The following Fedora 26 Security updates need testing: Age URL 165 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26 58 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26 40 https://bodhi.fedoraproject.org/updates/FEDORA-2017-774e7863a4 mongodb-3.4.10-1.fc26 36 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7bac3ba7c3 qpid-cpp-1.37.0-1.fc26 17 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f7cbe22fd8 heketi-5.0.1-1.fc26 11 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d75a88f263 monit-5.25.1-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d1213cef30 mupdf-1.12.0-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-48569250d1 nasm-2.13.02-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-17ba1a2393 awstats-7.6-4.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c4e9207c31 php-7.1.13-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6ca3df84ad sox-14.4.2.0-13.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6cd2e0e292 gifsicle-1.90-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5aa21dc9a3 qtpass-1.2.1-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ccef1ced42 gimp-2.8.22-3.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fb582aabcc firefox-57.0.4-1.fc26 The following Fedora 26 Critical Path updates have yet to be approved: Age URL 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-86281f085b libfm-1.2.5-4.gitD20171230.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b3916cfc52 pcmanfm-1.2.5-3.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8bdedce282 perl-podlators-4.09-3.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-af9c086f87 pigz-2.4-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c2eed6bd99 iproute-4.14.1-4.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-35ec68d59d publicsuffix-list-20171228-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-403c7c5351 gtk3-3.22.21-3.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-66604dd3d7 python-requests-kerberos-0.12.0-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fb582aabcc firefox-57.0.4-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-240b9e54f9 glusterfs-3.10.9-1.fc26 The following builds have been pushed to Fedora 26 updates-testing GeoIP-GeoLite-data-2018.01-1.fc26 composer-1.6.2-1.fc26 container-selinux-2.39-1.fc26 debhelper-11.1.1-1.fc26 debootstrap-1.0.93-1.fc26 dh-make-2.201701-1.fc26 firefox-57.0.4-1.fc26 git-fame-1.3.0-1.fc26 gtk3-3.22.21-3.fc26 libjson-rpc-cpp-1.1.0-1.fc26 perl-Authen-Passphrase-0.008-1.fc26 php-composer-spdx-licenses-1.2.0-1.fc26 php-pecl-couchbase2-2.4.3-2.fc26 python-pika-0.11.2-2.fc26 python-quantities-0.12.1-1.fc26 python-requests-kerberos-0.12.0-1.fc26 rb_libtorrent-1.1.6-1.fc26 sane-backends-1.0.27-9.fc26 shorewall-5.1.10.2-1.fc26 xflr5-6.40-1.fc26 Details about builds: ================================================================================ GeoIP-GeoLite-data-2018.01-1.fc26 (FEDORA-2018-c777b44352) Free GeoLite IP geolocation country database -------------------------------------------------------------------------------- Update Information: Update to current databases. -------------------------------------------------------------------------------- ================================================================================ composer-1.6.2-1.fc26 (FEDORA-2018-edbc70d0df) Dependency Manager for PHP -------------------------------------------------------------------------------- Update Information: **composer 1.6.2** - 2018-01-05 * Fixed more autoloader regressions * Fixed support for updating dist refs in gitlab URLs --- **composer 1.6.1** - 2018-01-04 * Fixed upgrade regression due to some autoloader cleanups * Fixed some overly loose version constraints ---- **composer 1.6.0** - 2018-01-04 * Added support for SPDX license identifiers v3.0, deprecates GPL/LGPL/AGPL identifiers, which should now have a `-only` or `-or-later` suffix added. * Added support for COMPOSER_MEMORY_LIMIT env var to make Composer set the PHP memory limit explicitly * Added support for simple strings for the `bin` * Fixed `check-platform-reqs` bug in version checking --- **composer 1.6.0RC** - 2017-12-19 * Improved performance of installs and updates from git clones when checking out known commits * Added `check-platform-reqs` command that checks that your PHP and extensions versions match the platform requirements of the installed packages * Added `--with-all-dependencies` to the `update` and `require` commands which updates all dependencies of the listed packages, including those that are direct root requirements * Added `scripts- descriptions` key to composer.json to customize the description and document your custom commands * Added support for the uppercase NO_PROXY env var * Added support for COMPOSER_DEFAULT_{AUTHOR,LICENSE,EMAIL,VENDOR} env vars to pre-populate init command values * Added support for local fossil repositories * Added suggestions for alternative spellings when entering packages in `init` and `require` commands and nothing can be found * Fixed installed.json data to be sorted alphabetically by package name * Fixed compatibility with Symfony 4.x components that Composer uses --- **spdx-licenses 1.2.0** - 2018-01-03 * Added: deprecation status for all licenses and a `SpdxLicenses::isDeprecatedByIdentifier` method. * Changed: updated licenses list to SPDX 3.0. -------------------------------------------------------------------------------- ================================================================================ container-selinux-2.39-1.fc26 (FEDORA-2018-1d288c81a2) SELinux policies for container runtimes -------------------------------------------------------------------------------- Update Information: Fixes bounds check problems on systems with unconfined domain disabled. ---- Fix problem with bounds checker. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1531858 - On fully upgraded F27, can't install container-selinux https://bugzilla.redhat.com/show_bug.cgi?id=1531858 [ 2 ] Bug #1514795 - SELinux is preventing systemd from 'create' accesses on the unix_stream_socket Unknown. https://bugzilla.redhat.com/show_bug.cgi?id=1514795 -------------------------------------------------------------------------------- ================================================================================ debhelper-11.1.1-1.fc26 (FEDORA-2018-1bb253a9f5) Helper programs for Debian rules -------------------------------------------------------------------------------- Update Information: Update to 11.1.1 ---- Update to 11.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1532090 - debhelper-11.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1532090 [ 2 ] Bug #1504326 - debhelper-11.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504326 -------------------------------------------------------------------------------- ================================================================================ debootstrap-1.0.93-1.fc26 (FEDORA-2018-cd5581cbd1) Debian GNU/Linux bootstrapper -------------------------------------------------------------------------------- Update Information: Update to 1.0.93 (#1523424) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1523424 - debootstrap-1.0.93 is available https://bugzilla.redhat.com/show_bug.cgi?id=1523424 -------------------------------------------------------------------------------- ================================================================================ dh-make-2.201701-1.fc26 (FEDORA-2018-7c900716c2) Tool that converts source archives into Debian package source -------------------------------------------------------------------------------- Update Information: Update to 2.201701 (#1527706) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1527706 - dh-make-2.201701 is available https://bugzilla.redhat.com/show_bug.cgi?id=1527706 -------------------------------------------------------------------------------- ================================================================================ firefox-57.0.4-1.fc26 (FEDORA-2018-fb582aabcc) Mozilla Firefox Web browser -------------------------------------------------------------------------------- Update Information: - Update to 57.0.4 - Security fixes to address the Meltdown and Spectre timing attacks - https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new- class-timing-attack/ - Require new nss 3.34 (fixed #1531031) - Disabled ARM on all Fedoras due to #1523912 -------------------------------------------------------------------------------- ================================================================================ git-fame-1.3.0-1.fc26 (FEDORA-2018-0045743053) Pretty-print git repository collaborators sorted by contributions -------------------------------------------------------------------------------- Update Information: Update to 1.3.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1531970 - git-fame-1.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531970 -------------------------------------------------------------------------------- ================================================================================ gtk3-3.22.21-3.fc26 (FEDORA-2018-403c7c5351) GTK+ graphical user interface library -------------------------------------------------------------------------------- Update Information: - Backport fix for guest/host copy&paste issues in Boxes [(Freedesktop #101353)](https://bugs.freedesktop.org/show_bug.cgi?id=101353) -------------------------------------------------------------------------------- ================================================================================ libjson-rpc-cpp-1.1.0-1.fc26 (FEDORA-2018-0f35e2547f) C++ framework for json-rpc (json remote procedure call) -------------------------------------------------------------------------------- Update Information: Update to 1.1.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1531327 - libjson-rpc-cpp-1.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531327 -------------------------------------------------------------------------------- ================================================================================ perl-Authen-Passphrase-0.008-1.fc26 (FEDORA-2018-7f9b99ce4a) Hashed passwords/passphrases as objects -------------------------------------------------------------------------------- Update Information: Specfile autogenerated by cpanspec 1.78. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1520581 - Review Request: perl-Authen-Passphrase - Hashed passwords/passphrases as objects https://bugzilla.redhat.com/show_bug.cgi?id=1520581 -------------------------------------------------------------------------------- ================================================================================ php-composer-spdx-licenses-1.2.0-1.fc26 (FEDORA-2018-edbc70d0df) SPDX licenses list and validation library -------------------------------------------------------------------------------- Update Information: **composer 1.6.2** - 2018-01-05 * Fixed more autoloader regressions * Fixed support for updating dist refs in gitlab URLs --- **composer 1.6.1** - 2018-01-04 * Fixed upgrade regression due to some autoloader cleanups * Fixed some overly loose version constraints ---- **composer 1.6.0** - 2018-01-04 * Added support for SPDX license identifiers v3.0, deprecates GPL/LGPL/AGPL identifiers, which should now have a `-only` or `-or-later` suffix added. * Added support for COMPOSER_MEMORY_LIMIT env var to make Composer set the PHP memory limit explicitly * Added support for simple strings for the `bin` * Fixed `check-platform-reqs` bug in version checking --- **composer 1.6.0RC** - 2017-12-19 * Improved performance of installs and updates from git clones when checking out known commits * Added `check-platform-reqs` command that checks that your PHP and extensions versions match the platform requirements of the installed packages * Added `--with-all-dependencies` to the `update` and `require` commands which updates all dependencies of the listed packages, including those that are direct root requirements * Added `scripts- descriptions` key to composer.json to customize the description and document your custom commands * Added support for the uppercase NO_PROXY env var * Added support for COMPOSER_DEFAULT_{AUTHOR,LICENSE,EMAIL,VENDOR} env vars to pre-populate init command values * Added support for local fossil repositories * Added suggestions for alternative spellings when entering packages in `init` and `require` commands and nothing can be found * Fixed installed.json data to be sorted alphabetically by package name * Fixed compatibility with Symfony 4.x components that Composer uses --- **spdx-licenses 1.2.0** - 2018-01-03 * Added: deprecation status for all licenses and a `SpdxLicenses::isDeprecatedByIdentifier` method. * Changed: updated licenses list to SPDX 3.0. -------------------------------------------------------------------------------- ================================================================================ php-pecl-couchbase2-2.4.3-2.fc26 (FEDORA-2018-ce6a8b5cf0) Couchbase Server PHP extension -------------------------------------------------------------------------------- Update Information: The PHP client library provides fast access to documents stored in a Couchbase Server. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1531464 - Review Request: php-pecl-couchbase2 - Couchbase Server PHP extension https://bugzilla.redhat.com/show_bug.cgi?id=1531464 -------------------------------------------------------------------------------- ================================================================================ python-pika-0.11.2-2.fc26 (FEDORA-2018-e84c9da0fb) AMQP 0-9-1 client library for Python -------------------------------------------------------------------------------- Update Information: Update to pika 0.11.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1507508 - pika 0.11 https://bugzilla.redhat.com/show_bug.cgi?id=1507508 -------------------------------------------------------------------------------- ================================================================================ python-quantities-0.12.1-1.fc26 (FEDORA-2018-436d41f117) Support for physical quantities with units, based on numpy -------------------------------------------------------------------------------- Update Information: Update to latest release. -------------------------------------------------------------------------------- ================================================================================ python-requests-kerberos-0.12.0-1.fc26 (FEDORA-2018-66604dd3d7) A Kerberos authentication handler for python-requests -------------------------------------------------------------------------------- Update Information: Upstream release 0.12.0: https://github.com/requests/requests- kerberos/blob/v0.12.0/HISTORY.rst#0120-2017-12-20 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1524750 - python-requests-kerberos-0.12.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1524750 -------------------------------------------------------------------------------- ================================================================================ rb_libtorrent-1.1.6-1.fc26 (FEDORA-2018-c3a9564750) A C++ BitTorrent library aiming to be the best alternative -------------------------------------------------------------------------------- Update Information: Update -------------------------------------------------------------------------------- References: [ 1 ] Bug #1530010 - rb_libtorrent-1.1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1530010 -------------------------------------------------------------------------------- ================================================================================ sane-backends-1.0.27-9.fc26 (FEDORA-2018-0cdee5b800) Scanner access software -------------------------------------------------------------------------------- Update Information: fixing configure option --with-usb 1530216 - Samsung scanners need proprietary driver for working [Fedora-ALL] -------------------------------------------------------------------------------- ================================================================================ shorewall-5.1.10.2-1.fc26 (FEDORA-2017-48805a9fb7) An iptables front end for firewall configuration -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1401739 - shorewall-5.1.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1401739 [ 2 ] Bug #1513472 - Needs update https://bugzilla.redhat.com/show_bug.cgi?id=1513472 [ 3 ] Bug #1498461 - Perl script incompatibility https://bugzilla.redhat.com/show_bug.cgi?id=1498461 -------------------------------------------------------------------------------- ================================================================================ xflr5-6.40-1.fc26 (FEDORA-2018-0c65e4d306) Analysis tool for airfoils, wings and planes -------------------------------------------------------------------------------- Update Information: Update to version 6.40, see http://www.xflr5.com/ReleaseNotes.htm for details. -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx