The following Fedora 26 Security updates need testing:
Age URL
296
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7
docker-distribution-2.6.2-1.git48294d9.fc26
127
https://bodhi.fedoraproject.org/updates/FEDORA-2018-66b885ae3c
keycloak-httpd-client-install-0.8-1.fc26
115
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f8a78a5ef
squid-4.0.23-1.fc26
90
https://bodhi.fedoraproject.org/updates/FEDORA-2018-db5041e661 bro-2.5.3-1.fc26
56
https://bodhi.fedoraproject.org/updates/FEDORA-2018-010396b4a2
chromium-65.0.3325.181-1.fc26
51
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7649fef814
thunderbird-52.7.0-1.fc26
31
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ba4601398
dovecot-2.2.35-1.fc26
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7be77249d4 ruby-2.4.4-88.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-77c0da8eea
blktrace-1.2.0-6.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6a9fea1b3a
webkitgtk4-2.20.2-1.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bd6f9237b5
postgresql-9.6.9-1.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7cd077ddd3 xen-4.8.3-5.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d955395c08
mariadb-10.1.33-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
93
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ddd1e5c30a
iproute-4.14.1-5.fc26
51
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7649fef814
thunderbird-52.7.0-1.fc26
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8306020865
python-productmd-1.12-1.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6a9fea1b3a
webkitgtk4-2.20.2-1.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7cd077ddd3 xen-4.8.3-5.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-70b0c4dca9
osinfo-db-20180514-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8706010aa
vim-8.0.1842-1.fc26
The following builds have been pushed to Fedora 26 updates-testing
ca-certificates-2018.2.24-1.0.fc26
copr-backend-1.116-1.fc26
copr-cli-1.70-1.fc26
copr-dist-git-0.41-1.fc26
copr-frontend-1.132-1.fc26
copr-keygen-1.72-1.fc26
copr-rpmbuild-0.19-1.fc26
kernel-4.16.9-100.fc26
libabigail-1.3-1.fc26
sssd-1.16.1-8.fc26
variety-0.6.9-1.fc26
xdg-utils-1.1.3-1.fc26
znc-1.7.0-3.fc26
Details about builds:
================================================================================
ca-certificates-2018.2.24-1.0.fc26 (FEDORA-2018-32a88d0540)
The Mozilla CA root certificate bundle
--------------------------------------------------------------------------------
Update Information:
This is an update to version 2.24 of the Mozilla CA trust list, which has been
published as part of the NSS 3.37 release. Please refer to the upstream release
notes for the changes:
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.37_release_notes
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 18 2018 Kai Engert <kaie(a)redhat.com> - 2018.2.24-1.0
- Update to CKBI 2.24 from NSS 3.37
--------------------------------------------------------------------------------
================================================================================
copr-backend-1.116-1.fc26 (FEDORA-2018-a835fcb24e)
Backend for Copr
--------------------------------------------------------------------------------
Update Information:
- fix #291 forks are incomplete - log more information about incoming actions -
preparation for opensuse-leap-15.0-x86_64 ---- - rpkg deployment into COPR -
containers + releng continuation - fix pagure bugs #269, #273, #221 and #268 -
cleanup in test_helpers, one test added - change order of args in StrictRedis
call - add comment about expected usage of the copr_log_hitcounter script - try
to send hit data to frontend several times from copr_log_hitcounter
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 18 2018 clime <clime(a)redhat.com> 1.116-1
- fix #291 forks are incomplete
- log more information about incoming actions
- preparation for opensuse-leap-15.0-x86_64
* Thu Apr 26 2018 Dominik Turecek <dturecek(a)redhat.com> 1.115-1
- rpkg deployment into COPR - containers + releng continuation
- fix pagure bugs #269, #273, #221 and #268
- cleanup in test_helpers, one test added
- change order of args in StrictRedis call
- add comment about expected usage of the copr_log_hitcounter script
- try to send hit data to frontend several times from
copr_log_hitcounter
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.70-1.fc26 (FEDORA-2018-046ff35900)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
- deprecate mock-config subcommand
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 18 2018 clime <clime(a)redhat.com> 1.70-1
- deprecate mock-config command
* Mon Apr 30 2018 Dominik Turecek <dturecek(a)redhat.com> 1.69-1
fix non-passing unittests under f28+
* Thu Apr 26 2018 Dominik Turecek <dturecek(a)redhat.com> 1.68-1
- simplify bar.finish logic
- rpkg deployment into COPR - containers + releng continuation
- #280 cli upload to nonexisting project makes terminal cursor disappear
- #220 copr-cli doesn't display build progress in non-interactive terminal
- add download-build --dest description to man page
- add `copr delete-build` build into man pages
--------------------------------------------------------------------------------
================================================================================
copr-dist-git-0.41-1.fc26 (FEDORA-2018-33f6865f24)
Copr services for Dist Git server
--------------------------------------------------------------------------------
Update Information:
- switch to python3 - rpkg deployment into COPR - containers + releng
continuation
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 18 2018 clime <clime(a)redhat.com> 0.41-1
- switch to python3
- rpkg deployment into COPR - containers + releng continuation
--------------------------------------------------------------------------------
================================================================================
copr-frontend-1.132-1.fc26 (FEDORA-2018-8935dec4dc)
Frontend for Copr
--------------------------------------------------------------------------------
Update Information:
- add --with/--without rpmbuild options for build chroot - use "$releasever" in
repo base URL for opensuse-leap and mageia chroots - openSUSE chroot support -
fix #291 forks are incomplete - fix rpm download counters for group projects -
pg#290 auto-rebuilds are being spawned on commits to some other projects -
preparation for opensuse-leap-15.0-x86_64
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 18 2018 clime <clime(a)redhat.com> 1.132-1
- add --with/--without rpmbuild options for build chroot
- use "$releasever" in repo base URL for opensuse-leap and mageia chroots
- openSUSE chroot support
- fix #291 forks are incomplete
- fix rpm download counters for group projects
- #290 auto-rebuilds are being spawned on commits to some other projects
- preparation for opensuse-leap-15.0-x86_64
--------------------------------------------------------------------------------
================================================================================
copr-keygen-1.72-1.fc26 (FEDORA-2018-3eefc77671)
Part of Copr build system. Aux service that generate keys for signd
--------------------------------------------------------------------------------
Update Information:
- fix gnupg2 requirement - rpkg deployment into COPR - containers + releng
continuation
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 18 2018 clime <clime(a)redhat.com> 1.72-1
- fix gnupg2 requirement
- rpkg deployment into COPR - containers + releng continuation
--------------------------------------------------------------------------------
================================================================================
copr-rpmbuild-0.19-1.fc26 (FEDORA-2018-87a1dae768)
Run COPR build tasks
--------------------------------------------------------------------------------
Update Information:
- add --with/--without rpmbuild options for build chroot ---- - rpkg
deployment into COPR - containers + releng continuation
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 18 2018 clime <clime(a)redhat.com> 0.19-1
- add --with/--without rpmbuild options for build chroot
* Thu Apr 26 2018 Dominik Turecek <dturecek(a)redhat.com> 0.18-1
- rpkg deployment into COPR - containers + releng continuation
- updates for latest upstream rpkg
- update rpkg.conf.j2 to the latest rpkg version
- s|/bin/env|/usr/bin/env| in shebang
--------------------------------------------------------------------------------
================================================================================
kernel-4.16.9-100.fc26 (FEDORA-2018-155b62b226)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The v4.16.9 stable update contains critical fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 17 2018 Jeremy Cline <jcline(a)redhat.com> - 4.16.9-100
- Linux v4.16.9
- Silence unwanted "swiotlb buffer is full" warnings (rhbz 1556797)
* Thu May 10 2018 Jeremy Cline <jeremy(a)jcline.org> - 4.16.8-101
- Bump the release for a rebuild
* Wed May 9 2018 Jeremy Cline <jeremy(a)jcline.org>
- Workaround for m400 uart irq firmware description (rhbz 1574718)
* Wed May 9 2018 Jeremy Cline <jeremy(a)jcline.org> - 4.16.8-100
- Linux v4.16.8
* Mon May 7 2018 Jeremy Cline <jeremy(a)jcline.org>
- Fix issue with KVM on older Core 2 processors (rhbz 1566258)
* Sat May 5 2018 Peter Robinson <pbrobinson(a)fedoraproject.org>
- ARM and Raspberry Pi fixes
- Fix USB-2 on Tegra devices
* Fri May 4 2018 Laura Abbott <labbott(a)redhat.com>
- Fix for building out of tree modules on powerpc (rhbz 1574604)
* Fri May 4 2018 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix CVE-2018-10322 (rhbz 1571623 1571624)
- Fix CVE-2018-10323 (rhbz 1571627 1571630)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1556797 - [kernel] swiotlb buffer is full
https://bugzilla.redhat.com/show_bug.cgi?id=1556797
--------------------------------------------------------------------------------
================================================================================
libabigail-1.3-1.fc26 (FEDORA-2018-d52b3c7f86)
Set of ABI analysis tools
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 16 2018 Dodji Seketeli <dodji(a)redhat.com> - 1.3-1
- Update to upstream 1.3
- Move to python3 modules.
--------------------------------------------------------------------------------
================================================================================
sssd-1.16.1-8.fc26 (FEDORA-2018-b9585aa356)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
Revert 589d1a48 as the builders are back to f27 ---- Related: upstream#3436 -
Certificates used in unit tests have limited
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 17 2018 Fabiano Fid��ncio <fidencio(a)fedoraproject.org> - 1.16.1-8
- Revert 589d1a48 as the builders are back to f27
* Wed May 16 2018 Fabiano Fid��ncio <fidencio(a)fedoraproject.org> - 1.16.1-7
- Related: upstream#3436 - Certificates used in unit tests have limited
lifetime
- Add: "ExcludeArch: armv7hl"
* Mon May 14 2018 Fabiano Fid��ncio <fidencio(a)fedoraproject.org> - 1.16.1-6
- Related: upstream#3436 - Add openssl, openssh and nss-tools as BuildRequires
* Mon May 14 2018 Fabiano Fid��ncio <fidencio(a)fedoraproject.org> - 1.16.1-5
- Related: upstream#3436 - Certificates used in unit tests have limited
lifetime
- Resolves: upstream#3725 - sssd not honoring dyndns_server if the DNS update
process is terminated with a signal
- Resolves: upstream#3726 - SSSD with ID provider 'ad' should give a warning
in case the ldap schema is manually changed to
something different than 'ad'.
- Related: upstream#2653 - Group renaming issue when "id_provider = ldap" is
set.
- Resolves: upstream#3719 - The SSSD IPA provider allocates information about
external groups on a long lived memory context,
causing memory growth of the sssd_be process
- Resolves: upstream#3728 - Request by ID outside the min_id/max_id limit of a
first domain does not reach the second domain
- Resolves: upstream#3731 - nss_clear_netgroup_hash_table(): only remove
entries from the hash table, do not free them
- Resolves: upstream#3595 - ID override GID from Default Trust View is not
properly resolved in case domain resolution order
is set
--------------------------------------------------------------------------------
================================================================================
variety-0.6.9-1.fc26 (FEDORA-2018-29896f565d)
Wallpaper changer that automatically downloads wallpapers
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.9
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 18 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.6.9-1
- Update to 0.6.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531979 - [abrt] variety: g_realloc(): python2.7 killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1531979
[ 2 ] Bug #1522989 - [abrt] variety: g_type_check_instance_cast(): python2.7 killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1522989
[ 3 ] Bug #1520018 - [abrt] variety: magazine_chain_pop_head(): python2.7 killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1520018
[ 4 ] Bug #1567533 - [abrt] variety: g_malloc(): python2.7 killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1567533
--------------------------------------------------------------------------------
================================================================================
xdg-utils-1.1.3-1.fc26 (FEDORA-2018-c8f559e8c2)
Basic desktop integration functions
--------------------------------------------------------------------------------
Update Information:
New upstream bugfix release, includes security fix for CVE-2017-18266
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.1.3-1
- xdg-utils-1.1.3
* Tue Feb 27 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.1.2-4
- pull in upstream fixes
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Mon May 8 2017 Rex Dieter <rdieter(a)fedoraproject.org> - 1.1.2-1
- xdg-utils-1.1.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1578767 - CVE-2017-18266 xdg-utils: Argument injection vulnerability in
open_envvar() function
https://bugzilla.redhat.com/show_bug.cgi?id=1578767
--------------------------------------------------------------------------------
================================================================================
znc-1.7.0-3.fc26 (FEDORA-2018-cef2100306)
An advanced IRC bouncer
--------------------------------------------------------------------------------
Update Information:
Update to 1.7.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 18 2018 Nick Bebout <nb(a)usi.edu> - 1.7.0-3
- Fix %files to not use wildcard
* Tue May 15 2018 Pete Walter <pwalter(a)fedoraproject.org> - 1.7.0-2
- Rebuild for ICU 61.1
* Wed May 2 2018 Nick Bebout <nb(a)usi.edu> - 1.7.0-1
- Update to 1.7.0
* Mon Apr 30 2018 Pete Walter <pwalter(a)fedoraproject.org> - 1.6.6-2
- Rebuild for ICU 61.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574119 - znc-1.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1574119
--------------------------------------------------------------------------------