The following Fedora 26 Security updates need testing: Age URL 85 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01 python-XStatic-jquery-ui-1.12.0.1-2.fc26 24 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2522df3526 nodejs-brace-expansion-1.1.7-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5c6a9b07a3 xen-4.8.1-4.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5c8a4ebccd zabbix-3.0.9-1.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-28387b61fd php-horde-Horde-Image-2.5.1-1.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2f30e218e7 irssi-1.0.3-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4e2312892e jetty-9.4.6-1.v20170531.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-808dbfe1d3 pius-2.2.4-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-30f678e62a bind-9.11.1-2.P2.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d76189b06d mosquitto-1.4.13-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-2017-0dec8a74c5 pungi-4.1.16-3.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5c6a9b07a3 xen-4.8.1-4.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-59ca80e001 libguestfs-1.36.5-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-06d188a0fc webkitgtk4-2.16.5-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b4786b0b24 tracker-1.12.1-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-88f80a61da anaconda-26.21.11-1.fc26 blivet-gui-2.1.5-2.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-25d48e0ddb dbus-1.11.14-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7ac5fad86c nmap-7.40-3.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4305176f2a libsoup-2.58.1-2.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5b1d1c2141 gsm-1.0.17-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2017-737d3789d3 keybinder3-0.3.2-2.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-a556de3b2f mesa-17.1.4-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9c8c906365 dnf-plugins-core-2.1.2-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-51bdb42825 libdnf-0.9.2-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-dad0fcac5d flatpak-0.9.7-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-459d827225 generic-release-26-1 fedora-repos-26-1 fedora-release-26-1 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2b6507886b bash-4.4.12-6.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-165671b9db kernel-4.11.8-300.fc26 The following builds have been pushed to Fedora 26 updates-testing LuxRender-1.6-16.fc26 bash-4.4.12-6.fc26 bind-9.11.1-2.P2.fc26 ccdciel-0.8.14-1.382svn.fc26 criu-3.2.1-2.fc26 dnf-plugins-core-2.1.2-1.fc26 dnscrypt-proxy-gui-1.11.10-1.fc26 dnsperf-2.1.0.0-6.fc26 edgar-1.27-1.fc26 embree-2.16.4-1.fc26 erlang-edown-0.8.1-3.fc26 erlang-riak_pb-2.3.2-1.fc26 erlang-riaknostic-2.1.7-1.fc26 fedora-release-26-1 fedora-release-notes-26.02-2.fc26 fedora-repos-26-1 flacon-3.0.0-1.fc26 flatpak-0.9.7-1.fc26 gearmand-1.1.16-1.fc26 generic-release-26-1 gimagereader-3.2.3-1.fc26 groonga-7.0.4-1.fc26 kernel-4.11.8-300.fc26 libdnf-0.9.2-1.fc26 libtaskotron-0.4.21-1.fc26 mesa-17.1.4-1.fc26 mosquitto-1.4.13-1.fc26 ndctl-57.1-1.fc26 python-MDAnalysis-0.16.2-1.fc26 python-autobahn-17.6.2-1.gitbc2a1b3.fc26 python-etcd-0.4.5-6.fc26 python-pytoml-0.1.14-1.git7dea353.fc26 qcad-3.17.3.0-1.fc26 radicale-1.1.2-2.fc26 rkhunter-1.4.4-1.fc26 spin-kickstarts-0.26.1-1.fc26 sugar-measure-101-1.fc26 wingpanel-indicator-datetime-2.0.2-1.fc26 xplayer-1.4.3-1.fc26 Details about builds: ================================================================================ LuxRender-1.6-16.fc26 (FEDORA-2017-2645d11983) Lux Renderer, an unbiased rendering system -------------------------------------------------------------------------------- Update Information: Rebuild with embree 2.16.4. Release note ----------------- Bugfix in the ribbon intersector for hair primitives. Non-normalized rays caused wrong intersection distance to be reported. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1459537 - embree-2.16.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1459537 [ 2 ] Bug #1434810 - embree-2.16.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1434810 [ 3 ] Bug #1466767 - embree-2.16.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1466767 -------------------------------------------------------------------------------- ================================================================================ bash-4.4.12-6.fc26 (FEDORA-2017-2b6507886b) The GNU Bourne Again shell -------------------------------------------------------------------------------- Update Information: Fix test for file modification times when they differ below whole seconds while true; do touch a; sleep 0.1; touch b; stat a b|grep Modify; [ b -nt a ] && echo test_cmd_ok || echo test_cmd_failed; echo; done -------------------------------------------------------------------------------- References: [ 1 ] Bug #1458008 - test builtin gives wrong result when file modification times differ below whole seconds https://bugzilla.redhat.com/show_bug.cgi?id=1458008 -------------------------------------------------------------------------------- ================================================================================ bind-9.11.1-2.P2.fc26 (FEDORA-2017-30f678e62a) The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server -------------------------------------------------------------------------------- Update Information: Update to last supported version, fixes CVE-2017-3142 and CVE-2017-3143. Includes minor fix of missing dependencies. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466189 - CVE-2017-3142 bind: An error in TSIG authentication can permit unauthorized zone transfers https://bugzilla.redhat.com/show_bug.cgi?id=1466189 [ 2 ] Bug #1466193 - CVE-2017-3143 bind: An error in TSIG authentication can permit unauthorized dynamic updates https://bugzilla.redhat.com/show_bug.cgi?id=1466193 -------------------------------------------------------------------------------- ================================================================================ ccdciel-0.8.14-1.382svn.fc26 (FEDORA-2017-934eddae0b) CCD capture software -------------------------------------------------------------------------------- Update Information: Update to 0.8.14 More stable star detection. -------------------------------------------------------------------------------- ================================================================================ criu-3.2.1-2.fc26 (FEDORA-2017-7c3fb125d2) Tool for Checkpoint/Restore in User-space -------------------------------------------------------------------------------- Update Information: Added patches to handle unified hierarchy and new glibc -------------------------------------------------------------------------------- References: [ 1 ] Bug #1454300 - criu-3.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1454300 -------------------------------------------------------------------------------- ================================================================================ dnf-plugins-core-2.1.2-1.fc26 (FEDORA-2017-9c8c906365) Core Plugins for DNF -------------------------------------------------------------------------------- Update Information: * `copr` doesn't crash anymore in some circumstances. * `debuginfo-install` doesn't install any additional subpackages anymore, previously it was trying to get all dependent packages recursively and install debuginfo packages for them. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1322599 - debuginfo-install installs needless packages https://bugzilla.redhat.com/show_bug.cgi?id=1322599 -------------------------------------------------------------------------------- ================================================================================ dnscrypt-proxy-gui-1.11.10-1.fc26 (FEDORA-2017-1c7824c47d) GUI wrapper for dnscrypt-proxy -------------------------------------------------------------------------------- Update Information: enhancements; -------------------------------------------------------------------------------- References: [ 1 ] Bug #1464281 - dnscrypt-proxy-gui-1.11.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1464281 -------------------------------------------------------------------------------- ================================================================================ dnsperf-2.1.0.0-6.fc26 (FEDORA-2017-1890d69f6e) Benchmarking authorative and recursing DNS servers -------------------------------------------------------------------------------- Update Information: Fix broken dependencies -------------------------------------------------------------------------------- ================================================================================ edgar-1.27-1.fc26 (FEDORA-2017-7bfde8e6d3) A platform game -------------------------------------------------------------------------------- Update Information: * Added new music for the Laboratory * Updated German translation * Fixed a problem where Evil Edgar could get blocked by monsters during his first cutscene * Increased the size of the safe dial image * Health potions now restore 5 health points * Boulders spin more realistically * The Gargoyle now hovers lower down during his second phase attack * Fixed a memory leak when saving PNG images -------------------------------------------------------------------------------- ================================================================================ embree-2.16.4-1.fc26 (FEDORA-2017-2645d11983) Collection of high-performance ray tracing kernels developed at Intel -------------------------------------------------------------------------------- Update Information: Rebuild with embree 2.16.4. Release note ----------------- Bugfix in the ribbon intersector for hair primitives. Non-normalized rays caused wrong intersection distance to be reported. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1459537 - embree-2.16.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1459537 [ 2 ] Bug #1434810 - embree-2.16.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1434810 [ 3 ] Bug #1466767 - embree-2.16.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1466767 -------------------------------------------------------------------------------- ================================================================================ erlang-edown-0.8.1-3.fc26 (FEDORA-2017-b969f9196b) EDoc extension for generating Github-flavored Markdown -------------------------------------------------------------------------------- Update Information: * Don't die if git unavailable -------------------------------------------------------------------------------- References: [ 1 ] Bug #1423534 - erlang-gproc: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1423534 -------------------------------------------------------------------------------- ================================================================================ erlang-riak_pb-2.3.2-1.fc26 (FEDORA-2017-cda6377a75) Riak Protocol Buffers Messages -------------------------------------------------------------------------------- Update Information: * Ver. 2.3.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1331892 - erlang-riak_pb-2.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1331892 -------------------------------------------------------------------------------- ================================================================================ erlang-riaknostic-2.1.7-1.fc26 (FEDORA-2017-7986c584c7) A diagnostic tool for Riak installations -------------------------------------------------------------------------------- Update Information: * Ver. 2.1.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1380711 - erlang-riaknostic-2.1.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1380711 -------------------------------------------------------------------------------- ================================================================================ fedora-release-26-1 (FEDORA-2017-459d827225) Fedora release files -------------------------------------------------------------------------------- Update Information: Fedora 26 Final builds for fedora-release, fedora-repos, generic-release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466675 - updates-testing is still enabled https://bugzilla.redhat.com/show_bug.cgi?id=1466675 [ 2 ] Bug #1466908 - Fedora 26 Final build of fedora-release needed https://bugzilla.redhat.com/show_bug.cgi?id=1466908 -------------------------------------------------------------------------------- ================================================================================ fedora-release-notes-26.02-2.fc26 (FEDORA-2017-adb4811783) Release Notes -------------------------------------------------------------------------------- Update Information: Placeholder relnotes, more WIP -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466887 - Fedora 26 Final build of fedora-release-notes needed https://bugzilla.redhat.com/show_bug.cgi?id=1466887 -------------------------------------------------------------------------------- ================================================================================ fedora-repos-26-1 (FEDORA-2017-459d827225) Fedora package repositories -------------------------------------------------------------------------------- Update Information: Fedora 26 Final builds for fedora-release, fedora-repos, generic-release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466675 - updates-testing is still enabled https://bugzilla.redhat.com/show_bug.cgi?id=1466675 [ 2 ] Bug #1466908 - Fedora 26 Final build of fedora-release needed https://bugzilla.redhat.com/show_bug.cgi?id=1466908 -------------------------------------------------------------------------------- ================================================================================ flacon-3.0.0-1.fc26 (FEDORA-2017-d59a7dfd77) Audio File Encoder -------------------------------------------------------------------------------- Update Information: new version 3.0.0 -------------------------------------------------------------------------------- ================================================================================ flatpak-0.9.7-1.fc26 (FEDORA-2017-dad0fcac5d) Application deployment framework for desktop apps -------------------------------------------------------------------------------- Update Information: Update to 0.9.7 ---- Update to 0.9.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466970 - flatpak-0.9.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1466970 -------------------------------------------------------------------------------- ================================================================================ gearmand-1.1.16-1.fc26 (FEDORA-2017-bfdd78e220) A distributed job system -------------------------------------------------------------------------------- Update Information: Bugfix release including: * Fixes to HTTP protocol plugin and background jobs * TCP Keepalive settings are properly respected * Various fixes for stricter C++11 compilation * Various fixes to memcached queue plugin -------------------------------------------------------------------------------- References: [ 1 ] Bug #1411067 - gearmand-1.1.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=1411067 [ 2 ] Bug #1464646 - Cannot install libgearman-devel due to missing (old) boost dependency https://bugzilla.redhat.com/show_bug.cgi?id=1464646 [ 3 ] Bug #1423595 - gearmand: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1423595 [ 4 ] Bug #1424779 - gearmand-1.1.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1424779 -------------------------------------------------------------------------------- ================================================================================ generic-release-26-1 (FEDORA-2017-459d827225) Generic release files -------------------------------------------------------------------------------- Update Information: Fedora 26 Final builds for fedora-release, fedora-repos, generic-release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466675 - updates-testing is still enabled https://bugzilla.redhat.com/show_bug.cgi?id=1466675 [ 2 ] Bug #1466908 - Fedora 26 Final build of fedora-release needed https://bugzilla.redhat.com/show_bug.cgi?id=1466908 -------------------------------------------------------------------------------- ================================================================================ gimagereader-3.2.3-1.fc26 (FEDORA-2017-167be1bd95) A front-end to tesseract-ocr -------------------------------------------------------------------------------- Update Information: Update to version 3.2.3, see https://github.com/manisandro/gImageReader/releases/tag/v3.2.3 for details. ---- Update to version 3.2.2, see https://github.com/manisandro/gImageReader/releases/tag/v3.2.2 for details. -------------------------------------------------------------------------------- ================================================================================ groonga-7.0.4-1.fc26 (FEDORA-2017-d5a6e60d71) An Embeddable Fulltext Search Engine -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ================================================================================ kernel-4.11.8-300.fc26 (FEDORA-2017-165671b9db) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 4.11.8 update contains a number of important fixes across the tree -------------------------------------------------------------------------------- References: [ 1 ] Bug #1387733 - Blank screen after boot on Raspberry Pi https://bugzilla.redhat.com/show_bug.cgi?id=1387733 -------------------------------------------------------------------------------- ================================================================================ libdnf-0.9.2-1.fc26 (FEDORA-2017-51bdb42825) Library providing simplified C and Python API to libsolv -------------------------------------------------------------------------------- Update Information: Update to 0.9.2 -------------------------------------------------------------------------------- ================================================================================ libtaskotron-0.4.21-1.fc26 (FEDORA-2017-0e2dc8ea61) Taskotron Support Library -------------------------------------------------------------------------------- Update Information: - documentation improvements - DNF_REPO item type removed - default task artifact now points to artifacts root dir instead of task log - fix rpm deps handling via dnf on Fedora 26 (but only support package names and filepaths as deps in task formulas) -------------------------------------------------------------------------------- ================================================================================ mesa-17.1.4-1.fc26 (FEDORA-2017-a556de3b2f) Mesa graphics libraries -------------------------------------------------------------------------------- Update Information: Update to 17.1.4 -------------------------------------------------------------------------------- ================================================================================ mosquitto-1.4.13-1.fc26 (FEDORA-2017-d76189b06d) An Open Source MQTT v3.1/v3.1.1 Broker -------------------------------------------------------------------------------- Update Information: Fix CVE-2017-9868 (rhbz#1464946) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1464946 - CVE-2017-9868 mosquitto: World-readable persistence file possibly leaking sensitive information https://bugzilla.redhat.com/show_bug.cgi?id=1464946 -------------------------------------------------------------------------------- ================================================================================ ndctl-57.1-1.fc26 (FEDORA-2017-e70dc40206) Manage "libnvdimm" subsystem devices (Non-volatile Memory) -------------------------------------------------------------------------------- Update Information: Release v57.1 -------------------------------------------------------------------------------- ================================================================================ python-MDAnalysis-0.16.2-1.fc26 (FEDORA-2017-9044bf6f90) Analyze and manipulate molecular dynamics trajectories -------------------------------------------------------------------------------- Update Information: Latest stable release. Changes since 0.14.0: https://github.com/MDAnalysis/mdanalysis/wiki/ReleaseNotes0150 https://github.com/MDAnalysis/mdanalysis/wiki/ReleaseNotes0160 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1465423 - python-MDAnalysis-0.16.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1465423 [ 2 ] Bug #1424167 - python-MDAnalysis: testsuite failures while building in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1424167 [ 3 ] Bug #1441007 - python-MDAnalysis-0.16.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1441007 -------------------------------------------------------------------------------- ================================================================================ python-autobahn-17.6.2-1.gitbc2a1b3.fc26 (FEDORA-2017-913440512d) Python networking library for WebSocket and WAMP -------------------------------------------------------------------------------- Update Information: Update to 17.6.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1464672 - python-autobahn-17.6.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1464672 -------------------------------------------------------------------------------- ================================================================================ python-etcd-0.4.5-6.fc26 (FEDORA-2017-e99cf97bc5) A python client library for etcd -------------------------------------------------------------------------------- Update Information: This fixes a broken dep on ppc64: There is no etcd on ppc64 therefore exclude ppc64. ---- Removes old dependency on etcd package. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466957 - python-etcd broken dependency in Fedora 26 https://bugzilla.redhat.com/show_bug.cgi?id=1466957 -------------------------------------------------------------------------------- ================================================================================ python-pytoml-0.1.14-1.git7dea353.fc26 (FEDORA-2017-7fd94eb685) Parser for TOML -------------------------------------------------------------------------------- Update Information: Update to 0.1.14 -------------------------------------------------------------------------------- ================================================================================ qcad-3.17.3.0-1.fc26 (FEDORA-2017-17ee6fc97a) Powerful 2D CAD system -------------------------------------------------------------------------------- Update Information: - Update to 3.17.3.0 -------------------------------------------------------------------------------- ================================================================================ radicale-1.1.2-2.fc26 (FEDORA-2017-8cb1843fc3) A simple CalDAV (calendar) and CardDAV (contact) server -------------------------------------------------------------------------------- Update Information: Remove PrivateDevices=true (RHBZ#1452328) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1452328 - SELinux prevents from start radicale.service https://bugzilla.redhat.com/show_bug.cgi?id=1452328 -------------------------------------------------------------------------------- ================================================================================ rkhunter-1.4.4-1.fc26 (FEDORA-2017-997a5a3ba1) A host-based tool to scan for rootkits, backdoors and local exploits -------------------------------------------------------------------------------- Update Information: New upstream release with various fixes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1284403 - Logger is not being used correctly in /usr/bin/rkhunter https://bugzilla.redhat.com/show_bug.cgi?id=1284403 [ 2 ] Bug #1466318 - rkhunter-1.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1466318 -------------------------------------------------------------------------------- ================================================================================ spin-kickstarts-0.26.1-1.fc26 (FEDORA-2017-444b101c7b) Kickstart files and templates for creating your own Fedora Spins -------------------------------------------------------------------------------- Update Information: Update to 0.26.1 release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466914 - Fedora 26 Final build of spin-kickstarts needed https://bugzilla.redhat.com/show_bug.cgi?id=1466914 -------------------------------------------------------------------------------- ================================================================================ sugar-measure-101-1.fc26 (FEDORA-2017-2e4fe1d3e2) Measure for Sugar -------------------------------------------------------------------------------- Update Information: Release version 101 -------------------------------------------------------------------------------- ================================================================================ wingpanel-indicator-datetime-2.0.2-1.fc26 (FEDORA-2017-447b3a4e33) Datetime Indicator for wingpanel -------------------------------------------------------------------------------- Update Information: Update to version 2.0.2. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1466780 - wingpanel-indicator-datetime-2.0.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1466780 -------------------------------------------------------------------------------- ================================================================================ xplayer-1.4.3-1.fc26 (FEDORA-2017-45f15f4269) A generic Media Player -------------------------------------------------------------------------------- Update Information: * New upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1467001 - xplayer-1.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1467001 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@lists.fedoraproject.org To unsubscribe send an email to test-le...@lists.fedoraproject.org
