The following Fedora 26 Security updates need testing:
Age URL
283
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7
docker-distribution-2.6.2-1.git48294d9.fc26
114
https://bodhi.fedoraproject.org/updates/FEDORA-2018-66b885ae3c
keycloak-httpd-client-install-0.8-1.fc26
102
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f8a78a5ef
squid-4.0.23-1.fc26
77
https://bodhi.fedoraproject.org/updates/FEDORA-2018-db5041e661 bro-2.5.3-1.fc26
43
https://bodhi.fedoraproject.org/updates/FEDORA-2018-010396b4a2
chromium-65.0.3325.181-1.fc26
38
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7649fef814
thunderbird-52.7.0-1.fc26
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ba4601398
dovecot-2.2.35-1.fc26
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7be77249d4 ruby-2.4.4-88.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0c0671072b
knot-resolver-2.3.0-1.fc26
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f9e0f1caf7
glusterfs-3.10.12-1.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2359c2ae0e
drupal7-7.59-1.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-eb69078020 xen-4.8.3-4.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1361f39801
ckeditor-4.9.2-1.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5e8de70380
quassel-0.12.5-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e6d9251471
httpd-2.4.33-4.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
80
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ddd1e5c30a
iproute-4.14.1-5.fc26
38
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7649fef814
thunderbird-52.7.0-1.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6dde187524
redhat-rpm-config-66-1.fc26
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f9e0f1caf7
glusterfs-3.10.12-1.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-eb69078020 xen-4.8.3-4.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6d82adbfeb
libnfs-1.11.0-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c4f0b23dd9
vim-8.0.1788-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-afc4f5f88f
osinfo-db-20180502-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a311ccc70c
pungi-4.1.24-1.fc26
The following builds have been pushed to Fedora 26 updates-testing
GraphicsMagick-1.3.29-1.fc26
LibRaw-0.18.10-1.fc26
composer-1.6.5-1.fc26
cpuid-20180419-1.fc26
globus-net-manager-0.18-1.fc26
grip-3.7.1-1.fc26
guava-18.0-12.fc26
ivykis-0.42.3-1.fc26
kernel-4.16.7-100.fc26
libefp-1.5.0-2.fc26
libtaskotron-0.6.1-1.fc26
modem-manager-gui-0.0.19.1-1.fc26
mosquitto-1.4.15-2.fc26
myproxy-6.1.29-1.fc26
mysql-mmm-2.2.1-20.fc26
nheko-0.4.0-1.fc26
nodejs-6.14.2-1.fc26
nordugrid-arc-5.4.2-5.fc26
nvml-1.4-3.fc26
pam-kwallet-5.12.5-3.fc26
patch-2.7.6-4.fc26
pcc-1.1.0-1.1.20180504cvs.fc26
perl-Session-Storage-Secure-0.011-1.fc26
python-astral-1.6.1-1.fc26
python-colorlog-3.1.4-1.fc26
python-dulwich-0.19.2-1.fc26
scap-security-guide-0.1.39-2.fc26
seamonkey-2.49.3-1.fc26
taskotron-trigger-0.5.1-1.fc26
Details about builds:
================================================================================
GraphicsMagick-1.3.29-1.fc26 (FEDORA-2018-aa5c3a4b56)
An ImageMagick fork, offering faster image generation and better quality
--------------------------------------------------------------------------------
Update Information:
Latest upstream release, see
http://www.graphicsmagick.org/NEWS.html#april-29-2017
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 2 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.3.29-1
- 1.3.29 (#1574031])
* Wed Mar 7 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.3.28-4
- BR: gcc-c++, %make_build %make_install %ldconfig_scriptlets
* Fri Feb 16 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.3.28-3
- use %ldconfig_scriptlets
- s/libungif/giflib
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.28-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
LibRaw-0.18.10-1.fc26 (FEDORA-2018-52836ed5e5)
Library for reading RAW files obtained from digital photo cameras
--------------------------------------------------------------------------------
Update Information:
CVE-2018-10529 fixed: out of bounds read in X3F parser CVE-2018-10528
fixed: possible stack overrun in X3F parser
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 3 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.18.10-1
- 0.18.10.
* Wed Apr 25 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.18.9-1
- 0.18.9.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574326 - CVE-2018-10529 LibRaw: Out-of-bounds read in X3F property table
list functionality in libraw_x3f.cpp and libraw_cxx.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1574326
[ 2 ] Bug #1574322 - CVE-2018-10528 LibRaw: Stack-based buffer overflow in
libraw_cxx.cpp:utf2char() allows for potential code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1574322
[ 3 ] Bug #1574486 - LibRaw-0.18.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1574486
--------------------------------------------------------------------------------
================================================================================
composer-1.6.5-1.fc26 (FEDORA-2018-395b9274bc)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.6.5** 2018-05-04 * Fixed regression in 1.6.4 causing strange
update behaviors with dev packages * Fixed regression in 1.6.4 color support
detection for Windows * Fixed issues dealing with broken symlinks when
switching branches and using path repositories * Fixed JSON schema for package
repositories * Fixed issues on computers set to Turkish locale * Fixed
classmap parsing of files using short-open-tags when they are disabled in php
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 4 2018 Remi Collet <remi(a)remirepo.net> - 1.6.5-1
- update to 1.6.5
--------------------------------------------------------------------------------
================================================================================
cpuid-20180419-1.fc26 (FEDORA-2018-2c8df2cf12)
Dumps information about the CPU(s)
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 20180419 (rhbz#1569758)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 20180419-1
- Update to new upstream version 20180419 (rhbz#1569758)
* Thu Feb 22 2018 Florian Weimer <fweimer(a)redhat.com> - 20170122-7
- Use LDFLAGS from redhat-rpm-config
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
20170122-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1569758 - cpuid-20180419.src is available
https://bugzilla.redhat.com/show_bug.cgi?id=1569758
--------------------------------------------------------------------------------
================================================================================
globus-net-manager-0.18-1.fc26 (FEDORA-2018-bd15c1ba2f)
Globus Toolkit - Network Manager
--------------------------------------------------------------------------------
Update Information:
globus-net-manager * Fix pre-connect not using changed remote contact myproxy
* Fix -Werror=format-security errors
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 3 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.18-1
- GT6 update: Fix pre-connect not using changed remote contact
* Wed Feb 7 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 0.17-5
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.17-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Aug 2 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.17-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.17-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
grip-3.7.1-1.fc26 (FEDORA-2018-d8e3e15e63)
Front-end for CD rippers and Ogg Vorbis encoders
--------------------------------------------------------------------------------
Update Information:
Updated to 3.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 26 2018 Adrian Reber <adrian(a)lisas.de> - 1:3.7.1-1
- Updated to 3.7.1
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:3.6.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jan 31 2018 Adrian Reber <adrian(a)lisas.de> - 1:3.6.3-1
- Updated to 3.6.3
- Remove icon scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1558285 - grip-3.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1558285
--------------------------------------------------------------------------------
================================================================================
guava-18.0-12.fc26 (FEDORA-2018-db8f322bb0)
Google Core Libraries for Java
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-10237
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 3 2018 Michael Simacek <msimacek(a)redhat.com> - 18.0-12
- Backport fix for CVE-2018-10237
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 18.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1573391 - CVE-2018-10237 guava: Unbounded memory allocation in
AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of
service
https://bugzilla.redhat.com/show_bug.cgi?id=1573391
--------------------------------------------------------------------------------
================================================================================
ivykis-0.42.3-1.fc26 (FEDORA-2018-91dcdb8d83)
Library for asynchronous I/O readiness notification
--------------------------------------------------------------------------------
Update Information:
Update to 0.42.3
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2018 My Karlsson <mk(a)acc.umu.se> - 0.42.3-1
- Update to 0.42.3
--------------------------------------------------------------------------------
================================================================================
kernel-4.16.7-100.fc26 (FEDORA-2018-884a105c04)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
Update to v4.16.7 which contains fixes across the tree. This also temporarily
reverts the fix for CVE-2018-1108 as it resulted in boots hanging in some
scenarios. ---- Update to v4.16.6 which contains fixes across the tree ----
Update to v4.16.5 which contains fixes across the tree ---- Rebase to v4.16.4
---- The 4.15.18 stable kernel update contains a number of important fixes
across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 2 2018 Jeremy Cline <jeremy(a)jcline.org> - 4.16.7-100
- Linux v4.16.7
- Revert a second patch related to CVE-2018-1108 4.16.4 (rhbz 1572944)
* Tue May 1 2018 Jeremy Cline <jeremy(a)jcline.org> - 4.16.6-101
- Revert the fix for CVE-2018-1108 (rhbz 1572944)
* Mon Apr 30 2018 Jeremy Cline <jeremy(a)jcline.org> - 4.16.6-100
- Linux v4.16.6
* Fri Apr 27 2018 Jeremy Cline <jeremy(a)jcline.org> - 4.16.5-100
- Fix an issue with bluetooth autosupsend on some XPS 13 9360 (rhbz 1514836)
- Fix prlimit64 with RLIMIT_CPU ignored (rhbz 1568337)
- Linux v4.16.5
* Fri Apr 27 2018 Peter Robinson <pbrobinson(a)fedoraproject.org>
- Enable QLogic NICs on ARM
* Wed Apr 25 2018 Jeremy Cline <jeremy(a)jcline.org>
- Fix a kernel oops when using Thunderbolt 3 docks (rhbz 1565131)
* Wed Apr 25 2018 Jeremy Cline <jeremy(a)jcline.org> - 4.16.4-100
- Linux v4.16.4 rebase
- Fix a regression in backlight interfaces for some laptops (rhbz 1571036)
* Thu Apr 19 2018 Justin M. Forbes <jforbes(a)fedoraproject.org> - 4.15.18-200
- Linux v4.15.18
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1571036 - Kernel updates breaks screen brightness keys
https://bugzilla.redhat.com/show_bug.cgi?id=1571036
[ 2 ] Bug #1531927 - lirc_zilog ceased working with kernel 4.14
https://bugzilla.redhat.com/show_bug.cgi?id=1531927
--------------------------------------------------------------------------------
================================================================================
libefp-1.5.0-2.fc26 (FEDORA-2018-48d82d4b4b)
A full implementation of the Effective Fragment Potential (EFP) method
--------------------------------------------------------------------------------
Update Information:
First release in Fedora.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1419379 - Review Request: libefp - A full implementation of the Effective
Fragment Potential (EFP) method
https://bugzilla.redhat.com/show_bug.cgi?id=1419379
--------------------------------------------------------------------------------
================================================================================
libtaskotron-0.6.1-1.fc26 (FEDORA-2018-92d1d10a39)
Taskotron Support Library
--------------------------------------------------------------------------------
Update Information:
- yumrepoinfo: retry on socket errors - yumrepoinfo: mark F28 as stable
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 3 2018 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 0.6.1-1
- yumrepoinfo: retry on socket errors
- yumrepoinfo: mark F28 as stable
--------------------------------------------------------------------------------
================================================================================
modem-manager-gui-0.0.19.1-1.fc26 (FEDORA-2018-d413db9e21)
Graphical interface for ModemManager
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version (0.0.19.1)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 28 2018 Artur Iwicki <fedora(a)svgames.pl> - 0.0.19.1-1
- Update to new upstream version
- Remove Patch0 (fix to linker errors) - issues fixed upstream
--------------------------------------------------------------------------------
================================================================================
mosquitto-1.4.15-2.fc26 (FEDORA-2018-6e823f8f11)
An Open Source MQTT v3.1/v3.1.1 Broker
--------------------------------------------------------------------------------
Update Information:
Update systemd unit file (rhbz#1564733)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.4.15-2
- Update systemd unit file (rhbz#1564733)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1564733 - mosquitto fails to start
https://bugzilla.redhat.com/show_bug.cgi?id=1564733
--------------------------------------------------------------------------------
================================================================================
myproxy-6.1.29-1.fc26 (FEDORA-2018-bd15c1ba2f)
Manage X.509 Public Key Infrastructure (PKI) security credentials
--------------------------------------------------------------------------------
Update Information:
globus-net-manager * Fix pre-connect not using changed remote contact myproxy
* Fix -Werror=format-security errors
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 3 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.1.29-1
- Update to 6.1.29: Fix -Werror=format-security errors
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.1.28-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.1.28-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.1.28-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mysql-mmm-2.2.1-20.fc26 (FEDORA-2018-92f04c6b61)
Multi-Master Replication Manager for MySQL
--------------------------------------------------------------------------------
Update Information:
# Multi-Master Replication Manager for MySQL mmm_agentd Remote Command Injection
Vulnerabilities This update adds data sanitization to inputs for the mmm agent.
Multiple exploitable remote command injection vulnerabilities exist in the MySQL
Master-Master Replication Manager (MMM) mmm_agentd daemon 2.2.1. mmm_agentd
commonly runs with root privileges and does not require authentication by
default. A specially crafted MMM protocol message can cause a shell command
injection resulting in arbitrary command execution with the privileges of the
mmm_agentd process. An attacker that can initiate a TCP session with mmm_agentd
can trigger these vulnerabilities. The impact of these vulnerabilities can be
lessened by configuring mmm_agentd to require TLS mutual authentication and by
using network ACLs to prevent hosts other than legitimate mmm_mond hosts from
accessing mmm_agentd. For example on Linux iptables rules can be used to block
access to the port mmm_agent is listening on from all hosts except the
mmm_monitor. The configuration of ssl can be used where firewall rules are not
practical. See Socket Documentation
http://mysql-mmm.org/mysql-mmm.html#SEC58
Add to mmm_common.conf <socket> type ssl cert_file
/etc/ssl/certs/www.example.com.bundle.crt key_file
/etc/ssl/certs/www.example.com.key ca_file /etc/ssl/certs/ca-bundle.crt
# or ca-certificates.crt </socket> Now only those with access to the
private key can send commands. Whilst your web server certificate will do the
job, you may consider registering a dedicated certificate just for this task.
NOTE: By now there are a some good alternatives to MySQL-MMM. Maybe you
want to check out Galera Cluster which is part of MariaDB Galera Cluster
and Percona XtraDB Cluster. -
http://mysql-mmm.org -
http://galeracluster.com/
-
https://mariadb.com/kb/en/library/what-is-mariadb-galera-cluster/ -
https://www.percona.com/software/mysql-database/percona-xtradb-cluster
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 2 2018 David Beveridge <dave(a)bevhost.com> 2.2.1-20
- Patch for mmm_agentd Remote Command Injection Vulnerabilities
- TALOS-2017-0501, CVE-2017-14474 - CVE-2017-14481
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.1-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Dec 20 2017 Ruben Kerkhof <ruben(a)rubenkerkhof.com> - 2.2.1-18
- Correct permissions for systemd units (#1527992)
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.1-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575161
https://bugzilla.redhat.com/show_bug.cgi?id=1575161
--------------------------------------------------------------------------------
================================================================================
nheko-0.4.0-1.fc26 (FEDORA-2018-bd6b7b7d5a)
Desktop client for the Matrix protocol
--------------------------------------------------------------------------------
Update Information:
Features ================= * Basic member list * Basic room settings menu *
Support for displaying stickers * Fuzzy search for rooms Improvements
==================== * Cache refactoring (reduced memory consumption) *
Implement media cache (faster avatar loading) * Show room tooltips when the
sidebar is collapsed * Flicker-free auto-completion menus (rooms, users) *
Improved message spacing in the timeline * Improved macOS installer * Fancier
date separator widget * Minor popup improvements Bug fixes =================
* Fix UI inconsistencies between room list & communities * Adjust popup
completion menu to fit its contents * Fix stuck typing notifications * Handle
invalid access tokens
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 4 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0.4.0-1
- Updated to version 0.4.0.
--------------------------------------------------------------------------------
================================================================================
nodejs-6.14.2-1.fc26 (FEDORA-2018-9dc3a15a3a)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
Update to Node.js 6.14.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 3 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 1:6.14.2-1
- Update to 6.14.2
-
https://nodejs.org/en/blog/release/v6.14.2/
-
https://nodejs.org/en/blog/release/v6.14.1/
* Fri Apr 13 2018 Rafael dos Santos <rdossant(a)redhat.com> - 1:6.14.0-2
- Use standard Fedora linker flags (bug #1543859)
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-5.4.2-5.fc26 (FEDORA-2018-ca794a3a74)
Advanced Resource Connector Grid Middleware
--------------------------------------------------------------------------------
Update Information:
* Minor packaging tweaks * Backport a few out-of-bounds compiler warning fixes *
python34-nordugrid-arc package for EPEL 7
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 3 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.4.2-5
- Create python34-nordugrid-arc package on EPEL 7
- Add BuildRequires on gcc-c++
- Use pylint in EPEL 7 (it's back)
- Adjust python dependencies for old releases
* Tue Feb 20 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 5.4.2-4
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.4.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Jan 26 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.4.2-2
- Fix out-of-bounds errors causing test failures
--------------------------------------------------------------------------------
================================================================================
nvml-1.4-3.fc26 (FEDORA-2018-b1ea7de535)
Persistent Memory Development Kit (former NVML)
--------------------------------------------------------------------------------
Update Information:
Revert package name change
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 30 2018 Krzysztof Czurylo <krzysztof.czurylo(a)intel.com> - 1.4-3
- Revert package name change
- Re-enable check
* Thu Mar 29 2018 Krzysztof Czurylo <krzysztof.czurylo(a)intel.com> - 1.4-2
- Fix issues found by rpmlint
* Thu Mar 29 2018 Krzysztof Czurylo <krzysztof.czurylo(a)intel.com> - 1.4-1
- Rename NVML project to PMDK
- Update to PMDK version 1.4 (RHBZ #1480578, #1539562, #1539564)
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Jan 27 2018 Krzysztof Czurylo <krzysztof.czurylo(a)intel.com> - 1.3.1-1
- Update to NVML version 1.3.1 (RHBZ #1480578)
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Mon Jul 17 2017 Krzysztof Czurylo <krzysztof.czurylo(a)intel.com> - 1.3-1
- Update to NVML version 1.3 (RHBZ #1451741, RHBZ #1455216)
- Add librpmem and rpmemd sub-packages
- Force file system to appear as PMEM for make check
* Fri Jun 16 2017 Krzysztof Czurylo <krzysztof.czurylo(a)intel.com> - 1.2.3-2
- Update to NVML version 1.2.3 (RHBZ #1451741)
--------------------------------------------------------------------------------
================================================================================
pam-kwallet-5.12.5-3.fc26 (FEDORA-2018-a954bb958b)
PAM module for KWallet
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-10380
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 5.12.5-3
- followup fix
* Thu May 3 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 5.12.5-2
- pull in CVE-2018-10380 fixes
* Tue May 1 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 5.12.5-1
- 5.12.5
* Fri Mar 30 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 5.12.4-3
- Requires: kf5-kwallet
* Wed Mar 28 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 5.12.4-2
- omit (kde4) kwallet support on f28+
- use %make_build
* Tue Mar 27 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 5.12.4-1
- 5.12.4
* Tue Mar 6 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 5.12.3-1
- 5.12.3
* Wed Feb 21 2018 Jan Grulich <jgrulich(a)redhat.com> - 5.12.2-1
- 5.12.2
* Tue Feb 13 2018 Jan Grulich <jgrulich(a)redhat.com> - 5.12.1-1
- 5.12.1
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.12.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Feb 2 2018 Jan Grulich <jgrulich(a)redhat.com> - 5.12.0-1
- 5.12.0
* Mon Jan 15 2018 Jan Grulich <jgrulich(a)redhat.com> - 5.11.95-1
- 5.11.95
* Tue Jan 2 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 5.11.5-1
- 5.11.5
* Thu Nov 30 2017 Martin Kyral <martin.kyral(a)gmail.com> - 5.11.4-1
- 5.11.4
* Wed Nov 8 2017 Rex Dieter <rdieter(a)fedoraproject.org> - 5.11.3-1
- 5.11.3
* Wed Oct 25 2017 Martin Kyral <martin.kyral(a)gmail.com> - 5.11.2-1
- 5.11.2
* Tue Oct 17 2017 Rex Dieter <rdieter(a)fedoraproject.org> - 5.11.1-1
- 5.11.1
* Wed Oct 11 2017 Martin Kyral <martin.kyral(a)gmail.com> - 5.11.0-1
- 5.11.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574852 - CVE-2018-10380 pam-kwallet: Access to privileged files
https://bugzilla.redhat.com/show_bug.cgi?id=1574852
--------------------------------------------------------------------------------
================================================================================
patch-2.7.6-4.fc26 (FEDORA-2018-88a4219528)
Utility for modifying/upgrading files
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-1000156
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 3 2018 Tim Waugh <twaugh(a)redhat.com> - 2.7.6-4
- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary
commands.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1564326 - CVE-2018-1000156 patch: Malicious patch files cause ed to execute
arbitrary commands
https://bugzilla.redhat.com/show_bug.cgi?id=1564326
--------------------------------------------------------------------------------
================================================================================
pcc-1.1.0-1.1.20180504cvs.fc26 (FEDORA-2018-0a0c28ff3c)
The Portable C Compiler
--------------------------------------------------------------------------------
Update Information:
Update to 20180504 snapshot, which fixes crash when stdlib.h was included.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 4 2018 Susi Lehtola <jussilehtola(a)fedoraproject.org> -
1.1.0-1.1.20180504cvs
- Update to 20180504 snapshot, fixing BZ #1551537.
* Wed Feb 28 2018 Susi Lehtola <jussilehtola(a)fedoraproject.org> -
1.1.0-1.1.20180228cvs
- Update to 20180228 snapshot.
- Added gcc buildrequires.
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.1.0-1.1.20161201cvs.4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.1.0-1.1.20161201cvs.3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.1.0-1.1.20161201cvs.2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551537 - Compilation fails when including <stdlib.h>
https://bugzilla.redhat.com/show_bug.cgi?id=1551537
--------------------------------------------------------------------------------
================================================================================
perl-Session-Storage-Secure-0.011-1.fc26 (FEDORA-2018-ebc610619f)
Encrypted, expiring, compressed, serialized session data with integrity
--------------------------------------------------------------------------------
Update Information:
This release updates tests. We deliver it only to provide up-to-date version
string.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 4 2018 Petr Pisar <ppisar(a)redhat.com> - 0.011-1
- 0.011 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574983 - perl-Session-Storage-Secure-0.011 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1574983
--------------------------------------------------------------------------------
================================================================================
python-astral-1.6.1-1.fc26 (FEDORA-2018-2d63556df9)
Calculations for the position of the sun and moon
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 1.6.1 (rhbz#1574748)
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 4 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.6.1-1
- Update to latest upstream release 1.6.1 (rhbz#1574748)
* Fri Feb 23 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.6-1
- Update to latest upstream release 1.6
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Mon Jan 29 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.5-1
- Update to latest upstream release 1.5
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574748 - python-astral-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1574748
--------------------------------------------------------------------------------
================================================================================
python-colorlog-3.1.4-1.fc26 (FEDORA-2018-f67a5ecd4b)
A colored formatter for the Python logging module
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 3.1.4 (rhbz#1568639)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 3.1.4-1
- Update to latest upstream release 3.1.4 (rhbz#1568639)
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sun Jan 28 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 3.1.2-1
- Update to latest upstream release 3.1.2 (rhbz#1539019)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568639 - python-colorlog-v3.1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1568639
--------------------------------------------------------------------------------
================================================================================
python-dulwich-0.19.2-1.fc26 (FEDORA-2018-8aec56d1aa)
A python implementation of the Git file formats and protocols
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 0.19.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 5 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.19.2-1
- Update to new upstream version 0.19.2
* Fri Mar 23 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.19.0-1
- Update to new upstream version 0.19.0
* Tue Mar 13 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 0.18.6-3
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.18.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Mon Nov 27 2017 Alan Pevec <alan.pevec(a)redhat.com> 0.18.6-1
- Update to 0.18.6
- Fixes CVE-2017-16228
* Fri Oct 13 2017 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.18.4-1
- Update to new upstream version 0.16.0 (rhbz#*1405983)
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.16.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.16.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.16.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Mon Jan 23 2017 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.16.0-1
- Update to new upstream version 0.16.0
--------------------------------------------------------------------------------
================================================================================
scap-security-guide-0.1.39-2.fc26 (FEDORA-2018-6616f38201)
Security guidance and baselines in SCAP formats
--------------------------------------------------------------------------------
Update Information:
Add python version to python2-jinja2 package ---- Add python version to python
package prefixes ---- Update to latest upstream SCAP-Security-Guide-0.1.38
release:
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 4 2018 Watson Yuuma Sato <wsato(a)redhat.com> - 0.1.39-2
- Add python version to python2-jinja2 package
* Fri May 4 2018 Watson Yuuma Sato <wsato(a)redhat.com> - 0.1.39-1
- Update to latest upstream SCAP-Security-Guide-0.1.39 release:
https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.39
* Mon Mar 5 2018 Watson Yuuma Sato <wsato(a)redhat.com> - 0.1.38-2
- Add python version to python package prefixes
* Mon Mar 5 2018 Watson Yuuma Sato <wsato(a)redhat.com> - 0.1.38-1
- Update to latest upstream SCAP-Security-Guide-0.1.38 release:
https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.38
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.37-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.49.3-1.fc26 (FEDORA-2018-cf8e6c1a35)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Update to 2.49.3 Based on the Firefox/Thunderbird ESR (extension support
release) code version 52.7.3 Fixes various security issues, see
https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/ and
https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/ for
more info.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 4 2018 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.49.3-1
- update to 2.49.3
--------------------------------------------------------------------------------
================================================================================
taskotron-trigger-0.5.1-1.fc26 (FEDORA-2018-228da5aa6c)
Triggering Taskotron jobs via fedmsg
--------------------------------------------------------------------------------
Update Information:
- Make fixed-architecture job scheduling possible - Ondemand task scheduling
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 3 2018 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 0.5.1-1
- Make fixed-architecture job scheduling possible
- Ondemand task scheduling
--------------------------------------------------------------------------------