The following Fedora 25 Security updates need testing:
Age URL
208
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
106
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
46
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b9e4c24094
subversion-1.9.6-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90ad72e684 irssi-1.0.4-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c844713925
qt5-qtwebkit-5.212.0-0.5.alpha2.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-33c8085c5d
groovy18-1.8.9-28.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f941184db1 qemu-2.7.1-7.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9fa2cefa7a
mingw-poppler-0.45.0-3.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-81522ac6d8
nodejs-6.11.1-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-346836a623
phpldapadmin-1.2.3-10.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90cf7a82de
minicom-2.7.1-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2d8a1226d1
libmwaw-0.3.12-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c22a8af4e9
rubygem-rack-cors-0.4.1-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1d46019681 yara-3.6.3-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-86cfcbbae8
libstaroffice-0.0.4-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-534f300508
perl-XML-LibXML-2.0129-2.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-24c64c531a
freeradius-3.0.15-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6c52e2d731
GraphicsMagick-1.3.26-3.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cf1a42722d
librsvg2-2.40.18-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bcf1bc0775
mingw-librsvg2-2.40.18-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-82b5035f76
chicken-4.12.0-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-20cdb2063a
runc-1.0.1-1.gitc5ec254.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b0918e3905
moodle-3.1.7-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8e9d9771c4 krb5-1.14.4-8.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99c0118c0c
memcached-1.4.39-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fe04b06b64
python-tablib-0.11.5-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-735e2ae663
java-1.8.0-openjdk-1.8.0.141-1.b16.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
50
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
28
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0187b2a605
selinux-policy-3.13.1-225.19.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ebeb4bb332
mariadb-10.1.25-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e587cfd70e
supermin-5.1.18-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f941184db1 qemu-2.7.1-7.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6d834aa7e7
breeze-icon-theme-5.36.0-1.fc25 extra-cmake-modules-5.36.0-1.fc25 kf5-5.36.0-1.fc25
kf5-attica-5.36.0-1.fc25 kf5-baloo-5.36.0-1.fc25 kf5-bluez-qt-5.36.0-1.fc25
kf5-frameworkintegration-5.36.0-1.fc25 kf5-kactivities-5.36.0-1.fc25
kf5-kactivities-stats-5.36.0-1.fc25 kf5-kapidox-5.36.0-1.fc25 kf5-karchive-5.36.0-1.fc25
kf5-kauth-5.36.0-1.fc25 kf5-kbookmarks-5.36.0-1.fc25 kf5-kcmutils-5.36.0-1.fc25
kf5-kcodecs-5.36.0-1.fc25 kf5-kcompletion-5.36.0-1.fc25 kf5-kconfig-5.36.0-1.fc25
kf5-kconfigwidgets-5.36.0-1.fc25 kf5-kcoreaddons-5.36.0-1.fc25 kf5-kcrash-5.36.0-1.fc25
kf5-kdbusaddons-5.36.0-1.fc25 kf5-kdeclarative-5.36.0-1.fc25 kf5-kded-5.36.0-1.fc25
kf5-kdelibs4support-5.36.0-1.fc25 kf5-kdesignerplugin-5.36.0-1.fc25
kf5-kdesu-5.36.0-1.fc25 kf5-kdewebkit-5.36.0-1.fc25 kf5-kdnssd-5.36.0-1.fc25
kf5-kdoctools-5.36.0-1.fc25 kf5-kemoticons-5.36.0-1.fc25 kf5-kfilemetadata-5.36.0-1.fc25
kf5-kglobalaccel-5.36.0-1.fc25 kf5-kguiad
dons-5.36.0-2.fc25 kf5-khtml-5.36.0-1.fc25 kf5-ki18n-5.36.0-3.fc25
kf5-kiconthemes-5.36.0-1.fc25 kf5-kidletime-5.36.0-1.fc25 kf5-kimageformats-5.36.0-1.fc25
kf5-kinit-5.36.0-1.fc25 kf5-kio-5.36.0-1.fc25 kf5-kitemmodels-5.36.0-1.fc25
kf5-kitemviews-5.36.0-1.fc25 kf5-kjobwidgets-5.36.0-1.fc25 kf5-kjs-5.36.0-1.fc25
kf5-kjsembed-5.36.0-1.fc25 kf5-kmediaplayer-5.36.0-1.fc25 kf5-knewstuff-5.36.0-3.fc25
kf5-knotifications-5.36.0-1.fc25 kf5-knotifyconfig-5.36.0-1.fc25
kf5-kpackage-5.36.0-1.fc25 kf5-kparts-5.36.0-1.fc25 kf5-kpeople-5.36.0-1.fc25
kf5-kplotting-5.36.0-1.fc25 kf5-kpty-5.36.0-1.fc25 kf5-kross-5.36.0-1.fc25
kf5-krunner-5.36.0-1.fc25 kf5-kservice-5.36.0-1.fc25 kf5-ktexteditor-5.36.0-1.fc25
kf5-ktextwidgets-5.36.0-1.fc25 kf5-kunitconversion-5.36.0-1.fc25 kf5-kwallet-5.36.0-1.fc25
kf5-kwayland-5.36.0-1.fc25 kf5-kwidgetsaddons-5.36.0-1.fc25
kf5-kwindowsystem-5.36.0-1.fc25 kf5-kxmlgui-5.36.0-1.fc25 kf5-kxmlrpcclient-5.36.0-1.fc25
kf5-modemmanager-qt-5.36.0-1.fc25 kf5-networkmanager-qt
-5.36.0-1.fc25 kf5-plasma-5.36.0-1.fc25 kf5-solid-5.36.0-1.fc25 kf5-sonnet-5.36.0-1.fc25
kf5-syntax-highlighting-5.36.0-1.fc25 kf5-threadweaver-5.36.0-1.fc25
oxygen-icon-theme-5.36.0-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-77b3ddeaaa
net-snmp-5.7.3-14.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2312ac9d9
pungi-4.1.17-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f55b21a811
pango-1.40.7-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f21d307d97 nspr-4.15.0-1.fc25
nss-3.31.0-1.1.fc25 nss-softokn-3.31.0-1.0.fc25 nss-util-3.31.0-1.0.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b67562744
ca-certificates-2017.2.16-1.0.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-56704c88b6
wpa_supplicant-2.6-3.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2ee31a6998
gdk-pixbuf2-2.36.7-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cf1a42722d
librsvg2-2.40.18-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7a6144ef24 curl-7.51.0-8.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7fd15754fd
libdrm-2.4.82-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3b5470b48e
gtk3-3.22.17-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c466a496c1
libsolv-0.6.28-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-167c5d63e1
appstream-data-25-20.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e3b6342bde
gnupg-1.4.22-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8e9d9771c4 krb5-1.14.4-8.fc25
The following builds have been pushed to Fedora 25 updates-testing
appstream-data-25-20.fc25
arduino-1.6.6-2.fc25
arduino-builder-1.0.5-6.fc25
buildah-0.3-2.gitb9b2a8a.fc25
bzflag-2.4.10-1.fc25
cargo-0.20.0-1.fc25
chicken-4.12.0-3.fc25
clinfo-2.2.17.06.14-1.fc25
criu-3.3-2.fc25
cscppc-1.3.3-1.fc25
csmock-2.0.4-1.fc25
cswrap-1.3.4-2.fc25
domoticz-3.5877-1.fc25
freexl-1.0.3-1.fc25
gbrainy-2.3.2-1.fc25
gdb-exploitable-1.32-1.20170717git35b742d.fc25
geany-1.31-1.fc25
geany-plugins-1.31-1.fc25
gnupg-1.4.22-1.fc25
golang-github-cznic-lex-0-0.1.20170112.git68050f5.fc25
gsettings-qt-0-0.2.20170715bzr83.fc25
gsmartcontrol-1.0.2-1.fc25
hdf-4.2.13-1.fc25
hydra-8.6-1.fc25
icedtea-web-1.7-1.fc25
java-1.8.0-openjdk-1.8.0.141-1.b16.fc25
jwm-2.3.7-1.fc25
krb5-1.14.4-8.fc25
libsolv-0.6.28-2.fc25
lilypond-2.19.64-1.fc25
lilypond-doc-2.19.64-1.fc25
mate-panel-1.18.4-1.fc25
mate-session-manager-1.18.1-1.fc25
mediaconch-17.06-3.fc25
memcached-1.4.39-1.fc25
moodle-3.1.7-1.fc25
openmpi-1.10.7-1.fc25
perl-CPAN-Perl-Releases-3.30-1.fc25
perl-Module-CoreList-5.20170720-1.fc25
python-port-for-0.4-1.fc25
python-tablib-0.11.5-1.fc25
qotd-0.11.3-2.fc25
runc-1.0.1-1.gitc5ec254.fc25
rust-1.19.0-1.fc25
rwho-0.17-57.fc25
skopeo-0.1.23-1.git1bbd87f.fc25
standard-test-roles-2.0-1.fc25
sxhkd-0.5.8-1.fc25
vulkan-1.0.54.0-2.fc25
worker-3.11.0-1.fc25
xfce4-clipman-plugin-1.4.2-1.fc25
Details about builds:
================================================================================
appstream-data-25-20.fc25 (FEDORA-2017-167c5d63e1)
Fedora AppStream metadata
--------------------------------------------------------------------------------
Update Information:
New metadata version
--------------------------------------------------------------------------------
================================================================================
arduino-1.6.6-2.fc25 (FEDORA-2017-c33ec5464a)
An IDE for Arduino-compatible electronics prototyping platforms
--------------------------------------------------------------------------------
Update Information:
This update fixes all the known packaging bugs that affected usage on F25 and
F26. After it will go to stable, we will work for getting the Arduino packages
updated to the latest upstream version. ---- initial package build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1444550 - Crashes at startup with "java.lang.UnsatisfiedLinkError:
Can't load library: /usr/lib/libastyle-2.05.so"
https://bugzilla.redhat.com/show_bug.cgi?id=1444550
[ 2 ] Bug #1316315 - arduino-1.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1316315
[ 3 ] Bug #1471729 - arduino fails to compile
https://bugzilla.redhat.com/show_bug.cgi?id=1471729
[ 4 ] Bug #1421502 - Arduino GUI fails to run arduino-builder (wrong path to
executable)
https://bugzilla.redhat.com/show_bug.cgi?id=1421502
[ 5 ] Bug #1415493 - [abrt] arduino-1.6.4-10.fc25: Uncaught exception
java.lang.NullPointerException in method java.util.TimerThread.run()
https://bugzilla.redhat.com/show_bug.cgi?id=1415493
[ 6 ] Bug #1394193 - Review Request: arduino-builder - A command line tool for compiling
Arduino sketches
https://bugzilla.redhat.com/show_bug.cgi?id=1394193
--------------------------------------------------------------------------------
================================================================================
arduino-builder-1.0.5-6.fc25 (FEDORA-2017-c33ec5464a)
A command line tool for compiling Arduino sketches
--------------------------------------------------------------------------------
Update Information:
This update fixes all the known packaging bugs that affected usage on F25 and
F26. After it will go to stable, we will work for getting the Arduino packages
updated to the latest upstream version. ---- initial package build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1444550 - Crashes at startup with "java.lang.UnsatisfiedLinkError:
Can't load library: /usr/lib/libastyle-2.05.so"
https://bugzilla.redhat.com/show_bug.cgi?id=1444550
[ 2 ] Bug #1316315 - arduino-1.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1316315
[ 3 ] Bug #1471729 - arduino fails to compile
https://bugzilla.redhat.com/show_bug.cgi?id=1471729
[ 4 ] Bug #1421502 - Arduino GUI fails to run arduino-builder (wrong path to
executable)
https://bugzilla.redhat.com/show_bug.cgi?id=1421502
[ 5 ] Bug #1415493 - [abrt] arduino-1.6.4-10.fc25: Uncaught exception
java.lang.NullPointerException in method java.util.TimerThread.run()
https://bugzilla.redhat.com/show_bug.cgi?id=1415493
[ 6 ] Bug #1394193 - Review Request: arduino-builder - A command line tool for compiling
Arduino sketches
https://bugzilla.redhat.com/show_bug.cgi?id=1394193
--------------------------------------------------------------------------------
================================================================================
buildah-0.3-2.gitb9b2a8a.fc25 (FEDORA-2017-49933a8b18)
A command line tool used for creating OCI Images
--------------------------------------------------------------------------------
Update Information:
Add support for OCI 1.0 Images and runtime spec. OCI runtime and images have
been standardized. This version of buildah will support using both. ---- New
version of buildah with lots of issues fixed.
--------------------------------------------------------------------------------
================================================================================
bzflag-2.4.10-1.fc25 (FEDORA-2017-0def6aea1e)
3D multi-player tank battle game
--------------------------------------------------------------------------------
Update Information:
2.4.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442748 - update 2.4.10
https://bugzilla.redhat.com/show_bug.cgi?id=1442748
--------------------------------------------------------------------------------
================================================================================
cargo-0.20.0-1.fc25 (FEDORA-2017-eada616b3e)
Rust's package manager and build tool
--------------------------------------------------------------------------------
Update Information:
New versions of Rust and Cargo -- see the release notes for [1.19](https://blog
.rust-lang.org/2017/07/20/Rust-1.19.html).
--------------------------------------------------------------------------------
================================================================================
chicken-4.12.0-3.fc25 (FEDORA-2017-82b5035f76)
A practical and portable Scheme system
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2017-11343
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471816 - CVE-2017-11343 chicken: Predictable symbol table due to using
default libc seed in PRNG
https://bugzilla.redhat.com/show_bug.cgi?id=1471816
--------------------------------------------------------------------------------
================================================================================
clinfo-2.2.17.06.14-1.fc25 (FEDORA-2017-20ff7d9a5b)
Enumerate OpenCL platforms and devices
--------------------------------------------------------------------------------
Update Information:
Update to latest release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473921 - clinfo-2.2.17.06.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473921
--------------------------------------------------------------------------------
================================================================================
criu-3.3-2.fc25 (FEDORA-2017-654d5f69f6)
Tool for Checkpoint/Restore in User-space
--------------------------------------------------------------------------------
Update Information:
Added patches to handle changes in glibc
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1472504 - criu-3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1472504
--------------------------------------------------------------------------------
================================================================================
cscppc-1.3.3-1.fc25 (FEDORA-2017-eebf193330)
A compiler wrapper that runs cppcheck in background
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream bugfix release
--------------------------------------------------------------------------------
================================================================================
csmock-2.0.4-1.fc25 (FEDORA-2017-eebf193330)
A mock wrapper for Static Analysis tools
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream bugfix release
--------------------------------------------------------------------------------
================================================================================
cswrap-1.3.4-2.fc25 (FEDORA-2017-eebf193330)
Generic compiler wrapper
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream bugfix release
--------------------------------------------------------------------------------
================================================================================
domoticz-3.5877-1.fc25 (FEDORA-2017-c137106664)
Open source Home Automation System
--------------------------------------------------------------------------------
Update Information:
New package.
http://domoticz.com/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1468768 - Review Request: domoticz - Open source Home Automation System
https://bugzilla.redhat.com/show_bug.cgi?id=1468768
--------------------------------------------------------------------------------
================================================================================
freexl-1.0.3-1.fc25 (FEDORA-2017-d66b81c4a6)
Library to extract data from within an Excel spreadsheet
--------------------------------------------------------------------------------
Update Information:
"It recently emerged that FreeXL 1.0.2 could be unable to parse some specific
XLS document [BIFF8 format: Excel 1997-2003]. The issue was usually related to
spreadsheets containing many long text strings in some Asian language."
--------------------------------------------------------------------------------
================================================================================
gbrainy-2.3.2-1.fc25 (FEDORA-2017-674a1637d1)
A brain teaser game and trainer to keep your brain trained
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream version 2.3.2
--------------------------------------------------------------------------------
================================================================================
gdb-exploitable-1.32-1.20170717git35b742d.fc25 (FEDORA-2017-131b0616b8)
GDB extension for exploitability
--------------------------------------------------------------------------------
Update Information:
This is the initial packaging release for gdb-explotable.
--------------------------------------------------------------------------------
================================================================================
geany-1.31-1.fc25 (FEDORA-2017-0db87c5721)
A fast and lightweight IDE using GTK2
--------------------------------------------------------------------------------
Update Information:
This update brings the new Geany 1.31 and Geany-Plugins 1.31 to a Fedora box
near you. The hilights of Geany 1.31 ====================== - Fix crash when
a plugin calls plugin_set_key_group() more than once (Ji���� Techet). - Fix
updating statusbar after applying indentation detection. - Fix converting color
to hex for insertion in the Color Chooser dialog (Vasiliy Faronov). - Update
Matlab, Haxe, Arduino, HTML, C# and CMake filetypes. - Updated translations:
ca, id, ja, kk, lt, ru. Release Notes:
http://www.geany.org/Documentation/ReleaseNotes ChangeLog:
http://www.geany.org/Documentation/ChangeLog The hilights of Geany-Plugins 1.31
============================ - New plugin: keyrecord - ProjectOrganizer: Fix a
crash by ensuring project is open before trying to expand the tree -
GitChangebar: Fix spurious line wrapping - Updated translations: de, es, pt
ChangeLog/NEWS:
https://github.com/geany/geany-plugins/releases/tag/1.31.0
--------------------------------------------------------------------------------
================================================================================
geany-plugins-1.31-1.fc25 (FEDORA-2017-0db87c5721)
Plugins for Geany
--------------------------------------------------------------------------------
Update Information:
This update brings the new Geany 1.31 and Geany-Plugins 1.31 to a Fedora box
near you. The hilights of Geany 1.31 ====================== - Fix crash when
a plugin calls plugin_set_key_group() more than once (Ji���� Techet). - Fix
updating statusbar after applying indentation detection. - Fix converting color
to hex for insertion in the Color Chooser dialog (Vasiliy Faronov). - Update
Matlab, Haxe, Arduino, HTML, C# and CMake filetypes. - Updated translations:
ca, id, ja, kk, lt, ru. Release Notes:
http://www.geany.org/Documentation/ReleaseNotes ChangeLog:
http://www.geany.org/Documentation/ChangeLog The hilights of Geany-Plugins 1.31
============================ - New plugin: keyrecord - ProjectOrganizer: Fix a
crash by ensuring project is open before trying to expand the tree -
GitChangebar: Fix spurious line wrapping - Updated translations: de, es, pt
ChangeLog/NEWS:
https://github.com/geany/geany-plugins/releases/tag/1.31.0
--------------------------------------------------------------------------------
================================================================================
gnupg-1.4.22-1.fc25 (FEDORA-2017-e3b6342bde)
A GNU utility for secure communication and data storage
--------------------------------------------------------------------------------
Update Information:
- Removed workaround for ARM build problems fixed by upstream. - Switch to using
%autosetup macro - Update Source to use https instead of ftp - New upstream
v1.4.22 - build: Avoid check gpg --version during make distcheck. (wk) - indent:
Fix indentation of an if block. (wk) - gpg: Fix memory leak. (gniibe) - rsa:
Reduce secmem pressure. (gniibe) - rsa: Allow different build directory.
(gniibe) - rsa: Add exponent blinding. (mb) - mpi: Minor fix for mpi_pow.
(gniibe) - mpi: Same computation for square and multiply for mpi_pow. (gniibe) -
mpi: Simplify mpi_powm. (gniibe) - mpi: Fix ARM assembler in longlong.h.
(marcus.brinkmann) (#1424619) - g10: Fix secmem leak. (ineiev) - gpg: Fix
exporting of zero length user ID packets. (wk) - tools: Fix option parsing for
gpg-zip. (neal)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450641 - FTBFS: Test suite fails on arm
https://bugzilla.redhat.com/show_bug.cgi?id=1450641
[ 2 ] Bug #1424619 - gnupg tests fail when built with -O2 on armv7hl
https://bugzilla.redhat.com/show_bug.cgi?id=1424619
--------------------------------------------------------------------------------
================================================================================
golang-github-cznic-lex-0-0.1.20170112.git68050f5.fc25 (FEDORA-2017-618a7ca4cb)
Support for (f)lex-like tool on .l source files
--------------------------------------------------------------------------------
Update Information:
Initial package for fedora.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465884 - Review Request: golang-github-cznic-lex - Support for (f)lex-like
tool on .l source files
https://bugzilla.redhat.com/show_bug.cgi?id=1465884
--------------------------------------------------------------------------------
================================================================================
gsettings-qt-0-0.2.20170715bzr83.fc25 (FEDORA-2017-dd8c7632fe)
Qt/QML bindings for GSettings
--------------------------------------------------------------------------------
Update Information:
Add gsettings-qt
--------------------------------------------------------------------------------
================================================================================
gsmartcontrol-1.0.2-1.fc25 (FEDORA-2017-9032ed5aa0)
Graphical user interface for smartctl
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.2.
--------------------------------------------------------------------------------
================================================================================
hdf-4.2.13-1.fc25 (FEDORA-2017-e0e7a56ee8)
A general purpose library and file format for storing scientific data
--------------------------------------------------------------------------------
Update Information:
Update to 4.2.13
--------------------------------------------------------------------------------
================================================================================
hydra-8.6-1.fc25 (FEDORA-2017-67b5d1a9a6)
Very fast network log-on cracker
--------------------------------------------------------------------------------
Update Information:
Update to 8.6 (rhbz #1473874)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473874 - hydra-8.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473874
--------------------------------------------------------------------------------
================================================================================
icedtea-web-1.7-1.fc25 (FEDORA-2017-bd4238e91a)
Additional Java components for OpenJDK - Java browser plug-in and Web Start
implementation
--------------------------------------------------------------------------------
Update Information:
updated to itw 1.7, see ntoes:
http://mail.openjdk.java.net/pipermail/distro-
pkg-dev/2017-July/038476.html
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-1.8.0.141-1.b16.fc25 (FEDORA-2017-735e2ae663)
OpenJDK Runtime Environment
--------------------------------------------------------------------------------
Update Information:
Updated to latest security fxes.
http://www.oracle.com/technetwork/security-
advisory/cpujul2017-3236622.html - search Java SE Risk Matrix (yah, href is no
longer an option obviously...) Disabled autokarmatism as I need to run JDK
testsuite over weekend. ---- restored support for system NSS (commented out in
java.security by default)
--------------------------------------------------------------------------------
================================================================================
jwm-2.3.7-1.fc25 (FEDORA-2017-9832703079)
Joe's Window Manager
--------------------------------------------------------------------------------
Update Information:
- Made the modifier for dragging a window by clicking its contents configurable
via the mask attribute of the MoveMode tag (issue #324). - Added group options
for setting initial window position and size (issues #79 and #348). - Added the
clicktitle and sloppytitle options for FocusModel, which cause windows to be
raised only when the title or border of the window is clicked (issue #286). -
Fixed scaling of icons in the task bar (issue #328). - Added the decorations
attribute to TaskListStyle to allow setting different decorations on tray
buttons and task list buttons (issue #330). - Fixed a bug with the nextstacked
key binding (issue #335). - Improved support for 3-digit hexcode colors (issue
#336). - Better aerosnap support on multiple monitors (issue #342). - Fixed a
bug with multiple separators in menus (issue #343). - Fixed a bug with blank
trays when there are full screen windows (issue #356). - Added the spacing
attribute to Dock to allow adding space between icons in the dock (issue #357).
- Added support for dynamic root menus via the dynamic attribute of RootMenu
(issue #221). - Fixed an issue with 32-bit TrueColor visuals on some platforms.
- Fixed an issue with menus and multiple monitors (issue #384). - It is (once
again) possible to disable desktop switching by scrolling on the desktop using
an empty root menu (issue #366).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473873 - jwm-2.3.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473873
--------------------------------------------------------------------------------
================================================================================
krb5-1.14.4-8.fc25 (FEDORA-2017-8e9d9771c4)
The Kerberos network authentication system
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2017-11368 (remote triggerable assertion failure in krb5kdc)
--------------------------------------------------------------------------------
================================================================================
libsolv-0.6.28-2.fc25 (FEDORA-2017-c466a496c1)
Package dependency solver
--------------------------------------------------------------------------------
Update Information:
Fix handling multiple obsoletes at the same time
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470922 - If lz4 update is pending, dnf incorrectly updates NetworkManager
https://bugzilla.redhat.com/show_bug.cgi?id=1470922
--------------------------------------------------------------------------------
================================================================================
lilypond-2.19.64-1.fc25 (FEDORA-2017-4f94532473)
A typesetting system for music notation
--------------------------------------------------------------------------------
Update Information:
2.19.64
--------------------------------------------------------------------------------
================================================================================
lilypond-doc-2.19.64-1.fc25 (FEDORA-2017-4f94532473)
HTML documentation for LilyPond
--------------------------------------------------------------------------------
Update Information:
2.19.64
--------------------------------------------------------------------------------
================================================================================
mate-panel-1.18.4-1.fc25 (FEDORA-2017-ea095fcbc3)
MATE Desktop panel and applets
--------------------------------------------------------------------------------
Update Information:
- update to 1.18.4 ---- - fix Notification area icons disappears, - when apply
a background image to the panel -
https://github.com/mate-desktop/mate-
panel/issues/585 - fix applet crashes on transparent user-set panel bg -
https://github.com/mate-desktop/mate-panel/issues/604 -
https://github.com/mate-
desktop/mate-panel/issues/369
--------------------------------------------------------------------------------
================================================================================
mate-session-manager-1.18.1-1.fc25 (FEDORA-2017-e22c908d2a)
MATE Desktop session manager
--------------------------------------------------------------------------------
Update Information:
- update to 1.18.1
--------------------------------------------------------------------------------
================================================================================
mediaconch-17.06-3.fc25 (FEDORA-2017-cb6c829d5b)
Most relevant technical and tag data for video and audio files (CLI)
--------------------------------------------------------------------------------
Update Information:
Fist release of mediaconch in Fedora repo.
--------------------------------------------------------------------------------
================================================================================
memcached-1.4.39-1.fc25 (FEDORA-2017-99c0118c0c)
High Performance, Distributed Memory Object Cache
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.39, which includes a security fix for CVE-2017-9951
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471970 - CVE-2017-9951 memcached: Heap-based buffer over-read in
try_read_command function (incomplete fix for CVE-2016-8705)
https://bugzilla.redhat.com/show_bug.cgi?id=1471970
--------------------------------------------------------------------------------
================================================================================
moodle-3.1.7-1.fc25 (FEDORA-2017-b0918e3905)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Fix for multiple CVEs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1472243 - CVE-2017-2642 CVE-2017-7532 moodle: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1472243
--------------------------------------------------------------------------------
================================================================================
openmpi-1.10.7-1.fc25 (FEDORA-2017-682df1f704)
Open Message Passing Interface
--------------------------------------------------------------------------------
Update Information:
Update to 1.10.7 - Fix bug in TCP BTL that impacted performance on 10GbE (and
faster) networks by not adjusting the TCP send/recv buffer sizes and using
system default values - Add missing MPI_AINT_ADD and MPI_AINT_DIFF function
delcarations in mpif.h - Fixed time reported by MPI_WTIME; it was previously
reported as dependent upon the CPU frequency. - Fix a bug in the handling of
MPI_TYPE_CREATE_DARRAY in MPI_(R)(GET_)ACCUMULATE - Fix openib memory
registration limit calculation - Add missing MPI_T_PVAR_SESSION_NULL in mpi.h -
Fix "make distcheck" when using external hwloc and/or libevent packages - Add
latest ConnectX-5 vendor part id to OpenIB device params - Fix race condition in
the UCX PML - Fix signal handling for rsh launcher - Fix Fortran compilation
errors by removing MPI_SIZEOF in the Fortran interfaces when the compiler does
not support it - Fixes for the pre-ignore-TKR "mpi" Fortran module
implementation (i.e., for older Fortran compilers -- these problems did not
exist in the "mpi" module implementation for modern Fortran compilers): -
Add PMPI_* interfaces - Fix typo in MPI_FILE_WRITE_AT_ALL_BEGIN interface name
- Fix typo in MPI_FILE_READ_ORDERED_BEGIN interface name - Fixed the type of
MPI_DISPLACEMENT_CURRENT in all Fortran interfaces to be an
INTEGER(KIND=MPI_OFFSET_KIND). - Fixed typos in MPI_INFO_GET_* man pages.
Thanks to Nicolas Joly for the patch - Fix typo bugs in wrapper compiler
script
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473440 - Unreliable result from MPI_Wtime in openmpi-1.10.5
https://bugzilla.redhat.com/show_bug.cgi?id=1473440
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.30-1.fc25 (FEDORA-2017-4466a1b5f6)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version ---- Updated to the latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473459 - perl-CPAN-Perl-Releases-3.30 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473459
[ 2 ] Bug #1471440 - perl-CPAN-Perl-Releases-3.28 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471440
--------------------------------------------------------------------------------
================================================================================
perl-Module-CoreList-5.20170720-1.fc25 (FEDORA-2017-4ca0f92271)
What modules are shipped with versions of perl
--------------------------------------------------------------------------------
Update Information:
This release brings data about Perl v5.27.2. ---- This release brings data
about Perl 5.22.4 and 5.24.2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473468 - perl-Module-CoreList-5.20170720 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473468
[ 2 ] Bug #1471443 - perl-Module-CoreList-5.20170715 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471443
--------------------------------------------------------------------------------
================================================================================
python-port-for-0.4-1.fc25 (FEDORA-2017-dc0961669c)
Utility that helps with local TCP ports management
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473057 - python-port-for-0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473057
--------------------------------------------------------------------------------
================================================================================
python-tablib-0.11.5-1.fc25 (FEDORA-2017-fe04b06b64)
Format agnostic tabular data library (XLS, JSON, YAML, CSV)
--------------------------------------------------------------------------------
Update Information:
Latest upstream, including the `yaml.safe_load` fix for CVE-2017-2810.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1461299 - CVE-2017-2810 python-tablib: Databook loading functionality allows
command execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1461299
--------------------------------------------------------------------------------
================================================================================
qotd-0.11.3-2.fc25 (FEDORA-2017-a0f0f3a969)
A simple and lightweight Quote of the Day daemon
--------------------------------------------------------------------------------
Update Information:
Add missing systemd scriplets, this was missed in review.
--------------------------------------------------------------------------------
================================================================================
runc-1.0.1-1.gitc5ec254.fc25 (FEDORA-2017-20cdb2063a)
CLI for running Open Containers
--------------------------------------------------------------------------------
Update Information:
V1.0 final release ---- bump runc commit ---- Update to latest release
candidate
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1392442 - runc bash completions are installed in the wrong place.
https://bugzilla.redhat.com/show_bug.cgi?id=1392442
[ 2 ] Bug #1342707 - runc-v1.0.0-rc1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1342707
[ 3 ] Bug #1460148 - dependency on criu broken for s390x
https://bugzilla.redhat.com/show_bug.cgi?id=1460148
[ 4 ] Bug #1412238 - CVE-2016-9962 runc: docker: insecure opening of file-descriptor
allows privilege escalation [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1412238
--------------------------------------------------------------------------------
================================================================================
rust-1.19.0-1.fc25 (FEDORA-2017-eada616b3e)
The Rust Programming Language
--------------------------------------------------------------------------------
Update Information:
New versions of Rust and Cargo -- see the release notes for [1.19](https://blog
.rust-lang.org/2017/07/20/Rust-1.19.html).
--------------------------------------------------------------------------------
================================================================================
rwho-0.17-57.fc25 (FEDORA-2017-e91f4d5bcf)
Displays who is logged in to local network machines
--------------------------------------------------------------------------------
Update Information:
Start rwhod after the network is properly configured
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473089 - rwhod sends out info as 'localhost' if using DHCP
https://bugzilla.redhat.com/show_bug.cgi?id=1473089
--------------------------------------------------------------------------------
================================================================================
skopeo-0.1.23-1.git1bbd87f.fc25 (FEDORA-2017-2449d43b2e)
Inspect Docker images and repositories on registries
--------------------------------------------------------------------------------
Update Information:
Added support for OCI 1.0 Image Spec
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473479 - skopeo-v0.1.23 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473479
--------------------------------------------------------------------------------
================================================================================
standard-test-roles-2.0-1.fc25 (FEDORA-2017-0643285c11)
Standard Test Interface Ansible roles
--------------------------------------------------------------------------------
Update Information:
Sync standard-test-roles with latest upstream release.
--------------------------------------------------------------------------------
================================================================================
sxhkd-0.5.8-1.fc25 (FEDORA-2017-0fe63e931c)
Simple X hotkey daemon
--------------------------------------------------------------------------------
Update Information:
Update to 0.5.8 (#1471313) ---- Initial release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471313 - sxhkd-0.5.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471313
[ 2 ] Bug #1377038 - Review Request: sxhkd - Simple X hotkey daemon
https://bugzilla.redhat.com/show_bug.cgi?id=1377038
--------------------------------------------------------------------------------
================================================================================
vulkan-1.0.54.0-2.fc25 (FEDORA-2017-f12360fd9d)
Vulkan loader and validation layers
--------------------------------------------------------------------------------
Update Information:
- Update to 1.0.54.0 release - Use build requires cmake3 for epel build - Build
layers for epel - Cleanup cmake commands
--------------------------------------------------------------------------------
================================================================================
worker-3.11.0-1.fc25 (FEDORA-2017-44aa25946d)
File Manager for the X11
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream version 3.11.0 fixes rhbz #1473062
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473062 - worker-3.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473062
--------------------------------------------------------------------------------
================================================================================
xfce4-clipman-plugin-1.4.2-1.fc25 (FEDORA-2017-be062acd75)
Clipboard manager plugin for the Xfce panel
--------------------------------------------------------------------------------
Update Information:
- Update to 1.4.2, fixes rhbz#1404980 - Port to GtkApplication (this should help
with keyboard shortcut issues) - Translation updates: Catalan, Croatian, Danish,
Dutch (Flemish), Greek, Indonesian, Italian, Kazakh, Lithuanian, Norwegian
Bokmal, Serbian, Thai
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1404980 - A global keyboard shortcut to invoke XFCE4 Clipman entries
doesn't work
https://bugzilla.redhat.com/show_bug.cgi?id=1404980
--------------------------------------------------------------------------------