The following Fedora 25 Security updates need testing:
Age URL
201
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
100
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
44
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7dbbbafea6
runc-1.0.0-7.git6394544.fc25.2
39
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ec3c82e64d
libstaroffice-0.0.3-3.fc25
39
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1ca18683e4
openldap-2.4.44-11.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b9e4c24094
subversion-1.9.6-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b0a2770a9b knot-2.4.5-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90ad72e684 irssi-1.0.4-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-efdd962fee putty-0.70-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c844713925
qt5-qtwebkit-5.212.0-0.5.alpha2.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-33c8085c5d
groovy18-1.8.9-28.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-92643d70b7
knot-resolver-1.3.1-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7eaec3353d
poppler-0.45.0-5.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d6a9e0c9c
heimdal-7.4.0-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f941184db1 qemu-2.7.1-7.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f2f29441f9
kernel-4.11.10-200.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cc0b92f6c1 glpi-9.1.5-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9fa2cefa7a
mingw-poppler-0.45.0-3.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-81522ac6d8
nodejs-6.11.1-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-346836a623
phpldapadmin-1.2.3-10.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90cf7a82de
minicom-2.7.1-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2d8a1226d1
libmwaw-0.3.12-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c22a8af4e9
rubygem-rack-cors-0.4.1-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1d46019681 yara-3.6.3-1.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
44
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
22
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0187b2a605
selinux-policy-3.13.1-225.19.fc25
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-118505dd77
libsoup-2.56.0-3.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a90ed7e59d
libtirpc-1.0.2-0.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1ca18683e4
openldap-2.4.44-11.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7cd9e81996 quota-4.03-8.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b18eded0a5
glusterfs-3.10.4-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ebeb4bb332
mariadb-10.1.25-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ddd2aa1a04 xen-4.7.3-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e587cfd70e
supermin-5.1.18-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f21d307d97 nss-3.31.0-1.0.fc25
nss-softokn-3.31.0-1.0.fc25 nss-util-3.31.0-1.0.fc25 nspr-4.15.0-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-04bf7c03b8
libproxy-0.4.15-2.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f941184db1 qemu-2.7.1-7.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7eaec3353d
poppler-0.45.0-5.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6d834aa7e7
breeze-icon-theme-5.36.0-1.fc25 extra-cmake-modules-5.36.0-1.fc25 kf5-5.36.0-1.fc25
kf5-attica-5.36.0-1.fc25 kf5-baloo-5.36.0-1.fc25 kf5-bluez-qt-5.36.0-1.fc25
kf5-frameworkintegration-5.36.0-1.fc25 kf5-kactivities-5.36.0-1.fc25
kf5-kactivities-stats-5.36.0-1.fc25 kf5-kapidox-5.36.0-1.fc25 kf5-karchive-5.36.0-1.fc25
kf5-kauth-5.36.0-1.fc25 kf5-kbookmarks-5.36.0-1.fc25 kf5-kcmutils-5.36.0-1.fc25
kf5-kcodecs-5.36.0-1.fc25 kf5-kcompletion-5.36.0-1.fc25 kf5-kconfig-5.36.0-1.fc25
kf5-kconfigwidgets-5.36.0-1.fc25 kf5-kcoreaddons-5.36.0-1.fc25 kf5-kcrash-5.36.0-1.fc25
kf5-kdbusaddons-5.36.0-1.fc25 kf5-kdeclarative-5.36.0-1.fc25 kf5-kded-5.36.0-1.fc25
kf5-kdelibs4support-5.36.0-1.fc25 kf5-kdesignerplugin-5.36.0-1.fc25
kf5-kdesu-5.36.0-1.fc25 kf5-kdewebkit-5.36.0-1.fc25 kf5-kdnssd-5.36.0-1.fc25
kf5-kdoctools-5.36.0-1.fc25 kf5-kemoticons-5.36.0-1.fc25 kf5-kfilemetadata-5.36.0-1.fc25
kf5-kglobalaccel-5.36.0-1.fc25 kf5-kguiad
dons-5.36.0-2.fc25 kf5-khtml-5.36.0-1.fc25 kf5-ki18n-5.36.0-3.fc25
kf5-kiconthemes-5.36.0-1.fc25 kf5-kidletime-5.36.0-1.fc25 kf5-kimageformats-5.36.0-1.fc25
kf5-kinit-5.36.0-1.fc25 kf5-kio-5.36.0-1.fc25 kf5-kitemmodels-5.36.0-1.fc25
kf5-kitemviews-5.36.0-1.fc25 kf5-kjobwidgets-5.36.0-1.fc25 kf5-kjs-5.36.0-1.fc25
kf5-kjsembed-5.36.0-1.fc25 kf5-kmediaplayer-5.36.0-1.fc25 kf5-knewstuff-5.36.0-3.fc25
kf5-knotifications-5.36.0-1.fc25 kf5-knotifyconfig-5.36.0-1.fc25
kf5-kpackage-5.36.0-1.fc25 kf5-kparts-5.36.0-1.fc25 kf5-kpeople-5.36.0-1.fc25
kf5-kplotting-5.36.0-1.fc25 kf5-kpty-5.36.0-1.fc25 kf5-kross-5.36.0-1.fc25
kf5-krunner-5.36.0-1.fc25 kf5-kservice-5.36.0-1.fc25 kf5-ktexteditor-5.36.0-1.fc25
kf5-ktextwidgets-5.36.0-1.fc25 kf5-kunitconversion-5.36.0-1.fc25 kf5-kwallet-5.36.0-1.fc25
kf5-kwayland-5.36.0-1.fc25 kf5-kwidgetsaddons-5.36.0-1.fc25
kf5-kwindowsystem-5.36.0-1.fc25 kf5-kxmlgui-5.36.0-1.fc25 kf5-kxmlrpcclient-5.36.0-1.fc25
kf5-modemmanager-qt-5.36.0-1.fc25 kf5-networkmanager-qt
-5.36.0-1.fc25 kf5-plasma-5.36.0-1.fc25 kf5-solid-5.36.0-1.fc25 kf5-sonnet-5.36.0-1.fc25
kf5-syntax-highlighting-5.36.0-1.fc25 kf5-threadweaver-5.36.0-1.fc25
oxygen-icon-theme-5.36.0-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-77b3ddeaaa
net-snmp-5.7.3-14.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f2f29441f9
kernel-4.11.10-200.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-077cbd8617 unzip-6.0-32.fc25
The following builds have been pushed to Fedora 25 updates-testing
abbayedesmorts-gpl-2.0.1-3.20170709git.fc25
clpeak-0.1-14.20170711git8edab23.fc25
git-extras-4.4.0-1.fc25
golang-github-klauspost-reedsolomon-1.4-1.fc25
hspell-1.4-1.fc25
libmwaw-0.3.12-1.fc25
libvmi-0.11.0-6.20170706gite919365.fc25
minicom-2.7.1-1.fc25
python-jinja2-cli-0.6.0-1.fc25
python-multidict-3.1.3-1.fc25
rubygem-rack-cors-0.4.1-1.fc25
tomboy-1.15.9-1.fc25
xed-1.4.6-1.fc25
yara-3.6.3-1.fc25
zfs-fuse-0.7.2.2-4.fc25
zstd-1.3.0-1.fc25
Details about builds:
================================================================================
abbayedesmorts-gpl-2.0.1-3.20170709git.fc25 (FEDORA-2017-f93c14f76b)
Platform game set in 13th century
--------------------------------------------------------------------------------
Update Information:
* First release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1468830 - Review Request: abbayedesmorts-gpl - Platform game set in 13th
century
https://bugzilla.redhat.com/show_bug.cgi?id=1468830
--------------------------------------------------------------------------------
================================================================================
clpeak-0.1-14.20170711git8edab23.fc25 (FEDORA-2017-abe270339b)
Find peak OpenCL capacities like bandwidth & compute
--------------------------------------------------------------------------------
Update Information:
- Update to the latest upstream, fixes rhbz#1423267 - Include upstream fix for
https://github.com/krrishnarraj/clpeak/issues/36
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1423267 - clpeak: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1423267
--------------------------------------------------------------------------------
================================================================================
git-extras-4.4.0-1.fc25 (FEDORA-2017-5422cdb190)
Little git extras
--------------------------------------------------------------------------------
Update Information:
git-extras-4.4.0 is available
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471372 - git-extras-4.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471372
--------------------------------------------------------------------------------
================================================================================
golang-github-klauspost-reedsolomon-1.4-1.fc25 (FEDORA-2017-6b8eba1c3a)
Reed-Solomon Erasure Coding in Go
--------------------------------------------------------------------------------
Update Information:
Update to version 1.4.
--------------------------------------------------------------------------------
================================================================================
hspell-1.4-1.fc25 (FEDORA-2017-1b36cfc28e)
A Hebrew spell checker
--------------------------------------------------------------------------------
Update Information:
Sync with upstream hspell-1.4
--------------------------------------------------------------------------------
================================================================================
libmwaw-0.3.12-1.fc25 (FEDORA-2017-2d8a1226d1)
A library for import of many old Mac document formats
--------------------------------------------------------------------------------
Update Information:
new upstream release ---- Security fix for CVE-2017-9433
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1461762 - CVE-2017-9433 libmwaw: Out-of-bounds write in the
MsWrd1Parser::readFootnoteCorrespondence function
https://bugzilla.redhat.com/show_bug.cgi?id=1461762
--------------------------------------------------------------------------------
================================================================================
libvmi-0.11.0-6.20170706gite919365.fc25 (FEDORA-2017-5922622038)
A library for performing virtual-machine introspection
--------------------------------------------------------------------------------
Update Information:
Bump Release so NVR is bigger than the previous release ---- Update to Git
master
--------------------------------------------------------------------------------
================================================================================
minicom-2.7.1-1.fc25 (FEDORA-2017-90cf7a82de)
A text-based modem control and terminal emulation program
--------------------------------------------------------------------------------
Update Information:
Rebuilt to new upstream version 2.7.1 fixes rhbz#1443071 and rhbz#1443129
--------------------------------------------------------------------------------
================================================================================
python-jinja2-cli-0.6.0-1.fc25 (FEDORA-2017-35b6090bf2)
CLI interface to Jinja2
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470609 - [abrt] python3-jinja2-cli: _parse_ini():
cli.py:80:_parse_ini:ModuleNotFoundError: No module named 'StringIO'
https://bugzilla.redhat.com/show_bug.cgi?id=1470609
--------------------------------------------------------------------------------
================================================================================
python-multidict-3.1.3-1.fc25 (FEDORA-2017-a4348964a2)
MultiDict implementation
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.3 ---- Update to 2.1.4 Fixes using python-aiohttp
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463863 - python-multidict-3.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1463863
--------------------------------------------------------------------------------
================================================================================
rubygem-rack-cors-0.4.1-1.fc25 (FEDORA-2017-c22a8af4e9)
Middleware for enabling Cross-Origin Resource Sharing in Rack apps
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-11173, new upstream version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470689 - CVE-2017-11173 rubygem-rack-cors: Missing anchor in generated regex
in rack/cors.rb#L256 may permit forged malicious requests [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470689
--------------------------------------------------------------------------------
================================================================================
tomboy-1.15.9-1.fc25 (FEDORA-2017-eb4b42c936)
Note-taking application
--------------------------------------------------------------------------------
Update Information:
#### Tomboy 1.15.9 #### * Fixed search and highlight problems for notes with
multibyte characters (gh45) * Fixed Tomboy crash upon deleting a note after
closing Search All window (gh52) * Main README updated & converted to Markdown
(thanks Damien Doumer for initial idea!)
--------------------------------------------------------------------------------
================================================================================
xed-1.4.6-1.fc25 (FEDORA-2017-94c60604e4)
X-Apps [Text] Editor (Cross-DE, backward-compatible, GTK3, traditional UI)
--------------------------------------------------------------------------------
Update Information:
* New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471446 - xed-1.4.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471446
--------------------------------------------------------------------------------
================================================================================
yara-3.6.3-1.fc25 (FEDORA-2017-1d46019681)
Pattern matching Swiss knife for malware researchers
--------------------------------------------------------------------------------
Update Information:
bump to 3.6.3 release - bugfix CVE-2017-11328
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471490 - yara-3.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471490
--------------------------------------------------------------------------------
================================================================================
zfs-fuse-0.7.2.2-4.fc25 (FEDORA-2017-235a72bdff)
ZFS ported to Linux FUSE
--------------------------------------------------------------------------------
Update Information:
Rebase to latest version from new upstream and move binaries to path compatible
with other zfs implementations
--------------------------------------------------------------------------------
================================================================================
zstd-1.3.0-1.fc25 (FEDORA-2017-e25ba04834)
Zstd compression library
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------