The following Fedora 26 Security updates need testing: Age URL 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2ae4a42cd4 wordpress-4.7.3-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a861eb07ee icoutils-0.31.2-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-23535a31f8 libupnp-1.6.21-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-da50233929 sscg-2.0.3-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ffd4a36f09 thunderbird-45.8.0-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-45ebf1e164 knot-resolver-1.2.4-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-748f2e67d7 php-onelogin-php-saml-2.10.4-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-07c8f3ea2b rkward-0.6.5-5.fc26 rpy-2.8.5-3.fc26 R-3.3.3-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-09f65e5e00 libXdmcp-1.1.2-5.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7ac378e011 libICE-1.0.9-8.fc26 The following Fedora 26 Critical Path updates have yet to be approved: Age URL 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bf0adb82c1 libtevent-0.9.31-4.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2c7a774f26 js-1.8.5-27.fc26 pam-1.3.0-2.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f4268a8102 gcc-7.0.1-0.12.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-52e704bb92 selinux-policy-3.13.1-244.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-53b8a32d5a flatpak-0.8.4-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c5e572f32b samba-4.6.0-3.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5a1773a5d1 baloo-widgets-16.12.3-1.fc26 dolphin-16.12.3-1.fc26 dolphin-plugins-16.12.3-1.fc26 kate-16.12.3-1.fc26 kdelibs-4.14.30-1.fc26 kde-runtime-16.12.3-1.fc26 konsole5-16.12.3-1.fc26 khelpcenter-16.12.3-1.fc26 kde-l10n-16.12.3-1.fc26 konqueror-16.12.3-1.fc26 kfind-16.12.3-1.fc26 keditbookmarks-16.12.3-1.fc26 kdialog-16.12.3-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2ad09f3011 coreutils-8.27-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0a6a34a726 libepoxy-1.4.1-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-264354dd11 mutter-3.23.91-3.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ffd4a36f09 thunderbird-45.8.0-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-764d09cea5 libxslt-1.1.29-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-328842aed1 curl-7.53.1-3.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-717259858a perl-5.24.1-390.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e880d818c2 krb5-1.15.1-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-39782730a2 livecd-tools-24.2-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8a70348517 vim-8.0.427-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bccc719e38 hwdata-0.298-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7ac378e011 libICE-1.0.9-8.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-09f65e5e00 libXdmcp-1.1.2-5.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3642b9b1ba libiptcdata-1.0.4-16.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccffd463e2 v4l-utils-1.12.3-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3ef1240c14 python-idna-2.5-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-31982e21b7 ostree-2017.3-2.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-86ffc76a09 ibus-1.5.15-3.fc26 The following builds have been pushed to Fedora 26 updates-testing Agda-2.5.2-5.fc26.1 Agda-stdlib-0.13-1.fc26 haskell-platform-2017.8.0.2-6.fc26 heaptrack-1.0.0-1.fc26 ibus-1.5.15-3.fc26 libICE-1.0.9-8.fc26 libXdmcp-1.1.2-5.fc26 libsodium-1.0.12-1.fc26 perl-Text-Glob-0.11-1.fc26 rubygem-parseconfig-1.0.8-1.fc26 tomcatjss-7.2.0-1.fc26 Details about builds: ================================================================================ Agda-2.5.2-5.fc26.1 (FEDORA-2017-f4c32334cc) A dependently typed functional programming language and proof assistant -------------------------------------------------------------------------------- Update Information: - Update Agda to 2.5.2 - Compile .agda files - update agda-stdlib to 0.13 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1224825 - Agda-2.5.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1224825 [ 2 ] Bug #1423208 - Agda-stdlib: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1423208 -------------------------------------------------------------------------------- ================================================================================ Agda-stdlib-0.13-1.fc26 (FEDORA-2017-f4c32334cc) Agda standard libraries -------------------------------------------------------------------------------- Update Information: - Update Agda to 2.5.2 - Compile .agda files - update agda-stdlib to 0.13 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1224825 - Agda-2.5.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1224825 [ 2 ] Bug #1423208 - Agda-stdlib: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1423208 -------------------------------------------------------------------------------- ================================================================================ haskell-platform-2017.8.0.2-6.fc26 (FEDORA-2017-f86736c64a) Standard Haskell distribution -------------------------------------------------------------------------------- Update Information: Update to 8.0.2 Haskell Platform 8.0.2 formally only provides alex, cabal- install, happy, hscolour (and stack), but also still bundles a bunch of libraries -------------------------------------------------------------------------------- References: [ 1 ] Bug #1372527 - OpenGLRaw fails to build on armv7hl: "fork: resource exhausted" https://bugzilla.redhat.com/show_bug.cgi?id=1372527 -------------------------------------------------------------------------------- ================================================================================ heaptrack-1.0.0-1.fc26 (FEDORA-2017-5b6a410ece) A heap memory profiler for Linux -------------------------------------------------------------------------------- Update Information: Heaptrack traces all memory allocations and annotates these events with stack traces.Dedicated analysis tools then allow you to interpret the heap memory profile to: - find hotspots that need to be optimized to reduce the memory footprint of your application - find memory leaks, i.e. locations that allocate memory which is never deallocated - find allocation hotspots, i.e. code locations that trigger a lot of memory allocation calls - find temporary allocations, which are allocations that are directly followed by their deallocation -------------------------------------------------------------------------------- References: [ 1 ] Bug #1431019 - Review Request: heaptrack - A heap memory profiler for Linux https://bugzilla.redhat.com/show_bug.cgi?id=1431019 -------------------------------------------------------------------------------- ================================================================================ ibus-1.5.15-3.fc26 (FEDORA-2017-86ffc76a09) Intelligent Input Bus for Linux OS -------------------------------------------------------------------------------- Update Information: Fixed ibus_emojier_run() SIGABRT with `ibus emoji` Enhanced theme color on emoji candidates -------------------------------------------------------------------------------- References: [ 1 ] Bug #1430290 - [abrt] ibus: ibus_emojier_run(): ibus killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=1430290 -------------------------------------------------------------------------------- ================================================================================ libICE-1.0.9-8.fc26 (FEDORA-2017-7ac378e011) X.Org X11 ICE runtime library -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-2626 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1427715 - CVE-2017-2626 libICE: weak entropy usage in session keys [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1427715 -------------------------------------------------------------------------------- ================================================================================ libXdmcp-1.1.2-5.fc26 (FEDORA-2017-09f65e5e00) X Display Manager Control Protocol library -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-2625 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1427716 - CVE-2017-2625 libXdmcp: weak entropy usage for session keys [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1427716 -------------------------------------------------------------------------------- ================================================================================ libsodium-1.0.12-1.fc26 (FEDORA-2017-efcffe9cb5) The Sodium crypto library -------------------------------------------------------------------------------- Update Information: ** Version 1.0.12** - Ed25519ph was implemented, adding a multi-part signature API (`crypto_sign_init()`, `crypto_sign_update()`, `crypto_sign_final_*()`). - New constants and related accessors have been added for Scrypt and Argon2. - XChaCha20 has been implemented. Like XSalsa20, this construction extends the ChaCha20 cipher to accept a 192-bit nonce. This makes it safe to use ChaCha20 with random nonces. - `crypto_secretbox`, `crypto_box` and `crypto_aead` now offer variants leveraging XChaCha20. - SHA-2 is about 20% faster, which also gives a speed boost to signature and signature verification. - AVX2 implementations of Salsa20 and ChaCha20 have been added. They are twice as fast as the SSE2 implementations. The speed gain is even more significant on Windows, that previously didn't use vectorized implementations. - New high-level API: `crypto_kdf`, to easily derive one or more subkeys from a master key. - Siphash with a 128-bit output has been implemented, and is available as `crypto_shorthash_siphashx_*`. - New `*_keygen()` helpers functions have been added to create secret keys for all constructions. This improves code clarity and can prevent keys from being partially initialized. - A new `randombytes_buf_deterministic()` function was added to deterministically fill a memory region with pseudorandom data. This function can especially be useful to write reproducible tests. - A preliminary `crypto_kx_*()` API was added to compute shared session keys. - AVX2 detection is more reliable. - The pthreads library is not required any more when using MingW. - `contrib/Findsodium.cmake` was added as an example to include libsodium in a project using cmake. - Compatibility with gcc 2.x has been restored. - Minimal builds can be checked using `sodium_library_minimal()`. - The `--enable-opt` compilation switch has become compatible with more platforms. - Android builds are now using clang on platforms where it is available. -------------------------------------------------------------------------------- ================================================================================ perl-Text-Glob-0.11-1.fc26 (FEDORA-2017-7d48a06b80) Perl module to match globbing patterns against text -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ================================================================================ rubygem-parseconfig-1.0.8-1.fc26 (FEDORA-2017-12b84174a4) Config File Parser for Standard Unix/Linux Type Config Files -------------------------------------------------------------------------------- Update Information: Update to 1.0.8 -------------------------------------------------------------------------------- ================================================================================ tomcatjss-7.2.0-1.fc26 (FEDORA-2017-a6d36fe632) JSSE implementation using JSS for Tomcat -------------------------------------------------------------------------------- Update Information: tomcatjss Pagure Issue #6 - Rebase tomcatjss to 7.2.0 in Fedora 25+ -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
