The following Fedora 26 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ab43d1d240 tnef-1.4.14-1.fc26 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f997e46fa7 python-django-1.10.7-1.fc26 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01 python-XStatic-jquery-ui-1.12.0.1-2.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2f3096ba16 php-pear-CAS-1.3.5-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e8b639c286 dovecot-2.2.29.1-1.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2e94c7b518 yara-3.5.0-7.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8150618774 mupdf-1.10a-5.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0e64c4c186 tomcat-8.0.43-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e4c6ab648b pcre2-10.23-6.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-30e042c42a mingw-gnutls-3.5.11-1.fc26 The following Fedora 26 Critical Path updates have yet to be approved: Age URL 27 https://bodhi.fedoraproject.org/updates/FEDORA-2017-90bcb067bf fedora-release-26-0.6 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c74484d3bd libfm-1.2.5-3.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-525d9c8af2 thunderbird-52.0-2.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a95a89e4ba livecd-tools-24.3-2.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-674c3c0e96 highlight-3.36-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e3034559ef garcon-0.6.0-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1918e9452a python3-3.6.1-3.fc26 python3-docs-3.6.1-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-de09f44c47 uboot-tools-2017.05-0.4.rc2.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4defa84b6d kernel-4.11.0-0.rc7.git0.1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e4c6ab648b pcre2-10.23-6.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-746673dc6e menu-cache-1.0.2-2.D20170417git54ab9e4576.fc26 The following builds have been pushed to Fedora 26 updates-testing atomic-devmode-0.3.6-1.fc26 fedfind-3.5.4-1.fc26 fts-3.6.8-1.fc26 fts-monitoring-3.6.8-1.fc26 garcon-0.6.0-1.fc26 gsignond-1.0.6-2.fc26 kernel-4.11.0-0.rc7.git0.1.fc26 libopenraw-0.1.1-1.fc26 libyui-3.3.2-1.fc26 lziprecover-1.19-1.fc26 mingw-gnutls-3.5.11-1.fc26 openqa-4.4-49.20170409gitfead7af.fc26 os-autoinst-4.4-18.20170410git97928a2.fc26 pari-2.9.2-2.fc26 pcre2-10.23-6.fc26 perl-Gearman-2.004.003-1.fc26 perl-Getopt-Lucid-1.08-1.fc26 perl-Module-Metadata-Changes-2.12-1.fc26 perl-Mojolicious-7.30-1.fc26 perl-Mojolicious-Plugin-AssetPack-1.41-1.fc26 perl-Perl-Critic-Pulp-93-1.fc26 perl-Template-Toolkit-2.27-1.fc26 perl-Test-API-0.008-1.fc26 perl-Time-HiRes-1.9742-1.fc26 pulp-2.12.2-1.fc26 python-autobahn-0.18.2-1.git731228a.fc26 python-cu2qu-1.1.1-1.fc26 python-jedi-0.10.2-1.fc26 python-mutatormath-2.0.4-1.fc26 python-txaio-2.7.0-1.fc26 python3-3.6.1-3.fc26 python3-docs-3.6.1-1.fc26 uboot-tools-2017.05-0.4.rc2.fc26 Details about builds: ================================================================================ atomic-devmode-0.3.6-1.fc26 (FEDORA-2017-8c3f41a4be) Atomic Developer Mode -------------------------------------------------------------------------------- Update Information: New upstream release. See https://github.com/projectatomic/atomic- devmode/releases/tag/v0.3.6 for full changelog. -------------------------------------------------------------------------------- ================================================================================ fedfind-3.5.4-1.fc26 (FEDORA-2017-276a80d8c6) Fedora compose and image finder -------------------------------------------------------------------------------- Update Information: This new version of fedfind handles an unusual situation where its local cache directory (which is usually `~/.cache/fedfind`, but can be a temporary directory if that location is not writeable) disappears during the lifetime of a fedfind- using process. Previously, this would cause the process to crash, as fedfind wasn't written to handle this eventuality. There are no other changes in this update. -------------------------------------------------------------------------------- ================================================================================ fts-3.6.8-1.fc26 (FEDORA-2017-d54bcb21ec) File Transfer Service V3 -------------------------------------------------------------------------------- Update Information: New upstream release 3.6.8 -------------------------------------------------------------------------------- ================================================================================ fts-monitoring-3.6.8-1.fc26 (FEDORA-2017-0afacb8e4a) FTS3 Web Application for monitoring -------------------------------------------------------------------------------- Update Information: New upstream release 3.6.8 -------------------------------------------------------------------------------- ================================================================================ garcon-0.6.0-1.fc26 (FEDORA-2017-e3034559ef) Implementation of the freedesktop.org menu specification -------------------------------------------------------------------------------- Update Information: Update to 0.6.0. -------------------------------------------------------------------------------- ================================================================================ gsignond-1.0.6-2.fc26 (FEDORA-2017-24ddc446dd) GSignOn daemon -------------------------------------------------------------------------------- Update Information: Fix subpackage descriptions. -------------------------------------------------------------------------------- ================================================================================ kernel-4.11.0-0.rc7.git0.1.fc26 (FEDORA-2017-4defa84b6d) The Linux kernel -------------------------------------------------------------------------------- Update Information: Kernel 4.11-rc7 -------------------------------------------------------------------------------- ================================================================================ libopenraw-0.1.1-1.fc26 (FEDORA-2017-20a5227d7f) Decode camera RAW files -------------------------------------------------------------------------------- Update Information: An update to the latest upstream release of libopenraw: * https://lists.freedesktop.org/archives/libopenraw-dev/2017-March/000133.html -------------------------------------------------------------------------------- ================================================================================ libyui-3.3.2-1.fc26 (FEDORA-2017-7b2b44d3f9) GUI-abstraction library -------------------------------------------------------------------------------- Update Information: * New upstream release * Set preferred UI-plugin using $YUI_PREFERRED_BACKEND in $ENV * Avoid several warnings from CMake * Improve macros-file -------------------------------------------------------------------------------- ================================================================================ lziprecover-1.19-1.fc26 (FEDORA-2017-8484e50783) Data recovery tool and decompressor for files in the lzip compressed format -------------------------------------------------------------------------------- Update Information: 1.19 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442896 - lziprecover-1.19 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442896 -------------------------------------------------------------------------------- ================================================================================ mingw-gnutls-3.5.11-1.fc26 (FEDORA-2017-30e042c42a) MinGW GnuTLS TLS/SSL encryption library -------------------------------------------------------------------------------- Update Information: Security and bug fixes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1443033 - CVE-2017-7869 gnutls: Out-of-bounds write related to the cdk_pkt_read function (GNUTLS-SA-2017-3) https://bugzilla.redhat.com/show_bug.cgi?id=1443033 -------------------------------------------------------------------------------- ================================================================================ openqa-4.4-49.20170409gitfead7af.fc26 (FEDORA-2017-2a2d78207d) OS-level automated testing framework -------------------------------------------------------------------------------- Update Information: This update provides new git snapshots of openQA and os-autoinst with various bugfixes and enhancements. It also provides bugfix updates to Mojolicious and the AssetPack plugin; the newer versions are now required by the latest openQA code. There should be no incompatible changes in either Mojolicious or AssetPack. -------------------------------------------------------------------------------- ================================================================================ os-autoinst-4.4-18.20170410git97928a2.fc26 (FEDORA-2017-2a2d78207d) OS-level test automation -------------------------------------------------------------------------------- Update Information: This update provides new git snapshots of openQA and os-autoinst with various bugfixes and enhancements. It also provides bugfix updates to Mojolicious and the AssetPack plugin; the newer versions are now required by the latest openQA code. There should be no incompatible changes in either Mojolicious or AssetPack. -------------------------------------------------------------------------------- ================================================================================ pari-2.9.2-2.fc26 (FEDORA-2017-290c2119fd) Number Theory-oriented Computer Algebra System -------------------------------------------------------------------------------- Update Information: Compat library for pari 2.7 removed. -------------------------------------------------------------------------------- ================================================================================ pcre2-10.23-6.fc26 (FEDORA-2017-e4c6ab648b) Perl-compatible regular expression library -------------------------------------------------------------------------------- Update Information: This release fixes a crash when finding a Unicode property for a character with a code point greater than 0x10ffff in UTF-32 library while UTF mode is disabled and JIT mode is enabled. It also fixes an incortect cast in UTF validation routine. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1434504 - CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2) https://bugzilla.redhat.com/show_bug.cgi?id=1434504 -------------------------------------------------------------------------------- ================================================================================ perl-Gearman-2.004.003-1.fc26 (FEDORA-2017-d2200491ac) Perl interface for Gearman distributed job system -------------------------------------------------------------------------------- Update Information: This release allows a client and worker to specify CA file parameter. ---- This release fixes bad overriding of cert_file SSL option. ---- This release fixes respeciting prefix separator to ensure persistent queue recovery. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442502 - perl-Gearman-2.004.003 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442502 [ 2 ] Bug #1441656 - perl-Gearman-2.004.002 is available https://bugzilla.redhat.com/show_bug.cgi?id=1441656 [ 3 ] Bug #1441437 - perl-Gearman-2.004.001 is available https://bugzilla.redhat.com/show_bug.cgi?id=1441437 -------------------------------------------------------------------------------- ================================================================================ perl-Getopt-Lucid-1.08-1.fc26 (FEDORA-2017-76826e5e70) Clear, readable syntax for command line processing -------------------------------------------------------------------------------- Update Information: This release fixes building on Perl without "." in @INC path. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442608 - perl-Getopt-Lucid-1.08 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442608 -------------------------------------------------------------------------------- ================================================================================ perl-Module-Metadata-Changes-2.12-1.fc26 (FEDORA-2017-3920d1b1e8) Manage a module's machine-readable Changes/CHANGES file -------------------------------------------------------------------------------- Update Information: This release corrects dependency specification. It also corrects shellbangs in the documentation. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442756 - perl-Module-Metadata-Changes-2.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442756 -------------------------------------------------------------------------------- ================================================================================ perl-Mojolicious-7.30-1.fc26 (FEDORA-2017-2a2d78207d) A next generation web framework for Perl -------------------------------------------------------------------------------- Update Information: This update provides new git snapshots of openQA and os-autoinst with various bugfixes and enhancements. It also provides bugfix updates to Mojolicious and the AssetPack plugin; the newer versions are now required by the latest openQA code. There should be no incompatible changes in either Mojolicious or AssetPack. -------------------------------------------------------------------------------- ================================================================================ perl-Mojolicious-Plugin-AssetPack-1.41-1.fc26 (FEDORA-2017-2a2d78207d) Compress and convert CSS, Less, Sass, JavaScript and CoffeeScript files -------------------------------------------------------------------------------- Update Information: This update provides new git snapshots of openQA and os-autoinst with various bugfixes and enhancements. It also provides bugfix updates to Mojolicious and the AssetPack plugin; the newer versions are now required by the latest openQA code. There should be no incompatible changes in either Mojolicious or AssetPack. -------------------------------------------------------------------------------- ================================================================================ perl-Perl-Critic-Pulp-93-1.fc26 (FEDORA-2017-f3d7b0d453) Some add-on perlcritic policies -------------------------------------------------------------------------------- Update Information: This release improves a build script. We deliver it only to provide up-to-date version string. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442380 - perl-Perl-Critic-Pulp-93 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442380 -------------------------------------------------------------------------------- ================================================================================ perl-Template-Toolkit-2.27-1.fc26 (FEDORA-2017-d4436d1bfb) Template processing system -------------------------------------------------------------------------------- Update Information: Update to 2.27. -------------------------------------------------------------------------------- ================================================================================ perl-Test-API-0.008-1.fc26 (FEDORA-2017-05cafed7df) Test a list of subroutines provided by a module -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release. -------------------------------------------------------------------------------- ================================================================================ perl-Time-HiRes-1.9742-1.fc26 (FEDORA-2017-12e547c3e3) High resolution alarm, sleep, gettimeofday, interval timers -------------------------------------------------------------------------------- Update Information: This release fixes building on Perl without "." in @INC path. It also corrects bthe build script to use safer 3-argument open() calls. We deliver it only to provide up-to-date version string. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442609 - perl-Time-HiRes-1.9742 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442609 -------------------------------------------------------------------------------- ================================================================================ pulp-2.12.2-1.fc26 (FEDORA-2017-0346dc7681) An application for managing software repositories -------------------------------------------------------------------------------- Update Information: Bumped to 2.12.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1436761 - Broken python-okaara dependency in Rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1436761 -------------------------------------------------------------------------------- ================================================================================ python-autobahn-0.18.2-1.git731228a.fc26 (FEDORA-2017-9612cba578) Python networking library for WebSocket and WAMP -------------------------------------------------------------------------------- Update Information: Update to 0.18.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442583 - python-autobahn-0.18.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442583 -------------------------------------------------------------------------------- ================================================================================ python-cu2qu-1.1.1-1.fc26 (FEDORA-2017-ebcfdf0f75) Cubic-to-quadratic bezier curve conversion -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1433760 - Review Request: python-cu2qu - Cubic-to-quadratic bezier curve conversion https://bugzilla.redhat.com/show_bug.cgi?id=1433760 -------------------------------------------------------------------------------- ================================================================================ python-jedi-0.10.2-1.fc26 (FEDORA-2017-01421140b0) An auto completion tool for Python that can be used for text editors -------------------------------------------------------------------------------- Update Information: ### [upstream changelog](https://github.com/davidhalter/jedi/blob/v0.10.2/CHANGELOG.rst) ### 0.10.2 (2017-04-05) - Python Packaging sucks. Some files were not included in 0.10.1. ### 0.10.1 (2017-04-05) - Fixed a few very annoying bugs. - Prepared the parser to be factored out of Jedi. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1438985 - python-jedi-0.10.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1438985 -------------------------------------------------------------------------------- ================================================================================ python-mutatormath-2.0.4-1.fc26 (FEDORA-2017-a2d6fe8196) Python library for piecewise linear interpolation in multiple dimensions -------------------------------------------------------------------------------- Update Information: Packaging fontmake deps -------------------------------------------------------------------------------- References: [ 1 ] Bug #1433744 - Review Request: python-mutatormath - Python library for piecewise linear interpolation in multiple dimensions https://bugzilla.redhat.com/show_bug.cgi?id=1433744 -------------------------------------------------------------------------------- ================================================================================ python-txaio-2.7.0-1.fc26 (FEDORA-2017-666fca9ada) Compatibility API between asyncio/Twisted/Trollius -------------------------------------------------------------------------------- Update Information: Update to 2.7.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1442592 - python-txaio-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1442592 -------------------------------------------------------------------------------- ================================================================================ python3-3.6.1-3.fc26 (FEDORA-2017-1918e9452a) Version 3 of the Python programming language aka Python 3000 -------------------------------------------------------------------------------- Update Information: Updating Python to a new subminor release 3.6.1 in F26 and including a fix for multilib parallel install support. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1179073 - python3-debug.i686 requires python3.i686 which is not multilib clean https://bugzilla.redhat.com/show_bug.cgi?id=1179073 [ 2 ] Bug #1435135 - ImportError: /usr/lib64/python3.6/site-packages/rpm/_rpm.cpython-36m-x86_64-linux-gnu.so: undefined symbol: PySlice_AdjustIndices https://bugzilla.redhat.com/show_bug.cgi?id=1435135 [ 3 ] Bug #1438219 - Python 3.6 installs Makefile to an incorrect config dir https://bugzilla.redhat.com/show_bug.cgi?id=1438219 -------------------------------------------------------------------------------- ================================================================================ python3-docs-3.6.1-1.fc26 (FEDORA-2017-1918e9452a) Documentation for the Python 3 programming language -------------------------------------------------------------------------------- Update Information: Updating Python to a new subminor release 3.6.1 in F26 and including a fix for multilib parallel install support. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1179073 - python3-debug.i686 requires python3.i686 which is not multilib clean https://bugzilla.redhat.com/show_bug.cgi?id=1179073 [ 2 ] Bug #1435135 - ImportError: /usr/lib64/python3.6/site-packages/rpm/_rpm.cpython-36m-x86_64-linux-gnu.so: undefined symbol: PySlice_AdjustIndices https://bugzilla.redhat.com/show_bug.cgi?id=1435135 [ 3 ] Bug #1438219 - Python 3.6 installs Makefile to an incorrect config dir https://bugzilla.redhat.com/show_bug.cgi?id=1438219 -------------------------------------------------------------------------------- ================================================================================ uboot-tools-2017.05-0.4.rc2.fc26 (FEDORA-2017-de09f44c47) U-Boot utilities -------------------------------------------------------------------------------- Update Information: 2017.05 RC2 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
