The following Fedora 27 Security updates need testing:
Age URL
236
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
168
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
131
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
123
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
99
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
99
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
57
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c
tomcat-8.0.53-1.fc27
57
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1
unixODBC-2.3.7-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-54d84b0b0c
bind-9.11.4-3.P2.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11b3ae4e31
ca-certificates-2018.2.26-1.0.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc2ba807a6
xerces-c27-2.7.0-28.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-64d64bd05e
mingw-openjpeg2-2.3.0-4.fc27 openjpeg2-2.3.0-9.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1fc39f2d13
clamav-0.100.2-2.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d5139c4fd6 git-2.14.5-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9caa6528d2
strongswan-5.7.1-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e010c6501
chromium-69.0.3497.100-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7d993184f6
libgit2-0.26.7-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
152
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
112
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
76
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
56
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24
iproute-4.17.0-1.fc27
31
https://bodhi.fedoraproject.org/updates/FEDORA-2018-227775ff3a ceph-12.2.8-1.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-387a30f785
osinfo-db-20180920-1.fc27
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cf532c08b5
libguestfs-1.38.6-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3006b99087 xen-4.9.3-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11b3ae4e31
ca-certificates-2018.2.26-1.0.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-80839db392
hwdata-0.316-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-31111d54a7 vim-8.1.450-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7ad33ae27d
libldb-1.3.2-2.fc27.1.2.3 samba-4.7.10-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0073a0659f
python-productmd-1.17-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-64d64bd05e
mingw-openjpeg2-2.3.0-4.fc27 openjpeg2-2.3.0-9.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-889185894e
flatpak-builder-1.0.1-1.fc27 flatpak-1.0.3-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d5139c4fd6 git-2.14.5-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9108d04cb6
volume_key-0.3.12-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
389-ds-base-1.3.8.10-1.fc27
appstream-data-27-13.fc27
audiofile-0.3.6-21.fc27
blis-0.4.1-2.fc27
brightlight-7-1.fc27
firefox-62.0.3-4.fc27
fzf-0.17.5-1.fc27
gnome-shell-extension-topicons-plus-21-6.20180831.dbbe4ce.fc27
golang-github-cznic-ql-1.2.0-2.fc27
gsequencer-2.0.33-0.fc27
homebank-5.2.2-1.fc27
hplip-3.18.6-5.fc27
ibus-typing-booster-2.1.3-1.fc27
mod_http2-1.11.1-1.fc27
numix-gtk-theme-2.6.7-1.fc27
numix-icon-theme-0.1.0-19.20180717.git763489f.fc27
numix-icon-theme-circle-0.1.0-17.20181003.git7637f41.fc27
php-7.1.23-1.fc27
pungi-4.1.29-2.fc27
python-paramiko-2.3.3-1.fc27
rsyslog-8.38.0-1.fc27
rubygem-nokogiri-1.8.5-1.fc27
scorep-3.1-7.fc27
switchboard-2.3.4-1.fc27
switchboard-plug-printers-2.1.4-1.fc27
thunderbird-60.2.1-2.fc27
webkitgtk4-2.22.2-1.fc27
Details about builds:
================================================================================
389-ds-base-1.3.8.10-1.fc27 (FEDORA-2018-a857a4758e)
389 Directory Server (base)
--------------------------------------------------------------------------------
Update Information:
Bump version to 1.3.8.10
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 10 2018 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.8.10-1
- Bump version to 1.3.8.10
- Ticket 49969 - DOS caused by malformed search operation (part 2)
* Tue Oct 9 2018 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.8.9-1
- Bump version to 1.3.8.9
- Ticket 49969 - DOS caused by malformed search operation (security fix)
- Ticket 49954 - On s390x arch retrieved DB page size is stored as size_t rather than
uint32_t
- Ticket 49937 - Log buffer exceeded emergency logging msg is not thread-safe (security
fix)
- Ticket 49932 - Crash in delete_passwdPolicy when persistent search connections are
terminated unexpectedly
--------------------------------------------------------------------------------
================================================================================
appstream-data-27-13.fc27 (FEDORA-2018-0447d18f93)
Fedora AppStream metadata
--------------------------------------------------------------------------------
Update Information:
New metadata version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 10 2018 Kalev Lember <klember(a)redhat.com> - 27-13
- New metadata version
--------------------------------------------------------------------------------
================================================================================
audiofile-0.3.6-21.fc27 (FEDORA-2018-b967b5592e)
Library for accessing various audio file formats
--------------------------------------------------------------------------------
Update Information:
Fixes for CVE-2018-13440 and CVE-2018-17095.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 1:0.3.6-21
- Fixes for CVE-2018-13440.
* Tue Oct 9 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 1:0.3.6-20
- Fix for CVE-2018-17095.
* Mon Aug 13 2018 Leigh Scott <leigh123linux(a)googlemail.com> - 1:0.3.6-19
- Fix build
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:0.3.6-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1:0.3.6-17
- Escape macros in %changelog
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:0.3.6-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1600368 - CVE-2018-13440 audiofile: NULL pointer dereference in
modules/ModuleState.cpp:ModuleState::setup() allows for denial of service via crafted file
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1600368
[ 2 ] Bug #1631089 - CVE-2018-17095 audiofile: Heap-based buffer overflow in
Expand3To4Module::run when running sfconvert [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1631089
--------------------------------------------------------------------------------
================================================================================
blis-0.4.1-2.fc27 (FEDORA-2018-3f6022d60a)
BLAS-like Library Instantiation Software Framework
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1591910 - Review Request: blis - BLAS-like Library Instantiation Software
https://bugzilla.redhat.com/show_bug.cgi?id=1591910
--------------------------------------------------------------------------------
================================================================================
brightlight-7-1.fc27 (FEDORA-2018-2203eaa5a6)
CLI tool to change screen back-light brightness
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream major release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Justin W. Flory <jwf(a)fedoraproject.org> - 7-1
- Upgrade to upstream major release
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 5-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1637228 - brightlight-7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1637228
--------------------------------------------------------------------------------
================================================================================
firefox-62.0.3-4.fc27 (FEDORA-2018-c05f062b15)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
- Added fix for mozbz#1447775 - Rednering artifacts when dropspace is udes. -
Added fix for mozbz#1493081 - popups incorrectly placed and sized. ---- -
Improved Firefox Wayland experience - Added PipeWire patch for Wayland desktop
sharing ---- * Update to new version (62.0.3) * More info at
https://www.mozilla.org/en-US/firefox/62.0.3/releasenotes/
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Martin Stransky <stransky(a)redhat.com> - 62.0.3-4
- Added fix for mozbz#1447775 - wrong dropspace sizing.
* Tue Oct 9 2018 Martin Stransky <stransky(a)redhat.com> - 62.0.3-3
- Added fix for mozbz#1493081 - popups incorrectly placed and sized.
* Mon Oct 8 2018 Martin Stransky <stransky(a)redhat.com> - 62.0.3-2
- Added pipewire patch (mozbz#1496359)
- Added Wayland patches from Firefox 63
- Enable Wayland backed by default on Fedora 30
* Tue Oct 2 2018 Martin Stransky <stransky(a)redhat.com> - 62.0.3-1
- Updated to latest upstream (62.0.3)
* Wed Sep 26 2018 Martin Stransky <stransky(a)redhat.com> - 62.0.2-3
- Enabled DBus remote for all Gtk+ backends
- Removed obsoleted patches
* Tue Sep 25 2018 Martin Stransky <stransky(a)redhat.com> - 62.0.2-2
- Disable workaround for mozbz#1342344 - GFX glitches when building
with -O3/gcc 7.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1635396 - Firefox 62.0.3 released - including security fix
https://bugzilla.redhat.com/show_bug.cgi?id=1635396
--------------------------------------------------------------------------------
================================================================================
fzf-0.17.5-1.fc27 (FEDORA-2018-7b662a4c5e)
A command-line fuzzy finder written in Go
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 10 2018 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.17.5-1
- New upstream release.
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-topicons-plus-21-6.20180831.dbbe4ce.fc27 (FEDORA-2018-3b54a8be7c)
Move all legacy tray icons to the top panel
--------------------------------------------------------------------------------
Update Information:
The original developer phocean ceased development. I've rebased to a new
upstream, forked by jwrdegoede, which adds necessary updates to fix issues like
failing to show status icons (the whole point of the extension) in GNOME 3.30,
and other (less significant) issues.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 8 2018 Andrew Toskin <andrew(a)tosk.in> - 21-6.20180831.dbbe4ce
- Rebased to new upstream, forked by jwrdegoede, which fixes bugs like
failing to show status icons in GNOME 3.30, and other less significant
issues.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
21-5.20180116.41f1a9b
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-github-cznic-ql-1.2.0-2.fc27 (FEDORA-2018-65d7ac7706)
Embedded SQL database written in Go
--------------------------------------------------------------------------------
Update Information:
Added two upstream patches to fix issues (nil dereferences etc.).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Fabio Valentini <decathorpe(a)gmail.com> - 1.2.0-2
- Fix some bugs (nil dereference, etc.) by including upstream patches.
--------------------------------------------------------------------------------
================================================================================
gsequencer-2.0.33-0.fc27 (FEDORA-2018-bbed4b935e)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
provide patch to disable functional tests
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
homebank-5.2.2-1.fc27 (FEDORA-2018-fbade558b1)
Free easy personal accounting for all
--------------------------------------------------------------------------------
Update Information:
- Update to new upstream version 5.2.2 - Complete changelog here
http://homebank.free.fr/ChangeLog
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 5.2.2-1
- Update to new upstream version 5.2.2
- Complete changelog here
http://homebank.free.fr/ChangeLog
--------------------------------------------------------------------------------
================================================================================
hplip-3.18.6-5.fc27 (FEDORA-2018-a038696143)
HP Linux Imaging and Printing Project
--------------------------------------------------------------------------------
Update Information:
1594602 - Fix typos in QMessageBox constructor calls 1626877 - Fix
AttributeError when connecting to printer via wifi
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Tomas Korbar <tkorbar(a)redhat.com> - 3.18.6-5
- 1594602 - Fix typos in QMessageBox constructor calls
* Tue Oct 9 2018 Tomas Korbar <tkorbar(a)redhat.com> - 3.18.6-4
- 1626877 - Fix AttributeError when connecting to printer via wifi
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594602 - [abrt] hplip: open():
setupdialog.py:1113:readwriteFaxInformation:TypeError: critical(QWidget, str, str,
buttons: Union[QMessageBox.StandardButtons, QMessageBox.StandardButton] = QMessageBox.Ok,
defaultButton: QMessageBox.StandardButton = ...
https://bugzilla.redhat.com/show_bug.cgi?id=1594602
[ 2 ] Bug #1626877 - [abrt] hplip-gui: showExitPage():
wifisetupdialog.py:573:showExitPage:AttributeError: 'WifiSetupDialog' object has
no attribute 'wifiobj'
https://bugzilla.redhat.com/show_bug.cgi?id=1626877
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-2.1.3-1.fc27 (FEDORA-2018-797aee7a64)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Update translations from zanata (uk updated)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
mod_http2-1.11.1-1.fc27 (FEDORA-2018-bb9d24c82d)
module implementing HTTP/2 for Apache 2
--------------------------------------------------------------------------------
Update Information:
Security update for CVE-2018-11763
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 5 2018 Lubo�� Uhliarik <luhliari(a)redhat.com> - 1.11.1-1
- new version 1.11.1 (CVE-2018-11763)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.20-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1633400 - CVE-2018-11763 mod_http2: httpd: DoS for HTTP/2 connections by
continuous SETTINGS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1633400
--------------------------------------------------------------------------------
================================================================================
numix-gtk-theme-2.6.7-1.fc27 (FEDORA-2018-2b779a32ec)
Numix Gtk Theme
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.7
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Brendan Early <mymindstorm1(a)gmail.com> - 2.6.7-1
- Update to release 2.6.7
- Bring more in line with packaging guidelines
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.6-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1504392 - numix-gtk-theme-2.6.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504392
--------------------------------------------------------------------------------
================================================================================
numix-icon-theme-0.1.0-19.20180717.git763489f.fc27 (FEDORA-2018-0796a03db8)
Numix Project icon theme
--------------------------------------------------------------------------------
Update Information:
Update to release 18.07.17
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Brendan Early <mymindstorm1(a)gmail.com> -
0.1.0-19.20180717.git763489f
- Update to release 18.07.17
- Bring more in line with packaging guidelines
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.1.0-18.git271471c
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.1.0-17.git271471c
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514770 - numix-icon-theme-18.07.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1514770
--------------------------------------------------------------------------------
================================================================================
numix-icon-theme-circle-0.1.0-17.20181003.git7637f41.fc27 (FEDORA-2018-86e97b1999)
Numix Project circle icon theme
--------------------------------------------------------------------------------
Update Information:
Update to release 18.10.03
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Brendan Early <mymindstorm1(a)gmail.com> -
0.1.0-17.20181003.git7637f41
- Update to release 18.10.03
- Bring more in line with packaging guidelines
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.1.0-16.git5a11140
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.1.0-15.git5a11140
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1484388 - numix-icon-theme-circle-18.08.01 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1484388
--------------------------------------------------------------------------------
================================================================================
php-7.1.23-1.fc27 (FEDORA-2018-c89c6e6c0b)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
**PHP version 7.1.23** (11 Oct 2018) **Core:** * Fixed bug php#76901
(method_exists on SPL iterator passthrough method corrupts memory). (Nikita) *
Fixed bug php#76846 (Segfault in shutdown function after memory limit error).
(Nikita) **CURL:** * Fixed bug php#76480 (Use curl_multi_wait() so that
timeouts are respected). (Pierrick) **iconv:** * Fixed bug php#66828
(iconv_mime_encode Q-encoding longer than it should be). (cmb) **Opcache:** *
Fixed bug php#76832 (ZendOPcache.MemoryBase periodically deleted by the OS).
(Anatol) **POSIX:** * Fixed bug php#75696 (posix_getgrnam fails to print
details of group). (cmb) **Reflection:** * Fixed bug php#74454 (Wrong
exception being thrown when using ReflectionMethod). (cmb) **Standard:** *
Fixed bug php#73457 (Wrong error message when fopen FTP wrapped fails to open
data connection). (Ville Hukkam��ki) * Fixed bug php#74764 (Bindto IPv6 works
with file_get_contents but fails with stream_socket_client). (Ville Hukkam��ki)
* Fixed bug php#75533 (array_reduce is slow when $carry is large array). (Manabu
Matsui) **Zlib:** * Fixed bug php#75273 (php_zlib_inflate_filter() may not
update bytes_consumed). (Martin Burke, cmb)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 10 2018 Remi Collet <remi(a)remirepo.net> - 7.1.23-1
- Update to 7.1.23 -
http://www.php.net/releases/7_1_23.php
--------------------------------------------------------------------------------
================================================================================
pungi-4.1.29-2.fc27 (FEDORA-2018-e1a19af16e)
Distribution compose tool
--------------------------------------------------------------------------------
Update Information:
This release brings mostly updates to handling modular content mixed with bare
RPMs in a single variant, which is not particularly relevant for Fedora. We
have a new feature where it's possible to list particular Koji builds in the
config and they will be pulled into the package set. This can be handy to test
new builds against an existing tag or to compose content that does not have a
common tag. OSTree behaviour when nothing changes in the repo was fixed and it
does not crash anymore. Creating ISO images using the legacy pungi command is
now closer to being reproducible, but it still needs changes in createrepo. As
usual, there are some minor bug fixes and improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 10 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.29-2
- Add dependency on xorriso to pungi-legacy
- Bump dependency on python-productmd
* Wed Oct 10 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.29-1
- hybrid: Only include modules that are not in lookaside (lsedlar)
- Try to be more conservative about memory usage (lsedlar)
- hybrid: Remove modules not listed by fus (lsedlar)
- gather: Make devel modules configurable (lsedlar)
- pkgset: Stop prefilling RPM artifacts (lsedlar)
- gather: Create devel module for each normal module (lsedlar)
- pkgset: Save package set for each module (lsedlar)
- fus: List lookaside repos first (lsedlar)
- gather: Work with repos without location_base (lsedlar)
- Remove extra dependencies (lsedlar)
- Set repodata mtime to SOURCE_DATE_EPOCH (marmarek)
- Make sure .treeinfo file is sorted (marmarek)
- Use constant MBR ID for isohybrid (marmarek)
- Use xorriso instead of genisoimage (marmarek)
- Use $SOURCE_DATE_EPOCH (if set) in discinfo file (marmarek)
- unified_isos: Add extra variants to metadata (lsedlar)
- extra_iso: Add list of variants to metadata (lsedlar)
- linker: Simplify creating pool (lsedlar)
- gather: Hide pid of fus process (lsedlar)
- fus: Strip protocol from repo path (lsedlar)
- Add 'pkgset_koji_builds' option to include extra builds in a compose
(jkaluza)
- ostree: Reduce duplication in tests (lsedlar)
- ostree: Use --touch-if-changed (lsedlar)
- ostree: Fix handler crash without commit ID (lsedlar)
- gather: Filter arches similarly to pkgset (lsedlar)
- Stop shipping and remove RELEASE-NOTES (pbrobinson)
--------------------------------------------------------------------------------
================================================================================
python-paramiko-2.3.3-1.fc27 (FEDORA-2018-aff51f5e62)
SSH2 protocol library for python
--------------------------------------------------------------------------------
Update Information:
Python Paramiko versions 2.3.2 and 2.4.1 are vulnerable to an authentication
bypass in `paramiko/auth_handler.py`. A remote attacker could exploit this
vulnerability in Paramiko SSH servers to execute arbitrary code. Note that
applications using Paramiko only as a client (such as ansible) are not affected
by this. There is also an additional fix preventing `MSG_UNIMPLEMENTED`
feedback loops that could manifest when both ends of a connection are Paramiko-
based.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Paul Howarth <paul(a)city-fan.org> - 2.3.3-1
- Update to 2.3.3
- Fix exploit (GH#1283, CVE-2018-1000805) in Paramiko���s server mode (not
client mode) where hostile clients could trick the server into thinking
they were authenticated without actually submitting valid authentication
- Modify protocol message handling such that Transport does not respond to
MSG_UNIMPLEMENTED with its own MSG_UNIMPLEMENTED; this behavior probably
didn���t cause any outright errors, but it doesn���t seem to conform to the
RFCs and could cause (non-infinite) feedback loops in some scenarios
(usually those involving Paramiko on both ends)
- Add *.pub files to the MANIFEST so distributed source packages contain some
necessary test assets (GH#1262)
- Backport pytest support and application of the black code formatter (both
of which previously only existed in the 2.4 branch and above) to everything
2.0 and newer, which makes back/forward porting bugfixes significantly
easier (GH#1291)
- Test suite now requires mock ��� 2.0.0 and uses pytest
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1637263 - CVE-2018-1000805 python-paramiko: Authentication bypass in
auth_handler.py
https://bugzilla.redhat.com/show_bug.cgi?id=1637263
--------------------------------------------------------------------------------
================================================================================
rsyslog-8.38.0-1.fc27 (FEDORA-2018-3b32e6c84d)
Enhanced system logging and kernel message trapping daemon
--------------------------------------------------------------------------------
Update Information:
rebase to upstream version 8.38.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 10 2018 Jiri Vymazal <jvymazal(a)redhat.com> - 8.38.0-1
- rebase to upstream version 8.38.0
resolves: rhbz#1632432
resolves: rhbz#1627944
* Fri Aug 10 2018 Jiri Vymazal <jvymazal(a)redhat.com> - 8.37.0-1
- added mmkubernetes rulebases as doc files
resolves: rhbz#1614440
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1632432 - rsyslog-8.38.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1632432
[ 2 ] Bug #1627944 - support for endmsg.regex
https://bugzilla.redhat.com/show_bug.cgi?id=1627944
[ 3 ] Bug #1614440 - mmkubernetes - add rulebase files as docs
https://bugzilla.redhat.com/show_bug.cgi?id=1614440
--------------------------------------------------------------------------------
================================================================================
rubygem-nokogiri-1.8.5-1.fc27 (FEDORA-2018-116dc4017b)
An HTML, XML, SAX, and Reader parser
--------------------------------------------------------------------------------
Update Information:
New version 1.8.5 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.8.5-1
- 1.8.5
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.4-1.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
scorep-3.1-7.fc27 (FEDORA-2018-6a06d841df)
Scalable Performance Measurement Infrastructure for Parallel Codes
--------------------------------------------------------------------------------
Update Information:
Add necessary -devel packages at run time.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 10 2018 Dave Love <loveshack(a)fedoraproject.org> - 3.1-7
- Require libunwind-devel, ocl-icd-devel, opari2 [#1610849]
* Thu Feb 15 2018 Dave Love <loveshack(a)fedoraproject.org> - 3.1-6
- Fix check for getaddrinfo; install scorep-online-access-registry
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1610849 - scalasca needs scorep/libunwind-devel but it is not required by the
rpm
https://bugzilla.redhat.com/show_bug.cgi?id=1610849
--------------------------------------------------------------------------------
================================================================================
switchboard-2.3.4-1.fc27 (FEDORA-2018-16cfe9bfa1)
Modular Desktop Settings Hub
--------------------------------------------------------------------------------
Update Information:
Update to version 2.3.4. This update fixes broken translations that were
introduced with version 2.3.3. Release notes:
https://github.com/elementary/switchboard/releases/tag/2.3.4 --- Update to
version 2.3.3. Release notes:
https://github.com/elementary/switchboard/releases/tag/2.3.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.3.4-1
- Update to version 2.3.4.
* Fri Oct 5 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.3.3-1
- Update to version 2.3.3.
--------------------------------------------------------------------------------
================================================================================
switchboard-plug-printers-2.1.4-1.fc27 (FEDORA-2018-0d96f5bb4f)
Switchboard Printers Plug
--------------------------------------------------------------------------------
Update Information:
Update to version 2.1.4. This version brings updated translations and visual
improvements. Release notes:
https://github.com/elementary/switchboard-plug-
printers/releases/tag/2.1.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 9 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.1.4-1
- Update to version 2.1.4.
--------------------------------------------------------------------------------
================================================================================
thunderbird-60.2.1-2.fc27 (FEDORA-2018-7c235a496f)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version. ---- Update to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Jan Horak <jhorak(a)redhat.com> - 60.2.1-2
- Update to 60.2.1
- Added fix for rhbz#1546988
* Wed Aug 15 2018 Jan Horak <jhorak(a)redhat.com> - 60.0-1
- Update to 60.0
- Removing gdata-provider extension because it's no longer provided by Thunderbird
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 52.9.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1612870 - thunderbird-60.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1612870
--------------------------------------------------------------------------------
================================================================================
webkitgtk4-2.22.2-1.fc27 (FEDORA-2018-b201d3bba5)
GTK+ Web content engine library
--------------------------------------------------------------------------------
Update Information:
Update to 2.22.2
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 23 2018 Tomas Popela <tpopela(a)redhat.com> - 2.22.2-2
- Update to 2.22.2
* Thu Sep 20 2018 Tomas Popela <tpopela(a)redhat.com> - 2.22.1-1
- Update to 2.22.1
--------------------------------------------------------------------------------