The following Fedora 25 Security updates need testing: Age URL 128 https://bodhi.fedoraproject.org/updates/FEDORA-2016-9b3ed5f170 chicken-4.11.0-3.fc25 79 https://bodhi.fedoraproject.org/updates/FEDORA-2016-6dd3bc37c3 compat-guile18-1.8.8-14.fc25 21 https://bodhi.fedoraproject.org/updates/FEDORA-2016-daf90926d4 dovecot-2.2.27-1.fc25 15 https://bodhi.fedoraproject.org/updates/FEDORA-2016-01eba63bcc FlightGear-2016.3.1-3.fc25 12 https://bodhi.fedoraproject.org/updates/FEDORA-2016-89ee54c661 mingw-openjpeg2-2.1.2-3.fc25 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-c614315d29 squid-4.0.17-1.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-f341d71730 springframework-3.2.18-1.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-2bca1021a3 seamonkey-2.46-1.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-6e66f01186 borgbackup-1.0.9-1.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2016-8d8d7d6d47 tinymce-4.5.1-1.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-6941d25875 php-PHPMailer-5.2.21-1.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2016-12c39f958b sway-0.11-4.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-87dc28b1a0 w3m-0.5.3-27.git20161120.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-f7ef82c1b4 php-swiftmailer-5.4.5-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-a4b06a036b libpng10-1.0.67-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-aaf771b7a7 libpng-1.6.27-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-5c8dce58c9 mingw-libpng-1.6.27-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-e7b46c92ae bzip2-1.0.6-21.fc25 The following Fedora 25 Critical Path updates have yet to be approved: Age URL 35 https://bodhi.fedoraproject.org/updates/FEDORA-2016-a1231ada78 python-productmd-1.3-1.fc25 35 https://bodhi.fedoraproject.org/updates/FEDORA-2016-940ecb5c59 wpa_supplicant-2.6-1.fc25 21 https://bodhi.fedoraproject.org/updates/FEDORA-2016-9c25320b71 pungi-4.1.11-3.fc25 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-469935a9d1 xorg-x11-server-1.19.0-3.fc25 11 https://bodhi.fedoraproject.org/updates/FEDORA-2016-be5fa630c5 vim-8.0.134-2.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2016-37c1b46c83 python-mako-1.0.6-1.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2016-184e121855 lxpanel-0.9.2-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-e7b46c92ae bzip2-1.0.6-21.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d720054f2b desktop-file-utils-0.23-2.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-c843353e72 perl-Scalar-List-Utils-1.47-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-aaf771b7a7 libpng-1.6.27-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-57fb167433 appstream-data-25-12.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-06be5d9fb4 breeze-icon-theme-5.29.0-1.fc25 extra-cmake-modules-5.29.0-1.fc25 kf5-5.29.0-1.fc25 kf5-attica-5.29.0-1.fc25 kf5-baloo-5.29.0-1.fc25 kf5-bluez-qt-5.29.0-1.fc25 kf5-frameworkintegration-5.29.0-1.fc25 kf5-kactivities-5.29.0-1.fc25 kf5-kactivities-stats-5.29.0-1.fc25 kf5-kapidox-5.29.0-1.fc25 kf5-karchive-5.29.0-1.fc25 kf5-kauth-5.29.0-1.fc25 kf5-kbookmarks-5.29.0-1.fc25 kf5-kcmutils-5.29.0-1.fc25 kf5-kcodecs-5.29.0-1.fc25 kf5-kcompletion-5.29.0-1.fc25 kf5-kconfig-5.29.0-1.fc25 kf5-kconfigwidgets-5.29.0-1.fc25 kf5-kcoreaddons-5.29.0-1.fc25 kf5-kcrash-5.29.0-1.fc25 kf5-kdbusaddons-5.29.0-1.fc25 kf5-kdeclarative-5.29.0-1.fc25 kf5-kded-5.29.0-1.fc25 kf5-kdelibs4support-5.29.0-1.fc25 kf5-kdesignerplugin-5.29.0-1.fc25 kf5-kdesu-5.29.0-1.fc25 kf5-kdewebkit-5.29.0-1.fc25 kf5-kdnssd-5.29.0-1.fc25 kf5-kdoctools-5.29.0-1.fc25 kf5-kemoticons-5.29.0-1.fc25 kf5-kfilemetadata-5.29.0-1.fc25 kf5-kglobalaccel-5.29.0-1.fc25 kf5-kguiad dons-5.29.0-1.fc25 kf5-khtml-5.29.0-1.fc25 kf5-ki18n-5.29.0-1.fc25 kf5-kiconthemes-5.29.0-1.fc25 kf5-kidletime-5.29.0-1.fc25 kf5-kimageformats-5.29.0-1.fc25 kf5-kinit-5.29.0-1.fc25 kf5-kio-5.29.0-1.fc25 kf5-kitemmodels-5.29.0-1.fc25 kf5-kitemviews-5.29.0-1.fc25 kf5-kjobwidgets-5.29.0-1.fc25 kf5-kjs-5.29.0-1.fc25 kf5-kjsembed-5.29.0-1.fc25 kf5-kmediaplayer-5.29.0-1.fc25 kf5-knewstuff-5.29.0-1.fc25 kf5-knotifications-5.29.0-1.fc25 kf5-knotifyconfig-5.29.0-1.fc25 kf5-kpackage-5.29.1-3.fc25 kf5-kparts-5.29.0-1.fc25 kf5-kpeople-5.29.0-1.fc25 kf5-kplotting-5.29.0-1.fc25 kf5-kpty-5.29.0-1.fc25 kf5-kross-5.29.0-1.fc25 kf5-krunner-5.29.0-1.fc25 kf5-kservice-5.29.0-1.fc25 kf5-ktexteditor-5.29.0-1.fc25 kf5-ktextwidgets-5.29.0-1.fc25 kf5-kunitconversion-5.29.0-1.fc25 kf5-kwallet-5.29.0-1.fc25 kf5-kwayland-5.29.0-1.fc25 kf5-kwidgetsaddons-5.29.0-1.fc25 kf5-kwindowsystem-5.29.0-1.fc25 kf5-kxmlgui-5.29.0-1.fc25 kf5-kxmlrpcclient-5.29.0-1.fc25 kf5-modemmanager-qt-5.29.0-1.fc25 kf5-networkmanager-qt -5.29.0-1.fc25 kf5-plasma-5.29.0-1.fc25 kf5-solid-5.29.0-1.fc25 kf5-sonnet-5.29.0-1.fc25 kf5-syntax-highlighting-5.29.0-1.fc25 kf5-threadweaver-5.29.0-1.fc25 oxygen-icon-theme-5.29.0-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-5f51425625 libgweather-3.20.4-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2016-ab324eaf7a libnl3-3.2.29-1.fc25 The following builds have been pushed to Fedora 25 updates-testing OpenSceneGraph-3.4.0-6.fc25 bird-1.6.3-1.fc25 bzip2-1.0.6-21.fc25 cxsc-2.5.4-2.fc25 desktop-file-utils-0.23-2.fc25 hatari-2.0.0-4.fc25 perl-App-PFT-1.1.0-3.fc25 perl-Scalar-List-Utils-1.47-1.fc25 python-jinja2-2.8.1-1.fc25 python-mutagen-1.36-2.fc25 python-sphinx-1.4.9-2.fc25 rubygem-domain_name-0.5.20161129-1.fc25 rubygem-rake-compiler-1.0.3-1.fc25 rubygem-ruby-ntlm-0.0.3-1.fc25 Details about builds: ================================================================================ OpenSceneGraph-3.4.0-6.fc25 (FEDORA-2016-dbc4444111) High performance real-time graphics toolkit -------------------------------------------------------------------------------- Update Information: Add OSG-OpenEXR and OSG-Collada plugins. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1408498 - [PATCH] OpenSceneGraph.spec: missing BuildRequires for Collada and EXR support https://bugzilla.redhat.com/show_bug.cgi?id=1408498 -------------------------------------------------------------------------------- ================================================================================ bird-1.6.3-1.fc25 (FEDORA-2016-8e97569b3a) BIRD Internet Routing Daemon -------------------------------------------------------------------------------- Update Information: BIRD 1.6.3 (2016-12-22) ======================= * Large BGP communities * BFD authentication (MD5, SHA1) * SHA1 and SHA2 authentication for RIP and OSPF * Improved documentation * Several bug fixes BIRD 1.6.2 (2016-09-29) ======================= * Fixes serious bug introduced in the previous version BIRD 1.6.1 (2016-09-22) ======================= * Support for IPv6 ECMP * Better handling of IPv6 tentative addresses * Several updates and fixes in Babel protocol * Filter: New !~ operator * Filter: ASN ranges in bgpmask * KRT: New kernel protocol option 'metric' * KRT: New route attribute 'krt_scope' * Improved BIRD help messages * Fixes memory leak in BGP multipath * Fixes handling of empty path segments in BGP AS_PATH * Several bug fixes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1378434 - bird-1.6.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1378434 -------------------------------------------------------------------------------- ================================================================================ bzip2-1.0.6-21.fc25 (FEDORA-2016-e7b46c92ae) A file compression utility -------------------------------------------------------------------------------- Update Information: CVE-2016-3189 bzip2: heap use after free in bzip2recover -------------------------------------------------------------------------------- References: [ 1 ] Bug #1348179 - CVE-2016-3189 bzip2: heap use after free in bzip2recover [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1348179 -------------------------------------------------------------------------------- ================================================================================ cxsc-2.5.4-2.fc25 (FEDORA-2016-cd457d0b3a) C++ library for Extended Scientific Computing -------------------------------------------------------------------------------- Update Information: This update contains fixes for 64-bit builds and also fixes some endianness issues. -------------------------------------------------------------------------------- ================================================================================ desktop-file-utils-0.23-2.fc25 (FEDORA-2016-d720054f2b) Utilities for manipulating .desktop files -------------------------------------------------------------------------------- Update Information: This update adds Pantheon to the list of valid desktop environments. (This change was already accepted upstream and committed to the upstream git.) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1333550 - Pantheon not a valid "registered value" for desktop environment https://bugzilla.redhat.com/show_bug.cgi?id=1333550 -------------------------------------------------------------------------------- ================================================================================ hatari-2.0.0-4.fc25 (FEDORA-2016-1c8c8941c0) An Atari ST/STE/TT/Falcon emulator suitable for playing games -------------------------------------------------------------------------------- Update Information: * Support both hatari config file locations in hatariui * Support hatari v2.0 option changes in hatariui -------------------------------------------------------------------------------- ================================================================================ perl-App-PFT-1.1.0-3.fc25 (FEDORA-2016-1ad0fb0f1b) Hacker friendly static blog generator -------------------------------------------------------------------------------- Update Information: This is the first update for perl-App-PFT (aka [App::PFT](https://github.com/dacav/app-pft)), a group of perl executables which handle a PFT website. This package relies on the [PFT](https://github.com/dacav/PFT/) library, which abstracts the file system access. See [this](https://bodhi.fedoraproject.org/updates/FEDORA-2016-173acf8830) Bodhi update. The package installs `/usr/bin/pft`, which calls in chain sub-commands in `/usr/libexec/perl-App-PFT` (e.g. `pft init` will call `/usr/libexec/perl- App-PFT/pft-init`). The package provides manpages (one for `pft` and one for each subcommand) and a couple of shared files (currently two templates for the generated site) ## Example of usage `pft init` initializes the local directory with a structure for the content and a configuration file (`pft.yaml`). The `pft edit` command can be used to create a new content (i.e. a page, a blog entry, a tag page or a month page). `pft make` compiles the site according to the template specified in the configuration file. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1368790 - Review Request: perl-App-PFT - Hacker friendly static blog generator, command line utilities https://bugzilla.redhat.com/show_bug.cgi?id=1368790 -------------------------------------------------------------------------------- ================================================================================ perl-Scalar-List-Utils-1.47-1.fc25 (FEDORA-2016-c843353e72) A selection of general-utility scalar and list subroutines -------------------------------------------------------------------------------- Update Information: Rebase to upstream version 1.47. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1408347 - perl-Scalar-List-Utils-1.47 is available https://bugzilla.redhat.com/show_bug.cgi?id=1408347 -------------------------------------------------------------------------------- ================================================================================ python-jinja2-2.8.1-1.fc25 (FEDORA-2016-1102072017) General purpose template engine -------------------------------------------------------------------------------- Update Information: #### Jinja2 2.8.1 #### * Fixed the for_qs flag for urlencode. * Fixed regression when applying int to non-string values. * SECURITY: if the sandbox mode is used format expressions are now sandboxed with the same rules as in Jinja. This solves various information leakage problems that can occur with format strings. -------------------------------------------------------------------------------- ================================================================================ python-mutagen-1.36-2.fc25 (FEDORA-2016-629fa94860) Mutagen is a Python module to handle audio meta-data -------------------------------------------------------------------------------- Update Information: Update to 1.36 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1408342 - python-mutagen-1.36 is available https://bugzilla.redhat.com/show_bug.cgi?id=1408342 -------------------------------------------------------------------------------- ================================================================================ python-sphinx-1.4.9-2.fc25 (FEDORA-2016-db30d55c10) Python documentation generator -------------------------------------------------------------------------------- Update Information: Replaces use of alternatives with environment modules so that users do not need root access to switch between python2 and python3 versions of the sphinx programs. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1382405 - sphinx-quickstart not working. Alternatives is not the right solution https://bugzilla.redhat.com/show_bug.cgi?id=1382405 -------------------------------------------------------------------------------- ================================================================================ rubygem-domain_name-0.5.20161129-1.fc25 (FEDORA-2016-172d81d29d) Domain Name manipulation library for Ruby -------------------------------------------------------------------------------- Update Information: New version 0.5.20161129 is released. -------------------------------------------------------------------------------- ================================================================================ rubygem-rake-compiler-1.0.3-1.fc25 (FEDORA-2016-bd6f707233) Rake-based Ruby C Extension task generator -------------------------------------------------------------------------------- Update Information: New version 1.0.3 is released. -------------------------------------------------------------------------------- ================================================================================ rubygem-ruby-ntlm-0.0.3-1.fc25 (FEDORA-2016-9ba0bc3390) NTLM implementation for Ruby -------------------------------------------------------------------------------- Update Information: New version 0.0.3 is now available. -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
