Fedora 27 updates-testing report
by updates@fedoraproject.org
The following Fedora 27 Security updates need testing:
Age URL
51 https://bodhi.fedoraproject.org/updates/FEDORA-2017-913288e9a9 mongodb-3.4.10-1.fc27
47 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d7c0748c1b pdns-4.1.0-1.fc27
22 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2d4c9a6e37 monit-5.25.1-1.fc27
8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6cb474b8ff python-bottle-0.12.13-1.fc27
7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-75e780a7c2 ruby-2.4.3-86.fc27
3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e4b025841e jackson-databind-2.7.6-7.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-da4263f065 libtasn1-4.13-1.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6349371aa1 libvpx-1.6.1-5.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-48da15ea59 wordpress-4.9.2-1.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2a1f469c85 clamav-0.99.2-18.fc27
The following builds have been pushed to Fedora 27 updates-testing
CuraEngine-lulzbot-2.6.66-1.fc27
cciss_vol_status-1.12-1.fc27
clang-5.0.1-1.fc27
compiler-rt-5.0.1-2.fc27
cura-lulzbot-2.6.66-2.fc27
gjs-1.50.3-1.fc27
glib2-2.54.3-2.fc27
gns3-gui-2.1.2-1.fc27
gns3-server-2.1.2-1.fc27
ibus-1.5.17-4.fc27
inxi-2.3.56-1.fc27
latexmk-4.55-1.fc27
libcxx-5.0.1-1.fc27
libcxxabi-5.0.1-1.fc27
libomp-5.0.1-1.fc27
libreoffice-5.4.4.2-3.fc27
lld-5.0.1-1.fc27
lldb-5.0.1-1.fc27
llvm-5.0.1-1.fc27
lulzbot-marlin-firmware-1.1.5.70-1.fc27
lxpanel-0.9.3-3.D20180109git2ddf8dfc.fc27
obfs4-0.0.7-2.fc27
perl-Crypt-OpenSSL-X509-1.808-1.fc27
perl-Locale-SubCountry-2.04-1.fc27
perl-MongoDB-1.8.1-1.fc27
php-zendframework-zend-view-2.9.1-1.fc27
python-plaster-pastedeploy-0.4.2-1.fc27
python-uranium-lulzbot-2.6.66-1.fc27
quodlibet-4.0.2-1.fc27
scribus-generator-2.5-4.fc27
syncthing-0.14.43-1.fc27
timedatex-0.5-2.fc27
ucx-1.2.2-1.fc27
unetbootin-657-1.fc27
Details about builds:
================================================================================
CuraEngine-lulzbot-2.6.66-1.fc27 (FEDORA-2018-c36a0c632f)
Engine for processing 3D models into G-code instructions for 3D printers
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.66 (latest stable). ---- Update to Cura-lulzbot version 2! Comes
with new firmware that actually builds properly from source code, AND a whole
new UI.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532837 - Review Request: python-uranium-lulzbot - A Python framework for building desktop applications
https://bugzilla.redhat.com/show_bug.cgi?id=1532837
--------------------------------------------------------------------------------
================================================================================
cciss_vol_status-1.12-1.fc27 (FEDORA-2018-d5b0cd318c)
Show status of logical drives attached to HP SmartArray controllers
--------------------------------------------------------------------------------
Update Information:
update to new release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532744 - cciss_vol_status 1.12
https://bugzilla.redhat.com/show_bug.cgi?id=1532744
--------------------------------------------------------------------------------
================================================================================
clang-5.0.1-1.fc27 (FEDORA-2018-884ee4cdf4)
A C language family front-end for LLVM
--------------------------------------------------------------------------------
Update Information:
Rebase for LLVM 5.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1518384 - __declspec(selectany) is broken in clang 5.0
https://bugzilla.redhat.com/show_bug.cgi?id=1518384
--------------------------------------------------------------------------------
================================================================================
compiler-rt-5.0.1-2.fc27 (FEDORA-2018-884ee4cdf4)
LLVM "compiler-rt" runtime libraries
--------------------------------------------------------------------------------
Update Information:
Rebase for LLVM 5.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1518384 - __declspec(selectany) is broken in clang 5.0
https://bugzilla.redhat.com/show_bug.cgi?id=1518384
--------------------------------------------------------------------------------
================================================================================
cura-lulzbot-2.6.66-2.fc27 (FEDORA-2018-c36a0c632f)
3D printer control software
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.66 (latest stable). ---- Update to Cura-lulzbot version 2! Comes
with new firmware that actually builds properly from source code, AND a whole
new UI.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532837 - Review Request: python-uranium-lulzbot - A Python framework for building desktop applications
https://bugzilla.redhat.com/show_bug.cgi?id=1532837
--------------------------------------------------------------------------------
================================================================================
gjs-1.50.3-1.fc27 (FEDORA-2018-32f09528ad)
Javascript Bindings for GNOME
--------------------------------------------------------------------------------
Update Information:
gjs 1.50.3 release. - GJS will now log a warning when a GObject is accessed in
Javascript code after the underlying object has been freed in C. (This used to
work most of the time, but crash unpredictably.) We now prevent this situation
which, is usually caused by a memory management bug in the underlying C
library. Closed bugs and merge requests: * Add checks for GObjects that have
been finalized [#21, #23, !25, !28, !33, Marco Trevisan] * Test "Cairo
context has methods when created from a C function" fails [#27, !35,
Valent��n Barros] * Various fixes from the master branch for rare crashes
[Philip Chimento]
--------------------------------------------------------------------------------
================================================================================
glib2-2.54.3-2.fc27 (FEDORA-2018-4745a9bbeb)
A library of handy utility functions
--------------------------------------------------------------------------------
Update Information:
glib 2.54.3 release, fixing the following bugs: - 691436 glib-mkenums output
arch dependent - 761102 Increase performance for main loop - 776147
gio/glocalfilemonitor.c doesn't handle case G_FILE_MONITOR_EVENT_MOVE... -
779182 xdg-open fails with gio open for some uris - 782057 Unit tests fail in
run-assert-msg-test.sh - 785113 glib-mkenums Python port fixes - 788990
Include licensing information in output from glib-mkenums, glib-genma... -
789637 glib-mkenums: Fails when --ouput file does not exist - 789894 Text tool
has color from previous line, when overwriting existing text - 790030
GResource/GVariant fails to load from non-pointer aligned memory - 790093 gio-
tool: fix inverted logic in monitor tool - 790126 gengiotypefuncs.py is missing
from tarballs - 790829 glib-genmarshal --body must not generate alias
implementations - 790934 gtester doesn't handle skipped tests - 791235 Fix
gschema.dtd regarding flags. - 791267 Make gschema.dtd usable. - 791296
gtester-report: fix range usage when running as python3 app - 791325 Gio
handling of thumbnail:: attribute namespace causes inconsistent b... - 791334
gbinding.c:898: The target object of type GNetworkAddress has no prop... -
791337 Crash opening URIs with g_desktop_app_info_launch_uris_with_spawn() -
791720 Criticals in gio/xdp-dbus.h leading to crash under flatpak - 791744
gmenumodel test sometimes fails: assertion failed (items_changed_coun... -
791754 gdbus-peer test intermittently fails: assertion 'source->ref_count > ...
- 791906 GSocketListenerClass.event has wrong signature This update also
includes a new timedatex build, fixing an issue that causes 100% processor use
with the new glib 2.54.3 release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1534149 - impress causes high cpu load with glib2 >- 2.54.3-1
https://bugzilla.redhat.com/show_bug.cgi?id=1534149
[ 2 ] Bug #1450628 - timedatex high CPU usage
https://bugzilla.redhat.com/show_bug.cgi?id=1450628
--------------------------------------------------------------------------------
================================================================================
gns3-gui-2.1.2-1.fc27 (FEDORA-2018-b2b99533e8)
GNS3 graphical user interface
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.2 Disable anonymous data collection
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532422 - gns3-server-2.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532422
[ 2 ] Bug #1532421 - gns3-gui-2.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532421
--------------------------------------------------------------------------------
================================================================================
gns3-server-2.1.2-1.fc27 (FEDORA-2018-b2b99533e8)
Graphical Network Simulator 3
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.2 Disable anonymous data collection
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532422 - gns3-server-2.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532422
[ 2 ] Bug #1532421 - gns3-gui-2.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532421
--------------------------------------------------------------------------------
================================================================================
ibus-1.5.17-4.fc27 (FEDORA-2018-c916b973e1)
Intelligent Input Bus for Linux OS
--------------------------------------------------------------------------------
Update Information:
Recently ibus adds a security fix so it's good to check any regressions.
--------------------------------------------------------------------------------
================================================================================
inxi-2.3.56-1.fc27 (FEDORA-2018-09abc91b2e)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.56.
--------------------------------------------------------------------------------
================================================================================
latexmk-4.55-1.fc27 (FEDORA-2018-a57b13b5bb)
A make-like utility for LaTeX files
--------------------------------------------------------------------------------
Update Information:
Changes in version 4.55: - Ensure that all configuration variables do have
sensible default definitions (which wasn't always the case previously). - Allow
optional timeout in pvc mode after a period of inactivity. (See documentation
for -pvctimeout option.) - Compensate for problems caused by time offset between
system time on system running latexmk and file times on remote file system. (It
caused wrong behavior when a document uses biber, MiKTeX is used, the aux_dir is
on a remote file system, and the system time on the host of the file system
differs from the system time on the system running latexmk.)
--------------------------------------------------------------------------------
================================================================================
libcxx-5.0.1-1.fc27 (FEDORA-2018-884ee4cdf4)
C++ standard library targeting C++11
--------------------------------------------------------------------------------
Update Information:
Rebase for LLVM 5.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1518384 - __declspec(selectany) is broken in clang 5.0
https://bugzilla.redhat.com/show_bug.cgi?id=1518384
--------------------------------------------------------------------------------
================================================================================
libcxxabi-5.0.1-1.fc27 (FEDORA-2018-884ee4cdf4)
Low level support for a standard C++ library
--------------------------------------------------------------------------------
Update Information:
Rebase for LLVM 5.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1518384 - __declspec(selectany) is broken in clang 5.0
https://bugzilla.redhat.com/show_bug.cgi?id=1518384
--------------------------------------------------------------------------------
================================================================================
libomp-5.0.1-1.fc27 (FEDORA-2018-884ee4cdf4)
OpenMP runtime for clang
--------------------------------------------------------------------------------
Update Information:
Rebase for LLVM 5.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1518384 - __declspec(selectany) is broken in clang 5.0
https://bugzilla.redhat.com/show_bug.cgi?id=1518384
--------------------------------------------------------------------------------
================================================================================
libreoffice-5.4.4.2-3.fc27 (FEDORA-2018-2ee7368215)
Free Software Productivity Suite
--------------------------------------------------------------------------------
Update Information:
backport semi transparent editview overlay to workaround unfortunate font
metrics, e.g. overpass
--------------------------------------------------------------------------------
================================================================================
lld-5.0.1-1.fc27 (FEDORA-2018-884ee4cdf4)
The LLVM Linker
--------------------------------------------------------------------------------
Update Information:
Rebase for LLVM 5.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1518384 - __declspec(selectany) is broken in clang 5.0
https://bugzilla.redhat.com/show_bug.cgi?id=1518384
--------------------------------------------------------------------------------
================================================================================
lldb-5.0.1-1.fc27 (FEDORA-2018-884ee4cdf4)
Next generation high-performance debugger
--------------------------------------------------------------------------------
Update Information:
Rebase for LLVM 5.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1518384 - __declspec(selectany) is broken in clang 5.0
https://bugzilla.redhat.com/show_bug.cgi?id=1518384
--------------------------------------------------------------------------------
================================================================================
llvm-5.0.1-1.fc27 (FEDORA-2018-884ee4cdf4)
The Low Level Virtual Machine
--------------------------------------------------------------------------------
Update Information:
Rebase for LLVM 5.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1518384 - __declspec(selectany) is broken in clang 5.0
https://bugzilla.redhat.com/show_bug.cgi?id=1518384
--------------------------------------------------------------------------------
================================================================================
lulzbot-marlin-firmware-1.1.5.70-1.fc27 (FEDORA-2018-c36a0c632f)
Marlin firmware files for the Lulzbot family of 3D printers
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.66 (latest stable). ---- Update to Cura-lulzbot version 2! Comes
with new firmware that actually builds properly from source code, AND a whole
new UI.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532837 - Review Request: python-uranium-lulzbot - A Python framework for building desktop applications
https://bugzilla.redhat.com/show_bug.cgi?id=1532837
--------------------------------------------------------------------------------
================================================================================
lxpanel-0.9.3-3.D20180109git2ddf8dfc.fc27 (FEDORA-2018-450c678543)
A lightweight X11 desktop panel
--------------------------------------------------------------------------------
Update Information:
This new lxpanel fixes some issues with multiscreen environment.
--------------------------------------------------------------------------------
================================================================================
obfs4-0.0.7-2.fc27 (FEDORA-2018-b91356bdc2)
The obfourscator, a pluggable transport for Tor
--------------------------------------------------------------------------------
Update Information:
Add a sample tor config in /etc/tor/obfs4.torrc, which can be used with tor
(systemctl start tor@obfs4) to run tor with some obfs4 bridges.
--------------------------------------------------------------------------------
================================================================================
perl-Crypt-OpenSSL-X509-1.808-1.fc27 (FEDORA-2018-f60dccf200)
Perl interface to OpenSSL for X509
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1511913 - perl-Crypt-OpenSSL-X509-1.808 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1511913
--------------------------------------------------------------------------------
================================================================================
perl-Locale-SubCountry-2.04-1.fc27 (FEDORA-2018-d1df30ae83)
ISO 3166-2 two letter subcountry codes
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1529277 - perl-Locale-SubCountry-2.04 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1529277
--------------------------------------------------------------------------------
================================================================================
perl-MongoDB-1.8.1-1.fc27 (FEDORA-2018-4d0ca370cb)
A MongoDB Driver for Perl
--------------------------------------------------------------------------------
Update Information:
This release fixes repeated find_one queries, Kerberos authentication, handling
unacknowledged insert_many calls, setting maxTimeMS on tailable await cursors.
It also improves resolution of GridFS uploadDate.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1535735 - perl-MongoDB-v1.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1535735
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zend-view-2.9.1-1.fc27 (FEDORA-2018-52d869639a)
Zend Framework View component
--------------------------------------------------------------------------------
Update Information:
**Version 2.9.1** - 2018-01-17 * **Added** -
[#136](https://github.com/zendframework/zend-view/pull/136) updates the
`Navigation` helper class to document the various proxy methods it allows via
method overloading via `@method` annotations. * **Fixed** -
[#123](https://github.com/zendframework/zend-view/pull/123) updates the
`HelperPluginManager` such that it no longer injects a translator in a helper
if one is already present. - [#125](https://github.com/zendframework/zend-
view/pull/125) provides an update to the `PhpRenderer:render()` method such
that it will now catch not only `Exception` instances, but also PHP 7
`Throwable` instances, and properly cleanup the output buffers when it does.
- [#121](https://github.com/zendframework/zend-view/pull/121) provides a fix to
ensure that content generated on a previous execution of `PhpRenderer::render()`
is never re-used.
--------------------------------------------------------------------------------
================================================================================
python-plaster-pastedeploy-0.4.2-1.fc27 (FEDORA-2018-0e81b1d051)
A PasteDeploy binding to the plaster configuration loader
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.2 (#1469107).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1469107 - python-plaster-pastedeploy-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1469107
--------------------------------------------------------------------------------
================================================================================
python-uranium-lulzbot-2.6.66-1.fc27 (FEDORA-2018-c36a0c632f)
A Python framework for building desktop applications (Lulzbot fork)
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.66 (latest stable). ---- Update to Cura-lulzbot version 2! Comes
with new firmware that actually builds properly from source code, AND a whole
new UI.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532837 - Review Request: python-uranium-lulzbot - A Python framework for building desktop applications
https://bugzilla.redhat.com/show_bug.cgi?id=1532837
--------------------------------------------------------------------------------
================================================================================
quodlibet-4.0.2-1.fc27 (FEDORA-2018-42e9480fee)
A music management program
--------------------------------------------------------------------------------
Update Information:
- update to 4.0.2 - fixes multiple bugs:
https://quodlibet.readthedocs.io/en/latest/changelog.html#water-as-far-as...
eye-can-see 4.0.1 - and
https://quodlibet.readthedocs.io/en/latest/changelog.html#so-it-goes 4.0.2
--------------------------------------------------------------------------------
================================================================================
scribus-generator-2.5-4.fc27 (FEDORA-2018-9fb18427a3)
Open source high-quality PDF template and mail-merge alternative
--------------------------------------------------------------------------------
Update Information:
New addon for Scribus ---- New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1519081 - Review Request: scribus-generator - Open source high-quality PDF template and mail-merge alternative
https://bugzilla.redhat.com/show_bug.cgi?id=1519081
--------------------------------------------------------------------------------
================================================================================
syncthing-0.14.43-1.fc27 (FEDORA-2018-96139d226a)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update to version 0.14.43. This version obsoletes the syncthing-inotify package
(which is deprecated and already retired in f28/rawhide), since the
functionality has been merged into the main project.
--------------------------------------------------------------------------------
================================================================================
timedatex-0.5-2.fc27 (FEDORA-2018-4745a9bbeb)
D-Bus service for system clock and RTC settings
--------------------------------------------------------------------------------
Update Information:
glib 2.54.3 release, fixing the following bugs: - 691436 glib-mkenums output
arch dependent - 761102 Increase performance for main loop - 776147
gio/glocalfilemonitor.c doesn't handle case G_FILE_MONITOR_EVENT_MOVE... -
779182 xdg-open fails with gio open for some uris - 782057 Unit tests fail in
run-assert-msg-test.sh - 785113 glib-mkenums Python port fixes - 788990
Include licensing information in output from glib-mkenums, glib-genma... -
789637 glib-mkenums: Fails when --ouput file does not exist - 789894 Text tool
has color from previous line, when overwriting existing text - 790030
GResource/GVariant fails to load from non-pointer aligned memory - 790093 gio-
tool: fix inverted logic in monitor tool - 790126 gengiotypefuncs.py is missing
from tarballs - 790829 glib-genmarshal --body must not generate alias
implementations - 790934 gtester doesn't handle skipped tests - 791235 Fix
gschema.dtd regarding flags. - 791267 Make gschema.dtd usable. - 791296
gtester-report: fix range usage when running as python3 app - 791325 Gio
handling of thumbnail:: attribute namespace causes inconsistent b... - 791334
gbinding.c:898: The target object of type GNetworkAddress has no prop... -
791337 Crash opening URIs with g_desktop_app_info_launch_uris_with_spawn() -
791720 Criticals in gio/xdp-dbus.h leading to crash under flatpak - 791744
gmenumodel test sometimes fails: assertion failed (items_changed_coun... -
791754 gdbus-peer test intermittently fails: assertion 'source->ref_count > ...
- 791906 GSocketListenerClass.event has wrong signature This update also
includes a new timedatex build, fixing an issue that causes 100% processor use
with the new glib 2.54.3 release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1534149 - impress causes high cpu load with glib2 >- 2.54.3-1
https://bugzilla.redhat.com/show_bug.cgi?id=1534149
[ 2 ] Bug #1450628 - timedatex high CPU usage
https://bugzilla.redhat.com/show_bug.cgi?id=1450628
--------------------------------------------------------------------------------
================================================================================
ucx-1.2.2-1.fc27 (FEDORA-2018-d711e8a1ef)
A communication library implementing high-performance messaging
--------------------------------------------------------------------------------
Update Information:
Initial submit
--------------------------------------------------------------------------------
================================================================================
unetbootin-657-1.fc27 (FEDORA-2018-e3da87adc9)
Create bootable Live USB drives for a variety of Linux distributions
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream release 657, fixes rhbz #1508431
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508431 - unetbootin-657 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508431
--------------------------------------------------------------------------------