The following Fedora 25 Security updates need testing: Age URL 159 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25 58 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e python-XStatic-jquery-ui-1.12.0.1-4.fc25 13 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a3c7d077c7 perltidy-20170521-1.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c7c3f7ed26 libtasn1-4.12-1.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ac7fc2fd8c picocom-2.2-2.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-926e11c76e yara-3.6.0-1.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-60997f0d14 oniguruma-6.1.3-2.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c2113aacd2 mosquitto-1.4.12-1.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e698bba980 freeradius-3.0.14-1.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-690eedcf41 poppler-0.45.0-3.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5e28afa2dd dolphin-emu-5.0-14.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0ee7b8dd2a mingw-poppler-0.45.0-2.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-dd42592f9a perl-File-Path-2.12-366.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-87a64155eb ansible-2.3.1.0-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-278f46fcd6 golang-1.7.6-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7dbbbafea6 runc-1.0.0-7.git6394544.fc25.2 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8348115acd log4j12-1.2.17-19.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ae00b2a30a mariadb-10.1.24-1.fc25 The following Fedora 25 Critical Path updates have yet to be approved: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1a705b1ff4 libtiff-4.0.8-1.fc25 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6dcf888128 iproute-4.11.0-1.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c7c3f7ed26 libtasn1-4.12-1.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-daacf63973 glusterfs-3.10.3-1.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-dd42592f9a perl-File-Path-2.12-366.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-306f90d297 sssd-1.15.2-5.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ad6a31ebe1 libvirt-2.2.1-2.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9382fc88db testdisk-7.0-9.fc25 ntfs-3g-2017.3.23-1.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-94c0774edd rpcbind-0.2.4-6.rc2.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-690eedcf41 poppler-0.45.0-3.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4284c7cd1f libunwind-1.2-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5ce009e3bc nfs-utils-2.1.1-5.rc3.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ae00b2a30a mariadb-10.1.24-1.fc25 The following builds have been pushed to Fedora 25 updates-testing COPASI-4.19.150-1.fc25 cdbs-0.4.151-1.fc25 cockatrice-2.3.17-1.fc25 copyq-3.0.2-1.fc25 cube-4.3.5-1.fc25 dnscrypt-proxy-gui-1.10.8-1.fc25 emacs-bbdb-3.1.2-8.fc25 fedora-review-0.6.1-5.fc25 findbugs-contrib-7.0.2-1.fc25 golang-github-xtaci-kcp-go-3.17-1.fc25 guayadeque-0.4.5-0.6.beta1git35eaa95.fc25 jumpnbump-1.60-2.fc25 leptonica-1.74.2-2.fc25 lollypop-0.9.239-1.fc25 mariadb-10.1.24-1.fc25 mingw-leptonica-1.74.2-2.fc25 nextcloud-client-2.3.2-1.fc25 openjfx-8.0.152-10.b04.fc25 pantheon-files-0.3.5-1.fc25 perl-Date-Manip-6.59-1.fc25 php-cache-adapter-common-0.4.0-1.fc25 php-cache-filesystem-adapter-0.4.0-2.fc25 php-cache-integration-tests-0.16.0-1.fc25 python-svgwrite-1.1.11-1.fc25 scsi-target-utils-1.0.70-1.fc25 superlu_dist-5.1.3-4.fc25 tomboy-1.15.8-2.fc25 torrent-file-editor-0.3.5-1.fc25 youtube-dl-2017.05.29-1.fc25 zanata-platform-4.2.1-1.fc25 Details about builds: ================================================================================ COPASI-4.19.150-1.fc25 (FEDORA-2017-11a94c6765) Biochemical network simulator -------------------------------------------------------------------------------- Update Information: - Update to version 4.19 -build 150 (fix upstream bug #2415) -------------------------------------------------------------------------------- ================================================================================ cdbs-0.4.151-1.fc25 (FEDORA-2017-757360cd2b) Common build system for Debian packages -------------------------------------------------------------------------------- Update Information: Update to 0.4.151, see http://metadata.ftp- master.debian.org/changelogs/main/c/cdbs/cdbs_0.4.151_changelog for details. -------------------------------------------------------------------------------- ================================================================================ cockatrice-2.3.17-1.fc25 (FEDORA-2017-54dfd06b53) A cross-platform virtual tabletop software for multi-player card games -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1448778 - Review Request: cockatrice - A cross-platform virtual tabletop for multiplayer card games https://bugzilla.redhat.com/show_bug.cgi?id=1448778 -------------------------------------------------------------------------------- ================================================================================ copyq-3.0.2-1.fc25 (FEDORA-2017-1999a200c0) Advanced clipboard manager -------------------------------------------------------------------------------- Update Information: Upstream release rhbz#1456802 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1456802 - copyq-v3.0.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1456802 -------------------------------------------------------------------------------- ================================================================================ cube-4.3.5-1.fc25 (FEDORA-2017-1cb4764d31) CUBE Uniform Behavioral Encoding generic presentation component -------------------------------------------------------------------------------- Update Information: New version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1457285 - scorep-3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1457285 -------------------------------------------------------------------------------- ================================================================================ dnscrypt-proxy-gui-1.10.8-1.fc25 (FEDORA-2017-0f7405ac6a) GUI wrapper for dnscrypt-proxy -------------------------------------------------------------------------------- Update Information: enhancements; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1454741 - dnscrypt-proxy-gui-1.9.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1454741 -------------------------------------------------------------------------------- ================================================================================ emacs-bbdb-3.1.2-8.fc25 (FEDORA-2017-f58b35e448) A contact management utility for use with Emacs -------------------------------------------------------------------------------- Update Information: Remove the PDF documentation. Just like the info file, it is just a template. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1457079 - /usr/share/doc/emacs-bbdb/bbdb.pdf is useless https://bugzilla.redhat.com/show_bug.cgi?id=1457079 -------------------------------------------------------------------------------- ================================================================================ fedora-review-0.6.1-5.fc25 (FEDORA-2017-17a82ba45a) Review tool for fedora rpm packages -------------------------------------------------------------------------------- Update Information: * This update fixes issues when installing built packages when using mock >= 1.4.1 while keeping compatibility with earlier versions of mock. -------------------------------------------------------------------------------- ================================================================================ findbugs-contrib-7.0.2-1.fc25 (FEDORA-2017-f1d605c731) Extra findbugs detectors -------------------------------------------------------------------------------- Update Information: Update to new version 7.0.2. New detectors in this release: * `STT_TOSTRING_MAP_KEYING` * This method uses a concatenated `String` as a map key -------------------------------------------------------------------------------- References: [ 1 ] Bug #1456618 - findbugs-contrib-7.0.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1456618 -------------------------------------------------------------------------------- ================================================================================ golang-github-xtaci-kcp-go-3.17-1.fc25 (FEDORA-2017-8664f38d06) Production-Grade Reliable-UDP Library for golang -------------------------------------------------------------------------------- Update Information: Update to version 3.17. -------------------------------------------------------------------------------- ================================================================================ guayadeque-0.4.5-0.6.beta1git35eaa95.fc25 (FEDORA-2017-11f4502460) Music player -------------------------------------------------------------------------------- Update Information: Update to 0.4.5-0.6.beta1git35eaa95 -------------------------------------------------------------------------------- ================================================================================ jumpnbump-1.60-2.fc25 (FEDORA-2017-bf8d29889c) Cute multiplayer platform game with bunnies -------------------------------------------------------------------------------- Update Information: Import jumpnbump 1.60 in Fedora (#1456203) Jump 'n Bump is a cute multiplayer platform game in which you, as a bunny, have to jump on your opponents to make them explode. It is a true multiplayer game with network support and shoudn't be played alone, although computer bunnies with limited AI are available. The game is a UNIX port of the old DOS game by Brainchild Design. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1456203 - Review Request: jumpnbump - Cute multiplayer platform game with bunnies https://bugzilla.redhat.com/show_bug.cgi?id=1456203 -------------------------------------------------------------------------------- ================================================================================ leptonica-1.74.2-2.fc25 (FEDORA-2017-2af56430e7) C library for efficient image processing and image analysis operations -------------------------------------------------------------------------------- Update Information: Update to 1.74.2, see https://github.com/DanBloomberg/leptonica/blob/master /version-notes.html for details. -------------------------------------------------------------------------------- ================================================================================ lollypop-0.9.239-1.fc25 (FEDORA-2017-6075e48fd8) Music player for GNOME -------------------------------------------------------------------------------- Update Information: Update to 0.9.239-1 -------------------------------------------------------------------------------- ================================================================================ mariadb-10.1.24-1.fc25 (FEDORA-2017-ae00b2a30a) A community developed branch of MySQL -------------------------------------------------------------------------------- Update Information: **Rebase to 10.1.24** Plugin oqgraph enabled Plugin jemalloc enabled Sphinx engine enabled Build dependecies Bison and Libarchive added, others corrected Disabling Mroonga engine for i686 architecture, as it is not supported by MariaDB **Removed patches: (fixed by upstream)** Patch5: %{pkgnamepatch}-file-contents.patch Patch14: %{pkgnamepatch }-example-config-files.patch Patch31: %{pkgnamepatch}-string- overflow.patch Patch32: %{pkgnamepatch}-basedir.patch Patch41: %{pkgnamepatch}-galera-new-cluster-help.patch **CVEs fix** CVE-2017-3313 CVE-2017-3308 CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464 **Testsuite** Enabled '--big-test' option for the testsuite Disabled '--skip-rpl' option for the testsuite = replication tests enabled **Warning** Some Spider tests started to fail, the engine can be probabbly unsafe now. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1414387 - CVE-2017-3238 CVE-2017-3243 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3265 CVE-2017-3291 CVE-2017-3312 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 mariadb: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1414387 -------------------------------------------------------------------------------- ================================================================================ mingw-leptonica-1.74.2-2.fc25 (FEDORA-2017-2af56430e7) MinGW Windows Leptonica library -------------------------------------------------------------------------------- Update Information: Update to 1.74.2, see https://github.com/DanBloomberg/leptonica/blob/master /version-notes.html for details. -------------------------------------------------------------------------------- ================================================================================ nextcloud-client-2.3.2-1.fc25 (FEDORA-2017-b63cde86f0) The Nextcloud Client -------------------------------------------------------------------------------- Update Information: 2.3.2 release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1449401 - nextcloud-client-2.3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1449401 -------------------------------------------------------------------------------- ================================================================================ openjfx-8.0.152-10.b04.fc25 (FEDORA-2017-b9d1a0520b) Rich client application platform for Java -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1438673 - Review Request: openjfx - Rich client application platform for Java https://bugzilla.redhat.com/show_bug.cgi?id=1438673 [ 2 ] Bug #1145303 - RFE: JavaFX https://bugzilla.redhat.com/show_bug.cgi?id=1145303 -------------------------------------------------------------------------------- ================================================================================ pantheon-files-0.3.5-1.fc25 (FEDORA-2017-cff8d0a0f8) Pantheon file manager -------------------------------------------------------------------------------- Update Information: Update to version 0.3.5. More information at: https://launchpad.net/pantheon- files/0.3.x/0.3.5 -------------------------------------------------------------------------------- ================================================================================ perl-Date-Manip-6.59-1.fc25 (FEDORA-2017-6abb0bbab6) Date manipulation routines -------------------------------------------------------------------------------- Update Information: Rebase to upstream release 6.59. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1458071 - perl-Date-Manip-6.59 is available https://bugzilla.redhat.com/show_bug.cgi?id=1458071 -------------------------------------------------------------------------------- ================================================================================ php-cache-adapter-common-0.4.0-1.fc25 (FEDORA-2017-1c8e2f9970) Common classes for PSR-6 adapters -------------------------------------------------------------------------------- Update Information: # php-cache-integration-tests This package contains integration tests to make sure your implementation of a PSR-6 and/or PSR-16 cache follows the rules by PHP-FIG. It is a part of the PHP Cache organization. # php-cache-adapter-common Common classes for PSR-6 adapters. # php-cache-filesystem-adapter A PSR-6 cache implementation using filesystem. This implementation supports tags. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442473 - Review Request: php-cache-filesystem-adapter - A PSR-6 cache implementation using filesystem https://bugzilla.redhat.com/show_bug.cgi?id=1442473 [ 2 ] Bug #1442472 - Review Request: php-cache-adapter-common - Common classes for PSR-6 adapters https://bugzilla.redhat.com/show_bug.cgi?id=1442472 [ 3 ] Bug #1442471 - Review Request: php-cache-integration-tests - Integration tests for PSR-6 and PSR-16 cache implementations https://bugzilla.redhat.com/show_bug.cgi?id=1442471 -------------------------------------------------------------------------------- ================================================================================ php-cache-filesystem-adapter-0.4.0-2.fc25 (FEDORA-2017-1c8e2f9970) A PSR-6 cache implementation using filesystem -------------------------------------------------------------------------------- Update Information: # php-cache-integration-tests This package contains integration tests to make sure your implementation of a PSR-6 and/or PSR-16 cache follows the rules by PHP-FIG. It is a part of the PHP Cache organization. # php-cache-adapter-common Common classes for PSR-6 adapters. # php-cache-filesystem-adapter A PSR-6 cache implementation using filesystem. This implementation supports tags. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442473 - Review Request: php-cache-filesystem-adapter - A PSR-6 cache implementation using filesystem https://bugzilla.redhat.com/show_bug.cgi?id=1442473 [ 2 ] Bug #1442472 - Review Request: php-cache-adapter-common - Common classes for PSR-6 adapters https://bugzilla.redhat.com/show_bug.cgi?id=1442472 [ 3 ] Bug #1442471 - Review Request: php-cache-integration-tests - Integration tests for PSR-6 and PSR-16 cache implementations https://bugzilla.redhat.com/show_bug.cgi?id=1442471 -------------------------------------------------------------------------------- ================================================================================ php-cache-integration-tests-0.16.0-1.fc25 (FEDORA-2017-1c8e2f9970) Integration tests for PSR-6 and PSR-16 cache implementations -------------------------------------------------------------------------------- Update Information: # php-cache-integration-tests This package contains integration tests to make sure your implementation of a PSR-6 and/or PSR-16 cache follows the rules by PHP-FIG. It is a part of the PHP Cache organization. # php-cache-adapter-common Common classes for PSR-6 adapters. # php-cache-filesystem-adapter A PSR-6 cache implementation using filesystem. This implementation supports tags. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442473 - Review Request: php-cache-filesystem-adapter - A PSR-6 cache implementation using filesystem https://bugzilla.redhat.com/show_bug.cgi?id=1442473 [ 2 ] Bug #1442472 - Review Request: php-cache-adapter-common - Common classes for PSR-6 adapters https://bugzilla.redhat.com/show_bug.cgi?id=1442472 [ 3 ] Bug #1442471 - Review Request: php-cache-integration-tests - Integration tests for PSR-6 and PSR-16 cache implementations https://bugzilla.redhat.com/show_bug.cgi?id=1442471 -------------------------------------------------------------------------------- ================================================================================ python-svgwrite-1.1.11-1.fc25 (FEDORA-2017-1a3fb92379) Python 2 library to create SVG drawings -------------------------------------------------------------------------------- Update Information: Update to 1.1.11 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1457286 - python-svgwrite-1.1.11 is available https://bugzilla.redhat.com/show_bug.cgi?id=1457286 -------------------------------------------------------------------------------- ================================================================================ scsi-target-utils-1.0.70-1.fc25 (FEDORA-2017-381959fdcf) The SCSI target daemon and utility programs -------------------------------------------------------------------------------- Update Information: update to latest version to fix a bug. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1458277 - tgtd debug level can't be set https://bugzilla.redhat.com/show_bug.cgi?id=1458277 [ 2 ] Bug #1036616 - scsi-target-utils-1.0.70 is available https://bugzilla.redhat.com/show_bug.cgi?id=1036616 -------------------------------------------------------------------------------- ================================================================================ superlu_dist-5.1.3-4.fc25 (FEDORA-2017-1b0d3a96d3) Solution of large, sparse, nonsymmetric systems of linear equations -------------------------------------------------------------------------------- Update Information: Fix architecture conditionals which were preventing mpich builds. -------------------------------------------------------------------------------- ================================================================================ tomboy-1.15.8-2.fc25 (FEDORA-2017-cf537be185) Note-taking application -------------------------------------------------------------------------------- Update Information: #### Version 1.15.8 #### * Translation updates: da, pt_BR, cs, pl, sr, sv, hu, de, id, lt * Removed confusing Esc key binding to the default button in dialogs (gh22) * Added explicit TLS 1.1 and 1.2 support to WebSyncService addin (gh48) * Minor build/project files updates and cleanup -------------------------------------------------------------------------------- ================================================================================ torrent-file-editor-0.3.5-1.fc25 (FEDORA-2017-157da83208) Qt based GUI tool designed to create and edit .torrent files -------------------------------------------------------------------------------- Update Information: Bump to v0.3.5 -------------------------------------------------------------------------------- ================================================================================ youtube-dl-2017.05.29-1.fc25 (FEDORA-2017-125f54c617) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information: update to the latest upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #1445565 - youtube-dl-2017.05.07 is available https://bugzilla.redhat.com/show_bug.cgi?id=1445565 [ 2 ] Bug #1457240 - New upstream version 2017.05.29 is available https://bugzilla.redhat.com/show_bug.cgi?id=1457240 [ 3 ] Bug #1454529 - youtube-dl-2017.05.29 is available https://bugzilla.redhat.com/show_bug.cgi?id=1454529 -------------------------------------------------------------------------------- ================================================================================ zanata-platform-4.2.1-1.fc25 (FEDORA-2017-f465b3d6fd) Zanata the web-based translation platform -------------------------------------------------------------------------------- Update Information: Upstream update to 4.2.1 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
