The following Fedora 26 Security updates need testing:
Age URL
29
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01
python-XStatic-jquery-ui-1.12.0.1-2.fc26
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5cef2adff4
wireshark-2.2.6-1.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a7161eb173
squirrelmail-1.4.22-19.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d3aedd5dc7
mediawiki-1.28.2-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7a5f625013 batik-1.9-3.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a606d224a5
ghostscript-9.20-10.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ba8c760e67
php-horde-ingo-3.2.15-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-50b9370529 lynis-2.5.0-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5da8630f30
thunderbird-52.1.0-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9b50e28441
kernel-4.11.0-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-77ca39d254 xen-4.8.1-2.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a6f5c8fbf3
elfutils-0.169-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-863f86e7a9
radicale-1.1.2-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-26b2a7f9ba bodhi-2.6.2-1.fc26
python-fedora-0.9.0-3.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
44
https://bodhi.fedoraproject.org/updates/FEDORA-2017-90bcb067bf
fedora-release-26-0.6
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f36794dd98
selinux-policy-3.13.1-251.fc26
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-36c92c9286
pungi-4.1.14-3.fc26
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-019b705d8b
powerpc-utils-1.3.3-1.fc26
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0bb284e5e3
menu-cache-1.0.2-3.D20170419gitdffb1314ec.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5da8630f30
thunderbird-52.1.0-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-051e16353c
libnl3-3.3.0-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-db9267ee09
python-pycurl-7.43.0-8.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-dc418247a3
anaconda-26.21.5-1.fc26 blivet-gui-2.1.4-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a6f5c8fbf3
elfutils-0.169-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-779402efdd dnf-2.4.0-2.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-39fb5cc3d5
python-productmd-1.7-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-77f35910ad
xorg-x11-drv-libinput-0.25.1-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-77ca39d254 xen-4.8.1-2.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9b50e28441
kernel-4.11.0-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-dfd1fbf1a4
f26-backgrounds-26.2.0-2.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ab577a520a
compat-openssl10-pkcs11-helper-1.22-1.fc26 qca-2.1.3-6.fc26
The following builds have been pushed to Fedora 26 updates-testing
assimp-3.3.1-4.fc26
atomic-devmode-0.3.6-2.fc26
blueberry-1.1.11-1.fc26
bochs-2.6.9-1.fc26
bodhi-2.6.2-1.fc26
cinnamon-themes-2017.05.05-1.fc26
cmake-3.8.0-3.fc26
compat-openssl10-pkcs11-helper-1.22-1.fc26
datovka-4.8.1-1.fc26
f26-backgrounds-26.2.0-2.fc26
featherpad-0.6-1.fc26
findbugs-contrib-7.0.1-1.fc26
gutenprint-5.2.12-4.fc26
kphotoalbum-5.2-1.fc26
lightdm-settings-1.0.3-1.fc26
marco-1.18.0-2.fc26
mate-icon-theme-faenza-1.18.1-1.fc26
mate-terminal-1.18.1-1.fc26
mate-utils-1.18.2-1.fc26
modulemd-1.2.0-1.fc26
nodejs-portfinder-1.0.13-3.fc26
perl-App-PFT-1.1.2-1.fc26
pluma-1.18.2-1.fc26
python-fedora-0.9.0-3.fc26
python-supersmoother-0.4-1.fc26
python-xapp-1.0.0-1.fc26
qca-2.1.3-6.fc26
radicale-1.1.2-1.fc26
rubygem-minitest-5.10.1-100.fc26
rubygem-power_assert-1.0.2-100.fc26
rubygem-ruby-ntlm-0.0.4-1.fc26
rubygem-test-unit-3.2.3-103.fc26
slick-greeter-1.0.1-1.fc26
vdr-epg2vdr-1.1.59-1.fc26
wxGTK3-3.0.3-1.fc26
xed-1.4.0-1.fc26
Details about builds:
================================================================================
assimp-3.3.1-4.fc26 (FEDORA-2017-6382eaac64)
Library to import various 3D model formats into applications
--------------------------------------------------------------------------------
Update Information:
New upstream release with shared libraries
--------------------------------------------------------------------------------
================================================================================
atomic-devmode-0.3.6-2.fc26 (FEDORA-2017-c4d7eaeb8c)
Atomic Developer Mode
--------------------------------------------------------------------------------
Update Information:
Package respin. Don't build on ppc64 since we don't have atomic there.
--------------------------------------------------------------------------------
================================================================================
blueberry-1.1.11-1.fc26 (FEDORA-2017-b6eee261cd)
Bluetooth configuration tool
--------------------------------------------------------------------------------
Update Information:
* New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1429156 - [abrt] blueberry: connection.py:651:call_blocking:DBusException:
org.freedesktop.systemd1.NoSuchUnit: Unit dbus-org.bluez.obex.service not found.
https://bugzilla.redhat.com/show_bug.cgi?id=1429156
[ 2 ] Bug #1429161 - [abrt] blueberry: connection.py:651:call_blocking:DBusException:
org.freedesktop.systemd1.NoSuchUnit: Unit dbus-org.bluez.obex.service not found.
https://bugzilla.redhat.com/show_bug.cgi?id=1429161
--------------------------------------------------------------------------------
================================================================================
bochs-2.6.9-1.fc26 (FEDORA-2017-1b0a9a2184)
Portable x86 PC emulator
--------------------------------------------------------------------------------
Update Information:
2.6.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1180851 - missing symbol in libbx_usb_uhci.so
https://bugzilla.redhat.com/show_bug.cgi?id=1180851
[ 2 ] Bug #1447171 - bochs-2.6.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1447171
--------------------------------------------------------------------------------
================================================================================
bodhi-2.6.2-1.fc26 (FEDORA-2017-26b2a7f9ba)
A modular framework that facilitates publishing software updates
--------------------------------------------------------------------------------
Update Information:
This update set fixed problems with Bodhi update submitting. It also includes
two security fixes for python-fedora.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1445294 - bodhi client cannot submit a new update
https://bugzilla.redhat.com/show_bug.cgi?id=1445294
[ 2 ] Bug #1447149 - bodhi-2.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1447149
--------------------------------------------------------------------------------
================================================================================
cinnamon-themes-2017.05.05-1.fc26 (FEDORA-2017-a262038049)
Collection of the best themes available for Cinnamon
--------------------------------------------------------------------------------
Update Information:
* Update to new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448610 - cinnamon-themes-2017.05.05 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1448610
--------------------------------------------------------------------------------
================================================================================
cmake-3.8.0-3.fc26 (FEDORA-2017-106f864275)
Cross-platform make system
--------------------------------------------------------------------------------
Update Information:
- Update to 3.8.0 - Apply upstream FindGLUT fix
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1444563 - FindGLUT.cmake claims it needs libXi-devel, freeglut-devel does
not
https://bugzilla.redhat.com/show_bug.cgi?id=1444563
--------------------------------------------------------------------------------
================================================================================
compat-openssl10-pkcs11-helper-1.22-1.fc26 (FEDORA-2017-ab577a520a)
A library for using PKCS#11 providers
--------------------------------------------------------------------------------
Update Information:
Provide compat-openssl10-pkcs11-helper package, allows for re-enabling pkcs11
qca backend
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1445349 - Review Request: compat-openssl10-pkcs11-helper - A library for
using PKCS#11 providers
https://bugzilla.redhat.com/show_bug.cgi?id=1445349
[ 2 ] Bug #1423077 - qca: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1423077
--------------------------------------------------------------------------------
================================================================================
datovka-4.8.1-1.fc26 (FEDORA-2017-5a3fbbea52)
A free graphical interface for Czech Databox (Datov�� schr��nky)
--------------------------------------------------------------------------------
Update Information:
This is new version of datovka.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448432 - datovka-4.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1448432
--------------------------------------------------------------------------------
================================================================================
f26-backgrounds-26.2.0-2.fc26 (FEDORA-2017-dfd1fbf1a4)
Fedora 26 default desktop background
--------------------------------------------------------------------------------
Update Information:
This update reintroduces animated default wallpaper and a few fix.
--------------------------------------------------------------------------------
================================================================================
featherpad-0.6-1.fc26 (FEDORA-2017-8c4257a427)
Lightweight Qt5 Plain-Text Editor
--------------------------------------------------------------------------------
Update Information:
Update to final 0.6 release
--------------------------------------------------------------------------------
================================================================================
findbugs-contrib-7.0.1-1.fc26 (FEDORA-2017-ff481987e1)
Extra findbugs detectors
--------------------------------------------------------------------------------
Update Information:
Update to 7.0.1. Detectors added in v7.0.0: * [SSCU] Suspicious Shaded Class
Use * Looks for use of classes that have been shaded into 3rdparty jars,
rather than using the real class, from the real jar. * [USFW] Unsynchronized
Singleton Field Writes * Looks for field writes to objects that are non
singletons, where the write is not synchronized * [OI] Optional Issues *
Looks for various issues around use of `java.util.Optional` * [UAC] Unnecessary
Api Conversion * Looks for code that appears to be using two forms of
similar apis, an older one, and a new one. It finds code that creates newer api
objects by first instantiating older api objects, and converting them into the
new form. It is simpler just to create the new object directly.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1442499 - findbugs-contrib-7.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1442499
--------------------------------------------------------------------------------
================================================================================
gutenprint-5.2.12-4.fc26 (FEDORA-2017-652b30a94a)
Printer Drivers Package
--------------------------------------------------------------------------------
Update Information:
Python 3.6 invalid escape sequence deprecation fixes, COPYING as %license
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448303 - Python 3.6 invalid escape sequence deprecation fixes, COPYING as
%license
https://bugzilla.redhat.com/show_bug.cgi?id=1448303
--------------------------------------------------------------------------------
================================================================================
kphotoalbum-5.2-1.fc26 (FEDORA-2017-fe3b7895ac)
KDE Photo Album
--------------------------------------------------------------------------------
Update Information:
Latest upstream stable release.
--------------------------------------------------------------------------------
================================================================================
lightdm-settings-1.0.3-1.fc26 (FEDORA-2017-bc46f0d318)
Configuration tool for the LightDM display manager
--------------------------------------------------------------------------------
Update Information:
* Update to new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448559 - Review Request: python-xapp - Python bindings for xapps
https://bugzilla.redhat.com/show_bug.cgi?id=1448559
--------------------------------------------------------------------------------
================================================================================
marco-1.18.0-2.fc26 (FEDORA-2017-9ee8517708)
MATE Desktop window manager
--------------------------------------------------------------------------------
Update Information:
- fix for
https://github.com/mate-desktop/marco/issues/251 -
https://bugzilla.redhat.com/show_bug.cgi?id=1419634
--------------------------------------------------------------------------------
================================================================================
mate-icon-theme-faenza-1.18.1-1.fc26 (FEDORA-2017-4272b4ac8c)
Extra set of icon themes for MATE Desktop
--------------------------------------------------------------------------------
Update Information:
- update to 1.18.1 - fixed tarball will missing symlinks for matefaenzagrey
--------------------------------------------------------------------------------
================================================================================
mate-terminal-1.18.1-1.fc26 (FEDORA-2017-a81f1239a8)
Terminal emulator for MATE
--------------------------------------------------------------------------------
Update Information:
- update to 1.18.1
--------------------------------------------------------------------------------
================================================================================
mate-utils-1.18.2-1.fc26 (FEDORA-2017-d70f489098)
MATE utility programs
--------------------------------------------------------------------------------
Update Information:
- update to 1.18.2 - fix a runtime warning with mate-screenshot
--------------------------------------------------------------------------------
================================================================================
modulemd-1.2.0-1.fc26 (FEDORA-2017-224cf279c4)
Module metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
A new version of modulemd is available. This release adds support for lists of
binary artifacts, custom component build optons and manipulation of modulemd
multidocuments used in module composes.
--------------------------------------------------------------------------------
================================================================================
nodejs-portfinder-1.0.13-3.fc26 (FEDORA-2017-6f168ba708)
A simple tool to find an open port or domain socket on the current machine
--------------------------------------------------------------------------------
Update Information:
Fix tests hanging by using upstream submitted patch by tomh
--------------------------------------------------------------------------------
================================================================================
perl-App-PFT-1.1.2-1.fc26 (FEDORA-2017-49f0443cfb)
Hacker friendly static blog generator
--------------------------------------------------------------------------------
Update Information:
Release 1.1.2
--------------------------------------------------------------------------------
================================================================================
pluma-1.18.2-1.fc26 (FEDORA-2017-63763ef268)
Text editor for the MATE desktop
--------------------------------------------------------------------------------
Update Information:
- update to 1.18.2
--------------------------------------------------------------------------------
================================================================================
python-fedora-0.9.0-3.fc26 (FEDORA-2017-26b2a7f9ba)
Python modules for talking to Fedora Infrastructure Services
--------------------------------------------------------------------------------
Update Information:
This update set fixed problems with Bodhi update submitting. It also includes
two security fixes for python-fedora.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1445294 - bodhi client cannot submit a new update
https://bugzilla.redhat.com/show_bug.cgi?id=1445294
[ 2 ] Bug #1447149 - bodhi-2.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1447149
--------------------------------------------------------------------------------
================================================================================
python-supersmoother-0.4-1.fc26 (FEDORA-2017-de0c83d62d)
Python implementation of Friedman's Supersmoother
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448634 - python-supersmoother-0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1448634
--------------------------------------------------------------------------------
================================================================================
python-xapp-1.0.0-1.fc26 (FEDORA-2017-bc46f0d318)
Python bindings for xapps
--------------------------------------------------------------------------------
Update Information:
* Update to new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448559 - Review Request: python-xapp - Python bindings for xapps
https://bugzilla.redhat.com/show_bug.cgi?id=1448559
--------------------------------------------------------------------------------
================================================================================
qca-2.1.3-6.fc26 (FEDORA-2017-ab577a520a)
Qt Cryptographic Architecture
--------------------------------------------------------------------------------
Update Information:
Provide compat-openssl10-pkcs11-helper package, allows for re-enabling pkcs11
qca backend
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1445349 - Review Request: compat-openssl10-pkcs11-helper - A library for
using PKCS#11 providers
https://bugzilla.redhat.com/show_bug.cgi?id=1445349
[ 2 ] Bug #1423077 - qca: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1423077
--------------------------------------------------------------------------------
================================================================================
radicale-1.1.2-1.fc26 (FEDORA-2017-863f86e7a9)
A simple CalDAV (calendar) and CardDAV (contact) server
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-8342
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1447247 - CVE-2017-8342 radicale: Insufficient protection against timing
oracles and bruteforce attacks [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1447247
--------------------------------------------------------------------------------
================================================================================
rubygem-minitest-5.10.1-100.fc26 (FEDORA-2017-58a4205cbf)
minitest provides a complete suite of testing facilities
--------------------------------------------------------------------------------
Update Information:
Sync with the latest version on gem side (we already ship this version from ruby
srpm)
--------------------------------------------------------------------------------
================================================================================
rubygem-power_assert-1.0.2-100.fc26 (FEDORA-2017-f64f9a700a)
Power Assert for Ruby
--------------------------------------------------------------------------------
Update Information:
Update power_assert to 1.0.2. test-unit is modified to adjust new
power_assert.
--------------------------------------------------------------------------------
================================================================================
rubygem-ruby-ntlm-0.0.4-1.fc26 (FEDORA-2017-c6aa6a0ab9)
NTLM implementation for Ruby
--------------------------------------------------------------------------------
Update Information:
New version 0.0.4 is released.
--------------------------------------------------------------------------------
================================================================================
rubygem-test-unit-3.2.3-103.fc26 (FEDORA-2017-f64f9a700a)
Improved version of Test::Unit bundled in Ruby 1.8.x
--------------------------------------------------------------------------------
Update Information:
Update power_assert to 1.0.2. test-unit is modified to adjust new
power_assert.
--------------------------------------------------------------------------------
================================================================================
slick-greeter-1.0.1-1.fc26 (FEDORA-2017-bc46f0d318)
A slick-looking LightDM greeter
--------------------------------------------------------------------------------
Update Information:
* Update to new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448559 - Review Request: python-xapp - Python bindings for xapps
https://bugzilla.redhat.com/show_bug.cgi?id=1448559
--------------------------------------------------------------------------------
================================================================================
vdr-epg2vdr-1.1.59-1.fc26 (FEDORA-2017-798acfcd13)
A plugin to retrieve EPG data from a mysql database into VDR
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.59 ---- Update to 1.1.58
--------------------------------------------------------------------------------
================================================================================
wxGTK3-3.0.3-1.fc26 (FEDORA-2017-ef19872468)
GTK port of the wxWidgets GUI library
--------------------------------------------------------------------------------
Update Information:
New upstream release 3.0.3 Update patch for WebKit2 port
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1428997 - Port wxGTK3 to webkit2
https://bugzilla.redhat.com/show_bug.cgi?id=1428997
--------------------------------------------------------------------------------
================================================================================
xed-1.4.0-1.fc26 (FEDORA-2017-46a22f0259)
X-Apps [Text] Editor (Cross-DE, backward-compatible, GTK3, traditional UI)
--------------------------------------------------------------------------------
Update Information:
* Update to new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448443 - xed-1.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1448443
--------------------------------------------------------------------------------