The following Fedora 26 Security updates need testing: Age URL 156 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01 python-XStatic-jquery-ui-1.12.0.1-2.fc26 95 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2522df3526 nodejs-brace-expansion-1.1.7-1.fc26 58 https://bodhi.fedoraproject.org/updates/FEDORA-2017-690a2548ba openvswitch-2.7.1-2.fc26 50 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1c053de325 memcached-1.4.39-1.fc26 46 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26 28 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d4248ba346 botan-1.10.16-1.fc26 19 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ab0def38cd tomcat-8.0.46-1.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8f27031c8f ImageMagick-6.9.9.9-1.fc26 WindowMaker-0.95.8-3.fc26 autotrace-0.31.1-49.fc26 converseen-0.9.6.2-3.fc26 dmtx-utils-0.7.4-4.fc26 drawtiming-0.7.1-22.fc26 emacs-25.2-5.fc26 gtatool-2.2.0-6.fc26 imageinfo-0.05-27.fc26 inkscape-0.92.1-4.20170510bzr15686.fc26.1 k3d-0.8.0.6-8.fc26 kxstitch-1.2.0-9.fc26 perl-Image-SubImageFind-0.03-13.fc26 pfstools-2.0.6-3.fc26 php-pecl-imagick-3.4.3-2.fc26 psiconv-0.9.8-22.fc26 q-7.11-29.fc26 ripright-0.11-5.fc26 rss-glx-0.9.1.p-29.fc26.1 rubygem-rmagick-2.16.0-4.fc26.2 synfig-1.2.0-9.fc26.1 synfigstudio-1.2.0-5.fc26 techne-0.2.3-20.fc26 vdr-scraper2vdr-1.0.5-4.20170611git254122b.fc26 vips-8.5.7-2.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-77e8bc720a mimedefang-2.81-1.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d793fef58f lightdm-1.24.0-1.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8614a6e905 python-django-1.10.8-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-caa564d86f FlightGear-2017.2.1-2.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6314903eb9 libwpd-0.10.1-8.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6679a0a2e1 freexl-1.0.4-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2cd2d52327 mingw-LibRaw-0.18.3-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4d4914a260 mingw-libzip-1.3.0-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b10e1a9166 rawtherapee-5.2-2.fc26 The following Fedora 26 Critical Path updates have yet to be approved: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8f27031c8f ImageMagick-6.9.9.9-1.fc26 WindowMaker-0.95.8-3.fc26 autotrace-0.31.1-49.fc26 converseen-0.9.6.2-3.fc26 dmtx-utils-0.7.4-4.fc26 drawtiming-0.7.1-22.fc26 emacs-25.2-5.fc26 gtatool-2.2.0-6.fc26 imageinfo-0.05-27.fc26 inkscape-0.92.1-4.20170510bzr15686.fc26.1 k3d-0.8.0.6-8.fc26 kxstitch-1.2.0-9.fc26 perl-Image-SubImageFind-0.03-13.fc26 pfstools-2.0.6-3.fc26 php-pecl-imagick-3.4.3-2.fc26 psiconv-0.9.8-22.fc26 q-7.11-29.fc26 ripright-0.11-5.fc26 rss-glx-0.9.1.p-29.fc26.1 rubygem-rmagick-2.16.0-4.fc26.2 synfig-1.2.0-9.fc26.1 synfigstudio-1.2.0-5.fc26 techne-0.2.3-20.fc26 vdr-scraper2vdr-1.0.5-4.20170611git254122b.fc26 vips-8.5.7-2.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b7dcfe861 kobo-0.6.0-1.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-895e88754f flatpak-0.9.10-1.fc26 flatpak-builder-0.9.9-1.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-14b8509c71 xkeyboard-config-2.21-3.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2572b202e2 xen-4.8.2-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3f68f150f6 abrt-2.10.3-3.fc26 libreport-2.9.1-3.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-24dcbfa22d pungi-4.1.18-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d62dd0192 menu-cache-1.0.2-5.D20170905git2ef9df036c.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f0f16f880e gjs-1.48.7-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9f63d43c97 fontconfig-2.12.5-1.fc26 The following builds have been pushed to Fedora 26 updates-testing R-Cairo-1.5.9-2.fc26 R-pbdZMQ-0.2.6-3.fc26 R-sp-1.2.5-3.fc26 axel-2.13.1-2.fc26 fontconfig-2.12.5-1.fc26 ghc-aeson-compat-0.3.7.1-2.fc26 ghc-microlens-th-0.4.1.1-1.fc26 ghc-torrent-10000.1.1-1.fc26 globus-ftp-control-8.0-1.fc26 globus-gridftp-server-control-6.0-1.fc26 globus-gsi-sysconfig-7.1-1.fc26 globus-gss-assist-11.0-2.fc26 globus-gssapi-gsi-13.0-2.fc26 globus-xio-gsi-driver-4.1-1.fc26 mate-screensaver-1.18.1-2.fc26 meld-3.18.0-1.fc26 mingw-libzip-1.3.0-1.fc26 php-phpmyadmin-sql-parser-4.2.1-1.fc26 rawtherapee-5.2-2.fc26 snapd-2.27.6-1.fc26 Details about builds: ================================================================================ R-Cairo-1.5.9-2.fc26 (FEDORA-2017-9f629da4a8) Use cairo as a high-quality graphics device -------------------------------------------------------------------------------- Update Information: Initial package of Cairo for R. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1484746 - Review Request: R-Cairo - Use cairo as a high-quality graphics device https://bugzilla.redhat.com/show_bug.cgi?id=1484746 -------------------------------------------------------------------------------- ================================================================================ R-pbdZMQ-0.2.6-3.fc26 (FEDORA-2017-60bad7fc49) Programming with Big Data -- Interface to ZeroMQ -------------------------------------------------------------------------------- Update Information: Initial package of pbdZMQ for R. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1485107 - Review Request: R-pbdZMQ - Programming with Big Data -- Interface to ZeroMQ https://bugzilla.redhat.com/show_bug.cgi?id=1485107 -------------------------------------------------------------------------------- ================================================================================ R-sp-1.2.5-3.fc26 (FEDORA-2017-1f412b5197) Classes and Methods for Spatial Data -------------------------------------------------------------------------------- Update Information: Initial package of sp for R. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1487542 - Review Request: R-sp - Classes and Methods for Spatial Data https://bugzilla.redhat.com/show_bug.cgi?id=1487542 -------------------------------------------------------------------------------- ================================================================================ axel-2.13.1-2.fc26 (FEDORA-2017-3e2f6850c6) Light command line download accelerator for Linux and Unix -------------------------------------------------------------------------------- Update Information: * Update to latest upstream release -------------------------------------------------------------------------------- ================================================================================ fontconfig-2.12.5-1.fc26 (FEDORA-2017-9f63d43c97) Font configuration and customization library -------------------------------------------------------------------------------- Update Information: New upstream release, containing emoji/math fonts support which the recent updates of pango requires. -------------------------------------------------------------------------------- ================================================================================ ghc-aeson-compat-0.3.7.1-2.fc26 (FEDORA-2017-20aff14d07) Compatibility layer for aeson -------------------------------------------------------------------------------- Update Information: Initial package of aeson-compat for Haskell. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1486508 - Review Request: ghc-aeson-compat - Compatibility layer for aeson https://bugzilla.redhat.com/show_bug.cgi?id=1486508 -------------------------------------------------------------------------------- ================================================================================ ghc-microlens-th-0.4.1.1-1.fc26 (FEDORA-2017-ddb80494ba) Automatic generation of record lenses for microlens -------------------------------------------------------------------------------- Update Information: Initial package of microlens-th for Haskell. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1486584 - Review Request: ghc-microlens-th - Automatic generation of record lenses for microlens https://bugzilla.redhat.com/show_bug.cgi?id=1486584 -------------------------------------------------------------------------------- ================================================================================ ghc-torrent-10000.1.1-1.fc26 (FEDORA-2017-bb3c658208) BitTorrent file parser and generater -------------------------------------------------------------------------------- Update Information: Initial package of torrent for Haskell. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1486593 - Review Request: ghc-torrent - BitTorrent file parser and generater https://bugzilla.redhat.com/show_bug.cgi?id=1486593 -------------------------------------------------------------------------------- ================================================================================ globus-ftp-control-8.0-1.fc26 (FEDORA-2017-6063a01d68) Globus Toolkit - GridFTP Control Library -------------------------------------------------------------------------------- Update Information: globus-ftp-control (8.0): * Add function globus_ftp_control_use_tls() for TLS control channel globus-gridftp-server-control (6.0): * Add support for control channel over TLS globus-gsi-sysconfig (7.1): * Add SNI vhost cred dir support globus-gss-assist (11.0): * Add new function gss_assist_read_vhost_cred_dir() for SNI server globus-gssapi-gsi (13.0): * Add SNI vhost cred dir support * Add optional ALPN processing globus-xio-gsi-driver (4.1): * Add SNI and ALPN support via cntls -------------------------------------------------------------------------------- ================================================================================ globus-gridftp-server-control-6.0-1.fc26 (FEDORA-2017-6063a01d68) Globus Toolkit - Globus GridFTP Server Library -------------------------------------------------------------------------------- Update Information: globus-ftp-control (8.0): * Add function globus_ftp_control_use_tls() for TLS control channel globus-gridftp-server-control (6.0): * Add support for control channel over TLS globus-gsi-sysconfig (7.1): * Add SNI vhost cred dir support globus-gss-assist (11.0): * Add new function gss_assist_read_vhost_cred_dir() for SNI server globus-gssapi-gsi (13.0): * Add SNI vhost cred dir support * Add optional ALPN processing globus-xio-gsi-driver (4.1): * Add SNI and ALPN support via cntls -------------------------------------------------------------------------------- ================================================================================ globus-gsi-sysconfig-7.1-1.fc26 (FEDORA-2017-6063a01d68) Globus Toolkit - Globus GSI System Config Library -------------------------------------------------------------------------------- Update Information: globus-ftp-control (8.0): * Add function globus_ftp_control_use_tls() for TLS control channel globus-gridftp-server-control (6.0): * Add support for control channel over TLS globus-gsi-sysconfig (7.1): * Add SNI vhost cred dir support globus-gss-assist (11.0): * Add new function gss_assist_read_vhost_cred_dir() for SNI server globus-gssapi-gsi (13.0): * Add SNI vhost cred dir support * Add optional ALPN processing globus-xio-gsi-driver (4.1): * Add SNI and ALPN support via cntls -------------------------------------------------------------------------------- ================================================================================ globus-gss-assist-11.0-2.fc26 (FEDORA-2017-6063a01d68) Globus Toolkit - GSSAPI Assist library -------------------------------------------------------------------------------- Update Information: globus-ftp-control (8.0): * Add function globus_ftp_control_use_tls() for TLS control channel globus-gridftp-server-control (6.0): * Add support for control channel over TLS globus-gsi-sysconfig (7.1): * Add SNI vhost cred dir support globus-gss-assist (11.0): * Add new function gss_assist_read_vhost_cred_dir() for SNI server globus-gssapi-gsi (13.0): * Add SNI vhost cred dir support * Add optional ALPN processing globus-xio-gsi-driver (4.1): * Add SNI and ALPN support via cntls -------------------------------------------------------------------------------- ================================================================================ globus-gssapi-gsi-13.0-2.fc26 (FEDORA-2017-6063a01d68) Globus Toolkit - GSSAPI library -------------------------------------------------------------------------------- Update Information: globus-ftp-control (8.0): * Add function globus_ftp_control_use_tls() for TLS control channel globus-gridftp-server-control (6.0): * Add support for control channel over TLS globus-gsi-sysconfig (7.1): * Add SNI vhost cred dir support globus-gss-assist (11.0): * Add new function gss_assist_read_vhost_cred_dir() for SNI server globus-gssapi-gsi (13.0): * Add SNI vhost cred dir support * Add optional ALPN processing globus-xio-gsi-driver (4.1): * Add SNI and ALPN support via cntls -------------------------------------------------------------------------------- ================================================================================ globus-xio-gsi-driver-4.1-1.fc26 (FEDORA-2017-6063a01d68) Globus Toolkit - Globus XIO GSI Driver -------------------------------------------------------------------------------- Update Information: globus-ftp-control (8.0): * Add function globus_ftp_control_use_tls() for TLS control channel globus-gridftp-server-control (6.0): * Add support for control channel over TLS globus-gsi-sysconfig (7.1): * Add SNI vhost cred dir support globus-gss-assist (11.0): * Add new function gss_assist_read_vhost_cred_dir() for SNI server globus-gssapi-gsi (13.0): * Add SNI vhost cred dir support * Add optional ALPN processing globus-xio-gsi-driver (4.1): * Add SNI and ALPN support via cntls -------------------------------------------------------------------------------- ================================================================================ mate-screensaver-1.18.1-2.fc26 (FEDORA-2017-1d682f9cff) MATE Screensaver -------------------------------------------------------------------------------- Update Information: - fix text for slider in preferences -------------------------------------------------------------------------------- References: [ 1 ] Bug #1400554 - incorrect text rendering in slider https://bugzilla.redhat.com/show_bug.cgi?id=1400554 -------------------------------------------------------------------------------- ================================================================================ meld-3.18.0-1.fc26 (FEDORA-2017-d178b803ed) Visual diff and merge tool -------------------------------------------------------------------------------- Update Information: This update brings the new 3.18.0 release of Meld to you. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1490081 - meld-3.18.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1490081 -------------------------------------------------------------------------------- ================================================================================ mingw-libzip-1.3.0-1.fc26 (FEDORA-2017-4d4914a260) C library for reading, creating, and modifying zip archives -------------------------------------------------------------------------------- Update Information: Update to version 1.3.0, see https://nih.at/libzip/NEWS.html for details. ---- This update backports security fix for CVE-2017-14107. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1489000 - CVE-2017-14107 libzip: Memory allocation failure in _zip_cdir_grow function https://bugzilla.redhat.com/show_bug.cgi?id=1489000 -------------------------------------------------------------------------------- ================================================================================ php-phpmyadmin-sql-parser-4.2.1-1.fc26 (FEDORA-2017-79954d8c3b) A validating SQL lexer and parser with a focus on MySQL dialect -------------------------------------------------------------------------------- Update Information: **Version 4.2.1** - 2017-09-08 * Fixed minor bug in Query::getFlags. * Localizaton updates. ---- **Version 4.2.0** - 2017-08-30 * Initial support for MariaDB SQL contexts. * Add support for MariaDB 10.3 INTERSECT and EXCEPT. -------------------------------------------------------------------------------- ================================================================================ rawtherapee-5.2-2.fc26 (FEDORA-2017-b10e1a9166) Raw image processing software -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-13735 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1488930 - CVE-2017-13735 rawtherapee: libraw: Floating point exception in kodak_radc_load_raw function in internal/dcraw_common.cpp [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1488930 -------------------------------------------------------------------------------- ================================================================================ snapd-2.27.6-1.fc26 (FEDORA-2017-8ef8c9e6c2) A transactional software package manager -------------------------------------------------------------------------------- Update Information: New bugfix release: * interfaces: add udev netlink support to `hardware- observe` * interfaces/network-{control,observe}: allow receiving `kobject_uevent()` messages * interfaces: fix network-manager plug regression * hooks: do not error when hook handler is not registered * interfaces/alsa,pulseaudio: allow read on udev data for sound * interfaces /optical-drive: read access to udev data for `/dev/scd*` * interfaces/browser- support: read on `/proc/vmstat` and misc udev data * snap-seccomp: add secondary arch for unrestricted snaps as well * Remove the `Nice=-5` from the `snapd.service` file. This breaks in lxd containers In addition, the `snap userd` functionality has been backported from upstream git master to support `xdg-open` within snaps. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1483177 - snapd-2.27.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1483177 [ 2 ] Bug #1489437 - snapd-2.27.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1489437 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
