The following Fedora 26 Security updates need testing:
Age URL
122
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01
python-XStatic-jquery-ui-1.12.0.1-2.fc26
61
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2522df3526
nodejs-brace-expansion-1.1.7-1.fc26
26
https://bodhi.fedoraproject.org/updates/FEDORA-2017-661dddc462
groovy18-1.8.9-28.fc26
24
https://bodhi.fedoraproject.org/updates/FEDORA-2017-690a2548ba
openvswitch-2.7.1-2.fc26
15
https://bodhi.fedoraproject.org/updates/FEDORA-2017-76ce091a43
chicken-4.12.0-3.fc26
15
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1c053de325
memcached-1.4.39-1.fc26
15
https://bodhi.fedoraproject.org/updates/FEDORA-2017-dd0d5d376f
python-tablib-0.11.5-1.fc26
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ee93493bea
community-mysql-5.7.19-1.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7
docker-distribution-2.6.2-1.git48294d9.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6186f95179
nasm-2.13.01-3.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a5fc805283
sscep-0.6.1-5.20160525git2052ee1.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-03893a3b58 pspp-0.10.2-5.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-721314e3b3
java-1.8.0-openjdk-aarch32-1.8.0.141-2.170721.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4762689cb7
knot-resolver-1.3.2-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1929be4354
php-horde-Horde-Core-2.30.0-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ca6f3b5770
php-horde-Horde-Form-2.0.18-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6775ec59f1
php-horde-Horde-Url-2.2.6-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1081235137
php-horde-horde-5.2.16-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ceb60ebf8f
php-horde-kronolith-4.2.22-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d1c86c61f2
php-horde-nag-4.2.15-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f52687b573
php-horde-turba-4.2.20-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d2174c28ed
gsoap-2.8.43-2.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6a75c816fa
jackson-databind-2.7.6-3.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8f4fba5afa
varnish-5.1.3-2.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-44bfb0f3e5
potrace-1.15-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
21
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a695811465
pungi-4.1.17-1.fc26
19
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4cacf8fe60
ca-certificates-2017.2.16-1.0.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-218dedceba qtsoap-2.7-15.fc26
meshlab-2016.12-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4813633f96 dnf-2.6.3-1.fc26
dnf-plugins-extras-2.0.2-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-923c28037f qemu-2.9.0-4.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3c92db10b8
libvirt-3.2.1-5.fc26
The following builds have been pushed to Fedora 26 updates-testing
composer-1.4.3-1.fc26
dnf-2.6.3-1.fc26
dnf-plugins-extras-2.0.2-1.fc26
fusioninventory-agent-2.3.21-1.fc26
gnome-shell-extension-freon-25-1.fc26
gtengine-3.9-1.fc26
irsim-9.7.96-1.fc26
libreoffice-5.3.5.2-1.fc26
libzypp-16.15.2-1.fc26
mock-1.4.3-1.fc26
openblas-0.2.20-2.fc26
perl-Params-Classify-0.015-1.fc26
php-alcaeus-mongo-php-adapter-1.1.2-1.fc26
php-bartlett-PHP-CompatInfo-5.0.8-1.fc26
php-bartlett-php-compatinfo-db-1.23.0-1.fc26
php-latte-2.4.5-1.fc26
php-league-flysystem-1.0.41-1.fc26
php-nette-application-2.4.8-1.fc26
php-nette-bootstrap-2.4.4-1.fc26
php-nette-caching-2.5.4-1.fc26
php-nette-component-model-2.3.1-1.fc26
php-nette-database-2.4.4-1.fc26
php-nette-deprecated-2.4.1-1.fc26
php-nette-di-2.4.9-1.fc26
php-nette-finder-2.4.1-1.fc26
php-nette-forms-2.4.5-1.fc26
php-nette-http-2.4.6-1.fc26
php-nette-mail-2.4.3-1.fc26
php-nette-neon-2.4.2-1.fc26
php-nette-php-generator-2.6.3-1.fc26
php-nette-reflection-2.4.2-1.fc26
php-nette-robot-loader-2.4.3-1.fc26
php-nette-safe-stream-2.3.3-1.fc26
php-nette-security-2.4.2-1.fc26
php-nette-tester-2.0.0-0.4.20170731.900febd.fc26
php-nette-tokenizer-2.2.4-1.fc26
php-nette-utils-2.4.7-1.fc26
php-nikic-php-parser3-3.1.0-1.fc26
php-ocramius-generated-hydrator-2.1.0-2.fc26
php-phpspec-3.4.2-1.fc26
php-tracy-2.4.8-1.fc26
potrace-1.15-1.fc26
qpdf-6.0.0-7.fc26
rubygem-hoe-3.16.1-1.fc26
zypper-1.13.30-1.fc26
Details about builds:
================================================================================
composer-1.4.3-1.fc26 (FEDORA-2017-db50b3c28b)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.4.3** - 2017-08-06 * Fixed GitLab URLs * Fixed root package
version detection using latest git versions * Fixed inconsistencies in date
format in composer.lock when installing from source * Fixed Mercurial support
regression * Fixed exclude-from-classmap not being applied when autoloading
files for Composer plugins * Fixed exclude-from-classmap being ignored when
cwd has the wrong case on case insensitive filesystems * Fixed several other
minor issues
--------------------------------------------------------------------------------
================================================================================
dnf-2.6.3-1.fc26 (FEDORA-2017-4813633f96)
Package manager forked from Yum, using libsolv as a dependency resolver
--------------------------------------------------------------------------------
Update Information:
** DNF ** API additions in 2.6.3: * Added auto substitution for all
variables used for repo creation by dnf.repodict.RepoDict.add_new_repo() *
Added description of --downloaddir=<path> dnf option Bugs fixed in 2.6.3: *
Bug 1476215 - repoquery ���location sometimes prints invalid URL * Bug 1473964
- dnf -C (or dnf ���cacheonly) does not work as documented for a regular user *
Bug 1359482 - Trying to remove ���KDE Plasma Workspaces��� group using dnf tries to
remove systemd and dnf * Bug 1476834 - [abrt] dnf: arch():
config.py:908:arch:TypeError: unhashable type: ���list��� * Bug 1244755 - [UX]
additional dependencies to be installed or removed are not listed separately *
Bug 1476748 - Boltron: yum-dnf wrapper breaks installation of modules * Bug
1476464 - dnf download broken if repository is file:/// (ie. local) * Bug
1464192 - rpm.RPMTRANS_FLAG_TEST prevents to save newly imported gpg key *
Bug 1463107 - Undoing a remove transaction marks packages as user installed *
Bug 1426196 - RFE: Change ���upgraded X packages��� to ���download X packages��� when
dnf download is used * Bug 1457507 - [api] Explicitly set metalink is not
substituted ** DNF-PLUGINS-EXTRAS ** CLI changes in 2.0.2: * Remove
--datadir option from system upgrade Bugs fixed in 2.0.2: * Bug 1324151 -
dnf list installed | grep @@commandline lists 1815 system packages * Bug
1387136 - Local repository breaks upgrade * Bug 1225442 - warn people if they
want to upgrade a not fully updated system * Bug 1248806 - DNF Snapper plugin
takes snapshot after changes instead of before
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476215 - repoquery --location sometimes prints invalid URL
https://bugzilla.redhat.com/show_bug.cgi?id=1476215
[ 2 ] Bug #1473964 - dnf -C (or dnf --cacheonly) does not work as documented for a
regular user
https://bugzilla.redhat.com/show_bug.cgi?id=1473964
[ 3 ] Bug #1359482 - Trying to remove 'KDE Plasma Workspaces' group using dnf
tries to remove systemd and dnf
https://bugzilla.redhat.com/show_bug.cgi?id=1359482
[ 4 ] Bug #1476834 - [abrt] dnf: arch(): config.py:908:arch:TypeError: unhashable type:
'list'
https://bugzilla.redhat.com/show_bug.cgi?id=1476834
[ 5 ] Bug #1244755 - [UX] additional dependencies to be installed or removed are not
listed separately
https://bugzilla.redhat.com/show_bug.cgi?id=1244755
[ 6 ] Bug #1476748 - Boltron: yum-dnf wrapper breaks installation of modules
https://bugzilla.redhat.com/show_bug.cgi?id=1476748
[ 7 ] Bug #1476464 - dnf download broken if repository is file:/// (ie. local)
https://bugzilla.redhat.com/show_bug.cgi?id=1476464
[ 8 ] Bug #1464192 - rpm.RPMTRANS_FLAG_TEST prevents to save newly imported gpg key
https://bugzilla.redhat.com/show_bug.cgi?id=1464192
[ 9 ] Bug #1463107 - Undoing a remove transaction marks packages as user installed
https://bugzilla.redhat.com/show_bug.cgi?id=1463107
[ 10 ] Bug #1426196 - RFE: Change "upgraded X packages" to "download X
packages" when dnf download is used
https://bugzilla.redhat.com/show_bug.cgi?id=1426196
[ 11 ] Bug #1457507 - [api] Explicitly set metalink is not substituted
https://bugzilla.redhat.com/show_bug.cgi?id=1457507
[ 12 ] Bug #1324151 - dnf list installed | grep @@commandline lists 1815 system
packages
https://bugzilla.redhat.com/show_bug.cgi?id=1324151
[ 13 ] Bug #1387136 - Local repository breaks upgrade
https://bugzilla.redhat.com/show_bug.cgi?id=1387136
[ 14 ] Bug #1225442 - warn people if they want to upgrade a not fully updated system
https://bugzilla.redhat.com/show_bug.cgi?id=1225442
[ 15 ] Bug #1248806 - DNF Snapper plugin takes snapshot after changes instead of before
https://bugzilla.redhat.com/show_bug.cgi?id=1248806
--------------------------------------------------------------------------------
================================================================================
dnf-plugins-extras-2.0.2-1.fc26 (FEDORA-2017-4813633f96)
Extras Plugins for DNF
--------------------------------------------------------------------------------
Update Information:
** DNF ** API additions in 2.6.3: * Added auto substitution for all
variables used for repo creation by dnf.repodict.RepoDict.add_new_repo() *
Added description of --downloaddir=<path> dnf option Bugs fixed in 2.6.3: *
Bug 1476215 - repoquery ���location sometimes prints invalid URL * Bug 1473964
- dnf -C (or dnf ���cacheonly) does not work as documented for a regular user *
Bug 1359482 - Trying to remove ���KDE Plasma Workspaces��� group using dnf tries to
remove systemd and dnf * Bug 1476834 - [abrt] dnf: arch():
config.py:908:arch:TypeError: unhashable type: ���list��� * Bug 1244755 - [UX]
additional dependencies to be installed or removed are not listed separately *
Bug 1476748 - Boltron: yum-dnf wrapper breaks installation of modules * Bug
1476464 - dnf download broken if repository is file:/// (ie. local) * Bug
1464192 - rpm.RPMTRANS_FLAG_TEST prevents to save newly imported gpg key *
Bug 1463107 - Undoing a remove transaction marks packages as user installed *
Bug 1426196 - RFE: Change ���upgraded X packages��� to ���download X packages��� when
dnf download is used * Bug 1457507 - [api] Explicitly set metalink is not
substituted ** DNF-PLUGINS-EXTRAS ** CLI changes in 2.0.2: * Remove
--datadir option from system upgrade Bugs fixed in 2.0.2: * Bug 1324151 -
dnf list installed | grep @@commandline lists 1815 system packages * Bug
1387136 - Local repository breaks upgrade * Bug 1225442 - warn people if they
want to upgrade a not fully updated system * Bug 1248806 - DNF Snapper plugin
takes snapshot after changes instead of before
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476215 - repoquery --location sometimes prints invalid URL
https://bugzilla.redhat.com/show_bug.cgi?id=1476215
[ 2 ] Bug #1473964 - dnf -C (or dnf --cacheonly) does not work as documented for a
regular user
https://bugzilla.redhat.com/show_bug.cgi?id=1473964
[ 3 ] Bug #1359482 - Trying to remove 'KDE Plasma Workspaces' group using dnf
tries to remove systemd and dnf
https://bugzilla.redhat.com/show_bug.cgi?id=1359482
[ 4 ] Bug #1476834 - [abrt] dnf: arch(): config.py:908:arch:TypeError: unhashable type:
'list'
https://bugzilla.redhat.com/show_bug.cgi?id=1476834
[ 5 ] Bug #1244755 - [UX] additional dependencies to be installed or removed are not
listed separately
https://bugzilla.redhat.com/show_bug.cgi?id=1244755
[ 6 ] Bug #1476748 - Boltron: yum-dnf wrapper breaks installation of modules
https://bugzilla.redhat.com/show_bug.cgi?id=1476748
[ 7 ] Bug #1476464 - dnf download broken if repository is file:/// (ie. local)
https://bugzilla.redhat.com/show_bug.cgi?id=1476464
[ 8 ] Bug #1464192 - rpm.RPMTRANS_FLAG_TEST prevents to save newly imported gpg key
https://bugzilla.redhat.com/show_bug.cgi?id=1464192
[ 9 ] Bug #1463107 - Undoing a remove transaction marks packages as user installed
https://bugzilla.redhat.com/show_bug.cgi?id=1463107
[ 10 ] Bug #1426196 - RFE: Change "upgraded X packages" to "download X
packages" when dnf download is used
https://bugzilla.redhat.com/show_bug.cgi?id=1426196
[ 11 ] Bug #1457507 - [api] Explicitly set metalink is not substituted
https://bugzilla.redhat.com/show_bug.cgi?id=1457507
[ 12 ] Bug #1324151 - dnf list installed | grep @@commandline lists 1815 system
packages
https://bugzilla.redhat.com/show_bug.cgi?id=1324151
[ 13 ] Bug #1387136 - Local repository breaks upgrade
https://bugzilla.redhat.com/show_bug.cgi?id=1387136
[ 14 ] Bug #1225442 - warn people if they want to upgrade a not fully updated system
https://bugzilla.redhat.com/show_bug.cgi?id=1225442
[ 15 ] Bug #1248806 - DNF Snapper plugin takes snapshot after changes instead of before
https://bugzilla.redhat.com/show_bug.cgi?id=1248806
--------------------------------------------------------------------------------
================================================================================
fusioninventory-agent-2.3.21-1.fc26 (FEDORA-2017-e7943f9418)
FusionInventory agent
--------------------------------------------------------------------------------
Update Information:
Last upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1477175 - fusioninventory-agent-2.3.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1477175
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-freon-25-1.fc26 (FEDORA-2017-3f961b4fde)
GNOME Shell extension to display system temperature, voltage, and fan speed
--------------------------------------------------------------------------------
Update Information:
Bump to upstream version 25, which adds German localization.
--------------------------------------------------------------------------------
================================================================================
gtengine-3.9-1.fc26 (FEDORA-2017-fef6f6e84a)
Library for computations in mathematics, graphics, image analysis, and physics
--------------------------------------------------------------------------------
Update Information:
- Update to 3.9
--------------------------------------------------------------------------------
================================================================================
irsim-9.7.96-1.fc26 (FEDORA-2017-975a23fe78)
Switch-level simulator used even for VLSI
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream release 9.7.96, fixes RHBZ#1428358
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1428358 - irsim-9.7.96 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1428358
--------------------------------------------------------------------------------
================================================================================
libreoffice-5.3.5.2-1.fc26 (FEDORA-2017-7260dce931)
Free Software Productivity Suite
--------------------------------------------------------------------------------
Update Information:
update to 5.3.5
--------------------------------------------------------------------------------
================================================================================
libzypp-16.15.2-1.fc26 (FEDORA-2017-46dd49e641)
A package management library
--------------------------------------------------------------------------------
Update Information:
Update to Zypper 1.13.30.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470434 - zypper-1.13.30 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1470434
[ 2 ] Bug #1467000 - libzypp-16.15.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1467000
--------------------------------------------------------------------------------
================================================================================
mock-1.4.3-1.fc26 (FEDORA-2017-204acb9aa4)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
* --nocheck macro was not properly escaped
[[RHBZ#1473359](https://bugzilla.redhat.com/show_bug.cgi?id=1473359)]. * Use
python3 and dnf module on Fedoras to guess architecture in %post scriptlet
[[RHBZ#1462310](https://bugzilla.redhat.com/show_bug.cgi?id=1462310)]. *
enhanced detection of RHEL
[[RHBZ#1470189](https://bugzilla.redhat.com/show_bug.cgi?id=1470189)]. * scm:
define `_sourcedir` to checkout directory [[PR#98](https://github.com/rpm-
software-management/mock/pull/98)]. * Mageia Cauldron releasever is now 7
[[PR#95](https://github.com/rpm-software-management/mock/pull/95)] * Create /dev
nodes even when using nspawn
[[RHBZ#1467299](https://bugzilla.redhat.com/show_bug.cgi?id=1467299)]. *
selinux: do not try to import yum when PM is dnf
[[RHBZ#1474513](https://bugzilla.redhat.com/show_bug.cgi?id=1474513)]. * When
you have hundreds of volumes in LVM you can tell mock to wait longer using
`config_opts['plugin_conf']['lvm_root_opts']['sleep_time'] = 1`.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473359 - mock --nocheck -r fedora-26-x86_64 <whatever>.src.rpm
consistently fails
https://bugzilla.redhat.com/show_bug.cgi?id=1473359
[ 2 ] Bug #1470189 - Mock crashes because there is no dnf
https://bugzilla.redhat.com/show_bug.cgi?id=1470189
[ 3 ] Bug #1462310 - missing default cfg on rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1462310
[ 4 ] Bug #1467299 - /dev/null dissapper for rpm scriptlet during mock build
https://bugzilla.redhat.com/show_bug.cgi?id=1467299
[ 5 ] Bug #1474513 - Using --old-chroot, selinux plugin crashes if yum is not installed
https://bugzilla.redhat.com/show_bug.cgi?id=1474513
--------------------------------------------------------------------------------
================================================================================
openblas-0.2.20-2.fc26 (FEDORA-2017-7b47d520fc)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Update to the newest release, including fixes to several race and locking bugs,
a newer version of LAPACK, as well as support for several more processors on the
x86_64 architecture.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1474554 - openblas-0.2.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1474554
--------------------------------------------------------------------------------
================================================================================
perl-Params-Classify-0.015-1.fc26 (FEDORA-2017-f835936e4d)
Argument type classification
--------------------------------------------------------------------------------
Update Information:
Cumulative bug-fix release from upstream.
--------------------------------------------------------------------------------
================================================================================
php-alcaeus-mongo-php-adapter-1.1.2-1.fc26 (FEDORA-2017-d587fa2f70)
Mongo PHP Adapter
--------------------------------------------------------------------------------
Update Information:
**Version 1.1.2** (2017-08-04) * [#184](https://github.com/alcaeus/mongo-php-
adapter/pull/184) fixes an invalid call to `count` which causes warnings on PHP
7.2.
--------------------------------------------------------------------------------
================================================================================
php-bartlett-PHP-CompatInfo-5.0.8-1.fc26 (FEDORA-2017-38769876a3)
Find out version and the extensions required for a piece of code to run
--------------------------------------------------------------------------------
Update Information:
**Version 5.0.8** * Fix #232 Support class constants
--------------------------------------------------------------------------------
================================================================================
php-bartlett-php-compatinfo-db-1.23.0-1.fc26 (FEDORA-2017-04f9b0170a)
Reference Database to be used with php-compatinfo library
--------------------------------------------------------------------------------
Update Information:
**Version 1.23.0** - 2017-07-17 * **Added** - Support to PHP 7.0.21 -
Support to PHP 5.6.31 - New `db:build:ext` command to generate a draft (json
format) of each components in one extension. - New `db:list` command to see
what are extensions supported by the database. - New
`ExtensionFactory::getExtensions()` method to retrieve all extensions
informations (status/versions) - New `db:show` command to see details of
extensions supported by the database. * **Changed** - Amqp reference
updated to version 1.9.1 (stable) - Lzf reference updated to version 1.6.6
(stable) - Redis reference updated to version 3.1.2 (stable) - Ssh2
reference updated to version 1.1 (alpha) - Stomp reference updated to
version 2.0.1 (stable) - Zip reference updated to version 1.15.1 (stable)
- DataBase `compatinfo.sqlite` is copied in same directory (<user>\.bartlett)
for both phar and non phar versions. - Console `db:backup` command did not
used anymore the system temporary folder to save DB backup files (save in same
folder as DB)
--------------------------------------------------------------------------------
================================================================================
php-latte-2.4.5-1.fc26 (FEDORA-2017-a576c26446)
Latte: the amazing template engine for PHP
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.5** * coding style: fixes, lowercase true/false/null
* Engine::compile() fixed construction of CompileException, doesn't accept
nullable type (#161)
--------------------------------------------------------------------------------
================================================================================
php-league-flysystem-1.0.41-1.fc26 (FEDORA-2017-14700b7a04)
Filesystem abstraction: Many filesystems, one API
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.41** - 2017-08-06 * **Fixed** * Response array check mistake
was corrected. * **Altered** * Removed support for HHVM.
--------------------------------------------------------------------------------
================================================================================
php-nette-application-2.4.8-1.fc26 (FEDORA-2017-d5b6df7d4c)
Nette Application MVC Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.8** * Presenter::$absoluteUrls fixed ----
**Released version 2.4.7** * coding style: fixes, lowercase true/false/null
* Presenter: added requestToUrl(), taken out from createRequest()
--------------------------------------------------------------------------------
================================================================================
php-nette-bootstrap-2.4.4-1.fc26 (FEDORA-2017-ac797d123f)
Nette Bootstrap
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.4** * coding style: fixes, lowercase true/false/null
--------------------------------------------------------------------------------
================================================================================
php-nette-caching-2.5.4-1.fc26 (FEDORA-2017-1427a8160a)
Nette Caching Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.5.4** * coding style: fixes, lowercase true/false/null
--------------------------------------------------------------------------------
================================================================================
php-nette-component-model-2.3.1-1.fc26 (FEDORA-2017-bbaf2ce445)
Nette Component Model
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.1** * coding style: fixes, lowercase true/false/null
* @return self -> static * composer: accepts nette 3.0 * renamed
parameter $need -> $throw
--------------------------------------------------------------------------------
================================================================================
php-nette-database-2.4.4-1.fc26 (FEDORA-2017-1787c36b83)
Nette Database Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.4** * SqlPreprocessor: workaround for PDO bug #74996
when looking for ? in prepared query #177 * composer: requires nette/utils
2.4 for PHP 7.2 ---- **Released version 2.4.3** * fetchPairs() supports
floats in keys * coding style: fixes, lowercase true/false/null *
SqliteDriver::getColumns() fix regexp for autoincrement recognition (#168) *
DatabaseExtension: added support for constants in options values * OciDriver:
do not use meta, driver is not meta-aware
--------------------------------------------------------------------------------
================================================================================
php-nette-deprecated-2.4.1-1.fc26 (FEDORA-2017-7bd614fdf4)
APIs and features removed from Nette Framework
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.1** * coding style: fixes, lowercase true/false/null
* @return self -> static * added missing @deprecated annotations
--------------------------------------------------------------------------------
================================================================================
php-nette-di-2.4.9-1.fc26 (FEDORA-2017-6d5abafd95)
Nette Dependency Injection Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.9** * coding style: fixes, lowercase true/false/null
* added support for class aliases created via class_alias() #156 *
DependencyChecker: class is expired when parent/interfaces/traits was changed *
DecoratorExtension: accepts setup syntax '$prop = val' * ContainerBuilder:
allows ::Namespace\func as factory name * generated factories: fix return
type, PHP does not support return type covariance (#152) * removed
unnecessary ltrim($class, '\')
--------------------------------------------------------------------------------
================================================================================
php-nette-finder-2.4.1-1.fc26 (FEDORA-2017-12459752de)
Nette Finder: Files Searching
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.1** * coding style: fixes, lowercase true/false/null
* variadics methods accepts no arguments #5 * folder /Finder renamed to
/Utils * composer: accepts nette 3.0 * @return self -> static
--------------------------------------------------------------------------------
================================================================================
php-nette-forms-2.4.5-1.fc26 (FEDORA-2017-7984fa2a80)
Nette Forms: greatly facilitates web forms
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.5** * coding style: fixes, lowercase true/false/null
* $onClick handlers are called with argument $values (as $onSuccess)
tests: improved $onSuccess & $onClick etc. tests * DefaultFormRenderer:
translates object 'label' & 'description' #142 * tests: added
rendering +
localization (#149) * DefaultRenderer: fix for calling renderErrors() from
renderPair() which was caused by #145 (->form = NULL) (#150) * ControlGroup:
added remove() and removeOrphans() #155 * SelectBox: only one item can be
rendered as selected at the same time
--------------------------------------------------------------------------------
================================================================================
php-nette-http-2.4.6-1.fc26 (FEDORA-2017-cb806f646f)
Nette HTTP Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.6** * coding style: fixes, lowercase true/false/null
* RequestFactory: when proxy is used and HTTP_X_FORWARDED_PORT is not
available, uses default port #124 * RequestFactory: test that
HTTP_X_FORWARDED_PROTO doesn't change the port typo * RequestFactory:
correctly ignores not-ip values in HTTP_X_FORWARDED_FOR & REMOTE_ADDR (#122)
--------------------------------------------------------------------------------
================================================================================
php-nette-mail-2.4.3-1.fc26 (FEDORA-2017-f8a38bf0e5)
Nette Mail: Sending E-mails
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.3** * coding style: fixes, lowercase true/false/null
--------------------------------------------------------------------------------
================================================================================
php-nette-neon-2.4.2-1.fc26 (FEDORA-2017-b5d8605c8e)
Nette NEON: parser and generator for Nette Object Notation
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.2** * coding style: fixes, lowercase true/false/null
--------------------------------------------------------------------------------
================================================================================
php-nette-php-generator-2.6.3-1.fc26 (FEDORA-2017-a77ec0ca38)
Nette PHP Generator
--------------------------------------------------------------------------------
Update Information:
**Released version 3.0.1** * added support for class constants (#25) *
dumps true/false/null in lowercase * coding style: fixes, lowercase
true/false/null * ClassType: removed some blank lines
--------------------------------------------------------------------------------
================================================================================
php-nette-reflection-2.4.2-1.fc26 (FEDORA-2017-41ad50c87d)
Nette PHP Reflection Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.2** * coding style: fixes, lowercase true/false/null
* each() replaced with current() and next()
--------------------------------------------------------------------------------
================================================================================
php-nette-robot-loader-2.4.3-1.fc26 (FEDORA-2017-399de980eb)
Nette RobotLoader: comfortable autoloading
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.3** * coding style: fixes, lowercase true/false/null
--------------------------------------------------------------------------------
================================================================================
php-nette-safe-stream-2.3.3-1.fc26 (FEDORA-2017-9938cd7f9a)
Nette SafeStream: Atomic Operations
--------------------------------------------------------------------------------
Update Information:
**Released version 2.3.3** * coding style: fixes, lowercase true/false/null
--------------------------------------------------------------------------------
================================================================================
php-nette-security-2.4.2-1.fc26 (FEDORA-2017-c398d46a9b)
Nette Security: Access Control Component
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.2** * coding style: fixes, lowercase true/false/null
--------------------------------------------------------------------------------
================================================================================
php-nette-tester-2.0.0-0.4.20170731.900febd.fc26 (FEDORA-2017-420138a4db)
An easy-to-use PHP unit testing framework
--------------------------------------------------------------------------------
Update Information:
more recent git snapshot
--------------------------------------------------------------------------------
================================================================================
php-nette-tokenizer-2.2.4-1.fc26 (FEDORA-2017-4133b9667f)
Nette Tokenizer
--------------------------------------------------------------------------------
Update Information:
**Released version 2.2.4** * coding style: fixes, lowercase true/false/null
* @return self -> static
--------------------------------------------------------------------------------
================================================================================
php-nette-utils-2.4.7-1.fc26 (FEDORA-2017-924d628e5a)
Nette Utility Classes
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.7** * coding style: fixes, lowercase true/false/null
* Image: attempt to serialize throws exception
--------------------------------------------------------------------------------
================================================================================
php-nikic-php-parser3-3.1.0-1.fc26 (FEDORA-2017-3a4d128f88)
A PHP parser written in PHP
--------------------------------------------------------------------------------
Update Information:
**Version 3.1.0** (2017-07-28) * **Added** * [PHP 7.2] Added support for
trailing comma in group use statements. * [PHP 7.2] Added support for
`object` type. This means `object` types will now be represented as a builtin
type (a simple `"object"` string), rather than a class `Name`. * **Fixed**
* Floating-point numbers are now printed correctly if the LC_NUMERIC locale uses
a comma as decimal separator. * **Changed** * `Name::$parts` is no
longer deprecated.
--------------------------------------------------------------------------------
================================================================================
php-ocramius-generated-hydrator-2.1.0-2.fc26 (FEDORA-2017-7eef0e024a)
An object hydrator
--------------------------------------------------------------------------------
Update Information:
Total issues resolved: 11 * 49: Dropped minimum-stability from composer.json
thanks to @staabm * 50: Removed outdated note from readme about limitations
thanks to @staabm * 55: Fix phpunit deprecated methods thanks to @haampie *
56: Fix unused code and docblocks thanks to @haampie * 59: hydrators should
not be proxy, now works gracefully with final classes thanks to @pounard *
62: initial benchmarks using phpbench, missing magic method testing thanks to
@pounard * 63: Correcting benchmarking suite runner command to be used in
travis-ci thanks to @ocramius * 66: badges markdown table fix in readme
thanks to @samsonasik * 67: Compatibility with nikic/php-parser v3 thanks to
@kiler129 * 69: Use php-parser v3 thanks to @gsdevme * 70: #68 - fix NULL
hydration thanks to @ostrolucky
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1473994 - php-ocramius-generated-hydrator-2.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1473994
--------------------------------------------------------------------------------
================================================================================
php-phpspec-3.4.2-1.fc26 (FEDORA-2017-89fe37ee58)
Specification-oriented BDD framework for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 3.4.2** / 2017-08-05 * [fixed] Illegible text when using a white
terminal background (MarcelloDuarte) ---- **Version 3.4.1** / 2017-07-29 *
[fixed] parameters after extensions ignored in config file (borNfreee)
--------------------------------------------------------------------------------
================================================================================
php-tracy-2.4.8-1.fc26 (FEDORA-2017-761a78c210)
Tracy: useful PHP debugger
--------------------------------------------------------------------------------
Update Information:
**Released version 2.4.8** * dumps true/false/null in lowercase * coding
style: fixes, lowercase true/false/null * examples: added info about
DEVELOPMENT vs DETECT mode * Show date/time error occured on error 500 (#258)
--------------------------------------------------------------------------------
================================================================================
potrace-1.15-1.fc26 (FEDORA-2017-44bfb0f3e5)
Transform bitmaps into vector graphics
--------------------------------------------------------------------------------
Update Information:
This release consists of bugfixes and minor portability improvements. Some
potential buffer overflows and arithmetic overflows were fixed, including
CVE-2017-12067. A bug triggered by very large bitmaps has been fixed.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1477104 - CVE-2017-12067 potrace: heap-based buffer over-read in the
interpolate_cubic function [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477104
[ 2 ] Bug #1385513 - CVE-2016-8685 CVE-2016-8686 CVE-2016-8694 CVE-2016-8695
CVE-2016-8696 CVE-2016-8697 CVE-2016-8698 CVE-2016-8699 CVE-2016-8700 CVE-2016-8701
CVE-2016-8702 CVE-2016-8703 CVE-2017-7263 potrace: Multiple security issues [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1385513
[ 3 ] Bug #1477105 - CVE-2017-12067 potrace: heap-based buffer over-read in the
interpolate_cubic function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477105
[ 4 ] Bug #1385512 - CVE-2016-8685 CVE-2016-8686 CVE-2016-8694 CVE-2016-8695
CVE-2016-8696 CVE-2016-8697 CVE-2016-8698 CVE-2016-8699 CVE-2016-8700 CVE-2016-8701
CVE-2016-8702 CVE-2016-8703 CVE-2017-7263 potrace: Multiple security issues [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1385512
--------------------------------------------------------------------------------
================================================================================
qpdf-6.0.0-7.fc26 (FEDORA-2017-8aef53994c)
Command-line tools and library for transforming PDF files
--------------------------------------------------------------------------------
Update Information:
reverting CVE patches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1478537 - qpdf-libs-6.0.0-6.fc26-x86_64 from updates-testing breaks printing
https://bugzilla.redhat.com/show_bug.cgi?id=1478537
[ 2 ] Bug #1478808 - [abrt] cups-filters: std::_Rb_tree<QPDFObjGen,
std::pair<QPDFObjGen const, std::set<QPDF::ObjUser, std::less<QPDF::ObjUser>,
std::allocator<QPDF::ObjUser> > >, std::_Select1st<std::pair<QPDFObjGen
const, std::set<QPDF::ObjUser, std::less<QPDF::ObjUser>...
https://bugzilla.redhat.com/show_bug.cgi?id=1478808
--------------------------------------------------------------------------------
================================================================================
rubygem-hoe-3.16.1-1.fc26 (FEDORA-2017-11a66a7b21)
Hoe is a simple rake/rubygems helper for project Rakefiles
--------------------------------------------------------------------------------
Update Information:
New version 3.16.1 is released
--------------------------------------------------------------------------------
================================================================================
zypper-1.13.30-1.fc26 (FEDORA-2017-46dd49e641)
Command line package manager using libzypp
--------------------------------------------------------------------------------
Update Information:
Update to Zypper 1.13.30.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470434 - zypper-1.13.30 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1470434
[ 2 ] Bug #1467000 - libzypp-16.15.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1467000
--------------------------------------------------------------------------------