The following Fedora 26 Security updates need testing: Age URL 117 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01 python-XStatic-jquery-ui-1.12.0.1-2.fc26 56 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2522df3526 nodejs-brace-expansion-1.1.7-1.fc26 21 https://bodhi.fedoraproject.org/updates/FEDORA-2017-661dddc462 groovy18-1.8.9-28.fc26 19 https://bodhi.fedoraproject.org/updates/FEDORA-2017-690a2548ba openvswitch-2.7.1-2.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f1f3dafb50 wireshark-2.2.8-1.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-76ce091a43 chicken-4.12.0-3.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1c053de325 memcached-1.4.39-1.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-dd0d5d376f python-tablib-0.11.5-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ee93493bea community-mysql-5.7.19-1.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-475aed1bd1 rt-4.4.1-9.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6186f95179 nasm-2.13.01-3.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a5fc805283 sscep-0.6.1-5.20160525git2052ee1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ab55648aa7 php-PHPMailer-5.2.24-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-307eab89e1 supervisor-3.3.3-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-03893a3b58 pspp-0.10.2-5.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6833997d76 cacti-1.1.16-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-721314e3b3 java-1.8.0-openjdk-aarch32-1.8.0.141-2.170721.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4762689cb7 knot-resolver-1.3.2-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1929be4354 php-horde-Horde-Core-2.30.0-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ca6f3b5770 php-horde-Horde-Form-2.0.18-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6775ec59f1 php-horde-Horde-Url-2.2.6-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1081235137 php-horde-horde-5.2.16-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ceb60ebf8f php-horde-kronolith-4.2.22-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d1c86c61f2 php-horde-nag-4.2.15-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f52687b573 php-horde-turba-4.2.20-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d2174c28ed gsoap-2.8.43-2.fc26 The following Fedora 26 Critical Path updates have yet to be approved: Age URL 16 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a695811465 pungi-4.1.17-1.fc26 14 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4cacf8fe60 ca-certificates-2017.2.16-1.0.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d6c7c13aa1 file-5.30-8.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-433a380270 hwdata-0.303-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-02aafa240a libidn2-2.0.3-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-965b1a5f8b git-2.13.4-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7c5356a635 dhcp-4.3.5-9.fc26 The following builds have been pushed to Fedora 26 updates-testing COPASI-4.20.158-2.fc26 amsynth-1.8.0-2.fc26 audience-0.2.3-1.fc26 cppcheck-1.80-1.fc26 dhcp-4.3.5-9.fc26 domoticz-3.8153-2.fc26 eclipse-eclemma-3.0.0-1.fc26 eclipse-linuxtools-6.1.0-1.fc26 electrum-2.9.0-1.fc26 foo2zjs-0.20170412-4.fc26 git-2.13.4-1.fc26 golang-github-xtaci-kcp-go-3.18-1.fc26 gomtree-0.4.0-1.fc26 google-api-python-client-1.6.2-1.fc26 gsequencer-0.9.3-1.fc26 gsoap-2.8.43-2.fc26 irssi-xmpp-0.53-1.fc26 knot-resolver-1.3.2-1.fc26 libsemigroups-0.3.1-3.fc26 magic-8.1.183-1.fc26 openzwave-1.5.0-0.20170724gitde1c0e6.fc26 pass-1.7.1-4.fc26 perl-Code-TidyAll-0.65-1.fc26 php-7.1.8-1.fc26 php-horde-Horde-Browser-2.0.14-1.fc26 php-horde-Horde-Core-2.30.0-1.fc26 php-horde-Horde-Form-2.0.18-1.fc26 php-horde-Horde-Imap-Client-2.29.14-1.fc26 php-horde-Horde-Url-2.2.6-1.fc26 php-horde-horde-5.2.16-1.fc26 php-horde-imp-6.2.20-1.fc26 php-horde-kronolith-4.2.22-1.fc26 php-horde-nag-4.2.15-1.fc26 php-horde-turba-4.2.20-1.fc26 phpMyAdmin-4.7.3-1.fc26 python-docker-2.4.2-3.fc26 python-jwcrypto-0.4.2-3.fc26 python-sqlalchemy-1.1.12-1.fc26 qmapshack-1.9.0-1.fc26 socket_wrapper-1.1.7-3.fc26 tetrominos-1.0.1-1.fc26 vdr-epg-daemon-1.1.122-1.fc26 xcircuit-3.9.68-1.fc26 xscreensaver-5.37-4.fc26 Details about builds: ================================================================================ COPASI-4.20.158-2.fc26 (FEDORA-2017-df4ce024c3) Biochemical network simulator -------------------------------------------------------------------------------- Update Information: - Make a new conditional macro to control stripping of symbols from object files - 4.20.158-1 - Update to version 4.20 -build 158 - Debuginfo packages built -------------------------------------------------------------------------------- ================================================================================ amsynth-1.8.0-2.fc26 (FEDORA-2017-87778715de) A classic synthesizer with dual oscillators -------------------------------------------------------------------------------- Update Information: Fix #1476525 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476525 - None https://bugzilla.redhat.com/show_bug.cgi?id=1476525 -------------------------------------------------------------------------------- ================================================================================ audience-0.2.3-1.fc26 (FEDORA-2017-0aefce8c6e) Audience video player -------------------------------------------------------------------------------- Update Information: Update to version 0.2.3. -------------------------------------------------------------------------------- ================================================================================ cppcheck-1.80-1.fc26 (FEDORA-2017-347af702a8) Tool for static C/C++ code analysis -------------------------------------------------------------------------------- Update Information: 1.80 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476472 - cppcheck-1.80 is available https://bugzilla.redhat.com/show_bug.cgi?id=1476472 -------------------------------------------------------------------------------- ================================================================================ dhcp-4.3.5-9.fc26 (FEDORA-2017-7c5356a635) Dynamic host configuration protocol software -------------------------------------------------------------------------------- Update Information: Delete broken resolv.conf symlink. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1475279 - dhclient doesn't update /etc/resolv.conf if NetworkManager crashes upon start https://bugzilla.redhat.com/show_bug.cgi?id=1475279 -------------------------------------------------------------------------------- ================================================================================ domoticz-3.8153-2.fc26 (FEDORA-2017-17dea027cb) Open source Home Automation System -------------------------------------------------------------------------------- Update Information: Version 3.8153 (July 30th 2017) - Fixed: Camera Editor, will now always refresh thumbnail in table - Fixed: Devices could become invisible when a scene/group was added to the 'hidden devices' room plan with the same idx - Fixed: JSon float/nan value, solved by upgrading JSonCPP - Fixed: OZW, when a value is updated and the sensor did not exists before (for example a kWh sensor), it is created (saves a restart) - Fixed: Daemonize compatible with Systemd forking type - Changed: Blinds T5 till T13 new DeviceID generation, could cause new sensors - Changed: Lessen rounding errors for computed energy - Changed: Minimized On/Off/Script execution time - Changed: SolarEdgeAPI, now only needs API Key - Changed: Support symlinks for plugin and theme directories - Changed: Switch type 'Door Lock' renamed to 'Door Contact' - Changed: Temperature Only charts will not display the Humidity axis - Changed: Wind Direction Graph, if sensor does not supports 'Gust', the 'Speed' value is used - Changed: Updated OpenZWave (and configuration files) - Implemented: Added a new parameter to disable the logging of event script triggers 'Script event triggered: ...' - Implemented: AppLamp/LimitLess bridge V6.0 RGBW/RGBWW - Implemented: Blinds T1 till T13 new supports the Stop button - Implemented: Blockly/Lua Set SetPoint option - Implemented: Devices, Log icon for Blinds - Implemented: Dummy Hardware, Temp+Baro - Implemented: Estonian Language support (big thanks to Kuido) - Implemented: EvohomeWeb support (Thanks to Gordon3!) - Implemented: General/Text sensor now able to be shared - Implemented: I2C BME280 sensor (temp+hum+baro) - Implemented: I2C for non arm systems - Implemented: InfluxDB Data push - Implemented: Latvian Language support (big thanks to Edgars) - Implemented: Netatmo Home Coach support - Implemented: Notification for Dummy Soil/Moisture sensor - Implemented: Notification for Dummy Temp/Hum/Baro sensor - Implemented: Notification for Alert Sensor via udevice JSON call - Implemented: Onkyo AV Receiver (Thanks to dwmw2!) - Implemented: Option to replace an Meter device - Implemented: OZW, Added support for Atmospheric Pressure sensor - Implemented: Python Plugin System - Implemented: RFXtrx Lucci Fan implemented - Implemented: RFXtrx RFY2 protocol implemented - Implemented: RFXtrx Kangtai / Cotech implemented - Implemented: RTL433 (Thanks to Petri Ahone!) - Implemented: SolarEdgeAPI, support for multiple inverters - Implemented: Support for Ble Box hardware - Implemented: Support for different usage/return costs for electricity - Implemented: Support for Intergas InComfort LAN2RF Gateway - Implemented: Support for Open Weather Map - Implemented: Support for Open Web Net - Implemented: Support for XiaomiGateway Gateway - Implemented: Support for YeeLight - Implemented: Support for Youless LS120 - Implemented: Switch type 'Door Lock' - Implemented: SysFS GPIO (Thanks to hvbommel/jvandenbroek!) - Implemented: Teleinfo : Added a switch indicating the current cost slot - Implemented: Timer Plan editor - Removed: Razberry ZWave handling method. Existing users need to migrate to OpenZWave -------------------------------------------------------------------------------- ================================================================================ eclipse-eclemma-3.0.0-1.fc26 (FEDORA-2017-5307e1ce64) Java code coverage tool plugin for Eclipse -------------------------------------------------------------------------------- Update Information: Updates to the Oxygen version of Eclemma. See the upstream change notes: http://www.eclemma.org/changes.html -------------------------------------------------------------------------------- ================================================================================ eclipse-linuxtools-6.1.0-1.fc26 (FEDORA-2017-a4918838d7) Linux specific Eclipse plugins -------------------------------------------------------------------------------- Update Information: This is mostly a bugfix update to the latest upstream release. See the upstream release notes: https://wiki.eclipse.org/Linux_Tools_Project/News/NewIn61 -------------------------------------------------------------------------------- ================================================================================ electrum-2.9.0-1.fc26 (FEDORA-2017-56067fdae6) A lightweight Bitcoin Client -------------------------------------------------------------------------------- Update Information: Updated to upstream 2.9.0 -------------------------------------------------------------------------------- ================================================================================ foo2zjs-0.20170412-4.fc26 (FEDORA-2017-30c3f793a3) Linux printer driver for ZjStream protocol -------------------------------------------------------------------------------- Update Information: Add some ICC profiles and firmware files -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476598 - No ICM profiles in installs (foo2qpdl) https://bugzilla.redhat.com/show_bug.cgi?id=1476598 -------------------------------------------------------------------------------- ================================================================================ git-2.13.4-1.fc26 (FEDORA-2017-965b1a5f8b) Fast Version Control System -------------------------------------------------------------------------------- Update Information: Fixes since v2.13.3 ------------------- * Update the character width tables to Unicode 10. * A recent update broke an alias that contained an uppercase letter, which has been fixed. * The progress meter did not give a useful output when we haven't had 0.5 seconds to measure the throughput during the interval. Instead show the overall throughput rate at the end, which is a much more useful number. * We run an early part of "git gc" that deals with refs before daemonising (and not under lock) even when running a background auto-gc, which caused multiple gc processes attempting to run the early part at the same time. This is now prevented by running the early part also under the GC lock. Also contains a handful of small code and documentation clean-ups. Upstream release announcement: https://public- inbox.org/git/xmqqk22nf4yb.fsf@xxxxxxxxxxxxxxxxxxxxxxxxxxx/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #1357438 - manual page for git merge points to wrong path https://bugzilla.redhat.com/show_bug.cgi?id=1357438 -------------------------------------------------------------------------------- ================================================================================ golang-github-xtaci-kcp-go-3.18-1.fc26 (FEDORA-2017-e8b1f72a42) Production-Grade Reliable-UDP Library for golang -------------------------------------------------------------------------------- Update Information: Update to version 3.18 (commit ecbba09). -------------------------------------------------------------------------------- ================================================================================ gomtree-0.4.0-1.fc26 (FEDORA-2017-1ea8cad421) Go CLI tool for mtree support -------------------------------------------------------------------------------- Update Information: Fixes segf in F26 ---- No golang support for ppc64. BZ #1445491 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1477241 - gomtree segfaults in f26 https://bugzilla.redhat.com/show_bug.cgi?id=1477241 -------------------------------------------------------------------------------- ================================================================================ google-api-python-client-1.6.2-1.fc26 (FEDORA-2017-22037196bd) Google APIs Client Library for Python -------------------------------------------------------------------------------- Update Information: Update to 1.6.2 -------------------------------------------------------------------------------- ================================================================================ gsequencer-0.9.3-1.fc26 (FEDORA-2017-99dc100289) Advanced Gtk+ Sequencer audio processing engine -------------------------------------------------------------------------------- Update Information: modified version because bug fixes available ---- modified version because new features available -------------------------------------------------------------------------------- ================================================================================ gsoap-2.8.43-2.fc26 (FEDORA-2017-d2174c28ed) Generator Tools for Coding SOAP/XML Web Services in C and C++ -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-9765. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1472809 - CVE-2017-9765 gsoap: Stack-based buffer overflow when receieving XML message with size larger than 2GB [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1472809 -------------------------------------------------------------------------------- ================================================================================ irssi-xmpp-0.53-1.fc26 (FEDORA-2017-c1c664296b) XMPP plugin into irssi -------------------------------------------------------------------------------- Update Information: Update to latest upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1423746 - irssi-xmpp: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1423746 [ 2 ] Bug #1323612 - abi incompatibility after recent irssi upgrade https://bugzilla.redhat.com/show_bug.cgi?id=1323612 -------------------------------------------------------------------------------- ================================================================================ knot-resolver-1.3.2-1.fc26 (FEDORA-2017-4762689cb7) Caching full DNS Resolver -------------------------------------------------------------------------------- Update Information: New upstream release: -------------------------------------------------------------------------------- ================================================================================ libsemigroups-0.3.1-3.fc26 (FEDORA-2017-0898127c09) C++ library for semigroups and monoids -------------------------------------------------------------------------------- Update Information: This new package is a C++ library for semigroups and monoids; it is partly based on "Algorithms for computing finite semigroups", "Expository Slides", and Semigroupe 2.01 by Jean-Eric Pin. The libsemigroups library is used in the Semigroups package for GAP. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476085 - Review Request: libsemigroups - C++ library for semigroups and monoids https://bugzilla.redhat.com/show_bug.cgi?id=1476085 -------------------------------------------------------------------------------- ================================================================================ magic-8.1.183-1.fc26 (FEDORA-2017-48df1875e8) A very capable VLSI layout tool -------------------------------------------------------------------------------- Update Information: New version 8.1.183 is released. -------------------------------------------------------------------------------- ================================================================================ openzwave-1.5.0-0.20170724gitde1c0e6.fc26 (FEDORA-2017-17dea027cb) Sample Executables for OpenZWave -------------------------------------------------------------------------------- Update Information: Version 3.8153 (July 30th 2017) - Fixed: Camera Editor, will now always refresh thumbnail in table - Fixed: Devices could become invisible when a scene/group was added to the 'hidden devices' room plan with the same idx - Fixed: JSon float/nan value, solved by upgrading JSonCPP - Fixed: OZW, when a value is updated and the sensor did not exists before (for example a kWh sensor), it is created (saves a restart) - Fixed: Daemonize compatible with Systemd forking type - Changed: Blinds T5 till T13 new DeviceID generation, could cause new sensors - Changed: Lessen rounding errors for computed energy - Changed: Minimized On/Off/Script execution time - Changed: SolarEdgeAPI, now only needs API Key - Changed: Support symlinks for plugin and theme directories - Changed: Switch type 'Door Lock' renamed to 'Door Contact' - Changed: Temperature Only charts will not display the Humidity axis - Changed: Wind Direction Graph, if sensor does not supports 'Gust', the 'Speed' value is used - Changed: Updated OpenZWave (and configuration files) - Implemented: Added a new parameter to disable the logging of event script triggers 'Script event triggered: ...' - Implemented: AppLamp/LimitLess bridge V6.0 RGBW/RGBWW - Implemented: Blinds T1 till T13 new supports the Stop button - Implemented: Blockly/Lua Set SetPoint option - Implemented: Devices, Log icon for Blinds - Implemented: Dummy Hardware, Temp+Baro - Implemented: Estonian Language support (big thanks to Kuido) - Implemented: EvohomeWeb support (Thanks to Gordon3!) - Implemented: General/Text sensor now able to be shared - Implemented: I2C BME280 sensor (temp+hum+baro) - Implemented: I2C for non arm systems - Implemented: InfluxDB Data push - Implemented: Latvian Language support (big thanks to Edgars) - Implemented: Netatmo Home Coach support - Implemented: Notification for Dummy Soil/Moisture sensor - Implemented: Notification for Dummy Temp/Hum/Baro sensor - Implemented: Notification for Alert Sensor via udevice JSON call - Implemented: Onkyo AV Receiver (Thanks to dwmw2!) - Implemented: Option to replace an Meter device - Implemented: OZW, Added support for Atmospheric Pressure sensor - Implemented: Python Plugin System - Implemented: RFXtrx Lucci Fan implemented - Implemented: RFXtrx RFY2 protocol implemented - Implemented: RFXtrx Kangtai / Cotech implemented - Implemented: RTL433 (Thanks to Petri Ahone!) - Implemented: SolarEdgeAPI, support for multiple inverters - Implemented: Support for Ble Box hardware - Implemented: Support for different usage/return costs for electricity - Implemented: Support for Intergas InComfort LAN2RF Gateway - Implemented: Support for Open Weather Map - Implemented: Support for Open Web Net - Implemented: Support for XiaomiGateway Gateway - Implemented: Support for YeeLight - Implemented: Support for Youless LS120 - Implemented: Switch type 'Door Lock' - Implemented: SysFS GPIO (Thanks to hvbommel/jvandenbroek!) - Implemented: Teleinfo : Added a switch indicating the current cost slot - Implemented: Timer Plan editor - Removed: Razberry ZWave handling method. Existing users need to migrate to OpenZWave -------------------------------------------------------------------------------- ================================================================================ pass-1.7.1-4.fc26 (FEDORA-2017-491f47979f) A password manager using standard Unix tools -------------------------------------------------------------------------------- Update Information: - Require git-core instead of git rhbz#1471608 - Add passmenu subpackage rhbz#1474833 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1474833 - add passmenu subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1474833 [ 2 ] Bug #1471608 - pass: change requires from git to git-core https://bugzilla.redhat.com/show_bug.cgi?id=1471608 -------------------------------------------------------------------------------- ================================================================================ perl-Code-TidyAll-0.65-1.fc26 (FEDORA-2017-c3026dc2eb) Engine for tidyall, your all-in-one code tidier and validator -------------------------------------------------------------------------------- Update Information: This release fixes handling files with Copied Git status. ---- Updated to the latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1477383 - perl-Code-TidyAll-0.65 is available https://bugzilla.redhat.com/show_bug.cgi?id=1477383 [ 2 ] Bug #1476963 - perl-Code-TidyAll-0.64 is available https://bugzilla.redhat.com/show_bug.cgi?id=1476963 -------------------------------------------------------------------------------- ================================================================================ php-7.1.8-1.fc26 (FEDORA-2017-b446f03468) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information: **PHP version 7.1.8** (03 Aug 2017) **Core:** * Fixed bug php#74832 (Loading PHP extension with already registered function name leads to a crash). (jpauli) * Fixed bug php#74780 (parse_url() broken when query string contains colon). (jhdxr) * Fixed bug php#74761 (Unary operator expected error on some systems). (petk) * Fixed bug php#73900 (Use After Free in unserialize() SplFixedArray). (nikic) * Fixed bug php#74923 (Crash when crawling through network share). (Anatol) * Fixed bug php#74913 (fixed incorrect poll.h include). (petk) * Fixed bug php#74906 (fixed incorrect errno.h include). (petk) **Date:** * Fixed bug php#74852 (property_exists returns true on unknown DateInterval property). (jhdxr) **Opcache:** * Fixed bug php#74623 (Infinite loop in type inference when using HTMLPurifier). (nikic) **OpenSSL:** * Fixed bug php#74798 (pkcs7_en/decrypt does not work if \x0a is used in content). (Anatol) * Added OPENSSL_DONT_ZERO_PAD_KEY constant to prevent key padding and fix bug php#71917 (openssl_open() returns junk on envelope < 16 bytes) and bug php#72362 (OpenSSL Blowfish encryption is incorrect for short keys). (Jakub Zelenka) **PDO:** * Fixed bug php#69356 (PDOStatement::debugDumpParams() truncates query). (Adam Baratz) **SPL:** * Fixed bug php#73471 (PHP freezes with AppendIterator). (jhdxr) **SQLite3:** * Fixed bug php#74883 (SQLite3::__construct() produces "out of memory" exception with invalid flags). (Anatol) **Wddx:** * Fixed bug php#73173 (huge memleak when wddx_unserialize). (tloi at fortinet dot com) **zlib:** * Fixed bug php#73944 (dictionary option of inflate_init() does not work). (wapmorgan) -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Browser-2.0.14-1.fc26 (FEDORA-2017-f68a9c12c6) Horde Browser API -------------------------------------------------------------------------------- Update Information: **Horde_Browser 2.0.14** * [jan] Filter out control characters from file names when sending download headers. -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Core-2.30.0-1.fc26 (FEDORA-2017-1929be4354) Horde Core Framework libraries -------------------------------------------------------------------------------- Update Information: **Horde_Core 2.30.0** * [jan] SECURITY: Fix XSS vulnerability with pathinfo component in Horde::selfUrl(). * [jan] Deprecate Horde::redirect(). * [jan] Add Horde::signUrl() and Horde::verifySignedUrl(). -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Form-2.0.18-1.fc26 (FEDORA-2017-ca6f3b5770) Horde Form API -------------------------------------------------------------------------------- Update Information: **Horde_Form 2.0.18** * [jan] SECURITY: Fix XSS vulnerability with form sections. -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Imap-Client-2.29.14-1.fc26 (FEDORA-2017-58e6d9e6bb) Horde IMAP abstraction interface -------------------------------------------------------------------------------- Update Information: **Horde_Imap_Client 2.29.14** * [jan] Fix check if QRESYNC is enabled in vanished() (i.badamshin). -------------------------------------------------------------------------------- ================================================================================ php-horde-Horde-Url-2.2.6-1.fc26 (FEDORA-2017-6775ec59f1) Horde Url class -------------------------------------------------------------------------------- Update Information: **Horde_Url 2.2.6** * [jan] SECURITY: Fix XSS vulnerability with pathinfo component in toString(). -------------------------------------------------------------------------------- ================================================================================ php-horde-horde-5.2.16-1.fc26 (FEDORA-2017-1081235137) Horde Application Framework -------------------------------------------------------------------------------- Update Information: **horde 5.2.16** * [jan] SECURITY: Fix open redirects. -------------------------------------------------------------------------------- ================================================================================ php-horde-imp-6.2.20-1.fc26 (FEDORA-2017-58db17e673) A web based webmail system -------------------------------------------------------------------------------- Update Information: **imp 6.2.20** * [jan] Fix finding reply or forward text from signed or encrypted messages with HTML content again (Bug #14656). * [mjr] Fix issue with reattaching a file after removing it on Chrome browsers (Bug #14657), * [jan] Allow Command-C to copy text from HTML message previews (Bug #14653). -------------------------------------------------------------------------------- ================================================================================ php-horde-kronolith-4.2.22-1.fc26 (FEDORA-2017-ceb60ebf8f) A web based calendar -------------------------------------------------------------------------------- Update Information: **kronolith 4.2.22** * [jan] SECURITY: Fix open redirects. * [mjr] Prevent broken iCalendar files from causing fatal errors (Bug #14672). * [jan] Work around calendar servers advertising as CalDAV-capable, but ignoring CalDAV requests (Bug #14662). * [jan] Fix displaying yesterday's event in Prior Events portal block (admin@xxxxxxxxxxx, Bug #14638). -------------------------------------------------------------------------------- ================================================================================ php-horde-nag-4.2.15-1.fc26 (FEDORA-2017-d1c86c61f2) A web based task list manager -------------------------------------------------------------------------------- Update Information: **nag 4.2.15** * [jan] SECURITY: Fix open redirects. * [mjr] Fix handling of delayed start dates (Bug #14634). -------------------------------------------------------------------------------- ================================================================================ php-horde-turba-4.2.20-1.fc26 (FEDORA-2017-f52687b573) A web based address book -------------------------------------------------------------------------------- Update Information: **turba 4.2.20** * [jan] SECURITY: Fix open redirects. * [jan] Fix creating address books with the external API. -------------------------------------------------------------------------------- ================================================================================ phpMyAdmin-4.7.3-1.fc26 (FEDORA-2017-0c29ca69ad) Handle the administration of MySQL over the World Wide Web -------------------------------------------------------------------------------- Update Information: Welcome to **phpMyAdmin 4.7.3**, a regular maintenance release containing bug fixes. A complete list of new features and bugs that have been fixed is available in the ChangeLog file or changelog.php included with this release. Notable changes since 4.7.2: * Fixed creating relations * Fixed export without back quotes * Improved handling of uploaded files with open_basedir * Fixed usage of some browser transformations * Automatically connect using SSL when server is configured for such -------------------------------------------------------------------------------- ================================================================================ python-docker-2.4.2-3.fc26 (FEDORA-2017-082ef22c86) A Python library for the Docker Engine API -------------------------------------------------------------------------------- Update Information: fix provides of version 1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1475878 - Dependency problems updating system, python-docker must Provides: python-docker-py https://bugzilla.redhat.com/show_bug.cgi?id=1475878 -------------------------------------------------------------------------------- ================================================================================ python-jwcrypto-0.4.2-3.fc26 (FEDORA-2017-c25388f731) Implements JWK, JWS, JWE specifications using python-cryptography -------------------------------------------------------------------------------- Update Information: - Upstream release 0.4.2, fixes bytes/str comparison issue - Resolves: RHBZ #1476150 - Run tests with bytes warning - Modernize spec -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476150 - Custodia does not work in Python 3 https://bugzilla.redhat.com/show_bug.cgi?id=1476150 -------------------------------------------------------------------------------- ================================================================================ python-sqlalchemy-1.1.12-1.fc26 (FEDORA-2017-bb16fe54d9) Modular and flexible ORM library for python -------------------------------------------------------------------------------- Update Information: This update contains a new upstream bugfix and enhancement release. The upstream [changelog](http://docs.sqlalchemy.org/en/latest/changelog/changelog_11 .html#change-1.1.12) contains a list of all changes in version 1.1.12. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1474411 - python-sqlalchemy: FTBFS in Fedora 26 tests failing as of python 3.6.2 https://bugzilla.redhat.com/show_bug.cgi?id=1474411 -------------------------------------------------------------------------------- ================================================================================ qmapshack-1.9.0-1.fc26 (FEDORA-2017-f441805584) GPS mapping and management tool -------------------------------------------------------------------------------- Update Information: - updated to 1.9.0 - https://bitbucket.org/maproom/qmapshack/raw/18cf6f7dcc56b29 3e450a62a4737c07f8c6e31be/changelog.txt -------------------------------------------------------------------------------- References: [ 1 ] Bug #1474557 - qmapshack-1.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1474557 -------------------------------------------------------------------------------- ================================================================================ socket_wrapper-1.1.7-3.fc26 (FEDORA-2017-969354ba0e) A library passing all socket communications through Unix sockets -------------------------------------------------------------------------------- Update Information: Fix socket_wrapper on ppc64le -------------------------------------------------------------------------------- References: [ 1 ] Bug #1465147 - bash: segfault in do_redirection_internal on ppc64le https://bugzilla.redhat.com/show_bug.cgi?id=1465147 -------------------------------------------------------------------------------- ================================================================================ tetrominos-1.0.1-1.fc26 (FEDORA-2017-46e3194c91) Simple CLI logical game -------------------------------------------------------------------------------- Update Information: initial version created many years ago as a school project -------------------------------------------------------------------------------- References: [ 1 ] Bug #1477137 - Review Request: tetrominos - Simple CLI logical game https://bugzilla.redhat.com/show_bug.cgi?id=1477137 -------------------------------------------------------------------------------- ================================================================================ vdr-epg-daemon-1.1.122-1.fc26 (FEDORA-2017-da1cb0796d) A daemon to download EPG data from internet and manage it in a mysql database -------------------------------------------------------------------------------- Update Information: Update to 1.1.122-1 ---- Update to 1.1.121 -------------------------------------------------------------------------------- ================================================================================ xcircuit-3.9.68-1.fc26 (FEDORA-2017-e85233d4bc) Electronic circuit schematic drawing program -------------------------------------------------------------------------------- Update Information: New version 3.9.68 is released. -------------------------------------------------------------------------------- ================================================================================ xscreensaver-5.37-4.fc26 (FEDORA-2017-388154cd56) X screen saver and locker -------------------------------------------------------------------------------- Update Information: Some invalid stack variable usages after scope were found on xscreensaver code, which may cause unpredictable behavior. This new rpm will fix the issues. -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
