardDAV (contact) server
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-8342
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1447247 - CVE-2017-8342 radicale: Insufficient protection against timing
oracles and bruteforce attacks [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1447247
--------------------------------------------------------------------------------
================================================================================
rubygem-ruby-ntlm-0.0.4-1.fc25 (FEDORA-2017-6a8b0410dd)
NTLM implementation for Ruby
--------------------------------------------------------------------------------
Update Information:
New version 0.0.4 is released.
--------------------------------------------------------------------------------
================================================================================
slick-greeter-1.0.1-1.fc25 (FEDORA-2017-1a19dcd43d)
A slick-looking LightDM greeter
--------------------------------------------------------------------------------
Update Information:
* Update to new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448559 - Review Request: python-xapp - Python bindings for xapps
https://bugzilla.redhat.com/show_bug.cgi?id=1448559
--------------------------------------------------------------------------------
================================================================================
vdr-epg2vdr-1.1.59-1.fc25 (FEDORA-2017-e5953139ec)
A plugin to retrieve EPG data from a mysql database into VDR
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.59 ---- Update to 1.1.58
--------------------------------------------------------------------------------
================================================================================
xed-1.4.0-1.fc25 (FEDORA-2017-aea337b286)
X-Apps [Text] Editor (Cross-DE, backward-compatible, GTK3, traditional UI)
--------------------------------------------------------------------------------
Update Information:
* Update to new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448443 - xed-1.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1448443
--------------------------------------------------------------------------------