The following Fedora 25 Security updates need testing:
Age URL
217
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
116
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
55
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90ad72e684 irssi-1.0.4-1.fc25
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c844713925
qt5-qtwebkit-5.212.0-0.5.alpha2.fc25
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-33c8085c5d
groovy18-1.8.9-28.fc25
15
https://bodhi.fedoraproject.org/updates/FEDORA-2017-86cfcbbae8
libstaroffice-0.0.4-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-82b5035f76
chicken-4.12.0-3.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99c0118c0c
memcached-1.4.39-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fe04b06b64
python-tablib-0.11.5-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b9e4c24094
subversion-1.9.6-2.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2ec83f11c1 glpi-9.1.6-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4b4154d6f6
open-vm-tools-10.1.5-5.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7c039552fa
community-mysql-5.7.19-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2232fe97b4
docker-distribution-2.6.2-1.git48294d9.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-01ce69c6bf rt-4.4.1-9.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a1fe6d2b86
nasm-2.13.01-3.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-56b8f257af
sscep-0.6.1-5.20160525git2052ee1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7faa3d2e78 ruby-2.3.3-62.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ed31e1f941
remmina-1.2.0-0.39.20170724git0387ee0.fc25 freerdp-2.0.0-31.20170724gitf8c9f43.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4ede204115
python-dbusmock-0.11.1-6.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-85eb9f7a36
supervisor-3.2.4-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-127e76d78d
cacti-1.1.16-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-be3df4fe14
java-1.8.0-openjdk-aarch32-1.8.0.141-1.170721.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
59
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
15
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2312ac9d9
pungi-4.1.17-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b67562744
ca-certificates-2017.2.16-1.0.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-91b708222e sssd-1.15.3-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3c4c65666b vim-8.0.823-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-47ab4eb28e
dbus-1.11.16-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6ba3c7e68e pcre2-10.23-9.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-14f47083d7 gdisk-1.0.3-2.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bda5c103f3 file-5.29-7.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f6246f77bc
hwdata-0.303-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bed0d7ff15
libidn2-2.0.3-1.fc25
The following builds have been pushed to Fedora 25 updates-testing
btrbk-0.25.1-1.fc25
bumpversion-0.5.5-1.fc25
debbuild-17.5.0-1.fc25
diorite-4.6.0-1.fc25
gala-0.3.0-0.git119.c7d5.1.fc25
globus-ftp-control-7.8-1.fc25
globus-gram-client-13.19-1.fc25
globus-gridftp-server-control-5.1-1.fc25
globus-gssapi-gsi-12.17-3.fc25
golang-github-cznic-ql-1.1.0-1.20170522.gitba9eea9.fc25
hwdata-0.303-1.fc25
inxi-2.3.31-1.fc25
java-1.8.0-openjdk-aarch32-1.8.0.141-1.170721.fc25
libapreq2-2.13-27.fc25
libidn2-2.0.3-1.fc25
libyui-gtk-2.44.9-8.fc25
libyui-ncurses-2.48.3-1.fc25
meson-0.41.2-1.fc25
nas-1.9.4-8.fc25
nuvola-app-amazon-cloud-player-5.4-9.fc25
nuvola-app-bandcamp-2.2-3.fc25
nuvolaruntime-4.6.0-1.fc25
nuvolasdk-4.6.0-1.fc25
pcsc-lite-asekey-3.7-4.fc25
perl-B-Hooks-OP-Check-EntersubForCV-0.10-1.fc25
perl-DynaLoader-Functions-0.003-1.fc25
perl-Perl4-CoreLibs-0.004-1.fc25
timeline-1.15.0-1.fc25
virt-what-1.18-1.fc25
wingpanel-indicator-notifications-2.0.2-1.fc25
Details about builds:
================================================================================
btrbk-0.25.1-1.fc25 (FEDORA-2017-7ba2236372)
Tool for creating snapshots and remote backups of btrfs sub-volumes
--------------------------------------------------------------------------------
Update Information:
Update to 0.25.1 (#1476626)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476626 - btrbk-0.25.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476626
--------------------------------------------------------------------------------
================================================================================
bumpversion-0.5.5-1.fc25 (FEDORA-2017-ff0f1d5444)
Version-bump your software with a single command
--------------------------------------------------------------------------------
Update Information:
temporarily switched upstream to
https://github.com/c4urself/bump2version
--------------------------------------------------------------------------------
================================================================================
debbuild-17.5.0-1.fc25 (FEDORA-2017-3d32bab22c)
Build Debian-compatible .deb packages from RPM .spec files
--------------------------------------------------------------------------------
Update Information:
Rebase to 17.5.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1372898 - debbuild-17.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1372898
--------------------------------------------------------------------------------
================================================================================
diorite-4.6.0-1.fc25 (FEDORA-2017-3f4da05658)
Utility and widget library for Nuvola Player
--------------------------------------------------------------------------------
Update Information:
Update to 4.6.0-1
--------------------------------------------------------------------------------
================================================================================
gala-0.3.0-0.git119.c7d5.1.fc25 (FEDORA-2017-997dcc51da)
Gala window manager
--------------------------------------------------------------------------------
Update Information:
Bump to upstream commit c7d5.
--------------------------------------------------------------------------------
================================================================================
globus-ftp-control-7.8-1.fc25 (FEDORA-2017-b21df64a64)
Globus Toolkit - GridFTP Control Library
--------------------------------------------------------------------------------
Update Information:
globus-ftp-control: * Fix hang/failure when using udt driver with local client
transfer globus-gram-client: * GT6 update globus-gridftp-server-control: *
Fix mem error on empty mlsc responses globus-gssapi-gsi: * Put back use of
SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS for compatibility with Bestman
--------------------------------------------------------------------------------
================================================================================
globus-gram-client-13.19-1.fc25 (FEDORA-2017-b21df64a64)
Globus Toolkit - GRAM Client Library
--------------------------------------------------------------------------------
Update Information:
globus-ftp-control: * Fix hang/failure when using udt driver with local client
transfer globus-gram-client: * GT6 update globus-gridftp-server-control: *
Fix mem error on empty mlsc responses globus-gssapi-gsi: * Put back use of
SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS for compatibility with Bestman
--------------------------------------------------------------------------------
================================================================================
globus-gridftp-server-control-5.1-1.fc25 (FEDORA-2017-b21df64a64)
Globus Toolkit - Globus GridFTP Server Library
--------------------------------------------------------------------------------
Update Information:
globus-ftp-control: * Fix hang/failure when using udt driver with local client
transfer globus-gram-client: * GT6 update globus-gridftp-server-control: *
Fix mem error on empty mlsc responses globus-gssapi-gsi: * Put back use of
SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS for compatibility with Bestman
--------------------------------------------------------------------------------
================================================================================
globus-gssapi-gsi-12.17-3.fc25 (FEDORA-2017-b21df64a64)
Globus Toolkit - GSSAPI library
--------------------------------------------------------------------------------
Update Information:
globus-ftp-control: * Fix hang/failure when using udt driver with local client
transfer globus-gram-client: * GT6 update globus-gridftp-server-control: *
Fix mem error on empty mlsc responses globus-gssapi-gsi: * Put back use of
SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS for compatibility with Bestman
--------------------------------------------------------------------------------
================================================================================
golang-github-cznic-ql-1.1.0-1.20170522.gitba9eea9.fc25 (FEDORA-2017-1cde795c7a)
Embedded SQL database written in Go
--------------------------------------------------------------------------------
Update Information:
Initial package for fedora. This is the last missing dependency of syncthing.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431748 - Review Request: golang-github-cznic-ql - Embedded SQL database
written in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1431748
--------------------------------------------------------------------------------
================================================================================
hwdata-0.303-1.fc25 (FEDORA-2017-f6246f77bc)
Hardware identification and configuration data
--------------------------------------------------------------------------------
Update Information:
Updated pci, usb and vendor ids.
--------------------------------------------------------------------------------
================================================================================
inxi-2.3.31-1.fc25 (FEDORA-2017-03edd399d7)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.31.
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-aarch32-1.8.0.141-1.170721.fc25 (FEDORA-2017-be3df4fe14)
OpenJDK Runtime Environment in a preview of the OpenJDK AArch32 project
--------------------------------------------------------------------------------
Update Information:
8u141 security patches
--------------------------------------------------------------------------------
================================================================================
libapreq2-2.13-27.fc25 (FEDORA-2017-29f0760ef5)
Apache HTTP request library
--------------------------------------------------------------------------------
Update Information:
Remove optflags from PC file.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1196518 - %optflags in libapreq2.pc
https://bugzilla.redhat.com/show_bug.cgi?id=1196518
--------------------------------------------------------------------------------
================================================================================
libidn2-2.0.3-1.fc25 (FEDORA-2017-bed0d7ff15)
Library to support IDNA2008 internationalized domain names
--------------------------------------------------------------------------------
Update Information:
Libidn2 2.0.3 (released 2017-07-24) =================================== *
%IDN2_USE_STD3_ASCII_RULES disabled by default. Previously we were eliminating
non-STD3 characters from domain strings such as
_443._tcp.example.com, or IPs
1.2.3.4/24 provided to libidn2 functions. That was an unexpected regression for
applications switching from libidn and thus it is no longer applied by default.
Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again. * Fix several
documentation issues * Fix build issues * Modernize gtk-doc build
infrastructure
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1468608 - IDN2 strips any underscores from domain name
https://bugzilla.redhat.com/show_bug.cgi?id=1468608
[ 2 ] Bug #1474324 - libidn2-2.0.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1474324
--------------------------------------------------------------------------------
================================================================================
libyui-gtk-2.44.9-8.fc25 (FEDORA-2017-03c68b66f1)
Gtk3 User Interface for libyui
--------------------------------------------------------------------------------
Update Information:
* Require cmake-filesystem
--------------------------------------------------------------------------------
================================================================================
libyui-ncurses-2.48.3-1.fc25 (FEDORA-2017-611c1be7ed)
Character Based User Interface for libyui
--------------------------------------------------------------------------------
Update Information:
* New upstream release ---- * Require cmake-filesystem
--------------------------------------------------------------------------------
================================================================================
meson-0.41.2-1.fc25 (FEDORA-2017-45106464c6)
High productivity build system
--------------------------------------------------------------------------------
Update Information:
meson 0.41.2 release. For details, see
https://github.com/mesonbuild/meson/releases/tag/0.41.2
--------------------------------------------------------------------------------
================================================================================
nas-1.9.4-8.fc25 (FEDORA-2017-a3a23ae42c)
The Network Audio System (NAS)
--------------------------------------------------------------------------------
Update Information:
This release security-hardens the nasd daemon.
--------------------------------------------------------------------------------
================================================================================
nuvola-app-amazon-cloud-player-5.4-9.fc25 (FEDORA-2017-29d614823e)
Amazon Cloud Player for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
- rebuild for new version of nuvolasdk-4.6.0 and nuvolaruntime-4.6.0 ---- -
correct the extends/name-tag in %%{name}.metainfo.xml ---- - correct the
extends/name-tag in %%{name}.metainfo.xml
--------------------------------------------------------------------------------
================================================================================
nuvola-app-bandcamp-2.2-3.fc25 (FEDORA-2017-5853ddbce8)
Bandcamp for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
- rebuild for new version of nuvolasdk-4.6.0 and nuvolaruntime-4.6.0 ---- -
correct the extends/name-tag in %%{name}.metainfo.xml
--------------------------------------------------------------------------------
================================================================================
nuvolaruntime-4.6.0-1.fc25 (FEDORA-2017-3c708f4b25)
Tight integration of web apps with your desktop
--------------------------------------------------------------------------------
Update Information:
- Update to 4.6.0 - Dropped 0001-Revert-Check-whether-VA-API-driver-is-
installed.patch - Dropped 0002-Revert-Check-whether-VDPAU-driver-is-
installed.patch - Add disable-VA-API_VDPAU-driver-check.patch ---- include
ppc64le again ---- - exclude ppc64le due build problem ---- include
ppc64le again ---- - update to 4.5.0 - Add 0001-Revert-Check-whether-VA-API-
driver-is-installed.patch - Add 0002-Revert-Check-whether-VDPAU-driver-is-
installed.patch - dropped %%{name}-wscript.patch - add if condition due ppc64le
build problem
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476537 - nuvolasdk-4.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476537
--------------------------------------------------------------------------------
================================================================================
nuvolasdk-4.6.0-1.fc25 (FEDORA-2017-a8c4359dd3)
SDK for building Nuvola Player's web app scripts
--------------------------------------------------------------------------------
Update Information:
Update to 4.6.0-1
--------------------------------------------------------------------------------
================================================================================
pcsc-lite-asekey-3.7-4.fc25 (FEDORA-2017-b02d8af5d8)
ASEKey USB token driver
--------------------------------------------------------------------------------
Update Information:
This release fixes 92_pcscd_asekey.rules file location.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476619 - missing BuildRequires: systemd
https://bugzilla.redhat.com/show_bug.cgi?id=1476619
--------------------------------------------------------------------------------
================================================================================
perl-B-Hooks-OP-Check-EntersubForCV-0.10-1.fc25 (FEDORA-2017-0ebabcca59)
Invoke callbacks on construction of entersub OPs for certain CVs
--------------------------------------------------------------------------------
Update Information:
This release brings un upstreeam support for Perl 5.21.4 and newer.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476961 - perl-B-Hooks-OP-Check-EntersubForCV-0.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476961
--------------------------------------------------------------------------------
================================================================================
perl-DynaLoader-Functions-0.003-1.fc25 (FEDORA-2017-498687bb70)
Deconstructed dynamic C library loading
--------------------------------------------------------------------------------
Update Information:
This release corrects loading Config module on VMS and Win32 platforms. We
deliver it to provide up-to-date version string.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476964 - perl-DynaLoader-Functions-0.003 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476964
--------------------------------------------------------------------------------
================================================================================
perl-Perl4-CoreLibs-0.004-1.fc25 (FEDORA-2017-147f13fbb9)
Libraries historically supplied with Perl 4
--------------------------------------------------------------------------------
Update Information:
This release fixes misspellings in the documentations and makes the
documentation more complete.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476575 - perl-Perl4-CoreLibs-0.004 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476575
--------------------------------------------------------------------------------
================================================================================
timeline-1.15.0-1.fc25 (FEDORA-2017-0a5d98d93e)
Displays and navigates events on a timeline
--------------------------------------------------------------------------------
Update Information:
1.15.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476969 - timeline-1.15.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476969
--------------------------------------------------------------------------------
================================================================================
virt-what-1.18-1.fc25 (FEDORA-2017-3719776c47)
Detect if we are running in a virtual machine
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.18.
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-notifications-2.0.2-1.fc25 (FEDORA-2017-527da4fb52)
Notifications Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.0.2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1477186 - wingpanel-indicator-notifications-2.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1477186
--------------------------------------------------------------------------------