--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-84c640b8fa
2018-07-01 01:33:28.643506
--------------------------------------------------------------------------------
Name : 389-ds-base
Product : Fedora 27
Version : 1.3.8.4
Release : 1.fc27
URL : http://www.port389.org
Summary : 389 Directory Server (base)
Description :
389 Directory Server is an LDAPv3 compliant server. The base package includes
the LDAP server and command line utilities for server administration.
--------------------------------------------------------------------------------
Update Information:
Bump version to 1.3.8.4-1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.8.4-1
- Bump version to 1.3.8.4-1
- Ticket 49751 - passwordMustChange attribute is not honored by a RO consumer if using "Chain on Update"
- Ticket 49734 - Fix various issues with Disk Monitoring
- Ticket 49788 - Fixing 4-byte UTF-8 character validation
* Mon Jun 11 2018 Mark Reynolds <mreyhnolds(a)redhat.com> - 1.3.8.3-2
- Bump version to 1.3.8.3-2
- Ticket 49576 - ds-replcheck: fix certificate directory verification
* Mon Jun 11 2018 Mark Reynolds <mreyhnolds(a)redhat.com> - 1.3.8.3-1
- Bump version to 1.3.8.3
- Ticket 49746 - Additional compiler errors on ARM
- Ticket 49746 - Segfault during replication startup on Arm device
- Ticket 49742 - Fine grained password policy can impact search performance
- Ticket 49768 - Under network intensive load persistent search can erronously decrease connection refcnt
- Ticket 49765 - compiler warning
- Ticket 49765 - Async operations can hang when the server is running nunc-stans
- Ticket 49748 - Passthru plugin startTLS option not working
- Ticket 49736 - Hardening of active connection list
- Ticket 48184 - clean up and delete connections at shutdown (3rd)
- Ticket 49726 - DS only accepts RSA and Fortezza cipher families
- Ticket 49722 - Errors log full of " WARN - keys2idl - recieved NULL idl from index_read_ext_allids, treating as empty set" messages
- Ticket 49576 - Add support of ";deletedattribute" in ds-replcheck
- Ticket 49576 - Update ds-replcheck for new conflict entries
* Thu May 24 2018 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.8.2-1
- Bump version to 1.3.8.2
- Ticket 48184 - clean up and delete connections at shutdown (2nd try)
- Ticket 49696 - replicated operations should be serialized
- Ticket 49671 - Readonly replicas should not write internal ops to changelog
- Ticket 49665 - Upgrade script doesn't enable CRYPT password storage plug-in
- Ticket 49665 - Upgrade script doesn't enable PBKDF2 password storage plug-in
* Tue May 8 2018 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.8.1-1
- Bump version to 1.3.8.1
- Ticket 49661 - CVE-2018-1089 - Crash from long search filter
- Ticket 49652 - DENY aci's are not handled properly
- Ticket 49649 - Use reentrant crypt_r()
- Ticket 49644 - crash in debug build
- Ticket 49631 - same csn generated twice
- Ticket 48184 - revert previous patch around nunc-stans shutdown crash
- Ticket 49619 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Rebase to 1.3.8
* Tue Mar 6 2018 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.7.10-1
- Bump version to 1.3.7.10
- Ticket 49545 - final substring extended filter search returns invalid result
- Ticket 49161 - memberof fails if group is moved into scope
- ticket 49551 - correctly handle subordinates and tombstone numsubordinates
- Ticket 49296 - Fix race condition in connection code with anonymous limits
- Ticket 49568 - Fix integer overflow on 32bit platforms
- Ticket 49566 - ds-replcheck needs to work with hidden conflict entries
- Ticket 49551 - fix memory leak found by coverity
- Ticket 49551 - correct handling of numsubordinates for cenotaphs and tombstone delete
- Ticket 49560 - nsslapd-extract-pemfiles should be enabled by default as openldap is moving to openssl
- Ticket 49557 - Add config option for checking CRL on outbound SSL Connections
* Mon Feb 19 2018 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.7.9-1.1
- Add cyrus-sasl-plain requirement
* Wed Jan 31 2018 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.7.9-1
- Bump version to 1.3.7.9
- CVE-2017-15134 - Remote DoS via search filters in slapi_filter_sprintf
- Ticket 49546 - Fix broken snmp MIB file
- Ticket 49541 - Replica ID config validation fix
- Ticket 49370 - Crash when using a global and local pw policies
- Ticket 49540 - Indexing task is reported finished too early regarding the backend status
- Ticket 49534 - Fix coverity regression
- Ticket 49541 - repl config should not allow rid 65535 for masters
- Ticket 49370 - Add all the password policy defaults to a new local policy
- Ticket 49526 - Improve create_test.py script
- Ticket 49534 - Fix coverity issues and regression
- Ticket 49523 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Ticket 49532 - coverity issues - fix compiler warnings & clang issues
- Ticket 49463 - After cleanALLruv, there is a flow of keep alive DEL
- Ticket 48184 - close connections at shutdown cleanly.
- Ticket 49509 - Indexing of internationalized matching rules is failing
- Ticket 49531 - coverity issues - fix memory leaks
- Ticket 49529 - Fix Coverity warnings: invalid deferences
- Ticket 49413 - Changelog trimming ignores disabled replica-agreement
- Ticket 49446 - cleanallruv should ignore cleaned replica Id in processing changelog if in force mode
- Ticket 49278 - GetEffectiveRights gives false-negative
- Ticket 49524 - Password policy: minimum token length fails when the token length is equal to attribute length
- Ticket 49493 - heap use after free in csn_as_string
- Ticket 49495 - Fix memory management is vattr.
- Ticket 49471 - heap-buffer-overflow in ss_unescape
- Ticket 49449 - Load sysctl values on rpm upgrade.
- Ticket 49470 - overflow in pblock_get
- Ticket 49474 - sasl allow mechs does not operate correctly
- Ticket 49460 - replica_write_ruv log a failure even when it succeeds
* Mon Nov 20 2017 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.7.8-1
- Bump version to 1.3.7.8
- Ticket 49298 - fix complier warn
- Ticket 49298 - Correct error codes with config restore.
- Ticket 49435 - Fix NS race condition on loaded test systems
- Ticket 49454 - SSL Client Authentication breaks in FIPS mode
- Ticket 49410 - opened connection can remain no longer poll, like hanging
- Ticket 48118 - fix compiler warning for incorrect return type
- Ticket 49443 - scope one searches in 1.3.7 give incorrect results
- Ticket 48118 - At startup, changelog can be erronously rebuilt after a normal shutdown
- Ticket 49377 - Incoming BER too large with TLS on plain port
- Ticket 49441 - Import crashes with large indexed binary attributes
* Fri Nov 3 2017 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.7.7-1
- Bump version to 1.3.7.7
- Ticket 48393 - fix copy and paste error
- Ticket 49439 - cleanallruv is not logging information
- Ticket 48393 - Improve replication config validation
- Ticket 49436 - double free in COS in some conditions
- Ticket 48007 - CI test to test changelog trimming interval
- Ticket 49424 - Resolve csiphash alignment issues
- Ticket 49401 - Fix compiler incompatible-pointer-types warnings
- Ticket 49401 - improve valueset sorted performance on delete
- Ticket 48894 - harden valueset_array_to_sorted_quick valueset access
- Ticket 48681 - Use of uninitialized value in string ne at /usr/bin/logconv.pl
- Ticket 49374 - server fails to start because maxdisksize is recognized incorrectly
- Ticket 49408 - Server allows to set any nsds5replicaid in the existing replica entry
- Ticket 49407 - status-dirsrv shows ellipsed lines
- Ticket 48681 - Use of uninitialized value in string ne at /usr/bin/logconv.pl line 2565, <$LOGFH> line 4
- Ticket 49386 - Memberof should be ignore MODRDN when the pre/post entry are identical
- Ticket 48006 - Missing warning for invalid replica backoff configuration
- Ticket 49378 - server init fails
- Ticket 49064 - testcase hardening
- Ticket 49064 - RFE allow to enable MemberOf plugin in dedicated consumer
- Ticket 49402 - Adding a database entry with the same database name that was deleted hangs server at shutdown
- Ticket 49394 - slapi_pblock_get may leave unchanged the provided variable
- Ticket 48235 - remove memberof lock (cherry-pick error)
- Ticket 48235 - Remove memberOf global lock
- Ticket 49363 - Merge lib389, all lib389 history in single patch
* Mon Oct 9 2017 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.7.6-1
- Bump verson to 1.3.7.6
- Ticket 49038 - remove legacy replication - change cleanup script precedence
- Ticket 49392 - memavailable not available
- Ticket 49320 - Activating already active role returns error 16
- Ticket 49389 - unable to retrieve specific cosAttribute when subtree password policy is configured
- Ticket 49092 - Add CI test for schema-reload
- Ticket 49388 - repl-monitor - matches null string many times in regex
- Ticket 49385 - Fix coverity warnings
- Ticket 49305 - Need to wrap atomic calls
- Ticket 49180 - errors log filled with attrlist_replace - attr_replace
* Fri Sep 22 2017 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.7.5-1
- Bump version to 1.3.7.5
- Ticket 49327 - Add CI test for password expiration controls
- Ticket #48085 - CI tests - replication ruvstore
- Ticket 49381 - Refactor numerous suite docstrings
- Ticket #48085 - CI tests - replication cl5
- Ticket 49379 - Allowed sasl mapping requires restart
- Ticket 49327 - password expired control not sent during grace logins
- Ticket 49380 - Add CI test
- Ticket 83 - Fix create_test.py imports
- Ticket 49381 - Add docstrings to ds_logs, gssapi_repl, betxn
- Ticket 49380 - Crash when adding invalid replication agreement
- Ticket 48081 - CI test - password
- Ticket 49295 - Fix CI tests
- Ticket 49295 - Fix CI test for account policy
- Ticket 49295 - Fix CI tests
- Ticket 49373 - remove unused header file
* Wed Sep 6 2017 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.7.4-1
- Bump version to 1.3.7.4
- Ticket 49371 - Cleanup update script
- Ticket 48831 - Autotune dncache with entry cache.
- Ticket 49312 - pwdhash -D used default hash algo
- Ticket 49043 - make replication conflicts transparent to clients
- Ticket 49371 - Fix rpm build
- Ticket 49371 - Template dse.ldif did not contain all needed plugins
- Ticket 49295 - Fix CI Tests
- Ticket 49050 - make objectclass ldapsubentry effective immediately
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-84c640b8fa' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-4d5adefc9d
2018-07-01 01:33:28.643493
--------------------------------------------------------------------------------
Name : perl-Getopt-Lucid
Product : Fedora 27
Version : 1.09
Release : 1.fc27
URL : https://metacpan.org/release/Getopt-Lucid
Summary : Clear, readable syntax for command line processing
Description :
The goal of this module is providing good code readability and clarity of
intent for command-line option processing. While readability is a subjective
standard, Getopt::Lucid relies on a more verbose, plain-English option
specification as compared against the more symbolic approach of Getopt::Long.
--------------------------------------------------------------------------------
Update Information:
This release adds usage() method to generate a usage message.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Petr Pisar <ppisar(a)redhat.com> - 1.09-1
- 1.09 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1593698 - perl-Getopt-Lucid-1.09 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1593698
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-4d5adefc9d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-903bd51f44
2018-07-01 01:33:28.643480
--------------------------------------------------------------------------------
Name : rear
Product : Fedora 27
Version : 2.4
Release : 1.fc27
URL : http://relax-and-recover.org/
Summary : Relax-and-Recover is a Linux disaster recovery and system migration tool
Description :
Relax-and-Recover is the leading Open Source disaster recovery and system
migration solution. It comprises of a modular
frame-work and ready-to-go workflows for many common situations to produce
a bootable image and restore from backup using this image. As a benefit,
it allows to restore to different hardware and can therefore be used as
a migration tool as well.
Currently Relax-and-Recover supports various boot media (incl. ISO, PXE,
OBDR tape, USB or eSATA storage), a variety of network protocols (incl.
sftp, ftp, http, nfs, cifs) as well as a multitude of backup strategies
(incl. IBM TSM, HP DataProtector, Symantec NetBackup, EMC NetWorker,
Bacula, Bareos, BORG, Duplicity, rsync).
Relax-and-Recover was designed to be easy to set up, requires no maintenance
and is there to assist when disaster strikes. Its setup-and-forget nature
removes any excuse for not having a disaster recovery solution implemented.
Professional services and support are available.
--------------------------------------------------------------------------------
Update Information:
For a changelog see the rear-release-notes.txt file. ---- For a changelog see
the rear-release-notes.txt file.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-903bd51f44' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-518d7fa180
2018-07-01 01:33:28.643467
--------------------------------------------------------------------------------
Name : libisds
Product : Fedora 27
Version : 0.10.8
Release : 1.fc27
URL : http://xpisar.wz.cz/libisds/
Summary : Library for accessing the Czech Data Boxes
Description :
This is a library for accessing ISDS (Informa��n�� syst��m datov��ch schr��nek /
Data Box Information System) SOAP���services as defined in Czech ISDS Act
(300/2008 Coll.) and implied documents.
--------------------------------------------------------------------------------
Update Information:
This release fixes three memory leaks. It also adds support for EV8 delivery
event.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Petr Pisar <ppisar(a)redhat.com> - 0.10.8-1
- 0.10.8 bump
* Thu Mar 22 2018 Petr Pisar <ppisar(a)redhat.com> - 0.10.7-3
- Do no call ldconfig postscriptlets where not necessary
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1593488 - libisds-0.10.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1593488
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-518d7fa180' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-6239ed9135
2018-07-01 01:33:28.643454
--------------------------------------------------------------------------------
Name : php
Product : Fedora 27
Version : 7.1.19
Release : 1.fc27
URL : http://www.php.net/
Summary : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.
The php package contains the module (often referred to as mod_php)
which adds support for the PHP language to Apache HTTP Server.
--------------------------------------------------------------------------------
Update Information:
**PHP version 7.1.19** (22 Jun 2018) **CLI Server:** * Fixed bug php#76333
(PHP built-in server does not find files if root path contains special
characters). (Anatol) **OpenSSL:** * Fixed bug php#76296
(openssl_pkey_get_public does not respect open_basedir). (Erik Lax, Jakub
Zelenka) * Fixed bug php#76174 (openssl extension fails to build with LibreSSL
2.7). (Jakub Zelenka) **SPL:** * Fixed bug php#76367 (NoRewindIterator
segfault 11). (Laruence) **Standard:** * Fixed bug php#76335 ("link(): Bad
file descriptor" with non-ASCII path). (Anatol) * Fixed bug php#76383 (array_map
on $GLOBALS returns IS_INDIRECT). (Bob)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Remi Collet <remi(a)remirepo.net> - 7.1.19-1
- Update to 7.1.19 - http://www.php.net/releases/7_1_19.php
* Thu May 24 2018 Remi Collet <remi(a)remirepo.net> - 7.1.18-1
- Update to 7.1.18 - http://www.php.net/releases/7_1_18.php
* Wed Apr 25 2018 Remi Collet <remi(a)remirepo.net> - 7.1.17-1
- Update to 7.1.17 - http://www.php.net/releases/7_1_17.php
* Wed Mar 28 2018 Remi Collet <remi(a)remirepo.net> - 7.1.16-1
- Update to 7.1.16 - http://www.php.net/releases/7_1_16.php
* Wed Mar 14 2018 Remi Collet <remi(a)remirepo.net> - 7.1.16~RC1-1
- Update to 7.1.16RC1
* Wed Feb 28 2018 Remi Collet <remi(a)remirepo.net> - 7.1.15-1
- Update to 7.1.15 - http://www.php.net/releases/7_1_15.php
- FPM: revert pid file removal
* Wed Feb 21 2018 Remi Collet <remi(a)remirepo.net> - 7.1.15~RC1-3
- disable ZTS on RHEL
* Fri Feb 16 2018 Remi Collet <remi(a)remirepo.net> - 7.1.15~RC1-2
- disable pspell extension on RHEL
- improve devel dependencies
* Wed Feb 14 2018 Remi Collet <remi(a)remirepo.net> - 7.1.15~RC1-1
- Update to 7.1.15RC1
- adapt ldap patch
* Wed Jan 31 2018 Remi Collet <remi(a)remirepo.net> - 7.1.14-1
- Update to 7.1.14 - http://www.php.net/releases/7_1_14.php
* Mon Jan 29 2018 Remi Collet <rcollet(a)redhat.com> - 7.1.14~RC1-2
- disable interbase, imap, pdo_dblib and mcrypt on rhel
* Wed Jan 17 2018 Remi Collet <remi(a)remirepo.net> - 7.1.14~RC1-1
- Update to 7.1.14RC1
- define SOURCE_DATE_EPOCH for reproducible build
* Wed Jan 3 2018 Remi Collet <remi(a)remirepo.net> - 7.1.13-1
- Update to 7.1.13 - http://www.php.net/releases/7_1_13.php
* Wed Dec 6 2017 Remi Collet <remi(a)fedoraproject.org> - 7.1.13~RC1-1
- Update to 7.1.13RC1
* Wed Nov 22 2017 Remi Collet <remi(a)fedoraproject.org> - 7.1.12-1
- Update to 7.1.12 - http://www.php.net/releases/7_1_12.php
* Wed Nov 8 2017 Remi Collet <remi(a)fedoraproject.org> - 7.1.12~RC1-1
- Update to 7.1.12RC1
* Wed Oct 25 2017 Remi Collet <remi(a)fedoraproject.org> - 7.1.11-1
- Update to 7.1.11 - http://www.php.net/releases/7_1_11.php
- make php-fpm a weak dependency #1505644
* Wed Oct 11 2017 Remi Collet <remi(a)fedoraproject.org> - 7.1.11~RC1-1
- Update to 7.1.11RC1
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-6239ed9135' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-efaf07442c
2018-07-01 01:33:28.643440
--------------------------------------------------------------------------------
Name : xscreensaver
Product : Fedora 27
Version : 5.39
Release : 6.fc27
URL : http://www.jwz.org/xscreensaver/
Summary : X screen saver and locker
Description :
A modular screen saver and locker for the X Window System.
More than 200 display modes are included in this package.
This is a metapackage for installing all default packages
related to XScreenSaver.
--------------------------------------------------------------------------------
Update Information:
It is found that xscreensaver-getimage on 5.39 causes segfault on certain
condition, especially when user chooses not to use any image resource on "Image
Manipulation". This rpm should fix this issue.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 20 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1:5.39-6
- xscreensaver-getimage: avoid substitution to NULL pointer on GRAB_BARS mode
* Mon May 28 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1:5.39-5
- Reback to -g from -g3 to fix debuginfo generation (c.f. bug 1582631)
* Wed Apr 25 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1:5.39-4
- Actually apply patch 3903
* Mon Apr 16 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1:5.39-3
- crumbler: fix loop enclosure for calculating keys in split_chunk
* Sun Apr 15 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1:5.39-2
- crumbler: fix color overvalue when accessing colors array
* Sun Apr 15 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1:5.39-1
- Update to 5.39
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:5.38-2.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Tue Jan 30 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1:5.38-2
- esper: fix uninitialized variable
* Sat Jan 20 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 1:5.38-1.1
- Rebuilt for switch to libxcrypt
* Mon Dec 25 2017 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1:5.38-1
- Update to 5.38
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1582631 - xscerensaver-getimage killed by SIGSEGV(backtrack is unusable)
https://bugzilla.redhat.com/show_bug.cgi?id=1582631
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-efaf07442c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-5c3b7f0960
2018-07-01 01:33:28.643426
--------------------------------------------------------------------------------
Name : perl-Time-Local
Product : Fedora 27
Version : 1.280
Release : 1.fc27
URL : https://metacpan.org/release/Time-Local
Summary : Efficiently compute time from local and GMT time
Description :
This module provides functions that are the inverse of built-in perl functions
localtime() and gmtime(). They accept a date as a six-element array, and
return the corresponding time(2) value in seconds since the system epoch
(Midnight, January 1, 1970 GMT on Unix, for example). This value can be
positive or negative, though POSIX only requires support for positive values,
so dates before the system's epoch may not work on all operating systems.
--------------------------------------------------------------------------------
Update Information:
This releases fixes tests. ---- This release fixes tests not to break in year
2020. It also allows exporting timelocal_modern() and timegm_modern()
subroutines that handle year number literarly and won't break in the same year.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 14 2018 Petr Pisar <ppisar(a)redhat.com> - 1:1.280-1
- 1.28 bump
* Tue Jun 12 2018 Petr Pisar <ppisar(a)redhat.com> - 1:1.270-1
- 1.27 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1590341 - Upgrade perl-Time-Local to 1.27
https://bugzilla.redhat.com/show_bug.cgi?id=1590341
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-5c3b7f0960' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-da33a74b32
2018-07-01 01:33:28.643385
--------------------------------------------------------------------------------
Name : libgxps
Product : Fedora 27
Version : 0.3.0
Release : 5.fc27
URL : https://wiki.gnome.org/Projects/libgxps
Summary : GObject based library for handling and rendering XPS documents
Description :
libgxps is a GObject based library for handling and rendering XPS
documents.
--------------------------------------------------------------------------------
Update Information:
Fix integer overflow
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 14 2018 Tom Hughes <tom(a)compton.nu> - 0.3.0-5
- Add patch for integer overflow
* Tue May 8 2018 Tom Hughes <tom(a)compton.nu> - 0.3.0-4
- Add patch for CVE-2018-10733
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Tue Jan 30 2018 Tom Hughes <tom(a)compton.nu> - 0.3.0-2
- Drop ldconfig scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1591132 - libgxps: integer overflow when loading XPS documents containing specially crafted PNG files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1591132
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-da33a74b32' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------