The following Fedora 27 Security updates need testing:
Age URL
62
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c9395f9bec remctl-3.14-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6e6d8c314b
drupal8-8.4.6-3.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-57fbdb1cb5
roundcubemail-1.3.6-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-825d37b810
opencv-3.2.0-15.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4e26c06aef
mingw-libid3tag-0.15.1b-23.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-70fac3f07e anki-2.0.50-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ff86925c3
memcached-1.5.7-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d275e6ff0c
scummvm-tools-2.0.0-1.fc27 scummvm-2.0.0-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9d1ff4b802
composer-1.6.4-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-335aec0507
libtiff-4.0.9-8.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ac1d9c2777 zsh-5.4.1-3.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b7a613ea5d
gsoap-2.8.49-4.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
16
https://bodhi.fedoraproject.org/updates/FEDORA-2018-772fcd140c
linux-firmware-20180402-83.git8c1e439c.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5f72371a85
python-productmd-1.11-2.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-335aec0507
libtiff-4.0.9-8.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ea3f614267 samba-4.7.7-0.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e0a12453e8
libcgroup-0.41-17.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ecb0da3cb1
osinfo-db-20180416-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ae2c9dd927
python-urllib3-1.22-5.fc27 python-requests-2.18.4-2.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3085b9774
selinux-policy-3.13.1-283.32.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c31f1eccd
iptables-1.6.2-2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fead989b97
gnome-software-3.28.1-1.fc27.1
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f9921ffc3
libtirpc-1.0.3-2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-af4805ccc4 file-5.31-11.fc27
The following builds have been pushed to Fedora 27 updates-testing
ansible-2.5.1-1.fc27
boost-1.64.0-6.fc27
distgen-1.1-1.fc27
fftw-3.3.5-8.fc27
gpxsee-5.8-1.fc27
java-1.8.0-openjdk-1.8.0.171-1.b10.fc27
libreoffice-5.4.6.2-4.fc27
lollypop-0.9.506-1.fc27
lua-socket-3.0-0.17.rc1.fc27
mate-desktop-1.20.1-2.fc27
mate-panel-1.20.1-2.fc27
mate-settings-daemon-1.20.1-2.fc27
perl-Storable-3.06-1.fc27
python-dockerfile-parse-0.0.10-1.fc27
python-libevdev-0.4-2.fc27
sane-backends-1.0.27-17.fc27
toxcore-0.2.2-1.fc27
Details about builds:
================================================================================
ansible-2.5.1-1.fc27 (FEDORA-2018-d35b90fd1d)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to 2.5.1 with bugfixes. See
https://github.com/ansible/ansible/blob/stable-2.5/changelogs/CHANGELOG-v...
for full list of fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Kevin Fenzi <kevin(a)scrye.com> - 2.5.1-1
- Update to 2.5.1 with bugfixes. Fixes: #1569270 #1569153 #1566004 #1566001
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563649 - Package ansible-doc-2.5.0-2.fc27.noarch.rpm too big
https://bugzilla.redhat.com/show_bug.cgi?id=1563649
[ 2 ] Bug #1566004 - ansible-vault edit asks to change the vault password
https://bugzilla.redhat.com/show_bug.cgi?id=1566004
[ 3 ] Bug #1569153 - Fact gathering fails if dmidecode is not present
https://bugzilla.redhat.com/show_bug.cgi?id=1569153
[ 4 ] Bug #1566001 - ansible-vault edit asks to change the vault password
https://bugzilla.redhat.com/show_bug.cgi?id=1566001
[ 5 ] Bug #1569270 - ansible-2.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1569270
--------------------------------------------------------------------------------
================================================================================
boost-1.64.0-6.fc27 (FEDORA-2018-97c275d576)
The free peer-reviewed portable C++ source libraries
--------------------------------------------------------------------------------
Update Information:
Updated Boost libraries are available that fix compatibility with CUDA 9.x
compilers and fix a possible integer overflow in Boost.Regex.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Jonathan Wakely <jwakely(a)redhat.com> - 1.64.0-6
- Add patch for Boost.Regex integer overflow (#1564252)
- Add patch for CUDA version macro changes (#1530828)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1530828 - Cuda 9 fails to compile when using boost
https://bugzilla.redhat.com/show_bug.cgi?id=1530828
[ 2 ] Bug #1564253 - boost: Integer overflow during calculation of max_state_count in
regex library [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1564253
--------------------------------------------------------------------------------
================================================================================
distgen-1.1-1.fc27 (FEDORA-2018-837071e011)
Templating system/generator for distributions
--------------------------------------------------------------------------------
Update Information:
new v1.1 release, per packaged NEWS file
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Pavel Raiskup <praiskup(a)redhat.com> - 1.1-1
- sync with upstream spec file
* Wed Apr 18 2018 Slavek Kabrda <bkabrda(a)redhat.com> - 1.1-1
- update to 1.1
- update source url to conform with new PyPI urls format
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.20-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fftw-3.3.5-8.fc27 (FEDORA-2018-9acbde70a3)
A Fast Fourier Transform library
--------------------------------------------------------------------------------
Update Information:
Disable Open MPI's vader byte transfer layer while running tests on 32-bit x86
platforms to resolve FTBFS issue.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2017 Merlin Mathesius <mmathesi(a)redhat.com> - 3.3.5-8
- Disable Open MPI's vader byte transfer layer while running tests on 32-bit x86
platforms
as it is known to be troublesome <
https://github.com/open-mpi/ompi/issues/4260>.
This resolves FTBFS issue (BZ#1518038).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1518038 - fftw FTBFS on f27 and rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1518038
--------------------------------------------------------------------------------
================================================================================
gpxsee-5.8-1.fc27 (FEDORA-2018-1c25a14c86)
GPS log file viewer and analyzer
--------------------------------------------------------------------------------
Update Information:
News in version **5.8**: - Fixed the irritating map zoom changes on OSM maps
switching and the 1px map center offset bug - Added Polish translation News in
version **5.7**: - Added OziExplorer data files (plt, rte, wpt) support - OS X
file icons update (including missing GPX icon)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Nikola Forr�� <nforro(a)redhat.com> - 5.8-1
- Update to version 5.8
resolves: #1568190
* Tue Apr 10 2018 Nikola Forr�� <nforro(a)redhat.com> - 5.6-1
- Update to version 5.6
resolves: #1565383
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568190 - gpxsee-5.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1568190
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-1.8.0.171-1.b10.fc27 (FEDORA-2018-77533e644b)
OpenJDK Runtime Environment
--------------------------------------------------------------------------------
Update Information:
Update security update jdk8u171-b10
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Jiri Vanek <jvanek(a)redhat.com> - 1:1.8.0.171-1.b10
- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Fix jconsole.desktop.in subcategory, replacing "Monitor" with
"Profiling" (PR3550) (gnu_andrew)
- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng
ones (gnu_andrew)
* Wed Apr 18 2018 Jiri Vanek <jvanek(a)redhat.com> - 1:1.8.0.162-7.b12
- added ownership of policy dir and subdirs
- removed ignored attributes for classes.jsa
* Tue Apr 10 2018 Severin Gehwolf <sgehwolf(a)redhat.com> - 1:1.8.0.162-6.b12
- Use correct patch for RHBZ#1538767 (JDK-8196516)
* Mon Apr 2 2018 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.162-5.b12
- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
--------------------------------------------------------------------------------
================================================================================
libreoffice-5.4.6.2-4.fc27 (FEDORA-2018-51fd280bb4)
Free Software Productivity Suite
--------------------------------------------------------------------------------
Update Information:
- some performance improvements for the gtk3 backend
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Caol��n McNamara <caolanm(a)redhat.com> - 1:5.4.6.2-4
- Related: rhbz#1396729 use cairo_surface_create_similar
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1396729 - [GTK3] LibreOffice Writer slows scrolling with embedded images
https://bugzilla.redhat.com/show_bug.cgi?id=1396729
--------------------------------------------------------------------------------
================================================================================
lollypop-0.9.506-1.fc27 (FEDORA-2018-02eb020d43)
Music player for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.506 ---- Update to 0.9.504 ---- Update to 0.9.502 ----
Update to 0.9.500 ---- Changed RR from pyplast to python2-pylast ---- Add
art_album.py.diff (BZ #1562595) ---- Update to 0.9.403 ---- - Update
lollypop-portal to 0.9.7 ---- Update to 0.9.402 ---- Update to 0.9.401
---- Update to 0.9.400 ---- Update to 0.9.501
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.506-1
- Update to 0.9.506
* Sat Apr 14 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.504-1
- Update to 0.9.504
* Fri Apr 13 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.502-1
- Update to 0.9.502
* Thu Apr 12 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.501-1
- Update to 0.9.501
* Thu Apr 12 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.500-1
- Update to 0.9.500
* Tue Apr 10 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.403-3
- Changed RR from pyplast to python2-pylast
* Thu Apr 5 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.403-2
- Add art_album.py.diff (BZ #1562595)
- Add bytecompile with Python 3 %global __python %{__python3}
* Thu Mar 29 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.403-1
- Update to 0.9.403
* Wed Mar 28 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.402-2
- Update lollypop-portal to 0.9.7
* Tue Mar 20 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.402-1
- Update to 0.9.402
* Wed Mar 14 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.401-1
- Update to 0.9.401
- Cleanup spec file
* Wed Mar 7 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.400-1
- Update to 0.9.400
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.306-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Jan 6 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 0.9.306-2
- Remove obsolete scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1567480 - [abrt] lollypop: __new__(): Gdk.py:336:__new__:TypeError:
constructor returned NULL
https://bugzilla.redhat.com/show_bug.cgi?id=1567480
[ 2 ] Bug #1562595 - [abrt] lollypop: __on_save_artwork_tags():
art_album.py:432:__on_save_artwork_tags:GLib.GError: g_convert_error: L'URI
��sftp://bertof@192.168.1.42/mnt/1TB/Condivisa/Musica/Fondamentali/30%20Seconds%20To%20Mars%20-%20Kings%20and%20Queens.mp3��
non �� ...
https://bugzilla.redhat.com/show_bug.cgi?id=1562595
--------------------------------------------------------------------------------
================================================================================
lua-socket-3.0-0.17.rc1.fc27 (FEDORA-2018-83f08113c1)
Network support for the Lua language
--------------------------------------------------------------------------------
Update Information:
- Use standard Fedora linker flags (bug #1548713)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Rafael dos Santos <rdossant(a)redhat.com> - 3.0-0.17.rc1
- Use standard Fedora linker flags (bug #1548713)
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.0-0.16.rc1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548713 - lua-socket: Partial Fedora build flags injection
https://bugzilla.redhat.com/show_bug.cgi?id=1548713
--------------------------------------------------------------------------------
================================================================================
mate-desktop-1.20.1-2.fc27 (FEDORA-2018-e285c92848)
Shared code for mate-panel, mate-session, mate-file-manager, etc
--------------------------------------------------------------------------------
Update Information:
- improve HIDPI support
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.1-2
- improve background handling for HIDPI monitors
- use
https://github.com/mate-desktop/mate-desktop/pull/310
* Thu Apr 5 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.1-1
- update to 1.20.1
- use upstream patch
-
https://github.com/mate-desktop/mate-desktop/commit/abaa1e4
--------------------------------------------------------------------------------
================================================================================
mate-panel-1.20.1-2.fc27 (FEDORA-2018-e285c92848)
MATE Desktop panel and applets
--------------------------------------------------------------------------------
Update Information:
- improve HIDPI support
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.1-2
- switch to --with-in-process-applets=all
- better for HIDPI
* Fri Apr 6 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.1-1
- update to 1.20.1
--------------------------------------------------------------------------------
================================================================================
mate-settings-daemon-1.20.1-2.fc27 (FEDORA-2018-e285c92848)
MATE Desktop settings daemon
--------------------------------------------------------------------------------
Update Information:
- improve HIDPI support
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.1-2
- improve background handling for HIDPI monitors
- use
https://github.com/mate-desktop/mate-settings-daemon/pull/217
* Fri Apr 6 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.1-1
- update to 1.20.1
- drop IconCache scriptlets
- drop GSettings Schema rpm scriplet
- switch to autosetup
- use BR polkit-devel instead of mate-polkit-devel
--------------------------------------------------------------------------------
================================================================================
perl-Storable-3.06-1.fc27 (FEDORA-2018-c58d651578)
Persistence for Perl data structures
--------------------------------------------------------------------------------
Update Information:
This relases fixes an overflow handling a class name length and nested arrays
and hashes. It also adds support for data structures that need more than 2 GB of
memory.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Petr Pisar <ppisar(a)redhat.com> - 1:3.06-1
- 3.06 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1569520 - perl-Storable-3.06 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1569520
--------------------------------------------------------------------------------
================================================================================
python-dockerfile-parse-0.0.10-1.fc27 (FEDORA-2018-29dfef8e8a)
Python library for Dockerfile manipulation
--------------------------------------------------------------------------------
Update Information:
New upstream release 0.0.10
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Tomas Tomecek <ttomecek(a)redhat.com> - 0.0.10-1
- New upstream release 0.0.10
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-libevdev-0.4-2.fc27 (FEDORA-2018-329ed049b7)
Python bindings to the libevdev evdev device wrapper library
--------------------------------------------------------------------------------
Update Information:
Fix failure when setting up EV_REP
--------------------------------------------------------------------------------
================================================================================
sane-backends-1.0.27-17.fc27 (FEDORA-2018-cec6c36fcc)
Scanner access software
--------------------------------------------------------------------------------
Update Information:
revert samsung patch ---- 1554032 - saned doesn't have permissions to write on
usb port
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.0.27-17
- revert samsung patch
* Tue Apr 17 2018 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.0.27-16
- 1554032 - saned doesn't have permissions to write on usb port - updated
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1554032 - saned doesn't have permissions to write on usb port
https://bugzilla.redhat.com/show_bug.cgi?id=1554032
--------------------------------------------------------------------------------
================================================================================
toxcore-0.2.2-1.fc27 (FEDORA-2018-8a30687556)
Peer to peer instant messenger
--------------------------------------------------------------------------------
Update Information:
Upstream release 0.2.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.2.2-1
- Upstream release 0.2.2
--------------------------------------------------------------------------------