The following Fedora 25 Security updates need testing: Age URL 113 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-cc029be02d tnef-1.4.14-1.fc25 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c0ef6054d7 python-django-1.9.13-1.fc25 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e python-XStatic-jquery-ui-1.12.0.1-4.fc25 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2a90185a04 php-pear-CAS-1.3.5-1.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b83c0eeab0 xstream-1.4.9-5.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a902f8db61 jenkins-xstream-1.4.7-11.jenkins1.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6ef28e38d6 dovecot-2.2.29.1-1.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8dce7a3940 backintime-1.1.20-1.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-db77ca450f ansible-2.3.0.0-1.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-11ac1e31eb yara-3.5.0-7.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-80763c8c03 collectd-5.7.1-3.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-15e7445d67 libdwarf-20170416-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5261ba4605 tomcat-8.0.43-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9c6430c2e2 pcre2-10.23-6.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-34f6e70fdd libnl3-3.2.29-3.fc25 The following Fedora 25 Critical Path updates have yet to be approved: Age URL 21 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ea86a8123b pungi-4.1.14-1.fc25 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b19d9e3c3d gnutls-3.5.11-1.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4efaae68fe thunderbird-52.0-2.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3c25dd541a livecd-tools-24.3-2.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-19451b76d6 highlight-3.36-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0bc9e0eb4e kernel-4.10.11-200.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-34f6e70fdd libnl3-3.2.29-3.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9c6430c2e2 pcre2-10.23-6.fc25 The following builds have been pushed to Fedora 25 updates-testing fedfind-3.5.4-1.fc25 fts-3.6.8-1.fc25 fts-monitoring-3.6.8-1.fc25 gsignond-1.0.6-2.fc25 kde-cli-tools-5.9.4-2.fc25 kernel-4.10.11-200.fc25 kf5-plasma-5.33.0-2.fc25 libnl3-3.2.29-3.fc25 libyui-3.3.2-1.fc25 lziprecover-1.19-1.fc25 numix-gtk-theme-2.6.6-2.fc25 numix-icon-theme-0.1.0-15.git271471c.fc25 numix-icon-theme-circle-0.1.0-13.git5a11140.fc25 openqa-4.4-49.20170409gitfead7af.fc25 os-autoinst-4.4-18.20170410git97928a2.fc25 pcre2-10.23-6.fc25 perl-Getopt-Lucid-1.08-1.fc25 perl-Mojolicious-7.30-1.fc25 perl-Mojolicious-Plugin-AssetPack-1.41-1.fc25 perl-Perl-Critic-Pulp-93-1.fc25 perl-Time-HiRes-1.9742-1.fc25 plasma-desktop-5.9.4-2.fc25 python-jedi-0.10.2-1.fc25 rsyslog-8.26.0-1.fc25 stress-ng-0.07.29-1.fc25 Details about builds: ================================================================================ fedfind-3.5.4-1.fc25 (FEDORA-2017-7afb2f970d) Fedora compose and image finder -------------------------------------------------------------------------------- Update Information: This new version of fedfind handles an unusual situation where its local cache directory (which is usually `~/.cache/fedfind`, but can be a temporary directory if that location is not writeable) disappears during the lifetime of a fedfind- using process. Previously, this would cause the process to crash, as fedfind wasn't written to handle this eventuality. There are no other changes in this update. -------------------------------------------------------------------------------- ================================================================================ fts-3.6.8-1.fc25 (FEDORA-2017-da6256c64f) File Transfer Service V3 -------------------------------------------------------------------------------- Update Information: New upstream release 3.6.8 -------------------------------------------------------------------------------- ================================================================================ fts-monitoring-3.6.8-1.fc25 (FEDORA-2017-08a0b72076) FTS3 Web Application for monitoring -------------------------------------------------------------------------------- Update Information: New upstream release 3.6.8 -------------------------------------------------------------------------------- ================================================================================ gsignond-1.0.6-2.fc25 (FEDORA-2017-edda6d990d) GSignOn daemon -------------------------------------------------------------------------------- Update Information: Fix subpackage descriptions. ---- New package for fedora. This is one of the last missing dependencies for a complete Pantheon Desktop Environment. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442547 - Review Request: gsignond - GSignOn daemon https://bugzilla.redhat.com/show_bug.cgi?id=1442547 -------------------------------------------------------------------------------- ================================================================================ kde-cli-tools-5.9.4-2.fc25 (FEDORA-2017-6baad2181b) Tools based on KDE Frameworks 5 to better interact with the system -------------------------------------------------------------------------------- Update Information: Backport upstream fix for getting a more-complete output from "kcmshell5 --list" -------------------------------------------------------------------------------- ================================================================================ kernel-4.10.11-200.fc25 (FEDORA-2017-0bc9e0eb4e) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 4.10.11 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ================================================================================ kf5-plasma-5.33.0-2.fc25 (FEDORA-2017-bc1574b703) KDE Frameworks 5 Tier 3 framework is foundation to build a primary user interface -------------------------------------------------------------------------------- Update Information: Backport upstream fixes, notably for inconsistent plasma icon sizes -------------------------------------------------------------------------------- ================================================================================ libnl3-3.2.29-3.fc25 (FEDORA-2017-34f6e70fdd) Convenience library for kernel netlink sockets -------------------------------------------------------------------------------- Update Information: lib: check for integer overflow in nlmsg_reserve() (rh#1440789, CVE-2017-0553) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1440789 - CVE-2017-0553 libnl3: libnl: Integer overflow in nlmsg_reserve() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1440789 -------------------------------------------------------------------------------- ================================================================================ libyui-3.3.2-1.fc25 (FEDORA-2017-a15a381b38) GUI-abstraction library -------------------------------------------------------------------------------- Update Information: * New upstream release * Set preferred UI-plugin using $YUI_PREFERRED_BACKEND in $ENV * Avoid several warnings from CMake * Improve macros-file -------------------------------------------------------------------------------- ================================================================================ lziprecover-1.19-1.fc25 (FEDORA-2017-a517758125) Data recovery tool and decompressor for files in the lzip compressed format -------------------------------------------------------------------------------- Update Information: 1.19 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442896 - lziprecover-1.19 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442896 -------------------------------------------------------------------------------- ================================================================================ numix-gtk-theme-2.6.6-2.fc25 (FEDORA-2017-685dde844d) Numix Gtk Theme -------------------------------------------------------------------------------- Update Information: move directories prior to symlink creation -------------------------------------------------------------------------------- References: [ 1 ] Bug #1352499 - numix-gtk-theme-2.6.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1352499 [ 2 ] Bug #1379883 - File conflict file /usr/share/themes/Numix/gtk-3.0/assets with latest update https://bugzilla.redhat.com/show_bug.cgi?id=1379883 [ 3 ] Bug #1405837 - Numix theme messes up the desktop icons in Xfce https://bugzilla.redhat.com/show_bug.cgi?id=1405837 -------------------------------------------------------------------------------- ================================================================================ numix-icon-theme-0.1.0-15.git271471c.fc25 (FEDORA-2017-52138162ea) Numix Project icon theme -------------------------------------------------------------------------------- Update Information: rebuilt ---- rebuilt -------------------------------------------------------------------------------- References: [ 1 ] Bug #1439707 - numix-icon-theme-17-04-05 is available https://bugzilla.redhat.com/show_bug.cgi?id=1439707 -------------------------------------------------------------------------------- ================================================================================ numix-icon-theme-circle-0.1.0-13.git5a11140.fc25 (FEDORA-2017-14da770c2f) Numix Project circle icon theme -------------------------------------------------------------------------------- Update Information: rebuilt -------------------------------------------------------------------------------- References: [ 1 ] Bug #1391795 - numix-icon-theme-circle-17-04-05 is available https://bugzilla.redhat.com/show_bug.cgi?id=1391795 -------------------------------------------------------------------------------- ================================================================================ openqa-4.4-49.20170409gitfead7af.fc25 (FEDORA-2017-a675854dad) OS-level automated testing framework -------------------------------------------------------------------------------- Update Information: This update provides new git snapshots of openQA and os-autoinst with various bugfixes and enhancements. It also provides bugfix updates to Mojolicious and the AssetPack plugin; the newer versions are now required by the latest openQA code. There should be no incompatible changes in either Mojolicious or AssetPack. -------------------------------------------------------------------------------- ================================================================================ os-autoinst-4.4-18.20170410git97928a2.fc25 (FEDORA-2017-a675854dad) OS-level test automation -------------------------------------------------------------------------------- Update Information: This update provides new git snapshots of openQA and os-autoinst with various bugfixes and enhancements. It also provides bugfix updates to Mojolicious and the AssetPack plugin; the newer versions are now required by the latest openQA code. There should be no incompatible changes in either Mojolicious or AssetPack. -------------------------------------------------------------------------------- ================================================================================ pcre2-10.23-6.fc25 (FEDORA-2017-9c6430c2e2) Perl-compatible regular expression library -------------------------------------------------------------------------------- Update Information: This release fixes a crash when finding a Unicode property for a character with a code point greater than 0x10ffff in UTF-32 library while UTF mode is disabled and JIT mode is enabled. It also fixes an incortect cast in UTF validation routine. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1434504 - CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2) https://bugzilla.redhat.com/show_bug.cgi?id=1434504 -------------------------------------------------------------------------------- ================================================================================ perl-Getopt-Lucid-1.08-1.fc25 (FEDORA-2017-099e214daa) Clear, readable syntax for command line processing -------------------------------------------------------------------------------- Update Information: This release fixes building on Perl without "." in @INC path. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442608 - perl-Getopt-Lucid-1.08 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442608 -------------------------------------------------------------------------------- ================================================================================ perl-Mojolicious-7.30-1.fc25 (FEDORA-2017-a675854dad) A next generation web framework for Perl -------------------------------------------------------------------------------- Update Information: This update provides new git snapshots of openQA and os-autoinst with various bugfixes and enhancements. It also provides bugfix updates to Mojolicious and the AssetPack plugin; the newer versions are now required by the latest openQA code. There should be no incompatible changes in either Mojolicious or AssetPack. -------------------------------------------------------------------------------- ================================================================================ perl-Mojolicious-Plugin-AssetPack-1.41-1.fc25 (FEDORA-2017-a675854dad) Compress and convert CSS, Less, Sass, JavaScript and CoffeeScript files -------------------------------------------------------------------------------- Update Information: This update provides new git snapshots of openQA and os-autoinst with various bugfixes and enhancements. It also provides bugfix updates to Mojolicious and the AssetPack plugin; the newer versions are now required by the latest openQA code. There should be no incompatible changes in either Mojolicious or AssetPack. -------------------------------------------------------------------------------- ================================================================================ perl-Perl-Critic-Pulp-93-1.fc25 (FEDORA-2017-5e63a8960a) Some add-on perlcritic policies -------------------------------------------------------------------------------- Update Information: This release improves a build script. We deliver it only to provide up-to-date version string. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442380 - perl-Perl-Critic-Pulp-93 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442380 -------------------------------------------------------------------------------- ================================================================================ perl-Time-HiRes-1.9742-1.fc25 (FEDORA-2017-a12488eb86) High resolution alarm, sleep, gettimeofday, interval timers -------------------------------------------------------------------------------- Update Information: This release fixes building on Perl without "." in @INC path. It also corrects bthe build script to use safer 3-argument open() calls. We deliver it only to provide up-to-date version string. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442609 - perl-Time-HiRes-1.9742 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442609 -------------------------------------------------------------------------------- ================================================================================ plasma-desktop-5.9.4-2.fc25 (FEDORA-2017-bc1574b703) Plasma Desktop shell -------------------------------------------------------------------------------- Update Information: Backport upstream fixes, notably for inconsistent plasma icon sizes -------------------------------------------------------------------------------- ================================================================================ python-jedi-0.10.2-1.fc25 (FEDORA-2017-0c19da6f4c) An auto completion tool for Python that can be used for text editors -------------------------------------------------------------------------------- Update Information: ### [upstream changelog](https://github.com/davidhalter/jedi/blob/v0.10.2/CHANGELOG.rst) ### 0.10.2 (2017-04-05) - Python Packaging sucks. Some files were not included in 0.10.1. ### 0.10.1 (2017-04-05) - Fixed a few very annoying bugs. - Prepared the parser to be factored out of Jedi. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1438985 - python-jedi-0.10.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1438985 -------------------------------------------------------------------------------- ================================================================================ rsyslog-8.26.0-1.fc25 (FEDORA-2017-716d0a2a67) Enhanced system logging and kernel message trapping daemon -------------------------------------------------------------------------------- Update Information: rebase to 8.26.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1436113 - rsyslog documentation manual page horribly out-of-date https://bugzilla.redhat.com/show_bug.cgi?id=1436113 [ 2 ] Bug #1438789 - rsyslog-8.26.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1438789 -------------------------------------------------------------------------------- ================================================================================ stress-ng-0.07.29-1.fc25 (FEDORA-2017-e3d9412367) Stress test a computer system in various ways -------------------------------------------------------------------------------- Update Information: new version ---- initial version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1398624 - stress-ng-0.07.29 is available https://bugzilla.redhat.com/show_bug.cgi?id=1398624 [ 2 ] Bug #1346407 - Review Request: stress-ng - Stress test a computer system in various ways https://bugzilla.redhat.com/show_bug.cgi?id=1346407 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
