The following Fedora 26 Security updates need testing:
Age URL
144
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7
docker-distribution-2.6.2-1.git48294d9.fc26
73
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6e6f4f95e6 ruby-2.4.2-84.fc26
37
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-774e7863a4
mongodb-3.4.10-1.fc26
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7bac3ba7c3
qpid-cpp-1.37.0-1.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b5cdad4163
libvirt-3.2.1-7.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d6402c8005
evince-3.24.2-2.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1dc71e1acd
shellinabox-2.20-5.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bf172b2035
lynx-2.8.9-0.20.dev16.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7fe2c4bc0e
python33-3.3.7-2.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0f3270406c
libextractor-1.6-2.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-38fbcdffc3
asterisk-13.18.4-1.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-80c6b4d3be
sensible-utils-0.0.11-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-16a414b3c5 xen-4.8.2-9.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2962e58478
heimdal-7.5.0-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6d952bdc53
json-c-0.12.1-5.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c28bfe0986
libexif-0.6.21-14.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ea44f172e3
chromium-63.0.3239.108-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b5cdad4163
libvirt-3.2.1-7.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8d2a756133
libsmbios-2.3.3-2.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b5ac57e518
selinux-policy-3.13.1-260.18.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-16a414b3c5 xen-4.8.2-9.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b1ce6bb43a audit-2.8.2-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-05db2de66b
nfs-utils-2.2.1-1.rc2.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b79deedf43
linux-firmware-20171215-81.git2451bb22.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d57a06cda1
flatpak-0.10.2-1.fc26 flatpak-builder-0.10.6-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8b51db595f
tigervnc-1.8.0-5.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8375547241
mutter-3.24.4-3.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-713f05f7e6
rpcbind-0.2.4-8.rc3.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c28bfe0986
libexif-0.6.21-14.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6d952bdc53
json-c-0.12.1-5.fc26
The following builds have been pushed to Fedora 26 updates-testing
blueberry-1.1.20-1.fc26
chromium-63.0.3239.108-1.fc26
cinnamon-3.6.7-1.fc26
composer-1.5.6-1.fc26
copr-backend-1.109-1.fc26
copr-frontend-1.125-1.fc26
copr-selinux-1.47-1.fc26
eclipse-4.7.2-1.fc26
eclipse-dltk-5.8.2-1.fc26
eclipse-dtp-1.14.1-1.fc26
eclipse-egit-4.9.1-1.fc26
eclipse-jgit-4.9.1-2.fc26
eclipse-linuxtools-6.2.0-1.fc26
eclipse-mylyn-3.23.2-2.fc26
eclipse-recommenders-2.5.0-1.fc26
eclipse-webtools-3.9.2-1.fc26
icedtea-web-1.7.1-1.fc26
irssi-1.0.5-1.fc26
mingw-qt5-qtcharts-5.9.3-1.fc26
mingw-qt5-qtserialport-5.9.3-1.fc26
mingw-twaindsm-2.4.0-2.fc26
mir-0.29.0-1.fc26
mutter-3.24.4-3.fc26
nemo-3.6.5-1.fc26
perl-Dancer2-0.204004-3.fc26
perl-PPI-XS-0.910-1.fc26
php-icewind-smb2-2.0.3-1.fc26
php-phpmyadmin-motranslator-3.4-1.fc26
php-phpunit-PHPUnit-5.7.26-1.fc26
python-daemon-2.1.2-6.fc26
rpcbind-0.2.4-8.rc3.fc26
snapd-2.29.4-3.fc26
xfburn-0.5.5-1.fc26
Details about builds:
================================================================================
blueberry-1.1.20-1.fc26 (FEDORA-2017-f916b492b1)
Bluetooth configuration tool
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
================================================================================
chromium-63.0.3239.108-1.fc26 (FEDORA-2017-ea44f172e3)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-15412 CVE-2017-15422 CVE-2017-15407 CVE-2017-15408
CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15413 CVE-2017-15415
CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420
CVE-2017-15423 CVE-2017-15424 CVE-2017-15425 CVE-2017-15426 CVE-2017-15427
CVE-2017-15429 ---- Security fix for CVE-2017-15398, CVE-2017-15399 ----
Security fix for CVE-2017-15386 CVE-2017-15387 CVE-2017-15388 CVE-2017-15389
CVE-2017-15390 CVE-2017-15391 CVE-2017-15392 CVE-2017-15393 CVE-2017-15394
CVE-2017-15395 CVE-2017-5124 CVE-2017-5125 CVE-2017-5126 CVE-2017-5127. Build
switched to use gtk3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523141 - CVE-2017-15427 chromium-browser: insufficient blocking of
javascript in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1523141
[ 2 ] Bug #1523140 - CVE-2017-15426 chromium-browser: url spoof in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1523140
[ 3 ] Bug #1523139 - CVE-2017-15425 chromium-browser: url spoof in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1523139
[ 4 ] Bug #1523138 - CVE-2017-15424 chromium-browser: url spoof in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1523138
[ 5 ] Bug #1523137 - CVE-2017-15423 chromium-browser: issue with spake implementation in
boringssl
https://bugzilla.redhat.com/show_bug.cgi?id=1523137
[ 6 ] Bug #1523136 - CVE-2017-15422 chromium-browser: integer overflow in icu
https://bugzilla.redhat.com/show_bug.cgi?id=1523136
[ 7 ] Bug #1523135 - CVE-2017-15420 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1523135
[ 8 ] Bug #1523134 - CVE-2017-15419 chromium-browser: cross origin leak of redirect url
in blink
https://bugzilla.redhat.com/show_bug.cgi?id=1523134
[ 9 ] Bug #1523133 - CVE-2017-15418 chromium-browser: use of uninitialized value in
skia
https://bugzilla.redhat.com/show_bug.cgi?id=1523133
[ 10 ] Bug #1523132 - CVE-2017-15417 chromium-browser: cross origin information
disclosure in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1523132
[ 11 ] Bug #1523131 - CVE-2017-15416 chromium-browser: out of bounds read in blink
https://bugzilla.redhat.com/show_bug.cgi?id=1523131
[ 12 ] Bug #1523130 - CVE-2017-15415 chromium-browser: pointer information disclosure in
ipc call
https://bugzilla.redhat.com/show_bug.cgi?id=1523130
[ 13 ] Bug #1523129 - CVE-2017-15413 chromium-browser: type confusion in webassembly
https://bugzilla.redhat.com/show_bug.cgi?id=1523129
[ 14 ] Bug #1523128 - CVE-2017-15412 chromium-browser: use after free in libxml
https://bugzilla.redhat.com/show_bug.cgi?id=1523128
[ 15 ] Bug #1523127 - CVE-2017-15411 chromium-browser: use after free in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1523127
[ 16 ] Bug #1523126 - CVE-2017-15410 chromium-browser: use after free in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1523126
[ 17 ] Bug #1523125 - CVE-2017-15409 chromium-browser: out of bounds write in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1523125
[ 18 ] Bug #1523124 - CVE-2017-15408 chromium-browser: heap buffer overflow in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1523124
[ 19 ] Bug #1523123 - CVE-2017-15407 chromium-browser: out of bounds write in quic
https://bugzilla.redhat.com/show_bug.cgi?id=1523123
[ 20 ] Bug #1526405 - CVE-2017-15429 chromium-browser: uxss in v8
https://bugzilla.redhat.com/show_bug.cgi?id=1526405
[ 21 ] Bug #1510431 - CVE-2017-15399 chromium-browser: use after free in v8
https://bugzilla.redhat.com/show_bug.cgi?id=1510431
[ 22 ] Bug #1510429 - CVE-2017-15398 chromium-browser: stack buffer overflow in quic
https://bugzilla.redhat.com/show_bug.cgi?id=1510429
[ 23 ] Bug #1503550 - CVE-2017-15395 chromium-browser: null pointer dereference in
imagecapture
https://bugzilla.redhat.com/show_bug.cgi?id=1503550
[ 24 ] Bug #1503549 - CVE-2017-15394 chromium-browser: url spoofing in extensions ui
https://bugzilla.redhat.com/show_bug.cgi?id=1503549
[ 25 ] Bug #1503548 - CVE-2017-15393 chromium-browser: referrer leak in devtools
https://bugzilla.redhat.com/show_bug.cgi?id=1503548
[ 26 ] Bug #1503547 - CVE-2017-15392 chromium-browser: incorrect registry key handling
in platformintegration
https://bugzilla.redhat.com/show_bug.cgi?id=1503547
[ 27 ] Bug #1503546 - CVE-2017-15391 chromium-browser: extension limitation bypass in
extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1503546
[ 28 ] Bug #1503545 - CVE-2017-15390 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1503545
[ 29 ] Bug #1503544 - CVE-2017-15389 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1503544
[ 30 ] Bug #1503543 - CVE-2017-15388 chromium-browser: out of bounds read in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1503543
[ 31 ] Bug #1503542 - CVE-2017-15387 chromium-browser: content security bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1503542
[ 32 ] Bug #1503540 - CVE-2017-15386 chromium-browser: ui spoofing in blink
https://bugzilla.redhat.com/show_bug.cgi?id=1503540
[ 33 ] Bug #1503539 - CVE-2017-5133 chromium-browser: out of bounds write in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1503539
[ 34 ] Bug #1503538 - CVE-2017-5131 chromium-browser: out of bounds write in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1503538
[ 35 ] Bug #1503537 - CVE-2017-5130 chromium-browser: heap overflow in libxml2
https://bugzilla.redhat.com/show_bug.cgi?id=1503537
[ 36 ] Bug #1503536 - CVE-2017-5132 chromium-browser: incorrect stack manipulation in
webassembly
https://bugzilla.redhat.com/show_bug.cgi?id=1503536
[ 37 ] Bug #1503535 - CVE-2017-5129 chromium-browser: use after free in webaudio
https://bugzilla.redhat.com/show_bug.cgi?id=1503535
[ 38 ] Bug #1503534 - CVE-2017-5128 chromium-browser: heap overflow in webgl
https://bugzilla.redhat.com/show_bug.cgi?id=1503534
[ 39 ] Bug #1503533 - CVE-2017-5127 chromium-browser: use after free in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1503533
[ 40 ] Bug #1503532 - CVE-2017-5126 chromium-browser: use after free in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1503532
[ 41 ] Bug #1503531 - CVE-2017-5125 chromium-browser: heap overflow in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1503531
[ 42 ] Bug #1503530 - CVE-2017-5124 chromium-browser: uxss with mhtml
https://bugzilla.redhat.com/show_bug.cgi?id=1503530
--------------------------------------------------------------------------------
================================================================================
cinnamon-3.6.7-1.fc26 (FEDORA-2017-7dd2072481)
Window management and application launching for GNOME
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465141 - Cinnamon menu - programs don't extend to bottom
https://bugzilla.redhat.com/show_bug.cgi?id=1465141
[ 2 ] Bug #1514387 - [abrt] nemo: directory_ready_callback(): nemo-desktop killed by
SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1514387
[ 3 ] Bug #1512947 - [abrt] nemo: get_n_monitors(): nemo-desktop killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1512947
--------------------------------------------------------------------------------
================================================================================
composer-1.5.6-1.fc26 (FEDORA-2017-597788aae5)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.5.6** - 2017-12-18 * Fixed root package version guessed when a
tag is checked out * Fixed support for GitLab reposhosted on non-standard
ports * Fixed regression in require command when requiring unstable packages,
part 3
--------------------------------------------------------------------------------
================================================================================
copr-backend-1.109-1.fc26 (FEDORA-2017-cf6f9d2f51)
Backend for Copr
--------------------------------------------------------------------------------
Update Information:
- terminate also 'in_use' builders if health checks have failed - make
--detached the last arg for copr-rpmbuild - update copr_log_hitcounter to check
ip against ignored pattern - new msg bus options - disable DNF makecache
timer/service - fix message duplication for multi-bus scenario - optimize
createrepo_c - Revert "[backend] remove --ignore-lock from createrepo_c"
--------------------------------------------------------------------------------
================================================================================
copr-frontend-1.125-1.fc26 (FEDORA-2017-5f760b1d22)
Frontend for Copr
--------------------------------------------------------------------------------
Update Information:
- add support for src.fp.o in build_on_pagure_commit.py - fix source type
description - fix make-srpm anchor link - provide default for source_json_dict
in scm migration - fix committish filter condition for auto-rebuilds - fix SCM
migrations not to use models that might be newer than db - always use ref from
the push/tag event for package auto-rebuild - rather suggest dnf-modularity-
stable repo - update the info how to install a module - fix code block spacing -
fix scm unification migrations for mock-scm - show most recent post from our
blog
--------------------------------------------------------------------------------
================================================================================
copr-selinux-1.47-1.fc26 (FEDORA-2017-c0aa2c038f)
SELinux module for COPR
--------------------------------------------------------------------------------
Update Information:
- wrap map permission in an optional block
--------------------------------------------------------------------------------
================================================================================
eclipse-4.7.2-1.fc26 (FEDORA-2017-3c602edc69)
An open, extensible IDE
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-dltk-5.8.2-1.fc26 (FEDORA-2017-3c602edc69)
Dynamic Languages Toolkit (DLTK) Eclipse plug-in
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-dtp-1.14.1-1.fc26 (FEDORA-2017-3c602edc69)
Eclipse Data Tools Platform
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-egit-4.9.1-1.fc26 (FEDORA-2017-3c602edc69)
Eclipse Git Integration
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-jgit-4.9.1-2.fc26 (FEDORA-2017-3c602edc69)
Eclipse JGit
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-linuxtools-6.2.0-1.fc26 (FEDORA-2017-3c602edc69)
Linux specific Eclipse plugins
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-mylyn-3.23.2-2.fc26 (FEDORA-2017-3c602edc69)
Eclipse Mylyn main feature.
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-recommenders-2.5.0-1.fc26 (FEDORA-2017-3c602edc69)
Eclipse Code Recommenders
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-webtools-3.9.2-1.fc26 (FEDORA-2017-3c602edc69)
Eclipse Webtools Projects
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
icedtea-web-1.7.1-1.fc26 (FEDORA-2017-11b43f49a4)
Additional Java components for OpenJDK - Java browser plug-in and Web Start
implementation
--------------------------------------------------------------------------------
Update Information:
* bump to 1.7.1
--------------------------------------------------------------------------------
================================================================================
irssi-1.0.5-1.fc26 (FEDORA-2017-61fa0a5e67)
Modular text mode IRC client with Perl scripting
--------------------------------------------------------------------------------
Update Information:
This is new version of irssi.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1505182 - Irssi 1.0.5 available
https://bugzilla.redhat.com/show_bug.cgi?id=1505182
[ 2 ] Bug #1509570 - CVE-2017-15228, CVE-2017-15227, CVE-2017-15721, CVE-2017-15723,
CVE-2017-15722 affect irssi-1.0.4
https://bugzilla.redhat.com/show_bug.cgi?id=1509570
--------------------------------------------------------------------------------
================================================================================
mingw-qt5-qtcharts-5.9.3-1.fc26 (FEDORA-2017-9ffdf7c0e7)
Qt5 for Windows - QtCharts component
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526480 - Review Request: mingw-qt5-qtcharts - Qt5 for Windows - QtCharts
component
https://bugzilla.redhat.com/show_bug.cgi?id=1526480
--------------------------------------------------------------------------------
================================================================================
mingw-qt5-qtserialport-5.9.3-1.fc26 (FEDORA-2017-13b5796adb)
Qt5 for Windows - Qt Serial Port component
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526479 - Review Request: mingw-qt5-qtserialport - Qt5 for Windows - Qt
Serial Port component
https://bugzilla.redhat.com/show_bug.cgi?id=1526479
--------------------------------------------------------------------------------
================================================================================
mingw-twaindsm-2.4.0-2.fc26 (FEDORA-2017-1c211279e3)
TWAIN Data Source Manager
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526481 - Review Request: mingw-twaindsm - TWAIN Data Source Manager
https://bugzilla.redhat.com/show_bug.cgi?id=1526481
--------------------------------------------------------------------------------
================================================================================
mir-0.29.0-1.fc26 (FEDORA-2017-20ddefba67)
Next generation display server
--------------------------------------------------------------------------------
Update Information:
Update to 0.29.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526660 - mir-0.29.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1526660
--------------------------------------------------------------------------------
================================================================================
mutter-3.24.4-3.fc26 (FEDORA-2017-8375547241)
Window and compositing manager based on Clutter
--------------------------------------------------------------------------------
Update Information:
Fixes "invalid global wl_output" crashes on wayland sessions
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514220 - [abrt] gnome-shell: raise(): gnome-shell killed by SIGTRAP
("invalid global wl_output")
https://bugzilla.redhat.com/show_bug.cgi?id=1514220
--------------------------------------------------------------------------------
================================================================================
nemo-3.6.5-1.fc26 (FEDORA-2017-7dd2072481)
File manager for Cinnamon
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465141 - Cinnamon menu - programs don't extend to bottom
https://bugzilla.redhat.com/show_bug.cgi?id=1465141
[ 2 ] Bug #1514387 - [abrt] nemo: directory_ready_callback(): nemo-desktop killed by
SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1514387
[ 3 ] Bug #1512947 - [abrt] nemo: get_n_monitors(): nemo-desktop killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1512947
--------------------------------------------------------------------------------
================================================================================
perl-Dancer2-0.204004-3.fc26 (FEDORA-2017-0dace90d48)
Lightweight yet powerful web application framework
--------------------------------------------------------------------------------
Update Information:
It was reported recently that the dancer2 command line program checks the most
recent version of Dancer2 on CPAN and reports to the user if the version
currently used is not that version. This reveals the user's public IP address
to CPAN without his consent and isn't that useful. This update disables the
check.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1521155 - _version_check gives unhelpful advice
https://bugzilla.redhat.com/show_bug.cgi?id=1521155
--------------------------------------------------------------------------------
================================================================================
perl-PPI-XS-0.910-1.fc26 (FEDORA-2017-a19ecb8240)
XS acceleration for PPI
--------------------------------------------------------------------------------
Update Information:
This release changes a build script to work with Perl >= 5.27.7. It also
improves documentation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526665 - perl-PPI-XS-0.910 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1526665
--------------------------------------------------------------------------------
================================================================================
php-icewind-smb2-2.0.3-1.fc26 (FEDORA-2017-a6ae84a0c4)
php wrapper for smbclient and libsmbclient-php
--------------------------------------------------------------------------------
Update Information:
PHP wrapper for smbclient and libsmbclient-php * Reuses a single smbclient
instance for multiple requests * Doesn't leak the password to the process list *
Simple 1-on-1 mapping of SMB commands * A stream-based api to remove the need
for temporary files * Support for using libsmbclient directly trough
libsmbclient-php Autoloader: /usr/share/php/Icewind/SMB2/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508332 - Review Request: php-icewind-smb2 - php wrapper for smbclient and
libsmbclient-php
https://bugzilla.redhat.com/show_bug.cgi?id=1508332
--------------------------------------------------------------------------------
================================================================================
php-phpmyadmin-motranslator-3.4-1.fc26 (FEDORA-2017-8a106744e6)
Translation API for PHP using Gettext MO files
--------------------------------------------------------------------------------
Update Information:
**Version 3.4** * Released on 2017-12-15. * Added Translator::setTranslation
method.
--------------------------------------------------------------------------------
================================================================================
php-phpunit-PHPUnit-5.7.26-1.fc26 (FEDORA-2017-850ab0eadf)
The PHP Unit Testing framework
--------------------------------------------------------------------------------
Update Information:
**Version 5.7.26** - 2017-12-17 * **Fixed** * Fixed
[#2472](https://github.com/sebastianbergmann/phpunit/issues/2472):
`PHPUnit\Util\Getopt` uses deprecated `each()` function * Fixed
[#2833](https://github.com/sebastianbergmann/phpunit/issues/2833): Test class
loaded during data provider execution is not discovered * Fixed
[#2922](https://github.com/sebastianbergmann/phpunit/issues/2922): Test class is
not discovered when there is a test class with `@group` and provider throwing
exception in it, tests are run with `--exclude-group` for that group, there is
another class called later (after the class from above), and the name of that
another class does not match its filename
--------------------------------------------------------------------------------
================================================================================
python-daemon-2.1.2-6.fc26 (FEDORA-2017-4daeefa917)
Library to implement a well-behaved Unix daemon process
--------------------------------------------------------------------------------
Update Information:
Add dependency on needed python-docutils.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1478196 - Missing dependency: docutils
https://bugzilla.redhat.com/show_bug.cgi?id=1478196
--------------------------------------------------------------------------------
================================================================================
rpcbind-0.2.4-8.rc3.fc26 (FEDORA-2017-713f05f7e6)
Universal Addresses to RPC Program Number Mapper
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream RC release: rpcbind-0_2_5-rc3 (bz 1431574)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431574 - service file not starting rpcbind.target
https://bugzilla.redhat.com/show_bug.cgi?id=1431574
--------------------------------------------------------------------------------
================================================================================
snapd-2.29.4-3.fc26 (FEDORA-2017-6283ed1413)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
Add patch to SELinux policy to allow snapd to receive replies from polkit
--------------------------------------------------------------------------------
================================================================================
xfburn-0.5.5-1.fc26 (FEDORA-2017-a938b1a2bc)
Simple CD burning tool for Xfce
--------------------------------------------------------------------------------
Update Information:
xfburn 0.5.5 (2017-12-14) ============------------- - Use gstreamer discovere
api to get track duration - Update xfburn icon in desktop-integration and main
windows - Do not use deprecated media-cdrom Icon (Bug #12233) - Add appdata file
(Bug #11201) - Add GenericName in xfburn.desktop.in (Bug #12170) - Do no open
data-composition when running --audio-composition (Bug #13251) - Improve error
message when a plugin is missing. - Missing strings in translations (Bug #11291)
- Translation Updates: Arabic, Asturian, Bulgarian, Catalan, Czech, Danish,
German, Greek, English (Australia), English (United Kingdom), Spanish, Estonian,
Basque, Finnish, French, Galician, Hebrew, Croatian, Hungarian, Indonesian,
Icelandic, Italian, Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian
Bokm��l, Dutch, Norwegian Nynorsk, Occitan (post 1500), Polish, Portuguese,
Portuguese (Brazil), Russian, Sinhala, Slovak, Serbian, Swedish, Telugu, Thai,
Turkish, Uighur, Ukrainian, Chinese (China), Chinese (Taiwan)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408329 - Warning "Gstreamer did not like this file (detection timed
out)" for many mp3 files
https://bugzilla.redhat.com/show_bug.cgi?id=1408329
--------------------------------------------------------------------------------