The following Fedora 26 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ab43d1d240 tnef-1.4.14-1.fc26
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f997e46fa7
python-django-1.10.7-1.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01
python-XStatic-jquery-ui-1.12.0.1-2.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2f3096ba16
php-pear-CAS-1.3.5-1.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e8b639c286
dovecot-2.2.29.1-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2e94c7b518 yara-3.5.0-7.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8150618774 mupdf-1.10a-5.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0e64c4c186
tomcat-8.0.43-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e4c6ab648b pcre2-10.23-6.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-30e042c42a
mingw-gnutls-3.5.11-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-35e59a5ffb
libarchive-3.2.2-4.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
27
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90bcb067bf
fedora-release-26-0.6
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c74484d3bd libfm-1.2.5-3.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-525d9c8af2
thunderbird-52.0-2.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a95a89e4ba
livecd-tools-24.3-2.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-674c3c0e96
highlight-3.36-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-746673dc6e
menu-cache-1.0.2-2.D20170417git54ab9e4576.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e1e5e717c6
python3-3.6.1-4.fc26 python3-docs-3.6.1-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9986ec55b9 audit-2.7.6-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-93bf87b9a0
cairo-1.14.8-3.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8c49cfe1c3 koji-1.12.0-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-36c311deb3
nss-softokn-3.29.5-1.0.fc26 nss-util-3.29.5-1.0.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-368185ebf9
libbytesize-0.10-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-35e59a5ffb
libarchive-3.2.2-4.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1d33237871 ibus-1.5.15-7.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e3034559ef
garcon-0.6.0-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-de09f44c47
uboot-tools-2017.05-0.4.rc2.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4defa84b6d
kernel-4.11.0-0.rc7.git0.1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e4c6ab648b pcre2-10.23-6.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a10f04bea8
cyrus-sasl-2.1.26-32.fc26
The following builds have been pushed to Fedora 26 updates-testing
CGAL-4.9.1-1.fc26
audit-2.7.6-1.fc26
bcm283x-firmware-20170404-2.b038854.fc26
cairo-1.14.8-3.fc26
cyrus-sasl-2.1.26-32.fc26
gsequencer-0.7.135-1.fc26
ibus-1.5.15-7.fc26
koji-1.12.0-1.fc26
lcgdm-dav-0.18.1-3.fc26
libarchive-3.2.2-4.fc26
libbytesize-0.10-1.fc26
libmatroska-1.4.7-1.fc26
libtaskotron-0.4.20-1.fc26
luminance-hdr-2.5.0-3.fc26
nss-softokn-3.29.5-1.0.fc26
nss-util-3.29.5-1.0.fc26
opal-prd-5.5.0-2.fc26
perl-MetaCPAN-Client-2.011000-1.fc26
perl-Tree-Simple-1.31-1.fc26
python-pygatt-3.1.1-2.fc26
python3-3.6.1-4.fc26
python3-docs-3.6.1-1.fc26
rsyslog-8.26.0-1.fc26
yubico-piv-tool-1.4.3-1.fc26
Details about builds:
================================================================================
CGAL-4.9.1-1.fc26 (FEDORA-2017-36bb1a9d25)
Computational Geometry Algorithms Library
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1443518 - CGAL-4.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1443518
--------------------------------------------------------------------------------
================================================================================
audit-2.7.6-1.fc26 (FEDORA-2017-9986ec55b9)
User space tools for 2.6 kernel auditing
--------------------------------------------------------------------------------
Update Information:
This update continues adjusting the auparse_normalize mappings. It also has
robustness fixes against corrupted logs. It also fixes a bug where the enriched
event information was not being loaded in the auparse_feed API.
--------------------------------------------------------------------------------
================================================================================
bcm283x-firmware-20170404-2.b038854.fc26 (FEDORA-2017-f915d905a1)
Broadcom bcm283x firmware for the Raspberry Pi
--------------------------------------------------------------------------------
Update Information:
Add config-64.txt for default 64 bit options for the RPi3
--------------------------------------------------------------------------------
================================================================================
cairo-1.14.8-3.fc26 (FEDORA-2017-93bf87b9a0)
A 2D graphics library
--------------------------------------------------------------------------------
Update Information:
This update removes libtool .la files from cairo private directories.
--------------------------------------------------------------------------------
================================================================================
cyrus-sasl-2.1.26-32.fc26 (FEDORA-2017-a10f04bea8)
The Cyrus SASL library
--------------------------------------------------------------------------------
Update Information:
Allow cyrus sasl to get the ssf from GSSAPI
--------------------------------------------------------------------------------
================================================================================
gsequencer-0.7.135-1.fc26 (FEDORA-2017-51d26c53b7)
Advanced Gtk+ Sequencer audio processing engine
--------------------------------------------------------------------------------
Update Information:
provide patch to fix missing license and logo within about dialog
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1403417 - Review Request: gsequencer - audio processing engine
https://bugzilla.redhat.com/show_bug.cgi?id=1403417
--------------------------------------------------------------------------------
================================================================================
ibus-1.5.15-7.fc26 (FEDORA-2017-1d33237871)
Intelligent Input Bus for Linux OS
--------------------------------------------------------------------------------
Update Information:
Supported `ibus emoji` command on Wayland Changed modal dialog to modeless
dialog
--------------------------------------------------------------------------------
================================================================================
koji-1.12.0-1.fc26 (FEDORA-2017-8c49cfe1c3)
Build system tools
--------------------------------------------------------------------------------
Update Information:
update to upstream 1.12.0 remove rhel 5 conditionals as its no longer supported
in epel
--------------------------------------------------------------------------------
================================================================================
lcgdm-dav-0.18.1-3.fc26 (FEDORA-2017-858820a775)
HTTP/DAV front end to the DPM/LFC services
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
================================================================================
libarchive-3.2.2-4.fc26 (FEDORA-2017-35e59a5ffb)
A library for handling streaming archive formats
--------------------------------------------------------------------------------
Update Information:
fix two minor CVEs by backporting upstream commits (rhbz#1439705, rhbz#1417920)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1439705 - CVE-2016-10209 libarchive: NULL pointer dereference in
archive_wstring_append_from_mbs function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1439705
[ 2 ] Bug #1417920 - CVE-2017-5601 libarchive: Out of bounds read in
lha_read_file_header_1() function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1417920
--------------------------------------------------------------------------------
================================================================================
libbytesize-0.10-1.fc26 (FEDORA-2017-368185ebf9)
A library for working with sizes in bytes
--------------------------------------------------------------------------------
Update Information:
Fix installation without specifying --exec-prefix (martin)
--------------------------------------------------------------------------------
================================================================================
libmatroska-1.4.7-1.fc26 (FEDORA-2017-eebf622170)
Open audio/video container format library
--------------------------------------------------------------------------------
Update Information:
No incompatible ABI or API changes. New API: * KaxSemantic: add new elements
dealing with 360��/VR content and for language descriptors based on IETF BPC 47.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431305 - libmatroska-1.4.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1431305
--------------------------------------------------------------------------------
================================================================================
libtaskotron-0.4.20-1.fc26 (FEDORA-2017-da42cd69ce)
Taskotron Support Library
--------------------------------------------------------------------------------
Update Information:
Added better support for F26, secondary arches handling. Added module_build item
type, other small fixes
--------------------------------------------------------------------------------
================================================================================
luminance-hdr-2.5.0-3.fc26 (FEDORA-2017-4169097512)
A graphical tool for creating and tone-mapping HDR images
--------------------------------------------------------------------------------
Update Information:
Update to new release 2.5.0. This version brings two new tonemapping operators
within other enhancements and fixes.
--------------------------------------------------------------------------------
================================================================================
nss-softokn-3.29.5-1.0.fc26 (FEDORA-2017-36c311deb3)
Network Security Services Softoken Module
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.29.5. Note that, only nss-
util and nss-softokn have changed since the previous upstream release 3.29.3.
--------------------------------------------------------------------------------
================================================================================
nss-util-3.29.5-1.0.fc26 (FEDORA-2017-36c311deb3)
Network Security Services Utilities Library
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.29.5. Note that, only nss-
util and nss-softokn have changed since the previous upstream release 3.29.3.
--------------------------------------------------------------------------------
================================================================================
opal-prd-5.5.0-2.fc26 (FEDORA-2017-c37ef67eae)
OPAL Processor Recovery Diagnostics Daemon
--------------------------------------------------------------------------------
Update Information:
Fixed all build issues and updated to latest upstream version. -Vasant
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1414489 - [opal-prd] README file not installed so rpm generation fails
https://bugzilla.redhat.com/show_bug.cgi?id=1414489
--------------------------------------------------------------------------------
================================================================================
perl-MetaCPAN-Client-2.011000-1.fc26 (FEDORA-2017-aa7501cc7e)
A comprehensive, DWIM-featured client to the MetaCPAN API
--------------------------------------------------------------------------------
Update Information:
Current upstream maintenance release.
--------------------------------------------------------------------------------
================================================================================
perl-Tree-Simple-1.31-1.fc26 (FEDORA-2017-beaef95c6c)
Tree::Simple Perl module
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
================================================================================
python-pygatt-3.1.1-2.fc26 (FEDORA-2017-a402a85bc9)
A Python Module for Bluetooth LE Generic Attribute Profile
--------------------------------------------------------------------------------
Update Information:
Fix requirement
--------------------------------------------------------------------------------
================================================================================
python3-3.6.1-4.fc26 (FEDORA-2017-e1e5e717c6)
Version 3 of the Python programming language aka Python 3000
--------------------------------------------------------------------------------
Update Information:
Updating Python to a new subminor release 3.6.1 in F26 Enable link time
optimizations
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1426257 - windows executables in package
https://bugzilla.redhat.com/show_bug.cgi?id=1426257
[ 2 ] Bug #1435135 - ImportError:
/usr/lib64/python3.6/site-packages/rpm/_rpm.cpython-36m-x86_64-linux-gnu.so: undefined
symbol: PySlice_AdjustIndices
https://bugzilla.redhat.com/show_bug.cgi?id=1435135
[ 3 ] Bug #1438219 - Python 3.6 installs Makefile to an incorrect config dir
https://bugzilla.redhat.com/show_bug.cgi?id=1438219
[ 4 ] Bug #1179073 - python3-debug.i686 requires python3.i686 which is not multilib
clean
https://bugzilla.redhat.com/show_bug.cgi?id=1179073
--------------------------------------------------------------------------------
================================================================================
python3-docs-3.6.1-1.fc26 (FEDORA-2017-e1e5e717c6)
Documentation for the Python 3 programming language
--------------------------------------------------------------------------------
Update Information:
Updating Python to a new subminor release 3.6.1 in F26 Enable link time
optimizations
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1426257 - windows executables in package
https://bugzilla.redhat.com/show_bug.cgi?id=1426257
[ 2 ] Bug #1435135 - ImportError:
/usr/lib64/python3.6/site-packages/rpm/_rpm.cpython-36m-x86_64-linux-gnu.so: undefined
symbol: PySlice_AdjustIndices
https://bugzilla.redhat.com/show_bug.cgi?id=1435135
[ 3 ] Bug #1438219 - Python 3.6 installs Makefile to an incorrect config dir
https://bugzilla.redhat.com/show_bug.cgi?id=1438219
[ 4 ] Bug #1179073 - python3-debug.i686 requires python3.i686 which is not multilib
clean
https://bugzilla.redhat.com/show_bug.cgi?id=1179073
--------------------------------------------------------------------------------
================================================================================
rsyslog-8.26.0-1.fc26 (FEDORA-2017-3d0cb32183)
Enhanced system logging and kernel message trapping daemon
--------------------------------------------------------------------------------
Update Information:
rebase to 8.26.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1436113 - rsyslog documentation manual page horribly out-of-date
https://bugzilla.redhat.com/show_bug.cgi?id=1436113
[ 2 ] Bug #1438789 - rsyslog-8.26.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1438789
--------------------------------------------------------------------------------
================================================================================
yubico-piv-tool-1.4.3-1.fc26 (FEDORA-2017-2f0387fcbe)
Tool for interacting with the PIV applet on a YubiKey NEO
--------------------------------------------------------------------------------
Update Information:
New upstream release (#1443074)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1443074 - yubico-piv-tool-1.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1443074
--------------------------------------------------------------------------------