The following Fedora 27 Security updates need testing:
Age URL
94
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
44
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c9395f9bec remctl-3.14-1.fc27
31
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a85044d389 ruby-2.4.4-88.fc27
26
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cf1dd2166b
asterisk-14.7.6-2.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-775d96b54b
blktrace-1.2.0-6.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-363877c27c
firefox-60.0-4.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6c01a593b0
ncurses-6.0-14.20170722.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fd850e033d
graphviz-2.40.1-11.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ed35b82337
ca-certificates-2018.2.24-1.0.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25525a9346
thunderbird-enigmail-2.0.4-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-de5de06754
procps-ng-3.3.10-16.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
48
https://bodhi.fedoraproject.org/updates/FEDORA-2018-772fcd140c
linux-firmware-20180402-83.git8c1e439c.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-363877c27c
firefox-60.0-4.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6c01a593b0
ncurses-6.0-14.20170722.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d40d2a6711
osinfo-db-20180514-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6a754379dc
evolution-data-server-3.26.6-2.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-90cb85c6c2
vim-8.0.1842-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0666e6e061
libguestfs-1.38.2-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a56e55b708
python2-2.7.15-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d493de2468
breeze-icon-theme-5.46.0-1.fc27 extra-cmake-modules-5.46.0-1.fc27 kf5-5.46.0-1.fc27
kf5-attica-5.46.0-1.fc27 kf5-baloo-5.46.0-1.fc27 kf5-bluez-qt-5.46.0-1.fc27
kf5-frameworkintegration-5.46.0-1.fc27 kf5-kactivities-5.46.0-1.fc27
kf5-kactivities-stats-5.46.0-1.fc27 kf5-kapidox-5.46.0-1.fc27 kf5-karchive-5.46.0-1.fc27
kf5-kauth-5.46.0-1.fc27 kf5-kbookmarks-5.46.0-1.fc27 kf5-kcmutils-5.46.0-1.fc27
kf5-kcodecs-5.46.0-1.fc27 kf5-kcompletion-5.46.0-1.fc27 kf5-kconfig-5.46.0-1.fc27
kf5-kconfigwidgets-5.46.0-1.fc27 kf5-kcoreaddons-5.46.0-1.fc27 kf5-kcrash-5.46.0-1.fc27
kf5-kdbusaddons-5.46.0-1.fc27 kf5-kdeclarative-5.46.0-1.fc27 kf5-kded-5.46.0-1.fc27
kf5-kdelibs4support-5.46.0-1.fc27 kf5-kdesignerplugin-5.46.0-1.fc27
kf5-kdesu-5.46.0-1.fc27 kf5-kdewebkit-5.46.0-1.fc27 kf5-kdnssd-5.46.0-1.fc27
kf5-kdoctools-5.46.0-1.fc27 kf5-kemoticons-5.46.0-1.fc27 kf5-kfilemetadata-5.46.0-1.fc27
kf5-kglobalaccel-5.46.0-1.fc27 kf5-kguiad
dons-5.46.0-1.fc27 kf5-kholidays-5.46.0-1.fc27 kf5-khtml-5.46.0-1.fc27
kf5-ki18n-5.46.0-1.fc27 kf5-kiconthemes-5.46.0-1.fc27 kf5-kidletime-5.46.0-1.fc27
kf5-kimageformats-5.46.0-1.fc27 kf5-kinit-5.46.0-1.fc27 kf5-kio-5.46.0-2.fc27
kf5-kirigami2-5.46.0-1.fc27 kf5-kitemmodels-5.46.0-1.fc27 kf5-kitemviews-5.46.0-1.fc27
kf5-kjobwidgets-5.46.0-1.fc27 kf5-kjs-5.46.0-1.fc27 kf5-kjsembed-5.46.0-1.fc27
kf5-kmediaplayer-5.46.0-1.fc27 kf5-knewstuff-5.46.0-1.fc27
kf5-knotifications-5.46.0-1.fc27 kf5-knotifyconfig-5.46.0-1.fc27
kf5-kpackage-5.46.0-1.fc27 kf5-kparts-5.46.0-1.fc27 kf5-kpeople-5.46.0-1.fc27
kf5-kplotting-5.46.0-1.fc27 kf5-kpty-5.46.0-1.fc27 kf5-kross-5.46.0-1.fc27
kf5-krunner-5.46.0-1.fc27 kf5-kservice-5.46.0-1.fc27 kf5-ktexteditor-5.46.0-1.fc27
kf5-ktextwidgets-5.46.0-1.fc27 kf5-kunitconversion-5.46.0-1.fc27 kf5-kwallet-5.46.0-1.fc27
kf5-kwayland-5.46.0-1.fc27 kf5-kwidgetsaddons-5.46.0-1.fc27
kf5-kwindowsystem-5.46.0-1.fc27 kf5-kxmlgui-5.46.0-1.fc27 kf5-kxmlrpcclient-5.46.0-1.fc27
kf5-modemmanager-qt-5.46.0-1.fc27 kf5-networkmanager-qt-5.46.0-1.fc27
kf5-plasma-5.46.0-1.fc27 kf5-prison-5.46.0-1.fc27 kf5-purpose-5.46.0-1.fc27
kf5-solid-5.46.0-1.fc27 kf5-sonnet-5.46.0-1.fc27 kf5-syntax-highlighting-5.46.0-1.fc27
kf5-threadweaver-5.46.0-1.fc27 oxygen-icon-theme-5.46.0-1.fc27
qqc2-desktop-style-5.46.0-2.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bd2f57abfe
perl-5.26.2-405.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ed35b82337
ca-certificates-2018.2.24-1.0.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b9421c1e2b sssd-1.16.1-8.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-de5de06754
procps-ng-3.3.10-16.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4c3987d4d4
volume_key-0.3.10-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-90332d17ff
libidn2-2.0.5-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
SDL2-2.0.7-3.fc27
babl-0.1.50-3.fc27
battray-2.3-5.fc27
bcal-1.9-1.fc27
container-selinux-2.60-1.git97f8dfc.fc27
fedfind-4.1.2-1.fc27
freeipa-desktop-profile-0.0.7-1.fc27
gegl04-0.4.2-2.fc27
gifsicle-1.91-1.fc27
kernel-4.16.10-200.fc27
nodejs-base64-url-2.2.0-1.fc27
ntfs-3g-2017.3.23-6.fc27
odcs-0.2.2-2.fc27
perl-CPAN-Perl-Releases-3.58-1.fc27
perl-Type-Tiny-1.002002-1.fc27
plasma-pk-updates-0.3.2-1.fc27
podman-0.5.3-2.gitdc3f9df.fc27
publicsuffix-list-20180514-1.fc27
python-django-1.11.13-2.fc27
qdigidoc-3.13.6-2.fc27
tzdata-2018e-1.fc27
unboundid-ldapsdk-4.0.6-1.fc27
vala-0.38.10-1.fc27
vim-syntastic-3.9.0-1.fc27
vino-3.22.0-8.fc27
vte291-0.50.4-1.fc27
wavpack-5.1.0-8.fc27
Details about builds:
================================================================================
SDL2-2.0.7-3.fc27 (FEDORA-2018-400200f010)
Cross-platform multimedia library
--------------------------------------------------------------------------------
Update Information:
Backport a crash/hang fix from 2.0.9 (#1580541)
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Tom Callaway <spot(a)fedoraproject.org> - 2.0.7-3
- Backport a crash/hang fix from 2.0.9 (#1580541)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580541 - Bug in SDL2 blocks Unity-based games
https://bugzilla.redhat.com/show_bug.cgi?id=1580541
--------------------------------------------------------------------------------
================================================================================
babl-0.1.50-3.fc27 (FEDORA-2018-f659b85be4)
A dynamic, any to any, pixel format conversion library
--------------------------------------------------------------------------------
Update Information:
This update containes upstream bugfix releases for both `gegl04` and `babl`.
Additionally, the `gegl4` development documentation is now split off into its
own subpackage `gegl04-devel-docs` because the documentation files in previous
versions of `gegl04-devel` conflicted with those of the (old) `gegl-devel`
package. This lets people either install both `gegl-devel` and `gegl04-devel`
side-by-side *or* `gegl04-devel` and its documentation. Please refer to the
respective upstream places for details about changes in these new versions: *
[
babl](https://git.gnome.org/browse/babl/tree/NEWS) *
[
gegl04](https://git.gnome.org/browse/gegl/tree/docs/NEWS.txt)
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Nils Philippsen <nils(a)tiptoe.de> - 0.1.50-3
- et tu, ppc64?
* Mon May 21 2018 Nils Philippsen <nils(a)tiptoe.de> - 0.1.50-2
- skip more problematic tests on ppc64le
* Mon May 21 2018 Josef Ridky <jridky(a)redhat.com> - 0.1.50-1
- New upstream release 0.1.50
* Thu May 17 2018 Debarshi Ray <rishi(a)fedoraproject.org> - 0.1.48-1
- version 0.1.48
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1577595 - gegl04-devel vs gegl-devel: conflicts
https://bugzilla.redhat.com/show_bug.cgi?id=1577595
--------------------------------------------------------------------------------
================================================================================
battray-2.3-5.fc27 (FEDORA-2018-53ba798a2e)
Tool for displaying a laptop's battery status in the system traiy
--------------------------------------------------------------------------------
Update Information:
Intial release of battray -- simple python battery monitor.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1573695 - Review Request: battray - simple tray icon to show a laptop���s
battery status.
https://bugzilla.redhat.com/show_bug.cgi?id=1573695
--------------------------------------------------------------------------------
================================================================================
bcal-1.9-1.fc27 (FEDORA-2018-a2946c25a3)
Storage conversion and expression calculator
--------------------------------------------------------------------------------
Update Information:
Release 1.9
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.9-1
- Release 1.9
--------------------------------------------------------------------------------
================================================================================
container-selinux-2.60-1.git97f8dfc.fc27 (FEDORA-2018-fcb9e8944f)
SELinux policies for container runtimes
--------------------------------------------------------------------------------
Update Information:
Allow transitions from unconfined_service_t to container_runtime_t Allow
containers to list cgroup directories. ---- Fix transition rules
unconfined_service_t @ container_runtime_exec_t -> container_runtime_t Allows
people to use podman from an init script. ---- Fix label on podman in
postinstall. ---- Add labeling for podman run in a systemd unit file.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Dan Walsh <dwalsh(a)fedoraproject.org> - 2.60-1
- Allow containers to list cgroup directories
* Mon May 21 2018 Dan Walsh <dwalsh(a)fedoraproject.org> - 2.59-1
- Transition for unconfined_service_t to container_runtime_t when executing
container_runtime_exec_t.
* Mon May 21 2018 Dan Walsh <dwalsh(a)fedoraproject.org> - 2.58-2
- Run restorecon /usr/bin/podman in postinstall
* Fri May 18 2018 Dan Walsh <dwalsh(a)fedoraproject.org> - 2.58-1
- Add labels to allow podman to be run from a systemd unit file
* Tue Apr 17 2018 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> -
2:2.55-12.gitd248f91
- autobuilt commit d248f91
* Tue Apr 17 2018 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> -
2:2.55-11.gitd248f91
- autobuilt commit d248f91
* Mon Apr 16 2018 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> -
2:2.55-10.gitd248f91
- autobuilt commit d248f91
* Mon Apr 16 2018 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> -
2:2.55-9.gitd248f91
- autobuilt commit d248f91
* Mon Apr 16 2018 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> - 2:2.55-8
- autobuilt commit d248f91
* Mon Apr 16 2018 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> - 2:2.55-7
- autobuilt commit d248f91
* Mon Apr 16 2018 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> - 2:2.55-6
- autobuilt commit d248f91
* Mon Apr 9 2018 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> - 2:2.55-5
- autobuilt commit d248f91
* Mon Apr 9 2018 Lokesh Mandvekar (Bot) <lsm5+bot(a)fedoraproject.org> - 2:2.55-4
- autobuilt commit d248f91
* Mon Apr 9 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:2.55-3
- autobuilt commit d248f91
* Mon Apr 9 2018 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 2:2.55-2
- autobuilt commit d248f91
--------------------------------------------------------------------------------
================================================================================
fedfind-4.1.2-1.fc27 (FEDORA-2018-a1b3eeccaa)
Fedora compose and image finder
--------------------------------------------------------------------------------
Update Information:
This update fixes a couple of issues in handling of the [semi-official live
respin](https://dl.fedoraproject.org/pub/alt/live-respins/) releases, which
prevented openQA from testing them.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Adam Williamson <awilliam(a)redhat.com> - 4.1.2-1
- New release 4.1.2: fixes for live-respins releases
--------------------------------------------------------------------------------
================================================================================
freeipa-desktop-profile-0.0.7-1.fc27 (FEDORA-2018-678d847988)
FleetCommander integration with FreeIPA
--------------------------------------------------------------------------------
Update Information:
Updated to version 0.0.7
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Oliver Gutierrez <ogutierrez(a)redhat.com> 0.0.7-1
- Updated to version 0.0.7
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gegl04-0.4.2-2.fc27 (FEDORA-2018-f659b85be4)
Graph based image processing framework
--------------------------------------------------------------------------------
Update Information:
This update containes upstream bugfix releases for both `gegl04` and `babl`.
Additionally, the `gegl4` development documentation is now split off into its
own subpackage `gegl04-devel-docs` because the documentation files in previous
versions of `gegl04-devel` conflicted with those of the (old) `gegl-devel`
package. This lets people either install both `gegl-devel` and `gegl04-devel`
side-by-side *or* `gegl04-devel` and its documentation. Please refer to the
respective upstream places for details about changes in these new versions: *
[
babl](https://git.gnome.org/browse/babl/tree/NEWS) *
[
gegl04](https://git.gnome.org/browse/gegl/tree/docs/NEWS.txt)
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Nils Philippsen <nils(a)tiptoe.de> - 0.4.2-2
- split off devel docs
- let gegl04-devel-docs explicitly conflict with old gegl-devel (#1577595)
* Mon May 21 2018 Nils Philippsen <nils(a)tiptoe.de> - 0.4.2-1
- version 0.4.2
* Wed May 2 2018 Nils Philippsen <nils(a)tiptoe.de> - 0.4.0-2
- don't require asciidoc for building
- always install unversioned executables
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1577595 - gegl04-devel vs gegl-devel: conflicts
https://bugzilla.redhat.com/show_bug.cgi?id=1577595
--------------------------------------------------------------------------------
================================================================================
gifsicle-1.91-1.fc27 (FEDORA-2018-9892225623)
Powerful program for manipulating GIF images and animations
--------------------------------------------------------------------------------
Update Information:
Update to 1.91 - fixes double-free in read_gif
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Orion Poplawski <orion(a)cora.nwra.com> - 1.91-1
- Update to 1.91
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.90-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1542037 - CVE-2017-18120 gifsicle: Double-free in the read_gif function
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1542037
[ 2 ] Bug #1114293 - gifsicle-1.91 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1114293
--------------------------------------------------------------------------------
================================================================================
kernel-4.16.10-200.fc27 (FEDORA-2018-42898720ed)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The v4.16.10 update contains important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Jeremy Cline <jcline(a)redhat.com> - 4.16.10-200
- Linux v4.16.10
* Sun May 20 2018 Hans de Goede <hdegoede(a)redhat.com>
- Enable GPIO_AMDPT, PINCTRL_AMD and X86_AMD_PLATFORM_DEVICE Kconfig options
to fix i2c and GPIOs not working on AMD based laptops (rhbz#1510649)
* Thu May 17 2018 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix CVE-2018-1120 (rhbz 1575472 1579542)
* Thu May 17 2018 Jeremy Cline <jcline(a)redhat.com> - 4.16.9-200
- Linux v4.16.9
- Silence unwanted "swiotlb buffer is full" warnings (rhbz 1556797)
* Wed May 9 2018 Jeremy Cline <jeremy(a)jcline.org> - 4.16.8-201
- Bump the release for a re-build
* Wed May 9 2018 Jeremy Cline <jeremy(a)jcline.org>
- Workaround for m400 uart irq firmware description (rhbz 1574718)
* Wed May 9 2018 Jeremy Cline <jeremy(a)jcline.org> - 4.16.8-200
- Linux v4.16.8
* Mon May 7 2018 Jeremy Cline <jeremy(a)jcline.org>
- Fix issue with KVM on older Core 2 processors (rhbz 1566258)
* Sat May 5 2018 Peter Robinson <pbrobinson(a)fedoraproject.org>
- ARM and Raspberry Pi fixes
- Fix USB-2 on Tegra devices
* Fri May 4 2018 Laura Abbott <labbott(a)redhat.com>
- Fix for building out of tree modules on powerpc (rhbz 1574604)
* Fri May 4 2018 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Fix CVE-2018-10322 (rhbz 1571623 1571624)
- Fix CVE-2018-10323 (rhbz 1571627 1571630)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1510649 - Touchpad not detected on an Asus GL702ZC laptop (possible i2c
driver issue)
https://bugzilla.redhat.com/show_bug.cgi?id=1510649
[ 2 ] Bug #1579542 - CVE-2018-1120 kernel: fuse-backed file mmap-ed onto process cmdline
arguments causes denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1579542
--------------------------------------------------------------------------------
================================================================================
nodejs-base64-url-2.2.0-1.fc27 (FEDORA-2018-6f962c5533)
Base64 encode, decode, escape and unescape for URL applications
--------------------------------------------------------------------------------
Update Information:
Security fix for
https://snyk.io/vuln/npm:base64url:20180511
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Jared K. Smith <jsmith(a)fedoraproject.org> - 2.2.0-1
- Update to upstream 2.2.0 release
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1579507 - nodejs-base64url: Uninitialized Memory Exposure in pad-string.ts
https://bugzilla.redhat.com/show_bug.cgi?id=1579507
--------------------------------------------------------------------------------
================================================================================
ntfs-3g-2017.3.23-6.fc27 (FEDORA-2018-419559236b)
Linux NTFS userspace driver
--------------------------------------------------------------------------------
Update Information:
Add support for very large cluster sizes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Tom Callaway <spot(a)fedoraproject.org> - 2:2017.3.23-6
- apply updated big sectors patch
* Mon May 7 2018 Tom Callaway <spot(a)fedoraproject.org> - 2:2017.3.23-5
- big sectors patch from Jean-Pierre Andr��
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575227 - fedora cannot mount NTFS filesystem with cluster size bigger 64kb
https://bugzilla.redhat.com/show_bug.cgi?id=1575227
--------------------------------------------------------------------------------
================================================================================
odcs-0.2.2-2.fc27 (FEDORA-2018-74713021bb)
The On Demand Compose Service
--------------------------------------------------------------------------------
Update Information:
Remove m2ext and m2crypto dependencies.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 22 2018 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.2-2
- remove m2crypto and m2ext from dependencies.
* Thu Apr 19 2018 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.2-1
- updated to new version 0.2.2.
* Mon Mar 12 2018 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.1-1
- updated to new version 0.2.1.
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.58-1.fc27 (FEDORA-2018-fa11c23ea6)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 22 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.58-1
- 3.58 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580997 - perl-CPAN-Perl-Releases-3.58 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1580997
--------------------------------------------------------------------------------
================================================================================
perl-Type-Tiny-1.002002-1.fc27 (FEDORA-2018-21326cf814)
Tiny, yet Moo(se)-compatible type constraint
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 1.002002-1
- Update to 1.002002.
- Add BR: perl(Ref::Util::XS).
--------------------------------------------------------------------------------
================================================================================
plasma-pk-updates-0.3.2-1.fc27 (FEDORA-2018-1415671c68)
Plasma applet for system updates using PackageKit
--------------------------------------------------------------------------------
Update Information:
Plasma-pk-updates 0.3.2 release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 22 2018 Jan Grulich <jgrulich(a)redhat.com> - 0.3.2-1
- 0.3.2
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.1-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sun Jan 28 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 0.3.1-8
- rebuild
* Sun Jan 21 2018 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 0.3.1-7
- PackageKit-Qt 1.0.x build fix upstreamed, use patch from upstream git
* Sun Jan 21 2018 Kevin Kofler <Kevin(a)tigcc.ticalc.org> - 0.3.1-6
- fix FTBFS with PackageKit-Qt 1.0.x: remove unused obsolete PkStrings::message
* Tue Jan 16 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 0.3.1-5
- pull in upstream fixes
--------------------------------------------------------------------------------
================================================================================
podman-0.5.3-2.gitdc3f9df.fc27 (FEDORA-2018-55963da362)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
Uptream 0.5.3 with systemd patches
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 19 2018 baude <bbaude(a)redhat.com> - 0.5.3-2.gitdc3f9df
- Correcting varlink socket paths and tighten security of sockets
* Fri May 18 2018 baude <bbaude(a)redhat.com> - 0.5.3-1.gitdc3f9df
- Upstream release 0.5.3
--------------------------------------------------------------------------------
================================================================================
publicsuffix-list-20180514-1.fc27 (FEDORA-2018-d365739bbc)
Cross-vendor public domain suffix database
--------------------------------------------------------------------------------
Update Information:
Recent revision - 20180514
https://github.com/publicsuffix/list/compare/81bcd19...53ef890
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 22 2018 Yaakov Selkowitz <yselkowi(a)redhat.com> - 20180514-1
- Recent revision - 20180514
--------------------------------------------------------------------------------
================================================================================
python-django-1.11.13-2.fc27 (FEDORA-2018-d5c8846008)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
Make python2-django require python-django-bash-completion (as intended)
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.11.13-2
- Make python2-django require python-django-bash-completion (as intended)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580517 - python2-django does not require python-django-bash-completion
https://bugzilla.redhat.com/show_bug.cgi?id=1580517
--------------------------------------------------------------------------------
================================================================================
qdigidoc-3.13.6-2.fc27 (FEDORA-2018-4b97eb637a)
Estonian digital signature application
--------------------------------------------------------------------------------
Update Information:
3.13.6 release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 30 2018 Dmitri Smirnov <dmitri(a)smirnov.ee> - 3.13.6-2
- updated patch file to work with version 3.13.6
- updated files EE.xml, config.json, config.rsa, qdigidoc.spec, tl-mp.xml
* Mon Apr 30 2018 Germano Massullo <germano.massullo(a)gmail.com> - 3.13.6-1
- 3.13.6 release
* Tue Mar 27 2018 Germano Massullo <germano.massullo(a)gmail.com> - 3.13.5-6
- added macros for liberation-fonts in EPEL7
* Thu Mar 22 2018 Germano Massullo <germano.massullo(a)gmail.com> - 3.13.5-5
- added macros for cmake in EPEL7
* Fri Feb 9 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 3.13.5-4
- Escape macros in %changelog
--------------------------------------------------------------------------------
================================================================================
tzdata-2018e-1.fc27 (FEDORA-2018-4e00beb479)
Timezone data
--------------------------------------------------------------------------------
Update Information:
Rebase to tzdata-2018e - North Korea changed from UTC+8:30 to UTC+9 on May
5, 2018. - In this update, the upstream project now defaults to using the
"vanguard" data implementation which includes negative DST offsets. However, in
order to provide better compatibility with existing tools, this update provides
the "rearguard" format for data which does not use negative DST offsets. We
intend to transition to the "vanguard" data implementation in the future.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 16 2018 Patsy Franklin <pfrankli(a)redhat.com> - 2018e-1
- Rebase to tzdata-2018e
- North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
- In this update, the upstream project now defaults to using
the "vanguard" data implementation which includes negative DST offsets.
However, we are continuing to provide the "rearguard" format
for data which does not use negative DST offsets to provide
better compatibility with existing tools. We intend to transition
to the "vanguard" data implementation in the future.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574758 - tzdata-2018e is available
https://bugzilla.redhat.com/show_bug.cgi?id=1574758
--------------------------------------------------------------------------------
================================================================================
unboundid-ldapsdk-4.0.6-1.fc27 (FEDORA-2018-18d425fcdd)
UnboundID LDAP SDK for Java
--------------------------------------------------------------------------------
Update Information:
Rebase package(s) to version: 4.0.6 Highlights, important fixes, or notable
enhancements: bugfixing and improvements are detailed in 4.0.6 release notes at
https://github.com/pingidentity/ldapsdk/releases/tag/4.0.6
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 22 2018 Sandro Bonazzola <sbonazzo(a)redhat.com> - 4.0.6-1
- Update to 4.0.6 (#1580993)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580993 - unboundid-ldapsdk-4.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1580993
--------------------------------------------------------------------------------
================================================================================
vala-0.38.10-1.fc27 (FEDORA-2018-f7c97c144f)
A modern programming language for GNOME
--------------------------------------------------------------------------------
Update Information:
vala 0.38.10 release. Various improvements and bug fixes: - Warn if --gir is
used without --library [#708693] - Report an error if rank attribute is
required but was not found [#660991] - scanner: Accept \R and \N escape
sequences in regex literals [#749576] - scanner: Accept backreferences \1
through \99 in regex literals [#728574] - codegen: + Avoid critical in
get_basic_type_info() when there is no signature [#729517] + Fix
serializing multidimensional arrays [#735437] + Guard
get_default_ref_sink_function() against null base-class + Respect cname
ccode-attribute of lockable fields + Fix casting of length for "ref" array
parameters - girparser: Add support for NoAccessorMethod metadata -
girparser: Deal with missing "name" attribute by falling back on
"c:type" -
girwriter: Drop errornous indent - girwriter: Properly output variadic methods
and use introspectable="0" - genie: Add support for the \v escape character
[#664689] - genie: Add support for the \uXXXX escape sequence Bindings: -
glib-2.0: Fix IConv.iconv() [#634753] - glib-2.0: Mark str parameter of
Variant.take_string() as owned - gobject-2.0: Make constructor of
ParamSpecBoxed public - gstreamer: Cherry-pick some fixes from 0.42 -
gtk+-*.0: Set NoAccessorMethod on Gtk.Radio*.group properties -
javascriptcoregtk-4.0: buffer of String.get_utf8_cstring() is not "ref"
[#788113] - json-glib-1.0: Mark return-type of gvariant_deserialize*() as
nullable [#795265] - sqlite3: Add additional constants for flags of
Database.open_v2() [#795627] - webkit2gtk-4.0: Update to 2.20.1 and cherry-
pick some fixes from 0.42 ---- vala 0.38.9 release. Various bug fixes: -
valac: Always use the given "pkg-config" and respect PKG_CONFIG envar -
codegen: + Don't append fixed-length of array fields in initializers +
Add source_reference to some store_local/_field() calls + Don't add target
fields for captured delegates without target + Don't add length fields for
captured fixed-length array variables - Properly handle array-initializers
inside struct-initializers [#622178] - The rank of an array-initializer should
match the target's rank [#744923] - Fix recursive declaration in generic base
type [#688732] - valadoc: Bump glib_minor to match 0.38 series - gdbus: Fix
missing declaration of _fd_list for async methods [#794566] - vala: Fix
return-type of BasicBlock.get_successors() Bindings: - glib-2.0: Use
g_value_*et_schar instead of deprecated g_value_*et_char - gobject-2.0: Add
ParamSpecGType - gobject-2.0: Cherry-pick some changes from 0.40 -
gstreamer-1.0: Update to 1.14.0 and add gstreamer-webrtc-1.0 bindings -
gdk-3.0,gtk+-3.0: Update to 3.22.29 - gtk+-*.0: Fix iter parameter of
TextView.backward*/forward*/move_visually() [#794345] - gtk+-*.0: Hide
dedicated constructors of compact classes bound as structs [#794733] -
gtk+-3.0,gtk+-4.0: Fix TreeView.is_blank_at_pos() - libgnome-menu-3.0: Add
deps file - posix: Fix sig*set and sigprocmask parameters to be out/ref
[#727425] - posix: Include sys/sysmacros.h for major(), minor() and makedev()
[#794651] - purple: Update to 2.12.0 - webkit2gtk-4.0: Update to 2.20.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 22 2018 Kalev Lember <klember(a)redhat.com> - 0.38.10-1
- Update to 0.38.10
* Mon May 21 2018 Kalev Lember <klember(a)redhat.com> - 0.38.9-1
- Update to 0.38.9
--------------------------------------------------------------------------------
================================================================================
vim-syntastic-3.9.0-1.fc27 (FEDORA-2018-a10c1d234e)
A vim plugins to check syntax for programming languages
--------------------------------------------------------------------------------
Update Information:
new upstream release v3.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 23 2018 Pavel Raiskup <praiskup(a)redhat.com> - 3.9.0-1
- new upstream release, per release notes:
https://github.com/vim-syntastic/syntastic/releases/tag/3.9.0
* Tue Apr 10 2018 Philippe Makowski <makowski(a)fedoraproject.org> - 3.8.0-12
- add text subpackage, fix rhbz#1562001
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.8.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580432 - CVE-2018-11319 vim-syntastic: Improper handling of searches for
configuration files can lead to arbitrary code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1580432
--------------------------------------------------------------------------------
================================================================================
vino-3.22.0-8.fc27 (FEDORA-2018-9081df8e37)
A remote desktop system for GNOME
--------------------------------------------------------------------------------
Update Information:
Return error if X11 is not detected
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 18 2018 Ondrej Holy <oholy(a)redhat.com> - 3.22.0-8
- Return error if X11 is not detected
https://bugzilla.redhat.com/show_bug.cgi?id=1563575
* Thu Apr 19 2018 Ondrej Holy <oholy(a)redhat.com> - 3.22.0-7
- Add missing parameter for systemd scriptlets
https://bugzilla.redhat.com/show_bug.cgi?id=1507890
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.22.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Jan 5 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 3.22.0-5
- Remove obsolete scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1388291 - [abrt] vino: vino-server killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1388291
--------------------------------------------------------------------------------
================================================================================
vte291-0.50.4-1.fc27 (FEDORA-2018-1a88439459)
Terminal emulator library
--------------------------------------------------------------------------------
Update Information:
vte 0.50.4 release, fixing a crash under certain conditions. For details, see
https://mail.gnome.org/archives/ftp-release-list/2018-May/msg00051.html
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 21 2018 Kalev Lember <klember(a)redhat.com> - 0.50.4-1
- Update to 0.50.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1580586 - Crash related to hyperlinks
https://bugzilla.redhat.com/show_bug.cgi?id=1580586
--------------------------------------------------------------------------------
================================================================================
wavpack-5.1.0-8.fc27 (FEDORA-2018-d6002f761d)
A completely open audiocodec
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539
CVE-2018-10540
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 22 2018 Miroslav Lichvar <mlichvar(a)redhat.com> - 5.1.0-8
- Fix for CVE-2018-10536, CVE-2018-10537, CVE-2018-10538, CVE-2018-10539,
CVE-2018-10540
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574719 - CVE-2018-10536 wavpack: out of bounds write in
ParseRiffHeaderConfig in riff.c
https://bugzilla.redhat.com/show_bug.cgi?id=1574719
[ 2 ] Bug #1574726 - CVE-2018-10537 wavpack: out of bounds write in
ParseWave64HeaderConfig in wave64.c
https://bugzilla.redhat.com/show_bug.cgi?id=1574726
[ 3 ] Bug #1574728 - CVE-2018-10538 wavpack: out of bounds write in
ParseRiffHeaderConfig in riff.c
https://bugzilla.redhat.com/show_bug.cgi?id=1574728
[ 4 ] Bug #1574729 - CVE-2018-10539 wavpack: out of bounds write in
ParseDsdiffHeaderConfig in dsdiff.c
https://bugzilla.redhat.com/show_bug.cgi?id=1574729
[ 5 ] Bug #1574731 - CVE-2018-10540 wavpack: out of bounds write in
ParseWave64HeaderConfig in wave64.c
https://bugzilla.redhat.com/show_bug.cgi?id=1574731
--------------------------------------------------------------------------------