The following Fedora 25 Security updates need testing: Age URL 179 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25 78 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e python-XStatic-jquery-ui-1.12.0.1-4.fc25 21 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7dbbbafea6 runc-1.0.0-7.git6394544.fc25.2 17 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ec3c82e64d libstaroffice-0.0.3-3.fc25 17 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f nodejs-brace-expansion-1.1.7-1.fc25 14 https://bodhi.fedoraproject.org/updates/FEDORA-2017-63789c8c29 tomcat-8.0.44-1.fc25 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bcfa3569d6 libmwaw-0.3.11-3.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-62aacc1474 mercurial-3.8.1-3.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a66e2c5b62 chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f68c93aaac kmail-16.12.3-2.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bb1ecba1bc kf5-messagelib-16.12.3-2.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a11f853361 kdepim4-4.14.10-31.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ba1399832b c-ares-1.13.0-1.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f0509fbf37 wireshark-2.2.7-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-708adeb9b6 libsndfile-1.0.28-3.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0d636042ef drupal8-8.3.4-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-cfd8b2bb23 php-horde-Horde-Image-2.5.0-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c3149b5fcb xen-4.7.2-7.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-03ef6281a8 graphite2-1.3.10-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-63aca509fb zabbix-3.0.9-1.fc25 The following Fedora 25 Critical Path updates have yet to be approved: Age URL 21 https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d530a04779 pcre2-10.23-8.fc25 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a83e0e61d6 fwupd-0.9.4-1.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bd92718a5a pungi-4.1.16-3.fc25 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-82f4a3afee storaged-2.6.2-6.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1448fa492e vim-8.0.662-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c3149b5fcb xen-4.7.2-7.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6ab3e72bd6 nfs-utils-2.1.1-5.rc4.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e9d4c821e2 flatpak-0.9.6-1.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c71743bffc acl-2.2.52-13.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-708adeb9b6 libsndfile-1.0.28-3.fc25 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-77b1d08ef3 gtk3-3.22.16-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d90aa59a73 libguestfs-1.36.5-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0187b2a605 selinux-policy-3.13.1-225.19.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-03ef6281a8 graphite2-1.3.10-1.fc25 The following builds have been pushed to Fedora 25 updates-testing cinnamon-screensaver-3.4.1-2.fc25 graphite2-1.3.10-1.fc25 libguestfs-1.36.5-1.fc25 openclonk-7.0-6.fc25 php-guzzlehttp-guzzle6-6.3.0-1.fc25 psysh-0.8.7-1.fc25 python-lib389-1.0.4-1.fc25 python-terminaltables-3.1.0-3.fc25 qpid-proton-0.17.0-3.fc25 selinux-policy-3.13.1-225.19.fc25 siril-0.9.6-1.fc25 switchboard-plug-about-0.2.3.1-1.fc25 urh-1.6.6-1.fc25 vdr-epg-daemon-1.1.118-1.fc25 vdr-live-2.3.1-1.20170519git5cb665d.fc25 zabbix-3.0.9-1.fc25 Details about builds: ================================================================================ cinnamon-screensaver-3.4.1-2.fc25 (FEDORA-2017-105df1be27) Cinnamon Screensaver -------------------------------------------------------------------------------- Update Information: Add missing python3-xapp requires -------------------------------------------------------------------------------- References: [ 1 ] Bug #1464647 - [abrt] cinnamon-screensaver: utils.py:7:<module>:ImportError: No module named 'xapp' https://bugzilla.redhat.com/show_bug.cgi?id=1464647 -------------------------------------------------------------------------------- ================================================================================ graphite2-1.3.10-1.fc25 (FEDORA-2017-03ef6281a8) Font rendering capabilities for complex non-Roman writing systems -------------------------------------------------------------------------------- Update Information: 1.3.10 - Address floating point build parameters to give consistent positioning results across platforms - Various bug fixes 1.3.9 - Add Collision COLL_ISSPACE to allow for visible spaces in collision avoidance - Add segment and pass direction information to tracing output - Bug fix rule length testing in 32-bit - Increase slanted margin distances for collision avoidance - Change kerning algorithm to simple outline expansion. Seems to make no visible difference. - Add trace2svg to test tools 1.3.8 - Various bug fixes arising from fuzzing - Fix regression that stopped piglatin from working - Make collision avoidance kerning give more regular results - Minor modification to clustering algorithm to handle variable width chars 1.3.7 - Bug fixes - Start to deprecate SegCache. This will be going away in a later release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1462966 - CVE-2017-7778: Vulnerabilities in the Graphite 2 library (update to 1.3.10) https://bugzilla.redhat.com/show_bug.cgi?id=1462966 -------------------------------------------------------------------------------- ================================================================================ libguestfs-1.36.5-1.fc25 (FEDORA-2017-d90aa59a73) Access and modify virtual machine disk images -------------------------------------------------------------------------------- Update Information: New upstream version 1.36.5. This fixes small data corruption problem in virt- resize: https://www.redhat.com/archives/libguestfs/2017-June/msg00231.html -------------------------------------------------------------------------------- ================================================================================ openclonk-7.0-6.fc25 (FEDORA-2017-5e64d1e1a4) Multiplayer action, tactics and skill game -------------------------------------------------------------------------------- Update Information: - Set main desktop file (bz#1454638) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1454638 - OpenClonk does not start under Wayland https://bugzilla.redhat.com/show_bug.cgi?id=1454638 -------------------------------------------------------------------------------- ================================================================================ php-guzzlehttp-guzzle6-6.3.0-1.fc25 (FEDORA-2017-c401ad5b26) PHP HTTP client library -------------------------------------------------------------------------------- Update Information: ## 6.3.0 - 2017-06-22 * Feature: force IP resolution (ipv4 or ipv6) [#1608](https://github.com/guzzle/guzzle/pull/1608), [#1659](https://github.com/guzzle/guzzle/pull/1659) * Improvement: Don't include summary in exception message when body is empty [#1621](https://github.com/guzzle/guzzle/pull/1621) * Improvement: Handle `on_headers` option in MockHandler [#1580](https://github.com/guzzle/guzzle/pull/1580) * Improvement: Added SUSE Linux CA path [#1609](https://github.com/guzzle/guzzle/issues/1609) * Improvement: Use class reference for getting the name of the class instead of using hardcoded strings [#1641](https://github.com/guzzle/guzzle/pull/1641) * Feature: Added `read_timeout` option [#1611](https://github.com/guzzle/guzzle/pull/1611) * Bug fix: PHP 7.x fixes [#1685](https://github.com/guzzle/guzzle/pull/1685), [#1686](https://github.com/guzzle/guzzle/pull/1686), [#1811](https://github.com/guzzle/guzzle/pull/1811) * Deprecation: BadResponseException instantiation without a response [#1642](https://github.com/guzzle/guzzle/pull/1642) * Feature: Added NTLM auth [#1569](https://github.com/guzzle/guzzle/pull/1569) * Feature: Track redirect HTTP status codes [#1711](https://github.com/guzzle/guzzle/pull/1711) * Improvement: Check handler type during construction [#1745](https://github.com/guzzle/guzzle/pull/1745) * Improvement: Always include the Content-Length if there's a body [#1721](https://github.com/guzzle/guzzle/pull/1721) * Feature: Added convenience method to access a cookie by name [#1318](https://github.com/guzzle/guzzle/pull/1318) * Bug fix: Fill `CURLOPT_CAPATH` and `CURLOPT_CAINFO` properly [#1684](https://github.com/guzzle/guzzle/pull/1684) * Improvement: Use `\GuzzleHttp\Promise\rejection_for` function instead of object init [#1827](https://github.com/guzzle/guzzle/pull/1827) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1464283 - php-guzzlehttp-guzzle6-6.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1464283 -------------------------------------------------------------------------------- ================================================================================ psysh-0.8.7-1.fc25 (FEDORA-2017-f98db2f1fc) A runtime developer console, interactive debugger and REPL for PHP -------------------------------------------------------------------------------- Update Information: ## v0.8.7 * Handle missing files in `require` more gracefully (Thanks @Markcial!) * Move `Psy\Shell::debug()` to `Psy\debug()` to match `Psy\sh()` and `Psy\info()`. * Fix `array_multisort` pass-by-reference validation. * Add support for private constant validation in PHP 7.1. ## v0.8.6 ### New * Add `show --ex` for showing context for the last exception. * Show call context (whereami) for debug sessions. ### Improved * Fix using exit or die as an expression (Thanks @zonuexe!) * Fix exceptions during autocomplete on some Windows installs. * Don't show the current `hist` call in the history results. * Add a bunch of missing line numbers on fatal errors. * Documentation overhaul. ## v0.8.5 * Fix namespace handling regression caused by [49c936e](https://githu b.com/bobthecow/psysh/commit/49c936e4c4b9965e43f42479b044dd0829cdbc56). * Add a code cleaner pass to handle `break` and `continue` outside of loop contexts. * Improve `wtf` trace UX. * Exclude execution loop file name from `eval()` lines in traces. * Add a few more integrations to the README. ## v0.8.4 ### New * Add code argument support to commands. Use this for great justice. * Add a `sudo` command. Check it out. I promise you won't be disappointed. ### Improved * Don't show `=> null` for code with no return value. Because it was a lie. * Add `--grep`, `--insensitive` and `--invert` filter options to `trace` and `wtf?` commands. * Include previous exceptions in `wtf?` output. * Show default values for props in `ls ClassName`. * Various and sundry code cleanup. Seriously. Check out `sudo`. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1450707 - psysh-0.8.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1450707 -------------------------------------------------------------------------------- ================================================================================ python-lib389-1.0.4-1.fc25 (FEDORA-2017-1e52ff27ab) A library for accessing, testing, and configuring the 389 Directory Server -------------------------------------------------------------------------------- Update Information: Bump verson to 1.0.4-1 -------------------------------------------------------------------------------- ================================================================================ python-terminaltables-3.1.0-3.fc25 (FEDORA-2017-6b871efdae) Generate tables in terminals from list of strings -------------------------------------------------------------------------------- Update Information: Importing new package: terminaltables -------------------------------------------------------------------------------- References: [ 1 ] Bug #1451054 - Review Request: python-terminaltables - Generate tables in terminals from list of strings https://bugzilla.redhat.com/show_bug.cgi?id=1451054 [ 2 ] Bug #1444610 - new mycli needs python-terminaltables https://bugzilla.redhat.com/show_bug.cgi?id=1444610 -------------------------------------------------------------------------------- ================================================================================ qpid-proton-0.17.0-3.fc25 (FEDORA-2017-312ab8fc17) A high performance, lightweight messaging library -------------------------------------------------------------------------------- Update Information: Removed .hpp files from qpid-proton-c-devel RPM. -------------------------------------------------------------------------------- ================================================================================ selinux-policy-3.13.1-225.19.fc25 (FEDORA-2017-0187b2a605) SELinux policy configuration -------------------------------------------------------------------------------- Update Information: More info here: https://koji.fedoraproject.org/koji/buildinfo?buildID=910753 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1463681 - SELinux is preventing ModemManager from 'write' accesses on the file raw_ip. https://bugzilla.redhat.com/show_bug.cgi?id=1463681 [ 2 ] Bug #1460720 - SELinux is denying rpcbind from creating a direcory in /run https://bugzilla.redhat.com/show_bug.cgi?id=1460720 [ 3 ] Bug #1426953 - None https://bugzilla.redhat.com/show_bug.cgi?id=1426953 -------------------------------------------------------------------------------- ================================================================================ siril-0.9.6-1.fc25 (FEDORA-2017-d68cda9c6c) Astronomical image processing software -------------------------------------------------------------------------------- Update Information: New upstream release 0.9.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1463425 - New version of Siril https://bugzilla.redhat.com/show_bug.cgi?id=1463425 -------------------------------------------------------------------------------- ================================================================================ switchboard-plug-about-0.2.3.1-1.fc25 (FEDORA-2017-e35e9dcedd) Switchboard System Information plug -------------------------------------------------------------------------------- Update Information: Update to version 0.2.3.1. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1464102 - switchboard-plug-about-0.2.3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1464102 -------------------------------------------------------------------------------- ================================================================================ urh-1.6.6-1.fc25 (FEDORA-2017-9ebde1f6c3) Universal Radio Hacker: investigate wireless protocols like a boss -------------------------------------------------------------------------------- Update Information: This is new package Universal Radio Hacker. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1432076 - Review Request: urh - Universal Radio Hacker: investigate wireless protocols like a boss https://bugzilla.redhat.com/show_bug.cgi?id=1432076 -------------------------------------------------------------------------------- ================================================================================ vdr-epg-daemon-1.1.118-1.fc25 (FEDORA-2017-08e6b75090) A daemon to download EPG data from internet and manage it in a mysql database -------------------------------------------------------------------------------- Update Information: - Update to 1.1.118 - Set INIT_SYSTEM to systemd in Make.config as default -------------------------------------------------------------------------------- ================================================================================ vdr-live-2.3.1-1.20170519git5cb665d.fc25 (FEDORA-2017-f64dff6897) An interactive web interface for VDR -------------------------------------------------------------------------------- Update Information: Update to recent git 2.3.1-1.20170619git5cb665d -------------------------------------------------------------------------------- ================================================================================ zabbix-3.0.9-1.fc25 (FEDORA-2017-63aca509fb) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information: - http://www.zabbix.com/rn3.0.8 - http://www.zabbix.com/rn3.0.9 - https://www.zabbix.com/documentation/3.0/manual/introduction/whatsnew308 - https://www.zabbix.com/documentation/3.0/manual/introduction/whatsnew309 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1448392 - CVE-2017-2824 zabbix: Multiple vulnerabilities https://bugzilla.redhat.com/show_bug.cgi?id=1448392 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx