The following Fedora 25 Security updates need testing:
Age URL
209
https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25
108
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e
python-XStatic-jquery-ui-1.12.0.1-4.fc25
47
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f
nodejs-brace-expansion-1.1.7-1.fc25
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b9e4c24094
subversion-1.9.6-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90ad72e684 irssi-1.0.4-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c844713925
qt5-qtwebkit-5.212.0-0.5.alpha2.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-33c8085c5d
groovy18-1.8.9-28.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f941184db1 qemu-2.7.1-7.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9fa2cefa7a
mingw-poppler-0.45.0-3.fc25
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90cf7a82de
minicom-2.7.1-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-86cfcbbae8
libstaroffice-0.0.4-1.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-534f300508
perl-XML-LibXML-2.0129-2.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-24c64c531a
freeradius-3.0.15-1.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bcf1bc0775
mingw-librsvg2-2.40.18-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-82b5035f76
chicken-4.12.0-3.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-20cdb2063a
runc-1.0.1-1.gitc5ec254.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b0918e3905
moodle-3.1.7-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99c0118c0c
memcached-1.4.39-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fe04b06b64
python-tablib-0.11.5-1.fc25
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-735e2ae663
java-1.8.0-openjdk-1.8.0.141-1.b16.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-05254795cf
mingw-c-ares-1.13.0-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cd5d8cac23
seamonkey-2.48-1.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-39b5facda0
kernel-4.11.12-200.fc25
The following Fedora 25 Critical Path updates have yet to be approved:
Age URL
51
https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ebeb4bb332
mariadb-10.1.25-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e587cfd70e
supermin-5.1.18-1.fc25
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f941184db1 qemu-2.7.1-7.fc25
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-77b3ddeaaa
net-snmp-5.7.3-14.fc25
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2312ac9d9
pungi-4.1.17-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f55b21a811
pango-1.40.7-1.fc25
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f21d307d97 nspr-4.15.0-1.fc25
nss-3.31.0-1.1.fc25 nss-softokn-3.31.0-1.0.fc25 nss-util-3.31.0-1.0.fc25
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b67562744
ca-certificates-2017.2.16-1.0.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-39b5facda0
kernel-4.11.12-200.fc25
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d398be67a8
upower-0.99.5-1.fc25
The following builds have been pushed to Fedora 25 updates-testing
GeoIP-GeoLite-data-2017.07-1.fc25
NetworkManager-l2tp-1.2.8-1.fc25
cacti-1.1.14-1.fc25
chromium-59.0.3071.115-2.fc25
cmake-3.9.0-2.fc25
goaccess-1.2-1.fc25
grip-3.4.3-2.fc25
kernel-4.11.12-200.fc25
libpst-0.6.71-1.fc25
mingw-c-ares-1.13.0-1.fc25
nuvolaruntime-4.5.0-2.fc25
pantheon-terminal-0.4.3-1.fc25
perl-Cookie-Baker-0.08-1.fc25
perl-HTTP-Entity-Parser-0.20-1.fc25
python-django-ckeditor-5.3.0-1.fc25
python36-3.6.2-1.fc25
seamonkey-2.48-1.fc25
upower-0.99.5-1.fc25
Details about builds:
================================================================================
GeoIP-GeoLite-data-2017.07-1.fc25 (FEDORA-2017-44ea0be997)
Free GeoLite IP geolocation country database
--------------------------------------------------------------------------------
Update Information:
Current geolocation databases from upstream.
--------------------------------------------------------------------------------
================================================================================
NetworkManager-l2tp-1.2.8-1.fc25 (FEDORA-2017-37115828e3)
NetworkManager VPN plugin for L2TP and L2TP/IPsec
--------------------------------------------------------------------------------
Update Information:
Updated to 1.2.8 release
--------------------------------------------------------------------------------
================================================================================
cacti-1.1.14-1.fc25 (FEDORA-2017-b9e3ae45be)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.14 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.14
--------------------------------------------------------------------------------
================================================================================
chromium-59.0.3071.115-2.fc25 (FEDORA-2017-fd529b8ca7)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Update to 59.0.3071.115
--------------------------------------------------------------------------------
================================================================================
cmake-3.9.0-2.fc25 (FEDORA-2017-7e6a885d8b)
Cross-platform make system
--------------------------------------------------------------------------------
Update Information:
* Update patch for Fedora RELEASE-builds * Add patch to fix warnings from Sphinx
--------------------------------------------------------------------------------
================================================================================
goaccess-1.2-1.fc25 (FEDORA-2017-0d53da63e9)
Real-time web log analyzer and interactive viewer
--------------------------------------------------------------------------------
Update Information:
Update to 1.2
--------------------------------------------------------------------------------
================================================================================
grip-3.4.3-2.fc25 (FEDORA-2017-559694d472)
Front-end for CD rippers and Ogg Vorbis encoders
--------------------------------------------------------------------------------
Update Information:
Added patch to fix broken non-MP3-tagging (#1474010)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1474010 - Grip does not write ID3-tag
https://bugzilla.redhat.com/show_bug.cgi?id=1474010
--------------------------------------------------------------------------------
================================================================================
kernel-4.11.12-200.fc25 (FEDORA-2017-39b5facda0)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.11.12 update contains a number of important fixes across the tree.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473198 - CVE-2017-7541 kernel: Possible heap buffer overflow in
brcmf_cfg80211_mgmt_tx()
https://bugzilla.redhat.com/show_bug.cgi?id=1473198
[ 2 ] Bug #1473209 - CVE-2017-11473 kernel: Buffer overflow in mp_override_legacy_irq()
https://bugzilla.redhat.com/show_bug.cgi?id=1473209
[ 3 ] Bug #1473649 - CVE-2017-7542 kernel: Integer overflow in ip6_find_1stfragopt()
causes infinite loop
https://bugzilla.redhat.com/show_bug.cgi?id=1473649
--------------------------------------------------------------------------------
================================================================================
libpst-0.6.71-1.fc25 (FEDORA-2017-980c4f9565)
Utilities to convert Outlook .pst files to other formats
--------------------------------------------------------------------------------
Update Information:
fedora python naming scheme changes, OST 2013 format, Content-Disposition
filename key fix
--------------------------------------------------------------------------------
================================================================================
mingw-c-ares-1.13.0-1.fc25 (FEDORA-2017-05254795cf)
Library that performs asynchronous DNS operations
--------------------------------------------------------------------------------
Update Information:
New version, security fix for CVE-2017-1000381.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463135 - CVE-2017-1000381 mingw-c-ares: c-ares: NAPTR parser out of bounds
access [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1463135
--------------------------------------------------------------------------------
================================================================================
nuvolaruntime-4.5.0-2.fc25 (FEDORA-2017-cdbda7c999)
Tight integration of web apps with your desktop
--------------------------------------------------------------------------------
Update Information:
include ppc64le again ---- - update to 4.5.0 - Add 0001-Revert-Check-whether-
VA-API-driver-is-installed.patch - Add 0002-Revert-Check-whether-VDPAU-driver-
is-installed.patch - dropped %%{name}-wscript.patch - add if condition due
ppc64le build problem
--------------------------------------------------------------------------------
================================================================================
pantheon-terminal-0.4.3-1.fc25 (FEDORA-2017-141007b161)
The terminal of the 21st century
--------------------------------------------------------------------------------
Update Information:
Update to version 0.4.3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473991 - pantheon-terminal-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473991
--------------------------------------------------------------------------------
================================================================================
perl-Cookie-Baker-0.08-1.fc25 (FEDORA-2017-42312d7fe4)
Cookie string generator / parser
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
================================================================================
perl-HTTP-Entity-Parser-0.20-1.fc25 (FEDORA-2017-a12b153946)
PSGI compliant HTTP Entity Parser
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
================================================================================
python-django-ckeditor-5.3.0-1.fc25 (FEDORA-2017-39ea3e290c)
Django admin CKEditor integration
--------------------------------------------------------------------------------
Update Information:
Update to 5.3.0
--------------------------------------------------------------------------------
================================================================================
python36-3.6.2-1.fc25 (FEDORA-2017-47aad5897d)
Version 3.6 of the Python programming language aka Python 3000
--------------------------------------------------------------------------------
Update Information:
Update to 3.6.2
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.48-1.fc25 (FEDORA-2017-cd5d8cac23)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Update to 2.48 Fixes various security issues, see
http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more
info.
--------------------------------------------------------------------------------
================================================================================
upower-0.99.5-1.fc25 (FEDORA-2017-d398be67a8)
Power Management Service
--------------------------------------------------------------------------------
Update Information:
New upstream release - Add BatteryLevel property for devices with a finite
number of power levels - Add support for pausing and resuming of the daemon poll
- Do not spin in a loop when /proc/timer_stats cannot be written - Fix reading
and writing the keyboard brightness level - Get a serial number for device
batteries - Refresh devices after waking up from sleep - Lower initial power
usage when iDevice isn't accessible
--------------------------------------------------------------------------------