The following Fedora 26 Security updates need testing:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ab43d1d240 tnef-1.4.14-1.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f997e46fa7
python-django-1.10.7-1.fc26
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01
python-XStatic-jquery-ui-1.12.0.1-2.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2f3096ba16
php-pear-CAS-1.3.5-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e8b639c286
dovecot-2.2.29.1-1.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2e94c7b518 yara-3.5.0-7.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8150618774 mupdf-1.10a-5.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0e64c4c186
tomcat-8.0.43-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e4c6ab648b pcre2-10.23-6.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-30e042c42a
mingw-gnutls-3.5.11-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
27
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90bcb067bf
fedora-release-26-0.6
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c74484d3bd libfm-1.2.5-3.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-525d9c8af2
thunderbird-52.0-2.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a95a89e4ba
livecd-tools-24.3-2.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-674c3c0e96
highlight-3.36-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e3034559ef
garcon-0.6.0-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1918e9452a
python3-3.6.1-3.fc26 python3-docs-3.6.1-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-de09f44c47
uboot-tools-2017.05-0.4.rc2.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4defa84b6d
kernel-4.11.0-0.rc7.git0.1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e4c6ab648b pcre2-10.23-6.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-746673dc6e
menu-cache-1.0.2-2.D20170417git54ab9e4576.fc26
The following builds have been pushed to Fedora 26 updates-testing
atomic-devmode-0.3.6-1.fc26
fedfind-3.5.4-1.fc26
fts-3.6.8-1.fc26
fts-monitoring-3.6.8-1.fc26
garcon-0.6.0-1.fc26
gsignond-1.0.6-2.fc26
kernel-4.11.0-0.rc7.git0.1.fc26
libopenraw-0.1.1-1.fc26
libyui-3.3.2-1.fc26
lziprecover-1.19-1.fc26
mingw-gnutls-3.5.11-1.fc26
openqa-4.4-49.20170409gitfead7af.fc26
os-autoinst-4.4-18.20170410git97928a2.fc26
pari-2.9.2-2.fc26
pcre2-10.23-6.fc26
perl-Gearman-2.004.003-1.fc26
perl-Getopt-Lucid-1.08-1.fc26
perl-Module-Metadata-Changes-2.12-1.fc26
perl-Mojolicious-7.30-1.fc26
perl-Mojolicious-Plugin-AssetPack-1.41-1.fc26
perl-Perl-Critic-Pulp-93-1.fc26
perl-Template-Toolkit-2.27-1.fc26
perl-Test-API-0.008-1.fc26
perl-Time-HiRes-1.9742-1.fc26
pulp-2.12.2-1.fc26
python-autobahn-0.18.2-1.git731228a.fc26
python-cu2qu-1.1.1-1.fc26
python-jedi-0.10.2-1.fc26
python-mutatormath-2.0.4-1.fc26
python-txaio-2.7.0-1.fc26
python3-3.6.1-3.fc26
python3-docs-3.6.1-1.fc26
uboot-tools-2017.05-0.4.rc2.fc26
Details about builds:
================================================================================
atomic-devmode-0.3.6-1.fc26 (FEDORA-2017-8c3f41a4be)
Atomic Developer Mode
--------------------------------------------------------------------------------
Update Information:
New upstream release. See
https://github.com/projectatomic/atomic-
devmode/releases/tag/v0.3.6 for full changelog.
--------------------------------------------------------------------------------
================================================================================
fedfind-3.5.4-1.fc26 (FEDORA-2017-276a80d8c6)
Fedora compose and image finder
--------------------------------------------------------------------------------
Update Information:
This new version of fedfind handles an unusual situation where its local cache
directory (which is usually `~/.cache/fedfind`, but can be a temporary directory
if that location is not writeable) disappears during the lifetime of a fedfind-
using process. Previously, this would cause the process to crash, as fedfind
wasn't written to handle this eventuality. There are no other changes in this
update.
--------------------------------------------------------------------------------
================================================================================
fts-3.6.8-1.fc26 (FEDORA-2017-d54bcb21ec)
File Transfer Service V3
--------------------------------------------------------------------------------
Update Information:
New upstream release 3.6.8
--------------------------------------------------------------------------------
================================================================================
fts-monitoring-3.6.8-1.fc26 (FEDORA-2017-0afacb8e4a)
FTS3 Web Application for monitoring
--------------------------------------------------------------------------------
Update Information:
New upstream release 3.6.8
--------------------------------------------------------------------------------
================================================================================
garcon-0.6.0-1.fc26 (FEDORA-2017-e3034559ef)
Implementation of the
freedesktop.org menu specification
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.0.
--------------------------------------------------------------------------------
================================================================================
gsignond-1.0.6-2.fc26 (FEDORA-2017-24ddc446dd)
GSignOn daemon
--------------------------------------------------------------------------------
Update Information:
Fix subpackage descriptions.
--------------------------------------------------------------------------------
================================================================================
kernel-4.11.0-0.rc7.git0.1.fc26 (FEDORA-2017-4defa84b6d)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
Kernel 4.11-rc7
--------------------------------------------------------------------------------
================================================================================
libopenraw-0.1.1-1.fc26 (FEDORA-2017-20a5227d7f)
Decode camera RAW files
--------------------------------------------------------------------------------
Update Information:
An update to the latest upstream release of libopenraw: *
https://lists.freedesktop.org/archives/libopenraw-dev/2017-March/000133.html
--------------------------------------------------------------------------------
================================================================================
libyui-3.3.2-1.fc26 (FEDORA-2017-7b2b44d3f9)
GUI-abstraction library
--------------------------------------------------------------------------------
Update Information:
* New upstream release * Set preferred UI-plugin using
$YUI_PREFERRED_BACKEND in $ENV * Avoid several warnings from CMake * Improve
macros-file
--------------------------------------------------------------------------------
================================================================================
lziprecover-1.19-1.fc26 (FEDORA-2017-8484e50783)
Data recovery tool and decompressor for files in the lzip compressed format
--------------------------------------------------------------------------------
Update Information:
1.19
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442896 - lziprecover-1.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442896
--------------------------------------------------------------------------------
================================================================================
mingw-gnutls-3.5.11-1.fc26 (FEDORA-2017-30e042c42a)
MinGW GnuTLS TLS/SSL encryption library
--------------------------------------------------------------------------------
Update Information:
Security and bug fixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1443033 - CVE-2017-7869 gnutls: Out-of-bounds write related to the
cdk_pkt_read function (GNUTLS-SA-2017-3)
https://bugzilla.redhat.com/show_bug.cgi?id=1443033
--------------------------------------------------------------------------------
================================================================================
openqa-4.4-49.20170409gitfead7af.fc26 (FEDORA-2017-2a2d78207d)
OS-level automated testing framework
--------------------------------------------------------------------------------
Update Information:
This update provides new git snapshots of openQA and os-autoinst with various
bugfixes and enhancements. It also provides bugfix updates to Mojolicious and
the AssetPack plugin; the newer versions are now required by the latest openQA
code. There should be no incompatible changes in either Mojolicious or
AssetPack.
--------------------------------------------------------------------------------
================================================================================
os-autoinst-4.4-18.20170410git97928a2.fc26 (FEDORA-2017-2a2d78207d)
OS-level test automation
--------------------------------------------------------------------------------
Update Information:
This update provides new git snapshots of openQA and os-autoinst with various
bugfixes and enhancements. It also provides bugfix updates to Mojolicious and
the AssetPack plugin; the newer versions are now required by the latest openQA
code. There should be no incompatible changes in either Mojolicious or
AssetPack.
--------------------------------------------------------------------------------
================================================================================
pari-2.9.2-2.fc26 (FEDORA-2017-290c2119fd)
Number Theory-oriented Computer Algebra System
--------------------------------------------------------------------------------
Update Information:
Compat library for pari 2.7 removed.
--------------------------------------------------------------------------------
================================================================================
pcre2-10.23-6.fc26 (FEDORA-2017-e4c6ab648b)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes a crash when finding a Unicode property for a character with
a code point greater than 0x10ffff in UTF-32 library while UTF mode is disabled
and JIT mode is enabled. It also fixes an incortect cast in UTF validation
routine.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434504 - CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7,
10.24/2)
https://bugzilla.redhat.com/show_bug.cgi?id=1434504
--------------------------------------------------------------------------------
================================================================================
perl-Gearman-2.004.003-1.fc26 (FEDORA-2017-d2200491ac)
Perl interface for Gearman distributed job system
--------------------------------------------------------------------------------
Update Information:
This release allows a client and worker to specify CA file parameter. ----
This release fixes bad overriding of cert_file SSL option. ---- This release
fixes respeciting prefix separator to ensure persistent queue recovery.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442502 - perl-Gearman-2.004.003 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442502
[ 2 ] Bug #1441656 - perl-Gearman-2.004.002 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1441656
[ 3 ] Bug #1441437 - perl-Gearman-2.004.001 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1441437
--------------------------------------------------------------------------------
================================================================================
perl-Getopt-Lucid-1.08-1.fc26 (FEDORA-2017-76826e5e70)
Clear, readable syntax for command line processing
--------------------------------------------------------------------------------
Update Information:
This release fixes building on Perl without "." in @INC path.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442608 - perl-Getopt-Lucid-1.08 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442608
--------------------------------------------------------------------------------
================================================================================
perl-Module-Metadata-Changes-2.12-1.fc26 (FEDORA-2017-3920d1b1e8)
Manage a module's machine-readable Changes/CHANGES file
--------------------------------------------------------------------------------
Update Information:
This release corrects dependency specification. It also corrects shellbangs in
the documentation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442756 - perl-Module-Metadata-Changes-2.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442756
--------------------------------------------------------------------------------
================================================================================
perl-Mojolicious-7.30-1.fc26 (FEDORA-2017-2a2d78207d)
A next generation web framework for Perl
--------------------------------------------------------------------------------
Update Information:
This update provides new git snapshots of openQA and os-autoinst with various
bugfixes and enhancements. It also provides bugfix updates to Mojolicious and
the AssetPack plugin; the newer versions are now required by the latest openQA
code. There should be no incompatible changes in either Mojolicious or
AssetPack.
--------------------------------------------------------------------------------
================================================================================
perl-Mojolicious-Plugin-AssetPack-1.41-1.fc26 (FEDORA-2017-2a2d78207d)
Compress and convert CSS, Less, Sass, JavaScript and CoffeeScript files
--------------------------------------------------------------------------------
Update Information:
This update provides new git snapshots of openQA and os-autoinst with various
bugfixes and enhancements. It also provides bugfix updates to Mojolicious and
the AssetPack plugin; the newer versions are now required by the latest openQA
code. There should be no incompatible changes in either Mojolicious or
AssetPack.
--------------------------------------------------------------------------------
================================================================================
perl-Perl-Critic-Pulp-93-1.fc26 (FEDORA-2017-f3d7b0d453)
Some add-on perlcritic policies
--------------------------------------------------------------------------------
Update Information:
This release improves a build script. We deliver it only to provide up-to-date
version string.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442380 - perl-Perl-Critic-Pulp-93 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442380
--------------------------------------------------------------------------------
================================================================================
perl-Template-Toolkit-2.27-1.fc26 (FEDORA-2017-d4436d1bfb)
Template processing system
--------------------------------------------------------------------------------
Update Information:
Update to 2.27.
--------------------------------------------------------------------------------
================================================================================
perl-Test-API-0.008-1.fc26 (FEDORA-2017-05cafed7df)
Test a list of subroutines provided by a module
--------------------------------------------------------------------------------
Update Information:
Current upstream maintenance release.
--------------------------------------------------------------------------------
================================================================================
perl-Time-HiRes-1.9742-1.fc26 (FEDORA-2017-12e547c3e3)
High resolution alarm, sleep, gettimeofday, interval timers
--------------------------------------------------------------------------------
Update Information:
This release fixes building on Perl without "." in @INC path. It also corrects
bthe build script to use safer 3-argument open() calls. We deliver it only to
provide up-to-date version string.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442609 - perl-Time-HiRes-1.9742 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442609
--------------------------------------------------------------------------------
================================================================================
pulp-2.12.2-1.fc26 (FEDORA-2017-0346dc7681)
An application for managing software repositories
--------------------------------------------------------------------------------
Update Information:
Bumped to 2.12.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1436761 - Broken python-okaara dependency in Rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1436761
--------------------------------------------------------------------------------
================================================================================
python-autobahn-0.18.2-1.git731228a.fc26 (FEDORA-2017-9612cba578)
Python networking library for WebSocket and WAMP
--------------------------------------------------------------------------------
Update Information:
Update to 0.18.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442583 - python-autobahn-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442583
--------------------------------------------------------------------------------
================================================================================
python-cu2qu-1.1.1-1.fc26 (FEDORA-2017-ebcfdf0f75)
Cubic-to-quadratic bezier curve conversion
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1433760 - Review Request: python-cu2qu - Cubic-to-quadratic bezier curve
conversion
https://bugzilla.redhat.com/show_bug.cgi?id=1433760
--------------------------------------------------------------------------------
================================================================================
python-jedi-0.10.2-1.fc26 (FEDORA-2017-01421140b0)
An auto completion tool for Python that can be used for text editors
--------------------------------------------------------------------------------
Update Information:
### [upstream
changelog](https://github.com/davidhalter/jedi/blob/v0.10.2/CHANGELOG.rst) ###
0.10.2 (2017-04-05) - Python Packaging sucks. Some files were not included in
0.10.1. ### 0.10.1 (2017-04-05) - Fixed a few very annoying bugs. - Prepared
the parser to be factored out of Jedi.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1438985 - python-jedi-0.10.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1438985
--------------------------------------------------------------------------------
================================================================================
python-mutatormath-2.0.4-1.fc26 (FEDORA-2017-a2d6fe8196)
Python library for piecewise linear interpolation in multiple dimensions
--------------------------------------------------------------------------------
Update Information:
Packaging fontmake deps
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1433744 - Review Request: python-mutatormath - Python library for piecewise
linear interpolation in multiple dimensions
https://bugzilla.redhat.com/show_bug.cgi?id=1433744
--------------------------------------------------------------------------------
================================================================================
python-txaio-2.7.0-1.fc26 (FEDORA-2017-666fca9ada)
Compatibility API between asyncio/Twisted/Trollius
--------------------------------------------------------------------------------
Update Information:
Update to 2.7.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442592 - python-txaio-2.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442592
--------------------------------------------------------------------------------
================================================================================
python3-3.6.1-3.fc26 (FEDORA-2017-1918e9452a)
Version 3 of the Python programming language aka Python 3000
--------------------------------------------------------------------------------
Update Information:
Updating Python to a new subminor release 3.6.1 in F26 and including a fix for
multilib parallel install support.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1179073 - python3-debug.i686 requires python3.i686 which is not multilib
clean
https://bugzilla.redhat.com/show_bug.cgi?id=1179073
[ 2 ] Bug #1435135 - ImportError:
/usr/lib64/python3.6/site-packages/rpm/_rpm.cpython-36m-x86_64-linux-gnu.so: undefined
symbol: PySlice_AdjustIndices
https://bugzilla.redhat.com/show_bug.cgi?id=1435135
[ 3 ] Bug #1438219 - Python 3.6 installs Makefile to an incorrect config dir
https://bugzilla.redhat.com/show_bug.cgi?id=1438219
--------------------------------------------------------------------------------
================================================================================
python3-docs-3.6.1-1.fc26 (FEDORA-2017-1918e9452a)
Documentation for the Python 3 programming language
--------------------------------------------------------------------------------
Update Information:
Updating Python to a new subminor release 3.6.1 in F26 and including a fix for
multilib parallel install support.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1179073 - python3-debug.i686 requires python3.i686 which is not multilib
clean
https://bugzilla.redhat.com/show_bug.cgi?id=1179073
[ 2 ] Bug #1435135 - ImportError:
/usr/lib64/python3.6/site-packages/rpm/_rpm.cpython-36m-x86_64-linux-gnu.so: undefined
symbol: PySlice_AdjustIndices
https://bugzilla.redhat.com/show_bug.cgi?id=1435135
[ 3 ] Bug #1438219 - Python 3.6 installs Makefile to an incorrect config dir
https://bugzilla.redhat.com/show_bug.cgi?id=1438219
--------------------------------------------------------------------------------
================================================================================
uboot-tools-2017.05-0.4.rc2.fc26 (FEDORA-2017-de09f44c47)
U-Boot utilities
--------------------------------------------------------------------------------
Update Information:
2017.05 RC2
--------------------------------------------------------------------------------