The following Fedora 25 Security updates need testing:
Age URL
229
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
128
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
67
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
32
https://bodhi.fedoraproject.org/updates/FEDORA-2017-33c8085c5d
groovy18-1.8.9-28.fc25
27
https://bodhi.fedoraproject.org/updates/FEDORA-2017-86cfcbbae8
libstaroffice-0.0.4-1.fc25
21
https://bodhi.fedoraproject.org/updates/FEDORA-2017-82b5035f76
chicken-4.12.0-3.fc25
21
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99c0118c0c
memcached-1.4.39-1.fc25
21
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fe04b06b64
python-tablib-0.11.5-1.fc25
18
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2232fe97b4
docker-distribution-2.6.2-1.git48294d9.fc25
18
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a1fe6d2b86
nasm-2.13.01-3.fc25
18
https://bodhi.fedoraproject.org/updates/FEDORA-2017-56b8f257af
sscep-0.6.1-5.20160525git2052ee1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-be3df4fe14
java-1.8.0-openjdk-aarch32-1.8.0.141-1.170721.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bfbc5de1b1
varnish-5.0.0-4.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d7739ff31b
potrace-1.15-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a05e2b8545
cups-filters-1.10.0-4.fc25 qpdf-6.0.0-6.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-866fc566e0
torbrowser-launcher-0.2.8-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f318871e3b ruby-2.3.4-63.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f6e3215f2b
mingw-openjpeg2-2.2.0-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c9d8011d69
mingw-libsoup-2.56.1-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9148fe36b9
postgresql-9.5.8-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1d1a38bdd1
subversion-1.9.7-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f98cef571d
kernel-4.12.5-200.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7e5ac0896e
botan-1.10.16-1.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
71
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
27
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2312ac9d9
pungi-4.1.17-1.fc25
24
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b67562744
ca-certificates-2017.2.16-1.0.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-226cbd995b
libvirt-2.2.1-3.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ac2cad8705
gdk-pixbuf2-2.36.8-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-dd9ceeda89 vim-8.0.885-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bb07876a1c nspr-4.16.0-1.fc25
nss-3.32.0-1.0.fc25 nss-softokn-3.32.0-1.1.fc25 nss-util-3.32.0-1.0.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f98cef571d
kernel-4.12.5-200.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ba3e72c511
osinfo-db-20170813-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-67705933e3
glusterfs-3.10.5-1.fc25
The following builds have been pushed to Fedora 25 updates-testing
awscli-1.11.133-1.fc25
botan-1.10.16-1.fc25
cmake-3.9.1-1.fc25
electrum-2.9.2-1.fc25
elementary-theme-5.1.0-1.fc25
feh-2.19.2-1.fc25
freeciv-2.5.8-1.fc25
glm-0.9.7.6-2.fc25
glusterfs-3.10.5-1.fc25
gnome-shell-extension-freon-26-1.fc25
lshw-B.02.18-10.fc25
osinfo-db-20170813-1.fc25
python-boto3-1.4.6-1.fc25
python-botocore-1.6.0-1.fc25
rkhunter-1.4.4-4.fc25
xiphos-4.0.6-1.fc25
Details about builds:
================================================================================
awscli-1.11.133-1.fc25 (FEDORA-2017-8920048ec2)
Universal Command Line Environment for AWS
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
================================================================================
botan-1.10.16-1.fc25 (FEDORA-2017-7e5ac0896e)
Crypto library written in C++
--------------------------------------------------------------------------------
Update Information:
#### Version 1.10.16, 2017-04-04 #### * Fix a bug in X509 DN string comparisons
that could result in out of bound reads. This could result in information
leakage, denial of service, or potentially incorrect certificate validation
results. (CVE-2017-2801) * Avoid throwing during a destructor since this is
undefined in C++11 and rarely a good idea. [GH
#930](https://github.com/randombit/botan/issues/930) #### Version 1.10.15,
2017-01-12 #### * Fix a bug causing modular exponentiations done modulo even
numbers to almost always be incorrect, unless the values were small. This bug is
not known to affect any cryptographic operation in Botan. [GH
#754](https://github.com/randombit/botan/issues/754) * Avoid use of C++11
std::to_string in some code added in 1.10.14 [GH
#747](https://github.com/randombit/botan/issues/747) [GH
#834](https://github.com/randombit/botan/issues/834)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1441126 - CVE-2017-2801 botan: Incorrect comparison in X.509 DN strings
https://bugzilla.redhat.com/show_bug.cgi?id=1441126
--------------------------------------------------------------------------------
================================================================================
cmake-3.9.1-1.fc25 (FEDORA-2017-629d32ec3e)
Cross-platform make system
--------------------------------------------------------------------------------
Update Information:
* New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1480396 - cmake-3.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1480396
--------------------------------------------------------------------------------
================================================================================
electrum-2.9.2-1.fc25 (FEDORA-2017-c46fa4472a)
A lightweight Bitcoin Client
--------------------------------------------------------------------------------
Update Information:
Updated to version 2.9.2
--------------------------------------------------------------------------------
================================================================================
elementary-theme-5.1.0-1.fc25 (FEDORA-2017-833ef88bd0)
elementary GTK+ Stylesheet
--------------------------------------------------------------------------------
Update Information:
Update to version 5.1.0. This release improves support for GTK+ 3.22+.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1480860 - elementary-theme-5.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1480860
--------------------------------------------------------------------------------
================================================================================
feh-2.19.2-1.fc25 (FEDORA-2017-af60eeb9ad)
Fast command line image viewer using Imlib2
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
================================================================================
freeciv-2.5.8-1.fc25 (FEDORA-2017-f5c0b9a4be)
A multi-player strategy game
--------------------------------------------------------------------------------
Update Information:
2.5.8
--------------------------------------------------------------------------------
================================================================================
glm-0.9.7.6-2.fc25 (FEDORA-2017-fbc3a2a789)
C++ mathematics library for graphics programming
--------------------------------------------------------------------------------
Update Information:
Provide configuration for pkg-config, fixing bug #1475875
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475875 - Please update to 0.9.8.4, which adds glm pkg-config support under
Fedora 25
https://bugzilla.redhat.com/show_bug.cgi?id=1475875
--------------------------------------------------------------------------------
================================================================================
glusterfs-3.10.5-1.fc25 (FEDORA-2017-67705933e3)
Distributed File System
--------------------------------------------------------------------------------
Update Information:
3.10.5 GA
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-freon-26-1.fc25 (FEDORA-2017-2bb63ee6fb)
GNOME Shell extension to display system temperature, voltage, and fan speed
--------------------------------------------------------------------------------
Update Information:
Bump to upstream version 26, which adds support for multiple simultaneous
graphics cards. ---- Bump to upstream version 25, which adds German
localization.
--------------------------------------------------------------------------------
================================================================================
lshw-B.02.18-10.fc25 (FEDORA-2017-0dad68c206)
Hardware lister
--------------------------------------------------------------------------------
Update Information:
Add AppData file to lshw package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476498 - AppStream metadata for lshw gui package are missing
https://bugzilla.redhat.com/show_bug.cgi?id=1476498
--------------------------------------------------------------------------------
================================================================================
osinfo-db-20170813-1.fc25 (FEDORA-2017-ba3e72c511)
osinfo database files
--------------------------------------------------------------------------------
Update Information:
Update to new release
--------------------------------------------------------------------------------
================================================================================
python-boto3-1.4.6-1.fc25 (FEDORA-2017-8920048ec2)
The AWS SDK for Python
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
================================================================================
python-botocore-1.6.0-1.fc25 (FEDORA-2017-8920048ec2)
Low-level, data-driven core of boto 3
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
================================================================================
rkhunter-1.4.4-4.fc25 (FEDORA-2017-944875338d)
A host-based tool to scan for rootkits, backdoors and local exploits
--------------------------------------------------------------------------------
Update Information:
Disable ipc_shared_mem test for now due to false positives. Bug #1472299
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1472299 - rkhunter finds suspicious shared segments in evolution and
xfce4-terminal
https://bugzilla.redhat.com/show_bug.cgi?id=1472299
--------------------------------------------------------------------------------
================================================================================
xiphos-4.0.6-1.fc25 (FEDORA-2017-c675e088c6)
Bible study and research tool
--------------------------------------------------------------------------------
Update Information:
Upstream release 4.0.6 ---- Fix post install scripts for upgrades
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448623 - GUI broken & Error with RPM Script
https://bugzilla.redhat.com/show_bug.cgi?id=1448623
--------------------------------------------------------------------------------