The following Fedora 26 Security updates need testing: Age URL 217 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01 python-XStatic-jquery-ui-1.12.0.1-2.fc26 156 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2522df3526 nodejs-brace-expansion-1.1.7-1.fc26 111 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1c053de325 memcached-1.4.39-1.fc26 107 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26 36 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6e6f4f95e6 ruby-2.4.2-84.fc26 22 https://bodhi.fedoraproject.org/updates/FEDORA-2017-6bff3cf26c suricata-3.2.4-1.fc26 16 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b52f851dea calamares-3.1.7-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-e16ed3f7a1 jackson-databind-2.7.6-5.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-379679442e rubygem-ox-2.4.13-2.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5cb8354008 perl-Catalyst-Plugin-Static-Simple-0.34-1.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-45044b6b33 hostapd-2.6-6.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-fa89dbf50d php-PHPMailer-5.2.26-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-357fa6205d ImageMagick-6.9.9.22-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-31519ecf40 knot-resolver-1.5.0-1.fc26 knot-2.6.1-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3c893719f4 icu-57.1-7.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ea72793352 fedpkg-1.30-4.fc26 rpkg-1.51-2.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-31d7720d7e kernel-4.13.12-200.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1560290881 roundcubemail-1.3.3-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-69e06543c1 perl-Net-Ping-External-0.15-11.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1762a103bf poppler-0.52.0-10.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1f1fdab532 postgresql-9.6.6-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f87ce166c5 chromium-62.0.3202.89-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5f358346f5 firefox-57.0-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-60c61b6e79 python-copr-1.84-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ebee750022 backintime-1.1.24-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1f52998c8b konversation-1.7.3-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved: Age URL 40 https://bodhi.fedoraproject.org/updates/FEDORA-2017-621a9b4828 iproute-4.13.0-1.fc26 31 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8e91b32f31 python3-3.6.3-2.fc26 29 https://bodhi.fedoraproject.org/updates/FEDORA-2017-19f599ecd6 chrony-3.2-1.fc26 22 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2b44217ccc kobo-0.7.0-3.fc26 18 https://bodhi.fedoraproject.org/updates/FEDORA-2017-04dc465e5b ModemManager-1.6.10-1.fc26 16 https://bodhi.fedoraproject.org/updates/FEDORA-2017-34b7ce4fee libappstream-glib-0.7.3-1.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-acf7207aae glusterfs-3.10.7-1.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-861946053e python-productmd-1.9-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2727dc1ce8 iio-sensor-proxy-2.4-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f10b769a7e pcre2-10.23-10.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-349fb51b4d pungi-4.1.20-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-da5d015449 pcre-8.41-3.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ad679ebc50 menu-cache-1.1.0-1.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d242f7163c SDL2-2.0.7-2.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ae8f081077 python-lxml-4.1.1-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-886c66f14a ostree-2017.13-3.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f69853b0bc bubblewrap-0.2.0-2.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-24caef8611 gnome-online-accounts-3.24.4-3.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3c893719f4 icu-57.1-7.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8504f131e1 fontconfig-2.12.6-4.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f5ff6db124 coreutils-8.27-7.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1d805ecfa0 libglvnd-1.0.0-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-65240cb11b mesa-17.2.4-2.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5f358346f5 firefox-57.0-1.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1762a103bf poppler-0.52.0-10.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5865b464f0 pulseaudio-11.1-6.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4a095800d2 gnutls-3.5.16-2.fc26 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-31d7720d7e kernel-4.13.12-200.fc26
The following builds have been pushed to Fedora 26 updates-testing
ProDy-1.9.3-1.fc26 R-assertthat-0.2.0-1.fc26 R-backports-1.1.1-1.fc26 R-httpuv-1.3.5-2.fc26 R-knitr-1.17-2.fc26 R-rprojroot-1.2-1.fc26 R-tikzDevice-0.10.1-1.fc26 R-withr-2.1.0-1.fc26 SDL2_mixer-2.0.2-1.fc26 backintime-1.1.24-1.fc26 brightlight-5-2.fc26 chromium-62.0.3202.89-1.fc26 cmake-3.9.5-1.fc26 copr-backend-1.107-1.fc26 copr-cli-1.65-1.fc26 copr-frontend-1.124-1.fc26 copr-rpmbuild-0.12-1.fc26 coreutils-8.27-7.fc26 cri-o-1.0.3-1.git17bcfb4.fc26 cross-binutils-2.29.1-1.fc26 fedfind-3.8.0-1.fc26 fedpkg-1.30-4.fc26 firefox-57.0-1.fc26 flatbuffers-1.7.1-1.fc26 flcluster-1.0.3-1.fc26 flnet-7.3.2-1.fc26 flwkey-1.2.3-2.fc26 ghc-attoparsec-binary-0.2-1.fc26 ghc-bindings-DSL-1.0.23-1.fc26 ghc-chunked-data-0.3.0-1.fc26 ghc-cpio-conduit-0.7.0-1.fc26 ghc-persistent-2.7.1-2.fc26 globus-gridftp-server-12.4-1.fc26 globus-gridftp-server-control-6.0-3.fc26 globus-gsi-credential-7.14-1.fc26 globus-gsi-sysconfig-8.0-1.fc26 globus-gssapi-gsi-13.4-1.fc26 gnutls-3.5.16-2.fc26 golang-github-ccding-go-stun-0.1.0-2.20171107.git82abcd5.fc26 golang-github-cznic-fileutil-0-0.3.git2d566d8.fc26 gretl-2017d-1.fc26 kernel-4.13.12-200.fc26 konversation-1.7.3-1.fc26 ldns-1.7.0-4.fc26 libglvnd-1.0.0-1.fc26 libmediainfo-17.10-1.fc26 linsim-2.0.3-1.fc26 luckybackup-0.4.9-1.fc26 mate-applets-1.18.2-2.fc26 mate-sensors-applet-1.18.3-2.fc26 mediaconch-17.08-2.fc26 mediainfo-17.10-1.fc26 mesa-17.2.4-2.fc26 nodejs-6.12.0-1.fc26 nyx-2.0.4-1.fc26 nyx-2.0.4-2.fc26 pantheon-session-settings-26.0-1.fc26 perl-Finance-Quote-1.45-1.fc26 perl-Gnome2-1.047-1.fc26 perl-Net-Ping-External-0.15-11.fc26 php-cs-fixer-2.2.10-1.fc26 php-zendframework-zend-serializer-2.8.0-4.fc26 phpunit6-6.4.4-1.fc26 poppler-0.52.0-10.fc26 postgresql-9.6.6-1.fc26 pulseaudio-11.1-6.fc26 python-asttokens-1.1.6-1.fc26 python-copr-1.83-1.fc26 python-copr-1.84-1.fc26 python-pexpect-4.3-1.fc26 python-wikitcms-2.2.0-1.fc26 qcad-3.19.0.0-1.fc26 relval-2.2.0-1.fc26 roundcubemail-1.3.3-1.fc26 rpkg-1.51-2.fc26 rubygem-pkg-config-1.2.8-1.fc26 scap-workbench-1.1.6-1.fc26 shotwell-0.26.4-1.fc26 slick-greeter-1.1.0-4.fc26 source-to-image-1.1.7-1.fc26 vala-0.36.7-1.fc26 zabbix-3.0.13-1.fc26 zstd-1.3.2-1.fc26
Details about builds:
================================================================================ ProDy-1.9.3-1.fc26 (FEDORA-2017-5a85513c5f) Application for protein structure, dynamics and sequence analysis -------------------------------------------------------------------------------- Update Information:
- Update to 1.9.3 - Obsolete old patch --------------------------------------------------------------------------------
================================================================================ R-assertthat-0.2.0-1.fc26 (FEDORA-2017-b20d77e58b) Easy Pre and Post Assertions -------------------------------------------------------------------------------- Update Information:
Initial package of assertthat for R. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511381 - Review Request: R-assertthat - Easy Pre and Post Assertions https://bugzilla.redhat.com/show_bug.cgi?id=1511381 --------------------------------------------------------------------------------
================================================================================ R-backports-1.1.1-1.fc26 (FEDORA-2017-6f379cb06b) Reimplementations of Functions Introduced Since R-3.0.0 -------------------------------------------------------------------------------- Update Information:
Initial package of backports for R. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511395 - Review Request: R-backports - Reimplementations of Functions Introduced Since R-3.0.0 https://bugzilla.redhat.com/show_bug.cgi?id=1511395 --------------------------------------------------------------------------------
================================================================================ R-httpuv-1.3.5-2.fc26 (FEDORA-2017-7a3f0d4f3b) HTTP and WebSocket Server Library -------------------------------------------------------------------------------- Update Information:
Initial package of httuv for R. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511435 - Review Request: R-httpuv - HTTP and WebSocket Server Library https://bugzilla.redhat.com/show_bug.cgi?id=1511435 --------------------------------------------------------------------------------
================================================================================ R-knitr-1.17-2.fc26 (FEDORA-2017-cf1a2d3c4e) A General-Purpose Package for Dynamic Report Generation in R -------------------------------------------------------------------------------- Update Information:
Initial package of knitr for R. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511803 - Review Request: R-knitr - A General-Purpose Package for Dynamic Report Generation in R https://bugzilla.redhat.com/show_bug.cgi?id=1511803 --------------------------------------------------------------------------------
================================================================================ R-rprojroot-1.2-1.fc26 (FEDORA-2017-927be3c65d) Finding Files in Project Subdirectories -------------------------------------------------------------------------------- Update Information:
Initial package of rprojroot for R. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511817 - Review Request: R-rprojroot - Finding Files in Project Subdirectories https://bugzilla.redhat.com/show_bug.cgi?id=1511817 --------------------------------------------------------------------------------
================================================================================ R-tikzDevice-0.10.1-1.fc26 (FEDORA-2017-612b8faaba) R Graphics Output in LaTeX Format -------------------------------------------------------------------------------- Update Information:
Initial package of tikzDevice for R. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1510686 - Review Request: R-tikzDevice - R Graphics Output in LaTeX Format https://bugzilla.redhat.com/show_bug.cgi?id=1510686 --------------------------------------------------------------------------------
================================================================================ R-withr-2.1.0-1.fc26 (FEDORA-2017-42d11872be) Run Code 'With' Temporarily Modified Global State -------------------------------------------------------------------------------- Update Information:
Update to 2.1.0: - `with_connection()` function to automatically close R file connections. - `with_db_connection()` function to automatically disconnect from DBI database connections. - `with_gctorture2` command to run code with gctorture2, useful for testing. - `with_package()`, `with_namespace()` and `with_environment()` (and equivalent locals) functions added, to run code with a modified object search path. - Add `with_tempfile()` and `local_tempfile()` functions to create temporary files which are cleanup up afterwards. - Remove the `code` argument from `local_` functions. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1509709 - R-withr-2.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1509709 --------------------------------------------------------------------------------
================================================================================ SDL2_mixer-2.0.2-1.fc26 (FEDORA-2017-c35a445780) Simple DirectMedia Layer - Sample Mixer Library -------------------------------------------------------------------------------- Update Information:
Update to 2.0.2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1508229 - SDL2_mixer-2.0.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508229 --------------------------------------------------------------------------------
================================================================================ backintime-1.1.24-1.fc26 (FEDORA-2017-ebee750022) Simple backup tool inspired from the Flyback project and TimeVault -------------------------------------------------------------------------------- Update Information:
- update to fix CVE-2017-16667 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511398 - CVE-2017-16667 backintime: Improper escaping/quoting of file paths [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1511398 [ 2 ] Bug #1511397 - CVE-2017-16667 backintime: Improper escaping/quoting of file paths [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1511397 --------------------------------------------------------------------------------
================================================================================ brightlight-5-2.fc26 (FEDORA-2017-f74304c877) CLI tool to change screen back-light brightness -------------------------------------------------------------------------------- Update Information:
setuid to root to change back-light brightness as non-privileged user --------------------------------------------------------------------------------
================================================================================ chromium-62.0.3202.89-1.fc26 (FEDORA-2017-f87ce166c5) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2017-15398, CVE-2017-15399 ---- Security fix for CVE-2017-15386 CVE-2017-15387 CVE-2017-15388 CVE-2017-15389 CVE-2017-15390 CVE-2017-15391 CVE-2017-15392 CVE-2017-15393 CVE-2017-15394 CVE-2017-15395 CVE-2017-5124 CVE-2017-5125 CVE-2017-5126 CVE-2017-5127. Build switched to use gtk3. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1510431 - CVE-2017-15399 chromium-browser: use after free in v8 https://bugzilla.redhat.com/show_bug.cgi?id=1510431 [ 2 ] Bug #1510429 - CVE-2017-15398 chromium-browser: stack buffer overflow in quic https://bugzilla.redhat.com/show_bug.cgi?id=1510429 [ 3 ] Bug #1503550 - CVE-2017-15395 chromium-browser: null pointer dereference in imagecapture https://bugzilla.redhat.com/show_bug.cgi?id=1503550 [ 4 ] Bug #1503549 - CVE-2017-15394 chromium-browser: url spoofing in extensions ui https://bugzilla.redhat.com/show_bug.cgi?id=1503549 [ 5 ] Bug #1503548 - CVE-2017-15393 chromium-browser: referrer leak in devtools https://bugzilla.redhat.com/show_bug.cgi?id=1503548 [ 6 ] Bug #1503547 - CVE-2017-15392 chromium-browser: incorrect registry key handling in platformintegration https://bugzilla.redhat.com/show_bug.cgi?id=1503547 [ 7 ] Bug #1503546 - CVE-2017-15391 chromium-browser: extension limitation bypass in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1503546 [ 8 ] Bug #1503545 - CVE-2017-15390 chromium-browser: url spoofing in omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1503545 [ 9 ] Bug #1503544 - CVE-2017-15389 chromium-browser: url spoofing in omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1503544 [ 10 ] Bug #1503543 - CVE-2017-15388 chromium-browser: out of bounds read in skia https://bugzilla.redhat.com/show_bug.cgi?id=1503543 [ 11 ] Bug #1503542 - CVE-2017-15387 chromium-browser: content security bypass https://bugzilla.redhat.com/show_bug.cgi?id=1503542 [ 12 ] Bug #1503540 - CVE-2017-15386 chromium-browser: ui spoofing in blink https://bugzilla.redhat.com/show_bug.cgi?id=1503540 [ 13 ] Bug #1503539 - CVE-2017-5133 chromium-browser: out of bounds write in skia https://bugzilla.redhat.com/show_bug.cgi?id=1503539 [ 14 ] Bug #1503538 - CVE-2017-5131 chromium-browser: out of bounds write in skia https://bugzilla.redhat.com/show_bug.cgi?id=1503538 [ 15 ] Bug #1503537 - CVE-2017-5130 chromium-browser: heap overflow in libxml2 https://bugzilla.redhat.com/show_bug.cgi?id=1503537 [ 16 ] Bug #1503536 - CVE-2017-5132 chromium-browser: incorrect stack manipulation in webassembly https://bugzilla.redhat.com/show_bug.cgi?id=1503536 [ 17 ] Bug #1503535 - CVE-2017-5129 chromium-browser: use after free in webaudio https://bugzilla.redhat.com/show_bug.cgi?id=1503535 [ 18 ] Bug #1503534 - CVE-2017-5128 chromium-browser: heap overflow in webgl https://bugzilla.redhat.com/show_bug.cgi?id=1503534 [ 19 ] Bug #1503533 - CVE-2017-5127 chromium-browser: use after free in pdfium https://bugzilla.redhat.com/show_bug.cgi?id=1503533 [ 20 ] Bug #1503532 - CVE-2017-5126 chromium-browser: use after free in pdfium https://bugzilla.redhat.com/show_bug.cgi?id=1503532 [ 21 ] Bug #1503531 - CVE-2017-5125 chromium-browser: heap overflow in skia https://bugzilla.redhat.com/show_bug.cgi?id=1503531 [ 22 ] Bug #1503530 - CVE-2017-5124 chromium-browser: uxss with mhtml https://bugzilla.redhat.com/show_bug.cgi?id=1503530 --------------------------------------------------------------------------------
================================================================================ cmake-3.9.5-1.fc26 (FEDORA-2017-45276a2668) Cross-platform make system -------------------------------------------------------------------------------- Update Information:
Update to latest stable upstream release -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1498688 - cmake-3.9.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1498688 --------------------------------------------------------------------------------
================================================================================ copr-backend-1.107-1.fc26 (FEDORA-2017-3773c94d94) Backend for Copr -------------------------------------------------------------------------------- Update Information:
- kill all processes in copr-rpmbuild's process group - add --drop-resultdir switch to copr-rpmbuild call - release_vm immediately after VM is no longer needed - remove --ignore-lock from createrepo_c ---- - invoke copr-rpmbuild with --verbose --------------------------------------------------------------------------------
================================================================================ copr-cli-1.65-1.fc26 (FEDORA-2017-16876d1de4) Command line interface for COPR -------------------------------------------------------------------------------- Update Information:
- allow to set use_bootstrap_container via API --------------------------------------------------------------------------------
================================================================================ copr-frontend-1.124-1.fc26 (FEDORA-2017-ad4342e795) Frontend for Copr -------------------------------------------------------------------------------- Update Information:
- fix build_on_pagure_commit.py - optimize check_for_anitya_version_updates - Bug 1508888 - Webhook triggered from GitHub does not start the build - allow to set use_bootstrap_container via API - fix job stucking provisionally - add PoC scripts for fedora-ci ---- - also set srpm_url when --initial-pkgs is used when creating new project - for tag webhook events, rebuild the package on the specified tag - check for pagure hostname in pagure auto-rebuilding script - fix for fatal error when accessing old upload builds that do not contain 'url' key in source_json - unify SCM source types - deprecate tito and mock-scm methods - add index on package(webhook_rebuild, source_type) and copr(copr_webhook_secret) - update docs for requests/flask interaction ---- - Fix for internal server error when old srpm upload build is accessed. --------------------------------------------------------------------------------
================================================================================ copr-rpmbuild-0.12-1.fc26 (FEDORA-2017-7a54be8cc4) Run COPR build tasks -------------------------------------------------------------------------------- Update Information:
- fix get_mock_uniqueext call - fortify make_srpm - add '--private-users=pick' to make_srpm container to improve security - compatibility with rpkg- client-0.11 - add config for src.stg.fedoraproject.org into default rpmbuild config - fix download url for new rpkg-client version ---- - provide option to root spec file path in SCM with '/' - fix exception raising in scm provider - make command debug info nicer - print task structure in the beginning even without -v - add listdir after srpm production - some Git backends do not support --depth - remove unused run method - checkout master by default - with limited depth, we need to clone with --no-single-branch - remove original perl script and mock config for it - remove no longer needed options from rpkg.conf.j2 - SCM source types unification - apply continuing line filtering from f4561c149893 - increase clone depth to address pag#129 SCM source type error --------------------------------------------------------------------------------
================================================================================ coreutils-8.27-7.fc26 (FEDORA-2017-f5ff6db124) A set of basic GNU tools commonly used in shell scripts -------------------------------------------------------------------------------- Update Information:
- df: do not call stat() on file system unless it is necessary -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511951 - df -l hangs on autofs automounted stale nfs mounts https://bugzilla.redhat.com/show_bug.cgi?id=1511951 --------------------------------------------------------------------------------
================================================================================ cri-o-1.0.3-1.git17bcfb4.fc26 (FEDORA-2017-ceb84fb6a0) CRI-O is the Kubernetes Container Runtime Interface for OCI-based containers -------------------------------------------------------------------------------- Update Information:
bump to v1.0.3 --------------------------------------------------------------------------------
================================================================================ cross-binutils-2.29.1-1.fc26 (FEDORA-2017-4ac0ead391) A GNU collection of cross-compilation binary utilities -------------------------------------------------------------------------------- Update Information:
Sync with binutils-2.29.1-1 and enable the riscv64 arch subpackage. This fixes the bug whereby ld would segfault when compiling the ipxe package. ---- Sync with binutils-2.29-1. ---- Sync with binutils-2.28-9. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1478564 - ld segfault compiling ipxe package https://bugzilla.redhat.com/show_bug.cgi?id=1478564 --------------------------------------------------------------------------------
================================================================================ fedfind-3.8.0-1.fc26 (FEDORA-2017-f966953919) Fedora compose and image finder -------------------------------------------------------------------------------- Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the Modular Server candidate composes which are currently being produced. --------------------------------------------------------------------------------
================================================================================ fedpkg-1.30-4.fc26 (FEDORA-2017-ea72793352) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information:
**Update** - Fixed chain-build - Remove hard dependency of bash-completion from fedpkg **rpkg** - Ignore TestModulesCli if openidc-client is unavailable (cqi) - Port mbs-build to rpkg (mprahl) - Add .vscode to .gitignore (mprahl) - Fix TestPatch.test_rediff in order to run with old version of mock (cqi) - Allow to specify alternative Copr config file - #184 (cqi) - Tests for patch command (cqi) - More Tests for mockbuild command (cqi) - More tests for getting spec file (cqi) - Tests for container-build-setup command (cqi) - Test for container- build to use custom config (cqi) - Suppress output from git command within setUp (cqi) - Skip test if rpmfluff is not available (lsedlar) - Allow to override build URL (cqi) - Test for mock-config command (cqi) - Tests for copr-build command (cqi) - Fix arch-override for container-build (lucarval) - Remove unsupported osbs for container-build (lucarval) - cli: add --arches support for koji_cointainerbuild (mlangsdo) - Strip refs/heads/ from branch only once (lsedlar) - Don't install bin and config files (cqi) - Fix kojiprofile selection in cliClient.container_build_koji (cqi) - Avoid branch detection for 'rpkg sources' (praiskup) - Fix encoding in new command (cqi) - Minor wording improvement in help (pgier) - Fix indentation (pviktori) - Add --with and --without options to mockbuild (pviktori) **fedpkg** - Tests for update command (cqi) - Add support for module commands (mprahl) - Clean rest cert related code (cqi) - Remove fedora cert (cqi) - Override build URL for Koji (cqi) - changing anongiturl to use src.fp.o instead of pkgs.fp.o. - #119 (tflink) - Add tests (cqi) - Enable lookaside_namespaced - #130 (cqi) - Detect dist tag correctly for RHEL and CentOS - #141 (cqi) - Remove deprecated call to platform.dist (cqi) - Do not prompt hint for SSL cert if fail to log into Koji (cqi) - Add more container-build options to bash completion (cqi) - Remove osbs from bash completion - #138 (cqi) - Install executables via entry_points - #134 (cqi) - Fix container build target (lsedlar) - Get correct build target for rawhide containers (lsedlar) - Update error message to reflect deprecation of --dist option (pgier) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1188634 - fedpkg clone -a should use https:// transport https://bugzilla.redhat.com/show_bug.cgi?id=1188634 [ 2 ] Bug #1509322 - fedpkg >= 1.30-1 depends on bash-completion https://bugzilla.redhat.com/show_bug.cgi?id=1509322 --------------------------------------------------------------------------------
================================================================================ firefox-57.0-1.fc26 (FEDORA-2017-5f358346f5) Mozilla Firefox Web browser -------------------------------------------------------------------------------- Update Information:
Update to Firefox 57 a.k.a. Quantum This update may break your installed extension, please see this Fedora Magazine article for details: https://fedoramagazine.org/firefox-57-coming-soon-quantum-leap/ --------------------------------------------------------------------------------
================================================================================ flatbuffers-1.7.1-1.fc26 (FEDORA-2017-e7766de392) Memory efficient serialization library -------------------------------------------------------------------------------- Update Information:
Initial version -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1509262 - Review Request: flatbuffers - memory efficient serialization library https://bugzilla.redhat.com/show_bug.cgi?id=1509262 --------------------------------------------------------------------------------
================================================================================ flcluster-1.0.3-1.fc26 (FEDORA-2017-c3bdb834df) A management tool for accessing dxcluster nodes -------------------------------------------------------------------------------- Update Information:
Initial package release for Fedora. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1508492 - None https://bugzilla.redhat.com/show_bug.cgi?id=1508492 [ 2 ] Bug #1060852 - None https://bugzilla.redhat.com/show_bug.cgi?id=1060852 [ 3 ] Bug #1508478 - None https://bugzilla.redhat.com/show_bug.cgi?id=1508478 [ 4 ] Bug #1321081 - None https://bugzilla.redhat.com/show_bug.cgi?id=1321081 --------------------------------------------------------------------------------
================================================================================ flnet-7.3.2-1.fc26 (FEDORA-2017-c3bdb834df) Amateur Radio Net Control Station -------------------------------------------------------------------------------- Update Information:
Initial package release for Fedora. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1508492 - None https://bugzilla.redhat.com/show_bug.cgi?id=1508492 [ 2 ] Bug #1060852 - None https://bugzilla.redhat.com/show_bug.cgi?id=1060852 [ 3 ] Bug #1508478 - None https://bugzilla.redhat.com/show_bug.cgi?id=1508478 [ 4 ] Bug #1321081 - None https://bugzilla.redhat.com/show_bug.cgi?id=1321081 --------------------------------------------------------------------------------
================================================================================ flwkey-1.2.3-2.fc26 (FEDORA-2017-c3bdb834df) Modem program for the K1EL Winkeyer series -------------------------------------------------------------------------------- Update Information:
Initial package release for Fedora. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1508492 - None https://bugzilla.redhat.com/show_bug.cgi?id=1508492 [ 2 ] Bug #1060852 - None https://bugzilla.redhat.com/show_bug.cgi?id=1060852 [ 3 ] Bug #1508478 - None https://bugzilla.redhat.com/show_bug.cgi?id=1508478 [ 4 ] Bug #1321081 - None https://bugzilla.redhat.com/show_bug.cgi?id=1321081 --------------------------------------------------------------------------------
================================================================================ ghc-attoparsec-binary-0.2-1.fc26 (FEDORA-2017-566d908f28) Binary processing extensions to Attoparsec -------------------------------------------------------------------------------- Update Information:
new package ghc-attoparsec-binary -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511660 - Review Request: ghc-attoparsec-binary - Binary processing extensions to Attoparsec https://bugzilla.redhat.com/show_bug.cgi?id=1511660 --------------------------------------------------------------------------------
================================================================================ ghc-bindings-DSL-1.0.23-1.fc26 (FEDORA-2017-35de287895) FFI domain specific language, on top of hsc2hs -------------------------------------------------------------------------------- Update Information:
New package ghc-bindings-DSL -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511670 - None https://bugzilla.redhat.com/show_bug.cgi?id=1511670 --------------------------------------------------------------------------------
================================================================================ ghc-chunked-data-0.3.0-1.fc26 (FEDORA-2017-01f26bd11b) Typeclasses for dealing with various chunked data representations -------------------------------------------------------------------------------- Update Information:
new package for ghc-chunked-data -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511662 - Review Request: ghc-chunked-data - Typeclasses for dealing with various chunked data representations https://bugzilla.redhat.com/show_bug.cgi?id=1511662 --------------------------------------------------------------------------------
================================================================================ ghc-cpio-conduit-0.7.0-1.fc26 (FEDORA-2017-cae8eabd4c) Conduit-based CPIO -------------------------------------------------------------------------------- Update Information:
New package cpio-conduit -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511668 - None https://bugzilla.redhat.com/show_bug.cgi?id=1511668 --------------------------------------------------------------------------------
================================================================================ ghc-persistent-2.7.1-2.fc26 (FEDORA-2017-e118af87d1) Type-safe, multi-backend data serialization -------------------------------------------------------------------------------- Update Information:
Update to 2.7.1 - Added an insertUniqueEntity function - Added BackendCompatible class -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1508218 - ghc-persistent-2.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508218 [ 2 ] Bug #1511649 - ghc-persistent has broken dependencies in F26 https://bugzilla.redhat.com/show_bug.cgi?id=1511649 --------------------------------------------------------------------------------
================================================================================ globus-gridftp-server-12.4-1.fc26 (FEDORA-2017-869e60e30d) Globus Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information:
globus-gridftp-server * Ignore backup & packaging files in config.d globus- gridftp-server-control * Terminate the connection if server fails to write the 220 banner globus-gsi-credential * Remove prototype for non-existing function (7.12) * Fix crash when handle->cert not set in call to globus_gsi_cred_get_cert (7.13) * Remove compatibility shims for old versions of OpenSSL (7.13) * Fix issue with voms proxy and openssl 1.1 (7.14) globus-gsi-sysconfig * Add cert and key checks based on different uid globus-gssapi-gsi * Allow configuration of non-root user to own credentials for root services (13.3) * Improve vhost support (13.4) --------------------------------------------------------------------------------
================================================================================ globus-gridftp-server-control-6.0-3.fc26 (FEDORA-2017-869e60e30d) Globus Toolkit - Globus GridFTP Server Library -------------------------------------------------------------------------------- Update Information:
globus-gridftp-server * Ignore backup & packaging files in config.d globus- gridftp-server-control * Terminate the connection if server fails to write the 220 banner globus-gsi-credential * Remove prototype for non-existing function (7.12) * Fix crash when handle->cert not set in call to globus_gsi_cred_get_cert (7.13) * Remove compatibility shims for old versions of OpenSSL (7.13) * Fix issue with voms proxy and openssl 1.1 (7.14) globus-gsi-sysconfig * Add cert and key checks based on different uid globus-gssapi-gsi * Allow configuration of non-root user to own credentials for root services (13.3) * Improve vhost support (13.4) --------------------------------------------------------------------------------
================================================================================ globus-gsi-credential-7.14-1.fc26 (FEDORA-2017-869e60e30d) Globus Toolkit - Globus GSI Credential Library -------------------------------------------------------------------------------- Update Information:
globus-gridftp-server * Ignore backup & packaging files in config.d globus- gridftp-server-control * Terminate the connection if server fails to write the 220 banner globus-gsi-credential * Remove prototype for non-existing function (7.12) * Fix crash when handle->cert not set in call to globus_gsi_cred_get_cert (7.13) * Remove compatibility shims for old versions of OpenSSL (7.13) * Fix issue with voms proxy and openssl 1.1 (7.14) globus-gsi-sysconfig * Add cert and key checks based on different uid globus-gssapi-gsi * Allow configuration of non-root user to own credentials for root services (13.3) * Improve vhost support (13.4) --------------------------------------------------------------------------------
================================================================================ globus-gsi-sysconfig-8.0-1.fc26 (FEDORA-2017-869e60e30d) Globus Toolkit - Globus GSI System Config Library -------------------------------------------------------------------------------- Update Information:
globus-gridftp-server * Ignore backup & packaging files in config.d globus- gridftp-server-control * Terminate the connection if server fails to write the 220 banner globus-gsi-credential * Remove prototype for non-existing function (7.12) * Fix crash when handle->cert not set in call to globus_gsi_cred_get_cert (7.13) * Remove compatibility shims for old versions of OpenSSL (7.13) * Fix issue with voms proxy and openssl 1.1 (7.14) globus-gsi-sysconfig * Add cert and key checks based on different uid globus-gssapi-gsi * Allow configuration of non-root user to own credentials for root services (13.3) * Improve vhost support (13.4) --------------------------------------------------------------------------------
================================================================================ globus-gssapi-gsi-13.4-1.fc26 (FEDORA-2017-869e60e30d) Globus Toolkit - GSSAPI library -------------------------------------------------------------------------------- Update Information:
globus-gridftp-server * Ignore backup & packaging files in config.d globus- gridftp-server-control * Terminate the connection if server fails to write the 220 banner globus-gsi-credential * Remove prototype for non-existing function (7.12) * Fix crash when handle->cert not set in call to globus_gsi_cred_get_cert (7.13) * Remove compatibility shims for old versions of OpenSSL (7.13) * Fix issue with voms proxy and openssl 1.1 (7.14) globus-gsi-sysconfig * Add cert and key checks based on different uid globus-gssapi-gsi * Allow configuration of non-root user to own credentials for root services (13.3) * Improve vhost support (13.4) --------------------------------------------------------------------------------
================================================================================ gnutls-3.5.16-2.fc26 (FEDORA-2017-4a095800d2) A TLS protocol implementation -------------------------------------------------------------------------------- Update Information:
Prevent the loading of all PKCS#11 modules on certificate verification -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1507402 - Fedora 26 server - wget - gnutls/p11-kit/OpenSC - pcsc-lite/pcscd - polkit https://bugzilla.redhat.com/show_bug.cgi?id=1507402 --------------------------------------------------------------------------------
================================================================================ golang-github-ccding-go-stun-0.1.0-2.20171107.git82abcd5.fc26 (FEDORA-2017-37ec80dfa7) STUN client (RFC 3489 and RFC 5389) implementation in Go -------------------------------------------------------------------------------- Update Information:
Bump to commit 82abcd5. This fixes a typo in a constant (backwards compatible change). --------------------------------------------------------------------------------
================================================================================ golang-github-cznic-fileutil-0-0.3.git2d566d8.fc26 (FEDORA-2017-c04a8f217d) File utility functions for Go -------------------------------------------------------------------------------- Update Information:
Bump to commit 2d566d8. This fixes a race condition. --------------------------------------------------------------------------------
================================================================================ gretl-2017d-1.fc26 (FEDORA-2017-189bb929c2) A tool for econometric analysis -------------------------------------------------------------------------------- Update Information:
- update to 2017d - http://lists.wfu.edu/pipermail/gretl- announce/2017/000044.html --------------------------------------------------------------------------------
================================================================================ kernel-4.13.12-200.fc26 (FEDORA-2017-31d7720d7e) The Linux kernel -------------------------------------------------------------------------------- Update Information:
The 4.13.12 update contains a number of important fixes across the tree. It contains security fixes for CVE-2017-16532 and CVE-2017-16538. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1510826 - CVE-2017-16538 kernel: general protection fault in drivers/media/usb/dvb-usb-v2/lmedm04.c https://bugzilla.redhat.com/show_bug.cgi?id=1510826 [ 2 ] Bug #1510835 - CVE-2017-16532 kernel: Null pointer dereference in get_endpoints function in drivers/usb/misc/usbtest.c https://bugzilla.redhat.com/show_bug.cgi?id=1510835 --------------------------------------------------------------------------------
================================================================================ konversation-1.7.3-1.fc26 (FEDORA-2017-1f52998c8b) A user friendly IRC client -------------------------------------------------------------------------------- Update Information:
Latest stable release, see also ���https://konversation.kde.org/ --------------------------------------------------------------------------------
================================================================================ ldns-1.7.0-4.fc26 (FEDORA-2017-3915878e18) Low-level DNS(SEC) library with API -------------------------------------------------------------------------------- Update Information:
Fix memory corruption in ldns_rr_new_frm_fp_l (#1511046) Fix memory corruption in ldns_str2rdf_long_str (#1511046) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1510993 - ldns: Memory corruption in ldns_str2rdf_long_str https://bugzilla.redhat.com/show_bug.cgi?id=1510993 [ 2 ] Bug #1510985 - ldns: Memory corruption in ldns_rr_new_frm_fp_l https://bugzilla.redhat.com/show_bug.cgi?id=1510985 --------------------------------------------------------------------------------
================================================================================ libglvnd-1.0.0-1.fc26 (FEDORA-2017-1d805ecfa0) The GL Vendor-Neutral Dispatch library -------------------------------------------------------------------------------- Update Information:
Update to 1.0.0 release --------------------------------------------------------------------------------
================================================================================ libmediainfo-17.10-1.fc26 (FEDORA-2017-5454fd0f9b) Library for supplies technical and tag information about a video or audio file -------------------------------------------------------------------------------- Update Information:
Update to 17.10. --------------------------------------------------------------------------------
================================================================================ linsim-2.0.3-1.fc26 (FEDORA-2017-c3bdb834df) Tool for Amateur Radio Digital Mode evaluation -------------------------------------------------------------------------------- Update Information:
Initial package release for Fedora. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1508492 - None https://bugzilla.redhat.com/show_bug.cgi?id=1508492 [ 2 ] Bug #1060852 - None https://bugzilla.redhat.com/show_bug.cgi?id=1060852 [ 3 ] Bug #1508478 - None https://bugzilla.redhat.com/show_bug.cgi?id=1508478 [ 4 ] Bug #1321081 - None https://bugzilla.redhat.com/show_bug.cgi?id=1321081 --------------------------------------------------------------------------------
================================================================================ luckybackup-0.4.9-1.fc26 (FEDORA-2017-2aaa49bad2) A powerful, fast and reliable backup and sync tool -------------------------------------------------------------------------------- Update Information:
new version (with bugfixes) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1504384 - luckybackup-0.4.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504384 --------------------------------------------------------------------------------
================================================================================ mate-applets-1.18.2-2.fc26 (FEDORA-2017-76263fb298) MATE Desktop panel applets -------------------------------------------------------------------------------- Update Information:
- add some upstream fixes ---- - update to 1.18.2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1375377 - False value in tooltip https://bugzilla.redhat.com/show_bug.cgi?id=1375377 --------------------------------------------------------------------------------
================================================================================ mate-sensors-applet-1.18.3-2.fc26 (FEDORA-2017-53cb35d1b4) MATE panel applet for hardware sensors -------------------------------------------------------------------------------- Update Information:
- some backports form upstream master branch --------------------------------------------------------------------------------
================================================================================ mediaconch-17.08-2.fc26 (FEDORA-2017-8dcbe85f0f) Most relevant technical and tag data for video and audio files (CLI) -------------------------------------------------------------------------------- Update Information:
Rebuild for new libmediainfo. --------------------------------------------------------------------------------
================================================================================ mediainfo-17.10-1.fc26 (FEDORA-2017-5454fd0f9b) Supplies technical and tag information about a video or audio file (CLI) -------------------------------------------------------------------------------- Update Information:
Update to 17.10. --------------------------------------------------------------------------------
================================================================================ mesa-17.2.4-2.fc26 (FEDORA-2017-65240cb11b) Mesa graphics libraries -------------------------------------------------------------------------------- Update Information:
Update to 17.2.4 --------------------------------------------------------------------------------
================================================================================ nodejs-6.12.0-1.fc26 (FEDORA-2017-e89ab0785e) JavaScript runtime -------------------------------------------------------------------------------- Update Information:
Update --------------------------------------------------------------------------------
================================================================================ nyx-2.0.4-1.fc26 (FEDORA-2017-43d3e929ae) Command-line monitor for Tor -------------------------------------------------------------------------------- Update Information:
Version 2.0.4 --------------------------------------------------------------------------------
================================================================================ nyx-2.0.4-2.fc26 (FEDORA-2017-984cf9a9e0) Command-line monitor for Tor -------------------------------------------------------------------------------- Update Information:
Add Obsoletes for all tor-arm subpackages --------------------------------------------------------------------------------
================================================================================ pantheon-session-settings-26.0-1.fc26 (FEDORA-2017-bf0801776b) Pantheon session configuration files -------------------------------------------------------------------------------- Update Information:
Update to version 26.0. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1512186 - pantheon-session-settings-26.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512186 --------------------------------------------------------------------------------
================================================================================ perl-Finance-Quote-1.45-1.fc26 (FEDORA-2017-e5b17ca891) A Perl module that retrieves stock and mutual fund quotes -------------------------------------------------------------------------------- Update Information:
Current upstream maintenance release. Various sources fixed, new source AlphaVantage added. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1509722 - perl-Finance-Quote-1.40 is available https://bugzilla.redhat.com/show_bug.cgi?id=1509722 [ 2 ] Bug #1510220 - perl-Finance-Quote-1.42 is available https://bugzilla.redhat.com/show_bug.cgi?id=1510220 [ 3 ] Bug #1510678 - perl-Finance-Quote-1.44 is available https://bugzilla.redhat.com/show_bug.cgi?id=1510678 [ 4 ] Bug #1511240 - perl-Finance-Quote-1.45 is available https://bugzilla.redhat.com/show_bug.cgi?id=1511240 --------------------------------------------------------------------------------
================================================================================ perl-Gnome2-1.047-1.fc26 (FEDORA-2017-cfc7f4c96e) Perl interface to the 2.x series of the GNOME libraries -------------------------------------------------------------------------------- Update Information:
This release corrects tests. We deliver it only to provide up-to-date version string. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1510894 - perl-Gnome2-1.047 is available https://bugzilla.redhat.com/show_bug.cgi?id=1510894 --------------------------------------------------------------------------------
================================================================================ perl-Net-Ping-External-0.15-11.fc26 (FEDORA-2017-69e06543c1) Cross-platform interface to ICMP "ping" utilities -------------------------------------------------------------------------------- Update Information:
Fixes a command injection vulnerability (CVE-2008-7319) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1510785 - CVE-2008-7319 perl-Net-Ping-External: Unproper argument sanitization [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1510785 --------------------------------------------------------------------------------
================================================================================ php-cs-fixer-2.2.10-1.fc26 (FEDORA-2017-811687f497) A tool to automatically fix PHP code style -------------------------------------------------------------------------------- Update Information:
**Changelog for v2.2.10** * bug #3199 TokensAnalyzer - getClassyElements (SpacePossum) * bug #3208 BracesFixer - Fix for instantiation in control structures (julienfalque, SpacePossum) * bug #3215 BinaryOperatorSpacesFixer - Fix spaces around multiple exception catching (|) (ntzm) * bug #3216 AbstractLinesBeforeNamespaceFixer - add min. and max. option, not only single target count (SpacePossum) * bug #3217 TokenizerLinter - fix lack of linting when code is cached (SpacePossum, keradus) * minor #3200 Skip slow test when Xdebug is loaded (julienfalque) * minor #3219 Normalise references to GitHub in docs (ntzm) * minor #3226 Remove unused imports (ntzm) * minor #3231 Fix typos (ntzm) * minor #3234 Simplify Cache\Signature::equals (ntzm) * minor #3237 UnconfigurableFixer - use only LF (keradus) * minor #3238 AbstractFixerTest - fix @cover annotation (keradus) ---- **Changelog for v2.2.9** * bug #3062 BraceClassInstantiationTransformer - Fix instantiation inside method call braces case (julienfalque, keradus) * bug #3083 SingleBlankLineBeforeNamespaceFixer - Fix handling namespace right after opening tag (mlocati) * bug #3109 SwitchCaseSemicolonToColonFixer - Fix bug with nested constructs (SpacePossum) * bug #3123 Cache - File permissions (SpacePossum) * bug #3172 IndentationTypeFixer - do not touch whitespace that is not indentation (SpacePossum) * bug #3176 NoMultilineWhitespaceBeforeSemicolonsFixer - SpaceAfterSemicolonFixer - priority fix (SpacePossum) * bug #3193 TokensAnalyzer::getClassyElements - sort result before returning (SpacePossum) * bug #3196 SelfUpdateCommand - fix exit status when can't determine newest version (julienfalque) * minor #3107 ConfigurationResolver - improve error message when rule is not found (SpacePossum) * minor #3113 Add WordMatcher (keradus) * minor #3133 Unify Reporter tests (keradus) * minor #3134 Allow Symfony 4 (keradus, garak) * minor #3136 PHPUnit - call hooks from parent class as well (keradus) * minor #3145 misc - Typo (localheinz) * minor #3150 Fix CircleCI (julienfalque) * minor #3151 Update gitattributes to ignore next file (keradus) * minor #3156 Update php-coveralls (keradus) * minor #3166 README - add link to new gitter channel. (SpacePossum) * minor #3174 Update UPGRADE.md (vitek-rostislav) * minor #3180 Fix usage of static variables (kubawerlos) * minor #3184 Code grooming - sort content of arrays (keradus) * minor #3191 Travis - add nightly build to allow_failures due to Travis issues (keradus) * minor #3197 DX groom CS (keradus) --------------------------------------------------------------------------------
================================================================================ php-zendframework-zend-serializer-2.8.0-4.fc26 (FEDORA-2017-93cb61a508) Zend Framework Serializer component -------------------------------------------------------------------------------- Update Information:
Add fix for BigEndian. --------------------------------------------------------------------------------
================================================================================ phpunit6-6.4.4-1.fc26 (FEDORA-2017-432a60f1b7) The PHP Unit Testing framework -------------------------------------------------------------------------------- Update Information:
**Version 6.4.4** - 2017-11-08 * **Fixed** * Fixed [#2814](https://github.com/sebastianbergmann/phpunit/pull/2814): Incorrect signature of `expectExceptionObject()` * Fixed [#2844](https://github.com/sebastianbergmann/phpunit/issues/2844): The commandline option `--whitelist` has no effect --------------------------------------------------------------------------------
================================================================================ poppler-0.52.0-10.fc26 (FEDORA-2017-1762a103bf) PDF rendering library -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2017-15565 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1510977 - CVE-2017-15565 poppler: NULL pointer dereference in the GfxImageColorMap::getGrayLine() function https://bugzilla.redhat.com/show_bug.cgi?id=1510977 --------------------------------------------------------------------------------
================================================================================ postgresql-9.6.6-1.fc26 (FEDORA-2017-1f1fdab532) PostgreSQL client programs -------------------------------------------------------------------------------- Update Information:
update to 9.6.6 per release notes: https://www.postgresql.org/docs/9.6/static/release-9-6-6.html --------------------------------------------------------------------------------
================================================================================ pulseaudio-11.1-6.fc26 (FEDORA-2017-5865b464f0) Improved Linux Sound Server -------------------------------------------------------------------------------- Update Information:
- Fix pa crashing on Bay- and Cherry-Trail devices ---- Install dell-dock- tb16-usb-audio.conf, missing from previous packaging. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1492344 - Please add Dell TB16 audio configuration https://bugzilla.redhat.com/show_bug.cgi?id=1492344 --------------------------------------------------------------------------------
================================================================================ python-asttokens-1.1.6-1.fc26 (FEDORA-2017-254e907606) Module to annotate Python abstract syntax trees with source code positions -------------------------------------------------------------------------------- Update Information:
New package. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1510188 - Review Request: python-asttokens - Module to annotate Python abstract syntax trees with source code positions https://bugzilla.redhat.com/show_bug.cgi?id=1510188 --------------------------------------------------------------------------------
================================================================================ python-copr-1.83-1.fc26 (FEDORA-2017-16876d1de4) Python interface for Copr -------------------------------------------------------------------------------- Update Information:
- allow to set use_bootstrap_container via API --------------------------------------------------------------------------------
================================================================================ python-copr-1.84-1.fc26 (FEDORA-2017-60c61b6e79) Python interface for Copr -------------------------------------------------------------------------------- Update Information:
Change default COPR URL route from http://copr.fedoraproject.org to https://copr.fedorainfracloud.org --------------------------------------------------------------------------------
================================================================================ python-pexpect-4.3-1.fc26 (FEDORA-2017-7e2259ac66) Unicode-aware Pure Python Expect-like module -------------------------------------------------------------------------------- Update Information:
Update to 4.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511728 - python-pexpect-4.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1511728 --------------------------------------------------------------------------------
================================================================================ python-wikitcms-2.2.0-1.fc26 (FEDORA-2017-f966953919) Fedora QA wiki test management Python library -------------------------------------------------------------------------------- Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the Modular Server candidate composes which are currently being produced. --------------------------------------------------------------------------------
================================================================================ qcad-3.19.0.0-1.fc26 (FEDORA-2017-47bf1d1d36) Powerful 2D CAD system -------------------------------------------------------------------------------- Update Information:
- Update to 3.19.0.0 --------------------------------------------------------------------------------
================================================================================ relval-2.2.0-1.fc26 (FEDORA-2017-f966953919) Tool for interacting with Fedora QA wiki pages -------------------------------------------------------------------------------- Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the Modular Server candidate composes which are currently being produced. --------------------------------------------------------------------------------
================================================================================ roundcubemail-1.3.3-1.fc26 (FEDORA-2017-1560290881) Round Cube Webmail is a browser-based multilingual IMAP client -------------------------------------------------------------------------------- Update Information:
Upstream announcement for **version 1.3.3** This is a security update to the stable version 1.3. It primarily fixes a recently discovered file disclosure vulnerability caused by insufficient input validation in conjunction with file- based attachment plugins, which are used by default. More details will be published under CVE-2017-16651. We strongly recommend to update all productive installations of Roundcube. Please do backup your data before updating! **Changelog** - Fix decoding of mailto: links with + character in HTML messages (#6020) - Fix false reporting of failed upgrade in installto.sh (#6019) - Fix file disclosure vulnerability caused by insufficient input validation **CVE-2017-16651** (#6026) - Fix mangled non-ASCII characters in links in HTML messages (#6028) --------------------------------------------------------------------------------
================================================================================ rpkg-1.51-2.fc26 (FEDORA-2017-ea72793352) Python library for interacting with rpm+git -------------------------------------------------------------------------------- Update Information:
**Update** - Fixed chain-build - Remove hard dependency of bash-completion from fedpkg **rpkg** - Ignore TestModulesCli if openidc-client is unavailable (cqi) - Port mbs-build to rpkg (mprahl) - Add .vscode to .gitignore (mprahl) - Fix TestPatch.test_rediff in order to run with old version of mock (cqi) - Allow to specify alternative Copr config file - #184 (cqi) - Tests for patch command (cqi) - More Tests for mockbuild command (cqi) - More tests for getting spec file (cqi) - Tests for container-build-setup command (cqi) - Test for container- build to use custom config (cqi) - Suppress output from git command within setUp (cqi) - Skip test if rpmfluff is not available (lsedlar) - Allow to override build URL (cqi) - Test for mock-config command (cqi) - Tests for copr-build command (cqi) - Fix arch-override for container-build (lucarval) - Remove unsupported osbs for container-build (lucarval) - cli: add --arches support for koji_cointainerbuild (mlangsdo) - Strip refs/heads/ from branch only once (lsedlar) - Don't install bin and config files (cqi) - Fix kojiprofile selection in cliClient.container_build_koji (cqi) - Avoid branch detection for 'rpkg sources' (praiskup) - Fix encoding in new command (cqi) - Minor wording improvement in help (pgier) - Fix indentation (pviktori) - Add --with and --without options to mockbuild (pviktori) **fedpkg** - Tests for update command (cqi) - Add support for module commands (mprahl) - Clean rest cert related code (cqi) - Remove fedora cert (cqi) - Override build URL for Koji (cqi) - changing anongiturl to use src.fp.o instead of pkgs.fp.o. - #119 (tflink) - Add tests (cqi) - Enable lookaside_namespaced - #130 (cqi) - Detect dist tag correctly for RHEL and CentOS - #141 (cqi) - Remove deprecated call to platform.dist (cqi) - Do not prompt hint for SSL cert if fail to log into Koji (cqi) - Add more container-build options to bash completion (cqi) - Remove osbs from bash completion - #138 (cqi) - Install executables via entry_points - #134 (cqi) - Fix container build target (lsedlar) - Get correct build target for rawhide containers (lsedlar) - Update error message to reflect deprecation of --dist option (pgier) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1188634 - fedpkg clone -a should use https:// transport https://bugzilla.redhat.com/show_bug.cgi?id=1188634 [ 2 ] Bug #1509322 - fedpkg >= 1.30-1 depends on bash-completion https://bugzilla.redhat.com/show_bug.cgi?id=1509322 --------------------------------------------------------------------------------
================================================================================ rubygem-pkg-config-1.2.8-1.fc26 (FEDORA-2017-fafe159ee8) A pkg-config implementation by Ruby -------------------------------------------------------------------------------- Update Information:
New version 1.2.8 is released. --------------------------------------------------------------------------------
================================================================================ scap-workbench-1.1.6-1.fc26 (FEDORA-2017-b24cc03978) Scanning, tailoring, editing and validation tool for SCAP content -------------------------------------------------------------------------------- Update Information:
Updated to new upstream release 1.1.6 --------------------------------------------------------------------------------
================================================================================ shotwell-0.26.4-1.fc26 (FEDORA-2017-59485f9be5) A photo organizer for the GNOME desktop -------------------------------------------------------------------------------- Update Information:
#### Shotwell 0.26.4 - 10 Nov 2017 #### * Fix buld rules for appstream files * Fix import progress bar when importing RAW files * Fix renaming of backing photos when renaming to lower case on import * Fix removing the RAW file when deleting photos and there is no Trash * Fix duplicate detection for Canon imports * Fix importing MP4 videos from certain Android devices * Fix missing event pictures when moving library * Fix useless sub-menu for saved searches * Fix criticals on right-click * Fix help files to pass validation * Fix assert when removing last photo from import roll * Fix scrolling and zooming by mouse wheel on Wayland * Translation updates --------------------------------------------------------------------------------
================================================================================ slick-greeter-1.1.0-4.fc26 (FEDORA-2017-be9cd2d8a8) A slick-looking LightDM greeter -------------------------------------------------------------------------------- Update Information:
- Show system-logo in lower left corner by default - Add patch from upstream to use gsettings default if there is no different preset in the config file --------------------------------------------------------------------------------
================================================================================ source-to-image-1.1.7-1.fc26 (FEDORA-2017-5da6b54dd8) A tool for building artifacts from source and injecting into docker images -------------------------------------------------------------------------------- Update Information:
Update to 1.1.7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1357171 - source-to-image-v1.1.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1357171 --------------------------------------------------------------------------------
================================================================================ vala-0.36.7-1.fc26 (FEDORA-2017-9dba5104b6) A modern programming language for GNOME -------------------------------------------------------------------------------- Update Information:
vala 0.36.7 release. For details, see https://mail.gnome.org/archives/ftp- release-list/2017-November/msg00017.html --------------------------------------------------------------------------------
================================================================================ zabbix-3.0.13-1.fc26 (FEDORA-2017-ad4d499be5) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information:
https://www.zabbix.com/rn3.0.13 https://www.zabbix.com/documentation/3.0/manual/installation/upgrade_notes_3... --------------------------------------------------------------------------------
================================================================================ zstd-1.3.2-1.fc26 (FEDORA-2017-4bbc4914b3) Zstd compression library -------------------------------------------------------------------------------- Update Information:
Latest upstream --------------------------------------------------------------------------------