The following Fedora 25 Security updates need testing:
Age URL
79
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-534e23bad9
rabbitmq-server-3.6.6-2.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-003fa5648c
rpm-ostree-2017.3-2.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-df53d02da7
knot-resolver-1.2.4-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ae18216e75 rkward-0.6.5-5.fc25
rpy-2.8.5-3.fc25 R-3.3.3-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-47a4910f07
openslp-2.0.0-10.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9ed1b89530
mbedtls-2.4.2-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-837115524e
cloud-init-0.7.8-6.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-06f4b88ceb
php-onelogin-php-saml-2.10.5-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-31b976672b qemu-2.7.1-4.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9801754fd7
drupal8-8.2.7-1.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
22
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c5dbde322a
epiphany-3.22.6-2.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-803e6bacb4
pungi-4.1.13-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7799a1cc7c
appliance-tools-008.0-4.fc25 livecd-tools-24.2-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4d66e799ca
flatpak-0.9.1-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2b6eee582e
python-wrapt-1.10.9-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-72e25d39ba
gnome-settings-daemon-3.22.2-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0b5012df30
control-center-3.22.2-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-98301ada4c
perl-Pod-Perldoc-3.28-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-eb8924136a sssd-1.15.2-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cb0ff57e45
python-wrapt-1.10.10-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5936a5fed4
cryptsetup-1.7.4-1.fc25
The following builds have been pushed to Fedora 25 updates-testing
ampy-1.0.1-1.fc25
awscli-1.11.63-1.fc25
bacula-7.4.7-1.fc25
bacula-docs-7.4.7-1.fc25
cacti-1.0.6-1.fc25
cockpit-135-1.fc25
control-center-3.22.2-1.fc25
cryptsetup-1.7.4-1.fc25
dogtag-pki-10.4.0-1.fc25
dogtag-pki-theme-10.4.0-1.fc25
dpm-dsi-1.9.12-1.fc25
drupal8-8.2.7-1.fc25
erlang-19.3-1.fc25
execdb-0.0.8-1.fc25
gnome-settings-daemon-3.22.2-1.fc25
golang-1.7.5-2.fc25
golang-github-google-btree-0-0.9.git925471a.fc25
golang-github-oschwald-maxminddb-golang-1.1.0-1.git697da80.fc25
golang-github-pmezard-go-difflib-0-0.6.gitd8ed262.fc25
golang-github-remyoudompheng-bigfft-0-0.1.gita8e77dd.fc25
golang-github-ugorji-go-0-0.10.gitded73ea.fc25
golang-googlecode-goprotobuf-0-0.27.git4bd1920.fc25
golang-googlecode-net-0-0.37.gitf249948.fc25
ibus-typing-booster-1.5.26-1.fc25
jss-4.4.0-2.fc25
kf5-plasma-5.32.0-2.fc25
meson-0.39.1-1.fc25
mingw-wxWidgets-2.8.12-21.fc25
onboard-1.4.1-4.fc25
open-vm-tools-10.1.5-3.fc25
perl-Pod-Perldoc-3.28-1.fc25
php-PHPMailer-5.2.23-1.fc25
php-onelogin-php-saml-2.10.5-1.fc25
php-paragonie-constant-time-encoding-1.0.1-4.fc25
php-phpunit-PHPUnit-5.7.16-1.fc25
pki-console-10.4.0-1.fc25
pki-core-10.4.0-1.fc25
purple-hangouts-0-45.20170313hg462bb55.fc25
purple-skypeweb-1.2.2-8.20170226git19ba66e.fc25
python-botocore-1.5.26-1.fc25
python-mutagen-1.37-1.fc25
python-pynacl-1.1.1-1.fc25
python-sqlalchemy-1.0.17-1.fc25
python-wrapt-1.10.10-1.fc25
python-zeroconf-0.18.0-2.fc25
qemu-2.7.1-4.fc25
sssd-1.15.2-1.fc25
taskotron-trigger-0.4.7-1.fc25
tint2-0.13.1-1.fc25
tripwire-2.4.3.4-1.fc25
vdr-epg2vdr-1.1.47-1.fc25
Details about builds:
================================================================================
ampy-1.0.1-1.fc25 (FEDORA-2017-8cca426ffb)
Command line tool to interact with a MicroPython board over a serial connection
--------------------------------------------------------------------------------
Update Information:
Command line tool to interact with a MicroPython board over a serial connection
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432230 - Review Request: ampy - Command line tool to interact with a
MicroPython board over a serial connection
https://bugzilla.redhat.com/show_bug.cgi?id=1432230
--------------------------------------------------------------------------------
================================================================================
awscli-1.11.63-1.fc25 (FEDORA-2017-391dac11a6)
Universal Command Line Environment for AWS
--------------------------------------------------------------------------------
Update Information:
update aws
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1428364 - python-botocore-1.5.25 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428364
[ 2 ] Bug #1428187 - awscli-1.11.63 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428187
--------------------------------------------------------------------------------
================================================================================
bacula-7.4.7-1.fc25 (FEDORA-2017-f0f733063a)
Cross platform network backup for Linux, Unix, Mac and Windows
--------------------------------------------------------------------------------
Update Information:
New version 7.4.7. ---- Update to 7.4.6. ---- Updated documentation.
--------------------------------------------------------------------------------
================================================================================
bacula-docs-7.4.7-1.fc25 (FEDORA-2017-f0f733063a)
Bacula documentation
--------------------------------------------------------------------------------
Update Information:
New version 7.4.7. ---- Update to 7.4.6. ---- Updated documentation.
--------------------------------------------------------------------------------
================================================================================
cacti-1.0.6-1.fc25 (FEDORA-2017-e75dd152a7)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.0.6 Release notes:
http://www.cacti.net/release_notes_1_0_5.php
http://www.cacti.net/release_notes_1_0_6.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1430893 - cacti package is missing requires php-gd php-posix
https://bugzilla.redhat.com/show_bug.cgi?id=1430893
[ 2 ] Bug #1431597 - cacti-1.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1431597
[ 3 ] Bug #1432443 - cacti-1.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1432443
--------------------------------------------------------------------------------
================================================================================
cockpit-135-1.fc25 (FEDORA-2017-a62662e93a)
A user interface for Linux servers
--------------------------------------------------------------------------------
Update Information:
- It is now possible to use file descriptors passed over the DBus API - Add
"Disks" tab to Virtual Machines - Hide the top navigation bar if empty, i.e. if
dashboard is not available - Redesign the page menu and machine switcher - Show
"Locked/Unlocked" indicator for privilege escalation in the top bar - Make
privilege escalation work with sudo reauthorization - Add developer tool for
closing active pages - Use official /etc/ssh/ssh_known_hosts for adding remotely
managed machines - Connect to other machines with SSH via cockpit-bridge instead
of cockpit-ws
--------------------------------------------------------------------------------
================================================================================
control-center-3.22.2-1.fc25 (FEDORA-2017-0b5012df30)
Utilities to configure the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
gnome-control-center 3.22.2 release. Details: - Get renderer from gnome-
session under Wayland - Show both GPUs on dual-GPU machines - Remove trailing
spaces in renderer strings - Trim AMD renderer strings and add registered
trademark symbol for AMD GPUs Keyboard: - Activate search-as-you-type in the
scope of the panel - Untoggle Edit button on cancel - Ensure sensitive entries
on creation mode - Fix headerbar state when adding shortcut Mouse: - Set min-
content-height on the scrolled window - Handle trackpoint devices in
GsdDeviceManagerX11 Network: - Fix missing page title on wired panel - Set a
new SSID each time the hotspot is launched - Fix initial state of Wi-Fi device
Search: - Better debug output when ignoring search providers Sharing: - Hide
Vino when using Wayland User Accounts: - Fix crash when name is changed and
dialogue closed
--------------------------------------------------------------------------------
================================================================================
cryptsetup-1.7.4-1.fc25 (FEDORA-2017-5936a5fed4)
A utility for setting up encrypted disks
--------------------------------------------------------------------------------
Update Information:
Update to version 1.7.4. See [Release
Notes](https://www.kernel.org/pub/linux/u
tils/cryptsetup/v1.7/v1.7.4-ReleaseNotes) for more info.
--------------------------------------------------------------------------------
================================================================================
dogtag-pki-10.4.0-1.fc25 (FEDORA-2017-e6e1f4ecdc)
Dogtag Public Key Infrastructure (PKI) Suite
--------------------------------------------------------------------------------
Update Information:
dogtagpki Pagure Issue #2541 - Re-base Dogtag pki packages to 10.4.x
--------------------------------------------------------------------------------
================================================================================
dogtag-pki-theme-10.4.0-1.fc25 (FEDORA-2017-fe4649d665)
Certificate System - Dogtag PKI Theme Components
--------------------------------------------------------------------------------
Update Information:
dogtagpki Pagure Issue #2541 - Re-base Dogtag pki packages to 10.4.x
--------------------------------------------------------------------------------
================================================================================
dpm-dsi-1.9.12-1.fc25 (FEDORA-2017-af3f218b49)
Disk Pool Manager (DPM) plugin for the Globus GridFTP server
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------
================================================================================
drupal8-8.2.7-1.fc25 (FEDORA-2017-9801754fd7)
An open source content management platform
--------------------------------------------------------------------------------
Update Information:
[
8.2.7](https://www.drupal.org/project/drupal/releases/8.2.7) ([SA-
CORE-2017-001](https://www.drupal.org/SA-2017-001))
--------------------------------------------------------------------------------
================================================================================
erlang-19.3-1.fc25 (FEDORA-2017-539074c178)
General-purpose programming language and runtime environment
--------------------------------------------------------------------------------
Update Information:
* Ver. 19.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432265 - erlang-19.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1432265
--------------------------------------------------------------------------------
================================================================================
execdb-0.0.8-1.fc25 (FEDORA-2017-e6b07aa52e)
Execution status database for Taskotron
--------------------------------------------------------------------------------
Update Information:
New release of execdb changes the job.taskname column from a 20 char string to a
variable width char
--------------------------------------------------------------------------------
================================================================================
gnome-settings-daemon-3.22.2-1.fc25 (FEDORA-2017-72e25d39ba)
The daemon sharing settings from GNOME to GTK+/KDE applications
--------------------------------------------------------------------------------
Update Information:
gnome-settings-daemon 3.22.2 release. Media keys: - Fix custom keyboard
shortcuts not working in some hardware combinations, including potential
crashes - Fix shutdown dialog delay when using kbd shortcut Smartcard: - Fix
plugin not working due to a conflict with the Sharing plugin's use of
NetworkManager client libraries
--------------------------------------------------------------------------------
================================================================================
golang-1.7.5-2.fc25 (FEDORA-2017-6f8b437a1d)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
Fix for tzdata 2017a, unblock ppc64le
--------------------------------------------------------------------------------
================================================================================
golang-github-google-btree-0-0.9.git925471a.fc25 (FEDORA-2017-91c50f0a50)
BTree implementation for Go
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 925471ac9e2131377a91e1595defec898166fe49
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250460 - Tracker for golang-github-google-btree
https://bugzilla.redhat.com/show_bug.cgi?id=1250460
--------------------------------------------------------------------------------
================================================================================
golang-github-oschwald-maxminddb-golang-1.1.0-1.git697da80.fc25 (FEDORA-2017-5f9006e5bc)
MaxMind DB Reader for Go
--------------------------------------------------------------------------------
Update Information:
New package for fedora. This go library is one of the dependencies of syncthing.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431759 - Review Request: golang-github-oschwald-maxminddb-golang - MaxMind
DB Reader for Go
https://bugzilla.redhat.com/show_bug.cgi?id=1431759
--------------------------------------------------------------------------------
================================================================================
golang-github-pmezard-go-difflib-0-0.6.gitd8ed262.fc25 (FEDORA-2017-4fec6e0848)
Partial port of Python difflib package to Go
--------------------------------------------------------------------------------
Update Information:
Bump to upstream d8ed2627bdf02c080bf22230dbb337003b7aba2d
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432934 - Tracker for golang-github-pmezard-go-difflib
https://bugzilla.redhat.com/show_bug.cgi?id=1432934
--------------------------------------------------------------------------------
================================================================================
golang-github-remyoudompheng-bigfft-0-0.1.gita8e77dd.fc25 (FEDORA-2017-cef856b9f6)
Big integer multiplication library using FFT for Go
--------------------------------------------------------------------------------
Update Information:
New package for fedora. This go library is one of the (indirect) dependencies of
syncthing.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432887 - Review Request: golang-github-remyoudompheng-bigfft - Big integer
multiplication library using FFT for Go
https://bugzilla.redhat.com/show_bug.cgi?id=1432887
--------------------------------------------------------------------------------
================================================================================
golang-github-ugorji-go-0-0.10.gitded73ea.fc25 (FEDORA-2017-8a5a068273)
Idiomatic codec and rpc lib for msgpack, cbor, json, etc
--------------------------------------------------------------------------------
Update Information:
Bump to upstream ded73eae5db7e7a0ef6f55aace87a2873c5d2b74
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250516 - Tracker for golang-github-ugorji-go
https://bugzilla.redhat.com/show_bug.cgi?id=1250516
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-goprotobuf-0-0.27.git4bd1920.fc25 (FEDORA-2017-4bee0decc4)
Go support for Google protocol buffers
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 4bd1920723d7b7c925de087aa32e2187708897f7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1246113 - Tracker for golang-googlecode-goprotobuf
https://bugzilla.redhat.com/show_bug.cgi?id=1246113
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-net-0-0.37.gitf249948.fc25 (FEDORA-2017-7b6f1744c8)
Supplementary Go networking libraries
--------------------------------------------------------------------------------
Update Information:
Bump to upstream f2499483f923065a842d38eb4c7f1927e6fc6e6d
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1326890 - FTBFS with gcc-go on s390x
https://bugzilla.redhat.com/show_bug.cgi?id=1326890
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-1.5.26-1.fc25 (FEDORA-2017-62fed1700a)
A completion input method
--------------------------------------------------------------------------------
Update Information:
update to 1.5.26
--------------------------------------------------------------------------------
================================================================================
jss-4.4.0-2.fc25 (FEDORA-2017-95a6db27ea)
Java Security Services (JSS)
--------------------------------------------------------------------------------
Update Information:
Bugzilla Bug #1432568 - JSS 4.4.0 is incompatible with versions of tomcatjss <
7.2.1 ---- Bugzilla Bug #1431937 - Rebase jss to 4.4.0 in Fedora 25+
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432568 - JSS 4.4.0 is incompatible with versions of tomcatjss < 7.2.1
https://bugzilla.redhat.com/show_bug.cgi?id=1432568
[ 2 ] Bug #1431937 - Rebase jss to 4.4.0 in Fedora 25+
https://bugzilla.redhat.com/show_bug.cgi?id=1431937
--------------------------------------------------------------------------------
================================================================================
kf5-plasma-5.32.0-2.fc25 (FEDORA-2017-37f4d8c564)
KDE Frameworks 5 Tier 3 framework is foundation to build a primary user interface
--------------------------------------------------------------------------------
Update Information:
Backport upstream fix for folder containment/view selection regression
--------------------------------------------------------------------------------
================================================================================
meson-0.39.1-1.fc25 (FEDORA-2017-36142df1e2)
High productivity build system
--------------------------------------------------------------------------------
Update Information:
Update to 0.39.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432696 - meson-0.39.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1432696
--------------------------------------------------------------------------------
================================================================================
mingw-wxWidgets-2.8.12-21.fc25 (FEDORA-2017-fb7eb7c3dc)
MinGW port of the wxWidgets GUI library
--------------------------------------------------------------------------------
Update Information:
- rebuild for missing _imp___ZN10wxListCtrl9SortItemsEPU7stdcallFilllEl
--------------------------------------------------------------------------------
================================================================================
onboard-1.4.1-4.fc25 (FEDORA-2017-9e075b2a9c)
On-screen keyboard for TabletPC and mobility impaired users (Xorg only)
--------------------------------------------------------------------------------
Update Information:
Fixed spec file in regard to #1431322 comment 7 (1431322#c7)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431322 - Review Request: Onboard - On screen keyboard
https://bugzilla.redhat.com/show_bug.cgi?id=1431322
--------------------------------------------------------------------------------
================================================================================
open-vm-tools-10.1.5-3.fc25 (FEDORA-2017-14d406bd8e)
Open Virtual Machine Tools for virtual machines hosted on VMware
--------------------------------------------------------------------------------
Update Information:
Need to add xmlsec1-openssl dependency explicitly.
--------------------------------------------------------------------------------
================================================================================
perl-Pod-Perldoc-3.28-1.fc25 (FEDORA-2017-98301ada4c)
Look up Perl documentation in Pod format
--------------------------------------------------------------------------------
Update Information:
This release fixes pager arguments modification. It also fixes tests.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432920 - perl-Pod-Perldoc-3.28 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1432920
--------------------------------------------------------------------------------
================================================================================
php-PHPMailer-5.2.23-1.fc25 (FEDORA-2017-e2d2eadf9a)
PHP email transport class with a lot of features
--------------------------------------------------------------------------------
Update Information:
**PHPMailer 5.2.23** This is a minor maintenance release. * Improve
trapping of TLS errors during connection so that they don't cause warnings, and
are reported better in debug output * Amend test suite so it uses PHPUnit
version 4.8, compatible with older versions of PHP, instead of teh version
supplied by Travis-CI * This forces pinning of some dev packages to older
releases, but should make travis builds more reliable * Test suite now runs
on HHVM, and thus so should PHPMailer in general * Improve Czech translations
* Add links to CVE-2017-5223 resources
--------------------------------------------------------------------------------
================================================================================
php-onelogin-php-saml-2.10.5-1.fc25 (FEDORA-2017-06f4b88ceb)
SAML support for PHP
--------------------------------------------------------------------------------
Update Information:
Update to 2.10.5 ---- Update to 2.10.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432450 - php-onelogin-php-saml-v2.10.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1432450
[ 2 ] Bug #1429267 - php-onelogin-php-saml-v2.10.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1429267
--------------------------------------------------------------------------------
================================================================================
php-paragonie-constant-time-encoding-1.0.1-4.fc25 (FEDORA-2017-7bfb5f6f7f)
Constant-Time Character Encoding in PHP Projects
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431766 - Review Request: php-paragonie-constant-time-encoding -
Constant-Time Character Encoding in PHP Projects
https://bugzilla.redhat.com/show_bug.cgi?id=1431766
--------------------------------------------------------------------------------
================================================================================
php-phpunit-PHPUnit-5.7.16-1.fc25 (FEDORA-2017-7988067d87)
The PHP Unit Testing framework
--------------------------------------------------------------------------------
Update Information:
**Version 5.7.16** - 2017-03-15 * Fixed
[#2547](https://github.com/sebastianbergmann/phpunit/issues/2547): Code Coverage
data is collected for test annotated with `@coversNothing` * Fixed
[#2558](https://github.com/sebastianbergmann/phpunit/issues/2558): `countOf()`
function is missing
--------------------------------------------------------------------------------
================================================================================
pki-console-10.4.0-1.fc25 (FEDORA-2017-1ee9370fd6)
Certificate System - PKI Console
--------------------------------------------------------------------------------
Update Information:
dogtagpki Pagure Issue #2541 - Re-base Dogtag pki packages to 10.4.x
--------------------------------------------------------------------------------
================================================================================
pki-core-10.4.0-1.fc25 (FEDORA-2017-9c6007b406)
Certificate System - PKI Core Components
--------------------------------------------------------------------------------
Update Information:
dogtagpki Pagure Issue #2541 - Re-base Dogtag pki packages to 10.4.x ---- PKI
TRAC Ticket #1710 - Add profile component that copies CN to SAN
--------------------------------------------------------------------------------
================================================================================
purple-hangouts-0-45.20170313hg462bb55.fc25 (FEDORA-2017-f17086441f)
Hangouts plugin for libpurple
--------------------------------------------------------------------------------
Update Information:
Updated to latest snapshots.
--------------------------------------------------------------------------------
================================================================================
purple-skypeweb-1.2.2-8.20170226git19ba66e.fc25 (FEDORA-2017-f17086441f)
Adds support for Skype to Pidgin
--------------------------------------------------------------------------------
Update Information:
Updated to latest snapshots.
--------------------------------------------------------------------------------
================================================================================
python-botocore-1.5.26-1.fc25 (FEDORA-2017-391dac11a6)
Low-level, data-driven core of boto 3
--------------------------------------------------------------------------------
Update Information:
update aws
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1428364 - python-botocore-1.5.25 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428364
[ 2 ] Bug #1428187 - awscli-1.11.63 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428187
--------------------------------------------------------------------------------
================================================================================
python-mutagen-1.37-1.fc25 (FEDORA-2017-8e47f9c5b9)
Mutagen is a Python module to handle audio meta-data
--------------------------------------------------------------------------------
Update Information:
- DSF: add mutagen.dsf module for DSF (DSD Stream File) support - MP3: Add
mp3.MPEGInfo.encoder_settings containing a guess of the encoder settings used,
for example "-V2" for LAME - ID3: add iTunes movement related frames id3.MVIN
and id3.MVNM - MP4: support ��mvi, ��mvc, shwm, stik, rtng, tves, tvsn, plID,
cnID, geID, atID, sfID, cmID, akID
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1426803 - python-mutagen-1.37 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1426803
--------------------------------------------------------------------------------
================================================================================
python-pynacl-1.1.1-1.fc25 (FEDORA-2017-928aea0f05)
Python binding to the Networking and Cryptography (NaCl) library
--------------------------------------------------------------------------------
Update Information:
- Fixed a circular import bug in nacl.utils. - Added shared_key() method on Box.
- You can now pass None to nonce when encrypting with Box or SecretBox and it
will automatically generate a random nonce. - Added support for siphash24. -
Added support for blake2b. - Added support for scrypt. - All raised exceptions
are defined mixing-in nacl.exceptions.CryptoError
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432276 - python-pynacl-1.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1432276
--------------------------------------------------------------------------------
================================================================================
python-sqlalchemy-1.0.17-1.fc25 (FEDORA-2017-c6acb05701)
Modular and flexible ORM library for python
--------------------------------------------------------------------------------
Update Information:
This update contains a new upstream bugfix release. The upstream [changelog](ht
tp://docs.sqlalchemy.org/en/latest/changelog/changelog_10.html#change-1.0.17)
contains a list of all changes in version 1.0.17.
--------------------------------------------------------------------------------
================================================================================
python-wrapt-1.10.10-1.fc25 (FEDORA-2017-cb0ff57e45)
A Python module for decorators, wrappers and monkey patching
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
================================================================================
python-zeroconf-0.18.0-2.fc25 (FEDORA-2017-7ea7818e6e)
Pure Python Multicast DNS Service Discovery Library
--------------------------------------------------------------------------------
Update Information:
Pure Python Multicast DNS Service Discovery Library
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432165 - doesn't this package need a python "enum-compat"?
https://bugzilla.redhat.com/show_bug.cgi?id=1432165
[ 2 ] Bug #1401337 - Review Request: python-zeroconf - Pure Python Multicast DNS Service
Discovery Library
https://bugzilla.redhat.com/show_bug.cgi?id=1401337
--------------------------------------------------------------------------------
================================================================================
qemu-2.7.1-4.fc25 (FEDORA-2017-31b976672b)
QEMU is a FAST! processor emulator
--------------------------------------------------------------------------------
Update Information:
* CVE-2016-7907: net: imx: infinite loop (bz #1381182) * CVE-2017-5525: audio:
memory leakage in ac97 (bz #1414110) * CVE-2017-5526: audio: memory leakage in
es1370 (bz #1414210) * CVE-2016-10155 watchdog: memory leakage in i6300esb (bz
#1415200) * CVE-2017-5552: virtio-gpu-3d: memory leakage (bz #1415283) *
CVE-2017-5578: virtio-gpu: memory leakage (bz #1415797) * CVE-2017-5667: sd:
sdhci OOB access during multi block transfer (bz #1417560) * CVE-2017-5856:
scsi: megasas: memory leakage (bz #1418344) * CVE-2017-5857: virtio-gpu-3d: host
memory leakage in virgl_cmd_resource_unref (bz #1418383) * CVE-2017-5898: usb:
integer overflow in emulated_apdu_from_guest (bz #1419700) * CVE-2017-5987: sd:
infinite loop issue in multi block transfers (bz #1422001) * CVE-2017-6058:
vmxnet3: OOB access when doing vlan stripping (bz #1423359) * CVE-2017-6505:
usb: an infinite loop issue in ohci_service_ed_list (bz #1429434) *
CVE-2017-2615: cirrus: oob access while doing bitblt copy backward (bz #1418206)
* CVE-2017-2620: cirrus: potential arbitrary code execution (bz #1425419) * Fix
spice GL with new mesa/libglvnd (bz #1431905)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1327206 - CVE-2016-7907 Qemu: net: inifinte loop in imx_fec_do_tx() function
https://bugzilla.redhat.com/show_bug.cgi?id=1327206
[ 2 ] Bug #1414108 - CVE-2017-5525 Qemu: audio: memory leakage in ac97 device
https://bugzilla.redhat.com/show_bug.cgi?id=1414108
[ 3 ] Bug #1414209 - CVE-2017-5526 Qemu: audio: memory leakage in es1370 device
https://bugzilla.redhat.com/show_bug.cgi?id=1414209
[ 4 ] Bug #1415199 - CVE-2016-10155 Qemu: watchdog: memory leakage in virtual hardware
watchdog wdt_i6300esb
https://bugzilla.redhat.com/show_bug.cgi?id=1415199
[ 5 ] Bug #1415281 - CVE-2017-5552 Qemu: display: virtio-gpu-3d: memory leakage in
virgl_resource_attach_backing
https://bugzilla.redhat.com/show_bug.cgi?id=1415281
[ 6 ] Bug #1415795 - CVE-2017-5578 Qemu: display: virtio-gpu: host memory leakage in
virtio_gpu_resource_attach_backing
https://bugzilla.redhat.com/show_bug.cgi?id=1415795
[ 7 ] Bug #1417559 - CVE-2017-5667 Qemu: sd: sdhci OOB access during multi block SDMA
transfer
https://bugzilla.redhat.com/show_bug.cgi?id=1417559
[ 8 ] Bug #1418342 - CVE-2017-5856 Qemu: scsi: megasas: host memory leakage in
megasas_handle_dcmd
https://bugzilla.redhat.com/show_bug.cgi?id=1418342
[ 9 ] Bug #1418382 - CVE-2017-5857 Qemu: display: virtio-gpu-3d: host memory leakage in
virgl_cmd_resource_unref
https://bugzilla.redhat.com/show_bug.cgi?id=1418382
[ 10 ] Bug #1419699 - CVE-2017-5898 Qemu: usb: integer overflow in
emulated_apdu_from_guest
https://bugzilla.redhat.com/show_bug.cgi?id=1419699
[ 11 ] Bug #1421995 - CVE-2017-5987 Qemu: sd: infinite loop issue in multi block
transfers
https://bugzilla.redhat.com/show_bug.cgi?id=1421995
[ 12 ] Bug #1423358 - CVE-2017-6058 Qemu: net: vmxnet3: OOB NetRxPkt::ehdr_buf access
when doing vlan stripping
https://bugzilla.redhat.com/show_bug.cgi?id=1423358
[ 13 ] Bug #1429432 - CVE-2017-6505 Qemu: usb: an infinite loop issue in
ohci_service_ed_list
https://bugzilla.redhat.com/show_bug.cgi?id=1429432
[ 14 ] Bug #1418200 - CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt
copy backward mode
https://bugzilla.redhat.com/show_bug.cgi?id=1418200
[ 15 ] Bug #1420484 - CVE-2017-2620 Qemu: display: cirrus: potential arbitrary code
execution via cirrus_bitblt_cputovideo
https://bugzilla.redhat.com/show_bug.cgi?id=1420484
--------------------------------------------------------------------------------
================================================================================
sssd-1.15.2-1.fc25 (FEDORA-2017-eb8924136a)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.15.2
--------------------------------------------------------------------------------
================================================================================
taskotron-trigger-0.4.7-1.fc25 (FEDORA-2017-37d94567f5)
Triggering Taskotron jobs via fedmsg
--------------------------------------------------------------------------------
Update Information:
Fixes a bug in finding cloud images due to hard codded values
--------------------------------------------------------------------------------
================================================================================
tint2-0.13.1-1.fc25 (FEDORA-2017-5845f5a2d6)
A lightweight X11 desktop panel and task manager
--------------------------------------------------------------------------------
Update Information:
- New version 0.13.1 - Fix un-owned directory - Remove 'create tint2 config
directory' hack - Move sample configs from doc
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429149 - tint2-v0.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1429149
[ 2 ] Bug #1431475 - tint2-0.13.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1431475
--------------------------------------------------------------------------------
================================================================================
tripwire-2.4.3.4-1.fc25 (FEDORA-2017-f9e57ad4e5)
IDS (Intrusion Detection System)
--------------------------------------------------------------------------------
Update Information:
update to 2.4.3.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429542 - tripwire cron.daily e-mail address check fails
https://bugzilla.redhat.com/show_bug.cgi?id=1429542
--------------------------------------------------------------------------------
================================================================================
vdr-epg2vdr-1.1.47-1.fc25 (FEDORA-2017-aaf6321b54)
A plugin to retrieve EPG data from a mysql database into VDR
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.47 ---- Update to 1.1.46
--------------------------------------------------------------------------------