The following Fedora 25 Security updates need testing:
Age URL
178
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
77
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7dbbbafea6
runc-1.0.0-7.git6394544.fc25.2
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ec3c82e64d
libstaroffice-0.0.3-3.fc25
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-63789c8c29
tomcat-8.0.44-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bcfa3569d6
libmwaw-0.3.11-3.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-62aacc1474
mercurial-3.8.1-3.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a66e2c5b62
chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f68c93aaac
kmail-16.12.3-2.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bb1ecba1bc
kf5-messagelib-16.12.3-2.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a11f853361
kdepim4-4.14.10-31.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ba1399832b
c-ares-1.13.0-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f0509fbf37
wireshark-2.2.7-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bff1b87765
webkitgtk4-2.16.4-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-708adeb9b6
libsndfile-1.0.28-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0d636042ef
drupal8-8.3.4-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cfd8b2bb23
php-horde-Horde-Image-2.5.0-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c3149b5fcb xen-4.7.2-7.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d530a04779 pcre2-10.23-8.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a83e0e61d6 fwupd-0.9.4-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bd92718a5a
pungi-4.1.16-3.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-82f4a3afee
storaged-2.6.2-6.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1448fa492e vim-8.0.662-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c3149b5fcb xen-4.7.2-7.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6ab3e72bd6
nfs-utils-2.1.1-5.rc4.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e9d4c821e2
flatpak-0.9.6-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c71743bffc acl-2.2.52-13.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-708adeb9b6
libsndfile-1.0.28-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bff1b87765
webkitgtk4-2.16.4-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-77b1d08ef3
gtk3-3.22.16-1.fc25
The following builds have been pushed to Fedora 25 updates-testing
casync-1-4.gitcc63fcd.fc25
cri-o-1.0.0.alpha.0-0.git5dcbdc0.fc25.3
digikam-5.6.0-1.fc25
gnome-shell-extension-activities-configurator-56-1.fc25
mozilla-https-everywhere-5.2.19-1.fc25
nfs-utils-2.1.1-5.rc4.fc25
perl-Parse-ErrorString-Perl-0.24-1.fc25
php-horde-Horde-Auth-2.2.2-1.fc25
php-horde-Horde-Cli-2.2.4-1.fc25
php-horde-Horde-Core-2.29.1-1.fc25
php-horde-Horde-Crypt-2.7.9-1.fc25
php-horde-Horde-Idna-1.1.1-1.fc25
php-horde-Horde-Imap-Client-2.29.13-1.fc25
php-horde-Horde-JavascriptMinify-1.1.4-1.fc25
php-horde-Horde-ListHeaders-1.2.5-1.fc25
php-horde-Horde-Mail-2.6.4-1.fc25
php-horde-Horde-Smtp-1.9.5-1.fc25
playonlinux-4.2.12-1.fc25
python-oslo-messaging-5.17.1-1.fc25
python-oslo-middleware-3.23.1-1.fc25
python-oslo-versionedobjects-1.21.0-1.fc25
python-phonenumbers-8.5.2-1.fc25
python-sphinxcontrib-httpdomain-1.5.0-3.fc25
softhsm-2.2.0-1.fc25
vim-8.0.662-1.fc25
xen-4.7.2-7.fc25
Details about builds:
================================================================================
casync-1-4.gitcc63fcd.fc25 (FEDORA-2017-afc9a648e4)
Content Addressable Data Synchronizer
--------------------------------------------------------------------------------
Update Information:
Fixes casync on non-amd64 architectures. ---- New package, see
http://0pointer.net/blog/casync-a-tool-for-distributing-file-system-image....
--------------------------------------------------------------------------------
================================================================================
cri-o-1.0.0.alpha.0-0.git5dcbdc0.fc25.3 (FEDORA-2017-48626b6be8)
OCI-based implementation of Kubernetes Container Runtime Interface
--------------------------------------------------------------------------------
Update Information:
rebuilt to include cri-o-cni sub package ---- rebuilt for s390x
--------------------------------------------------------------------------------
================================================================================
digikam-5.6.0-1.fc25 (FEDORA-2017-93458d7a1a)
A digital camera accessing & photo management application
--------------------------------------------------------------------------------
Update Information:
New digikam 5.6.0 release, see also
https://www.digikam.org/news/2017-06-21-5.6.0-release-announcement/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463640 - digikam-5.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1463640
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-activities-configurator-56-1.fc25 (FEDORA-2017-e1eeb59897)
Configure the top bar and Activities button in GNOME Shell
--------------------------------------------------------------------------------
Update Information:
Bump to upstream version 56, which fixes a minor UI bug.
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-5.2.19-1.fc25 (FEDORA-2017-841996c854)
HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
--------------------------------------------------------------------------------
Update Information:
Someone at my workplace decided the best place to put a switch was dangling off
the back of a desk. Bad idea, people.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463450 - mozilla-https-everywhere-5.2.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1463450
--------------------------------------------------------------------------------
================================================================================
nfs-utils-2.1.1-5.rc4.fc25 (FEDORA-2017-6ab3e72bd6)
NFS utilities and supporting clients and daemons for the kernel NFS server
--------------------------------------------------------------------------------
Update Information:
Updated to the latest RC releease: nfs-utils-2-1-2-rc4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1462218 - rpc.nfsd do not understand key -u
https://bugzilla.redhat.com/show_bug.cgi?id=1462218
--------------------------------------------------------------------------------
================================================================================
perl-Parse-ErrorString-Perl-0.24-1.fc25 (FEDORA-2017-9df2baf48d)
Module for parsing error messages
--------------------------------------------------------------------------------
Update Information:
This release corrects misspellings in the documentation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1464431 - perl-Parse-ErrorString-Perl-0.24 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1464431
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Auth-2.2.2-1.fc25 (FEDORA-2017-dac1c7def5)
Horde Authentication API
--------------------------------------------------------------------------------
Update Information:
**Horde_Auth 2.2.2** * [jan] Add Turkish translation (��T�� B��DB).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Cli-2.2.4-1.fc25 (FEDORA-2017-3def284f81)
Horde Command Line Interface API
--------------------------------------------------------------------------------
Update Information:
**Horde_Cli 2.2.4** * [jan] Fix returning to normal font after text with light
colors.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.29.1-1.fc25 (FEDORA-2017-568e31f8bb)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.29.1** * [jan] Fix JavaScript minifying with recent Closure
compilers (Bug #14650).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Crypt-2.7.9-1.fc25 (FEDORA-2017-3bd4b5d7ff)
Horde Cryptography API
--------------------------------------------------------------------------------
Update Information:
**Horde_Crypt 2.7.9** * [jan] More fixes for GnuPG 2 (Mathieu Parent). * [jan]
Remove dependency on openssl executable (Hadi Nategh).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Idna-1.1.1-1.fc25 (FEDORA-2017-e1c3b6e986)
IDNA backend normalization package
--------------------------------------------------------------------------------
Update Information:
**Horde_Idna 1.1.1** * [jan] Add Turkish translation (��T�� B��DB).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Imap-Client-2.29.13-1.fc25 (FEDORA-2017-43d6f0f9fb)
Horde IMAP abstraction interface
--------------------------------------------------------------------------------
Update Information:
**Horde_Imap_Client 2.29.13** * [jan] Add Turkish translation (��T�� B��DB).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-JavascriptMinify-1.1.4-1.fc25 (FEDORA-2017-87c861d5f9)
Javascript Minification
--------------------------------------------------------------------------------
Update Information:
**Horde_JavascriptMinify 1.1.4** * [jan] Add unit tests.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-ListHeaders-1.2.5-1.fc25 (FEDORA-2017-f5a0199b42)
Horde List Headers Parsing Library
--------------------------------------------------------------------------------
Update Information:
**Horde_ListHeaders 1.2.5** * [jan] Add Turkish translation (��T�� B��DB).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Mail-2.6.4-1.fc25 (FEDORA-2017-19c2ac55b9)
Horde Mail Library
--------------------------------------------------------------------------------
Update Information:
**Horde_Mail 2.6.4** * [jan] Add Turkish translation (��T�� B��DB).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Smtp-1.9.5-1.fc25 (FEDORA-2017-185908a280)
Horde SMTP Client
--------------------------------------------------------------------------------
Update Information:
**Horde_Smtp 1.9.5** * [jan] Add Turkish translation (��T�� B��DB).
--------------------------------------------------------------------------------
================================================================================
playonlinux-4.2.12-1.fc25 (FEDORA-2017-d9b3ac61ea)
Graphical front-end for Wine
--------------------------------------------------------------------------------
Update Information:
Update to 4.2.12 (#1463027)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463027 - playonlinux-4.2.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1463027
--------------------------------------------------------------------------------
================================================================================
python-oslo-messaging-5.17.1-1.fc25 (FEDORA-2017-6e846e9982)
OpenStack common messaging library
--------------------------------------------------------------------------------
Update Information:
Update to 5.17.1
--------------------------------------------------------------------------------
================================================================================
python-oslo-middleware-3.23.1-1.fc25 (FEDORA-2017-bfe4dce95e)
OpenStack Oslo Middleware library
--------------------------------------------------------------------------------
Update Information:
Update to 3.23.1
--------------------------------------------------------------------------------
================================================================================
python-oslo-versionedobjects-1.21.0-1.fc25 (FEDORA-2017-1b12c1552c)
OpenStack common versionedobjects library
--------------------------------------------------------------------------------
Update Information:
Update to 1.21.0
--------------------------------------------------------------------------------
================================================================================
python-phonenumbers-8.5.2-1.fc25 (FEDORA-2017-8ae1f202c6)
A Python port of Google's libphonenumber
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
================================================================================
python-sphinxcontrib-httpdomain-1.5.0-3.fc25 (FEDORA-2017-63e60703a5)
Sphinx domain for documenting HTTP APIs
--------------------------------------------------------------------------------
Update Information:
Added a Python 3 subpackage (RHBZ#1459474)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1459474 - python-sphinxcontrib-httpdomain: Provide a Python 3 subpackage
https://bugzilla.redhat.com/show_bug.cgi?id=1459474
--------------------------------------------------------------------------------
================================================================================
softhsm-2.2.0-1.fc25 (FEDORA-2017-0b702b77c9)
Software version of a PKCS#11 Hardware Security Module
--------------------------------------------------------------------------------
Update Information:
Rebased to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1401489 - softhsm-2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1401489
--------------------------------------------------------------------------------
================================================================================
vim-8.0.662-1.fc25 (FEDORA-2017-1448fa492e)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit.
--------------------------------------------------------------------------------
================================================================================
xen-4.7.2-7.fc25 (FEDORA-2017-c3149b5fcb)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
xen: various flaws (#1463247) blkif responses leak backend stack data [XSA-216]
page transfer may allow PV guest to elevate privilege [XSA-217] Races in the
grant table unmap code [XSA-218] x86: insufficient reference counts during
shadow emulation [XSA-219] x86: PKRU and BND* leakage between vCPU-s [XSA-220]
stale P2M mappings due to insufficient error checking [XSA-222] ARM guest
disabling interrupt may crash Xen [XSA-223] grant table operations mishandle
reference counts [XSA-224] arm: vgic: Out-of-bound access when sending SGIs
[XSA-225] NULL pointer deref in event channel poll [XSA-221] (#1463231)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1458870 - xsa216 xen: blkif responses leak backend stack data (XSA-216)
https://bugzilla.redhat.com/show_bug.cgi?id=1458870
[ 2 ] Bug #1458871 - xsa217 xen: page transfer may allow PV guest to elevate privilege
(XSA-217)
https://bugzilla.redhat.com/show_bug.cgi?id=1458871
[ 3 ] Bug #1458872 - xsa218 xen: Races in the grant table unmap code (XSA-218)
https://bugzilla.redhat.com/show_bug.cgi?id=1458872
[ 4 ] Bug #1458873 - xsa219 xen: x86: insufficient reference counts during shadow
emulation (XSA-219)
https://bugzilla.redhat.com/show_bug.cgi?id=1458873
[ 5 ] Bug #1458874 - xsa220 xen: x86: PKRU and BND* leakage between vCPU-s (XSA-220)
https://bugzilla.redhat.com/show_bug.cgi?id=1458874
[ 6 ] Bug #1458876 - xsa222 xen: stale P2M mappings due to insufficient error checking
(XSA-222)
https://bugzilla.redhat.com/show_bug.cgi?id=1458876
[ 7 ] Bug #1458877 - xsa223 xen: ARM guest disabling interrupt may crash Xen (XSA-223)
https://bugzilla.redhat.com/show_bug.cgi?id=1458877
[ 8 ] Bug #1458878 - xsa224 xen: grant table operations mishandle reference counts
(XSA-224)
https://bugzilla.redhat.com/show_bug.cgi?id=1458878
[ 9 ] Bug #1459515 - xsa225 xen: arm: vgic: Out-of-bound access when sending SGIs
(XSA-225)
https://bugzilla.redhat.com/show_bug.cgi?id=1459515
[ 10 ] Bug #1458875 - xsa221 xen: NULL pointer deref in event channel poll (XSA-221)
https://bugzilla.redhat.com/show_bug.cgi?id=1458875
--------------------------------------------------------------------------------