The following Fedora 27 Security updates need testing: Age URL 35 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9fd430dba0 wireshark-2.4.2-1.fc27 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-5adf087854 perl-Net-Ping-External-0.15-11.fc27 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-783a436ee8 postgresql-9.6.6-1.fc27 8 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ffa8601413 ldns-1.7.0-9.fc27 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1fbb5ccbd6 python-copr-1.84-1.fc27 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-898a922aff backintime-1.1.24-1.fc27 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2e5119be33 jbig2dec-0.14-1.fc27 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4cf72e2c11 openssl-1.1.0g-1.fc27 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-7d25605e98 quagga-1.2.2-1.fc27 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-87142683f1 konversation-1.7.4-1.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f73d3f1fc4 kernel-4.13.13-300.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c31799ee4a xen-4.9.0-14.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-195e7ea9a8 lucene4-4.10.4-11.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2c7ddf53d3 git-2.14.3-2.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9e775c0d06 slurm-17.02.9-3.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-72b50be8d4 varnish-5.1.3-4.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-78a4610238 mediawiki-1.29.2-1.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f93ebc905e mrbs-1.7.0-1.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f76bf63612 qpid-cpp-1.36.0-8.fc27
The following Fedora 27 Critical Path updates have yet to be approved: Age URL 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2e8122d7f7 NetworkManager-1.8.4-7.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-b2c1d2e9d7 spice-0.14.0-1.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-97eab6fef7 sssd-1.16.0-3.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-370293d5c3 libguestfs-1.37.34-1.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-75ccfc6dde python-coverage-4.4.2-1.fc27.1 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ace4bec94a python-pyasn1-0.3.7-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
NetworkManager-1.8.4-7.fc27 beaker-24.5-1.fc27 buildah-0.7-1.gitb7e3320.fc27 cabal-rpm-0.12-1.fc27 cinnamon-3.6.3-2.fc27 classified-ads-0.12-1.fc27 docker-1.13.1-42.git4402c09.fc27 fedfind-3.8.2-1.fc27 getdns-1.2.1-1.fc27 ghc-generics-sop-0.3.1.0-1.fc27 ghc-hxt-9.3.1.16-1.fc27 ghc-skylighting-0.1.1.5-3.fc27 ghc-string-qq-0.0.2-1.fc27 ignuit-2.24.3-1.fc27 libguestfs-1.37.34-1.fc27 mediawiki-1.29.2-1.fc27 mingw-libgsf-1.14.42-1.fc27 mingw-nspr-4.17-1.fc27 module-build-service-1.5.0-1.fc27 mongo-c-driver-1.8.2-1.fc27 mrbs-1.7.0-1.fc27 ndctl-58.4-1.fc27 php-pear-Mail-Mime-1.10.2-1.fc27 pix-1.6.1-3.fc27 python-coverage-4.4.2-1.fc27.1 python-httpbin-0.6.2-3.fc27 python-keyring-10.5.0-1.fc27 python-liblarch-3.0-1.fc27 python-metakernel-0.20.12-1.fc27 python-mwclient-0.8.6-1.fc27 python-pyasn1-0.3.7-1.fc27 python-pyngus-2.2.1-3.fc27 python-pytest-httpbin-0.3.0-1.fc27 python-pytest-relaxed-1.0.0-2.fc27 python-wikitcms-2.2.1-1.fc27 python-xapp-1.0.1-7.fc27 qpid-cpp-1.36.0-8.fc27 qpid-dispatch-0.8.0-6.fc27 qpid-proton-0.18.1-1.fc27 qt5-qtcharts-5.9.2-1.fc27 qt5-qtscxml-5.9.2-1.fc27 qt5-qtspeech-5.9.2-1.fc27 redis-4.0.2-2.fc27 relval-2.2.0-1.fc27 rubygem-qpid_proton-0.18.1-1.fc27 skopeo-0.1.25-2.git7fd6f66.fc27 slick-greeter-1.1.1-1.fc27 slurm-17.02.9-3.fc27 spice-0.14.0-1.fc27 sssd-1.16.0-3.fc27 varnish-5.1.3-4.fc27 xed-1.6.2-1.fc27 xfce4-whiskermenu-plugin-1.7.4-1.fc27
Details about builds:
================================================================================ NetworkManager-1.8.4-7.fc27 (FEDORA-2017-2e8122d7f7) Network connection manager and user applications -------------------------------------------------------------------------------- Update Information:
- libnm: fix accessing enabled and metered properties (which should already have been in the last update) --------------------------------------------------------------------------------
================================================================================ beaker-24.5-1.fc27 (FEDORA-2017-123263f05d) Full-stack software and hardware integration testing system -------------------------------------------------------------------------------- Update Information:
Upstream release 24.5 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1508174 - beaker-24.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508174 --------------------------------------------------------------------------------
================================================================================ buildah-0.7-1.gitb7e3320.fc27 (FEDORA-2017-61e8a7fa9d) A command line tool used for creating OCI Images -------------------------------------------------------------------------------- Update Information:
Fix SELinux issue, when using buildah with containers created by kpod/cri-o --------------------------------------------------------------------------------
================================================================================ cabal-rpm-0.12-1.fc27 (FEDORA-2017-3bff6fe2e2) RPM packaging tool for Haskell Cabal-based packages -------------------------------------------------------------------------------- Update Information:
- query Stackage LTS package version via https - run cabal update before cabal commands - devel packages now provide doc subpackage for forward compatibility - new --hackage option to get package version from Hackage not Stackage - silence mock rpmbuild -bs warnings about undefined %ghc_version --------------------------------------------------------------------------------
================================================================================ cinnamon-3.6.3-2.fc27 (FEDORA-2017-0356a2c225) Window management and application launching for GNOME -------------------------------------------------------------------------------- Update Information:
* Add patch from upstream to switch to libnm * Rewrite Debian downstream patch for libnm --------------------------------------------------------------------------------
================================================================================ classified-ads-0.12-1.fc27 (FEDORA-2017-a1e37999eb) Classified ads is distributed, server-less messaging system -------------------------------------------------------------------------------- Update Information:
New upstream version: new features, many new translations --------------------------------------------------------------------------------
================================================================================ docker-1.13.1-42.git4402c09.fc27 (FEDORA-2017-3da8ad596a) Automates deployment of containerized applications -------------------------------------------------------------------------------- Update Information:
move rhel secrets info from docker to skopeo-containers ---- Add override kernel check. ---- built commit 28d4e08 ---- Addition of remediate ---- New atomic and registries code ---- Addition of run for system containers remove skopeo build from update since 0.1.24-7 is already set to move to stable. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1479003 - skopeo-containers file conflict with inn https://bugzilla.redhat.com/show_bug.cgi?id=1479003 [ 2 ] Bug #1478843 - Package version 0.1.23-2.git1bbd87f has a file conflict with inn https://bugzilla.redhat.com/show_bug.cgi?id=1478843 [ 3 ] Bug #1504065 - docker daemon failed to start (missing /etc/docker/seccomp.json) https://bugzilla.redhat.com/show_bug.cgi?id=1504065 [ 4 ] Bug #1507679 - Docker default registry change breaks many default behaviors including docker.com tutorial https://bugzilla.redhat.com/show_bug.cgi?id=1507679 [ 5 ] Bug #1504709 - oc cluster up fails with secrets added to skopeo-containers https://bugzilla.redhat.com/show_bug.cgi?id=1504709 --------------------------------------------------------------------------------
================================================================================ fedfind-3.8.2-1.fc27 (FEDORA-2017-2b39d3fe2d) Fedora compose and image finder -------------------------------------------------------------------------------- Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the Modular Server candidate composes which are currently being produced. fedfind 3.8.1 returns to using the pkgdb `collections` API end point for `get_current_release`, as it is now being manually updated until PDC is ready to replace it. fedfind 3.8.2 fixes `get_package_nvras` and `https_url_generic` for modular composes, and `get_package_nvras` with Python 3 (it previously raised an exception for all composes in Python 3, and modular composes in Python 2). python-wikitcms 2.2.1 adds support for OpenID Connect authentication. The Fedora wikis are being converted to use only OpenID Connect authentication, with standard mediawiki authentication disabled. --------------------------------------------------------------------------------
================================================================================ getdns-1.2.1-1.fc27 (FEDORA-2017-ac293d62cf) Modern asynchronous API to the DNS -------------------------------------------------------------------------------- Update Information:
Updated to 1.2.1 --------------------------------------------------------------------------------
================================================================================ ghc-generics-sop-0.3.1.0-1.fc27 (FEDORA-2017-c229e0c8f9) Generic Programming using True Sums of Products -------------------------------------------------------------------------------- Update Information:
New package ghc-generics-sop -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1514120 - Review Request: ghc-generics-sop - Generic Programming using True Sums of Products https://bugzilla.redhat.com/show_bug.cgi?id=1514120 --------------------------------------------------------------------------------
================================================================================ ghc-hxt-9.3.1.16-1.fc27 (FEDORA-2017-f062f93498) A collection of tools for processing XML with Haskell -------------------------------------------------------------------------------- Update Information:
New libraries needed to builder recent pandoc -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511911 - None https://bugzilla.redhat.com/show_bug.cgi?id=1511911 [ 2 ] Bug #1502200 - None https://bugzilla.redhat.com/show_bug.cgi?id=1502200 --------------------------------------------------------------------------------
================================================================================ ghc-skylighting-0.1.1.5-3.fc27 (FEDORA-2017-f062f93498) Syntax highlighting library -------------------------------------------------------------------------------- Update Information:
New libraries needed to builder recent pandoc -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1511911 - None https://bugzilla.redhat.com/show_bug.cgi?id=1511911 [ 2 ] Bug #1502200 - None https://bugzilla.redhat.com/show_bug.cgi?id=1502200 --------------------------------------------------------------------------------
================================================================================ ghc-string-qq-0.0.2-1.fc27 (FEDORA-2017-a4bd2ae9e0) QuasiQuoter for non-interpolated strings, texts and bytestrings -------------------------------------------------------------------------------- Update Information:
New package ghc-string-qq -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1514212 - Review Request: ghc-string-qq - QuasiQuoter for non-interpolated strings, texts and bytestrings https://bugzilla.redhat.com/show_bug.cgi?id=1514212 --------------------------------------------------------------------------------
================================================================================ ignuit-2.24.3-1.fc27 (FEDORA-2017-4aed64aea6) Memorization aid based on the Leitner flashcard system -------------------------------------------------------------------------------- Update Information:
Update to new upstream version 2.24.3 (rhbz#1514436) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1514436 - ignuit-2.24.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1514436 --------------------------------------------------------------------------------
================================================================================ libguestfs-1.37.34-1.fc27 (FEDORA-2017-370293d5c3) Access and modify virtual machine disk images -------------------------------------------------------------------------------- Update Information:
New upstream version 1.37.34. --------------------------------------------------------------------------------
================================================================================ mediawiki-1.29.2-1.fc27 (FEDORA-2017-78a4610238) A wiki engine -------------------------------------------------------------------------------- Update Information:
https://lists.wikimedia.org/pipermail/mediawiki- announce/2017-November/000216.html -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1513206 - mediawiki-1.29.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1513206 --------------------------------------------------------------------------------
================================================================================ mingw-libgsf-1.14.42-1.fc27 (FEDORA-2017-8fb1472994) MinGW build of structured file editing library -------------------------------------------------------------------------------- Update Information:
Upstream version 1.14.42 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1512240 - mingw-libgsf-1.14.42 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512240 --------------------------------------------------------------------------------
================================================================================ mingw-nspr-4.17-1.fc27 (FEDORA-2017-f0fb839927) MinGW build of Netscape Portable Runtime -------------------------------------------------------------------------------- Update Information:
Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1476050 - mingw-nspr-4.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1476050 --------------------------------------------------------------------------------
================================================================================ module-build-service-1.5.0-1.fc27 (FEDORA-2017-52c548198c) The Module Build Service for Modularity -------------------------------------------------------------------------------- Update Information:
Changes: * Fix an issue where the latest ref for a branch wasn't being used * Fixes the issue where builds stay in the "build" state even though they've had a component fail * Set the timeout on Koji sessions to 10 minutes (this will help during outages) * Transition stale failed builds to the "garbage" state and untag their components (after 180 days of inactivity) * Add a "short" query parameter to show less detail on the "module-builds" API ---- Changes: * Change the MBS builders into setuptools plugins so now you can now create your own builder plugin * Updated some documentation * mbs-build local now builds only from yaml files (this bypasses the need for SCM) * Only complete the module build when all components are tagged and a KojiRepoRegen message is received * Don't trigger init handler when importing a local build and mark the build as done after import * Validate component git refs when a commit is explicitly stated in the modulemd before starting the module build * Set Access-Control- Allow-Origin to "*" on GET API routes * Fix duplicate module build state traces * Make the module build log name configurable --------------------------------------------------------------------------------
================================================================================ mongo-c-driver-1.8.2-1.fc27 (FEDORA-2017-f6b7e67a18) Client library written in C for MongoDB -------------------------------------------------------------------------------- Update Information:
**Version 1.8.2** * Remove option to bundle the Snappy compression library, it caused issues for programs linking to libmongoc * Fix pkg-config and CMake config file flags for programs that statically link to libmongoc when libmongoc is statically linked to zLib * The configure flag "--with-zlib=no" was ignored Crash in authentication when username is NULL --------------------------------------------------------------------------------
================================================================================ mrbs-1.7.0-1.fc27 (FEDORA-2017-f93ebc905e) Meeting Room Booking System -------------------------------------------------------------------------------- Update Information:
Changes since MRBS 1.6.1: - Fixed a number of security issues in MRBS that were disclosed to the project by SySS GmbH, including XSS, CSRF protection and session fixation. - Improved behaviour of browser caching in MRBS. - Improved localisation, especially the use of colons in labels. - Added new config variable $weekdays to define weekdays and weekends, allowing for the possibility that weekdays are not the same as working days. - MRBS now restricts form actions which modify data/pass passwords to only accept POSTs. - Added the ability to have different period names in each area. - Add SAML auth and session schemes, thanks to J��rn ��ne. - Updated to jQuery 3.2.1 and jQueryUI 1.12.1, which includes XSS fixes. - Plus a few other bug fixes/improvements. - Dropped support for Internet Explorer 9 and lower. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1514285 - mrbs-1.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1514285 --------------------------------------------------------------------------------
================================================================================ ndctl-58.4-1.fc27 (FEDORA-2017-c8764cb108) Manage "libnvdimm" subsystem devices (Non-volatile Memory) -------------------------------------------------------------------------------- Update Information:
release v58.4 --------------------------------------------------------------------------------
================================================================================ php-pear-Mail-Mime-1.10.2-1.fc27 (FEDORA-2017-2c1133714f) Classes to create MIME messages -------------------------------------------------------------------------------- Update Information:
**Version 1.10.2** * Fix Bug pear#21255: Boundary gets added twice when using setContentType() [alec] * PHP 7.2 compatibility fixes [alec] --------------------------------------------------------------------------------
================================================================================ pix-1.6.1-3.fc27 (FEDORA-2017-53f09b45f3) Image management application -------------------------------------------------------------------------------- Update Information:
* Enable sm-client --------------------------------------------------------------------------------
================================================================================ python-coverage-4.4.2-1.fc27.1 (FEDORA-2017-75ccfc6dde) Code coverage testing module for Python -------------------------------------------------------------------------------- Update Information:
Re-add platform subpackage. --------------------------------------------------------------------------------
================================================================================ python-httpbin-0.6.2-3.fc27 (FEDORA-2017-ba927ebc4a) HTTP Request & Response Service, written in Python + Flask -------------------------------------------------------------------------------- Update Information:
This update provides a new release of pytest-httpbin. It adds some new features, including one requested by @hroncok. It should not have any backward compatibility issues. For Fedora 27, the update also includes a new build of python-httpbin. The python-pytest-httpbin test suite belatedly discovered that `python-httpbin-0.6.2-1` had several setuptools dependency issues. Those are resolved in this build. --------------------------------------------------------------------------------
================================================================================ python-keyring-10.5.0-1.fc27 (FEDORA-2017-575a0813f4) Store and access your passwords safely -------------------------------------------------------------------------------- Update Information:
Update to latest python-keyring 10.5.0; bz#1512519 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1512519 - python-keyring-10.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1512519 --------------------------------------------------------------------------------
================================================================================ python-liblarch-3.0-1.fc27 (FEDORA-2017-4a42fceca9) Data structures helper library for python -------------------------------------------------------------------------------- Update Information:
* Update to latest release in py3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1453139 - python-liblarch: Provide a Python 3 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1453139 --------------------------------------------------------------------------------
================================================================================ python-metakernel-0.20.12-1.fc27 (FEDORA-2017-3fb7a04eaf) Metakernel for Jupyter -------------------------------------------------------------------------------- Update Information:
New release. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1508214 - python-metakernel-v0.20.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508214 --------------------------------------------------------------------------------
================================================================================ python-mwclient-0.8.6-1.fc27 (FEDORA-2017-9a271deb3b) Mwclient is a client to the MediaWiki API -------------------------------------------------------------------------------- Update Information:
This update provides the latest upstream release of mwclient, with various enhancements and bug fixes, notably for Semantic Mediawiki support. Please see the [upstream release notes](https://github.com/mwclient/mwclient/releases) for more details. I don't believe any of the changes should break compatibility in any way. Note that the previous "0.8.4" builds of mwclient were in fact still 0.8.3 due to an error on my part, so this update includes the changes from 0.8.4 as well as 0.8.5 and 0.8.6. --------------------------------------------------------------------------------
================================================================================ python-pyasn1-0.3.7-1.fc27 (FEDORA-2017-ace4bec94a) ASN.1 tools for Python -------------------------------------------------------------------------------- Update Information:
Update to upstream release 0.3.7 and modules to 0.1.5 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1492446 - python-pyasn1-v0.3.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1492446 --------------------------------------------------------------------------------
================================================================================ python-pyngus-2.2.1-3.fc27 (FEDORA-2017-c7e3d6e00d) Callback API implemented over Proton -------------------------------------------------------------------------------- Update Information:
Rebuilt against qpid-proton 0.18.1-1. --------------------------------------------------------------------------------
================================================================================ python-pytest-httpbin-0.3.0-1.fc27 (FEDORA-2017-ba927ebc4a) Fixture providing local instance of httpbin test service -------------------------------------------------------------------------------- Update Information:
This update provides a new release of pytest-httpbin. It adds some new features, including one requested by @hroncok. It should not have any backward compatibility issues. For Fedora 27, the update also includes a new build of python-httpbin. The python-pytest-httpbin test suite belatedly discovered that `python-httpbin-0.6.2-1` had several setuptools dependency issues. Those are resolved in this build. --------------------------------------------------------------------------------
================================================================================ python-pytest-relaxed-1.0.0-2.fc27 (FEDORA-2017-a188512d5f) Relaxed test discovery for pytest -------------------------------------------------------------------------------- Update Information:
First release -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1513789 - Review Request: python-pytest-relaxed - Relaxed test discovery for pytest https://bugzilla.redhat.com/show_bug.cgi?id=1513789 --------------------------------------------------------------------------------
================================================================================ python-wikitcms-2.2.1-1.fc27 (FEDORA-2017-2b39d3fe2d) Fedora QA wiki test management Python library -------------------------------------------------------------------------------- Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the Modular Server candidate composes which are currently being produced. fedfind 3.8.1 returns to using the pkgdb `collections` API end point for `get_current_release`, as it is now being manually updated until PDC is ready to replace it. fedfind 3.8.2 fixes `get_package_nvras` and `https_url_generic` for modular composes, and `get_package_nvras` with Python 3 (it previously raised an exception for all composes in Python 3, and modular composes in Python 2). python-wikitcms 2.2.1 adds support for OpenID Connect authentication. The Fedora wikis are being converted to use only OpenID Connect authentication, with standard mediawiki authentication disabled. --------------------------------------------------------------------------------
================================================================================ python-xapp-1.0.1-7.fc27 (FEDORA-2017-dc238c6686) Python bindings for xapps -------------------------------------------------------------------------------- Update Information:
* Use unified macros for Python3 --------------------------------------------------------------------------------
================================================================================ qpid-cpp-1.36.0-8.fc27 (FEDORA-2017-f76bf63612) Libraries for Qpid C++ client applications -------------------------------------------------------------------------------- Update Information:
Rebuilt against qpid- -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1471925 - CVE-2015-0203 qpid-cpp: 3 qpidd DoS issues in AMQP 0-10 protocol handling [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1471925 [ 2 ] Bug #1471927 - CVE-2015-0203 qpid-cpp: 3 qpidd DoS issues in AMQP 0-10 protocol handling [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1471927 [ 3 ] Bug #1445604 - qpid-cpp-1.35.0-4.fc27 FTBFS: '<anonymous>.qpid::broker::Token::type' may be used uninitialized in this function https://bugzilla.redhat.com/show_bug.cgi?id=1445604 --------------------------------------------------------------------------------
================================================================================ qpid-dispatch-0.8.0-6.fc27 (FEDORA-2017-6055339dde) Dispatch router for Qpid -------------------------------------------------------------------------------- Update Information:
Rebuilt against qpid-proton 0.18.1-1. --------------------------------------------------------------------------------
================================================================================ qpid-proton-0.18.1-1.fc27 (FEDORA-2017-f4b0a3b0ea) A high performance, lightweight messaging library -------------------------------------------------------------------------------- Update Information:
Rebased to 0.18.1. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1504158 - qpid-proton-c is missing fd leak plug patch causing goferd to eventually fail https://bugzilla.redhat.com/show_bug.cgi?id=1504158 --------------------------------------------------------------------------------
================================================================================ qt5-qtcharts-5.9.2-1.fc27 (FEDORA-2017-e14ff44a08) Qt5 - Charts component -------------------------------------------------------------------------------- Update Information:
QtCharts 5.9.2 release --------------------------------------------------------------------------------
================================================================================ qt5-qtscxml-5.9.2-1.fc27 (FEDORA-2017-8048d355a1) Qt5 - ScXml component -------------------------------------------------------------------------------- Update Information:
QtScxml 5.9.2 release --------------------------------------------------------------------------------
================================================================================ qt5-qtspeech-5.9.2-1.fc27 (FEDORA-2017-0ccd4020ca) Qt5 - Speech component -------------------------------------------------------------------------------- Update Information:
QtSpeech 5.9.2 --------------------------------------------------------------------------------
================================================================================ redis-4.0.2-2.fc27 (FEDORA-2017-9479a2fe86) A persistent key-value database -------------------------------------------------------------------------------- Update Information:
Install the base modules directories, owned by the main package. --------------------------------------------------------------------------------
================================================================================ relval-2.2.0-1.fc27 (FEDORA-2017-2b39d3fe2d) Tool for interacting with Fedora QA wiki pages -------------------------------------------------------------------------------- Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the Modular Server candidate composes which are currently being produced. fedfind 3.8.1 returns to using the pkgdb `collections` API end point for `get_current_release`, as it is now being manually updated until PDC is ready to replace it. fedfind 3.8.2 fixes `get_package_nvras` and `https_url_generic` for modular composes, and `get_package_nvras` with Python 3 (it previously raised an exception for all composes in Python 3, and modular composes in Python 2). python-wikitcms 2.2.1 adds support for OpenID Connect authentication. The Fedora wikis are being converted to use only OpenID Connect authentication, with standard mediawiki authentication disabled. --------------------------------------------------------------------------------
================================================================================ rubygem-qpid_proton-0.18.1-1.fc27 (FEDORA-2017-a475c09549) Ruby language bindings for the Qpid Proton messaging framework -------------------------------------------------------------------------------- Update Information:
Rebased to 0.18.1. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1508236 - rubygem-qpid_proton-0.18.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508236 --------------------------------------------------------------------------------
================================================================================ skopeo-0.1.25-2.git7fd6f66.fc27 (FEDORA-2017-3da8ad596a) Inspect Docker images and repositories on registries -------------------------------------------------------------------------------- Update Information:
move rhel secrets info from docker to skopeo-containers ---- Add override kernel check. ---- built commit 28d4e08 ---- Addition of remediate ---- New atomic and registries code ---- Addition of run for system containers remove skopeo build from update since 0.1.24-7 is already set to move to stable. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1479003 - skopeo-containers file conflict with inn https://bugzilla.redhat.com/show_bug.cgi?id=1479003 [ 2 ] Bug #1478843 - Package version 0.1.23-2.git1bbd87f has a file conflict with inn https://bugzilla.redhat.com/show_bug.cgi?id=1478843 [ 3 ] Bug #1504065 - docker daemon failed to start (missing /etc/docker/seccomp.json) https://bugzilla.redhat.com/show_bug.cgi?id=1504065 [ 4 ] Bug #1507679 - Docker default registry change breaks many default behaviors including docker.com tutorial https://bugzilla.redhat.com/show_bug.cgi?id=1507679 [ 5 ] Bug #1504709 - oc cluster up fails with secrets added to skopeo-containers https://bugzilla.redhat.com/show_bug.cgi?id=1504709 --------------------------------------------------------------------------------
================================================================================ slick-greeter-1.1.1-1.fc27 (FEDORA-2017-244c1b07f2) A slick-looking LightDM greeter -------------------------------------------------------------------------------- Update Information:
* New upstream release -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1514464 - slick-greeter-1.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1514464 --------------------------------------------------------------------------------
================================================================================ slurm-17.02.9-3.fc27 (FEDORA-2017-9e775c0d06) Simple Linux Utility for Resource Management -------------------------------------------------------------------------------- Update Information:
Harden the Slurm build and allows it to operate in full relro with GOT sections of the ELF binaries marked read-only. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1514211 - Enable full relro build and operation for slurm https://bugzilla.redhat.com/show_bug.cgi?id=1514211 --------------------------------------------------------------------------------
================================================================================ spice-0.14.0-1.fc27 (FEDORA-2017-b2c1d2e9d7) Implements the SPICE protocol -------------------------------------------------------------------------------- Update Information:
Update to new stable release -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1514366 - F27 version lower than F26 https://bugzilla.redhat.com/show_bug.cgi?id=1514366 --------------------------------------------------------------------------------
================================================================================ sssd-1.16.0-3.fc27 (FEDORA-2017-97eab6fef7) System Security Services Daemon -------------------------------------------------------------------------------- Update Information:
Adds a backport of an extended NSS-like API from the upstream master branch. --------------------------------------------------------------------------------
================================================================================ varnish-5.1.3-4.fc27 (FEDORA-2017-72b50be8d4) High-performance HTTP accelerator -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2017-8807: This fixes a possible data leak in stevedore transient objects in varnishd. Upstream reports: "It is not inconceiveable that an attack can provoke this situation on vulnerable varnishd instances, where the leaked memory contains confidential data and therefore we have classified this as a security vulnerability." -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1513523 - CVE-2017-8807 varnish: Data leak - ���-sfile��� Stevedore transient objects https://bugzilla.redhat.com/show_bug.cgi?id=1513523 --------------------------------------------------------------------------------
================================================================================ xed-1.6.2-1.fc27 (FEDORA-2017-ce1dd5f4ac) X-Apps [Text] Editor (Cross-DE, backward-compatible, GTK3, traditional UI) -------------------------------------------------------------------------------- Update Information:
* New upstream release -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1513985 - xed-1.6.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1513985 --------------------------------------------------------------------------------
================================================================================ xfce4-whiskermenu-plugin-1.7.4-1.fc27 (FEDORA-2017-ae60c122b9) An alternate application launcher for Xfce -------------------------------------------------------------------------------- Update Information:
- update to 1.7.4 --------------------------------------------------------------------------------