Resolves: rhbz#1505731 rebuild for qt5 5.9.2

----

Security fix for CVE-2017-14926, CVE-2017-14927 and CVE-2017-14928.

----

Security fix for CVE-2017-14617

----

Security fix for CVE-2017-14517, CVE-2017-14518, CVE-2017-14519 and CVE-2017-14929.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 4.13.11 update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

**PHP version 7.1.11** (26 Oct 2017)

**Core:**

  - Fixed bug php#75241 (NULL pointer dereference in     zend_mm_alloc_small()). (Laruence)

  - Fixed bug php#75236 (infinite loop when printing an     error-message). (Andrea)

  - Fixed bug php#75252 (Incorrect token formatting on two     parse errors in one request). (Nikita)

  - Fixed bug php#75220 (Segfault when calling is_callable     on parent). (andrewnester)

  - Fixed bug php#75290 (debug info of Closures of internal     functions contain garbage argument names). (Andrea)

**Date:**

  - Fixed bug php#75055 (Out-Of-Bounds Read in     timelib_meridian()). (Derick)

**Apache2Handler:**

  - Fixed bug php#75311 (error: 'zend_hash_key' has no     member named 'arKey' in apache2handler). (mcarbonneaux)

**Hash:**

  - Fixed bug php#75303 (sha3 hangs on bigendian). (Remi)

**Intl:**

  - Fixed bug php#75318 (The parameter of     UConverter::getAliases() is not optional). (cmb)

**mcrypt:**

  - Fixed bug php#72535 (arcfour encryption stream filter     crashes php). (Leigh)

**MySQLi:**

  - Fixed bug php#75018 (Data corruption when reading fields     of bit type). (Anatol)

**Opcache**

  - Fixed bug php#75255 (Request hangs and not finish).
    (Dmitry)

**PCRE:**

  - Fixed bug php#75207 (applied upstream patch for     CVE-2016-1283). (Anatol)

**PDO_mysql:**

  - Fixed bug php#75177 (Type 'bit' is fetched as unexpected     string). (Anatol)

**SPL:**

  - Fixed bug php#73629     (SplDoublyLinkedList::setIteratorMode masks intern     flags). (J. Jeising, cmb)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A quarter year regular dose of fixed CVE's.
https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-20.html

.

rhbz#1497694 :

Fix owner and perms on log file in post script

CVE fixes: rhbz#1503701

CVE-2017-10155 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276 CVE-2017-10279 CVE-2017-10283 CVE-2017-10286 CVE-2017-10294 CVE-2017-10314 CVE-2017-10378 CVE-2017-10379 CVE-2017-10384

Others :

Move all test binaries to -test package Dont ship unneeded man pages on systemd platforms Remove mysql_config_editor from -devel package, shipped in client

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes CVE-2017-1002157 -- possible arbitrary code execution when loading multiple documents with `load_all` / `loads_all`.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 4.13.10 update contains a number of important fixes across the tree.

----

The 4.13.9 update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 2.49.1

Based on the Firefox/Thunderbird ESR (extension support release) code version 52.4.0

Fixes various security issues, see https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-e sr/ and https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbi rd/ for more info.

Since the version of 2.48, SeaMonkey uses another disk cache implementation. It is preferable to clear the cache (even before the update) to avoid extra disk space usage by the old cache data.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 4.13.10 update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

xen: various flaws (#1501391) multiple MSI mapping issues on x86 [XSA-237] DMOP map/unmap missing argument checks [XSA-238] hypervisor stack leak in x86 I/O intercept code [XSA-239] Unlimited recursion in linear pagetable de-typing [XSA-240] Stale TLB entry due to page type release race [XSA-241] page type reference leak on x86 [XSA-242] x86:
Incorrect handling of self-linear shadow mappings with translated guests [XSA-243] x86: Incorrect handling of IST settings during CPU hotplug [XSA-244]

----

ARM: Some memory not scrubbed at boot [XSA-245] Qemu: vga: reachable assert failure during during display update [CVE-2017-13673] (#1486591) Qemu: vga: OOB read access during display update [CVE-2017-13672] (#1486562)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

updated to aarch64-jdk8u151-b12 (from aarch64-port/jdk8u)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2017-14926, CVE-2017-14927 and CVE-2017-14928.

----

Security fix for CVE-2017-14617

----

Security fix for CVE-2017-14517, CVE-2017-14518, CVE-2017-14519 and CVE-2017-14929.

----

  - CVE-2017-14520 Floating point exception in     Splash::scaleImageYuXd

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

3.10.6 bz #1504256

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2017-12629

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- fix buffer overflow while processing IMAP FETCH response     (CVE-2017-1000257)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 3.100 (#1470202, #1505107)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- systemd-detect-virt QEMU CPUID logic update

  - Fix cryptsetup devices disappearing when used for btrfs

  - Fix rfkill on some thinkpads

  - Extend dbus timeouts to handle slow dbus daemon startup

  - Fix systemd-resolved DOS with crafted NSEC packets     (LP#1725351)

  - Backport /etc/crypttab _netdev feature from upstream

  - Update hwdb

(No need to reboot.)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Added audio stream conversion functions :

  - `SDL_NewAudioStream()`

  - `SDL_AudioStreamPut()`

  - `SDL_AudioStreamGet()`

  - `SDL_AudioStreamAvailable()`

  - `SDL_AudioStreamFlush()`

  - `SDL_AudioStreamClear()`

  - `SDL_FreeAudioStream()`

  - Added functions to query and set the SDL memory     allocation functions :

  - `SDL_GetMemoryFunctions()`

  - `SDL_SetMemoryFunctions()`

  - `SDL_GetNumAllocations()`

  - Added locking functions for multi-threaded access to the     joystick and game controller APIs :

  - `SDL_LockJoysticks()`

  - `SDL_UnlockJoysticks()`

  - The following functions are now thread-safe :

  - `SDL_SetEventFilter()`

  - `SDL_GetEventFilter()`

  - `SDL_AddEventWatch()`

  - `SDL_DelEventWatch()`

----

Fix CVE-2017-2888

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

1.6, multiple security fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for [CVE-2017-12173]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to 1.1.26

  - CVE-2017-15194

Release notes: https://www.cacti.net/release_notes.php?version=1.1.26

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2017-2888

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libXfont 2.0.2

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 4.13.8 update contains a number of important fixes across the tree.

----

The 4.13.6 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.4.15. Fixes CVE-2017-8911

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2017-13720 and CVE-2017-13722

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to upstream 0.1.2 release for security issue

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes the following security vulnerabilities :

  - CVE-2017-14517

  - CVE-2017-14518

  - CVE-2017-14519 

  - CVE-2017-14617

  - CVE-2017-14926

  - CVE-2017-14927

  - CVE-2017-14928

  - CVE-2017-14929

  - CVE-2017-14975 and CVE-2017-14976

  - CVE-2017-14977

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

For changes see:
https://www.mozilla.org/en-US/thunderbird/52.4.0/releasenotes/

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is security update fixing possible buffer overflow in loadbuf function.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update addresses various minor issues in the glibc package :

  - The DNS stub resolver now picks up changes to     `/etc/resolv.conf` automatically (RHBZ#1374239).

  - The DNS stub resolver supports an unlimited number of     search domains (RHBZ#168253).

  - CVE-2015-5180, a segmentation fault potentially     affecting applications which use the DNS stub resolver     in an unusual way, has been fixed (RHBZ#1251403).

  - `/var/db/Makefile` is now shipped in the `nss_db`     package (RHBZ#1498900).

  - The IBM858 character set is now supported     (RHBZ#1416405).

  - The `compat` NSS service module is again part of the     main glibc package (RHBZ#1400538).

  - A pointer alignment/endianess issue was fixed in the NSS     group merging implementation (RHBZ#1471985).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2017-1495

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 CVE-2017-14496

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

6.9.9-19

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
104445	Fedora 26 : poppler (2017-51ff8fe326)	high
104444	Fedora 25 : kernel (2017-38b37120a2)	medium
104443	Fedora 26 : php (2017-0af85ae851)	critical
104419	Fedora 25 : community-mysql (2017-95327e44ec)	high
104418	Fedora 26 : modulemd (2017-94a173c491)	critical
104417	Fedora 25 : modulemd (2017-8258f76154)	critical
104416	Fedora 26 : community-mysql (2017-50c790aaed)	high
104407	Fedora 25 : kernel (2017-ebab38baf6)	high
104406	Fedora 25 : seamonkey (2017-6e2071419d)	high
104405	Fedora 26 : seamonkey (2017-2e7badfe67)	high
104404	Fedora 26 : kernel (2017-10faeda281)	high
104347	Fedora 25 : xen (2017-d4709b0d8b)	high
104346	Fedora 25 : 1:java-1.8.0-openjdk (2017-b1492e4844)	high
104345	Fedora 25 : poppler (2017-805d9423f8)	high
104344	Fedora 25 : glusterfs (2017-150762f6be)	low
104343	Fedora 25 : lucene (2017-005f8f7f7d)	critical
104316	Fedora 26 : curl (2017-ebf32659bf)	critical
104315	Fedora 26 : lucene (2017-c7bdf540b4)	critical
104314	Fedora 26 : glusterfs (2017-a47c76eeb1)	low
104313	Fedora 26 : lame (2017-9c29af2c64)	medium
104312	Fedora 26 : 1:java-1.8.0-openjdk (2017-7b17451b82)	high
104311	Fedora 26 : systemd (2017-6f8fcff58c)	high
104310	Fedora 26 : xen (2017-5bcddc1984)	high
104309	Fedora 26 : SDL2 (2017-5b132e3803)	high
104264	Fedora 25 : libextractor (2017-8cca61e2fa)	high
104263	Fedora 26 : libextractor (2017-4a42419c16)	high
104225	Fedora 25 : sssd (2017-88a1f4854d)	high
104197	Fedora 26 : cacti (2017-ac20492c3e)	medium
104196	Fedora 25 : cacti (2017-8761075ffd)	medium
104195	Fedora 25 : SDL2 (2017-5934ecf841)	high
104161	Fedora 26 : libXfont2 (2017-f44afd1f34)	high
104160	Fedora 25 : kernel (2017-cafcdbdde5)	high
104159	Fedora 26 : tnef (2017-c2882ae75b)	critical
104158	Fedora 26 : kernel (2017-c110ac0eb1)	high
104157	Fedora 25 : libXfont (2017-b7c4334524)	high
104156	Fedora 26 : nodejs-forwarded (2017-afb05e0873)	high
104155	Fedora 26 : mingw-poppler (2017-a0ffdf1fbd)	high
104154	Fedora 26 : thunderbird (2017-845c543ea4)	high
104153	Fedora 25 : mingw-poppler (2017-6127ddb036)	high
104152	Fedora 25 : procmail (2017-52f233a4f5)	high
104151	Fedora 26 : procmail (2017-36eb36ea71)	high
104150	Fedora 26 : glibc (2017-2c63df4fe3)	high
104149	Fedora 25 : tnef (2017-2b28a055f2)	critical
104148	Fedora 26 : libXfont (2017-2783ef2c63)	high
104147	Fedora 25 : nodejs-forwarded (2017-042c59fab9)	high
104112	Fedora 26 : check-mk (2017-9f36da1aac)	medium
104111	Fedora 25 : check-mk (2017-6bbb922009)	medium
104110	Fedora 25 : dnsmasq (2017-515264ae24)	critical
104060	Fedora 26 : sssd (2017-65b543b628)	high
104059	Fedora 25 : ImageMagick / rubygem-rmagick (2017-3c5282ada7)	high

Detections

Analytics

Fedora Local Security Checks Family for Nessus

high

medium

critical

high

critical

critical

high

high

high

high

high

high

high

high

low

critical

critical

critical

low

medium

high

high

high

high

high

high

high

medium

medium

high

high

high

critical

high

high

high

high

high

high

high

high

high

critical

high

high

medium

medium

critical

high

high