The following Fedora 27 Security updates need testing:
Age URL
48 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2d4c9a6e37 monit-5.25.1-1.fc27
20 https://bodhi.fedoraproject.org/updates/FEDORA-2018-be361f407a knot-resolver-1.5.3-1.fc27
8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-969328b17c jhead-3.00-7.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5562b6e2c0 golang-1.9.4-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3082496e05 pungi-4.1.22-2.fc27
7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c46fa8e392 perl-5.26.1-403.fc27
4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-17cc6eb403 mesa-17.3.3-1.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fdb6b936e4 nss-3.35.0-1.1.fc27 nss-softokn-3.35.0-1.0.fc27 nss-util-3.35.0-1.0.fc27 nspr-4.18.0-1.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d73421f7e6 pcre2-10.31-1.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c9b5e3f68c libguestfs-1.38.0-1.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d89e5bb152 gcab-1.1-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
OCE-0.18.3-1.fc27
aftertheflood-sparks-fonts-2.0-1.fc27
bluez-tools-0.2.0-0.7.git20170912.7cb788c.fc27
bpython-0.17.1-1.fc27
caja-1.19.3-2.fc27
djvulibre-3.5.27-5.fc27
ejabberd-18.1.0-1.fc27
exim-4.90.1-1.fc27
fcitx-qt5-1.2.2-3.fc27
geary-0.12.1-1.fc27
glslang-3.1-0.6.20180205.git2651cca.fc27
glusterfs-3.12.6-1.fc27
golang-github-billziss-gh-cgofuse-1.0.4-1.fc27
hplip-3.17.11-8.fc27
iproute-4.15.0-1.fc27
kernel-4.15.3-300.fc27
krb5-1.15.2-7.fc27
libvirt-3.7.0-4.fc27
logstalgia-1.1.1-1.fc27
lxpanel-0.9.3-4.D20180109git2ddf8dfc.fc27
menulibre-2.1.5-1.fc27
mupdf-1.12.0-5.fc27
mypaint-1.2.1-11.fc27
novacom-server-1.1.0-0.21.rc1.fc27
openqa-4.5-5.20180207git3977d2f.fc27
os-autoinst-4.5-4.20180208gitab8eeda.fc27
owncloud-client-2.4.0-1.fc27
perl-Net-DNS-1.15-1.fc27
perl-Net-DNS-SEC-1.03_08-1.fc27
php-7.1.15~RC1-1.fc27
podman-0.2-2.git3d0100b.fc27
pwkickstart-1.0.2-1.fc27
python-Naked-0.1.31-3.fc27
python-cattrs-0.6.0-3.fc27
python-hglib-2.5-2.fc27
python-regex-2018.02.08-1.fc27
qesteidutil-3.12.10-1.fc27
qt-creator-4.5.1-1.fc27
rho-0.0.32-1.fc27
sane-backends-1.0.27-12.fc27
sblim-sfcb-1.4.9-9.fc27
smokeping-2.7.1-2.fc27
spirv-headers-1.2-0.4.20180201.gitce30920.fc27
spirv-tools-2018.1-0.2.20180205.git9e19fc0.fc27
standard-test-roles-2.8-1.fc27
strace-4.21-1.fc27
vulkan-1.0.68.0-2.fc27
wine-3.1-2.fc27
xorg-x11-server-1.19.6-5.fc27
Details about builds:
================================================================================
OCE-0.18.3-1.fc27 (FEDORA-2018-7116208a3d)
OpenCASCADE Community Edition
--------------------------------------------------------------------------------
Update Information:
Version 0.18.3 - February 2018 = This version is binary compatible with OCE
0.18.x * Fix some typos / some rephrasing in README * Update for vtk 8 *
Fixed osx issue with xlocale * Added missing Precision.hxx header * Added
missing header in Quantity_Color_1.hxx * Fixed MinGW issue in OSD_MemInfo.cxx
* travis-ci (gcc-5/6/7, osx images) and appveyor updates (Mingw)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1544990 - OCE-0.18.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1544990
--------------------------------------------------------------------------------
================================================================================
aftertheflood-sparks-fonts-2.0-1.fc27 (FEDORA-2018-bd6471dbac)
After the Flood Sparks, a font to display charts within text
--------------------------------------------------------------------------------
Update Information:
initial RPM release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1492475 - Review Request: aftertheflood-sparks-fonts - a font to display charts within text
https://bugzilla.redhat.com/show_bug.cgi?id=1492475
--------------------------------------------------------------------------------
================================================================================
bluez-tools-0.2.0-0.7.git20170912.7cb788c.fc27 (FEDORA-2018-19cec41cee)
A set of tools to manage Bluetooth devices for Linux
--------------------------------------------------------------------------------
Update Information:
- New snapshot
--------------------------------------------------------------------------------
================================================================================
bpython-0.17.1-1.fc27 (FEDORA-2018-8f07e59a4c)
Fancy curses interface to the Python interactive interpreter
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release bpython 0.17.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1544578 - bpython-0.17.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1544578
--------------------------------------------------------------------------------
================================================================================
caja-1.19.3-2.fc27 (FEDORA-2018-4c8c436d07)
File manager for MATE
--------------------------------------------------------------------------------
Update Information:
- fix emblem and backgrounds preferences UI
--------------------------------------------------------------------------------
================================================================================
djvulibre-3.5.27-5.fc27 (FEDORA-2018-d964753372)
DjVu viewers, encoders, and utilities
--------------------------------------------------------------------------------
Update Information:
This update fixes issue which prevented correct recognition of DjVu files. The
update has to be performed by rpm-4.14.1-1.fc27 or newer.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1513188 - multipage djvu files are misidentified
https://bugzilla.redhat.com/show_bug.cgi?id=1513188
--------------------------------------------------------------------------------
================================================================================
ejabberd-18.1.0-1.fc27 (FEDORA-2018-2ab8be7af1)
A distributed, fault-tolerant Jabber/XMPP server
--------------------------------------------------------------------------------
Update Information:
Update to 18.1.0, which only corrects build files from 18.01. User should not
notice a difference with that. Also, fix rhbz#1542927.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1542927 - ejabberd-18.01 needs erlang-os_mon but does not require its installation
https://bugzilla.redhat.com/show_bug.cgi?id=1542927
[ 2 ] Bug #1537324 - ejabberd-18.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1537324
--------------------------------------------------------------------------------
================================================================================
exim-4.90.1-1.fc27 (FEDORA-2018-c101bc4a93)
The exim mail transfer agent
--------------------------------------------------------------------------------
Update Information:
This is new version fixing CVE-2018-6789.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1543268 - CVE-2018-6789 exim: Buffer overflow in utility function, when pre-conditions are met, can lead to remote code execution
https://bugzilla.redhat.com/show_bug.cgi?id=1543268
--------------------------------------------------------------------------------
================================================================================
fcitx-qt5-1.2.2-3.fc27 (FEDORA-2018-dec2208224)
Fcitx IM module for Qt5
--------------------------------------------------------------------------------
Update Information:
Minor update for fcitx-qt5 and rebuilt for Qt 5.9.4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1544601 - Cannot upgrade qt5-qtbase because of fcitx-qt5
https://bugzilla.redhat.com/show_bug.cgi?id=1544601
--------------------------------------------------------------------------------
================================================================================
geary-0.12.1-1.fc27 (FEDORA-2018-ca7c367a52)
A lightweight email program designed around conversations
--------------------------------------------------------------------------------
Update Information:
#### Version 0.12.1 #### Released: 2018-02-13 Bug fixes included in this
release: * Parts of multipart/digest message do not expand when clicked upon.
Bug 788637. * Geary does not unlock keyring at start. Bug 784300. * Syntax error
in IMAP greeting from AliYun IMAP server. Bug 781488. * Message body text caret
(cursor) not initially visible. Bug 788797. * Losing focus when clicking in
empty part of the composer. Bug 779369. * Line breaks lost when selecting and
replying to certain messages. Bug 781178. * Always display an in-window app-menu
under Unity. Bug 770618. * Crash in SoupCacheInputStream when cancelling a
message load. Bug 778720. * Do not show Labels on sidebar if no label is
present. Bug 754802. * Unable to use Ctrl+C shortcut to copy e-mail subject;
must use context menu instead. Bug 788494. * After clicking on mailto link in
Geary, the body in the composer is not writable. Bug 771504. * Editing message
does not support RTL. Bug 713607.
--------------------------------------------------------------------------------
================================================================================
glslang-3.1-0.6.20180205.git2651cca.fc27 (FEDORA-2018-057ab90060)
OpenGL and OpenGL ES shader front end and validator
--------------------------------------------------------------------------------
Update Information:
vulkan-1.0.68.0 update
--------------------------------------------------------------------------------
================================================================================
glusterfs-3.12.6-1.fc27 (FEDORA-2018-03fdf95310)
Distributed File System
--------------------------------------------------------------------------------
Update Information:
3.12.6 GA
--------------------------------------------------------------------------------
================================================================================
golang-github-billziss-gh-cgofuse-1.0.4-1.fc27 (FEDORA-2017-b8e27293a2)
Cross-platform FUSE library for Go
--------------------------------------------------------------------------------
Update Information:
Upstream release 1.0.4
--------------------------------------------------------------------------------
================================================================================
hplip-3.17.11-8.fc27 (FEDORA-2018-9f748f5531)
HP Linux Imaging and Printing Project
--------------------------------------------------------------------------------
Update Information:
1544788 - HP ColorLaserjet MFP M278-M281 missing family-class
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1544788 - HP ColorLaserjet MFP M278-M281 missing family-class
https://bugzilla.redhat.com/show_bug.cgi?id=1544788
--------------------------------------------------------------------------------
================================================================================
iproute-4.15.0-1.fc27 (FEDORA-2018-b9f662dec5)
Advanced IP routing and network device configuration tools
--------------------------------------------------------------------------------
Update Information:
New version 4.15.0 to match kernel version.
--------------------------------------------------------------------------------
================================================================================
kernel-4.15.3-300.fc27 (FEDORA-2018-380eff4288)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.15.3 update contains a number of important fixes across the tree ----
Rebase to 4.15.2
--------------------------------------------------------------------------------
================================================================================
krb5-1.15.2-7.fc27 (FEDORA-2018-391a1f3e61)
The Kerberos network authentication system
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2018-5729, CVE-2018-5730. These are low-impact, requiring
administrator access to exploit. ---- Fix leak in previous version. ----
Always read config snippets in alphabetical order per-directory.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1535576 - CVE-2018-5729, CVE-2018-5730 krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1535576
[ 2 ] Bug #1540939 - krb5-libs are leaking memory when parsing krb5 configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1540939
--------------------------------------------------------------------------------
================================================================================
libvirt-3.7.0-4.fc27 (FEDORA-2018-b22d46eabb)
Library providing a simple virtualization API
--------------------------------------------------------------------------------
Update Information:
* CVE-2018-5748: resource exhaustion via qemuMonitorIORead() (bz #1535785) *
CVE-2018-6764: code injection via libvirt_lxc (bz #1542815) * Fix hotplug disk
failure (bz #1540872)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1528396 - CVE-2018-5748 Libvirt: resource exhaustion via qemuMonitorIORead() method
https://bugzilla.redhat.com/show_bug.cgi?id=1528396
[ 2 ] Bug #1541444 - CVE-2018-6764 libvirt: guest could inject executable code via libnss_dns.so loaded by libvirt_lxc before init
https://bugzilla.redhat.com/show_bug.cgi?id=1541444
--------------------------------------------------------------------------------
================================================================================
logstalgia-1.1.1-1.fc27 (FEDORA-2018-7feb3c4241)
Web server access log visualizer
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release logstalgia 1.1.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1544746 - logstalgia-1.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1544746
--------------------------------------------------------------------------------
================================================================================
lxpanel-0.9.3-4.D20180109git2ddf8dfc.fc27 (FEDORA-2018-1a17274733)
A lightweight X11 desktop panel
--------------------------------------------------------------------------------
Update Information:
Monitors plugin may crash when once cleaning up color entry, or copy / pasting
color value from somewhere else. This new rpm will fix such crash issue.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1544406 - [abrt] lxpanel: strncmp(): lxpanel killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1544406
--------------------------------------------------------------------------------
================================================================================
menulibre-2.1.5-1.fc27 (FEDORA-2018-97cee8baa1)
FreeDesktop.org compliant menu editor
--------------------------------------------------------------------------------
Update Information:
Update to upstream release 2.1.5
--------------------------------------------------------------------------------
================================================================================
mupdf-1.12.0-5.fc27 (FEDORA-2018-da6f76b446)
A lightweight PDF viewer and toolkit
--------------------------------------------------------------------------------
Update Information:
CVE-2018-6192 CVE-2018-6544 CVE-2018-1000051 CVE-2018-6187
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1539845 - CVE-2018-6192 mupdf: Segment violation in pdf_read_new_xref function in pdf/pdf-xref.c
https://bugzilla.redhat.com/show_bug.cgi?id=1539845
[ 2 ] Bug #1542264 - CVE-2018-6544 mupdf: denial of service (DoS) via a crafted PDF document
https://bugzilla.redhat.com/show_bug.cgi?id=1542264
[ 3 ] Bug #1544847 - CVE-2018-1000051 mupdf: use-after-free in fz_keep_key_storable function
https://bugzilla.redhat.com/show_bug.cgi?id=1544847
[ 4 ] Bug #1538432 - CVE-2018-6187 mupdf: heap-based buffer overflow in pdf/pdf-write.c:do_pdf_save_document()
https://bugzilla.redhat.com/show_bug.cgi?id=1538432
--------------------------------------------------------------------------------
================================================================================
mypaint-1.2.1-11.fc27 (FEDORA-2018-77293fd5f4)
A fast and easy graphics application for digital painters
--------------------------------------------------------------------------------
Update Information:
* Remove arch-dependent BuildRequires (fixes #1545198)
--------------------------------------------------------------------------------
================================================================================
novacom-server-1.1.0-0.21.rc1.fc27 (FEDORA-2018-6a04c73b2e)
Service for utility that connects to WebOS devices
--------------------------------------------------------------------------------
Update Information:
Clean up packaging bug that might cause problems with packaging tools
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1545200 - novacom-server is using arch-dependent BuildRequires
https://bugzilla.redhat.com/show_bug.cgi?id=1545200
--------------------------------------------------------------------------------
================================================================================
openqa-4.5-5.20180207git3977d2f.fc27 (FEDORA-2018-e6f1a6e171)
OS-level automated testing framework
--------------------------------------------------------------------------------
Update Information:
This update provides a recent git snapshot of both openQA and os-autoinst, with
various bug fixes and enhancements from upstream. The major change that affects
us is a [rewrite of the asset garbage collection code](https://github.com/os-
autoinst/openQA/commit/9e021e6b52ed279a523e5506d5b97a78a79dd6a3). The Fedora
staging instance is currently running this code; the production instance is on
the older packages still in F27 stable.
--------------------------------------------------------------------------------
================================================================================
os-autoinst-4.5-4.20180208gitab8eeda.fc27 (FEDORA-2018-e6f1a6e171)
OS-level test automation
--------------------------------------------------------------------------------
Update Information:
This update provides a recent git snapshot of both openQA and os-autoinst, with
various bug fixes and enhancements from upstream. The major change that affects
us is a [rewrite of the asset garbage collection code](https://github.com/os-
autoinst/openQA/commit/9e021e6b52ed279a523e5506d5b97a78a79dd6a3). The Fedora
staging instance is currently running this code; the production instance is on
the older packages still in F27 stable.
--------------------------------------------------------------------------------
================================================================================
owncloud-client-2.4.0-1.fc27 (FEDORA-2018-8307b72678)
The ownCloud Client
--------------------------------------------------------------------------------
Update Information:
2.4.0 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526657 - owncloud-client-2.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1526657
--------------------------------------------------------------------------------
================================================================================
perl-Net-DNS-1.15-1.fc27 (FEDORA-2018-2697615f0c)
DNS resolver modules for Perl
--------------------------------------------------------------------------------
Update Information:
Resolves rhbz#1544065 Update to 1.15 - Maintenance only
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1544065 - perl-Net-DNS-1.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1544065
--------------------------------------------------------------------------------
================================================================================
perl-Net-DNS-SEC-1.03_08-1.fc27 (FEDORA-2018-51c358383f)
DNSSEC modules for Perl
--------------------------------------------------------------------------------
Update Information:
Updated to 1.03_08 - rewrite to use custom code to support openssl-1.1
--------------------------------------------------------------------------------
================================================================================
php-7.1.15~RC1-1.fc27 (FEDORA-2018-fd711d678b)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
# ONLY FOR TESTS AND QA 7.1.15 is planed for March 1st **PHP version
7.1.15RC1** (15 Feb 2018) **Apache2Handler:** * Fixed bug php#75882 (a simple
way for segfaults in threadsafe php just with configuration). (Anatol)
**Date:** * Fixed bug php#75857 (Timezone gets truncated when formatted).
(carusogabriel) * Fixed bug php#75928 (Argument 2 for
`DateTimeZone::listIdentifiers()` should accept `null`). (Pedro Lacerda) * Fixed
bug php#68406 (calling var_dump on a DateTimeZone object modifies it). (jhdxr)
**PGSQL:** * Fixed php#75838 (Memory leak in pg_escape_bytea()). (ard_1 at mail
dot ru) **ODBC:** * Fixed bug php#73725 (Unable to retrieve value of
varchar(max) type). (Anatol) **LDAP:** * Fixed bug php#49876 (Fix LDAP path
lookup on 64-bit distros). (dzuelke) **libxml2:** * Fixed bug php#75871 (use
pkg-config where available). (pmmaga) **Phar:** * Fixed bug php#65414 (deal
with leading slash when adding files correctly). (bishopb) **SPL:** * Fixed
bug php#74519 (strange behavior of AppendIterator). (jhdxr) **Standard:** *
Fixed bug php#75916 (DNS_CAA record results contain garbage). (Mike, Philip
Sharp)
--------------------------------------------------------------------------------
================================================================================
podman-0.2-2.git3d0100b.fc27 (FEDORA-2018-23fa359f4c)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
alpha release ---- First alpha release. ---- Resolves: #1541554 - first
official build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1541554 - Review Request: podman - Manage Pods, Containers and Container Images
https://bugzilla.redhat.com/show_bug.cgi?id=1541554
--------------------------------------------------------------------------------
================================================================================
pwkickstart-1.0.2-1.fc27 (FEDORA-2018-fcd5fb27e1)
Helps to generate kickstart passwords
--------------------------------------------------------------------------------
Update Information:
Initial version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1543813 - Review Request: pwkickstart - generate kickstart passwords
https://bugzilla.redhat.com/show_bug.cgi?id=1543813
--------------------------------------------------------------------------------
================================================================================
python-Naked-0.1.31-3.fc27 (FEDORA-2018-91d06f2add)
A command line application framework
--------------------------------------------------------------------------------
Update Information:
Fixed Requires for python2/3 packages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1495293 - Review Request: python-Naked - A command line application framework
https://bugzilla.redhat.com/show_bug.cgi?id=1495293
--------------------------------------------------------------------------------
================================================================================
python-cattrs-0.6.0-3.fc27 (FEDORA-2018-bb6df012c9)
Python library for structuring and unstructuring data
--------------------------------------------------------------------------------
Update Information:
Python library for structuring and unstructuring data.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1537727 - Review Request: python-cattrs - Python library for structuring and unstructuring data
https://bugzilla.redhat.com/show_bug.cgi?id=1537727
--------------------------------------------------------------------------------
================================================================================
python-hglib-2.5-2.fc27 (FEDORA-2018-3b4a174563)
Mercurial Python library
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release python-hglib 2.5.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1541196 - python-hglib-2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1541196
--------------------------------------------------------------------------------
================================================================================
python-regex-2018.02.08-1.fc27 (FEDORA-2018-0c492dbf57)
Alternative regular expression module, to replace re
--------------------------------------------------------------------------------
Update Information:
Update to the latest released version.
--------------------------------------------------------------------------------
================================================================================
qesteidutil-3.12.10-1.fc27 (FEDORA-2018-54c7a5b01b)
Estonian ID card utility
--------------------------------------------------------------------------------
Update Information:
3.12 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1544723 - Update sandbox compilation patch
https://bugzilla.redhat.com/show_bug.cgi?id=1544723
[ 2 ] Bug #1519323 - Review request: qesteidutil - Estonian ID card utility
https://bugzilla.redhat.com/show_bug.cgi?id=1519323
--------------------------------------------------------------------------------
================================================================================
qt-creator-4.5.1-1.fc27 (FEDORA-2018-c7344af686)
Cross-platform IDE for Qt
--------------------------------------------------------------------------------
Update Information:
Update to version 4.5.1, see https://code.qt.io/cgit/qt-creator/qt-
creator.git/tree/dist/changes-4.5.1.md for details.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1541807 - Design mode not available for *.ui.qml files
https://bugzilla.redhat.com/show_bug.cgi?id=1541807
--------------------------------------------------------------------------------
================================================================================
rho-0.0.32-1.fc27 (FEDORA-2018-e17ef1a297)
An SSH system profiler
--------------------------------------------------------------------------------
Update Information:
# Testing Rho To set up Rho, you create profiles that control how to run each
scan. - Authentication profiles contain user credentials for a user with
sufficient authority to complete the scan (for example, a root user or one with
root-level access obtained through -sudo privilege escalation). - Network
profiles contain network identifiers (for example, a hostname, IP address, or
range of IP addresses) and the authentication profiles to be used for a scan.
Complete the following steps, repeating them as necessary to access all parts of
your environment that you want to scan: 1. Create at least one authentication
profile with root-level access to Rho: ``` rho auth add --name auth_name
--username root_name(--sshkeyfile key_file | --password) ``` a. At the Rho
vault password prompt, create a new Rho vault password. This password is
required to access the encrypted Rho data, such as authentication and network
profiles, scan data, and other information. b. If you did not use the
sshkeyfile option to provide an SSH key for the username value, enter the
password of the user with root-level access at the connection password prompt.
For example, for an authentication profile where the authentication profile name
is roothost1, the user with root-level access is root, and the SSH key for the
user is in the path ~/.ssh/id_rsa, you would enter the following command: ```
rho auth add --name roothost1 --username root --sshkeyfile ~/.ssh/id_rsa ``` You
can also use the sudo-password option to create an authentication profile for a
user with root-level access who requires a password to obtain this privilege.
You can use the sudo-password option with either the sshkeyfile or the password
option. For example, for an authentication profile where the authentication
profile name is sudouser1, the user with root-level access is sysadmin, and the
access is obtained through the password option, you would enter the following
command: ``` rho auth add --name sudouser1 --username sysadmin --password
--sudo-password ``` After you enter this command, you are prompted to enter two
passwords. First, you would enter the connection password for the username user,
and then you would enter the password for the sudo command. 2. Create at least
one network profile that specifies one or more network identifiers, such as a
host name, an IP address, a list of IP addresses, or an IP range, and one or
more authentication profiles to be used for the scan: ``` rho profile add --name
profile_name --hosts host_name_or_file --auth auth_name ``` For example, for a
network profile where the name of the network profile is mynetwork, the network
to be scanned is the 192.0.2.0/24 subnet, and the authentication profiles that
are used to run the scan are roothost1 and roothost2, you would enter the
following command: ``` rho profile add --name mynetwork --hosts 192.0.2.[1:254]
--auth roothost1 roothost2 ``` You can also use a file to pass in the network
identifiers. If you use a file to enter multiple network identifiers, such as
multiple individual IP addresses, enter each on a single line. For example, for
a network profile where the path to this file is /home/user1/hosts_file, you
would enter the following command: ``` rho profile add --name mynetwork --hosts
/home/user1/hosts_file --auth roothost1 roothost2 ``` # Running a scan Run the
scan by using the scan command, specifying a network profile for the profile
option and a location to store the output as a file in the comma-separated
variables (CSV) format for the reportfile option: ``` rho scan --profile
profile_name --reportfile filename.csv ``` For example, if you want to use the
network profile mynetwork and save the report as mynetwork_scan1.csv, you would
enter the following command: ``` rho scan --profile mynetwork --reportfile
mynetwork_scan1.csv ```
--------------------------------------------------------------------------------
================================================================================
sane-backends-1.0.27-12.fc27 (FEDORA-2018-2d4395ed65)
Scanner access software
--------------------------------------------------------------------------------
Update Information:
1540370 - Black vertical band in color and gray images with Canon LIDE 100
scanner
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1540370 - Black vertical band in color and gray images with Canon LIDE 100 scanner
https://bugzilla.redhat.com/show_bug.cgi?id=1540370
--------------------------------------------------------------------------------
================================================================================
sblim-sfcb-1.4.9-9.fc27 (FEDORA-2018-9d6a122887)
Small Footprint CIM Broker
--------------------------------------------------------------------------------
Update Information:
Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1543825 - CVE-2018-6644 sblim-sfcb: null pointer (DoS) vulnerability via POST request to /cimom
https://bugzilla.redhat.com/show_bug.cgi?id=1543825
--------------------------------------------------------------------------------
================================================================================
smokeping-2.7.1-2.fc27 (FEDORA-2018-7da58a68ef)
Latency Logging and Graphing System
--------------------------------------------------------------------------------
Update Information:
Update to smokeping 2.7.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1456408 - smokeping is too noisy for ipv6-only sites
https://bugzilla.redhat.com/show_bug.cgi?id=1456408
[ 2 ] Bug #1541585 - smokeping-2.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1541585
--------------------------------------------------------------------------------
================================================================================
spirv-headers-1.2-0.4.20180201.gitce30920.fc27 (FEDORA-2018-057ab90060)
Header files from the SPIR-V registry
--------------------------------------------------------------------------------
Update Information:
vulkan-1.0.68.0 update
--------------------------------------------------------------------------------
================================================================================
spirv-tools-2018.1-0.2.20180205.git9e19fc0.fc27 (FEDORA-2018-057ab90060)
API and commands for processing SPIR-V modules
--------------------------------------------------------------------------------
Update Information:
vulkan-1.0.68.0 update
--------------------------------------------------------------------------------
================================================================================
standard-test-roles-2.8-1.fc27 (FEDORA-2018-d7bdf506ff)
Standard Test Interface Ansible roles
--------------------------------------------------------------------------------
Update Information:
Update to 2.8 ---- Update to 2.7
--------------------------------------------------------------------------------
================================================================================
strace-4.21-1.fc27 (FEDORA-2018-010da6481f)
Tracks and displays system calls associated with a running process
--------------------------------------------------------------------------------
Update Information:
v4.20 -> v4.21.
--------------------------------------------------------------------------------
================================================================================
vulkan-1.0.68.0-2.fc27 (FEDORA-2018-057ab90060)
Vulkan loader and validation layers
--------------------------------------------------------------------------------
Update Information:
vulkan-1.0.68.0 update
--------------------------------------------------------------------------------
================================================================================
wine-3.1-2.fc27 (FEDORA-2018-0a41fdd8f0)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
WineHq.org 3.1 This release will disable Wine-Staging as the maintainer is no
longer producing updates. Please test all of your apps and report any changes.
--------------------------------------------------------------------------------
================================================================================
xorg-x11-server-1.19.6-5.fc27 (FEDORA-2018-f985e8e9e6)
X.Org X11 X server
--------------------------------------------------------------------------------
Update Information:
Fix for keymap not being applied initially in Xwayland, focus issue and missing
pointer with tablet on Xwayland, updated xfvb-run script
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1519961 - Wacom tablet in xwayland gets missing cursor, random focus
https://bugzilla.redhat.com/show_bug.cgi?id=1519961
--------------------------------------------------------------------------------
The following Fedora 27 Security updates need testing:
Age URL
41 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2d4c9a6e37 monit-5.25.1-1.fc27
13 https://bodhi.fedoraproject.org/updates/FEDORA-2018-be361f407a knot-resolver-1.5.3-1.fc27
8 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0ad6e73ac0 w3m-0.5.3-36.git20180125.fc27
5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7b1517bc6e tomcat-native-1.2.16-1.fc27
2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c612c6d92 python-django-1.11.10-1.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-969328b17c jhead-3.00-7.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9856876fc9 krb5-1.15.2-5.fc27
2 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c6489812c9 qt5-qtbase-5.9.4-3.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a107c32a16 evolution-ews-3.26.5-1.fc27 evolution-3.26.5-1.fc27 evolution-data-server-3.26.5-1.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3082496e05 pungi-4.1.22-2.fc27
The following builds have been pushed to Fedora 27 updates-testing
ca-certificates-2018.2.22-1.0.fc27
cacti-1.1.34-1.fc27
clang-5.0.1-2.fc27
cockpit-161-1.fc27
dbus-broker-10-1.fc27
dippi-2.5.3-1.fc27
eclipse-linuxtools-6.2.0-4.fc27
gap-pkg-congruence-1.2.2-1.fc27
gdb-8.0.1-36.fc27
gnome-documents-3.26.2-1.fc27
gnome-power-manager-3.26.0-1.fc27
gvfs-1.34.2-1.fc27
ibus-libzhuyin-1.8.3-1.fc27
impressive-0.11.3-1.fc27
java-1.8.0-openjdk-1.8.0.161-5.b14.fc27
js-jquery-datetimepicker-2.5.17-1.fc27
kernel-4.14.17-300.fc27
libgexiv2-0.10.8-1.fc27
libguestfs-1.37.37-1.fc27
lld-5.0.1-2.fc27
llvm-5.0.1-3.fc27
mbedtls-2.7.0-1.fc27
metamath-0.161-1.fc27
nkf-2.1.4-8.fc27
p7zip-16.02-10.fc27
pen-0.34.1-1.fc27
perl-5.26.1-403.fc27
perl-Sub-Quote-2.005000-1.fc27
php-cs-fixer-2.10.2-1.fc27
php-gecko-packages-gecko-php-unit3-3.1.1-1.fc27
php-phpmailer6-6.0.3-1.fc27
php-phpunit-PHP-TokenStream-1.4.12-1.fc27
php-phpunit-mock-objects5-5.0.6-3.fc27
php-phpunit-php-token-stream2-2.0.2-1.fc27
phpunit6-6.5.6-2.fc27
podman-0-0.3.git367213a.fc27
python-ipyparallel-6.1.0-1.fc27
python-kiwisolver-1.0.1-1.fc27
qt5-qtenginio-1.6.2-12.fc27
qt5-qtremoteobjects-5.9.4-2.fc27
qt5-qtwayland-5.9.4-2.fc27
qt5-qtwebchannel-5.9.4-2.fc27
ravada-0.2.13-0.1.20180117gitf70dfbf.fc27
redis-4.0.8-1.fc27
rubygem-nokogiri-1.8.2-1.fc27
rygel-0.36.1-1.fc27
seqan2-2.4.0-1.fc27
sox-14.4.2.0-17.fc27
twitter-twemoji-fonts-2.4.0-1.fc27
wordpress-4.9.4-1.fc27
Details about builds:
================================================================================
ca-certificates-2018.2.22-1.0.fc27 (FEDORA-2018-a0d72435aa)
The Mozilla CA root certificate bundle
--------------------------------------------------------------------------------
Update Information:
This is an update to Mozilla's CA certificates list version 2.22, which has been
published as part of Mozilla NSS 3.35. For additional details, please refer to
the NSS 3.35 release notes: https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.35_release_notes
--------------------------------------------------------------------------------
================================================================================
cacti-1.1.34-1.fc27 (FEDORA-2018-cda27e0c50)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.34 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.34
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1542269 - cacti-1.1.34 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1542269
--------------------------------------------------------------------------------
================================================================================
clang-5.0.1-2.fc27 (FEDORA-2018-c06a504fa7)
A C language family front-end for LLVM
--------------------------------------------------------------------------------
Update Information:
Backport retpoline support
--------------------------------------------------------------------------------
================================================================================
cockpit-161-1.fc27 (FEDORA-2018-771502c81f)
A user interface for Linux servers
--------------------------------------------------------------------------------
Update Information:
- New VMs can be created on Machines page - VMs running in Kubernetes can now be
deleted - Improve LVM volume resizing - Add new Hardware Information page - Load
Application metadata (Appstream) packages on demand on Debian/Ubuntu - Rename
cockpit-ovirt package to cockpit-machines-ovirt - Stop advertising and
supporting cockpit-bundled jQuery library
--------------------------------------------------------------------------------
================================================================================
dbus-broker-10-1.fc27 (FEDORA-2018-b13807f0b4)
Linux D-Bus Message Broker
--------------------------------------------------------------------------------
Update Information:
Bugfixes and performance enhancements
--------------------------------------------------------------------------------
================================================================================
dippi-2.5.3-1.fc27 (FEDORA-2018-26893cbca1)
Calculate display info like DPI and aspect ratio
--------------------------------------------------------------------------------
Update Information:
Update to version 2.5.3.
--------------------------------------------------------------------------------
================================================================================
eclipse-linuxtools-6.2.0-4.fc27 (FEDORA-2018-b22fcffc88)
Linux specific Eclipse plugins
--------------------------------------------------------------------------------
Update Information:
Fixes problem with Copying files from a Docker container
--------------------------------------------------------------------------------
================================================================================
gap-pkg-congruence-1.2.2-1.fc27 (FEDORA-2018-77c065f281)
Congruence subgroups of SL(2,Integers)
--------------------------------------------------------------------------------
Update Information:
This update fixes some broken documentation and also makes improvements to the
test framework.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1542762 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1542762
--------------------------------------------------------------------------------
================================================================================
gdb-8.0.1-36.fc27 (FEDORA-2018-49f987d39d)
A stub package for GNU source-level debugger
--------------------------------------------------------------------------------
Update Information:
Fix signal handlers regression (RH BZ 1542149, Pedro Alves).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1542149 - [abrt] gdb-headless: internal_vproblem(internal_problem *, const char *, int, const char *, typedef __va_list_tag __va_list_tag *)(): gdb killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1542149
--------------------------------------------------------------------------------
================================================================================
gnome-documents-3.26.2-1.fc27 (FEDORA-2018-e0b4b0b8c3)
A document manager application for GNOME
--------------------------------------------------------------------------------
Update Information:
gnome-documents 3.26.2 release, with bug fixes and translation updates. For
details, see https://mail.gnome.org/archives/ftp-release-
list/2018-February/msg00000.html
--------------------------------------------------------------------------------
================================================================================
gnome-power-manager-3.26.0-1.fc27 (FEDORA-2018-a210e98afa)
GNOME power management service
--------------------------------------------------------------------------------
Update Information:
gnome-power-manager 3.26.0 release.
--------------------------------------------------------------------------------
================================================================================
gvfs-1.34.2-1.fc27 (FEDORA-2018-e5198a7779)
Backends for the gio framework in GLib
--------------------------------------------------------------------------------
Update Information:
Update to 1.34.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1492278 - [abrt] gvfs: g_vfs_monitor_emit_event(): gvfsd-recent killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1492278
--------------------------------------------------------------------------------
================================================================================
ibus-libzhuyin-1.8.3-1.fc27 (FEDORA-2018-0f2c9624fb)
New Zhuyin engine based on libzhuyin for IBus
--------------------------------------------------------------------------------
Update Information:
translate input method name in ibus menu
--------------------------------------------------------------------------------
================================================================================
impressive-0.11.3-1.fc27 (FEDORA-2018-169cb946bd)
A program that displays presentation slides
--------------------------------------------------------------------------------
Update Information:
upstream bugfix release
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-1.8.0.161-5.b14.fc27 (FEDORA-2018-8029f4006f)
OpenJDK Runtime Environment
--------------------------------------------------------------------------------
Update Information:
fix needed for FTBFS bug on aarch64 and 1541973
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1540242 - [gcc 8] java-1.8.0-openjdk FTBFS in rawhide on aarch64 and armv7hl
https://bugzilla.redhat.com/show_bug.cgi?id=1540242
[ 2 ] Bug #1541973 - IncompatibleClassChangeError on aarch64 on f27
https://bugzilla.redhat.com/show_bug.cgi?id=1541973
--------------------------------------------------------------------------------
================================================================================
js-jquery-datetimepicker-2.5.17-1.fc27 (FEDORA-2018-161d041532)
jQuery Plugin Date and Time Picker
--------------------------------------------------------------------------------
Update Information:
Update to 2.5.17.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1504318 - js-jquery-datetimepicker-2.5.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504318
--------------------------------------------------------------------------------
================================================================================
kernel-4.14.17-300.fc27 (FEDORA-2018-58415dcb6d)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.14.17 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
================================================================================
libgexiv2-0.10.8-1.fc27 (FEDORA-2018-7b1dbb1fe0)
Gexiv2 is a GObject-based wrapper around the Exiv2 library
--------------------------------------------------------------------------------
Update Information:
gexiv 0.10.8 release with bug fixes. * Fallback to AperturValue if FNumber is
absent * Fix GIR header and vapi when using meson
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.37.37-1.fc27 (FEDORA-2018-2192b34513)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.37.37. ---- New upstream version 1.37.36.
--------------------------------------------------------------------------------
================================================================================
lld-5.0.1-2.fc27 (FEDORA-2018-c06a504fa7)
The LLVM Linker
--------------------------------------------------------------------------------
Update Information:
Backport retpoline support
--------------------------------------------------------------------------------
================================================================================
llvm-5.0.1-3.fc27 (FEDORA-2018-c06a504fa7)
The Low Level Virtual Machine
--------------------------------------------------------------------------------
Update Information:
Backport retpoline support
--------------------------------------------------------------------------------
================================================================================
mbedtls-2.7.0-1.fc27 (FEDORA-2018-eb58dc8a6f)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
- Update to 2.7.0 Release notes: https://tls.mbed.org/tech-
updates/releases/mbedtls-2.7.0-2.1.10-and-1.3.22-released Security Advisory:
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-
advisory-2018-01
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1533435 - Please enable pthread support for mbedtls
https://bugzilla.redhat.com/show_bug.cgi?id=1533435
--------------------------------------------------------------------------------
================================================================================
metamath-0.161-1.fc27 (FEDORA-2018-2333182e9d)
Construct mathematics from basic axioms
--------------------------------------------------------------------------------
Update Information:
This update contains some small changes to set.mm and fixes for some incorrect
diagnostic messages.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1541620 - metamath-0.161 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1541620
--------------------------------------------------------------------------------
================================================================================
nkf-2.1.4-8.fc27 (FEDORA-2018-01805481e7)
A Kanji code conversion filter
--------------------------------------------------------------------------------
Update Information:
Fix a manpage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1539528 - Broken perldocs for perl-NKF
https://bugzilla.redhat.com/show_bug.cgi?id=1539528
--------------------------------------------------------------------------------
================================================================================
p7zip-16.02-10.fc27 (FEDORA-2018-29232aa760)
Very high compression ratio file archiver
--------------------------------------------------------------------------------
Update Information:
Improved security patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1538459 - CVE-2017-17969 p7zip: heap-based buffer overflow in 7zip/Compress/ShrinkDecoder.cpp can allow an attacker to write arbitrary data and cause a crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1538459
--------------------------------------------------------------------------------
================================================================================
pen-0.34.1-1.fc27 (FEDORA-2018-b238929122)
Load balancer for "simple" tcp based protocols such as http or smtp
--------------------------------------------------------------------------------
Update Information:
new version
--------------------------------------------------------------------------------
================================================================================
perl-5.26.1-403.fc27 (FEDORA-2018-c46fa8e392)
Practical Extraction and Report Language
--------------------------------------------------------------------------------
Update Information:
This release links all XS modules to pthread library to ensure proper symbol
resolution. It also fixes parsing braced subscript after parentheses and a heap
use after free when moving a stack. It also corrects interpreter specification
in tests collected into perl-tests subpackage.
--------------------------------------------------------------------------------
================================================================================
perl-Sub-Quote-2.005000-1.fc27 (FEDORA-2018-b51a128c50)
Efficient generation of subroutines via string eval
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1542771 - perl-Sub-Quote-2.005000 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1542771
--------------------------------------------------------------------------------
================================================================================
php-cs-fixer-2.10.2-1.fc27 (FEDORA-2018-63e2708681)
A tool to automatically fix PHP code style
--------------------------------------------------------------------------------
Update Information:
**Changelog for v2.10.2** * bug #3502 Fix missing file in export (keradus)
---- **Changelog for v2.10.1** * bug #3265 YodaFixer - fix problems of block
statements followed by ternary statements (weareoutman, keradus, SpacePossum) *
bug #3367 NoUnusedImportsFixer - fix comment handling (SpacePossum, keradus) *
bug #3438 PhpUnitTestAnnotationFixer: Do not prepend with test if method is
test() (localheinz, SpacePossum) * bug #3455 NoEmptyCommentFixer - comment block
detection for line ending different than LF (kubawerlos, SpacePossum) * bug
#3458 SilencedDeprecationErrorFixer - fix edge cases (kubawerlos) * bug #3466
no_whitespace_in_blank_line and no_blank_lines_after_phpdoc fixers bug
(kubawerlos, keradus) * bug #3472 YodaStyleFixer - do not un-Yoda if right side
is assignment (SpacePossum, keradus) * bug #3492 PhpdocScalarFixer - Add
callback pesudo-type to callable type (carusogabriel) * minor #3354 Added
missing types to the PhpdocTypesFixer (GrahamCampbell) * minor #3406 Fix for
escaping in README (kubawerlos) * minor #3430 Fix integration test (SpacePossum)
* minor #3431 Add missing tests (SpacePossum) * minor #3440 Add a handful of
integration tests (BackEndTea) * minor #3443 ConfigurableFixerInterface - not
deprecated but TODO (SpacePossum) * minor #3444 IntegrationTest - ensure tests
in priority dir are priority tests indeed (keradus) * minor #3494 Add missing
PHPDoc param type (ntzm) * minor #3495 Swap @var type and element (ntzm) * minor
#3498 NoUnusedImportsFixer - fix deprecation (keradus)
--------------------------------------------------------------------------------
================================================================================
php-gecko-packages-gecko-php-unit3-3.1.1-1.fc27 (FEDORA-2018-65feba0684)
Additional PHPUnit asserts and constraints
--------------------------------------------------------------------------------
Update Information:
Provides additional asserts to be used in PHPUnit tests. The asserts are
provided using Traits so no changes are needed in the hierarchy of test classes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1509119 - Review Request: php-gecko-packages-gecko-php-unit3 - Additional PHPUnit asserts and constraints
https://bugzilla.redhat.com/show_bug.cgi?id=1509119
--------------------------------------------------------------------------------
================================================================================
php-phpmailer6-6.0.3-1.fc27 (FEDORA-2018-723d9c742c)
Full-featured email creation and transfer class for PHP
--------------------------------------------------------------------------------
Update Information:
PHPMailer - A full-featured email creation and transfer class for PHP Class
Features * Probably the world's most popular code for sending email from PHP! *
Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii,
Joomla! and many more * Integrated SMTP support - send without a local mail
server * Send emails with multiple To, CC, BCC and Reply-to addresses *
Multipart/alternative emails for mail clients that do not read HTML email * Add
attachments, including inline * Support for UTF-8 content and 8bit, base64,
binary, and quoted-printable encodings * SMTP authentication with LOGIN,
PLAIN, CRAM-MD5 and XOAUTH2 mechanisms over SSL and SMTP+STARTTLS transports *
Validates email addresses automatically * Protect against header injection
attacks * Error messages in 47 languages! * DKIM and S/MIME signing support *
Compatible with PHP 5.5 and later * Namespaced to prevent name clashes * Much
more!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1513669 - Review Request: php-phpmailer6 - Full-featured email creation and transfer class for PHP
https://bugzilla.redhat.com/show_bug.cgi?id=1513669
--------------------------------------------------------------------------------
================================================================================
php-phpunit-PHP-TokenStream-1.4.12-1.fc27 (FEDORA-2018-96c0ff19a5)
Wrapper around PHP tokenizer extension
--------------------------------------------------------------------------------
Update Information:
Wrapper around PHP tokenizer extension.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1509856 - Review Request: php-phpunit-php-token-stream2 - Wrapper around PHP tokenizer extension
https://bugzilla.redhat.com/show_bug.cgi?id=1509856
--------------------------------------------------------------------------------
================================================================================
php-phpunit-mock-objects5-5.0.6-3.fc27 (FEDORA-2018-5bba96e2fb)
Mock Object library for PHPUnit
--------------------------------------------------------------------------------
Update Information:
Mock Object library for PHPUnit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1519719 - Review Request: php-phpunit-mock-objects5 - Mock Object library for PHPUnit
https://bugzilla.redhat.com/show_bug.cgi?id=1519719
--------------------------------------------------------------------------------
================================================================================
php-phpunit-php-token-stream2-2.0.2-1.fc27 (FEDORA-2018-96c0ff19a5)
Wrapper around PHP tokenizer extension
--------------------------------------------------------------------------------
Update Information:
Wrapper around PHP tokenizer extension.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1509856 - Review Request: php-phpunit-php-token-stream2 - Wrapper around PHP tokenizer extension
https://bugzilla.redhat.com/show_bug.cgi?id=1509856
--------------------------------------------------------------------------------
================================================================================
phpunit6-6.5.6-2.fc27 (FEDORA-2018-d394aca1de)
The PHP Unit Testing framework
--------------------------------------------------------------------------------
Update Information:
**Version 6.5.6** - 2018-02-01 * **Fixed** * Fixed
[#2236](https://github.com/sebastianbergmann/phpunit/issues/2236): Exceptions in
`tearDown()` do not affect `getStatus()` * Fixed
[#2950](https://github.com/sebastianbergmann/phpunit/issues/2950): Class
extending `PHPUnit\Framework\TestSuite` does not extend
`PHPUnit\FrameworkTestCase` * Fixed
[#2972](https://github.com/sebastianbergmann/phpunit/issues/2972): PHPUnit
crashes when test suite contains both `.phpt` files and unconventionally named
tests ---- **Version 6.5.5** - 2017-12-17 * **Fixed** * Fixed
[#2922](https://github.com/sebastianbergmann/phpunit/issues/2922): Test class is
not discovered when there is a test class with `@group` and provider throwing
exception in it, tests are run with `--exclude-group` for that group, there is
another class called later (after the class from above), and the name of that
another class does not match its filename ---- **Version 6.5.4** - 2017-12-10
* **Changed** * Require version 5.0.5 of `phpunit/phpunit-mock-objects` for
[phpunit-mock-objects#394](https://github.com/sebastianbergmann/phpunit-mock-
objects/issues/394) ---- **Version 6.5.3** - 2017-12-06 * **Fixed** *
Fixed an issue with PHPT tests when `forceCoversAnnotation="true"` is configured
---- **Version 6.5.2** - 2017-12-02 * **Changed** * Require version 5.0.4
of `phpunit/phpunit-mock-objects` for [phpunit-mock-
objects#388](https://github.com/sebastianbergmann/phpunit-mock-
objects/issues/388) ---- **Version 6.5.1** - 2017-12-01 * **Fixed** *
Fixed [#2886](https://github.com/sebastianbergmann/phpunit/pull/2886): Forced
environment variables do not affect `getenv()` ---- **Version 6.5.0** -
2017-12-01 * **Added** * Implemented
[#2286](https://github.com/sebastianbergmann/phpunit/issues/2286): Optional
`$exit` parameter for `PHPUnit\TextUI\TestRunner::run()` * Implemented
[#2496](https://github.com/sebastianbergmann/phpunit/issues/2496): Allow shallow
copy of dependencies * **Fixed** * Fixed
[#2654](https://github.com/sebastianbergmann/phpunit/issues/2654): Problems with
`assertJsonStringEqualsJsonString()` * Fixed
[#2810](https://github.com/sebastianbergmann/phpunit/pull/2810): Code Coverage
for PHPT tests does not work
--------------------------------------------------------------------------------
================================================================================
podman-0-0.3.git367213a.fc27 (FEDORA-2018-665045691d)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
Resolves: #1541554 - first official build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1541554 - Review Request: podman - Manage Pods, Containers and Container Images
https://bugzilla.redhat.com/show_bug.cgi?id=1541554
--------------------------------------------------------------------------------
================================================================================
python-ipyparallel-6.1.0-1.fc27 (FEDORA-2018-80e65c5d97)
Interactive Parallel Computing with IPython
--------------------------------------------------------------------------------
Update Information:
6.1.0 ----- Compatibility fixes with related packages: - Fix compatibility
with pyzmq 17 and tornado 5. - Fix compatibility with IPython ��� 6. - Improve
compatibility with dask.distributed ��� 1.18. New features: - Add
:attr:`namespace` to BatchSpawners for easier extensibility. - Support
serializing partial functions. - Support hostnames for machine location, not
just ip addresses. - Add ``--location`` argument to ipcluster for setting the
controller location. It can be a hostname or ip. - Engine rank matches MPI
rank if engines are started with ``--mpi``. - Avoid duplicate pickling of the
same object in maps, etc.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1542025 - python-ipyparallel-6.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1542025
--------------------------------------------------------------------------------
================================================================================
python-kiwisolver-1.0.1-1.fc27 (FEDORA-2018-92155e9316)
A fast implementation of the Cassowary constraint solver
--------------------------------------------------------------------------------
Update Information:
Initial package of kiwisolver for Python.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1541587 - Review Request: python-kiwisolver - A fast implementation of the Cassowary constraint solver
https://bugzilla.redhat.com/show_bug.cgi?id=1541587
--------------------------------------------------------------------------------
================================================================================
qt5-qtenginio-1.6.2-12.fc27 (FEDORA-2018-f31e80240c)
Qt5 - Enginio component
--------------------------------------------------------------------------------
Update Information:
Tighten dependency on core qt5-qtbase due to private api usage.
--------------------------------------------------------------------------------
================================================================================
qt5-qtremoteobjects-5.9.4-2.fc27 (FEDORA-2018-83331fa52b)
Qt5 - Qt Remote Objects
--------------------------------------------------------------------------------
Update Information:
Tighten dependency on core qt5-qtbase due to private api usage.
--------------------------------------------------------------------------------
================================================================================
qt5-qtwayland-5.9.4-2.fc27 (FEDORA-2018-d802f27b0b)
Qt5 - Wayland platform support and QtCompositor module
--------------------------------------------------------------------------------
Update Information:
Fixes crash of plasmashell when moving panel on wayland.
--------------------------------------------------------------------------------
================================================================================
qt5-qtwebchannel-5.9.4-2.fc27 (FEDORA-2018-556a03002d)
Qt5 - WebChannel component
--------------------------------------------------------------------------------
Update Information:
Add a versioned dependency to qt5-qtbase due to private api usage.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1542580 - qt5-qtwebchannel 5.9.4 needs dependency on qt5-qtbase = 5.9.4
https://bugzilla.redhat.com/show_bug.cgi?id=1542580
--------------------------------------------------------------------------------
================================================================================
ravada-0.2.13-0.1.20180117gitf70dfbf.fc27 (FEDORA-2018-b84388d863)
Remote Virtual Desktops Manager
--------------------------------------------------------------------------------
Update Information:
Pre-release 0.2.13
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1535207 - Review Request: ravada - Remote Virtual Desktops Manager
https://bugzilla.redhat.com/show_bug.cgi?id=1535207
--------------------------------------------------------------------------------
================================================================================
redis-4.0.8-1.fc27 (FEDORA-2018-f334c73f1e)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
Upstream 4.0.8 release. ---- Upstream 4.0.7 release.
--------------------------------------------------------------------------------
================================================================================
rubygem-nokogiri-1.8.2-1.fc27 (FEDORA-2018-b1b647e6cb)
An HTML, XML, SAX, and Reader parser
--------------------------------------------------------------------------------
Update Information:
New version 1.8.2 is released.
--------------------------------------------------------------------------------
================================================================================
rygel-0.36.1-1.fc27 (FEDORA-2018-ce71442eac)
A collection of UPnP/DLNA services
--------------------------------------------------------------------------------
Update Information:
rygel 0.36.1 release with bug fixes and translation updates. For details, see
https://mail.gnome.org/archives/ftp-release-list/2018-February/msg00031.html
--------------------------------------------------------------------------------
================================================================================
seqan2-2.4.0-1.fc27 (FEDORA-2018-5e8bbb4cc8)
C++ library of efficient algorithms and data structures
--------------------------------------------------------------------------------
Update Information:
- Update to 2.4.0
--------------------------------------------------------------------------------
================================================================================
sox-14.4.2.0-17.fc27 (FEDORA-2018-3e1f32967c)
A general purpose sound file conversion tool
--------------------------------------------------------------------------------
Update Information:
*SOX_PLUGINS* environment variable, added in *sox-14.4.2.0-16* to allow
overriding standard *sox* path to plugins for the test purposes, is no longer
exposed to user.
--------------------------------------------------------------------------------
================================================================================
twitter-twemoji-fonts-2.4.0-1.fc27 (FEDORA-2018-86ff582bf9)
Twitter Emoji for everyone
--------------------------------------------------------------------------------
Update Information:
A color emoji font with a flat visual style, designed and used by Twitter.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514274 - Review Request: twitter-twemoji-fonts - Twitter Emoji for everyone
https://bugzilla.redhat.com/show_bug.cgi?id=1514274
--------------------------------------------------------------------------------
================================================================================
wordpress-4.9.4-1.fc27 (FEDORA-2018-d39f590032)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
Upstream announcements: * [WordPress 4.9.4 Maintenance
Release](https://wordpress.org/news/2018/02/wordpress-4-9-4-maintenance-
release/) * [WordPress 4.9.3 Maintenance
Release](https://wordpress.org/news/2018/02/wordpress-4-9-3-maintenance-
release/)
--------------------------------------------------------------------------------
Bug 1524700 - AttributeError: 'NoneType' object has no attribute 'name' (edit)
https://bugzilla.redhat.com/show_bug.cgi?id=1524700
This is still a bug in
Fedora-Workstation-Live-x86_64-Rawhide-20180204.n.0.iso, and every ISO
I've tested for over a month; and this bug was filed back in December.
Near as I can tell, no one's been able to do live installations of
Rawhide in about two months. I can reproduce it in a clean
virt-manager VM, and on baremetal.
Does this bug need info to get it fixed? I'm unclear what the hold up is.
Thanks,
--
Chris Murphy
The following Fedora 27 Security updates need testing:
Age URL
40 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2d4c9a6e37 monit-5.25.1-1.fc27
12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-be361f407a knot-resolver-1.5.3-1.fc27
7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0ad6e73ac0 w3m-0.5.3-36.git20180125.fc27
7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-5b2e981f14 mujs-0-11.20180129git25821e6.fc27
4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7b1517bc6e tomcat-native-1.2.16-1.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c612c6d92 python-django-1.11.10-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fbcc83aa97 grub2-2.02-22.fc27
10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cda38a39cf libguestfs-1.37.36-1.fc27
6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-9856876fc9 krb5-1.15.2-5.fc27
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c6489812c9 qt5-qtbase-5.9.4-3.fc27
0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3082496e05 pungi-4.1.22-2.fc27
The following builds have been pushed to Fedora 27 updates-testing
adapta-gtk-theme-3.93.0.110-1.fc27
buildah-0.11-2.git6bad262.fc27
clover2-3.5.6-2.20180202git93d24a6.fc27
dd_rescue-1.99.8-1.fc27
dogtag-pki-10.5.5-1.fc27
dogtag-pki-theme-10.5.5-1.fc27
evolution-3.26.5-1.fc27
evolution-data-server-3.26.5-1.fc27
evolution-ews-3.26.5-1.fc27
ipvsadm-1.29-5.fc27
ixpdimm_sw-01.00.00.2422-1.fc27
jhead-3.00-7.fc27
magic-8.2.46-1.fc27
mysql-connector-odbc-5.3.10-1.fc27
perl-Gearman-2.004.0013-1.fc27
pki-console-10.5.5-1.fc27
pki-core-10.5.5-1.fc27
pysvn-1.9.5-1.fc27
shotwell-0.27.4-1.fc27
xorg-x11-server-1.19.6-3.fc27
xrootd-4.8.1-1.fc27
yara-3.7.1-1.fc27
Details about builds:
================================================================================
adapta-gtk-theme-3.93.0.110-1.fc27 (FEDORA-2018-2fd9e8c50f)
An adaptive Gtk+ theme based on Material Design Guidelines
--------------------------------------------------------------------------------
Update Information:
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1537086 - adapta-gtk-theme-3.93.0.86 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1537086
[ 2 ] Bug #1539334 - adapta-gtk-theme-3.93.0.90 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1539334
[ 3 ] Bug #1540388 - adapta-gtk-theme-3.93.0.103 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1540388
[ 4 ] Bug #1542020 - adapta-gtk-theme-3.93.0.110 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1542020
--------------------------------------------------------------------------------
================================================================================
buildah-0.11-2.git6bad262.fc27 (FEDORA-2018-8da0be041c)
A command line tool used for creating OCI Images
--------------------------------------------------------------------------------
Update Information:
Resolves: upstream gh#432
--------------------------------------------------------------------------------
================================================================================
clover2-3.5.6-2.20180202git93d24a6.fc27 (FEDORA-2018-32bad0e063)
Yet another compiler language
--------------------------------------------------------------------------------
Update Information:
This is a new package.
--------------------------------------------------------------------------------
================================================================================
dd_rescue-1.99.8-1.fc27 (FEDORA-2018-5c92223518)
Fault tolerant "dd" utility for rescuing data from bad media
--------------------------------------------------------------------------------
Update Information:
bump to bug-fix release 1.99.8
--------------------------------------------------------------------------------
================================================================================
dogtag-pki-10.5.5-1.fc27 (FEDORA-2018-db33953ebd)
Dogtag Public Key Infrastructure (PKI) Suite
--------------------------------------------------------------------------------
Update Information:
Re-base Dogtag to 10.5.5 ---- Re-base Dogtag to 10.5.4 ---- Re-base Dogtag
to 10.5.3 ---- Re-base Dogtag to 10.5.2
--------------------------------------------------------------------------------
================================================================================
dogtag-pki-theme-10.5.5-1.fc27 (FEDORA-2018-d254717094)
Certificate System - Dogtag PKI Theme Components
--------------------------------------------------------------------------------
Update Information:
Re-base Dogtag to 10.5.5 ---- Re-base Dogtag to 10.5.4 ---- Re-base Dogtag
to 10.5.3 ---- Re-base Dogtag to 10.5.2
--------------------------------------------------------------------------------
================================================================================
evolution-3.26.5-1.fc27 (FEDORA-2018-a107c32a16)
Mail and calendar client for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 3.26.5 upstream release.
--------------------------------------------------------------------------------
================================================================================
evolution-data-server-3.26.5-1.fc27 (FEDORA-2018-a107c32a16)
Backend data server for Evolution
--------------------------------------------------------------------------------
Update Information:
Update to 3.26.5 upstream release.
--------------------------------------------------------------------------------
================================================================================
evolution-ews-3.26.5-1.fc27 (FEDORA-2018-a107c32a16)
Evolution extension for Exchange Web Services
--------------------------------------------------------------------------------
Update Information:
Update to 3.26.5 upstream release.
--------------------------------------------------------------------------------
================================================================================
ipvsadm-1.29-5.fc27 (FEDORA-2018-95befc20d6)
Utility to administer the Linux Virtual Server
--------------------------------------------------------------------------------
Update Information:
Catch the original errno from netlink answer in order to report correct error
messages.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526813 - ipsvadm reports wrong error messages
https://bugzilla.redhat.com/show_bug.cgi?id=1526813
--------------------------------------------------------------------------------
================================================================================
ixpdimm_sw-01.00.00.2422-1.fc27 (FEDORA-2018-a0c41fa789)
API for development of IXPDIMM management utilities
--------------------------------------------------------------------------------
Update Information:
Release v01.00.00.2422
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1540768 - ixpdimm_sw-01.00.00.2420 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1540768
--------------------------------------------------------------------------------
================================================================================
jhead-3.00-7.fc27 (FEDORA-2018-969328b17c)
Tool for displaying EXIF data embedded in JPEG images
--------------------------------------------------------------------------------
Update Information:
Added Debian patch to fix CVE-2018-6612 (#1542049)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1542049 - CVE-2018-6612 jhead: Integer underflow in the process_EXIF function
https://bugzilla.redhat.com/show_bug.cgi?id=1542049
--------------------------------------------------------------------------------
================================================================================
magic-8.2.46-1.fc27 (FEDORA-2018-6db17b800b)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.2.46 is released.
--------------------------------------------------------------------------------
================================================================================
mysql-connector-odbc-5.3.10-1.fc27 (FEDORA-2018-c394e12807)
ODBC driver for MySQL
--------------------------------------------------------------------------------
Update Information:
**Bugs fixed:** Linked against dynamic library again.
https://bugs.mysql.com/bug.php?id=82202 **Release notes:**
https://dev.mysql.com/doc/relnotes/connector-odbc/en/news-5-3-10.html
--------------------------------------------------------------------------------
================================================================================
perl-Gearman-2.004.0013-1.fc27 (FEDORA-2018-07f9a538d4)
Perl interface for Gearman distributed job system
--------------------------------------------------------------------------------
Update Information:
This release restores compatibility with Gearman::Client::Async Perl module.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1540220 - perl-Gearman-Client-Async-0.94-28.fc28 FTBFS: Timeout, test fails at t/allinone.t line 62.
https://bugzilla.redhat.com/show_bug.cgi?id=1540220
[ 2 ] Bug #1542279 - perl-Gearman-2.004.0013 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1542279
--------------------------------------------------------------------------------
================================================================================
pki-console-10.5.5-1.fc27 (FEDORA-2018-fffd6d53c5)
Certificate System - PKI Console
--------------------------------------------------------------------------------
Update Information:
Re-base Dogtag to 10.5.5 ---- Re-base Dogtag to 10.5.4 ---- Resolves:
dogtagpki Pagure Issue #2862 ---- Re-base Dogtag to 10.5.2
--------------------------------------------------------------------------------
================================================================================
pki-core-10.5.5-1.fc27 (FEDORA-2018-ebc2ff209f)
Certificate System - PKI Core Components
--------------------------------------------------------------------------------
Update Information:
Resolves: dogtagpki Pagure Issue
#2656,2838,2844,2855,2878,2880,2889,2901,2909,2916,2920,2921 ---- dogtagpki
Pagure Issue #2557,2604,2661,2835,2870,2872,2873,2887,2889,2904,2910,2911 ----
Resolves: dogtagpki Pagure Issue #2735,2856,2861,2862,2874 ---- Re-base
Dogtag to 10.5.2
--------------------------------------------------------------------------------
================================================================================
pysvn-1.9.5-1.fc27 (FEDORA-2018-8b7ef425d6)
Pythonic style bindings for Subversion
--------------------------------------------------------------------------------
Update Information:
Update PySVN to 1.9.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1541765 - pysvn is out of date and missing important fixes
https://bugzilla.redhat.com/show_bug.cgi?id=1541765
--------------------------------------------------------------------------------
================================================================================
shotwell-0.27.4-1.fc27 (FEDORA-2018-f7efaf5b73)
A photo organizer for the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
#### Shotwell 0.27.4 - 5 Feb 2018 #### * Fix a crash when importing in-place
from DAV * Fix a crash when removing the last photo of an event *
Translation updates
--------------------------------------------------------------------------------
================================================================================
xorg-x11-server-1.19.6-3.fc27 (FEDORA-2018-d300b2a8e1)
X.Org X11 X server
--------------------------------------------------------------------------------
Update Information:
Avoid generating a core file when the Wayland compositor is gone. gnome-
shell/mutter spawns Xwayland with the ���-core��� command line option, which causes
any fatal error to generate a core file. The purpose of this update is for
Xwayland to quit nicely for common Wayland socket issues, so that crashes in the
Wayland compositor (gnome-shell/mutter) are not filed against Xwayland by
mistake.
--------------------------------------------------------------------------------
================================================================================
xrootd-4.8.1-1.fc27 (FEDORA-2018-1efd3a6abf)
Extended ROOT file server
--------------------------------------------------------------------------------
Update Information:
## Version 4.8.1 **Major bug fixes** * **[XrdCl]** Try all IP addresses in
case posix connect fails. * **[XrdCl]** Fix checksuming in xrdcp for local
files. * **[Py]** Make sure FileSystem::Copy returns a tuple, fixes #633. *
**[Py]** Make sure empty strings are not converted to None. * **[SSI]** Unbind
the request prior to teardown. * **[SSI]** Avoid SEGV when generating a
request for a new TCP connection. * **[SSI]** Fix race
condition that can cause a SEGV during parallel execution. *
**[SSI]** Allow zero length requests to be passed to servers.
Fixes #640 * **[SSI]** Make sure to avoid object refs after Finished() is
called to avoid SEGV. **Minor bug fixes** * **[XrdPosix]** Fix
various memory related issues. * **[XrdCrypto]** Fix various small issues. *
**[Server]** Fix overlapping string copy. Fixes #643 * **[XrdCl]** Provide
compatibility between root://localfile and file://.
--------------------------------------------------------------------------------
================================================================================
yara-3.7.1-1.fc27 (FEDORA-2018-c3b867865d)
Pattern matching Swiss knife for malware researchers
--------------------------------------------------------------------------------
Update Information:
bump to bugfix release 3.7.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1534993 - yara-3.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1534993
--------------------------------------------------------------------------------
The following Fedora 26 Security updates need testing:
Age URL
194 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ccb5c8d1e7 docker-distribution-2.6.2-1.git48294d9.fc26
86 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3915878e18 ldns-1.7.0-4.fc26
40 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d75a88f263 monit-5.25.1-1.fc26
32 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ccef1ced42 gimp-2.8.22-3.fc26
25 https://bodhi.fedoraproject.org/updates/FEDORA-2018-66b885ae3c keycloak-httpd-client-install-0.8-1.fc26
24 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0db545e976 ruby-2.4.3-86.fc26
13 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b166805347 transmission-2.92-12.fc26
13 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f8a78a5ef squid-4.0.23-1.fc26
12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f73abc5680 knot-resolver-1.5.3-1.fc26
12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a6b59d8f78 libxml2-2.9.7-1.fc26
7 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d4746c772f mujs-0-11.20180129git25821e6.fc26
6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c7c6160e65 thunderbird-52.6.0-1.fc26
5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-48d385a6fd apache-commons-email-1.5-1.fc26
4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-318b5d74bd tomcat-native-1.2.16-1.fc26
4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-790e7e720d sox-14.4.2.0-16.fc26
3 https://bodhi.fedoraproject.org/updates/FEDORA-2018-ac2e276c76 tomcat-8.0.49-1.fc26
The following Fedora 26 Critical Path updates have yet to be approved:
Age URL
32 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c2eed6bd99 iproute-4.14.1-4.fc26
13 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f200f504b3 dtc-1.4.6-1.fc26
12 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a6b59d8f78 libxml2-2.9.7-1.fc26
10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-49cd53ff36 libguestfs-1.36.13-1.fc26
10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-be2cb3e65a xen-4.8.3-2.fc26
6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-c7c6160e65 thunderbird-52.6.0-1.fc26
6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-0f5d497bce krb5-1.15.2-5.fc26
1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-40497e6b72 analitza-16.12.3-2.fc26 calibre-3.12.0-2.fc26 dnscrypt-proxy-gui-1.11.11-2.fc26 gammaray-2.8.1-3.fc26 kf5-akonadi-server-17.12.1-2.fc26 kf5-frameworkintegration-5.42.0-2.fc26 kf5-kdeclarative-5.42.0-2.fc26 kf5-kwayland-5.42.0-2.fc26 kwin-5.10.5-3.fc26 libfm-qt-0.11.2-8.fc26 libqtxdg-2.0.0-8.fc26 lxqt-qtplugin-0.11.1-8.fc26 mscore-2.1.0-8.fc26 plasma-integration-5.10.5-3.fc26 postbooks-4.10.1-16.fc26 pyotherside-1.5.3-3.fc26 python-qt5-5.9.1-2.fc26 pythonqt-3.2-5.fc26 qgnomeplatform-0.3-6.fc26 qstardict-1.2-7.fc26 qt-creator-4.5.0-2.fc26.1 qt5-5.9.4-2.fc26 qt5-qt3d-5.9.4-1.fc26 qt5-qtbase-5.9.4-2.fc26 qt5-qtcanvas3d-5.9.4-1.fc26 qt5-qtcharts-5.9.4-1.fc26 qt5-qtconnectivity-5.9.4-1.fc26 qt5-qtdatavis3d-5.9.4-1.fc26 qt5-qtdeclarative-5.9.4-1.fc26 qt5-qtdoc-5.9.4-1.fc26 qt5-qtgamepad-5.9.4-1.fc26 qt5-qtgraphicaleffects-5.9.4-1.fc26 qt5-qtimageformats-5.9.4-1.fc26 qt5-qtlocation-5.9.4-1.fc26 qt5-qtmultimedia-5.9.4-1.fc
26 qt5-qtquickcontrols-5.9.4-1.fc26 qt5-qtquickcontrols2-5.9.4-1.fc26 qt5-qtremoteobjects-5.9.4-1.fc26 qt5-qtscript-5.9.4-1.fc26 qt5-qtscxml-5.9.4-1.fc26 qt5-qtsensors-5.9.4-1.fc26 qt5-qtserialport-5.9.4-1.fc26 qt5-qtspeech-5.9.4-2.fc26 qt5-qtstyleplugins-5.0.0-22.fc26 qt5-qtsvg-5.9.4-1.fc26 qt5-qttools-5.9.4-1.fc26 qt5-qttranslations-5.9.4-1.fc26 qt5-qtvirtualkeyboard-5.9.4-1.fc26 qt5-qtwayland-5.9.4-1.fc26 qt5-qtwebengine-5.10.0-2.fc26 qt5-qtwebkit-5.212.0-0.15.alpha2.fc26 qt5-qtwebsockets-5.9.4-1.fc26 qt5-qtwebview-5.9.4-1.fc26 qt5-qtx11extras-5.9.4-1.fc26 qt5-qtxmlpatterns-5.9.4-1.fc26 qt5ct-0.34-2.fc26 skrooge-2.10.5-2.fc26 ugene-1.28.1-2.fc26 yarock-1.3.0-2.fc26
0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8879f542a7 hwdata-0.309-1.fc26
0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f0ad9c0f9c pungi-4.1.22-2.fc26
The following builds have been pushed to Fedora 26 updates-testing
adapta-gtk-theme-3.93.0.110-1.fc26
buildah-0.11-2.git6bad262.fc26
clamav-0.99.3-4.fc26
clover2-3.5.6-2.20180202git93d24a6.fc26
crypto-utils-2.5-1.fc26
ipvsadm-1.29-3.fc26
ixpdimm_sw-01.00.00.2422-1.fc26
jhead-3.00-7.fc26
libinput-1.9.4-2.fc26
magic-8.1.199-1.fc26
pysvn-1.9.5-1.fc26
xrootd-4.8.1-1.fc26
Details about builds:
================================================================================
adapta-gtk-theme-3.93.0.110-1.fc26 (FEDORA-2018-ea5a7ed657)
An adaptive Gtk+ theme based on Material Design Guidelines
--------------------------------------------------------------------------------
Update Information:
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1539334 - adapta-gtk-theme-3.93.0.90 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1539334
[ 2 ] Bug #1537086 - adapta-gtk-theme-3.93.0.86 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1537086
[ 3 ] Bug #1540388 - adapta-gtk-theme-3.93.0.103 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1540388
[ 4 ] Bug #1542020 - adapta-gtk-theme-3.93.0.110 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1542020
--------------------------------------------------------------------------------
================================================================================
buildah-0.11-2.git6bad262.fc26 (FEDORA-2018-ada8572632)
A command line tool used for creating OCI Images
--------------------------------------------------------------------------------
Update Information:
Resolves: upstream gh#432
--------------------------------------------------------------------------------
================================================================================
clamav-0.99.3-4.fc26 (FEDORA-2018-231c059bb4)
End-user tools for the Clam Antivirus scanner
--------------------------------------------------------------------------------
Update Information:
- Remove TCP_wrappers (BR _includedir/tcpd.h) due:
https://fedoraproject.org/wiki/Changes/Deprecate_TCP_wrappers - Fix and organize
systemd scriptlets, clamd@.service missed systemd_preun_macro and had a wrong
systemd_postun_with_restart - Remove triggerin macros that aren't need it
anymore - Fix scriplet - Organize startup scriptlets - Exclude one file listed
twice
--------------------------------------------------------------------------------
================================================================================
clover2-3.5.6-2.20180202git93d24a6.fc26 (FEDORA-2018-184260832d)
Yet another compiler language
--------------------------------------------------------------------------------
Update Information:
This is a new package.
--------------------------------------------------------------------------------
================================================================================
crypto-utils-2.5-1.fc26 (FEDORA-2018-650a6bd4fc)
SSL certificate and key management utilities
--------------------------------------------------------------------------------
Update Information:
In this update, the `certwatch --keydbprefix` argument was renamed from
`--keydbprexix`, and various spelling and grammatical fixes are corrected.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431612 - crypto-utils-2.4.1-65.fc27 FTBFS: format not a string literal and no format arguments [-Werror=format-security]
https://bugzilla.redhat.com/show_bug.cgi?id=1431612
--------------------------------------------------------------------------------
================================================================================
ipvsadm-1.29-3.fc26 (FEDORA-2018-ecbad1f5b3)
Utility to administer the Linux Virtual Server
--------------------------------------------------------------------------------
Update Information:
Catch the original errno from netlink answer in order to report correct error
messages.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526813 - ipsvadm reports wrong error messages
https://bugzilla.redhat.com/show_bug.cgi?id=1526813
--------------------------------------------------------------------------------
================================================================================
ixpdimm_sw-01.00.00.2422-1.fc26 (FEDORA-2018-babf9e06b6)
API for development of IXPDIMM management utilities
--------------------------------------------------------------------------------
Update Information:
Release v01.00.00.2422
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1540768 - ixpdimm_sw-01.00.00.2420 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1540768
--------------------------------------------------------------------------------
================================================================================
jhead-3.00-7.fc26 (FEDORA-2018-fff755ee8e)
Tool for displaying EXIF data embedded in JPEG images
--------------------------------------------------------------------------------
Update Information:
Added Debian patch to fix CVE-2018-6612 (#1542049)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1542049 - CVE-2018-6612 jhead: Integer underflow in the process_EXIF function
https://bugzilla.redhat.com/show_bug.cgi?id=1542049
--------------------------------------------------------------------------------
================================================================================
libinput-1.9.4-2.fc26 (FEDORA-2018-162d48a296)
Input device library
--------------------------------------------------------------------------------
Update Information:
Fix crasher on first event from tablets not supported by libwacom ----
libinput 1.9.4, brings a few bug fixes to the table
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1535755 - [abrt] xorg-x11-server-Xorg: tablet_update_artpen_rotation(): Xorg killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1535755
--------------------------------------------------------------------------------
================================================================================
magic-8.1.199-1.fc26 (FEDORA-2018-43c2da2591)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.1.199 is released.
--------------------------------------------------------------------------------
================================================================================
pysvn-1.9.5-1.fc26 (FEDORA-2018-612cb614d2)
Pythonic style bindings for Subversion
--------------------------------------------------------------------------------
Update Information:
Update PySVN to 1.9.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1541765 - pysvn is out of date and missing important fixes
https://bugzilla.redhat.com/show_bug.cgi?id=1541765
--------------------------------------------------------------------------------
================================================================================
xrootd-4.8.1-1.fc26 (FEDORA-2018-dad1d4a55e)
Extended ROOT file server
--------------------------------------------------------------------------------
Update Information:
## Version 4.8.1 **Major bug fixes** * **[XrdCl]** Try all IP addresses in
case posix connect fails. * **[XrdCl]** Fix checksuming in xrdcp for local
files. * **[Py]** Make sure FileSystem::Copy returns a tuple, fixes #633. *
**[Py]** Make sure empty strings are not converted to None. * **[SSI]** Unbind
the request prior to teardown. * **[SSI]** Avoid SEGV when generating a
request for a new TCP connection. * **[SSI]** Fix race
condition that can cause a SEGV during parallel execution. *
**[SSI]** Allow zero length requests to be passed to servers.
Fixes #640 * **[SSI]** Make sure to avoid object refs after Finished() is
called to avoid SEGV. **Minor bug fixes** * **[XrdPosix]** Fix
various memory related issues. * **[XrdCrypto]** Fix various small issues. *
**[Server]** Fix overlapping string copy. Fixes #643 * **[XrdCl]** Provide
compatibility between root://localfile and file://.
--------------------------------------------------------------------------------