The following Fedora 26 Security updates need testing:
Age URL
288
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7
docker-distribution-2.6.2-1.git48294d9.fc26
120
https://bodhi.fedoraproject.org/updates/FEDORA-2018-66b885ae3c
keycloak-httpd-client-install-0.8-1.fc26
107
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f8a78a5ef
squid-4.0.23-1.fc26
82
https://bodhi.fedoraproject.org/updates/FEDORA-2018-db5041e661 bro-2.5.3-1.fc26
48
https://bodhi.fedoraproject.org/updates/FEDORA-2018-010396b4a2
chromium-65.0.3325.181-1.fc26
43
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7649fef814
thunderbird-52.7.0-1.fc26
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ba4601398
dovecot-2.2.35-1.fc26
20
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7be77249d4 ruby-2.4.4-88.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-88a4219528 patch-2.7.6-4.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-db8f322bb0 guava-18.0-12.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cf8e6c1a35
seamonkey-2.49.3-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-92f04c6b61
mysql-mmm-2.2.1-20.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a954bb958b
pam-kwallet-5.12.5-3.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-77c0da8eea
blktrace-1.2.0-6.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-89a0086f56
firefox-60.0-4.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6a9fea1b3a
webkitgtk4-2.20.2-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f29459149a wget-1.19.5-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-742a69ccc3
LibRaw-0.18.11-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
86
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ddd1e5c30a
iproute-4.14.1-5.fc26
43
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7649fef814
thunderbird-52.7.0-1.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-afc4f5f88f
osinfo-db-20180502-1.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a311ccc70c
pungi-4.1.24-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-88a4219528 patch-2.7.6-4.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7efba18539 sssd-1.16.1-4.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8306020865
python-productmd-1.12-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fcbef2ab8c
python-pip-9.0.3-2.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-294c5a591e
iptables-1.6.2-3.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7979a42ded
python2-2.7.15-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6a9fea1b3a
webkitgtk4-2.20.2-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-89a0086f56
firefox-60.0-4.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8d567575dd
python-urllib3-1.20-3.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d35693d829 krb5-1.15.2-8.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e56905871e
vim-8.0.1806-1.fc26
The following builds have been pushed to Fedora 26 updates-testing
R-rprojroot-1.3.2-1.fc26
evince-3.24.2-3.fc26
gpxsee-5.10-1.fc26
greenwave-0.7.1-1.fc26
pcp-4.0.2-2.fc26
perl-Net-HTTP-6.18-1.fc26
postgresql-9.6.9-1.fc26
rpkg-util-2.2-1.fc26
Details about builds:
================================================================================
R-rprojroot-1.3.2-1.fc26 (FEDORA-2018-f4da59c6da)
Finding Files in Project Subdirectories
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
evince-3.24.2-3.fc26 (FEDORA-2018-bc5a3db9e3)
Document viewer
--------------------------------------------------------------------------------
Update Information:
This update fixes a crash in EvMediaPlayerKeys.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 9 2018 Marek Kasik <mkasik(a)redhat.com> - 3.24.2-3
- Fix crash in EvMediaPlayerKeys
- Resolves: #1359507
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1359507 - [abrt] evince: g_dbus_proxy_call_internal():
ev_media_player_keys_grab_keys killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1359507
--------------------------------------------------------------------------------
================================================================================
gpxsee-5.10-1.fc26 (FEDORA-2018-548a780120)
GPS log file viewer and analyzer
--------------------------------------------------------------------------------
Update Information:
News in version **5.10**: * Improved track loading performance * Improved
network/server error handling * Added missing EST97 GCS/PCS * Several minor
bugfixes and improvements
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 11 2018 Nikola Forr�� <nforro(a)redhat.com> - 5.10-1
- Update to version 5.10
resolves: #1576614
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1576614 - gpxsee-5.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1576614
--------------------------------------------------------------------------------
================================================================================
greenwave-0.7.1-1.fc26 (FEDORA-2018-9a5b433a00)
Service for gating on automated tests
--------------------------------------------------------------------------------
Update Information:
Latest upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Ralph Bean <rbean(a)redhat.com> - 0.7.1-1
- Include upstreamed "special-relevance" patch.
* Thu May 10 2018 Lukas Holecek <lholecek(a)redhat.com> - 0.7.0-1
- New RemoteOriginalSpecNvrRule for extending policies (#75).
- In case Greenwave found no matching results for a decision, the summary text
has been re-worded to be clearer and to indicate how many results were
expected (#145).
- Wildcard support for matching multiple product versions. This allows to
specify ``product_versions`` like ``fedora-*`` in policies to match
``fedora-27``, ``fedora-28`` and any future release.
- Wildcard support in the ``repos`` list in ``rules`` in policy files (#155).
- Both new and old ResultsDB message format are now supported.
--------------------------------------------------------------------------------
================================================================================
pcp-4.0.2-2.fc26 (FEDORA-2018-bfd50f6638)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
Enhancement and bugfix update. Major changes include: - further enhancements to
log rotation and management scripts - new pcp-pidstat process tracking features
- addition of pcp-pidstat logging to pcp-zeroconf - improved option handling and
other improvements to pmrep - bug fixes to numerous client tools and utilities -
performance improvements and enhancements to the Prometheus PMDA - bug fixes and
enhancements in many other PMDAs - improvements to Docker container name
heuristics - nfsclient PMDA rewritten to use the libpcp_pmda Python binding -
new PMDA for monitoring s.m.a.r.t. disk statistics - better handling of
compressed archives in pmwebd - assorted important SELinux updates - important
bug fixes in libpcp and a new fetchgroup reset interface - many build,
infrastructure and packaging updates.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 11 2018 Mark Goodwin <mgoodwin(a)redhat.com> - 4.0.2-2
- fix minor spec typo
* Fri May 11 2018 Mark Goodwin <mgoodwin(a)redhat.com> - 4.0.2-1
- Propogate build flags throughout PCP (BZ 1538187)
- Further additions to selinux policy (BZ 1565158)
- Update to Vector v1.2.2 in pcp-webapp-vector.
- Update to latest PCP sources.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1538187 - pcp: Incomplete build flags injection
https://bugzilla.redhat.com/show_bug.cgi?id=1538187
[ 2 ] Bug #1565158 - SELinux is preventing pmdalinux from 'unix_read' accesses
on the semafor Unknown.
https://bugzilla.redhat.com/show_bug.cgi?id=1565158
--------------------------------------------------------------------------------
================================================================================
perl-Net-HTTP-6.18-1.fc26 (FEDORA-2018-0f68b0d22f)
Low-level HTTP connection (client)
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 6.18-1
- 6.18 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1576617 - perl-Net-HTTP-6.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1576617
--------------------------------------------------------------------------------
================================================================================
postgresql-9.6.9-1.fc26 (FEDORA-2018-bd6f9237b5)
PostgreSQL client programs
--------------------------------------------------------------------------------
Update Information:
update to 9.6.9 per release notes
https://www.postgresql.org/docs/9.6/static/release-9-6-9.html
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Pavel Raiskup <praiskup(a)redhat.com> - 9.6.9-1
- update to 9.6.9 per release notes:
https://www.postgresql.org/docs/9.6/static/release-9-6-9.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1576773 - CVE-2018-1115 postgresql: Too-permissive access control list on
function pg_logfile_rotate() [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1576773
--------------------------------------------------------------------------------
================================================================================
rpkg-util-2.2-1.fc26 (FEDORA-2018-b0759d83c3)
RPM packaging utility
--------------------------------------------------------------------------------
Update Information:
- python3 migration - fix pack_sources script for (sym)linked paths - fix test
dependancy on a parent git repo existance ---- New RPM package manager
introduced. See
https://pagure.io/rpkg-util for more info.
--------------------------------------------------------------------------------