The following Fedora 26 Security updates need testing: Age URL 167 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26 59 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26 42 https://bodhi.fedoraproject.org/updates/FEDORA-2017-774e7863a4 mongodb-3.4.10-1.fc26 38 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7bac3ba7c3 qpid-cpp-1.37.0-1.fc26 13 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d75a88f263 monit-5.25.1-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-17ba1a2393 awstats-7.6-4.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c4e9207c31 php-7.1.13-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6ca3df84ad sox-14.4.2.0-13.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6cd2e0e292 gifsicle-1.90-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5aa21dc9a3 qtpass-1.2.1-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ccef1ced42 gimp-2.8.22-3.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc08435961 irssi-1.0.6-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-909707fc68 python-bottle-0.12.13-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6b319763ab microcode_ctl-2.1-20.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e1539d9bc6 icecat-52.5.3-2.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0d6a80f496 mariadb-10.1.30-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7349a7723e poco-1.7.8p3-3.fc26 The following Fedora 26 Critical Path updates have yet to be approved: Age URL 9 https://bodhi.fedoraproject.org/updates/FEDORA-2017-86281f085b libfm-1.2.5-4.gitD20171230.fc26 9 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b3916cfc52 pcmanfm-1.2.5-3.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8bdedce282 perl-podlators-4.09-3.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-af9c086f87 pigz-2.4-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c2eed6bd99 iproute-4.14.1-4.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-35ec68d59d publicsuffix-list-20171228-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-240b9e54f9 glusterfs-3.10.9-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-403c7c5351 gtk3-3.22.21-3.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-66604dd3d7 python-requests-kerberos-0.12.0-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2ae4888a92 perl-Socket-2.025-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b3f20ecd11 kmod-25-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4818a0a3fb lxpanel-0.9.3-2.D20180109git2ddf8dfc.fc26 The following builds have been pushed to Fedora 26 updates-testing R-RInside-0.2.14-5.fc26 argbash-2.5.1-1.fc26 axmail-2.8-1.fc26 concurrentunit-0.4.3-1.fc26 container-selinux-2.40-1.fc26 gammu-1.39.0-1.fc26 golang-github-cznic-fileutil-0-0.4.git6a051e7.fc26 golang-github-cznic-mathutil-0-0.6.gitc90ba19.fc26 golang-github-klauspost-reedsolomon-1.6-3.20171219.git0b30fa7.fc26 golang-github-thejerf-suture-2.0.1-2.20180103.gitbb8f537.fc26 icecat-52.5.3-2.fc26 kompose-1.7.0-1.fc26 lizardfs-3.12.0-1.fc26 mariadb-10.1.30-1.fc26 microcode_ctl-2.1-20.fc26 nodejs-grunt-contrib-copy-1.0.0-2.fc26 ocaml-4.04.0-11.fc26 perl-HTML-Lint-2.30-1.fc26 perl-Mojolicious-Plugin-I18N-1.6-1.fc26 perl-Socket-2.025-1.fc26 php-pecl-pq-2.1.3-1.fc26 poco-1.7.8p3-3.fc26 python-bottle-0.12.13-1.fc26 python-cli-helpers-1.0.1-2.fc26 python-gammu-2.11-2.fc26 python-pep8-1.6.2-10.fc26 recoll-1.23.7-1.fc26 rubygem-ruby-libvirt-0.7.0-4.fc26 wammu-0.44-3.fc26 Details about builds: ================================================================================ R-RInside-0.2.14-5.fc26 (FEDORA-2018-343f5a182e) C++ Classes to Embed R in C++ Applications -------------------------------------------------------------------------------- Update Information: Rebuild with updated R-Rcpp. -------------------------------------------------------------------------------- ================================================================================ argbash-2.5.1-1.fc26 (FEDORA-2018-1bc7b58d06) Bash argument parsing code generator -------------------------------------------------------------------------------- Update Information: Update to argbash 2.5.1 https://github.com/matejak/argbash/releases/tag/2.5.1 -------------------------------------------------------------------------------- ================================================================================ axmail-2.8-1.fc26 (FEDORA-2018-6edf75b522) UROnode addon - an SMTP mailbox -------------------------------------------------------------------------------- Update Information: This is new version of axmail -------------------------------------------------------------------------------- ================================================================================ concurrentunit-0.4.3-1.fc26 (FEDORA-2018-2b8f16f345) Toolkit for testing multi-threaded and asynchronous applications -------------------------------------------------------------------------------- Update Information: 0.4.3 Bug Fixes Fixed issue #17 - ConcurrentUnit.await(long, TimeUnit) not passing through TimeUnit -------------------------------------------------------------------------------- References: [ 1 ] Bug #1493791 - concurrentunit-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1493791 -------------------------------------------------------------------------------- ================================================================================ container-selinux-2.40-1.fc26 (FEDORA-2018-827888cfdd) SELinux policies for container runtimes -------------------------------------------------------------------------------- Update Information: Fixes for typebounds ---- Fixes bounds check problems on systems with unconfined domain disabled. ---- Fix problem with bounds checker. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1531858 - On fully upgraded F27, can't install container-selinux https://bugzilla.redhat.com/show_bug.cgi?id=1531858 [ 2 ] Bug #1514795 - SELinux is preventing systemd from 'create' accesses on the unix_stream_socket Unknown. https://bugzilla.redhat.com/show_bug.cgi?id=1514795 -------------------------------------------------------------------------------- ================================================================================ gammu-1.39.0-1.fc26 (FEDORA-2018-d66730c9d2) Command Line utility to work with mobile phones -------------------------------------------------------------------------------- Update Information: Update gammu, python-gammu and wammu ---- update for gammu and python-gammu -------------------------------------------------------------------------------- References: [ 1 ] Bug #1531832 - wammu-0.44 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531832 [ 2 ] Bug #1510442 - python-gammu-2.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1510442 [ 3 ] Bug #1531828 - python-gammu-2.11 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531828 [ 4 ] Bug #1504333 - gammu-1.38.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504333 [ 5 ] Bug #1531519 - gammu-1.39.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531519 -------------------------------------------------------------------------------- ================================================================================ golang-github-cznic-fileutil-0-0.4.git6a051e7.fc26 (FEDORA-2018-cfb39218f4) File utility functions for Go -------------------------------------------------------------------------------- Update Information: Bump to commit 6a051e7. -------------------------------------------------------------------------------- ================================================================================ golang-github-cznic-mathutil-0-0.6.gitc90ba19.fc26 (FEDORA-2018-8f2093aa46) Supplemental utilities for Go's rand and math packages -------------------------------------------------------------------------------- Update Information: Bump to commit c90ba19. -------------------------------------------------------------------------------- ================================================================================ golang-github-klauspost-reedsolomon-1.6-3.20171219.git0b30fa7.fc26 (FEDORA-2018-c84e07b6c7) Reed-Solomon Erasure Coding in Go -------------------------------------------------------------------------------- Update Information: Bump to commit 0b30fa7. -------------------------------------------------------------------------------- ================================================================================ golang-github-thejerf-suture-2.0.1-2.20180103.gitbb8f537.fc26 (FEDORA-2018-2e11b04a10) Supervisor trees for Go -------------------------------------------------------------------------------- Update Information: Bump to commit bb8f537. -------------------------------------------------------------------------------- ================================================================================ icecat-52.5.3-2.fc26 (FEDORA-2018-e1539d9bc6) GNU version of Firefox browser -------------------------------------------------------------------------------- Update Information: - Update to 52.5.3 - Patched for mozilla bug-1427870 (spectre mitigation) -------------------------------------------------------------------------------- ================================================================================ kompose-1.7.0-1.fc26 (FEDORA-2018-2fea51c649) Tool to move from 'docker-compose' to Kubernetes -------------------------------------------------------------------------------- Update Information: Update source to v1.7.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1478152 - kompose tries to install docker https://bugzilla.redhat.com/show_bug.cgi?id=1478152 [ 2 ] Bug #1486973 - kompose-v1.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1486973 -------------------------------------------------------------------------------- ================================================================================ lizardfs-3.12.0-1.fc26 (FEDORA-2018-ec36123fb0) Distributed, fault tolerant file system -------------------------------------------------------------------------------- Update Information: An update that adds support for rich (NFS4) ACLs and advanced chunkserver options. For the smoothest upgrade experience, first upgrade your metadata shadows and loggers, then the metadata master, then the chunkservers, and finally the clients. See the notes at https://docs.lizardfs.com/adminguide/upgrading.html for more details (the 3.10 upgrade notes apply if 3.12 are still missing). -------------------------------------------------------------------------------- ================================================================================ mariadb-10.1.30-1.fc26 (FEDORA-2018-0d6a80f496) A community developed branch of MySQL -------------------------------------------------------------------------------- Update Information: **Update to 10.1.30** sysusers and tmpfiles added by upstream **Release notes:** https://mariadb.com/kb/en/library/mariadb-10130-release-notes/ **CVE's fixed:** CVE-2017-15365 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1524235 - CVE-2017-15365 mariadb: Replication in sql/event_data_objects.cc occurs before ACL checks [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1524235 -------------------------------------------------------------------------------- ================================================================================ microcode_ctl-2.1-20.fc26 (FEDORA-2018-6b319763ab) Tool to transform and deploy CPU microcode update for x86 -------------------------------------------------------------------------------- Update Information: Update to upstream 2.1-15. 20180108. Includes fix for Spectre. -------------------------------------------------------------------------------- ================================================================================ nodejs-grunt-contrib-copy-1.0.0-2.fc26 (FEDORA-2018-f803933db7) Copy files and folders -------------------------------------------------------------------------------- Update Information: Initial build for f26 (after unretirement) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1530733 - nodejs-grunt-contrib copy not available for F26, EL7 and EL6 https://bugzilla.redhat.com/show_bug.cgi?id=1530733 [ 2 ] Bug #1256162 - nodejs-grunt-contrib-copy-0.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1256162 -------------------------------------------------------------------------------- ================================================================================ ocaml-4.04.0-11.fc26 (FEDORA-2018-932548462e) OCaml compiler and programming environment -------------------------------------------------------------------------------- Update Information: Drop non-free documentation (RHBZ#1530647). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1530647 - ocaml-docs is non-free https://bugzilla.redhat.com/show_bug.cgi?id=1530647 -------------------------------------------------------------------------------- ================================================================================ perl-HTML-Lint-2.30-1.fc26 (FEDORA-2018-05baa407d6) HTML::Lint Perl module -------------------------------------------------------------------------------- Update Information: -------------------------------------------------------------------------------- ================================================================================ perl-Mojolicious-Plugin-I18N-1.6-1.fc26 (FEDORA-2018-8ecf44c366) Internationalization Plugin for Mojolicious -------------------------------------------------------------------------------- Update Information: Specfile autogenerated by cpanspec 1.78. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1520582 - Review Request: perl-Mojolicious-Plugin-I18N - Internationalization Plugin for Mojolicious https://bugzilla.redhat.com/show_bug.cgi?id=1520582 -------------------------------------------------------------------------------- ================================================================================ perl-Socket-2.025-1.fc26 (FEDORA-2018-2ae4888a92) Networking constants and support functions -------------------------------------------------------------------------------- Update Information: This release adds support for ICMPv6 protocol. It also corrects tests to report errors to error output. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1532914 - perl-Socket-2.025 is available https://bugzilla.redhat.com/show_bug.cgi?id=1532914 -------------------------------------------------------------------------------- ================================================================================ php-pecl-pq-2.1.3-1.fc26 (FEDORA-2018-dfb68497ba) PostgreSQL client library (libpq) binding -------------------------------------------------------------------------------- Update Information: **Version 2.1.3** - Release notes * Fix gh-issue #27: crash in pq\Connection::escapeBytea() * Update static pq\Types with PostgreSQL-10 types -------------------------------------------------------------------------------- ================================================================================ poco-1.7.8p3-3.fc26 (FEDORA-2018-7349a7723e) C++ class libraries for network-centric applications -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-1000472 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1532129 - poco: Improper path restriction in ZipCommon.cpp allows for arbitrary files to be written https://bugzilla.redhat.com/show_bug.cgi?id=1532129 -------------------------------------------------------------------------------- ================================================================================ python-bottle-0.12.13-1.fc26 (FEDORA-2018-909707fc68) Fast and simple WSGI-framework for small web-applications -------------------------------------------------------------------------------- Update Information: Update to 0.12.13 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1405417 - CVE-2016-9964 python-bottle: redirect() doesn't filter "\r\n" which allows for CRLF attack [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1405417 -------------------------------------------------------------------------------- ================================================================================ python-cli-helpers-1.0.1-2.fc26 (FEDORA-2018-e561335e1c) Python helpers for common CLI tasks -------------------------------------------------------------------------------- Update Information: Update to latest upstream release cli_helpers 1.0.1. -------------------------------------------------------------------------------- ================================================================================ python-gammu-2.11-2.fc26 (FEDORA-2018-d66730c9d2) Python bindings for Gammu -------------------------------------------------------------------------------- Update Information: Update gammu, python-gammu and wammu ---- update for gammu and python-gammu -------------------------------------------------------------------------------- References: [ 1 ] Bug #1531832 - wammu-0.44 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531832 [ 2 ] Bug #1510442 - python-gammu-2.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1510442 [ 3 ] Bug #1531828 - python-gammu-2.11 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531828 [ 4 ] Bug #1504333 - gammu-1.38.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504333 [ 5 ] Bug #1531519 - gammu-1.39.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531519 -------------------------------------------------------------------------------- ================================================================================ python-pep8-1.6.2-10.fc26 (FEDORA-2018-2bb915561a) Python style guide checker -------------------------------------------------------------------------------- Update Information: Create the python2-pep8 RPM, rather than python-pep8 -------------------------------------------------------------------------------- ================================================================================ recoll-1.23.7-1.fc26 (FEDORA-2018-5ced4e82a0) Desktop full text search tool with Qt GUI -------------------------------------------------------------------------------- Update Information: Update to latest upstream release recoll 1.23.7. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1523906 - recoll-1.23.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1523906 -------------------------------------------------------------------------------- ================================================================================ rubygem-ruby-libvirt-0.7.0-4.fc26 (FEDORA-2018-20d436dd6b) Ruby bindings for LIBVIRT -------------------------------------------------------------------------------- Update Information: Remove inproper Obsoletes -------------------------------------------------------------------------------- ================================================================================ wammu-0.44-3.fc26 (FEDORA-2018-d66730c9d2) Mobile Phone Manager - Gammu GUI -------------------------------------------------------------------------------- Update Information: Update gammu, python-gammu and wammu ---- update for gammu and python-gammu -------------------------------------------------------------------------------- References: [ 1 ] Bug #1531832 - wammu-0.44 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531832 [ 2 ] Bug #1510442 - python-gammu-2.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1510442 [ 3 ] Bug #1531828 - python-gammu-2.11 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531828 [ 4 ] Bug #1504333 - gammu-1.38.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504333 [ 5 ] Bug #1531519 - gammu-1.39.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1531519 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
