The following Fedora 25 Security updates need testing:
Age URL
171
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
70
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-926e11c76e yara-3.6.0-1.fc25
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7dbbbafea6
runc-1.0.0-7.git6394544.fc25.2
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ec3c82e64d
libstaroffice-0.0.3-3.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2b328c7ce9
capnproto-0.5.3.1-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-63789c8c29
tomcat-8.0.44-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bcfa3569d6
libmwaw-0.3.11-3.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bd92718a5a
pungi-4.1.16-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d530a04779 pcre2-10.23-8.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c4b191036b vim-8.0.642-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a83e0e61d6 fwupd-0.9.4-1.fc25
The following builds have been pushed to Fedora 25 updates-testing
OpenIPMI-2.0.23-1.fc25
aime-8.20170608-1.fc25
arc-theme-20170302-4.fc25
byobu-5.119-1.fc25
fwupd-0.9.4-1.fc25
libmwaw-0.3.11-3.fc25
luksmeta-6-1.fc25
magic-8.1.170-1.fc25
modularity-testing-framework-0.5.1-1.fc25
nethack-3.6.0-37.fc25
pcre2-10.23-8.fc25
perl-CHI-0.60-12.fc25
phoronix-test-suite-7.2.0-1.fc25
purple-discord-0-7.20170608git5263aff.fc25
purple-facebook-0.9.4-3.c9b74a765767.fc25
pysnmp-4.3.8-1.fc25
python-avocado-51.0-1.fc25
python-yarl-0.10.3-1.fc25
spice-gtk-0.33-5.fc25
switchboard-plug-pantheon-shell-0.2.6-1.fc25
trader-7.10-2.fc25
vim-8.0.642-1.fc25
vulkan-1.0.51.0-1.fc25
Details about builds:
================================================================================
OpenIPMI-2.0.23-1.fc25 (FEDORA-2017-15ee683279)
IPMI (Intelligent Platform Management Interface) library and tools
--------------------------------------------------------------------------------
Update Information:
New upstream release - 2.0.23
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1461606 - OpenIPMI-2.0.23 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1461606
--------------------------------------------------------------------------------
================================================================================
aime-8.20170608-1.fc25 (FEDORA-2017-8a7d24b73c)
An application embeddable programming language interpreter
--------------------------------------------------------------------------------
Update Information:
- Updated to new 8.20170608 upstream version, fixes rhbz #1448426
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448426 - aime-8.20170608 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1448426
--------------------------------------------------------------------------------
================================================================================
arc-theme-20170302-4.fc25 (FEDORA-2017-b42cf0bdf1)
Flat theme with transparent elements
--------------------------------------------------------------------------------
Update Information:
Fix OSD
--------------------------------------------------------------------------------
================================================================================
byobu-5.119-1.fc25 (FEDORA-2017-90fe143222)
Light-weight, configurable window manager built upon GNU screen
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream release 5.119, fixes rhbz #1458069
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1458069 - byobu-5.119 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1458069
--------------------------------------------------------------------------------
================================================================================
fwupd-0.9.4-1.fc25 (FEDORA-2017-a83e0e61d6)
Firmware update daemon
--------------------------------------------------------------------------------
Update Information:
New upstream release - Add installed tests that use the daemon - Add the ability
to restrict firmware to specific vendors - Compile with newer versions of meson
- Fix a common crash when refreshing metadata - Generate a images for status
messages during system firmware update - Show progress download when refreshing
metadata - Use the correct type signature in the D-Bus introspection file ----
New upstream release - Add a 'downgrade' command to fwupdmgr - Add a 'get-
releases' command to fwupdmgr - Add support for Microsoft HardwareIDs - Allow
downloading metadata from more than just the LVFS - Allow multiple checksums on
devices and releases - Correctly open Unifying devices with original factory
firmware - Do not expect a Unifying reply when issuing a REBOOT command - Do not
re-download firmware that exists in the cache - Fix a problem when testing for a
Dell system - Fix flashing new firmware to 8bitdo controllers
--------------------------------------------------------------------------------
================================================================================
libmwaw-0.3.11-3.fc25 (FEDORA-2017-bcfa3569d6)
A library for import of many old Mac document formats
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-9433
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1461762 - CVE-2017-9433 libmwaw: Out-of-bounds write in the
MsWrd1Parser::readFootnoteCorrespondence function
https://bugzilla.redhat.com/show_bug.cgi?id=1461762
--------------------------------------------------------------------------------
================================================================================
luksmeta-6-1.fc25 (FEDORA-2017-fced73b38a)
Utility for storing small metadata in the LUKSv1 header
--------------------------------------------------------------------------------
Update Information:
New upstream release. ---- New upstream release. Enhanced documentation.
--------------------------------------------------------------------------------
================================================================================
magic-8.1.170-1.fc25 (FEDORA-2017-9ddd13907b)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.1.170 is released.
--------------------------------------------------------------------------------
================================================================================
modularity-testing-framework-0.5.1-1.fc25 (FEDORA-2017-eeba4e689c)
Framework for writing tests for modules and containers
--------------------------------------------------------------------------------
Update Information:
New upstream release (#1462096)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1462096 - Update modularity-testing-framework to the latest version
https://bugzilla.redhat.com/show_bug.cgi?id=1462096
--------------------------------------------------------------------------------
================================================================================
nethack-3.6.0-37.fc25 (FEDORA-2017-ac736bd74d)
A rogue-like single player dungeon exploration game
--------------------------------------------------------------------------------
Update Information:
Set the executable bits on the 'recover' program.
--------------------------------------------------------------------------------
================================================================================
pcre2-10.23-8.fc25 (FEDORA-2017-d530a04779)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes DFA matching a lookbehind assertion that has a zero-length
branch and returned offsets from regexec() when REG_STARTEND is used with
starting offset greater than zero.
--------------------------------------------------------------------------------
================================================================================
perl-CHI-0.60-12.fc25 (FEDORA-2017-9e99eeb2e8)
Unified cache handling interface
--------------------------------------------------------------------------------
Update Information:
Supposed to fix regressions caused by perl-Cache-FastMmap-1.45
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1435166 - perl-CHI-0.60-10.fc27 FTBFS: Failed test 'raw_values = 1 by
default'
https://bugzilla.redhat.com/show_bug.cgi?id=1435166
--------------------------------------------------------------------------------
================================================================================
phoronix-test-suite-7.2.0-1.fc25 (FEDORA-2017-4c6be3ccf5)
An Automated, Open-Source Testing Framework
--------------------------------------------------------------------------------
Update Information:
update to 7.2.0 ---- Update to 7.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1436120 - 7-Zip Compression test doesn't run and result not printed in
web browser.
https://bugzilla.redhat.com/show_bug.cgi?id=1436120
--------------------------------------------------------------------------------
================================================================================
purple-discord-0-7.20170608git5263aff.fc25 (FEDORA-2017-f22f33b4c4)
Discord plugin for libpurple
--------------------------------------------------------------------------------
Update Information:
Updated to latest snapshot.
--------------------------------------------------------------------------------
================================================================================
purple-facebook-0.9.4-3.c9b74a765767.fc25 (FEDORA-2017-faeaaa5dbf)
Facebook protocol plugin for purple2
--------------------------------------------------------------------------------
Update Information:
* Filter provides from plugins on el6, too * Properly run %%filter_setup ----
* New upstream release * Filter provides from plugins
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1460505 - purple-facebook-0.9.4-c9b74a765767 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1460505
[ 2 ] Bug #1448596 - undefined symbol: purple_notify_user_info_add_pair_plaintext
https://bugzilla.redhat.com/show_bug.cgi?id=1448596
--------------------------------------------------------------------------------
================================================================================
pysnmp-4.3.8-1.fc25 (FEDORA-2017-e0f1902b0d)
An SNMP engine written in Python
--------------------------------------------------------------------------------
Update Information:
Updated to new upstream version 4.3.8
--------------------------------------------------------------------------------
================================================================================
python-avocado-51.0-1.fc25 (FEDORA-2017-f4fc2cecfc)
Framework with tools and libraries for Automated Testing
--------------------------------------------------------------------------------
Update Information:
Sync python-avocado with latest upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1460837 - python-avocado-51.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1460837
--------------------------------------------------------------------------------
================================================================================
python-yarl-0.10.3-1.fc25 (FEDORA-2017-ac04ddbbfd)
Python module to handle URLs
--------------------------------------------------------------------------------
Update Information:
Update to 0.10.3 (rhbz#1461225)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1461225 - python-yarl-v0.10.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1461225
--------------------------------------------------------------------------------
================================================================================
spice-gtk-0.33-5.fc25 (FEDORA-2017-3c5f25e807)
A GTK+ widget for SPICE clients
--------------------------------------------------------------------------------
Update Information:
fix "Couldn't find current GL or GLX context"
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1399838 - [abrt] spice-gtk-tools: usbredirhost_write_guest_data():
spicy-stats killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1399838
[ 2 ] Bug #1461802 - Crash "Couldn't find current GL or GLX context"
https://bugzilla.redhat.com/show_bug.cgi?id=1461802
--------------------------------------------------------------------------------
================================================================================
switchboard-plug-pantheon-shell-0.2.6-1.fc25 (FEDORA-2017-1c32ffff74)
Switchboard Pantheon Shell plug
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.6.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1461613 - switchboard-plug-pantheon-shell-0.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1461613
--------------------------------------------------------------------------------
================================================================================
trader-7.10-2.fc25 (FEDORA-2017-697e3c9cea)
Star Traders, a simple game of interstellar trading
--------------------------------------------------------------------------------
Update Information:
Add the Star Traders package, a simple game of interstellar trading
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #812758 - Review Request: trader - Star Traders, a simple game of interstellar
trading
https://bugzilla.redhat.com/show_bug.cgi?id=812758
--------------------------------------------------------------------------------
================================================================================
vim-8.0.642-1.fc25 (FEDORA-2017-c4b191036b)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit.
--------------------------------------------------------------------------------
================================================================================
vulkan-1.0.51.0-1.fc25 (FEDORA-2017-e66b443d59)
Vulkan loader and validation layers
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.51.0 release
--------------------------------------------------------------------------------