The following Fedora 27 Security updates need testing:
Age URL
131
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
63
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
49
https://bodhi.fedoraproject.org/updates/FEDORA-2018-775d96b54b
blktrace-1.2.0-6.fc27
36
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a10c1d234e
vim-syntastic-3.9.0-1.fc27
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f7a1334c68
sox-14.4.2.0-22.fc27
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aac3ca8936
webkitgtk4-2.20.3-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-da33a74b32
libgxps-0.3.0-5.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ae1ced8fb6
dcraw-9.28.0-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2d2179e7d0
python-XStatic-jquery-ui-1.12.0.1-2.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-79841c871e
nodejs-8.11.3-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-69780fc4d7
gnupg-1.4.23-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f02e5ed7b qemu-2.10.1-4.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e657c3c037
libvirt-3.7.0-5.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fa19f76ac5
qutebrowser-1.3.3-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5142d70592
podman-0.6.4-1.gitd5beb2f.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9c593a3cde
drupal7-backup_migrate-3.5-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-94eb743dad
libgit2-0.26.4-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2bdfc9dc67
php-symfony-2.8.42-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c8ddc44bbb
php-symfony3-3.3.17-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2ea2642a7e
firefox-61.0-4.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4943b0505b ant-1.10.1-10.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
47
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2a57dc63c1
selinux-policy-3.13.1-283.35.fc27
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-33052e653e
iproute-4.16.0-1.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bd7544b85b fwupd-1.0.8-1.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.10-2.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5c3b7f0960
perl-Time-Local-1.280-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-da33a74b32
libgxps-0.3.0-5.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aac3ca8936
webkitgtk4-2.20.3-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f5989c8ede
osinfo-db-20180612-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9b320376ec
ethtool-4.17-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e5d54db474
NetworkManager-1.8.8-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-69780fc4d7
gnupg-1.4.23-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-49b4b4638d
python-productmd-1.15-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d70cf2c993
python-rpm-macros-3-25.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f02e5ed7b qemu-2.10.1-4.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e657c3c037
libvirt-3.7.0-5.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7aa8911d0d samba-4.7.8-0.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-55824401dc
pulseaudio-12.0-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-670f4fe2a4 exo-0.12.2-1.fc27
xfce4-settings-4.12.4-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2ea2642a7e
firefox-61.0-4.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d8e28f3fce
glusterfs-3.12.11-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2900e03ce5
glib2-2.54.3-3.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-741164810b
perl-File-Temp-0.230.600-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6559e94544 sssd-1.16.2-4.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4c2c1fdaf1 pcre2-10.31-5.fc27
The following builds have been pushed to Fedora 27 updates-testing
R-itertools-0.1.3-1.fc27
ack-2.24-1.fc27
bind-9.11.3-6.fc27
bubblewrap-0.2.1-1.fc27
cantata-2.3.1-1.fc27
emacs-25.3-4.fc27
flatpak-0.99.2-1.fc27
flatpak-builder-0.99.2-1.fc27
git-annex-6.20180626-1.fc27
globus-ftp-control-8.4-1.fc27
gofer-2.12.1-1.fc27
ibus-typing-booster-2.0.2-1.fc27
inkscape-0.92.3-2.fc27
inxi-3.0.14-1.fc27
kernel-4.17.3-100.fc27
libbtbb-2018.06.R1-2.fc27
libnice-0.1.14-7.20180504git34d6044.fc27
liborigin-20080225-24.fc27
liborigin2-2.0.0-18.fc27
libreswan-3.25-1.fc27
libsemanage-2.7-3.fc27
lynis-2.6.5-1.fc27
myproxy-6.1.30-1.fc27
ndctl-61.1-1.fc27
ostree-2018.6-1.fc27
pcre-8.42-2.fc27
perl-CPAN-Perl-Releases-3.68-1.fc27
perl-Event-RPC-1.10-1.fc27
php-pecl-gearman-2.0.4-1.fc27
php-pecl-igbinary-2.0.7-1.fc27
pidgin-sipe-1.23.2-2.fc27
pipewire-0.1.9-1.fc27
python-dns-lexicon-2.4.4-2.fc27
python-grabbit-0.2.0-1.fc27
python-pyvo-0.8.1-1.fc27
python37-3.7.0-1.fc27
qt5-qtbase-5.9.6-3.fc27
salt-2018.3.2-1.fc27
scidavis-1.23-3.fc27
tiny-dnn-1.0.0-0.a3.2.fc27
unbound-1.7.3-1.fc27
vim-8.1.119-1.fc27
vulkan-headers-1.1.77.0-1.fc27
vulkan-loader-1.1.77.0-4.fc27
vulkan-tools-1.1.77.0-1.fc27
vulkan-validation-layers-1.1.77.0-3.fc27
webextension-token-signing-1.0.7-1.fc27
xdg-desktop-portal-0.11-1.fc27
xdg-desktop-portal-gtk-0.11-1.fc27
xen-4.9.2-6.fc27
Details about builds:
================================================================================
R-itertools-0.1.3-1.fc27 (FEDORA-2018-7c58802cf8)
Iterator Tools
--------------------------------------------------------------------------------
Update Information:
Initial package of itertools for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594968 - Review Request: R-itertools - Iterator Tools
https://bugzilla.redhat.com/show_bug.cgi?id=1594968
--------------------------------------------------------------------------------
================================================================================
ack-2.24-1.fc27 (FEDORA-2018-39d8aeec8b)
Grep-like text finder
--------------------------------------------------------------------------------
Update Information:
Update to 2.24
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Robin Lee <cheeselee(a)fedoraproject.org> - 2.24-1
- Update to 2.24 (#1594219)
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.22-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594219 - ack-2.24 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1594219
--------------------------------------------------------------------------------
================================================================================
bind-9.11.3-6.fc27 (FEDORA-2018-0712169848)
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
--------------------------------------------------------------------------------
Update Information:
- Fix CVE-2018-5738 - Remove named.iscdlv.key - Make home writeable - Use
invalid shell /bin/false for bind
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Petr Men����k <pemensik(a)redhat.com> - 32:9.11.3-6
- Require utils instead of library
* Fri May 25 2018 Petr Men����k <pemensik(a)redhat.com> - 32:9.11.3-5
- Remove named.iscdlv.key file (#1595782)
- Fix CVE-2018-5738
- Make named home writeable (#1422680)
- Change named shell to /bin/false
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1589616 - CVE-2018-5738 bind: Improper handling of configuration allows all
clients to perform recursive queries
https://bugzilla.redhat.com/show_bug.cgi?id=1589616
--------------------------------------------------------------------------------
================================================================================
bubblewrap-0.2.1-1.fc27 (FEDORA-2018-bd8549f05a)
Core execution tool for unprivileged containers
--------------------------------------------------------------------------------
Update Information:
Update flatpak and portals to latest versions flatpak 0.99.1 ------------ This
is the first pre-release before flatpak 1.0. This is considered feature-complete
and we expect no features or major changes before 1.0, only bugfixes. Note:
There were some (minor) API changes in the FlatpakTransaction APIs that were
added in 0.11.8, so please don't use the old version. (Note: I know of no user
of this API). Changes since last minor release: * Ostree 2018.6 is required,
and with this, the p2p code in flatpak is made non-optional. * flatpak
install/update/ininstall now lists all the operations that it will do and asks
for confirmation before starting. * In the above confirmation the permissions
(new permissions for updates) are shown for all applications. * The
FlatpakTranscation API has a new ::ready signal that allows users to do similar
confirmation prompts. * P2P updates are more efficient * system-wide
installation uses less fsync calls so should installation should be faster. *
New ssh agent permissions allows granting an app ssh access. xdg-desktop-portal
0.11 ------------------ * Add initial support for Snap packages. * Fix memory
leaks when ownership of bus names changes. * Include docs for the session,
remote desktop and screencast portals. * document-portal: Be more flexible
validating apps' IDs. * document-portal: Be more strict when checking & granting
file access. * file-chooser: Fix crash with unitialized data in the save dialog.
* open-uri: Don't ever skip showing the dialog if a threshold is set. * open-
uri: Don't register http: URIs for sandboxed handlers. * remote-desktop: Use the
correct device type values. * screencast: Fix synchronization issue with
PipeWire. * Import permission store from flatpak * Import document portal from
flatpak * Add remote desktop portal * Add screencast portal * Add "interactive"
mode to screenshot portal * file-chooser: Don't return document paths for paths
the application has direct access to * Handle newer version of bubblewrap * New
abstraction for application info, supporting multiple sandbox technologies * Add
basic test suite xdg-desktop-portal-gtk 0.11 ------------------------ *
remotedesktop: Add support for the 'finish' flag of NotifyPointerAxis. *
remotedesktop: Correctly expose device types supporting remote control. * print:
Add a 'Print Preview' button (requires evince-previewer). * screenshot: Make
sure the dialog is shown in the interactive case. * Fix critical in file chooser
* Add options to screenshot portals * Add screencast and remote portal
implementations pipewire 0.1.9 -------------- - Various build fixes - Do more
permission checks - Add support for doing async connections. This can be used to
make connections through the portal later. - Fix device creation from the
GStreamer device monitor - v4l2 experiment with controls - move rtkit to a
module to avoid dbus dependency - use dmabuf allocator in gstreamer elements -
Add DSP module for pro audio cases, remove jack module. The idea is to make a
replacement jack client library that talks pipewire directly instead of trying
to emulate a jack server. - Various memory handling improvements
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 24 2018 David King <amigadave(a)amigadave.com> - 0.2.1-1
- Update to 0.2.1
--------------------------------------------------------------------------------
================================================================================
cantata-2.3.1-1.fc27 (FEDORA-2018-9296823b6c)
Music Player Daemon (MPD) graphical client
--------------------------------------------------------------------------------
Update Information:
Latest upstream release, omits some mounting code found to be insecure and not
well tested.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 2.3.1-1
- cantata-2.3.1
- include upstream commit that removes samba share mounting code
* Fri Apr 27 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 2.3.0-1
- cantata-2.3.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1595570 - CVE-2018-12562 cantata: Insufficient input validation in the
'mount.cifs.wrapper' script
https://bugzilla.redhat.com/show_bug.cgi?id=1595570
[ 2 ] Bug #1595569 - CVE-2018-12561 cantata: Possible injection of additional mount
options by manipulating the domain parameters of the samba URL
https://bugzilla.redhat.com/show_bug.cgi?id=1595569
[ 3 ] Bug #1595567 - CVE-2018-12560 cantata: Directory traversal in the D-Bus service of
cantata-mounter
https://bugzilla.redhat.com/show_bug.cgi?id=1595567
[ 4 ] Bug #1595566 - CVE-2018-12559 cantata: Directory traversal due to insufficient
mount target check in mounter.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1595566
--------------------------------------------------------------------------------
================================================================================
emacs-25.3-4.fc27 (FEDORA-2018-ca436df0dd)
GNU Emacs text editor
--------------------------------------------------------------------------------
Update Information:
Emacs crashes when loading color fonts (rhbz#1519038)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Jan Syn����ek <jsynacek(a)redhat.com> - 1:25.3-4
- Emacs crashes when loading color fonts (#1519038)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1519038 - Emacs crashes when loading color fonts
https://bugzilla.redhat.com/show_bug.cgi?id=1519038
--------------------------------------------------------------------------------
================================================================================
flatpak-0.99.2-1.fc27 (FEDORA-2018-bd8549f05a)
Application deployment framework for desktop apps
--------------------------------------------------------------------------------
Update Information:
Update flatpak and portals to latest versions flatpak 0.99.1 ------------ This
is the first pre-release before flatpak 1.0. This is considered feature-complete
and we expect no features or major changes before 1.0, only bugfixes. Note:
There were some (minor) API changes in the FlatpakTransaction APIs that were
added in 0.11.8, so please don't use the old version. (Note: I know of no user
of this API). Changes since last minor release: * Ostree 2018.6 is required,
and with this, the p2p code in flatpak is made non-optional. * flatpak
install/update/ininstall now lists all the operations that it will do and asks
for confirmation before starting. * In the above confirmation the permissions
(new permissions for updates) are shown for all applications. * The
FlatpakTranscation API has a new ::ready signal that allows users to do similar
confirmation prompts. * P2P updates are more efficient * system-wide
installation uses less fsync calls so should installation should be faster. *
New ssh agent permissions allows granting an app ssh access. xdg-desktop-portal
0.11 ------------------ * Add initial support for Snap packages. * Fix memory
leaks when ownership of bus names changes. * Include docs for the session,
remote desktop and screencast portals. * document-portal: Be more flexible
validating apps' IDs. * document-portal: Be more strict when checking & granting
file access. * file-chooser: Fix crash with unitialized data in the save dialog.
* open-uri: Don't ever skip showing the dialog if a threshold is set. * open-
uri: Don't register http: URIs for sandboxed handlers. * remote-desktop: Use the
correct device type values. * screencast: Fix synchronization issue with
PipeWire. * Import permission store from flatpak * Import document portal from
flatpak * Add remote desktop portal * Add screencast portal * Add "interactive"
mode to screenshot portal * file-chooser: Don't return document paths for paths
the application has direct access to * Handle newer version of bubblewrap * New
abstraction for application info, supporting multiple sandbox technologies * Add
basic test suite xdg-desktop-portal-gtk 0.11 ------------------------ *
remotedesktop: Add support for the 'finish' flag of NotifyPointerAxis. *
remotedesktop: Correctly expose device types supporting remote control. * print:
Add a 'Print Preview' button (requires evince-previewer). * screenshot: Make
sure the dialog is shown in the interactive case. * Fix critical in file chooser
* Add options to screenshot portals * Add screencast and remote portal
implementations pipewire 0.1.9 -------------- - Various build fixes - Do more
permission checks - Add support for doing async connections. This can be used to
make connections through the portal later. - Fix device creation from the
GStreamer device monitor - v4l2 experiment with controls - move rtkit to a
module to avoid dbus dependency - use dmabuf allocator in gstreamer elements -
Add DSP module for pro audio cases, remove jack module. The idea is to make a
replacement jack client library that talks pipewire directly instead of trying
to emulate a jack server. - Various memory handling improvements
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Kalev Lember <klember(a)redhat.com> - 0.99.2-1
- Update to 0.99.2
* Thu Jun 21 2018 David King <amigadave(a)amigadave.com> - 0.99.1-1
- Update to 0.99.1
--------------------------------------------------------------------------------
================================================================================
flatpak-builder-0.99.2-1.fc27 (FEDORA-2018-bd8549f05a)
Tool to build flatpaks from source
--------------------------------------------------------------------------------
Update Information:
Update flatpak and portals to latest versions flatpak 0.99.1 ------------ This
is the first pre-release before flatpak 1.0. This is considered feature-complete
and we expect no features or major changes before 1.0, only bugfixes. Note:
There were some (minor) API changes in the FlatpakTransaction APIs that were
added in 0.11.8, so please don't use the old version. (Note: I know of no user
of this API). Changes since last minor release: * Ostree 2018.6 is required,
and with this, the p2p code in flatpak is made non-optional. * flatpak
install/update/ininstall now lists all the operations that it will do and asks
for confirmation before starting. * In the above confirmation the permissions
(new permissions for updates) are shown for all applications. * The
FlatpakTranscation API has a new ::ready signal that allows users to do similar
confirmation prompts. * P2P updates are more efficient * system-wide
installation uses less fsync calls so should installation should be faster. *
New ssh agent permissions allows granting an app ssh access. xdg-desktop-portal
0.11 ------------------ * Add initial support for Snap packages. * Fix memory
leaks when ownership of bus names changes. * Include docs for the session,
remote desktop and screencast portals. * document-portal: Be more flexible
validating apps' IDs. * document-portal: Be more strict when checking & granting
file access. * file-chooser: Fix crash with unitialized data in the save dialog.
* open-uri: Don't ever skip showing the dialog if a threshold is set. * open-
uri: Don't register http: URIs for sandboxed handlers. * remote-desktop: Use the
correct device type values. * screencast: Fix synchronization issue with
PipeWire. * Import permission store from flatpak * Import document portal from
flatpak * Add remote desktop portal * Add screencast portal * Add "interactive"
mode to screenshot portal * file-chooser: Don't return document paths for paths
the application has direct access to * Handle newer version of bubblewrap * New
abstraction for application info, supporting multiple sandbox technologies * Add
basic test suite xdg-desktop-portal-gtk 0.11 ------------------------ *
remotedesktop: Add support for the 'finish' flag of NotifyPointerAxis. *
remotedesktop: Correctly expose device types supporting remote control. * print:
Add a 'Print Preview' button (requires evince-previewer). * screenshot: Make
sure the dialog is shown in the interactive case. * Fix critical in file chooser
* Add options to screenshot portals * Add screencast and remote portal
implementations pipewire 0.1.9 -------------- - Various build fixes - Do more
permission checks - Add support for doing async connections. This can be used to
make connections through the portal later. - Fix device creation from the
GStreamer device monitor - v4l2 experiment with controls - move rtkit to a
module to avoid dbus dependency - use dmabuf allocator in gstreamer elements -
Add DSP module for pro audio cases, remove jack module. The idea is to make a
replacement jack client library that talks pipewire directly instead of trying
to emulate a jack server. - Various memory handling improvements
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Kalev Lember <klember(a)redhat.com> - 0.99.2-1
- Update to 0.99.2
* Mon Jun 25 2018 David King <amigadave(a)amigadave.com> - 0.99.1-1
- Update to 0.99.1
--------------------------------------------------------------------------------
================================================================================
git-annex-6.20180626-1.fc27 (FEDORA-2018-7e8c49a451)
Manage files with git, without checking their contents into git
--------------------------------------------------------------------------------
Update Information:
Update to 6.20180626 Security fix for CVE-2018-10857 and CVE-2018-10859
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 28 2018 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> -
6.20180626-1.fc27
- update to 6.20180626
- Fix CVE-2018-10857 and CVE-2018-10859 (#1595634)
- Enable TestSuite.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1595631 - CVE-2018-10857 git-annex: Private data exposure and exfiltration
https://bugzilla.redhat.com/show_bug.cgi?id=1595631
[ 2 ] Bug #1595633 - CVE-2018-10859 git-annex: Malicious server could trick git-annex
into decrypting a file encrypted to the user's gpg key
https://bugzilla.redhat.com/show_bug.cgi?id=1595633
--------------------------------------------------------------------------------
================================================================================
globus-ftp-control-8.4-1.fc27 (FEDORA-2018-887bd1946b)
Globus Toolkit - GridFTP Control Library
--------------------------------------------------------------------------------
Update Information:
globus-ftp-control (8.4) * Check for missing signing policy req flag myproxy
(6.1.30) * Remove macro overquoting
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 28 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 8.4-1
- GT6 update: Check for missing signing policy req flag
--------------------------------------------------------------------------------
================================================================================
gofer-2.12.1-1.fc27 (FEDORA-2018-54c0d502c8)
A lightweight, extensible python agent
--------------------------------------------------------------------------------
Update Information:
Latest Upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Jeff Ortel <jortel(a)redhat.com> 2.12.1-1
- Reload plugin on no-route caused by missing queue. (jortel(a)redhat.com)
* Wed May 23 2018 Jeff Ortel <jortel(a)redhat.com> 2.12.0-1
- Fix buildrequires: python3-setuptools. (jortel(a)redhat.com)
* Tue May 22 2018 Jeff Ortel <jortel(a)redhat.com> 2.12.0-0
- python-future not available in el6/el7. (jortel(a)redhat.com)
- Fixed exception propagation of builtin exceptions when raised by different python
versions (2/3).
- Fixed raising ValidationError when non-validation related exceptions are caught.
- Z-bit added to version: 2.12.0
* Tue May 8 2018 Jeff Ortel <jortel(a)redhat.com> 2.12-0
- Add support for python3; Drop support for python<2.7. (jortel(a)redhat.com)
* Tue Apr 24 2018 Jeff Ortel <jortel(a)redhat.com> 2.11.4-3
- Fixed dist in spec. (jortel(a)redhat.com)
* Thu Apr 12 2018 Jeff Ortel <jortel(a)redhat.com> 2.11.4-2
- packaging: with_systemd and with_tools; devel not packaged.
(jortel(a)redhat.com)
* Wed Apr 11 2018 Jeff Ortel <jortel(a)redhat.com> 2.11.4-1
- Apply upstream patch. (jortel(a)redhat.com)
* Wed Apr 11 2018 Jeff Ortel <jortel(a)redhat.com> 2.11.3-1
- Fix amqp handling of: Basic.return: (312) NO_ROUTE. (jortel(a)redhat.com)
* Wed Apr 11 2018 Jeff Ortel <jortel(a)redhat.com> 2.11.2-1
- Compat with python-amqp 2.1.4. (jortel(a)redhat.com)
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-2.0.2-1.fc27 (FEDORA-2018-4f1c5c0825)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.2; Better Tab handling, use Tab to switch to the next candidate,
not to commit ---- Update to 2.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Mike FABIAN <mfabian(a)redhat.com> - 2.0.2-1
- Update to 2.0.2
- Better Tab handling, use Tab to switch to the next candidate, not to commit
* Thu Jun 21 2018 Mike FABIAN <mfabian(a)redhat.com> - 2.0.1-1
- Update to 2.0.1
- Update translations from zanata (ja updated)
- Update emoji annotations from CLDR
- Fix some bugs in the usage of ���prefix��� for prefixes other than ���/usr��� (For
FreeBSD)
- Make itb_util.get_ime_help() work on FreeBSD
- Update UnicodeData.txt to Unicode 11.0.0
- Remove useless 't-nil vi-base': 'vi-base.mim', from M17N_INPUT_METHODS
- Remove extra space in entry for sa-IAST input method to make it work
- Show in the setup tool in the input listbox whether minput_open_im() succeeded.
- Use the rocket icon emoji_u1f680.svg from the ���Noto Color Emoji��� font
--------------------------------------------------------------------------------
================================================================================
inkscape-0.92.3-2.fc27 (FEDORA-2018-803fe43b00)
Vector-based drawing program using SVG
--------------------------------------------------------------------------------
Update Information:
Patch for text crash.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.92.3-2
- Fix for crash, 1575842.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575842 - Inkscape crashes when hitting ENTER on text input
https://bugzilla.redhat.com/show_bug.cgi?id=1575842
--------------------------------------------------------------------------------
================================================================================
inxi-3.0.14-1.fc27 (FEDORA-2018-f9b2201fe0)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 3.0.14. Now it uses Perl.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 28 2018 Vasiliy N. Glazov <vascom2(a)gmail.com> 3.0.14-1
- Update to 3.0.14
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.56-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kernel-4.17.3-100.fc27 (FEDORA-2018-2a0f8b2c9d)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The v4.17.3 update contains important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 26 2018 Jeremy Cline <jcline(a)redhat.com> - 4.17.3-100
- Linux v4.17.3
- Don't log an error if RTC_NVMEM isn't enabled (rhbz 1568276)
* Mon Jun 25 2018 Laura Abbott <labbott(a)fedoraproject.org>
- Some webcam fixes (rhbz 1592454 1590304)
- Fix for armv7 siginfo ABI regression (rhbz 1591516)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568276 - rt_cmos registration error.
https://bugzilla.redhat.com/show_bug.cgi?id=1568276
[ 2 ] Bug #1584216 - Fedora 28 on AWS does not get proper MTU set from DHCP
https://bugzilla.redhat.com/show_bug.cgi?id=1584216
[ 3 ] Bug #1594172 - CVE-2018-12633 kernel: Double-fetch vulnerability in
drivers/virt/vboxguest/vboxguest_linux.c:vbg_misc_device_ioctl() allows information leak
and local denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1594172
[ 4 ] Bug #1591516 - armv7: siginfo ABI regression breaks strace testsuite
https://bugzilla.redhat.com/show_bug.cgi?id=1591516
[ 5 ] Bug #1590304 - ThinkPad X1C5 fails to boot: uvcvideo: Failed to query (GET_MIN)
UVC control 11 on unit 2
https://bugzilla.redhat.com/show_bug.cgi?id=1590304
[ 6 ] Bug #1592454 - uvcvideo found UVC 1.50 device Integrated Webcam but failed to
initialize the device.
https://bugzilla.redhat.com/show_bug.cgi?id=1592454
--------------------------------------------------------------------------------
================================================================================
libbtbb-2018.06.R1-2.fc27 (FEDORA-2018-7278dfe72e)
A Bluetooth baseband decoding library
--------------------------------------------------------------------------------
Update Information:
* Minor bugfix and version bump for 2018-06-R1 Ubertooth release
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
libnice-0.1.14-7.20180504git34d6044.fc27 (FEDORA-2018-633f12aa29)
GLib ICE implementation
--------------------------------------------------------------------------------
Update Information:
- update to 0.1.14-85-g34d6044 - component: accept TURN in
nice_component_verify_remote_candidate()
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 7 2018 Kamil Dudka <kdudka(a)redhat.com> - 0.1.14-7.20180504git34d6044
- component: accept TURN in nice_component_verify_remote_candidate() (#1541646)
- update to 0.1.14-85-g34d6044 (#1541646)
* Mon Apr 16 2018 Kamil Dudka <kdudka(a)redhat.com> - 0.1.14-6.20171128gitfb2f1f7
- temporarily make the upstream test-suite run on Intel arches only
- disable test-send-recv, which fails in Koji
* Fri Mar 16 2018 Kamil Dudka <kdudka(a)redhat.com> - 0.1.14-5.20171128gitfb2f1f7
- do not build with -Werror by default
- make the build more verbose
* Fri Feb 9 2018 Kamil Dudka <kdudka(a)redhat.com> - 0.1.14-4.20171128gitfb2f1f7
- enable make check again
- make tests pass in Koji
- disable test-new-dribble that sometimes hangs indefinitely
- make tests compile on i686
- make the package build on armv7hl
- make the package build on Fedora 28
- avoid build failure if gstreamer-plugins-base-devel is installed
- move autoreconf invocation to %prep
- use Name Version Release that explicitly identifies an SCM snapshot (#1541646)
* Fri Feb 9 2018 Stefan Becker <chemobejk(a)gmail.com> - 0.1.14-3
- update to 0.1.14-70-gfb2f1f7 with alternate server fixes for SIPE
- add autoreconf build step
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.14-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1541646 - improve support for Skype for Business users
https://bugzilla.redhat.com/show_bug.cgi?id=1541646
--------------------------------------------------------------------------------
================================================================================
liborigin-20080225-24.fc27 (FEDORA-2018-2822b18d1f)
Library for reading OriginLab OPJ project files
--------------------------------------------------------------------------------
Update Information:
Switch to %ldconfig_scriptlets macro.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 28 2018 Alexander Ploumistos <alexpl(a)fedoraproject.org> - 20080225-24
- Replace obsolete ldconfig scriptlets with macro and remove dependencies
--------------------------------------------------------------------------------
================================================================================
liborigin2-2.0.0-18.fc27 (FEDORA-2018-d6010023aa)
Library for reading OriginLab OPJ project files
--------------------------------------------------------------------------------
Update Information:
Switch to %ldconfig_scriptlets macro.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 28 2018 Alexander Ploumistos <alexpl(a)fedoraproject.org> - 2.0.0-18
- Replace obsolete scriptlets with ldconfig macro
--------------------------------------------------------------------------------
================================================================================
libreswan-3.25-1.fc27 (FEDORA-2018-ab3b5ff113)
IPsec implementation with IKEv1 and IKEv2 keying protocols
--------------------------------------------------------------------------------
Update Information:
Updated to 3.25
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Paul Wouters <pwouters(a)redhat.com> - 3.25-1
- Updated to 3.25
* Mon Feb 19 2018 Paul Wouters <pwouters(a)redhat.com> - 3.23-2
- Support crypto-policies package
- Pull in some patches from upstream and IANA registry updates
- gcc7 format-truncate fixes and workarounds
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.23-1.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libsemanage-2.7-3.fc27 (FEDORA-2018-76f1fc8358)
SELinux binary policy manipulation library
--------------------------------------------------------------------------------
Update Information:
Disable expand-check (#1595316)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 26 2018 Paul Moore <pmoore(a)redhat.com> - 2.7-3
- Disable expand-check (#1595316)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1595316 - unable to run containers; exec user process caused "permission
denied"
https://bugzilla.redhat.com/show_bug.cgi?id=1595316
--------------------------------------------------------------------------------
================================================================================
lynis-2.6.5-1.fc27 (FEDORA-2018-3b487633f0)
Security and system auditing tool
--------------------------------------------------------------------------------
Update Information:
2.6.5
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 2.6.5-1
- 2.6.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1595476 - lynis-2.6.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1595476
--------------------------------------------------------------------------------
================================================================================
myproxy-6.1.30-1.fc27 (FEDORA-2018-887bd1946b)
Manage X.509 Public Key Infrastructure (PKI) security credentials
--------------------------------------------------------------------------------
Update Information:
globus-ftp-control (8.4) * Check for missing signing policy req flag myproxy
(6.1.30) * Remove macro overquoting
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 28 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.1.30-1
- Update to 6.1.30: Remove macro overquoting
--------------------------------------------------------------------------------
================================================================================
ndctl-61.1-1.fc27 (FEDORA-2018-b91197eaab)
Manage "libnvdimm" subsystem devices (Non-volatile Memory)
--------------------------------------------------------------------------------
Update Information:
release v61.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 26 2018 Vishal Verma <vishal(a)stellar.sh> - 61.1-1
- release v61.1
* Tue Jun 26 2018 Vishal Verma <vishal(a)stellar.sh> - 61-1
- new version
--------------------------------------------------------------------------------
================================================================================
ostree-2018.6-1.fc27 (FEDORA-2018-bd8549f05a)
Tool for managing bootable, immutable filesystem trees
--------------------------------------------------------------------------------
Update Information:
Update flatpak and portals to latest versions flatpak 0.99.1 ------------ This
is the first pre-release before flatpak 1.0. This is considered feature-complete
and we expect no features or major changes before 1.0, only bugfixes. Note:
There were some (minor) API changes in the FlatpakTransaction APIs that were
added in 0.11.8, so please don't use the old version. (Note: I know of no user
of this API). Changes since last minor release: * Ostree 2018.6 is required,
and with this, the p2p code in flatpak is made non-optional. * flatpak
install/update/ininstall now lists all the operations that it will do and asks
for confirmation before starting. * In the above confirmation the permissions
(new permissions for updates) are shown for all applications. * The
FlatpakTranscation API has a new ::ready signal that allows users to do similar
confirmation prompts. * P2P updates are more efficient * system-wide
installation uses less fsync calls so should installation should be faster. *
New ssh agent permissions allows granting an app ssh access. xdg-desktop-portal
0.11 ------------------ * Add initial support for Snap packages. * Fix memory
leaks when ownership of bus names changes. * Include docs for the session,
remote desktop and screencast portals. * document-portal: Be more flexible
validating apps' IDs. * document-portal: Be more strict when checking & granting
file access. * file-chooser: Fix crash with unitialized data in the save dialog.
* open-uri: Don't ever skip showing the dialog if a threshold is set. * open-
uri: Don't register http: URIs for sandboxed handlers. * remote-desktop: Use the
correct device type values. * screencast: Fix synchronization issue with
PipeWire. * Import permission store from flatpak * Import document portal from
flatpak * Add remote desktop portal * Add screencast portal * Add "interactive"
mode to screenshot portal * file-chooser: Don't return document paths for paths
the application has direct access to * Handle newer version of bubblewrap * New
abstraction for application info, supporting multiple sandbox technologies * Add
basic test suite xdg-desktop-portal-gtk 0.11 ------------------------ *
remotedesktop: Add support for the 'finish' flag of NotifyPointerAxis. *
remotedesktop: Correctly expose device types supporting remote control. * print:
Add a 'Print Preview' button (requires evince-previewer). * screenshot: Make
sure the dialog is shown in the interactive case. * Fix critical in file chooser
* Add options to screenshot portals * Add screencast and remote portal
implementations pipewire 0.1.9 -------------- - Various build fixes - Do more
permission checks - Add support for doing async connections. This can be used to
make connections through the portal later. - Fix device creation from the
GStreamer device monitor - v4l2 experiment with controls - move rtkit to a
module to avoid dbus dependency - use dmabuf allocator in gstreamer elements -
Add DSP module for pro audio cases, remove jack module. The idea is to make a
replacement jack client library that talks pipewire directly instead of trying
to emulate a jack server. - Various memory handling improvements
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 24 2018 David King <amigadave(a)amigadave.com> - 2018.6-1
- Update to 2018.6
--------------------------------------------------------------------------------
================================================================================
pcre-8.42-2.fc27 (FEDORA-2018-d3507ef90d)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release fixes handling UTF and start-of-pattern options in the C++ wrapper.
It also corrects an error message and locale handling in the pcregrep tool.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 28 2018 Petr Pisar <ppisar(a)redhat.com> - 8.42-2
- Fix handling UTF and start-of-pattern options in C++ wrapper
(upstream bug #2283)
- Fix an error message and locale handling in pcregrep tool
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.68-1.fc27 (FEDORA-2018-239130efc9)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version ---- Updated to the latest version ----
Updated to the latest version ---- Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.68-1
- 3.68 bump
* Sat Jun 23 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.66-1
- 3.66 bump
* Wed Jun 20 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.64-1
- 3.64 bump
* Tue Jun 19 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.62-1
- 3.62 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1595713 - perl-CPAN-Perl-Releases-3.68 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1595713
[ 2 ] Bug #1594468 - perl-CPAN-Perl-Releases-3.66 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1594468
[ 3 ] Bug #1593043 - perl-CPAN-Perl-Releases-3.64 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1593043
[ 4 ] Bug #1592742 - perl-CPAN-Perl-Releases-3.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1592742
--------------------------------------------------------------------------------
================================================================================
perl-Event-RPC-1.10-1.fc27 (FEDORA-2018-1e3a1eca9d)
Event based transparent client/server RPC framework
--------------------------------------------------------------------------------
Update Information:
This release fixes tests. ---- This release fixes tests. It also adds
Event::RPC::Server->prepare() to provide a contol over the Event loop.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 28 2018 Petr Pisar <ppisar(a)redhat.com> - 1.10-1
- 1.10 bump
* Tue Jun 26 2018 Petr Pisar <ppisar(a)redhat.com> - 1.09-1
- 1.09 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1595972 - perl-Event-RPC-1.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1595972
[ 2 ] Bug #1594993 - perl-Event-RPC-1.09 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1594993
--------------------------------------------------------------------------------
================================================================================
php-pecl-gearman-2.0.4-1.fc27 (FEDORA-2018-bfc96e1fd1)
PHP wrapper to libgearman
--------------------------------------------------------------------------------
Update Information:
**Version 2.4.0** Param to skip exception handling setup in
addServer/addServers in GearmanClient class Addressing issue
[#59](https://github.com/wcgallego/pecl-gearman/issues/59) in wcgallego/pecl-
gearman In 2013, a patch was introduced in the core libgearman code to do
checks for connections to the GearmanD daemon. In doing so, the libgearman
function gearman_client_set_server_option now does a connection to the GearmanD
daemon, breaking the contract that GearmanClient::addServer and addServers does
not do any connection work, but simply adds the host names to an array. If the
host cannot be reached, this will throw an exception. This patch makes it
optional to skip the exception handling code here and to attempt making the
connections as needed when actual work needs to be done.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Remi Collet <remi(a)remirepo.net> - 2.0.4-1
- update to 2.0.4
--------------------------------------------------------------------------------
================================================================================
php-pecl-igbinary-2.0.7-1.fc27 (FEDORA-2018-e56f6df0f6)
Replacement for the standard PHP serializer
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.7** * Fix compiler warnings about format strings, for errors that
should not occur during normal igbinary usage.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Remi Collet <remi(a)remirepo.net> - 2.0.7-1
- update to 2.0.7
--------------------------------------------------------------------------------
================================================================================
pidgin-sipe-1.23.2-2.fc27 (FEDORA-2018-21c5582c1f)
Pidgin protocol plugin to connect to MS Office Communicator
--------------------------------------------------------------------------------
Update Information:
add upstream patch for Remmina v1.2.0 rcgit.27
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Stefan Becker <chemobejk(a)gmail.com> - 1.23.2-2
- add upstream patch for Remmina v1.2.0 rcgit.27 (bz #1594900)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594900 - needs patch for setting colordepth when running freerdp
https://bugzilla.redhat.com/show_bug.cgi?id=1594900
--------------------------------------------------------------------------------
================================================================================
pipewire-0.1.9-1.fc27 (FEDORA-2018-bd8549f05a)
Media Sharing Server
--------------------------------------------------------------------------------
Update Information:
Update flatpak and portals to latest versions flatpak 0.99.1 ------------ This
is the first pre-release before flatpak 1.0. This is considered feature-complete
and we expect no features or major changes before 1.0, only bugfixes. Note:
There were some (minor) API changes in the FlatpakTransaction APIs that were
added in 0.11.8, so please don't use the old version. (Note: I know of no user
of this API). Changes since last minor release: * Ostree 2018.6 is required,
and with this, the p2p code in flatpak is made non-optional. * flatpak
install/update/ininstall now lists all the operations that it will do and asks
for confirmation before starting. * In the above confirmation the permissions
(new permissions for updates) are shown for all applications. * The
FlatpakTranscation API has a new ::ready signal that allows users to do similar
confirmation prompts. * P2P updates are more efficient * system-wide
installation uses less fsync calls so should installation should be faster. *
New ssh agent permissions allows granting an app ssh access. xdg-desktop-portal
0.11 ------------------ * Add initial support for Snap packages. * Fix memory
leaks when ownership of bus names changes. * Include docs for the session,
remote desktop and screencast portals. * document-portal: Be more flexible
validating apps' IDs. * document-portal: Be more strict when checking & granting
file access. * file-chooser: Fix crash with unitialized data in the save dialog.
* open-uri: Don't ever skip showing the dialog if a threshold is set. * open-
uri: Don't register http: URIs for sandboxed handlers. * remote-desktop: Use the
correct device type values. * screencast: Fix synchronization issue with
PipeWire. * Import permission store from flatpak * Import document portal from
flatpak * Add remote desktop portal * Add screencast portal * Add "interactive"
mode to screenshot portal * file-chooser: Don't return document paths for paths
the application has direct access to * Handle newer version of bubblewrap * New
abstraction for application info, supporting multiple sandbox technologies * Add
basic test suite xdg-desktop-portal-gtk 0.11 ------------------------ *
remotedesktop: Add support for the 'finish' flag of NotifyPointerAxis. *
remotedesktop: Correctly expose device types supporting remote control. * print:
Add a 'Print Preview' button (requires evince-previewer). * screenshot: Make
sure the dialog is shown in the interactive case. * Fix critical in file chooser
* Add options to screenshot portals * Add screencast and remote portal
implementations pipewire 0.1.9 -------------- - Various build fixes - Do more
permission checks - Add support for doing async connections. This can be used to
make connections through the portal later. - Fix device creation from the
GStreamer device monitor - v4l2 experiment with controls - move rtkit to a
module to avoid dbus dependency - use dmabuf allocator in gstreamer elements -
Add DSP module for pro audio cases, remove jack module. The idea is to make a
replacement jack client library that talks pipewire directly instead of trying
to emulate a jack server. - Various memory handling improvements
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 David King <amigadave(a)amigadave.com> - 0.1.9-1
- Update to 0.1.9
--------------------------------------------------------------------------------
================================================================================
python-dns-lexicon-2.4.4-2.fc27 (FEDORA-2018-6c0d10ba26)
Manipulate DNS records on various DNS providers in a standardized/agnostic way
--------------------------------------------------------------------------------
Update Information:
Update to 2.4.4. ---- Update to 2.4.3.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 26 2018 Eli Young <elyscape(a)gmail.com> - 2.4.4-2
- Remove unnecessary shebang
* Tue Jun 26 2018 Eli Young <elyscape(a)gmail.com> - 2.4.4-1
- Update to 2.4.4 (#1594777)
* Tue Jun 19 2018 Eli Young <elyscape(a)gmail.com> - 2.4.3-1
- Update to 2.4.3 (#1592158)
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2.4.0-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594777 - python-dns-lexicon-2.4.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1594777
[ 2 ] Bug #1592158 - python-dns-lexicon-2.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1592158
--------------------------------------------------------------------------------
================================================================================
python-grabbit-0.2.0-1.fc27 (FEDORA-2018-c29bd76a34)
Get grabby with file trees
--------------------------------------------------------------------------------
Update Information:
New package---grabbit!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1538824 - Review Request: python-grabbit - Get grabby with file trees
https://bugzilla.redhat.com/show_bug.cgi?id=1538824
--------------------------------------------------------------------------------
================================================================================
python-pyvo-0.8.1-1.fc27 (FEDORA-2018-323c49b25d)
Access to remote data and services of the Virtual observatory (VO) using Python
--------------------------------------------------------------------------------
Update Information:
Small bugfix update, fixing the column naming
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Christian Dersch <lupinix(a)fedoraproject.org> - 0.8.1-1
- new version
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.8-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1595720 - python-pyvo-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1595720
--------------------------------------------------------------------------------
================================================================================
python37-3.7.0-1.fc27 (FEDORA-2018-742666e89a)
Version 3.7 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
Update to 3.7.0 final \o/
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.0-1
- Update to 3.7.0 final
--------------------------------------------------------------------------------
================================================================================
qt5-qtbase-5.9.6-3.fc27 (FEDORA-2018-ce355274aa)
Qt5 - QtBase components
--------------------------------------------------------------------------------
Update Information:
Pulll in candidate upstream fix for a layout regression found in recent 5.9.6
release, see also
https://bugreports.qt.io/browse/QTBUG-68939
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 5.9.6-3
- pull in candidate fix for QTBUG-68939
* Wed Jun 27 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 5.9.6-2
- revert commit causing layout regressions (QTBUG-68939)
--------------------------------------------------------------------------------
================================================================================
salt-2018.3.2-1.fc27 (FEDORA-2018-82dab6ced4)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to feature release 2018.3.2-1 for Python 2 ---- Update to feature
release 2018.3.0-1 ---- Update to feature release 2017.7.5-1 for Python 2
---- Update to feature release 2017.7.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 SaltStack Packaging Team <packaging(a)saltstack.com> - 2018.3.2-1
- Update to feature release 2018.3.2-1 for Python 2
* Fri Jun 8 2018 SaltStack Packaging Team <packaging(a)saltstack.com> - 2018.3.1-1
- Update to feature release 2018.3.1-1 for Python 2
- Revised minimum msgpack version >= 0.4
* Fri Mar 30 2018 SaltStack Packaging Team <packaging(a)saltstack.com> - 2018.3.0-1
- Update to feature release 2018.3.0-1
* Tue Mar 27 2018 SaltStack Packaging Team <packaging(a)saltstack.com> - 2017.7.5-1
- Update to feature release 2017.7.5-1
* Fri Feb 16 2018 SaltStack Packaging Team <packaging(a)saltstack.com> - 2017.7.4-1
- Update to feature release 2017.7.4-1
- Limit to Tornado use to between versions 4.2.1 and less than 5.0
--------------------------------------------------------------------------------
================================================================================
scidavis-1.23-3.fc27 (FEDORA-2018-a178638f9a)
Application for Scientific Data Analysis and Visualization
--------------------------------------------------------------------------------
Update Information:
Fixes font scaling bug [#337](https://sourceforge.net/p/scidavis/scidavis-
bugs/337/).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Alexander Ploumistos <alexpl(a)fedoraproject.org> - 1.23-3
- Fix font scaling bug #337 - patch by Miquel Garriga
--------------------------------------------------------------------------------
================================================================================
tiny-dnn-1.0.0-0.a3.2.fc27 (FEDORA-2018-9da7461032)
Header only, dependency-free deep learning framework in C++14
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594858 - Review Request: tiny-dnn - Header only, dependency-free deep
learning framework in C++14
https://bugzilla.redhat.com/show_bug.cgi?id=1594858
--------------------------------------------------------------------------------
================================================================================
unbound-1.7.3-1.fc27 (FEDORA-2018-4a8615c5b9)
Validating, recursive, and caching DNS(SEC) resolver
--------------------------------------------------------------------------------
Update Information:
- Update to 1.7.3 - Do not require python2 from unbound-devel
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Petr Men����k <pemensik(a)redhat.com> - 1.7.3-1
- Update to 1.7.3 (#1593708)
* Wed Jun 27 2018 Petr Men����k <pemensik(a)redhat.com> - 1.7.2-3
- Remove last python2 dependency from python3 build
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.7.2-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1593708 - unbound-1.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1593708
--------------------------------------------------------------------------------
================================================================================
vim-8.1.119-1.fc27 (FEDORA-2018-ad57645272)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit ---- The newest upstream commit
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 28 2018 Karsten Hopp <karsten(a)redhat.com> 8.1.119-1
- patchlevel 119
* Thu Jun 28 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 2:8.1.117-2
- Perl 5.28 rebuild
* Wed Jun 27 2018 Karsten Hopp <karsten(a)redhat.com> 8.1.117-1
- patchlevel 117
* Mon Jun 25 2018 Karsten Hopp <karsten(a)redhat.com> 8.1.115-1
- patchlevel 115
--------------------------------------------------------------------------------
================================================================================
vulkan-headers-1.1.77.0-1.fc27 (FEDORA-2018-b048db87cd)
Vulkan Header files and API registry
--------------------------------------------------------------------------------
Update Information:
Vulkan-1.1.77.0 update. Kronos have split the vulkan source code into 4
separate source code packages 1. vulkan-devel has been replaced by vulkan-
loader-devel and vulkan-headers. 2. vulkan has been replaced by vulkan-loader,
this doesn't install the layers. If you require the layers you will need to
install vulkan-validation-layers. vulkan-loader replaces vulkan-filesystem.
3. vulkan-demos has been replaced by vulkan-tools.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594134 - Review Request: vulkan-headers - Vulkan Header files and API
registry
https://bugzilla.redhat.com/show_bug.cgi?id=1594134
[ 2 ] Bug #1595099 - Review Request: vulkan-loader - Vulkan loader
https://bugzilla.redhat.com/show_bug.cgi?id=1595099
[ 3 ] Bug #1595308 - Review Request: vulkan-tools - Vulkan tools
https://bugzilla.redhat.com/show_bug.cgi?id=1595308
[ 4 ] Bug #1595305 - Review Request: vulkan-validation-layers - Vulkan validation
layers
https://bugzilla.redhat.com/show_bug.cgi?id=1595305
--------------------------------------------------------------------------------
================================================================================
vulkan-loader-1.1.77.0-4.fc27 (FEDORA-2018-b048db87cd)
Vulkan ICD desktop loader
--------------------------------------------------------------------------------
Update Information:
Vulkan-1.1.77.0 update. Kronos have split the vulkan source code into 4
separate source code packages 1. vulkan-devel has been replaced by vulkan-
loader-devel and vulkan-headers. 2. vulkan has been replaced by vulkan-loader,
this doesn't install the layers. If you require the layers you will need to
install vulkan-validation-layers. vulkan-loader replaces vulkan-filesystem.
3. vulkan-demos has been replaced by vulkan-tools.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594134 - Review Request: vulkan-headers - Vulkan Header files and API
registry
https://bugzilla.redhat.com/show_bug.cgi?id=1594134
[ 2 ] Bug #1595099 - Review Request: vulkan-loader - Vulkan loader
https://bugzilla.redhat.com/show_bug.cgi?id=1595099
[ 3 ] Bug #1595308 - Review Request: vulkan-tools - Vulkan tools
https://bugzilla.redhat.com/show_bug.cgi?id=1595308
[ 4 ] Bug #1595305 - Review Request: vulkan-validation-layers - Vulkan validation
layers
https://bugzilla.redhat.com/show_bug.cgi?id=1595305
--------------------------------------------------------------------------------
================================================================================
vulkan-tools-1.1.77.0-1.fc27 (FEDORA-2018-b048db87cd)
Vulkan tools
--------------------------------------------------------------------------------
Update Information:
Vulkan-1.1.77.0 update. Kronos have split the vulkan source code into 4
separate source code packages 1. vulkan-devel has been replaced by vulkan-
loader-devel and vulkan-headers. 2. vulkan has been replaced by vulkan-loader,
this doesn't install the layers. If you require the layers you will need to
install vulkan-validation-layers. vulkan-loader replaces vulkan-filesystem.
3. vulkan-demos has been replaced by vulkan-tools.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594134 - Review Request: vulkan-headers - Vulkan Header files and API
registry
https://bugzilla.redhat.com/show_bug.cgi?id=1594134
[ 2 ] Bug #1595099 - Review Request: vulkan-loader - Vulkan loader
https://bugzilla.redhat.com/show_bug.cgi?id=1595099
[ 3 ] Bug #1595308 - Review Request: vulkan-tools - Vulkan tools
https://bugzilla.redhat.com/show_bug.cgi?id=1595308
[ 4 ] Bug #1595305 - Review Request: vulkan-validation-layers - Vulkan validation
layers
https://bugzilla.redhat.com/show_bug.cgi?id=1595305
--------------------------------------------------------------------------------
================================================================================
vulkan-validation-layers-1.1.77.0-3.fc27 (FEDORA-2018-b048db87cd)
Vulkan validation layers
--------------------------------------------------------------------------------
Update Information:
Vulkan-1.1.77.0 update. Kronos have split the vulkan source code into 4
separate source code packages 1. vulkan-devel has been replaced by vulkan-
loader-devel and vulkan-headers. 2. vulkan has been replaced by vulkan-loader,
this doesn't install the layers. If you require the layers you will need to
install vulkan-validation-layers. vulkan-loader replaces vulkan-filesystem.
3. vulkan-demos has been replaced by vulkan-tools.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594134 - Review Request: vulkan-headers - Vulkan Header files and API
registry
https://bugzilla.redhat.com/show_bug.cgi?id=1594134
[ 2 ] Bug #1595099 - Review Request: vulkan-loader - Vulkan loader
https://bugzilla.redhat.com/show_bug.cgi?id=1595099
[ 3 ] Bug #1595308 - Review Request: vulkan-tools - Vulkan tools
https://bugzilla.redhat.com/show_bug.cgi?id=1595308
[ 4 ] Bug #1595305 - Review Request: vulkan-validation-layers - Vulkan validation
layers
https://bugzilla.redhat.com/show_bug.cgi?id=1595305
--------------------------------------------------------------------------------
================================================================================
webextension-token-signing-1.0.7-1.fc27 (FEDORA-2018-d40f617b0b)
Firefox extension for signing with your eID on the web
--------------------------------------------------------------------------------
Update Information:
- New upstream release 1.0.7 - Remove libpath patch since the fix made upstream
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 Dmitri Smirnov <dmitri(a)smirnov.ee> - 1.0.7-1
- 1.0.7 upstream release
* Sun Jun 3 2018 Dmitri Smirnov <dmitri(a)smirnov.ee> - 1.0.6-7
- Added install hint and native messaging host files for Chrome
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592860 - Remove workarounds
https://bugzilla.redhat.com/show_bug.cgi?id=1592860
--------------------------------------------------------------------------------
================================================================================
xdg-desktop-portal-0.11-1.fc27 (FEDORA-2018-bd8549f05a)
Portal frontend service to flatpak
--------------------------------------------------------------------------------
Update Information:
Update flatpak and portals to latest versions flatpak 0.99.1 ------------ This
is the first pre-release before flatpak 1.0. This is considered feature-complete
and we expect no features or major changes before 1.0, only bugfixes. Note:
There were some (minor) API changes in the FlatpakTransaction APIs that were
added in 0.11.8, so please don't use the old version. (Note: I know of no user
of this API). Changes since last minor release: * Ostree 2018.6 is required,
and with this, the p2p code in flatpak is made non-optional. * flatpak
install/update/ininstall now lists all the operations that it will do and asks
for confirmation before starting. * In the above confirmation the permissions
(new permissions for updates) are shown for all applications. * The
FlatpakTranscation API has a new ::ready signal that allows users to do similar
confirmation prompts. * P2P updates are more efficient * system-wide
installation uses less fsync calls so should installation should be faster. *
New ssh agent permissions allows granting an app ssh access. xdg-desktop-portal
0.11 ------------------ * Add initial support for Snap packages. * Fix memory
leaks when ownership of bus names changes. * Include docs for the session,
remote desktop and screencast portals. * document-portal: Be more flexible
validating apps' IDs. * document-portal: Be more strict when checking & granting
file access. * file-chooser: Fix crash with unitialized data in the save dialog.
* open-uri: Don't ever skip showing the dialog if a threshold is set. * open-
uri: Don't register http: URIs for sandboxed handlers. * remote-desktop: Use the
correct device type values. * screencast: Fix synchronization issue with
PipeWire. * Import permission store from flatpak * Import document portal from
flatpak * Add remote desktop portal * Add screencast portal * Add "interactive"
mode to screenshot portal * file-chooser: Don't return document paths for paths
the application has direct access to * Handle newer version of bubblewrap * New
abstraction for application info, supporting multiple sandbox technologies * Add
basic test suite xdg-desktop-portal-gtk 0.11 ------------------------ *
remotedesktop: Add support for the 'finish' flag of NotifyPointerAxis. *
remotedesktop: Correctly expose device types supporting remote control. * print:
Add a 'Print Preview' button (requires evince-previewer). * screenshot: Make
sure the dialog is shown in the interactive case. * Fix critical in file chooser
* Add options to screenshot portals * Add screencast and remote portal
implementations pipewire 0.1.9 -------------- - Various build fixes - Do more
permission checks - Add support for doing async connections. This can be used to
make connections through the portal later. - Fix device creation from the
GStreamer device monitor - v4l2 experiment with controls - move rtkit to a
module to avoid dbus dependency - use dmabuf allocator in gstreamer elements -
Add DSP module for pro audio cases, remove jack module. The idea is to make a
replacement jack client library that talks pipewire directly instead of trying
to emulate a jack server. - Various memory handling improvements
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 David King <amigadave(a)amigadave.com> - 0.11-1
- Update to 0.11 (#1545225)
--------------------------------------------------------------------------------
================================================================================
xdg-desktop-portal-gtk-0.11-1.fc27 (FEDORA-2018-bd8549f05a)
Backend implementation for xdg-desktop-portal using GTK+
--------------------------------------------------------------------------------
Update Information:
Update flatpak and portals to latest versions flatpak 0.99.1 ------------ This
is the first pre-release before flatpak 1.0. This is considered feature-complete
and we expect no features or major changes before 1.0, only bugfixes. Note:
There were some (minor) API changes in the FlatpakTransaction APIs that were
added in 0.11.8, so please don't use the old version. (Note: I know of no user
of this API). Changes since last minor release: * Ostree 2018.6 is required,
and with this, the p2p code in flatpak is made non-optional. * flatpak
install/update/ininstall now lists all the operations that it will do and asks
for confirmation before starting. * In the above confirmation the permissions
(new permissions for updates) are shown for all applications. * The
FlatpakTranscation API has a new ::ready signal that allows users to do similar
confirmation prompts. * P2P updates are more efficient * system-wide
installation uses less fsync calls so should installation should be faster. *
New ssh agent permissions allows granting an app ssh access. xdg-desktop-portal
0.11 ------------------ * Add initial support for Snap packages. * Fix memory
leaks when ownership of bus names changes. * Include docs for the session,
remote desktop and screencast portals. * document-portal: Be more flexible
validating apps' IDs. * document-portal: Be more strict when checking & granting
file access. * file-chooser: Fix crash with unitialized data in the save dialog.
* open-uri: Don't ever skip showing the dialog if a threshold is set. * open-
uri: Don't register http: URIs for sandboxed handlers. * remote-desktop: Use the
correct device type values. * screencast: Fix synchronization issue with
PipeWire. * Import permission store from flatpak * Import document portal from
flatpak * Add remote desktop portal * Add screencast portal * Add "interactive"
mode to screenshot portal * file-chooser: Don't return document paths for paths
the application has direct access to * Handle newer version of bubblewrap * New
abstraction for application info, supporting multiple sandbox technologies * Add
basic test suite xdg-desktop-portal-gtk 0.11 ------------------------ *
remotedesktop: Add support for the 'finish' flag of NotifyPointerAxis. *
remotedesktop: Correctly expose device types supporting remote control. * print:
Add a 'Print Preview' button (requires evince-previewer). * screenshot: Make
sure the dialog is shown in the interactive case. * Fix critical in file chooser
* Add options to screenshot portals * Add screencast and remote portal
implementations pipewire 0.1.9 -------------- - Various build fixes - Do more
permission checks - Add support for doing async connections. This can be used to
make connections through the portal later. - Fix device creation from the
GStreamer device monitor - v4l2 experiment with controls - move rtkit to a
module to avoid dbus dependency - use dmabuf allocator in gstreamer elements -
Add DSP module for pro audio cases, remove jack module. The idea is to make a
replacement jack client library that talks pipewire directly instead of trying
to emulate a jack server. - Various memory handling improvements
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 25 2018 David King <amigadave(a)amigadave.com> - 0.11-1
- Update to 0.11 (#1545226)
--------------------------------------------------------------------------------
================================================================================
xen-4.9.2-6.fc27 (FEDORA-2018-1a467757ce)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
preemption checks bypassed in x86 PV MM handling [XSA-264, CVE-2018-12891] x86:
#DB exception safety check can be triggered by a guest [XSA-265, CVE-2018-12893]
libxl fails to honour readonly flag on HVM emulated SCSI disks [XSA-266,
CVE-2018-12892] ---- Speculative register leakage from lazy FPU context
switching [XSA-267, CVE-2018-3665] fix for change in iasl output
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 27 2018 Michael Young <m.a.young(a)durham.ac.uk> - 4.9.2-6
- preemption checks bypassed in x86 PV MM handling [XSA-264, CVE-2018-12891]
- x86: #DB exception safety check can be triggered by a guest [XSA-265,
CVE-2018-12893]
- libxl fails to honour readonly flag on HVM emulated SCSI disks [XSA-266,
CVE-2018-12892]
* Sat Jun 16 2018 Michael Young <m.a.young(a)durham.ac.uk> - 4.9.2-5
- Speculative register leakage from lazy FPU context switching
[XSA-267, CVE-2018-3665]
- fix for change in iasl output
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1590984 - CVE-2018-12892 xsa-266 xen: libxl fails to honour readonly flag on
HVM emulated SCSI disks
https://bugzilla.redhat.com/show_bug.cgi?id=1590984
[ 2 ] Bug #1590979 - CVE-2018-12893 xen: x86 DB exception safety check can be triggered
by a guest (XSA-265)
https://bugzilla.redhat.com/show_bug.cgi?id=1590979
[ 3 ] Bug #1590985 - CVE-2018-12891 xen: preemption checks bypassed in x86 PV MM
handling (XSA-264)
https://bugzilla.redhat.com/show_bug.cgi?id=1590985
--------------------------------------------------------------------------------