The following Fedora 27 Security updates need testing:
Age URL
202
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
134
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
98
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
89
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
66
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
66
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c
tomcat-8.0.53-1.fc27
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1
unixODBC-2.3.7-1.fc27
22
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7051d682fa
ntp-4.2.8p12-1.fc27
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e914e7a9e2
chromium-68.0.3440.106-3.fc27
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a3c660bfa
community-mysql-5.7.23-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11ed8d95e2
libxkbcommon-0.8.2-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f56ded11c4
openssh-7.6p1-6.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6121f427e5 godot-3.0.6-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bb7f3f7ecf gd-2.2.5-6.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a1bd27f59b
dokuwiki-20180422a-2.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a2316e0baf
iniparser-4.0-7.20160821git.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-83116f8692
pango-1.40.14-3.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3aafb854a9
yum-utils-1.1.31-514.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-45183aab17
zziplib-0.13.69-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4a21a8ca59 nss-3.39.0-1.0.fc27
nss-softokn-3.39.0-1.0.fc27 nss-util-3.39.0-1.0.fc27 nspr-4.20.0-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a7916c8b9
thunderbird-60.0-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bf613d82be CImg-2.3.6-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a82282e4e gmic-2.3.6-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8b1b2373b4 zsh-5.4.1-4.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0d0a652afe
firefox-62.0-2.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-40decc4158
java-1.8.0-openjdk-aarch32-1.8.0.181.180802-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ba443bcb6d
curl-7.55.1-14.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
118
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
79
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
43
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24
iproute-4.17.0-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11ed8d95e2
libxkbcommon-0.8.2-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f56ded11c4
openssh-7.6p1-6.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c223c11259
libldb-1.3.2-2.fc27.1.2.3 samba-4.7.10-0.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7c8794e690
perl-PathTools-3.75-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3aafb854a9
yum-utils-1.1.31-514.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ec50f052bf
redhat-rpm-config-79-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-83116f8692
pango-1.40.14-3.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-db7b8aabc5
edk2-20180815gitcb5f4f45ce-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ba443bcb6d
curl-7.55.1-14.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0d0a652afe
firefox-62.0-2.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-73bc9229ee
webkitgtk4-2.22.0-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a7916c8b9
thunderbird-60.0-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4a21a8ca59 nss-3.39.0-1.0.fc27
nss-softokn-3.39.0-1.0.fc27 nss-util-3.39.0-1.0.fc27 nspr-4.20.0-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d2f0264871
perl-File-Path-2.16-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c1a73a9e0
osinfo-db-20180903-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f0bf476cb8 pcre-8.42-4.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25df8eeb1f
pcre2-10.31-11.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-40906e11a7
hwdata-0.315-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
btrfs-progs-4.17.1-1.fc27
ghostscript-9.22-6.fc27
glusterfs-3.12.14-1.fc27
gnome-software-3.28.2-2.fc27
icu-57.1-10.fc27
java-1.8.0-openjdk-1.8.0.181.b15-0.fc27
libzypp-16.17.20-1.fc27
mate-desktop-1.20.3-1.fc27
perl-Archive-Extract-0.80-5.fc27
pungi-4.1.28-1.fc27
rpm-4.14.2-1.fc27
skf-2.10.7.1-1.fc27
thttpd-2.29-2.fc27
zypper-1.13.45-1.fc27
Details about builds:
================================================================================
btrfs-progs-4.17.1-1.fc27 (FEDORA-2018-9dba618394)
Userspace programs for btrfs
--------------------------------------------------------------------------------
Update Information:
New upstream version to match the currently shipping kernel.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 6 2018 Eric Sandeen <sandeen(a)redhat.com> 4.17.1-1
- New upstream release
* Mon Jul 23 2018 Eric Sandeen <sandeen(a)redhat.com> 4.17-1
- New upstream release
- Removes deprecated btrfs-debug-tree, btrfs-zero-log
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 4.16-3
- Rebuilt for Python 3.7
* Sun Apr 8 2018 Eric Sandeen <sandeen(a)redhat.com> 4.16-2
- Fix up header install paths in devel package (#1564881)
* Fri Apr 6 2018 Eric Sandeen <sandeen(a)redhat.com> 4.16-1
- New upstream release
* Mon Feb 26 2018 Eric Sandeen <sandeen(a)redhat.com> 4.15.1-2
- BuildRequires: gcc
* Fri Feb 16 2018 Eric Sandeen <sandeen(a)redhat.com> 4.15.1-1
- New upstream release
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.14.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Jan 5 2018 Eric Sandeen <sandeen(a)redhat.com> 4.14.1-1
- New upstream release
* Tue Oct 17 2017 Eric Sandeen <sandeen(a)redhat.com> 4.13.3-1
- New upstream release
* Fri Oct 6 2017 Eric Sandeen <sandeen(a)redhat.com> 4.13.2-1
- New upstream release
* Tue Sep 26 2017 Eric Sandeen <sandeen(a)redhat.com> 4.13.1-1
- New upstream release
* Fri Sep 8 2017 Eric Sandeen <sandeen(a)redhat.com> 4.13-1
- New upstream release
* Mon Aug 28 2017 Eric Sandeen <sandeen(a)redhat.com> 4.12.1-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1623191 - Need btrfs-progs features available from upstream
https://bugzilla.redhat.com/show_bug.cgi?id=1623191
[ 2 ] Bug #1622325 - Documentation needs to be updated to show "zstd" is an
option for btrfs mount compression
https://bugzilla.redhat.com/show_bug.cgi?id=1622325
--------------------------------------------------------------------------------
================================================================================
ghostscript-9.22-6.fc27 (FEDORA-2018-f1b1ed38b3)
A PostScript interpreter and renderer
--------------------------------------------------------------------------------
Update Information:
Security update for `CVE-2018-16543` and `CVE-2018-16510`, which were recently
discovered.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 6 2018 David Kaspar [Dee'Kej] <dkaspar(a)redhat.com> - 9.22-6
- Fix for CVE-2018-16510 added (bug #1625837)
- Fix for CVE-2018-16543 added (bug #1625852)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1625837 - CVE-2018-16510 ghostscript: Incorrect exec stack handling in the
"CS" and "SC" PDF primitives (699671) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625837
[ 2 ] Bug #1625852 - CVE-2018-16543 ghostscript: gssetresolution and gsgetresolution
memory corruption (699670) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625852
--------------------------------------------------------------------------------
================================================================================
glusterfs-3.12.14-1.fc27 (FEDORA-2018-9a4d7ec61e)
Distributed File System
--------------------------------------------------------------------------------
Update Information:
3.12.14 GA Security Fix for CVE-2018-10904 Security Fix for CVE-2018-10907
Security Fix for CVE-2018-10911 Security Fix for CVE-2018-10913 Security Fix for
CVE-2018-10914 Security Fix for CVE-2018-10923 Security Fix for CVE-2018-10926
Security Fix for CVE-2018-10927 Security Fix for CVE-2018-10928 Security Fix for
CVE-2018-10929 Security Fix for CVE-2018-10930
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 6 2018 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.12.14-1
- 3.12.14 GA
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1625067 - CVE-2018-10927 glusterfs: File status information leak and denial
of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625067
[ 2 ] Bug #1625068 - CVE-2018-10928 glusterfs: Improper resolution of symlinks allows
for privilege escalation [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625068
[ 3 ] Bug #1625069 - CVE-2018-10929 glusterfs: Arbitrary file creation on storage server
allows for execution of arbitrary code [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625069
[ 4 ] Bug #1625074 - CVE-2018-10913 glusterfs: Information Exposure in
posix_get_file_contents function in posix-helpers.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625074
[ 5 ] Bug #1625075 - CVE-2018-10914 glusterfs: remote denial of service of gluster
volumes via posix_get_file_contents function in posix-helpers.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625075
[ 6 ] Bug #1625079 - CVE-2018-10911 glusterfs: Improper deserialization in
dict.c:dict_unserialize() can allow attackers to read arbitrary memory [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625079
[ 7 ] Bug #1625080 - CVE-2018-10907 glusterfs: Stack-based buffer overflow in
server-rpc-fops.c allows remote attackers to execute arbitrary code [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625080
[ 8 ] Bug #1625085 - CVE-2018-10930 glusterfs: Files can be renamed outside volume
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625085
[ 9 ] Bug #1625086 - CVE-2018-10926 glusterfs: Device files can be created in arbitrary
locations [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625086
[ 10 ] Bug #1625091 - CVE-2018-10923 glusterfs: I/O to arbitrary devices on storage
server [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625091
[ 11 ] Bug #1625103 - CVE-2018-10904 glusterfs: Unsanitized file names in debug/io-stats
translator can allow remote attackers to execute arbitrary code [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1625103
--------------------------------------------------------------------------------
================================================================================
gnome-software-3.28.2-2.fc27 (FEDORA-2018-60b107e6b6)
A software center for GNOME
--------------------------------------------------------------------------------
Update Information:
This update adds artwork for distro upgrades to Fedora 29 Beta.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 6 2018 Kalev Lember <klember(a)redhat.com> - 3.28.2-2
- Add artwork for F29 Beta upgrades
--------------------------------------------------------------------------------
================================================================================
icu-57.1-10.fc27 (FEDORA-2018-1a85045c79)
International Components for Unicode
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-15422
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 6 2018 Eike Rathke <erack(a)redhat.com> - 57.1-10
- Resolves: rhbz#1526891 CVE-2017-15422
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523136 - CVE-2017-15422 chromium-browser: integer overflow in icu
https://bugzilla.redhat.com/show_bug.cgi?id=1523136
--------------------------------------------------------------------------------
================================================================================
java-1.8.0-openjdk-1.8.0.181.b15-0.fc27 (FEDORA-2018-a49513f8d6)
OpenJDK Runtime Environment 8
--------------------------------------------------------------------------------
Update Information:
updated to u181-b15
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 27 2018 Severin Gehwolf <sgehwolf(a)redhat.com> - 1:1.8.0.181.b13-9
- Adjust system jpeg patch, system-libjpeg.patch, so as to filter
-Wl,--as-needed. Resolves RHBZ#1622186.
* Mon Aug 27 2018 Severin Gehwolf <sgehwolf(a)redhat.com> - 1:1.8.0.181.b13-8
- Adjust system NSS patch, pr1983-jdk.patch, so as to filter
-Wl,--as-needed. Resolves RHBZ#1622186.
* Thu Aug 23 2018 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.181.b15-0
- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249
* Sat Aug 11 2018 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.181-8.b13
- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249
* Wed Aug 8 2018 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.181-8.b13
- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249
* Tue Aug 7 2018 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.181-8.b13
- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249
* Tue Aug 7 2018 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.181-8.b13
- Avoid changing variable types to fix size_t, at least for now.
- Resolves: rhbz#1594249
* Tue Aug 7 2018 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.181-8.b13
- More size_t fixes for Shenandoah.
- Resolves: rhbz#1594249
* Fri Aug 3 2018 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.181-8.b13
- Add additional s390 size_t case for Shenandoah.
- Resolves: rhbz#1594249
* Wed Aug 1 2018 Jiri Vanek <jvanek(a)redhat.com> - 1:1.8.0.181.b13-7
- build number moved from release to version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1622186 - -Wl,--as-needed: java-1.8.0-openjdk FTBFS in rawhide (F30)
https://bugzilla.redhat.com/show_bug.cgi?id=1622186
--------------------------------------------------------------------------------
================================================================================
libzypp-16.17.20-1.fc27 (FEDORA-2018-ec9bc84fda)
A package management library
--------------------------------------------------------------------------------
Update Information:
Update to `libzypp-16.17.20` and `zypper-1.13.45` to resolve CVE-2018-7685.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 5 2018 Neal Gompa <ngompa13(a)gmail.com> - 16.17.20-1
- Update to 16.17.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1624512 - CVE-2018-7685 libzypp: decoupled download and installation allows
corrupted RPM install
https://bugzilla.redhat.com/show_bug.cgi?id=1624512
--------------------------------------------------------------------------------
================================================================================
mate-desktop-1.20.3-1.fc27 (FEDORA-2018-8d80ccfa73)
Shared code for mate-panel, mate-session, mate-file-manager, etc
--------------------------------------------------------------------------------
Update Information:
- update to 1.20.3 - add mate-language apis from upstream master -
https://github.com/mate-desktop/mate-desktop/commit/ecf2fbd
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 6 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.3-1
- update to 1.20.3
- add mate-language apis from upstream master
-
https://github.com/mate-desktop/mate-desktop/commit/ecf2fbd
--------------------------------------------------------------------------------
================================================================================
perl-Archive-Extract-0.80-5.fc27 (FEDORA-2018-e0b3dcc893)
Generic archive extracting mechanism
--------------------------------------------------------------------------------
Update Information:
This release replaces perl-Extract-Archive-lzma-Compress-unLZMA package with
perl-Extract-Archive-lzma-IO-Uncompress-UnLzma package because perl-Extract-
Archive-lzma-Compress-unLZMA needs unpackaged Compress::unLZMA and thus did
nothing.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 6 2018 Petr Pisar <ppisar(a)redhat.com> - 1:0.80-5
- Remove perl-Extract-Archive-lzma-Compress-unLZMA subpackage because
Compress::unLZMA is not packaged
--------------------------------------------------------------------------------
================================================================================
pungi-4.1.28-1.fc27 (FEDORA-2018-5de433cf0f)
Distribution compose tool
--------------------------------------------------------------------------------
Update Information:
This is mostly a bugfix release: * Fixes for including multiple modules that
differ in context. * Modules can now correctly include renamed packages. * When
modules are specified by NSVC (or a part of it) now respect Koji event. * The
handler for waiting until ostree commit is signed now waits for the ref to be
updated too. * Calls to Koji API can be cached if no arguments changed.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 6 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.28-1
- gather: Fix multilib query for hybrid solver (lsedlar)
- gather: Expand multilib lists for hybrid method (lsedlar)
- Index arch modulemd by full NSVC (lsedlar)
- pkgset: Apply whitelist to modules in the tag (lsedlar)
- ostree: Wait for updated ref as well as signature (lsedlar)
- extra_iso: Set unified flag in metadata (lsedlar)
- pkgset: Respect koji event when searching for modules (lsedlar)
- Use dogpile.cache to cache the listTaggedRPMS calls if possible (jkaluza)
- gather: Keep original rpms.json in debug mode (lsedlar)
- Reduce duplication in tests (lsedlar)
- docs: Add better description for package globs (lsedlar)
- Create non-bootable ISO for variant without buildinstall (lsedlar)
- Clean up after yum tests (lsedlar)
- gather: Honor module whitelist (lsedlar)
- Clarify error about non-existing module (lsedlar)
- gather: Print full unresolved dependency (lsedlar)
- Fix tests on Python 2.6 (lsedlar)
- Include all test data in tarball (lsedlar)
--------------------------------------------------------------------------------
================================================================================
rpm-4.14.2-1.fc27 (FEDORA-2018-35efb2e3e1)
The RPM package management system
--------------------------------------------------------------------------------
Update Information:
This update brings rpm to the latest stable upstream release, including numerous
bugfixes and enhancements. In particular, this release adds an enforced package
payload verification step to installation, and an optional enforcing signature
checking mode. See
http://rpm.org/wiki/Releases/4.14.2 for details.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 6 2018 Panu Matilainen <pmatilai(a)redhat.com> - 4.14.2-1
- Rebase to 4.14.2 (
http://rpm.org/wiki/Releases/4.14.2)
- ima-evm-utils packaging is now same as in newer Fedoras, update BR
--------------------------------------------------------------------------------
================================================================================
skf-2.10.7.1-1.fc27 (FEDORA-2018-4889e2e29e)
Utility binary files in Simple Kanji Filter
--------------------------------------------------------------------------------
Update Information:
New version 2.10.7.1 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 7 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2.10.7.1-1
- 2.10.7.1 (ruby binding bugfix release)
* Thu Sep 6 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2.10.7-1
- 2.10.7 (not built actually)
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.10.5-1.4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Jun 27 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.10.5-1.3
- Perl 5.28 rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.10.5-1.2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jan 3 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2.10.5-1.1
- F-28: rebuild for ruby25
--------------------------------------------------------------------------------
================================================================================
thttpd-2.29-2.fc27 (FEDORA-2018-d9627f1703)
A tiny, turbo, throttleable lightweight HTTP server
--------------------------------------------------------------------------------
Update Information:
Unretiring thttpd and updating to latest upstream version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1623188 - Review Request: thttpd - tiny, turbo, throttleable lightweight HTTP
server
https://bugzilla.redhat.com/show_bug.cgi?id=1623188
--------------------------------------------------------------------------------
================================================================================
zypper-1.13.45-1.fc27 (FEDORA-2018-ec9bc84fda)
Command line package manager using libzypp
--------------------------------------------------------------------------------
Update Information:
Update to `libzypp-16.17.20` and `zypper-1.13.45` to resolve CVE-2018-7685.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 5 2018 Neal Gompa <ngompa13(a)gmail.com> - 1.13.45-1
- Update to 1.13.45
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1624512 - CVE-2018-7685 libzypp: decoupled download and installation allows
corrupted RPM install
https://bugzilla.redhat.com/show_bug.cgi?id=1624512
--------------------------------------------------------------------------------