The following Fedora 26 Security updates need testing:
Age URL
167
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7
docker-distribution-2.6.2-1.git48294d9.fc26
59
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26
42
https://bodhi.fedoraproject.org/updates/FEDORA-2017-774e7863a4
mongodb-3.4.10-1.fc26
38
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7bac3ba7c3
qpid-cpp-1.37.0-1.fc26
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d75a88f263
monit-5.25.1-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-17ba1a2393 awstats-7.6-4.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c4e9207c31 php-7.1.13-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6ca3df84ad
sox-14.4.2.0-13.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6cd2e0e292
gifsicle-1.90-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5aa21dc9a3
qtpass-1.2.1-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ccef1ced42 gimp-2.8.22-3.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc08435961 irssi-1.0.6-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-909707fc68
python-bottle-0.12.13-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6b319763ab
microcode_ctl-2.1-20.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e1539d9bc6
icecat-52.5.3-2.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0d6a80f496
mariadb-10.1.30-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7349a7723e
poco-1.7.8p3-3.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-86281f085b
libfm-1.2.5-4.gitD20171230.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b3916cfc52
pcmanfm-1.2.5-3.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8bdedce282
perl-podlators-4.09-3.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-af9c086f87 pigz-2.4-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c2eed6bd99
iproute-4.14.1-4.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-35ec68d59d
publicsuffix-list-20171228-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-240b9e54f9
glusterfs-3.10.9-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-403c7c5351
gtk3-3.22.21-3.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-66604dd3d7
python-requests-kerberos-0.12.0-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2ae4888a92
perl-Socket-2.025-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b3f20ecd11 kmod-25-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4818a0a3fb
lxpanel-0.9.3-2.D20180109git2ddf8dfc.fc26
The following builds have been pushed to Fedora 26 updates-testing
R-RInside-0.2.14-5.fc26
argbash-2.5.1-1.fc26
axmail-2.8-1.fc26
concurrentunit-0.4.3-1.fc26
container-selinux-2.40-1.fc26
gammu-1.39.0-1.fc26
golang-github-cznic-fileutil-0-0.4.git6a051e7.fc26
golang-github-cznic-mathutil-0-0.6.gitc90ba19.fc26
golang-github-klauspost-reedsolomon-1.6-3.20171219.git0b30fa7.fc26
golang-github-thejerf-suture-2.0.1-2.20180103.gitbb8f537.fc26
icecat-52.5.3-2.fc26
kompose-1.7.0-1.fc26
lizardfs-3.12.0-1.fc26
mariadb-10.1.30-1.fc26
microcode_ctl-2.1-20.fc26
nodejs-grunt-contrib-copy-1.0.0-2.fc26
ocaml-4.04.0-11.fc26
perl-HTML-Lint-2.30-1.fc26
perl-Mojolicious-Plugin-I18N-1.6-1.fc26
perl-Socket-2.025-1.fc26
php-pecl-pq-2.1.3-1.fc26
poco-1.7.8p3-3.fc26
python-bottle-0.12.13-1.fc26
python-cli-helpers-1.0.1-2.fc26
python-gammu-2.11-2.fc26
python-pep8-1.6.2-10.fc26
recoll-1.23.7-1.fc26
rubygem-ruby-libvirt-0.7.0-4.fc26
wammu-0.44-3.fc26
Details about builds:
================================================================================
R-RInside-0.2.14-5.fc26 (FEDORA-2018-343f5a182e)
C++ Classes to Embed R in C++ Applications
--------------------------------------------------------------------------------
Update Information:
Rebuild with updated R-Rcpp.
--------------------------------------------------------------------------------
================================================================================
argbash-2.5.1-1.fc26 (FEDORA-2018-1bc7b58d06)
Bash argument parsing code generator
--------------------------------------------------------------------------------
Update Information:
Update to argbash 2.5.1
https://github.com/matejak/argbash/releases/tag/2.5.1
--------------------------------------------------------------------------------
================================================================================
axmail-2.8-1.fc26 (FEDORA-2018-6edf75b522)
UROnode addon - an SMTP mailbox
--------------------------------------------------------------------------------
Update Information:
This is new version of axmail
--------------------------------------------------------------------------------
================================================================================
concurrentunit-0.4.3-1.fc26 (FEDORA-2018-2b8f16f345)
Toolkit for testing multi-threaded and asynchronous applications
--------------------------------------------------------------------------------
Update Information:
0.4.3 Bug Fixes Fixed issue #17 - ConcurrentUnit.await(long, TimeUnit) not
passing through TimeUnit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493791 - concurrentunit-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493791
--------------------------------------------------------------------------------
================================================================================
container-selinux-2.40-1.fc26 (FEDORA-2018-827888cfdd)
SELinux policies for container runtimes
--------------------------------------------------------------------------------
Update Information:
Fixes for typebounds ---- Fixes bounds check problems on systems with
unconfined domain disabled. ---- Fix problem with bounds checker.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531858 - On fully upgraded F27, can't install container-selinux
https://bugzilla.redhat.com/show_bug.cgi?id=1531858
[ 2 ] Bug #1514795 - SELinux is preventing systemd from 'create' accesses on the
unix_stream_socket Unknown.
https://bugzilla.redhat.com/show_bug.cgi?id=1514795
--------------------------------------------------------------------------------
================================================================================
gammu-1.39.0-1.fc26 (FEDORA-2018-d66730c9d2)
Command Line utility to work with mobile phones
--------------------------------------------------------------------------------
Update Information:
Update gammu, python-gammu and wammu ---- update for gammu and python-gammu
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531832 - wammu-0.44 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531832
[ 2 ] Bug #1510442 - python-gammu-2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1510442
[ 3 ] Bug #1531828 - python-gammu-2.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531828
[ 4 ] Bug #1504333 - gammu-1.38.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504333
[ 5 ] Bug #1531519 - gammu-1.39.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531519
--------------------------------------------------------------------------------
================================================================================
golang-github-cznic-fileutil-0-0.4.git6a051e7.fc26 (FEDORA-2018-cfb39218f4)
File utility functions for Go
--------------------------------------------------------------------------------
Update Information:
Bump to commit 6a051e7.
--------------------------------------------------------------------------------
================================================================================
golang-github-cznic-mathutil-0-0.6.gitc90ba19.fc26 (FEDORA-2018-8f2093aa46)
Supplemental utilities for Go's rand and math packages
--------------------------------------------------------------------------------
Update Information:
Bump to commit c90ba19.
--------------------------------------------------------------------------------
================================================================================
golang-github-klauspost-reedsolomon-1.6-3.20171219.git0b30fa7.fc26
(FEDORA-2018-c84e07b6c7)
Reed-Solomon Erasure Coding in Go
--------------------------------------------------------------------------------
Update Information:
Bump to commit 0b30fa7.
--------------------------------------------------------------------------------
================================================================================
golang-github-thejerf-suture-2.0.1-2.20180103.gitbb8f537.fc26 (FEDORA-2018-2e11b04a10)
Supervisor trees for Go
--------------------------------------------------------------------------------
Update Information:
Bump to commit bb8f537.
--------------------------------------------------------------------------------
================================================================================
icecat-52.5.3-2.fc26 (FEDORA-2018-e1539d9bc6)
GNU version of Firefox browser
--------------------------------------------------------------------------------
Update Information:
- Update to 52.5.3 - Patched for mozilla bug-1427870 (spectre mitigation)
--------------------------------------------------------------------------------
================================================================================
kompose-1.7.0-1.fc26 (FEDORA-2018-2fea51c649)
Tool to move from 'docker-compose' to Kubernetes
--------------------------------------------------------------------------------
Update Information:
Update source to v1.7.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1478152 - kompose tries to install docker
https://bugzilla.redhat.com/show_bug.cgi?id=1478152
[ 2 ] Bug #1486973 - kompose-v1.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1486973
--------------------------------------------------------------------------------
================================================================================
lizardfs-3.12.0-1.fc26 (FEDORA-2018-ec36123fb0)
Distributed, fault tolerant file system
--------------------------------------------------------------------------------
Update Information:
An update that adds support for rich (NFS4) ACLs and advanced chunkserver
options. For the smoothest upgrade experience, first upgrade your metadata
shadows and loggers, then the metadata master, then the chunkservers, and
finally the clients. See the notes at
https://docs.lizardfs.com/adminguide/upgrading.html for more details (the 3.10
upgrade notes apply if 3.12 are still missing).
--------------------------------------------------------------------------------
================================================================================
mariadb-10.1.30-1.fc26 (FEDORA-2018-0d6a80f496)
A community developed branch of MySQL
--------------------------------------------------------------------------------
Update Information:
**Update to 10.1.30** sysusers and tmpfiles added by upstream **Release
notes:**
https://mariadb.com/kb/en/library/mariadb-10130-release-notes/
**CVE's fixed:** CVE-2017-15365
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524235 - CVE-2017-15365 mariadb: Replication in sql/event_data_objects.cc
occurs before ACL checks [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1524235
--------------------------------------------------------------------------------
================================================================================
microcode_ctl-2.1-20.fc26 (FEDORA-2018-6b319763ab)
Tool to transform and deploy CPU microcode update for x86
--------------------------------------------------------------------------------
Update Information:
Update to upstream 2.1-15. 20180108. Includes fix for Spectre.
--------------------------------------------------------------------------------
================================================================================
nodejs-grunt-contrib-copy-1.0.0-2.fc26 (FEDORA-2018-f803933db7)
Copy files and folders
--------------------------------------------------------------------------------
Update Information:
Initial build for f26 (after unretirement)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1530733 - nodejs-grunt-contrib copy not available for F26, EL7 and EL6
https://bugzilla.redhat.com/show_bug.cgi?id=1530733
[ 2 ] Bug #1256162 - nodejs-grunt-contrib-copy-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1256162
--------------------------------------------------------------------------------
================================================================================
ocaml-4.04.0-11.fc26 (FEDORA-2018-932548462e)
OCaml compiler and programming environment
--------------------------------------------------------------------------------
Update Information:
Drop non-free documentation (RHBZ#1530647).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1530647 - ocaml-docs is non-free
https://bugzilla.redhat.com/show_bug.cgi?id=1530647
--------------------------------------------------------------------------------
================================================================================
perl-HTML-Lint-2.30-1.fc26 (FEDORA-2018-05baa407d6)
HTML::Lint Perl module
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
================================================================================
perl-Mojolicious-Plugin-I18N-1.6-1.fc26 (FEDORA-2018-8ecf44c366)
Internationalization Plugin for Mojolicious
--------------------------------------------------------------------------------
Update Information:
Specfile autogenerated by cpanspec 1.78.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1520582 - Review Request: perl-Mojolicious-Plugin-I18N - Internationalization
Plugin for Mojolicious
https://bugzilla.redhat.com/show_bug.cgi?id=1520582
--------------------------------------------------------------------------------
================================================================================
perl-Socket-2.025-1.fc26 (FEDORA-2018-2ae4888a92)
Networking constants and support functions
--------------------------------------------------------------------------------
Update Information:
This release adds support for ICMPv6 protocol. It also corrects tests to report
errors to error output.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532914 - perl-Socket-2.025 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532914
--------------------------------------------------------------------------------
================================================================================
php-pecl-pq-2.1.3-1.fc26 (FEDORA-2018-dfb68497ba)
PostgreSQL client library (libpq) binding
--------------------------------------------------------------------------------
Update Information:
**Version 2.1.3** - Release notes * Fix gh-issue #27: crash in
pq\Connection::escapeBytea() * Update static pq\Types with PostgreSQL-10 types
--------------------------------------------------------------------------------
================================================================================
poco-1.7.8p3-3.fc26 (FEDORA-2018-7349a7723e)
C++ class libraries for network-centric applications
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-1000472
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532129 - poco: Improper path restriction in ZipCommon.cpp allows for
arbitrary files to be written
https://bugzilla.redhat.com/show_bug.cgi?id=1532129
--------------------------------------------------------------------------------
================================================================================
python-bottle-0.12.13-1.fc26 (FEDORA-2018-909707fc68)
Fast and simple WSGI-framework for small web-applications
--------------------------------------------------------------------------------
Update Information:
Update to 0.12.13
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1405417 - CVE-2016-9964 python-bottle: redirect() doesn't filter
"\r\n" which allows for CRLF attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1405417
--------------------------------------------------------------------------------
================================================================================
python-cli-helpers-1.0.1-2.fc26 (FEDORA-2018-e561335e1c)
Python helpers for common CLI tasks
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release cli_helpers 1.0.1.
--------------------------------------------------------------------------------
================================================================================
python-gammu-2.11-2.fc26 (FEDORA-2018-d66730c9d2)
Python bindings for Gammu
--------------------------------------------------------------------------------
Update Information:
Update gammu, python-gammu and wammu ---- update for gammu and python-gammu
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531832 - wammu-0.44 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531832
[ 2 ] Bug #1510442 - python-gammu-2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1510442
[ 3 ] Bug #1531828 - python-gammu-2.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531828
[ 4 ] Bug #1504333 - gammu-1.38.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504333
[ 5 ] Bug #1531519 - gammu-1.39.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531519
--------------------------------------------------------------------------------
================================================================================
python-pep8-1.6.2-10.fc26 (FEDORA-2018-2bb915561a)
Python style guide checker
--------------------------------------------------------------------------------
Update Information:
Create the python2-pep8 RPM, rather than python-pep8
--------------------------------------------------------------------------------
================================================================================
recoll-1.23.7-1.fc26 (FEDORA-2018-5ced4e82a0)
Desktop full text search tool with Qt GUI
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release recoll 1.23.7.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523906 - recoll-1.23.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1523906
--------------------------------------------------------------------------------
================================================================================
rubygem-ruby-libvirt-0.7.0-4.fc26 (FEDORA-2018-20d436dd6b)
Ruby bindings for LIBVIRT
--------------------------------------------------------------------------------
Update Information:
Remove inproper Obsoletes
--------------------------------------------------------------------------------
================================================================================
wammu-0.44-3.fc26 (FEDORA-2018-d66730c9d2)
Mobile Phone Manager - Gammu GUI
--------------------------------------------------------------------------------
Update Information:
Update gammu, python-gammu and wammu ---- update for gammu and python-gammu
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531832 - wammu-0.44 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531832
[ 2 ] Bug #1510442 - python-gammu-2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1510442
[ 3 ] Bug #1531828 - python-gammu-2.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531828
[ 4 ] Bug #1504333 - gammu-1.38.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504333
[ 5 ] Bug #1531519 - gammu-1.39.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1531519
--------------------------------------------------------------------------------