The following Fedora 26 Security updates need testing:
Age URL
66
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01
python-XStatic-jquery-ui-1.12.0.1-2.fc26
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cd57608211 yara-3.6.0-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2522df3526
nodejs-brace-expansion-1.1.7-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7936341c80
mingw-gnutls-3.5.13-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5a3e3f8226
openvswitch-2.7.0-4.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-09dd8907da
mariadb-10.1.24-3.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0be0f172f8
capnproto-0.6.1-3.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-794c18b62d
tomcat-8.0.44-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
18
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2f53aab670
iproute-4.11.0-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-30f3147bcc
flatpak-0.9.5-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-816792354b
libdb-5.3.28-22.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0dec8a74c5
pungi-4.1.16-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a0f49c2291
libinput-1.7.3-1.fc26
The following builds have been pushed to Fedora 26 updates-testing
elpa-2015.11.001-5.fc26
freeipa-desktop-profile-0.0.5-4.fc26
giac-1.2.3-5.49.fc26
gtengine-3.8-1.fc26
keychecker-1.0-2.fc26
leptonica-1.74.4-1.fc26
libcxl-1.5-0.fc26
libinput-1.7.3-1.fc26
mate-panel-1.18.3-1.fc26
mingw-leptonica-1.74.4-1.fc26
mod_http2-1.10.6-1.fc26
openms-2.1.0-9.20170131gitbde813.fc26
perl-IO-Socket-SSL-2.049-1.fc26
perl-Perl-Critic-1.128-1.fc26
perl-local-lib-2.000023-1.fc26
php-pear-1.10.4-2.fc26
php-sabre-http-4.2.3-1.fc26
pidgin-sipe-1.22.1-1.fc26
pungi-4.1.16-1.fc26
purple-facebook-0.9.4-1.c9b74a765767.fc26
python-importanize-0.5.3-1.fc26
rubygem-mini_portile2-2.2.0-1.fc26
rubygem-nokogiri-1.8.0-1.fc26
sunflow-0.07.4-1.fc26
varnish-5.1.2-1.fc26
wildmagic5-5.15-1.fc26
winetricks-20170517-1.fc26
zulucrypt-5.1.0-4.fc26
Details about builds:
================================================================================
elpa-2015.11.001-5.fc26 (FEDORA-2017-7a1372d77b)
High-performance library for parallel solution of eigenvalue problems
--------------------------------------------------------------------------------
Update Information:
Build against openblas on supported arches to match scalapack and avoid
testsuite failures.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1383412 - AVX2 version is never built
https://bugzilla.redhat.com/show_bug.cgi?id=1383412
[ 2 ] Bug #1220161 - FTBFS of elpa if build host has > 4 cpu cores.
https://bugzilla.redhat.com/show_bug.cgi?id=1220161
[ 3 ] Bug #1217988 - elpa testsuite is failing on ppc64
https://bugzilla.redhat.com/show_bug.cgi?id=1217988
--------------------------------------------------------------------------------
================================================================================
freeipa-desktop-profile-0.0.5-4.fc26 (FEDORA-2017-953fd42572)
FleetCommander integration with FreeIPA
--------------------------------------------------------------------------------
Update Information:
Removed UI files from packagingg ---- Updated specfile for packaging
--------------------------------------------------------------------------------
================================================================================
giac-1.2.3-5.49.fc26 (FEDORA-2017-1fd4355182)
Computer Algebra System, Symbolic calculus, Geometry
--------------------------------------------------------------------------------
Update Information:
- Update to 1.2.3 sub-49
--------------------------------------------------------------------------------
================================================================================
gtengine-3.8-1.fc26 (FEDORA-2017-e966548f94)
Library for computations in mathematics, graphics, image analysis, and physics
--------------------------------------------------------------------------------
Update Information:
- Update to 3.8
--------------------------------------------------------------------------------
================================================================================
keychecker-1.0-2.fc26 (FEDORA-2017-4d19df3a77)
Generate list of installed packages sorted by GPG key
--------------------------------------------------------------------------------
Update Information:
Python 3 compatibility and various cleanup
--------------------------------------------------------------------------------
================================================================================
leptonica-1.74.4-1.fc26 (FEDORA-2017-6f81294f83)
C library for efficient image processing and image analysis operations
--------------------------------------------------------------------------------
Update Information:
Update to version 1.74.4, see
https://github.com/DanBloomberg/leptonica/blob/master/version-notes.html for
details.
--------------------------------------------------------------------------------
================================================================================
libcxl-1.5-0.fc26 (FEDORA-2017-c5c43b0892)
Coherent accelerator interface
--------------------------------------------------------------------------------
Update Information:
Update v1.5
--------------------------------------------------------------------------------
================================================================================
libinput-1.7.3-1.fc26 (FEDORA-2017-a0f49c2291)
Input device library
--------------------------------------------------------------------------------
Update Information:
libinput 1.7.3, but we already shipped the interesting patches before anyway
--------------------------------------------------------------------------------
================================================================================
mate-panel-1.18.3-1.fc26 (FEDORA-2017-f304f506b8)
MATE Desktop panel and applets
--------------------------------------------------------------------------------
Update Information:
update to 1.18.3
--------------------------------------------------------------------------------
================================================================================
mingw-leptonica-1.74.4-1.fc26 (FEDORA-2017-6f81294f83)
MinGW Windows Leptonica library
--------------------------------------------------------------------------------
Update Information:
Update to version 1.74.4, see
https://github.com/DanBloomberg/leptonica/blob/master/version-notes.html for
details.
--------------------------------------------------------------------------------
================================================================================
mod_http2-1.10.6-1.fc26 (FEDORA-2017-44ebc0f638)
module implementing HTTP/2 for Apache 2
--------------------------------------------------------------------------------
Update Information:
Fix for possible CPU busy loop introduced in v1.10.3 where a stream may keep the
session in continuous check for state changes that never happen.
--------------------------------------------------------------------------------
================================================================================
openms-2.1.0-9.20170131gitbde813.fc26 (FEDORA-2017-a9c2318c1d)
LC/MS data management and analyses
--------------------------------------------------------------------------------
Update Information:
- Update to wildmagic5-5.15 - Rebuild openms
--------------------------------------------------------------------------------
================================================================================
perl-IO-Socket-SSL-2.049-1.fc26 (FEDORA-2017-3f02a20963)
Perl library for transparent SSL
--------------------------------------------------------------------------------
Update Information:
Current upstream maintenance release.
--------------------------------------------------------------------------------
================================================================================
perl-Perl-Critic-1.128-1.fc26 (FEDORA-2017-1e9e478ba2)
Critique Perl source code for best-practices
--------------------------------------------------------------------------------
Update Information:
Current upstream maintenance release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1460504 - perl-Perl-Critic-1.128 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1460504
--------------------------------------------------------------------------------
================================================================================
perl-local-lib-2.000023-1.fc26 (FEDORA-2017-85c9731213)
Create and use a local lib/ for perl modules
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1459540 - perl-local-lib-2.000023 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1459540
--------------------------------------------------------------------------------
================================================================================
php-pear-1.10.4-2.fc26 (FEDORA-2017-a0c50f428e)
PHP Extension and Application Repository framework
--------------------------------------------------------------------------------
Update Information:
**Archive_Tar 1.4.3** * Fix Bug pear#21218: Cannot use result of built-in
function in write context in PHP 7.2.0alpha1 [mrook]
--------------------------------------------------------------------------------
================================================================================
php-sabre-http-4.2.3-1.fc26 (FEDORA-2017-7cd4bc078e)
Library for dealing with http requests and responses
--------------------------------------------------------------------------------
Update Information:
**Version 4.2.3** (2017-06-12) * Fix #74, #77: Work around 4GB file size limit
at 32 Bit systems
--------------------------------------------------------------------------------
================================================================================
pidgin-sipe-1.22.1-1.fc26 (FEDORA-2017-8852062bfe)
Pidgin protocol plugin to connect to MS Office Communicator
--------------------------------------------------------------------------------
Update Information:
New upstream release: * fix multiple client detection * speed up Lync
Autodiscover * avoid rare SSL read deadlock * various bug fixes
--------------------------------------------------------------------------------
================================================================================
pungi-4.1.16-1.fc26 (FEDORA-2017-0dec8a74c5)
Distribution compose tool
--------------------------------------------------------------------------------
Update Information:
This is mostly a bugfix release. * Retry logic is added when resolving git
branch to commit hash, when cloning files from SCM or when querying PDC for
module information. * All blocking koji commands are now run with fresh
credentials cache when authenticated with a keytab. * Crashes during compose
should not leave behind zombie processes consuming vast amounts of memory. *
Modular metadata is fixed for cases when there are multiple versions of the same
package. There is a functional change in dependency solving: when lookaside
repositories are used, Pungi never checks dependencies of packages in there.
--------------------------------------------------------------------------------
================================================================================
purple-facebook-0.9.4-1.c9b74a765767.fc26 (FEDORA-2017-e95069bc5a)
Facebook protocol plugin for purple2
--------------------------------------------------------------------------------
Update Information:
* New upstream release * Filter provides from plugins
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1460505 - purple-facebook-0.9.4-c9b74a765767 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1460505
[ 2 ] Bug #1448596 - undefined symbol: purple_notify_user_info_add_pair_plaintext
https://bugzilla.redhat.com/show_bug.cgi?id=1448596
--------------------------------------------------------------------------------
================================================================================
python-importanize-0.5.3-1.fc26 (FEDORA-2017-32655999c4)
Utility for organizing Python imports using PEP8 or custom rules
--------------------------------------------------------------------------------
Update Information:
Update to upstream latest version 0.5.3 ---- Update to 0.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1449424 - python-importanize-0.5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1449424
[ 2 ] Bug #1448244 - python-importanize-0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1448244
--------------------------------------------------------------------------------
================================================================================
rubygem-mini_portile2-2.2.0-1.fc26 (FEDORA-2017-654cac00c2)
Simplistic port-like solution for developers
--------------------------------------------------------------------------------
Update Information:
New version 2.2.0 is released
--------------------------------------------------------------------------------
================================================================================
rubygem-nokogiri-1.8.0-1.fc26 (FEDORA-2017-796f1faad9)
An HTML, XML, SAX, and Reader parser
--------------------------------------------------------------------------------
Update Information:
New version 1.8.0 is released
--------------------------------------------------------------------------------
================================================================================
sunflow-0.07.4-1.fc26 (FEDORA-2017-2086c08510)
A rendering system for photo-realistic image synthesis
--------------------------------------------------------------------------------
Update Information:
version up
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1424525 - sunflow: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1424525
--------------------------------------------------------------------------------
================================================================================
varnish-5.1.2-1.fc26 (FEDORA-2017-902c1d23fa)
High-performance HTTP accelerator
--------------------------------------------------------------------------------
Update Information:
Upgrade to varnish-5.1, which fixes a lot of bugs from varnish-5.0.0, as the 5.0
branch is not actively maintained any longer. 5.1.2 is a bugfix release. See
online included changes.rst or online changelog at
https://github.com/varnishcache/varnish-cache/blob/master/doc/changes.rst
--------------------------------------------------------------------------------
================================================================================
wildmagic5-5.15-1.fc26 (FEDORA-2017-a9c2318c1d)
Wild Magic libraries
--------------------------------------------------------------------------------
Update Information:
- Update to wildmagic5-5.15 - Rebuild openms
--------------------------------------------------------------------------------
================================================================================
winetricks-20170517-1.fc26 (FEDORA-2017-35188184dd)
Work around common problems in Wine
--------------------------------------------------------------------------------
Update Information:
20170517 - - convert to sha256 - update URLs - remove dead downloads - add win64
support - fixes for dll, dotnet and directx - smaller fixes at many places
Changelog:
https://github.com/Winetricks/winetricks/compare/20170327...20170517
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1451744 - winetricks-20170517 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1451744
--------------------------------------------------------------------------------
================================================================================
zulucrypt-5.1.0-4.fc26 (FEDORA-2017-aa946b6288)
Qt GUI front end to cryptsetup
--------------------------------------------------------------------------------
Update Information:
rebuilt for soname bump of lxqt-wallet
--------------------------------------------------------------------------------