The following Fedora 26 Security updates need testing: Age URL 197 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01 python-XStatic-jquery-ui-1.12.0.1-2.fc26 136 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2522df3526 nodejs-brace-expansion-1.1.7-1.fc26 90 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1c053de325 memcached-1.4.39-1.fc26 87 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26 15 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6e6f4f95e6 ruby-2.4.2-84.fc26 13 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9f36da1aac check-mk-1.2.8p26-1.fc26 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-afb05e0873 nodejs-forwarded-0.1.2-1.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-21293887a2 poppler-0.52.0-8.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a0ffdf1fbd mingw-poppler-0.52.0-5.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5bcddc1984 xen-4.8.2-4.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b52f851dea calamares-3.1.6-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ac20492c3e cacti-1.1.26-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c7bdf540b4 lucene-6.1.0-6.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6bff3cf26c suricata-3.2.4-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c110ac0eb1 kernel-4.13.8-200.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7e003afcbd SDL2-2.0.5-8.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9149114fba qemu-2.9.1-2.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4a42419c16 libextractor-1.6-1.fc26 The following Fedora 26 Critical Path updates have yet to be approved: Age URL 20 https://bodhi.fedoraproject.org/updates/FEDORA-2017-621a9b4828 iproute-4.13.0-1.fc26 15 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ff8aeb8db8 fontconfig-2.12.6-3.fc26 15 https://bodhi.fedoraproject.org/updates/FEDORA-2017-02be915e88 p11-kit-0.23.9-2.fc26 15 https://bodhi.fedoraproject.org/updates/FEDORA-2017-45a9490ce0 geocode-glib-3.24.0-1.fc26 13 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2ab6fac68e glusterfs-3.10.6-3.fc26 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8e91b32f31 python3-3.6.3-2.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-21293887a2 poppler-0.52.0-8.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0f491ba90a python-productmd-1.8-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5bcddc1984 xen-4.8.2-4.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ba5ac7af6f audit-2.8.1-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bd24b5ae3f pulseaudio-11.1-2.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6aca2300f5 spice-0.14.0-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-236ad80b82 gperftools-2.6.1-5.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-19f599ecd6 chrony-3.2-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c133443edc calibre-3.1.1-2.fc26 fcitx-qt5-1.1.1-2.fc26 gammaray-2.8.1-2.fc26 kf5-akonadi-server-17.04.1-4.fc26 kf5-frameworkintegration-5.38.0-2.fc26 kf5-kdeclarative-5.38.0-2.fc26 kf5-kwayland-5.38.0-2.fc26 kwin-5.10.5-2.fc26 libfm-qt-0.11.2-7.fc26 libqtxdg-2.0.0-6.fc26 lxqt-qtplugin-0.11.1-7.fc26 plasma-integration-5.10.5-2.fc26 python-qt5-5.9-8.fc26 qgnomeplatform-0.3-5.fc26 qstardict-1.2-5.fc26 qt-creator-4.2.2-7.fc26 qt5-doc-5.9.2-1.fc26 qt5-qt3d-5.9.2-1.fc26 qt5-qtbase-5.9.2-1.fc26 qt5-qtcanvas3d-5.9.2-1.fc26 qt5-qtconnectivity-5.9.2-1.fc26 qt5-qtdeclarative-5.9.2-1.fc26 qt5-qtdoc-5.9.2-1.fc26 qt5-qtgraphicaleffects-5.9.2-1.fc26 qt5-qtimageformats-5.9.2-1.fc26 qt5-qtlocation-5.9.2-1.fc26 qt5-qtmultimedia-5.9.2-1.fc26 qt5-qtquickcontrols-5.9.2-1.fc26 qt5-qtquickcontrols2-5.9.2-1.fc26 qt5-qtscript-5.9.2-1.fc26 qt5-qtsensors-5.9.2-1.fc26 qt5-qtserialbus-5.9.2-1.fc26 qt5-qtserialport-5.9.2-1.fc26 qt5-qtstyleplugins-5.0.0-2 1.fc26 qt5-qtsvg-5.9.2-1.fc26 qt5-qttools-5.9.2-1.fc26 qt5-qttranslations-5.9.2-1.fc26 qt5-qtvirtualkeyboard-5.9.2-1.fc26 qt5-qtwayland-5.9.2-1.fc26 qt5-qtwebchannel-5.9.2-1.fc26 qt5-qtwebengine-5.9.1-5.fc26 qt5-qtwebkit-5.212.0-0.10.alpha2.fc26 qt5-qtwebsockets-5.9.2-1.fc26 qt5-qtx11extras-5.9.2-1.fc26 qt5-qtxmlpatterns-5.9.2-1.fc26 qt5ct-0.33-2.fc26 sip-4.19.3-4.fc26 ugene-1.27.0-8.fc26 yarock-1.1.6-7.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-74d9232ac6 nss-softokn-3.33.0-1.1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-dc751fa21c libguestfs-1.36.10-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7e003afcbd SDL2-2.0.5-8.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c110ac0eb1 kernel-4.13.8-200.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2b44217ccc kobo-0.7.0-3.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7f935bbe23 gnutls-3.5.16-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e89163acc6 corosync-2.4.3-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-98266811b4 webkitgtk4-2.18.1-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-20c836ad13 epiphany-3.24.5-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9149114fba qemu-2.9.1-2.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7a99e657ce pykickstart-2.35-2.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-35ffc6c6a3 gnome-online-accounts-3.24.4-1.fc26 The following builds have been pushed to Fedora 26 updates-testing COPASI-4.21.166-2.fc26 beakerlib-1.17-4.fc26 boinc-client-7.8.3-2.fc26 corosync-2.4.3-1.fc26 cri-o-1.0.0-6.gita636972.fc26 engauge-digitizer-10.4-1.fc26 epiphany-3.24.5-1.fc26 featherpad-0.6.1-1.fc26 fedora-easy-karma-0-0.34.20171019gitbc16e916.fc26 fedrepo-req-1.9.0-1.fc26 fleet-commander-admin-0.10.3-2.fc26 gnome-online-accounts-3.24.4-1.fc26 gnutls-3.5.16-1.fc26 gpxsee-4.16-1.fc26 greenwave-0.3-3.fc26 guayadeque-0.4.5-0.11.beta1git55efd99.fc26 hplip-3.17.10-1.fc26 icat-0.4-2.fc26 icedtea-web-1.7-5.fc26 libcss-0.7.0-1.fc26 libextractor-1.6-1.fc26 libhubbub-0.3.4-1.fc26 libmtp-1.1.14-1.fc26 libsedml-0.4.3-4.fc26 libstoragemgmt-1.6.0-1.fc26 libvisio-0.1.6-1.fc26 link-grammar-5.4.2-1.fc26 livecd-tools-25.0-1.fc26 lxc-2.0.9-1.fc26 mod_http2-1.10.12-1.fc26 mozilla-requestpolicy-1.0-0.19.20171019git633302.fc26 netsurf-buildsystem-1.6-1.fc26 nodejs-6.11.4-1.fc26 ocserv-0.11.9-1.fc26 pcs-0.9.160-1.fc26 pdc-updater-0.6.5-1.fc26 php-pecl-amqp-1.9.3-1.fc26 php-phpunit-dbunit3-3.0.1-1.fc26 pop-icon-theme-0.1.0-0.1.20171011git9f08f5d.fc26 pykickstart-2.35-2.fc26 python-metakernel-0.20.8-1.fc26 python-multidict-3.3.0-1.fc26 python-pdir2-0.2.2-1.fc26 python-sync2jira-1.6-1.fc26 python-tablib-0.12.1-2.fc26 python3-mypy-0.530-1.fc26 pywbem-0.11.0-3.fc26 qemu-2.9.1-2.fc26 qhttpengine-1.0.0-1.fc26 root-6.10.08-1.fc26 rpkg-client-0.11-1.fc26 runc-1.0.0-11.rc4.gitaea4f21.fc26 scanmem-0.17-1.fc26 spyder-3.2.4-1.fc26 systemtap-3.2-1.fc26 udiskie-1.7.1-2.fc26 webkitgtk4-2.18.1-1.fc26 wkhtmltopdf-0.12.4-1.fc26 xxhash-0.6.3-2.fc26 yoshimi-1.5.4.1-1.fc26 youtube-dl-2017.10.15.1-1.fc26 yubico-piv-tool-1.4.4-1.fc26 Details about builds: ================================================================================ COPASI-4.21.166-2.fc26 (FEDORA-2017-e1a332934d) Biochemical network simulator -------------------------------------------------------------------------------- Update Information: - Update to 4.21, build 166 -------------------------------------------------------------------------------- ================================================================================ beakerlib-1.17-4.fc26 (FEDORA-2017-c4fe681e0d) A shell-level integration testing library -------------------------------------------------------------------------------- Update Information: updated dependecies set ---- - completely reworked getting rpms - bstor.py rewritten in pure bash - some doc fixes - completely rewritten journal - extended test suite - support for XSL transformation of journal.xml - provided xunit.xsl - libraries are now searched also in /usr/share/beakerlib-libraries -------------------------------------------------------------------------------- ================================================================================ boinc-client-7.8.3-2.fc26 (FEDORA-2017-65f3922240) The BOINC client -------------------------------------------------------------------------------- Update Information: This is the new upstream release of the BOINC client. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1397476 - SELinux is preventing boinc_client from 'read' accesses on the file mmap_min_addr. https://bugzilla.redhat.com/show_bug.cgi?id=1397476 [ 2 ] Bug #1421482 - Remove (7.6.33) BOINC Xorg based idle detection https://bugzilla.redhat.com/show_bug.cgi?id=1421482 -------------------------------------------------------------------------------- ================================================================================ corosync-2.4.3-1.fc26 (FEDORA-2017-e89163acc6) The Corosync Cluster Engine and Application Programming Interfaces -------------------------------------------------------------------------------- Update Information: This update improves stability and addresses several bugs -------------------------------------------------------------------------------- ================================================================================ cri-o-1.0.0-6.gita636972.fc26 (FEDORA-2017-79bd32c01d) CRI-O is the Kubernetes Container Runtime Interface for OCI-based containers -------------------------------------------------------------------------------- Update Information: Fix installing issues. ---- Version 1.0 release ---- V1.0 Release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1503203 - cri-o plugins path: set to /usr/libexec/cni https://bugzilla.redhat.com/show_bug.cgi?id=1503203 -------------------------------------------------------------------------------- ================================================================================ engauge-digitizer-10.4-1.fc26 (FEDORA-2017-ed5b5b62c7) Convert graphs or map files into numbers -------------------------------------------------------------------------------- Update Information: - Update to 10.4 -------------------------------------------------------------------------------- ================================================================================ epiphany-3.24.5-1.fc26 (FEDORA-2017-20c836ad13) Web browser for GNOME -------------------------------------------------------------------------------- Update Information: Update to 3.24.5 -------------------------------------------------------------------------------- ================================================================================ featherpad-0.6.1-1.fc26 (FEDORA-2017-ce3c104410) Lightweight Qt5 Plain-Text Editor -------------------------------------------------------------------------------- Update Information: Update to version 0.6.1 -------------------------------------------------------------------------------- ================================================================================ fedora-easy-karma-0-0.34.20171019gitbc16e916.fc26 (FEDORA-2017-d4277c7b96) Fedora update feedback made easy -------------------------------------------------------------------------------- Update Information: Limit number of updates requested from Bodhi at once. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1504089 - easy-karma or bodhi broken: too many 500 error responses https://bugzilla.redhat.com/show_bug.cgi?id=1504089 -------------------------------------------------------------------------------- ================================================================================ fedrepo-req-1.9.0-1.fc26 (FEDORA-2017-6fecfe29ce) CLI for Fedora package repo requests -------------------------------------------------------------------------------- Update Information: Changes: * Allow a user to request that the new repo request be treated as an exception and skip the requirement for a Bugzilla bug * Fix a bug in fedrepo- req-admin when trying to determine the first commit of a git repo -------------------------------------------------------------------------------- ================================================================================ fleet-commander-admin-0.10.3-2.fc26 (FEDORA-2017-f0c77e5fe0) Fleet Commander -------------------------------------------------------------------------------- Update Information: Fixed missing dependencies on python2-ipalib and python2-ipaclient -------------------------------------------------------------------------------- ================================================================================ gnome-online-accounts-3.24.4-1.fc26 (FEDORA-2017-35ffc6c6a3) Single sign-on framework for GNOME -------------------------------------------------------------------------------- Update Information: Advertise non-STARTTLS support for GMail -------------------------------------------------------------------------------- ================================================================================ gnutls-3.5.16-1.fc26 (FEDORA-2017-7f935bbe23) A TLS protocol implementation -------------------------------------------------------------------------------- Update Information: - Update to upstream 3.5.16 release -------------------------------------------------------------------------------- ================================================================================ gpxsee-4.16-1.fc26 (FEDORA-2017-aed930be42) GPS log file viewer and analyzer -------------------------------------------------------------------------------- Update Information: News in version **4.16**: * Fixed broken loading of KML files with folder elements outside document element * Added support for KML files with multitracks * Added support for Temperature, Cadence and Heartrate in KML files * Added support for TCX multi-sport activities ---- **GPXSee** is a Qt-based GPS log file viewer and analyzer that supports GPX, TCX, KML, FIT, IGC and NMEA files. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500524 - Review Request: gpxsee - GPS log file viewer and analyzer https://bugzilla.redhat.com/show_bug.cgi?id=1500524 -------------------------------------------------------------------------------- ================================================================================ greenwave-0.3-3.fc26 (FEDORA-2017-2588f5c55a) Service for gating on automated tests -------------------------------------------------------------------------------- Update Information: Apply https://pagure.io/greenwave/pull-request/97 ---- Fix incorrect upstream tarball used -------------------------------------------------------------------------------- ================================================================================ guayadeque-0.4.5-0.11.beta1git55efd99.fc26 (FEDORA-2017-988974bc8a) Music player -------------------------------------------------------------------------------- Update Information: Update to 0.4.5-0.11.beta1git55efd99 ---- Update to 0.4.5-0.10.beta1gitf4cd389.fc27 -------------------------------------------------------------------------------- ================================================================================ hplip-3.17.10-1.fc26 (FEDORA-2017-da1e383f18) HP Linux Imaging and Printing Project -------------------------------------------------------------------------------- Update Information: Rebase to 3.17.10 -------------------------------------------------------------------------------- ================================================================================ icat-0.4-2.fc26 (FEDORA-2017-ac85e9deda) Output images in terminal -------------------------------------------------------------------------------- Update Information: First build & update -------------------------------------------------------------------------------- References: [ 1 ] Bug #1503765 - Review Request: icat - display images in terminal https://bugzilla.redhat.com/show_bug.cgi?id=1503765 -------------------------------------------------------------------------------- ================================================================================ icedtea-web-1.7-5.fc26 (FEDORA-2017-7b2eb77aa5) Additional Java components for OpenJDK - Java browser plug-in and Web Start implementation -------------------------------------------------------------------------------- Update Information: gathered various patches from usptream -------------------------------------------------------------------------------- ================================================================================ libcss-0.7.0-1.fc26 (FEDORA-2017-354dd682d9) A CSS parser and selection engine -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ================================================================================ libextractor-1.6-1.fc26 (FEDORA-2017-4a42419c16) Simple library for keyword extraction -------------------------------------------------------------------------------- Update Information: 1.6, multiple security fixes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1501695 - NULL Pointer Dereference vulneribility in libextractor EXTRACTOR_nsf_extract_method https://bugzilla.redhat.com/show_bug.cgi?id=1501695 [ 2 ] Bug #1499600 - NULL Pointer Dereference vulneribility in libextract when get flac meta from libFlac https://bugzilla.redhat.com/show_bug.cgi?id=1499600 [ 3 ] Bug #1499599 - libextract Divide-By-Zero Denial of Service Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1499599 [ 4 ] Bug #1504389 - libextractor-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504389 -------------------------------------------------------------------------------- ================================================================================ libhubbub-0.3.4-1.fc26 (FEDORA-2017-6ba36cb624) An HTML5 compliant parsing library -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ================================================================================ libmtp-1.1.14-1.fc26 (FEDORA-2017-2178545be6) A software library for MTP media players -------------------------------------------------------------------------------- Update Information: Contains lots of new USB ids for devices, some 64bit transfer fixes, a new LIBMTP_Custom_Operation() function to pass through simple PTP commands and some other bugfixes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1404922 - Cannot copy big files (BQ Aquaris X5 phone) https://bugzilla.redhat.com/show_bug.cgi?id=1404922 [ 2 ] Bug #1421369 - No longer possible to copy files to a mtp device https://bugzilla.redhat.com/show_bug.cgi?id=1421369 [ 3 ] Bug #1422881 - libmtp error: couldn't add object to cache https://bugzilla.redhat.com/show_bug.cgi?id=1422881 [ 4 ] Bug #1401826 - libmtp error: could not get object handles for some directories https://bugzilla.redhat.com/show_bug.cgi?id=1401826 -------------------------------------------------------------------------------- ================================================================================ libsedml-0.4.3-4.fc26 (FEDORA-2017-08465dc57c) Library that fully supports SED-ML for SBML -------------------------------------------------------------------------------- Update Information: - Update to 0.4.3 - New Epoch - Rebuild against new libnuml -------------------------------------------------------------------------------- References: [ 1 ] Bug #1496792 - libsedml-v0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1496792 -------------------------------------------------------------------------------- ================================================================================ libstoragemgmt-1.6.0-1.fc26 (FEDORA-2017-36dd95ddd5) Storage array management library -------------------------------------------------------------------------------- Update Information: Upgrade to version 1.6.0: * New error number for deleting volume/fs with child dependency: * C: `LSM_ERR_HAS_CHILD_DEPENDENCY` * Python: `lsm.ErrorNumber.HAS_CHILD_DEPENDENCY` * Fix incorrect SCSI VPD query for 0x89 and 0xb1. * Fix regression on using libstoragemgmt with pywbem 0.7.0. * Updates on manpage and help message of lsmcli. ---- Fixed the multilib issue of NFS plugin. ---- Upgrade to 1.5.0: - New plugin -- LibstorageMgmt NFS server plugin(`nfs://`). - New plugin -- LibstorageMgmt Local Pseudo plugin(`local://`). - New plugin -- LibstorageMgmt Microsemi storage plugin(`arcconf://`). - Removed support of lmiwbem due to missing self-signed CA verification and inactive upstream of lmiwbem. - Support SES actions on kernel `bsg` module(old code was using `sg` kernel module). - Add manpages for every C API using kernel-doc. - Using docker of Fedora and Centos for Travis CI test. - New URI parameter `ca_cert_file` for ONTAP, SMI-S, targetd plugin. - Bug fixes: * Fix the ONTAP SSL connection. * Sim plugin: Fix sqlite3 transaction of fs_child_dependency_rm(). * MegaRAID: Handle when both perccli and storcli are installed. * MegaRAID plugin: Support pool status for rebuild and check. * Fixed C++ code compile warnings. - Library adds: * Query health status of local disk: lsm_local_disk_health_status_get()/lsm.LocalDisk.health_status_get() -------------------------------------------------------------------------------- ================================================================================ libvisio-0.1.6-1.fc26 (FEDORA-2017-8e688d364f) A library for import of Microsoft Visio diagrams -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ================================================================================ link-grammar-5.4.2-1.fc26 (FEDORA-2017-b79d18ff49) A full-service natural language dependency parser -------------------------------------------------------------------------------- Update Information: 5.4.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1504390 - link-grammar-5.4.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504390 -------------------------------------------------------------------------------- ================================================================================ livecd-tools-25.0-1.fc26 (FEDORA-2017-56598fe991) Tools for building live CDs -------------------------------------------------------------------------------- Update Information: This update rebases `livecd-tools` to v25.0 to address several bugs and introduces the new `editliveos` tool to replace `edit-livecd`. `livecd-tools` now supports OverlayFS as an alternative to the device-mapper as the mechanism for persistent live media. A new subpackage `livecd-iso-to-mediums` has been introduced to provide the `livecd-iso-to-disk` and `livecd-iso-to-pxe` scripts separately without requiring the main `livecd-tools` package to be installed. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1495005 - livecd-creator crashes due to missing "b" in live.py on line 497 and 581 https://bugzilla.redhat.com/show_bug.cgi?id=1495005 [ 2 ] Bug #1494792 - livecd-iso-to-disk claims the double of the space that needs https://bugzilla.redhat.com/show_bug.cgi?id=1494792 [ 3 ] Bug #1475604 - livecd-iso-to-disk fails to create overlay https://bugzilla.redhat.com/show_bug.cgi?id=1475604 -------------------------------------------------------------------------------- ================================================================================ lxc-2.0.9-1.fc26 (FEDORA-2017-0aa82ded6b) Linux Resource Containers -------------------------------------------------------------------------------- Update Information: Update to 2.0.9, the ninth bugfix release for LXC 2.0. The list of bugfixes can be found [here](https://discuss.linuxcontainers.org/t/lxc-2-0-9-has-been- released/680). -------------------------------------------------------------------------------- ================================================================================ mod_http2-1.10.12-1.fc26 (FEDORA-2017-72e073b526) module implementing HTTP/2 for Apache 2 -------------------------------------------------------------------------------- Update Information: Fixes a race condition on request body handling. -------------------------------------------------------------------------------- ================================================================================ mozilla-requestpolicy-1.0-0.19.20171019git633302.fc26 (FEDORA-2017-1abf6d3b2c) Firefox and Seamonkey extension that gives you control over cross-site requests -------------------------------------------------------------------------------- Update Information: - Update to v1.0.beta13.2 -------------------------------------------------------------------------------- ================================================================================ netsurf-buildsystem-1.6-1.fc26 (FEDORA-2017-c109cd53a0) Makefiles shared by NetSurf projects -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ================================================================================ nodejs-6.11.4-1.fc26 (FEDORA-2017-f21bfd09bb) JavaScript runtime -------------------------------------------------------------------------------- Update Information: Update to Node.js 6.11.4 -------------------------------------------------------------------------------- ================================================================================ ocserv-0.11.9-1.fc26 (FEDORA-2017-8b7d0adbd9) OpenConnect SSL VPN server -------------------------------------------------------------------------------- Update Information: - Update to upstream 0.11.9 release -------------------------------------------------------------------------------- ================================================================================ pcs-0.9.160-1.fc26 (FEDORA-2017-aa9061da49) Pacemaker Configuration System -------------------------------------------------------------------------------- Update Information: Rebased to latest upstream sources -------------------------------------------------------------------------------- References: [ 1 ] Bug #927977 - pcs-debuginfo 0.9.139-5 missing sources https://bugzilla.redhat.com/show_bug.cgi?id=927977 -------------------------------------------------------------------------------- ================================================================================ pdc-updater-0.6.5-1.fc26 (FEDORA-2017-816fb60d1a) Update the product definition center in response to fedmsg -------------------------------------------------------------------------------- Update Information: Fix a bug in the way we submit a `PATCH` to pdc. https://github.com/fedora- infra/pdc-updater/pull/76 ---- See note on the [infra list](https://lists.fedo raproject.org/archives/list/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx/thread/PTZWLT ZWKJEWZ5A6JXYAHYNYIURGIITK/). -------------------------------------------------------------------------------- ================================================================================ php-pecl-amqp-1.9.3-1.fc26 (FEDORA-2017-5fb47f5ae4) Communicate with any AMQP compliant server -------------------------------------------------------------------------------- Update Information: **Version 1.9.3** * Fix handling channel consumers (#284) (Bogdan Padalko) * Add support for consumer tags (#282) (Bogdan Padalko) -------------------------------------------------------------------------------- ================================================================================ php-phpunit-dbunit3-3.0.1-1.fc26 (FEDORA-2017-cf0642e033) PHPUnit extension for database interaction testing -------------------------------------------------------------------------------- Update Information: **Version 3.0.1** - 2017-10-19 * **Fixed** * Fixed [#193](https://github.com/sebastianbergmann/dbunit/pull/193): Multibyte values are not displayed correctly * Fixed [#195](https://github.com/sebastianbergmann/dbunit/issues/195): Empty tables are not displayed correctly -------------------------------------------------------------------------------- ================================================================================ pop-icon-theme-0.1.0-0.1.20171011git9f08f5d.fc26 (FEDORA-2017-7a18163875) System76 Pop icon theme for Linux -------------------------------------------------------------------------------- Update Information: Bump release 0.1.0-0.1.20171011git9f08f5d -------------------------------------------------------------------------------- ================================================================================ pykickstart-2.35-2.fc26 (FEDORA-2017-7a99e657ce) Python utilities for manipulating kickstart files. -------------------------------------------------------------------------------- Update Information: Add a patch to fix builds against python 3.6.3 (jkonecny). -------------------------------------------------------------------------------- ================================================================================ python-metakernel-0.20.8-1.fc26 (FEDORA-2017-14fa6b94ce) Metakernel for Jupyter -------------------------------------------------------------------------------- Update Information: New version. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1504396 - python-metakernel-v0.20.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504396 -------------------------------------------------------------------------------- ================================================================================ python-multidict-3.3.0-1.fc26 (FEDORA-2017-80189dda88) MultiDict implementation -------------------------------------------------------------------------------- Update Information: Introduce abstract base classes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1504382 - python-multidict-3.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504382 -------------------------------------------------------------------------------- ================================================================================ python-pdir2-0.2.2-1.fc26 (FEDORA-2017-acf1725f0b) Pretty dir() printing with joy -------------------------------------------------------------------------------- Update Information: - Latest upstream - Remove environment markers from setup.py to allow using older setuptools - EPEL compatibility -------------------------------------------------------------------------------- References: [ 1 ] Bug #1504406 - python-pdir2-0.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504406 -------------------------------------------------------------------------------- ================================================================================ python-sync2jira-1.6-1.fc26 (FEDORA-2017-d8450fa7ac) Sync pagure and github issues to jira, via fedmsg -------------------------------------------------------------------------------- Update Information: Support for filtering on pagure tags. -------------------------------------------------------------------------------- ================================================================================ python-tablib-0.12.1-2.fc26 (FEDORA-2017-288289fbdb) Format agnostic tabular data library (XLS, JSON, YAML, CSV) -------------------------------------------------------------------------------- Update Information: Update to 0.12.1 and fix missing deps. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1499306 - Missing dependencies for python-tablib package https://bugzilla.redhat.com/show_bug.cgi?id=1499306 -------------------------------------------------------------------------------- ================================================================================ python3-mypy-0.530-1.fc26 (FEDORA-2017-05abba1d8e) A static type checker for Python -------------------------------------------------------------------------------- Update Information: 0.530 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1504399 - python3-mypy-v0.530 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504399 -------------------------------------------------------------------------------- ================================================================================ pywbem-0.11.0-3.fc26 (FEDORA-2017-a6049dd1cf) Python2 WBEM Client and Provider Interface -------------------------------------------------------------------------------- Update Information: Upgrade to 0.11.0 -------------------------------------------------------------------------------- ================================================================================ qemu-2.9.1-2.fc26 (FEDORA-2017-9149114fba) QEMU is a FAST! processor emulator -------------------------------------------------------------------------------- Update Information: * Fix usb3 drive issues with windows guests (bz #1493196) * CVE-2017-15038: 9p: information disclosure when reading extended attributes (bz #1499111) * CVE-2017-15268: potential memory exhaustion via websock connection to VNC (bz #1496882) * CVE-2017-14167: multiboot OOB access while loading kernel image (bz #1489376) * CVE-2017-13672: vga: OOB read access during display update (bz #1486561) * CVE-2017-12809: flushing of empty CDROM drives leads to NULL deref (bz #1483536) * CVE-2017-11434 slirp: out-of-bounds read while parsing dhcp options (bz #1472612) * Fix sending multimedia keys through spice (bz #1471758) * Another ppc64le binfmt fix (bz #1500526) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1499110 - CVE-2017-15038 Qemu: 9p: virtfs: information disclosure when reading extended attributes https://bugzilla.redhat.com/show_bug.cgi?id=1499110 [ 2 ] Bug #1496879 - CVE-2017-15268 Qemu: I/O: potential memory exhaustion via websock connection to VNC https://bugzilla.redhat.com/show_bug.cgi?id=1496879 [ 3 ] Bug #1489375 - CVE-2017-14167 Qemu: i386: multiboot OOB access while loading kernel image https://bugzilla.redhat.com/show_bug.cgi?id=1489375 [ 4 ] Bug #1486560 - CVE-2017-13672 Qemu: vga: OOB read access during display update https://bugzilla.redhat.com/show_bug.cgi?id=1486560 [ 5 ] Bug #1483534 - CVE-2017-12809 Qemu: ide: flushing of empty CDROM drives leads to NULL dereference https://bugzilla.redhat.com/show_bug.cgi?id=1483534 [ 6 ] Bug #1472611 - CVE-2017-11434 Qemu: slirp: out-of-bounds read while parsing dhcp options https://bugzilla.redhat.com/show_bug.cgi?id=1472611 -------------------------------------------------------------------------------- ================================================================================ qhttpengine-1.0.0-1.fc26 (FEDORA-2017-eb7f0fae1e) HTTP server for Qt applications -------------------------------------------------------------------------------- Update Information: maintenance update -------------------------------------------------------------------------------- References: [ 1 ] Bug #1489993 - qhttpengine-1.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1489993 -------------------------------------------------------------------------------- ================================================================================ root-6.10.08-1.fc26 (FEDORA-2017-0b9fc2a63c) Numerical data analysis framework -------------------------------------------------------------------------------- Update Information: New package xxhash: xxHash is an Extremely fast Hash algorithm, running at RAM speed limits. It successfully completes the SMHasher test suite which evaluates collision, dispersion and randomness qualities of hash functions. Code is highly portable, and hashes are identical on all platforms (little / big endian). root version 6.10.08 https://root.cern.ch/doc/v610/release-notes.html#release-6.1008 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1503461 - Review Request: xxhash - Extremely fast hash algorithm https://bugzilla.redhat.com/show_bug.cgi?id=1503461 -------------------------------------------------------------------------------- ================================================================================ rpkg-client-0.11-1.fc26 (FEDORA-2017-5994a93908) RPM packaging utitility -------------------------------------------------------------------------------- Update Information: - set default distgit target to src.fedoraproject.org - fix downloading sources for any-length-namespace modules - make the whole lookaside url template explict in the config file - rename 'rpkg' config section to 'distgit' - update in command descriptions ---- - possibility to give directory to --spec - also take --spec in account for rpmdefines - update spec descriptions - added is-packed subcommand - try reading ~/.config/rpkg before /etc/rpkg - add unittests - for source downloading, try both url formats with/without hashtype - add make-source subcommand - patch srpm to generate Source0 if unpacked content - override load_ns_module_name to work with any length namespaces - added --spec for srpm, make-source, and copr-build - fixed tagging not to include host dist tag - docs update - make all config values optional -------------------------------------------------------------------------------- ================================================================================ runc-1.0.0-11.rc4.gitaea4f21.fc26 (FEDORA-2017-8cfc2d0dde) CLI for running Open Containers -------------------------------------------------------------------------------- Update Information: Latest runc for Fedora 27 -------------------------------------------------------------------------------- ================================================================================ scanmem-0.17-1.fc26 (FEDORA-2017-2cfc1461e7) Memory scanner -------------------------------------------------------------------------------- Update Information: Update to 0.17, see: https://github.com/scanmem/scanmem/releases/tag/v0.17 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1504456 - scanmem-v0.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504456 -------------------------------------------------------------------------------- ================================================================================ spyder-3.2.4-1.fc26 (FEDORA-2017-3a1ced2f64) Scientific Python Development Environment -------------------------------------------------------------------------------- Update Information: - Update to 3.2.4 (bugfix update; does not fix python2/pygtk2 crash yet) -------------------------------------------------------------------------------- ================================================================================ systemtap-3.2-1.fc26 (FEDORA-2017-c43fc4a507) Programmable system-wide instrumentation system -------------------------------------------------------------------------------- Update Information: Upstream release. -------------------------------------------------------------------------------- ================================================================================ udiskie-1.7.1-2.fc26 (FEDORA-2017-39cbdd3db5) Removable disk auto-mounter -------------------------------------------------------------------------------- Update Information: Automatic test fixes: - Fix (sub-)package names to conform to guidelines - Add man-page for new binary -------------------------------------------------------------------------------- ================================================================================ webkitgtk4-2.18.1-1.fc26 (FEDORA-2017-98266811b4) GTK+ Web content engine library -------------------------------------------------------------------------------- Update Information: This update brings the following changes: * Improve performance of GIF animations. * Fix garbled display in GMail. * Fix rendering of several material design icons when using the web font. * Fix flickering when resizing the window in Wayland. * Prevent default kerberos authentication credentials from being used in ephemeral sessions. * Fix a crash when webkit_web_resource_get_data() is cancelled. * Correctly handle touchmove and touchend events in WebKitWebView. * Fix the build with enchant 2.1.1. * Fix the build in HPPA and Alpha. * Fix several crashes and rendering issues. -------------------------------------------------------------------------------- ================================================================================ wkhtmltopdf-0.12.4-1.fc26 (FEDORA-2017-def9e7c0c7) Simple shell utility to convert html to pdf -------------------------------------------------------------------------------- Update Information: New version 0.12.4 is released. -------------------------------------------------------------------------------- ================================================================================ xxhash-0.6.3-2.fc26 (FEDORA-2017-0b9fc2a63c) Extremely fast hash algorithm -------------------------------------------------------------------------------- Update Information: New package xxhash: xxHash is an Extremely fast Hash algorithm, running at RAM speed limits. It successfully completes the SMHasher test suite which evaluates collision, dispersion and randomness qualities of hash functions. Code is highly portable, and hashes are identical on all platforms (little / big endian). root version 6.10.08 https://root.cern.ch/doc/v610/release-notes.html#release-6.1008 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1503461 - Review Request: xxhash - Extremely fast hash algorithm https://bugzilla.redhat.com/show_bug.cgi?id=1503461 -------------------------------------------------------------------------------- ================================================================================ yoshimi-1.5.4.1-1.fc26 (FEDORA-2017-233c8a074c) Rewrite of ZynAddSubFx aiming for better JACK support -------------------------------------------------------------------------------- Update Information: Update to upstream bugfix release 1.5.4.1 -------------------------------------------------------------------------------- ================================================================================ youtube-dl-2017.10.15.1-1.fc26 (FEDORA-2017-5f01115a76) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information: Update to the latest upstream release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1501883 - youtube-dl-2017.10.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1501883 -------------------------------------------------------------------------------- ================================================================================ yubico-piv-tool-1.4.4-1.fc26 (FEDORA-2017-a862ac51c3) Tool for interacting with the PIV applet on a YubiKey NEO -------------------------------------------------------------------------------- Update Information: This update provides a new upstream release preventing RSA key generation on old Yubikey 4: https://www.yubico.com/2017/10/infineon-rsa-key-generation-issue/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #1504462 - yubico-piv-tool-1.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504462 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
