The following Fedora 25 Security updates need testing:
Age URL
323
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
222
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
161
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
115
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99c0118c0c
memcached-1.4.39-1.fc25
111
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2232fe97b4
docker-distribution-2.6.2-1.git48294d9.fc25
33
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6967efb3f0
thunderbird-52.4.0-2.fc25
27
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7089c6e789
suricata-3.2.4-1.fc25
19
https://bodhi.fedoraproject.org/updates/FEDORA-2017-51f49ebbce apr-1.6.3-1.fc25
19
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f563b201ba
apr-util-1.5.4-4.fc25
19
https://bodhi.fedoraproject.org/updates/FEDORA-2017-45ed341e61
httpd-2.4.29-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ab57a100f3
rpm-4.13.0.2-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f5ad4107cc fedpkg-1.30-4.fc25
rpkg-1.51-2.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c7514691cb
perl-Net-Ping-External-0.15-11.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6e67e4e45b
poppler-0.45.0-10.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0188f21212
postgresql-9.5.10-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-481e4f6f8c
ldns-1.6.17-22.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e5bbb657c5
chromium-62.0.3202.89-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1a9068594d
python-copr-1.84-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8016cc0bd0
backintime-1.1.24-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-55a3247cfd
openssl-1.0.2m-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-077334783e
webkitgtk4-2.18.3-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9a6569beb6
firefox-57.0-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f58bbbbdb0
konversation-1.7.4-1.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
165
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
44
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3fc5429e7e
iproute-4.12.0-1.fc25
33
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6967efb3f0
thunderbird-52.4.0-2.fc25
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b89e9f62d8
bind99-9.9.10-3.P3.fc25
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b9a00d98e5
python-productmd-1.9-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-dbf347055a
hwdata-0.306-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ab57a100f3
rpm-4.13.0.2-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e64b02d1b1
pcre2-10.23-10.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-65b10e63d5
pungi-4.1.20-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ec5efbcfc6 pcre-8.41-3.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e91585cd60
ethtool-4.13-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-560cebc111
menu-cache-1.1.0-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a7f307017b
python-lxml-4.1.1-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e82231f2c7
libglvnd-1.0.0-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6e67e4e45b
poppler-0.45.0-10.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9a6569beb6
firefox-57.0-2.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-077334783e
webkitgtk4-2.18.3-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-55a3247cfd
openssl-1.0.2m-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-15b7f781f0 nss-3.34.0-1.0.fc25
nss-softokn-3.34.0-1.0.fc25 nss-util-3.34.0-1.0.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-dc8c38e976
man-db-2.7.5-5.fc25
The following builds have been pushed to Fedora 25 updates-testing
fedfind-3.8.1-1.fc25
konversation-1.7.4-1.fc25
man-db-2.7.5-5.fc25
module-build-service-1.4.7-1.fc25
nss-3.34.0-1.0.fc25
nss-softokn-3.34.0-1.0.fc25
nss-util-3.34.0-1.0.fc25
openscap-1.2.16-1.fc25
perl-Sereal-4.004-1.fc25
perl-Sereal-Decoder-4.004-1.fc25
perl-Sereal-Encoder-4.004-1.fc25
perl-Tk-GraphViz-1.01-18.fc25
perl-experimental-0.017-1.fc25
perl-libnet-3.11-1.fc25
python-streamlink-0.9.0-1.fc25
python-wikitcms-2.2.0-1.fc25
qxtglobalshortcut-0.0.1-0.7.20171021git1644620.fc25
relval-2.2.0-1.fc25
vym-2.6.11-1.fc25
Details about builds:
================================================================================
fedfind-3.8.1-1.fc25 (FEDORA-2017-a113080467)
Fedora compose and image finder
--------------------------------------------------------------------------------
Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the
Modular Server candidate composes which are currently being produced. fedfind
3.8.1 returns to using the pkgdb `collections` API end point for
`get_current_release`, as it is now being manually updated until PDC is ready to
replace it.
--------------------------------------------------------------------------------
================================================================================
konversation-1.7.4-1.fc25 (FEDORA-2017-f58bbbbdb0)
A user friendly IRC client
--------------------------------------------------------------------------------
Update Information:
Latest stable release, see also ���https://konversation.kde.org/
--------------------------------------------------------------------------------
================================================================================
man-db-2.7.5-5.fc25 (FEDORA-2017-dc8c38e976)
Tools for searching and reading man pages
--------------------------------------------------------------------------------
Update Information:
This update makes file trigger scriptlets run man-db cache update in a transient
service configured to prevent system from reboot/shutdown until it finishes. So
long-running cache update should no longer block dnf transaction, but at the
same time it shouldn't be possible to interrupt the update prematurely leaving
man page index corrupted.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1318058 - postransaction mandb run takes an unreasonably long time
https://bugzilla.redhat.com/show_bug.cgi?id=1318058
--------------------------------------------------------------------------------
================================================================================
module-build-service-1.4.7-1.fc25 (FEDORA-2017-8942acf95b)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
Changes: * Change the MBS builders into setuptools plugins so now you can now
create your own builder plugin * Updated some documentation * mbs-build local
now builds only from yaml files (this bypasses the need for SCM) * Only complete
the module build when all components are tagged and a KojiRepoRegen message is
received * Don't trigger init handler when importing a local build and mark the
build as done after import * Validate component git refs when a commit is
explicitly stated in the modulemd before starting the module build * Set Access-
Control-Allow-Origin to "*" on GET API routes * Fix duplicate module build
state
traces * Make the module build log name configurable
--------------------------------------------------------------------------------
================================================================================
nss-3.34.0-1.0.fc25 (FEDORA-2017-15b7f781f0)
Network Security Services
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.34. For details about new
functionality and a list of bugs fixed in this release please see the upstream
release notes
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1500655 - nss-pem error while updating to fedora 27
https://bugzilla.redhat.com/show_bug.cgi?id=1500655
[ 2 ] Bug #1512906 - nss-3.34 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512906
[ 3 ] Bug #1482798 - Illegal instruction in SHA1_Update() when used by chronyd
https://bugzilla.redhat.com/show_bug.cgi?id=1482798
--------------------------------------------------------------------------------
================================================================================
nss-softokn-3.34.0-1.0.fc25 (FEDORA-2017-15b7f781f0)
Network Security Services Softoken Module
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.34. For details about new
functionality and a list of bugs fixed in this release please see the upstream
release notes
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1500655 - nss-pem error while updating to fedora 27
https://bugzilla.redhat.com/show_bug.cgi?id=1500655
[ 2 ] Bug #1512906 - nss-3.34 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512906
[ 3 ] Bug #1482798 - Illegal instruction in SHA1_Update() when used by chronyd
https://bugzilla.redhat.com/show_bug.cgi?id=1482798
--------------------------------------------------------------------------------
================================================================================
nss-util-3.34.0-1.0.fc25 (FEDORA-2017-15b7f781f0)
Network Security Services Utilities Library
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.34. For details about new
functionality and a list of bugs fixed in this release please see the upstream
release notes
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1500655 - nss-pem error while updating to fedora 27
https://bugzilla.redhat.com/show_bug.cgi?id=1500655
[ 2 ] Bug #1512906 - nss-3.34 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512906
[ 3 ] Bug #1482798 - Illegal instruction in SHA1_Update() when used by chronyd
https://bugzilla.redhat.com/show_bug.cgi?id=1482798
--------------------------------------------------------------------------------
================================================================================
openscap-1.2.16-1.fc25 (FEDORA-2017-ce6414c880)
Set of open source libraries enabling integration of the SCAP line of standards
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release OpenSCAP 1.2.16. - New features -
oscap can generate output that is compatible with STIG Viewer. - CVRF
parsing and export has been implemented. - oscap info command has been
expanded. - The AIX platform is supported. - Many documentation
improvements. - Numerous other improvements of existing features. -
Maintenance - Huge cross-platform improvements. - Memory leaks fixed.
- SELinux fixes. - Many coverity fixes. - Numerous other bugfixes.
--------------------------------------------------------------------------------
================================================================================
perl-Sereal-4.004-1.fc25 (FEDORA-2017-82b4e97e48)
Fast, compact, powerful binary (de-)serialization
--------------------------------------------------------------------------------
Update Information:
This release brings support for zstd compression.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1512189 - perl-Sereal-Decoder-4.004 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512189
[ 2 ] Bug #1512187 - perl-Sereal-4.004 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512187
[ 3 ] Bug #1512190 - perl-Sereal-Encoder-4.004 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512190
--------------------------------------------------------------------------------
================================================================================
perl-Sereal-Decoder-4.004-1.fc25 (FEDORA-2017-82b4e97e48)
Perl deserialization for Sereal format
--------------------------------------------------------------------------------
Update Information:
This release brings support for zstd compression.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1512189 - perl-Sereal-Decoder-4.004 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512189
[ 2 ] Bug #1512187 - perl-Sereal-4.004 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512187
[ 3 ] Bug #1512190 - perl-Sereal-Encoder-4.004 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512190
--------------------------------------------------------------------------------
================================================================================
perl-Sereal-Encoder-4.004-1.fc25 (FEDORA-2017-82b4e97e48)
Perl serialization into Serial format
--------------------------------------------------------------------------------
Update Information:
This release brings support for zstd compression.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1512189 - perl-Sereal-Decoder-4.004 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512189
[ 2 ] Bug #1512187 - perl-Sereal-4.004 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512187
[ 3 ] Bug #1512190 - perl-Sereal-Encoder-4.004 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512190
--------------------------------------------------------------------------------
================================================================================
perl-Tk-GraphViz-1.01-18.fc25 (FEDORA-2017-14e4b126e2)
Render an interactive GraphViz graph
--------------------------------------------------------------------------------
Update Information:
This release removes bogus RPM provide.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #829700 - perl-Tk-GraphViz : Duplicate Provides
https://bugzilla.redhat.com/show_bug.cgi?id=829700
--------------------------------------------------------------------------------
================================================================================
perl-experimental-0.017-1.fc25 (FEDORA-2017-c2b07746ab)
Experimental features made easy
--------------------------------------------------------------------------------
Update Information:
This release corrects support for auto_deref and adds support for const_attr
feature.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1513202 - perl-experimental-0.017 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1513202
--------------------------------------------------------------------------------
================================================================================
perl-libnet-3.11-1.fc25 (FEDORA-2017-2b77bfa72a)
Perl clients for various network protocols
--------------------------------------------------------------------------------
Update Information:
This release fixes parsing MLSD fact names in the FTP protocol.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1513203 - perl-libnet-3.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1513203
--------------------------------------------------------------------------------
================================================================================
python-streamlink-0.9.0-1.fc25 (FEDORA-2017-cd274e6a3a)
Python library for extracting streams from various websites
--------------------------------------------------------------------------------
Update Information:
This release is mostly code refactoring as well as module inclusion. Features:
* Updates to multiple plugins (electrecetv, tvplayer, Teve2, cnnturk, kanald) *
SOCKS module being included in the Streamlink installer (PySocks)
--------------------------------------------------------------------------------
================================================================================
python-wikitcms-2.2.0-1.fc25 (FEDORA-2017-a113080467)
Fedora QA wiki test management Python library
--------------------------------------------------------------------------------
Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the
Modular Server candidate composes which are currently being produced. fedfind
3.8.1 returns to using the pkgdb `collections` API end point for
`get_current_release`, as it is now being manually updated until PDC is ready to
replace it.
--------------------------------------------------------------------------------
================================================================================
qxtglobalshortcut-0.0.1-0.7.20171021git1644620.fc25 (FEDORA-2017-47845b54b1)
Cross-platform library for handling system-wide shortcuts in Qt applications
--------------------------------------------------------------------------------
Update Information:
- Add RR cmake-filesystem%{?_isa} - Remove %%dir
%%{_includedir}/%%{name,private} - Remove %%dir %%{_libdir}/cmake/%%{name}/
Package owns this directory and all files/directories inside it ---- - Remove
BR pkgconfig(Qt5Widgets) - Remove RR qt-devel from subpackage devel - Add BR
pkgconfig(Qt5)
--------------------------------------------------------------------------------
================================================================================
relval-2.2.0-1.fc25 (FEDORA-2017-a113080467)
Tool for interacting with Fedora QA wiki pages
--------------------------------------------------------------------------------
Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the
Modular Server candidate composes which are currently being produced. fedfind
3.8.1 returns to using the pkgdb `collections` API end point for
`get_current_release`, as it is now being manually updated until PDC is ready to
replace it.
--------------------------------------------------------------------------------
================================================================================
vym-2.6.11-1.fc25 (FEDORA-2017-6d154eab34)
View your mind
--------------------------------------------------------------------------------
Update Information:
2.6.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1513217 - vym-2.6.11-3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1513217
--------------------------------------------------------------------------------