The following Fedora 26 Security updates need testing: Age URL 183 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26 76 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26 29 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d75a88f263 monit-5.25.1-1.fc26 21 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ccef1ced42 gimp-2.8.22-3.fc26 15 https://bodhi.fedoraproject.org/updates/FEDORA-2018-66b885ae3c keycloak-httpd-client-install-0.8-1.fc26 14 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0db545e976 ruby-2.4.3-86.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ef303deec6 libtasn1-4.13-1.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6550550774 dnsperf-2.1.0.0-8.fc26 bind-dyndb-ldap-11.1-6.fc26 bind-9.11.2-1.P1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9780220f7d dnsmasq-2.76-6.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bfb9835edd GraphicsMagick-1.3.28-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a10a19e06a unbound-1.6.8-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7e086e3309 moodle-3.2.7-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b166805347 transmission-2.92-12.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f8a78a5ef squid-4.0.23-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f73abc5680 knot-resolver-1.5.3-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a6b59d8f78 libxml2-2.9.7-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-85655b12b6 curl-7.53.1-14.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7151603128 mupdf-1.12.0-2.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7a461886fb kernel-4.14.15-200.fc26
The following Fedora 26 Critical Path updates have yet to be approved: Age URL 21 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c2eed6bd99 iproute-4.14.1-4.fc26 18 https://bodhi.fedoraproject.org/updates/FEDORA-2018-240b9e54f9 glusterfs-3.10.9-1.fc26 17 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b3f20ecd11 kmod-25-1.fc26 17 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4818a0a3fb lxpanel-0.9.3-2.D20180109git2ddf8dfc.fc26 14 https://bodhi.fedoraproject.org/updates/FEDORA-2018-71094e4775 libseccomp-2.3.3-1.fc26 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ba521808e0 gnome-settings-daemon-3.24.3-4.fc26 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4bfc82aeb7 pcre-8.41-4.fc26 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-194be49026 pcre2-10.23-13.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f1d83a8255 libtevent-0.9.35-1.fc26 libtalloc-2.1.11-1.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-1b9b3d815f ostree-2018.1-1.fc26 rpm-ostree-2018.1-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bfc82942f4 pungi-4.1.21-4.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4000c1ba37 python-productmd-1.10-1.fc26 7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ef303deec6 libtasn1-4.13-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-61e0dcaf5e qt5-qtdeclarative-5.9.2-3.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8633570be3 nfs-utils-2.2.1-4.rc2.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fcda2573ac python-rpm-macros-3-21.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9780220f7d dnsmasq-2.76-6.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f200f504b3 dtc-1.4.6-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7a461886fb kernel-4.14.15-200.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6fe92b98df perl-threads-shared-1.58-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0f208aa267 perl-threads-2.21-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-85655b12b6 curl-7.53.1-14.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a9a5708bef python3-3.6.4-2.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a6b59d8f78 libxml2-2.9.7-1.fc26
The following builds have been pushed to Fedora 26 updates-testing
firefox-58.0-4.fc26 gnome-pkg-tools-0.20.1-1.fc26 icecat-52.6.0-1.fc26 ixpdimm_sw-01.00.00.2419-2.fc26 jackson-databind-2.7.6-8.fc26 java-1.8.0-openjdk-1.8.0.161-0.b14.fc26 java-9-openjdk-9.0.4.11-3.fc26 libguestfs-1.36.13-1.fc26 libreswan-3.23-1.fc26 metamath-0.160-1.fc26 module-build-service-1.6.3-2.fc26 nodejs-rhea-0.2.9-1.fc26 pbuilder-0.229.1-1.fc26 persepolis-3.0.1-3.fc26 php-alcaeus-mongo-php-adapter-1.1.4-1.fc26 php-horde-Horde-Ldap-2.4.1-1.fc26 php-horde-Horde-Socket-Client-2.1.2-1.fc26 php-nikic-php-parser3-3.1.4-1.fc26 satyr-0.23-2.fc26 snapd-2.30-1.fc26 speech-dispatcher-0.8.8-2.fc26 sscg-2.3.2-1.fc26 vdr-epg2vdr-1.1.79-1.fc26 waiverdb-0.5.0-2.fc26 webkitgtk4-2.18.6-1.fc26 xen-4.8.3-2.fc26 xpra-2.2.3-3.fc26
Details about builds:
================================================================================ firefox-58.0-4.fc26 (FEDORA-2018-0ce24a50c3) Mozilla Firefox Web browser -------------------------------------------------------------------------------- Update Information:
- Latest upstream build (Firefox 58) - This update contains packages for second arches ---- - Update to latest version - Firefox 58.0 --------------------------------------------------------------------------------
================================================================================ gnome-pkg-tools-0.20.1-1.fc26 (FEDORA-2018-17f5e93720) Tools for the Debian GNOME Packaging Team -------------------------------------------------------------------------------- Update Information:
Update to 0.20.1, see http://metadata.ftp-master.debian.org/changelogs/main/g /gnome-pkg-tools/gnome-pkg-tools_0.20.1_changelog for details. --------------------------------------------------------------------------------
================================================================================ icecat-52.6.0-1.fc26 (FEDORA-2018-408668579d) GNU version of Firefox browser -------------------------------------------------------------------------------- Update Information:
- Update to 52.6.0 --------------------------------------------------------------------------------
================================================================================ ixpdimm_sw-01.00.00.2419-2.fc26 (FEDORA-2018-6f0fb7e666) API for development of IXPDIMM management utilities -------------------------------------------------------------------------------- Update Information:
Release v01.00.00.2418 Spec has been refreshed. ixpdimm_sw now a src packages, other packages renamed/reorganized. Some files have been moved to more standard locations. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1523963 - ixpdimm_sw-01.00.00.2419 is available https://bugzilla.redhat.com/show_bug.cgi?id=1523963 --------------------------------------------------------------------------------
================================================================================ jackson-databind-2.7.6-8.fc26 (FEDORA-2018-bbf8c38b51) General data-binding package for Jackson (2.x) -------------------------------------------------------------------------------- Update Information:
Security fixes for CVE-2017-17485 and CVE-2018-5968. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1528565 - CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) https://bugzilla.redhat.com/show_bug.cgi?id=1528565 [ 2 ] Bug #1538332 - CVE-2018-5968 jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) https://bugzilla.redhat.com/show_bug.cgi?id=1538332 --------------------------------------------------------------------------------
================================================================================ java-1.8.0-openjdk-1.8.0.161-0.b14.fc26 (FEDORA-2018-d50769efa0) OpenJDK Runtime Environment -------------------------------------------------------------------------------- Update Information:
updated to Security u161 (Oracle CPU 1/2018) --------------------------------------------------------------------------------
================================================================================ java-9-openjdk-9.0.4.11-3.fc26 (FEDORA-2018-9e6e636c60) OpenJDK Runtime Environment -------------------------------------------------------------------------------- Update Information:
January CPU security update. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1492175 - [systemtap] Hotspot tapsets have wrong path reference to libjvm.so https://bugzilla.redhat.com/show_bug.cgi?id=1492175 --------------------------------------------------------------------------------
================================================================================ libguestfs-1.36.13-1.fc26 (FEDORA-2018-49cd53ff36) Access and modify virtual machine disk images -------------------------------------------------------------------------------- Update Information:
New upstream version 1.36.13. Drop libguestfs-gobject-doc because gtk-doc is no longer provided upstream. Add new man page guestfs-gobject(3) to libguestfs- gobject-devel. --------------------------------------------------------------------------------
================================================================================ libreswan-3.23-1.fc26 (FEDORA-2018-7e9b28da95) IPsec implementation with IKEv1 and IKEv2 keying protocols -------------------------------------------------------------------------------- Update Information:
Updated to 3.23 - support for MOBIKE, PPK, CMAC, nic offload and performance improvements --------------------------------------------------------------------------------
================================================================================ metamath-0.160-1.fc26 (FEDORA-2018-6a14186fae) Construct mathematics from basic axioms -------------------------------------------------------------------------------- Update Information:
Changes in version 0.157: - Major rewrite of READ-related functions. - Added HELP MARKUP. - Track line numbers for error messages in included files. - Changed HOME_DIRECTORY to ROOT_DIRECTORY. - add virtual includes "$( Begin $[...$] $)", $( End $[...$] $)", "$( Skip $[...$] $)" Changes in version 0.158: - strip CRs from Windows SUBMIT files run on Linux Changes in version 0.159: - fix crash due to missing include file Changes in version 0.160: - fix bug introduced in version 0.158 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1536242 - metamath-0.157 is available https://bugzilla.redhat.com/show_bug.cgi?id=1536242 [ 2 ] Bug #1538606 - metamath-0.160 is available https://bugzilla.redhat.com/show_bug.cgi?id=1538606 --------------------------------------------------------------------------------
================================================================================ module-build-service-1.6.3-2.fc26 (FEDORA-2018-ea0f7c5312) The Module Build Service for Modularity -------------------------------------------------------------------------------- Update Information:
Changes ------- * Fix a bug that caused a module build to fail when it was cancelled during the module-build-macros phase and then resumed * Reset the "state_reason" field on all components after a module build is resumed * Cancel new repo tasks on module build failures in Koji * Use available Koji repos during local builds instead of building them locally * Add an incrementing prefix to module components' releases * Add a "context" field on component and module releases in Koji for uniqueness for when Module Stream Expansion is implemented * Remove urlgrabber as a dependency * Set an explicit log level on our per-build file handler * Set the timeout on git operations to 60 seconds to help alleviate client tooling timeouts * Improve the efficiency of the stale module builds poller * Fix situations where module-build-macros builds in Koji but fails in MBS and the build is resumed -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1487065 - module-build-service-1.3.26-3.fc26: local build always disables tests https://bugzilla.redhat.com/show_bug.cgi?id=1487065 [ 2 ] Bug #1514631 - module-build-service-1.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1514631 --------------------------------------------------------------------------------
================================================================================ nodejs-rhea-0.2.9-1.fc26 (FEDORA-2018-65584b0561) A reactive messaging library based on the AMQP protocol -------------------------------------------------------------------------------- Update Information:
Rebased to 0.2.9. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1523897 - nodejs-rhea-0.2.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1523897 --------------------------------------------------------------------------------
================================================================================ pbuilder-0.229.1-1.fc26 (FEDORA-2018-40608dae1b) Personal package builder for Debian packages -------------------------------------------------------------------------------- Update Information:
Update to version 0.229.1, see http://metadata.ftp- master.debian.org/changelogs/main/p/pbuilder/pbuilder_0.229.1_changelog for details. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1537512 - pbuilder-0.229.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1537512 --------------------------------------------------------------------------------
================================================================================ persepolis-3.0.1-3.fc26 (FEDORA-2018-84ff3781aa) A powerful download manager powered by aria2 -------------------------------------------------------------------------------- Update Information:
Fixes a small exception for users which don't have any autostart directory. (#1535604) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1535604 - [abrt] persepolis: addstartup(): startup.py:101:addstartup:FileNotFoundError: [Errno 2] No such file or directory: '/home/sajjad/.config/.autostart/persepolis.desktop' https://bugzilla.redhat.com/show_bug.cgi?id=1535604 --------------------------------------------------------------------------------
================================================================================ php-alcaeus-mongo-php-adapter-1.1.4-1.fc26 (FEDORA-2018-2e2fda31db) Mongo PHP Adapter -------------------------------------------------------------------------------- Update Information:
**Version 1.1.4** (2019-01-24) * [#214](https://github.com/alcaeus/mongo-php- adapter/pull/214) fixes the return values of MongoBatch calls with unacknowledged write concerns. --------------------------------------------------------------------------------
================================================================================ php-horde-Horde-Ldap-2.4.1-1.fc26 (FEDORA-2018-cab98b6e15) Horde LDAP libraries -------------------------------------------------------------------------------- Update Information:
**Horde_Ldap 2.4.1** * [jan] Avoid unnecessary binds. --------------------------------------------------------------------------------
================================================================================ php-horde-Horde-Socket-Client-2.1.2-1.fc26 (FEDORA-2018-9ad6c7084b) Horde Socket Client -------------------------------------------------------------------------------- Update Information:
**Horde_Socket_Client 2.1.2** * [mjr] Fix issues when retrying a failed connection (PR #1, Antoine Desch��nes). --------------------------------------------------------------------------------
================================================================================ php-nikic-php-parser3-3.1.4-1.fc26 (FEDORA-2018-db14e787a0) A PHP parser written in PHP -------------------------------------------------------------------------------- Update Information:
**Version 3.1.4** * Fixed pretty printing of `-(-$x)` and `+(+$x)`. (#459) --------------------------------------------------------------------------------
================================================================================ satyr-0.23-2.fc26 (FEDORA-2018-b88532d5ee) Tools to create anonymous, machine-friendly problem reports -------------------------------------------------------------------------------- Update Information:
Update list of normalized functions. - These functions are "blacklisted" to not mark crashes as duplicates. --------------------------------------------------------------------------------
================================================================================ snapd-2.30-1.fc26 (FEDORA-2018-798e0f02ff) A transactional software package manager -------------------------------------------------------------------------------- Update Information:
Release 2.30 to Fedora and fix issues with derivatives using snapd -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1527519 - snapd-2.30 is available https://bugzilla.redhat.com/show_bug.cgi?id=1527519 [ 2 ] Bug #1536895 - Snapd support currently broken , missing links to /usr/lib/snapd https://bugzilla.redhat.com/show_bug.cgi?id=1536895 --------------------------------------------------------------------------------
================================================================================ speech-dispatcher-0.8.8-2.fc26 (FEDORA-2018-d4a200bb76) To provide a high-level device independent layer for speech synthesis -------------------------------------------------------------------------------- Update Information:
include translations, pkgconfig support (#1538715) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1538715 - missing pkgconfig support: speech-dispatcher.pc https://bugzilla.redhat.com/show_bug.cgi?id=1538715 --------------------------------------------------------------------------------
================================================================================ sscg-2.3.2-1.fc26 (FEDORA-2018-d8ab83f203) Simple SSL certificate generator -------------------------------------------------------------------------------- Update Information:
Update to 2.3.3 Properly support hostnames up to 64 characters -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1535537 - httpd-init.service fails with long hostname (>=42) https://bugzilla.redhat.com/show_bug.cgi?id=1535537 --------------------------------------------------------------------------------
================================================================================ vdr-epg2vdr-1.1.79-1.fc26 (FEDORA-2018-5e23437722) A plugin to retrieve EPG data from a mysql database into VDR -------------------------------------------------------------------------------- Update Information:
Update to 1.1.79 --------------------------------------------------------------------------------
================================================================================ waiverdb-0.5.0-2.fc26 (FEDORA-2018-63c9e0ba3f) Service for waiving results in ResultsDB -------------------------------------------------------------------------------- Update Information:
Added missing requirement on python2-configparser ---- New upstream release: https://docs.pagure.org/waiverdb/release-notes.html#waiverdb-0-5 ---- Synchronize specfile with upstream. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1538463 - waiverdb-cli --help crashes https://bugzilla.redhat.com/show_bug.cgi?id=1538463 --------------------------------------------------------------------------------
================================================================================ webkitgtk4-2.18.6-1.fc26 (FEDORA-2018-43712163de) GTK+ Web content engine library -------------------------------------------------------------------------------- Update Information:
This update addresses the following vulnerabilities: * [CVE-2018-4088](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4088), [CVE-2017-13885](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13885), [CVE-2017-7165](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7165), [CVE-2017-13884](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13884), [CVE-2017-7160](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7160), [CVE-2017-7153](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7153), [CVE-2017-7161](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7161), [CVE-2018-4096](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4096) Additional fixes: * Fix deadlock in GStreamer video sink during shutdown when accelerated compositing is disabled. * Several fixes and improvements in WebDriver. --------------------------------------------------------------------------------
================================================================================ xen-4.8.3-2.fc26 (FEDORA-2018-be2cb3e65a) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information:
update to xen-4.8.3 --------------------------------------------------------------------------------
================================================================================ xpra-2.2.3-3.fc26 (FEDORA-2018-08e048f4f3) Remote display server for applications and desktops -------------------------------------------------------------------------------- Update Information:
- Still require python-gobject on fedora < 27 - Remove obsolete scriptlets - Update to 2.2.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1536005 - xpra-2.2.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1536005 --------------------------------------------------------------------------------
-
updates＠fedoraproject.org