The following Fedora 26 Security updates need testing: Age URL 164 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01 python-XStatic-jquery-ui-1.12.0.1-2.fc26 103 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2522df3526 nodejs-brace-expansion-1.1.7-1.fc26 66 https://bodhi.fedoraproject.org/updates/FEDORA-2017-690a2548ba openvswitch-2.7.1-2.fc26 58 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1c053de325 memcached-1.4.39-1.fc26 54 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26 36 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d4248ba346 botan-1.10.16-1.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b10e1a9166 rawtherapee-5.2-2.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-63f99b3977 drupal7-views-3.18-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7699952c1b mingw-LibRaw-0.18.4-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-769793738f jasper-2.0.14-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5f699cb371 LibRaw-0.18.4-2.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b9f07dfaca python-jwt-1.5.3-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c89d94d812 mpg123-1.25.6-1.fc26 The following Fedora 26 Critical Path updates have yet to be approved: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b7dcfe861 kobo-0.6.0-1.fc26 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3f68f150f6 abrt-2.10.3-3.fc26 libreport-2.9.1-3.fc26 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-24dcbfa22d pungi-4.1.18-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-368b385c04 webkitgtk4-2.18.0-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-148849f8bd libssh2-1.8.0-5.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4a479d6a57 sssd-1.15.3-4.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5d62dd0192 menu-cache-1.0.2-6.D20170913gitfd52af607c.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a4c44c11a5 flatpak-0.9.12-1.fc26 flatpak-builder-0.9.11-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d3f4fcd0b8 nss-3.32.1-1.0.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-769793738f jasper-2.0.14-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ff7b30a42d libvirt-3.2.1-6.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3cb490f3fc libguestfs-1.36.6-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6c66158f2b gawk-4.1.4-5.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d45f5c7976 network-manager-applet-1.8.2-4.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0cf00e6f4e selinux-policy-3.13.1-260.9.fc26 The following builds have been pushed to Fedora 26 updates-testing ETL-1.2.1-1.fc26 appcenter-0.2.6-1.fc26 cacti-1.1.24-1.fc26 distgen-0.16-1.fc26 drupal7-l10n_update-2.2-1.fc26 drupal7-link-1.5-0.1.beta2.fc26 drupal7-webform-4.16-0.1.rc1.fc26 gawk-4.1.4-5.fc26 golang-github-fatih-color-0.1-0.1.20170905git1535ebc.fc26 golang-github-mattn-go-colorable-0-0.3.20170816gitad5389d.fc26 golang-github-mattn-go-isatty-0.0.2-0.1.gitfc9e8d8.fc26 golang-github-ncw-swift-0-0.9.git9d3f812.fc26 golang-googlecode-goprotobuf-0-0.30.git24f28ae.fc26 module-build-service-1.3.29-1.fc26 mpg123-1.25.6-1.fc26 network-manager-applet-1.8.2-4.fc26 python-ludolph-zabbix-1.7-1.fc26 python-requests-cache-0.4.13-1.fc26 qmapshack-1.9.1-1.fc26 rnetclient-2017.1-1.fc26 selinux-policy-3.13.1-260.9.fc26 synfig-1.2.1-2.fc26 synfigstudio-1.2.1-2.fc26 urh-1.8.7-1.fc26 wsjtx-1.8.0-0.3.rc2.fc26 xpra-2.1.2-1.fc26 Details about builds: ================================================================================ ETL-1.2.1-1.fc26 (FEDORA-2017-697a47ebcd) Extended Template Library -------------------------------------------------------------------------------- Update Information: 1.2.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1490378 - synfigstudio-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1490378 [ 2 ] Bug #1490377 - synfig-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1490377 -------------------------------------------------------------------------------- ================================================================================ appcenter-0.2.6-1.fc26 (FEDORA-2017-0804f55d60) Software Center for the Pantheon desktop -------------------------------------------------------------------------------- Update Information: Update to version 0.2.6. More information: https://github.com/elementary/appcenter/issues?q=is%3Aclosed+milestone%3A0.2.6 -------------------------------------------------------------------------------- ================================================================================ cacti-1.1.24-1.fc26 (FEDORA-2017-35cf747e87) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information: - Update to 1.1.24 Release notes: https://www.cacti.net/release_notes.php?version=1.1.24 -------------------------------------------------------------------------------- ================================================================================ distgen-0.16-1.fc26 (FEDORA-2017-3aaa95d907) Templating system/generator for distributions -------------------------------------------------------------------------------- Update Information: Update to distgen 0.16, which is 100 % backwards compatible and contains the "recursive rendering" feature. ---- Introduce distgen package for f26 and f27. -------------------------------------------------------------------------------- ================================================================================ drupal7-l10n_update-2.2-1.fc26 (FEDORA-2017-605a2a201f) Provides automatic downloads and updates for translations -------------------------------------------------------------------------------- Update Information: * [7.x-2.2](https://www.drupal.org/project/l10n_update/releases/7.x-2.2) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1492654 - drupal7-l10n_update-2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1492654 -------------------------------------------------------------------------------- ================================================================================ drupal7-link-1.5-0.1.beta2.fc26 (FEDORA-2017-ee76b4f77e) Defines simple link field types -------------------------------------------------------------------------------- Update Information: * [7.x-1.5-beta2](https://www.drupal.org/project/link/releases/7.x-1.5-beta2) * [7.x-1.5-beta1](https://www.drupal.org/project/link/releases/7.x-1.5-beta1) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1475049 - drupal7-link-1.5-beta2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1475049 -------------------------------------------------------------------------------- ================================================================================ drupal7-webform-4.16-0.1.rc1.fc26 (FEDORA-2017-06bae60540) Enables the creation of forms and questionnaires -------------------------------------------------------------------------------- Update Information: * [7.x-4.16-rc1](https://www.drupal.org/project/webform/releases/7.x-4.16-rc1) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1492251 - drupal7-webform-4.16-rc1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1492251 -------------------------------------------------------------------------------- ================================================================================ gawk-4.1.4-5.fc26 (FEDORA-2017-6c66158f2b) The GNU version of the AWK text processing utility -------------------------------------------------------------------------------- Update Information: This update contains actual fix for `info awk` and `info awkinet` to finally work. The package now also provides the `gawk(abi)` string with version corresponding to gawk's API version used. This can be used by packages depending on *gawk* to require specific (functioning) ABI. Overall, the specfile received another round of cleanup to become better readable. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1486924 - "info awk" gives broken link "Cannot find node 'Invoking gawk'." https://bugzilla.redhat.com/show_bug.cgi?id=1486924 -------------------------------------------------------------------------------- ================================================================================ golang-github-fatih-color-0.1-0.1.20170905git1535ebc.fc26 (FEDORA-2017-3c4e3593e1) Color package for Go (golang) -------------------------------------------------------------------------------- Update Information: update to latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1376437 - Review Request: golang-github-fatih-color - Color package for Go (golang) https://bugzilla.redhat.com/show_bug.cgi?id=1376437 -------------------------------------------------------------------------------- ================================================================================ golang-github-mattn-go-colorable-0-0.3.20170816gitad5389d.fc26 (FEDORA-2017-ba91ff6381) Common Functions in Go -------------------------------------------------------------------------------- Update Information: update to latest commit -------------------------------------------------------------------------------- References: [ 1 ] Bug #1376412 - Review Request: golang-github-mattn-go-colorable - Colorable writer for windows. https://bugzilla.redhat.com/show_bug.cgi?id=1376412 -------------------------------------------------------------------------------- ================================================================================ golang-github-mattn-go-isatty-0.0.2-0.1.gitfc9e8d8.fc26 (FEDORA-2017-5c75b3a2ca) Isatty for golang -------------------------------------------------------------------------------- Update Information: Update to v0.0.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1462140 - golang-github-mattn-go-isatty-v0.0.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1462140 -------------------------------------------------------------------------------- ================================================================================ golang-github-ncw-swift-0-0.9.git9d3f812.fc26 (FEDORA-2017-ebc148a8ee) Go language interface to Swift -------------------------------------------------------------------------------- Update Information: Bump to upstream 9d3f812e23d270d1c66a9a01e20af1005061cdc4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1476281 - Please update the package to a more recent version https://bugzilla.redhat.com/show_bug.cgi?id=1476281 -------------------------------------------------------------------------------- ================================================================================ golang-googlecode-goprotobuf-0-0.30.git24f28ae.fc26 (FEDORA-2017-c0669ff5f4) Go support for Google protocol buffers -------------------------------------------------------------------------------- Update Information: Bump to upstream 24f28ae800abfde9310e779f94be606b1a98a3fc -------------------------------------------------------------------------------- References: [ 1 ] Bug #1246113 - Tracker for golang-googlecode-goprotobuf https://bugzilla.redhat.com/show_bug.cgi?id=1246113 [ 2 ] Bug #1474510 - Requesting an update of package golang-googlecode-goprotobuf https://bugzilla.redhat.com/show_bug.cgi?id=1474510 [ 3 ] Bug #1423671 - golang-googlecode-goprotobuf: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1423671 -------------------------------------------------------------------------------- ================================================================================ module-build-service-1.3.29-1.fc26 (FEDORA-2017-ff5762fbd2) The Module Build Service for Modularity -------------------------------------------------------------------------------- Update Information: Some fixes: - https://pagure.io/fm-orchestrator/pull-request/698 - https://pagure.io/fm-orchestrator/pull-request/697 - https://pagure.io/fm- orchestrator/pull-request/693 - https://pagure.io/fm-orchestrator/pull- request/692 - https://pagure.io/fm-orchestrator/pull-request/691 ---- Latest upstream. - Optional Kerberos + LDAP Authentication for the server. - Correct "filtering" at build time: conflict with packages filtered out from the build- requires to ensure they won't appear in a buildroot. - Wait for components to be tagged also in final tag before marking module as done. This should fix an issue for the F27 compose. - Local mock builds no longer hardcode`x86_64` for architecture. ---- Latest upstream. ---- Backport patches to fix skiptests behavior -------------------------------------------------------------------------------- ================================================================================ mpg123-1.25.6-1.fc26 (FEDORA-2017-c89d94d812) Real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 and 3 -------------------------------------------------------------------------------- Update Information: Update to upstream release 1.25.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1480322 - Update for mpg123 https://bugzilla.redhat.com/show_bug.cgi?id=1480322 [ 2 ] Bug #1470104 - CVE-2017-10683 CVE-2017-11126 CVE-2017-9545 CVE-2017-12797 mpg123: Multiple vulnerabilities [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1470104 [ 3 ] Bug #1465819 - There is a heap buffer overflow in mpg123 latest version. https://bugzilla.redhat.com/show_bug.cgi?id=1465819 [ 4 ] Bug #1442278 - ALSA module skips beginning of any mp3 file https://bugzilla.redhat.com/show_bug.cgi?id=1442278 [ 5 ] Bug #1428195 - mpg123-1.25.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1428195 -------------------------------------------------------------------------------- ================================================================================ network-manager-applet-1.8.2-4.fc26 (FEDORA-2017-d45f5c7976) A network control and status applet for NetworkManager -------------------------------------------------------------------------------- Update Information: Update to fix wrong status icon when a VPN with default route is active (rh #1471510) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1471510 - Icon doesn't reflect VPN status https://bugzilla.redhat.com/show_bug.cgi?id=1471510 -------------------------------------------------------------------------------- ================================================================================ python-ludolph-zabbix-1.7-1.fc26 (FEDORA-2017-e6f9fcc1f1) Ludolph: Zabbix API plugin -------------------------------------------------------------------------------- Update Information: Initial package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1488156 - Review Request: python-ludolph-zabbix - Ludolph: Zabbix API plugin https://bugzilla.redhat.com/show_bug.cgi?id=1488156 -------------------------------------------------------------------------------- ================================================================================ python-requests-cache-0.4.13-1.fc26 (FEDORA-2017-5afa2810c8) Persistent cache for requests library -------------------------------------------------------------------------------- Update Information: 0.4.13, plenty of bugfixes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1324920 - Please update python-requests-cache to 0.4.13 https://bugzilla.redhat.com/show_bug.cgi?id=1324920 -------------------------------------------------------------------------------- ================================================================================ qmapshack-1.9.1-1.fc26 (FEDORA-2017-584ecc9d75) GPS mapping and management tool -------------------------------------------------------------------------------- Update Information: - updated to 1.9.0 - https://bitbucket.org/maproom/qmapshack/raw/fe88bc61a78f8c6 01beb7ae07a2ab861ed644c20/changelog.txt -------------------------------------------------------------------------------- References: [ 1 ] Bug #1492506 - qmapshack-1.9.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1492506 -------------------------------------------------------------------------------- ================================================================================ rnetclient-2017.1-1.fc26 (FEDORA-2017-3e5731dfea) Submit the Brazilian Income Tax Report to the Brazilian Tax Authority -------------------------------------------------------------------------------- Update Information: New upstream version. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1480824 - rnetclient-2017.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1480824 -------------------------------------------------------------------------------- ================================================================================ selinux-policy-3.13.1-260.9.fc26 (FEDORA-2017-0cf00e6f4e) SELinux policy configuration -------------------------------------------------------------------------------- Update Information: More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=970658 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1491427 - SELinux is preventing postgres from unix_read, unix_write access on the shared memory Unknown. https://bugzilla.redhat.com/show_bug.cgi?id=1491427 [ 2 ] Bug #1487044 - SELinux is preventing systemd-logind from 'getattr' accesses on the file /dev/shm/PostgreSQL.188495196. https://bugzilla.redhat.com/show_bug.cgi?id=1487044 [ 3 ] Bug #1471545 - SElinux prevents postfix from reading /run/systemd/resolve/resolv.conf https://bugzilla.redhat.com/show_bug.cgi?id=1471545 [ 4 ] Bug #1436026 - selinux prevents postfix cleanup from accessing socket based non_smtpd_milters https://bugzilla.redhat.com/show_bug.cgi?id=1436026 [ 5 ] Bug #1398907 - postfix chroot-update has incorrect SELinux label https://bugzilla.redhat.com/show_bug.cgi?id=1398907 -------------------------------------------------------------------------------- ================================================================================ synfig-1.2.1-2.fc26 (FEDORA-2017-697a47ebcd) Vector-based 2D animation rendering backend -------------------------------------------------------------------------------- Update Information: 1.2.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1490378 - synfigstudio-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1490378 [ 2 ] Bug #1490377 - synfig-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1490377 -------------------------------------------------------------------------------- ================================================================================ synfigstudio-1.2.1-2.fc26 (FEDORA-2017-697a47ebcd) Vector-based 2D animation studio -------------------------------------------------------------------------------- Update Information: 1.2.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1490378 - synfigstudio-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1490378 [ 2 ] Bug #1490377 - synfig-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1490377 -------------------------------------------------------------------------------- ================================================================================ urh-1.8.7-1.fc26 (FEDORA-2017-05a797f500) Universal Radio Hacker: investigate wireless protocols like a boss -------------------------------------------------------------------------------- Update Information: This is new version of urh. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1492666 - urh-1.8.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1492666 -------------------------------------------------------------------------------- ================================================================================ wsjtx-1.8.0-0.3.rc2.fc26 (FEDORA-2017-bb8ff27428) Weak Signal communication by K1JT -------------------------------------------------------------------------------- Update Information: This is new package: weak signal communication by K1JT. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1487776 - Review Request: wsjtx - Weak Signal communication by K1JT https://bugzilla.redhat.com/show_bug.cgi?id=1487776 -------------------------------------------------------------------------------- ================================================================================ xpra-2.1.2-1.fc26 (FEDORA-2017-2a9811608b) Remote display server for applications and desktops -------------------------------------------------------------------------------- Update Information: - Update to 2.1.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1492667 - xpra-2.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1492667 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx