Fedora 26 Update: rpcbind-0.2.4-8.rc3.fc26
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-713f05f7e6
2018-01-02 14:44:38.579064
--------------------------------------------------------------------------------
Name : rpcbind
Product : Fedora 26
Version : 0.2.4
Release : 8.rc3.fc26
URL : http://nfsv4.bullopensource.org
Summary : Universal Addresses to RPC Program Number Mapper
Description :
The rpcbind utility is a server that converts RPC program numbers into
universal addresses. It must be running on the host to be able to make
RPC calls on a server on that machine.
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream RC release: rpcbind-0_2_5-rc3 (bz 1431574)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431574 - service file not starting rpcbind.target
https://bugzilla.redhat.com/show_bug.cgi?id=1431574
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade rpcbind' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 26 Update: composer-1.5.6-1.fc26
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-597788aae5
2018-01-02 14:44:38.579153
--------------------------------------------------------------------------------
Name : composer
Product : Fedora 26
Version : 1.5.6
Release : 1.fc26
URL : https://getcomposer.org/
Summary : Dependency Manager for PHP
Description :
Composer helps you declare, manage and install dependencies of PHP projects,
ensuring you have the right stack everywhere.
Documentation: https://getcomposer.org/doc/
--------------------------------------------------------------------------------
Update Information:
**Version 1.5.6** - 2017-12-18 * Fixed root package version guessed when a
tag is checked out * Fixed support for GitLab reposhosted on non-standard
ports * Fixed regression in require command when requiring unstable packages,
part 3
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade composer' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 26 Update: php-icewind-smb2-2.0.3-1.fc26
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-a6ae84a0c4
2018-01-02 14:44:38.578987
--------------------------------------------------------------------------------
Name : php-icewind-smb2
Product : Fedora 26
Version : 2.0.3
Release : 1.fc26
URL : https://github.com/icewind1991/SMB
Summary : php wrapper for smbclient and libsmbclient-php
Description :
PHP wrapper for smbclient and libsmbclient-php
* Reuses a single smbclient instance for multiple requests
* Doesn't leak the password to the process list
* Simple 1-on-1 mapping of SMB commands
* A stream-based api to remove the need for temporary files
* Support for using libsmbclient directly trough libsmbclient-php
Autoloader: /usr/share/php/Icewind/SMB2/autoload.php
--------------------------------------------------------------------------------
Update Information:
PHP wrapper for smbclient and libsmbclient-php * Reuses a single smbclient
instance for multiple requests * Doesn't leak the password to the process list *
Simple 1-on-1 mapping of SMB commands * A stream-based api to remove the need
for temporary files * Support for using libsmbclient directly trough
libsmbclient-php Autoloader: /usr/share/php/Icewind/SMB2/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508332 - Review Request: php-icewind-smb2 - php wrapper for smbclient and libsmbclient-php
https://bugzilla.redhat.com/show_bug.cgi?id=1508332
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade php-icewind-smb2' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 26 Update: php-phpunit-PHPUnit-5.7.26-1.fc26
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-850ab0eadf
2018-01-02 14:44:38.578904
--------------------------------------------------------------------------------
Name : php-phpunit-PHPUnit
Product : Fedora 26
Version : 5.7.26
Release : 1.fc26
URL : https://github.com/sebastianbergmann/phpunit
Summary : The PHP Unit Testing framework
Description :
PHPUnit is a family of PEAR packages that supports the development of
object-oriented PHP applications using the concepts and methods of Agile
Software Development, Extreme Programming, Test-Driven Development and
Design-by-Contract Development by providing an elegant and robust framework
for the creation, execution and analysis of Unit Tests.
--------------------------------------------------------------------------------
Update Information:
**Version 5.7.26** - 2017-12-17 * **Fixed** * Fixed
[#2472](https://github.com/sebastianbergmann/phpunit/issues/2472):
`PHPUnit\Util\Getopt` uses deprecated `each()` function * Fixed
[#2833](https://github.com/sebastianbergmann/phpunit/issues/2833): Test class
loaded during data provider execution is not discovered * Fixed
[#2922](https://github.com/sebastianbergmann/phpunit/issues/2922): Test class is
not discovered when there is a test class with `@group` and provider throwing
exception in it, tests are run with `--exclude-group` for that group, there is
another class called later (after the class from above), and the name of that
another class does not match its filename
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade php-phpunit-PHPUnit' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 26 Update: perl-Dancer2-0.204004-3.fc26
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-0dace90d48
2018-01-02 14:44:38.578822
--------------------------------------------------------------------------------
Name : perl-Dancer2
Product : Fedora 26
Version : 0.204004
Release : 3.fc26
URL : http://search.cpan.org/dist/Dancer2/
Summary : Lightweight yet powerful web application framework
Description :
Dancer2 is the new generation of Dancer, the lightweight web-framework for
Perl. It is a complete rewrite based on Moo and is meant to be easy and fun.
--------------------------------------------------------------------------------
Update Information:
It was reported recently that the dancer2 command line program checks the most
recent version of Dancer2 on CPAN and reports to the user if the version
currently used is not that version. This reveals the user's public IP address
to CPAN without his consent and isn't that useful. This update disables the
check.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1521155 - _version_check gives unhelpful advice
https://bugzilla.redhat.com/show_bug.cgi?id=1521155
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade perl-Dancer2' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 26 Update: debian-keyring-2017.7-1.fc26
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-af58669d12
2018-01-02 14:44:38.578721
--------------------------------------------------------------------------------
Name : debian-keyring
Product : Fedora 26
Version : 2017.7
Release : 1.fc26
URL : http://packages.debian.org/unstable/admin/debian-archive-keyring
Summary : GnuPG archive keys of the Debian archive
Description :
The Debian project digitally signs its Release files. This package contains the
archive keys used for that.
--------------------------------------------------------------------------------
Update Information:
Update to 2017.7, see http://metadata.ftp-master.debian.org/changelogs/main/d
/debian-archive-keyring/debian-archive-keyring_2017.7_changelog for details.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade debian-keyring' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 26 Update: flatpak-builder-0.10.6-1.fc26
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-d57a06cda1
2018-01-02 14:44:38.578649
--------------------------------------------------------------------------------
Name : flatpak-builder
Product : Fedora 26
Version : 0.10.6
Release : 1.fc26
URL : http://flatpak.org/
Summary : Tool to build flatpaks from source
Description :
Flatpak-builder is a tool for building flatpaks from sources.
See http://flatpak.org/ for more information.
--------------------------------------------------------------------------------
Update Information:
flatpak 0.10.2.1 release: * Flatpak now requires OSTree 2017.14 * flatpak
update now updates from both system and user installations by default. *
flatpak update is less noisy when updating appstream info. * All the remote-*
commands now by default automatically decide to use --user or --system based
on the given remote name. * flatpak remote-ls with no remote lists the content
of all remotes * Fixed regression that made xdg-user-dirs and theme selection
for kde apps break. * flatpak override with no argument now overrides globally,
i.e. for all apps. * flatpak override now supports --nofilesystem properly.
For example flatpak override --nofilesystem=~/.ssh hides the ssh dir for all
apps, even those who have homedir access. * flatpak install now takes a
--reinstall argument which uninstalls a previously installed version if
necessary. This is very useful when you want to install a new version from a
different source. * flatpak install now allows you to pass an absolute pathname
as remote name, which will create a temporary remote and install from
that. The remote will be removed when the app is uninstalled. This is very
useful during development and testing. * Flatpak now creates CLI wrappers for
all installed apps, so if you add /var/lib/flatpak/exports/bin or
~/.local/share/flatpak/exports/bin to your PATH you can easily start flatpak
apps by their application id. * Fix installation of telegram * Fixed some
warnings reported by coverity * Some leaks fixed * Fixed typo in error message
flatpak-builder 0.10.6 release: * New checksum types for file/archive sources:
md5, sha1, sha512 * Support including source snippets from another file,
similar to how module includes are supported. * The app id renaming in the
appdata file is now more careful to avoid renaming other parts. * The cache
default repo format for new caches is now bare-user-only which means building
with flatpak-builder works on filesystems that don't support xattrs. * New
--install argument will install the finished build using the new flatpak
install install-directly-from-local-repo feature. This makes it easier to
test local builds.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade flatpak-builder' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 26 Update: flatpak-0.10.2.1-1.fc26
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-d57a06cda1
2018-01-02 14:44:38.578649
--------------------------------------------------------------------------------
Name : flatpak
Product : Fedora 26
Version : 0.10.2.1
Release : 1.fc26
URL : http://flatpak.org/
Summary : Application deployment framework for desktop apps
Description :
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.
--------------------------------------------------------------------------------
Update Information:
flatpak 0.10.2.1 release: * Flatpak now requires OSTree 2017.14 * flatpak
update now updates from both system and user installations by default. *
flatpak update is less noisy when updating appstream info. * All the remote-*
commands now by default automatically decide to use --user or --system based
on the given remote name. * flatpak remote-ls with no remote lists the content
of all remotes * Fixed regression that made xdg-user-dirs and theme selection
for kde apps break. * flatpak override with no argument now overrides globally,
i.e. for all apps. * flatpak override now supports --nofilesystem properly.
For example flatpak override --nofilesystem=~/.ssh hides the ssh dir for all
apps, even those who have homedir access. * flatpak install now takes a
--reinstall argument which uninstalls a previously installed version if
necessary. This is very useful when you want to install a new version from a
different source. * flatpak install now allows you to pass an absolute pathname
as remote name, which will create a temporary remote and install from
that. The remote will be removed when the app is uninstalled. This is very
useful during development and testing. * Flatpak now creates CLI wrappers for
all installed apps, so if you add /var/lib/flatpak/exports/bin or
~/.local/share/flatpak/exports/bin to your PATH you can easily start flatpak
apps by their application id. * Fix installation of telegram * Fixed some
warnings reported by coverity * Some leaks fixed * Fixed typo in error message
flatpak-builder 0.10.6 release: * New checksum types for file/archive sources:
md5, sha1, sha512 * Support including source snippets from another file,
similar to how module includes are supported. * The app id renaming in the
appdata file is now more careful to avoid renaming other parts. * The cache
default repo format for new caches is now bare-user-only which means building
with flatpak-builder works on filesystems that don't support xattrs. * New
--install argument will install the finished build using the new flatpak
install install-directly-from-local-repo feature. This makes it easier to
test local builds.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade flatpak' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
[SECURITY] Fedora 26 Update: xen-4.8.2-9.fc26
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-16a414b3c5
2018-01-02 14:44:38.578556
--------------------------------------------------------------------------------
Name : xen
Product : Fedora 26
Version : 4.8.2
Release : 9.fc26
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor
--------------------------------------------------------------------------------
Update Information:
another patch related to the [XSA-240, CVE-2017-15595] issue xen: various flaws
(#1525018) x86 PV guests may gain access to internally used page [XSA-248]
broken x86 shadow mode refcount overflow check [XSA-249] improper x86 shadow
mode refcount error handling [XSA-250] improper bug check in x86 log-dirty
handling [XSA-251] ---- xen: various flaws (#1518214) x86: infinite loop due
to missing PoD error checking [XSA-246] Missing p2m error checking in PoD code
[XSA-247]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1518656 - CVE-2017-17566 xsa248 xen: x86 PV guests may gain access to internally used pages (XSA-248)
https://bugzilla.redhat.com/show_bug.cgi?id=1518656
[ 2 ] Bug #1518657 - CVE-2017-17563 xsa249 xen: broken x86 shadow mode refcount overflow check (XSA-249)
https://bugzilla.redhat.com/show_bug.cgi?id=1518657
[ 3 ] Bug #1518658 - CVE-2017-17564 xsa250 xen: improper x86 shadow mode refcount error handling (XSA-250)
https://bugzilla.redhat.com/show_bug.cgi?id=1518658
[ 4 ] Bug #1518659 - CVE-2017-17565 xsa251 xen: improper bug check in x86 log-dirty handling (XSA-251)
https://bugzilla.redhat.com/show_bug.cgi?id=1518659
[ 5 ] Bug #1513335 - CVE-2017-17044 xsa246 xen: x86: infinite loop due to missing PoD error checking (XSA-246)
https://bugzilla.redhat.com/show_bug.cgi?id=1513335
[ 6 ] Bug #1513336 - CVE-2017-17045 xsa247 xen: Missing p2m error checking in PoD code (XSA-247)
https://bugzilla.redhat.com/show_bug.cgi?id=1513336
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade xen' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months
Fedora 26 Update: sane-backends-1.0.27-8.fc26
by updates＠fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-0ab8308633
2018-01-02 14:44:38.578520
--------------------------------------------------------------------------------
Name : sane-backends
Product : Fedora 26
Version : 1.0.27
Release : 8.fc26
URL : http://www.sane-project.org
Summary : Scanner access software
Description :
Scanner Access Now Easy (SANE) is a universal scanner interface. The
SANE application programming interface (API) provides standardized
access to any raster image scanner hardware (flatbed scanner,
hand-held scanner, video and still cameras, frame-grabbers, etc.).
--------------------------------------------------------------------------------
Update Information:
1525293 - PNG scans should be enabled
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1525293 - PNG scans should be enabled
https://bugzilla.redhat.com/show_bug.cgi?id=1525293
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade sane-backends' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 3 months