The following Fedora 26 Security updates need testing:
Age URL
41
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1bf5a0ce01
python-XStatic-jquery-ui-1.12.0.1-2.fc26
25
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5cef2adff4
wireshark-2.2.6-1.fc26
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a7161eb173
squirrelmail-1.4.22-19.fc26
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-50b9370529 lynis-2.5.0-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1f3ee3bea6
chicken-4.12.0-2.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-edecdcb23e
deluge-1.3.15-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e9936d561b
lxterminal-0.3.0-3.fc26 menu-cache-1.0.2-4.D20170514git56f6668459.fc26
pcmanfm-1.2.5-2.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-60775d65bb
FlightGear-2017.1.3-2.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1f533a944e
FlightCrew-0.9.1-7.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1fe6f25af9
authconfig-7.0.1-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6125002d79
libvncserver-0.9.11-2.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-811133dc2c
chromium-58.0.3029.110-2.fc26
chromium-native_client-58.0.3029.81-1.20170421gitc948e9b.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fe7c3c9c30
wordpress-4.7.5-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-57e8f5ec61
libtirpc-1.0.1-4.rc3.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2017-39fb5cc3d5
python-productmd-1.7-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b2bcf2658d
nss-3.30.2-1.1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e9936d561b
lxterminal-0.3.0-3.fc26 menu-cache-1.0.2-4.D20170514git56f6668459.fc26
pcmanfm-1.2.5-2.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7f762b31f8
selinux-policy-3.13.1-254.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-410a632bc7
gperftools-2.5.91-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d044d51c5f
python-coverage-4.4.1-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e11f32d40e
glusterfs-3.10.2-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-782a60cd2e
uboot-tools-2017.05-1.fc26 arm-trusted-firmware-1.3-2.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c9d12f264d
gnupg2-2.1.21-2.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-46cca25356 less-487-3.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1fe6f25af9
authconfig-7.0.1-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8750e6df04 bluez-5.45-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6d3abc84f6
p11-kit-0.23.5-3.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f590422f5b
firefox-53.0.2-5.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-460dd3ca0a
xorg-x11-drv-libinput-0.25.1-2.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-26444b97a8
fedora-repos-26-0.9
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6b842d9c19
fedora-release-26-0.7
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f78f83e0dc
ostree-2017.6-2.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-14b1305e97
gssproxy-0.7.0-7.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-57e8f5ec61
libtirpc-1.0.1-4.rc3.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4c75e93994 acl-2.2.52-14.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4d45e5287f
initial-setup-0.3.45-1.fc26
The following builds have been pushed to Fedora 26 updates-testing
LuxRender-1.6-14.fc26
NetworkManager-openvpn-1.2.10-1.fc26
acl-2.2.52-14.fc26
appcenter-0.2-1.fc26
assimp-3.3.1-8.fc26
cppcheck-1.79-1.fc26
embree-2.16.0-1.fc26
erlang-rpm-macros-0.2.5-1.fc26
fedora-release-26-0.7
fedora-repos-26-0.9
firefox-53.0.2-5.fc26
golang-github-mitchellh-cli-0-0.1.git8102d0e.fc26
golang-github-xtaci-kcp-go-3.15-1.20170517.git2fd1e3d.fc26
gssproxy-0.7.0-7.fc26
initial-setup-0.3.45-1.fc26
ipv6gen-1.0-1.fc26
libtirpc-1.0.1-4.rc3.fc26
lightdm-settings-1.0.7-2.fc26
mc-4.8.19-5.fc26
mongo-java-driver-3.4.2-1.fc26
opencryptoki-3.7.0-1.fc26
ostree-2017.6-2.fc26
p11-kit-0.23.5-3.fc26
petsc-3.7.6-4.fc26
python-avocado-50.0-1.fc26
python-cassandra-driver-3.9.0-3.fc26
python-peewee-2.10.1-1.fc26
python-texttable-0.9.0-1.fc26
scratch-text-editor-2.4.1-2.fc26
singularity-2.2.1-1.fc26
sox-14.4.2.0-9.fc26
swaks-20170101.0-2.fc26
switchboard-plug-bluetooth-0.1-2.fc26
systemtap-3.1-5.fc26
urlwatch-2.6-4.fc26
websocketpp-0.7.0-4.fc26
xorg-x11-drv-libinput-0.25.1-2.fc26
xrdp-0.9.2-12.fc26
Details about builds:
================================================================================
LuxRender-1.6-14.fc26 (FEDORA-2017-91c86fc8dc)
Lux Renderer, an unbiased rendering system
--------------------------------------------------------------------------------
Update Information:
New upstream update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434810 - embree-2.16.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1434810
--------------------------------------------------------------------------------
================================================================================
NetworkManager-openvpn-1.2.10-1.fc26 (FEDORA-2017-94f809c38c)
NetworkManager VPN plugin for OpenVPN
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.10 upstream release.
--------------------------------------------------------------------------------
================================================================================
acl-2.2.52-14.fc26 (FEDORA-2017-4c75e93994)
Access control list utilities
--------------------------------------------------------------------------------
Update Information:
- fix spurious acl_check() failure on setfacl --restore (#1451826)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1451826 - "setfacl --restore" fails due to use of uninitialized
memory [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1451826
--------------------------------------------------------------------------------
================================================================================
appcenter-0.2-1.fc26 (FEDORA-2017-d3f71162de)
Software Center for the Pantheon desktop
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2. More information at:
https://launchpad.net/appcenter/loki/0.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1451941 - appcenter-0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1451941
--------------------------------------------------------------------------------
================================================================================
assimp-3.3.1-8.fc26 (FEDORA-2017-ec7c795b6e)
Library to import various 3D model formats into applications
--------------------------------------------------------------------------------
Update Information:
Fix pkgconfig directory prefix issues
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1451859 - assimp broken - bad pkgconfig file
https://bugzilla.redhat.com/show_bug.cgi?id=1451859
--------------------------------------------------------------------------------
================================================================================
cppcheck-1.79-1.fc26 (FEDORA-2017-5224ea4827)
Tool for static C/C++ code analysis
--------------------------------------------------------------------------------
Update Information:
Update to 1.79. The configuration files are now found again.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1427788 - cppcheck-gui can't find std.cfg installed with the package
https://bugzilla.redhat.com/show_bug.cgi?id=1427788
[ 2 ] Bug #1438165 - cppcheck-1.79 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1438165
--------------------------------------------------------------------------------
================================================================================
embree-2.16.0-1.fc26 (FEDORA-2017-91c86fc8dc)
Collection of high-performance ray tracing kernels developed at Intel
--------------------------------------------------------------------------------
Update Information:
New upstream update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1434810 - embree-2.16.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1434810
--------------------------------------------------------------------------------
================================================================================
erlang-rpm-macros-0.2.5-1.fc26 (FEDORA-2017-feb83abd37)
Macros for simplifying building of Erlang packages
--------------------------------------------------------------------------------
Update Information:
* Ver. 0.2.5
--------------------------------------------------------------------------------
================================================================================
fedora-release-26-0.7 (FEDORA-2017-6b842d9c19)
Fedora release files
--------------------------------------------------------------------------------
Update Information:
Fixes Bug #145458 ---- Disable systemd-networkd-wait-online.service
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1451458 - systemd presets request - ostree-remount
https://bugzilla.redhat.com/show_bug.cgi?id=1451458
[ 2 ] Bug #1433459 - long boot times - selinux denials causes cloud-init to take a long
time
https://bugzilla.redhat.com/show_bug.cgi?id=1433459
--------------------------------------------------------------------------------
================================================================================
fedora-repos-26-0.9 (FEDORA-2017-26444b97a8)
Fedora package repositories
--------------------------------------------------------------------------------
Update Information:
Adding Fedora Modular key and fedora-14 secondary arch key
--------------------------------------------------------------------------------
================================================================================
firefox-53.0.2-5.fc26 (FEDORA-2017-f590422f5b)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
- Fixed Arm builds
--------------------------------------------------------------------------------
================================================================================
golang-github-mitchellh-cli-0-0.1.git8102d0e.fc26 (FEDORA-2017-b9b083b689)
Go library for implementing command-line interfaces
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1060502 - Review Request: golang-github-mitchellh-cli - A library for
implementing powerful command-line interfaces in Go
https://bugzilla.redhat.com/show_bug.cgi?id=1060502
--------------------------------------------------------------------------------
================================================================================
golang-github-xtaci-kcp-go-3.15-1.20170517.git2fd1e3d.fc26 (FEDORA-2017-bbbfd7ca0f)
Production-Grade Reliable-UDP Library for golang
--------------------------------------------------------------------------------
Update Information:
Initial package for fedora. This is one of the dependencies of syncthing.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1438089 - Review Request: golang-github-xtaci-kcp-go - Production-Grade
Reliable-UDP Library for golang
https://bugzilla.redhat.com/show_bug.cgi?id=1438089
--------------------------------------------------------------------------------
================================================================================
gssproxy-0.7.0-7.fc26 (FEDORA-2017-14b1305e97)
GSSAPI Proxy
--------------------------------------------------------------------------------
Update Information:
* Handle upgrading broken systems without nfs-utils. * Fix segfault when no
gssproxy config files are present. * Ported to gcc7. ---- * Fix segfault when
no gssproxy config files are present. * Ported to gcc7.
--------------------------------------------------------------------------------
================================================================================
initial-setup-0.3.45-1.fc26 (FEDORA-2017-4d45e5287f)
Initial system configuration utility
--------------------------------------------------------------------------------
Update Information:
Run the Initial Setup TUI on all usable consoles (#1438046) (mkolman)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1438046 - initial-setup.service: Failed to set up stdin: Inappropriate ioctl
for device
https://bugzilla.redhat.com/show_bug.cgi?id=1438046
--------------------------------------------------------------------------------
================================================================================
ipv6gen-1.0-1.fc26 (FEDORA-2017-9b9a6a61d1)
IPv6 prefix generator
--------------------------------------------------------------------------------
Update Information:
This update introduces the ipv6gen and check-overlap utilities for working with
IPv6 prefixes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1451156 - Review Request: ipv6gen - IPv6 prefix generator
https://bugzilla.redhat.com/show_bug.cgi?id=1451156
--------------------------------------------------------------------------------
================================================================================
libtirpc-1.0.1-4.rc3.fc26 (FEDORA-2017-57e8f5ec61)
Transport Independent RPC Library
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2017-8779
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448127 - CVE-2017-8779 libtirpc: rpcbind: Unbounded maximum RPC data size
during memory allocation for XDR strings [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1448127
--------------------------------------------------------------------------------
================================================================================
lightdm-settings-1.0.7-2.fc26 (FEDORA-2017-b1007bc3b5)
Configuration tool for the LightDM display manager
--------------------------------------------------------------------------------
Update Information:
* New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1451532 - lightdm-settings-1.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1451532
--------------------------------------------------------------------------------
================================================================================
mc-4.8.19-5.fc26 (FEDORA-2017-b0cad0a0c9)
User-friendly text console file manager and visual shell
--------------------------------------------------------------------------------
Update Information:
Patch correction. ---- Patch for tmpdir and wrapper scripts.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1433602 - Extends TMPDIR_DEFAULT to mc-wrapper scripts - exit to CWD
https://bugzilla.redhat.com/show_bug.cgi?id=1433602
--------------------------------------------------------------------------------
================================================================================
mongo-java-driver-3.4.2-1.fc26 (FEDORA-2017-7c15199dc8)
A Java driver for MongoDB
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream 3.4.2 release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1438088 - RFE: Update mongo-java-driver to latest upstream 3.4.2 release
https://bugzilla.redhat.com/show_bug.cgi?id=1438088
--------------------------------------------------------------------------------
================================================================================
opencryptoki-3.7.0-1.fc26 (FEDORA-2017-c89cab9031)
Implementation of the PKCS#11 (Cryptoki) specification v2.11
--------------------------------------------------------------------------------
Update Information:
Rebase to 3.7.0
--------------------------------------------------------------------------------
================================================================================
ostree-2017.6-2.fc26 (FEDORA-2017-f78f83e0dc)
Tool for managing bootable, immutable filesystem trees
--------------------------------------------------------------------------------
Update Information:
New upstream version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1436750 - 'ostree admin unlock' mounts an overlay with the incorrect
SELinux label
https://bugzilla.redhat.com/show_bug.cgi?id=1436750
--------------------------------------------------------------------------------
================================================================================
p11-kit-0.23.5-3.fc26 (FEDORA-2017-6d3abc84f6)
Library for loading and sharing PKCS#11 modules
--------------------------------------------------------------------------------
Update Information:
This recovers the old behavior of the "trust anchor" command, allowing
generated
certificate to be modified by the trust module.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1445212 - trust anchor --remove stopped working
https://bugzilla.redhat.com/show_bug.cgi?id=1445212
--------------------------------------------------------------------------------
================================================================================
petsc-3.7.6-4.fc26 (FEDORA-2017-8f4ea3a44e)
Portable Extensible Toolkit for Scientific Computation
--------------------------------------------------------------------------------
Update Information:
- Fix Requires packages
--------------------------------------------------------------------------------
================================================================================
python-avocado-50.0-1.fc26 (FEDORA-2017-542880a8ff)
Framework with tools and libraries for Automated Testing
--------------------------------------------------------------------------------
Update Information:
Sync python-avocado with latest upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431413 - python-avocado-50.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1431413
--------------------------------------------------------------------------------
================================================================================
python-cassandra-driver-3.9.0-3.fc26 (FEDORA-2017-7baff758dc)
Python driver for Apache Cassandra
--------------------------------------------------------------------------------
Update Information:
Skip only specific tests on centrain unsupported platforms
--------------------------------------------------------------------------------
================================================================================
python-peewee-2.10.1-1.fc26 (FEDORA-2017-0e552499a1)
A small, expressive orm
--------------------------------------------------------------------------------
Update Information:
Update to 2.10.1 (#1448980)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1448980 - python-peewee-2.10.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1448980
--------------------------------------------------------------------------------
================================================================================
python-texttable-0.9.0-1.fc26 (FEDORA-2017-8fb55761ee)
Python module to generate a formatted text table, using ASCII characters
--------------------------------------------------------------------------------
Update Information:
* [proper handling of unicode in
headers](https://github.com/foutaise/texttable/
commit/383fd51ca21c8b486f62efe27d7e2274021537b3) * [refactor handling of text ty
pes](https://github.com/foutaise/texttable/commit/33fe600184aa71be9f4f1a7...
d87fbbd7be) * [add east asian multibyte
support](https://github.com/foutaise/tex
ttable/commit/02bfc75e63e5ec6c6b96c349a8e16182fa4b04d0) * [Relative col widths](
https://github.com/foutaise/texttable/commit/1b3924895e8dc310b058177b2517...
13f00) * [improve cells width to fit max_width
parameter](https://github.com/fou
taise/texttable/commit/fe64d4cb4e291509ed0e033b740aa8daad755be5) * [simplify
_draw_line
method](https://github.com/foutaise/texttable/commit/34adf7b4cac69569
762285cc4aff57584a49f977)
--------------------------------------------------------------------------------
================================================================================
scratch-text-editor-2.4.1-2.fc26 (FEDORA-2017-bcbad1d290)
The text editor that works
--------------------------------------------------------------------------------
Update Information:
Add a backported fix for building with vala 0.35+.
--------------------------------------------------------------------------------
================================================================================
singularity-2.2.1-1.fc26 (FEDORA-2017-fb140b77ac)
Enabling "Mobility of Compute" with container based applications
--------------------------------------------------------------------------------
Update Information:
New version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1420436 - singularity-2.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1420436
--------------------------------------------------------------------------------
================================================================================
sox-14.4.2.0-9.fc26 (FEDORA-2017-5cb6bf4b59)
A general purpose sound file conversion tool
--------------------------------------------------------------------------------
Update Information:
Added lame-devel to build dependencies. Should be able to encode mp3 now.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450226 - sox: enable MP3 encoding support
https://bugzilla.redhat.com/show_bug.cgi?id=1450226
--------------------------------------------------------------------------------
================================================================================
swaks-20170101.0-2.fc26 (FEDORA-2017-78e9fb4213)
Command-line SMTP transaction tester
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream version: 20170101.0, which brings various new
features and fixes.
--------------------------------------------------------------------------------
================================================================================
switchboard-plug-bluetooth-0.1-2.fc26 (FEDORA-2017-4b4add18c1)
Switchboard Bluetooth plug
--------------------------------------------------------------------------------
Update Information:
Add a backported fix for building with vala 0.35+.
--------------------------------------------------------------------------------
================================================================================
systemtap-3.1-5.fc26 (FEDORA-2017-3dd26e4798)
Programmable system-wide instrumentation system
--------------------------------------------------------------------------------
Update Information:
Build with dsmith's bz1448099 patches for support of kernel 4.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450193 - stap is non functional on f26
https://bugzilla.redhat.com/show_bug.cgi?id=1450193
--------------------------------------------------------------------------------
================================================================================
urlwatch-2.6-4.fc26 (FEDORA-2017-950d4fe647)
A tool for monitoring webpages for updates
--------------------------------------------------------------------------------
Update Information:
Fix rhbz#1445286
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1445286 - Urlwatch requires python3-minidb, but nothing provides it
https://bugzilla.redhat.com/show_bug.cgi?id=1445286
--------------------------------------------------------------------------------
================================================================================
websocketpp-0.7.0-4.fc26 (FEDORA-2017-39d3695b69)
C++ WebSocket Protocol Library
--------------------------------------------------------------------------------
Update Information:
Fix usage of incompatible openssl headers.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1449163 - tls.hpp, SSL_R_SHORT_READ undefined in openssl-1.1
https://bugzilla.redhat.com/show_bug.cgi?id=1449163
--------------------------------------------------------------------------------
================================================================================
xorg-x11-drv-libinput-0.25.1-2.fc26 (FEDORA-2017-460dd3ca0a)
Xorg X11 libinput input driver
--------------------------------------------------------------------------------
Update Information:
Add a new option to provide a workaround for the slow pointer movement on hidpi
screens.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1413306 - Pointer speed on some Dell laptops (XPS 13, Precision 5510...) too
slow with recent libinput (inc. 1.6)
https://bugzilla.redhat.com/show_bug.cgi?id=1413306
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.2-12.fc26 (FEDORA-2017-9432635f3c)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
Document problems/workaround with clipboard support in TigerVNC 1.8.0. ----
Allow parameters in ini files to contain equal characters in values.
--------------------------------------------------------------------------------