The following Fedora 26 Security updates need testing:
Age URL
117
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01
python-XStatic-jquery-ui-1.12.0.1-2.fc26
56
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2522df3526
nodejs-brace-expansion-1.1.7-1.fc26
21
https://bodhi.fedoraproject.org/updates/FEDORA-2017-661dddc462
groovy18-1.8.9-28.fc26
19
https://bodhi.fedoraproject.org/updates/FEDORA-2017-690a2548ba
openvswitch-2.7.1-2.fc26
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f1f3dafb50
wireshark-2.2.8-1.fc26
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-76ce091a43
chicken-4.12.0-3.fc26
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1c053de325
memcached-1.4.39-1.fc26
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-dd0d5d376f
python-tablib-0.11.5-1.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ee93493bea
community-mysql-5.7.19-1.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7
docker-distribution-2.6.2-1.git48294d9.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-475aed1bd1 rt-4.4.1-9.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6186f95179
nasm-2.13.01-3.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a5fc805283
sscep-0.6.1-5.20160525git2052ee1.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ab55648aa7
php-PHPMailer-5.2.24-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-307eab89e1
supervisor-3.3.3-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-03893a3b58 pspp-0.10.2-5.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6833997d76
cacti-1.1.16-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-721314e3b3
java-1.8.0-openjdk-aarch32-1.8.0.141-2.170721.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4762689cb7
knot-resolver-1.3.2-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1929be4354
php-horde-Horde-Core-2.30.0-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ca6f3b5770
php-horde-Horde-Form-2.0.18-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6775ec59f1
php-horde-Horde-Url-2.2.6-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1081235137
php-horde-horde-5.2.16-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ceb60ebf8f
php-horde-kronolith-4.2.22-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d1c86c61f2
php-horde-nag-4.2.15-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f52687b573
php-horde-turba-4.2.20-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d2174c28ed
gsoap-2.8.43-2.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a695811465
pungi-4.1.17-1.fc26
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4cacf8fe60
ca-certificates-2017.2.16-1.0.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d6c7c13aa1 file-5.30-8.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-433a380270
hwdata-0.303-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-02aafa240a
libidn2-2.0.3-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-965b1a5f8b git-2.13.4-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7c5356a635 dhcp-4.3.5-9.fc26
The following builds have been pushed to Fedora 26 updates-testing
COPASI-4.20.158-2.fc26
amsynth-1.8.0-2.fc26
audience-0.2.3-1.fc26
cppcheck-1.80-1.fc26
dhcp-4.3.5-9.fc26
domoticz-3.8153-2.fc26
eclipse-eclemma-3.0.0-1.fc26
eclipse-linuxtools-6.1.0-1.fc26
electrum-2.9.0-1.fc26
foo2zjs-0.20170412-4.fc26
git-2.13.4-1.fc26
golang-github-xtaci-kcp-go-3.18-1.fc26
gomtree-0.4.0-1.fc26
google-api-python-client-1.6.2-1.fc26
gsequencer-0.9.3-1.fc26
gsoap-2.8.43-2.fc26
irssi-xmpp-0.53-1.fc26
knot-resolver-1.3.2-1.fc26
libsemigroups-0.3.1-3.fc26
magic-8.1.183-1.fc26
openzwave-1.5.0-0.20170724gitde1c0e6.fc26
pass-1.7.1-4.fc26
perl-Code-TidyAll-0.65-1.fc26
php-7.1.8-1.fc26
php-horde-Horde-Browser-2.0.14-1.fc26
php-horde-Horde-Core-2.30.0-1.fc26
php-horde-Horde-Form-2.0.18-1.fc26
php-horde-Horde-Imap-Client-2.29.14-1.fc26
php-horde-Horde-Url-2.2.6-1.fc26
php-horde-horde-5.2.16-1.fc26
php-horde-imp-6.2.20-1.fc26
php-horde-kronolith-4.2.22-1.fc26
php-horde-nag-4.2.15-1.fc26
php-horde-turba-4.2.20-1.fc26
phpMyAdmin-4.7.3-1.fc26
python-docker-2.4.2-3.fc26
python-jwcrypto-0.4.2-3.fc26
python-sqlalchemy-1.1.12-1.fc26
qmapshack-1.9.0-1.fc26
socket_wrapper-1.1.7-3.fc26
tetrominos-1.0.1-1.fc26
vdr-epg-daemon-1.1.122-1.fc26
xcircuit-3.9.68-1.fc26
xscreensaver-5.37-4.fc26
Details about builds:
================================================================================
COPASI-4.20.158-2.fc26 (FEDORA-2017-df4ce024c3)
Biochemical network simulator
--------------------------------------------------------------------------------
Update Information:
- Make a new conditional macro to control stripping of symbols from object files
- 4.20.158-1 - Update to version 4.20 -build 158 - Debuginfo packages built
--------------------------------------------------------------------------------
================================================================================
amsynth-1.8.0-2.fc26 (FEDORA-2017-87778715de)
A classic synthesizer with dual oscillators
--------------------------------------------------------------------------------
Update Information:
Fix #1476525
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476525 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1476525
--------------------------------------------------------------------------------
================================================================================
audience-0.2.3-1.fc26 (FEDORA-2017-0aefce8c6e)
Audience video player
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.3.
--------------------------------------------------------------------------------
================================================================================
cppcheck-1.80-1.fc26 (FEDORA-2017-347af702a8)
Tool for static C/C++ code analysis
--------------------------------------------------------------------------------
Update Information:
1.80
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476472 - cppcheck-1.80 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476472
--------------------------------------------------------------------------------
================================================================================
dhcp-4.3.5-9.fc26 (FEDORA-2017-7c5356a635)
Dynamic host configuration protocol software
--------------------------------------------------------------------------------
Update Information:
Delete broken resolv.conf symlink.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475279 - dhclient doesn't update /etc/resolv.conf if NetworkManager
crashes upon start
https://bugzilla.redhat.com/show_bug.cgi?id=1475279
--------------------------------------------------------------------------------
================================================================================
domoticz-3.8153-2.fc26 (FEDORA-2017-17dea027cb)
Open source Home Automation System
--------------------------------------------------------------------------------
Update Information:
Version 3.8153 (July 30th 2017) - Fixed: Camera Editor, will now always refresh
thumbnail in table - Fixed: Devices could become invisible when a scene/group
was added to the 'hidden devices' room plan with the same idx - Fixed: JSon
float/nan value, solved by upgrading JSonCPP - Fixed: OZW, when a value is
updated and the sensor did not exists before (for example a kWh sensor), it is
created (saves a restart) - Fixed: Daemonize compatible with Systemd forking
type - Changed: Blinds T5 till T13 new DeviceID generation, could cause new
sensors - Changed: Lessen rounding errors for computed energy - Changed:
Minimized On/Off/Script execution time - Changed: SolarEdgeAPI, now only needs
API Key - Changed: Support symlinks for plugin and theme directories - Changed:
Switch type 'Door Lock' renamed to 'Door Contact' - Changed: Temperature
Only
charts will not display the Humidity axis - Changed: Wind Direction Graph, if
sensor does not supports 'Gust', the 'Speed' value is used - Changed:
Updated
OpenZWave (and configuration files) - Implemented: Added a new parameter to
disable the logging of event script triggers 'Script event triggered: ...' -
Implemented: AppLamp/LimitLess bridge V6.0 RGBW/RGBWW - Implemented: Blinds T1
till T13 new supports the Stop button - Implemented: Blockly/Lua Set SetPoint
option - Implemented: Devices, Log icon for Blinds - Implemented: Dummy
Hardware, Temp+Baro - Implemented: Estonian Language support (big thanks to
Kuido) - Implemented: EvohomeWeb support (Thanks to Gordon3!) - Implemented:
General/Text sensor now able to be shared - Implemented: I2C BME280 sensor
(temp+hum+baro) - Implemented: I2C for non arm systems - Implemented: InfluxDB
Data push - Implemented: Latvian Language support (big thanks to Edgars) -
Implemented: Netatmo Home Coach support - Implemented: Notification for Dummy
Soil/Moisture sensor - Implemented: Notification for Dummy Temp/Hum/Baro sensor
- Implemented: Notification for Alert Sensor via udevice JSON call -
Implemented: Onkyo AV Receiver (Thanks to dwmw2!) - Implemented: Option to
replace an Meter device - Implemented: OZW, Added support for Atmospheric
Pressure sensor - Implemented: Python Plugin System - Implemented: RFXtrx Lucci
Fan implemented - Implemented: RFXtrx RFY2 protocol implemented - Implemented:
RFXtrx Kangtai / Cotech implemented - Implemented: RTL433 (Thanks to Petri
Ahone!) - Implemented: SolarEdgeAPI, support for multiple inverters -
Implemented: Support for Ble Box hardware - Implemented: Support for different
usage/return costs for electricity - Implemented: Support for Intergas InComfort
LAN2RF Gateway - Implemented: Support for Open Weather Map - Implemented:
Support for Open Web Net - Implemented: Support for XiaomiGateway Gateway -
Implemented: Support for YeeLight - Implemented: Support for Youless LS120 -
Implemented: Switch type 'Door Lock' - Implemented: SysFS GPIO (Thanks to
hvbommel/jvandenbroek!) - Implemented: Teleinfo : Added a switch indicating the
current cost slot - Implemented: Timer Plan editor - Removed: Razberry ZWave
handling method. Existing users need to migrate to OpenZWave
--------------------------------------------------------------------------------
================================================================================
eclipse-eclemma-3.0.0-1.fc26 (FEDORA-2017-5307e1ce64)
Java code coverage tool plugin for Eclipse
--------------------------------------------------------------------------------
Update Information:
Updates to the Oxygen version of Eclemma. See the upstream change notes:
http://www.eclemma.org/changes.html
--------------------------------------------------------------------------------
================================================================================
eclipse-linuxtools-6.1.0-1.fc26 (FEDORA-2017-a4918838d7)
Linux specific Eclipse plugins
--------------------------------------------------------------------------------
Update Information:
This is mostly a bugfix update to the latest upstream release. See the upstream
release notes:
https://wiki.eclipse.org/Linux_Tools_Project/News/NewIn61
--------------------------------------------------------------------------------
================================================================================
electrum-2.9.0-1.fc26 (FEDORA-2017-56067fdae6)
A lightweight Bitcoin Client
--------------------------------------------------------------------------------
Update Information:
Updated to upstream 2.9.0
--------------------------------------------------------------------------------
================================================================================
foo2zjs-0.20170412-4.fc26 (FEDORA-2017-30c3f793a3)
Linux printer driver for ZjStream protocol
--------------------------------------------------------------------------------
Update Information:
Add some ICC profiles and firmware files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476598 - No ICM profiles in installs (foo2qpdl)
https://bugzilla.redhat.com/show_bug.cgi?id=1476598
--------------------------------------------------------------------------------
================================================================================
git-2.13.4-1.fc26 (FEDORA-2017-965b1a5f8b)
Fast Version Control System
--------------------------------------------------------------------------------
Update Information:
Fixes since v2.13.3 ------------------- * Update the character width tables to
Unicode 10. * A recent update broke an alias that contained an uppercase
letter, which has been fixed. * The progress meter did not give a useful
output when we haven't had 0.5 seconds to measure the throughput during the
interval. Instead show the overall throughput rate at the end, which is a
much more useful number. * We run an early part of "git gc" that deals
with
refs before daemonising (and not under lock) even when running a background
auto-gc, which caused multiple gc processes attempting to run the early part
at the same time. This is now prevented by running the early part also under
the GC lock. Also contains a handful of small code and documentation clean-ups.
Upstream release announcement:
https://public-
inbox.org/git/xmqqk22nf4yb.fsf@gitster.mtv.corp.google.com/
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1357438 - manual page for git merge points to wrong path
https://bugzilla.redhat.com/show_bug.cgi?id=1357438
--------------------------------------------------------------------------------
================================================================================
golang-github-xtaci-kcp-go-3.18-1.fc26 (FEDORA-2017-e8b1f72a42)
Production-Grade Reliable-UDP Library for golang
--------------------------------------------------------------------------------
Update Information:
Update to version 3.18 (commit ecbba09).
--------------------------------------------------------------------------------
================================================================================
gomtree-0.4.0-1.fc26 (FEDORA-2017-1ea8cad421)
Go CLI tool for mtree support
--------------------------------------------------------------------------------
Update Information:
Fixes segf in F26 ---- No golang support for ppc64. BZ #1445491
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1477241 - gomtree segfaults in f26
https://bugzilla.redhat.com/show_bug.cgi?id=1477241
--------------------------------------------------------------------------------
================================================================================
google-api-python-client-1.6.2-1.fc26 (FEDORA-2017-22037196bd)
Google APIs Client Library for Python
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.2
--------------------------------------------------------------------------------
================================================================================
gsequencer-0.9.3-1.fc26 (FEDORA-2017-99dc100289)
Advanced Gtk+ Sequencer audio processing engine
--------------------------------------------------------------------------------
Update Information:
modified version because bug fixes available ---- modified version because new
features available
--------------------------------------------------------------------------------
================================================================================
gsoap-2.8.43-2.fc26 (FEDORA-2017-d2174c28ed)
Generator Tools for Coding SOAP/XML Web Services in C and C++
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-9765.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1472809 - CVE-2017-9765 gsoap: Stack-based buffer overflow when receieving
XML message with size larger than 2GB [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1472809
--------------------------------------------------------------------------------
================================================================================
irssi-xmpp-0.53-1.fc26 (FEDORA-2017-c1c664296b)
XMPP plugin into irssi
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1423746 - irssi-xmpp: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1423746
[ 2 ] Bug #1323612 - abi incompatibility after recent irssi upgrade
https://bugzilla.redhat.com/show_bug.cgi?id=1323612
--------------------------------------------------------------------------------
================================================================================
knot-resolver-1.3.2-1.fc26 (FEDORA-2017-4762689cb7)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
New upstream release:
--------------------------------------------------------------------------------
================================================================================
libsemigroups-0.3.1-3.fc26 (FEDORA-2017-0898127c09)
C++ library for semigroups and monoids
--------------------------------------------------------------------------------
Update Information:
This new package is a C++ library for semigroups and monoids; it is partly based
on "Algorithms for computing finite semigroups", "Expository Slides",
and
Semigroupe 2.01 by Jean-Eric Pin. The libsemigroups library is used in the
Semigroups package for GAP.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476085 - Review Request: libsemigroups - C++ library for semigroups and
monoids
https://bugzilla.redhat.com/show_bug.cgi?id=1476085
--------------------------------------------------------------------------------
================================================================================
magic-8.1.183-1.fc26 (FEDORA-2017-48df1875e8)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.1.183 is released.
--------------------------------------------------------------------------------
================================================================================
openzwave-1.5.0-0.20170724gitde1c0e6.fc26 (FEDORA-2017-17dea027cb)
Sample Executables for OpenZWave
--------------------------------------------------------------------------------
Update Information:
Version 3.8153 (July 30th 2017) - Fixed: Camera Editor, will now always refresh
thumbnail in table - Fixed: Devices could become invisible when a scene/group
was added to the 'hidden devices' room plan with the same idx - Fixed: JSon
float/nan value, solved by upgrading JSonCPP - Fixed: OZW, when a value is
updated and the sensor did not exists before (for example a kWh sensor), it is
created (saves a restart) - Fixed: Daemonize compatible with Systemd forking
type - Changed: Blinds T5 till T13 new DeviceID generation, could cause new
sensors - Changed: Lessen rounding errors for computed energy - Changed:
Minimized On/Off/Script execution time - Changed: SolarEdgeAPI, now only needs
API Key - Changed: Support symlinks for plugin and theme directories - Changed:
Switch type 'Door Lock' renamed to 'Door Contact' - Changed: Temperature
Only
charts will not display the Humidity axis - Changed: Wind Direction Graph, if
sensor does not supports 'Gust', the 'Speed' value is used - Changed:
Updated
OpenZWave (and configuration files) - Implemented: Added a new parameter to
disable the logging of event script triggers 'Script event triggered: ...' -
Implemented: AppLamp/LimitLess bridge V6.0 RGBW/RGBWW - Implemented: Blinds T1
till T13 new supports the Stop button - Implemented: Blockly/Lua Set SetPoint
option - Implemented: Devices, Log icon for Blinds - Implemented: Dummy
Hardware, Temp+Baro - Implemented: Estonian Language support (big thanks to
Kuido) - Implemented: EvohomeWeb support (Thanks to Gordon3!) - Implemented:
General/Text sensor now able to be shared - Implemented: I2C BME280 sensor
(temp+hum+baro) - Implemented: I2C for non arm systems - Implemented: InfluxDB
Data push - Implemented: Latvian Language support (big thanks to Edgars) -
Implemented: Netatmo Home Coach support - Implemented: Notification for Dummy
Soil/Moisture sensor - Implemented: Notification for Dummy Temp/Hum/Baro sensor
- Implemented: Notification for Alert Sensor via udevice JSON call -
Implemented: Onkyo AV Receiver (Thanks to dwmw2!) - Implemented: Option to
replace an Meter device - Implemented: OZW, Added support for Atmospheric
Pressure sensor - Implemented: Python Plugin System - Implemented: RFXtrx Lucci
Fan implemented - Implemented: RFXtrx RFY2 protocol implemented - Implemented:
RFXtrx Kangtai / Cotech implemented - Implemented: RTL433 (Thanks to Petri
Ahone!) - Implemented: SolarEdgeAPI, support for multiple inverters -
Implemented: Support for Ble Box hardware - Implemented: Support for different
usage/return costs for electricity - Implemented: Support for Intergas InComfort
LAN2RF Gateway - Implemented: Support for Open Weather Map - Implemented:
Support for Open Web Net - Implemented: Support for XiaomiGateway Gateway -
Implemented: Support for YeeLight - Implemented: Support for Youless LS120 -
Implemented: Switch type 'Door Lock' - Implemented: SysFS GPIO (Thanks to
hvbommel/jvandenbroek!) - Implemented: Teleinfo : Added a switch indicating the
current cost slot - Implemented: Timer Plan editor - Removed: Razberry ZWave
handling method. Existing users need to migrate to OpenZWave
--------------------------------------------------------------------------------
================================================================================
pass-1.7.1-4.fc26 (FEDORA-2017-491f47979f)
A password manager using standard Unix tools
--------------------------------------------------------------------------------
Update Information:
- Require git-core instead of git rhbz#1471608 - Add passmenu subpackage
rhbz#1474833
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1474833 - add passmenu subpackage
https://bugzilla.redhat.com/show_bug.cgi?id=1474833
[ 2 ] Bug #1471608 - pass: change requires from git to git-core
https://bugzilla.redhat.com/show_bug.cgi?id=1471608
--------------------------------------------------------------------------------
================================================================================
perl-Code-TidyAll-0.65-1.fc26 (FEDORA-2017-c3026dc2eb)
Engine for tidyall, your all-in-one code tidier and validator
--------------------------------------------------------------------------------
Update Information:
This release fixes handling files with Copied Git status. ---- Updated to the
latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1477383 - perl-Code-TidyAll-0.65 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1477383
[ 2 ] Bug #1476963 - perl-Code-TidyAll-0.64 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476963
--------------------------------------------------------------------------------
================================================================================
php-7.1.8-1.fc26 (FEDORA-2017-b446f03468)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
**PHP version 7.1.8** (03 Aug 2017) **Core:** * Fixed bug php#74832 (Loading
PHP extension with already registered function name leads to a crash). (jpauli)
* Fixed bug php#74780 (parse_url() broken when query string contains colon).
(jhdxr) * Fixed bug php#74761 (Unary operator expected error on some systems).
(petk) * Fixed bug php#73900 (Use After Free in unserialize() SplFixedArray).
(nikic) * Fixed bug php#74923 (Crash when crawling through network share).
(Anatol) * Fixed bug php#74913 (fixed incorrect poll.h include). (petk) * Fixed
bug php#74906 (fixed incorrect errno.h include). (petk) **Date:** * Fixed bug
php#74852 (property_exists returns true on unknown DateInterval property).
(jhdxr) **Opcache:** * Fixed bug php#74623 (Infinite loop in type inference
when using HTMLPurifier). (nikic) **OpenSSL:** * Fixed bug php#74798
(pkcs7_en/decrypt does not work if \x0a is used in content). (Anatol) * Added
OPENSSL_DONT_ZERO_PAD_KEY constant to prevent key padding and fix bug php#71917
(openssl_open() returns junk on envelope < 16 bytes) and bug php#72362 (OpenSSL
Blowfish encryption is incorrect for short keys). (Jakub Zelenka) **PDO:** *
Fixed bug php#69356 (PDOStatement::debugDumpParams() truncates query). (Adam
Baratz) **SPL:** * Fixed bug php#73471 (PHP freezes with AppendIterator).
(jhdxr) **SQLite3:** * Fixed bug php#74883 (SQLite3::__construct() produces
"out of memory" exception with invalid flags). (Anatol) **Wddx:** * Fixed bug
php#73173 (huge memleak when wddx_unserialize). (tloi at fortinet dot com)
**zlib:** * Fixed bug php#73944 (dictionary option of inflate_init() does not
work). (wapmorgan)
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Browser-2.0.14-1.fc26 (FEDORA-2017-f68a9c12c6)
Horde Browser API
--------------------------------------------------------------------------------
Update Information:
**Horde_Browser 2.0.14** * [jan] Filter out control characters from file names
when sending download headers.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.30.0-1.fc26 (FEDORA-2017-1929be4354)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.30.0** * [jan] SECURITY: Fix XSS vulnerability with pathinfo
component in Horde::selfUrl(). * [jan] Deprecate Horde::redirect(). * [jan] Add
Horde::signUrl() and Horde::verifySignedUrl().
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Form-2.0.18-1.fc26 (FEDORA-2017-ca6f3b5770)
Horde Form API
--------------------------------------------------------------------------------
Update Information:
**Horde_Form 2.0.18** * [jan] SECURITY: Fix XSS vulnerability with form
sections.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Imap-Client-2.29.14-1.fc26 (FEDORA-2017-58e6d9e6bb)
Horde IMAP abstraction interface
--------------------------------------------------------------------------------
Update Information:
**Horde_Imap_Client 2.29.14** * [jan] Fix check if QRESYNC is enabled in
vanished() (i.badamshin).
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Url-2.2.6-1.fc26 (FEDORA-2017-6775ec59f1)
Horde Url class
--------------------------------------------------------------------------------
Update Information:
**Horde_Url 2.2.6** * [jan] SECURITY: Fix XSS vulnerability with pathinfo
component in toString().
--------------------------------------------------------------------------------
================================================================================
php-horde-horde-5.2.16-1.fc26 (FEDORA-2017-1081235137)
Horde Application Framework
--------------------------------------------------------------------------------
Update Information:
**horde 5.2.16** * [jan] SECURITY: Fix open redirects.
--------------------------------------------------------------------------------
================================================================================
php-horde-imp-6.2.20-1.fc26 (FEDORA-2017-58db17e673)
A web based webmail system
--------------------------------------------------------------------------------
Update Information:
**imp 6.2.20** * [jan] Fix finding reply or forward text from signed or
encrypted messages with HTML content again (Bug #14656). * [mjr] Fix issue with
reattaching a file after removing it on Chrome browsers (Bug #14657), * [jan]
Allow Command-C to copy text from HTML message previews (Bug #14653).
--------------------------------------------------------------------------------
================================================================================
php-horde-kronolith-4.2.22-1.fc26 (FEDORA-2017-ceb60ebf8f)
A web based calendar
--------------------------------------------------------------------------------
Update Information:
**kronolith 4.2.22** * [jan] SECURITY: Fix open redirects. * [mjr] Prevent
broken iCalendar files from causing fatal errors (Bug #14672). * [jan] Work
around calendar servers advertising as CalDAV-capable, but ignoring CalDAV
requests (Bug #14662). * [jan] Fix displaying yesterday's event in Prior
Events portal block (admin(a)layertec.de, Bug #14638).
--------------------------------------------------------------------------------
================================================================================
php-horde-nag-4.2.15-1.fc26 (FEDORA-2017-d1c86c61f2)
A web based task list manager
--------------------------------------------------------------------------------
Update Information:
**nag 4.2.15** * [jan] SECURITY: Fix open redirects. * [mjr] Fix handling of
delayed start dates (Bug #14634).
--------------------------------------------------------------------------------
================================================================================
php-horde-turba-4.2.20-1.fc26 (FEDORA-2017-f52687b573)
A web based address book
--------------------------------------------------------------------------------
Update Information:
**turba 4.2.20** * [jan] SECURITY: Fix open redirects. * [jan] Fix creating
address books with the external API.
--------------------------------------------------------------------------------
================================================================================
phpMyAdmin-4.7.3-1.fc26 (FEDORA-2017-0c29ca69ad)
Handle the administration of MySQL over the World Wide Web
--------------------------------------------------------------------------------
Update Information:
Welcome to **phpMyAdmin 4.7.3**, a regular maintenance release containing bug
fixes. A complete list of new features and bugs that have been fixed is
available in the ChangeLog file or changelog.php included with this release.
Notable changes since 4.7.2: * Fixed creating relations * Fixed export
without back quotes * Improved handling of uploaded files with open_basedir *
Fixed usage of some browser transformations * Automatically connect using SSL
when server is configured for such
--------------------------------------------------------------------------------
================================================================================
python-docker-2.4.2-3.fc26 (FEDORA-2017-082ef22c86)
A Python library for the Docker Engine API
--------------------------------------------------------------------------------
Update Information:
fix provides of version 1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1475878 - Dependency problems updating system, python-docker must Provides:
python-docker-py
https://bugzilla.redhat.com/show_bug.cgi?id=1475878
--------------------------------------------------------------------------------
================================================================================
python-jwcrypto-0.4.2-3.fc26 (FEDORA-2017-c25388f731)
Implements JWK, JWS, JWE specifications using python-cryptography
--------------------------------------------------------------------------------
Update Information:
- Upstream release 0.4.2, fixes bytes/str comparison issue - Resolves: RHBZ
#1476150 - Run tests with bytes warning - Modernize spec
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476150 - Custodia does not work in Python 3
https://bugzilla.redhat.com/show_bug.cgi?id=1476150
--------------------------------------------------------------------------------
================================================================================
python-sqlalchemy-1.1.12-1.fc26 (FEDORA-2017-bb16fe54d9)
Modular and flexible ORM library for python
--------------------------------------------------------------------------------
Update Information:
This update contains a new upstream bugfix and enhancement release. The
upstream [
changelog](http://docs.sqlalchemy.org/en/latest/changelog/changelog_11
.html#change-1.1.12) contains a list of all changes in version 1.1.12.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1474411 - python-sqlalchemy: FTBFS in Fedora 26 tests failing as of python
3.6.2
https://bugzilla.redhat.com/show_bug.cgi?id=1474411
--------------------------------------------------------------------------------
================================================================================
qmapshack-1.9.0-1.fc26 (FEDORA-2017-f441805584)
GPS mapping and management tool
--------------------------------------------------------------------------------
Update Information:
- updated to 1.9.0 -
https://bitbucket.org/maproom/qmapshack/raw/18cf6f7dcc56b29
3e450a62a4737c07f8c6e31be/changelog.txt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1474557 - qmapshack-1.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1474557
--------------------------------------------------------------------------------
================================================================================
socket_wrapper-1.1.7-3.fc26 (FEDORA-2017-969354ba0e)
A library passing all socket communications through Unix sockets
--------------------------------------------------------------------------------
Update Information:
Fix socket_wrapper on ppc64le
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465147 - bash: segfault in do_redirection_internal on ppc64le
https://bugzilla.redhat.com/show_bug.cgi?id=1465147
--------------------------------------------------------------------------------
================================================================================
tetrominos-1.0.1-1.fc26 (FEDORA-2017-46e3194c91)
Simple CLI logical game
--------------------------------------------------------------------------------
Update Information:
initial version created many years ago as a school project
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1477137 - Review Request: tetrominos - Simple CLI logical game
https://bugzilla.redhat.com/show_bug.cgi?id=1477137
--------------------------------------------------------------------------------
================================================================================
vdr-epg-daemon-1.1.122-1.fc26 (FEDORA-2017-da1cb0796d)
A daemon to download EPG data from internet and manage it in a mysql database
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.122-1 ---- Update to 1.1.121
--------------------------------------------------------------------------------
================================================================================
xcircuit-3.9.68-1.fc26 (FEDORA-2017-e85233d4bc)
Electronic circuit schematic drawing program
--------------------------------------------------------------------------------
Update Information:
New version 3.9.68 is released.
--------------------------------------------------------------------------------
================================================================================
xscreensaver-5.37-4.fc26 (FEDORA-2017-388154cd56)
X screen saver and locker
--------------------------------------------------------------------------------
Update Information:
Some invalid stack variable usages after scope were found on xscreensaver code,
which may cause unpredictable behavior. This new rpm will fix the issues.
--------------------------------------------------------------------------------