The following Fedora 25 Security updates need testing: Age URL 218 https://bodhi.fedoraproject.org/updates/FEDORA-2016-d79ba708cb exim-4.87.1-1.fc25 117 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2d17af41e python-XStatic-jquery-ui-1.12.0.1-4.fc25 56 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d7498559f nodejs-brace-expansion-1.1.7-1.fc25 21 https://bodhi.fedoraproject.org/updates/FEDORA-2017-90ad72e684 irssi-1.0.4-1.fc25 21 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c844713925 qt5-qtwebkit-5.212.0-0.5.alpha2.fc25 21 https://bodhi.fedoraproject.org/updates/FEDORA-2017-33c8085c5d groovy18-1.8.9-28.fc25 16 https://bodhi.fedoraproject.org/updates/FEDORA-2017-86cfcbbae8 libstaroffice-0.0.4-1.fc25 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-82b5035f76 chicken-4.12.0-3.fc25 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-99c0118c0c memcached-1.4.39-1.fc25 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-fe04b06b64 python-tablib-0.11.5-1.fc25 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b9e4c24094 subversion-1.9.6-2.fc25 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7c039552fa community-mysql-5.7.19-1.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2232fe97b4 docker-distribution-2.6.2-1.git48294d9.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-01ce69c6bf rt-4.4.1-9.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a1fe6d2b86 nasm-2.13.01-3.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-56b8f257af sscep-0.6.1-5.20160525git2052ee1.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7faa3d2e78 ruby-2.3.3-62.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ed31e1f941 remmina-1.2.0-0.39.20170724git0387ee0.fc25 freerdp-2.0.0-31.20170724gitf8c9f43.fc25 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4ede204115 python-dbusmock-0.11.1-6.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-85eb9f7a36 supervisor-3.2.4-1.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-127e76d78d cacti-1.1.16-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-be3df4fe14 java-1.8.0-openjdk-aarch32-1.8.0.141-1.170721.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b9433ad88e knot-resolver-1.3.2-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b812362f61 php-horde-Horde-Core-2.30.0-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-26f9e09c8a php-horde-Horde-Form-2.0.18-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-17f457262c php-horde-Horde-Url-2.2.6-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7c19905c9b php-horde-horde-5.2.16-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-692c05119d php-horde-kronolith-4.2.22-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-34d34904f5 php-horde-nag-4.2.15-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-449b22158f php-horde-turba-4.2.20-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ff06ff0ec9 gsoap-2.8.30-2.fc25 The following Fedora 25 Critical Path updates have yet to be approved: Age URL 60 https://bodhi.fedoraproject.org/updates/FEDORA-2017-613a72e282 lorax-25.22-1.fc25 16 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e2312ac9d9 pungi-4.1.17-1.fc25 13 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b67562744 ca-certificates-2017.2.16-1.0.fc25 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-91b708222e sssd-1.15.3-1.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3c4c65666b vim-8.0.823-1.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-47ab4eb28e dbus-1.11.16-1.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6ba3c7e68e pcre2-10.23-9.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-14f47083d7 gdisk-1.0.3-2.fc25 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bda5c103f3 file-5.29-7.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-35ca60d005 upower-0.99.5-1.fc25.1 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f6246f77bc hwdata-0.303-1.fc25 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bed0d7ff15 libidn2-2.0.3-1.fc25 The following builds have been pushed to Fedora 25 updates-testing COPASI-4.20.158-2.fc25 amsynth-1.8.0-2.fc25 audience-0.2.3-1.fc25 cppcheck-1.80-1.fc25 domoticz-3.8153-2.fc25 electrum-2.9.0-1.fc25 foo2zjs-0.20170412-4.fc25 golang-github-xtaci-kcp-go-3.18-1.fc25 gsequencer-0.9.3-1.fc25 gsoap-2.8.30-2.fc25 hyperscan-4.5.2-1.fc25 irssi-xmpp-0.53-1.fc25 knot-resolver-1.3.2-1.fc25 magic-8.1.183-1.fc25 openzwave-1.5.0-0.20170724gitde1c0e6.fc25 pass-1.7.1-4.fc25 php-7.0.22-1.fc25 php-horde-Horde-Browser-2.0.14-1.fc25 php-horde-Horde-Core-2.30.0-1.fc25 php-horde-Horde-Form-2.0.18-1.fc25 php-horde-Horde-Imap-Client-2.29.14-1.fc25 php-horde-Horde-Url-2.2.6-1.fc25 php-horde-horde-5.2.16-1.fc25 php-horde-imp-6.2.20-1.fc25 php-horde-kronolith-4.2.22-1.fc25 php-horde-nag-4.2.15-1.fc25 php-horde-turba-4.2.20-1.fc25 python-jwcrypto-0.4.2-3.fc25 python-sqlalchemy-1.0.18-1.fc25 qmapshack-1.9.0-1.fc25 tetrominos-1.0.1-1.fc25 uid_wrapper-1.2.4-1.fc25 upower-0.99.5-1.fc25.1 vdr-epg-daemon-1.1.122-1.fc25 xcircuit-3.9.68-1.fc25 xscreensaver-5.37-4.fc25 Details about builds: ================================================================================ COPASI-4.20.158-2.fc25 (FEDORA-2017-1080bc3f27) Biochemical network simulator -------------------------------------------------------------------------------- Update Information: - Make a new conditional macro to control stripping of symbols from object files - 4.20.158-1 - Update to version 4.20 -build 158 - Debuginfo packages built -------------------------------------------------------------------------------- ================================================================================ amsynth-1.8.0-2.fc25 (FEDORA-2017-e668fabef9) A classic synthesizer with dual oscillators -------------------------------------------------------------------------------- Update Information: Fix #1476525 -------------------------------------------------------------------------------- ================================================================================ audience-0.2.3-1.fc25 (FEDORA-2017-7f2e7f7a90) Audience video player -------------------------------------------------------------------------------- Update Information: Update to version 0.2.3. -------------------------------------------------------------------------------- ================================================================================ cppcheck-1.80-1.fc25 (FEDORA-2017-c098299dc2) Tool for static C/C++ code analysis -------------------------------------------------------------------------------- Update Information: 1.80 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476472 - cppcheck-1.80 is available https://bugzilla.redhat.com/show_bug.cgi?id=1476472 -------------------------------------------------------------------------------- ================================================================================ domoticz-3.8153-2.fc25 (FEDORA-2017-dd5c38718f) Open source Home Automation System -------------------------------------------------------------------------------- Update Information: Version 3.8153 (July 30th 2017) - Fixed: Camera Editor, will now always refresh thumbnail in table - Fixed: Devices could become invisible when a scene/group was added to the 'hidden devices' room plan with the same idx - Fixed: JSon float/nan value, solved by upgrading JSonCPP - Fixed: OZW, when a value is updated and the sensor did not exists before (for example a kWh sensor), it is created (saves a restart) - Fixed: Daemonize compatible with Systemd forking type - Changed: Blinds T5 till T13 new DeviceID generation, could cause new sensors - Changed: Lessen rounding errors for computed energy - Changed: Minimized On/Off/Script execution time - Changed: SolarEdgeAPI, now only needs API Key - Changed: Support symlinks for plugin and theme directories - Changed: Switch type 'Door Lock' renamed to 'Door Contact' - Changed: Temperature Only charts will not display the Humidity axis - Changed: Wind Direction Graph, if sensor does not supports 'Gust', the 'Speed' value is used - Changed: Updated OpenZWave (and configuration files) - Implemented: Added a new parameter to disable the logging of event script triggers 'Script event triggered: ...' - Implemented: AppLamp/LimitLess bridge V6.0 RGBW/RGBWW - Implemented: Blinds T1 till T13 new supports the Stop button - Implemented: Blockly/Lua Set SetPoint option - Implemented: Devices, Log icon for Blinds - Implemented: Dummy Hardware, Temp+Baro - Implemented: Estonian Language support (big thanks to Kuido) - Implemented: EvohomeWeb support (Thanks to Gordon3!) - Implemented: General/Text sensor now able to be shared - Implemented: I2C BME280 sensor (temp+hum+baro) - Implemented: I2C for non arm systems - Implemented: InfluxDB Data push - Implemented: Latvian Language support (big thanks to Edgars) - Implemented: Netatmo Home Coach support - Implemented: Notification for Dummy Soil/Moisture sensor - Implemented: Notification for Dummy Temp/Hum/Baro sensor - Implemented: Notification for Alert Sensor via udevice JSON call - Implemented: Onkyo AV Receiver (Thanks to dwmw2!) - Implemented: Option to replace an Meter device - Implemented: OZW, Added support for Atmospheric Pressure sensor - Implemented: Python Plugin System - Implemented: RFXtrx Lucci Fan implemented - Implemented: RFXtrx RFY2 protocol implemented - Implemented: RFXtrx Kangtai / Cotech implemented - Implemented: RTL433 (Thanks to Petri Ahone!) - Implemented: SolarEdgeAPI, support for multiple inverters - Implemented: Support for Ble Box hardware - Implemented: Support for different usage/return costs for electricity - Implemented: Support for Intergas InComfort LAN2RF Gateway - Implemented: Support for Open Weather Map - Implemented: Support for Open Web Net - Implemented: Support for XiaomiGateway Gateway - Implemented: Support for YeeLight - Implemented: Support for Youless LS120 - Implemented: Switch type 'Door Lock' - Implemented: SysFS GPIO (Thanks to hvbommel/jvandenbroek!) - Implemented: Teleinfo : Added a switch indicating the current cost slot - Implemented: Timer Plan editor - Removed: Razberry ZWave handling method. Existing users need to migrate to OpenZWave -------------------------------------------------------------------------------- ================================================================================ electrum-2.9.0-1.fc25 (FEDORA-2017-578a9839a2) A lightweight Bitcoin Client -------------------------------------------------------------------------------- Update Information: Updated to upstream 2.9.0 -------------------------------------------------------------------------------- ================================================================================ foo2zjs-0.20170412-4.fc25 (FEDORA-2017-af34994af9) Linux printer driver for ZjStream protocol -------------------------------------------------------------------------------- Update Information: Add some ICC profiles and firmware files -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476598 - No ICM profiles in installs (foo2qpdl) https://bugzilla.redhat.com/show_bug.cgi?id=1476598 -------------------------------------------------------------------------------- ================================================================================ golang-github-xtaci-kcp-go-3.18-1.fc25 (FEDORA-2017-69565c7068) Production-Grade Reliable-UDP Library for golang -------------------------------------------------------------------------------- Update Information: Update to version 3.18 (commit ecbba09). -------------------------------------------------------------------------------- ================================================================================ gsequencer-0.9.3-1.fc25 (FEDORA-2017-20264fa200) Advanced Gtk+ Sequencer audio processing engine -------------------------------------------------------------------------------- Update Information: modified version because bug fixes available ---- modified version because new features available -------------------------------------------------------------------------------- ================================================================================ gsoap-2.8.30-2.fc25 (FEDORA-2017-ff06ff0ec9) Generator Tools for Coding SOAP/XML Web Services in C and C++ -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-9765. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1472809 - CVE-2017-9765 gsoap: Stack-based buffer overflow when receieving XML message with size larger than 2GB [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1472809 -------------------------------------------------------------------------------- ================================================================================ hyperscan-4.5.2-1.fc25 (FEDORA-2017-a997625238) High-performance regular expression matching library -------------------------------------------------------------------------------- Update Information: upstream bugfix release -------------------------------------------------------------------------------- ================================================================================ irssi-xmpp-0.53-1.fc25 (FEDORA-2017-583727cff6) XMPP plugin into irssi -------------------------------------------------------------------------------- Update Information: Update to latest upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1423746 - irssi-xmpp: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1423746 [ 2 ] Bug #1323612 - abi incompatibility after recent irssi upgrade https://bugzilla.redhat.com/show_bug.cgi?id=1323612 -------------------------------------------------------------------------------- ================================================================================ knot-resolver-1.3.2-1.fc25 (FEDORA-2017-b9433ad88e) Caching full DNS Resolver -------------------------------------------------------------------------------- Update Information: New upstream release: -------------------------------------------------------------------------------- ================================================================================ magic-8.1.183-1.fc25 (FEDORA-2017-dd3f3e8503) A very capable VLSI layout tool -------------------------------------------------------------------------------- Update Information: New version 8.1.183 is released. -------------------------------------------------------------------------------- ================================================================================ openzwave-1.5.0-0.20170724gitde1c0e6.fc25 (FEDORA-2017-dd5c38718f) Sample Executables for OpenZWave -------------------------------------------------------------------------------- Update Information: Version 3.8153 (July 30th 2017) - Fixed: Camera Editor, will now always refresh thumbnail in table - Fixed: Devices could become invisible when a scene/group was added to the 'hidden devices' room plan with the same idx - Fixed: JSon float/nan value, solved by upgrading JSonCPP - Fixed: OZW, when a value is updated and the sensor did not exists before (for example a kWh sensor), it is created (saves a restart) - Fixed: Daemonize compatible with Systemd forking type - Changed: Blinds T5 till T13 new DeviceID generation, could cause new sensors - Changed: Lessen rounding errors for computed energy - Changed: Minimized On/Off/Script execution time - Changed: SolarEdgeAPI, now only needs API Key - Changed: Support symlinks for plugin and theme directories - Changed: Switch type 'Door Lock' renamed to 'Door Contact' - Changed: Temperature Only charts will not display the Humidity axis - Changed: Wind Direction Graph, if sensor does not supports 'Gust', the 'Speed' value is used - Changed: Updated OpenZWave (and configuration files) - Implemented: Added a new parameter to disable the logging of event script triggers 'Script event triggered: ...' - Implemented: AppLamp/LimitLess bridge V6.0 RGBW/RGBWW - Implemented: Blinds T1 till T13 new supports the Stop button - Implemented: Blockly/Lua Set SetPoint option - Implemented: Devices, Log icon for Blinds - Implemented: Dummy Hardware, Temp+Baro - Implemented: Estonian Language support (big thanks to Kuido) - Implemented: EvohomeWeb support (Thanks to Gordon3!) - Implemented: General/Text sensor now able to be shared - Implemented: I2C BME280 sensor (temp+hum+baro) - Implemented: I2C for non arm systems - Implemented: InfluxDB Data push - Implemented: Latvian Language support (big thanks to Edgars) - Implemented: Netatmo Home Coach support - Implemented: Notification for Dummy Soil/Moisture sensor - Implemented: Notification for Dummy Temp/Hum/Baro sensor - Implemented: Notification for Alert Sensor via udevice JSON call - Implemented: Onkyo AV Receiver (Thanks to dwmw2!) - Implemented: Option to replace an Meter device - Implemented: OZW, Added support for Atmospheric Pressure sensor - Implemented: Python Plugin System - Implemented: RFXtrx Lucci Fan implemented - Implemented: RFXtrx RFY2 protocol implemented - Implemented: RFXtrx Kangtai / Cotech implemented - Implemented: RTL433 (Thanks to Petri Ahone!) - Implemented: SolarEdgeAPI, support for multiple inverters - Implemented: Support for Ble Box hardware - Implemented: Support for different usage/return costs for electricity - Implemented: Support for Intergas InComfort LAN2RF Gateway - Implemented: Support for Open Weather Map - Implemented: Support for Open Web Net - Implemented: Support for XiaomiGateway Gateway - Implemented: Support for YeeLight - Implemented: Support for Youless LS120 - Implemented: Switch type 'Door Lock' - Implemented: SysFS GPIO (Thanks to hvbommel/jvandenbroek!) - Implemented: Teleinfo : Added a switch indicating the current cost slot - Implemented: Timer Plan editor - Removed: Razberry ZWave handling method. Existing users need to migrate to OpenZWave -------------------------------------------------------------------------------- ================================================================================ pass-1.7.1-4.fc25 (FEDORA-2017-6942e086cf) A password manager using standard Unix tools -------------------------------------------------------------------------------- Update Information: - Require git-core instead of git rhbz#1471608 - Add passmenu subpackage rhbz#1474833 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1474833 - add passmenu subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1474833 [ 2 ] Bug #1471608 - pass: change requires from git to git-core https://bugzilla.redhat.com/show_bug.cgi?id=1471608 -------------------------------------------------------------------------------- ================================================================================ php-7.0.22-1.fc25 (FEDORA-2017-3da3c0556c) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information: **PHP version 7.0.22** (03 Aug 2017) **Core:** * Fixed bug php#74832 (Loading PHP extension with already registered function name leads to a crash). (jpauli) * Fixed bug php#74780 (parse_url() borken when query string contains colon). (jhdxr) * Fixed bug php#74761 (Unary operator expected error on some systems). (petk) * Fixed bug php#73900 (Use After Free in unserialize() SplFixedArray). (nikic) * Fixed bug php#74913 (fixed incorrect poll.h include). (petk) * Fixed bug php#74906 (fixed incorrect errno.h include). (petk) **Date:** * Fixed bug php#74852 (property_exists returns true on unknown DateInterval property). (jhdxr) **Opcache:** * Fixed bug php#74840 (Opcache overwrites argument of GENERATOR_RETURN within finally). (Bob) **PDO:** * Fixed bug php#69356 (PDOStatement::debugDumpParams() truncates query). (Adam Baratz) **SPL:** * Fixed bug php#73471 (PHP freezes with AppendIterator). (jhdxr) **SQLite3:** * Fixed bug php#74883 (SQLite3::__construct() produces "out of memory" exception with invalid flags). (Anatol) **Wddx:** * Fixed bug php#73173 (huge memleak when wddx_unserialize). (tloi at fortinet dot com) **zlib:** * Fixed bug php#73944 (dictionary option of inflate_init() does not work). (wapmorgan) -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Browser-2.0.14-1.fc25 (FEDORA-2017-cc3fd79b9e) Horde Browser API -------------------------------------------------------------------------------- Update Information: **Horde_Browser 2.0.14** * [jan] Filter out control characters from file names when sending download headers. -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Core-2.30.0-1.fc25 (FEDORA-2017-b812362f61) Horde Core Framework libraries -------------------------------------------------------------------------------- Update Information: **Horde_Core 2.30.0** * [jan] SECURITY: Fix XSS vulnerability with pathinfo component in Horde::selfUrl(). * [jan] Deprecate Horde::redirect(). * [jan] Add Horde::signUrl() and Horde::verifySignedUrl(). -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Form-2.0.18-1.fc25 (FEDORA-2017-26f9e09c8a) Horde Form API -------------------------------------------------------------------------------- Update Information: **Horde_Form 2.0.18** * [jan] SECURITY: Fix XSS vulnerability with form sections. -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Imap-Client-2.29.14-1.fc25 (FEDORA-2017-92937d6290) Horde IMAP abstraction interface -------------------------------------------------------------------------------- Update Information: **Horde_Imap_Client 2.29.14** * [jan] Fix check if QRESYNC is enabled in vanished() (i.badamshin). -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Url-2.2.6-1.fc25 (FEDORA-2017-17f457262c) Horde Url class -------------------------------------------------------------------------------- Update Information: **Horde_Url 2.2.6** * [jan] SECURITY: Fix XSS vulnerability with pathinfo component in toString(). -------------------------------------------------------------------------------- ================================================================================ php-horde-horde-5.2.16-1.fc25 (FEDORA-2017-7c19905c9b) Horde Application Framework -------------------------------------------------------------------------------- Update Information: **horde 5.2.16** * [jan] SECURITY: Fix open redirects. -------------------------------------------------------------------------------- ================================================================================ php-horde-imp-6.2.20-1.fc25 (FEDORA-2017-4c10e7a295) A web based webmail system -------------------------------------------------------------------------------- Update Information: **imp 6.2.20** * [jan] Fix finding reply or forward text from signed or encrypted messages with HTML content again (Bug #14656). * [mjr] Fix issue with reattaching a file after removing it on Chrome browsers (Bug #14657), * [jan] Allow Command-C to copy text from HTML message previews (Bug #14653). -------------------------------------------------------------------------------- ================================================================================ php-horde-kronolith-4.2.22-1.fc25 (FEDORA-2017-692c05119d) A web based calendar -------------------------------------------------------------------------------- Update Information: **kronolith 4.2.22** * [jan] SECURITY: Fix open redirects. * [mjr] Prevent broken iCalendar files from causing fatal errors (Bug #14672). * [jan] Work around calendar servers advertising as CalDAV-capable, but ignoring CalDAV requests (Bug #14662). * [jan] Fix displaying yesterday's event in Prior Events portal block (admin@xxxxxxxxxxx, Bug #14638). -------------------------------------------------------------------------------- ================================================================================ php-horde-nag-4.2.15-1.fc25 (FEDORA-2017-34d34904f5) A web based task list manager -------------------------------------------------------------------------------- Update Information: **nag 4.2.15** * [jan] SECURITY: Fix open redirects. * [mjr] Fix handling of delayed start dates (Bug #14634). -------------------------------------------------------------------------------- ================================================================================ php-horde-turba-4.2.20-1.fc25 (FEDORA-2017-449b22158f) A web based address book -------------------------------------------------------------------------------- Update Information: **turba 4.2.20** * [jan] SECURITY: Fix open redirects. * [jan] Fix creating address books with the external API. -------------------------------------------------------------------------------- ================================================================================ python-jwcrypto-0.4.2-3.fc25 (FEDORA-2017-8bc93b5692) Implements JWK, JWS, JWE specifications using python-cryptography -------------------------------------------------------------------------------- Update Information: - Upstream release 0.4.2, fixes bytes/str comparison issue - Resolves: RHBZ #1476150 - Run tests with bytes warning - Modernize spec -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476150 - Custodia does not work in Python 3 https://bugzilla.redhat.com/show_bug.cgi?id=1476150 -------------------------------------------------------------------------------- ================================================================================ python-sqlalchemy-1.0.18-1.fc25 (FEDORA-2017-f6ba038dd5) Modular and flexible ORM library for python -------------------------------------------------------------------------------- Update Information: This update contains a new upstream bugfix release. The upstream [changelog](ht tp://docs.sqlalchemy.org/en/latest/changelog/changelog_10.html#change-1.0.18) contains a list of all changes in version 1.0.18. -------------------------------------------------------------------------------- ================================================================================ qmapshack-1.9.0-1.fc25 (FEDORA-2017-7fb7b36a91) GPS mapping and management tool -------------------------------------------------------------------------------- Update Information: - updated to 1.9.0 - https://bitbucket.org/maproom/qmapshack/raw/18cf6f7dcc56b29 3e450a62a4737c07f8c6e31be/changelog.txt -------------------------------------------------------------------------------- References: [ 1 ] Bug #1474557 - qmapshack-1.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1474557 -------------------------------------------------------------------------------- ================================================================================ tetrominos-1.0.1-1.fc25 (FEDORA-2017-00766451fe) Simple CLI logical game -------------------------------------------------------------------------------- Update Information: initial version created many years ago as a school project -------------------------------------------------------------------------------- References: [ 1 ] Bug #1477137 - Review Request: tetrominos - Simple CLI logical game https://bugzilla.redhat.com/show_bug.cgi?id=1477137 -------------------------------------------------------------------------------- ================================================================================ uid_wrapper-1.2.4-1.fc25 (FEDORA-2017-939212881e) A wrapper for privilege separation -------------------------------------------------------------------------------- Update Information: Update to version 1.2.4 -------------------------------------------------------------------------------- ================================================================================ upower-0.99.5-1.fc25.1 (FEDORA-2017-35ca60d005) Power Management Service -------------------------------------------------------------------------------- Update Information: - add BR to fix build on s390x -------------------------------------------------------------------------------- ================================================================================ vdr-epg-daemon-1.1.122-1.fc25 (FEDORA-2017-4e97606d13) A daemon to download EPG data from internet and manage it in a mysql database -------------------------------------------------------------------------------- Update Information: Update to 1.1.122-1 ---- Update to 1.1.121 -------------------------------------------------------------------------------- ================================================================================ xcircuit-3.9.68-1.fc25 (FEDORA-2017-bfdc6e0d93) Electronic circuit schematic drawing program -------------------------------------------------------------------------------- Update Information: New version 3.9.68 is released. -------------------------------------------------------------------------------- ================================================================================ xscreensaver-5.37-4.fc25 (FEDORA-2017-e1ba2f993d) X screen saver and locker -------------------------------------------------------------------------------- Update Information: Some invalid stack variable usages after scope were found on xscreensaver code, which may cause unpredictable behavior. This new rpm will fix the issues. -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
