The following Fedora 26 Security updates need testing:
Age URL
265
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7
docker-distribution-2.6.2-1.git48294d9.fc26
96
https://bodhi.fedoraproject.org/updates/FEDORA-2018-66b885ae3c
keycloak-httpd-client-install-0.8-1.fc26
84
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f8a78a5ef
squid-4.0.23-1.fc26
59
https://bodhi.fedoraproject.org/updates/FEDORA-2018-db5041e661 bro-2.5.3-1.fc26
42
https://bodhi.fedoraproject.org/updates/FEDORA-2018-122ea355a7
memcached-1.4.39-2.fc26
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-010396b4a2
chromium-65.0.3325.181-1.fc26
20
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7649fef814
thunderbird-52.7.0-1.fc26
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-922cc2fbaa
drupal8-8.3.9-1.fc26
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6855fa237d
mod_http2-1.10.16-1.fc26
16
https://bodhi.fedoraproject.org/updates/FEDORA-2018-22b25bab31
httpd-2.4.33-2.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ce5d7106d8 pcs-0.9.160-2.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b3f8bee2e0
jgraphx-3.6.0.0-3.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6dc921a19
roundcubemail-1.3.6-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ac348a00ef
opencv-3.2.0-15.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d87e29047d
corosync-2.4.4-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-58b0c6a60e anki-2.0.50-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
62
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ddd1e5c30a
iproute-4.14.1-5.fc26
20
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7649fef814
thunderbird-52.7.0-1.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0787a0a775
python-productmd-1.11-2.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d87e29047d
corosync-2.4.4-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6804e5d47a
ethtool-4.16-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-65aa477eb7
samba-4.6.15-0.fc26
The following builds have been pushed to Fedora 26 updates-testing
R-repr-0.13-1.fc26
asciinema-2.0.1-1.fc26
cockatrice-2.5.1-1.fc26
composer-1.6.4-1.fc26
cura-lulzbot-2.6.69-2.fc26
datamash-1.3-1.fc26
distribution-gpg-keys-1.20-1.fc26
dovecot-2.2.35-1.fc26
gnubik-2.4.3-1.fc26
grsync-1.2.6-1.fc26
libcgroup-0.41-17.fc26
lmdb-0.9.22-1.fc26
magic-8.1.207-1.fc26
mod_gnutls-0.8.4-1.fc26
osinfo-db-20180416-1.fc26
parallel-20180322-1.fc26
perl-5.24.4-397.fc26
perl-CPAN-Perl-Releases-3.54-1.fc26
perl-Module-CoreList-5.20180414-1.fc26
php-pecl-couchbase2-2.4.6-1.fc26
php-phpseclib-2.0.11-1.fc26
php-zendframework-zend-stdlib-3.1.1-1.fc26
porcupine-0.1.0-1.fc26
py3status-3.8-1.fc26
python-aiodns-1.1.1-1.fc26
python-bitcoinlib-0.10.1-1.fc26
python-josepy-1.1.0-1.fc26
sane-backends-1.0.27-16.fc26
scummvm-2.0.0-1.fc26
scummvm-tools-2.0.0-1.fc26
wine-3.6-1.fc26
xfce4-verve-plugin-1.1.1-1.fc26
zile-2.4.14-1.fc26
Details about builds:
================================================================================
R-repr-0.13-1.fc26 (FEDORA-2018-e800b24a40)
Serializable Representations
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 15 2018 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.13-1
- Update to latest version
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1567575 - R-repr-0.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1567575
--------------------------------------------------------------------------------
================================================================================
asciinema-2.0.1-1.fc26 (FEDORA-2018-d32018272f)
Command line client (terminal recorder) for
asciinema.org service
--------------------------------------------------------------------------------
Update Information:
Update to version 2.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Jakub Jedelsky <jakub.jedelsky(a)gmail.com> - 2.0.1-1
- Update to version 2.0.1
* Mon Feb 12 2018 Jakub Jedelsky <jakub.jedelsky(a)gmail.com> - 2.0.0-1
- Update to version 2.0.0
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1567096 - asciinema-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1567096
--------------------------------------------------------------------------------
================================================================================
cockatrice-2.5.1-1.fc26 (FEDORA-2018-44105a72cb)
A cross-platform virtual tabletop software for multi-player card games
--------------------------------------------------------------------------------
Update Information:
# User Interface * Flip renamed to Turn Over (as the wording was confusing). *
New tips added and fixes for tip of the day. * Server list refreshed from
version control. * VS will install with the window so users know what's
happening. * Spoiler layout update. * Server admin contact information shown
with server selection. # Under the Hood * Deck editor bug with foreign
languages fixed. # Oracle * Fixed sorting of split cards.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 17 2018 Link Dupont <linkdupont(a)fedoraproject.org> - 2.5.1-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562607 - cockatrice-2018-04-16-Release-2.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1562607
--------------------------------------------------------------------------------
================================================================================
composer-1.6.4-1.fc26 (FEDORA-2018-8b35c531db)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.6.4** - 2018-04-13 * Security fixes in some edge case scenarios,
recommended update for all users * Fixed regression in version guessing of
path repositories * Fixed removing aliased packages from the repository, which
might resolve some odd update bugs * Fixed updating of package URLs for GitLab
* Fixed run-script --list failing when script handlers were defined * Fixed
init command not respecting the current php version when selecting package
versions * Fixed handling of uppercase package names in why/why-not commands
* Fixed exclude-from-classmap symlink handling * Fixed filesystem permissions
of PEAR binaries * Improved performance of subversion repos * Other minor
fixes
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Remi Collet <remi(a)remirepo.net> - 1.6.4-1
- update to 1.6.4
--------------------------------------------------------------------------------
================================================================================
cura-lulzbot-2.6.69-2.fc26 (FEDORA-2018-9ff2d6a2fb)
3D printer control software
--------------------------------------------------------------------------------
Update Information:
Add PostProcessingPlugin
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Tom Callaway <spot(a)fedoraproject.org> - 1:2.6.69-2
- add PostProcessingPlugin
--------------------------------------------------------------------------------
================================================================================
datamash-1.3-1.fc26 (FEDORA-2018-a30b5449b3)
A statistical, numerical and textual operations tool
--------------------------------------------------------------------------------
Update Information:
- new upstream release 1.3 - added upstream patch to fix tests on some platforms
--------------------------------------------------------------------------------
================================================================================
distribution-gpg-keys-1.20-1.fc26 (FEDORA-2018-5c276e7c3a)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
- add scientific linux key - update copr keys - add Fedora 29 key - Update keys
for rpmfusion - Add rpmfusion f29 f30 keys for free nonfree
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Miroslav Such�� <msuchy(a)redhat.com> 1.20-1
- add scientific linux key
- update copr keys
- add Fedora 29 key
- Update keys for rpmfusion
- Add rpmfusion f29 f30 keys for free nonfree
--------------------------------------------------------------------------------
================================================================================
dovecot-2.2.35-1.fc26 (FEDORA-2018-8ba4601398)
Secure imap and pop3 server
--------------------------------------------------------------------------------
Update Information:
dovecot updated to 2.2.35, pigeonhole updated to 0.4.23 ---- dovecot
updated to 2.2.34, pigeonhole updated to 0.4.22 fixes CVE-2017-15130: TLS
SNI config lookups may lead to excessive memory usage, causing imap-
login/pop3-login VSZ limit to be reached and the process restarted. This
happens only if Dovecot config has local_name { } or local { }
configuration blocks and attacker uses randomly generated SNI servernames.
fixes CVE-2017-14461: Parsing invalid email addresses may cause a crash or
leak memory contents to attacker. For example, these memory contents might
contain parts of an email from another user if the same imap process is
reused for multiple users. fixes CVE-2017-15132: Aborted SASL authentication
leaks memory in login process. ---- - doveadm: Fix crash in proxying
(or dsync replication) if remote is running older than v2.2.33 - auth: Fix
memory leak in %{ldap_dn} - dict-sql: Fix data types to work correctly with
Cassandra
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 21 2018 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.2.35-1
- dovecot updated to 2.2.35, pigeonhole updated to 0.4.23
* Thu Mar 1 2018 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.2.34-1
- dovecot updated to 2.2.34, pigeonhole updated to 0.4.22
- fixes CVE-2017-15130: TLS SNI config lookups may lead to excessive
memory usage, causing imap-login/pop3-login VSZ limit to be reached
and the process restarted. This happens only if Dovecot config has
local_name { } or local { } configuration blocks and attacker uses
randomly generated SNI servernames.
- fixes CVE-2017-14461: Parsing invalid email addresses may cause a crash or
leak memory contents to attacker. For example, these memory contents
might contain parts of an email from another user if the same imap
process is reused for multiple users.
- fixes CVE-2017-15132: Aborted SASL authentication leaks memory in login
process.
* Fri Feb 9 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1:2.2.33.2-5
- Escape macros in %changelog
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:2.2.33.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Jan 20 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 1:2.2.33.2-3
- Rebuilt for switch to libxcrypt
* Mon Jan 8 2018 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.2.33.2-2
- remove tcp_wrappers on Fedora 28 and later (#1518761)
- use use mariadb-connector-c-devel instead of mysql-devel on Fedora 28 and later
(#1493624)
* Tue Oct 24 2017 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.2.33.2-1
- dovecot updated to 2.2.33.2
- doveadm: Fix crash in proxying (or dsync replication) if remote is
running older than v2.2.33
- auth: Fix memory leak in %{ldap_dn}
- dict-sql: Fix data types to work correctly with Cassandra
* Wed Oct 18 2017 Michal Hlavinka <mhlavink(a)redhat.com> - 1:2.2.33.1-1
- dovecot updated to 2.2.33.1, pigeonhole updated to
- Added %{if}, see
https://wiki2.dovecot.org/Variables#Conditionals
- sdbox: Mails were always opened when expunging, unless
mail_attachment_fs was explicitly set to empty.
- lmtp/doveadm proxy: hostip passdb field was ignored, which caused
unnecessary DNS lookups if host field wasn't an IP
- lmtp proxy: Fix crash when receiving unexpected reply in RCPT TO
- quota_clone: Update also when quota is unlimited (broken in v2.2.31)
- mbox, zlib: Fix assert-crash when accessing compressed mbox
- doveadm director kick -f parameter didn't work
- doveadm director flush <host> resulted flushing all hosts, if <host>
wasn't an IP address.
- director: Various fixes to handling backend/director changes at
abnormal times, especially while ring was unsynced.
- director: Use less CPU in imap-login processes when moving/kicking
many users.
- lmtp: Session IDs were duplicated/confusing with multiple RCPT TOs
when lmtp_rcpt_check_quota=yes
- LDA Sieve plugin: Fixed sequential execution of LDAP-based scripts. A
missing LDAP-based script could cause the script sequence to exit earlier.
- sieve-filter: Removed the (now) duplicate utf8 to mutf7 mailbox name
conversion. This caused problems with mailbox names containing UTF-8
characters.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1550508 - CVE-2017-14461 dovecot: Information Leak Vulnerability in
rfc822_parse_domain leading to denial-of-service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1550508
[ 2 ] Bug #1538717 - CVE-2017-15132 dovecot: Auth leaks memory if SASL authentication is
aborted [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1538717
[ 3 ] Bug #1505008 - dovecot-2.2.33.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1505008
--------------------------------------------------------------------------------
================================================================================
gnubik-2.4.3-1.fc26 (FEDORA-2018-d021ba6c20)
3D interactive graphics puzzle
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream 2.4.3, fixes rhbz #1438618 - spec cleanup
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 15 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 2.4.3-1
- update to latest upstream 2.4.3, fixes rhbz #1438618
- spec cleanup
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.2-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jan 11 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.4.2-7
- Remove obsolete scriptlets
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.2-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1438618 - gnubik-2.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1438618
--------------------------------------------------------------------------------
================================================================================
grsync-1.2.6-1.fc26 (FEDORA-2018-9916d0e880)
A Gtk+ GUI for rsync
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release 1.2.6 fixes rhbz #1397648 - spec cleanup,
modernization and silent rpmlint
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 17 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 1.2.6-1
- update to latest upstream release 1.2.6 fixes rhbz #1397648
- spec cleanup, modernization and silent rpmlint
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jan 11 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.2.5-8
- Remove obsolete scriptlets
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.5-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1397648 - update 1.2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1397648
--------------------------------------------------------------------------------
================================================================================
libcgroup-0.41-17.fc26 (FEDORA-2018-e6920f0a1f)
Library to control and monitor control groups
--------------------------------------------------------------------------------
Update Information:
Backported upstream fixes: - api.c: change cgroup of every thread of a process
- api.c: fix infinite loop - api.c: fix potential buffer overflow - api.c: Show
warning when tasks file can not be opened - api.c: Fix level of failed
user/group lookup warnings - Increase maximal size of controller values
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 17 2018 Nikola Forr�� <nforro(a)redhat.com> - 0.41-17
- backport several upstream fixes
- set Delegate property for cgconfig service to make sure complete
cgroup hierarchy is always created by systemd
* Tue Feb 20 2018 Nikola Forr�� <nforro(a)redhat.com> - 0.41-16
- add missing gcc-c++ build dependency
* Tue Feb 20 2018 Nikola Forr�� <nforro(a)redhat.com> - 0.41-15
- add missing gcc build dependency
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.41-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.41-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.41-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
lmdb-0.9.22-1.fc26 (FEDORA-2018-a8bdc67eca)
Memory-mapped key-value database
--------------------------------------------------------------------------------
Update Information:
Update to version 0.9.22.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 10 2018 Jan Stan��k <jstanek(a)redhat.com> - 0.9.22-1
- Updated to 0.9.22
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.21-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.21-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.21-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562371 - lmdb-0.9.22 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1562371
--------------------------------------------------------------------------------
================================================================================
magic-8.1.207-1.fc26 (FEDORA-2018-b493df6152)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.1.207 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.1.207-1
- 8.1.207
--------------------------------------------------------------------------------
================================================================================
mod_gnutls-0.8.4-1.fc26 (FEDORA-2018-b22b6ba3fb)
GnuTLS module for the Apache HTTP server
--------------------------------------------------------------------------------
Update Information:
update to 0.8.4
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Jiri Kastner <jkastner(a)redhat.com> - 0.8.4-1
- update to 0.8.4
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Jan 20 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.8.2-5
- Rebuilt for switch to libxcrypt
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
osinfo-db-20180416-1.fc26 (FEDORA-2018-58d5da4dde)
osinfo database files
--------------------------------------------------------------------------------
Update Information:
Update to new release ---- Update to new release ---- Update to new release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20180416-1
- Update to new release
* Sun Mar 25 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20180325-1
- Update to new release
* Sun Mar 18 2018 Fabiano Fid��ncio <fabiano(a)fidencio.org> - 20180318-1
- Update to new release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1557146 - F27 not available for boxes
https://bugzilla.redhat.com/show_bug.cgi?id=1557146
--------------------------------------------------------------------------------
================================================================================
parallel-20180322-1.fc26 (FEDORA-2018-aea2d04f19)
Shell tool for executing jobs in parallel
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream 20180322 fixes rhbz #1520477
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 15 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 20180322-1
- update to latest upstream 20180322 fixes rhbz #1520477
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
20160722-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
20160722-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1520477 - niceload command completely broken in F27
https://bugzilla.redhat.com/show_bug.cgi?id=1520477
--------------------------------------------------------------------------------
================================================================================
perl-5.24.4-397.fc26 (FEDORA-2018-0050f7c0d1)
Practical Extraction and Report Language
--------------------------------------------------------------------------------
Update Information:
This release provides Perl 5.24.4 that fixes a heap buffer overflow in the
pack() function and two overflows in the regular expression engine.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Petr Pisar <ppisar(a)redhat.com> - 4:5.24.4-397
- 5.24.4 bump
- Fix CVE-2018-6913 (heap buffer overflow in pp_pack.c) (bug #1567776)
- Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1567777)
- Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1567778)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1547783 - CVE-2018-6797 perl: heap write overflow in regcomp.c
https://bugzilla.redhat.com/show_bug.cgi?id=1547783
[ 2 ] Bug #1547779 - CVE-2018-6798 perl: heap read overflow in regexec.c
https://bugzilla.redhat.com/show_bug.cgi?id=1547779
[ 3 ] Bug #1547772 - CVE-2018-6913 perl: heap buffer overflow in pp_pack.c
https://bugzilla.redhat.com/show_bug.cgi?id=1547772
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.54-1.fc26 (FEDORA-2018-b074e041cc)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.54-1
- 3.54 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1567564 - perl-CPAN-Perl-Releases-3.54 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1567564
--------------------------------------------------------------------------------
================================================================================
perl-Module-CoreList-5.20180414-1.fc26 (FEDORA-2018-0050f7c0d1)
What modules are shipped with versions of perl
--------------------------------------------------------------------------------
Update Information:
This release provides Perl 5.24.4 that fixes a heap buffer overflow in the
pack() function and two overflows in the regular expression engine.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Petr Pisar <ppisar(a)redhat.com> - 1:5.20180414-1
- 5.20180414_24 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1547783 - CVE-2018-6797 perl: heap write overflow in regcomp.c
https://bugzilla.redhat.com/show_bug.cgi?id=1547783
[ 2 ] Bug #1547779 - CVE-2018-6798 perl: heap read overflow in regexec.c
https://bugzilla.redhat.com/show_bug.cgi?id=1547779
[ 3 ] Bug #1547772 - CVE-2018-6913 perl: heap buffer overflow in pp_pack.c
https://bugzilla.redhat.com/show_bug.cgi?id=1547772
--------------------------------------------------------------------------------
================================================================================
php-pecl-couchbase2-2.4.6-1.fc26 (FEDORA-2018-2904322197)
Couchbase Server PHP extension
--------------------------------------------------------------------------------
Update Information:
**Version 2.4.6** * PCBC-523: Add tracing support for queries and the rest of
KV commands. * PCBC-536: Make it clear that timeout properties use microseconds.
* PCBC-531: Field encryption (See
https://packagist.org/packages/couchbase
/couchbase-encryption). * PCBC-537: Implement Bucket#getName() returning bucket
name.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Remi Collet <remi(a)remirepo.net> - 2.4.6-1
- update to 2.4.6
- raise dependency on libcouchbase 2.8.6
--------------------------------------------------------------------------------
================================================================================
php-phpseclib-2.0.11-1.fc26 (FEDORA-2018-8b7f690a02)
PHP Secure Communications Library
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.11** - 2018-04-15 - X509: auto download intermediate certs -
BigInteger: fix for (new BigInteger(48))->toString(true)) (#1264) - ASN1: class
is never set as key in _decode_ber - check if phpinfo() is available before
using (#1256) - backport CFB8 support from master to 2.0 (#1257)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Remi Collet <remi(a)remirepo.net> - 2.0.11-1
- update to 2.0.11
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-stdlib-3.1.1-1.fc26 (FEDORA-2018-07c20704f4)
Zend Framework Stdlib component
--------------------------------------------------------------------------------
Update Information:
**Version 3.1.1** - 2018-04-12 * **Changed** -
[#67](https://github.com/zendframework/zend-stdlib/pull/67) changes the typehint
of the `$content` property of the `Message` class to indicate it is a string.
All known implementations already assumed this. * **Fixed** -
[#60](https://github.com/zendframework/zend-stdlib/pull/60) fixes an issue
whereby calling `remove()` would incorrectly re-calculate the maximum priority
stored in the queue. - [#60](https://github.com/zendframework/zend-
stdlib/pull/60) fixes an infinite loop condition that can occur when inserting
an item at 0 priority.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Remi Collet <remi(a)remirepo.net> - 3.1.1-1
- update to 3.1.1
- switch from zend-loader to fedora/autoloader
--------------------------------------------------------------------------------
================================================================================
porcupine-0.1.0-1.fc26 (FEDORA-2018-eef5a41c49)
Web browser to copy URL to clipboard
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
================================================================================
py3status-3.8-1.fc26 (FEDORA-2018-2ab0a656d0)
An extensible i3status wrapper written in python
--------------------------------------------------------------------------------
Update Information:
upgrade to new version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Jakub Jedelsky <jakub.jedelsky(a)gmail.com> - 3.8-1
- Update to new version (BZ#1563227)
* Fri Feb 9 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 3.6-4
- Escape macros in %changelog
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563227 - py3status-3.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563227
--------------------------------------------------------------------------------
================================================================================
python-aiodns-1.1.1-1.fc26 (FEDORA-2018-83c110e75b)
Simple DNS resolver for asyncio
--------------------------------------------------------------------------------
Update Information:
Initial import
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563830 - Review Request: python-aiodns - Simple DNS resolver for asyncio
https://bugzilla.redhat.com/show_bug.cgi?id=1563830
--------------------------------------------------------------------------------
================================================================================
python-bitcoinlib-0.10.1-1.fc26 (FEDORA-2018-3b8ba12b38)
The Swiss Army Knife of the Bitcoin protocol
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1567523 - Review Request: python-bitcoinlib - Python library providing an
easy interface to the Bitcoin data structures and protocol.
https://bugzilla.redhat.com/show_bug.cgi?id=1567523
--------------------------------------------------------------------------------
================================================================================
python-josepy-1.1.0-1.fc26 (FEDORA-2018-5f672a1a6d)
JOSE protocol implementation in Python
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.0.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1567455 - python-josepy-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1567455
--------------------------------------------------------------------------------
================================================================================
sane-backends-1.0.27-16.fc26 (FEDORA-2018-489d18b066)
Scanner access software
--------------------------------------------------------------------------------
Update Information:
1554032 - saned doesn't have permissions to write on usb port
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 17 2018 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.0.27-16
- 1554032 - saned doesn't have permissions to write on usb port - updated
--------------------------------------------------------------------------------
================================================================================
scummvm-2.0.0-1.fc26 (FEDORA-2018-3622f44a12)
Interpreter for several adventure games
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.0 release. * Fixes CVE-2017-17528.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 8 2018 Christian Krause <chkr(a)fedoraproject.org> - 2.0.0-1
- update to latest upstream (BZ 1536755)
- add upstream patch for CVE-2017-17528 (and one follow-up patch, BZ 1528426,
BZ 1528425)
- turn off virtual keyboard (the keyboard pack files are not installed
and scummvm doesn't have a global search path for them on platform sdl/posix)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1528425 - CVE-2017-17528 scummvm: Command injection in
backends/platform/sdl/posix/posix.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1528425
--------------------------------------------------------------------------------
================================================================================
scummvm-tools-2.0.0-1.fc26 (FEDORA-2018-3622f44a12)
Tools for scummVM / S.C.U.M.M scripting language
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.0 release. * Fixes CVE-2017-17528.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 14 2018 Christian Krause <chkr(a)fedoraproject.org> - 2.0.0-1
- update to latest upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1528425 - CVE-2017-17528 scummvm: Command injection in
backends/platform/sdl/posix/posix.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1528425
--------------------------------------------------------------------------------
================================================================================
wine-3.6-1.fc26 (FEDORA-2018-7b9b249ec3)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
- Support for PNG format icons. - Support for 1D textures. - More
infrastructure for high DPI support. - OLE data cache improvements. -
Various bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 14 2018 Michael Cronenworth <mike(a)cchtml.com> 3.6-1
- version update
- enable wine-staging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1567467 - wine-3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1567467
--------------------------------------------------------------------------------
================================================================================
xfce4-verve-plugin-1.1.1-1.fc26 (FEDORA-2018-0ee1e38ecd)
Comfortable command line plugin for the Xfce panel
--------------------------------------------------------------------------------
Update Information:
- new upstream 1.1.1 release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 15 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 1.1.1-1
- new upstream 1.1.1 release
* Sun Feb 11 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 1.1.0-6
- Spec cleanup / modernization
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
zile-2.4.14-1.fc26 (FEDORA-2018-e339aeb531)
Zile Is Lossy Emacs
--------------------------------------------------------------------------------
Update Information:
- update to new upstream release 2.4.14, fixes rhbz #1504463 - spec cleanup and
modernization
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 15 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 2.4.14-1
- update to new upstream release 2.4.14, fixes rhbz #1504463
- spec cleanup and modernization
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.13-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.13-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.13-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1504463 - zile-2.4.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504463
--------------------------------------------------------------------------------