The following Fedora 26 Security updates need testing: Age URL 162 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26 54 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26 37 https://bodhi.fedoraproject.org/updates/FEDORA-2017-774e7863a4 mongodb-3.4.10-1.fc26 33 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7bac3ba7c3 qpid-cpp-1.37.0-1.fc26 20 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2962e58478 heimdal-7.5.0-1.fc26 14 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f7cbe22fd8 heketi-5.0.1-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d75a88f263 monit-5.25.1-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4603342f9a xrdp-0.9.5-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d1213cef30 mupdf-1.12.0-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-48569250d1 nasm-2.13.02-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-17ba1a2393 awstats-7.6-4.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c4e9207c31 php-7.1.13-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6ca3df84ad sox-14.4.2.0-13.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6cd2e0e292 gifsicle-1.90-1.fc26 The following Fedora 26 Critical Path updates have yet to be approved: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-86281f085b libfm-1.2.5-4.gitD20171230.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b3916cfc52 pcmanfm-1.2.5-3.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8bdedce282 perl-podlators-4.09-3.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-af9c086f87 pigz-2.4-1.fc26 The following builds have been pushed to Fedora 26 updates-testing R-V8-1.5-2.fc26 R-littler-0.3.3-1.fc26 R-withr-2.1.1-1.fc26 atop-2.3.0-8.fc26 awstats-7.6-4.fc26 batctl-2017.4-1.fc26 bcc-0.5.0-1.fc26 bcm283x-firmware-20171201-1.9426e18.fc26 composer-1.6.1-1.fc26 ddccontrol-0.4.3-1.fc26 deja-dup-37.1-1.fc26 dianara-1.4.1-2.fc26 enchant2-2.2.1-1.fc26 evopop-gtk-theme-2.9.99-1.fc26 fedmsg-1.1.0-1.fc26 fotoxx-18.01.1-1.fc26 gala-0.3.0-0.git139.439f.2.fc26 getdns-1.3.0-1.fc26 gifsicle-1.90-1.fc26 glslang-3.1-0.3.20171028.git715c353.fc26 js-respond-1.4.2-1.fc26 librs232-1.0.3-3.20171229git21ecc3c.fc26 link-grammar-5.4.3-1.fc26 mellowplayer-3.2.0-1.fc26 mingw-enchant2-2.2.1-1.fc26 mozilla-https-everywhere-2017.12.6-2.fc26 netpbm-10.81.00-1.fc26 nim-0.17.2-5.fc26 ocaml-oasis-0.4.10-3.fc26 openttd-1.7.2-1.fc26 osmo-0.4.2-2.fc26 paper-icon-theme-1.4.0-1.fc26 perl-Test-ClassAPI-1.07-1.fc26 perl-Time-HiRes-1.9751-1.fc26 persepolis-3.0.1-2.fc26 php-7.1.13-1.fc26 php-composer-spdx-licenses-1.2.0-1.fc26 php-pecl-apcu-5.1.9-1.fc26 php-pecl-redis-3.1.6-1.fc26 python-htmlmin-0.1.12-1.git220b1d1.fc26 python-pep8-naming-0.4.1-4.fc26 python-pyinsane2-2.0.10-1.fc26 python-pypillowfight-0.2.2-2.fc26 rebloom-1.0.3-2.fc26 rejson-1.0.1-1.fc26 shyaml-0.5.0-3.fc26 sox-14.4.2.0-13.fc26 spirv-headers-1.2-0.1.20171015.git0610978.fc26 spirv-tools-2016.7-0.2.20171023.git5834719.fc26 timew-1.0.0-3.fc26 vim-go-1.16-1.fc26 vulkan-1.0.65.1-3.fc26 xmedcon-0.14.1-2.fc26 xxhash-0.6.4-1.fc26 Details about builds: ================================================================================ R-V8-1.5-2.fc26 (FEDORA-2018-fb7cc19fb3) Embedded JavaScript Engine for R -------------------------------------------------------------------------------- Update Information: Initial package of V8 for R. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1530438 - Review Request: R-V8 - Embedded JavaScript Engine for R https://bugzilla.redhat.com/show_bug.cgi?id=1530438 -------------------------------------------------------------------------------- ================================================================================ R-littler-0.3.3-1.fc26 (FEDORA-2018-1f88296710) littler: R at the Command-Line via 'r' -------------------------------------------------------------------------------- Update Information: New upstream release. -------------------------------------------------------------------------------- ================================================================================ R-withr-2.1.1-1.fc26 (FEDORA-2018-a891d805eb) Run Code 'With' Temporarily Modified Global State -------------------------------------------------------------------------------- Update Information: Update to latest release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1528101 - R-withr-2.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1528101 -------------------------------------------------------------------------------- ================================================================================ atop-2.3.0-8.fc26 (FEDORA-2018-c33074e070) An advanced interactive monitor to view the load on system and process level -------------------------------------------------------------------------------- Update Information: Multiple bugfixes. -------------------------------------------------------------------------------- ================================================================================ awstats-7.6-4.fc26 (FEDORA-2018-17ba1a2393) Advanced Web Statistics -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-1000501 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529349 - CVE-2017-1000501 awstat: Two path traversal issues in awstat.pl https://bugzilla.redhat.com/show_bug.cgi?id=1529349 -------------------------------------------------------------------------------- ================================================================================ batctl-2017.4-1.fc26 (FEDORA-2018-ff9efe6cb1) B.A.T.M.A.N. advanced control and management tool -------------------------------------------------------------------------------- Update Information: Update to latest release -------------------------------------------------------------------------------- ================================================================================ bcc-0.5.0-1.fc26 (FEDORA-2018-f85fa3f855) BPF Compiler Collection (BCC) -------------------------------------------------------------------------------- Update Information: Rebase to new released version -------------------------------------------------------------------------------- ================================================================================ bcm283x-firmware-20171201-1.9426e18.fc26 (FEDORA-2018-04afc12c97) Broadcom bcm283x firmware for the Raspberry Pi -------------------------------------------------------------------------------- Update Information: Latest firmware -------------------------------------------------------------------------------- ================================================================================ composer-1.6.1-1.fc26 (FEDORA-2018-edbc70d0df) Dependency Manager for PHP -------------------------------------------------------------------------------- Update Information: **composer 1.6.1** - 2018-01-04 * Fixed upgrade regression due to some autoloader cleanups * Fixed some overly loose version constraints ---- **composer 1.6.0** - 2018-01-04 * Added support for SPDX license identifiers v3.0, deprecates GPL/LGPL/AGPL identifiers, which should now have a `-only` or `-or-later` suffix added. * Added support for COMPOSER_MEMORY_LIMIT env var to make Composer set the PHP memory limit explicitly * Added support for simple strings for the `bin` * Fixed `check-platform-reqs` bug in version checking --- **composer 1.6.0RC** - 2017-12-19 * Improved performance of installs and updates from git clones when checking out known commits * Added `check- platform-reqs` command that checks that your PHP and extensions versions match the platform requirements of the installed packages * Added `--with-all- dependencies` to the `update` and `require` commands which updates all dependencies of the listed packages, including those that are direct root requirements * Added `scripts-descriptions` key to composer.json to customize the description and document your custom commands * Added support for the uppercase NO_PROXY env var * Added support for COMPOSER_DEFAULT_{AUTHOR,LICENSE,EMAIL,VENDOR} env vars to pre-populate init command values * Added support for local fossil repositories * Added suggestions for alternative spellings when entering packages in `init` and `require` commands and nothing can be found * Fixed installed.json data to be sorted alphabetically by package name * Fixed compatibility with Symfony 4.x components that Composer uses --- **spdx-licenses 1.2.0** - 2018-01-03 * Added: deprecation status for all licenses and a `SpdxLicenses::isDeprecatedByIdentifier` method. * Changed: updated licenses list to SPDX 3.0. -------------------------------------------------------------------------------- ================================================================================ ddccontrol-0.4.3-1.fc26 (FEDORA-2018-a5494b2ff2) Control your monitor by software using the DDC/CI protocol -------------------------------------------------------------------------------- Update Information: This is new version of ddccontrol. -------------------------------------------------------------------------------- ================================================================================ deja-dup-37.1-1.fc26 (FEDORA-2018-bd2e1efa9d) Simple backup tool and frontend for duplicity -------------------------------------------------------------------------------- Update Information: 37.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1530994 - deja-dup-37.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1530994 -------------------------------------------------------------------------------- ================================================================================ dianara-1.4.1-2.fc26 (FEDORA-2018-6958f95af1) Pump.io application for the desktop -------------------------------------------------------------------------------- Update Information: - New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529936 - Review Request: dianara - Pump.io application for the desktop https://bugzilla.redhat.com/show_bug.cgi?id=1529936 -------------------------------------------------------------------------------- ================================================================================ enchant2-2.2.1-1.fc26 (FEDORA-2018-c3270042a4) An Enchanting Spell Checking Library -------------------------------------------------------------------------------- Update Information: Update to version 2.2.1, see https://github.com/AbiWord/enchant/blob/master/NEWS for details. -------------------------------------------------------------------------------- ================================================================================ evopop-gtk-theme-2.9.99-1.fc26 (FEDORA-2018-c557dea889) Modern Desktop Theme Suite -------------------------------------------------------------------------------- Update Information: Bump 2.9.99 version -------------------------------------------------------------------------------- ================================================================================ fedmsg-1.1.0-1.fc26 (FEDORA-2018-e07a9865ae) Tools for Fedora Infrastructure real-time messaging -------------------------------------------------------------------------------- Update Information: # v1.1.0 ## Deprecations - Using URLs for the CA and CRL settings (`ca_cert_location` and `crl_location` respectively) is now deprecated and will be removed in a future release. Please use filesystem paths instead. ## Features - Allow the CA and CRL configuration options to be file paths ([\#484](https://github.com/fedora-infra/fedmsg/pull/484)). - All configuration settings now have defaults and validators ([\#488](https://github.com/fedora-infra/fedmsg/pull/488)). - Strengthen "legacy protection" in fedmsg.meta by catching KeyErrors ([\#493](https://github.com/fedora-infra/fedmsg/pull/493)). ## Bug fixes - Remove the duplicate dependency on `cryptography` from the main install requires ([\#486](https://github.com/fedora-infra/fedmsg/pull/486)). - Adjust the x509 signing API to return text instead of bytes ([\#495](https://github.com/fedora-infra/fedmsg/issues/495)). ## Development improvements - Alter how the tests determine if cryptography is available to work better with old versions of pyOpenSSL ([\#482](https://github.com /fedora-infra/fedmsg/pull/482)). -------------------------------------------------------------------------------- ================================================================================ fotoxx-18.01.1-1.fc26 (FEDORA-2018-03b85d3f1b) Photo editor -------------------------------------------------------------------------------- Update Information: 18.01.1 ---- 18.01 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1531000 - fotoxx-18.01.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531000 [ 2 ] Bug #1530007 - fotoxx-18.01 is available https://bugzilla.redhat.com/show_bug.cgi?id=1530007 -------------------------------------------------------------------------------- ================================================================================ gala-0.3.0-0.git139.439f.2.fc26 (FEDORA-2018-3ab33d0e25) Gala window manager -------------------------------------------------------------------------------- Update Information: Add a patch so the default window button layout matches the default on fedora. ---- Bump to commit 439fdf6. -------------------------------------------------------------------------------- ================================================================================ getdns-1.3.0-1.fc26 (FEDORA-2018-5bede82552) Modern asynchronous API to the DNS -------------------------------------------------------------------------------- Update Information: Updated to 1.3.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1462043 - getdns-1.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1462043 -------------------------------------------------------------------------------- ================================================================================ gifsicle-1.90-1.fc26 (FEDORA-2018-6cd2e0e292) Powerful program for manipulating GIF images and animations -------------------------------------------------------------------------------- Update Information: Update to 1.90 - Fixes CVE-2017-1000421 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1530540 - CVE-2017-1000421 gifsicle: use-after-free in the read_gif function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1530540 -------------------------------------------------------------------------------- ================================================================================ glslang-3.1-0.3.20171028.git715c353.fc26 (FEDORA-2018-f4b4da3e53) OpenGL and OpenGL ES shader front end and validator -------------------------------------------------------------------------------- Update Information: Vulkan update ---- Update -------------------------------------------------------------------------------- ================================================================================ js-respond-1.4.2-1.fc26 (FEDORA-2018-45b63ae2ab) A fast & lightweight polyfill for min/max-width CSS3 Media Queries -------------------------------------------------------------------------------- Update Information: Initial package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1525906 - Review Request: js-respond - A fast & lightweight polyfill for min/max-width CSS3 Media Queries https://bugzilla.redhat.com/show_bug.cgi?id=1525906 -------------------------------------------------------------------------------- ================================================================================ librs232-1.0.3-3.20171229git21ecc3c.fc26 (FEDORA-2018-a0899d68d2) Library for serial communications over RS-232 with Lua bindings -------------------------------------------------------------------------------- Update Information: librs232 is a multi-platform library that provides support for communicating over serial ports (e.g. RS-232). It also provides Lua bindings. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1528612 - Review Request: librs232 - Library for serial communications over RS-232 with Lua bindings https://bugzilla.redhat.com/show_bug.cgi?id=1528612 -------------------------------------------------------------------------------- ================================================================================ link-grammar-5.4.3-1.fc26 (FEDORA-2018-d7dc3815b5) A full-service natural language dependency parser -------------------------------------------------------------------------------- Update Information: 5.4.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1531013 - link-grammar-5.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531013 -------------------------------------------------------------------------------- ================================================================================ mellowplayer-3.2.0-1.fc26 (FEDORA-2018-5530a851b4) Cloud music integration for your desktop -------------------------------------------------------------------------------- Update Information: Update to 3.2.0-1 -------------------------------------------------------------------------------- ================================================================================ mingw-enchant2-2.2.1-1.fc26 (FEDORA-2018-c3270042a4) MinGW Windows enchant2 library -------------------------------------------------------------------------------- Update Information: Update to version 2.2.1, see https://github.com/AbiWord/enchant/blob/master/NEWS for details. -------------------------------------------------------------------------------- ================================================================================ mozilla-https-everywhere-2017.12.6-2.fc26 (FEDORA-2018-d558d732c2) HTTPS enforcement extension for Mozilla Firefox -------------------------------------------------------------------------------- Update Information: - Remove some unnecessary files - More ruleset fixes -------------------------------------------------------------------------------- ================================================================================ netpbm-10.81.00-1.fc26 (FEDORA-2018-e6e13349ac) A library for handling different graphics file formats -------------------------------------------------------------------------------- Update Information: New version of netpbm 10.81.00. sldtoppm: -lib and -dir don't work - always says slide not found. Broken in Netpbm 10.63 (June 2013). sldtoppm: fix bug: says AutoCAD slide file isn't an AutoCAD slide file. Broken after Netpbm 10.26 (January 2005), but no later than 10.35 (August 2006). sldtoppm: fix bug: wild memory accesses, weird messages when invalid input file has unterminated strings. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529904 - netpbm-10.81.00 is available https://bugzilla.redhat.com/show_bug.cgi?id=1529904 -------------------------------------------------------------------------------- ================================================================================ nim-0.17.2-5.fc26 (FEDORA-2018-002849747c) Statically typed, imperative programming language -------------------------------------------------------------------------------- Update Information: Updated runtime dependencies -------------------------------------------------------------------------------- ================================================================================ ocaml-oasis-0.4.10-3.fc26 (FEDORA-2018-afda83891b) Tooling for building OCaml libraries and applications -------------------------------------------------------------------------------- Update Information: Tooling for building OCaml libraries and applications -------------------------------------------------------------------------------- References: [ 1 ] Bug #1513290 - Review Request: ocaml-oasis - Tooling for building OCaml libraries and applications https://bugzilla.redhat.com/show_bug.cgi?id=1513290 -------------------------------------------------------------------------------- ================================================================================ openttd-1.7.2-1.fc26 (FEDORA-2018-3fb2727baf) Transport system simulation game -------------------------------------------------------------------------------- Update Information: Minor bugfixes -------------------------------------------------------------------------------- ================================================================================ osmo-0.4.2-2.fc26 (FEDORA-2018-7e0514c1c8) Personal organizer -------------------------------------------------------------------------------- Update Information: libnotify turned on again. Appears to work with webgtk4. Not sure if anything else breaks. ---- update to 0.4.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1526838 - Osmo needs libnotify support https://bugzilla.redhat.com/show_bug.cgi?id=1526838 [ 2 ] Bug #1515010 - osmo-0.4.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1515010 -------------------------------------------------------------------------------- ================================================================================ paper-icon-theme-1.4.0-1.fc26 (FEDORA-2018-3cf5fe9165) Modern freedesktop icon theme -------------------------------------------------------------------------------- Update Information: * Initial rpm release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529758 - Review Request: paper-icon-theme - Modern freedesktop icon theme https://bugzilla.redhat.com/show_bug.cgi?id=1529758 -------------------------------------------------------------------------------- ================================================================================ perl-Test-ClassAPI-1.07-1.fc26 (FEDORA-2018-4a62974e3e) Provides basic first-pass API testing for large class trees -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ================================================================================ perl-Time-HiRes-1.9751-1.fc26 (FEDORA-2018-2e724cf431) High resolution alarm, sleep, gettimeofday, interval timers -------------------------------------------------------------------------------- Update Information: This release fixes list of exported symbols. It also improves tests. ---- This release corrects source metadata. We deliver it only to provide up-to-date version string. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1530928 - perl-Time-HiRes-1.9751 is available https://bugzilla.redhat.com/show_bug.cgi?id=1530928 [ 2 ] Bug #1528842 - perl-Time-HiRes-1.9750 is available https://bugzilla.redhat.com/show_bug.cgi?id=1528842 -------------------------------------------------------------------------------- ================================================================================ persepolis-3.0.1-2.fc26 (FEDORA-2018-50c7ab5902) A powerful download manager powered by aria2 -------------------------------------------------------------------------------- Update Information: Initial release of Persepolis download manager -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529891 - Review Request: persepolis - A powerful download manager powered by aria2 https://bugzilla.redhat.com/show_bug.cgi?id=1529891 -------------------------------------------------------------------------------- ================================================================================ php-7.1.13-1.fc26 (FEDORA-2018-c4e9207c31) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information: **PHP version 7.1.13** (04 Jan 2018) **Core:** * Fixed bug php#75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence) * Fixed bug php#75384 (PHP seems incompatible with OneDrive files on demand). (Anatol) * Fixed bug php#74862 (Unable to clone instance when private __clone defined). (Daniel Ciochiu) * Fixed bug php#75074 (php-process crash when is_file() is used with strings longer 260 chars). (Anatol) **CLI Server:** * Fixed bug php#60471 (Random "Invalid request (unexpected EOF)" using a router script). (SammyK) * Fixed bug php#73830 (Directory does not exist). (Anatol) **FPM:** * Fixed bug php#64938 (libxml_disable_entity_loader setting is shared between requests). (Remi) **Opcache:** * Fixed bug php#75608 ("Narrowing occurred during type inference" error). (Laruence, Dmitry) * Fixed bug php#75579 (Interned strings buffer overflow may cause crash). (Dmitry) * Fixed bug php#75570 ("Narrowing occurred during type inference" error). (Dmitry) **PCRE:** * Fixed bug php#74183 (preg_last_error not returning error code after error). (Andrew Nester) **Phar:** * Fixed bug php#74782 (remove file name from output to avoid XSS). (stas) **Standard:** * Fixed bug php#75511 (fread not free unused buffer). (Laruence) * Fixed bug php#75514 (mt_rand returns value outside [$min,$max]+ on 32-bit) (Remi) * Fixed bug php#75535 (Inappropriately parsing HTTP response leads to PHP segment fault). (Nikita) * Fixed bug php#75409 (accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing). (sarciszewski) * Fixed bug php#73124 (php_ini_scanned_files() not reporting correctly). (John Stevenson) * Fixed bug php#75574 (putenv does not work properly if parameter contains non-ASCII unicode character). (Anatol) **Zip:** * Fixed bug php#75540 (Segfault with libzip 1.3.1). (Remi) -------------------------------------------------------------------------------- ================================================================================ php-composer-spdx-licenses-1.2.0-1.fc26 (FEDORA-2018-edbc70d0df) SPDX licenses list and validation library -------------------------------------------------------------------------------- Update Information: **composer 1.6.1** - 2018-01-04 * Fixed upgrade regression due to some autoloader cleanups * Fixed some overly loose version constraints ---- **composer 1.6.0** - 2018-01-04 * Added support for SPDX license identifiers v3.0, deprecates GPL/LGPL/AGPL identifiers, which should now have a `-only` or `-or-later` suffix added. * Added support for COMPOSER_MEMORY_LIMIT env var to make Composer set the PHP memory limit explicitly * Added support for simple strings for the `bin` * Fixed `check-platform-reqs` bug in version checking --- **composer 1.6.0RC** - 2017-12-19 * Improved performance of installs and updates from git clones when checking out known commits * Added `check- platform-reqs` command that checks that your PHP and extensions versions match the platform requirements of the installed packages * Added `--with-all- dependencies` to the `update` and `require` commands which updates all dependencies of the listed packages, including those that are direct root requirements * Added `scripts-descriptions` key to composer.json to customize the description and document your custom commands * Added support for the uppercase NO_PROXY env var * Added support for COMPOSER_DEFAULT_{AUTHOR,LICENSE,EMAIL,VENDOR} env vars to pre-populate init command values * Added support for local fossil repositories * Added suggestions for alternative spellings when entering packages in `init` and `require` commands and nothing can be found * Fixed installed.json data to be sorted alphabetically by package name * Fixed compatibility with Symfony 4.x components that Composer uses --- **spdx-licenses 1.2.0** - 2018-01-03 * Added: deprecation status for all licenses and a `SpdxLicenses::isDeprecatedByIdentifier` method. * Changed: updated licenses list to SPDX 3.0. -------------------------------------------------------------------------------- ================================================================================ php-pecl-apcu-5.1.9-1.fc26 (FEDORA-2018-f9b345ab4d) APC User Cache -------------------------------------------------------------------------------- Update Information: **Version 5.1.9** - fix gh#234 mmap disabled when configure is called with --enable-apcu-mmap - fix gh#226 Warning: apcu_fetch(): apc_fetch() expects a string or array of strings. - mitigate gh#223 Fatal error when starting php on windows - add support for PCRE2 in 7.3 - use row formatting for information in phpinfo() tables - set IS_STR_PERSISTENT so refcounting failures are reported by -DRC_DEBUG=1 - fix gh#266 refcounting errors in APCIterator -------------------------------------------------------------------------------- ================================================================================ php-pecl-redis-3.1.6-1.fc26 (FEDORA-2018-5b0de48fc9) Extension for communicating with the Redis key-value store -------------------------------------------------------------------------------- Update Information: Release notes **phpredis 3.1.6** This release conains only fix of RedisArray distributor hashing function which was broken in 3.1.4. Huge thanks to rexchen123 -------------------------------------------------------------------------------- ================================================================================ python-htmlmin-0.1.12-1.git220b1d1.fc26 (FEDORA-2018-101018c434) HTML Minifier -------------------------------------------------------------------------------- Update Information: Update to 0.1.12 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529798 - python-htmlmin-0.1.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1529798 -------------------------------------------------------------------------------- ================================================================================ python-pep8-naming-0.4.1-4.fc26 (FEDORA-2018-c15d7786a8) Check PEP-8 naming conventions, a plugin for flake8 -------------------------------------------------------------------------------- Update Information: Initial package of pep8-naming for Python. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1506419 - Review Request: python-pep8-naming - Check PEP-8 naming conventions, a plugin for flake8 https://bugzilla.redhat.com/show_bug.cgi?id=1506419 -------------------------------------------------------------------------------- ================================================================================ python-pyinsane2-2.0.10-1.fc26 (FEDORA-2018-7a7f1746e8) Python library to access and use image scanners (Linux/Windows/etc) -------------------------------------------------------------------------------- Update Information: Initial package of pyinsane2 for Python. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529230 - Review Request: python-pyinsane2 - Python library to access and use image scanners (Linux/Windows/etc) https://bugzilla.redhat.com/show_bug.cgi?id=1529230 -------------------------------------------------------------------------------- ================================================================================ python-pypillowfight-0.2.2-2.fc26 (FEDORA-2018-afe1741a0f) Various image processing algorithms -------------------------------------------------------------------------------- Update Information: Initial package of pypillowfight for Python. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529785 - Review Request: python-pypillowfight - Various image processing algorithms https://bugzilla.redhat.com/show_bug.cgi?id=1529785 -------------------------------------------------------------------------------- ================================================================================ rebloom-1.0.3-2.fc26 (FEDORA-2018-b4fe4efe6b) Bloom Filter Module for Redis -------------------------------------------------------------------------------- Update Information: Remove python installation assumptions. -------------------------------------------------------------------------------- ================================================================================ rejson-1.0.1-1.fc26 (FEDORA-2018-9510ef8faf) JSON data type for Redis -------------------------------------------------------------------------------- Update Information: Remove python installation assumptions. -------------------------------------------------------------------------------- ================================================================================ shyaml-0.5.0-3.fc26 (FEDORA-2018-911d1e59f0) YAML for command line -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529784 - Review Request: shyaml - YAML for command line https://bugzilla.redhat.com/show_bug.cgi?id=1529784 -------------------------------------------------------------------------------- ================================================================================ sox-14.4.2.0-13.fc26 (FEDORA-2018-6ca3df84ad) A general purpose sound file conversion tool -------------------------------------------------------------------------------- Update Information: This bugfix resolves **CVE-2017-15371** -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500570 - It is a reachable assertion abort in function sox_append_comment(in formats.c:227) that will lead to denial of service attack https://bugzilla.redhat.com/show_bug.cgi?id=1500570 -------------------------------------------------------------------------------- ================================================================================ spirv-headers-1.2-0.1.20171015.git0610978.fc26 (FEDORA-2018-f4b4da3e53) Header files from the SPIR-V registry -------------------------------------------------------------------------------- Update Information: Vulkan update ---- Update -------------------------------------------------------------------------------- ================================================================================ spirv-tools-2016.7-0.2.20171023.git5834719.fc26 (FEDORA-2018-f4b4da3e53) API and commands for processing SPIR-V modules -------------------------------------------------------------------------------- Update Information: Vulkan update ---- Update -------------------------------------------------------------------------------- ================================================================================ timew-1.0.0-3.fc26 (FEDORA-2018-0fe0962417) Timewarrior tracks and reports time -------------------------------------------------------------------------------- Update Information: New package! -------------------------------------------------------------------------------- References: [ 1 ] Bug #1402416 - Review Request: timew - Timewarrior tracks and reports time https://bugzilla.redhat.com/show_bug.cgi?id=1402416 -------------------------------------------------------------------------------- ================================================================================ vim-go-1.16-1.fc26 (FEDORA-2018-b7b5c2c794) Go development plugin for Vim -------------------------------------------------------------------------------- Update Information: New upstream version **1.16** - [changelog](https://github.com/fatih/vim- go/blob/master/CHANGELOG.md#116---december-29-2017) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529822 - vim-go-1.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1529822 -------------------------------------------------------------------------------- ================================================================================ vulkan-1.0.65.1-3.fc26 (FEDORA-2018-f4b4da3e53) Vulkan loader and validation layers -------------------------------------------------------------------------------- Update Information: Vulkan update ---- Update -------------------------------------------------------------------------------- ================================================================================ xmedcon-0.14.1-2.fc26 (FEDORA-2018-0fcced9e0d) A medical image conversion utility and library -------------------------------------------------------------------------------- Update Information: Update to latest upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1299911 - update 0.14.1 https://bugzilla.redhat.com/show_bug.cgi?id=1299911 -------------------------------------------------------------------------------- ================================================================================ xxhash-0.6.4-1.fc26 (FEDORA-2018-2e4e6d8c21) Extremely fast hash algorithm -------------------------------------------------------------------------------- Update Information: New upstream release. -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx