The following Fedora 26 Security updates need testing:
Age URL
212
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7
docker-distribution-2.6.2-1.git48294d9.fc26
105
https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26
44
https://bodhi.fedoraproject.org/updates/FEDORA-2018-66b885ae3c
keycloak-httpd-client-install-0.8-1.fc26
31
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b166805347
transmission-2.92-12.fc26
31
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f8a78a5ef
squid-4.0.23-1.fc26
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c7c6160e65
thunderbird-52.6.0-1.fc26
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fff755ee8e jhead-3.00-7.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c54ced412e gcab-1.1-1.fc26
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f97cb1c9b0 krb5-1.15.2-7.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5cdc56766f
firefox-58.0.2-1.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-71fac70309 patch-2.7.6-3.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c1b8e0176c
freetype-2.7.1-10.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-db5041e661 bro-2.5.3-1.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cbc52e8812 irssi-1.0.7-1.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25a7ba3cb6 exim-4.90.1-2.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7d90e269a4
milkytracker-1.01.00-1.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b2d76ba048
seamonkey-2.49.2-2.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9817f1dafa
mbedtls-2.7.0-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b79f325c48
bugzilla-5.0.4-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-844a1e9778
knot-resolver-2.1.0-1.fc26
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2293c571b1
electrum-3.0.6-1.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d94e205df8
wavpack-5.1.0-7.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a249b4214
cryptopp-5.6.5-2.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2012089e37
libsamplerate-0.1.9-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc47f3c85d
glibc-arm-linux-gnu-2.26-4.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-147d33439c
php-phpmyadmin-motranslator-4.0-1.fc26 php-phpmyadmin-sql-parser-4.2.4-3.fc26
phpMyAdmin-4.7.8-1.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5950093e69
mingw-wavpack-5.1.0-4.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f810ecfaf
mingw-leptonica-1.74.4-3.fc26 leptonica-1.74.4-4.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b3e985489b
quagga-1.2.2-2.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4e657bf5e3
sharutils-4.15.2-6.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5573046c3b
freexl-1.0.5-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c7c6160e65
thunderbird-52.6.0-1.fc26
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-27cb0cd918 ibus-1.5.17-6.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc14e16004 nss-3.35.0-1.0.fc26
nss-softokn-3.35.0-1.0.fc26 nss-util-3.35.0-1.0.fc26 nspr-4.18.0-1.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e5558f0ff
vim-8.0.1505-1.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c54ced412e gcab-1.1-1.fc26
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9ef65cf422
perl-5.24.3-396.fc26
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6fe397a796
lxpanel-0.9.3-4.D20180109git2ddf8dfc.fc26
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ddd1e5c30a
iproute-4.14.1-5.fc26
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f97cb1c9b0 krb5-1.15.2-7.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-85dd2a6ff9
curl-7.53.1-15.fc26
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5cdc56766f
firefox-58.0.2-1.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c1b8e0176c
freetype-2.7.1-10.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a2e230b9d
net-snmp-5.7.3-26.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9d8876b830
samba-4.6.13-0.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-18c1baca23
qt5-qtbase-5.9.4-4.fc26
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-71fac70309 patch-2.7.6-3.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-be760d6d28
libidn2-2.0.4-3.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-800cf2f81e
ethtool-4.15-1.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0be6ceb3e0
python2-2.7.14-5.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5e5bb3f1fb koji-1.15.0-4.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-53c4737dfb git-2.13.6-3.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4c127acb0f
libwebp-0.6.1-5.fc26
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4c28b00507
gnutls-3.5.18-2.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d94e205df8
wavpack-5.1.0-7.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-70fbfc5434 pcre-8.41-6.fc26
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c753faab74
zerofree-1.1.1-1.fc26
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-562467e141 sssd-1.16.0-7.fc26
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b7b864a29e
breeze-icon-theme-5.43.0-1.fc26 extra-cmake-modules-5.43.0-1.fc26 kf5-5.43.0-1.fc26
kf5-attica-5.43.0-1.fc26 kf5-baloo-5.43.0-1.fc26 kf5-bluez-qt-5.43.0-1.fc26
kf5-frameworkintegration-5.43.0-2.fc26 kf5-kactivities-5.43.0-2.fc26
kf5-kactivities-stats-5.43.0-2.fc26 kf5-kapidox-5.43.0-1.fc26 kf5-karchive-5.43.0-1.fc26
kf5-kauth-5.43.0-1.fc26 kf5-kbookmarks-5.43.0-2.fc26 kf5-kcmutils-5.43.0-3.fc26
kf5-kcodecs-5.43.0-1.fc26 kf5-kcompletion-5.43.0-1.fc26 kf5-kconfig-5.43.0-1.fc26
kf5-kconfigwidgets-5.43.0-1.fc26 kf5-kcoreaddons-5.43.0-1.fc26 kf5-kcrash-5.43.0-1.fc26
kf5-kdbusaddons-5.43.0-1.fc26 kf5-kdeclarative-5.43.0-2.fc26 kf5-kded-5.43.0-3.fc26
kf5-kdelibs4support-5.43.0-3.fc26 kf5-kdesignerplugin-5.43.0-2.fc26
kf5-kdesu-5.43.0-1.fc26 kf5-kdewebkit-5.43.0-2.fc26 kf5-kdnssd-5.43.0-1.fc26
kf5-kdoctools-5.43.0-1.fc26 kf5-kemoticons-5.43.0-1.fc26 kf5-kfilemetadata-5.43.0-1.fc26
kf5-kglobalaccel-5.43.0-1.fc26 kf5-kguiad
dons-5.43.0-1.fc26 kf5-khtml-5.43.0-3.fc26 kf5-ki18n-5.43.0-1.fc26
kf5-kiconthemes-5.43.0-1.fc26 kf5-kidletime-5.43.0-1.fc26 kf5-kimageformats-5.43.0-1.fc26
kf5-kinit-5.43.0-2.fc26 kf5-kio-5.43.0-3.fc26 kf5-kirigami2-5.43.0-1.fc26
kf5-kitemmodels-5.43.0-1.fc26 kf5-kitemviews-5.43.0-1.fc26 kf5-kjobwidgets-5.43.0-1.fc26
kf5-kjs-5.43.0-1.fc26 kf5-kjsembed-5.43.0-1.fc26 kf5-kmediaplayer-5.43.0-2.fc26
kf5-knewstuff-5.43.0-2.fc26 kf5-knotifications-5.43.0-1.fc26
kf5-knotifyconfig-5.43.0-2.fc26 kf5-kpackage-5.43.0-1.fc26 kf5-kparts-5.43.0-2.fc26
kf5-kpeople-5.43.0-1.fc26 kf5-kplotting-5.43.0-1.fc26 kf5-kpty-5.43.0-1.fc26
kf5-kross-5.43.0-2.fc26 kf5-krunner-5.43.0-3.fc26 kf5-kservice-5.43.0-1.fc26
kf5-ktexteditor-5.43.0-3.fc26 kf5-ktextwidgets-5.43.0-1.fc26
kf5-kunitconversion-5.43.0-1.fc26 kf5-kwallet-5.43.0-1.fc26 kf5-kwayland-5.43.0-1.fc26
kf5-kwidgetsaddons-5.43.0-1.fc26 kf5-kwindowsystem-5.43.0-1.fc26 kf5-kxmlgui-5.43.0-1.fc26
kf5-kxmlrpcclient-5.43.0-2.fc26 kf5-modemmanager-qt-5.43.0-
1.fc26 kf5-networkmanager-qt-5.43.0-1.fc26 kf5-plasma-5.43.0-3.fc26
kf5-prison-5.43.0-1.fc26 kf5-purpose-5.43.0-1.fc26 kf5-solid-5.43.0-2.fc26
kf5-sonnet-5.43.0-1.fc26 kf5-syntax-highlighting-5.43.0-1.fc26
kf5-threadweaver-5.43.0-1.fc26 oxygen-icon-theme-5.43.0-1.fc26
qqc2-desktop-style-5.43.0-1.fc26
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e3590e7463
nftables-0.8.2-2.fc26 iptables-1.6.2-1.fc26 libnftnl-1.0.9-2.fc26
The following builds have been pushed to Fedora 26 updates-testing
bridge-utils-1.6-1.fc26
copr-backend-1.113-1.fc26
copr-cli-1.67-1.fc26
copr-dist-git-0.40-1.fc26
copr-frontend-1.128-1.fc26
copr-keygen-1.71-1.fc26
copr-rpmbuild-0.17-1.fc26
copr-selinux-1.48-1.fc26
dippi-2.5.4-1.fc26
drupal7-7.57-1.fc26
fotoxx-18.01.3-1.fc26
fpc-3.0.4-1.fc26
fwupd-0.9.9-1.fc26
imgbased-1.0.999-0.2.fc26
lazarus-1.8.0-1.fc26
libcouchbase-2.8.5-1.fc26
nx-libs-3.5.0.33-4.fc26
python-copr-1.86-1.fc26
python-crypto-2.6.1-22.fc26
qt-virt-manager-0.52.80-2.fc26
qt5-qtwebengine-5.10.1-1.fc26
tlp-1.1-1.fc26
usermode-1.112-1.fc26
waiverdb-0.8.0-1.fc26
wavemon-0.8.2-1.fc26
x2goserver-4.0.1.22-2.fc26
Details about builds:
================================================================================
bridge-utils-1.6-1.fc26 (FEDORA-2018-5119859c4a)
Utilities for configuring the linux ethernet bridge
--------------------------------------------------------------------------------
Update Information:
https://marc.info/?l=linux-netdev&m=147672021514270
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1389966 - bridge-utils-1.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1389966
--------------------------------------------------------------------------------
================================================================================
copr-backend-1.113-1.fc26 (FEDORA-2018-e550fa2c48)
Backend for Copr
--------------------------------------------------------------------------------
Update Information:
- original builder deprecation - remove Group tag - Shebangs cleanup - escapes
in changelogs - use netaddr instead of IPy module - sleep after each load_jobs
iteration - python3 conversion - UMB: adding content type - add source_status
field for Builds - generate module artifacts rpms - the rsync log is actually
renderred directly into result dir now - mockchain.log renamed to backend.log -
pg#192 missing records in mockchain.log - enable running tests in spec file -
enable and update vmmamanger tests, fix three minor bugs in the manager -
frontend now presents the whole job queue state to backend - copy only module
builds into the repo directory ---- - exception handling for hit counting
when IP address cannot be parsed ---- - terminate also 'in_use' builders if
health checks have failed - make --detached the last arg for copr-rpmbuild -
update copr_log_hitcounter to check ip against ignored pattern - new msg bus
options - disable DNF makecache timer/service - fix message duplication for
multi-bus scenario - optimize createrepo_c - Revert "[backend] remove --ignore-
lock from createrepo_c"
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.67-1.fc26 (FEDORA-2018-60d673d8e2)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
- remove Group tag - Shebangs cleanup - fix deps in spec - allow running tests
only for epel7 - tests also for python2 during builds - new custom source method
- require to specify project when building module ---- - allow to set
use_bootstrap_container via API
--------------------------------------------------------------------------------
================================================================================
copr-dist-git-0.40-1.fc26 (FEDORA-2018-a021b87f3e)
Copr services for Dist Git server
--------------------------------------------------------------------------------
Update Information:
- remove Group tag - Shebangs cleanup - fix spec for rhel8 - escapes in
changelogs - remove old conditional in spec - fix python requires, also trim
deps down - add source_status field for Builds - remove no longer needed
CAP_SYS_CHROOT cap
--------------------------------------------------------------------------------
================================================================================
copr-frontend-1.128-1.fc26 (FEDORA-2018-363d3f315b)
Frontend for Copr
--------------------------------------------------------------------------------
Update Information:
- fix counting stat logic - use end_commit when building by copr-fedmsg-listener
- update service file for copr-fedmsg-listener to use python3 - add forked
description - fix init_db - fix unittests (zlib.compress expects bytes, not str)
- task queue info cleanup - fix initial build.source_status and chroot statuses
for auto- rebuilds - remove some old python scripts - enable chroot for every
project that follows branching - fix copr_url() template macro for custom method
- remove Group tag - Shebangs cleanup - new custom source method - fix search
page error due to missing graph data - add fetch_sources_only: True into build
task defintion - add graphs of utilization - option to give COPR repository
bigger priority (see #97) - grammar: s/duplicate a backend data/duplicate
backend data/ - Trailing ".git" is ignored when matching clone URL, so is
unnecessary. - fix frontend by disabling doc generation - Accept webhooks from
bitbucket.org. - Expand docs on how to find the correct Pagure hook setting. -
fix typos - fixed status_to_order, order_to_status functions, added waiting
icon - add indeces for faster build selection - add source_status field for
Builds - implement the module buildorder logic - krb5: last iteritems()->items()
- have .repo on the end of module repofile URL - set the gpg properties for
module repo - Byecompile files in %%{_datadir} with python3 - pg#191 When auto-
rebuilding from push event, use a head commit hash - move run3_tests.sh into
run_tests.sh, polish .spec a bit - fix run scripts under python3 - frontend now
presents the whole job queue state to backend - opt rename SRPM_STORAGE_DIR to
STORAGE_DIR - new generic web-hook - when passing URL with path, expect it in
result; see ad9c3b4cc - remove outdated tests, see 3f62873 - add index to build
module_id - copy only module builds into the repo directory - generate the
module NSV rather than asking for it - fix condition that all module packages
were successfully built - remove outdated modularity code - fix baseurl for
module repofile - build modules in all enabled chroots - implement submitting
modules via URL - set default values for optional modulemd params - change
module version to bigint - always have a known state of a module - have unique
module nsv per project - build a module without using MBS - require to specify
project when building module - add build to module relation - limit spec to
python3 deps and switch application and scripts to python3 - pg#188 COPR
webhook doesn't work with branches - python3 conversion
--------------------------------------------------------------------------------
================================================================================
copr-keygen-1.71-1.fc26 (FEDORA-2018-e9b40a18e2)
Part of Copr build system. Aux service that generate keys for signd
--------------------------------------------------------------------------------
Update Information:
- remove Group tag - Shebangs cleanup - update doc generation to python3
--------------------------------------------------------------------------------
================================================================================
copr-rpmbuild-0.17-1.fc26 (FEDORA-2018-9ff8d39d24)
Run COPR build tasks
--------------------------------------------------------------------------------
Update Information:
- remove unused requires and rename rpm-python3 to python3-rpm - switch copr-
sources-custom to python3 shebang - keep tmpfs data mounted acros mock
invocations for custom method - new custom source method - add support for
fetch_sources_only in task defition - allow building rpms from srpms fetched by
providers, - extend cmdline with scm submode - optionally set a priority for a
repo - add test for create_rpmmacros + refactoring - allow only https and ftps
protocols for source fetch
--------------------------------------------------------------------------------
================================================================================
copr-selinux-1.48-1.fc26 (FEDORA-2018-a8dc590caf)
SELinux module for COPR
--------------------------------------------------------------------------------
Update Information:
- remove Group tag
--------------------------------------------------------------------------------
================================================================================
dippi-2.5.4-1.fc26 (FEDORA-2018-fbd4ee8241)
Calculate display info like DPI and aspect ratio
--------------------------------------------------------------------------------
Update Information:
Update to version 2.5.4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1541819 - dippi-2.5.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1541819
--------------------------------------------------------------------------------
================================================================================
drupal7-7.57-1.fc26 (FEDORA-2018-c1f73debee)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
This update fixes multiple security vulnerabilities. Read more details here:
https://www.drupal.org/SA-CORE-2018-001
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548191 - drupal7: drupal: JavaScript cross-site scripting in checkPlain
function [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548191
[ 2 ] Bug #1548326 - drupal7: drupal: Multiple vulnerabilities fixed in 7.57 and 8.4.5
(SA-CORE-2018-001) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548326
[ 3 ] Bug #1548202 - drupal7: drupal: External link injection on 404 pages when linking
to the current page [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548202
[ 4 ] Bug #1548198 - drupal7: drupal: jQuery vulnerability with untrusted domains
requests via Ajax [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548198
[ 5 ] Bug #1548194 - drupal7: drupal: Private file access bypass in Drupal private file
system [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548194
[ 6 ] Bug #1548190 - drupal7: drupal: JavaScript cross-site scripting in checkPlain
function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1548190
[ 7 ] Bug #1547793 - drupal7-7.57 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1547793
--------------------------------------------------------------------------------
================================================================================
fotoxx-18.01.3-1.fc26 (FEDORA-2018-b264f021c8)
Photo editor
--------------------------------------------------------------------------------
Update Information:
18.01.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548211 - fotoxx-18.01.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1548211
--------------------------------------------------------------------------------
================================================================================
fpc-3.0.4-1.fc26 (FEDORA-2018-a50da4b6a1)
Free Pascal Compiler
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream release 3.0.4
--------------------------------------------------------------------------------
================================================================================
fwupd-0.9.9-1.fc26 (FEDORA-2018-7754b8e7e4)
Firmware update daemon
--------------------------------------------------------------------------------
Update Information:
New upstream release - Block owned TPM updates on Dell hardware - Catch invalid
Dell dock component requests - Disable the dell plugin if libsmbios fails -
Enforce the thunderbolt controller version is xx.yy - Fix crash when enumerating
with dock connected but UEFI capsule off - Handle "native" thunderbolt mode
(Yehezkel Bernat) - Ignore useless thunderbolt device types - Never include
release checksums for older firmware versions - Use a CNAME to redirect to the
correct CDN for metadata
--------------------------------------------------------------------------------
================================================================================
imgbased-1.0.999-0.2.fc26 (FEDORA-2018-394bb81427)
Tools to work with an image based rootfs
--------------------------------------------------------------------------------
Update Information:
Development for 4.3 ---- Don't remediate ifcfg files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531501 - the problem is with the imgbased package
https://bugzilla.redhat.com/show_bug.cgi?id=1531501
[ 2 ] Bug #1307636 - imgbased: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1307636
--------------------------------------------------------------------------------
================================================================================
lazarus-1.8.0-1.fc26 (FEDORA-2018-aac703fbe2)
Lazarus Component Library and IDE for Freepascal
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 1.8.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1525820 - Need update lazarus to 1.8.0
https://bugzilla.redhat.com/show_bug.cgi?id=1525820
--------------------------------------------------------------------------------
================================================================================
libcouchbase-2.8.5-1.fc26 (FEDORA-2018-4b9ed76525)
Client and protocol library for the Couchbase project
--------------------------------------------------------------------------------
Update Information:
## Upstream release API documentation:
http://docs.couchbase.com/sdk-
api/couchbase-c-client-2.8.5/ ### Spec Changes * Package now install tapset
for SystemTap * Snappy dependency has been removed, as package now integrates
snappy and uses its internal C++ classes. It cannot be unbundled. ### Upstream
Changes * [
CCBC-883](https://issues.couchbase.com/browse/CCBC-883): Always use
built-in compression. It is not possible to unbundle the Snappy library, as
libcouchbase uses the C++ API which is not exported in the headers. Also,
compression can now work on all types of buffers, including `LCB_KV_IOV` and
`LCB_KV_IOVCOPY`. This fixes compression in `cbc-pillowfight` tool. *
[
CCBC-895](https://issues.couchbase.com/browse/CCBC-895): Fix typo in rendering
IPv6 addresses in `lcb_diag`. *
[
CCBC-879](https://issues.couchbase.com/browse/CCBC-879): Implement log
redaction. When `log_redaction=on` is specified in the connection string, the
library will wrap sensitive data in the logs in special tags, which can be
processed by the `cblogredaction` tool from the server distribution. *
[
CCBC-893](https://issues.couchbase.com/browse/CCBC-894): Updated list of subdoc
error codes. * [
CCBC-892](https://issues.couchbase.com/browse/CCBC-892): Enable
the SSL trust store to be in a separate file. Trust store has to be specified
with option `truststorepath=���`, otherwise the library will expect it to be
stored with the certificate in `certpath=`. *
[
CCBC-888](https://issues.couchbase.com/browse/CCBC-888): Per operation tracing.
When compiled with tracing support (`cmake -DLCB_TRACING=ON`), the library will
expose the tracing API, which allows to measure time of every data operation,
and include some extra information. The API is modeled after OpenTracing and
allows one to write custom tracers to consume this information. For more
information, see an example in
[example/tracing/tracing.c](example/tracing/tracing.c). This is uncommitted API
at this time. Also this feature includes support for new type of the server
responses, which include time spent to execute the KV command on the server.
This feature controlled by `enable_tracing` option in connection string or
`lcb_cntl(..., LCB_CNTL_ENABLE_TRACING, ...)`. * Added basic support of JSON
datatype. The library will negotiate a mode, in which the application will see
`LCB_VALUE_F_JSON` flag on datatype field of the response in the operation
callback, if the cluster detected the content of the document to be valid JSON.
Also the application can send this flag on the outgoing documents to notify the
server about payload format. * Refresh dtrace/systemtap integration. Also adds
tapset for SystemTap to simplify access to trace points. * cbc-pillowfight
improvements and changes: * dump diagnostics on `SIGQUIT` (CTRL-\ in
terminal). * with `-J`/`--json`, the JSON datatype will be sent on the
documents. * enable randomized document bodies with `-R`/`--random-body`
switch. * durability checks for pillowfight with `--persist-to
`/`--replicate-to`. * pessimistic locking of keys before updating with
`--lock`. * when requesting timings with `-T`/`--timings`, the application
will no longer dump them periodically.Instead it will await for the user to
signal `SIGQUIT` and also dump them on exit. The old mode of reporting regularly
is enabled by repeating the switch more than once (e.g. `-TT`). * Added the
cbc-watch command to monitor server stats. By default it tracks `cmd_total_ops`,
`cmd_total_gets` and `cmd_total_sets` updating stats once a second, and
displaying diff with the previous value.
--------------------------------------------------------------------------------
================================================================================
nx-libs-3.5.0.33-4.fc26 (FEDORA-2017-8d369659cb)
NX X11 protocol compression libraries
--------------------------------------------------------------------------------
Update Information:
nx-libs 3.5.0.33: - Don't allow overriding of X.Org Server UNIX sockets via
TEMP/NX_TEMP environment variables. Fixes problems on machines that use
pam_tempdir.so. - Fix CVE-2017-2624 (timingsafe_memcmp) by Ulrich Sibiller. -
Potentially improve LAN- and WAN-type connection speed settings scenarios.
Includes a regression fix for VPN connections by Simon Matter. - Fix problems in
mate-color-picker and potentially also other applications that make heavy use of
RENDER trapezoids. x2goserver 4.0.1.22: - Fixed overzealous nxagent socket
removal. - Keyboard mapping fixes, including preparation for usage with
Arctica's nx-libs version (not supported in this version of X2Go Server, yet). -
Support for Devuan and RT OS full desktop session spawning. - Always use short
host name, don't rely on ${HOSTNAME} variable. Compatibility with non-bash
login shells. - Spawn full desktop sessions with a new dbus user session
instance. - Finnish translation update. - Added support for LXQt full desktop
sessions. - New command: x2golistshadowsessions.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1478974 - x2go killed by systemd
https://bugzilla.redhat.com/show_bug.cgi?id=1478974
[ 2 ] Bug #1510900 - nx-libs-3.5.0.33 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1510900
--------------------------------------------------------------------------------
================================================================================
python-copr-1.86-1.fc26 (FEDORA-2018-cd41101de5)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
- remove Group tag - build python2-copr package conditionally - Remove
unnecessary shebang sed in copr-cli.spec and python-copr.spec - fix deps in spec
- new custom source method - use username from config if nothing is explicitly
specified - remove outdated modularity code - require to specify project when
building module
--------------------------------------------------------------------------------
================================================================================
python-crypto-2.6.1-22.fc26 (FEDORA-2018-0c75cc72bc)
Cryptography library for Python
--------------------------------------------------------------------------------
Update Information:
The textbook ElGamal implementation is not secure. PyCrypto and some other
implementations use the wrong algorithm, which may lead to some information
disclosure simply by looking at the encrypted text. For a full description, see
https://github.com/dlitz/pycrypto/issues/253 This update includes a fix for
this problem backported from pycryptodome.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1542313 - CVE-2018-6594 python-crypto: Weak ElGamal key parameters in
PublicKey/ElGamal.py allow attackers to obtain sensitive information by reading
ciphertext
https://bugzilla.redhat.com/show_bug.cgi?id=1542313
--------------------------------------------------------------------------------
================================================================================
qt-virt-manager-0.52.80-2.fc26 (FEDORA-2018-d05431b265)
Qt Virtual Machine Manager
--------------------------------------------------------------------------------
Update Information:
added Russian and Italian translations; some enhancements; ---- some
improvements; added Russian, Italian translation;
--------------------------------------------------------------------------------
================================================================================
qt5-qtwebengine-5.10.1-1.fc26 (FEDORA-2018-c0d3db441f)
Qt5 - QtWebEngine components
--------------------------------------------------------------------------------
Update Information:
This update updates QtWebEngine to the 5.10.1 bugfix and security release.
QtWebEngine 5.10.1 is part of the Qt 5.10.1 release, but only the QtWebEngine
component is included in this update. This update includes: * Security fixes
from Chromium up to version 64.0.3282.140. Including: CVE-2017-15407,
CVE-2017-15409, CVE-2017-15410, CVE-2017-15411, CVE-2017-15415, CVE-2017-15416,
CVE-2017-15418, CVE-2017-15419, CVE-2017-15422, CVE-2017-15423, CVE-2017-15424,
CVE-2017-15425, CVE-2017-15426, CVE-2018-6031, CVE-2018-6033, CVE-2018-6034,
CVE-2018-6036, CVE-2018-6037, CVE-2018-6038, CVE-2018-6040, CVE-2018-6041,
CVE-2018-6042, CVE-2018-6047, CVE-2018-6048, CVE-2018-6050, CVE-2018-6051,
CVE-2018-6052, CVE-2018-6053 and CVE-2018-6054. * Mitigations for SPECTRE:
disabled shared-buffers, added cryptographic noise to precision timers *
[QTBUG-47206] Fixed incorrect layouting due to bug in HTML5 viewport support. *
[QTBUG-47945, QTBUG-65647] Fixed random crashes on exit * [QTBUG-57206] Fixed
regression in viewport handling in embedded mode * [QTBUG-58400] Improved memory
usage when printing * [QTBUG-63867] Fixed <canvas> elements when compiled
without OpenGL * [QTBUG-63266, QTBUG-64436] Fixed that pointerType of Pointer
Events was empty * [QTBUG-63606] Improved runtime disabling and clearing of HTTP
cache * [QTBUG-64436] QtWebEngineWidgets: Fixed crash when exiting fullscreen
mode using the context menu. * [QTBUG-64560] Fixed rendering glitches after
renderProcessTerminated signal was emitted. * [QTBUG-64812] Fixed message bubble
position in Hi-DPI mode * [QTBUG-64869, QTBUG-65004] Added testing for 32-bit
host compiler when crossbuilding to 32-bit platforms * [QTBUG-64933]
QtWebEngineWidgets: Fixed tooltips that did still show after mouse was moved
away. * [QTBUG-65239] Fixed hanging of process if application is closed too fast
after startup. * [QTBUG-65715] Fixed double margins when printing
--------------------------------------------------------------------------------
================================================================================
tlp-1.1-1.fc26 (FEDORA-2018-819c00b974)
Advanced power management tool for Linux
--------------------------------------------------------------------------------
Update Information:
Update to 1.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1538383 - tlp-1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1538383
--------------------------------------------------------------------------------
================================================================================
usermode-1.112-1.fc26 (FEDORA-2018-65b86cadc0)
Tools for certain user account management tasks
--------------------------------------------------------------------------------
Update Information:
Update to **usermode-1.112**
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1269643 - usermode : Fix Catalan translation and fix execution permission in
source
https://bugzilla.redhat.com/show_bug.cgi?id=1269643
--------------------------------------------------------------------------------
================================================================================
waiverdb-0.8.0-1.fc26 (FEDORA-2018-8523d7147b)
Service for waiving results in ResultsDB
--------------------------------------------------------------------------------
Update Information:
Release notes:
https://docs.pagure.org/waiverdb/release-notes.html#waiverdb-0-8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1538463 - waiverdb-cli --help crashes
https://bugzilla.redhat.com/show_bug.cgi?id=1538463
--------------------------------------------------------------------------------
================================================================================
wavemon-0.8.2-1.fc26 (FEDORA-2018-b73d285978)
Ncurses-based monitoring application for wireless network devices
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release 0.8.2 (rhbz#1546530)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1546530 - wavemon-0.8.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1546530
--------------------------------------------------------------------------------
================================================================================
x2goserver-4.0.1.22-2.fc26 (FEDORA-2017-8d369659cb)
X2Go Server
--------------------------------------------------------------------------------
Update Information:
nx-libs 3.5.0.33: - Don't allow overriding of X.Org Server UNIX sockets via
TEMP/NX_TEMP environment variables. Fixes problems on machines that use
pam_tempdir.so. - Fix CVE-2017-2624 (timingsafe_memcmp) by Ulrich Sibiller. -
Potentially improve LAN- and WAN-type connection speed settings scenarios.
Includes a regression fix for VPN connections by Simon Matter. - Fix problems in
mate-color-picker and potentially also other applications that make heavy use of
RENDER trapezoids. x2goserver 4.0.1.22: - Fixed overzealous nxagent socket
removal. - Keyboard mapping fixes, including preparation for usage with
Arctica's nx-libs version (not supported in this version of X2Go Server, yet). -
Support for Devuan and RT OS full desktop session spawning. - Always use short
host name, don't rely on ${HOSTNAME} variable. Compatibility with non-bash
login shells. - Spawn full desktop sessions with a new dbus user session
instance. - Finnish translation update. - Added support for LXQt full desktop
sessions. - New command: x2golistshadowsessions.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1478974 - x2go killed by systemd
https://bugzilla.redhat.com/show_bug.cgi?id=1478974
[ 2 ] Bug #1510900 - nx-libs-3.5.0.33 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1510900
--------------------------------------------------------------------------------