The following Fedora 26 Security updates need testing:
Age URL
100
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01
python-XStatic-jquery-ui-1.12.0.1-2.fc26
39
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2522df3526
nodejs-brace-expansion-1.1.7-1.fc26
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b8bb4b86e2 php-7.1.7-1.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d3d38a53f9 knot-2.4.5-1.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-114e1abf9d irssi-1.0.4-1.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-661dddc462
groovy18-1.8.9-28.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e6aaef4475
knot-resolver-1.3.1-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2afe501b36
heimdal-7.4.0-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e8bdc4ede0
kernel-4.11.10-300.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a40590256c glpi-9.1.5-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8f018a3d39
golang-1.8.3-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-690a2548ba
openvswitch-2.7.1-2.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bbb664e0a0
mingw-poppler-0.52.0-3.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7c1621d2e8
nodejs-6.11.1-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-05888dd4fe
phpldapadmin-1.2.3-10.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0642394b5a
minicom-2.7.1-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-088b16a69a yara-3.6.3-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-73370082fb
garcon-0.6.1-1.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-244f799ac9 nss-3.31.0-1.0.fc26
nss-util-3.31.0-1.0.fc26 nss-softokn-3.31.0-1.0.fc26 nspr-4.15.0-1.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-654872eda8 lorax-26.9-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f6b14e0e63
supermin-5.1.18-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-aa537fe626
libproxy-0.4.15-2.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ad7e5c5657
libvirt-3.2.1-4.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-97c48d9a81 qemu-2.9.0-3.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e8bdc4ede0
kernel-4.11.10-300.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9fb17899f4
python-setuptools-36.2.0-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-28fd8ef47d unzip-6.0-34.fc26
The following builds have been pushed to Fedora 26 updates-testing
GtkAda-2.24.2-23.fc26
GtkAda3-3.14.2-4.fc26
PragmARC-20130728-13.fc26
abbayedesmorts-gpl-2.0.1-3.20170709git.fc26
ahven-2.6-6.fc26
anet-0.3.4-2.fc26
clpeak-0.1-14.20170711git8edab23.fc26
cvc4-1.5-1.fc26
git-extras-4.4.0-1.fc26
golang-github-klauspost-reedsolomon-1.4-1.fc26
hspell-1.4-1.fc26
libmwaw-0.3.12-1.fc26
libvmi-0.11.0-8.20170214gite919365.fc26
mine_detector-6.0-30.fc26
minicom-2.7.1-1.fc26
mldonkey-3.1.6-1.fc26
naev-0.7.0-1.fc26
naev-data-0.7.0-2.fc26
ocaml-menhir-20170712-1.fc26
python-glyphsLib-1.7.5-2.fc26
python-jinja2-cli-0.6.0-1.fc26
python-multidict-3.1.3-1.fc26
python-setuptools-36.2.0-1.fc26
python-yarl-0.12.0-1.fc26
tmux-2.5-1.fc26
tomboy-1.15.9-1.fc26
xed-1.4.6-1.fc26
yara-3.6.3-1.fc26
zfs-fuse-0.7.2.2-4.fc26
zlib-ada-1.4-0.16.20120830CVS.fc26
zstd-1.3.0-1.fc26
Details about builds:
================================================================================
GtkAda-2.24.2-23.fc26 (FEDORA-2017-b75de105b2)
GTKada 2, an Ada binding to GTK+ 2
--------------------------------------------------------------------------------
Update Information:
Ada packages had to be rebuilt because GCC 7.1 invalidated the ALI files.
--------------------------------------------------------------------------------
================================================================================
GtkAda3-3.14.2-4.fc26 (FEDORA-2017-b75de105b2)
GTKada 3, an Ada binding to GTK+ 3
--------------------------------------------------------------------------------
Update Information:
Ada packages had to be rebuilt because GCC 7.1 invalidated the ALI files.
--------------------------------------------------------------------------------
================================================================================
PragmARC-20130728-13.fc26 (FEDORA-2017-b75de105b2)
PragmAda Reusable Components, a component library for Ada
--------------------------------------------------------------------------------
Update Information:
Ada packages had to be rebuilt because GCC 7.1 invalidated the ALI files.
--------------------------------------------------------------------------------
================================================================================
abbayedesmorts-gpl-2.0.1-3.20170709git.fc26 (FEDORA-2017-d26259dbf8)
Platform game set in 13th century
--------------------------------------------------------------------------------
Update Information:
* First release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1468830 - Review Request: abbayedesmorts-gpl - Platform game set in 13th
century
https://bugzilla.redhat.com/show_bug.cgi?id=1468830
--------------------------------------------------------------------------------
================================================================================
ahven-2.6-6.fc26 (FEDORA-2017-b75de105b2)
A unit testing framework for Ada 95
--------------------------------------------------------------------------------
Update Information:
Ada packages had to be rebuilt because GCC 7.1 invalidated the ALI files.
--------------------------------------------------------------------------------
================================================================================
anet-0.3.4-2.fc26 (FEDORA-2017-b75de105b2)
Ada Networking Library
--------------------------------------------------------------------------------
Update Information:
Ada packages had to be rebuilt because GCC 7.1 invalidated the ALI files.
--------------------------------------------------------------------------------
================================================================================
clpeak-0.1-14.20170711git8edab23.fc26 (FEDORA-2017-011f5dba88)
Find peak OpenCL capacities like bandwidth & compute
--------------------------------------------------------------------------------
Update Information:
- Update to the latest upstream, fixes rhbz#1423267 - Include upstream fix for
https://github.com/krrishnarraj/clpeak/issues/36
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1423267 - clpeak: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1423267
--------------------------------------------------------------------------------
================================================================================
cvc4-1.5-1.fc26 (FEDORA-2017-2f458aed26)
Automatic theorem prover for SMT problems
--------------------------------------------------------------------------------
Update Information:
Changes in version 1.5: * Improved heuristics for reasoning about non-linear
arithmetic. * Native support for syntax-guided synthesis (sygus). * Support for
many new heuristics for reasoning with quantifiers, including finite model
finding. * Support for proofs for uninterpreted functions, arrays, bitvectors,
and their combinations. * Performance improvements to existing theories. * A
new theory of sets with cardinality and relations. * A new theory of strings. *
Support for unsat cores. * Support for separation logic constraints. *
Simplification mode "incremental" no longer supported. * Support for array
constants in constraints. * Syntax for array models has changed in some language
front-ends. * New input/output languages supported: "smt2.0" and
"smtlib2.0" to
force SMT-LIB v2.0; "smt2.5" and "smtlib2.5" to force SMT-LIB v2.5;
"smt2.6"
and "smtlib2.6" to force SMT-LIB v2.6; "smt", "smtlib",
"smt2", and "smtlib2"
all refer to the current standard version 2.6. If an :smt-lib-version is set
in the input, that overrides the command line. * Abstract values in SMT-LIB
models are now ascribed types (with "as"). * In SMT-LIB model output, real-
sorted but integer-valued constants are now printed in accordance with the
standard (e.g. "1.0").
--------------------------------------------------------------------------------
================================================================================
git-extras-4.4.0-1.fc26 (FEDORA-2017-778fd3a513)
Little git extras
--------------------------------------------------------------------------------
Update Information:
git-extras-4.4.0 is available
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471372 - git-extras-4.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471372
--------------------------------------------------------------------------------
================================================================================
golang-github-klauspost-reedsolomon-1.4-1.fc26 (FEDORA-2017-8e2707d998)
Reed-Solomon Erasure Coding in Go
--------------------------------------------------------------------------------
Update Information:
Update to version 1.4.
--------------------------------------------------------------------------------
================================================================================
hspell-1.4-1.fc26 (FEDORA-2017-e52654ebc2)
A Hebrew spell checker
--------------------------------------------------------------------------------
Update Information:
Sync with upstream hspell-1.4
--------------------------------------------------------------------------------
================================================================================
libmwaw-0.3.12-1.fc26 (FEDORA-2017-62cceeba57)
A library for import of many old Mac document formats
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
================================================================================
libvmi-0.11.0-8.20170214gite919365.fc26 (FEDORA-2017-531d1675f7)
A library for performing virtual-machine introspection
--------------------------------------------------------------------------------
Update Information:
Bump Release so NVR is bigger than the previous release ---- Update to Git
master
--------------------------------------------------------------------------------
================================================================================
mine_detector-6.0-30.fc26 (FEDORA-2017-b75de105b2)
Mine Detector, a mine-finding game
--------------------------------------------------------------------------------
Update Information:
Ada packages had to be rebuilt because GCC 7.1 invalidated the ALI files.
--------------------------------------------------------------------------------
================================================================================
minicom-2.7.1-1.fc26 (FEDORA-2017-0642394b5a)
A text-based modem control and terminal emulation program
--------------------------------------------------------------------------------
Update Information:
Rebuilt to new upstream version 2.7.1 fixes rhbz#1443071 and rhbz#1443129
--------------------------------------------------------------------------------
================================================================================
mldonkey-3.1.6-1.fc26 (FEDORA-2017-a429f91fdf)
Multiple P2P Network Client
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream version 3.1.6 - remove upstreamed patches + spec
clean up - changed upstream URLs to github instead of
sf.net
--------------------------------------------------------------------------------
================================================================================
naev-0.7.0-1.fc26 (FEDORA-2017-ae04d2206c)
2d action, RPG space game
--------------------------------------------------------------------------------
Update Information:
Update to new version with new missions
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467636 - naev-0.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1467636
--------------------------------------------------------------------------------
================================================================================
naev-data-0.7.0-2.fc26 (FEDORA-2017-ae04d2206c)
Data files for NAEV
--------------------------------------------------------------------------------
Update Information:
Update to new version with new missions
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467636 - naev-0.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1467636
--------------------------------------------------------------------------------
================================================================================
ocaml-menhir-20170712-1.fc26 (FEDORA-2017-534c5ba10f)
LR(1) parser generator for OCaml
--------------------------------------------------------------------------------
Update Information:
Changes in version 20170712: * Include the LaTeX sources of the manual in the
official `.tar.gz` archive. This should allow the manual to be included as part
of the Debian package. * Mention [
Obelisk](https://github.com/Lelio-
Brun/Obelisk), a pretty-printer for `.mly` files, in the manual.
--------------------------------------------------------------------------------
================================================================================
python-glyphsLib-1.7.5-2.fc26 (FEDORA-2017-c4dc487a1e)
A bridge from Glyphs source files to UFOs
--------------------------------------------------------------------------------
Update Information:
Apply patch to remove shebangs from non-executable modules
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1433757 - Review Request: python-glyphsLib - A bridge from Glyphs source
files to UFOs
https://bugzilla.redhat.com/show_bug.cgi?id=1433757
--------------------------------------------------------------------------------
================================================================================
python-jinja2-cli-0.6.0-1.fc26 (FEDORA-2017-a128d09174)
CLI interface to Jinja2
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470609 - [abrt] python3-jinja2-cli: _parse_ini():
cli.py:80:_parse_ini:ModuleNotFoundError: No module named 'StringIO'
https://bugzilla.redhat.com/show_bug.cgi?id=1470609
--------------------------------------------------------------------------------
================================================================================
python-multidict-3.1.3-1.fc26 (FEDORA-2017-daf6021537)
MultiDict implementation
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463863 - python-multidict-3.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1463863
--------------------------------------------------------------------------------
================================================================================
python-setuptools-36.2.0-1.fc26 (FEDORA-2017-9fb17899f4)
Easily build and distribute Python packages
--------------------------------------------------------------------------------
Update Information:
update to 36.2.0. Fixes bug #1470908
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470908 - python-setuptools-36.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1470908
--------------------------------------------------------------------------------
================================================================================
python-yarl-0.12.0-1.fc26 (FEDORA-2017-a72c451a6e)
Python module to handle URLs
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 0.12.0 (rhbz#1471102) ---- Update to latest
upstream release 0.11.0 (rhbz#1465202)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471102 - python-yarl-v0.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471102
[ 2 ] Bug #1465202 - python-yarl-v0.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1465202
--------------------------------------------------------------------------------
================================================================================
tmux-2.5-1.fc26 (FEDORA-2017-e9083815d8)
A terminal multiplexer
--------------------------------------------------------------------------------
Update Information:
- New upstream release 2.5 - fixes rhbz #1449666 - ChangeLog
https://raw.githubusercontent.com/tmux/tmux/2.5/CHANGES
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1369182 - Arrow keys dont work inside tmux for putty in Fedora 24
https://bugzilla.redhat.com/show_bug.cgi?id=1369182
--------------------------------------------------------------------------------
================================================================================
tomboy-1.15.9-1.fc26 (FEDORA-2017-166b3c7596)
Note-taking application
--------------------------------------------------------------------------------
Update Information:
#### Tomboy 1.15.9 #### * Fixed search and highlight problems for notes with
multibyte characters (gh45) * Fixed Tomboy crash upon deleting a note after
closing Search All window (gh52) * Main README updated & converted to Markdown
(thanks Damien Doumer for initial idea!)
--------------------------------------------------------------------------------
================================================================================
xed-1.4.6-1.fc26 (FEDORA-2017-8ebfb5c3a1)
X-Apps [Text] Editor (Cross-DE, backward-compatible, GTK3, traditional UI)
--------------------------------------------------------------------------------
Update Information:
* New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471446 - xed-1.4.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471446
--------------------------------------------------------------------------------
================================================================================
yara-3.6.3-1.fc26 (FEDORA-2017-088b16a69a)
Pattern matching Swiss knife for malware researchers
--------------------------------------------------------------------------------
Update Information:
bump to 3.6.3 release - bugfix CVE-2017-11328
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471490 - yara-3.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1471490
--------------------------------------------------------------------------------
================================================================================
zfs-fuse-0.7.2.2-4.fc26 (FEDORA-2017-4492cb6986)
ZFS ported to Linux FUSE
--------------------------------------------------------------------------------
Update Information:
Move binaries to /usr/sbin for compatibility with other zfs implementations
--------------------------------------------------------------------------------
================================================================================
zlib-ada-1.4-0.16.20120830CVS.fc26 (FEDORA-2017-b0a6f37173)
Zlib for Ada
--------------------------------------------------------------------------------
Update Information:
Ada packages had to be rebuilt because GCC 7.1 invalidated the ALI files.
--------------------------------------------------------------------------------
================================================================================
zstd-1.3.0-1.fc26 (FEDORA-2017-d65580db44)
Zstd compression library
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------