The following Fedora 25 Security updates need testing:
Age URL
234
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
133
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
72
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
32
https://bodhi.fedoraproject.org/updates/FEDORA-2017-86cfcbbae8
libstaroffice-0.0.4-1.fc25
26
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99c0118c0c
memcached-1.4.39-1.fc25
26
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fe04b06b64
python-tablib-0.11.5-1.fc25
22
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2232fe97b4
docker-distribution-2.6.2-1.git48294d9.fc25
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-be3df4fe14
java-1.8.0-openjdk-aarch32-1.8.0.141-1.170721.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-866fc566e0
torbrowser-launcher-0.2.8-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f318871e3b ruby-2.3.4-63.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f6e3215f2b
mingw-openjpeg2-2.2.0-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c9d8011d69
mingw-libsoup-2.56.1-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9148fe36b9
postgresql-9.5.8-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1d1a38bdd1
subversion-1.9.7-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7e5ac0896e
botan-1.10.16-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fa1d8ad61a
mercurial-3.8.1-4.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-97eb475d93
cvs-1.11.23-41.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c27a947af1
nginx-1.12.1-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a52a46ba78 xen-4.7.3-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-df343b3e09
chromium-60.0.3112.101-1.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
76
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
32
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2312ac9d9
pungi-4.1.17-1.fc25
29
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b67562744
ca-certificates-2017.2.16-1.0.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-226cbd995b
libvirt-2.2.1-3.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ba3e72c511
osinfo-db-20170813-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-67705933e3
glusterfs-3.10.5-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bd0324f3e9
p11-kit-0.23.8-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-36c2c88b14 vim-8.0.946-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-837f04c39a
selinux-policy-3.13.1-225.20.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a1a0a83099
firefox-55.0.1-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-97eb475d93
cvs-1.11.23-41.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0c6291cd4b
pango-1.40.9-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ee474bb41c file-5.29-9.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e9a1ddb533
rpm-4.13.0.1-2.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a52a46ba78 xen-4.7.3-2.fc25
The following builds have been pushed to Fedora 25 updates-testing
atril-1.18.1-1.fc25
childsplay-1.6-22.fc25
chromium-60.0.3112.101-1.fc25
cld2-0-0.9.20150821gitb56fa78.fc25
cmrt-1.0.6-4.fc25
cmst-2017.08.04-1.git0b13591.fc25
configsnap-0.13-1.fc25
cura-lulzbot-21.08-1.fc25
egl-wayland-1.0.2-0.4.20170802git1f4b1fd.fc25
fedfind-3.6.0-1.fc25
fedpkg-1.29-1.fc25
fedrepo-req-1.3.0-1.fc25
fedrepo-req-1.4.0-1.fc25
file-5.29-9.fc25
ghdl-0.34dev-0.20170815git0879429a.0.fc25
golang-github-remyoudompheng-bigfft-0-0.3.git52369c6.fc25
golang-github-russross-blackfriday-1.2-20.fc25
google-authenticator-1.04-1.fc25
hd-idle-1.05-4.fc25
icecat-52.3.0-1.fc25
jpype-0.6.2-2.fc25
krop-0.4.13-1.fc25
libwbxml-0.11.6-1.fc25
libyui-qt-graph-2.44.6-1.fc25
lulzbot-marlin-firmware-21.08-1.fc25
mate-power-manager-1.18.0-2.fc25
metamath-0.148-1.fc25
module-build-service-1.3.26-3.fc25
nuvola-app-8tracks-5.2-2.fc25
nuvola-app-deezer-2.7-2.fc25
nuvola-app-google-calendar-1.2-3.fc25
nuvola-app-google-play-music-5.19-2.fc25
nuvola-app-groove-1.3-1.fc25
nuvola-app-jango-2.3-2.fc25
nuvola-app-mixcloud-3.2-3.fc25
oci-systemd-hook-0.1.13-1.gitafe4b4a.fc25
pcp-3.12.1-1.fc25
perl-PAR-Packer-1.035-4.fc25
pesign-0.112-20.fc25
php-horde-nag-4.2.16-1.fc25
php-tracy-2.4.9-1.fc25
preeny-0.1-3.fc25
python-assimulo-2.9-15.fc25
python-fedmsg-meta-fedora-infrastructure-0.20.0-1.fc25
rabbitvcs-0.17.1-1.fc25
redis-3.2.10-2.fc25
rpkg-1.50-1.fc25
rpm-4.13.0.1-2.fc25
rsyslog-8.29.0-2.fc25
rubygem-moped-1.5.3-5.fc25
salt-2017.7.1-1.fc25
snapd-2.27.2-1.fc25
snapd-glib-1.16-1.fc25
standard-test-roles-2.4-1.fc25
xen-4.7.3-2.fc25
youtube-dl-2017.08.13-1.fc25
Details about builds:
================================================================================
atril-1.18.1-1.fc25 (FEDORA-2017-05a1a307e0)
Document viewer
--------------------------------------------------------------------------------
Update Information:
- update to 1.18.1
--------------------------------------------------------------------------------
================================================================================
childsplay-1.6-22.fc25 (FEDORA-2017-263a1ae62e)
Suite of educational games for young children
--------------------------------------------------------------------------------
Update Information:
Add pygtk2 as required (#1481030)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1481030 - Missing dependencies prevent you from starting the childsplay
application
https://bugzilla.redhat.com/show_bug.cgi?id=1481030
--------------------------------------------------------------------------------
================================================================================
chromium-60.0.3112.101-1.fc25 (FEDORA-2017-df343b3e09)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Update to 60.0.3112.101. Apply upstream fix for cameras reporting 0x0 resolution
formats. ---- Chromium 60. Security fix for CVE-2017-5091, CVE-2017-5092,
CVE-2017-5093, CVE-2017-5094, CVE-2017-5095, CVE-2017-5096, CVE-2017-5097,
CVE-2017-5098, CVE-2017-5099, CVE-2017-5100, CVE-2017-5101, CVE-2017-5102,
CVE-2017-5103, CVE-2017-5104, CVE-2017-7000, CVE-2017-5105, CVE-2017-5106,
CVE-2017-5107, CVE-2017-5108, CVE-2017-5109, CVE-2017-5110. New subpackage
-headless. ---- Update to 59.0.3071.115
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475213 - CVE-2017-5110 chromium-browser: ui spoofing in payments dialog
https://bugzilla.redhat.com/show_bug.cgi?id=1475213
[ 2 ] Bug #1475212 - CVE-2017-5109 chromium-browser: ui spoofing in browser
https://bugzilla.redhat.com/show_bug.cgi?id=1475212
[ 3 ] Bug #1475211 - CVE-2017-5108 chromium-browser: type confusion in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1475211
[ 4 ] Bug #1475210 - CVE-2017-5107 chromium-browser: user information leak via svg
https://bugzilla.redhat.com/show_bug.cgi?id=1475210
[ 5 ] Bug #1475209 - CVE-2017-5106 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1475209
[ 6 ] Bug #1475208 - CVE-2017-5105 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1475208
[ 7 ] Bug #1475207 - CVE-2017-7000 chromium-browser: pointer disclosure in sqlite
https://bugzilla.redhat.com/show_bug.cgi?id=1475207
[ 8 ] Bug #1475206 - CVE-2017-5104 chromium-browser: ui spoofing in browser
https://bugzilla.redhat.com/show_bug.cgi?id=1475206
[ 9 ] Bug #1475205 - CVE-2017-5103 chromium-browser: uninitialized use in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1475205
[ 10 ] Bug #1475204 - CVE-2017-5102 chromium-browser: uninitialized use in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1475204
[ 11 ] Bug #1475203 - CVE-2017-5101 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1475203
[ 12 ] Bug #1475202 - CVE-2017-5100 chromium-browser: use after free in chrome apps
https://bugzilla.redhat.com/show_bug.cgi?id=1475202
[ 13 ] Bug #1475201 - CVE-2017-5099 chromium-browser: out-of-bounds write in ppapi
https://bugzilla.redhat.com/show_bug.cgi?id=1475201
[ 14 ] Bug #1475200 - CVE-2017-5098 chromium-browser: use after free in v8
https://bugzilla.redhat.com/show_bug.cgi?id=1475200
[ 15 ] Bug #1475199 - CVE-2017-5097 chromium-browser: out-of-bounds read in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1475199
[ 16 ] Bug #1475198 - CVE-2017-5096 chromium-browser: user information leak via android
intents
https://bugzilla.redhat.com/show_bug.cgi?id=1475198
[ 17 ] Bug #1475197 - CVE-2017-5095 chromium-browser: out-of-bounds write in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1475197
[ 18 ] Bug #1475196 - CVE-2017-5094 chromium-browser: type confusion in extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1475196
[ 19 ] Bug #1475195 - CVE-2017-5093 chromium-browser: ui spoofing in blink
https://bugzilla.redhat.com/show_bug.cgi?id=1475195
[ 20 ] Bug #1475194 - CVE-2017-5092 chromium-browser: use after free in ppapi
https://bugzilla.redhat.com/show_bug.cgi?id=1475194
[ 21 ] Bug #1475193 - CVE-2017-5091 chromium-browser: use after free in indexeddb
https://bugzilla.redhat.com/show_bug.cgi?id=1475193
--------------------------------------------------------------------------------
================================================================================
cld2-0-0.9.20150821gitb56fa78.fc25 (FEDORA-2017-e803b2d329)
A library to detect the natural language of text
--------------------------------------------------------------------------------
Update Information:
Compact Language Detector 2 (CLD2). Initial Fedora 25 package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1441728 - Review Request: cld2 - Compact Language Detector 2
https://bugzilla.redhat.com/show_bug.cgi?id=1441728
--------------------------------------------------------------------------------
================================================================================
cmrt-1.0.6-4.fc25 (FEDORA-2017-c8bda49173)
C for Media Runtime
--------------------------------------------------------------------------------
Update Information:
Updated description
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475961 - Review Request: cmrt - C for Media Runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1475961
--------------------------------------------------------------------------------
================================================================================
cmst-2017.08.04-1.git0b13591.fc25 (FEDORA-2017-dc7fd69248)
A Qt based GUI front end for the connman connection manager with systemtray icon
--------------------------------------------------------------------------------
Update Information:
Update to 2017.08.04-1.git0b13591
--------------------------------------------------------------------------------
================================================================================
configsnap-0.13-1.fc25 (FEDORA-2017-dc6dd0a4b7)
Record and compare system state
--------------------------------------------------------------------------------
Update Information:
Update to 0.13
--------------------------------------------------------------------------------
================================================================================
cura-lulzbot-21.08-1.fc25 (FEDORA-2017-396a568a6a)
Cura LulzBot Edition, 3D printer control software
--------------------------------------------------------------------------------
Update Information:
Update to 21.08. New firmware for the TAZ 6. Use pre-built firmware temporarily
until we can figure out why it does not work properly when built from source.
---- Update to 21.03, new mini firmware.
--------------------------------------------------------------------------------
================================================================================
egl-wayland-1.0.2-0.4.20170802git1f4b1fd.fc25 (FEDORA-2017-da042c756c)
Wayland EGL External Platform library
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
================================================================================
fedfind-3.6.0-1.fc25 (FEDORA-2017-5d69ec3c80)
Fedora compose and image finder
--------------------------------------------------------------------------------
Update Information:
This update adds support for the new modular composes, with 'Fedora-Modular' as
their shortnames. Currently only Rawhide and Branched nightly modular composes
are supported.
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.29-1.fc25 (FEDORA-2017-f0d9aff598)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
# Hihglight - Read Koji configuration from profile. - fedpkg-stage is usable -
Non-zero is returned when local command fails - More Python 3 compatible - Allow
container builds from any namespace - Supply namespace to lookaside (if enabled)
# rpkg - Fix PEP8 error (cqi) - Spelling fixes (ville.skytta) - Reword help and
description of new-sources and upload commands - 1248737 (cqi) - Set
autorebuild enabled by default (bfontecc) - Add commands to whitelist_externals
(cqi) - Declare Python 3 versions to support in setup.py (cqi) - Replace unicode
with six.text_type (cqi) - Run tests in both Python 2 and 3 with tox (cqi) -
Make tests and covered code compatible with Py3 (cqi) - Add requirements files
(cqi) - Do not build srpm in test (cqi) - Do not actually run git-diff in tests
(cqi) - Remove deprecated modules used in koji (cqi) - Non-zero exit when
rpmbuild fails in local command (cqi) - Report deprecation of config via logger
(lsedlar) - Print --dist deprecation warning explicitly (lsedlar) - utils: Avoid
DeprecationWarning for messages for users (lsedlar) - Supply namespace to
lookaside (if enabled) (lsedlar) - Support reading koji config from profile -
#187 (cqi) - Remove kitchen (cqi) - Fix string format (cqi) - Recommend
--release instead of --dist in mockbuild --help (tmz) - Allow overriding
container build target by downstream (lsedlar) - Add a separate property for
namespace (lsedlar) - Allow container builds from any namespace (maxamillion) -
Make osbs support optional (cqi) - make osbs dependency optional (pavlix) -
Allow explicit namespaces with slashes (lsedlar) - Do not hang indefinitely when
lookaside cache server stops sending data (jkaluza) - Make --module-name work
with namespaces - #216 (lsedlar) - Include README.rst in dist package (cqi) -
More document in README - #189 (cqi) - Make new command be able to print unicode
- #205 (cqi) - Allow to specify custom info to a dummy commit (cqi) - Load
module name correctly even if push url ends in slash - #192 (cqi) - Replace
fedorahosted.org with pagure.io - #202 (cqi) - Fix rpm command to get changelog
from SPEC - rhbz#1412224 (cqi) - Rewrite tests to avoid running rpmbuild and
rpmlint (cqi) - Use fake value to make Command in test (cqi) - Python 3.6
invalid escape sequence deprecation fixes (ville.skytta) # fedpkg - Remove
unused variable in Commands.retire (cqi) - No more pkgdb. (rbean) - Add --arches
to build completions (ville.skytta) - Add ppc64le to arch completions
(ville.skytta) - Explain how to write a note in multiple lines in update
template - #123 (cqi) - Remove code that handles secondary arch (cqi) - Simplify
passing arguments when creating Command object - #14 (cqi) - Set koji profile
for secondary arch immediately (cqi) - Use profile to load Koji configuration -
#97 (cqi) - Remove push.default from clone_default - #109 (cqi) - remove special
handling of s390 specific packages (dan) - Replace
fedorahosted.org with
pagure.io in manpage - #113 (cqi) - Remove tracbaseurl from conf file - #112
(cqi) - Set disttag properly (cqi) - koji stage config moved, update fedpkg
defaults (maxamillion) - Specific help of --release for fedpkg - rhbz#1054440
(cqi)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248737 - What is the difference between new-sources and upload?
https://bugzilla.redhat.com/show_bug.cgi?id=1248737
[ 2 ] Bug #1412224 - fedpkg update fails: Could not execute update: error: Unable to
open /home/jsynacek/rpmbuild/SOURCES/triggers.systemd: No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=1412224
[ 3 ] Bug #1410300 - "fedpkg local" should return nonzero exitcode when build
fails
https://bugzilla.redhat.com/show_bug.cgi?id=1410300
--------------------------------------------------------------------------------
================================================================================
fedrepo-req-1.3.0-1.fc25 (FEDORA-2017-221e2e5c0f)
CLI for Fedora package repo requests
--------------------------------------------------------------------------------
Update Information:
Bumps to version 1.3.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1481036 - Requesting new repo errors with meaningless error message
https://bugzilla.redhat.com/show_bug.cgi?id=1481036
--------------------------------------------------------------------------------
================================================================================
fedrepo-req-1.4.0-1.fc25 (FEDORA-2017-b7a0f64ef7)
CLI for Fedora package repo requests
--------------------------------------------------------------------------------
Update Information:
Updates to v1.4.0. The client tool is mostly unchanged except that it has a few
usability improvements such as having a man page and telling users to read the
README if they haven't configured the client tool. The admin tool has a few
enhancements and bug fixes that are listed in git.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1481036 - Requesting new repo errors with meaningless error message
https://bugzilla.redhat.com/show_bug.cgi?id=1481036
--------------------------------------------------------------------------------
================================================================================
file-5.29-9.fc25 (FEDORA-2017-ee474bb41c)
A utility for determining file types
--------------------------------------------------------------------------------
Update Information:
- Ruby script recognition and classification - Modified ruby magic ---- - New
magic file entry - gconv - Recognition of iconv/gconv module cache
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1050897 - Ruby script classification should not change when require
'foo' appears prior module
https://bugzilla.redhat.com/show_bug.cgi?id=1050897
[ 2 ] Bug #1342428 - file(1) does not recognize iconv/gconv modules cache
https://bugzilla.redhat.com/show_bug.cgi?id=1342428
--------------------------------------------------------------------------------
================================================================================
ghdl-0.34dev-0.20170815git0879429a.0.fc25 (FEDORA-2017-b6a9da5490)
A VHDL simulator, using the GCC technology
--------------------------------------------------------------------------------
Update Information:
- update to current git - fix gnat version for fc25
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429257 - Conflicting files between iverlog and ghdl
https://bugzilla.redhat.com/show_bug.cgi?id=1429257
[ 2 ] Bug #1446872 - pyanaconda.payload.PayloadError: Payload error - DNF installation
has ended up abruptly: Transaction check error:
https://bugzilla.redhat.com/show_bug.cgi?id=1446872
[ 3 ] Bug #1472003 - GHDL tries to link against gnat-6 but should against gnat-7.
https://bugzilla.redhat.com/show_bug.cgi?id=1472003
--------------------------------------------------------------------------------
================================================================================
golang-github-remyoudompheng-bigfft-0-0.3.git52369c6.fc25 (FEDORA-2017-36f2d5b8dd)
Big integer multiplication library using FFT for Go
--------------------------------------------------------------------------------
Update Information:
Bump to commit 52369c6.
--------------------------------------------------------------------------------
================================================================================
golang-github-russross-blackfriday-1.2-20.fc25 (FEDORA-2017-c16acbab9c)
Markdown processor implemented in Go
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 0ba0f2b6ed7c475a92e4df8641825cb7a11d1fa3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1222338 - Tracker for golang-github-russross-blackfriday
https://bugzilla.redhat.com/show_bug.cgi?id=1222338
--------------------------------------------------------------------------------
================================================================================
google-authenticator-1.04-1.fc25 (FEDORA-2017-0ac04771a7)
One-time pass-code support using open standards
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream
--------------------------------------------------------------------------------
================================================================================
hd-idle-1.05-4.fc25 (FEDORA-2017-1da0100577)
Spin down idle [USB] hard disks
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
================================================================================
icecat-52.3.0-1.fc25 (FEDORA-2017-e5677483ef)
GNU version of Firefox browser
--------------------------------------------------------------------------------
Update Information:
- Update to 52.3.0
--------------------------------------------------------------------------------
================================================================================
jpype-0.6.2-2.fc25 (FEDORA-2017-7ca8237bf4)
Full access for Python programs to Java class libraries
--------------------------------------------------------------------------------
Update Information:
bump to version 0.6.2 Fix JVM location for OSX. Fix a method overload
bug. Add support for synthetic methods
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476689 - jpype - new version 0.6.2 available
https://bugzilla.redhat.com/show_bug.cgi?id=1476689
--------------------------------------------------------------------------------
================================================================================
krop-0.4.13-1.fc25 (FEDORA-2017-f98c80f14a)
Tool to crop PDF files with an eye towards eReaders
--------------------------------------------------------------------------------
Update Information:
update to the latest upstream version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1438018 - [abrt] krop: application.py:65:main:AttributeError: 'str'
object has no attribute 'decode'
https://bugzilla.redhat.com/show_bug.cgi?id=1438018
[ 2 ] Bug #1473983 - krop-0.4.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473983
--------------------------------------------------------------------------------
================================================================================
libwbxml-0.11.6-1.fc25 (FEDORA-2017-1f6403923f)
Library and tools to parse, encode and handle WBXML documents
--------------------------------------------------------------------------------
Update Information:
This release fixes encoding of Content element in AirSyncBase CodePage.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1481898 - libwbxml-0.11.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1481898
--------------------------------------------------------------------------------
================================================================================
libyui-qt-graph-2.44.6-1.fc25 (FEDORA-2017-1d1c2a6b67)
Qt Graph Widget for libyui
--------------------------------------------------------------------------------
Update Information:
* Initial rpm release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #960201 - Review Request: libyui-qt-graph - Qt Graph Widget for libyui
https://bugzilla.redhat.com/show_bug.cgi?id=960201
--------------------------------------------------------------------------------
================================================================================
lulzbot-marlin-firmware-21.08-1.fc25 (FEDORA-2017-396a568a6a)
Marlin firmware files for the Lulzbot family of 3D printers
--------------------------------------------------------------------------------
Update Information:
Update to 21.08. New firmware for the TAZ 6. Use pre-built firmware temporarily
until we can figure out why it does not work properly when built from source.
---- Update to 21.03, new mini firmware.
--------------------------------------------------------------------------------
================================================================================
mate-power-manager-1.18.0-2.fc25 (FEDORA-2017-837ae487a1)
MATE power management service
--------------------------------------------------------------------------------
Update Information:
fix partial rhbz (#1476622)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476622 - [abrt] mate-power-manager: gpm_kbd_backlight_on_dbus_signal():
mate-power-manager killed by signal 6
https://bugzilla.redhat.com/show_bug.cgi?id=1476622
--------------------------------------------------------------------------------
================================================================================
metamath-0.148-1.fc25 (FEDORA-2017-88ab7c23dd)
Construct mathematics from basic axioms
--------------------------------------------------------------------------------
Update Information:
Changes in version 0.148: - Many changes to set.mm - Add "Dummy variable x is
distinct from all other variables." to proof web page - Hyperlink "Dummy
variable(s)"
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482724 - metamath-0.148 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1482724
--------------------------------------------------------------------------------
================================================================================
module-build-service-1.3.26-3.fc25 (FEDORA-2017-46c9f7b9bd)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
Add dependency on python2-dogpile-cache ---- New version 1.3.26.
--------------------------------------------------------------------------------
================================================================================
nuvola-app-8tracks-5.2-2.fc25 (FEDORA-2017-f41915a0e4)
8tracks for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
* Fri Aug 04 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 5.2-2 - correct
%%{name}.metainfo.xml * Fri Jul 28 2017 Martin Gansser
<martinkg(a)fedoraproject.org> - 5.2-1 - initial build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-deezer-2.7-2.fc25 (FEDORA-2017-66959d2935)
Deezer for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
* Fri Aug 04 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 2.7-2 - correct
%%{name}.metainfo.xml * Thu Aug 03 2017 Martin Gansser
<martinkg(a)fedoraproject.org> - 2.7-1 - Update to 2.7 * Thu Jul 27 2017 Martin
Gansser <martinkg(a)fedoraproject.org> - 2.6-2 - correct the extends/name-tag in
%%{name}.metainfo.xml * Sun Jul 02 2017 Martin Gansser
<martinkg(a)fedoraproject.org> - 2.6-1 - Update to 2.6 * Sat Jan 21 2017 Martin
Gansser <martinkg(a)fedoraproject.org> - 2.5-1 - initial build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-google-calendar-1.2-3.fc25 (FEDORA-2017-8065f05d4b)
Google Calendar web app for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
* Fri Aug 04 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2-3 - correct
license tag - correct %%{name}.metainfo.xml * Thu Jul 27 2017 Martin Gansser
<martinkg(a)fedoraproject.org> - 1.2-2 - correct the extends/name-tag in
%%{name}.metainfo.xml * Sun Jul 02 2017 Martin Gansser
<martinkg(a)fedoraproject.org> - 1.2-1 - initial build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-google-play-music-5.19-2.fc25 (FEDORA-2017-302f5d57cb)
Google Play integration for Nuvola Player
--------------------------------------------------------------------------------
Update Information:
* Tue Aug 08 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 5.19-2 - correct
%%{name}.metainfo.xml * Fri Jul 28 2017 Martin Gansser
<martinkg(a)fedoraproject.org> - 5.19-1 - initial build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-groove-1.3-1.fc25 (FEDORA-2017-981a8bab5b)
Microsoft Groove for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
* Fri Jul 28 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 1.3-1 - initial
build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-jango-2.3-2.fc25 (FEDORA-2017-880d222b85)
Jango for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
* Thu Aug 10 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 2.3-2 - correct
%%{name}.metainfo.xml * Fri Jul 28 2017 Martin Gansser
<martinkg(a)fedoraproject.org> - 2.3-1 - initial build
--------------------------------------------------------------------------------
================================================================================
nuvola-app-mixcloud-3.2-3.fc25 (FEDORA-2017-9b522d68ce)
Mixcloud for Nuvola Player 3
--------------------------------------------------------------------------------
Update Information:
* Thu Aug 10 2017 Martin Gansser <martinkg(a)fedoraproject.org> - 3.2-3 - correct
%%{name}.metainfo.xml * Fri Aug 04 2017 Martin Gansser
<martinkg(a)fedoraproject.org> - 3.2-2 - correct %%description text - correct
%%{name}.metainfo.xml * Fri Jul 28 2017 Martin Gansser
<martinkg(a)fedoraproject.org> - 3.2-1 - initial build
--------------------------------------------------------------------------------
================================================================================
oci-systemd-hook-0.1.13-1.gitafe4b4a.fc25 (FEDORA-2017-fe1d8b5a83)
OCI systemd hook for docker
--------------------------------------------------------------------------------
Update Information:
Systemd hook was not properly handling volume mounting files into /run,
specifically /run/docker.sock
--------------------------------------------------------------------------------
================================================================================
pcp-3.12.1-1.fc25 (FEDORA-2017-6c788d57bd)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
Update to latest PCP sources.
--------------------------------------------------------------------------------
================================================================================
perl-PAR-Packer-1.035-4.fc25 (FEDORA-2017-8cfb07cd7a)
PAR Packager
--------------------------------------------------------------------------------
Update Information:
This release restore compatibility with Perl 5.24.2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470542 - PAR::Packer requires the same perl version it was built against
https://bugzilla.redhat.com/show_bug.cgi?id=1470542
--------------------------------------------------------------------------------
================================================================================
pesign-0.112-20.fc25 (FEDORA-2017-8976ad052b)
Signing utility for UEFI binaries
--------------------------------------------------------------------------------
Update Information:
Update to make the kernel builders work again with newer opensc (I think)
libraries. ---- This removes the dependencies on pkcs11 module providers; those
need to be handled elsewhere so as to only pull in the modules required on a
given system. --- This also makes the macros work with newer RPM, and tries to
make builds on the fedora kernel builders fail if the signing permissions aren't
right.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1349073 - pesign: should not require coolkey
https://bugzilla.redhat.com/show_bug.cgi?id=1349073
--------------------------------------------------------------------------------
================================================================================
php-horde-nag-4.2.16-1.fc25 (FEDORA-2017-4107692f23)
A web based task list manager
--------------------------------------------------------------------------------
Update Information:
**nag 4.2.16** * [jan] Fix parsing sub-tasks from the quick enter dialog (Bug
#14681). * [jan] Fix positioning of due time drop down list (Bug #12288). *
[jan] Improve compatibilty when synchronizing tasks via CalDAV/ICS (Bug #14057).
* [jan] Fix exporting multiple tags to iCalendar CATEGORIES (Bug #14057). *
[jan] Don't include external tasks into drop down list for parent tasks. * [jan]
Fix redirecting to task list after completing a task (Bug #14678).
--------------------------------------------------------------------------------
================================================================================
php-tracy-2.4.9-1.fc25 (FEDORA-2017-0c2099931e)
Tracy: useful PHP debugger
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.9** * added `Debugger::renderLoader()` for faster
client-side initialization * element `<div id=tracy-debug>` is created by JS
* bar: added support for touch events * bar: is draggable only using logo
* bar: all H1 tags should make panel draggable (#207) * dumper: added CSS
for anchors * TracyExtension: throws exception when log directory is not
writable
--------------------------------------------------------------------------------
================================================================================
preeny-0.1-3.fc25 (FEDORA-2017-224cdd4d83)
Some helpful preload libraries for pwning stuff
--------------------------------------------------------------------------------
Update Information:
This is new package preeny.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1479022 - Review Request: preeny - Some helpful preload libraries for pwning
stuff
https://bugzilla.redhat.com/show_bug.cgi?id=1479022
--------------------------------------------------------------------------------
================================================================================
python-assimulo-2.9-15.fc25 (FEDORA-2017-742aa5ba5f)
Ordinary differential and differential algebraic equations solver
--------------------------------------------------------------------------------
Update Information:
- Fix Summary tag
--------------------------------------------------------------------------------
================================================================================
python-fedmsg-meta-fedora-infrastructure-0.20.0-1.fc25 (FEDORA-2017-7446e4767e)
Metadata providers for Fedora Infrastructure's fedmsg deployment
--------------------------------------------------------------------------------
Update Information:
Update to 0.20.0 Change log at :
https://github.com/fedora-
infra/fedmsg_meta_fedora_infrastructure/blob/develop/CHANGELOG.rst#0200 ----
Update to 0.19.0 Release note at:
https://github.com/fedora-
infra/fedmsg_meta_fedora_infrastructure/blob/develop/CHANGELOG.rst#0190
--------------------------------------------------------------------------------
================================================================================
rabbitvcs-0.17.1-1.fc25 (FEDORA-2017-f5d9e8090b)
Graphical user interface to version control systems
--------------------------------------------------------------------------------
Update Information:
Update to 0.17.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1464713 - rabbitvcs-v0.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1464713
[ 2 ] Bug #1481708 - rabbitvcs-v0.17.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1481708
--------------------------------------------------------------------------------
================================================================================
redis-3.2.10-2.fc25 (FEDORA-2017-ce49081f6c)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
Add redis-trib based on patch from Sebastian Saletnik. (RHBZ #1215654)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1215654 - redis-3.0.0 cluster managing script
https://bugzilla.redhat.com/show_bug.cgi?id=1215654
--------------------------------------------------------------------------------
================================================================================
rpkg-1.50-1.fc25 (FEDORA-2017-f0d9aff598)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
# Hihglight - Read Koji configuration from profile. - fedpkg-stage is usable -
Non-zero is returned when local command fails - More Python 3 compatible - Allow
container builds from any namespace - Supply namespace to lookaside (if enabled)
# rpkg - Fix PEP8 error (cqi) - Spelling fixes (ville.skytta) - Reword help and
description of new-sources and upload commands - 1248737 (cqi) - Set
autorebuild enabled by default (bfontecc) - Add commands to whitelist_externals
(cqi) - Declare Python 3 versions to support in setup.py (cqi) - Replace unicode
with six.text_type (cqi) - Run tests in both Python 2 and 3 with tox (cqi) -
Make tests and covered code compatible with Py3 (cqi) - Add requirements files
(cqi) - Do not build srpm in test (cqi) - Do not actually run git-diff in tests
(cqi) - Remove deprecated modules used in koji (cqi) - Non-zero exit when
rpmbuild fails in local command (cqi) - Report deprecation of config via logger
(lsedlar) - Print --dist deprecation warning explicitly (lsedlar) - utils: Avoid
DeprecationWarning for messages for users (lsedlar) - Supply namespace to
lookaside (if enabled) (lsedlar) - Support reading koji config from profile -
#187 (cqi) - Remove kitchen (cqi) - Fix string format (cqi) - Recommend
--release instead of --dist in mockbuild --help (tmz) - Allow overriding
container build target by downstream (lsedlar) - Add a separate property for
namespace (lsedlar) - Allow container builds from any namespace (maxamillion) -
Make osbs support optional (cqi) - make osbs dependency optional (pavlix) -
Allow explicit namespaces with slashes (lsedlar) - Do not hang indefinitely when
lookaside cache server stops sending data (jkaluza) - Make --module-name work
with namespaces - #216 (lsedlar) - Include README.rst in dist package (cqi) -
More document in README - #189 (cqi) - Make new command be able to print unicode
- #205 (cqi) - Allow to specify custom info to a dummy commit (cqi) - Load
module name correctly even if push url ends in slash - #192 (cqi) - Replace
fedorahosted.org with pagure.io - #202 (cqi) - Fix rpm command to get changelog
from SPEC - rhbz#1412224 (cqi) - Rewrite tests to avoid running rpmbuild and
rpmlint (cqi) - Use fake value to make Command in test (cqi) - Python 3.6
invalid escape sequence deprecation fixes (ville.skytta) # fedpkg - Remove
unused variable in Commands.retire (cqi) - No more pkgdb. (rbean) - Add --arches
to build completions (ville.skytta) - Add ppc64le to arch completions
(ville.skytta) - Explain how to write a note in multiple lines in update
template - #123 (cqi) - Remove code that handles secondary arch (cqi) - Simplify
passing arguments when creating Command object - #14 (cqi) - Set koji profile
for secondary arch immediately (cqi) - Use profile to load Koji configuration -
#97 (cqi) - Remove push.default from clone_default - #109 (cqi) - remove special
handling of s390 specific packages (dan) - Replace
fedorahosted.org with
pagure.io in manpage - #113 (cqi) - Remove tracbaseurl from conf file - #112
(cqi) - Set disttag properly (cqi) - koji stage config moved, update fedpkg
defaults (maxamillion) - Specific help of --release for fedpkg - rhbz#1054440
(cqi)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1248737 - What is the difference between new-sources and upload?
https://bugzilla.redhat.com/show_bug.cgi?id=1248737
[ 2 ] Bug #1412224 - fedpkg update fails: Could not execute update: error: Unable to
open /home/jsynacek/rpmbuild/SOURCES/triggers.systemd: No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=1412224
[ 3 ] Bug #1410300 - "fedpkg local" should return nonzero exitcode when build
fails
https://bugzilla.redhat.com/show_bug.cgi?id=1410300
--------------------------------------------------------------------------------
================================================================================
rpm-4.13.0.1-2.fc25 (FEDORA-2017-e9a1ddb533)
The RPM package management system
--------------------------------------------------------------------------------
Update Information:
Fixes several bugs, in particular one which prevents signature checking on
packages created by rpm >= 4.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1462671 - [rpm-python] rpm._rpms: undefined symbol: spec_Type on Fedora 26
https://bugzilla.redhat.com/show_bug.cgi?id=1462671
[ 2 ] Bug #641022 - python-debuginfo package owns a world-writable /usr/src/debug/tmp
directory
https://bugzilla.redhat.com/show_bug.cgi?id=641022
[ 3 ] Bug #1480493 - rpm 4.13.0 cannot read signature headers made by rpm 4.13.90
https://bugzilla.redhat.com/show_bug.cgi?id=1480493
--------------------------------------------------------------------------------
================================================================================
rsyslog-8.29.0-2.fc25 (FEDORA-2017-aec951ff4b)
Enhanced system logging and kernel message trapping daemon
--------------------------------------------------------------------------------
Update Information:
rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465894 - rsyslog-8.29.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1465894
--------------------------------------------------------------------------------
================================================================================
rubygem-moped-1.5.3-5.fc25 (FEDORA-2017-81cdd8b6dd)
A MongoDB driver for Ruby
--------------------------------------------------------------------------------
Update Information:
Fix connection issues on BE systems (rhbz#1481611).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1481611 - Mongo does not work on secondary (BE?) arches
https://bugzilla.redhat.com/show_bug.cgi?id=1481611
--------------------------------------------------------------------------------
================================================================================
salt-2017.7.1-1.fc25 (FEDORA-2017-8338ecc934)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to feature release 2017.7.1 ---- Update to feature release 2017.7.0
---- Update to feature release 2016.11.6 ---- Add patch for Fix ipv6
nameserver grains #41244 ---- Commented out check for pycryptodomex on Fedora
---- Use python-crypto on fedora platforms till pycryptodomex becomes available
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #41244 - None
https://bugzilla.redhat.com/show_bug.cgi?id=41244
--------------------------------------------------------------------------------
================================================================================
snapd-2.27.2-1.fc25 (FEDORA-2017-4f8de51e27)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
Some highlights of snapd 2.27 from upstream: * updated interfaces: `default`,
`mir`, `optical-observe`, `system-observe`, `screen-inhibit-control`, `unity`,
`network-control` * new interfaces: `greengrass-support`, `password-manager-
service` * snapctl work inside the snap context too (outside of hooks) * forced-
devmode information is available via the sysinfo API now * seccomp argument
filtering re-enabled * add `--listswitch` to `snap abort` and `snap watch` * add
new snap commandline aliases: `snap search` and `snap change` * many test
improvements * many bugfixes * shellcheck everywhere * `snap list` now shows the
snap type in the notes (if it is not `type: app`) * support "title" via the
store/rest-api * `syslogIdentifier` is now written to the generated systemd unit
files * make snapd itself a "type=notify" daemon * auto-import system-user
assertion only from ext4,vfat partitions * show sha3-384 hash in `snap info
--verbose <snapfile>` * show snap-id in snap info * make config defaults from
gadget work also at first boot * add support for android-boot * implement `snap-
update-ns` * use `/etc/ssl` from the core snap * implement shortcut `snap
install --unaliased` to install a snap without its automatic aliases Some
highlights of snapd-glib 1.16 from upstream: * Bring introspection and vapigen
m4 macros into the source so can build without them installed. * Fix snapd-qt
build failure due to conflict of 'signals' variable with GDBus. * Set a user
agent when sending requests to snapd-glib
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471771 - snapd-glib-1.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471771
[ 2 ] Bug #1458086 - snapd-2.27 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1458086
[ 3 ] Bug #1481247 - snapd-2.27.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1481247
[ 4 ] Bug #1482173 - snapd-2.27.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1482173
--------------------------------------------------------------------------------
================================================================================
snapd-glib-1.16-1.fc25 (FEDORA-2017-4f8de51e27)
Library providing a GLib interface to snapd
--------------------------------------------------------------------------------
Update Information:
Some highlights of snapd 2.27 from upstream: * updated interfaces: `default`,
`mir`, `optical-observe`, `system-observe`, `screen-inhibit-control`, `unity`,
`network-control` * new interfaces: `greengrass-support`, `password-manager-
service` * snapctl work inside the snap context too (outside of hooks) * forced-
devmode information is available via the sysinfo API now * seccomp argument
filtering re-enabled * add `--listswitch` to `snap abort` and `snap watch` * add
new snap commandline aliases: `snap search` and `snap change` * many test
improvements * many bugfixes * shellcheck everywhere * `snap list` now shows the
snap type in the notes (if it is not `type: app`) * support "title" via the
store/rest-api * `syslogIdentifier` is now written to the generated systemd unit
files * make snapd itself a "type=notify" daemon * auto-import system-user
assertion only from ext4,vfat partitions * show sha3-384 hash in `snap info
--verbose <snapfile>` * show snap-id in snap info * make config defaults from
gadget work also at first boot * add support for android-boot * implement `snap-
update-ns` * use `/etc/ssl` from the core snap * implement shortcut `snap
install --unaliased` to install a snap without its automatic aliases Some
highlights of snapd-glib 1.16 from upstream: * Bring introspection and vapigen
m4 macros into the source so can build without them installed. * Fix snapd-qt
build failure due to conflict of 'signals' variable with GDBus. * Set a user
agent when sending requests to snapd-glib
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471771 - snapd-glib-1.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471771
[ 2 ] Bug #1458086 - snapd-2.27 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1458086
[ 3 ] Bug #1481247 - snapd-2.27.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1481247
[ 4 ] Bug #1482173 - snapd-2.27.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1482173
--------------------------------------------------------------------------------
================================================================================
standard-test-roles-2.4-1.fc25 (FEDORA-2017-aacc3361c6)
Standard Test Interface Ansible roles
--------------------------------------------------------------------------------
Update Information:
Sync standard-test-roles with latest upstream bug fix release. ---- Sync
standard-test-roles with latest upstream release.
--------------------------------------------------------------------------------
================================================================================
xen-4.7.3-2.fc25 (FEDORA-2017-a52a46ba78)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
Qemu: serial: host memory leakage 16550A UART emulation [CVE-2017-5579]
(#1416162) Qemu: display: cirrus: OOB read access issue [CVE-2017-7718]
(#1443444) xen: various flaws (#1481765) multiple problems with transitive
grants [XSA-226, CVE-2017-12135] x86: PV privilege escalation via map_grant_ref
[XSA-227, CVE-2017-12137] grant_table: Race conditions with maptrack free list
handling [XSA-228, CVE-2017-12136] grant_table: possibly premature clearing of
GTF_writing / GTF_reading [XSA-230, CVE-2017-12855]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1477651 - CVE-2017-12136 xsa228 xen: grant_table: Race conditions with
maptrack free list handling (XSA-228)
https://bugzilla.redhat.com/show_bug.cgi?id=1477651
[ 2 ] Bug #1477655 - CVE-2017-12135 xsa226 xen: possibly unbounded recursion in grant
table code (XSA-226)
https://bugzilla.redhat.com/show_bug.cgi?id=1477655
[ 3 ] Bug #1477657 - CVE-2017-12137 xsa227 xen: x86: PV privilege escalation via
map_grant_ref (XSA-227)
https://bugzilla.redhat.com/show_bug.cgi?id=1477657
[ 4 ] Bug #1481762 - CVE-2017-12855 xsa230 CVE-2017-12855 xen: grant_table: possibly
premature clearing of GTF_writing / GTF_reading (XSA-230)
https://bugzilla.redhat.com/show_bug.cgi?id=1481762
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2017.08.13-1.fc25 (FEDORA-2017-eaffbcde93)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to latest release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476633 - youtube-dl-2017.08.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476633
[ 2 ] Bug #1476989 - [abrt] youtube-dl: write_string():
utils.py:1400:write_string:OSError: [Errno 5] Input/output error
https://bugzilla.redhat.com/show_bug.cgi?id=1476989
--------------------------------------------------------------------------------