The following Fedora 25 Security updates need testing:
Age URL
92
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-06f4b88ceb
php-onelogin-php-saml-2.10.5-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d219f0e5fc sscg-2.0.4-1.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-42ebcac2b5 erlang-19.3-2.fc25
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0196511d58
moodle-3.1.5-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-71e69a691b pcs-0.9.156-2.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5e945de883
tcpreplay-4.2.1-1.fc25
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99ad80f109
python-sleekxmpp-1.3.2-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ff6ad5b7df xen-4.7.2-3.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-72f8c0f6a7
linux-firmware-20170313-72.git695f2d6d.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d86df312cf audit-2.7.4-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-56a13427a3 gdbm-1.13-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ea86a8123b
pungi-4.1.14-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-87e7316310
kernel-4.10.6-200.fc25
The following builds have been pushed to Fedora 25 updates-testing
ansible-2.2.2.0-1.fc25
fatresize-1.0.3-4.git20161118.fc25
findbugs-contrib-6.8.4-1.fc25
gnome-chemistry-utils-0.14.17-2.fc25
gnumeric-1.12.34-1.fc25
goffice-0.10.34-1.fc25
golang-github-ojii-gettext.go-0-0.1.gitb6dae1d.fc25
golang-gopkg-retry-v1-1-0.2.gitc09f6b8.fc25
java-1.8.0-openjdk-1.8.0.121-10.b14.fc25
legion-17.02.0-5.fc25
liblognorm-2.0.3-1.fc25
lilypond-2.19.58-1.fc25
lilypond-doc-2.19.58-1.fc25
linux-firmware-20170313-72.git695f2d6d.fc25
netpbm-10.78.00-1.fc25
oci-systemd-hook-0.1.7-1.git1788cf2.fc25
openvpn-2.4.1-2.fc25
php-horde-Horde-Core-2.28.2-1.fc25
python-openidc-client-0-3.20170327git5456800.fc25
python-pystray-0.14.2-1.fc25
python-xlib-0.19-2.fc25
skopeo-0.1.19-1.dev.git0224d8c.fc25
sos-3.4-1.fc25
thefuck-3.15-1.fc25
winetricks-20170326-1.fc25
xen-4.7.2-3.fc25
Details about builds:
================================================================================
ansible-2.2.2.0-1.fc25 (FEDORA-2017-7a75f346fb)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to upstream 2.2.2.0 release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1436461 - ansible-2.2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1436461
--------------------------------------------------------------------------------
================================================================================
fatresize-1.0.3-4.git20161118.fc25 (FEDORA-2017-82be14e2d8)
FAT16/FAT32 resizer
--------------------------------------------------------------------------------
Update Information:
New package. Description: The FAT16/FAT32 non-destructive resizer.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1395955 - Review Request: fatresize - FAT16/FAT32 resizer
https://bugzilla.redhat.com/show_bug.cgi?id=1395955
--------------------------------------------------------------------------------
================================================================================
findbugs-contrib-6.8.4-1.fc25 (FEDORA-2017-96811c8022)
Extra findbugs detectors
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 6.8.4. New detectors: *
`SPP_NULL_CHECK_ON_MAP_SUBSET_ACCESSOR` * Method checks whether the
`keySet()`, `entrySet()` or `values()` collection of a `Map` is `null`
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431470 - findbugs-contrib-6.8.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1431470
--------------------------------------------------------------------------------
================================================================================
gnome-chemistry-utils-0.14.17-2.fc25 (FEDORA-2017-16b072e5e9)
A set of chemical utilities
--------------------------------------------------------------------------------
Update Information:
An update to the latest gnumeric and goffice releases: *
http://gnumeric.org/announcements/1.12/gnumeric-1.12.34.html
--------------------------------------------------------------------------------
================================================================================
gnumeric-1.12.34-1.fc25 (FEDORA-2017-16b072e5e9)
Spreadsheet program for GNOME
--------------------------------------------------------------------------------
Update Information:
An update to the latest gnumeric and goffice releases: *
http://gnumeric.org/announcements/1.12/gnumeric-1.12.34.html
--------------------------------------------------------------------------------
================================================================================
goffice-0.10.34-1.fc25 (FEDORA-2017-16b072e5e9)
G Office support libraries
--------------------------------------------------------------------------------
Update Information:
An update to the latest gnumeric and goffice releases: *
http://gnumeric.org/announcements/1.12/gnumeric-1.12.34.html
--------------------------------------------------------------------------------
================================================================================
golang-github-ojii-gettext.go-0-0.1.gitb6dae1d.fc25 (FEDORA-2017-856f759df1)
gettext in golang
--------------------------------------------------------------------------------
Update Information:
First package for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1435327 - Review Request: golang-github-ojii-gettext.go - gettext
functionality in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1435327
--------------------------------------------------------------------------------
================================================================================
golang-gopkg-retry-v1-1-0.2.gitc09f6b8.fc25 (FEDORA-2017-ebd5346c81)
Provides a framework for retrying actions
--------------------------------------------------------------------------------
Update Information:
First version of the package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1435572 - Review Request: golang-gopkg-retry-v1 - Provides a framework for
retrying actions
https://bugzilla.redhat.com/show_bug.cgi?id=1435572
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-1.8.0.121-10.b14.fc25 (FEDORA-2017-55b52ac833)
OpenJDK Runtime Environment
--------------------------------------------------------------------------------
Update Information:
Built against fixed GCC. No user-related change should be seen.
--------------------------------------------------------------------------------
================================================================================
legion-17.02.0-5.fc25 (FEDORA-2017-62b308ae93)
A data-centric parallel programming system
--------------------------------------------------------------------------------
Update Information:
Rebuilt for gasnet-1.28.2
--------------------------------------------------------------------------------
================================================================================
liblognorm-2.0.3-1.fc25 (FEDORA-2017-26fa979934)
Fast samples-based log normalization library
--------------------------------------------------------------------------------
Update Information:
rebase to 2.0.3
--------------------------------------------------------------------------------
================================================================================
lilypond-2.19.58-1.fc25 (FEDORA-2017-83672e3d66)
A typesetting system for music notation
--------------------------------------------------------------------------------
Update Information:
2.19.58
--------------------------------------------------------------------------------
================================================================================
lilypond-doc-2.19.58-1.fc25 (FEDORA-2017-83672e3d66)
HTML documentation for LilyPond
--------------------------------------------------------------------------------
Update Information:
2.19.58
--------------------------------------------------------------------------------
================================================================================
linux-firmware-20170313-72.git695f2d6d.fc25 (FEDORA-2017-72f8c0f6a7)
Firmware files used by the Linux kernel
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream git snapshot.
--------------------------------------------------------------------------------
================================================================================
netpbm-10.78.00-1.fc25 (FEDORA-2017-a20a88d8e4)
A library for handling different graphics file formats
--------------------------------------------------------------------------------
Update Information:
New version of netpbm is available (10.78.00)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1436893 - netpbm-10.78.00 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1436893
--------------------------------------------------------------------------------
================================================================================
oci-systemd-hook-0.1.7-1.git1788cf2.fc25 (FEDORA-2017-1d4e5ee7d6)
OCI systemd hook for docker
--------------------------------------------------------------------------------
Update Information:
oci-systemd-hook crashes if the docker config.json is too large. This bug was
discovered in RHEL
--------------------------------------------------------------------------------
================================================================================
openvpn-2.4.1-2.fc25 (FEDORA-2017-0ffb8246fa)
A full-featured SSL VPN solution
--------------------------------------------------------------------------------
Update Information:
Mainly a package maintenance update but does also fix a particular systemd unit
file issue with the old and deprecated openvpn@.service unit file.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1435036 - openvpn-2.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1435036
[ 2 ] Bug #1435831 - openvpn@.service uses --daemon and --writepid
https://bugzilla.redhat.com/show_bug.cgi?id=1435831
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.28.2-1.fc25 (FEDORA-2017-fe7fd7ed1c)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.28.2** * [jan] Fix unpacking encrypted session data ("User not
authorized for ..." log messages). * [jan] Throw an exception when accessing a
non-existing API through the registry.
--------------------------------------------------------------------------------
================================================================================
python-openidc-client-0-3.20170327git5456800.fc25 (FEDORA-2017-f894201567)
Python OpenID Connect client with token caching and management
--------------------------------------------------------------------------------
Update Information:
python-openidc-client first release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434997 - Review Request: python-openidc-client - A python OpenID Connect
client with token caching and management
https://bugzilla.redhat.com/show_bug.cgi?id=1434997
--------------------------------------------------------------------------------
================================================================================
python-pystray-0.14.2-1.fc25 (FEDORA-2017-d9032a846a)
Provides system tray integration
--------------------------------------------------------------------------------
Update Information:
### Python-pystray * Initial rpm-release ### Python-xlib * Update to 0.19
release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1436347 - Review Request: python-pystray - Provides system tray integration
https://bugzilla.redhat.com/show_bug.cgi?id=1436347
--------------------------------------------------------------------------------
================================================================================
python-xlib-0.19-2.fc25 (FEDORA-2017-d9032a846a)
X client library for Python
--------------------------------------------------------------------------------
Update Information:
### Python-pystray * Initial rpm-release ### Python-xlib * Update to 0.19
release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1436347 - Review Request: python-pystray - Provides system tray integration
https://bugzilla.redhat.com/show_bug.cgi?id=1436347
--------------------------------------------------------------------------------
================================================================================
skopeo-0.1.19-1.dev.git0224d8c.fc25 (FEDORA-2017-e2da8ec82d)
Inspect Docker images and repositories on registries
--------------------------------------------------------------------------------
Update Information:
bump to v0.1.19-dev
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1436801 - Please upgrade skopeo to v0.19.0 in f25 just as it in f26
https://bugzilla.redhat.com/show_bug.cgi?id=1436801
--------------------------------------------------------------------------------
================================================================================
sos-3.4-1.fc25 (FEDORA-2017-03d1eae3be)
A set of tools to gather troubleshooting information from a system
--------------------------------------------------------------------------------
Update Information:
Rebased on upstream 3.4. For highlights, important fixes, or notable
enhancements please see upstream announcement:
https://github.com/sosreport/sos/releases/tag/3.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1427445 - sosreport 3.3 says: sosreport (version 3.2)
https://bugzilla.redhat.com/show_bug.cgi?id=1427445
[ 2 ] Bug #1436969 - sos 3.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1436969
--------------------------------------------------------------------------------
================================================================================
thefuck-3.15-1.fc25 (FEDORA-2017-5d627544b5)
App that corrects your previous console command
--------------------------------------------------------------------------------
Update Information:
Updated to thefuck 3.15
--------------------------------------------------------------------------------
================================================================================
winetricks-20170326-1.fc25 (FEDORA-2017-84f3a2fe82)
Work around common problems in Wine
--------------------------------------------------------------------------------
Update Information:
version 20170326 - - convert to sha256 - misc minor fixes, see full changelog:
https://github.com/Winetricks/winetricks/compare/20170207...20170326
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1432052 - winetricks-20170327 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1432052
--------------------------------------------------------------------------------
================================================================================
xen-4.7.2-3.fc25 (FEDORA-2017-ff6ad5b7df)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
xenstore denial of service via repeated update [XSA-206] (#1436690)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1433879 - xsa206 xen: xenstore denial of service via repeated update
(XSA-206)
https://bugzilla.redhat.com/show_bug.cgi?id=1433879
--------------------------------------------------------------------------------