The following Fedora 26 Security updates need testing:
Age URL
149
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7
docker-distribution-2.6.2-1.git48294d9.fc26
42
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26
25
https://bodhi.fedoraproject.org/updates/FEDORA-2017-774e7863a4
mongodb-3.4.10-1.fc26
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7bac3ba7c3
qpid-cpp-1.37.0-1.fc26
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b5cdad4163
libvirt-3.2.1-7.fc26
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7fe2c4bc0e
python33-3.3.7-2.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-38fbcdffc3
asterisk-13.18.4-1.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-16a414b3c5 xen-4.8.2-9.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2962e58478
heimdal-7.5.0-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6d952bdc53
json-c-0.12.1-5.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c28bfe0986
libexif-0.6.21-14.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ea44f172e3
chromium-63.0.3239.108-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7b4149911a
python-mistune-0.8.3-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0ad0e2f390
webkitgtk4-2.18.4-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f7cbe22fd8
heketi-5.0.1-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7810b7c59f
kernel-4.14.8-200.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-856a149a4c
thunderbird-enigmail-1.9.9-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-481515e199
phpMyAdmin-4.7.7-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
14
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b5cdad4163
libvirt-3.2.1-7.fc26
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8d2a756133
libsmbios-2.3.3-2.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b5ac57e518
selinux-policy-3.13.1-260.18.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-16a414b3c5 xen-4.8.2-9.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b1ce6bb43a audit-2.8.2-1.fc26
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8b51db595f
tigervnc-1.8.0-5.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c28bfe0986
libexif-0.6.21-14.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-6d952bdc53
json-c-0.12.1-5.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8375547241
mutter-3.24.4-3.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-713f05f7e6
rpcbind-0.2.4-8.rc3.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-13af4c1fb1
man-db-2.7.6.1-8.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-58ef7953da
libjpeg-turbo-1.5.3-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a25eede005
libdrm-2.4.89-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-01a1365903
createrepo_c-0.10.0-15.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-082eec5a08
samba-4.6.12-0.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7810b7c59f
kernel-4.14.8-200.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c9ea186ccb
breeze-icon-theme-5.41.0-1.fc26 extra-cmake-modules-5.41.0-1.fc26 kf5-5.41.0-1.fc26
kf5-attica-5.41.0-1.fc26 kf5-baloo-5.41.0-2.fc26 kf5-bluez-qt-5.41.0-1.fc26
kf5-frameworkintegration-5.41.0-2.fc26 kf5-kactivities-5.41.0-1.fc26
kf5-kactivities-stats-5.41.0-1.fc26 kf5-kapidox-5.41.0-1.fc26 kf5-karchive-5.41.0-1.fc26
kf5-kauth-5.41.0-1.fc26 kf5-kbookmarks-5.41.0-2.fc26 kf5-kcmutils-5.41.0-2.fc26
kf5-kcodecs-5.41.0-1.fc26 kf5-kcompletion-5.41.0-2.fc26 kf5-kconfig-5.41.0-1.fc26
kf5-kconfigwidgets-5.41.0-1.fc26 kf5-kcoreaddons-5.41.0-1.fc26 kf5-kcrash-5.41.0-1.fc26
kf5-kdbusaddons-5.41.0-1.fc26 kf5-kdeclarative-5.41.0-1.fc26 kf5-kded-5.41.0-2.fc26
kf5-kdelibs4support-5.41.0-1.fc26 kf5-kdesignerplugin-5.41.0-1.fc26
kf5-kdesu-5.41.0-1.fc26 kf5-kdewebkit-5.41.0-2.fc26 kf5-kdnssd-5.41.0-1.fc26
kf5-kdoctools-5.41.0-1.fc26 kf5-kemoticons-5.41.0-1.fc26 kf5-kfilemetadata-5.41.0-1.fc26
kf5-kglobalaccel-5.41.0-1.fc26 kf5-kguiad
dons-5.41.0-1.fc26 kf5-khtml-5.41.0-2.fc26 kf5-ki18n-5.41.0-1.fc26
kf5-kiconthemes-5.41.0-1.fc26 kf5-kidletime-5.41.0-1.fc26 kf5-kimageformats-5.41.0-1.fc26
kf5-kinit-5.41.0-1.fc26 kf5-kio-5.41.0-3.fc26 kf5-kirigami2-5.41.0-1.fc26
kf5-kitemmodels-5.41.0-1.fc26 kf5-kitemviews-5.41.0-1.fc26 kf5-kjobwidgets-5.41.0-1.fc26
kf5-kjs-5.41.0-1.fc26 kf5-kjsembed-5.41.0-1.fc26 kf5-kmediaplayer-5.41.0-2.fc26
kf5-knewstuff-5.41.0-1.fc26 kf5-knotifications-5.41.0-1.fc26
kf5-knotifyconfig-5.41.0-1.fc26 kf5-kpackage-5.41.0-1.fc26 kf5-kparts-5.41.0-1.fc26
kf5-kpeople-5.41.0-1.fc26 kf5-kplotting-5.41.0-1.fc26 kf5-kpty-5.41.0-1.fc26
kf5-kross-5.41.0-2.fc26 kf5-krunner-5.41.0-1.fc26 kf5-kservice-5.41.0-1.fc26
kf5-ktexteditor-5.41.0-2.fc26 kf5-ktextwidgets-5.41.0-1.fc26
kf5-kunitconversion-5.41.0-1.fc26 kf5-kwallet-5.41.0-1.fc26 kf5-kwayland-5.41.0-1.fc26
kf5-kwidgetsaddons-5.41.0-1.fc26 kf5-kwindowsystem-5.41.0-1.fc26 kf5-kxmlgui-5.41.0-1.fc26
kf5-kxmlrpcclient-5.41.0-1.fc26 kf5-modemmanager-qt-5.41.0-
1.fc26 kf5-networkmanager-qt-5.41.0-1.fc26 kf5-plasma-5.41.0-1.fc26
kf5-prison-5.41.0-1.fc26 kf5-solid-5.41.0-1.fc26 kf5-sonnet-5.41.0-1.fc26
kf5-syntax-highlighting-5.41.0-1.fc26 kf5-threadweaver-5.41.0-1.fc26
oxygen-icon-theme-5.41.0-1.fc26 qqc2-desktop-style-5.41.0-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f287dfb1a0
ostree-2017.15-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c458061e88
nfs-utils-2.2.1-3.rc2.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0ad0e2f390
webkitgtk4-2.18.4-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5e144d356e cmake-3.10.1-4.fc26
redhat-rpm-config-63-2.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d57a06cda1
flatpak-0.10.2.1-1.fc26 flatpak-builder-0.10.6-1.fc26
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7ef47eba65
pcre2-10.23-12.fc26
The following builds have been pushed to Fedora 26 updates-testing
certbot-0.20.0-1.fc26
cri-o-1.9.0-4.git814c6ab.fc26
flcluster-1.0.4-1.fc26
giac-1.4.9.41-3.fc26
gsequencer-1.2.5-1.fc26
mock-1.4.8-1.fc26
nbdkit-1.1.26-1.fc26
pcre2-10.23-12.fc26
perl-Tree-Simple-1.32-1.fc26
php-sabre-vobject4-4.1.4-1.fc26
php-sebastian-comparator2-2.1.1-1.fc26
phpMyAdmin-4.7.7-1.fc26
python-acme-0.20.0-1.fc26
python-certbot-apache-0.20.0-1.fc26
python-certbot-dns-rfc2136-0.20.0-1.fc26
python-certbot-nginx-0.20.0-1.fc26
qcas-0.5.3-3.fc26
qconf-2.4-1.fc26
qupzilla-2.2.3-1.fc26
runc-1.0.0-15.rc4.gite6516b3.fc26
thrift-0.10.0-8.fc26
urh-1.9.1-1.fc26
vdr-scraper2vdr-1.0.7-1.20171221gitf06286f.fc26
Details about builds:
================================================================================
certbot-0.20.0-1.fc26 (FEDORA-2017-39d3c0a217)
A free, automated certificate authority client
--------------------------------------------------------------------------------
Update Information:
Update to 0.20.0
--------------------------------------------------------------------------------
================================================================================
cri-o-1.9.0-4.git814c6ab.fc26 (FEDORA-2017-1216733afa)
CRI-O is the Kubernetes Container Runtime Interface for OCI-based containers
--------------------------------------------------------------------------------
Update Information:
cri-o needs runc >= 2:1.0.0-15, runc - built commit e6516b3 ---- Many bug
fixes ---- Updated for Kubernetes 1.9 release. ---- Update with a couple of
bug fixes.
--------------------------------------------------------------------------------
================================================================================
flcluster-1.0.4-1.fc26 (FEDORA-2017-0876b8bfb6)
A management tool for accessing dxcluster nodes
--------------------------------------------------------------------------------
Update Information:
Version 1.0.4 * Maintenance release Cluster stream *
Changed text from view to edit to allow drag and copy mouse action AR
report * Stripping leading spaces on AR sh/dx report corrupts
columnar data presentation.
--------------------------------------------------------------------------------
================================================================================
giac-1.4.9.41-3.fc26 (FEDORA-2017-b6204c3d2d)
Computer Algebra System, Symbolic calculus, Geometry
--------------------------------------------------------------------------------
Update Information:
- QCAS builds - Update giac to 1.4.9.41
--------------------------------------------------------------------------------
================================================================================
gsequencer-1.2.5-1.fc26 (FEDORA-2017-9481495bf8)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
updated Source to point to new minor version directory
--------------------------------------------------------------------------------
================================================================================
mock-1.4.8-1.fc26 (FEDORA-2017-e954edb1bb)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
Features: * There is a new option --config-opts [
GH#138](https://github.com
/rpm-software-management/mock/issues/138) You can run: ``` mock --config-
opts yum_command=/usr/bin/yum-deprecated --enable-network ``` which will set:
``` config_opts['system_yum_command'] = '/usr/bin/yum' ``` or for a
list:
``` mock --config-opts extra_chroot_dirs=/mnt/b --config-opts
extra_chroot_dirs=/mnt/a ``` which will set ```
config_opts['extra_chroot_dirs'] = ['/mnt/b', '/mnt/a'] ``` or
list with a
single item: ``` mock --config-opts extra_chroot_dirs=/mnt/b --config-opts
extra_chroot_dirs= ``` which will set ``` config_opts['extra_chroot_dirs']
= ['/mnt/b'] ``` It can detect boolean: ``` mock --config-opts
nosync=False --debug-config |grep nosync config_opts['nosync'] = False ```
A specialized option has priority. Therefore: ``` mock --config-opts
rpmbuild_networking=False --enable-network --debug-config |grep
rpmbuild_networking config_opts['rpmbuild_networking'] = True ``` It is
unable to set complicated variables. Like
config_opts['plugin_conf']['package_state_opts'] or anything which has
dictionary as value. * There is a new option. `--enable-network` which is
equivalent to `config_opts['rpmbuild_networking'] = True` Bugfixes: *
orphanskill now emits SIGKILL when SIGTERM is not enough
[
RHBZ#1495214](https://bugzilla.redhat.com/show_bug.cgi?id=1495214) * when mock
tries to force umount, it will try umount recursively * do not change to
directory if nspawn is used [
GH#108](https://github.com/rpm-software-
management/mock/issues/108) * when creating yum/dnf.conf, mock now copy
timestamp from the host
[
RHBZ#1293910](https://bugzilla.redhat.com/show_bug.cgi?id=1293910) * We now
mount /proc and /sys in chroot before executing any package manager command
(outside of
chroot)[RHBZ#1467299](https://bugzilla.redhat.com/show_bug.cgi?id=1467299) *
Dependencies of mock-scm (git, cvs, tar, subversion) are now soft dependencies
(Recommends) [
RHBZ#1515989](https://bugzilla.redhat.com/show_bug.cgi?id=1515989)
* Previously job control in `mock shell` does not work.
[
RHBZ#1468837](https://bugzilla.redhat.com/show_bug.cgi?id=1468837). This was a
glibc bug and it is resolved in rawhide now.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467299 - /proc is not available during chroot preparation in mock build
https://bugzilla.redhat.com/show_bug.cgi?id=1467299
[ 2 ] Bug #1515989 - does mock-scm really need to Require: cvs, subversion, git?
https://bugzilla.redhat.com/show_bug.cgi?id=1515989
[ 3 ] Bug #1293910 - The behaviour of metadata_expire=0
https://bugzilla.redhat.com/show_bug.cgi?id=1293910
[ 4 ] Bug #1513953 - Please add argument for enablement of networking with the
systemd-nspawn
https://bugzilla.redhat.com/show_bug.cgi?id=1513953
[ 5 ] Bug #1495214 - Cleanup failed; device is busy
https://bugzilla.redhat.com/show_bug.cgi?id=1495214
--------------------------------------------------------------------------------
================================================================================
nbdkit-1.1.26-1.fc26 (FEDORA-2017-96ffce07ed)
NBD server
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.1.26. Add new pkg-config file and dependency.
--------------------------------------------------------------------------------
================================================================================
pcre2-10.23-12.fc26 (FEDORA-2017-7ef47eba65)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes pcre2_jit_match() to properly check the pattern was JIT-
compiled. It also fixes incorrect first matching character when a backreference
with zero minimum repeat starts a pattern. It also allows pcre2grep match
counter to handle values larger than 2147483647 on 32-bit platforms.
--------------------------------------------------------------------------------
================================================================================
perl-Tree-Simple-1.32-1.fc26 (FEDORA-2017-ff967cefb8)
Tree::Simple Perl module
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
================================================================================
php-sabre-vobject4-4.1.4-1.fc26 (FEDORA-2017-8e3ad2ea08)
Library to parse and manipulate iCalendar and vCard objects
--------------------------------------------------------------------------------
Update Information:
**Version 4.1.4** (2017-12-22) * 383: Fix possible infinite loop in
RRuleIterator, when the RRule FREQ is YEARLY and it uses BYYEARDAY only
(@mvdnes). * 392: Improved significant change detection. This should reduce the
number of unneeded update emails in scheduling systems. (@alecpl). * 395:
Removed `Canada/East-Saskatchewan` timezone, as it got removed from PHP as
well. (@remicollet).
--------------------------------------------------------------------------------
================================================================================
php-sebastian-comparator2-2.1.1-1.fc26 (FEDORA-2017-ee5e3c0524)
Compare PHP values for equality
--------------------------------------------------------------------------------
Update Information:
**Version 2.1.1** - 2017-12-22 * **Fixed** * Fixed
[
phpunit/#2923](https://github.com/sebastianbergmann/phpunit/issues/2923):
Unexpected failed date matching
--------------------------------------------------------------------------------
================================================================================
phpMyAdmin-4.7.7-1.fc26 (FEDORA-2017-481515e199)
Handle the administration of MySQL over the World Wide Web
--------------------------------------------------------------------------------
Update Information:
Upstream announcement: Welcome to **phpMyAdmin 4.7.7**, a regular maintenance
release containing bug fixes and a security fix. The security vulnerability is
a XSRF/CSRF flaw; you can read more at
https://www.phpmyadmin.net/security/PMASA-2017-9/ As a result of this, we
recommend all users upgrade immediately. A CVE-ID has been requested but not yet
assigned. A complete list of new features and bugs that have been fixed is
available in the ChangeLog file or changelog.php included with this release.
Notable changes since 4.7.6: * Fixed displaying of formatted numeric values
for some locales * Fixed PHP error when browsing certain results There are
several more improvements; please refer to the ChangeLog for full details.
Thanks to our sponsors for helping to make this work possible! The phpMyAdmin
Team
--------------------------------------------------------------------------------
================================================================================
python-acme-0.20.0-1.fc26 (FEDORA-2017-39d3c0a217)
Python library for the ACME protocol
--------------------------------------------------------------------------------
Update Information:
Update to 0.20.0
--------------------------------------------------------------------------------
================================================================================
python-certbot-apache-0.20.0-1.fc26 (FEDORA-2017-39d3c0a217)
The apache plugin for certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.20.0
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-rfc2136-0.20.0-1.fc26 (FEDORA-2017-39d3c0a217)
RFC 2136 DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.20.0
--------------------------------------------------------------------------------
================================================================================
python-certbot-nginx-0.20.0-1.fc26 (FEDORA-2017-39d3c0a217)
The nginx plugin for certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.20.0
--------------------------------------------------------------------------------
================================================================================
qcas-0.5.3-3.fc26 (FEDORA-2017-b6204c3d2d)
Qt5 GUI application for Giac
--------------------------------------------------------------------------------
Update Information:
- QCAS builds - Update giac to 1.4.9.41
--------------------------------------------------------------------------------
================================================================================
qconf-2.4-1.fc26 (FEDORA-2017-8be34c4b28)
Tool for generating configure script for qmake-based projects
--------------------------------------------------------------------------------
Update Information:
Bump to v2.4
--------------------------------------------------------------------------------
================================================================================
qupzilla-2.2.3-1.fc26 (FEDORA-2017-952a6c2320)
Modern web browser
--------------------------------------------------------------------------------
Update Information:
An update of QupZilla to the latest upstream bugfix release, version 2.2.3: *
fix crashes with Qt 5.10 (and possibly 5.9 too?) * fix default proxy
configuration type in preferences * appdata fixes (fixed default screenshot URL,
changed installation directory from `/usr/share/appdata` to
`/usr/share/metainfo`)
--------------------------------------------------------------------------------
================================================================================
runc-1.0.0-15.rc4.gite6516b3.fc26 (FEDORA-2017-1216733afa)
CLI for running Open Containers
--------------------------------------------------------------------------------
Update Information:
cri-o needs runc >= 2:1.0.0-15, runc - built commit e6516b3 ---- Many bug
fixes ---- Updated for Kubernetes 1.9 release. ---- Update with a couple of
bug fixes.
--------------------------------------------------------------------------------
================================================================================
thrift-0.10.0-8.fc26 (FEDORA-2017-037fb08938)
Software framework for cross-language services development
--------------------------------------------------------------------------------
Update Information:
Fix incorrect shallow copy in java generator code for enums. This fixes FTBFS on
s390x (rhbz#1507518)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1507518 - thrift FTBFS on s390x
https://bugzilla.redhat.com/show_bug.cgi?id=1507518
--------------------------------------------------------------------------------
================================================================================
urh-1.9.1-1.fc26 (FEDORA-2017-f865597806)
Universal Radio Hacker: investigate wireless protocols like a boss
--------------------------------------------------------------------------------
Update Information:
This is new version of urh.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526667 - urh-1.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1526667
--------------------------------------------------------------------------------
================================================================================
vdr-scraper2vdr-1.0.7-1.20171221gitf06286f.fc26 (FEDORA-2017-7a783cbb17)
A client plugin which provides scraped metadata from EPGD to other plugins
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.7-1.20171221gitf06286f
--------------------------------------------------------------------------------