The following Fedora 26 Security updates need testing: Age URL 212 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26 105 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26 44 https://bodhi.fedoraproject.org/updates/FEDORA-2018-66b885ae3c keycloak-httpd-client-install-0.8-1.fc26 31 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b166805347 transmission-2.92-12.fc26 31 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f8a78a5ef squid-4.0.23-1.fc26 25 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c7c6160e65 thunderbird-52.6.0-1.fc26 18 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fff755ee8e jhead-3.00-7.fc26 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c54ced412e gcab-1.1-1.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f97cb1c9b0 krb5-1.15.2-7.fc26 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5cdc56766f firefox-58.0.2-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-71fac70309 patch-2.7.6-3.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c1b8e0176c freetype-2.7.1-10.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-db5041e661 bro-2.5.3-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cbc52e8812 irssi-1.0.7-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-25a7ba3cb6 exim-4.90.1-2.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7d90e269a4 milkytracker-1.01.00-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b2d76ba048 seamonkey-2.49.2-2.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9817f1dafa mbedtls-2.7.0-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b79f325c48 bugzilla-5.0.4-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-844a1e9778 knot-resolver-2.1.0-1.fc26 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2293c571b1 electrum-3.0.6-1.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d94e205df8 wavpack-5.1.0-7.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a249b4214 cryptopp-5.6.5-2.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2012089e37 libsamplerate-0.1.9-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc47f3c85d glibc-arm-linux-gnu-2.26-4.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-147d33439c php-phpmyadmin-motranslator-4.0-1.fc26 php-phpmyadmin-sql-parser-4.2.4-3.fc26 phpMyAdmin-4.7.8-1.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5950093e69 mingw-wavpack-5.1.0-4.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f810ecfaf mingw-leptonica-1.74.4-3.fc26 leptonica-1.74.4-4.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b3e985489b quagga-1.2.2-2.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4e657bf5e3 sharutils-4.15.2-6.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5573046c3b freexl-1.0.5-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved: Age URL 25 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c7c6160e65 thunderbird-52.6.0-1.fc26 15 https://bodhi.fedoraproject.org/updates/FEDORA-2018-27cb0cd918 ibus-1.5.17-6.fc26 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc14e16004 nss-3.35.0-1.0.fc26 nss-softokn-3.35.0-1.0.fc26 nss-util-3.35.0-1.0.fc26 nspr-4.18.0-1.fc26 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e5558f0ff vim-8.0.1505-1.fc26 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c54ced412e gcab-1.1-1.fc26 12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9ef65cf422 perl-5.24.3-396.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6fe397a796 lxpanel-0.9.3-4.D20180109git2ddf8dfc.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ddd1e5c30a iproute-4.14.1-5.fc26 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f97cb1c9b0 krb5-1.15.2-7.fc26 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-85dd2a6ff9 curl-7.53.1-15.fc26 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5cdc56766f firefox-58.0.2-1.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c1b8e0176c freetype-2.7.1-10.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a2e230b9d net-snmp-5.7.3-26.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9d8876b830 samba-4.6.13-0.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-18c1baca23 qt5-qtbase-5.9.4-4.fc26 8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-71fac70309 patch-2.7.6-3.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-be760d6d28 libidn2-2.0.4-3.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-800cf2f81e ethtool-4.15-1.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0be6ceb3e0 python2-2.7.14-5.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5e5bb3f1fb koji-1.15.0-4.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-53c4737dfb git-2.13.6-3.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4c127acb0f libwebp-0.6.1-5.fc26 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4c28b00507 gnutls-3.5.18-2.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d94e205df8 wavpack-5.1.0-7.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-70fbfc5434 pcre-8.41-6.fc26 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c753faab74 zerofree-1.1.1-1.fc26 3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-562467e141 sssd-1.16.0-7.fc26 2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b7b864a29e breeze-icon-theme-5.43.0-1.fc26 extra-cmake-modules-5.43.0-1.fc26 kf5-5.43.0-1.fc26 kf5-attica-5.43.0-1.fc26 kf5-baloo-5.43.0-1.fc26 kf5-bluez-qt-5.43.0-1.fc26 kf5-frameworkintegration-5.43.0-2.fc26 kf5-kactivities-5.43.0-2.fc26 kf5-kactivities-stats-5.43.0-2.fc26 kf5-kapidox-5.43.0-1.fc26 kf5-karchive-5.43.0-1.fc26 kf5-kauth-5.43.0-1.fc26 kf5-kbookmarks-5.43.0-2.fc26 kf5-kcmutils-5.43.0-3.fc26 kf5-kcodecs-5.43.0-1.fc26 kf5-kcompletion-5.43.0-1.fc26 kf5-kconfig-5.43.0-1.fc26 kf5-kconfigwidgets-5.43.0-1.fc26 kf5-kcoreaddons-5.43.0-1.fc26 kf5-kcrash-5.43.0-1.fc26 kf5-kdbusaddons-5.43.0-1.fc26 kf5-kdeclarative-5.43.0-2.fc26 kf5-kded-5.43.0-3.fc26 kf5-kdelibs4support-5.43.0-3.fc26 kf5-kdesignerplugin-5.43.0-2.fc26 kf5-kdesu-5.43.0-1.fc26 kf5-kdewebkit-5.43.0-2.fc26 kf5-kdnssd-5.43.0-1.fc26 kf5-kdoctools-5.43.0-1.fc26 kf5-kemoticons-5.43.0-1.fc26 kf5-kfilemetadata-5.43.0-1.fc26 kf5-kglobalaccel-5.43.0-1.fc26 kf5-kguiad dons-5.43.0-1.fc26 kf5-khtml-5.43.0-3.fc26 kf5-ki18n-5.43.0-1.fc26 kf5-kiconthemes-5.43.0-1.fc26 kf5-kidletime-5.43.0-1.fc26 kf5-kimageformats-5.43.0-1.fc26 kf5-kinit-5.43.0-2.fc26 kf5-kio-5.43.0-3.fc26 kf5-kirigami2-5.43.0-1.fc26 kf5-kitemmodels-5.43.0-1.fc26 kf5-kitemviews-5.43.0-1.fc26 kf5-kjobwidgets-5.43.0-1.fc26 kf5-kjs-5.43.0-1.fc26 kf5-kjsembed-5.43.0-1.fc26 kf5-kmediaplayer-5.43.0-2.fc26 kf5-knewstuff-5.43.0-2.fc26 kf5-knotifications-5.43.0-1.fc26 kf5-knotifyconfig-5.43.0-2.fc26 kf5-kpackage-5.43.0-1.fc26 kf5-kparts-5.43.0-2.fc26 kf5-kpeople-5.43.0-1.fc26 kf5-kplotting-5.43.0-1.fc26 kf5-kpty-5.43.0-1.fc26 kf5-kross-5.43.0-2.fc26 kf5-krunner-5.43.0-3.fc26 kf5-kservice-5.43.0-1.fc26 kf5-ktexteditor-5.43.0-3.fc26 kf5-ktextwidgets-5.43.0-1.fc26 kf5-kunitconversion-5.43.0-1.fc26 kf5-kwallet-5.43.0-1.fc26 kf5-kwayland-5.43.0-1.fc26 kf5-kwidgetsaddons-5.43.0-1.fc26 kf5-kwindowsystem-5.43.0-1.fc26 kf5-kxmlgui-5.43.0-1.fc26 kf5-kxmlrpcclient-5.43.0-2.fc26 kf5-modemmanager-qt-5.43.0- 1.fc26 kf5-networkmanager-qt-5.43.0-1.fc26 kf5-plasma-5.43.0-3.fc26 kf5-prison-5.43.0-1.fc26 kf5-purpose-5.43.0-1.fc26 kf5-solid-5.43.0-2.fc26 kf5-sonnet-5.43.0-1.fc26 kf5-syntax-highlighting-5.43.0-1.fc26 kf5-threadweaver-5.43.0-1.fc26 oxygen-icon-theme-5.43.0-1.fc26 qqc2-desktop-style-5.43.0-1.fc26 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e3590e7463 nftables-0.8.2-2.fc26 iptables-1.6.2-1.fc26 libnftnl-1.0.9-2.fc26
The following builds have been pushed to Fedora 26 updates-testing
bridge-utils-1.6-1.fc26 copr-backend-1.113-1.fc26 copr-cli-1.67-1.fc26 copr-dist-git-0.40-1.fc26 copr-frontend-1.128-1.fc26 copr-keygen-1.71-1.fc26 copr-rpmbuild-0.17-1.fc26 copr-selinux-1.48-1.fc26 dippi-2.5.4-1.fc26 drupal7-7.57-1.fc26 fotoxx-18.01.3-1.fc26 fpc-3.0.4-1.fc26 fwupd-0.9.9-1.fc26 imgbased-1.0.999-0.2.fc26 lazarus-1.8.0-1.fc26 libcouchbase-2.8.5-1.fc26 nx-libs-3.5.0.33-4.fc26 python-copr-1.86-1.fc26 python-crypto-2.6.1-22.fc26 qt-virt-manager-0.52.80-2.fc26 qt5-qtwebengine-5.10.1-1.fc26 tlp-1.1-1.fc26 usermode-1.112-1.fc26 waiverdb-0.8.0-1.fc26 wavemon-0.8.2-1.fc26 x2goserver-4.0.1.22-2.fc26
Details about builds:
================================================================================ bridge-utils-1.6-1.fc26 (FEDORA-2018-5119859c4a) Utilities for configuring the linux ethernet bridge -------------------------------------------------------------------------------- Update Information:
https://marc.info/?l=linux-netdev&m=147672021514270 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1389966 - bridge-utils-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1389966 --------------------------------------------------------------------------------
================================================================================ copr-backend-1.113-1.fc26 (FEDORA-2018-e550fa2c48) Backend for Copr -------------------------------------------------------------------------------- Update Information:
- original builder deprecation - remove Group tag - Shebangs cleanup - escapes in changelogs - use netaddr instead of IPy module - sleep after each load_jobs iteration - python3 conversion - UMB: adding content type - add source_status field for Builds - generate module artifacts rpms - the rsync log is actually renderred directly into result dir now - mockchain.log renamed to backend.log - pg#192 missing records in mockchain.log - enable running tests in spec file - enable and update vmmamanger tests, fix three minor bugs in the manager - frontend now presents the whole job queue state to backend - copy only module builds into the repo directory ---- - exception handling for hit counting when IP address cannot be parsed ---- - terminate also 'in_use' builders if health checks have failed - make --detached the last arg for copr-rpmbuild - update copr_log_hitcounter to check ip against ignored pattern - new msg bus options - disable DNF makecache timer/service - fix message duplication for multi-bus scenario - optimize createrepo_c - Revert "[backend] remove --ignore- lock from createrepo_c" --------------------------------------------------------------------------------
================================================================================ copr-cli-1.67-1.fc26 (FEDORA-2018-60d673d8e2) Command line interface for COPR -------------------------------------------------------------------------------- Update Information:
- remove Group tag - Shebangs cleanup - fix deps in spec - allow running tests only for epel7 - tests also for python2 during builds - new custom source method - require to specify project when building module ---- - allow to set use_bootstrap_container via API --------------------------------------------------------------------------------
================================================================================ copr-dist-git-0.40-1.fc26 (FEDORA-2018-a021b87f3e) Copr services for Dist Git server -------------------------------------------------------------------------------- Update Information:
- remove Group tag - Shebangs cleanup - fix spec for rhel8 - escapes in changelogs - remove old conditional in spec - fix python requires, also trim deps down - add source_status field for Builds - remove no longer needed CAP_SYS_CHROOT cap --------------------------------------------------------------------------------
================================================================================ copr-frontend-1.128-1.fc26 (FEDORA-2018-363d3f315b) Frontend for Copr -------------------------------------------------------------------------------- Update Information:
- fix counting stat logic - use end_commit when building by copr-fedmsg-listener - update service file for copr-fedmsg-listener to use python3 - add forked description - fix init_db - fix unittests (zlib.compress expects bytes, not str) - task queue info cleanup - fix initial build.source_status and chroot statuses for auto- rebuilds - remove some old python scripts - enable chroot for every project that follows branching - fix copr_url() template macro for custom method - remove Group tag - Shebangs cleanup - new custom source method - fix search page error due to missing graph data - add fetch_sources_only: True into build task defintion - add graphs of utilization - option to give COPR repository bigger priority (see #97) - grammar: s/duplicate a backend data/duplicate backend data/ - Trailing ".git" is ignored when matching clone URL, so is unnecessary. - fix frontend by disabling doc generation - Accept webhooks from bitbucket.org. - Expand docs on how to find the correct Pagure hook setting. - fix typos - fixed status_to_order, order_to_status functions, added waiting icon - add indeces for faster build selection - add source_status field for Builds - implement the module buildorder logic - krb5: last iteritems()->items() - have .repo on the end of module repofile URL - set the gpg properties for module repo - Byecompile files in %%{_datadir} with python3 - pg#191 When auto- rebuilding from push event, use a head commit hash - move run3_tests.sh into run_tests.sh, polish .spec a bit - fix run scripts under python3 - frontend now presents the whole job queue state to backend - opt rename SRPM_STORAGE_DIR to STORAGE_DIR - new generic web-hook - when passing URL with path, expect it in result; see ad9c3b4cc - remove outdated tests, see 3f62873 - add index to build module_id - copy only module builds into the repo directory - generate the module NSV rather than asking for it - fix condition that all module packages were successfully built - remove outdated modularity code - fix baseurl for module repofile - build modules in all enabled chroots - implement submitting modules via URL - set default values for optional modulemd params - change module version to bigint - always have a known state of a module - have unique module nsv per project - build a module without using MBS - require to specify project when building module - add build to module relation - limit spec to python3 deps and switch application and scripts to python3 - pg#188 COPR webhook doesn't work with branches - python3 conversion --------------------------------------------------------------------------------
================================================================================ copr-keygen-1.71-1.fc26 (FEDORA-2018-e9b40a18e2) Part of Copr build system. Aux service that generate keys for signd -------------------------------------------------------------------------------- Update Information:
- remove Group tag - Shebangs cleanup - update doc generation to python3 --------------------------------------------------------------------------------
================================================================================ copr-rpmbuild-0.17-1.fc26 (FEDORA-2018-9ff8d39d24) Run COPR build tasks -------------------------------------------------------------------------------- Update Information:
- remove unused requires and rename rpm-python3 to python3-rpm - switch copr- sources-custom to python3 shebang - keep tmpfs data mounted acros mock invocations for custom method - new custom source method - add support for fetch_sources_only in task defition - allow building rpms from srpms fetched by providers, - extend cmdline with scm submode - optionally set a priority for a repo - add test for create_rpmmacros + refactoring - allow only https and ftps protocols for source fetch --------------------------------------------------------------------------------
================================================================================ copr-selinux-1.48-1.fc26 (FEDORA-2018-a8dc590caf) SELinux module for COPR -------------------------------------------------------------------------------- Update Information:
- remove Group tag --------------------------------------------------------------------------------
================================================================================ dippi-2.5.4-1.fc26 (FEDORA-2018-fbd4ee8241) Calculate display info like DPI and aspect ratio -------------------------------------------------------------------------------- Update Information:
Update to version 2.5.4. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1541819 - dippi-2.5.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1541819 --------------------------------------------------------------------------------
================================================================================ drupal7-7.57-1.fc26 (FEDORA-2018-c1f73debee) An open-source content-management platform -------------------------------------------------------------------------------- Update Information:
This update fixes multiple security vulnerabilities. Read more details here: https://www.drupal.org/SA-CORE-2018-001 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1548191 - drupal7: drupal: JavaScript cross-site scripting in checkPlain function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1548191 [ 2 ] Bug #1548326 - drupal7: drupal: Multiple vulnerabilities fixed in 7.57 and 8.4.5 (SA-CORE-2018-001) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1548326 [ 3 ] Bug #1548202 - drupal7: drupal: External link injection on 404 pages when linking to the current page [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1548202 [ 4 ] Bug #1548198 - drupal7: drupal: jQuery vulnerability with untrusted domains requests via Ajax [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1548198 [ 5 ] Bug #1548194 - drupal7: drupal: Private file access bypass in Drupal private file system [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1548194 [ 6 ] Bug #1548190 - drupal7: drupal: JavaScript cross-site scripting in checkPlain function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1548190 [ 7 ] Bug #1547793 - drupal7-7.57 is available https://bugzilla.redhat.com/show_bug.cgi?id=1547793 --------------------------------------------------------------------------------
================================================================================ fotoxx-18.01.3-1.fc26 (FEDORA-2018-b264f021c8) Photo editor -------------------------------------------------------------------------------- Update Information:
18.01.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1548211 - fotoxx-18.01.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1548211 --------------------------------------------------------------------------------
================================================================================ fpc-3.0.4-1.fc26 (FEDORA-2018-a50da4b6a1) Free Pascal Compiler -------------------------------------------------------------------------------- Update Information:
Upgrade to upstream release 3.0.4 --------------------------------------------------------------------------------
================================================================================ fwupd-0.9.9-1.fc26 (FEDORA-2018-7754b8e7e4) Firmware update daemon -------------------------------------------------------------------------------- Update Information:
New upstream release - Block owned TPM updates on Dell hardware - Catch invalid Dell dock component requests - Disable the dell plugin if libsmbios fails - Enforce the thunderbolt controller version is xx.yy - Fix crash when enumerating with dock connected but UEFI capsule off - Handle "native" thunderbolt mode (Yehezkel Bernat) - Ignore useless thunderbolt device types - Never include release checksums for older firmware versions - Use a CNAME to redirect to the correct CDN for metadata --------------------------------------------------------------------------------
================================================================================ imgbased-1.0.999-0.2.fc26 (FEDORA-2018-394bb81427) Tools to work with an image based rootfs -------------------------------------------------------------------------------- Update Information:
Development for 4.3 ---- Don't remediate ifcfg files -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1531501 - the problem is with the imgbased package https://bugzilla.redhat.com/show_bug.cgi?id=1531501 [ 2 ] Bug #1307636 - imgbased: FTBFS in rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1307636 --------------------------------------------------------------------------------
================================================================================ lazarus-1.8.0-1.fc26 (FEDORA-2018-aac703fbe2) Lazarus Component Library and IDE for Freepascal -------------------------------------------------------------------------------- Update Information:
Update to upstream version 1.8.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1525820 - Need update lazarus to 1.8.0 https://bugzilla.redhat.com/show_bug.cgi?id=1525820 --------------------------------------------------------------------------------
================================================================================ libcouchbase-2.8.5-1.fc26 (FEDORA-2018-4b9ed76525) Client and protocol library for the Couchbase project -------------------------------------------------------------------------------- Update Information:
## Upstream release API documentation: http://docs.couchbase.com/sdk- api/couchbase-c-client-2.8.5/ ### Spec Changes * Package now install tapset for SystemTap * Snappy dependency has been removed, as package now integrates snappy and uses its internal C++ classes. It cannot be unbundled. ### Upstream Changes * [CCBC-883](https://issues.couchbase.com/browse/CCBC-883): Always use built-in compression. It is not possible to unbundle the Snappy library, as libcouchbase uses the C++ API which is not exported in the headers. Also, compression can now work on all types of buffers, including `LCB_KV_IOV` and `LCB_KV_IOVCOPY`. This fixes compression in `cbc-pillowfight` tool. * [CCBC-895](https://issues.couchbase.com/browse/CCBC-895): Fix typo in rendering IPv6 addresses in `lcb_diag`. * [CCBC-879](https://issues.couchbase.com/browse/CCBC-879): Implement log redaction. When `log_redaction=on` is specified in the connection string, the library will wrap sensitive data in the logs in special tags, which can be processed by the `cblogredaction` tool from the server distribution. * [CCBC-893](https://issues.couchbase.com/browse/CCBC-894): Updated list of subdoc error codes. * [CCBC-892](https://issues.couchbase.com/browse/CCBC-892): Enable the SSL trust store to be in a separate file. Trust store has to be specified with option `truststorepath=���`, otherwise the library will expect it to be stored with the certificate in `certpath=`. * [CCBC-888](https://issues.couchbase.com/browse/CCBC-888): Per operation tracing. When compiled with tracing support (`cmake -DLCB_TRACING=ON`), the library will expose the tracing API, which allows to measure time of every data operation, and include some extra information. The API is modeled after OpenTracing and allows one to write custom tracers to consume this information. For more information, see an example in [example/tracing/tracing.c](example/tracing/tracing.c). This is uncommitted API at this time. Also this feature includes support for new type of the server responses, which include time spent to execute the KV command on the server. This feature controlled by `enable_tracing` option in connection string or `lcb_cntl(..., LCB_CNTL_ENABLE_TRACING, ...)`. * Added basic support of JSON datatype. The library will negotiate a mode, in which the application will see `LCB_VALUE_F_JSON` flag on datatype field of the response in the operation callback, if the cluster detected the content of the document to be valid JSON. Also the application can send this flag on the outgoing documents to notify the server about payload format. * Refresh dtrace/systemtap integration. Also adds tapset for SystemTap to simplify access to trace points. * cbc-pillowfight improvements and changes: * dump diagnostics on `SIGQUIT` (CTRL-\ in terminal). * with `-J`/`--json`, the JSON datatype will be sent on the documents. * enable randomized document bodies with `-R`/`--random-body` switch. * durability checks for pillowfight with `--persist-to `/`--replicate-to`. * pessimistic locking of keys before updating with `--lock`. * when requesting timings with `-T`/`--timings`, the application will no longer dump them periodically.Instead it will await for the user to signal `SIGQUIT` and also dump them on exit. The old mode of reporting regularly is enabled by repeating the switch more than once (e.g. `-TT`). * Added the cbc-watch command to monitor server stats. By default it tracks `cmd_total_ops`, `cmd_total_gets` and `cmd_total_sets` updating stats once a second, and displaying diff with the previous value. --------------------------------------------------------------------------------
================================================================================ nx-libs-3.5.0.33-4.fc26 (FEDORA-2017-8d369659cb) NX X11 protocol compression libraries -------------------------------------------------------------------------------- Update Information:
nx-libs 3.5.0.33: - Don't allow overriding of X.Org Server UNIX sockets via TEMP/NX_TEMP environment variables. Fixes problems on machines that use pam_tempdir.so. - Fix CVE-2017-2624 (timingsafe_memcmp) by Ulrich Sibiller. - Potentially improve LAN- and WAN-type connection speed settings scenarios. Includes a regression fix for VPN connections by Simon Matter. - Fix problems in mate-color-picker and potentially also other applications that make heavy use of RENDER trapezoids. x2goserver 4.0.1.22: - Fixed overzealous nxagent socket removal. - Keyboard mapping fixes, including preparation for usage with Arctica's nx-libs version (not supported in this version of X2Go Server, yet). - Support for Devuan and RT OS full desktop session spawning. - Always use short host name, don't rely on ${HOSTNAME} variable. Compatibility with non-bash login shells. - Spawn full desktop sessions with a new dbus user session instance. - Finnish translation update. - Added support for LXQt full desktop sessions. - New command: x2golistshadowsessions. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1478974 - x2go killed by systemd https://bugzilla.redhat.com/show_bug.cgi?id=1478974 [ 2 ] Bug #1510900 - nx-libs-3.5.0.33 is available https://bugzilla.redhat.com/show_bug.cgi?id=1510900 --------------------------------------------------------------------------------
================================================================================ python-copr-1.86-1.fc26 (FEDORA-2018-cd41101de5) Python interface for Copr -------------------------------------------------------------------------------- Update Information:
- remove Group tag - build python2-copr package conditionally - Remove unnecessary shebang sed in copr-cli.spec and python-copr.spec - fix deps in spec - new custom source method - use username from config if nothing is explicitly specified - remove outdated modularity code - require to specify project when building module --------------------------------------------------------------------------------
================================================================================ python-crypto-2.6.1-22.fc26 (FEDORA-2018-0c75cc72bc) Cryptography library for Python -------------------------------------------------------------------------------- Update Information:
The textbook ElGamal implementation is not secure. PyCrypto and some other implementations use the wrong algorithm, which may lead to some information disclosure simply by looking at the encrypted text. For a full description, see https://github.com/dlitz/pycrypto/issues/253 This update includes a fix for this problem backported from pycryptodome. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1542313 - CVE-2018-6594 python-crypto: Weak ElGamal key parameters in PublicKey/ElGamal.py allow attackers to obtain sensitive information by reading ciphertext https://bugzilla.redhat.com/show_bug.cgi?id=1542313 --------------------------------------------------------------------------------
================================================================================ qt-virt-manager-0.52.80-2.fc26 (FEDORA-2018-d05431b265) Qt Virtual Machine Manager -------------------------------------------------------------------------------- Update Information:
added Russian and Italian translations; some enhancements; ---- some improvements; added Russian, Italian translation; --------------------------------------------------------------------------------
================================================================================ qt5-qtwebengine-5.10.1-1.fc26 (FEDORA-2018-c0d3db441f) Qt5 - QtWebEngine components -------------------------------------------------------------------------------- Update Information:
This update updates QtWebEngine to the 5.10.1 bugfix and security release. QtWebEngine 5.10.1 is part of the Qt 5.10.1 release, but only the QtWebEngine component is included in this update. This update includes: * Security fixes from Chromium up to version 64.0.3282.140. Including: CVE-2017-15407, CVE-2017-15409, CVE-2017-15410, CVE-2017-15411, CVE-2017-15415, CVE-2017-15416, CVE-2017-15418, CVE-2017-15419, CVE-2017-15422, CVE-2017-15423, CVE-2017-15424, CVE-2017-15425, CVE-2017-15426, CVE-2018-6031, CVE-2018-6033, CVE-2018-6034, CVE-2018-6036, CVE-2018-6037, CVE-2018-6038, CVE-2018-6040, CVE-2018-6041, CVE-2018-6042, CVE-2018-6047, CVE-2018-6048, CVE-2018-6050, CVE-2018-6051, CVE-2018-6052, CVE-2018-6053 and CVE-2018-6054. * Mitigations for SPECTRE: disabled shared-buffers, added cryptographic noise to precision timers * [QTBUG-47206] Fixed incorrect layouting due to bug in HTML5 viewport support. * [QTBUG-47945, QTBUG-65647] Fixed random crashes on exit * [QTBUG-57206] Fixed regression in viewport handling in embedded mode * [QTBUG-58400] Improved memory usage when printing * [QTBUG-63867] Fixed <canvas> elements when compiled without OpenGL * [QTBUG-63266, QTBUG-64436] Fixed that pointerType of Pointer Events was empty * [QTBUG-63606] Improved runtime disabling and clearing of HTTP cache * [QTBUG-64436] QtWebEngineWidgets: Fixed crash when exiting fullscreen mode using the context menu. * [QTBUG-64560] Fixed rendering glitches after renderProcessTerminated signal was emitted. * [QTBUG-64812] Fixed message bubble position in Hi-DPI mode * [QTBUG-64869, QTBUG-65004] Added testing for 32-bit host compiler when crossbuilding to 32-bit platforms * [QTBUG-64933] QtWebEngineWidgets: Fixed tooltips that did still show after mouse was moved away. * [QTBUG-65239] Fixed hanging of process if application is closed too fast after startup. * [QTBUG-65715] Fixed double margins when printing --------------------------------------------------------------------------------
================================================================================ tlp-1.1-1.fc26 (FEDORA-2018-819c00b974) Advanced power management tool for Linux -------------------------------------------------------------------------------- Update Information:
Update to 1.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1538383 - tlp-1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1538383 --------------------------------------------------------------------------------
================================================================================ usermode-1.112-1.fc26 (FEDORA-2018-65b86cadc0) Tools for certain user account management tasks -------------------------------------------------------------------------------- Update Information:
Update to **usermode-1.112** -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1269643 - usermode : Fix Catalan translation and fix execution permission in source https://bugzilla.redhat.com/show_bug.cgi?id=1269643 --------------------------------------------------------------------------------
================================================================================ waiverdb-0.8.0-1.fc26 (FEDORA-2018-8523d7147b) Service for waiving results in ResultsDB -------------------------------------------------------------------------------- Update Information:
Release notes: https://docs.pagure.org/waiverdb/release-notes.html#waiverdb-0-8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1538463 - waiverdb-cli --help crashes https://bugzilla.redhat.com/show_bug.cgi?id=1538463 --------------------------------------------------------------------------------
================================================================================ wavemon-0.8.2-1.fc26 (FEDORA-2018-b73d285978) Ncurses-based monitoring application for wireless network devices -------------------------------------------------------------------------------- Update Information:
Update to latest upstream release 0.8.2 (rhbz#1546530) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1546530 - wavemon-0.8.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1546530 --------------------------------------------------------------------------------
================================================================================ x2goserver-4.0.1.22-2.fc26 (FEDORA-2017-8d369659cb) X2Go Server -------------------------------------------------------------------------------- Update Information:
nx-libs 3.5.0.33: - Don't allow overriding of X.Org Server UNIX sockets via TEMP/NX_TEMP environment variables. Fixes problems on machines that use pam_tempdir.so. - Fix CVE-2017-2624 (timingsafe_memcmp) by Ulrich Sibiller. - Potentially improve LAN- and WAN-type connection speed settings scenarios. Includes a regression fix for VPN connections by Simon Matter. - Fix problems in mate-color-picker and potentially also other applications that make heavy use of RENDER trapezoids. x2goserver 4.0.1.22: - Fixed overzealous nxagent socket removal. - Keyboard mapping fixes, including preparation for usage with Arctica's nx-libs version (not supported in this version of X2Go Server, yet). - Support for Devuan and RT OS full desktop session spawning. - Always use short host name, don't rely on ${HOSTNAME} variable. Compatibility with non-bash login shells. - Spawn full desktop sessions with a new dbus user session instance. - Finnish translation update. - Added support for LXQt full desktop sessions. - New command: x2golistshadowsessions. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1478974 - x2go killed by systemd https://bugzilla.redhat.com/show_bug.cgi?id=1478974 [ 2 ] Bug #1510900 - nx-libs-3.5.0.33 is available https://bugzilla.redhat.com/show_bug.cgi?id=1510900 --------------------------------------------------------------------------------