The following Fedora 25 Security updates need testing:
Age URL
54
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c3739273e5
mingw-gtk-vnc-0.7.0-1.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c0564718ea
mingw-gstreamer1-1.10.3-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a56d78acb8
mingw-gstreamer1-plugins-base-1.10.3-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1fc4026d15
mingw-gstreamer1-plugins-good-1.10.3-1.fc25
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-216f4b9f9d
mingw-gstreamer1-plugins-bad-free-1.10.3-1.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7803508155
python-cjson-1.1.0-9.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6fe982684d mupdf-1.10a-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3fb57530fb
kopete-16.12.2-2.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-101722eb25
diffoscope-77-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-dc6023e849
mujs-0-8.20170124git4006739.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c1cd67adc1
plasma-desktop-5.8.5-4.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0beb752b6e
webkitgtk4-2.14.5-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2b0459f416
python-PyMySQL-0.7.10-10.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8fffbae8af xrdp-0.9.1-3.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-84ed105d3e xen-4.7.1-8.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0054c7b1f0
kernel-4.9.10-200.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f3aac83a8f
suricata-3.2.1-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-376ae2b92c
tomcat-8.0.41-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8b0737b093 cacti-1.0.3-2.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
40
https://bodhi.fedoraproject.org/updates/FEDORA-2017-70547b9af8
python-productmd-1.4-1.fc25
31
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d117622795
pungi-4.1.12-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-adc3383af9
python-pyasn1-0.2.1-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a426fde91b grilo-0.3.3-1.fc25
grilo-plugins-0.3.4-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0054c7b1f0
kernel-4.9.10-200.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c2e66ffe47 pcre-8.40-2.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0beb752b6e
webkitgtk4-2.14.5-1.fc25
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9f6383547e
libglvnd-0.2.999-10.gitdc16f8c.fc25 libva-1.7.3-3.fc25 mesa-13.0.4-1.fc25
wlc-0.0.7-3.git12ee978.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0f2acf86d2 qca-2.1.3-3.fc25
The following builds have been pushed to Fedora 25 updates-testing
cacti-1.0.3-2.fc25
ccache-3.3.4-1.fc25
dnfdragora-1.0.0-1.fc25
fbzx-3.6.0-1.fc25
frescobaldi-2.20.0-1.fc25
fusioninventory-agent-2.3.19-1.fc25
gammaray-2.7.0-2.fc25
gdouros-alexander-fonts-7.17-2.fc25
lsyncd-2.2.2-1.fc25
open-vm-tools-10.1.0-1.fc25
openfst-1.6.1-1.fc25
opengrm-ngram-1.3.2-3.fc25
pcp-3.11.8-1.fc25
php-sebastian-object-enumerator-2.0.1-1.fc25
poedit-1.8.12-1.fc25
python-sphinx-1.5.2-2.fc25
rawtherapee-5.0-3.r1.fc25
recoll-1.22.4-1.fc25
sphinxtrain-1.0.8-33.fc25
Details about builds:
================================================================================
cacti-1.0.3-2.fc25 (FEDORA-2017-8b0737b093)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.0.3 Release notes:
http://www.cacti.net/release_notes_1_0_0.php
http://www.cacti.net/release_notes_1_0_1.php
http://www.cacti.net/release_notes_1_0_2.php
http://www.cacti.net/release_notes_1_0_3.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1417604 - CVE-2014-4000 cacti: Multiple issues fixed in 1.0.0 version
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1417604
[ 2 ] Bug #1417494 - cacti-1.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1417494
[ 3 ] Bug #1422854 - cacti-1.0.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1422854
--------------------------------------------------------------------------------
================================================================================
ccache-3.3.4-1.fc25 (FEDORA-2017-d125fefd2c)
C/C++ compiler cache
--------------------------------------------------------------------------------
Update Information:
Update to 3.3.4,
https://ccache.samba.org/releasenotes.html#_ccache_3_3_4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1424658 - ccache-3.3.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1424658
--------------------------------------------------------------------------------
================================================================================
dnfdragora-1.0.0-1.fc25 (FEDORA-2017-c48161bbd6)
DNF package-manager based on libYui abstraction
--------------------------------------------------------------------------------
Update Information:
* New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1424827 - dnfdragora-1.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1424827
--------------------------------------------------------------------------------
================================================================================
fbzx-3.6.0-1.fc25 (FEDORA-2017-db92548da2)
A ZX Spectrum emulator for FrameBuffer
--------------------------------------------------------------------------------
Update Information:
* Fixed timing bug * Even better adjusted the memory contention * Slightly
better adjusted the memory contention * Fixed the Fast Load * Now the tape is
paused automatically when it reachs the end * Better memory contention * Fixed
pause block in TZX files
--------------------------------------------------------------------------------
================================================================================
frescobaldi-2.20.0-1.fc25 (FEDORA-2017-5e56206f61)
Edit LilyPond sheet music with ease!
--------------------------------------------------------------------------------
Update Information:
2.20.0
--------------------------------------------------------------------------------
================================================================================
fusioninventory-agent-2.3.19-1.fc25 (FEDORA-2017-ca591f4791)
FusionInventory agent
--------------------------------------------------------------------------------
Update Information:
Last upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1424664 - fusioninventory-agent-2.3.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1424664
--------------------------------------------------------------------------------
================================================================================
gammaray-2.7.0-2.fc25 (FEDORA-2017-d0ad7824a3)
A tool for examining internals of Qt applications
--------------------------------------------------------------------------------
Update Information:
Update GammaRay 2.7.0
--------------------------------------------------------------------------------
================================================================================
gdouros-alexander-fonts-7.17-2.fc25 (FEDORA-2017-f5285644b7)
A Greek typeface inspired by Alexander Wilson
--------------------------------------------------------------------------------
Update Information:
Update documentation ---- Update to 7.17
--------------------------------------------------------------------------------
================================================================================
lsyncd-2.2.2-1.fc25 (FEDORA-2017-4085621c29)
File change monitoring and synchronization daemon
--------------------------------------------------------------------------------
Update Information:
updated to latest upstream (resolves #1415295)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1415295 - lsyncd.service: Main process exited, code=exited, status=255/n/a
https://bugzilla.redhat.com/show_bug.cgi?id=1415295
--------------------------------------------------------------------------------
================================================================================
open-vm-tools-10.1.0-1.fc25 (FEDORA-2017-ef29daf7d2)
Open Virtual Machine Tools for virtual machines hosted on VMware
--------------------------------------------------------------------------------
Update Information:
Package new upstream version open-vm-tools-10.1.0-4449150 (RHBZ#1408959).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408959 - epel-6 package request: open-vm-tools 10.1.0
https://bugzilla.redhat.com/show_bug.cgi?id=1408959
--------------------------------------------------------------------------------
================================================================================
openfst-1.6.1-1.fc25 (FEDORA-2017-8a81123163)
Weighted finite-state transducer library
--------------------------------------------------------------------------------
Update Information:
Changes in openfst 1.6.1: - Fixes missing includes of fst/log.h - Adds float
format support to FST drawing The opengrm-ngram and sphinxtrain builds are due
to the new version of openfst. There are no user-visible changes in those two
packages.
--------------------------------------------------------------------------------
================================================================================
opengrm-ngram-1.3.2-3.fc25 (FEDORA-2017-8a81123163)
Library for making and modifying n-gram language models
--------------------------------------------------------------------------------
Update Information:
Changes in openfst 1.6.1: - Fixes missing includes of fst/log.h - Adds float
format support to FST drawing The opengrm-ngram and sphinxtrain builds are due
to the new version of openfst. There are no user-visible changes in those two
packages.
--------------------------------------------------------------------------------
================================================================================
pcp-3.11.8-1.fc25 (FEDORA-2017-201a3e0969)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
Support newer kernels /proc/vmstat file contents (BZ 1396148), Added pmda's for
docker, lio, bind2, nutcracker, redis
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1214090 - SELinux AVCs with pcp-*
https://bugzilla.redhat.com/show_bug.cgi?id=1214090
[ 2 ] Bug #1381127 - PCP SELinux issues
https://bugzilla.redhat.com/show_bug.cgi?id=1381127
[ 3 ] Bug #1337968 - PCP SELinux issues
https://bugzilla.redhat.com/show_bug.cgi?id=1337968
[ 4 ] Bug #1398147 - SELinux is preventing pmcd from 'getattr' accesses on the
file /var/lib/pcp/pmns/root.
https://bugzilla.redhat.com/show_bug.cgi?id=1398147
[ 5 ] Bug #1396148 - RFE additional PCP metric for /proc/vmstat values
https://bugzilla.redhat.com/show_bug.cgi?id=1396148
--------------------------------------------------------------------------------
================================================================================
php-sebastian-object-enumerator-2.0.1-1.fc25 (FEDORA-2017-2c88353061)
Traverses array and object to enumerate all referenced objects
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.1** - 2017-02-18 * Fixed
[#2](https://github.com/sebastianbergmann/phpunit/pull/2): Exceptions in
`ReflectionProperty::getValue()` are not handled
--------------------------------------------------------------------------------
================================================================================
poedit-1.8.12-1.fc25 (FEDORA-2017-58e0d903b7)
GUI editor for GNU gettext .po files
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
================================================================================
python-sphinx-1.5.2-2.fc25 (FEDORA-2017-8a1ef27a84)
Python documentation generator
--------------------------------------------------------------------------------
Update Information:
* Update to 1.5.2 because the latest docutils in F25 is incompatible with
Sphinx-1.4.x. * Switch the default version of scripts to the python2 version as
there's no sense in F25 being the odd man out on this. * Fix rpmlint warnings
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1415480 - python-sphinx-1.5.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1415480
[ 2 ] Bug #1378071 - python-sphinx-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1378071
--------------------------------------------------------------------------------
================================================================================
rawtherapee-5.0-3.r1.fc25 (FEDORA-2017-0aa59b14af)
Raw image processing software
--------------------------------------------------------------------------------
Update Information:
Bugfix release.
--------------------------------------------------------------------------------
================================================================================
recoll-1.22.4-1.fc25 (FEDORA-2017-7ea839052e)
Desktop full text search tool with Qt GUI
--------------------------------------------------------------------------------
Update Information:
Advanced search did not work.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419360 - Recoll advanced search does not work
https://bugzilla.redhat.com/show_bug.cgi?id=1419360
--------------------------------------------------------------------------------
================================================================================
sphinxtrain-1.0.8-33.fc25 (FEDORA-2017-8a81123163)
Acoustic model trainer for CMU's Sphinx tools
--------------------------------------------------------------------------------
Update Information:
Changes in openfst 1.6.1: - Fixes missing includes of fst/log.h - Adds float
format support to FST drawing The opengrm-ngram and sphinxtrain builds are due
to the new version of openfst. There are no user-visible changes in those two
packages.
--------------------------------------------------------------------------------