The following Fedora 25 Security updates need testing:
Age URL
197
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
95
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
39
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7dbbbafea6
runc-1.0.0-7.git6394544.fc25.2
34
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ec3c82e64d
libstaroffice-0.0.3-3.fc25
34
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
25
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bcfa3569d6
libmwaw-0.3.11-3.fc25
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-620085cede
httpd-2.4.26-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9dd1004ad8
jabberd-2.6.1-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-486371ff24
perl-DBD-MySQL-4.043-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1ca18683e4
openldap-2.4.44-11.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b674dc22ad php-7.0.21-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f8e32f160e
cacti-1.1.12-2.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b9e4c24094
subversion-1.9.6-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d7a871850c
poppler-0.45.0-4.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b0a2770a9b knot-2.4.5-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90ad72e684 irssi-1.0.4-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-efdd962fee putty-0.70-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c844713925
qt5-qtwebkit-5.212.0-0.5.alpha2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-33c8085c5d
groovy18-1.8.9-28.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a7a488d8d0
qt5-qtwebengine-5.9.1-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-92643d70b7
knot-resolver-1.3.1-1.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
39
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
17
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0187b2a605
selinux-policy-3.13.1-225.19.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-118505dd77
libsoup-2.56.0-3.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-caf28c1846
flatpak-0.9.7-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a90ed7e59d
libtirpc-1.0.2-0.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1d2652d711
gnome-keyring-3.20.1-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1ca18683e4
openldap-2.4.44-11.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7cd9e81996 quota-4.03-8.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b18eded0a5
glusterfs-3.10.4-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-00d20db471
samba-4.5.11-0.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-efabd0d782
ostree-2017.8-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9075f30365 vim-8.0.705-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d7a871850c
poppler-0.45.0-4.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e719edea40 koji-1.13.0-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ddd2aa1a04 xen-4.7.3-1.fc25
The following builds have been pushed to Fedora 25 updates-testing
COPASI-4.19.156-1.fc25
R-3.4.1-1.fc25
Zim-0.67-1.fc25
aime-8.20170704-1.fc25
btrbk-0.25.0-4.fc25
caja-1.18.3-3.fc25
chirp-20170711-1.fc25
colorful-1.2-13.20170707.git.4db365a.fc25
criu-3.2.1-2.fc25
ctstream-27-1.fc25
dovecot-2.2.31-3.fc25
drupal7-metatag-1.22-1.fc25
freeipmi-1.5.6-1.fc25
gnome-chemistry-utils-0.14.17-3.fc25
gnumeric-1.12.35-1.fc25
goffice-0.10.35-1.fc25
grip-3.4.3-1.fc25
groovy18-1.8.9-28.fc25
haproxy-1.6.13-1.fc25
irssi-1.0.4-1.fc25
knot-2.4.5-1.fc25
knot-resolver-1.3.1-1.fc25
koji-1.13.0-1.fc25
libisds-0.10.7-1.fc25
libmediainfo-0.7.97-1.fc25
mate-panel-1.18.3-3.fc25
mediainfo-0.7.97-1.fc25
nordugrid-arc-5.3.2-3.fc25
nordugrid-arc-doc-2.0.16-1.fc25
nordugrid-arc-nagios-plugins-1.9.1-1.fc25
omniORB-4.2.2-1.fc25
omniORBpy-4.2.2-1.fc25
pciutils-3.5.5-1.fc25
pdns-recursor-4.0.6-1.fc25
perl-Dist-Zilla-6.010-1.fc25
php-Monolog-1.23.0-1.fc25
php-consolidation-output-formatters-3.1.10-1.fc25
php-phpmyadmin-sql-parser-4.1.8-1.fc25
php-symfony-polyfill-1.4.0-1.fc25
php-twig-extensions-1.5.1-1.fc25
poppler-0.45.0-4.fc25
putty-0.70-1.fc25
python-avocado-52.0-1.fc25
python-basemap-data-1.0.7-6.fc25
python-docker-py-1.10.6-2.fc25
python-hypothesis-3.12.0-1.fc25
python-pathspec-0.5.3-1.fc25
python-plaster-pastedeploy-0.3.2-2.fc25
python-sphinx-autobuild-0.7.1-1.fc25
qcad-3.17.3.1-1.fc25
qotd-0.11.3-1.fc25
qt5-qtwebengine-5.9.1-1.fc25
qt5-qtwebkit-5.212.0-0.5.alpha2.fc25
rkward-0.6.5-7.fc25
root-6.10.02-2.fc25
rpkg-1.49-6.fc25
rpy-2.8.6-1.fc25
rubygem-diffy-3.2.0-1.1.fc25
rust-srpm-macros-4-2.fc25
screen-4.6.1-1.fc25
tracer-0.6.13-1.fc25
vim-8.0.705-1.fc25
xen-4.7.3-1.fc25
xiphos-4.0.5-2.fc25
xoreos-tools-0.0.4-2.fc25
yash-2.45-1.fc25
Details about builds:
================================================================================
COPASI-4.19.156-1.fc25 (FEDORA-2017-1824d0701a)
Biochemical network simulator
--------------------------------------------------------------------------------
Update Information:
- Update to version 4.19 -build 156
--------------------------------------------------------------------------------
================================================================================
R-3.4.1-1.fc25 (FEDORA-2017-4acde45111)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
Update to R 3.4.1. This contains several significant bugfixes introduced in
3.4.0, so updating is strongly recommended. Full release notes are here:
https://cran.r-project.org/doc/manuals/r-release/NEWS.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1456452 - rpy-2.8.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1456452
--------------------------------------------------------------------------------
================================================================================
Zim-0.67-1.fc25 (FEDORA-2017-07c94f0d12)
Desktop wiki & notekeeper
--------------------------------------------------------------------------------
Update Information:
Update to 0.67 final release
--------------------------------------------------------------------------------
================================================================================
aime-8.20170704-1.fc25 (FEDORA-2017-cf35926b9f)
An application embeddable programming language interpreter
--------------------------------------------------------------------------------
Update Information:
- Updated to new 8.20170704 upstream version, fixes rhbz #1465412
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465412 - aime-8.20170704 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1465412
--------------------------------------------------------------------------------
================================================================================
btrbk-0.25.0-4.fc25 (FEDORA-2017-1f684fda78)
Tool for creating snapshots and remote backups of btrfs sub-volumes
--------------------------------------------------------------------------------
Update Information:
Initial package release
--------------------------------------------------------------------------------
================================================================================
caja-1.18.3-3.fc25 (FEDORA-2017-d9d7428fcf)
File manager for MATE
--------------------------------------------------------------------------------
Update Information:
- Fix browsing autorun/media on insertion -
https://github.com/mate-
desktop/caja/issues/807
--------------------------------------------------------------------------------
================================================================================
chirp-20170711-1.fc25 (FEDORA-2017-27e53be741)
A tool for programming two-way radio equipment
--------------------------------------------------------------------------------
Update Information:
http://chirp.danplanet.com/projects/chirp/repository/revisions
--------------------------------------------------------------------------------
================================================================================
colorful-1.2-13.20170707.git.4db365a.fc25 (FEDORA-2017-58ffc6be4d)
Side-view shooter game
--------------------------------------------------------------------------------
Update Information:
Update to the most recent upstream snapshot
--------------------------------------------------------------------------------
================================================================================
criu-3.2.1-2.fc25 (FEDORA-2017-2cfb8115c0)
Tool for Checkpoint/Restore in User-space
--------------------------------------------------------------------------------
Update Information:
Added patches to handle unified hierarchy and new glibc
--------------------------------------------------------------------------------
================================================================================
ctstream-27-1.fc25 (FEDORA-2017-4df5162557)
Get URLs of Czech Television video streams
--------------------------------------------------------------------------------
Update Information:
This release fixes stream segment's output not to contain bottom-level Apple
play-list data. It also improves debugging output.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1468854 - ctstream-27 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1468854
--------------------------------------------------------------------------------
================================================================================
dovecot-2.2.31-3.fc25 (FEDORA-2017-6bff5ec747)
Secure imap and pop3 server
--------------------------------------------------------------------------------
Update Information:
enabled tcpwrap ---- fix broken NOTIFY support ---- - dovecot updated to
2.2.31 - Various fixes to handling mailbox listing. Especially related to
handling nonexistent autocreated/autosubscribed mailboxes and ACLs. - Global ACL
file was parsed as if it was local ACL file. This caused some of the ACL rule
interactions to not work exactly as intended. - Using mail_sort_max_read_count
may have caused very high CPU usage. - Message address parsing could have
crashed on invalid input. - imapc_features=fetch-headers wasn't always working
correctly and caused the full header to be fetched. - imapc: Various bugfixes
related to connection failure handling. - quota=count: quota_warning =
-storage=.. was never executed - quota=count: Add support for "ns" parameter -
dsync: Fix incremental syncing for mails that don't have Date or Message-ID
headers. - imap: Fix hang when client sends pipelined SEARCH +
EXPUNGE/CLOSE/LOGOUT. - oauth2: Token validation didn't accept empty server
responses. - imap: NOTIFY command has been almost completely broken since the
beginning. - pigeonhole updated to 0.4.19 - Fixed bug in handling of implicit
keep in some cases. - include extension: Fixed segfault that (sometimes)
occurred when the global script location was left unconfigured. ---- -
auth: Multiple failed authentications within short time caused crashes - push-
notification: OX driver crashed at deinit ---- - auth: Use timing safe
comparisons for everything related to passwords. It's unlikely that these
could have been used for practical attacks, especially because Dovecot delays
and flushes all failed authentications in 2 second intervals. Also it could
have worked only when passwords were stored in plaintext in the passdb. -
master process sends SIGQUIT to all running children at shutdown, which
instructs them to close all the socket listeners immediately. This way
restarting Dovecot should no longer fail due to some processes keeping the
listeners open for a long time. - auth: Add passdb { mechanisms=none } to match
separate passdb lookup - auth: Add passdb { username_filter } to use passdb only
if user matches the filter. See
https://wiki2.dovecot.org/PasswordDatabase -
dsync: Add dsync_commit_msgs_interval setting. It attempts to commit the
transaction after saving this many new messages. Because of the way dsync
works, it may not always be possible if mails are copied or UIDs need to
change. - imapc: Support imapc_features=search without ESEARCH extension. -
imapc: Add imapc_features=fetch-bodystructure to pass through remote server's
FETCH BODY and BODYSTRUCTURE. - imapc: Add quota=imapc backend to use
GETQUOTA/GETQUOTAROOT on the remote server. - passdb imap: Add
allow_invalid_cert and ssl_ca_file parameters. - If dovecot.index.cache
corruption is detected, reset only the one corrupted mail instead of the
whole file. - doveadm mailbox status: Add "firstsaved" field. -
director_flush_socket: Add old host's up/down and vhost count as parameters -
More fixes to automatically fix corruption in dovecot.list.index - dsync-server:
Fix support for dsync_features=empty-header-workaround - imapc: Various
bugfixes, including infinite loops on some errors - IMAP NOTIFY wasn't working
for non-INBOX if IMAP client hadn't enabled modseq tracking via
CONDSTORE/QRESYNC. - fts-lucene: Fix it to work again with mbox format - Some
internal error messages may have contained garbage in v2.2.29 - mail-crypt: Re-
encrypt when copying/moving mails and per-mailbox keys are used. Otherwise the
copied mails can't be opened.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450587 - activate tcpwrap
https://bugzilla.redhat.com/show_bug.cgi?id=1450587
--------------------------------------------------------------------------------
================================================================================
drupal7-metatag-1.22-1.fc25 (FEDORA-2017-f6edb6ff84)
Adds support and an API to implement meta tags
--------------------------------------------------------------------------------
Update Information:
* [
1.22](https://www.drupal.org/project/metatag/releases/7.x-1.22)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467454 - drupal7-metatag-1.22 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1467454
--------------------------------------------------------------------------------
================================================================================
freeipmi-1.5.6-1.fc25 (FEDORA-2017-1c9ac4c9ff)
IPMI remote console and system management software
--------------------------------------------------------------------------------
Update Information:
New version of freeipmi package is available (1.5.6) * In libfreeipmi locate
(used by ipmi-locate), use DMI firmware in sysfs if it exists. * Minor mem-leak
corner case fix in libfreeipmi. * Minor documentation fixes. * Minor error
message clarifications.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1468984 - Man page for freeipmi should display lower case version for command
examples
https://bugzilla.redhat.com/show_bug.cgi?id=1468984
[ 2 ] Bug #1468062 - freeipmi-1.5.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1468062
--------------------------------------------------------------------------------
================================================================================
gnome-chemistry-utils-0.14.17-3.fc25 (FEDORA-2017-16ac7fdb18)
A set of chemical utilities
--------------------------------------------------------------------------------
Update Information:
An update to the latest gnumeric and goffice releases: *
http://gnumeric.org/announcements/1.12/gnumeric-1.12.35.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1464742 - The summary of gnumeric-plugins-extras is a copy of gnumeric-devel
https://bugzilla.redhat.com/show_bug.cgi?id=1464742
--------------------------------------------------------------------------------
================================================================================
gnumeric-1.12.35-1.fc25 (FEDORA-2017-16ac7fdb18)
Spreadsheet program for GNOME
--------------------------------------------------------------------------------
Update Information:
An update to the latest gnumeric and goffice releases: *
http://gnumeric.org/announcements/1.12/gnumeric-1.12.35.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1464742 - The summary of gnumeric-plugins-extras is a copy of gnumeric-devel
https://bugzilla.redhat.com/show_bug.cgi?id=1464742
--------------------------------------------------------------------------------
================================================================================
goffice-0.10.35-1.fc25 (FEDORA-2017-16ac7fdb18)
G Office support libraries
--------------------------------------------------------------------------------
Update Information:
An update to the latest gnumeric and goffice releases: *
http://gnumeric.org/announcements/1.12/gnumeric-1.12.35.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1464742 - The summary of gnumeric-plugins-extras is a copy of gnumeric-devel
https://bugzilla.redhat.com/show_bug.cgi?id=1464742
--------------------------------------------------------------------------------
================================================================================
grip-3.4.3-1.fc25 (FEDORA-2017-44ec3c37f6)
Front-end for CD rippers and Ogg Vorbis encoders
--------------------------------------------------------------------------------
Update Information:
Fix for disc tray ejection issue.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1468512 - grip-3.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1468512
--------------------------------------------------------------------------------
================================================================================
groovy18-1.8.9-28.fc25 (FEDORA-2017-33c8085c5d)
Dynamic language for the Java Platform
--------------------------------------------------------------------------------
Update Information:
Fixes information disclosure vulnerability (CVE-2016-6814)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1413466 - CVE-2016-6814 Apache Groovy: Remote code execution via
deserialization
https://bugzilla.redhat.com/show_bug.cgi?id=1413466
--------------------------------------------------------------------------------
================================================================================
haproxy-1.6.13-1.fc25 (FEDORA-2017-283f771959)
HAProxy reverse proxy for high availability environments
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.13
--------------------------------------------------------------------------------
================================================================================
irssi-1.0.4-1.fc25 (FEDORA-2017-90ad72e684)
Modular text mode IRC client with Perl scripting
--------------------------------------------------------------------------------
Update Information:
This is an update fixing CVE-2017-10965 and CVE-2017-10966.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1468785 - irssi-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1468785
--------------------------------------------------------------------------------
================================================================================
knot-2.4.5-1.fc25 (FEDORA-2017-b0a2770a9b)
High-performance authoritative DNS server
--------------------------------------------------------------------------------
Update Information:
New upstream release: 2.4.5
--------------------------------------------------------------------------------
================================================================================
knot-resolver-1.3.1-1.fc25 (FEDORA-2017-92643d70b7)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 1.3.1.
--------------------------------------------------------------------------------
================================================================================
koji-1.13.0-1.fc25 (FEDORA-2017-e719edea40)
Build system tools
--------------------------------------------------------------------------------
Update Information:
update to upstream 1.13.0
--------------------------------------------------------------------------------
================================================================================
libisds-0.10.7-1.fc25 (FEDORA-2017-cd7e8bcc2a)
Library for accessing the Czech Data Boxes
--------------------------------------------------------------------------------
Update Information:
This release adds new values to isds_UserType and isds_DbType enum types to
support new user and box types introduced in recent ISDS specification and
testing instanance.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1468925 - libisds-0.10.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1468925
--------------------------------------------------------------------------------
================================================================================
libmediainfo-0.7.97-1.fc25 (FEDORA-2017-ab8a879330)
Library for supplies technical and tag information about a video or audio file
--------------------------------------------------------------------------------
Update Information:
Update to 0.7.97.
--------------------------------------------------------------------------------
================================================================================
mate-panel-1.18.3-3.fc25 (FEDORA-2017-b4791a0dab)
MATE Desktop panel and applets
--------------------------------------------------------------------------------
Update Information:
- fix Notification area icons disappears, - when apply a background image to the
panel -
https://github.com/mate-desktop/mate-panel/issues/585
--------------------------------------------------------------------------------
================================================================================
mediainfo-0.7.97-1.fc25 (FEDORA-2017-ab8a879330)
Supplies technical and tag information about a video or audio file (CLI)
--------------------------------------------------------------------------------
Update Information:
Update to 0.7.97.
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-5.3.2-3.fc25 (FEDORA-2017-0cacd54867)
Advanced Resource Connector Grid Middleware
--------------------------------------------------------------------------------
Update Information:
http://www.nordugrid.org/arc/releases/15.03u15/release_notes_15.03u15.html
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-doc-2.0.16-1.fc25 (FEDORA-2017-0cacd54867)
Advanced Resource Connector Documentation
--------------------------------------------------------------------------------
Update Information:
http://www.nordugrid.org/arc/releases/15.03u15/release_notes_15.03u15.html
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-nagios-plugins-1.9.1-1.fc25 (FEDORA-2017-0cacd54867)
Nagios plugins for ARC
--------------------------------------------------------------------------------
Update Information:
http://www.nordugrid.org/arc/releases/15.03u15/release_notes_15.03u15.html
--------------------------------------------------------------------------------
================================================================================
omniORB-4.2.2-1.fc25 (FEDORA-2017-f18a9bc66f)
A robust high performance CORBA ORB for C++ and Python
--------------------------------------------------------------------------------
Update Information:
Update to version 4.2.2, see
https://sourceforge.net/p/omniorb/svn/6351/tree/bra
nches/4_2/omniORB/ReleaseNotes.txt and
https://sourceforge.net/p/omniorb/svn/635
1/tree/branches/4_2/omniORBpy/ReleaseNotes.txt for details.
--------------------------------------------------------------------------------
================================================================================
omniORBpy-4.2.2-1.fc25 (FEDORA-2017-f18a9bc66f)
CORBA ORB for Python
--------------------------------------------------------------------------------
Update Information:
Update to version 4.2.2, see
https://sourceforge.net/p/omniorb/svn/6351/tree/bra
nches/4_2/omniORB/ReleaseNotes.txt and
https://sourceforge.net/p/omniorb/svn/635
1/tree/branches/4_2/omniORBpy/ReleaseNotes.txt for details.
--------------------------------------------------------------------------------
================================================================================
pciutils-3.5.5-1.fc25 (FEDORA-2017-040991ca0a)
PCI bus related utilities
--------------------------------------------------------------------------------
Update Information:
* Better decoding of AER capability. * "Slot Implemented" flag is decoded for
PCI/PCI-X to PCIe bridges. * Minor fixes of decoding other capabilities.
--------------------------------------------------------------------------------
================================================================================
pdns-recursor-4.0.6-1.fc25 (FEDORA-2017-960f116bef)
Modern, advanced and high performance recursing/non authoritative name server
--------------------------------------------------------------------------------
Update Information:
Update to 4.0.6. The most important change is the addition of the KSK-2017, the
new root key for DNSSEC.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1413016 - pdns-recursor-4.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1413016
--------------------------------------------------------------------------------
================================================================================
perl-Dist-Zilla-6.010-1.fc25 (FEDORA-2017-ea7235020e)
Distribution builder; installer not included!
--------------------------------------------------------------------------------
Update Information:
A new version of Dist::Zilla is available for Fedora. See
http://cpansearch.perl.org/src/RJBS/Dist-Zilla-6.010/Changes for the summary of
changes in this release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1469313 - perl-Dist-Zilla-6.010 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1469313
--------------------------------------------------------------------------------
================================================================================
php-Monolog-1.23.0-1.fc25 (FEDORA-2017-0c8caf79de)
Sends your logs to files, sockets, inboxes, databases and various web services
--------------------------------------------------------------------------------
Update Information:
### 1.23.0 (2017-06-19) * Improved SyslogUdpHandler's support for RFC5424 and
added optional `$ident` argument * Fixed GelfHandler truncation to be per
field and not per message * Fixed compatibility issue with PHP <5.3.6 *
Fixed support for headless Chrome in ChromePHPHandler * Fixed support for
latest Aws SDK in DynamoDbHandler * Fixed support for SwiftMailer 6.0+ in
SwiftMailerHandler ### 1.22.1 (2017-03-13) * Fixed lots of minor issues in
the new Slack integrations * Fixed support for allowInlineLineBreaks in
LineFormatter when formatting exception backtraces
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432274 - php-Monolog-1.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1432274
--------------------------------------------------------------------------------
================================================================================
php-consolidation-output-formatters-3.1.10-1.fc25 (FEDORA-2017-98169904d7)
Format text by applying transformations provided by plug-in formatters
--------------------------------------------------------------------------------
Update Information:
### 3.1.10 - 6 June 2017 - Typo in CalculateWidths::distributeLongColumns
causes failure for some column width distributions ### 3.1.9 - 8 May 2017 -
Improve wrapping algorithm
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1449852 - php-consolidation-output-formatters-3.1.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1449852
--------------------------------------------------------------------------------
================================================================================
php-phpmyadmin-sql-parser-4.1.8-1.fc25 (FEDORA-2017-29a15a64c7)
A validating SQL lexer and parser with a focus on MySQL dialect
--------------------------------------------------------------------------------
Update Information:
**Version 4.1.8** - 2017-07-09 * Fixed parsing SQL comment at the end of query.
* Improved handing of non utf-8 strings. * Added query flag for SET queries.
--------------------------------------------------------------------------------
================================================================================
php-symfony-polyfill-1.4.0-1.fc25 (FEDORA-2017-5a671cc9cc)
Symfony polyfills backporting features to lower PHP versions
--------------------------------------------------------------------------------
Update Information:
## v1.4.0 * Added PHP 7.2 polyfill
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1460473 - php-symfony-polyfill-1.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1460473
--------------------------------------------------------------------------------
================================================================================
php-twig-extensions-1.5.1-1.fc25 (FEDORA-2017-ddc19d6382)
Twig extensions
--------------------------------------------------------------------------------
Update Information:
Changes since 1.4.1:
https://github.com/twigphp/Twig-
extensions/compare/v1.4.1...v1.5.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1456812 - php-twig-extensions-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1456812
--------------------------------------------------------------------------------
================================================================================
poppler-0.45.0-4.fc25 (FEDORA-2017-d7a871850c)
PDF rendering library
--------------------------------------------------------------------------------
Update Information:
* CVE-2017-9406 CVE-2017-9408 various memory leak flaws
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1458703 - CVE-2017-9406 CVE-2017-9408 poppler: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1458703
--------------------------------------------------------------------------------
================================================================================
putty-0.70-1.fc25 (FEDORA-2017-efdd962fee)
SSH, Telnet and Rlogin client
--------------------------------------------------------------------------------
Update Information:
This is an update fixing CVE-2017-6542.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431716 - CVE-2017-6542 putty: Integer overflow in the
ssh_agent_channel_data
https://bugzilla.redhat.com/show_bug.cgi?id=1431716
--------------------------------------------------------------------------------
================================================================================
python-avocado-52.0-1.fc25 (FEDORA-2017-74f0ae8cef)
Framework with tools and libraries for Automated Testing
--------------------------------------------------------------------------------
Update Information:
Sync python-avocado with latest upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465409 - python-avocado-52.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1465409
--------------------------------------------------------------------------------
================================================================================
python-basemap-data-1.0.7-6.fc25 (FEDORA-2017-a68a608525)
Data for python-basemap
--------------------------------------------------------------------------------
Update Information:
Merge data into one RPM.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1203048 - Basemap data file split does not make sense
https://bugzilla.redhat.com/show_bug.cgi?id=1203048
--------------------------------------------------------------------------------
================================================================================
python-docker-py-1.10.6-2.fc25 (FEDORA-2017-9dd49fe665)
An API client for docker written in Python
--------------------------------------------------------------------------------
Update Information:
add python2 provide, based on comment:
https://bugzilla.redhat.com/show_bug.cgi?id=1443577#c11
--------------------------------------------------------------------------------
================================================================================
python-hypothesis-3.12.0-1.fc25 (FEDORA-2017-cde90848d9)
A library for property based testing
--------------------------------------------------------------------------------
Update Information:
Latest upstream version. Manpage and Python 3 version now built for EPEL7 as
well.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434387 - python-hypothesis-3.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1434387
--------------------------------------------------------------------------------
================================================================================
python-pathspec-0.5.3-1.fc25 (FEDORA-2017-7874c99ead)
Utility library for gitignore style pattern matching of file paths
--------------------------------------------------------------------------------
Update Information:
Initial import (#1465954)
--------------------------------------------------------------------------------
================================================================================
python-plaster-pastedeploy-0.3.2-2.fc25 (FEDORA-2017-6bdf44ab05)
A PasteDeploy binding to the plaster configuration loader
--------------------------------------------------------------------------------
Update Information:
Depend on python2-paste-deploy instead of python-paste-deploy. ---- Initial
release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467418 - Review Request: python-plaster-pastedeploy - A PasteDeploy binding
to the plaster configuration loader
https://bugzilla.redhat.com/show_bug.cgi?id=1467418
--------------------------------------------------------------------------------
================================================================================
python-sphinx-autobuild-0.7.1-1.fc25 (FEDORA-2017-6dcbb5681a)
Watch a Sphinx directory and rebuild the documentation
--------------------------------------------------------------------------------
Update Information:
Updated to version 0.7.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467889 - python-sphinx-autobuild-0.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1467889
--------------------------------------------------------------------------------
================================================================================
qcad-3.17.3.1-1.fc25 (FEDORA-2017-a66e0e253f)
Powerful 2D CAD system
--------------------------------------------------------------------------------
Update Information:
- Update to 3.17.3.1
--------------------------------------------------------------------------------
================================================================================
qotd-0.11.3-1.fc25 (FEDORA-2017-fa23e4d91b)
A simple and lightweight Quote of the Day daemon
--------------------------------------------------------------------------------
Update Information:
A simple and lightweight Quote of the Day daemon
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1462472 - Review Request: qotd - A simple and lightweight Quote of the Day
daemon
https://bugzilla.redhat.com/show_bug.cgi?id=1462472
--------------------------------------------------------------------------------
================================================================================
qt5-qtwebengine-5.9.1-1.fc25 (FEDORA-2017-a7a488d8d0)
Qt5 - QtWebEngine components
--------------------------------------------------------------------------------
Update Information:
This update updates QtWebEngine to the 5.9.1 release, a security and bugfix
release from the 5.9 branch. QtWebEngine 5.9.1 is part of the Qt 5.9.1 release,
but only the QtWebEngine component is included in this update. The update fixes
the following security issues in QtWebEngine 5.9.0: CVE-2017-5070,
CVE-2017-5071, CVE-2017-5075, CVE-2017-5076, CVE-2017-5077, CVE-2017-5078,
CVE-2017-5079, CVE-2017-5083, CVE-2017-5088, and CVE-2017-5089 (security fixes
from Chromium up to version 59.0.3071.104). Other notable bugfixes include: *
[QTBUG-59690] Fixed issue with drops * [QTBUG-60588] Fixed error in updating
user-agent and accept-language * [QTBUG-61047] Fixed assert in
URLRequestContextGetterQt * [QTBUG-61186] Fixed cancellation of upload folder
dialogs * [QTBUG-57675] Fixed WebEngineNewViewRequest::requestedUrl when opening
window from JavaScript
--------------------------------------------------------------------------------
================================================================================
qt5-qtwebkit-5.212.0-0.5.alpha2.fc25 (FEDORA-2017-c844713925)
Qt5 - QtWebKit components
--------------------------------------------------------------------------------
Update Information:
Qt5WebKit update to the new, maintained "annulen branch". Drop-in replacement
for the old unmaintained QtWebKit. ---- Update to annulen-branch of
qt5-qtwebkit, which contains a lot of security fixes. Drop-in replacement for
the old unmaintained qt5-qtwebkit
--------------------------------------------------------------------------------
================================================================================
rkward-0.6.5-7.fc25 (FEDORA-2017-4acde45111)
Graphical frontend for R language
--------------------------------------------------------------------------------
Update Information:
Update to R 3.4.1. This contains several significant bugfixes introduced in
3.4.0, so updating is strongly recommended. Full release notes are here:
https://cran.r-project.org/doc/manuals/r-release/NEWS.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1456452 - rpy-2.8.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1456452
--------------------------------------------------------------------------------
================================================================================
root-6.10.02-2.fc25 (FEDORA-2017-0bad35fdb1)
Numerical data analysis framework
--------------------------------------------------------------------------------
Update Information:
root 6.10.02
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1469093 - CMake config broken due to scoped targets
https://bugzilla.redhat.com/show_bug.cgi?id=1469093
--------------------------------------------------------------------------------
================================================================================
rpkg-1.49-6.fc25 (FEDORA-2017-cc3aa68a6f)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
Use python2-koji instead of koji
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1468836 - ImportError: No module named koji
https://bugzilla.redhat.com/show_bug.cgi?id=1468836
--------------------------------------------------------------------------------
================================================================================
rpy-2.8.6-1.fc25 (FEDORA-2017-4acde45111)
Python interface to the R language
--------------------------------------------------------------------------------
Update Information:
Update to R 3.4.1. This contains several significant bugfixes introduced in
3.4.0, so updating is strongly recommended. Full release notes are here:
https://cran.r-project.org/doc/manuals/r-release/NEWS.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1456452 - rpy-2.8.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1456452
--------------------------------------------------------------------------------
================================================================================
rubygem-diffy-3.2.0-1.1.fc25 (FEDORA-2017-d7ee29e6ad)
A convenient way to diff string in ruby
--------------------------------------------------------------------------------
Update Information:
new update
--------------------------------------------------------------------------------
================================================================================
rust-srpm-macros-4-2.fc25 (FEDORA-2017-925eed2733)
RPM macros for building Rust source packages
--------------------------------------------------------------------------------
Update Information:
Rust-packaging related packages
--------------------------------------------------------------------------------
================================================================================
screen-4.6.1-1.fc25 (FEDORA-2017-041c266c46)
A screen manager that supports multiple logins on one terminal
--------------------------------------------------------------------------------
Update Information:
Rebase to the latest upstream version 4.6.0 Changes: * Update Unicode wide
tables to 9.0 * Support more serial speeds * Improved namespaces support *
Migrate from fifos to sockets * Start viewing scrollback at first line of
output * problems with starting session in some cases * parallel make
install * segfault when querying info on nonUTF locale
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1466080 - screen-4.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1466080
[ 2 ] Bug #1469323 - screen-4.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1469323
--------------------------------------------------------------------------------
================================================================================
tracer-0.6.13-1.fc25 (FEDORA-2017-0e8d47812d)
Finds outdated running applications in your system
--------------------------------------------------------------------------------
Update Information:
Features: - report reboot for new kernels (#83) - Get daemon names from dbus
(#82) - bash completion support - Use ID_LIKE in /etc/os-release (#81)
Bugfixes: - Fixes #85 - Always respect app type defines - Fixes #84 - ignore
flag is now respected - Fixes #20 - print executable in interactive mode - Fixes
#56 - Add Ubunut support - Fixes #76 - polkitd service can be restarted - Fixes
#73 - add support for Oracle Linux - Fixes #66 - reconise postfix process
correctly - Fixes #68 - recognised SSH sessions correctly
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1469282 - tracer-common should require python3-argcomplete
https://bugzilla.redhat.com/show_bug.cgi?id=1469282
--------------------------------------------------------------------------------
================================================================================
vim-8.0.705-1.fc25 (FEDORA-2017-9075f30365)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit.
--------------------------------------------------------------------------------
================================================================================
xen-4.7.3-1.fc25 (FEDORA-2017-ddd2aa1a04)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
update to xen-4.7.3
--------------------------------------------------------------------------------
================================================================================
xiphos-4.0.5-2.fc25 (FEDORA-2017-70aed6762a)
Bible study and research tool
--------------------------------------------------------------------------------
Update Information:
Fix post install scripts for upgrades
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448623 - GUI broken & Error with RPM Script
https://bugzilla.redhat.com/show_bug.cgi?id=1448623
--------------------------------------------------------------------------------
================================================================================
xoreos-tools-0.0.4-2.fc25 (FEDORA-2017-ce142c9640)
Tools to help the development of xoreos
--------------------------------------------------------------------------------
Update Information:
Tools to aid in the development of xoreos
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465588 - Review Request: xoreos-tools - Tools to help the development of
xoreos
https://bugzilla.redhat.com/show_bug.cgi?id=1465588
--------------------------------------------------------------------------------
================================================================================
yash-2.45-1.fc25 (FEDORA-2017-4f36a90573)
Yet Another SHell
--------------------------------------------------------------------------------
Update Information:
New version 2.45 is released
--------------------------------------------------------------------------------