The following Fedora 26 Security updates need testing: Age URL 135 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26 63 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6e6f4f95e6 ruby-2.4.2-84.fc26 27 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26 27 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f87ce166c5 chromium-62.0.3202.89-1.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-774e7863a4 mongodb-3.4.10-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-463cb2af78 thunderbird-52.5.0-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-93988a5e1a xen-4.8.2-8.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7b0a42338c borgbackup-1.1.3-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1585789772 pdns-recursor-4.0.7-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-994ff5ced8 wordpress-4.9.1-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0032baa7d7 exim-4.89-7.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7bac3ba7c3 qpid-cpp-1.37.0-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c6c6e9beae rubygem-yard-0.9.8-4.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-bce9e03721 tor-0.3.1.9-1.fc26 The following Fedora 26 Critical Path updates have yet to be approved: Age URL 16 https://bodhi.fedoraproject.org/updates/FEDORA-2017-39e6a2f7e7 selinux-policy-3.13.1-260.17.fc26 13 https://bodhi.fedoraproject.org/updates/FEDORA-2017-67df8072a8 pcre2-10.23-11.fc26 13 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9b23ff63d3 pungi-4.1.20-3.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d9fb12e2aa syslinux-6.04-0.7.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c86842fd2b glusterfs-3.10.8-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-93988a5e1a xen-4.8.2-8.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-463cb2af78 thunderbird-52.5.0-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5f69dd6cf3 lua-5.3.4-7.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9f02e495f9 pulseaudio-11.1-7.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-eac4d90de1 python-pip-9.0.1-11.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-72708f172c NetworkManager-1.8.2-4.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0921102168 libbluray-1.0.2-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3e97212aae gnutls-3.5.16-4.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-51b9205229 hwdata-0.307-1.fc26 The following builds have been pushed to Fedora 26 updates-testing NetworkManager-1.8.2-4.fc26 apt-cacher-ng-3.1-1.fc26 ghc-bifunctors-5.4.2-2.fc26 ghc-free-4.12.4-5.fc26 ghc-profunctors-5.2.1-3.fc26 ghc-reducers-3.12.2-1.fc26 ghc-semigroupoids-5.2.1-2.fc26 gir-to-d-0.13.0-1.fc26 gnome-shell-extension-dash-to-dock-61-1.fc26 gnome-shell-extension-refresh-wifi-6.0-1.fc26 gnome-shell-extension-suspend-button-19-1.20171024gita812520.fc26 gnome-shell-extension-unite-8-1.fc26 gnutls-3.5.16-4.fc26 hwdata-0.307-1.fc26 libbluray-1.0.2-1.fc26 lua-5.3.4-7.fc26 nfs-ganesha-2.5.4-1.fc26 otter-browser-0.9.93-0.1.rc3gitb1328fd.fc26 php-zendframework-zend-modulemanager-2.8.2-1.fc26 php-zendframework-zend-session-2.8.3-1.fc26 pulseaudio-11.1-7.fc26 python-cligj-0.4.0-3.fc26 python-nose_warnings_filters-0.1.5-3.fc26 python-pip-9.0.1-11.fc26 python2-docs-2.7.14-2.fc26 rpkg-client-0.13-1.fc26 tor-0.3.1.9-1.fc26 udisks2-2.6.5-4.fc26 usbutils-009-1.fc26 yarock-1.2.0-1.fc26 Details about builds: ================================================================================ NetworkManager-1.8.2-4.fc26 (FEDORA-2017-72708f172c) Network connection manager and user applications -------------------------------------------------------------------------------- Update Information: libnm: fix accessing enabled and metered properties -------------------------------------------------------------------------------- ================================================================================ apt-cacher-ng-3.1-1.fc26 (FEDORA-2017-739dc23a93) Caching proxy for package files from Debian -------------------------------------------------------------------------------- Update Information: update to 3.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1518753 - [F28 change] apt-cacher-ng should not require tcp_wrappers https://bugzilla.redhat.com/show_bug.cgi?id=1518753 -------------------------------------------------------------------------------- ================================================================================ ghc-bifunctors-5.4.2-2.fc26 (FEDORA-2017-96bf9b4682) Bifunctors -------------------------------------------------------------------------------- Update Information: Initial package of bifunctors for Haskell. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1492357 - Review Request: ghc-bifunctors - Bifunctors https://bugzilla.redhat.com/show_bug.cgi?id=1492357 -------------------------------------------------------------------------------- ================================================================================ ghc-free-4.12.4-5.fc26 (FEDORA-2017-3b4276b661) Monads for free -------------------------------------------------------------------------------- Update Information: Initial package of free for Haskell. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1493787 - Review Request: ghc-free - Monads for free https://bugzilla.redhat.com/show_bug.cgi?id=1493787 -------------------------------------------------------------------------------- ================================================================================ ghc-profunctors-5.2.1-3.fc26 (FEDORA-2017-eea912c1d2) Profunctors -------------------------------------------------------------------------------- Update Information: Initial package of profunctors for Haskell. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1492890 - Review Request: ghc-profunctors - Profunctors https://bugzilla.redhat.com/show_bug.cgi?id=1492890 -------------------------------------------------------------------------------- ================================================================================ ghc-reducers-3.12.2-1.fc26 (FEDORA-2017-98fa691530) Semigroups, specialized containers and general map/reduce -------------------------------------------------------------------------------- Update Information: Initial package of reducers for Haskell. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1513777 - Review Request: ghc-reducers - Semigroups, specialized containers and general map/reduce https://bugzilla.redhat.com/show_bug.cgi?id=1513777 -------------------------------------------------------------------------------- ================================================================================ ghc-semigroupoids-5.2.1-2.fc26 (FEDORA-2017-8d1b69a675) Semigroupoids: Category sans id -------------------------------------------------------------------------------- Update Information: Initial package of semigroupoids for Haskell. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1492893 - Review Request: ghc-semigroupoids - Semigroupoids: Category sans id https://bugzilla.redhat.com/show_bug.cgi?id=1492893 -------------------------------------------------------------------------------- ================================================================================ gir-to-d-0.13.0-1.fc26 (FEDORA-2017-866c328d01) Tool to create D bindings from GObject introspection files -------------------------------------------------------------------------------- Update Information: Update to 0.13.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1504366 - gir-to-d-0.13.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504366 -------------------------------------------------------------------------------- ================================================================================ gnome-shell-extension-dash-to-dock-61-1.fc26 (FEDORA-2017-91f79e5a9f) Dock for the Gnome Shell by micxgx.gmail.com -------------------------------------------------------------------------------- Update Information: * initial rpm release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1520149 - Review Request: gnome-shell-extension-dash-to-dock - Dock for the Gnome Shell by micxgx.gmail.com https://bugzilla.redhat.com/show_bug.cgi?id=1520149 -------------------------------------------------------------------------------- ================================================================================ gnome-shell-extension-refresh-wifi-6.0-1.fc26 (FEDORA-2017-3e3f1b62ed) GNOME Shell Extension Refresh Wifi Connections by kgshank -------------------------------------------------------------------------------- Update Information: * Initial rpm release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1520151 - Review Request: gnome-shell-extension-refresh-wifi - GNOME Shell Extension Refresh Wifi Connections by kgshank https://bugzilla.redhat.com/show_bug.cgi?id=1520151 -------------------------------------------------------------------------------- ================================================================================ gnome-shell-extension-suspend-button-19-1.20171024gita812520.fc26 (FEDORA-2017-cb963f18e6) GNOME Shell Extension Suspend-Button by laserb -------------------------------------------------------------------------------- Update Information: * Initial rpm release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1520152 - Review Request: gnome-shell-extension-suspend-button - GNOME Shell Extension Suspend-Button by laserb https://bugzilla.redhat.com/show_bug.cgi?id=1520152 -------------------------------------------------------------------------------- ================================================================================ gnome-shell-extension-unite-8-1.fc26 (FEDORA-2017-50a3740e32) GNOME Shell Extension Unite by hardpixel -------------------------------------------------------------------------------- Update Information: * Initial rpm release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1520153 - Review Request: gnome-shell-extension-unite - GNOME Shell Extension Unite by hardpixel https://bugzilla.redhat.com/show_bug.cgi?id=1520153 -------------------------------------------------------------------------------- ================================================================================ gnutls-3.5.16-4.fc26 (FEDORA-2017-3e97212aae) A TLS protocol implementation -------------------------------------------------------------------------------- Update Information: Corrected regression from 3.5.17-3 which prevented the loading of -------------------------------------------------------------------------------- References: [ 1 ] Bug #1507402 - Fedora 26 server - wget - gnutls/p11-kit/OpenSC - pcsc-lite/pcscd - polkit https://bugzilla.redhat.com/show_bug.cgi?id=1507402 -------------------------------------------------------------------------------- ================================================================================ hwdata-0.307-1.fc26 (FEDORA-2017-51b9205229) Hardware identification and configuration data -------------------------------------------------------------------------------- Update Information: Updated pci, usb and vendor ids. -------------------------------------------------------------------------------- ================================================================================ libbluray-1.0.2-1.fc26 (FEDORA-2017-0921102168) Library to access Blu-Ray disks for video playback -------------------------------------------------------------------------------- Update Information: Update to 1.0.2 : - Add initial support for UHD BluRay discs (without BD-J menus). - Improve error resilience and stability. - Improve libmmbd support. - Fix static build dependencies in pkgconfig file. - Fix creation of cache (sub-)directories on windows platforms. - Fix BD-J temporary storage when persistent storage is disabled. - Fix leaks. -------------------------------------------------------------------------------- ================================================================================ lua-5.3.4-7.fc26 (FEDORA-2017-5f69dd6cf3) Powerful light-weight programming language -------------------------------------------------------------------------------- Update Information: Fix versioning in pkgconfig file -------------------------------------------------------------------------------- References: [ 1 ] Bug #1519921 - [lua-devel] incorrect pkgconfig provides https://bugzilla.redhat.com/show_bug.cgi?id=1519921 -------------------------------------------------------------------------------- ================================================================================ nfs-ganesha-2.5.4-1.fc26 (FEDORA-2017-b09bb62731) NFS-Ganesha is a NFS Server running in user space -------------------------------------------------------------------------------- Update Information: nfs-ganesha 2.5.4 GA -------------------------------------------------------------------------------- ================================================================================ otter-browser-0.9.93-0.1.rc3gitb1328fd.fc26 (FEDORA-2017-18125e7866) Web browser controlled by the user, not vice-versa -------------------------------------------------------------------------------- Update Information: Update to 0.9.93-0.1.rc3gitb1328fd -------------------------------------------------------------------------------- ================================================================================ php-zendframework-zend-modulemanager-2.8.2-1.fc26 (FEDORA-2017-e5576f4f2e) Zend Framework ModuleManager component -------------------------------------------------------------------------------- Update Information: **Version 2.8.2** - 2017-12-02 * **Fixed** - [#74](https://github.com/zendframework/zend-modulemanager/pull/74) Fixes exception message in ConfigListener -------------------------------------------------------------------------------- ================================================================================ php-zendframework-zend-session-2.8.3-1.fc26 (FEDORA-2017-92ba934f14) Zend Framework Session component -------------------------------------------------------------------------------- Update Information: **Version 2.8.3** - 2017-12-01 * **Fixed** - [#101](https://github.com/zendframework/zend-session/pull/101) fixes an issue created with the 2.8.2 release with regards to setting a session save path for non-files save handlers; prior to this patch, incorrect validations were run on the path provided, leading to unexpected exceptions being raised. ---- **Version 2.8.2** - 2017-11-29 * **Fixed** - [#85](https://github.com/zendframework/zend-session/pull/85) fixes an issue with how the expiration seconds are handled when a long-running request occurs. Previously, when called, it would use the value of `$_SERVER['REQUEST_TIME']` to calculate the expiration time; this would cause failures if the expiration seconds had been reached by the time the value was set. It now correctly uses the current `time()`. - [#99](https://github.com/zendframework/zend- session/pull/99) fixes how `Zend\Session\Config\SessionConfig` handles attaching save handlers to ensure it will honor any handlers registered with the PHP engine (e.g., redis, rediscluster, etc.). ---- **Version 2.8.1** - 2017-11-28 * **Added** - [#92](https://github.com/zendframework/zend- session/pull/92) adds PHP 7.2 support. * **Fixed** - [#57](https://github.com/zendframework/zend-session/pull/57) and [#93](https://github.com/zendframework/zend-session/pull/93) provide a fix for when data found in the session is a `Traversable`; such data is now cast to an array before merging with new data. -------------------------------------------------------------------------------- ================================================================================ pulseaudio-11.1-7.fc26 (FEDORA-2017-9f02e495f9) Improved Linux Sound Server -------------------------------------------------------------------------------- Update Information: backport 'pa_sink_input_assert_ref()' crashfix -------------------------------------------------------------------------------- References: [ 1 ] Bug #1472285 - [abrt] pulseaudio: pa_sink_input_assert_ref(): pulseaudio killed by signal 6 https://bugzilla.redhat.com/show_bug.cgi?id=1472285 -------------------------------------------------------------------------------- ================================================================================ python-cligj-0.4.0-3.fc26 (FEDORA-2017-b8f5a22e81) Click params for GeoJSON CLI -------------------------------------------------------------------------------- Update Information: Fix ambiguous Python 2 dependencies declarations -------------------------------------------------------------------------------- ================================================================================ python-nose_warnings_filters-0.1.5-3.fc26 (FEDORA-2017-8f65f3e7e1) Allow to inject warning filters during nosetest -------------------------------------------------------------------------------- Update Information: Fix ambiguous Python 2 dependencies declarations -------------------------------------------------------------------------------- ================================================================================ python-pip-9.0.1-11.fc26 (FEDORA-2017-eac4d90de1) A tool for installing and managing Python packages -------------------------------------------------------------------------------- Update Information: Reintroduce the ipaddress module in the python3 subpackage. -------------------------------------------------------------------------------- ================================================================================ python2-docs-2.7.14-2.fc26 (FEDORA-2017-6706d1f402) Documentation for the Python 2 programming language -------------------------------------------------------------------------------- Update Information: Fix ambiguous Python 2 dependencies declarations -------------------------------------------------------------------------------- ================================================================================ rpkg-client-0.13-1.fc26 (FEDORA-2017-5783cf2872) RPM packaging utitility -------------------------------------------------------------------------------- Update Information: - add LICENSE to ignored file regex -------------------------------------------------------------------------------- ================================================================================ tor-0.3.1.9-1.fc26 (FEDORA-2017-bce9e03721) Anonymizing overlay network for TCP -------------------------------------------------------------------------------- Update Information: update to upstream release 0.3.1.9. Fixes: * CVE-2017-8819: Replay-cache ineffective for v2 onion services * CVE-2017-8820: Remote DoS attack against directory authorities * CVE-2017-8821: An attacker can make Tor ask for a password * CVE-2017-8822: Relays can pick themselves in a circuit path * CVE-2017-8823: Use-after-free in onion service v2 -------------------------------------------------------------------------------- ================================================================================ udisks2-2.6.5-4.fc26 (FEDORA-2017-b5196b11f2) Disk Manager -------------------------------------------------------------------------------- Update Information: Always try to read configuration from crypttab in handle_unlock -------------------------------------------------------------------------------- ================================================================================ usbutils-009-1.fc26 (FEDORA-2017-cca7b8ce3f) Linux USB utilities -------------------------------------------------------------------------------- Update Information: Update to usbutils 009 -------------------------------------------------------------------------------- ================================================================================ yarock-1.2.0-1.fc26 (FEDORA-2017-d2c68fd252) Lightweight, beautiful music player -------------------------------------------------------------------------------- Update Information: version 1.2.0 - - New : Configurable custom cover size [#1627841] - New : Redesign player tool bar with expanded tool bar mode - New : Remove Echonest web service no longer available - New : Add Spotify web service for artist image - Changes: Internet connection; prevent downloading artist image if no used [#1624536] - Changes: Change & fix many lyrics provider services - Changes: Many minors ui changes and improvements -------------------------------------------------------------------------------- References: [ 1 ] Bug #1503127 - [abrt] yarock: EnginePhonon::slot_on_metadata_change(): yarock killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1503127 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
