The following Fedora 25 Security updates need testing:
Age URL
330
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
168
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
118
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2232fe97b4
docker-distribution-2.6.2-1.git48294d9.fc25
33
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7089c6e789
suricata-3.2.4-1.fc25
26
https://bodhi.fedoraproject.org/updates/FEDORA-2017-51f49ebbce apr-1.6.3-1.fc25
26
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f563b201ba
apr-util-1.5.4-4.fc25
26
https://bodhi.fedoraproject.org/updates/FEDORA-2017-45ed341e61
httpd-2.4.29-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6e67e4e45b
poppler-0.45.0-10.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-481e4f6f8c
ldns-1.6.17-22.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e5bbb657c5
chromium-62.0.3202.89-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-55a3247cfd
openssl-1.0.2m-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-077334783e
webkitgtk4-2.18.3-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f58bbbbdb0
konversation-1.7.4-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8575fbfe90
varnish-5.0.0-5.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f1535b86fa
lucene4-4.10.4-11.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cdfd888e2e git-2.9.5-3.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-580f91f6b0
qt5-qtwebengine-5.9.2-2.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b5bcfedf10 mrbs-1.7.0-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6d09353c38 xen-4.7.3-9.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d008ecf87a
cacti-1.1.28-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ed565f9ed0
jbig2dec-0.14-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e40e02e0dd
moodle-3.1.9-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-78f0991378
openssh-7.4p1-5.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
172
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
51
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3fc5429e7e
iproute-4.12.0-1.fc25
21
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b89e9f62d8
bind99-9.9.10-3.P3.fc25
19
https://bodhi.fedoraproject.org/updates/FEDORA-2017-dbf347055a
hwdata-0.306-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e82231f2c7
libglvnd-1.0.0-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6e67e4e45b
poppler-0.45.0-10.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-077334783e
webkitgtk4-2.18.3-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-55a3247cfd
openssl-1.0.2m-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-15b7f781f0 nss-3.34.0-1.0.fc25
nss-softokn-3.34.0-1.0.fc25 nss-util-3.34.0-1.0.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cdfd888e2e git-2.9.5-3.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6d09353c38 xen-4.7.3-9.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-78f0991378
openssh-7.4p1-5.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5c8aaa03b5
man-db-2.7.5-7.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ebe7851cb1
pungi-4.1.20-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c04c80ee2d
kernel-4.13.15-100.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1524498243 sssd-1.16.0-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4ac58bd7e5
groff-1.22.3-9.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-049fb866a6
kernel-4.13.14-100.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-233f5a46a7
vim-8.0.1322-1.fc25
The following builds have been pushed to Fedora 25 updates-testing
atomic-1.19.1-3.fc25
chromium-native_client-59.0.3071.86-4.20170607gitaac1de2.fc25
cinnamon-3.6.5-1.fc25
cinnamon-control-center-3.6.5-2.fc25
cinnamon-desktop-3.6.2-3.fc25
cinnamon-menus-3.6.0-2.fc25
cinnamon-screensaver-3.6.1-2.fc25
cinnamon-session-3.6.1-1.fc25
cinnamon-settings-daemon-3.6.1-1.fc25
cinnamon-translations-3.6.2-1.fc25
cjs-3.6.1-1.fc25
inxi-2.3.45-1.fc25
java-1.8.0-openjdk-aarch32-1.8.0.152-1.171102.fc25
kernel-4.13.15-100.fc25
libabigail-1.0-1.fc25
man-db-2.7.5-7.fc25
mintlocale-1.4.4-1.fc25
muffin-3.6.0-1.fc25
nemo-3.6.4-1.fc25
nemo-extensions-3.6.0-1.fc25
nrpe-3.2.1-1.fc25
openssh-7.4p1-5.fc25
pungi-4.1.20-3.fc25
python-idstools-0.6.3-1.fc25
radicale-1.1.6-2.fc25
sssd-1.16.0-3.fc25
virt-manager-1.4.3-2.fc25
xapps-1.0.4-12.fc25
Details about builds:
================================================================================
atomic-1.19.1-3.fc25 (FEDORA-2017-d610d267e5)
Tool for managing ProjectAtomic systems and containers
--------------------------------------------------------------------------------
Update Information:
Address issue with atomic-registries man page. ---- Addition of run for system
containers ---- Release new version 1.19.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1515783 - man: warning: /usr/share/man/man1/registries.1.md.gz: ignoring
bogus filename
https://bugzilla.redhat.com/show_bug.cgi?id=1515783
[ 2 ] Bug #1513967 - Broken registries man page
https://bugzilla.redhat.com/show_bug.cgi?id=1513967
--------------------------------------------------------------------------------
================================================================================
chromium-native_client-59.0.3071.86-4.20170607gitaac1de2.fc25 (FEDORA-2017-caa89ca45d)
Google Native Client Toolchain
--------------------------------------------------------------------------------
Update Information:
Strip out library provides, they are not useful.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1515559 - [chromium-native_client] unfiltered library provides
https://bugzilla.redhat.com/show_bug.cgi?id=1515559
--------------------------------------------------------------------------------
================================================================================
cinnamon-3.6.5-1.fc25 (FEDORA-2017-805854180b)
Window management and application launching for GNOME
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
cinnamon-control-center-3.6.5-2.fc25 (FEDORA-2017-805854180b)
Utilities to configure the Cinnamon desktop
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
cinnamon-desktop-3.6.2-3.fc25 (FEDORA-2017-805854180b)
Shared code among cinnamon-session, nemo, etc
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
cinnamon-menus-3.6.0-2.fc25 (FEDORA-2017-805854180b)
A menu system for the Cinnamon project
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
cinnamon-screensaver-3.6.1-2.fc25 (FEDORA-2017-805854180b)
Cinnamon Screensaver
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
cinnamon-session-3.6.1-1.fc25 (FEDORA-2017-805854180b)
Cinnamon session manager
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
cinnamon-settings-daemon-3.6.1-1.fc25 (FEDORA-2017-805854180b)
The daemon sharing settings from CINNAMON to GTK+/KDE applications
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
cinnamon-translations-3.6.2-1.fc25 (FEDORA-2017-805854180b)
Translations for Cinnamon and Nemo
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
cjs-3.6.1-1.fc25 (FEDORA-2017-805854180b)
Javascript Bindings for Cinnamon
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
inxi-2.3.45-1.fc25 (FEDORA-2017-ae17395974)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.45.
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-aarch32-1.8.0.152-1.171102.fc25 (FEDORA-2017-351a093bb3)
OpenJDK Runtime Environment in a preview of the OpenJDK AArch32 project
--------------------------------------------------------------------------------
Update Information:
8u152 update
--------------------------------------------------------------------------------
================================================================================
kernel-4.13.15-100.fc25 (FEDORA-2017-c04c80ee2d)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.13.15 update contains a number of important fixes across the tree.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514945 - Enable driver for Behringer BCD 2000 (snd-bcd2000) /
CONFIG_SND_BCD2000
https://bugzilla.redhat.com/show_bug.cgi?id=1514945
--------------------------------------------------------------------------------
================================================================================
libabigail-1.0-1.fc25 (FEDORA-2017-9bbb1210b3)
Set of ABI analysis tools
--------------------------------------------------------------------------------
Update Information:
Add missing %{dist} to release.
--------------------------------------------------------------------------------
================================================================================
man-db-2.7.5-7.fc25 (FEDORA-2017-5c8aaa03b5)
Tools for searching and reading man pages
--------------------------------------------------------------------------------
Update Information:
Allow configuration of **man-db-cache-update** service through `/etc/sysconfig
/man-db`. ---- This update makes file trigger scriptlets run man-db cache
update in a transient service configured to prevent system from reboot/shutdown
until it finishes. So long-running cache update should no longer block dnf
transaction, but at the same time it shouldn't be possible to interrupt the
update prematurely leaving man page index corrupted.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514909 - man-db-2.7.6.1-5.fc26.x86_64 starts man-db-cache-update.service
permanently
https://bugzilla.redhat.com/show_bug.cgi?id=1514909
[ 2 ] Bug #1318058 - postransaction mandb run takes an unreasonably long time
https://bugzilla.redhat.com/show_bug.cgi?id=1318058
--------------------------------------------------------------------------------
================================================================================
mintlocale-1.4.4-1.fc25 (FEDORA-2017-805854180b)
Language selection tool
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
muffin-3.6.0-1.fc25 (FEDORA-2017-805854180b)
Window and compositing manager based on Clutter
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
nemo-3.6.4-1.fc25 (FEDORA-2017-805854180b)
File manager for Cinnamon
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
nemo-extensions-3.6.0-1.fc25 (FEDORA-2017-805854180b)
Extensions for Nemo
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------
================================================================================
nrpe-3.2.1-1.fc25 (FEDORA-2017-c3d78c0cc5)
Host/service/network monitoring agent for Nagios
--------------------------------------------------------------------------------
Update Information:
Update to nrpe-3.2.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1485361 - nrpe does not start automatically on boot
https://bugzilla.redhat.com/show_bug.cgi?id=1485361
--------------------------------------------------------------------------------
================================================================================
openssh-7.4p1-5.fc25 (FEDORA-2017-78f0991378)
An open source implementation of SSH protocol versions 1 and 2
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-15906: Improper write operations in readonly mode
(#1506630)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1506630 - CVE-2017-15906 openssh: Improper write operations in readonly mode
allow for zero-length file creation
https://bugzilla.redhat.com/show_bug.cgi?id=1506630
--------------------------------------------------------------------------------
================================================================================
pungi-4.1.20-3.fc25 (FEDORA-2017-ebe7851cb1)
Distribution compose tool
--------------------------------------------------------------------------------
Update Information:
Fix crash in modular compose. Backport old compose per release type. Backport
date.respin version generator.
--------------------------------------------------------------------------------
================================================================================
python-idstools-0.6.3-1.fc25 (FEDORA-2017-18c9f998c9)
Snort and Suricata Rule and Event Utilities
--------------------------------------------------------------------------------
Update Information:
upstream update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1512909 - python-idstools-0.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512909
--------------------------------------------------------------------------------
================================================================================
radicale-1.1.6-2.fc25 (FEDORA-2017-8990067d8d)
A simple CalDAV (calendar) and CardDAV (contact) server
--------------------------------------------------------------------------------
Update Information:
SELinux rule to allow connection to POP port
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471397 - SELinux denies Radicale from using IMAP authentication
https://bugzilla.redhat.com/show_bug.cgi?id=1471397
--------------------------------------------------------------------------------
================================================================================
sssd-1.16.0-3.fc25 (FEDORA-2017-1524498243)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1494002 - sssd_nss crashed in cache_req_search_domains_next
https://bugzilla.redhat.com/show_bug.cgi?id=1494002
--------------------------------------------------------------------------------
================================================================================
virt-manager-1.4.3-2.fc25 (FEDORA-2017-b797649951)
Desktop tool for managing virtual machines via libvirt
--------------------------------------------------------------------------------
Update Information:
* Fix 'Add Hardware' wizard for non-x86 guests (bz #1505532)
--------------------------------------------------------------------------------
================================================================================
xapps-1.0.4-12.fc25 (FEDORA-2017-805854180b)
Common files for XApp desktop apps
--------------------------------------------------------------------------------
Update Information:
* Rebase to Cinnamon 3.6 series
--------------------------------------------------------------------------------