The following Fedora 25 Security updates need testing:
Age URL
87
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-06f4b88ceb
php-onelogin-php-saml-2.10.5-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9801754fd7
drupal8-8.2.7-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-25ffd5b236
webkitgtk4-2.16.0-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d219f0e5fc sscg-2.0.4-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-42ebcac2b5 erlang-19.3-2.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0196511d58
moodle-3.1.5-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90aaa5bd24
kernel-4.10.5-200.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-340718eb7b
sane-backends-1.0.25-7.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8ac84a5cc3 samba-4.5.7-0.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-71e69a691b pcs-0.9.156-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5ebac1c112
ntp-4.2.6p5-44.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5e945de883
tcpreplay-4.2.1-1.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
17
https://bodhi.fedoraproject.org/updates/FEDORA-2017-803e6bacb4
pungi-4.1.13-1.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7799a1cc7c
appliance-tools-008.0-4.fc25 livecd-tools-24.2-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-25ffd5b236
webkitgtk4-2.16.0-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7c824da25f nss-3.29.3-1.0.fc25
nss-softokn-3.29.3-1.0.fc25 nss-util-3.29.3-1.0.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-877a8cad15 llvm-3.9.1-2.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f1d4173e23 vim-8.0.502-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5ef495990b
gnome-themes-standard-3.22.3-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-45d8f0dfeb
augeas-1.8.0-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8ac84a5cc3 samba-4.5.7-0.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90aaa5bd24
kernel-4.10.5-200.fc25
The following builds have been pushed to Fedora 25 updates-testing
GeoIP-1.6.9-4.fc25
armadillo-7.800.2-1.fc25
augeas-1.8.0-1.fc25
dnfdragora-1.0.0-5.git20170322.798975a.fc25
eqp-09e-5.fc25
gnome-themes-standard-3.22.3-1.fc25
heaptrack-1.0.0-3.fc25
jovie-16.12.3-1.fc25
kaccessible-16.12.3-1.fc25
kcron-16.12.3-1.fc25
kernel-4.10.5-200.fc25
kf5-kross-interpreters-16.12.3-1.fc25
kmag-16.12.3-1.fc25
kmousetool-16.12.3-1.fc25
kmouth-16.12.3-1.fc25
ksystemlog-16.12.3-1.fc25
libyui-mga-gtk-1.0.2-0.7.git22f2cf6.20131215.fc25
libyui-mga-ncurses-1.0.2-0.6.git026f2e6.20131215.fc25
libyui-mga-qt-1.0.3-0.6.gitb508e88.20140119.fc25
nodejs-6.10.1-1.fc25
nrpe-3.0.1-6.fc25
ntp-4.2.6p5-44.fc25
pcs-0.9.156-2.fc25
perl-DateTime-Format-Flexible-0.28-1.fc25
perl-HTML-Selector-XPath-0.23-1.fc25
pkgconf-1.3.2-1.fc25
plasma-workspace-5.8.6-5.fc25
python-pygments-2.2.0-7.fc25
qbittorrent-3.3.11-2.fc25
qupzilla-2.1.2-1.fc25
samba-4.5.7-0.fc25
sane-backends-1.0.25-7.fc25
speedtest-cli-1.0.2-1.fc25
tcpreplay-4.2.1-1.fc25
vdr-epg-daemon-1.1.114-1.fc25
vdr-epg2vdr-1.1.55-1.fc25
wine-2.4-2.fc25
wine-mono-4.7.0-1.fc25
znc-1.6.5-1.fc25
Details about builds:
================================================================================
GeoIP-1.6.9-4.fc25 (FEDORA-2017-f8a9655a1c)
Library for country/city/organization to IP address or hostname mapping
--------------------------------------------------------------------------------
Update Information:
Fix GeoIP_database_info truncation issue: *
https://github.com/maxmind/geoip-
api-c/issues/79 *
https://github.com/maxmind/geoip-api-c/pull/80
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1426853 - GeoIP_database_info is not returning full string from database
https://bugzilla.redhat.com/show_bug.cgi?id=1426853
--------------------------------------------------------------------------------
================================================================================
armadillo-7.800.2-1.fc25 (FEDORA-2017-2f07846e3e)
Fast C++ matrix library with syntax similar to MATLAB and Octave
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release. This is a minor update that fixes some
small issues regarding: * the display of complex or real number; * the
documentation.
--------------------------------------------------------------------------------
================================================================================
augeas-1.8.0-1.fc25 (FEDORA-2017-45d8f0dfeb)
A library for changing configuration files
--------------------------------------------------------------------------------
Update Information:
1.8.0 - 2017-03-20 - General changes/additions * augtool: add a 'source'
command exposing the aug_source API call * augtool: add a 'context' command
to make changing into a node more discoverable * augtool: add an
'info' command to print important information * augtool: dramatically reduce
memory consumption when all lenses are loaded by more aggressively
releasing temporary data structures. On my machine, maximum memory usage
of 'augtool -L' drops from roughly 90MB to about 20MB. This will not
change the amount of memory used when only specific lenses are used, only
the default behavior of loading all lenses, i.e., when -A is not passed.
* make building augtool statically possible (J��rg Krause) * split aug_to_xml
into its own source file, so that statically linking against libaugeas.a
doesn't require also linking against libXml2 and its dependencies,
provided aug_to_xml is not needed. - API changes * add aug_source to find
the source file for a particular node * reduce memory consumption when
AUG_NO_MODL_AUTOLOAD is _not_ passed; exact same details as described
above for augtool - Lens changes/additions * Chrony: allow floating point
numbers (Miroslav Lichvar) add new directives from chrony 3.0 and
3.1 (Miroslav Lichvar) * Krb5: support include/includedir directives (Jason
Smith) (Issue #430) support realms that start with numbers (Dustin
Wheeler) (Issue #437) * Multipath: update to multipath-0.4.9-99.el7 (Xavier
Mol) * Php: also look for FPM files in /etc/php/*/fpm/pool.d (Daniel Dico)
* Postfix_virtual: allow underscores in e-mail addresses (Jason Lingohr)
(Issue #439) * Radicale: new lens for config of
http://radicale.org/ (James
Valleroy) * Rsyslog: support multiple options in module statements (Craig
Miskell) * Ssh: also look for files in in /etc/ssh/ssh_config.d (Ian
Mortimer) * Tmpfiles: parse 'q'/'Q' modes, parse two-character
arguments,
parse three-digit file modes * Xml: support external entity declarations in
the doctype (Issue #142) * Yum: also read DNF files from /etc/dnf (Pat
Riehecky) (Issue #434)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434191 - augeas-1.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1434191
--------------------------------------------------------------------------------
================================================================================
dnfdragora-1.0.0-5.git20170322.798975a.fc25 (FEDORA-2017-c82968b68c)
DNF package-manager based on libYui abstraction
--------------------------------------------------------------------------------
Update Information:
### Dnfdragora * Updated to snapshot fixing an issue with the ncurses interface
* Add gui-subpkg ### Libyui-mga-* * Add Provides: %{libsuffix}-mga-{gui|tui}
--------------------------------------------------------------------------------
================================================================================
eqp-09e-5.fc25 (FEDORA-2017-91f9f7704e)
Automated theorem prover for first-order equational logic
--------------------------------------------------------------------------------
Update Information:
This is a new package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #769958 - Review Request: eqp - Automated theorem prover for first-order
equational logic
https://bugzilla.redhat.com/show_bug.cgi?id=769958
--------------------------------------------------------------------------------
================================================================================
gnome-themes-standard-3.22.3-1.fc25 (FEDORA-2017-5ef495990b)
Standard themes for GNOME applications
--------------------------------------------------------------------------------
Update Information:
Update to 3.22.3
--------------------------------------------------------------------------------
================================================================================
heaptrack-1.0.0-3.fc25 (FEDORA-2017-721817bf56)
A heap memory profiler for Linux
--------------------------------------------------------------------------------
Update Information:
Heaptrack traces all memory allocations and annotates these events with stack
traces.Dedicated analysis tools then allow you to interpret the heap memory
profile to: - find hotspots that need to be optimized to reduce the memory
footprint of your application - find memory leaks, i.e. locations that allocate
memory which is never deallocated - find allocation hotspots, i.e. code
locations that trigger a lot of memory allocation calls - find temporary
allocations, which are allocations that are directly followed by their
deallocation
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431019 - Review Request: heaptrack - A heap memory profiler for Linux
https://bugzilla.redhat.com/show_bug.cgi?id=1431019
--------------------------------------------------------------------------------
================================================================================
jovie-16.12.3-1.fc25 (FEDORA-2017-df5be20dbb)
Text to speech support
--------------------------------------------------------------------------------
Update Information:
KDE Accessibility Applications 16.12.3,
https://www.kde.org/announcements
/announce-applications-16.12.3.php
--------------------------------------------------------------------------------
================================================================================
kaccessible-16.12.3-1.fc25 (FEDORA-2017-df5be20dbb)
An accessibility bridge plugin
--------------------------------------------------------------------------------
Update Information:
KDE Accessibility Applications 16.12.3,
https://www.kde.org/announcements
/announce-applications-16.12.3.php
--------------------------------------------------------------------------------
================================================================================
kcron-16.12.3-1.fc25 (FEDORA-2017-e527628914)
Cron KDE configuration module
--------------------------------------------------------------------------------
Update Information:
KDE Admin Applications 16.12.3,
https://www.kde.org/announcements/announce-
applications-16.12.3.php
--------------------------------------------------------------------------------
================================================================================
kernel-4.10.5-200.fc25 (FEDORA-2017-90aaa5bd24)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.10.5 stable kernel update contains a number of important fixes across the
tree. ---- The 4.10.4 stable kernel update contains a number of important
fixes across the tree. It also reverts CONFIG_CFG80211_CRDA_SUPPORT to match the
previous 4.9 kernels. ---- The 4.10.3 kernel rebase contains a number of new
features, important fixes, and additional hardware support.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432429 - CVE-2017-6874 kernel: Race condition in kernel/ucount.c
https://bugzilla.redhat.com/show_bug.cgi?id=1432429
--------------------------------------------------------------------------------
================================================================================
kf5-kross-interpreters-16.12.3-1.fc25 (FEDORA-2017-1c091851d0)
Kross interpreters for KDE Frameworks 5
--------------------------------------------------------------------------------
Update Information:
KDE Bindings 16.12.3,
https://www.kde.org/announcements/announce-
applications-16.12.3.php
--------------------------------------------------------------------------------
================================================================================
kmag-16.12.3-1.fc25 (FEDORA-2017-df5be20dbb)
A screen magnifier
--------------------------------------------------------------------------------
Update Information:
KDE Accessibility Applications 16.12.3,
https://www.kde.org/announcements
/announce-applications-16.12.3.php
--------------------------------------------------------------------------------
================================================================================
kmousetool-16.12.3-1.fc25 (FEDORA-2017-df5be20dbb)
A program that clicks the mouse for you
--------------------------------------------------------------------------------
Update Information:
KDE Accessibility Applications 16.12.3,
https://www.kde.org/announcements
/announce-applications-16.12.3.php
--------------------------------------------------------------------------------
================================================================================
kmouth-16.12.3-1.fc25 (FEDORA-2017-df5be20dbb)
A program that speaks for you
--------------------------------------------------------------------------------
Update Information:
KDE Accessibility Applications 16.12.3,
https://www.kde.org/announcements
/announce-applications-16.12.3.php
--------------------------------------------------------------------------------
================================================================================
ksystemlog-16.12.3-1.fc25 (FEDORA-2017-e527628914)
System Log Viewer for KDE
--------------------------------------------------------------------------------
Update Information:
KDE Admin Applications 16.12.3,
https://www.kde.org/announcements/announce-
applications-16.12.3.php
--------------------------------------------------------------------------------
================================================================================
libyui-mga-gtk-1.0.2-0.7.git22f2cf6.20131215.fc25 (FEDORA-2017-c82968b68c)
Libyui-Gtk extensions for Mageia tools
--------------------------------------------------------------------------------
Update Information:
### Dnfdragora * Updated to snapshot fixing an issue with the ncurses interface
* Add gui-subpkg ### Libyui-mga-* * Add Provides: %{libsuffix}-mga-{gui|tui}
--------------------------------------------------------------------------------
================================================================================
libyui-mga-ncurses-1.0.2-0.6.git026f2e6.20131215.fc25 (FEDORA-2017-c82968b68c)
Libyui-Ncurses extensions for Mageia tools
--------------------------------------------------------------------------------
Update Information:
### Dnfdragora * Updated to snapshot fixing an issue with the ncurses interface
* Add gui-subpkg ### Libyui-mga-* * Add Provides: %{libsuffix}-mga-{gui|tui}
--------------------------------------------------------------------------------
================================================================================
libyui-mga-qt-1.0.3-0.6.gitb508e88.20140119.fc25 (FEDORA-2017-c82968b68c)
Libyui-Qt extensions for Mageia tools
--------------------------------------------------------------------------------
Update Information:
### Dnfdragora * Updated to snapshot fixing an issue with the ncurses interface
* Add gui-subpkg ### Libyui-mga-* * Add Provides: %{libsuffix}-mga-{gui|tui}
--------------------------------------------------------------------------------
================================================================================
nodejs-6.10.1-1.fc25 (FEDORA-2017-7fe9de9bc9)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
Update to 6.10.1
--------------------------------------------------------------------------------
================================================================================
nrpe-3.0.1-6.fc25 (FEDORA-2017-d12527a635)
Host/service/network monitoring agent for Nagios
--------------------------------------------------------------------------------
Update Information:
Redo the nagios policy to lower its all the permissions. ---- Remember to add
the patch so it can build.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #970997 - Allow multiple packets to be received
https://bugzilla.redhat.com/show_bug.cgi?id=970997
[ 2 ] Bug #1236081 - nrpe: /var/run/nrpe owner mismatch
https://bugzilla.redhat.com/show_bug.cgi?id=1236081
[ 3 ] Bug #1318773 - nrpe.service sets User/Group, prevents normal .cfg user/group
setting
https://bugzilla.redhat.com/show_bug.cgi?id=1318773
[ 4 ] Bug #1412214 - NRPE systemd service file does not support reload command
https://bugzilla.redhat.com/show_bug.cgi?id=1412214
[ 5 ] Bug #1428769 - NRPE uses nagios log dir for pid file
https://bugzilla.redhat.com/show_bug.cgi?id=1428769
--------------------------------------------------------------------------------
================================================================================
ntp-4.2.6p5-44.fc25 (FEDORA-2017-5ebac1c112)
The NTP daemon and utilities
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-6464 CVE-2017-6462 CVE-2017-6463 CVE-2017-6458
CVE-2017-6451.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434011 - CVE-2017-6451 ntp: Improper use of snprintf() in mx4200_send()
https://bugzilla.redhat.com/show_bug.cgi?id=1434011
[ 2 ] Bug #1434005 - CVE-2017-6458 ntp: Potential Overflows in ctl_put() functions
https://bugzilla.redhat.com/show_bug.cgi?id=1434005
[ 3 ] Bug #1434002 - CVE-2017-6463 ntp: Authenticated DoS via Malicious Config Option
https://bugzilla.redhat.com/show_bug.cgi?id=1434002
[ 4 ] Bug #1433995 - CVE-2017-6462 ntp: Buffer Overflow in DPTS Clock
https://bugzilla.redhat.com/show_bug.cgi?id=1433995
[ 5 ] Bug #1433987 - CVE-2017-6464 ntp: Denial of Service via Malformed Config
https://bugzilla.redhat.com/show_bug.cgi?id=1433987
--------------------------------------------------------------------------------
================================================================================
pcs-0.9.156-2.fc25 (FEDORA-2017-71e69a691b)
Pacemaker Configuration System
--------------------------------------------------------------------------------
Update Information:
- Security fix for CVE-2017-2661: Improper node name field validation when
creating clusters leads to XSS - Re-added support for clufter as it is now
available for Python 3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1428948 - CVE-2017-2661 pcs: Improper node name field validation when
creating clusters leads to XSS
https://bugzilla.redhat.com/show_bug.cgi?id=1428948
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-Format-Flexible-0.28-1.fc25 (FEDORA-2017-5de05b1ab9)
Flexibly parse strings and turn them into DateTime objects
--------------------------------------------------------------------------------
Update Information:
This release fixes tests to work on Perl without "." in @INC path. We deliver
this release to provide up-to-date version string.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1435489 - perl-DateTime-Format-Flexible-0.28 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1435489
--------------------------------------------------------------------------------
================================================================================
perl-HTML-Selector-XPath-0.23-1.fc25 (FEDORA-2017-5919f77fc8)
CSS Selector to XPath compiler
--------------------------------------------------------------------------------
Update Information:
----
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1435194 - Upgrade perl-HTML-Selector-XPath to 0.22
https://bugzilla.redhat.com/show_bug.cgi?id=1435194
--------------------------------------------------------------------------------
================================================================================
pkgconf-1.3.2-1.fc25 (FEDORA-2017-a33e541d01)
Package compiler and linker metadata toolkit
--------------------------------------------------------------------------------
Update Information:
- **Features**: - implement `--short-errors` - **Bug fixes**: - only
consider a single package at a time with `--print-requires`, `--print-requires-
private`, `--print-provides`, `--modversion`, `--print-variable` and `--print-
variables` - rewrite handling of `--modversion`, `--print-variables` and
`--variable` to not require the dependency resolver - Enhancements: -
synchronized latest
freedesktop.org changes to pkg.m4 - improve error
reporting with legacy `--atleast-version` and similar flags
--------------------------------------------------------------------------------
================================================================================
plasma-workspace-5.8.6-5.fc25 (FEDORA-2017-ec66f59858)
Plasma workspace, applications and applets
--------------------------------------------------------------------------------
Update Information:
Pull in some 5.8 fixes, including one for a potential crash-on-logout.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434870 - plasma closed UNexpectedly during logout
https://bugzilla.redhat.com/show_bug.cgi?id=1434870
--------------------------------------------------------------------------------
================================================================================
python-pygments-2.2.0-7.fc25 (FEDORA-2017-3ceb94d98d)
Syntax highlighting engine written in Python
--------------------------------------------------------------------------------
Update Information:
- Update for 2.2.0 - Remove python26 builds - Spec clean up - Python3 now houses
the binary - python2-pygments is provided
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1415531 - python-pygments-2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1415531
[ 2 ] Bug #1153993 - python-pygments-2.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1153993
[ 3 ] Bug #1323256 - Use python3 for /usr/bin/pygmentize
https://bugzilla.redhat.com/show_bug.cgi?id=1323256
[ 4 ] Bug #1429075 - python3-pygments needs to declare conflict with old
python-pygments
https://bugzilla.redhat.com/show_bug.cgi?id=1429075
[ 5 ] Bug #1433650 - python-pygments: nothing provides python2-pygments
https://bugzilla.redhat.com/show_bug.cgi?id=1433650
--------------------------------------------------------------------------------
================================================================================
qbittorrent-3.3.11-2.fc25 (FEDORA-2017-1203f53a2c)
A Bittorrent Client
--------------------------------------------------------------------------------
Update Information:
fix fedora update
--------------------------------------------------------------------------------
================================================================================
qupzilla-2.1.2-1.fc25 (FEDORA-2017-2c6e03ee85)
Modern web browser
--------------------------------------------------------------------------------
Update Information:
An update of QupZilla to the latest upstream bugfix release, version 2.1.2: *
updated translations * fix middle click on links sometimes not opening new tab *
fix scrolling to anchors when opening tab in background * fix possible crash in
AdBlock when editing subscribptions * fix clicking on go icon in locationbar *
fix possible crash with native scrollbars Note that this build keeps native
scrollbars enabled by default, as was the case in 2.1.0 and 2.1.1. If you
experience issues with smooth scrolling performance with native scrollbars
(
https://github.com/QupZilla/qupzilla/issues/2246), I recommend disabling smooth
scrolling (and I might disable it by default in a later update).
--------------------------------------------------------------------------------
================================================================================
samba-4.5.7-0.fc25 (FEDORA-2017-8ac84a5cc3)
Server and Client software to interoperate with Windows machines
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-2619
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429472 - CVE-2017-2619 samba: symlink race permits opening files outside
share directory
https://bugzilla.redhat.com/show_bug.cgi?id=1429472
--------------------------------------------------------------------------------
================================================================================
sane-backends-1.0.25-7.fc25 (FEDORA-2017-340718eb7b)
Scanner access software
--------------------------------------------------------------------------------
Update Information:
CVE-2017-6318 sane-backends: SANE_NET_CONTROL_OPTION response packet may contain
memory contents of the server [fedora-all]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1428886 - CVE-2017-6318 sane-backends: SANE_NET_CONTROL_OPTION response
packet may contain memory contents of the server [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1428886
--------------------------------------------------------------------------------
================================================================================
speedtest-cli-1.0.2-1.fc25 (FEDORA-2017-9c61460fa5)
Command line interface for testing internet bandwidth
--------------------------------------------------------------------------------
Update Information:
Updated to 1.0.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1426753 - speedtest-cli 1.0.2 available
https://bugzilla.redhat.com/show_bug.cgi?id=1426753
[ 2 ] Bug #1387821 - [abrt] speedtest-cli: ssl.py:570:read:socket.timeout: The read
operation timed out
https://bugzilla.redhat.com/show_bug.cgi?id=1387821
[ 3 ] Bug #1395369 - [abrt] speedtest-cli: ssl.py:575:read:socket.timeout: The read
operation timed out
https://bugzilla.redhat.com/show_bug.cgi?id=1395369
--------------------------------------------------------------------------------
================================================================================
tcpreplay-4.2.1-1.fc25 (FEDORA-2017-5e945de883)
Replay captured network traffic
--------------------------------------------------------------------------------
Update Information:
Here is what is fixed in this release: - Fix reporting of rates < 1Mbps (#348)
- Option --unique-ip not working properly (#346) ---- Features and fixes
include: - MAC rewriting capabilities by Pedro Arthur (#313) - Fix several
issues identified by Coverity (#305) - Packet distortion --fuzz-seed option by
Gabriel Ganne (#302) - Add --unique-ip-loops option to modify IPs every few
loops (#296) - Netmap startup delay increase (#290) - tcpcapinfo buffer overflow
vulnerablily (#278) - Update git-clone instructions by Kyle McDonald (#277) -
Allow fractions for --pps option (#270) - Print per-loop stats with --stats=0
(#269) - Add protection against packet drift by Guillaume Scott (#268) - Print
flow stats periodically with --stats output (#262) - Include Travis-CI build
support by Ilya Shipitsin (#264) (#285) - tcpreplay won't replay all packets in
a pcap file with --netmap (#255) - First and last packet times in --stats
output (#239) - Switch to wire speed after 30 minutes at 6 Gbps (#210) -
tcprewrite fix checksum properly for fragmented packets (#190)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429521 - CVE-2017-6429 tcpreplay: Buffer overflow in Tcpcapinfo utility
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1429521
[ 2 ] Bug #1429522 - CVE-2017-6429 tcpreplay: Buffer overflow in Tcpcapinfo utility
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1429522
--------------------------------------------------------------------------------
================================================================================
vdr-epg-daemon-1.1.114-1.fc25 (FEDORA-2017-64d0353dea)
A daemon to download EPG data from internet and manage it in a mysql database
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.114 ---- Update to 1.1.112 ---- Update to 1.1.110 ----
Update to 1.1.108 ---- Update to 1.1.107 ---- Update to 1.1.106 ----
Update to 1.1.103 ---- Update to 1.1.102 ---- Update to 1.1.101 ----
Update to 1.1.100 ---- Update to 1.1.99 ---- Changed INIT_AFTER to
mariadb.service in Make.config ---- Update to 1.1.97 ---- Update to 1.1.95
---- Update to 1.94 ---- Update to 1.1.93 ---- Update to 1.1.91 ----
Update to 1.1.90 ---- Update to 1.1.89
--------------------------------------------------------------------------------
================================================================================
vdr-epg2vdr-1.1.55-1.fc25 (FEDORA-2017-a26d450c33)
A plugin to retrieve EPG data from a mysql database into VDR
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.55 ---- Update to 1.1.52 ---- Update to 1.1.50 ---- Update
to 1.1.49 ---- Update to 1.1.48 ---- Update to 1.1.47 ---- Update to
1.1.46
--------------------------------------------------------------------------------
================================================================================
wine-2.4-2.fc25 (FEDORA-2017-bb813e8331)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
Built-in implementation of cryptographic hashes. Mono engine updated
with upstream fixes. More Direct3D command stream work. Simulated bold
and italic in DirectWrite. Improvements to the XML reader. Various bug
fixes. Wine-staging Implementation of more System/Process/Thread
information classes and values. More complete object type implementation.
Improved GDI+ scaling performance. Various smaller improvements.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1433682 - wine-2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1433682
--------------------------------------------------------------------------------
================================================================================
wine-mono-4.7.0-1.fc25 (FEDORA-2017-bb813e8331)
Mono library required for Wine
--------------------------------------------------------------------------------
Update Information:
Built-in implementation of cryptographic hashes. Mono engine updated
with upstream fixes. More Direct3D command stream work. Simulated bold
and italic in DirectWrite. Improvements to the XML reader. Various bug
fixes. Wine-staging Implementation of more System/Process/Thread
information classes and values. More complete object type implementation.
Improved GDI+ scaling performance. Various smaller improvements.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1433682 - wine-2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1433682
--------------------------------------------------------------------------------
================================================================================
znc-1.6.5-1.fc25 (FEDORA-2017-1d2e21c6b2)
An advanced IRC bouncer
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429068 - znc-1.6.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1429068
--------------------------------------------------------------------------------