The following Fedora 25 Security updates need testing:
Age URL
239
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
137
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
77
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
36
https://bodhi.fedoraproject.org/updates/FEDORA-2017-86cfcbbae8
libstaroffice-0.0.4-1.fc25
31
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99c0118c0c
memcached-1.4.39-1.fc25
27
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2232fe97b4
docker-distribution-2.6.2-1.git48294d9.fc25
21
https://bodhi.fedoraproject.org/updates/FEDORA-2017-be3df4fe14
java-1.8.0-openjdk-aarch32-1.8.0.141-1.170721.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9148fe36b9
postgresql-9.5.8-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7e5ac0896e
botan-1.10.16-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fa1d8ad61a
mercurial-3.8.1-4.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-97eb475d93
cvs-1.11.23-41.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a52a46ba78 xen-4.7.3-2.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-df343b3e09
chromium-60.0.3112.101-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-270ab2baa3 glibc-2.24-10.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a00a087fd4
tomcat-8.0.46-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-98e8569b33
dnsdist-1.2.0-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2317191f8a
taglib-1.11.1-5.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
81
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
34
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b67562744
ca-certificates-2017.2.16-1.0.fc25
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-226cbd995b
libvirt-2.2.1-3.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ba3e72c511
osinfo-db-20170813-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-67705933e3
glusterfs-3.10.5-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-837f04c39a
selinux-policy-3.13.1-225.20.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-97eb475d93
cvs-1.11.23-41.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0c6291cd4b
pango-1.40.9-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bd0324f3e9
p11-kit-0.23.8-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ee474bb41c file-5.29-9.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e9a1ddb533
rpm-4.13.0.1-2.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a52a46ba78 xen-4.7.3-2.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e22c6d53db
mariadb-10.1.26-2.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ed2a089d21 lz4-1.8.0-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-270ab2baa3 glibc-2.24-10.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bb07876a1c nspr-4.16.0-1.fc25
nss-3.32.0-1.1.fc25 nss-softokn-3.32.0-1.2.fc25 nss-util-3.32.0-1.0.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2317191f8a
taglib-1.11.1-5.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a6fc26e60e vim-8.0.983-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0442143306
gdk-pixbuf2-2.36.9-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-08a8ae97e7
gnutls-3.5.15-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-66902d17b7
firefox-55.0.2-1.fc25
The following builds have been pushed to Fedora 25 updates-testing
COPASI-4.20.158-4.fc25
cacti-1.1.19-1.fc25
cpuid-20170122-5.fc25
distribution-gpg-keys-1.14-1.fc25
dnsdist-1.2.0-1.fc25
engauge-digitizer-10.2-1.fc25
fakechroot-2.19-4.fc25
fedrepo-req-1.5.0-2.fc25
firefox-55.0.2-1.fc25
gdk-pixbuf2-2.36.9-1.fc25
gnutls-3.5.15-1.fc25
gramps-4.2.6-1.fc25
gsequencer-0.9.14-1.fc25
lightdm-gtk-2.0.2-6.fc25
lldpd-0.9.8-1.fc25
mcelog-153-1.fc25
mingw-gdk-pixbuf-2.36.9-1.fc25
mock-1.4.4-1.fc25
notmuch-0.25-1.fc25
nuvola-app-kexp-1.2-1.fc25
nuvola-app-youtube-1.3-1.fc25
perl-CPAN-Perl-Releases-3.32-1.fc25
perl-Module-CoreList-5.20170821-1.fc25
php-horde-Horde-Core-2.30.1-1.fc25
php-nette-tester-2.0.0-1.fc25
php-phpmyadmin-sql-parser-4.1.10-1.fc25
python-cli-helpers-0.2.3-1.fc25
python-subvertpy-0.10.1-1.fc25
python-websockets-3.4-1.fc25
shairport-sync-3.1.1-1.fc25
skopeo-0.1.23-6.git1bbd87f.fc25
syncthing-inotify-0.8.7-4.fc25
taglib-1.11.1-5.fc25
tomcat-8.0.46-1.fc25
variety-0.6.4-4.fc25
vim-8.0.983-1.fc25
zstd-1.3.1-1.fc25
Details about builds:
================================================================================
COPASI-4.20.158-4.fc25 (FEDORA-2017-c6a3e2ecda)
Biochemical network simulator
--------------------------------------------------------------------------------
Update Information:
- Fix Python interpreter
--------------------------------------------------------------------------------
================================================================================
cacti-1.1.19-1.fc25 (FEDORA-2017-2f1ca6beb7)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.19 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.19
--------------------------------------------------------------------------------
================================================================================
cpuid-20170122-5.fc25 (FEDORA-2017-7c252f57d1)
Dumps information about the CPU(s)
--------------------------------------------------------------------------------
Update Information:
Add cpuinfo2cpuid
--------------------------------------------------------------------------------
================================================================================
distribution-gpg-keys-1.14-1.fc25 (FEDORA-2017-d9f7a93845)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
* Add Fedora 28 keys * Add several third parties keys (Adobe, Dell, JPackage,
CalcForge, VirtualBox, PostgreSQL, Skype, Google, Dropbox, Remi) * Add new
Copr's project keys
--------------------------------------------------------------------------------
================================================================================
dnsdist-1.2.0-1.fc25 (FEDORA-2017-98e8569b33)
Highly DNS-, DoS- and abuse-aware loadbalancer
--------------------------------------------------------------------------------
Update Information:
Update to new upstream release 1.2.0 Security fix for CVE-2016-7069 and
CVE-2017-7557
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483870 - CVE-2016-7069 dnsdist: Crafted backend responses can cause a denial
of service
https://bugzilla.redhat.com/show_bug.cgi?id=1483870
[ 2 ] Bug #1483867 - CVE-2017-7557 dnsdist: Alteration of ACLs via API authentication
bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1483867
--------------------------------------------------------------------------------
================================================================================
engauge-digitizer-10.2-1.fc25 (FEDORA-2017-402d0100a0)
Convert graphs or map files into numbers
--------------------------------------------------------------------------------
Update Information:
- Update to 10.2
--------------------------------------------------------------------------------
================================================================================
fakechroot-2.19-4.fc25 (FEDORA-2017-dbe18d35a5)
Gives a fake chroot environment
--------------------------------------------------------------------------------
Update Information:
Add support for LFS.
--------------------------------------------------------------------------------
================================================================================
fedrepo-req-1.5.0-2.fc25 (FEDORA-2017-5a10270a78)
CLI for Fedora package repo requests
--------------------------------------------------------------------------------
Update Information:
Changes: * Set the user agent string to "fedrepo-req/version" * Add a way to
skip Bugzilla ticket validation in fedrepo-req-admin * Explain when a user can't
be found in FAS * Don't use the Bugzilla authentication cache on fedrepo-req *
Change requirements from "git" to "git-core" ---- Updates to
v1.4.0. The
client tool is mostly unchanged except that it has a few usability improvements
such as having a man page and telling users to read the README if they haven't
configured the client tool. The admin tool has a few enhancements and bug fixes
that are listed in git. ---- Bumps to version 1.3.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482575 - fedrepo-req: change requires from git to git-core
https://bugzilla.redhat.com/show_bug.cgi?id=1482575
[ 2 ] Bug #1481036 - Requesting new repo errors with meaningless error message
https://bugzilla.redhat.com/show_bug.cgi?id=1481036
--------------------------------------------------------------------------------
================================================================================
firefox-55.0.2-1.fc25 (FEDORA-2017-66902d17b7)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
- new upstream release (55.0.2)
--------------------------------------------------------------------------------
================================================================================
gdk-pixbuf2-2.36.9-1.fc25 (FEDORA-2017-0442143306)
An image loading library
--------------------------------------------------------------------------------
Update Information:
gdk-pixbuf2 2.36.9 release. * build: meson build improvements * OS X: don't
require shared-mime-info (#786167) * gif: fix a coverity warning (#785696) *
build: make queryloaders output reproducible (#7835920 * Translation updates
--------------------------------------------------------------------------------
================================================================================
gnutls-3.5.15-1.fc25 (FEDORA-2017-08a8ae97e7)
A TLS protocol implementation
--------------------------------------------------------------------------------
Update Information:
- Update to upstream 3.5.15 release
--------------------------------------------------------------------------------
================================================================================
gramps-4.2.6-1.fc25 (FEDORA-2017-51ceb5152e)
Genealogical Research and Analysis Management Programming System
--------------------------------------------------------------------------------
Update Information:
https://gramps-project.org/introduction-WP/2017/08/gramps-4-2-6-released/
--------------------------------------------------------------------------------
================================================================================
gsequencer-0.9.14-1.fc25 (FEDORA-2017-30c7767fc0)
Advanced Gtk+ Sequencer audio processing engine
--------------------------------------------------------------------------------
Update Information:
added libpulse dependency
--------------------------------------------------------------------------------
================================================================================
lightdm-gtk-2.0.2-6.fc25 (FEDORA-2017-985f7a1cc6)
LightDM GTK Greeter
--------------------------------------------------------------------------------
Update Information:
- Fix issue with lightdm-autologin-greeter pulled in basic-desktop netinstall
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1481192 - Netinstall with only Basic desktop selected failes to start up
after reboot
https://bugzilla.redhat.com/show_bug.cgi?id=1481192
--------------------------------------------------------------------------------
================================================================================
lldpd-0.9.8-1.fc25 (FEDORA-2017-0ba7c8b09f)
ISC-licensed implementation of LLDP
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483362 - lldpd-0.9.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1483362
--------------------------------------------------------------------------------
================================================================================
mcelog-153-1.fc25 (FEDORA-2017-9994add831)
Tool to translate x86-64 CPU Machine Check Exception data
--------------------------------------------------------------------------------
Update Information:
Update to v153. Fix "16 bytes" issue
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1435338 - mcelog: warning: 16 bytes ignored in each record
https://bugzilla.redhat.com/show_bug.cgi?id=1435338
--------------------------------------------------------------------------------
================================================================================
mingw-gdk-pixbuf-2.36.9-1.fc25 (FEDORA-2017-8e3983960b)
MinGW Windows GDK Pixbuf library
--------------------------------------------------------------------------------
Update Information:
MinGW cross compiled gdk-pixbuf 2.36.9 release.
--------------------------------------------------------------------------------
================================================================================
mock-1.4.4-1.fc25 (FEDORA-2017-9a92605b52)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
* Fedora 27 configs have been added. * /etc/dnf/dnf.conf is used instead of
/etc/dnf.conf * /etc/dnf/dnf.conf is populated even when yum is used * Rename
group inside of chroot from mockbuild to mock - this will allow you to install
mock inside of mock' chroot.
--------------------------------------------------------------------------------
================================================================================
notmuch-0.25-1.fc25 (FEDORA-2017-92d76ee588)
System for indexing, searching, and tagging email
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1474807 - notmuch-0.25 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1474807
--------------------------------------------------------------------------------
================================================================================
nuvola-app-kexp-1.2-1.fc25 (FEDORA-2017-ea54901e2e)
A KEXP live stream plugin for Nuvola Player
--------------------------------------------------------------------------------
Update Information:
* Fri Jul 28 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2-1 - initial
build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-youtube-1.3-1.fc25 (FEDORA-2017-45d0a27197)
YouTube for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
* Fri Jul 28 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 1.3-1 - initial
build
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.32-1.fc25 (FEDORA-2017-8b4b3e1443)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483773 - perl-CPAN-Perl-Releases-3.32 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1483773
--------------------------------------------------------------------------------
================================================================================
perl-Module-CoreList-5.20170821-1.fc25 (FEDORA-2017-3fcf5e8609)
What modules are shipped with versions of perl
--------------------------------------------------------------------------------
Update Information:
This release briings data about Perl 5.27.3.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.30.1-1.fc25 (FEDORA-2017-11e70a413a)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.30.1** * [mjr] Fix issue that could break ActiveSync sync if
object not found.
--------------------------------------------------------------------------------
================================================================================
php-nette-tester-2.0.0-1.fc25 (FEDORA-2017-5b230fb914)
An easy-to-use PHP unit testing framework
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.0 (previous build was a git snapshot)
--------------------------------------------------------------------------------
================================================================================
php-phpmyadmin-sql-parser-4.1.10-1.fc25 (FEDORA-2017-649c11cf8a)
A validating SQL lexer and parser with a focus on MySQL dialect
--------------------------------------------------------------------------------
Update Information:
**Version 4.1.10** - 2017-08-21 * Use custom LoaderException for context
loading errors.
--------------------------------------------------------------------------------
================================================================================
python-cli-helpers-0.2.3-1.fc25 (FEDORA-2017-1fb2e16907)
Python helpers for common CLI tasks
--------------------------------------------------------------------------------
Update Information:
New package: python-cli-helpers
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1451066 - Review Request: python-cli-helpers - Python helpers for common CLI
tasks
https://bugzilla.redhat.com/show_bug.cgi?id=1451066
--------------------------------------------------------------------------------
================================================================================
python-subvertpy-0.10.1-1.fc25 (FEDORA-2017-6820f0c70e)
Python bindings for Subversion
--------------------------------------------------------------------------------
Update Information:
Update URLs
--------------------------------------------------------------------------------
================================================================================
python-websockets-3.4-1.fc25 (FEDORA-2017-de8a446ae1)
An implementation of the WebSocket Protocol for python with asyncio
--------------------------------------------------------------------------------
Update Information:
Update to 3.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483322 - python-websockets-3.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1483322
--------------------------------------------------------------------------------
================================================================================
shairport-sync-3.1.1-1.fc25 (FEDORA-2017-ec32afadcc)
AirTunes emulator. Multi-Room with Audio Synchronisation
--------------------------------------------------------------------------------
Update Information:
new backend offering synchronised PulseAudio support.
--------------------------------------------------------------------------------
================================================================================
skopeo-0.1.23-6.git1bbd87f.fc25 (FEDORA-2017-4f9130bffc)
Inspect Docker images and repositories on registries
--------------------------------------------------------------------------------
Update Information:
Fix conflict on name of storage.conf.5. man page, and remove default to
"overlay"
--------------------------------------------------------------------------------
================================================================================
syncthing-inotify-0.8.7-4.fc25 (FEDORA-2017-c8197a9286)
Syncthing File watcher
--------------------------------------------------------------------------------
Update Information:
Initial package for fedora.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431868 - Review Request: syncthing-inotify - Syncthing File watcher
https://bugzilla.redhat.com/show_bug.cgi?id=1431868
--------------------------------------------------------------------------------
================================================================================
taglib-1.11.1-5.fc25 (FEDORA-2017-2317191f8a)
Audio Meta-Data Library
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2017-12678
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483959 - CVE-2017-12678 taglib: Incorrect cast in rebuildAggregateFrames
function
https://bugzilla.redhat.com/show_bug.cgi?id=1483959
--------------------------------------------------------------------------------
================================================================================
tomcat-8.0.46-1.fc25 (FEDORA-2017-a00a087fd4)
Apache Servlet/JSP Engine, RI for Servlet 3.1/JSP 2.3 API
--------------------------------------------------------------------------------
Update Information:
This update includes a rebase from 8.0.44 up to 8.0.46 which resolves a single
CVE along with various other bugs/features: - rh#1480620 CVE-2017-7674 tomcat:
Cache Poisoning
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1480620 - CVE-2017-7674 tomcat: Cache Poisoning [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1480620
--------------------------------------------------------------------------------
================================================================================
variety-0.6.4-4.fc25 (FEDORA-2017-fbbcc9af89)
Wallpaper changer that automatically downloads wallpapers
--------------------------------------------------------------------------------
Update Information:
* Mon Aug 21 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 0.6.4-4 - Add
variety-0.6.4-fix_webkit_version.patch - Correct BR webkitgtk3 becomes
webkitgtk4 - Add RR pywebkitgtk
--------------------------------------------------------------------------------
================================================================================
vim-8.0.983-1.fc25 (FEDORA-2017-a6fc26e60e)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit (fixes guicursor blinking) ---- The newest upstream
commit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1483539 - cursor blink setting broken
https://bugzilla.redhat.com/show_bug.cgi?id=1483539
--------------------------------------------------------------------------------
================================================================================
zstd-1.3.1-1.fc25 (FEDORA-2017-285975e2f4)
Zstd compression library
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------