The following Fedora 25 Security updates need testing:
Age URL
44
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
40
https://bodhi.fedoraproject.org/updates/FEDORA-2016-87dc28b1a0
w3m-0.5.3-27.git20161120.fc25
24
https://bodhi.fedoraproject.org/updates/FEDORA-2017-da50adf63e
boomaga-0.8.0-6.git97f52c1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-307dcf0411
drupal7-title-1.0-0.7.alpha9.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c9828b259c
lynx-2.8.9-0.14.dev11.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-63697e7e0f sshrc-0.6.1-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-504745c0b4
mingw-gstreamer1-1.11.1-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b3b65a20c4
python-peewee-2.8.5-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bb85326b52
mingw-gstreamer1-plugins-base-1.11.1-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4c593cfa4a
mingw-gstreamer1-plugins-good-1.11.1-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5f80c62e31
mingw-gstreamer1-plugins-bad-free-1.11.1-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f787c35494
libwmf-0.2.8.4-50.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2bb174ae3c
zoneminder-1.28.1-8.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1855c8af2c
netpbm-10.77.00-3.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c3739273e5
mingw-gtk-vnc-0.7.0-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ab04a91edd
gtk-vnc-0.7.0-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c0564718ea
mingw-gstreamer1-1.10.3-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a56d78acb8
mingw-gstreamer1-plugins-base-1.10.3-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1fc4026d15
mingw-gstreamer1-plugins-good-1.10.3-1.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
30
https://bodhi.fedoraproject.org/updates/FEDORA-2017-70547b9af8
python-productmd-1.4-1.fc25
21
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d117622795
pungi-4.1.12-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ae05043e23
python3-3.5.3-1.fc25 python3-docs-3.5.3-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-adc3383af9
python-pyasn1-0.2.1-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9f6383547e
libglvnd-0.2.999-10.gitdc16f8c.fc25 mesa-13.0.4-1.fc25 wlc-0.0.7-3.git12ee978.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-721dd0ec54
ntfs-3g-2016.2.22-4.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3b058684fa
xkeyboard-config-2.20-2.fc25
The following builds have been pushed to Fedora 25 updates-testing
arduino-builder-1.0.5-3.fc25
atomic-1.15.3-2.fc25
bacula-7.4.5-1.fc25
bacula-docs-7.4.5-1.fc25
castxml-0.1-0.15.20170113gite7252f5.fc25
dnfdragora-0.0.0-0.111.git20170207.783aede.fc25
erlang-19.2.3-1.fc25
fawkes-1.0.1-1.fc25
fifechan-0.1.4-1.fc25
flr-0.0.2-1.fc25
gromacs-2016.2-1.fc25
gspell-1.2.2-1.fc25
gtk-vnc-0.7.0-1.fc25
ibus-typing-booster-1.5.21-1.fc25
liblognorm-2.0.2-2.fc25
libnfsidmap-0.27-1.fc25
libpst-0.6.70-1.fc25
libssh-0.7.4-1.fc25
libwmf-0.2.8.4-50.fc25
mate-terminal-1.16.2-1.fc25
meson-0.38.1-1.fc25
mingw-gstreamer1-1.10.3-1.fc25
mingw-gstreamer1-plugins-bad-free-1.11.1-1.fc25
mingw-gstreamer1-plugins-base-1.10.3-1.fc25
mingw-gstreamer1-plugins-base-1.11.1-1.fc25
mingw-gstreamer1-plugins-good-1.10.3-1.fc25
mingw-gstreamer1-plugins-good-1.11.1-1.fc25
mingw-gtk-vnc-0.7.0-1.fc25
netpbm-10.77.00-3.fc25
nfs-ganesha-2.4.3-1.fc25
nodejs-qtdatastream-0.7.0-1.fc25
ntfs-3g-2016.2.22-4.fc25
oci-systemd-hook-0.1.5-1.git16f7c8a.fc25
openvpn-2.4.0-1.fc25
perl-HTTP-Entity-Parser-0.19-1.fc25
perl-List-AllUtils-0.14-1.fc25
perl-Sub-Exporter-Lexical-0.092292-2.fc25
perl-Type-Tie-0.009-2.fc25
perl-Types-Path-Tiny-0.005-1.fc25
php-cs-fixer-2.0.1-1.fc25
php-league-flysystem-1.0.35-1.fc25
php-pear-1.10.1-9.fc25
php-pecl-memcached-3.0.1-1.fc25
php-phpunit-PHPUnit-5.7.12-1.fc25
php-phpunit-phpcpd-3.0.0-1.fc25
python-ansible-tower-cli-3.0.3-1.fc25
python-bugzilla-2.0.0-1.fc25
python-cotyledon-1.6.7-1.fc25
python-django-mptt-0.8.6-2.fc25
python-jira-1.0.7-1.fc25
python-peewee-2.8.5-2.fc25
python-pifpaf-0.24.1-1.fc25
python-pyvo-0.5.2-1.fc25
python-semver-2.7.5-1.fc25
python-tooz-1.48.0-1.fc25
qt5ct-0.30-1.fc25
qupzilla-2.1.0-2.fc25
rpmlint-1.9-7.fc25
snap-photobooth-0.3.0.1-8.fc25
switchboard-2.2.1-2.fc25
vdr-epg-daemon-1.1.90-1.fc25
vdr-epg2vdr-1.1.32-1.fc25
xkeyboard-config-2.20-2.fc25
xrootd-4.6.0-1.fc25
zoneminder-1.28.1-8.fc25
Details about builds:
================================================================================
arduino-builder-1.0.5-3.fc25 (FEDORA-2017-e26cf562b7)
A command line tool for compiling Arduino sketches
--------------------------------------------------------------------------------
Update Information:
initial package build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1394193 - Review Request: arduino-builder - A command line tool for compiling
Arduino sketches
https://bugzilla.redhat.com/show_bug.cgi?id=1394193
--------------------------------------------------------------------------------
================================================================================
atomic-1.15.3-2.fc25 (FEDORA-2017-1def5655ad)
Tool for managing ProjectAtomic systems and containers
--------------------------------------------------------------------------------
Update Information:
Also fixes issue with atomic run IMAGE command Lots of improvements on handling
simple signing. ---- bump to v1.15.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1387860 - Error message when the atomic command is used with bash-completion
https://bugzilla.redhat.com/show_bug.cgi?id=1387860
[ 2 ] Bug #1414010 - Regression: Atomic DBus VulnerabilityInfo API hangs loading results
from /var/lib/atomic
https://bugzilla.redhat.com/show_bug.cgi?id=1414010
[ 3 ] Bug #1413862 - Regression: 'atomic storage reset' now requires additional
arguments
https://bugzilla.redhat.com/show_bug.cgi?id=1413862
--------------------------------------------------------------------------------
================================================================================
bacula-7.4.5-1.fc25 (FEDORA-2017-860cac27ca)
Cross platform network backup for Linux, Unix, Mac and Windows
--------------------------------------------------------------------------------
Update Information:
Bacula update to 7.4.5.
--------------------------------------------------------------------------------
================================================================================
bacula-docs-7.4.5-1.fc25 (FEDORA-2017-860cac27ca)
Bacula documentation
--------------------------------------------------------------------------------
Update Information:
Bacula update to 7.4.5.
--------------------------------------------------------------------------------
================================================================================
castxml-0.1-0.15.20170113gite7252f5.fc25 (FEDORA-2017-ce9defb422)
C-family abstract syntax tree XML output tool
--------------------------------------------------------------------------------
Update Information:
Updated git snapshot.
--------------------------------------------------------------------------------
================================================================================
dnfdragora-0.0.0-0.111.git20170207.783aede.fc25 (FEDORA-2017-1da12e7c8e)
DNF package-manager based on libYui abstraction
--------------------------------------------------------------------------------
Update Information:
* New snapshot
--------------------------------------------------------------------------------
================================================================================
erlang-19.2.3-1.fc25 (FEDORA-2017-86748567f7)
General-purpose programming language and runtime environment
--------------------------------------------------------------------------------
Update Information:
* Ver. 19.2.3 ---- * Ver. 19.2.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1420305 - erlang-19.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1420305
[ 2 ] Bug #1418262 - erlang-19.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1418262
--------------------------------------------------------------------------------
================================================================================
fawkes-1.0.1-1.fc25 (FEDORA-2017-d7123fa246)
Robot Software Framework
--------------------------------------------------------------------------------
Update Information:
Upgrade to latest stable release 1.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1392129 - FTBFS fawkes failes to build with openssl 1.1.0
https://bugzilla.redhat.com/show_bug.cgi?id=1392129
--------------------------------------------------------------------------------
================================================================================
fifechan-0.1.4-1.fc25 (FEDORA-2017-f2df975e91)
C++ GUI library designed for games
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.4
--------------------------------------------------------------------------------
================================================================================
flr-0.0.2-1.fc25 (FEDORA-2017-b86629264d)
Fedora Releng python libraries and command line tools
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream ---- First release of flr for Fedora.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1411502 - Review Request: flr - Fedora RelEng python libraries and command
line tools
https://bugzilla.redhat.com/show_bug.cgi?id=1411502
--------------------------------------------------------------------------------
================================================================================
gromacs-2016.2-1.fc25 (FEDORA-2017-f3e1b3be83)
Fast, Free and Flexible Molecular Dynamics
--------------------------------------------------------------------------------
Update Information:
Update to 2016.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1420141 - gromacs-2016.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1420141
--------------------------------------------------------------------------------
================================================================================
gspell-1.2.2-1.fc25 (FEDORA-2017-0b30cb327a)
Spell-checking library for GTK+
--------------------------------------------------------------------------------
Update Information:
gspell 1.2.2 release. For details, see
https://mail.gnome.org/archives/ftp-
release-list/2016-December/msg00059.html
--------------------------------------------------------------------------------
================================================================================
gtk-vnc-0.7.0-1.fc25 (FEDORA-2017-ab04a91edd)
A GTK2 widget for VNC clients
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-5884, CVE-2017-5885
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1418944 - CVE-2017-5884 gtk-vnc: Improper check of framebuffer boundaries
when processing a tile
https://bugzilla.redhat.com/show_bug.cgi?id=1418944
[ 2 ] Bug #1418952 - CVE-2017-5885 gtk-vnc: Integer overflow when processing
SetColorMapEntries
https://bugzilla.redhat.com/show_bug.cgi?id=1418952
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-1.5.21-1.fc25 (FEDORA-2017-ab46b48277)
A completion input method
--------------------------------------------------------------------------------
Update Information:
update to 1.5.21
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1418313 - Committing a pre��dit with Enter or Return behaves badly when the
cursor is not at the end of the pre��dit
https://bugzilla.redhat.com/show_bug.cgi?id=1418313
--------------------------------------------------------------------------------
================================================================================
liblognorm-2.0.2-2.fc25 (FEDORA-2017-e0e210efb8)
Fast samples-based log normalization library
--------------------------------------------------------------------------------
Update Information:
Just updated to the newest version
--------------------------------------------------------------------------------
================================================================================
libnfsidmap-0.27-1.fc25 (FEDORA-2017-fbfd89d21a)
NFSv4 User and Group ID Mapping Library
--------------------------------------------------------------------------------
Update Information:
Fixed stripping realm problem in nss_gss_princ routines (bz 1420357)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1420357 - Cannot create file in it's directory using kerberos
authentication with nfs-utils-lib-1.1.5-12.el6
https://bugzilla.redhat.com/show_bug.cgi?id=1420357
--------------------------------------------------------------------------------
================================================================================
libpst-0.6.70-1.fc25 (FEDORA-2017-467c6fe98b)
Utilities to convert Outlook .pst files to other formats
--------------------------------------------------------------------------------
Update Information:
pst_getID2 must not recurse into children
--------------------------------------------------------------------------------
================================================================================
libssh-0.7.4-1.fc25 (FEDORA-2017-79d31a36c4)
A library implementing the SSH protocol
--------------------------------------------------------------------------------
Update Information:
Update to version 0.7.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419007 - libssh-0.7.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1419007
--------------------------------------------------------------------------------
================================================================================
libwmf-0.2.8.4-50.fc25 (FEDORA-2017-f787c35494)
Windows MetaFile Library
--------------------------------------------------------------------------------
Update Information:
* various security relevant flaws
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1418992 - CVE-2016-10166 CVE-2016-10167 CVE-2016-10168 CVE-2016-6912
CVE-2016-9317 libwmf: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1418992
--------------------------------------------------------------------------------
================================================================================
mate-terminal-1.16.2-1.fc25 (FEDORA-2017-de5e905e45)
Terminal emulator for MATE
--------------------------------------------------------------------------------
Update Information:
- update to 1.16.2
--------------------------------------------------------------------------------
================================================================================
meson-0.38.1-1.fc25 (FEDORA-2017-7e94eb55ec)
High productivity build system
--------------------------------------------------------------------------------
Update Information:
Update to 0.38.1 ---- Update to 0.38.0
--------------------------------------------------------------------------------
================================================================================
mingw-gstreamer1-1.10.3-1.fc25 (FEDORA-2017-c0564718ea)
MinGW Windows Streaming-Media Framework Runtime
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-5838. Downgrade to 1.10.3 as it is the latest stable
release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419587 - CVE-2017-5838 gstreamer: Out-of-bounds read in
gst_date_time_new_from_iso8601_string()
https://bugzilla.redhat.com/show_bug.cgi?id=1419587
--------------------------------------------------------------------------------
================================================================================
mingw-gstreamer1-plugins-bad-free-1.11.1-1.fc25 (FEDORA-2017-5f80c62e31)
Cross compiled GStreamer1 plug-ins "bad"
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-5848, CVE-2017-5843 - update to 1.11.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419583 - CVE-2017-5848 gstreamer-plugins-bad-free: Invalid memory read in
gst_ps_demux_parse_psm
https://bugzilla.redhat.com/show_bug.cgi?id=1419583
[ 2 ] Bug #1419592 - CVE-2017-5843 gstreamer-plugins-bad-free: Use after free in
gst_mini_object_unref / gst_tag_list_unref / gst_mxf_demux_update_essence_tracks
https://bugzilla.redhat.com/show_bug.cgi?id=1419592
--------------------------------------------------------------------------------
================================================================================
mingw-gstreamer1-plugins-base-1.10.3-1.fc25 (FEDORA-2017-a56d78acb8)
Cross compiled GStreamer1 media framework base plug-ins
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-5837, CVE-2017-5839, CVE-2017-5842, CVE-2017-5844 -
Downgrade to 1.10.3 as it is the latest stable release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419584 - CVE-2017-5837 gstreamer-plugins-base: Floating point exception in
gst_riff_create_audio_caps
https://bugzilla.redhat.com/show_bug.cgi?id=1419584
[ 2 ] Bug #1419586 - CVE-2017-5839 gstreamer-plugins-base: Stack overflow in
gst_riff_create_audio_caps
https://bugzilla.redhat.com/show_bug.cgi?id=1419586
[ 3 ] Bug #1419591 - CVE-2017-5842 gstreamer-plugins-base: Out-of-bounds heap read in
html_context_handle_element
https://bugzilla.redhat.com/show_bug.cgi?id=1419591
[ 4 ] Bug #1419600 - CVE-2017-5844 gstreamer-plugins-base: Floating point exception in
gst_riff_create_audio_caps
https://bugzilla.redhat.com/show_bug.cgi?id=1419600
--------------------------------------------------------------------------------
================================================================================
mingw-gstreamer1-plugins-base-1.11.1-1.fc25 (FEDORA-2017-bb85326b52)
Cross compiled GStreamer1 media framework base plug-ins
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-5837, CVE-2017-5839, CVE-2017-5842, CVE-2017-5844 and
update to 1.11.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419584 - CVE-2017-5837 gstreamer-plugins-base: Floating point exception in
gst_riff_create_audio_caps
https://bugzilla.redhat.com/show_bug.cgi?id=1419584
[ 2 ] Bug #1419586 - CVE-2017-5839 gstreamer-plugins-base: Stack overflow in
gst_riff_create_audio_caps
https://bugzilla.redhat.com/show_bug.cgi?id=1419586
[ 3 ] Bug #1419591 - CVE-2017-5842 gstreamer-plugins-base: Out-of-bounds heap read in
html_context_handle_element
https://bugzilla.redhat.com/show_bug.cgi?id=1419591
[ 4 ] Bug #1419600 - CVE-2017-5844 gstreamer-plugins-base: Floating point exception in
gst_riff_create_audio_caps
https://bugzilla.redhat.com/show_bug.cgi?id=1419600
--------------------------------------------------------------------------------
================================================================================
mingw-gstreamer1-plugins-good-1.10.3-1.fc25 (FEDORA-2017-1fc4026d15)
Cross compiled GStreamer1 plug-ins good
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2016-10199, CVE-2017-5845, CVE-2017-5840, CVE-2017-5841 -
Downgrade to 1.10.3 as it is the latest stable release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419580 - CVE-2016-10199 gstreamer-plugins-good: Out of bounds read in
qtdemux_tag_add_str_full
https://bugzilla.redhat.com/show_bug.cgi?id=1419580
[ 2 ] Bug #1419582 - CVE-2017-5845 gstreamer-plugins-good: Invalid memory read in
gst_aac_parse_sink_setcaps
https://bugzilla.redhat.com/show_bug.cgi?id=1419582
[ 3 ] Bug #1419588 - CVE-2017-5840 gstreamer-plugins-good: Out of bounds heap read in
qtdemux_parse_samples
https://bugzilla.redhat.com/show_bug.cgi?id=1419588
[ 4 ] Bug #1419589 - CVE-2017-5841 gstreamer-plugins-good: Heap out-of-bounds read in
gst_avi_demux_parse_ncdt
https://bugzilla.redhat.com/show_bug.cgi?id=1419589
--------------------------------------------------------------------------------
================================================================================
mingw-gstreamer1-plugins-good-1.11.1-1.fc25 (FEDORA-2017-4c593cfa4a)
Cross compiled GStreamer1 plug-ins good
--------------------------------------------------------------------------------
Update Information:
CVE-2016-10199, CVE-2017-5845, CVE-2017-5840, CVE-2017-5841 on update to 1.11.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419580 - CVE-2016-10199 gstreamer-plugins-good: Out of bounds read in
qtdemux_tag_add_str_full
https://bugzilla.redhat.com/show_bug.cgi?id=1419580
[ 2 ] Bug #1419582 - CVE-2017-5845 gstreamer-plugins-good: Invalid memory read in
gst_aac_parse_sink_setcaps
https://bugzilla.redhat.com/show_bug.cgi?id=1419582
[ 3 ] Bug #1419588 - CVE-2017-5840 gstreamer-plugins-good: Out of bounds heap read in
qtdemux_parse_samples
https://bugzilla.redhat.com/show_bug.cgi?id=1419588
[ 4 ] Bug #1419589 - CVE-2017-5841 gstreamer-plugins-good: Heap out-of-bounds read in
gst_avi_demux_parse_ncdt
https://bugzilla.redhat.com/show_bug.cgi?id=1419589
--------------------------------------------------------------------------------
================================================================================
mingw-gtk-vnc-0.7.0-1.fc25 (FEDORA-2017-c3739273e5)
MinGW Windows port of VNC client GTK widget
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-5884, CVE-2017-5885
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1418944 - CVE-2017-5884 gtk-vnc: Improper check of framebuffer boundaries
when processing a tile
https://bugzilla.redhat.com/show_bug.cgi?id=1418944
[ 2 ] Bug #1418952 - CVE-2017-5885 gtk-vnc: Integer overflow when processing
SetColorMapEntries
https://bugzilla.redhat.com/show_bug.cgi?id=1418952
--------------------------------------------------------------------------------
================================================================================
netpbm-10.77.00-3.fc25 (FEDORA-2017-1855c8af2c)
A library for handling different graphics file formats
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-2586, CVE-2017-2587 and CVE-2017-5849, ---- Add
license information file copyright_summary ---- New version of netpbm is
available (10.77.00)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419650 - CVE-2017-5849 netpbm: Calls TIFFRGBA with width and height
parameters switched
https://bugzilla.redhat.com/show_bug.cgi?id=1419650
--------------------------------------------------------------------------------
================================================================================
nfs-ganesha-2.4.3-1.fc25 (FEDORA-2017-08130a5f45)
NFS-Ganesha is a NFS Server running in user space
--------------------------------------------------------------------------------
Update Information:
nfs-ganesha 2.4.3 GA
--------------------------------------------------------------------------------
================================================================================
nodejs-qtdatastream-0.7.0-1.fc25 (FEDORA-2017-b142a93d87)
Nodejs lib which can read/write Qt formatted Datastreams
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419926 - nodejs-qtdatastream-0.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1419926
--------------------------------------------------------------------------------
================================================================================
ntfs-3g-2016.2.22-4.fc25 (FEDORA-2017-721dd0ec54)
Linux NTFS userspace driver
--------------------------------------------------------------------------------
Update Information:
CVE-2017-0358 Apply fix for issue where a modprobe influence vulnerability via
environment variables. This is not really a security issue for Fedora, because
we do not ship ntfs-3g setuid, but since it is possible that a user might
manually make that permissions change, I pushed the update.
--------------------------------------------------------------------------------
================================================================================
oci-systemd-hook-0.1.5-1.git16f7c8a.fc25 (FEDORA-2017-8a6b1e478c)
OCI systemd hook for docker
--------------------------------------------------------------------------------
Update Information:
This version fixes the issue where we were mounting over /var/log. Now the
program will only mount over /var/log/journal.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1406830 - using --tmpfs to specify the sizes of things like /run and /tmp get
overridden by the hook
https://bugzilla.redhat.com/show_bug.cgi?id=1406830
--------------------------------------------------------------------------------
================================================================================
openvpn-2.4.0-1.fc25 (FEDORA-2017-669dbe8a47)
A full-featured SSL VPN solution
--------------------------------------------------------------------------------
Update Information:
Update to 2.4.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408889 - openvpn-2.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1408889
[ 2 ] Bug #1391544 - Openvpn is FTBFS due to updated openssl 1.1
https://bugzilla.redhat.com/show_bug.cgi?id=1391544
--------------------------------------------------------------------------------
================================================================================
perl-HTTP-Entity-Parser-0.19-1.fc25 (FEDORA-2017-56f34d255a)
PSGI compliant HTTP Entity Parser
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
================================================================================
perl-List-AllUtils-0.14-1.fc25 (FEDORA-2017-2636b5ac0e)
Combines List::Util and List::SomeUtils
--------------------------------------------------------------------------------
Update Information:
This release corrects documentation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1420143 - perl-List-AllUtils-0.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1420143
--------------------------------------------------------------------------------
================================================================================
perl-Sub-Exporter-Lexical-0.092292-2.fc25 (FEDORA-2017-15d07e7dba)
Export lexically-available subs with Sub::Exporter
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
================================================================================
perl-Type-Tie-0.009-2.fc25 (FEDORA-2017-1b615b4f3b)
Tie a variable to a type constraint
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
================================================================================
perl-Types-Path-Tiny-0.005-1.fc25 (FEDORA-2017-ac7bdea87f)
Path::Tiny types and coercions for Moose and Moo
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
================================================================================
php-cs-fixer-2.0.1-1.fc25 (FEDORA-2017-c8834de413)
A tool to automatically fix PHP code style
--------------------------------------------------------------------------------
Update Information:
**Changelog for v2.0.1** * bug #2357 Better handling of file name that is the
same in multiple finder paths (keradus) * bug #2373 FunctionDeclarationFixer -
Fix static anonymous functions (SpacePossum) * bug #2377 PhpdocSeparationFixer -
Ignore incorrect PHPDoc (SpacePossum, keradus) * bug #2388 PhpdocAlignFixer -
unicode characters support (SpacePossum) * bug #2399 HashToSlashCommentFixer -
Fix edge cases (SpacePossum) * bug #2403 ClassDefinitionFixer - Anonymous
classes format by PSR12 (SpacePossum) * bug #2408
SingleClassElementPerStatementFixer, PhpdocSeparationFixer - add missing
WhitespacesAwareFixerInterface interface (keradus) * bug #2425
ClassKeywordRemoveFixer - Fix handling leading backslash and comments
(SpacePossum) * bug #2430 PhpdocAlignFixer - Fix alignment of variadic params.
(SpacePossum) * bug #2437 NoWhitespaceInBlankLineFixer - Fix more cases
(SpacePossum) * bug #2444 MbStrFunctionsFixer - handle return reference in
method declaration (SpacePossum) * bug #2449 PhpdocAlignFixer - don't crash
poorly formatted phpdoc (GrahamCampbell) * bug #2477 BracesFixer - Do not remove
white space inside declare statement (SpacePossum) * bug #2481 Fix priorities
between declare_strict_types and blank_line_after_opening_tag (juliendufresne,
keradus) * bug #2507 NoClosingTagFixer - Do not insert semicolon in comment
(SpacePossum) * minor #2347 UPGRADE.md - Fix multi-row description (drAlberT,
keradus) * minor #2352 Corrected method visibility (GrahamCampbell) * minor
#2353 Fix: Typos (localheinz) * minor #2354 Enhancement: Allow to specify
minimum and maximum PHP versions for code samples (localheinz) * minor #2356
Fixed spelling on "blank line" (GrahamCampbell) * minor #2361
ConfigurationResolver - Reject unknown rules (localheinz) * minor #2368 clean
ups (SpacePossum, localheinz) * minor #2380 DescribeCommand - filter code
samples and output note when none can be demonstrated (localheinz) * minor #2381
Tests - Do not use annotations for asserting exceptions (localheinz, keradus) *
minor #2382 Consistently provide a default configuration field (localheinz) *
minor #2383 update .php_cs.dist configuration (keradus) * minor #2386 PHP7.1
Integration test - Add features added in PHP7.1. (SpacePossum) * minor #2392
FixCommandHelp - fix typo (keradus) * minor #2393 Remove overcomplete tests
(SpacePossum) * minor #2394 Update .gitattributes (SpacePossum) * minor #2395
NoEmptyCommentFixer - Fix typo (fritz-c) * minor #2396 MethodArgumentSpaceFixer
- scope down endpoint (SpacePossum) * minor #2397 RuleSet - Check risky
(SpacePossum, keradus) * minor #2400 Add Fixer descriptions (SpacePossum) *
minor #2401 Fix UPGRADE.md (issei-m) * minor #2405 Transformers - Must be final
(SpacePossum) * minor #2406 ProtectedToPrivateFixer - Use backticks for
visibility in description (localheinz) * minor #2407 Add tests for not abusing
interfaces (keradus) * minor #2410 DX: Keep packages sorted (localheinz) * minor
#2412 Enhancement: Add more descriptions (localheinz) * minor #2413 Update
Symfony ruleset (fabpot) * minor #2419 README.rst - use double backticks for
code pieces in rule descriptions (keradus) * minor #2422 BracesFixer - cleanup
code after introducing CT::T_FUNCTION_IMPORT (keradus) * minor #2426
.php_cs.dist - update local CS config (keradus) * minor #2428 SCA with Php
Inspections (EA Extended) (kalessil) * minor #2433 AbstractFixerTestCase - give
all the details available during catch (Slamdunk) * minor #2434 COOKBOOK-
FIXERS.md - Replace reference to outdated class with current (greg0ire) * minor
#2436 MethodArgumentSpaceFixer - Remove duplicate class name (greg0ire) * minor
#2441 IndentationTypeFixer - Fix description and upgrade guide (SpacePossum) *
minor #2443 AppVeyor - update configuration (keradus) * minor #2447 .php_cs.dist
- update local CS config (keradus) * minor #2452 Provide rules definitions
(keradus) * minor #2455 NoMultilineWhitespaceAroundDoubleArrowFixer - Add
missing priority test (SpacePossum) * minor #2466 Provide rules definitions
(keradus) * minor #2470 README.rst - explain the usage of "--path-mode"
parameter (kalimatas) * minor #2474 Housekeeping (SpacePossum) * minor #2487
UPGRADE.md - Fix typo (SpacePossum) * minor #2493 FixCommand - Output warning
message when both config and rules options are passed (SpacePossum) * minor
#2496 DX: Travis - check for trailing spaces (keradus) * minor #2499
FileSpecificCodeSample - Specify class name relative to root namespace
(localheinz, keradus) * minor #2506 SCA (SpacePossum) * minor #2515 Fix code
indentation (keradus) * minor #2521 SCA trailing spces check - ouput lines with
trailing white space (SpacePossum) * minor #2522 Fix docs and small code issues
(keradus)
--------------------------------------------------------------------------------
================================================================================
php-league-flysystem-1.0.35-1.fc25 (FEDORA-2017-34df762bd1)
Filesystem abstraction: Many filesystems, one API
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.35** - 2017-02-09 * Creating a directory in FTP checked whether a
directory already existed, the check was not strict enough. ---- **Version
1.0.34** - 2017-01-30 * Account for a Finfo buffer error which causes an array
to string convertion. From upstream
[
changelog](https://github.com/thephpleague/flysystem/blob/1.0.34/changelo...,
Windows specific changes stripped.
--------------------------------------------------------------------------------
================================================================================
php-pear-1.10.1-9.fc25 (FEDORA-2017-340d89642f)
PHP Extension and Application Repository framework
--------------------------------------------------------------------------------
Update Information:
**XML_Util version 1.4.1** * Bug #21177 XML_Util::collapseEmptyTags() can
return NULL ---- **XML_Util version 1.4.0** * Adds a new
XML_UTIL_COLLAPSE_NONE option for preventing empty tag collapsing.
--------------------------------------------------------------------------------
================================================================================
php-pecl-memcached-3.0.1-1.fc25 (FEDORA-2017-0f1ada1000)
Extension to work with the Memcached caching daemon
--------------------------------------------------------------------------------
Update Information:
**Version 3.0.1** * Add API entries for flushBuffers() and getAllKeys() (#316)
* Ignore specific errors from memcached_dump for getAllKeys() with newer
memcached servers (#315) * Fix compiling with memcached binary protocol enabled
(#312) * Restore php_libmemcached_compat with workaround for missing
memcached_exists (#314) * Travis CI purge old versions of memcached and
libmemcached (#309) ---- **Version 3.0.0** **API** * The method signature of
get, getByKey, getMulti, and getMultiByKey changed. * get* and getMulti*
commands no longer take cas or user flags parameters. * get* and getMulti*
commands now take the Memcached::GET_EXTENDED flag to retrieve user flags and
cas tokens. * Fixes getStats command to return all stats from all servers *
Fixes allKeys command behaviour * Fixes error where cache callback for get
command was not setting expiration time properly * Added server type to server
list * Remove use_sasl ini-variable and initialise sasl as needed * CAS tokens
are returned as integers and they overflow to strings as needed **Session
handler** * The session memcached protocol config name was changed, and the
default protocol was changed from text to binary protocol. If your memcached
setup does not support the binary protocol(e.g. if using twemproxy), then set
memcached.sess_binary_protocol = Off. (Previously called memcached.sess_binary)
* Session lock algorithm updated (new ini-values memcached.sess_lock_wait_min,
memcached.sess_lock_wait_max and memcached.sess_lock_retries) * Session
extension uses PHP allocators (still some work to do on the rest of the
extension) * Ini-values take effect during session_start or
session_regenerate_id * Fixes crash with session_regenerate_id (work-around for
PHP bug) **Tests** * Fix several problematic tests
--------------------------------------------------------------------------------
================================================================================
php-phpunit-PHPUnit-5.7.12-1.fc25 (FEDORA-2017-ce2d3d8c2e)
The PHP Unit Testing framework
--------------------------------------------------------------------------------
Update Information:
**Version 5.7.12** - 2017-02-08 * Fixed
[#2475](https://github.com/sebastianbergmann/phpunit/pull/2475): Defining a test
suite with only one file does not work **Version 5.7.11** - 2017-02-05 *
Deprecation errors when used with PHP 7.2 ---- **Version 5.7.10** - 2017-02-04
* Fixed [#2462](https://github.com/sebastianbergmann/phpunit/issues/2462): Code
Coverage blacklist is filled even if no code coverage data is to be collected
---- **Version 5.7.9** - 2017-01-28 * Fixed
[#2447](https://github.com/sebastianbergmann/phpunit/issues/2447): Reverted
backwards incompatible change to handling of boolean environment variable values
specified in XML ---- **Version 5.7.8** - 2017-01-26 * Fixed
[#2446](https://github.com/sebastianbergmann/phpunit/issues/2446): Reverted
backwards incompatible change to exit code in case of warnings ---- **Version
5.7.7** - 2017-01-25 * Fixed
[#1896](https://github.com/sebastianbergmann/phpunit/issues/1896): Wrong test
location when `@depends` and `@dataProvider` are combined * Fixed
[#1983](https://github.com/sebastianbergmann/phpunit/pull/1983): Tests with
`@expectedException` annotation cannot be skipped * Fixed
[#2137](https://github.com/sebastianbergmann/phpunit/issues/2137): Warnings for
invalid data providers are suppressed when test execution is filtered * Fixed
[#2275](https://github.com/sebastianbergmann/phpunit/pull/2275): Invalid UTF-8
characters can lead to missing output * Fixed
[#2299](https://github.com/sebastianbergmann/phpunit/issues/2299):
`expectExceptionMessage()` and `expectExceptionCode()` do not work without
`expectException()` * Fixed
[#2328](https://github.com/sebastianbergmann/phpunit/issues/2328):
`TestListener` callbacks `startTest()` and `endTest()` are not called when test
is skipped due to `@depends` * Fixed
[#2331](https://github.com/sebastianbergmann/phpunit/issues/2331): Boolean
environment variable values specified in XML get mangled * Fixed
[#2333](https://github.com/sebastianbergmann/phpunit/issues/2333):
`assertContains()` and `assertNotContains()` do not handle UTF-8 strings
correctly * Fixed
[#2340](https://github.com/sebastianbergmann/phpunit/pull/2340): Data providers
that use `yield` or implement `Iterator` cannot be combined * Fixed
[#2349](https://github.com/sebastianbergmann/phpunit/pull/2349):
`PHPUnit_TextUI_Command` does not `exit()` when it should * Fixed
[#2392](https://github.com/sebastianbergmann/phpunit/issues/2392): Empty (but
valid) data provider should skip the test * Fixed
[#2431](https://github.com/sebastianbergmann/phpunit/issues/2431):
`assertArraySubset()` does not support `ArrayAccess` * Fixed
[#2435](https://github.com/sebastianbergmann/phpunit/issues/2435): Empty
`@group` annotation causes error on PHP 7.2+ ---- **Version 5.7.6** -
2017-01-22 * Fixed
[#2424](https://github.com/sebastianbergmann/phpunit/issues/2424):
`TestCase::getStatus()` returns `STATUS_PASSED` instead of `STATUS_RISKY` for
risky test * Fixed
[#2427](https://github.com/sebastianbergmann/phpunit/issues/2427): TestDox group
configuration is not handled * Fixed
[#2428](https://github.com/sebastianbergmann/phpunit/pull/2428): Nested arrays
specificied in XML configuration file are not handled correctly ---- Packaging
change: * handle redirection to composer installed version 6.x
--------------------------------------------------------------------------------
================================================================================
php-phpunit-phpcpd-3.0.0-1.fc25 (FEDORA-2017-18c8160eed)
Copy/Paste Detector (CPD) for PHP code
--------------------------------------------------------------------------------
Update Information:
**Version 3.0.0** - 2017-02-05 * Merged
[#90](https://github.com/sebastianbergmann/phpcpd/pull/90): The PMD logger now
replaces all characters that are invalid XML with `U+FFFD` * Merged
[#100](https://github.com/sebastianbergmann/phpcpd/pull/100): Added the
`--regexps-exclude` option * When the Xdebug extension is loaded, PHPCPD
disables as much of Xdebug's functionality as possible to minimize the
performance impact * PHPCPD is no longer supported on PHP 5.3, PHP 5.4, and PHP
5.5 Packaging change: * use fedora/autoloader
--------------------------------------------------------------------------------
================================================================================
python-ansible-tower-cli-3.0.3-1.fc25 (FEDORA-2017-4a81599c5f)
A CLI tool for Ansible Tower
--------------------------------------------------------------------------------
Update Information:
update to 3.0.3
--------------------------------------------------------------------------------
================================================================================
python-bugzilla-2.0.0-1.fc25 (FEDORA-2017-38e827ab7a)
A python library and tool for interacting with Bugzilla
--------------------------------------------------------------------------------
Update Information:
* Rebased to version 2.0.0 * Several fixes for use with bugzilla 5 * This
release contains several smallish API breaks: * Bugzilla.bug_autorefresh now
defaults to False * Credentials are now cached in ~/.cache/python-bugzilla/ *
bin/bugzilla was converted to argparse * bugzilla query --boolean_chart option
is removed * Unify command line flags across sub commands
--------------------------------------------------------------------------------
================================================================================
python-cotyledon-1.6.7-1.fc25 (FEDORA-2017-907b21eb77)
Cotyledon provides a framework for defining long-running services
--------------------------------------------------------------------------------
Update Information:
Rebase 1.6.7 ---- Import cotyledon into fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1420519 - Rebase cotyledon to 1.6.7
https://bugzilla.redhat.com/show_bug.cgi?id=1420519
[ 2 ] Bug #1356625 - Review Request: python-cotyledon - Framework for defining
long-running services
https://bugzilla.redhat.com/show_bug.cgi?id=1356625
--------------------------------------------------------------------------------
================================================================================
python-django-mptt-0.8.6-2.fc25 (FEDORA-2017-d3053b85bc)
Utilities for implementing Modified Preorder Tree Traversal
--------------------------------------------------------------------------------
Update Information:
Fixes incompatibilities with Django base version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1420795 - Rebase f25 to 0.8.6
https://bugzilla.redhat.com/show_bug.cgi?id=1420795
--------------------------------------------------------------------------------
================================================================================
python-jira-1.0.7-1.fc25 (FEDORA-2017-79e30bc4ea)
A library to ease use of the JIRA 5 REST APIs
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.7 version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1393482 - python-jira: Provide a Python 3 subpackage
https://bugzilla.redhat.com/show_bug.cgi?id=1393482
--------------------------------------------------------------------------------
================================================================================
python-peewee-2.8.5-2.fc25 (FEDORA-2017-b3b65a20c4)
A small, expressive orm
--------------------------------------------------------------------------------
Update Information:
Backport upstream fix to force limit and offset to be numeric
--------------------------------------------------------------------------------
================================================================================
python-pifpaf-0.24.1-1.fc25 (FEDORA-2017-a49c5c32ff)
Pifpaf is a suite of fixtures to manage daemons
--------------------------------------------------------------------------------
Update Information:
rebase to 0.24.1 ---- New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1420513 - rebase pifpaf to 0.24.1
https://bugzilla.redhat.com/show_bug.cgi?id=1420513
[ 2 ] Bug #1349578 - Review Request: python-pifpaf - Suite of fixtures to manage
daemons
https://bugzilla.redhat.com/show_bug.cgi?id=1349578
--------------------------------------------------------------------------------
================================================================================
python-pyvo-0.5.2-1.fc25 (FEDORA-2017-6ec338a41e)
Access to remote data and services of the Virtual observatory (VO) using Python
--------------------------------------------------------------------------------
Update Information:
New bugfix release
--------------------------------------------------------------------------------
================================================================================
python-semver-2.7.5-1.fc25 (FEDORA-2017-952a4b93b3)
Python helper for Semantic Versioning
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1417392 - Review Request: python-semver - Python helper for Semantic
Versioning
https://bugzilla.redhat.com/show_bug.cgi?id=1417392
--------------------------------------------------------------------------------
================================================================================
python-tooz-1.48.0-1.fc25 (FEDORA-2017-1804aa5d8e)
Coordination library for distributed systems
--------------------------------------------------------------------------------
Update Information:
Update to 1.48.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1420521 - Rebase tooz to 1.48
https://bugzilla.redhat.com/show_bug.cgi?id=1420521
--------------------------------------------------------------------------------
================================================================================
qt5ct-0.30-1.fc25 (FEDORA-2017-2dd72556dc)
Qt5 Configuration Tool
--------------------------------------------------------------------------------
Update Information:
new version 0.30
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419295 - qt5ct-0.30 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1419295
--------------------------------------------------------------------------------
================================================================================
qupzilla-2.1.0-2.fc25 (FEDORA-2017-7b88a8aef3)
Modern web browser
--------------------------------------------------------------------------------
Update Information:
An update of QupZilla to the latest upstream release, version 2.1.0. This is a
feature release with some new features (but several bugs were also fixed), see:
http://blog.qupzilla.com/2017/02/qupzilla-210-released.html (Please note that
the spell checking feature is not currently enabled because Fedora 25 still
ships QtWebEngine 5.7.1, whereas spell checking requires QtWebEngine 5.8.)
--------------------------------------------------------------------------------
================================================================================
rpmlint-1.9-7.fc25 (FEDORA-2017-11eb2e80ae)
Tool for checking common errors in RPM packages
--------------------------------------------------------------------------------
Update Information:
Apply upstream change to stop complaining about versioned absolute-path Provides
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1399683 - Change logic of file version checking
https://bugzilla.redhat.com/show_bug.cgi?id=1399683
--------------------------------------------------------------------------------
================================================================================
snap-photobooth-0.3.0.1-8.fc25 (FEDORA-2017-57a1c32397)
Fast and beautiful camera app
--------------------------------------------------------------------------------
Update Information:
Rename the bundled icon (and patch the .desktop file to use it) to prevent
possible file conflicts. Also, pass switch to cmake at build to build the
"branded" version of the .desktop file.
--------------------------------------------------------------------------------
================================================================================
switchboard-2.2.1-2.fc25 (FEDORA-2017-d316e058e0)
Modular Desktop Settings Hub
--------------------------------------------------------------------------------
Update Information:
Rename the bundled icon (and patch the .desktop file to use it) to prevent
possible file conflicts. ---- Update to version 2.2.1 (which is mostly small
bugfixes and updated translations). Additionally, this includes the needed .pc
file fix I needed, so I dropped the downstream patch. ---- Ship an application
icon to fix appstream metadata generation.
--------------------------------------------------------------------------------
================================================================================
vdr-epg-daemon-1.1.90-1.fc25 (FEDORA-2017-61d14cc36e)
A daemon to download EPG data from internet and manage it in a mysql database
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.90 ---- Update to 1.1.89
--------------------------------------------------------------------------------
================================================================================
vdr-epg2vdr-1.1.32-1.fc25 (FEDORA-2017-4b76ad04d3)
A plugin to retrieve EPG data from a mysql database into VDR
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.32
--------------------------------------------------------------------------------
================================================================================
xkeyboard-config-2.20-2.fc25 (FEDORA-2017-3b058684fa)
X Keyboard Extension configuration data
--------------------------------------------------------------------------------
Update Information:
xkeyboard-config 2.20
--------------------------------------------------------------------------------
================================================================================
xrootd-4.6.0-1.fc25 (FEDORA-2017-0eca8dbb12)
Extended ROOT file server
--------------------------------------------------------------------------------
Update Information:
New version 4.6.0, release notes are here:
https://github.com/xrootd/xrootd/blob/v4.6.0/docs/ReleaseNotes.txt
--------------------------------------------------------------------------------
================================================================================
zoneminder-1.28.1-8.fc25 (FEDORA-2017-2bb174ae3c)
A camera monitoring and analysis tool
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-5595
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419507 - CVE-2017-5595 zoneminder: File disclosure due to unfiltered
user-input
https://bugzilla.redhat.com/show_bug.cgi?id=1419507
--------------------------------------------------------------------------------