The following Fedora 25 Security updates need testing: Age URL 113 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25 13 https://bodhi.fedoraproject.org/updates/FEDORA-2017-cc029be02d tnef-1.4.14-1.fc25 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c0ef6054d7 python-django-1.9.13-1.fc25 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e python-XStatic-jquery-ui-1.12.0.1-4.fc25 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2a90185a04 php-pear-CAS-1.3.5-1.fc25 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b83c0eeab0 xstream-1.4.9-5.fc25 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a902f8db61 jenkins-xstream-1.4.7-11.jenkins1.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6ef28e38d6 dovecot-2.2.29.1-1.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8dce7a3940 backintime-1.1.20-1.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-11ac1e31eb yara-3.5.0-7.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-80763c8c03 collectd-5.7.1-3.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-15e7445d67 libdwarf-20170416-1.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5261ba4605 tomcat-8.0.43-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9c6430c2e2 pcre2-10.23-6.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-34f6e70fdd libnl3-3.2.29-3.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-55a8f10223 libarchive-3.2.2-2.fc25 The following Fedora 25 Critical Path updates have yet to be approved: Age URL 21 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ea86a8123b pungi-4.1.14-1.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4efaae68fe thunderbird-52.0-2.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3c25dd541a livecd-tools-24.3-2.fc25 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-19451b76d6 highlight-3.36-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8086405c6f audit-2.7.6-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4c85c68d16 koji-1.12.0-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-521b5e42a4 nss-softokn-3.29.5-1.0.fc25 nss-util-3.29.5-1.0.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-55a8f10223 libarchive-3.2.2-2.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0bc9e0eb4e kernel-4.10.11-200.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-34f6e70fdd libnl3-3.2.29-3.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9c6430c2e2 pcre2-10.23-6.fc25 The following builds have been pushed to Fedora 25 updates-testing CGAL-4.9.1-1.fc25 audit-2.7.6-1.fc25 gsequencer-0.7.135-1.fc25 koji-1.12.0-1.fc25 lcgdm-dav-0.18.1-3.fc25 libarchive-3.2.2-2.fc25 mediawriter-4.0.95-1.fc25 nss-softokn-3.29.5-1.0.fc25 nss-util-3.29.5-1.0.fc25 perl-Tree-Simple-1.31-1.fc25 Details about builds: ================================================================================ CGAL-4.9.1-1.fc25 (FEDORA-2017-1e078ca344) Computational Geometry Algorithms Library -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1443518 - CGAL-4.9.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1443518 -------------------------------------------------------------------------------- ================================================================================ audit-2.7.6-1.fc25 (FEDORA-2017-8086405c6f) User space tools for 2.6 kernel auditing -------------------------------------------------------------------------------- Update Information: This update continues adjusting the auparse_normalize mappings. It also has robustness fixes against corrupted logs. It also fixes a bug where the enriched event information was not being loaded in the auparse_feed API. -------------------------------------------------------------------------------- ================================================================================ gsequencer-0.7.135-1.fc25 (FEDORA-2017-449e7e286f) Advanced Gtk+ Sequencer audio processing engine -------------------------------------------------------------------------------- Update Information: provide patch to fix missing license and logo within about dialog ---- removed patch to fix reference manual because upstream includes changes ---- removed patch to fix reference manual because upstream includes changes ---- removed 3 patches since new upstream package contains the changes ---- provide patch to fix possible SIGSEGV as no soundcard configured ---- enable make check only for x86_64 and armv7hl architecture ---- removed 3 patches that was applied upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #1403417 - Review Request: gsequencer - audio processing engine https://bugzilla.redhat.com/show_bug.cgi?id=1403417 [ 2 ] Bug #1434119 - GSequencer may crash as no soundcard configured https://bugzilla.redhat.com/show_bug.cgi?id=1434119 -------------------------------------------------------------------------------- ================================================================================ koji-1.12.0-1.fc25 (FEDORA-2017-4c85c68d16) Build system tools -------------------------------------------------------------------------------- Update Information: update to upstream 1.12.0 remove rhel 5 conditionals as its no longer supported in epel -------------------------------------------------------------------------------- ================================================================================ lcgdm-dav-0.18.1-3.fc25 (FEDORA-2017-2d0b659052) HTTP/DAV front end to the DPM/LFC services -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ================================================================================ libarchive-3.2.2-2.fc25 (FEDORA-2017-55a8f10223) A library for handling streaming archive formats -------------------------------------------------------------------------------- Update Information: fix two minor CVEs by backporting upstream commits -------------------------------------------------------------------------------- References: [ 1 ] Bug #1439705 - CVE-2016-10209 libarchive: NULL pointer dereference in archive_wstring_append_from_mbs function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1439705 [ 2 ] Bug #1417920 - CVE-2017-5601 libarchive: Out of bounds read in lha_read_file_header_1() function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1417920 -------------------------------------------------------------------------------- ================================================================================ mediawriter-4.0.95-1.fc25 (FEDORA-2017-a52d30e1ce) Fedora Media Writer -------------------------------------------------------------------------------- Update Information: Update to 4.0.95 -------------------------------------------------------------------------------- ================================================================================ nss-softokn-3.29.5-1.0.fc25 (FEDORA-2017-521b5e42a4) Network Security Services Softoken Module -------------------------------------------------------------------------------- Update Information: Updates the nss family of packages to upstream NSS 3.29.5. Note that, only nss- util and nss-softokn have changed since the previous upstream release 3.29.3. -------------------------------------------------------------------------------- ================================================================================ nss-util-3.29.5-1.0.fc25 (FEDORA-2017-521b5e42a4) Network Security Services Utilities Library -------------------------------------------------------------------------------- Update Information: Updates the nss family of packages to upstream NSS 3.29.5. Note that, only nss- util and nss-softokn have changed since the previous upstream release 3.29.3. -------------------------------------------------------------------------------- ================================================================================ perl-Tree-Simple-1.31-1.fc25 (FEDORA-2017-4e557b1186) Tree::Simple Perl module -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
