The following Fedora 27 Security updates need testing:
Age URL
223
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
154
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
118
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
109
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
86
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
86
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
43
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c
tomcat-8.0.53-1.fc27
43
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1
unixODBC-2.3.7-1.fc27
32
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11ed8d95e2
libxkbcommon-0.8.2-1.fc27
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a7916c8b9
thunderbird-60.0-1.fc27
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bf613d82be CImg-2.3.6-1.fc27
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a82282e4e gmic-2.3.6-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6a92b4f75c
zchunk-0.9.10-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e9f26489b lcms2-2.8-6.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-02a38af202
openssl-1.1.0i-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6ed251c42b
spamassassin-3.4.2-2.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8b109a6de0
python-marshmallow-2.11.1-8.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c3a5b2029a
python2-2.7.15-3.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-187e212568
php-tcpdf-6.2.25-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b14abc9b0
libmad-0.15.1b-26.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-54d84b0b0c
bind-9.11.4-3.P2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11b3ae4e31
ca-certificates-2018.2.26-1.0.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
138
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
99
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
63
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
43
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24
iproute-4.17.0-1.fc27
32
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11ed8d95e2
libxkbcommon-0.8.2-1.fc27
28
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c223c11259
libldb-1.3.2-2.fc27.1.2.3 samba-4.7.10-0.fc27
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a7916c8b9
thunderbird-60.0-1.fc27
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-227775ff3a ceph-12.2.8-1.fc27
16
https://bodhi.fedoraproject.org/updates/FEDORA-2018-afc61ca113
p11-kit-0.23.14-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6ec2c424b8
flatpak-1.0.2-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ca54aecfc8
highlight-3.44-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-14a1773017 koji-1.16.1-2.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ede34350d8
dash-0.5.10.2-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e9f26489b lcms2-2.8-6.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-387a30f785
osinfo-db-20180920-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-02a38af202
openssl-1.1.0i-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-847a5b27f8 vim-8.1.408-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c3a5b2029a
python2-2.7.15-3.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cf532c08b5
libguestfs-1.38.6-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11b3ae4e31
ca-certificates-2018.2.26-1.0.fc27
The following builds have been pushed to Fedora 27 updates-testing
apr-util-1.6.1-8.fc27
checksec-1.8.0-2.fc27
choqok-1.6.0-8.fc27
copyq-3.6.1-1.fc27
firefox-62.0.2-1.fc27
ghc-optparse-simple-0.1.0-1.fc27
hplip-3.18.6-3.fc27
kernel-4.18.10-100.fc27
kernel-headers-4.18.10-100.fc27
kernel-tools-4.18.10-100.fc27
liblouis-2.6.2-13.fc27
openas2-2.6.2-1.fc27
pcre2-10.32-3.fc27
perl-re-engine-PCRE2-0.14-3.fc27
php-horde-Horde-Core-2.31.6-1.fc27
php-horde-horde-5.2.20-1.fc27
php-horde-kronolith-4.2.25-1.fc27
rpkg-util-2.6-1.fc27
rust-1.29.1-2.fc27
udisks2-2.7.6-2.fc27
vacuum-im-1.3.0-0.11.20180214git01910e9.fc27
wesnoth-1.14.5-1.fc27
xen-4.9.3-1.fc27
xrdp-0.9.8-1.fc27
Details about builds:
================================================================================
apr-util-1.6.1-8.fc27 (FEDORA-2018-c8d417e98d)
Apache Portable Runtime Utility library
--------------------------------------------------------------------------------
Update Information:
This update adds weak dependencies on **apr-util-openssl** and **apr-util-dbd**,
allowing other packages to rely on the availability of the default `apr_dbd`,
`apr_dbm`, and `apr_crypto` drivers without hard-coding these dependencies.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 26 2018 Joe Orton <jorton(a)redhat.com> - 1.6.1-8
- Recommends: -openssl and -bdb so default crypto, dbm drivers are
always available (#1491151, #1633152)
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.1-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Mar 9 2018 Bojan Smojver <bojan(a)rexursive.com> - 1.6.1-6
- add gcc build requirement
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Jan 26 2018 Florian Weimer <fweimer(a)redhat.com> - 1.6.1-4
- Rebuild with new build flags embedded in apr
* Sat Jan 20 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 1.6.1-3
- Rebuilt for switch to libxcrypt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1491151 - DSO load failed: AH00576: The DBM driver could not be loaded
https://bugzilla.redhat.com/show_bug.cgi?id=1491151
--------------------------------------------------------------------------------
================================================================================
checksec-1.8.0-2.fc27 (FEDORA-2018-6994b7f66c)
Tool to check system for binary-hardening
--------------------------------------------------------------------------------
Update Information:
Upstream new release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 27 2018 Robin Lee <cheeselee(a)fedoraproject.org> - 1.8.0-2
- Fix Linux 4.18 compitability (BZ#1632412)
* Sun Sep 23 2018 Robin Lee <cheeselee(a)fedoraproject.org> - 1.8.0-1
- Update to 1.8.0 (BZ#1485319)
* Thu Aug 2 2018 Dan Hor��k <dan[at]danny.cz - 1.7.4-8
- which is Required
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.4-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.4-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Sep 8 2017 Troy Dawson <tdawson(a)redhat.com> - 1.7.4-5
- Cleanup spec file conditionals
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562528 - checksec --proc-all has display problems with perl processes
https://bugzilla.redhat.com/show_bug.cgi?id=1562528
[ 2 ] Bug #1485319 - Update upstream URL
https://bugzilla.redhat.com/show_bug.cgi?id=1485319
[ 3 ] Bug #1632412 - checksec --kernel shows GCC stack protector support: Disabled when
the kernel configuration has the strong stack protector enabled
https://bugzilla.redhat.com/show_bug.cgi?id=1632412
--------------------------------------------------------------------------------
================================================================================
choqok-1.6.0-8.fc27 (FEDORA-2018-5e1b54d4f5)
KDE Micro-Blogging Client
--------------------------------------------------------------------------------
Update Information:
Backport some upstream fixes to include proper appdata.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.6.0-8
- validate appdata (#1551266)
- backport upstream fixes
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jun 28 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 1.6.0-6
- use %make_build,%find_lang --with html, %ldconfig_scriptlets
- use %_kf5_metainfodir
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sun Jan 7 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.6.0-4
- Remove obsolete scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551266 - Need to update appstream.xml for choqok
https://bugzilla.redhat.com/show_bug.cgi?id=1551266
--------------------------------------------------------------------------------
================================================================================
copyq-3.6.1-1.fc27 (FEDORA-2018-658f14ec06)
Advanced clipboard manager
--------------------------------------------------------------------------------
Update Information:
Upstream release rhbz#1632031
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2018 Gerald Cox <gbcox(a)fedoraproject.org> - 3.6.1-1
- Upstream release rhbz#1632031
* Sun Sep 23 2018 Gerald Cox <gbcox(a)fedoraproject.org> - 3.6.0-1
- Upstream release rhbz#1632031
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1632031 - CopyQ - Upstream release v3.6.1
https://bugzilla.redhat.com/show_bug.cgi?id=1632031
--------------------------------------------------------------------------------
================================================================================
firefox-62.0.2-1.fc27 (FEDORA-2018-5f88837c1b)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version. ---- - Added fix for missing dictionaries
(
https://bugzilla.redhat.com/show_bug.cgi?id=1627837)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2018 Jan Horak <jhorak(a)redhat.com> - 62.0.2-1
- Update to 62.0.2
* Mon Sep 17 2018 Martin Stransky <stransky(a)redhat.com> - 62.0-3
- Added spellchecker.dictionary_path pref pointer to /usr/share/myspell.
Thanks to Peter Oliver (rhbz#1627837)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631910 - Firefox 62.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1631910
[ 2 ] Bug #1627837 - spellchecker.dictionary_path is missing, Firefox can't find a
dictionary
https://bugzilla.redhat.com/show_bug.cgi?id=1627837
--------------------------------------------------------------------------------
================================================================================
ghc-optparse-simple-0.1.0-1.fc27 (FEDORA-2018-0a3ae0fa26)
Simple interface to optparse-applicative
--------------------------------------------------------------------------------
Update Information:
New command arg parsing library -
https://hackage.haskell.org/package/optparse-
simple
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1626902 - Review Request: ghc-optparse-simple - Simple interface to
optparse-applicative
https://bugzilla.redhat.com/show_bug.cgi?id=1626902
--------------------------------------------------------------------------------
================================================================================
hplip-3.18.6-3.fc27 (FEDORA-2018-b1a378c4f6)
HP Linux Imaging and Printing Project
--------------------------------------------------------------------------------
Update Information:
1566938 - Fix TypeError when printing ImportError message in hpfax 1564770 - Fix
TypeError when printing error object message
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2018 Tomas Korbar <tkorbar(a)redhat.com> - 3.18.6-3
- 1566938 - Fix TypeError when printing ImportError message in hpfax
* Tue Sep 25 2018 Tomas Korbar <tkorbar(a)redhat.com> - 3.18.6-2
- 1564770 - Fix TypeError when printing error object message
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1566938 - [abrt] hplip: module(): hpfax:92:<module>:TypeError: not all
arguments converted during string formatting
https://bugzilla.redhat.com/show_bug.cgi?id=1566938
[ 2 ] Bug #1564770 - [abrt] hplip-gui: __writeChannel():
wifisetupdialog.py:843:showIOError:TypeError: 'Error' object does not support
indexing
https://bugzilla.redhat.com/show_bug.cgi?id=1564770
--------------------------------------------------------------------------------
================================================================================
kernel-4.18.10-100.fc27 (FEDORA-2018-c0a1284064)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.18.10 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 26 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.10-100
- Linux v4.18.10
* Wed Sep 26 2018 Laura Abbott <labbott(a)redhat.com>
- Fix powerpc IPv6 (rhbz 1628394)
* Mon Sep 24 2018 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix CVE-2018-14633 (rhbz 1626035 1632185)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1626035 - CVE-2018-14633 kernel: stack-based buffer overflow in
chap_server_compute_md5() in iscsi target
https://bugzilla.redhat.com/show_bug.cgi?id=1626035
--------------------------------------------------------------------------------
================================================================================
kernel-headers-4.18.10-100.fc27 (FEDORA-2018-c0a1284064)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 4.18.10 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 26 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.10-100
- Linux v4.18.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1626035 - CVE-2018-14633 kernel: stack-based buffer overflow in
chap_server_compute_md5() in iscsi target
https://bugzilla.redhat.com/show_bug.cgi?id=1626035
--------------------------------------------------------------------------------
================================================================================
kernel-tools-4.18.10-100.fc27 (FEDORA-2018-c0a1284064)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.18.10 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 26 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.10-100
- Linux v4.18.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1626035 - CVE-2018-14633 kernel: stack-based buffer overflow in
chap_server_compute_md5() in iscsi target
https://bugzilla.redhat.com/show_bug.cgi?id=1626035
--------------------------------------------------------------------------------
================================================================================
liblouis-2.6.2-13.fc27 (FEDORA-2018-9a09435935)
Braille translation and back-translation library
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-17294
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 26 2018 Martin Gieseking <martin.gieseking(a)uos.de> - 2.6.2-13
- Added patch to fix CVE-2018-11683.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1632834 - CVE-2018-17294 liblouis: Stack-based buffer over-read in
matchCurrentInput function lou_translateString.c
https://bugzilla.redhat.com/show_bug.cgi?id=1632834
--------------------------------------------------------------------------------
================================================================================
openas2-2.6.2-1.fc27 (FEDORA-2018-cce9180096)
Java-based implementation of the EDIINT AS2 standard
--------------------------------------------------------------------------------
Update Information:
New upstream release with some workarounds for MDN related partner braindamage.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1633362 - MDN fails to decrypt for some partners
https://bugzilla.redhat.com/show_bug.cgi?id=1633362
--------------------------------------------------------------------------------
================================================================================
pcre2-10.32-3.fc27 (FEDORA-2018-a8d5e098bf)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes a subject buffer overread in JIT when UTF is disabled and \X
or \R has a greater than 1 fixed quantifier and a caseless matching of an
extended class in JIT mode. It also provides a new PCRE2 10.32 release that
brings Unicode 11 support and non-recursive DFA matching engine.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2018 Petr Pisar <ppisar(a)redhat.com> - 10.32-3
- Fix caseless matching an extended class in JIT mode (upstream bug #2321)
* Tue Sep 18 2018 Petr Pisar <ppisar(a)redhat.com> - 10.32-2
- Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has
a greater than 1 fixed quantifier (upstream bug #2320)
* Wed Sep 12 2018 Petr Pisar <ppisar(a)redhat.com> - 10.32-1
- 10.32 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1632640 - Please fix an xclass matching issue in JIT.
https://bugzilla.redhat.com/show_bug.cgi?id=1632640
--------------------------------------------------------------------------------
================================================================================
perl-re-engine-PCRE2-0.14-3.fc27 (FEDORA-2018-108cafe155)
PCRE2 regular expression engine for Perl
--------------------------------------------------------------------------------
Update Information:
This release adjusts tests to PCRE2 10.32.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 14 2018 Petr Pisar <ppisar(a)redhat.com> - 0.14-3
- Adjust tests to PCRE2-10.32 (bug #1624362)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1624362 - perl-re-engine-PCRE2-0.14-5.fc30 FTBFS: t/perl/regexp.t fails with
pcre2-10.32
https://bugzilla.redhat.com/show_bug.cgi?id=1624362
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.31.6-1.fc27 (FEDORA-2018-1f64819623)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.31.6** * [mjr] SECURITY: Fix XSS vulnerability when rendering a
colorpicker (Bug #14857).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 26 2018 Remi Collet <remi(a)remirepo.net> - 2.31.6-1
- update to 2.31.6
--------------------------------------------------------------------------------
================================================================================
php-horde-horde-5.2.20-1.fc27 (FEDORA-2018-1de045298c)
Horde Application Framework
--------------------------------------------------------------------------------
Update Information:
**Horde 5.2.20** * [mjr] SECURITY: Fix XSS vulnerability when rendering custom
background colors in a sidebar row (Bug #14857).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 27 2018 Remi Collet <remi(a)remirepo.net> - 5.2.20-1
- update to 5.2.20
--------------------------------------------------------------------------------
================================================================================
php-horde-kronolith-4.2.25-1.fc27 (FEDORA-2018-d280e35281)
A web based calendar
--------------------------------------------------------------------------------
Update Information:
**Kronolith 4.2.25** * [mjr] SECURITY: Fix XSS vulnerability in resource group
property view (Bug #14857). * [mjr] SECURITY: Fix XSS vulnerability in event URL
field (Bug #14857).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 27 2018 Remi Collet <remi(a)remirepo.net> - 4.2.25-1
- update to 4.2.25
--------------------------------------------------------------------------------
================================================================================
rpkg-util-2.6-1.fc27 (FEDORA-2018-5d881ff337)
RPM packaging utility
--------------------------------------------------------------------------------
Update Information:
- be more specific about auto-packing deprecation - fix encoding issues on
python2 with POSIX locale set - fix invalid arguments to setopt on EPEL ---- -
EPEL6 fixes - resolve SafeConfigParser deprecation warning - EPEL fixes, old git
+ python related issues - remove unneded format for tag sorting
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 26 2018 clime <clime(a)redhat.com> 2.6-1
- be more specific about auto-packing deprecation
- fix encoding issues on python2 with POSIX locale set
- fix invalid arguments to setopt on EPEL
* Tue Sep 18 2018 clime <clime(a)redhat.com> 2.5-1
- EPEL6 fixes
- resolve SafeConfigParser deprecation warning
- EPEL fixes, old git + python related issues
- remove unneded format for tag sorting
--------------------------------------------------------------------------------
================================================================================
rust-1.29.1-2.fc27 (FEDORA-2018-69cce46328)
The Rust Programming Language
--------------------------------------------------------------------------------
Update Information:
Security fix for buffer overflow in str::repeat
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2018 Josh Stone <jistone(a)redhat.com> - 1.29.1-2
- Update to 1.29.1.
- Security fix for str::repeat (pending CVE).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1632932 - rust: Buffer overflow in str::repeat function in the standard
library
https://bugzilla.redhat.com/show_bug.cgi?id=1632932
--------------------------------------------------------------------------------
================================================================================
udisks2-2.7.6-2.fc27 (FEDORA-2018-3d187b1a5b)
Disk Manager
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-17336
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 26 2018 Vojtech Trefny <vtrefny(a)redhat.com> - 2.7.6-2
- Fix string format vulnerability
* Thu Feb 8 2018 Vojtech Trefny <vtrefny(a)redhat.com> - 2.7.6-1
- Version 2.7.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1632828 - CVE-2018-17336 udisks: Format string vulnerability in udisks_log in
udiskslogging.c
https://bugzilla.redhat.com/show_bug.cgi?id=1632828
--------------------------------------------------------------------------------
================================================================================
vacuum-im-1.3.0-0.11.20180214git01910e9.fc27 (FEDORA-2018-c99f073536)
XMPP/Jabber client
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.0-0.11.20180214git01910e9
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2018 Martin Gansser <martinkg(a)fedoraproject.org> -
1.3.0-0.11.20180214git01910e9
- Remove BR minizip-compat-devel
- Add BR pkgconfig(Qt5Svg)
* Tue Aug 28 2018 Patrik Novotn�� <panovotn(a)redhat.com> -
1.3.0-0.10.20180214git01910e9
- change requires to minizip-compat(-devel), rhbz#1609830, rhbz#1615381
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.3.0-0.9.20180214git01910e9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1632203 - vacuum-im - remove minizip-compat dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1632203
--------------------------------------------------------------------------------
================================================================================
wesnoth-1.14.5-1.fc27 (FEDORA-2018-f05e288a21)
Turn-based strategy game with a fantasy theme
--------------------------------------------------------------------------------
Update Information:
1.14.5
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 1.14.5-1
- 1.14.5.
--------------------------------------------------------------------------------
================================================================================
xen-4.9.3-1.fc27 (FEDORA-2018-3006b99087)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
update to 4.9.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 25 2018 Michael Young <m.a.young(a)durham.ac.uk> - 4.9.3-1
- update to 4.9.3
adjust xen.use.fedora.ipxe.patch
remove patches for issues now fixed upstream
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.8-1.fc27 (FEDORA-2018-26deed9fe2)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
Release notes for xrdp v0.9.8 (2018/09/25) Deprecation notice - We removed
TLSv1 and TLSv1.1 from the default config. The current default is TLSv1.2 and
TLSv1.3. Users can whenever re-enable these early TLS versions by editing xrdp.
To use TLSv1.3, OpenSSL or LibreSSL must support TLSv1.3. You can know the
OpenSSL or LibreSSL version by xrdp --version command that compiled with xrdp.
Other topics - Pulseaudio modules has been removed from xrdp source tree since
it is actually independent and not part of xrdp. The repository has been moved
to:
https://github.com/neutrinolabs/pulseaudio-module-xrdp - If you want to use
audio redirection, make sure install the module separately. New features - Add
TLSv1.3 support #1193 Bug fixes - Ensure unmount redirected drive on fatal X
error #1140 Other changes - Show more helpful message if xrdp-dis failed #1206
- Pass pulse socket name via environment variable #1198 - Fix xrdp's log path in
man page #1168
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 26 2018 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.8-1
- Bump up to 0.9.8
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:0.9.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------