The following Fedora 25 Security updates need testing:
Age URL
113
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cc029be02d tnef-1.4.14-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c0ef6054d7
python-django-1.9.13-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2a90185a04
php-pear-CAS-1.3.5-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b83c0eeab0
xstream-1.4.9-5.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a902f8db61
jenkins-xstream-1.4.7-11.jenkins1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6ef28e38d6
dovecot-2.2.29.1-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8dce7a3940
backintime-1.1.20-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-11ac1e31eb yara-3.5.0-7.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-80763c8c03
collectd-5.7.1-3.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-15e7445d67
libdwarf-20170416-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5261ba4605
tomcat-8.0.43-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9c6430c2e2 pcre2-10.23-6.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-34f6e70fdd
libnl3-3.2.29-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-55a8f10223
libarchive-3.2.2-2.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
21
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ea86a8123b
pungi-4.1.14-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4efaae68fe
thunderbird-52.0-2.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3c25dd541a
livecd-tools-24.3-2.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-19451b76d6
highlight-3.36-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8086405c6f audit-2.7.6-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4c85c68d16 koji-1.12.0-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-521b5e42a4
nss-softokn-3.29.5-1.0.fc25 nss-util-3.29.5-1.0.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-55a8f10223
libarchive-3.2.2-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0bc9e0eb4e
kernel-4.10.11-200.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-34f6e70fdd
libnl3-3.2.29-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9c6430c2e2 pcre2-10.23-6.fc25
The following builds have been pushed to Fedora 25 updates-testing
CGAL-4.9.1-1.fc25
audit-2.7.6-1.fc25
gsequencer-0.7.135-1.fc25
koji-1.12.0-1.fc25
lcgdm-dav-0.18.1-3.fc25
libarchive-3.2.2-2.fc25
mediawriter-4.0.95-1.fc25
nss-softokn-3.29.5-1.0.fc25
nss-util-3.29.5-1.0.fc25
perl-Tree-Simple-1.31-1.fc25
Details about builds:
================================================================================
CGAL-4.9.1-1.fc25 (FEDORA-2017-1e078ca344)
Computational Geometry Algorithms Library
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1443518 - CGAL-4.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1443518
--------------------------------------------------------------------------------
================================================================================
audit-2.7.6-1.fc25 (FEDORA-2017-8086405c6f)
User space tools for 2.6 kernel auditing
--------------------------------------------------------------------------------
Update Information:
This update continues adjusting the auparse_normalize mappings. It also has
robustness fixes against corrupted logs. It also fixes a bug where the enriched
event information was not being loaded in the auparse_feed API.
--------------------------------------------------------------------------------
================================================================================
gsequencer-0.7.135-1.fc25 (FEDORA-2017-449e7e286f)
Advanced Gtk+ Sequencer audio processing engine
--------------------------------------------------------------------------------
Update Information:
provide patch to fix missing license and logo within about dialog ---- removed
patch to fix reference manual because upstream includes changes ---- removed
patch to fix reference manual because upstream includes changes ---- removed 3
patches since new upstream package contains the changes ---- provide patch to
fix possible SIGSEGV as no soundcard configured ---- enable make check only
for x86_64 and armv7hl architecture ---- removed 3 patches that was applied
upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1403417 - Review Request: gsequencer - audio processing engine
https://bugzilla.redhat.com/show_bug.cgi?id=1403417
[ 2 ] Bug #1434119 - GSequencer may crash as no soundcard configured
https://bugzilla.redhat.com/show_bug.cgi?id=1434119
--------------------------------------------------------------------------------
================================================================================
koji-1.12.0-1.fc25 (FEDORA-2017-4c85c68d16)
Build system tools
--------------------------------------------------------------------------------
Update Information:
update to upstream 1.12.0 remove rhel 5 conditionals as its no longer supported
in epel
--------------------------------------------------------------------------------
================================================================================
lcgdm-dav-0.18.1-3.fc25 (FEDORA-2017-2d0b659052)
HTTP/DAV front end to the DPM/LFC services
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
================================================================================
libarchive-3.2.2-2.fc25 (FEDORA-2017-55a8f10223)
A library for handling streaming archive formats
--------------------------------------------------------------------------------
Update Information:
fix two minor CVEs by backporting upstream commits
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1439705 - CVE-2016-10209 libarchive: NULL pointer dereference in
archive_wstring_append_from_mbs function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1439705
[ 2 ] Bug #1417920 - CVE-2017-5601 libarchive: Out of bounds read in
lha_read_file_header_1() function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1417920
--------------------------------------------------------------------------------
================================================================================
mediawriter-4.0.95-1.fc25 (FEDORA-2017-a52d30e1ce)
Fedora Media Writer
--------------------------------------------------------------------------------
Update Information:
Update to 4.0.95
--------------------------------------------------------------------------------
================================================================================
nss-softokn-3.29.5-1.0.fc25 (FEDORA-2017-521b5e42a4)
Network Security Services Softoken Module
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.29.5. Note that, only nss-
util and nss-softokn have changed since the previous upstream release 3.29.3.
--------------------------------------------------------------------------------
================================================================================
nss-util-3.29.5-1.0.fc25 (FEDORA-2017-521b5e42a4)
Network Security Services Utilities Library
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.29.5. Note that, only nss-
util and nss-softokn have changed since the previous upstream release 3.29.3.
--------------------------------------------------------------------------------
================================================================================
perl-Tree-Simple-1.31-1.fc25 (FEDORA-2017-4e557b1186)
Tree::Simple Perl module
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------