The following Fedora 26 Security updates need testing:
Age URL
299
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7
docker-distribution-2.6.2-1.git48294d9.fc26
131
https://bodhi.fedoraproject.org/updates/FEDORA-2018-66b885ae3c
keycloak-httpd-client-install-0.8-1.fc26
118
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f8a78a5ef
squid-4.0.23-1.fc26
93
https://bodhi.fedoraproject.org/updates/FEDORA-2018-db5041e661 bro-2.5.3-1.fc26
59
https://bodhi.fedoraproject.org/updates/FEDORA-2018-010396b4a2
chromium-65.0.3325.181-1.fc26
54
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7649fef814
thunderbird-52.7.0-1.fc26
34
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ba4601398
dovecot-2.2.35-1.fc26
31
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7be77249d4 ruby-2.4.4-88.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-77c0da8eea
blktrace-1.2.0-6.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7cd077ddd3 xen-4.8.3-5.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c8f559e8c2
xdg-utils-1.1.3-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-32a88d0540
ca-certificates-2018.2.24-1.0.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6020628437
thunderbird-enigmail-2.0.4-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
96
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ddd1e5c30a
iproute-4.14.1-5.fc26
54
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7649fef814
thunderbird-52.7.0-1.fc26
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8306020865
python-productmd-1.12-1.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7cd077ddd3 xen-4.8.3-5.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-70b0c4dca9
osinfo-db-20180514-1.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8706010aa
vim-8.0.1842-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-32a88d0540
ca-certificates-2018.2.24-1.0.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b9585aa356 sssd-1.16.1-8.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-155b62b226
kernel-4.16.9-100.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c8f559e8c2
xdg-utils-1.1.3-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5e05834bb7
volume_key-0.3.10-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21a38db20b
libidn2-2.0.5-1.fc26
The following builds have been pushed to Fedora 26 updates-testing
nodejs-base64-url-2.2.0-1.fc26
ntfs-3g-2017.3.23-6.fc26
perl-CPAN-Perl-Releases-3.58-1.fc26
tzdata-2018e-1.fc26
vim-syntastic-3.9.0-1.fc26
vino-3.22.0-8.fc26
Details about builds:
================================================================================
nodejs-base64-url-2.2.0-1.fc26 (FEDORA-2018-9cf836a54a)
Base64 encode, decode, escape and unescape for URL applications
--------------------------------------------------------------------------------
Update Information:
Security fix for
https://snyk.io/vuln/npm:base64url:20180511
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Jared K. Smith <jsmith(a)fedoraproject.org> - 2.2.0-1
- Update to upstream 2.2.0 release
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1579507 - nodejs-base64url: Uninitialized Memory Exposure in pad-string.ts
https://bugzilla.redhat.com/show_bug.cgi?id=1579507
--------------------------------------------------------------------------------
================================================================================
ntfs-3g-2017.3.23-6.fc26 (FEDORA-2018-eb2435dd6a)
Linux NTFS userspace driver
--------------------------------------------------------------------------------
Update Information:
Add support for very large cluster sizes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Tom Callaway <spot(a)fedoraproject.org> - 2:2017.3.23-6
- apply updated big sectors patch
* Mon May 7 2018 Tom Callaway <spot(a)fedoraproject.org>
- big sectors patch from Jean-Pierre Andr��
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2:2017.3.23-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575227 - fedora cannot mount NTFS filesystem with cluster size bigger 64kb
https://bugzilla.redhat.com/show_bug.cgi?id=1575227
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.58-1.fc26 (FEDORA-2018-7200fb0465)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 22 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.58-1
- 3.58 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580997 - perl-CPAN-Perl-Releases-3.58 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1580997
--------------------------------------------------------------------------------
================================================================================
tzdata-2018e-1.fc26 (FEDORA-2018-ac371f04c5)
Timezone data
--------------------------------------------------------------------------------
Update Information:
Rebase to tzdata-2018e - North Korea changed from UTC+8:30 to UTC+9 on May
5, 2018. - In this update, the upstream project now defaults to using the
"vanguard" data implementation which includes negative DST offsets. However, in
order to provide better compatibility with existing tools, this update provides
the "rearguard" format for data which does not use negative DST offsets. We
intend to transition to the "vanguard" data implementation in the future.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 16 2018 Patsy Franklin <pfrankli(a)redhat.com> - 2018e-1
- Rebase to tzdata-2018e
- North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
- In this update, the upstream project now defaults to using
the "vanguard" data implementation which includes negative DST offsets.
However, we are continuing to provide the "rearguard" format
for data which does not use negative DST offsets to provide
better compatibility with existing tools. We intend to transition
to the "vanguard" data implementation in the future.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574758 - tzdata-2018e is available
https://bugzilla.redhat.com/show_bug.cgi?id=1574758
--------------------------------------------------------------------------------
================================================================================
vim-syntastic-3.9.0-1.fc26 (FEDORA-2018-bc04d8bfe8)
A vim plugins to check syntax for programming languages
--------------------------------------------------------------------------------
Update Information:
new upstream release v3.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 23 2018 Pavel Raiskup <praiskup(a)redhat.com> - 3.9.0-1
- new upstream release, per release notes:
https://github.com/vim-syntastic/syntastic/releases/tag/3.9.0
* Tue Apr 10 2018 Philippe Makowski <makowski(a)fedoraproject.org> - 3.8.0-12
- add text subpackage, fix rhbz#1562001
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.8.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.8.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580432 - CVE-2018-11319 vim-syntastic: Improper handling of searches for
configuration files can lead to arbitrary code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1580432
--------------------------------------------------------------------------------
================================================================================
vino-3.22.0-8.fc26 (FEDORA-2018-1486702873)
A remote desktop system for GNOME
--------------------------------------------------------------------------------
Update Information:
Return error if X11 is not detected
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 18 2018 Ondrej Holy <oholy(a)redhat.com> - 3.22.0-8
- Return error if X11 is not detected
https://bugzilla.redhat.com/show_bug.cgi?id=1563575
* Thu Apr 19 2018 Ondrej Holy <oholy(a)redhat.com> - 3.22.0-7
- Add missing parameter for systemd scriptlets
https://bugzilla.redhat.com/show_bug.cgi?id=1507890
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.22.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Jan 5 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 3.22.0-5
- Remove obsolete scriptlets
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.22.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.22.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463851 - [abrt] vino: wl_display_interface(): vino-server killed by signal
11
https://bugzilla.redhat.com/show_bug.cgi?id=1463851
--------------------------------------------------------------------------------