The following Fedora 26 Security updates need testing: Age URL 178 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26 70 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26 53 https://bodhi.fedoraproject.org/updates/FEDORA-2017-774e7863a4 mongodb-3.4.10-1.fc26 24 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d75a88f263 monit-5.25.1-1.fc26 15 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ccef1ced42 gimp-2.8.22-3.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-909707fc68 python-bottle-0.12.13-1.fc26 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-66b885ae3c keycloak-httpd-client-install-0.8-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0db545e976 ruby-2.4.3-86.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bbf8c38b51 jackson-databind-2.7.6-7.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b3d58d82a0 transmission-2.92-11.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-19c693fd9a wordpress-4.9.2-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-306856c244 rubygem-rack-protection-1.5.3-5.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8e27ad96ed glibc-2.25-13.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a86bad9689 clamav-0.99.2-18.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ef303deec6 libtasn1-4.13-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6550550774 dnsperf-2.1.0.0-8.fc26 bind-dyndb-ldap-11.1-6.fc26 bind-9.11.2-1.P1.fc26 The following Fedora 26 Critical Path updates have yet to be approved: Age URL 15 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c2eed6bd99 iproute-4.14.1-4.fc26 13 https://bodhi.fedoraproject.org/updates/FEDORA-2018-240b9e54f9 glusterfs-3.10.9-1.fc26 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-66604dd3d7 python-requests-kerberos-0.12.0-1.fc26 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b3f20ecd11 kmod-25-1.fc26 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4818a0a3fb lxpanel-0.9.3-2.D20180109git2ddf8dfc.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2ae4888a92 perl-Socket-2.025-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-71094e4775 libseccomp-2.3.3-1.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ba521808e0 gnome-settings-daemon-3.24.3-4.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4bfc82aeb7 pcre-8.41-4.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-194be49026 pcre2-10.23-13.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a7f395463a sed-4.4-2.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f1d83a8255 libtevent-0.9.35-1.fc26 libtalloc-2.1.11-1.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-1b9b3d815f ostree-2018.1-1.fc26 rpm-ostree-2018.1-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6166caf0b grub2-2.02-0.43.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8e27ad96ed glibc-2.25-13.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bfc82942f4 pungi-4.1.21-4.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4000c1ba37 python-productmd-1.10-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0a7ed51954 python3-3.6.4-1.fc26 python3-docs-3.6.4-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ef303deec6 libtasn1-4.13-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-684a158de2 vim-8.0.1428-3.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8a919ad6cb man-db-2.7.6.1-9.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-651160cc1b ibus-1.5.17-5.fc26 The following builds have been pushed to Fedora 26 updates-testing LibRaw-0.18.7-1.fc26 adapta-gtk-theme-3.93.0.66-1.fc26 copr-backend-1.110-1.fc26 gcin-2.8.5-2.fc26 golang-github-chmduquesne-rollinghash-3.0.1-1.fc26 kernel-4.14.14-200.fc26 ktorrent-5.1.0-3.fc26 lightdm-1.25.1-5.fc26 metamath-0.157-1.fc26 mint-y-theme-1.2.4-1.fc26 nfs-utils-2.2.1-4.rc2.fc26 python-rpm-macros-3-21.fc26 qcad-3.19.2.2-1.fc26 qt5-qtdeclarative-5.9.2-3.fc26 Details about builds: ================================================================================ LibRaw-0.18.7-1.fc26 (FEDORA-2018-f5f24038d6) Library for reading RAW files obtained from digital photo cameras -------------------------------------------------------------------------------- Update Information: * All legacy (RGB raw) image loaders checks for imgdata.image is not NULL * kodak_radc_load_raw: check image size before processing * legacy memory allocator: allocate max(widh,raw_width)*max(height,raw_height) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1536427 - LibRaw-0.18.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1536427 -------------------------------------------------------------------------------- ================================================================================ adapta-gtk-theme-3.93.0.66-1.fc26 (FEDORA-2018-0cb761f2c6) An adaptive Gtk+ theme based on Material Design Guidelines -------------------------------------------------------------------------------- Update Information: - New upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1535991 - adapta-gtk-theme-3.93.0.60 is available https://bugzilla.redhat.com/show_bug.cgi?id=1535991 [ 2 ] Bug #1534976 - adapta-gtk-theme-3.93.0.49 is available https://bugzilla.redhat.com/show_bug.cgi?id=1534976 [ 3 ] Bug #1534246 - adapta-gtk-theme-3.93.0.43 is available https://bugzilla.redhat.com/show_bug.cgi?id=1534246 [ 4 ] Bug #1535451 - adapta-gtk-theme-3.93.0.56 is available https://bugzilla.redhat.com/show_bug.cgi?id=1535451 -------------------------------------------------------------------------------- ================================================================================ copr-backend-1.110-1.fc26 (FEDORA-2018-7bd8a8bfdb) Backend for Copr -------------------------------------------------------------------------------- Update Information: - exception handling for hit counting when IP address cannot be parsed ---- - terminate also 'in_use' builders if health checks have failed - make --detached the last arg for copr-rpmbuild - update copr_log_hitcounter to check ip against ignored pattern - new msg bus options - disable DNF makecache timer/service - fix message duplication for multi-bus scenario - optimize createrepo_c - Revert "[backend] remove --ignore-lock from createrepo_c" -------------------------------------------------------------------------------- ================================================================================ gcin-2.8.5-2.fc26 (FEDORA-2018-8761b3727a) An input method focused on Chinese users -------------------------------------------------------------------------------- Update Information: Un-retire gcin in Fedora 26 -------------------------------------------------------------------------------- ================================================================================ golang-github-chmduquesne-rollinghash-3.0.1-1.fc26 (FEDORA-2018-599d0e7a9d) Some rolling checksum implementations in go -------------------------------------------------------------------------------- Update Information: Update to version 3.0.1. This fixes format string errors uncovered by stricter checks with go 1.10. -------------------------------------------------------------------------------- ================================================================================ kernel-4.14.14-200.fc26 (FEDORA-2018-8dc60a4feb) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 4.14.14 stable update contains a number of important fixes across the tree. This update also includes some PPC mitigations, and has been built with a retpoline capable compiler for improved Spectre mitigation on x86_64. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1533891 - CVE-2018-5333 kernel: Null pointer dereference in rds_atomic_free_op() allowing denial-of-service https://bugzilla.redhat.com/show_bug.cgi?id=1533891 [ 2 ] Bug #1533890 - CVE-2018-5332 kernel: rds_message_alloc_sgs() function doesn't validate value used during DMA page allocation causes heap out-of-bounds write https://bugzilla.redhat.com/show_bug.cgi?id=1533890 [ 3 ] Bug #1533909 - CVE-2018-5344 kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service https://bugzilla.redhat.com/show_bug.cgi?id=1533909 -------------------------------------------------------------------------------- ================================================================================ ktorrent-5.1.0-3.fc26 (FEDORA-2018-da53d5d38d) A BitTorrent program -------------------------------------------------------------------------------- Update Information: Patch to fix ktorrent's reported client ID -------------------------------------------------------------------------------- References: [ 1 ] Bug #1536284 - ktorrent reports wrong client ID https://bugzilla.redhat.com/show_bug.cgi?id=1536284 -------------------------------------------------------------------------------- ================================================================================ lightdm-1.25.1-5.fc26 (FEDORA-2018-c561169635) A cross-desktop Display Manager -------------------------------------------------------------------------------- Update Information: * New upstream release * Several fixes for claiming DBus service name -------------------------------------------------------------------------------- References: [ 1 ] Bug #1428379 - start lightdm after dbus https://bugzilla.redhat.com/show_bug.cgi?id=1428379 [ 2 ] Bug #1535730 - lightdm-1.25.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1535730 -------------------------------------------------------------------------------- ================================================================================ metamath-0.157-1.fc26 (FEDORA-2018-6a14186fae) Construct mathematics from basic axioms -------------------------------------------------------------------------------- Update Information: Changes in version 0.157: - Major rewrite of READ-related functions. - Added HELP MARKUP. - Track line numbers for error messages in included files. - Changed HOME_DIRECTORY to ROOT_DIRECTORY. - add virtual includes "$( Begin $[...$] $)", $( End $[...$] $)", "$( Skip $[...$] $)" -------------------------------------------------------------------------------- References: [ 1 ] Bug #1536242 - metamath-0.157 is available https://bugzilla.redhat.com/show_bug.cgi?id=1536242 -------------------------------------------------------------------------------- ================================================================================ mint-y-theme-1.2.4-1.fc26 (FEDORA-2018-c3f8fc5397) The Mint-Y theme -------------------------------------------------------------------------------- Update Information: - New upstream release -------------------------------------------------------------------------------- ================================================================================ nfs-utils-2.2.1-4.rc2.fc26 (FEDORA-2018-8633570be3) NFS utilities and supporting clients and daemons for the kernel NFS server -------------------------------------------------------------------------------- Update Information: Restart gssproxy (if running) when the NFS server is start -------------------------------------------------------------------------------- References: [ 1 ] Bug #1535424 - nfs-utils need to cause gssproxy reload https://bugzilla.redhat.com/show_bug.cgi?id=1535424 -------------------------------------------------------------------------------- ================================================================================ python-rpm-macros-3-21.fc26 (FEDORA-2018-fcda2573ac) The unversioned Python RPM macros -------------------------------------------------------------------------------- Update Information: Add `%python_enable_dependency_generator` -------------------------------------------------------------------------------- ================================================================================ qcad-3.19.2.2-1.fc26 (FEDORA-2018-cc38440405) Powerful 2D CAD system -------------------------------------------------------------------------------- Update Information: - Update to 3.19.2.2 -------------------------------------------------------------------------------- ================================================================================ qt5-qtdeclarative-5.9.2-3.fc26 (FEDORA-2018-61e0dcaf5e) Qt5 - QtDeclarative component -------------------------------------------------------------------------------- Update Information: Backport fix for excessive repaints in some cases. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1536606 - Stopped animators are not removed / Constant screen repaints after display configuration is changed in KDE Plasma 5 https://bugzilla.redhat.com/show_bug.cgi?id=1536606 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx