The following Fedora 27 Security updates need testing:
Age URL
231
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
162
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
126
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
117
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
94
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
94
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
51
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c
tomcat-8.0.53-1.fc27
51
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1
unixODBC-2.3.7-1.fc27
29
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a7916c8b9
thunderbird-60.0-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8b109a6de0
python-marshmallow-2.11.1-8.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-54d84b0b0c
bind-9.11.4-3.P2.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11b3ae4e31
ca-certificates-2018.2.26-1.0.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e52160d0bc
python-markdown2-2.3.6-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-edf90410ea
mediawiki-1.29.3-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-113c354377
php-horde-nag-4.2.19-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-22776e8ca9 pdns-4.1.4-1.fc27.1
fawkes-1.0.1-9.fc27.1 calamares-3.1.8-2.fc27.1 librime-1.2-18.fc27.1
mongodb-3.4.11-4.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc2ba807a6
xerces-c27-2.7.0-28.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
147
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
107
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
71
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
51
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24
iproute-4.17.0-1.fc27
29
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a7916c8b9
thunderbird-60.0-1.fc27
26
https://bodhi.fedoraproject.org/updates/FEDORA-2018-227775ff3a ceph-12.2.8-1.fc27
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-387a30f785
osinfo-db-20180920-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cf532c08b5
libguestfs-1.38.6-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3006b99087 xen-4.9.3-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11b3ae4e31
ca-certificates-2018.2.26-1.0.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-80839db392
hwdata-0.316-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-31111d54a7 vim-8.1.450-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
cassandra-3.11.1-10.fc27
clamav-0.100.2-2.fc27
clementine-1.3.1-28.fc27
firefox-62.0.3-1.fc27
flatpak-1.0.3-1.fc27
flatpak-builder-1.0.1-1.fc27
geolite2-20181002-1.fc27
gitolite3-3.6.10-1.fc27
golang-github-chmduquesne-rollinghash-4.0.0-1.fc27
golang-gopkg-asn1-ber-1-1.2-1.fc27
golang-gopkg-ldap-2-2.5.1-1.fc27
groonga-8.0.7-1.fc27
guayadeque-0.4.5-0.18.beta1git3b64a58.fc27
kernel-4.18.12-100.fc27
kernel-headers-4.18.12-100.fc27
libldb-1.3.2-2.fc27.1.2.3
magic-8.2.74-1.fc27
mingw-openjpeg2-2.3.0-4.fc27
openjpeg2-2.3.0-9.fc27
pcs-0.9.166-1.fc27
purple-facebook-0.9.5-8.9ff9acf9fa14.fc27
python-productmd-1.17-1.fc27
qutebrowser-1.5.0-1.fc27
rebase-helper-0.14.0-1.fc27
samba-4.7.10-1.fc27
syncthing-0.14.51-1.fc27
vdr-epg-daemon-1.1.145-1.fc27
yamllint-1.12.0-1.fc27
Details about builds:
================================================================================
cassandra-3.11.1-10.fc27 (FEDORA-2018-1783bc8921)
Client utilities for Cassandra
--------------------------------------------------------------------------------
Update Information:
Cassandra FTBFS with error ambiguous python shebang in /usr/bin/cqlsh for Fedora
Rawhide ---- Fix for these bugs: #1635590 cassandra missing cassandra user
#1635233 cassandra: failed to start service
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Jakub Janco <jjanco(a)redhat.com> - 3.11.1-10
- In cqlsh explicitly use /usr/bin/python2 instead python
* Wed Oct 3 2018 Jakub Janco <jjanco(a)redhat.com> - 3.11.1-9
- Move cqlshrc to doc files, because it is not globally used in /etc/cassandra, fix typo
while calling getent command
* Tue Oct 2 2018 Jakub Janco <jjanco(a)redhat.com> - 3.11.1-8
- Do not remove mvn dependency guava
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1635668 - Cassandra FTBFS with error ambiguous python shebang in
/usr/bin/cqlsh
https://bugzilla.redhat.com/show_bug.cgi?id=1635668
[ 2 ] Bug #1635590 - cassandra missing cassandra user
https://bugzilla.redhat.com/show_bug.cgi?id=1635590
[ 3 ] Bug #1635233 - cassandra: failed to start service
https://bugzilla.redhat.com/show_bug.cgi?id=1635233
--------------------------------------------------------------------------------
================================================================================
clamav-0.100.2-2.fc27 (FEDORA-2018-1fc39f2d13)
End-user tools for the Clam Antivirus scanner
--------------------------------------------------------------------------------
Update Information:
ClamAV 0.100.2 has been released! This is a patch release to address several
vulnerabilities. Fixes for the following ClamAV vulnerabilities:
CVE-2018-15378: Vulnerability in ClamAV's MEW unpacking feature that
could allow an unauthenticated, remote attacker to cause a denial-of-service
(DoS) condition on an affected device. Reported by Secunia Research
at Flexera. Fix for a two-byte buffer over-read bug in ClamAV's PDF
parsing code. Reported by Alex Gaynor. Fixes for the
following vulnerabilities in bundled third-party libraries:
CVE-2018-14680: An issue was discovered in mspack/chmd.c in
libmspack before 0.7alpha. It does not reject blank CHM filenames.
CVE-2018-14681: An issue was discovered in kwajd_read_headers in
mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions
could cause a one- or two-byte overwrite. CVE-2018-14682: An
issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an
off-by-one error in the TOLOWER() macro for CHM decompression. Additionally,
0.100.2 reverted 0.100.1's patch for CVE-2018-14679, and applied libmspack's
version of the fix in its place Other changes: Some users have
reported freshclam signature update failures as a result of a delay between the
time the new signature database content is announced and the time that the
content-delivery-network has the content available for download. To mitigate
these errors, this patch release includes some modifications to freshclam to
make it more lenient, and to reduce the time that freshclam will ignore a mirror
when it detects an issue. On-Access "Extra Scanning," an opt-in minor
feature of OnAccess scanning on Linux systems, has been disabled due to a known
issue with resource cleanup OnAccessExtraScanning will be re-enabled in a future
release when the issue is resolved. In the mean-time, users who enabled the
feature in clamd.conf will see a warning informing them that the feature is not
active. For details, click here.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 S��rgio Basto <sergio(a)serjux.com> - 0.100.2-2
- Revert unwanted committed parts of commit "clean whitespace"
* Thu Oct 4 2018 S��rgio Basto <sergio(a)serjux.com> - 0.100.2-1
- Update to 0.100.2
- Fix logrotate example (#1610735)
- Improve clamd@.service (enter in commit "clean whitespace" by mistake sorry)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1635922 - clamav-0.100.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1635922
--------------------------------------------------------------------------------
================================================================================
clementine-1.3.1-28.fc27 (FEDORA-2018-1fe8f8cff2)
A music player and library organizer
--------------------------------------------------------------------------------
Update Information:
Bugfix: When the systray option is turned on, Clementine does not start on Gnome
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 29 2018 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> 1.3.1-28
- Disable systray on Gnome. RHBZ#1517748
* Thu Sep 6 2018 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> 1.3.1-27
- Improvement on the previous patch. Fixes RHBZ#1624618
* Mon Aug 13 2018 Nicolas Chauvet <kwizart(a)gmail.com> - 1.3.1-26
- Rebuilt for cryptopp 7.0.0
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.1-25
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Sun May 13 2018 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> 1.3.1-24
- Workaround for the analyzer crash RHBZ#1566807 until we have a better fix
* Tue Apr 10 2018 Orcan Ogetbil <oget [DOT] fedora [AT] gmail [DOT] com> 1.3.1-23
- Backported cryptopp >= 6.0.0 build fix
* Tue Apr 10 2018 Rex Dieter <rdieter(a)fedoraproject.org> 1.3.1-22
- rebuild (cryptopp)
- use %make_build, workaround FTBFS on f28+
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.1-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1517748 - Clementine doesn't work on Fedora 27, 28
https://bugzilla.redhat.com/show_bug.cgi?id=1517748
--------------------------------------------------------------------------------
================================================================================
firefox-62.0.3-1.fc27 (FEDORA-2018-2ea4a2cb8b)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
* Update to new version (62.0.3) * More info at
https://www.mozilla.org/en-
US/firefox/62.0.3/releasenotes/
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 2 2018 Martin Stransky <stransky(a)redhat.com> - 62.0.3-1
- Updated to latest upstream (62.0.3)
* Wed Sep 26 2018 Martin Stransky <stransky(a)redhat.com> - 62.0.2-3
- Enabled DBus remote for all Gtk+ backends
- Removed obsoleted patches
* Tue Sep 25 2018 Martin Stransky <stransky(a)redhat.com> - 62.0.2-2
- Disable workaround for mozbz#1342344 - GFX glitches when building
with -O3/gcc 7.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1635396 - Firefox 62.0.3 released - including security fix
https://bugzilla.redhat.com/show_bug.cgi?id=1635396
--------------------------------------------------------------------------------
================================================================================
flatpak-1.0.3-1.fc27 (FEDORA-2018-889185894e)
Application deployment framework for desktop apps
--------------------------------------------------------------------------------
Update Information:
flatpak 1.0.3 and flatpak-builder 1.0.1 releases. flatpak 1.0.3: * run: You
can now use --system to run an app that otherwise would run the user version.
* New permission --allow=canbus that filters out access to AF_CAN sockets. *
lib: New install flags FLATPAK_INSTALL_FLAGS_NO_TRIGGERS and new function
flatpak_installation_run_triggers() * lib: Better error reporting, including
some new error values that replace the generic FAILED. * uninstall --unused:
Improve handling of which .Locale extensions are used * run: Make flatpak run
on systems where $XDG_RUNTIME_DIR contains a symlink beneath /var (commonly
/var/run -> /run). * Don't export any desktop/dbus/mimetype files in
subdirectories. * build-init: We now record the base ref (if used) in the
metadata. Nothing uses this atm, but it can be used by tools. * We now
respect the upstream ostree.deploy-collection-id instead of the flatpak-
specific xa.collection-id metadata key to decide whether to switch to
collection ids for a remote. This is useful, because if you use the new one,
only new clients (that support it better) will use it. * create-usb: Fix
assertion failure in some error cases * create-usb: Always create archive-z2
repos * create-usb: Don't create unnecessary summary in repo * permissions:
Avoid errors if there is no permissions table * repo: Fix flatpak repo
sometimes using the wrong ostree-metadata ref. * Avoid fsync when updating
$installation/.changed. * Add the missing appstream2 ref to the xa.cache
metadata * The test-suite got some modifications to make it easier to maintain.
* Documentation updates * Translation updates flatpak-builder 1.0.1: * Run
appstream-util mirror-screenshots in the sandbox, rather than on the host, as
the host might not have a new enough appstream-glib. * Fix build cache when a
module has uncommon characters in the name.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Kalev Lember <klember(a)redhat.com> - 1.0.3-1
- Update to 1.0.3
--------------------------------------------------------------------------------
================================================================================
flatpak-builder-1.0.1-1.fc27 (FEDORA-2018-889185894e)
Tool to build flatpaks from source
--------------------------------------------------------------------------------
Update Information:
flatpak 1.0.3 and flatpak-builder 1.0.1 releases. flatpak 1.0.3: * run: You
can now use --system to run an app that otherwise would run the user version.
* New permission --allow=canbus that filters out access to AF_CAN sockets. *
lib: New install flags FLATPAK_INSTALL_FLAGS_NO_TRIGGERS and new function
flatpak_installation_run_triggers() * lib: Better error reporting, including
some new error values that replace the generic FAILED. * uninstall --unused:
Improve handling of which .Locale extensions are used * run: Make flatpak run
on systems where $XDG_RUNTIME_DIR contains a symlink beneath /var (commonly
/var/run -> /run). * Don't export any desktop/dbus/mimetype files in
subdirectories. * build-init: We now record the base ref (if used) in the
metadata. Nothing uses this atm, but it can be used by tools. * We now
respect the upstream ostree.deploy-collection-id instead of the flatpak-
specific xa.collection-id metadata key to decide whether to switch to
collection ids for a remote. This is useful, because if you use the new one,
only new clients (that support it better) will use it. * create-usb: Fix
assertion failure in some error cases * create-usb: Always create archive-z2
repos * create-usb: Don't create unnecessary summary in repo * permissions:
Avoid errors if there is no permissions table * repo: Fix flatpak repo
sometimes using the wrong ostree-metadata ref. * Avoid fsync when updating
$installation/.changed. * Add the missing appstream2 ref to the xa.cache
metadata * The test-suite got some modifications to make it easier to maintain.
* Documentation updates * Translation updates flatpak-builder 1.0.1: * Run
appstream-util mirror-screenshots in the sandbox, rather than on the host, as
the host might not have a new enough appstream-glib. * Fix build cache when a
module has uncommon characters in the name.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Kalev Lember <klember(a)redhat.com> - 1.0.1-1
- Update to 1.0.1
--------------------------------------------------------------------------------
================================================================================
geolite2-20181002-1.fc27 (FEDORA-2018-ce8b8cc767)
Free IP geolocation databases
--------------------------------------------------------------------------------
Update Information:
- Latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Carl George <carl(a)george.computer> - 20181002-1
- Latest upstream
--------------------------------------------------------------------------------
================================================================================
gitolite3-3.6.10-1.fc27 (FEDORA-2018-fb7eafc8ed)
Highly flexible server for git directory version tracker
--------------------------------------------------------------------------------
Update Information:
3.6.10, fixes broken 3.6.9
https://groups.google.com/forum/#!topic/gitolite/qovbyqzo0TY
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 1:3.6.10-1
- 3.6.10.
--------------------------------------------------------------------------------
================================================================================
golang-github-chmduquesne-rollinghash-4.0.0-1.fc27 (FEDORA-2018-61f66c9219)
Some rolling checksum implementations in go
--------------------------------------------------------------------------------
Update Information:
Update syncthing to version 0.14.51. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v0.14.51 Update rollinghash
to version 4.0.0 and adapt syncthing to the slightly changed behaviour. Release
notes:
https://github.com/chmduquesne/rollinghash#whats-new-in-v4 Initial
packaging of gopkg.in/asn1-ber.v1 and gopkg.in/ldap.v2, which are new
dependencies of syncthing 0.14.51.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 13 2018 Fabio Valentini <decathorpe(a)gmail.com> - 4.0.0-1
- Update to version 4.0.0.
- Remove test program, it pulls in extra dependencies.
- Update to spec 3.0.
--------------------------------------------------------------------------------
================================================================================
golang-gopkg-asn1-ber-1-1.2-1.fc27 (FEDORA-2018-61f66c9219)
ASN1 BER Encoding / Decoding Library for Go
--------------------------------------------------------------------------------
Update Information:
Update syncthing to version 0.14.51. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v0.14.51 Update rollinghash
to version 4.0.0 and adapt syncthing to the slightly changed behaviour. Release
notes:
https://github.com/chmduquesne/rollinghash#whats-new-in-v4 Initial
packaging of gopkg.in/asn1-ber.v1 and gopkg.in/ldap.v2, which are new
dependencies of syncthing 0.14.51.
--------------------------------------------------------------------------------
================================================================================
golang-gopkg-ldap-2-2.5.1-1.fc27 (FEDORA-2018-61f66c9219)
Basic LDAP v3 functionality for Go
--------------------------------------------------------------------------------
Update Information:
Update syncthing to version 0.14.51. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v0.14.51 Update rollinghash
to version 4.0.0 and adapt syncthing to the slightly changed behaviour. Release
notes:
https://github.com/chmduquesne/rollinghash#whats-new-in-v4 Initial
packaging of gopkg.in/asn1-ber.v1 and gopkg.in/ldap.v2, which are new
dependencies of syncthing 0.14.51.
--------------------------------------------------------------------------------
================================================================================
groonga-8.0.7-1.fc27 (FEDORA-2018-dabef5b204)
An Embeddable Fulltext Search Engine
--------------------------------------------------------------------------------
Update Information:
See
http://groonga.org/en/blog/2018/09/29/groonga-8.0.7.html
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 29 2018 Kentaro Hayashi <hayashi(a)clear-code.com> - 8.0.7-1
- new upstream release
--------------------------------------------------------------------------------
================================================================================
guayadeque-0.4.5-0.18.beta1git3b64a58.fc27 (FEDORA-2018-f1530768df)
Music player
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.5-0.18.beta1git3b64a58
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 5 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.4.5-0.18.beta13b64a58
- Update to 0.4.5-0.18.beta13b64a58
--------------------------------------------------------------------------------
================================================================================
kernel-4.18.12-100.fc27 (FEDORA-2018-94315e9a6b)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.18.12 update contains a number of important fixes across the tree ----
The 4.18.11 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.12-100
- Linux v4.18.12
* Wed Oct 3 2018 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix arm64 kvm priv escalation (rhbz 1635475 1635476)
* Mon Oct 1 2018 Laura Abbott <labbott(a)redhat.com>
- Disable CONFIG_CRYPTO_DEV_SP_PSP (rhbz 1608242)
* Mon Oct 1 2018 Laura Abbott <labbott(a)redhat.com>
- Fix for Intel Sensor Hub (rhbz 1634250)
* Sun Sep 30 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.11-100
- Linux v4.18.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1635475 - kernel: Privilege escalation on arm64 via KVM hypervisor
https://bugzilla.redhat.com/show_bug.cgi?id=1635475
--------------------------------------------------------------------------------
================================================================================
kernel-headers-4.18.12-100.fc27 (FEDORA-2018-94315e9a6b)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 4.18.12 update contains a number of important fixes across the tree ----
The 4.18.11 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.12-100
- Linux v4.18.12
* Sun Sep 30 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.11-100
- Linux v4.18.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1635475 - kernel: Privilege escalation on arm64 via KVM hypervisor
https://bugzilla.redhat.com/show_bug.cgi?id=1635475
--------------------------------------------------------------------------------
================================================================================
libldb-1.3.2-2.fc27.1.2.3 (FEDORA-2018-7ad33ae27d)
A schema-less, ldap like, API and database
--------------------------------------------------------------------------------
Update Information:
Fix vfs_fruit module ---- Update to Samba 4.7.10
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 27 2018 Lukas Slebodnik <lslebodn(a)fedoraproject.org> - 1.3.2-2-1.2.3
- New upstream release 1.2.3
- libldb-1.3.2 is not officially supported by samba-4.7.x even though it worked
for 10 months in f27. But it caused configure time failures for samba 4.7.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1625170 - samba-4.7.10-0.fc27 breaks OSX clients
https://bugzilla.redhat.com/show_bug.cgi?id=1625170
--------------------------------------------------------------------------------
================================================================================
magic-8.2.74-1.fc27 (FEDORA-2018-723d6ec855)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.2.74 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.2.74-1
- 8.2.74
* Tue Oct 2 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.2.73-1
- 8.2.73
--------------------------------------------------------------------------------
================================================================================
mingw-openjpeg2-2.3.0-4.fc27 (FEDORA-2018-64d64bd05e)
MinGW Windows openjpeg2 library
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2018-5785.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Sandro Mani <manisandro(a)gmail.com> - 2.3.0-3
- Backport patch for CVE-2018-5785 (#1537758)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1537758 - CVE-2018-5785 openjpeg: integer overflow in opj_j2k_setup_encoder
function in openjp2/j2k.c
https://bugzilla.redhat.com/show_bug.cgi?id=1537758
--------------------------------------------------------------------------------
================================================================================
openjpeg2-2.3.0-9.fc27 (FEDORA-2018-64d64bd05e)
C-Library for JPEG 2000
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2018-5785.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Sandro Mani <manisandro(a)gmail.com> - 2.3.0-9
- Backport patch for CVE-2018-5785 (#1537758)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Mar 7 2018 Sandro Mani <manisandro(a)gmail.com> - 2.3.0-7
- BR: gcc-c++
* Mon Feb 19 2018 Sandro Mani <manisandro(a)gmail.com> - 2.3.0-6
- Add missing BR: gcc, make
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Feb 3 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.3.0-4
- Switch to %ldconfig_scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1537758 - CVE-2018-5785 openjpeg: integer overflow in opj_j2k_setup_encoder
function in openjp2/j2k.c
https://bugzilla.redhat.com/show_bug.cgi?id=1537758
--------------------------------------------------------------------------------
================================================================================
pcs-0.9.166-1.fc27 (FEDORA-2018-995f3f3e12)
Pacemaker Configuration System
--------------------------------------------------------------------------------
Update Information:
Rebased to latest upstream sources
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 5 2018 Ondrej Mular <omular(a)redhat.com> - 0.9.166-1
- Rebased to latest upstream sources (see CHANGELOG.md)
--------------------------------------------------------------------------------
================================================================================
purple-facebook-0.9.5-8.9ff9acf9fa14.fc27 (FEDORA-2018-623ef5db3c)
Facebook protocol plugin for purple2
--------------------------------------------------------------------------------
Update Information:
- Backported pull-request adding an option to show inactive friends as away. -
Backported pull-request fixing compiler warnings. - Add disclaimer to
%description.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.9.5-8.9ff9acf9fa14
- Backported pull-request fixing compiler warnings
* Thu Oct 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.9.5-7.9ff9acf9fa14
- Add disclaimer to %description
* Thu Oct 4 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.9.5-6.9ff9acf9fa14
- Backported pull-request adding an option to show inactive friends as away
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.9.5-5.9ff9acf9fa14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-productmd-1.17-1.fc27 (FEDORA-2018-0073a0659f)
Library providing parsers for metadata related to OS installation
--------------------------------------------------------------------------------
Update Information:
New upstream release: * unified images can now list which variants they
actually combine * debugging output is fixed for objects without a related
compose
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 5 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 1.17-1
- Do not use custom repr for objects with no compose
- Add additional_variants attribute to unified images
--------------------------------------------------------------------------------
================================================================================
qutebrowser-1.5.0-1.fc27 (FEDORA-2018-e27493657e)
A keyboard-driven, vim-like browser based on PyQt5 and QtWebEngine
--------------------------------------------------------------------------------
Update Information:
The major change is the support of PDFJS with the qtwebengine backend, but pdfjs
is not yet properly packaged in Fedora (See RHBZ#1635783).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Timoth��e Floure <fnux(a)fedoraproject.org> - 1.5.0-1
- Rebase to 1.5.0
--------------------------------------------------------------------------------
================================================================================
rebase-helper-0.14.0-1.fc27 (FEDORA-2018-e2cada9086)
The tool that helps you to rebase your package to the latest version
--------------------------------------------------------------------------------
Update Information:
News in version **0.14.0**: - Added **PathsToRPMMacros** SPEC hook for
transforming paths in *%files* section - Added `--favor-on-conflict` option to
prefer upstream or downstream changes with conflicting patches - Extended
**PyPIURLFix** SPEC hook to incorporate the new
https://pypi.org website - Made
processing of patches in a SPEC file more robust - Rewritten functional test to
use an artificial package designed to check most aspects of the rebase process -
`pylint` is now run with Python 3 only, as Python 2 variant is no longer
supported - Code refactoring, simplified `SpecFile` class - Checkers are no
longer required for **rebase-helper** to run, only available checkers are used -
Fixed bug in **licensecheck** checker when used with **json** output tool -
Fixed SPEC hook tests - Fixed strangely acting lookaside cache upload
progressbar - Fixed downloading of SRPMs with `--get-old-build-from-koji` -
Fixed building usage documentation
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 5 2018 Nikola Forr�� <nforro(a)redhat.com> - 0.14.0-1
- New release 0.14.0
--------------------------------------------------------------------------------
================================================================================
samba-4.7.10-1.fc27 (FEDORA-2018-7ad33ae27d)
Server and Client software to interoperate with Windows machines
--------------------------------------------------------------------------------
Update Information:
Fix vfs_fruit module ---- Update to Samba 4.7.10
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Guenther Deschner <gdeschner(a)redhat.com> - 4.7.10-1
- resolves: #1625170 - Fix vfs_fruit
* Mon Aug 27 2018 Guenther Deschner <gdeschner(a)redhat.com> - 4.7.10-0
- Update to Samba 4.7.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1625170 - samba-4.7.10-0.fc27 breaks OSX clients
https://bugzilla.redhat.com/show_bug.cgi?id=1625170
--------------------------------------------------------------------------------
================================================================================
syncthing-0.14.51-1.fc27 (FEDORA-2018-61f66c9219)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update syncthing to version 0.14.51. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v0.14.51 Update rollinghash
to version 4.0.0 and adapt syncthing to the slightly changed behaviour. Release
notes:
https://github.com/chmduquesne/rollinghash#whats-new-in-v4 Initial
packaging of gopkg.in/asn1-ber.v1 and gopkg.in/ldap.v2, which are new
dependencies of syncthing 0.14.51.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 2 2018 Fabio Valentini <decathorpe(a)gmail.com> - 0.14.51-1
- Update to version 0.14.51.
* Sun Sep 30 2018 Fabio Valentini <decathorpe(a)gmail.com> - 0.14.50-2
- Adapt to rollinghash v4.0.0 changes.
--------------------------------------------------------------------------------
================================================================================
vdr-epg-daemon-1.1.145-1.fc27 (FEDORA-2018-1ad3be722e)
A daemon to download EPG data from internet and manage it in a mysql database
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.145 ---- Update to 1.1.144
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 1.1.145-1
- Update to 1.1.144
* Thu Oct 4 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 1.1.144-1
- Update to 1.1.144
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.141-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
yamllint-1.12.0-1.fc27 (FEDORA-2018-04ece224fe)
A linter for YAML files
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 4 2018 Adrien Verg�� <adrienverge(a)gmail.com> - 1.12.0-1
- Update to latest upstream version
--------------------------------------------------------------------------------