The following Fedora 25 Security updates need testing:
Age URL
107
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9b3ed5f170
chicken-4.11.0-3.fc25
59
https://bodhi.fedoraproject.org/updates/FEDORA-2016-6dd3bc37c3
compat-guile18-1.8.8-14.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-673cbb6bb4
perl-DBD-MySQL-4.041-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-e865601498
mcabber-1.0.4-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-98cca07999
tomcat-8.0.39-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a1563af431
golang-1.7.4-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2016-8b1f72df21
php-simplesamlphp-saml2-2.3.3-1.fc25 php-simplesamlphp-saml2_1-1.10.3-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-2d8fb6d7ad
ipsilon-2.0.2-2.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-868350fe5a lxc-2.0.6-2.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f2a42c3b18
mingw-openjpeg2-2.1.2-2.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-b6ec330099 xen-4.7.1-4.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-daf90926d4
dovecot-2.2.27-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-107f03cc00
kernel-4.8.13-300.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
24
https://bodhi.fedoraproject.org/updates/FEDORA-2016-56cfdb6815
nss-3.27.0-1.3.fc25
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-a1231ada78
python-productmd-1.3-1.fc25
14
https://bodhi.fedoraproject.org/updates/FEDORA-2016-940ecb5c59
wpa_supplicant-2.6-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2016-1d195fd2ad
lxpanel-0.9.1-2.D20161125git138ff9b2.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-9c25320b71
pungi-4.1.11-3.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f24b3ddc6a
selinux-policy-3.13.1-225.3.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-180b59a3c4 pcre2-10.22-7.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cc3ab3b292
tracker-1.10.2-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f7b96856a7 samba-4.5.2-0.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-f19e7ae61e koji-1.11.0-1.fc25
fedora-packager-0.6.0.0-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d00f07310b
pcmanfm-1.2.5-1.fc25 lxsession-0.5.3-1.D20161210gite284f41ad4.fc25
libfm-1.2.4-13.D20161209gitab583d7800.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2016-107f03cc00
kernel-4.8.13-300.fc25
The following builds have been pushed to Fedora 25 updates-testing
Cython-0.25.2-1.fc25
byobu-5.113-1.fc25
cinnamon-3.2.3-2.fc25
cinnamon-desktop-3.2.2-1.fc25
cinnamon-screensaver-3.2.7-1.fc25
cinnamon-settings-daemon-3.2.1-1.fc25
docker-1.12.3-15.git0423d89.fc25
dolphin-emu-5.0-7.fc25
fedora-packager-0.6.0.0-1.fc25
hexchat-2.12.4-1.fc25
kernel-4.8.13-300.fc25
koji-1.11.0-1.fc25
libfm-1.2.4-13.D20161209gitab583d7800.fc25
libprelude-3.1.0-26.fc25
lumina-desktop-1.1.0-1.p1.Ld700dea.fc25
lxsession-0.5.3-1.D20161210gite284f41ad4.fc25
lxterminal-0.2.0-8.D20161208git9e61321c.fc25
mate-panel-1.16.0-3.fc25
nemo-3.2.1-1.fc25
nitroshare-0.3.3-2.fc25
pcmanfm-1.2.5-1.fc25
perl-Devel-StackTrace-2.02-1.fc25
perl-HTML-Lint-2.24-1.fc25
printrun-2015.03.10-6.fc25
seafile-client-6.0.0-2.fc25
unetbootin-625-1.fc25
xcompmgr-1.1.7-1.fc25
xfce4-whiskermenu-plugin-1.6.2-1.fc25
xpra-1.0-2.fc25
Details about builds:
================================================================================
Cython-0.25.2-1.fc25 (FEDORA-2016-cb2d49b2f8)
A language for writing Python extension modules
--------------------------------------------------------------------------------
Update Information:
Update to 0.25.2
--------------------------------------------------------------------------------
================================================================================
byobu-5.113-1.fc25 (FEDORA-2016-10a34f4136)
Light-weight, configurable window manager built upon GNU screen
--------------------------------------------------------------------------------
Update Information:
Rebuilt for new upstream release 5.113, fixes rhbz #1276014
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1276014 - byobu-5.113 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1276014
--------------------------------------------------------------------------------
================================================================================
cinnamon-3.2.3-2.fc25 (FEDORA-2016-7c71cb2887)
Window management and application launching for GNOME
--------------------------------------------------------------------------------
Update Information:
Release update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1402335 - [abrt] cinnamon:
subprocess.py:1551:_execute_child:FileNotFoundError: [Errno 2] No such file or directory:
'wget'
https://bugzilla.redhat.com/show_bug.cgi?id=1402335
[ 2 ] Bug #1284929 - cinnamon-settings uses wrong python
https://bugzilla.redhat.com/show_bug.cgi?id=1284929
--------------------------------------------------------------------------------
================================================================================
cinnamon-desktop-3.2.2-1.fc25 (FEDORA-2016-7c71cb2887)
Shared code among cinnamon-session, nemo, etc
--------------------------------------------------------------------------------
Update Information:
Release update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1402335 - [abrt] cinnamon:
subprocess.py:1551:_execute_child:FileNotFoundError: [Errno 2] No such file or directory:
'wget'
https://bugzilla.redhat.com/show_bug.cgi?id=1402335
[ 2 ] Bug #1284929 - cinnamon-settings uses wrong python
https://bugzilla.redhat.com/show_bug.cgi?id=1284929
--------------------------------------------------------------------------------
================================================================================
cinnamon-screensaver-3.2.7-1.fc25 (FEDORA-2016-7c71cb2887)
Cinnamon Screensaver
--------------------------------------------------------------------------------
Update Information:
Release update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1402335 - [abrt] cinnamon:
subprocess.py:1551:_execute_child:FileNotFoundError: [Errno 2] No such file or directory:
'wget'
https://bugzilla.redhat.com/show_bug.cgi?id=1402335
[ 2 ] Bug #1284929 - cinnamon-settings uses wrong python
https://bugzilla.redhat.com/show_bug.cgi?id=1284929
--------------------------------------------------------------------------------
================================================================================
cinnamon-settings-daemon-3.2.1-1.fc25 (FEDORA-2016-7c71cb2887)
The daemon sharing settings from CINNAMON to GTK+/KDE applications
--------------------------------------------------------------------------------
Update Information:
Release update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1402335 - [abrt] cinnamon:
subprocess.py:1551:_execute_child:FileNotFoundError: [Errno 2] No such file or directory:
'wget'
https://bugzilla.redhat.com/show_bug.cgi?id=1402335
[ 2 ] Bug #1284929 - cinnamon-settings uses wrong python
https://bugzilla.redhat.com/show_bug.cgi?id=1284929
--------------------------------------------------------------------------------
================================================================================
docker-1.12.3-15.git0423d89.fc25 (FEDORA-2016-37c2c59240)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
built docker @projectatomic/docker-1.12 commit 0423d89 ---- built docker
@projectatomic/docker-1.12 commit 0423d89
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1401260 - SELinux is preventing chmod from 'setattr' accesses on the
directory _data.
https://bugzilla.redhat.com/show_bug.cgi?id=1401260
[ 2 ] Bug #1403398 - f25 - docker doesn't label overlay2 directory correctly
https://bugzilla.redhat.com/show_bug.cgi?id=1403398
[ 3 ] Bug #1398861 - SELinux is preventing systemd from 'create' accesses on the
unix_stream_socket Unknown.
https://bugzilla.redhat.com/show_bug.cgi?id=1398861
--------------------------------------------------------------------------------
================================================================================
dolphin-emu-5.0-7.fc25 (FEDORA-2016-445d5858db)
GameCube / Wii / Triforce Emulator
--------------------------------------------------------------------------------
Update Information:
New package, imported from RPMFusion. Updates from RPMFusion to Fedora: -
License fixes and relocation - Split out common data into data subpackage -
Fixed builds for f26+ - Appdata ---- New package, imported from RPMFusion.
Updates from RPMFusion to Fedora: - License fixes and relocation - Split out
common data into data subpackage - Add a patch for f26+
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1379765 - Review Request: dolphin-emu - GameCube / Wii / Triforce Emulator
https://bugzilla.redhat.com/show_bug.cgi?id=1379765
--------------------------------------------------------------------------------
================================================================================
fedora-packager-0.6.0.0-1.fc25 (FEDORA-2016-f19e7ae61e)
Tools for setting up a fedora maintainer environment
--------------------------------------------------------------------------------
Update Information:
Updates needed for the fedora infra flag day 2016
--------------------------------------------------------------------------------
================================================================================
hexchat-2.12.4-1.fc25 (FEDORA-2016-7ffc3fc822)
A popular and easy to use graphical IRC (chat) client
--------------------------------------------------------------------------------
Update Information:
New upstream bugfix release: - fix issue with timers causing ping timeouts -
fix building against OpenSSL 1.1 - fix /exec output printing invalid utf8 -
replace doat plugin with an internal command
--------------------------------------------------------------------------------
================================================================================
kernel-4.8.13-300.fc25 (FEDORA-2016-107f03cc00)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.8.13 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1400019 - CVE-2016-8655 kernel: Race condition in packet_set_ring leads to
use after free
https://bugzilla.redhat.com/show_bug.cgi?id=1400019
[ 2 ] Bug #1402013 - CVE-2016-9793 kernel: Signed overflow for SO_{SND|RCV}BUFFORCE
https://bugzilla.redhat.com/show_bug.cgi?id=1402013
[ 3 ] Bug #1403145 - CVE-2016-9576 kernel: Use after free in SCSI generic device
interface
https://bugzilla.redhat.com/show_bug.cgi?id=1403145
--------------------------------------------------------------------------------
================================================================================
koji-1.11.0-1.fc25 (FEDORA-2016-f19e7ae61e)
Build system tools
--------------------------------------------------------------------------------
Update Information:
Updates needed for the fedora infra flag day 2016
--------------------------------------------------------------------------------
================================================================================
libfm-1.2.4-13.D20161209gitab583d7800.fc25 (FEDORA-2016-d00f07310b)
GIO-based library for file manager-like programs
--------------------------------------------------------------------------------
Update Information:
LXDE core packages update: * libfm: update to the git head containing some
file manager related fix * pcmanfm: 1.2.5 released. * lxsession 0.5.3 is
released.
--------------------------------------------------------------------------------
================================================================================
libprelude-3.1.0-26.fc25 (FEDORA-2016-6e12f43ea4)
Secure Connections between all Sensors and the Prelude Manager
--------------------------------------------------------------------------------
Update Information:
Bump version to 3.1.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1386938 - Review Request: libprelude - Prelude Library
https://bugzilla.redhat.com/show_bug.cgi?id=1386938
--------------------------------------------------------------------------------
================================================================================
lumina-desktop-1.1.0-1.p1.Ld700dea.fc25 (FEDORA-2016-e72cc75311)
A lightweight, portable desktop environment
--------------------------------------------------------------------------------
Update Information:
Version 1.1.0 of the Lumina desktop environment. - Patchset 1: Fixed a critical
issue with the new wallpaper stack and virtual workspaces. - add calculator
subpackage - install lumina-open to fix execution of default applications
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1389486 - unable to start applications in Lumina
https://bugzilla.redhat.com/show_bug.cgi?id=1389486
[ 2 ] Bug #1387808 - lumina-desktop-v1.1.0-p1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1387808
--------------------------------------------------------------------------------
================================================================================
lxsession-0.5.3-1.D20161210gite284f41ad4.fc25 (FEDORA-2016-d00f07310b)
Lightweight X11 session manager
--------------------------------------------------------------------------------
Update Information:
LXDE core packages update: * libfm: update to the git head containing some
file manager related fix * pcmanfm: 1.2.5 released. * lxsession 0.5.3 is
released.
--------------------------------------------------------------------------------
================================================================================
lxterminal-0.2.0-8.D20161208git9e61321c.fc25 (FEDORA-2016-3127488d92)
Desktop-independent VTE-based terminal emulator
--------------------------------------------------------------------------------
Update Information:
Update to the latest git, many bug fixes included.
--------------------------------------------------------------------------------
================================================================================
mate-panel-1.16.0-3.fc25 (FEDORA-2016-1c9ed8a510)
MATE Desktop panel and applets
--------------------------------------------------------------------------------
Update Information:
- remove dependency to mate-session-manager - use '--with-in-process-
applets=none' configure flag
--------------------------------------------------------------------------------
================================================================================
nemo-3.2.1-1.fc25 (FEDORA-2016-7c71cb2887)
File manager for Cinnamon
--------------------------------------------------------------------------------
Update Information:
Release update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1402335 - [abrt] cinnamon:
subprocess.py:1551:_execute_child:FileNotFoundError: [Errno 2] No such file or directory:
'wget'
https://bugzilla.redhat.com/show_bug.cgi?id=1402335
[ 2 ] Bug #1284929 - cinnamon-settings uses wrong python
https://bugzilla.redhat.com/show_bug.cgi?id=1284929
--------------------------------------------------------------------------------
================================================================================
nitroshare-0.3.3-2.fc25 (FEDORA-2016-ce83a40811)
Transfer files from one device to another made extremely simple
--------------------------------------------------------------------------------
Update Information:
NitroShare v0.3.3 - Features included in this release: - Extension for Caja
& Nemo - French, Korean, & Spanish translations added - Fixed bug that
broke progress and status display - Fixed a number of DPI issues
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1356332 - nitroshare-0.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1356332
--------------------------------------------------------------------------------
================================================================================
pcmanfm-1.2.5-1.fc25 (FEDORA-2016-d00f07310b)
Extremly fast and lightweight file manager
--------------------------------------------------------------------------------
Update Information:
LXDE core packages update: * libfm: update to the git head containing some
file manager related fix * pcmanfm: 1.2.5 released. * lxsession 0.5.3 is
released.
--------------------------------------------------------------------------------
================================================================================
perl-Devel-StackTrace-2.02-1.fc25 (FEDORA-2016-46f6f9e7ad)
Perl module implementing stack trace and stack trace frame objects
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
================================================================================
perl-HTML-Lint-2.24-1.fc25 (FEDORA-2016-1190a7e0c3)
HTML::Lint Perl module
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
================================================================================
printrun-2015.03.10-6.fc25 (FEDORA-2016-cd73160df9)
RepRap printer interface and tools
--------------------------------------------------------------------------------
Update Information:
Always run on X11, because of Wayland issues
--------------------------------------------------------------------------------
================================================================================
seafile-client-6.0.0-2.fc25 (FEDORA-2016-5f73f9d65f)
Seafile cloud storage desktop client
--------------------------------------------------------------------------------
Update Information:
Enable Shibboleth sign on
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1395809 - Seafile Client does not support Shibboleth SSO
https://bugzilla.redhat.com/show_bug.cgi?id=1395809
--------------------------------------------------------------------------------
================================================================================
unetbootin-625-1.fc25 (FEDORA-2016-2899eb6c74)
Create bootable Live USB drives for a variety of Linux distributions
--------------------------------------------------------------------------------
Update Information:
- clean up the spec, attempt to fix FTBFS rhbz #1308209
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1308209 - unetbootin: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1308209
[ 2 ] Bug #1250533 - unetbootin-625 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1250533
--------------------------------------------------------------------------------
================================================================================
xcompmgr-1.1.7-1.fc25 (FEDORA-2016-ce716abf96)
X11 composite manager
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream release 1.1.7, fixes rhbz #1213038
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1213038 - xcompmgr-1.1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1213038
--------------------------------------------------------------------------------
================================================================================
xfce4-whiskermenu-plugin-1.6.2-1.fc25 (FEDORA-2016-e245189de0)
An alternate application launcher for Xfce
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream release 1.6.2
--------------------------------------------------------------------------------
================================================================================
xpra-1.0-2.fc25 (FEDORA-2016-186fb568a7)
Remote display server for applications and desktops
--------------------------------------------------------------------------------
Update Information:
Update to 1.0, which includes an enhanced html5 client. This update also
disables WebP support, since it is disabled by default upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1309872 - Use XDG_RUNTIME_DIR
https://bugzilla.redhat.com/show_bug.cgi?id=1309872
[ 2 ] Bug #1389923 - xpra-0.17.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1389923
[ 3 ] Bug #1401929 - xpra-1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1401929
--------------------------------------------------------------------------------