The following Fedora 27 Security updates need testing:
Age URL
94
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
43
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c9395f9bec remctl-3.14-1.fc27
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a85044d389 ruby-2.4.4-88.fc27
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cf1dd2166b
asterisk-14.7.6-2.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-775d96b54b
blktrace-1.2.0-6.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-363877c27c
firefox-60.0-4.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6c01a593b0
ncurses-6.0-14.20170722.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fd850e033d
graphviz-2.40.1-11.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ed35b82337
ca-certificates-2018.2.24-1.0.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9c88c32d15 glibc-2.26-28.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dc7338487
curl-7.55.1-11.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25525a9346
thunderbird-enigmail-2.0.4-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-de5de06754
procps-ng-3.3.10-16.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
48
https://bodhi.fedoraproject.org/updates/FEDORA-2018-772fcd140c
linux-firmware-20180402-83.git8c1e439c.fc27
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9fff2c4e8a
python-productmd-1.12-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-363877c27c
firefox-60.0-4.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6c01a593b0
ncurses-6.0-14.20170722.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d40d2a6711
osinfo-db-20180514-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6a754379dc
evolution-data-server-3.26.6-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-90cb85c6c2
vim-8.0.1842-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0666e6e061
libguestfs-1.38.2-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a56e55b708
python2-2.7.15-2.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d493de2468
breeze-icon-theme-5.46.0-1.fc27 extra-cmake-modules-5.46.0-1.fc27 kf5-5.46.0-1.fc27
kf5-attica-5.46.0-1.fc27 kf5-baloo-5.46.0-1.fc27 kf5-bluez-qt-5.46.0-1.fc27
kf5-frameworkintegration-5.46.0-1.fc27 kf5-kactivities-5.46.0-1.fc27
kf5-kactivities-stats-5.46.0-1.fc27 kf5-kapidox-5.46.0-1.fc27 kf5-karchive-5.46.0-1.fc27
kf5-kauth-5.46.0-1.fc27 kf5-kbookmarks-5.46.0-1.fc27 kf5-kcmutils-5.46.0-1.fc27
kf5-kcodecs-5.46.0-1.fc27 kf5-kcompletion-5.46.0-1.fc27 kf5-kconfig-5.46.0-1.fc27
kf5-kconfigwidgets-5.46.0-1.fc27 kf5-kcoreaddons-5.46.0-1.fc27 kf5-kcrash-5.46.0-1.fc27
kf5-kdbusaddons-5.46.0-1.fc27 kf5-kdeclarative-5.46.0-1.fc27 kf5-kded-5.46.0-1.fc27
kf5-kdelibs4support-5.46.0-1.fc27 kf5-kdesignerplugin-5.46.0-1.fc27
kf5-kdesu-5.46.0-1.fc27 kf5-kdewebkit-5.46.0-1.fc27 kf5-kdnssd-5.46.0-1.fc27
kf5-kdoctools-5.46.0-1.fc27 kf5-kemoticons-5.46.0-1.fc27 kf5-kfilemetadata-5.46.0-1.fc27
kf5-kglobalaccel-5.46.0-1.fc27 kf5-kguiad
dons-5.46.0-1.fc27 kf5-kholidays-5.46.0-1.fc27 kf5-khtml-5.46.0-1.fc27
kf5-ki18n-5.46.0-1.fc27 kf5-kiconthemes-5.46.0-1.fc27 kf5-kidletime-5.46.0-1.fc27
kf5-kimageformats-5.46.0-1.fc27 kf5-kinit-5.46.0-1.fc27 kf5-kio-5.46.0-2.fc27
kf5-kirigami2-5.46.0-1.fc27 kf5-kitemmodels-5.46.0-1.fc27 kf5-kitemviews-5.46.0-1.fc27
kf5-kjobwidgets-5.46.0-1.fc27 kf5-kjs-5.46.0-1.fc27 kf5-kjsembed-5.46.0-1.fc27
kf5-kmediaplayer-5.46.0-1.fc27 kf5-knewstuff-5.46.0-1.fc27
kf5-knotifications-5.46.0-1.fc27 kf5-knotifyconfig-5.46.0-1.fc27
kf5-kpackage-5.46.0-1.fc27 kf5-kparts-5.46.0-1.fc27 kf5-kpeople-5.46.0-1.fc27
kf5-kplotting-5.46.0-1.fc27 kf5-kpty-5.46.0-1.fc27 kf5-kross-5.46.0-1.fc27
kf5-krunner-5.46.0-1.fc27 kf5-kservice-5.46.0-1.fc27 kf5-ktexteditor-5.46.0-1.fc27
kf5-ktextwidgets-5.46.0-1.fc27 kf5-kunitconversion-5.46.0-1.fc27 kf5-kwallet-5.46.0-1.fc27
kf5-kwayland-5.46.0-1.fc27 kf5-kwidgetsaddons-5.46.0-1.fc27
kf5-kwindowsystem-5.46.0-1.fc27 kf5-kxmlgui-5.46.0-1.fc27 kf5-kxmlrpcclient-5.46.0-1.fc27
kf5-modemmanager-qt-5.46.0-1.fc27 kf5-networkmanager-qt-5.46.0-1.fc27
kf5-plasma-5.46.0-1.fc27 kf5-prison-5.46.0-1.fc27 kf5-purpose-5.46.0-1.fc27
kf5-solid-5.46.0-1.fc27 kf5-sonnet-5.46.0-1.fc27 kf5-syntax-highlighting-5.46.0-1.fc27
kf5-threadweaver-5.46.0-1.fc27 oxygen-icon-theme-5.46.0-1.fc27
qqc2-desktop-style-5.46.0-2.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dc7338487
curl-7.55.1-11.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9c88c32d15 glibc-2.26-28.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bd2f57abfe
perl-5.26.2-405.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ed35b82337
ca-certificates-2018.2.24-1.0.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b9421c1e2b sssd-1.16.1-8.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a0a96d42a8
kernel-4.16.9-200.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-de5de06754
procps-ng-3.3.10-16.fc27
The following builds have been pushed to Fedora 27 updates-testing
dislocker-0.7.1-8.fc27
docker-1.13.1-54.git6c336e4.fc27
dolphin-emu-5.0-22.fc27
kdevelop-5.2.3-1.fc27
kdevelop-php-5.2.3-1.fc27
kdevelop-python-5.2.3-1.py3.fc27
libidn2-2.0.5-1.fc27
logwatch-7.4.3-10.fc27
mbedtls-2.9.0-1.fc27
mosquitto-1.5-1.fc27
nekovm-2.2.0-4.fc27
pari-2.9.5-1.fc27
python-construct-2.5.1-16.fc27
python-hglib-2.6.1-1.fc27
qcad-3.20.1.3-2.fc27
rpkg-1.54-2.fc27
standard-test-roles-2.11-1.fc27
udiskie-1.7.4-1.fc27
volume_key-0.3.10-1.fc27
Details about builds:
================================================================================
dislocker-0.7.1-8.fc27 (FEDORA-2018-c8f4834a69)
Utility to access BitLocker encrypted volumes
--------------------------------------------------------------------------------
Update Information:
Mbed TLS 2.9.0 ============== Description ----------- Mbed TLS version 2.9.0
has now been released, in addition to maintenance releases for Mbed TLS 2.1 and
Mbed TLS 1.3. Mbed TLS 2.9.0 introduces some minor functional improvements
including code size reductions with smaller AES tables, and initial support for
Curve448 along with some security fixes and bug fixes. Security -------- *
(2.9, 2.7, 2.1) Fixed an issue in the X.509 module which could lead to a buffer
overread during certificate validation. Additionally, the issue could also lead
to unnecessary callback checks being made or to some validation checks to be
omitted. The overread could be triggered remotely, while the other issues would
require a non DER-compliant certificate to be correctly signed by a trusted CA,
or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes
#825. * (2.9, 2.7, 2.1) Fixed the buffer length assertion in the
ssl_parse_certificate_request() function which could lead to an arbitrary
overread of the message buffer. The overreads could be caused by receiving a
malformed algorithms section which was too short. In builds with debug output,
this overread data was output with the debug data. * (2.9, 2.7, 2.1) Fixed a
client-side bug in the validation of the server's ciphersuite choice which could
potentially lead to the client accepting a ciphersuite it didn't offer or a
ciphersuite that could not be used with the TLS or DTLS version chosen by the
server. This could lead to corruption of internal data structures for some
configurations. Features -------- * (2.9) Added an option of
MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during
runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and
contributed by jkivilin. * (2.9) Added initial support for Curve448 (RFC
7748). So far only mbedtls_ecp_mul() and ECDH primitive functions
(mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for
now. Contributed by Nicholas Wilson. API Changes ----------- Mbed TLS 2.9.0
maintains source code and binary compatibility with the last minor version, Mbed
TLS 2.8.0, but extends the interface with additional capabilities. * (2.9)
Extended the API with the function of mbedtls_net_poll() to allow user
applications to wait for a network context to become ready before reading or
writing. * (2.9) Added the function mbedtls_ssl_check_pending() to the public
API to allow a check for whether more more data is pending to be processed in
the internal message buffers. This function is necessary to determine the
underlying transport when event-driven IO is used. Bugfix ------ * (2.9,
2.7) Fixed a spurious uninitialized variable warning in cmac.c. Fix
independently contributed by Brian J Murray and David Brown. * (2.9, 2.7, 2.1)
Added missing dependencies in test suites that led to build failures in
configurations that omit certain hashes or public-key algorithms. Fixes #1040.
* (2.9, 2.7) Fixed a C89 incompatibility issue in benchmark.c. Contributed by
Brendan Shanks. Fixes #1353. * (2.9, 2.7, 2.1) Added missing dependencies for
MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites.
Contributed by Deomid Ryabkov. Fixes #1299, #1475. * (2.9, 2.7, 2.1) Fixed the
Makefile build process for building shared libraries on Mac OS X. Fixed by
mnacamura. * (2.9, 2.7, 2.1) Fixed parsing of PKCS#8 encoded Elliptic Curve
keys. Previously Mbed TLS was unable to parse keys which had only the optional
parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed
in #1379. * (2.9, 2.7, 2.1) Added an optimisation to return the plaintext data
more quickly on unpadded CBC decryption, as stated in the
mbedtls_cipher_update() documentation. Contributed by Andy Leiserson. * (2.9,
2.7, 2.1) Fixed the overriding and ignoring of return values when parsing and
writing to a file in the pk_sign program. Found by kevlut in #1142. * (2.9)
Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to
situations where data needs to be fetched from the underlying transport in order
to make progress. Previously, this error code was also occasionally returned
when unexpected messages were being discarded, ignoring that further messages
could potentially already be pending to be processed in the internal buffers;
these cases led to deadlocks when event-driven I/O was used. Found and reported
by Hubert Mis in #772. * (2.9, 2.7, 2.1) Fixed buffer length assertions in the
ssl_parse_certificate_request() function which led to a potential one byte
overread of the message buffer. * (2.9, 2.7, 2.1) Fixed invalid buffer sizes
being passed to zlib during record compression and decompression. * (2.9)
Raised the soversion of libmbedcrypto to match the soversion of the maintained
2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect
breaking changes in that release, but the increment was missed in 2.8.0 and
later releases outside of the 2.7 branch. Changes ------- * (2.9) Removed
some redundant code in bignum.c. Contributed by Alexey Skalozub. * (2.9, 2.7)
Added support for cmake builds where Mbed TLS is a subproject. Fix contributed
independently by Matthieu Volat and Arne Schwabe. * (2.9, 2.7, 2.1) Improved
the testing of configurations that omit certain hashes or public-key algorithms.
Includes contributions by Gert van Dijk. * (2.9, 2.7, 2.1) Improved negative
testing of X.509 parsing. * (2.9, 2.7, 2.1) Does not define global mutexes for
readdir() and gmtime() in configurations where the feature is disabled. Found
and fixed by Gergely Budai. * (2.9) Hardened the function
mbedtls_ssl_config_free() against misuse, so that it doesn't leak memory if the
user doesn't use mbedtls_ssl_conf_psk() and instead incorrectly manipulates the
configuration structure directly. Found and fix submitted by junyeonLEE in
#1220. * (2.9, 2.7, 2.1) Provided an empty implementation of
mbedtls_pkcs5_pbes2() when MBEDTLS_ASN1_PARSE_C is not enabled. This allows the
use of PBKDF2 without PBES2. Fixed by Marcos Del Sol Vives. * (2.9) Added the
order of the base point as N in the mbedtls_ecp_group structure for Curve25519,
which other curves already had. Contributed by Nicholas Wilson #481. * (2.9,
2.7, 2.1) Improved the documentation of mbedtls_net_accept(). Contributed by
Ivan Krylov. * (2.9, 2.7, 2.1) Improved the documentation of
mbedtls_ssl_write(). Suggested by Paul Sokolovsky in #1356. * (2.9, 2.7, 2.1)
Added an option in the Makefile to support ar utilities where the operation
letter must not be prefixed by '-', such as LLVM. Found and fixed by Alex Hixon.
* (2.9, 2.7, 2.1) Added the ability to allow configuration of the shared library
extension by setting the DLEXT environment variable when using the project
makefiles. * (2.9) Optimized unnecessary zeroing in mbedtls_mpi_copy(). Based
on a contribution by Alexey Skalozub in #405. * (2.9, 2.7, 2.1) Changed the
SSL module, such that when f_send, f_recv or f_recv_timeout report transmitting
more than the required length, they now return an error. Raised by Sam O'Connor
in #1245. * (2.9, 2.7, 2.1) Improved the robustness of
mbedtls_ssl_derive_keys() against the use of HMAC functions with non-HMAC
ciphersuites. Independently contributed by Jiayuan Chen. Fixes #1437. * (2.9)
Improved security of RSA key generation by including criteria from FIPS 186-4.
Contributed by Jethro Beekman. #1380 * (2.9) Added declaration of functions in
header files even when an alternative implementation of the corresponding module
uses an MBEDTLS_..._ALT macro. This means that alternative implementations no
longer need to copy the declarations, and ensures that they will have the same
API. * (2.9) Added platform setup and teardown calls in test suites, for
consistency, and to allow the test suites to work on platforms with
cryptographic acceleration.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 17 2018 Robert Scheck <robert(a)fedoraproject.org> 0.7.1-8
- Rebuilt for mbed TLS 2.7.3/2.9.0 (libmbedcrypto.so.2)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575175 - mbedtls-2.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1575175
--------------------------------------------------------------------------------
================================================================================
docker-1.13.1-54.git6c336e4.fc27 (FEDORA-2018-c59142e393)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
Resolves: #1559274
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Frantisek Kluknavsky <fkluknav(a)redhat.com> -
2:1.13.1-54.git6c336e4
- Resolves: #1559274
- built docker @projectatomic/docker-1.13.1 commit 6c336e4
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 04caa55
- built docker-runc @projectatomic/docker-1.13.1 commit 345dcfa
- built docker-containerd @projectatomic/docker-1.13.1 commit 375cb68
- built docker-init commit 5b117de
- built libnetwork commit c15b372
* Tue May 15 2018 Frantisek Kluknavsky <fkluknav(a)redhat.com> -
2:1.13.1-53.git89b0e65
- do not compress debuginfo with dwz to support delve debugger
* Fri Apr 13 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> -
2:1.13.1-52.git89b0e65
- Resolves: #1558425
- built docker @projectatomic/docker-1.13.1 commit 89b0e65
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 04caa55
- built docker-runc @projectatomic/docker-1.13.1 commit 345dcfa
- built docker-containerd @projectatomic/docker-1.13.1 commit 375cb68
- built docker-init commit 5b117de
- built libnetwork commit c15b372
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1559274 - .dockerignore is not processed correctly: `/bla` entry should
ignore directory named "bla" in root, but it doesn't
https://bugzilla.redhat.com/show_bug.cgi?id=1559274
--------------------------------------------------------------------------------
================================================================================
dolphin-emu-5.0-22.fc27 (FEDORA-2018-c8f4834a69)
GameCube / Wii / Triforce Emulator
--------------------------------------------------------------------------------
Update Information:
Mbed TLS 2.9.0 ============== Description ----------- Mbed TLS version 2.9.0
has now been released, in addition to maintenance releases for Mbed TLS 2.1 and
Mbed TLS 1.3. Mbed TLS 2.9.0 introduces some minor functional improvements
including code size reductions with smaller AES tables, and initial support for
Curve448 along with some security fixes and bug fixes. Security -------- *
(2.9, 2.7, 2.1) Fixed an issue in the X.509 module which could lead to a buffer
overread during certificate validation. Additionally, the issue could also lead
to unnecessary callback checks being made or to some validation checks to be
omitted. The overread could be triggered remotely, while the other issues would
require a non DER-compliant certificate to be correctly signed by a trusted CA,
or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes
#825. * (2.9, 2.7, 2.1) Fixed the buffer length assertion in the
ssl_parse_certificate_request() function which could lead to an arbitrary
overread of the message buffer. The overreads could be caused by receiving a
malformed algorithms section which was too short. In builds with debug output,
this overread data was output with the debug data. * (2.9, 2.7, 2.1) Fixed a
client-side bug in the validation of the server's ciphersuite choice which could
potentially lead to the client accepting a ciphersuite it didn't offer or a
ciphersuite that could not be used with the TLS or DTLS version chosen by the
server. This could lead to corruption of internal data structures for some
configurations. Features -------- * (2.9) Added an option of
MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during
runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and
contributed by jkivilin. * (2.9) Added initial support for Curve448 (RFC
7748). So far only mbedtls_ecp_mul() and ECDH primitive functions
(mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for
now. Contributed by Nicholas Wilson. API Changes ----------- Mbed TLS 2.9.0
maintains source code and binary compatibility with the last minor version, Mbed
TLS 2.8.0, but extends the interface with additional capabilities. * (2.9)
Extended the API with the function of mbedtls_net_poll() to allow user
applications to wait for a network context to become ready before reading or
writing. * (2.9) Added the function mbedtls_ssl_check_pending() to the public
API to allow a check for whether more more data is pending to be processed in
the internal message buffers. This function is necessary to determine the
underlying transport when event-driven IO is used. Bugfix ------ * (2.9,
2.7) Fixed a spurious uninitialized variable warning in cmac.c. Fix
independently contributed by Brian J Murray and David Brown. * (2.9, 2.7, 2.1)
Added missing dependencies in test suites that led to build failures in
configurations that omit certain hashes or public-key algorithms. Fixes #1040.
* (2.9, 2.7) Fixed a C89 incompatibility issue in benchmark.c. Contributed by
Brendan Shanks. Fixes #1353. * (2.9, 2.7, 2.1) Added missing dependencies for
MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites.
Contributed by Deomid Ryabkov. Fixes #1299, #1475. * (2.9, 2.7, 2.1) Fixed the
Makefile build process for building shared libraries on Mac OS X. Fixed by
mnacamura. * (2.9, 2.7, 2.1) Fixed parsing of PKCS#8 encoded Elliptic Curve
keys. Previously Mbed TLS was unable to parse keys which had only the optional
parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed
in #1379. * (2.9, 2.7, 2.1) Added an optimisation to return the plaintext data
more quickly on unpadded CBC decryption, as stated in the
mbedtls_cipher_update() documentation. Contributed by Andy Leiserson. * (2.9,
2.7, 2.1) Fixed the overriding and ignoring of return values when parsing and
writing to a file in the pk_sign program. Found by kevlut in #1142. * (2.9)
Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to
situations where data needs to be fetched from the underlying transport in order
to make progress. Previously, this error code was also occasionally returned
when unexpected messages were being discarded, ignoring that further messages
could potentially already be pending to be processed in the internal buffers;
these cases led to deadlocks when event-driven I/O was used. Found and reported
by Hubert Mis in #772. * (2.9, 2.7, 2.1) Fixed buffer length assertions in the
ssl_parse_certificate_request() function which led to a potential one byte
overread of the message buffer. * (2.9, 2.7, 2.1) Fixed invalid buffer sizes
being passed to zlib during record compression and decompression. * (2.9)
Raised the soversion of libmbedcrypto to match the soversion of the maintained
2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect
breaking changes in that release, but the increment was missed in 2.8.0 and
later releases outside of the 2.7 branch. Changes ------- * (2.9) Removed
some redundant code in bignum.c. Contributed by Alexey Skalozub. * (2.9, 2.7)
Added support for cmake builds where Mbed TLS is a subproject. Fix contributed
independently by Matthieu Volat and Arne Schwabe. * (2.9, 2.7, 2.1) Improved
the testing of configurations that omit certain hashes or public-key algorithms.
Includes contributions by Gert van Dijk. * (2.9, 2.7, 2.1) Improved negative
testing of X.509 parsing. * (2.9, 2.7, 2.1) Does not define global mutexes for
readdir() and gmtime() in configurations where the feature is disabled. Found
and fixed by Gergely Budai. * (2.9) Hardened the function
mbedtls_ssl_config_free() against misuse, so that it doesn't leak memory if the
user doesn't use mbedtls_ssl_conf_psk() and instead incorrectly manipulates the
configuration structure directly. Found and fix submitted by junyeonLEE in
#1220. * (2.9, 2.7, 2.1) Provided an empty implementation of
mbedtls_pkcs5_pbes2() when MBEDTLS_ASN1_PARSE_C is not enabled. This allows the
use of PBKDF2 without PBES2. Fixed by Marcos Del Sol Vives. * (2.9) Added the
order of the base point as N in the mbedtls_ecp_group structure for Curve25519,
which other curves already had. Contributed by Nicholas Wilson #481. * (2.9,
2.7, 2.1) Improved the documentation of mbedtls_net_accept(). Contributed by
Ivan Krylov. * (2.9, 2.7, 2.1) Improved the documentation of
mbedtls_ssl_write(). Suggested by Paul Sokolovsky in #1356. * (2.9, 2.7, 2.1)
Added an option in the Makefile to support ar utilities where the operation
letter must not be prefixed by '-', such as LLVM. Found and fixed by Alex Hixon.
* (2.9, 2.7, 2.1) Added the ability to allow configuration of the shared library
extension by setting the DLEXT environment variable when using the project
makefiles. * (2.9) Optimized unnecessary zeroing in mbedtls_mpi_copy(). Based
on a contribution by Alexey Skalozub in #405. * (2.9, 2.7, 2.1) Changed the
SSL module, such that when f_send, f_recv or f_recv_timeout report transmitting
more than the required length, they now return an error. Raised by Sam O'Connor
in #1245. * (2.9, 2.7, 2.1) Improved the robustness of
mbedtls_ssl_derive_keys() against the use of HMAC functions with non-HMAC
ciphersuites. Independently contributed by Jiayuan Chen. Fixes #1437. * (2.9)
Improved security of RSA key generation by including criteria from FIPS 186-4.
Contributed by Jethro Beekman. #1380 * (2.9) Added declaration of functions in
header files even when an alternative implementation of the corresponding module
uses an MBEDTLS_..._ALT macro. This means that alternative implementations no
longer need to copy the declarations, and ensures that they will have the same
API. * (2.9) Added platform setup and teardown calls in test suites, for
consistency, and to allow the test suites to work on platforms with
cryptographic acceleration.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Robert Scheck <robert(a)fedoraproject.org> - 5.0-22
- Rebuilt for mbed TLS 2.9.0 (libmbedcrypto.so.2)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575175 - mbedtls-2.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1575175
--------------------------------------------------------------------------------
================================================================================
kdevelop-5.2.3-1.fc27 (FEDORA-2018-6498795fec)
Integrated Development Environment for C++/C
--------------------------------------------------------------------------------
Update Information:
KDevelop 5.2.3 release. See
https://www.kdevelop.org/news/kdevelop-522-and-523-released for more
information.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Jan Grulich <jgrulich(a)redhat.com> - 9:5.2.3-1
- Update to 5.2.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580000 - kdevelop-5.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1580000
--------------------------------------------------------------------------------
================================================================================
kdevelop-php-5.2.3-1.fc27 (FEDORA-2018-6498795fec)
Php language and documentation plugins for KDevelop
--------------------------------------------------------------------------------
Update Information:
KDevelop 5.2.3 release. See
https://www.kdevelop.org/news/kdevelop-522-and-523-released for more
information.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Jan Grulich <jgrulich(a)redhat.com> - 5.2.3-1
- Update to 5.2.3
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.2.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580000 - kdevelop-5.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1580000
--------------------------------------------------------------------------------
================================================================================
kdevelop-python-5.2.3-1.py3.fc27 (FEDORA-2018-6498795fec)
Python 3 Plugin for KDevelop
--------------------------------------------------------------------------------
Update Information:
KDevelop 5.2.3 release. See
https://www.kdevelop.org/news/kdevelop-522-and-523-released for more
information.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Jan Grulich <jgrulich(a)redhat.com> - 5.2.3-1.py3
- Update to 5.2.3
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
5.2.1-2.py3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580000 - kdevelop-5.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1580000
--------------------------------------------------------------------------------
================================================================================
libidn2-2.0.5-1.fc27 (FEDORA-2018-90332d17ff)
Library to support IDNA2008 internationalized domain names
--------------------------------------------------------------------------------
Update Information:
Libidn 2.0.5 (released 2018-05-18) ================================== *
Switched the default library behavior to IDNA2008 as amended by TR#46 (non-
transitional). That default behavior is enabled when no flags are specified to
function calls. Applications can utilize the %IDN2_NO_TR46 flag to switch to the
unamended IDNA2008. This is done in the interest of interoperability based on
the fact that this is what application writers care about rather than strict
compliance with a particular protocol. * Fixed memleak in
idn2_to_unicode_8zlz(). * Return error (IDN2_ICONV_FAIL) on charset conversion
errors. * Fixed issue with STD3 rules applying in non-transitional TR46 mode.
* idn2: added option --usestd3asciirules.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Robert Scheck <robert(a)fedoraproject.org> 2.0.5-1
- Upgrade to 2.0.5 (#1577864, #1579825)
* Wed Apr 4 2018 Robert Scheck <robert(a)fedoraproject.org> 2.0.4-7
- Split RPM scriptlets (#1563832)
* Mon Apr 2 2018 Robert Scheck <robert(a)fedoraproject.org> 2.0.4-6
- Use splitting suggestions from Nikos Mavrogiannopoulos instead
* Mon Apr 2 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 2.0.4-5
- Split cli utilities out into a sub package
- Spec file cleanups
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1577864 - libidn2: Enable TR46 by default
https://bugzilla.redhat.com/show_bug.cgi?id=1577864
[ 2 ] Bug #1579825 - libidn2-2.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1579825
--------------------------------------------------------------------------------
================================================================================
logwatch-7.4.3-10.fc27 (FEDORA-2018-b9cc045c23)
A log file analysis program
--------------------------------------------------------------------------------
Update Information:
Fix parsing of log entries produced by sendmail process with 7-digit PID
(rhbz#1561587)
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Jan Syn����ek <jsynacek(a)redhat.com> - 7.4.3-10
- Fix parsing of log entries produced by sendmail process with 7-digit PID (#1561587)
* Fri Feb 9 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 7.4.3-9
- Escape macros in %changelog
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.4.3-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Tue Nov 7 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 7.4.3-7
- Remove old crufty coreutils requires
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561587 - Logwatch fails to parse log entries produced by sendmail process
with 7-digit PID
https://bugzilla.redhat.com/show_bug.cgi?id=1561587
--------------------------------------------------------------------------------
================================================================================
mbedtls-2.9.0-1.fc27 (FEDORA-2018-c8f4834a69)
Light-weight cryptographic and SSL/TLS library
--------------------------------------------------------------------------------
Update Information:
Mbed TLS 2.9.0 ============== Description ----------- Mbed TLS version 2.9.0
has now been released, in addition to maintenance releases for Mbed TLS 2.1 and
Mbed TLS 1.3. Mbed TLS 2.9.0 introduces some minor functional improvements
including code size reductions with smaller AES tables, and initial support for
Curve448 along with some security fixes and bug fixes. Security -------- *
(2.9, 2.7, 2.1) Fixed an issue in the X.509 module which could lead to a buffer
overread during certificate validation. Additionally, the issue could also lead
to unnecessary callback checks being made or to some validation checks to be
omitted. The overread could be triggered remotely, while the other issues would
require a non DER-compliant certificate to be correctly signed by a trusted CA,
or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes
#825. * (2.9, 2.7, 2.1) Fixed the buffer length assertion in the
ssl_parse_certificate_request() function which could lead to an arbitrary
overread of the message buffer. The overreads could be caused by receiving a
malformed algorithms section which was too short. In builds with debug output,
this overread data was output with the debug data. * (2.9, 2.7, 2.1) Fixed a
client-side bug in the validation of the server's ciphersuite choice which could
potentially lead to the client accepting a ciphersuite it didn't offer or a
ciphersuite that could not be used with the TLS or DTLS version chosen by the
server. This could lead to corruption of internal data structures for some
configurations. Features -------- * (2.9) Added an option of
MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during
runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and
contributed by jkivilin. * (2.9) Added initial support for Curve448 (RFC
7748). So far only mbedtls_ecp_mul() and ECDH primitive functions
(mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for
now. Contributed by Nicholas Wilson. API Changes ----------- Mbed TLS 2.9.0
maintains source code and binary compatibility with the last minor version, Mbed
TLS 2.8.0, but extends the interface with additional capabilities. * (2.9)
Extended the API with the function of mbedtls_net_poll() to allow user
applications to wait for a network context to become ready before reading or
writing. * (2.9) Added the function mbedtls_ssl_check_pending() to the public
API to allow a check for whether more more data is pending to be processed in
the internal message buffers. This function is necessary to determine the
underlying transport when event-driven IO is used. Bugfix ------ * (2.9,
2.7) Fixed a spurious uninitialized variable warning in cmac.c. Fix
independently contributed by Brian J Murray and David Brown. * (2.9, 2.7, 2.1)
Added missing dependencies in test suites that led to build failures in
configurations that omit certain hashes or public-key algorithms. Fixes #1040.
* (2.9, 2.7) Fixed a C89 incompatibility issue in benchmark.c. Contributed by
Brendan Shanks. Fixes #1353. * (2.9, 2.7, 2.1) Added missing dependencies for
MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites.
Contributed by Deomid Ryabkov. Fixes #1299, #1475. * (2.9, 2.7, 2.1) Fixed the
Makefile build process for building shared libraries on Mac OS X. Fixed by
mnacamura. * (2.9, 2.7, 2.1) Fixed parsing of PKCS#8 encoded Elliptic Curve
keys. Previously Mbed TLS was unable to parse keys which had only the optional
parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed
in #1379. * (2.9, 2.7, 2.1) Added an optimisation to return the plaintext data
more quickly on unpadded CBC decryption, as stated in the
mbedtls_cipher_update() documentation. Contributed by Andy Leiserson. * (2.9,
2.7, 2.1) Fixed the overriding and ignoring of return values when parsing and
writing to a file in the pk_sign program. Found by kevlut in #1142. * (2.9)
Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to
situations where data needs to be fetched from the underlying transport in order
to make progress. Previously, this error code was also occasionally returned
when unexpected messages were being discarded, ignoring that further messages
could potentially already be pending to be processed in the internal buffers;
these cases led to deadlocks when event-driven I/O was used. Found and reported
by Hubert Mis in #772. * (2.9, 2.7, 2.1) Fixed buffer length assertions in the
ssl_parse_certificate_request() function which led to a potential one byte
overread of the message buffer. * (2.9, 2.7, 2.1) Fixed invalid buffer sizes
being passed to zlib during record compression and decompression. * (2.9)
Raised the soversion of libmbedcrypto to match the soversion of the maintained
2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect
breaking changes in that release, but the increment was missed in 2.8.0 and
later releases outside of the 2.7 branch. Changes ------- * (2.9) Removed
some redundant code in bignum.c. Contributed by Alexey Skalozub. * (2.9, 2.7)
Added support for cmake builds where Mbed TLS is a subproject. Fix contributed
independently by Matthieu Volat and Arne Schwabe. * (2.9, 2.7, 2.1) Improved
the testing of configurations that omit certain hashes or public-key algorithms.
Includes contributions by Gert van Dijk. * (2.9, 2.7, 2.1) Improved negative
testing of X.509 parsing. * (2.9, 2.7, 2.1) Does not define global mutexes for
readdir() and gmtime() in configurations where the feature is disabled. Found
and fixed by Gergely Budai. * (2.9) Hardened the function
mbedtls_ssl_config_free() against misuse, so that it doesn't leak memory if the
user doesn't use mbedtls_ssl_conf_psk() and instead incorrectly manipulates the
configuration structure directly. Found and fix submitted by junyeonLEE in
#1220. * (2.9, 2.7, 2.1) Provided an empty implementation of
mbedtls_pkcs5_pbes2() when MBEDTLS_ASN1_PARSE_C is not enabled. This allows the
use of PBKDF2 without PBES2. Fixed by Marcos Del Sol Vives. * (2.9) Added the
order of the base point as N in the mbedtls_ecp_group structure for Curve25519,
which other curves already had. Contributed by Nicholas Wilson #481. * (2.9,
2.7, 2.1) Improved the documentation of mbedtls_net_accept(). Contributed by
Ivan Krylov. * (2.9, 2.7, 2.1) Improved the documentation of
mbedtls_ssl_write(). Suggested by Paul Sokolovsky in #1356. * (2.9, 2.7, 2.1)
Added an option in the Makefile to support ar utilities where the operation
letter must not be prefixed by '-', such as LLVM. Found and fixed by Alex Hixon.
* (2.9, 2.7, 2.1) Added the ability to allow configuration of the shared library
extension by setting the DLEXT environment variable when using the project
makefiles. * (2.9) Optimized unnecessary zeroing in mbedtls_mpi_copy(). Based
on a contribution by Alexey Skalozub in #405. * (2.9, 2.7, 2.1) Changed the
SSL module, such that when f_send, f_recv or f_recv_timeout report transmitting
more than the required length, they now return an error. Raised by Sam O'Connor
in #1245. * (2.9, 2.7, 2.1) Improved the robustness of
mbedtls_ssl_derive_keys() against the use of HMAC functions with non-HMAC
ciphersuites. Independently contributed by Jiayuan Chen. Fixes #1437. * (2.9)
Improved security of RSA key generation by including criteria from FIPS 186-4.
Contributed by Jethro Beekman. #1380 * (2.9) Added declaration of functions in
header files even when an alternative implementation of the corresponding module
uses an MBEDTLS_..._ALT macro. This means that alternative implementations no
longer need to copy the declarations, and ensures that they will have the same
API. * (2.9) Added platform setup and teardown calls in test suites, for
consistency, and to allow the test suites to work on platforms with
cryptographic acceleration.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 16 2018 Morten Stevens <mstevens(a)fedoraproject.org> - 2.9.0-1
- Update to 2.90
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575175 - mbedtls-2.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1575175
--------------------------------------------------------------------------------
================================================================================
mosquitto-1.5-1.fc27 (FEDORA-2018-8c833a541f)
An Open Source MQTT v3.1/v3.1.1 Broker
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 1.5 (rhbz#1580115)
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 20 2018 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.5-2
- Update to new upstream version 1.5 (rhbz#1580115)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580115 - Update mosquitto to new 1.5 upstream
https://bugzilla.redhat.com/show_bug.cgi?id=1580115
--------------------------------------------------------------------------------
================================================================================
nekovm-2.2.0-4.fc27 (FEDORA-2018-c8f4834a69)
Neko embedded scripting language and virtual machine
--------------------------------------------------------------------------------
Update Information:
Mbed TLS 2.9.0 ============== Description ----------- Mbed TLS version 2.9.0
has now been released, in addition to maintenance releases for Mbed TLS 2.1 and
Mbed TLS 1.3. Mbed TLS 2.9.0 introduces some minor functional improvements
including code size reductions with smaller AES tables, and initial support for
Curve448 along with some security fixes and bug fixes. Security -------- *
(2.9, 2.7, 2.1) Fixed an issue in the X.509 module which could lead to a buffer
overread during certificate validation. Additionally, the issue could also lead
to unnecessary callback checks being made or to some validation checks to be
omitted. The overread could be triggered remotely, while the other issues would
require a non DER-compliant certificate to be correctly signed by a trusted CA,
or a trusted CA with a non DER-compliant certificate. Found by luocm. Fixes
#825. * (2.9, 2.7, 2.1) Fixed the buffer length assertion in the
ssl_parse_certificate_request() function which could lead to an arbitrary
overread of the message buffer. The overreads could be caused by receiving a
malformed algorithms section which was too short. In builds with debug output,
this overread data was output with the debug data. * (2.9, 2.7, 2.1) Fixed a
client-side bug in the validation of the server's ciphersuite choice which could
potentially lead to the client accepting a ciphersuite it didn't offer or a
ciphersuite that could not be used with the TLS or DTLS version chosen by the
server. This could lead to corruption of internal data structures for some
configurations. Features -------- * (2.9) Added an option of
MBEDTLS_AES_FEWER_TABLES, to dynamically compute smaller AES tables during
runtime, thereby reducing the RAM/ROM footprint by ~6KiB. Suggested and
contributed by jkivilin. * (2.9) Added initial support for Curve448 (RFC
7748). So far only mbedtls_ecp_mul() and ECDH primitive functions
(mbedtls_ecdh_gen_public(), mbedtls_ecdh_compute_shared()) are supported for
now. Contributed by Nicholas Wilson. API Changes ----------- Mbed TLS 2.9.0
maintains source code and binary compatibility with the last minor version, Mbed
TLS 2.8.0, but extends the interface with additional capabilities. * (2.9)
Extended the API with the function of mbedtls_net_poll() to allow user
applications to wait for a network context to become ready before reading or
writing. * (2.9) Added the function mbedtls_ssl_check_pending() to the public
API to allow a check for whether more more data is pending to be processed in
the internal message buffers. This function is necessary to determine the
underlying transport when event-driven IO is used. Bugfix ------ * (2.9,
2.7) Fixed a spurious uninitialized variable warning in cmac.c. Fix
independently contributed by Brian J Murray and David Brown. * (2.9, 2.7, 2.1)
Added missing dependencies in test suites that led to build failures in
configurations that omit certain hashes or public-key algorithms. Fixes #1040.
* (2.9, 2.7) Fixed a C89 incompatibility issue in benchmark.c. Contributed by
Brendan Shanks. Fixes #1353. * (2.9, 2.7, 2.1) Added missing dependencies for
MBEDTLS_HAVE_TIME_DATE and MBEDTLS_VERSION_FEATURES in some test suites.
Contributed by Deomid Ryabkov. Fixes #1299, #1475. * (2.9, 2.7, 2.1) Fixed the
Makefile build process for building shared libraries on Mac OS X. Fixed by
mnacamura. * (2.9, 2.7, 2.1) Fixed parsing of PKCS#8 encoded Elliptic Curve
keys. Previously Mbed TLS was unable to parse keys which had only the optional
parameters field of the ECPrivateKey structure. Found by Jethro Beekman, fixed
in #1379. * (2.9, 2.7, 2.1) Added an optimisation to return the plaintext data
more quickly on unpadded CBC decryption, as stated in the
mbedtls_cipher_update() documentation. Contributed by Andy Leiserson. * (2.9,
2.7, 2.1) Fixed the overriding and ignoring of return values when parsing and
writing to a file in the pk_sign program. Found by kevlut in #1142. * (2.9)
Added restrictions to the usage of the error code MBEDTLS_ERR_SSL_WANT_READ to
situations where data needs to be fetched from the underlying transport in order
to make progress. Previously, this error code was also occasionally returned
when unexpected messages were being discarded, ignoring that further messages
could potentially already be pending to be processed in the internal buffers;
these cases led to deadlocks when event-driven I/O was used. Found and reported
by Hubert Mis in #772. * (2.9, 2.7, 2.1) Fixed buffer length assertions in the
ssl_parse_certificate_request() function which led to a potential one byte
overread of the message buffer. * (2.9, 2.7, 2.1) Fixed invalid buffer sizes
being passed to zlib during record compression and decompression. * (2.9)
Raised the soversion of libmbedcrypto to match the soversion of the maintained
2.7 branch. The soversion was increased in Mbed TLS version 2.7.1 to reflect
breaking changes in that release, but the increment was missed in 2.8.0 and
later releases outside of the 2.7 branch. Changes ------- * (2.9) Removed
some redundant code in bignum.c. Contributed by Alexey Skalozub. * (2.9, 2.7)
Added support for cmake builds where Mbed TLS is a subproject. Fix contributed
independently by Matthieu Volat and Arne Schwabe. * (2.9, 2.7, 2.1) Improved
the testing of configurations that omit certain hashes or public-key algorithms.
Includes contributions by Gert van Dijk. * (2.9, 2.7, 2.1) Improved negative
testing of X.509 parsing. * (2.9, 2.7, 2.1) Does not define global mutexes for
readdir() and gmtime() in configurations where the feature is disabled. Found
and fixed by Gergely Budai. * (2.9) Hardened the function
mbedtls_ssl_config_free() against misuse, so that it doesn't leak memory if the
user doesn't use mbedtls_ssl_conf_psk() and instead incorrectly manipulates the
configuration structure directly. Found and fix submitted by junyeonLEE in
#1220. * (2.9, 2.7, 2.1) Provided an empty implementation of
mbedtls_pkcs5_pbes2() when MBEDTLS_ASN1_PARSE_C is not enabled. This allows the
use of PBKDF2 without PBES2. Fixed by Marcos Del Sol Vives. * (2.9) Added the
order of the base point as N in the mbedtls_ecp_group structure for Curve25519,
which other curves already had. Contributed by Nicholas Wilson #481. * (2.9,
2.7, 2.1) Improved the documentation of mbedtls_net_accept(). Contributed by
Ivan Krylov. * (2.9, 2.7, 2.1) Improved the documentation of
mbedtls_ssl_write(). Suggested by Paul Sokolovsky in #1356. * (2.9, 2.7, 2.1)
Added an option in the Makefile to support ar utilities where the operation
letter must not be prefixed by '-', such as LLVM. Found and fixed by Alex Hixon.
* (2.9, 2.7, 2.1) Added the ability to allow configuration of the shared library
extension by setting the DLEXT environment variable when using the project
makefiles. * (2.9) Optimized unnecessary zeroing in mbedtls_mpi_copy(). Based
on a contribution by Alexey Skalozub in #405. * (2.9, 2.7, 2.1) Changed the
SSL module, such that when f_send, f_recv or f_recv_timeout report transmitting
more than the required length, they now return an error. Raised by Sam O'Connor
in #1245. * (2.9, 2.7, 2.1) Improved the robustness of
mbedtls_ssl_derive_keys() against the use of HMAC functions with non-HMAC
ciphersuites. Independently contributed by Jiayuan Chen. Fixes #1437. * (2.9)
Improved security of RSA key generation by including criteria from FIPS 186-4.
Contributed by Jethro Beekman. #1380 * (2.9) Added declaration of functions in
header files even when an alternative implementation of the corresponding module
uses an MBEDTLS_..._ALT macro. This means that alternative implementations no
longer need to copy the declarations, and ensures that they will have the same
API. * (2.9) Added platform setup and teardown calls in test suites, for
consistency, and to allow the test suites to work on platforms with
cryptographic acceleration.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Robert Scheck <robert(a)fedoraproject.org> - 2.2.0-4
- Rebuilt for mbed TLS 2.9.0 (libmbedcrypto.so.2)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575175 - mbedtls-2.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1575175
--------------------------------------------------------------------------------
================================================================================
pari-2.9.5-1.fc27 (FEDORA-2018-13c9ab23ce)
Number Theory-oriented Computer Algebra System
--------------------------------------------------------------------------------
Update Information:
Cumulative bug-fix release from upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Paul Howarth <paul(a)city-fan.org> - 2.9.5-1
- Update to 2.9.5 (see CHANGES for details)
* Tue Feb 6 2018 Paul Howarth <paul(a)city-fan.org> - 2.9.4-2
- Switch to %ldconfig_scriptlets
- Silence abidiff warnings about the size of functions_basic[] changing
--------------------------------------------------------------------------------
================================================================================
python-construct-2.5.1-16.fc27 (FEDORA-2018-6425031fb8)
A powerful declarative parser/builder for binary data
--------------------------------------------------------------------------------
Update Information:
Fix relative import issue for Python 3.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Terje Rosten <terje.rosten(a)ntnu.no> - 2.5.1-16
- Add patch to fix Python 3 import issue (rhbz#1560199)
* Mon Feb 12 2018 Terje Rosten <terje.rosten(a)ntnu.no> - 2.5.1-15
- Clean up
* Mon Feb 12 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 2.5.1-14
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.1-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Aug 19 2017 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 2.5.1-12
- Python 2 binary package renamed to python2-construct
See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560199 - construct/protocols/layer3/ipv6.py contains python2 style relative
import
https://bugzilla.redhat.com/show_bug.cgi?id=1560199
--------------------------------------------------------------------------------
================================================================================
python-hglib-2.6.1-1.fc27 (FEDORA-2018-a34d4c99d3)
Mercurial Python library
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release python-hglib 2.6.1.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Terje Rosten <terje.rosten(a)ntnu.no> - 2.6.1-1
- 2.6.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574062 - python-hglib-2.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1574062
--------------------------------------------------------------------------------
================================================================================
qcad-3.20.1.3-2.fc27 (FEDORA-2018-7c389aa9ae)
Powerful 2D CAD system
--------------------------------------------------------------------------------
Update Information:
- Update to 3.20.1.3 - Unbunlde vlgothic-fonts and dejavu-sans-fonts - Include
readme.txt for Help menu
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 20 2018 Antonio Trande <sagitter AT fedoraproject.org> - 3.20.1.3-2
- Include readme.txt for Help menu
* Sun May 20 2018 Antonio Trande <sagitter AT fedoraproject.org> - 3.20.1.3-1
- Update to 3.20.1.3
- Unbunlde vlgothic-fonts and dejavu-sans-fonts
* Wed Apr 4 2018 Antonio Trande <sagitter AT fedoraproject.org> - 3.19.2.8-1
- Update to 3.19.2.8
* Sun Mar 4 2018 Antonio Trande <sagitter AT fedoraproject.org> - 3.19.2.3-2
- Build with Qt5 on fedora 26 too
--------------------------------------------------------------------------------
================================================================================
rpkg-1.54-2.fc27 (FEDORA-2018-035317d7ea)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
- Remove koji and rpm-py-installer Python package requires - Fix argparse
version for el6 ---- - Pass the -s/--set-default-stream to mbs-manager for
module local builds. (jkaluza) - Write mock config correctly when run in Py 3
(cqi) - Add --with and --without options to 'local' - rhbz#1533416 (tmz) - Add a
test for 3f93433 (cqi) - Raise error if rpm command returns non-zero (cqi) - Use
getpass.getuser() instead of pwd.getpwuid(os.getuid())[0] (jpopelka) - Allow
setting custom MBS config file and config section in rpkg.conf. (jkaluza) -
Remove py35 testenv (cqi) - Ignore .env and tags (cqi) - Remove question mark
from giturl (cqi) - Added custom ArgumentParser (supports allow_abbrev)
(jkucera) - Grab the correct first line in case of rpm output (zebob.m)
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Chenxiong Qi <cqi(a)redhat.com> - 1.54-2
- Remove koji and rpm-py-installer Python package requires
- Fix argparse version for el6
* Fri May 11 2018 Chenxiong Qi <cqi(a)redhat.com> - 1.54-1
- Pass the -s/--set-default-stream to mbs-manager for module local builds.
(jkaluza)
- Write mock config correctly when run in Py 3 (cqi)
- Add --with and --without options to 'local' - rhbz#1533416 (tmz)
- Add a test for 3f93433 (cqi)
- Raise error if rpm command returns non-zero (cqi)
- Use getpass.getuser() instead of pwd.getpwuid(os.getuid())[0] (jpopelka)
- Allow setting custom MBS config file and config section in rpkg.conf.
(jkaluza)
- Remove py35 testenv (cqi)
- Ignore .env and tags (cqi)
- Remove question mark from giturl (cqi)
- Added custom ArgumentParser (supports allow_abbrev) (jkucera)
- Grab the correct first line in case of rpm output (zebob.m)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1579367 - pkg_resources.DistributionNotFound: The 'rpm-py-installer'
distribution was not found and is required by rpkg
https://bugzilla.redhat.com/show_bug.cgi?id=1579367
[ 2 ] Bug #1533416 - RFE: please add --with/--without options to fedpkg local
https://bugzilla.redhat.com/show_bug.cgi?id=1533416
--------------------------------------------------------------------------------
================================================================================
standard-test-roles-2.11-1.fc27 (FEDORA-2018-be02a40cd7)
Standard Test Interface Ansible roles
--------------------------------------------------------------------------------
Update Information:
Update to 2.11
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Andrei Stepanov <astepano(a)redhat.com> - 2.11-1
- Build with the latest merged PRs.
--------------------------------------------------------------------------------
================================================================================
udiskie-1.7.4-1.fc27 (FEDORA-2018-1a770cfcd6)
Removable disk auto-mounter
--------------------------------------------------------------------------------
Update Information:
Update udiskie package to the latest upsteam version.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Jan Stan��k <jstanek(a)redhat.com> - 1.7.4-1
- Upgrade to 1.7.4
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jan 3 2018 Jan Stan��k <jstanek(a)redhat.com> - 1.7.3-1
- Upgrade to 1.7.3
- Drop deprecated python2 subpackage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1579345 - udiskie-1.7.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1579345
--------------------------------------------------------------------------------
================================================================================
volume_key-0.3.10-1.fc27 (FEDORA-2018-4c3987d4d4)
An utility for manipulating storage encryption keys and passphrases
--------------------------------------------------------------------------------
Update Information:
Update to **volume_key-0.3.10**
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 16 2018 Jiri Kucera <jkucera(a)redhat.com> - 0.3.10-1
- Update to volume_key-0.3.10
Resolves: #1479349, #1517016
* Wed Feb 14 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 0.3.9-20
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.9-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Feb 3 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 0.3.9-18
- Switch to %ldconfig_scriptlets
* Tue Nov 7 2017 Miloslav Trma�� <mitr(a)redhat.com> - 0.3.9-17
- Update for libcryptsetup ABI change
* Sat Aug 19 2017 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.3.9-16
- Python 2 binary package renamed to python2-volume_key
See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1479349 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1479349
[ 2 ] Bug #1517016 - Please depend on gnupg2, not on gnupg 1.x
https://bugzilla.redhat.com/show_bug.cgi?id=1517016
--------------------------------------------------------------------------------