The following Fedora 27 Security updates need testing:
Age URL
23
https://bodhi.fedoraproject.org/updates/FEDORA-2017-15efa72a0c
docker-1.13.1-44.git584d391.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2017-913288e9a9
mongodb-3.4.10-1.fc27
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d7c0748c1b pdns-4.1.0-1.fc27
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-14f5c6cdac
qpid-cpp-1.37.0-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a95dd74301
shellinabox-2.20-5.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2e5a17c4cc
python33-3.3.7-2.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-354b9647ba
libextractor-1.6-2.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8a9862f4b7
php-symfony4-4.0.1-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-66e9367f7e
asterisk-14.7.4-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2fab3f12c4
sensible-utils-0.0.11-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f0e5ad250c
heimdal-7.5.0-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-20b18a4ffe
json-c-0.12.1-5.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b24ef59f94
libexif-0.6.21-14.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c2645aa935
chromium-63.0.3239.108-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
blueberry-1.1.20-1.fc27
bolt-0.1-2.fc27
chromium-63.0.3239.108-1.fc27
cinnamon-3.6.7-1.fc27
composer-1.5.6-1.fc27
copr-backend-1.109-1.fc27
copr-frontend-1.125-1.fc27
copr-selinux-1.47-1.fc27
cri-o-1.9.0-4.git814c6ab.fc27
eclipse-4.7.2-1.fc27
eclipse-dltk-5.8.2-1.fc27
eclipse-dtp-1.14.1-1.fc27
eclipse-egit-4.9.1-1.fc27
eclipse-jgit-4.9.1-2.fc27
eclipse-linuxtools-6.2.0-1.fc27
eclipse-mylyn-3.23.2-2.fc27
eclipse-recommenders-2.5.0-1.fc27
eclipse-usage-4.5.2-0.1.fc27
eclipse-webtools-3.9.2-1.fc27
epiphany-3.26.5-1.fc27
icedtea-web-1.7.1-1.fc27
irssi-1.0.5-1.fc27
mingw-qt5-qtcharts-5.9.3-1.fc27
mingw-qt5-qtserialport-5.9.3-1.fc27
mingw-twaindsm-2.4.0-2.fc27
mir-0.29.0-1.fc27
nemo-3.6.5-1.fc27
perl-Dancer2-0.205002-2.fc27
perl-Net-GitHub-0.91-1.fc27
perl-PPI-XS-0.910-1.fc27
php-icewind-searchdav-0.3.1-1.fc27
php-icewind-smb2-2.0.3-1.fc27
php-pear-PHP-CodeSniffer-3.2.1-1.fc27
php-phpmyadmin-motranslator-3.4-1.fc27
php-phpunit-PHPUnit-5.7.26-1.fc27
python-daemon-2.1.2-6.fc27
python-etcd-0.4.5-8.fc27
python-sphinxcontrib-websupport-1.0.1-5.20171013git.fc27
python3-mypy-0.560-1.fc27
rpcbind-0.2.4-8.rc3.fc27
rtags-2.16-1.fc27
runc-1.0.0-15.rc4.gite6516b3.fc27
snapd-2.29.4-3.fc27
xfburn-0.5.5-1.fc27
yadifa-2.3.7-1.fc27
Details about builds:
================================================================================
blueberry-1.1.20-1.fc27 (FEDORA-2017-51ea6edc80)
Bluetooth configuration tool
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
================================================================================
bolt-0.1-2.fc27 (FEDORA-2017-0485b38286)
Thunderbolt device manager
--------------------------------------------------------------------------------
Update Information:
New package for bolt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526018 - Review Request: bolt - Thunderbolt system daemon
https://bugzilla.redhat.com/show_bug.cgi?id=1526018
--------------------------------------------------------------------------------
================================================================================
chromium-63.0.3239.108-1.fc27 (FEDORA-2017-c2645aa935)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-15412 CVE-2017-15422 CVE-2017-15407 CVE-2017-15408
CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15413 CVE-2017-15415
CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420
CVE-2017-15423 CVE-2017-15424 CVE-2017-15425 CVE-2017-15426 CVE-2017-15427
CVE-2017-15429
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523141 - CVE-2017-15427 chromium-browser: insufficient blocking of
javascript in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1523141
[ 2 ] Bug #1523140 - CVE-2017-15426 chromium-browser: url spoof in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1523140
[ 3 ] Bug #1523139 - CVE-2017-15425 chromium-browser: url spoof in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1523139
[ 4 ] Bug #1523138 - CVE-2017-15424 chromium-browser: url spoof in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1523138
[ 5 ] Bug #1523137 - CVE-2017-15423 chromium-browser: issue with spake implementation in
boringssl
https://bugzilla.redhat.com/show_bug.cgi?id=1523137
[ 6 ] Bug #1523136 - CVE-2017-15422 chromium-browser: integer overflow in icu
https://bugzilla.redhat.com/show_bug.cgi?id=1523136
[ 7 ] Bug #1523135 - CVE-2017-15420 chromium-browser: url spoofing in omnibox
https://bugzilla.redhat.com/show_bug.cgi?id=1523135
[ 8 ] Bug #1523134 - CVE-2017-15419 chromium-browser: cross origin leak of redirect url
in blink
https://bugzilla.redhat.com/show_bug.cgi?id=1523134
[ 9 ] Bug #1523133 - CVE-2017-15418 chromium-browser: use of uninitialized value in
skia
https://bugzilla.redhat.com/show_bug.cgi?id=1523133
[ 10 ] Bug #1523132 - CVE-2017-15417 chromium-browser: cross origin information
disclosure in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1523132
[ 11 ] Bug #1523131 - CVE-2017-15416 chromium-browser: out of bounds read in blink
https://bugzilla.redhat.com/show_bug.cgi?id=1523131
[ 12 ] Bug #1523130 - CVE-2017-15415 chromium-browser: pointer information disclosure in
ipc call
https://bugzilla.redhat.com/show_bug.cgi?id=1523130
[ 13 ] Bug #1523129 - CVE-2017-15413 chromium-browser: type confusion in webassembly
https://bugzilla.redhat.com/show_bug.cgi?id=1523129
[ 14 ] Bug #1523128 - CVE-2017-15412 chromium-browser: use after free in libxml
https://bugzilla.redhat.com/show_bug.cgi?id=1523128
[ 15 ] Bug #1523127 - CVE-2017-15411 chromium-browser: use after free in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1523127
[ 16 ] Bug #1523126 - CVE-2017-15410 chromium-browser: use after free in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1523126
[ 17 ] Bug #1523125 - CVE-2017-15409 chromium-browser: out of bounds write in skia
https://bugzilla.redhat.com/show_bug.cgi?id=1523125
[ 18 ] Bug #1523124 - CVE-2017-15408 chromium-browser: heap buffer overflow in pdfium
https://bugzilla.redhat.com/show_bug.cgi?id=1523124
[ 19 ] Bug #1523123 - CVE-2017-15407 chromium-browser: out of bounds write in quic
https://bugzilla.redhat.com/show_bug.cgi?id=1523123
[ 20 ] Bug #1526405 - CVE-2017-15429 chromium-browser: uxss in v8
https://bugzilla.redhat.com/show_bug.cgi?id=1526405
--------------------------------------------------------------------------------
================================================================================
cinnamon-3.6.7-1.fc27 (FEDORA-2017-312ccf64c9)
Window management and application launching for GNOME
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465141 - Cinnamon menu - programs don't extend to bottom
https://bugzilla.redhat.com/show_bug.cgi?id=1465141
[ 2 ] Bug #1514387 - [abrt] nemo: directory_ready_callback(): nemo-desktop killed by
SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1514387
[ 3 ] Bug #1512947 - [abrt] nemo: get_n_monitors(): nemo-desktop killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1512947
--------------------------------------------------------------------------------
================================================================================
composer-1.5.6-1.fc27 (FEDORA-2017-136dac6759)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.5.6** - 2017-12-18 * Fixed root package version guessed when a
tag is checked out * Fixed support for GitLab reposhosted on non-standard
ports * Fixed regression in require command when requiring unstable packages,
part 3
--------------------------------------------------------------------------------
================================================================================
copr-backend-1.109-1.fc27 (FEDORA-2017-cf27a40b9d)
Backend for Copr
--------------------------------------------------------------------------------
Update Information:
- terminate also 'in_use' builders if health checks have failed - make
--detached the last arg for copr-rpmbuild - update copr_log_hitcounter to check
ip against ignored pattern - new msg bus options - disable DNF makecache
timer/service - fix message duplication for multi-bus scenario - optimize
createrepo_c - Revert "[backend] remove --ignore-lock from createrepo_c"
--------------------------------------------------------------------------------
================================================================================
copr-frontend-1.125-1.fc27 (FEDORA-2017-5f1ab03069)
Frontend for Copr
--------------------------------------------------------------------------------
Update Information:
- add support for src.fp.o in build_on_pagure_commit.py - fix source type
description - fix make-srpm anchor link - provide default for source_json_dict
in scm migration - fix committish filter condition for auto-rebuilds - fix SCM
migrations not to use models that might be newer than db - always use ref from
the push/tag event for package auto-rebuild - rather suggest dnf-modularity-
stable repo - update the info how to install a module - fix code block spacing -
fix scm unification migrations for mock-scm - show most recent post from our
blog
--------------------------------------------------------------------------------
================================================================================
copr-selinux-1.47-1.fc27 (FEDORA-2017-6fa1a70437)
SELinux module for COPR
--------------------------------------------------------------------------------
Update Information:
- wrap map permission in an optional block
--------------------------------------------------------------------------------
================================================================================
cri-o-1.9.0-4.git814c6ab.fc27 (FEDORA-2017-ed8861acf0)
CRI-O is the Kubernetes Container Runtime Interface for OCI-based containers
--------------------------------------------------------------------------------
Update Information:
cri-o needs runc >= 2:1.0.0-15, runc - built commit e6516b3 ---- Many bug
fixes ---- Updated for Kubernetes 1.9 release. ---- Update with a couple of
bug fixes.
--------------------------------------------------------------------------------
================================================================================
eclipse-4.7.2-1.fc27 (FEDORA-2017-2e1b714002)
An open, extensible IDE
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-dltk-5.8.2-1.fc27 (FEDORA-2017-2e1b714002)
Dynamic Languages Toolkit (DLTK) Eclipse plug-in
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-dtp-1.14.1-1.fc27 (FEDORA-2017-2e1b714002)
Eclipse Data Tools Platform
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-egit-4.9.1-1.fc27 (FEDORA-2017-2e1b714002)
Eclipse Git Integration
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-jgit-4.9.1-2.fc27 (FEDORA-2017-2e1b714002)
Eclipse JGit
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-linuxtools-6.2.0-1.fc27 (FEDORA-2017-2e1b714002)
Linux specific Eclipse plugins
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-mylyn-3.23.2-2.fc27 (FEDORA-2017-2e1b714002)
Eclipse Mylyn main feature.
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-recommenders-2.5.0-1.fc27 (FEDORA-2017-2e1b714002)
Eclipse Code Recommenders
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-usage-4.5.2-0.1.fc27 (FEDORA-2017-2e1b714002)
Usage reporting plug-ins for Eclipse
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
eclipse-webtools-3.9.2-1.fc27 (FEDORA-2017-2e1b714002)
Eclipse Webtools Projects
--------------------------------------------------------------------------------
Update Information:
Updates to final Oxygen.2 releases of Eclipse and various plug-ins. Fixes at
least one crasher when using Wayland. Fixes JSch problems that may be
encountered when checking out repositories using Egit/Jgit.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516961 - Eclipse crash after a while of work
https://bugzilla.redhat.com/show_bug.cgi?id=1516961
[ 2 ] Bug #1525196 - org.eclipse.jgit.api.errors.TransportException: REPOSITORYURL:
timeout in waiting for rekeying process.
https://bugzilla.redhat.com/show_bug.cgi?id=1525196
[ 3 ] Bug #1309687 - Undeclared uses constraints of Apache HttpComponent bundle cause
linkage error at runtime
https://bugzilla.redhat.com/show_bug.cgi?id=1309687
--------------------------------------------------------------------------------
================================================================================
epiphany-3.26.5-1.fc27 (FEDORA-2017-653186a2de)
Web browser for GNOME
--------------------------------------------------------------------------------
Update Information:
epiphany 3.26.5 release. - Fix error in sync migration when migrating from
3.26.2 or earlier - Improved logic to avoid corrupting session state
--------------------------------------------------------------------------------
================================================================================
icedtea-web-1.7.1-1.fc27 (FEDORA-2017-0517b0fc3a)
Additional Java components for OpenJDK - Java browser plug-in and Web Start
implementation
--------------------------------------------------------------------------------
Update Information:
* bump to 1.7.1
--------------------------------------------------------------------------------
================================================================================
irssi-1.0.5-1.fc27 (FEDORA-2017-08256ec38b)
Modular text mode IRC client with Perl scripting
--------------------------------------------------------------------------------
Update Information:
This is new version of irssi.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1505182 - Irssi 1.0.5 available
https://bugzilla.redhat.com/show_bug.cgi?id=1505182
[ 2 ] Bug #1509570 - CVE-2017-15228, CVE-2017-15227, CVE-2017-15721, CVE-2017-15723,
CVE-2017-15722 affect irssi-1.0.4
https://bugzilla.redhat.com/show_bug.cgi?id=1509570
--------------------------------------------------------------------------------
================================================================================
mingw-qt5-qtcharts-5.9.3-1.fc27 (FEDORA-2017-d3c3479b34)
Qt5 for Windows - QtCharts component
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526480 - Review Request: mingw-qt5-qtcharts - Qt5 for Windows - QtCharts
component
https://bugzilla.redhat.com/show_bug.cgi?id=1526480
--------------------------------------------------------------------------------
================================================================================
mingw-qt5-qtserialport-5.9.3-1.fc27 (FEDORA-2017-40b613d6af)
Qt5 for Windows - Qt Serial Port component
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526479 - Review Request: mingw-qt5-qtserialport - Qt5 for Windows - Qt
Serial Port component
https://bugzilla.redhat.com/show_bug.cgi?id=1526479
--------------------------------------------------------------------------------
================================================================================
mingw-twaindsm-2.4.0-2.fc27 (FEDORA-2017-42702858e0)
TWAIN Data Source Manager
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526481 - Review Request: mingw-twaindsm - TWAIN Data Source Manager
https://bugzilla.redhat.com/show_bug.cgi?id=1526481
--------------------------------------------------------------------------------
================================================================================
mir-0.29.0-1.fc27 (FEDORA-2017-310cd4f1c0)
Next generation display server
--------------------------------------------------------------------------------
Update Information:
Update to 0.29.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526660 - mir-0.29.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1526660
--------------------------------------------------------------------------------
================================================================================
nemo-3.6.5-1.fc27 (FEDORA-2017-312ccf64c9)
File manager for Cinnamon
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1465141 - Cinnamon menu - programs don't extend to bottom
https://bugzilla.redhat.com/show_bug.cgi?id=1465141
[ 2 ] Bug #1514387 - [abrt] nemo: directory_ready_callback(): nemo-desktop killed by
SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1514387
[ 3 ] Bug #1512947 - [abrt] nemo: get_n_monitors(): nemo-desktop killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1512947
--------------------------------------------------------------------------------
================================================================================
perl-Dancer2-0.205002-2.fc27 (FEDORA-2017-86379fd7f5)
Lightweight yet powerful web application framework
--------------------------------------------------------------------------------
Update Information:
It was reported recently that the dancer2 command line program checks the most
recent version of Dancer2 on CPAN and reports to the user if the version
currently used is not that version. This reveals the user's public IP address
to CPAN without his consent and isn't that useful. This update disables the
check.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1521155 - _version_check gives unhelpful advice
https://bugzilla.redhat.com/show_bug.cgi?id=1521155
--------------------------------------------------------------------------------
================================================================================
perl-Net-GitHub-0.91-1.fc27 (FEDORA-2017-c2a9bfb129)
Perl interface for
github.com
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream release 0.91.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524390 - perl-Net-GitHub-0.91 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1524390
--------------------------------------------------------------------------------
================================================================================
perl-PPI-XS-0.910-1.fc27 (FEDORA-2017-155263b957)
XS acceleration for PPI
--------------------------------------------------------------------------------
Update Information:
This release changes a build script to work with Perl >= 5.27.7. It also
improves documentation.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526665 - perl-PPI-XS-0.910 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1526665
--------------------------------------------------------------------------------
================================================================================
php-icewind-searchdav-0.3.1-1.fc27 (FEDORA-2017-f6e25c5217)
A sabre/dav plugin to implement rfc5323 SEARCH
--------------------------------------------------------------------------------
Update Information:
A sabre/dav plugin to implement rfc5323 SEARCH. See:
https://tools.ietf.org/search/rfc5323 Autoloader:
/usr/share/php/Icewind/SearchDAV/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508324 - Review Request: php-icewind-searchdav - A sabre/dav plugin to
implement rfc5323 SEARCH
https://bugzilla.redhat.com/show_bug.cgi?id=1508324
--------------------------------------------------------------------------------
================================================================================
php-icewind-smb2-2.0.3-1.fc27 (FEDORA-2017-f22dd61331)
php wrapper for smbclient and libsmbclient-php
--------------------------------------------------------------------------------
Update Information:
PHP wrapper for smbclient and libsmbclient-php * Reuses a single smbclient
instance for multiple requests * Doesn't leak the password to the process list *
Simple 1-on-1 mapping of SMB commands * A stream-based api to remove the need
for temporary files * Support for using libsmbclient directly trough
libsmbclient-php Autoloader: /usr/share/php/Icewind/SMB2/autoload.php
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508332 - Review Request: php-icewind-smb2 - php wrapper for smbclient and
libsmbclient-php
https://bugzilla.redhat.com/show_bug.cgi?id=1508332
--------------------------------------------------------------------------------
================================================================================
php-pear-PHP-CodeSniffer-3.2.1-1.fc27 (FEDORA-2017-375b6970f6)
PHP coding standards enforcement tool
--------------------------------------------------------------------------------
Update Information:
**Version 3.2.1** - Fixed problems with some scripts and plugins waiting for
STDIN -- This was a notable problem with IDE plugins (e.g., PHPStorm) and
build systems - Empty diffs are no longer followed by a newline character
(request #1781) - Generic.Functions.OpeningFunctionBraceKernighanRitchie no
longer complains when the open brace is followed by a close tag - This makes
the sniff more useful when used in templates - Thanks to Joseph Zidell for
the patch - Fixed bug #1782 : Incorrect detection of operator in ternary +
anonymous function ---- **Version 3.2.0** - This release deprecates the
@codingStandards comment syntax used for sending commands to PHP_CodeSniffer
- The existing syntax will continue to work in all version 3 releases, but will
be removed in version 4 - The comment formats have been replaced by a
shorter syntax: - @codingStandardsIgnoreFile becomes phpcs:ignoreFile
- @codingStandardsIgnoreStart becomes phpcs:disable -
@codingStandardsIgnoreEnd becomes phpcs:enable -
@codingStandardsIgnoreLine becomes phpcs:ignore -
@codingStandardsChangeSetting becomes phpcs:set - The new syntax allows for
additional developer comments to be added after a -- separator - This is
useful for describing why a code block is being ignored, or why a setting is
being changed - E.g., phpcs:disable -- This code block must be left as-
is. - Comments using the new syntax are assigned new comment token types to
allow them to be detected: - phpcs:ignoreFile has the token
T_PHPCS_IGNORE_FILE - phpcs:disable has the token T_PHPCS_DISABLE
- phpcs:enable has the token T_PHPCS_ENABLE - phpcs:ignore has the token
T_PHPCS_IGNORE - phpcs:set has the token T_PHPCS_SET - The phpcs:disable
and phpcs:ignore comments can now selectively ignore specific sniffs (request
#604) -- E.g., phpcs:disable Generic.Commenting.Todo.Found for a specific
message - E.g., phpcs:disable Generic.Commenting.Todo for a whole sniff
- E.g., phpcs:disable Generic.Commenting for a whole category of sniffs -
E.g., phpcs:disable Generic for a whole standard - Multiple sniff codes can
be specified by comma separating them - E.g., phpcs:disable
Generic.Commenting.Todo,PSR1.Files - @codingStandardsIgnoreLine comments now
only ignore the following line if they are on a line by themselves - If they
are at the end of an existing line, they will only ignore the line they are on
- Stops some lines from accidentally being ignored - Same rule applies for
the new phpcs:ignore comment syntax - PSR1.Files.SideEffects now respects the
new phpcs:disable comment syntax - The sniff will no longer check any code
that is between phpcs:disable and phpcs:enable comments - The sniff does not
support phpcs:ignore; you must wrap code structures with disable/enable comments
- Previously, there was no way to have this sniff ignore parts of a file - Fixed
a problem where PHPCS would sometimes hang waiting for STDIN, or read incomplete
versions of large files - Thanks to Arne J��rgensen for the patch - Array
properties specified in ruleset files now have their keys and values trimmed
- This saves having to do this in individual sniffs and stops errors introduced
by whitespace in rulesets - Thanks to Juliette Reinders Folmer for the patch
- Added phpcs.xsd to allow validation of ruleset XML files - Thanks to
Renaat De Muynck for the contribution - File paths specified using --stdin-path
can now point to fake file locations (request #1488) - Previously, STDIN
files using fake file paths were excluded from checking - Setting an empty
basepath (--basepath=) on the CLI will now clear a basepath set directly in a
ruleset - Thanks to Xaver Loppenstedt for the patch - Ignore patterns are
now checked on symlink target paths instead of symlink source paths -
Restores previous behaviour of this feature - Metrics were being double counted
when multiple sniffs were recording the same metric - Added support for bash
process substitution - Thanks to Scott Dutton for the contribution - Files
included in the cache file code hash are now sorted to aid in cache file reuse
across servers - Windows BAT files can now be used outside a PEAR install -
You must have the path to PHP set in your PATH environment variable - Thanks
to Joris Debonnet for the patch - The JS unsigned right shift assignment
operator is now properly classified as an assignment operator - Thanks to
Juliette Reinders Folmer for the patch - The AbstractVariableSniff abstract
sniff now supports anonymous classes and nested functions - Also fixes an
issue with Squiz.Scope.MemberVarScope where member vars of anonymous classes
were not being checked - Added AbstractArraySniff to make it easier to create
sniffs that check array formatting - Allows for checking of single and multi
line arrays easily - Provides a parsed structure of the array including
positions of keys, values, and double arrows - Added Generic.Arrays.ArrayIndent
to enforce a single tab stop indent for array keys in multi-line arrays -
Also ensures the close brace is on a new line and indented to the same level as
the original statement - Allows for the indent size to be set using an
"indent" property of the sniff - Added Generic.PHP.DiscourageGoto to warn about
the use of the GOTO language construct - Thanks to Juliette Reinders Folmer
for the contribution - Generic.Debug.ClosureLinter was not running the gjslint
command - Thanks to Micha? Bundyra for the patch -
Generic.WhiteSpace.DisallowSpaceIndent now fixes space indents in multi-line
block comments - Thanks to Juliette Reinders Folmer for the patch -
Generic.WhiteSpace.DisallowSpaceIndent now fixes mixed space/tab indents more
accurately - Thanks to Juliette Reinders Folmer for the patch -
Generic.WhiteSpace.DisallowTabIndent now fixes tab indents in multi-line block
comments - Thanks to Juliette Reinders Folmer for the patch -
PEAR.Functions.FunctionDeclaration no longer errors when a function declaration
is the first content in a JS file - Thanks to Juliette Reinders Folmer for
the patch - PEAR.Functions.FunctionCallSignature now requires the function name
to be indented to an exact tab stop - If the function name is not the start
of the statement, the opening statement must be indented correctly instead -
Added a new fixable error code
PEAR.Functions.FunctionCallSignature.OpeningIndent for this error -
Squiz.Functions.FunctionDeclarationArgumentSpacing is no longer confused about
comments in function declarations - Thanks to Juliette Reinders Folmer for
the patch - Squiz.PHP.NonExecutableCode error messages now indicate which line
the code block ending is on - Makes it easier to identify where the code
block exited or returned - Thanks to Juliette Reinders Folmer for the patch
- Squiz.Commenting.FunctionComment now supports nullable type hints -
Squiz.Commenting.FunctionCommentThrowTag no longer assigns throw tags inside
anon classes to the enclosing function - Squiz.WhiteSpace.SemicolonSpacing now
ignores semicolons used for empty statements inside FOR conditions - Thanks
to Juliette Reinders Folmer for the patch -
Squiz.ControlStructures.ControlSignature now allows configuring the number of
spaces before the colon in alternative syntax - Override the
'requiredSpacesBeforeColon' setting in a ruleset.xml file to change -
Default remains at 1 - Thanks to Nikola Kovacs for the patch - The Squiz
standard now ensures array keys are indented 4 spaces from the main statement
- Previously, this standard aligned keys 1 space from the start of the array
keyword - The Squiz standard now ensures array end braces are aligned with the
main statement - Previously, this standard aligned the close brace with the
start of the array keyword - The standard for PHP_CodeSniffer itself now
enforces short array syntax - The standard for PHP_CodeSniffer itself now uses
the Generic.Arrays/ArrayIndent sniff rules - Improved fixer conflicts and syntax
error handling for a number of sniffs - Thanks to Juliette Reinders Folmer
for the patch - Fixed bug #1462 : Error processing cyrillic strings in Tokenizer
- Fixed bug #1573 : Squiz.WhiteSpace.LanguageConstructSpacing does not properly
check for tabs and newlines - Thanks to Micha? Bundyra for the patch - Fixed
bug #1590 : InlineControlStructure CBF issue while adding braces to an if thats
returning a nested function - Fixed bug #1718 : Unclosed strings at EOF
sometimes tokenized as T_WHITESPACE by the JS tokenizer - Fixed bug #1731 :
Directory exclusions do not work as expected when a single file name is passed
to phpcs - Fixed bug #1737 : Squiz.CSS.EmptyStyleDefinition sees comment as
style definition and fails to report error - Fixed bug #1746 : Very large
reports can sometimes become garbled when using the parallel option - Fixed bug
#1747 : Squiz.Scope.StaticThisUsage incorrectly looking inside closures - Fixed
bug #1757 : Unknown type hint "object" in Squiz.Commenting.FunctionComment -
Fixed bug #1758 : PHPCS gets stuck creating file list when processing circular
symlinks - Fixed bug #1761 : Generic.WhiteSpace.ScopeIndent error on multi-line
function call with static closure argument - Fixed bug #1762 :
Generic.WhiteSpace.Disallow[Space/Tab]Indent not inspecting content before open
tag - Thanks to Juliette Reinders Folmer for the patch - Fixed bug #1769 :
Custom "define" function triggers a warning about declaring new symbols - Fixed
bug #1776 : Squiz.Scope.StaticThisUsage incorrectly looking inside anon classes
- Fixed bug #1777 : Generic.WhiteSpace.ScopeIndent incorrect indent errors when
self called function proceeded by comment
--------------------------------------------------------------------------------
================================================================================
php-phpmyadmin-motranslator-3.4-1.fc27 (FEDORA-2017-97e4c664a8)
Translation API for PHP using Gettext MO files
--------------------------------------------------------------------------------
Update Information:
**Version 3.4** * Released on 2017-12-15. * Added Translator::setTranslation
method.
--------------------------------------------------------------------------------
================================================================================
php-phpunit-PHPUnit-5.7.26-1.fc27 (FEDORA-2017-2e77a869a5)
The PHP Unit Testing framework
--------------------------------------------------------------------------------
Update Information:
**Version 5.7.26** - 2017-12-17 * **Fixed** * Fixed
[#2472](https://github.com/sebastianbergmann/phpunit/issues/2472):
`PHPUnit\Util\Getopt` uses deprecated `each()` function * Fixed
[#2833](https://github.com/sebastianbergmann/phpunit/issues/2833): Test class
loaded during data provider execution is not discovered * Fixed
[#2922](https://github.com/sebastianbergmann/phpunit/issues/2922): Test class is
not discovered when there is a test class with `@group` and provider throwing
exception in it, tests are run with `--exclude-group` for that group, there is
another class called later (after the class from above), and the name of that
another class does not match its filename
--------------------------------------------------------------------------------
================================================================================
python-daemon-2.1.2-6.fc27 (FEDORA-2017-46fd883b55)
Library to implement a well-behaved Unix daemon process
--------------------------------------------------------------------------------
Update Information:
Add dependency on needed python-docutils.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1478196 - Missing dependency: docutils
https://bugzilla.redhat.com/show_bug.cgi?id=1478196
--------------------------------------------------------------------------------
================================================================================
python-etcd-0.4.5-8.fc27 (FEDORA-2017-00e65b29f3)
A python client library for etcd
--------------------------------------------------------------------------------
Update Information:
Fixed issue with naming.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526788 - python-etcd binary packages are misnamed
https://bugzilla.redhat.com/show_bug.cgi?id=1526788
--------------------------------------------------------------------------------
================================================================================
python-sphinxcontrib-websupport-1.0.1-5.20171013git.fc27 (FEDORA-2017-37674f41ba)
Sphinx API for Web Apps
--------------------------------------------------------------------------------
Update Information:
Fixed Source0 URL (bz#1526646)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526646 - Source0 is invalid URL
https://bugzilla.redhat.com/show_bug.cgi?id=1526646
--------------------------------------------------------------------------------
================================================================================
python3-mypy-0.560-1.fc27 (FEDORA-2017-bf658ac335)
A static type checker for Python
--------------------------------------------------------------------------------
Update Information:
0.560
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526656 - python3-mypy-v0.560 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1526656
--------------------------------------------------------------------------------
================================================================================
rpcbind-0.2.4-8.rc3.fc27 (FEDORA-2017-be16788e4e)
Universal Addresses to RPC Program Number Mapper
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream RC release: rpcbind-0_2_5-rc3 (bz 1431574)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431574 - service file not starting rpcbind.target
https://bugzilla.redhat.com/show_bug.cgi?id=1431574
--------------------------------------------------------------------------------
================================================================================
rtags-2.16-1.fc27 (FEDORA-2017-0f1929d08e)
A indexer for the c language family with Emacs integration
--------------------------------------------------------------------------------
Update Information:
New upstream release ---- Rebuild for LLVM 5.0
--------------------------------------------------------------------------------
================================================================================
runc-1.0.0-15.rc4.gite6516b3.fc27 (FEDORA-2017-ed8861acf0)
CLI for running Open Containers
--------------------------------------------------------------------------------
Update Information:
cri-o needs runc >= 2:1.0.0-15, runc - built commit e6516b3 ---- Many bug
fixes ---- Updated for Kubernetes 1.9 release. ---- Update with a couple of
bug fixes.
--------------------------------------------------------------------------------
================================================================================
snapd-2.29.4-3.fc27 (FEDORA-2017-cdd5534bdf)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
Add patch to SELinux policy to allow snapd to receive replies from polkit
--------------------------------------------------------------------------------
================================================================================
xfburn-0.5.5-1.fc27 (FEDORA-2017-4f10ad3e7d)
Simple CD burning tool for Xfce
--------------------------------------------------------------------------------
Update Information:
xfburn 0.5.5 (2017-12-14) ============------------- - Use gstreamer discovere
api to get track duration - Update xfburn icon in desktop-integration and main
windows - Do not use deprecated media-cdrom Icon (Bug #12233) - Add appdata file
(Bug #11201) - Add GenericName in xfburn.desktop.in (Bug #12170) - Do no open
data-composition when running --audio-composition (Bug #13251) - Improve error
message when a plugin is missing. - Missing strings in translations (Bug #11291)
- Translation Updates: Arabic, Asturian, Bulgarian, Catalan, Czech, Danish,
German, Greek, English (Australia), English (United Kingdom), Spanish, Estonian,
Basque, Finnish, French, Galician, Hebrew, Croatian, Hungarian, Indonesian,
Icelandic, Italian, Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian
Bokm��l, Dutch, Norwegian Nynorsk, Occitan (post 1500), Polish, Portuguese,
Portuguese (Brazil), Russian, Sinhala, Slovak, Serbian, Swedish, Telugu, Thai,
Turkish, Uighur, Ukrainian, Chinese (China), Chinese (Taiwan)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1408329 - Warning "Gstreamer did not like this file (detection timed
out)" for many mp3 files
https://bugzilla.redhat.com/show_bug.cgi?id=1408329
--------------------------------------------------------------------------------
================================================================================
yadifa-2.3.7-1.fc27 (FEDORA-2017-94d3267ac0)
Lightweight authoritative Name Server with DNSSEC capabilities
--------------------------------------------------------------------------------
Update Information:
20171208: YADIFA 2.3.0-2.3.7 --- - From now on, both master and slaves are
updating the zone in the same manner (journal transactions) - Messages are now
default (--enable-messages). Disable them using --disable-messages. - Adds more
(dynamic) update validation. - Adds a build option to remove compile date and
time from various help messages (--disable-build-timestamp) - A master can now
be configured to allow updating RRSIG records externally (e.g.: update add
domain. RRSIG ...) - Added thread_pool_try_enqueue_call to give up if a queue is
full or overworked. --- - Fixes an issue where closing an (a)XFR stream could
lead to a race over the file descriptors. - Fixes an issue where an AXFR query
would return a version of the zone too old to be upgradable by following
incremental updates. - Fixes an issue where zones with big-enough NSEC3 coverage
(several millions NSEC3 record) could potentially reach an internal limit of the
database. - Fixes an issue where shutting down YADIFA while a zone is being
downloaded (AXFR) may make it wait forever. - Fixes an issue where the slave
would complain about a missing private key. - Fixes an issue where a
specifically truncated IXFR query may make YADIFA replying with an AXFR. - Fixes
an issue where an IXFR query returning "not implemented" instead of an AXFR
would be retried later as an IXFR. - Fixes an issue where hammering reopening
the logs on an overloaded server would not work properly. - Fixes an issue with
the CW queuing mechanism when trying to fill a full queue. - Fixes an issue on
servers using the network-model 1 model (<main> : network-model 1) - Fixes an
issue where the removal in a certain order of hash/hash* related domains would
end-up triggering an abort - Fixes an issue where querying a signed domain that
was deleted would answer NOERROR instead of NXDOMAIN - Fixes an issue where a
zone loaded with a journal would not be marked "dirty" and thus would not be
fully dumped on disk upon kill -USR1 - Fixes an issue with network aliases not
configured on all setups of --enable-messages - Fixes an issue with the logger
not releasing the log files before reconfiguration - Fixes an issue with the
journal where heavy load would prevent notification to slaves
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523908 - yadifa-2.3.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1523908
--------------------------------------------------------------------------------