The following Fedora 26 Security updates need testing:
Age URL
162
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7
docker-distribution-2.6.2-1.git48294d9.fc26
54
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26
37
https://bodhi.fedoraproject.org/updates/FEDORA-2017-774e7863a4
mongodb-3.4.10-1.fc26
33
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7bac3ba7c3
qpid-cpp-1.37.0-1.fc26
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2962e58478
heimdal-7.5.0-1.fc26
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f7cbe22fd8
heketi-5.0.1-1.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d75a88f263
monit-5.25.1-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4603342f9a xrdp-0.9.5-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d1213cef30
mupdf-1.12.0-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-48569250d1
nasm-2.13.02-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-17ba1a2393 awstats-7.6-4.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c4e9207c31 php-7.1.13-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6ca3df84ad
sox-14.4.2.0-13.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6cd2e0e292
gifsicle-1.90-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-86281f085b
libfm-1.2.5-4.gitD20171230.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b3916cfc52
pcmanfm-1.2.5-3.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8bdedce282
perl-podlators-4.09-3.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-af9c086f87 pigz-2.4-1.fc26
The following builds have been pushed to Fedora 26 updates-testing
R-V8-1.5-2.fc26
R-littler-0.3.3-1.fc26
R-withr-2.1.1-1.fc26
atop-2.3.0-8.fc26
awstats-7.6-4.fc26
batctl-2017.4-1.fc26
bcc-0.5.0-1.fc26
bcm283x-firmware-20171201-1.9426e18.fc26
composer-1.6.1-1.fc26
ddccontrol-0.4.3-1.fc26
deja-dup-37.1-1.fc26
dianara-1.4.1-2.fc26
enchant2-2.2.1-1.fc26
evopop-gtk-theme-2.9.99-1.fc26
fedmsg-1.1.0-1.fc26
fotoxx-18.01.1-1.fc26
gala-0.3.0-0.git139.439f.2.fc26
getdns-1.3.0-1.fc26
gifsicle-1.90-1.fc26
glslang-3.1-0.3.20171028.git715c353.fc26
js-respond-1.4.2-1.fc26
librs232-1.0.3-3.20171229git21ecc3c.fc26
link-grammar-5.4.3-1.fc26
mellowplayer-3.2.0-1.fc26
mingw-enchant2-2.2.1-1.fc26
mozilla-https-everywhere-2017.12.6-2.fc26
netpbm-10.81.00-1.fc26
nim-0.17.2-5.fc26
ocaml-oasis-0.4.10-3.fc26
openttd-1.7.2-1.fc26
osmo-0.4.2-2.fc26
paper-icon-theme-1.4.0-1.fc26
perl-Test-ClassAPI-1.07-1.fc26
perl-Time-HiRes-1.9751-1.fc26
persepolis-3.0.1-2.fc26
php-7.1.13-1.fc26
php-composer-spdx-licenses-1.2.0-1.fc26
php-pecl-apcu-5.1.9-1.fc26
php-pecl-redis-3.1.6-1.fc26
python-htmlmin-0.1.12-1.git220b1d1.fc26
python-pep8-naming-0.4.1-4.fc26
python-pyinsane2-2.0.10-1.fc26
python-pypillowfight-0.2.2-2.fc26
rebloom-1.0.3-2.fc26
rejson-1.0.1-1.fc26
shyaml-0.5.0-3.fc26
sox-14.4.2.0-13.fc26
spirv-headers-1.2-0.1.20171015.git0610978.fc26
spirv-tools-2016.7-0.2.20171023.git5834719.fc26
timew-1.0.0-3.fc26
vim-go-1.16-1.fc26
vulkan-1.0.65.1-3.fc26
xmedcon-0.14.1-2.fc26
xxhash-0.6.4-1.fc26
Details about builds:
================================================================================
R-V8-1.5-2.fc26 (FEDORA-2018-fb7cc19fb3)
Embedded JavaScript Engine for R
--------------------------------------------------------------------------------
Update Information:
Initial package of V8 for R.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1530438 - Review Request: R-V8 - Embedded JavaScript Engine for R
https://bugzilla.redhat.com/show_bug.cgi?id=1530438
--------------------------------------------------------------------------------
================================================================================
R-littler-0.3.3-1.fc26 (FEDORA-2018-1f88296710)
littler: R at the Command-Line via 'r'
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
================================================================================
R-withr-2.1.1-1.fc26 (FEDORA-2018-a891d805eb)
Run Code 'With' Temporarily Modified Global State
--------------------------------------------------------------------------------
Update Information:
Update to latest release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1528101 - R-withr-2.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1528101
--------------------------------------------------------------------------------
================================================================================
atop-2.3.0-8.fc26 (FEDORA-2018-c33074e070)
An advanced interactive monitor to view the load on system and process level
--------------------------------------------------------------------------------
Update Information:
Multiple bugfixes.
--------------------------------------------------------------------------------
================================================================================
awstats-7.6-4.fc26 (FEDORA-2018-17ba1a2393)
Advanced Web Statistics
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-1000501
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1529349 - CVE-2017-1000501 awstat: Two path traversal issues in awstat.pl
https://bugzilla.redhat.com/show_bug.cgi?id=1529349
--------------------------------------------------------------------------------
================================================================================
batctl-2017.4-1.fc26 (FEDORA-2018-ff9efe6cb1)
B.A.T.M.A.N. advanced control and management tool
--------------------------------------------------------------------------------
Update Information:
Update to latest release
--------------------------------------------------------------------------------
================================================================================
bcc-0.5.0-1.fc26 (FEDORA-2018-f85fa3f855)
BPF Compiler Collection (BCC)
--------------------------------------------------------------------------------
Update Information:
Rebase to new released version
--------------------------------------------------------------------------------
================================================================================
bcm283x-firmware-20171201-1.9426e18.fc26 (FEDORA-2018-04afc12c97)
Broadcom bcm283x firmware for the Raspberry Pi
--------------------------------------------------------------------------------
Update Information:
Latest firmware
--------------------------------------------------------------------------------
================================================================================
composer-1.6.1-1.fc26 (FEDORA-2018-edbc70d0df)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**composer 1.6.1** - 2018-01-04 * Fixed upgrade regression due to some
autoloader cleanups * Fixed some overly loose version constraints ----
**composer 1.6.0** - 2018-01-04 * Added support for SPDX license identifiers
v3.0, deprecates GPL/LGPL/AGPL identifiers, which should now have a `-only` or
`-or-later` suffix added. * Added support for COMPOSER_MEMORY_LIMIT env var to
make Composer set the PHP memory limit explicitly * Added support for simple
strings for the `bin` * Fixed `check-platform-reqs` bug in version checking
--- **composer 1.6.0RC** - 2017-12-19 * Improved performance of installs
and updates from git clones when checking out known commits * Added `check-
platform-reqs` command that checks that your PHP and extensions versions match
the platform requirements of the installed packages * Added `--with-all-
dependencies` to the `update` and `require` commands which updates all
dependencies of the listed packages, including those that are direct root
requirements * Added `scripts-descriptions` key to composer.json to customize
the description and document your custom commands * Added support for the
uppercase NO_PROXY env var * Added support for
COMPOSER_DEFAULT_{AUTHOR,LICENSE,EMAIL,VENDOR} env vars to pre-populate init
command values * Added support for local fossil repositories * Added
suggestions for alternative spellings when entering packages in `init` and
`require` commands and nothing can be found * Fixed installed.json data to be
sorted alphabetically by package name * Fixed compatibility with Symfony 4.x
components that Composer uses --- **spdx-licenses 1.2.0** - 2018-01-03 *
Added: deprecation status for all licenses and a
`SpdxLicenses::isDeprecatedByIdentifier` method. * Changed: updated licenses
list to SPDX 3.0.
--------------------------------------------------------------------------------
================================================================================
ddccontrol-0.4.3-1.fc26 (FEDORA-2018-a5494b2ff2)
Control your monitor by software using the DDC/CI protocol
--------------------------------------------------------------------------------
Update Information:
This is new version of ddccontrol.
--------------------------------------------------------------------------------
================================================================================
deja-dup-37.1-1.fc26 (FEDORA-2018-bd2e1efa9d)
Simple backup tool and frontend for duplicity
--------------------------------------------------------------------------------
Update Information:
37.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1530994 - deja-dup-37.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1530994
--------------------------------------------------------------------------------
================================================================================
dianara-1.4.1-2.fc26 (FEDORA-2018-6958f95af1)
Pump.io application for the desktop
--------------------------------------------------------------------------------
Update Information:
- New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1529936 - Review Request: dianara - Pump.io application for the desktop
https://bugzilla.redhat.com/show_bug.cgi?id=1529936
--------------------------------------------------------------------------------
================================================================================
enchant2-2.2.1-1.fc26 (FEDORA-2018-c3270042a4)
An Enchanting Spell Checking Library
--------------------------------------------------------------------------------
Update Information:
Update to version 2.2.1, see
https://github.com/AbiWord/enchant/blob/master/NEWS
for details.
--------------------------------------------------------------------------------
================================================================================
evopop-gtk-theme-2.9.99-1.fc26 (FEDORA-2018-c557dea889)
Modern Desktop Theme Suite
--------------------------------------------------------------------------------
Update Information:
Bump 2.9.99 version
--------------------------------------------------------------------------------
================================================================================
fedmsg-1.1.0-1.fc26 (FEDORA-2018-e07a9865ae)
Tools for Fedora Infrastructure real-time messaging
--------------------------------------------------------------------------------
Update Information:
# v1.1.0 ## Deprecations - Using URLs for the CA and CRL settings
(`ca_cert_location` and `crl_location` respectively) is now deprecated and
will be removed in a future release. Please use filesystem paths instead.
## Features - Allow the CA and CRL configuration options to be file paths
([\#484](https://github.com/fedora-infra/fedmsg/pull/484)). - All
configuration settings now have defaults and validators
([\#488](https://github.com/fedora-infra/fedmsg/pull/488)). - Strengthen
"legacy protection" in fedmsg.meta by catching KeyErrors
([\#493](https://github.com/fedora-infra/fedmsg/pull/493)). ## Bug fixes -
Remove the duplicate dependency on `cryptography` from the main install
requires ([\#486](https://github.com/fedora-infra/fedmsg/pull/486)). -
Adjust the x509 signing API to return text instead of bytes
([\#495](https://github.com/fedora-infra/fedmsg/issues/495)). ## Development
improvements - Alter how the tests determine if cryptography is available to
work better with old versions of pyOpenSSL ([\#482](https://github.com
/fedora-infra/fedmsg/pull/482)).
--------------------------------------------------------------------------------
================================================================================
fotoxx-18.01.1-1.fc26 (FEDORA-2018-03b85d3f1b)
Photo editor
--------------------------------------------------------------------------------
Update Information:
18.01.1 ---- 18.01
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531000 - fotoxx-18.01.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531000
[ 2 ] Bug #1530007 - fotoxx-18.01 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1530007
--------------------------------------------------------------------------------
================================================================================
gala-0.3.0-0.git139.439f.2.fc26 (FEDORA-2018-3ab33d0e25)
Gala window manager
--------------------------------------------------------------------------------
Update Information:
Add a patch so the default window button layout matches the default on fedora.
---- Bump to commit 439fdf6.
--------------------------------------------------------------------------------
================================================================================
getdns-1.3.0-1.fc26 (FEDORA-2018-5bede82552)
Modern asynchronous API to the DNS
--------------------------------------------------------------------------------
Update Information:
Updated to 1.3.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1462043 - getdns-1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1462043
--------------------------------------------------------------------------------
================================================================================
gifsicle-1.90-1.fc26 (FEDORA-2018-6cd2e0e292)
Powerful program for manipulating GIF images and animations
--------------------------------------------------------------------------------
Update Information:
Update to 1.90 - Fixes CVE-2017-1000421
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1530540 - CVE-2017-1000421 gifsicle: use-after-free in the read_gif function
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1530540
--------------------------------------------------------------------------------
================================================================================
glslang-3.1-0.3.20171028.git715c353.fc26 (FEDORA-2018-f4b4da3e53)
OpenGL and OpenGL ES shader front end and validator
--------------------------------------------------------------------------------
Update Information:
Vulkan update ---- Update
--------------------------------------------------------------------------------
================================================================================
js-respond-1.4.2-1.fc26 (FEDORA-2018-45b63ae2ab)
A fast & lightweight polyfill for min/max-width CSS3 Media Queries
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1525906 - Review Request: js-respond - A fast & lightweight polyfill for
min/max-width CSS3 Media Queries
https://bugzilla.redhat.com/show_bug.cgi?id=1525906
--------------------------------------------------------------------------------
================================================================================
librs232-1.0.3-3.20171229git21ecc3c.fc26 (FEDORA-2018-a0899d68d2)
Library for serial communications over RS-232 with Lua bindings
--------------------------------------------------------------------------------
Update Information:
librs232 is a multi-platform library that provides support for communicating
over serial ports (e.g. RS-232). It also provides Lua bindings.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1528612 - Review Request: librs232 - Library for serial communications over
RS-232 with Lua bindings
https://bugzilla.redhat.com/show_bug.cgi?id=1528612
--------------------------------------------------------------------------------
================================================================================
link-grammar-5.4.3-1.fc26 (FEDORA-2018-d7dc3815b5)
A full-service natural language dependency parser
--------------------------------------------------------------------------------
Update Information:
5.4.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531013 - link-grammar-5.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531013
--------------------------------------------------------------------------------
================================================================================
mellowplayer-3.2.0-1.fc26 (FEDORA-2018-5530a851b4)
Cloud music integration for your desktop
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.0-1
--------------------------------------------------------------------------------
================================================================================
mingw-enchant2-2.2.1-1.fc26 (FEDORA-2018-c3270042a4)
MinGW Windows enchant2 library
--------------------------------------------------------------------------------
Update Information:
Update to version 2.2.1, see
https://github.com/AbiWord/enchant/blob/master/NEWS
for details.
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-2017.12.6-2.fc26 (FEDORA-2018-d558d732c2)
HTTPS enforcement extension for Mozilla Firefox
--------------------------------------------------------------------------------
Update Information:
- Remove some unnecessary files - More ruleset fixes
--------------------------------------------------------------------------------
================================================================================
netpbm-10.81.00-1.fc26 (FEDORA-2018-e6e13349ac)
A library for handling different graphics file formats
--------------------------------------------------------------------------------
Update Information:
New version of netpbm 10.81.00. sldtoppm: -lib and -dir don't work - always
says slide not found. Broken in Netpbm 10.63 (June 2013). sldtoppm: fix bug:
says AutoCAD slide file isn't an AutoCAD slide file. Broken after Netpbm 10.26
(January 2005), but no later than 10.35 (August 2006). sldtoppm: fix bug: wild
memory accesses, weird messages when invalid input file has unterminated
strings.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1529904 - netpbm-10.81.00 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1529904
--------------------------------------------------------------------------------
================================================================================
nim-0.17.2-5.fc26 (FEDORA-2018-002849747c)
Statically typed, imperative programming language
--------------------------------------------------------------------------------
Update Information:
Updated runtime dependencies
--------------------------------------------------------------------------------
================================================================================
ocaml-oasis-0.4.10-3.fc26 (FEDORA-2018-afda83891b)
Tooling for building OCaml libraries and applications
--------------------------------------------------------------------------------
Update Information:
Tooling for building OCaml libraries and applications
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1513290 - Review Request: ocaml-oasis - Tooling for building OCaml libraries
and applications
https://bugzilla.redhat.com/show_bug.cgi?id=1513290
--------------------------------------------------------------------------------
================================================================================
openttd-1.7.2-1.fc26 (FEDORA-2018-3fb2727baf)
Transport system simulation game
--------------------------------------------------------------------------------
Update Information:
Minor bugfixes
--------------------------------------------------------------------------------
================================================================================
osmo-0.4.2-2.fc26 (FEDORA-2018-7e0514c1c8)
Personal organizer
--------------------------------------------------------------------------------
Update Information:
libnotify turned on again. Appears to work with webgtk4. Not sure if anything
else breaks. ---- update to 0.4.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526838 - Osmo needs libnotify support
https://bugzilla.redhat.com/show_bug.cgi?id=1526838
[ 2 ] Bug #1515010 - osmo-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1515010
--------------------------------------------------------------------------------
================================================================================
paper-icon-theme-1.4.0-1.fc26 (FEDORA-2018-3cf5fe9165)
Modern freedesktop icon theme
--------------------------------------------------------------------------------
Update Information:
* Initial rpm release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1529758 - Review Request: paper-icon-theme - Modern freedesktop icon theme
https://bugzilla.redhat.com/show_bug.cgi?id=1529758
--------------------------------------------------------------------------------
================================================================================
perl-Test-ClassAPI-1.07-1.fc26 (FEDORA-2018-4a62974e3e)
Provides basic first-pass API testing for large class trees
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
================================================================================
perl-Time-HiRes-1.9751-1.fc26 (FEDORA-2018-2e724cf431)
High resolution alarm, sleep, gettimeofday, interval timers
--------------------------------------------------------------------------------
Update Information:
This release fixes list of exported symbols. It also improves tests. ---- This
release corrects source metadata. We deliver it only to provide up-to-date
version string.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1530928 - perl-Time-HiRes-1.9751 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1530928
[ 2 ] Bug #1528842 - perl-Time-HiRes-1.9750 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1528842
--------------------------------------------------------------------------------
================================================================================
persepolis-3.0.1-2.fc26 (FEDORA-2018-50c7ab5902)
A powerful download manager powered by aria2
--------------------------------------------------------------------------------
Update Information:
Initial release of Persepolis download manager
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1529891 - Review Request: persepolis - A powerful download manager powered by
aria2
https://bugzilla.redhat.com/show_bug.cgi?id=1529891
--------------------------------------------------------------------------------
================================================================================
php-7.1.13-1.fc26 (FEDORA-2018-c4e9207c31)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
**PHP version 7.1.13** (04 Jan 2018) **Core:** * Fixed bug php#75573
(Segmentation fault in 7.1.12 and 7.0.26). (Laruence) * Fixed bug php#75384 (PHP
seems incompatible with OneDrive files on demand). (Anatol) * Fixed bug
php#74862 (Unable to clone instance when private __clone defined). (Daniel
Ciochiu) * Fixed bug php#75074 (php-process crash when is_file() is used with
strings longer 260 chars). (Anatol) **CLI Server:** * Fixed bug php#60471
(Random "Invalid request (unexpected EOF)" using a router script). (SammyK) *
Fixed bug php#73830 (Directory does not exist). (Anatol) **FPM:** * Fixed bug
php#64938 (libxml_disable_entity_loader setting is shared between requests).
(Remi) **Opcache:** * Fixed bug php#75608 ("Narrowing occurred during type
inference" error). (Laruence, Dmitry) * Fixed bug php#75579 (Interned strings
buffer overflow may cause crash). (Dmitry) * Fixed bug php#75570 ("Narrowing
occurred during type inference" error). (Dmitry) **PCRE:** * Fixed bug
php#74183 (preg_last_error not returning error code after error). (Andrew
Nester) **Phar:** * Fixed bug php#74782 (remove file name from output to avoid
XSS). (stas) **Standard:** * Fixed bug php#75511 (fread not free unused
buffer). (Laruence) * Fixed bug php#75514 (mt_rand returns value outside
[$min,$max]+ on 32-bit) (Remi) * Fixed bug php#75535 (Inappropriately parsing
HTTP response leads to PHP segment fault). (Nikita) * Fixed bug php#75409
(accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing).
(sarciszewski) * Fixed bug php#73124 (php_ini_scanned_files() not reporting
correctly). (John Stevenson) * Fixed bug php#75574 (putenv does not work
properly if parameter contains non-ASCII unicode character). (Anatol) **Zip:**
* Fixed bug php#75540 (Segfault with libzip 1.3.1). (Remi)
--------------------------------------------------------------------------------
================================================================================
php-composer-spdx-licenses-1.2.0-1.fc26 (FEDORA-2018-edbc70d0df)
SPDX licenses list and validation library
--------------------------------------------------------------------------------
Update Information:
**composer 1.6.1** - 2018-01-04 * Fixed upgrade regression due to some
autoloader cleanups * Fixed some overly loose version constraints ----
**composer 1.6.0** - 2018-01-04 * Added support for SPDX license identifiers
v3.0, deprecates GPL/LGPL/AGPL identifiers, which should now have a `-only` or
`-or-later` suffix added. * Added support for COMPOSER_MEMORY_LIMIT env var to
make Composer set the PHP memory limit explicitly * Added support for simple
strings for the `bin` * Fixed `check-platform-reqs` bug in version checking
--- **composer 1.6.0RC** - 2017-12-19 * Improved performance of installs
and updates from git clones when checking out known commits * Added `check-
platform-reqs` command that checks that your PHP and extensions versions match
the platform requirements of the installed packages * Added `--with-all-
dependencies` to the `update` and `require` commands which updates all
dependencies of the listed packages, including those that are direct root
requirements * Added `scripts-descriptions` key to composer.json to customize
the description and document your custom commands * Added support for the
uppercase NO_PROXY env var * Added support for
COMPOSER_DEFAULT_{AUTHOR,LICENSE,EMAIL,VENDOR} env vars to pre-populate init
command values * Added support for local fossil repositories * Added
suggestions for alternative spellings when entering packages in `init` and
`require` commands and nothing can be found * Fixed installed.json data to be
sorted alphabetically by package name * Fixed compatibility with Symfony 4.x
components that Composer uses --- **spdx-licenses 1.2.0** - 2018-01-03 *
Added: deprecation status for all licenses and a
`SpdxLicenses::isDeprecatedByIdentifier` method. * Changed: updated licenses
list to SPDX 3.0.
--------------------------------------------------------------------------------
================================================================================
php-pecl-apcu-5.1.9-1.fc26 (FEDORA-2018-f9b345ab4d)
APC User Cache
--------------------------------------------------------------------------------
Update Information:
**Version 5.1.9** - fix gh#234 mmap disabled when configure is called with
--enable-apcu-mmap - fix gh#226 Warning: apcu_fetch(): apc_fetch() expects a
string or array of strings. - mitigate gh#223 Fatal error when starting php on
windows - add support for PCRE2 in 7.3 - use row formatting for information in
phpinfo() tables - set IS_STR_PERSISTENT so refcounting failures are reported by
-DRC_DEBUG=1 - fix gh#266 refcounting errors in APCIterator
--------------------------------------------------------------------------------
================================================================================
php-pecl-redis-3.1.6-1.fc26 (FEDORA-2018-5b0de48fc9)
Extension for communicating with the Redis key-value store
--------------------------------------------------------------------------------
Update Information:
Release notes **phpredis 3.1.6** This release conains only fix of RedisArray
distributor hashing function which was broken in 3.1.4. Huge thanks to
rexchen123
--------------------------------------------------------------------------------
================================================================================
python-htmlmin-0.1.12-1.git220b1d1.fc26 (FEDORA-2018-101018c434)
HTML Minifier
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.12
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1529798 - python-htmlmin-0.1.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1529798
--------------------------------------------------------------------------------
================================================================================
python-pep8-naming-0.4.1-4.fc26 (FEDORA-2018-c15d7786a8)
Check PEP-8 naming conventions, a plugin for flake8
--------------------------------------------------------------------------------
Update Information:
Initial package of pep8-naming for Python.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1506419 - Review Request: python-pep8-naming - Check PEP-8 naming
conventions, a plugin for flake8
https://bugzilla.redhat.com/show_bug.cgi?id=1506419
--------------------------------------------------------------------------------
================================================================================
python-pyinsane2-2.0.10-1.fc26 (FEDORA-2018-7a7f1746e8)
Python library to access and use image scanners (Linux/Windows/etc)
--------------------------------------------------------------------------------
Update Information:
Initial package of pyinsane2 for Python.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1529230 - Review Request: python-pyinsane2 - Python library to access and use
image scanners (Linux/Windows/etc)
https://bugzilla.redhat.com/show_bug.cgi?id=1529230
--------------------------------------------------------------------------------
================================================================================
python-pypillowfight-0.2.2-2.fc26 (FEDORA-2018-afe1741a0f)
Various image processing algorithms
--------------------------------------------------------------------------------
Update Information:
Initial package of pypillowfight for Python.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1529785 - Review Request: python-pypillowfight - Various image processing
algorithms
https://bugzilla.redhat.com/show_bug.cgi?id=1529785
--------------------------------------------------------------------------------
================================================================================
rebloom-1.0.3-2.fc26 (FEDORA-2018-b4fe4efe6b)
Bloom Filter Module for Redis
--------------------------------------------------------------------------------
Update Information:
Remove python installation assumptions.
--------------------------------------------------------------------------------
================================================================================
rejson-1.0.1-1.fc26 (FEDORA-2018-9510ef8faf)
JSON data type for Redis
--------------------------------------------------------------------------------
Update Information:
Remove python installation assumptions.
--------------------------------------------------------------------------------
================================================================================
shyaml-0.5.0-3.fc26 (FEDORA-2018-911d1e59f0)
YAML for command line
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1529784 - Review Request: shyaml - YAML for command line
https://bugzilla.redhat.com/show_bug.cgi?id=1529784
--------------------------------------------------------------------------------
================================================================================
sox-14.4.2.0-13.fc26 (FEDORA-2018-6ca3df84ad)
A general purpose sound file conversion tool
--------------------------------------------------------------------------------
Update Information:
This bugfix resolves **CVE-2017-15371**
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1500570 - It is a reachable assertion abort in function sox_append_comment(in
formats.c:227) that will lead to denial of service attack
https://bugzilla.redhat.com/show_bug.cgi?id=1500570
--------------------------------------------------------------------------------
================================================================================
spirv-headers-1.2-0.1.20171015.git0610978.fc26 (FEDORA-2018-f4b4da3e53)
Header files from the SPIR-V registry
--------------------------------------------------------------------------------
Update Information:
Vulkan update ---- Update
--------------------------------------------------------------------------------
================================================================================
spirv-tools-2016.7-0.2.20171023.git5834719.fc26 (FEDORA-2018-f4b4da3e53)
API and commands for processing SPIR-V modules
--------------------------------------------------------------------------------
Update Information:
Vulkan update ---- Update
--------------------------------------------------------------------------------
================================================================================
timew-1.0.0-3.fc26 (FEDORA-2018-0fe0962417)
Timewarrior tracks and reports time
--------------------------------------------------------------------------------
Update Information:
New package!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1402416 - Review Request: timew - Timewarrior tracks and reports time
https://bugzilla.redhat.com/show_bug.cgi?id=1402416
--------------------------------------------------------------------------------
================================================================================
vim-go-1.16-1.fc26 (FEDORA-2018-b7b5c2c794)
Go development plugin for Vim
--------------------------------------------------------------------------------
Update Information:
New upstream version **1.16** - [
changelog](https://github.com/fatih/vim-
go/blob/master/CHANGELOG.md#116---december-29-2017)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1529822 - vim-go-1.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1529822
--------------------------------------------------------------------------------
================================================================================
vulkan-1.0.65.1-3.fc26 (FEDORA-2018-f4b4da3e53)
Vulkan loader and validation layers
--------------------------------------------------------------------------------
Update Information:
Vulkan update ---- Update
--------------------------------------------------------------------------------
================================================================================
xmedcon-0.14.1-2.fc26 (FEDORA-2018-0fcced9e0d)
A medical image conversion utility and library
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1299911 - update 0.14.1
https://bugzilla.redhat.com/show_bug.cgi?id=1299911
--------------------------------------------------------------------------------
================================================================================
xxhash-0.6.4-1.fc26 (FEDORA-2018-2e4e6d8c21)
Extremely fast hash algorithm
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------