The following Fedora 27 Security updates need testing:
Age URL
61
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c9395f9bec remctl-3.14-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6e6d8c314b
drupal8-8.4.6-3.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b268b5bbb5
jgraphx-3.6.0.0-4.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-57fbdb1cb5
roundcubemail-1.3.6-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-825d37b810
opencv-3.2.0-15.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4e26c06aef
mingw-libid3tag-0.15.1b-23.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-70fac3f07e anki-2.0.50-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ff86925c3
memcached-1.5.7-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cec96a9c41
nghttp2-1.31.1-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d275e6ff0c
scummvm-tools-2.0.0-1.fc27 scummvm-2.0.0-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9d1ff4b802
composer-1.6.4-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c8b49fbc7
perl-Module-CoreList-5.20180414-1.fc27 perl-5.26.2-404.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-335aec0507
libtiff-4.0.9-8.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-772fcd140c
linux-firmware-20180402-83.git8c1e439c.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5f72371a85
python-productmd-1.11-2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-335aec0507
libtiff-4.0.9-8.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ea3f614267 samba-4.7.7-0.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e0a12453e8
libcgroup-0.41-17.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ecb0da3cb1
osinfo-db-20180416-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ae2c9dd927
python-urllib3-1.22-5.fc27 python-requests-2.18.4-2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c8b49fbc7
perl-Module-CoreList-5.20180414-1.fc27 perl-5.26.2-404.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3085b9774
selinux-policy-3.13.1-283.32.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cec96a9c41
nghttp2-1.31.1-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c31f1eccd
iptables-1.6.2-2.fc27
The following builds have been pushed to Fedora 27 updates-testing
abrt-server-info-page-1.6-1.fc27
cockpit-166-1.fc27
datagrepper-0.9.4-1.fc27
fedora-upgrade-28.2-1.fc27
file-5.31-11.fc27
git-publish-1.4.3-1.fc27
git-subrepo-0.3.1-1.20170206gita7ee886.fc27
gmediarender-0-0.8.20180414git4f221e6.fc27
gnome-software-3.28.1-1.fc27.1
golang-github-grpc-grpc-go-1.0.0-0.11.20180324gitbdb0727.fc27
golang-googlecode-go-crypto-0-0.21.20180324git88942b9.fc27
gsoap-2.8.49-4.fc27
hedgewars-0.9.24-1.fc27
hplip-3.18.3-2.fc27
libtirpc-1.0.3-2.fc27
lldpd-1.0.1-1.fc27
mod_http2-1.10.18-1.fc27
perl-File-Copy-Recursive-Reduced-0.003-1.fc27
perl-Math-BigRat-0.2614-1.fc27
php-pecl-redis4-4.0.1-1.fc27
python-django-threadedcomments-1.2-2.fc27
python-ntlm-auth-1.1.0-1.fc27
python-requests_ntlm-1.1.0-1.fc27
python-winrm-0.3.0-1.fc27
qt5ct-0.35-1.fc27
rocksndiamonds-4.1.0.0-1.fc27
sslh-1.19c-1.fc27
task-spooler-1.0-1.fc27
usbmuxd-1.1.0-11.fc27
xca-1.4.1-1.fc27
yoshimi-1.5.7-1.fc27
zsh-5.4.1-3.fc27
Details about builds:
================================================================================
abrt-server-info-page-1.6-1.fc27 (FEDORA-2018-30d280081e)
Web page with summary of ABRT services
--------------------------------------------------------------------------------
Update Information:
fix dependencies ---- Update Python 2 dependency.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Miroslav Such�� <msuchy(a)redhat.com> 1.6-1
- fix dependencies on F27- and RHEL (msuchy(a)redhat.com)
* Wed Mar 21 2018 Miroslav Such�� <msuchy(a)redhat.com> 1.5-1
- require systemd
- Update Python 2 dependency declarations to new packaging standards
(mmarusak(a)redhat.com)
--------------------------------------------------------------------------------
================================================================================
cockpit-166-1.fc27 (FEDORA-2018-9571130b9b)
A user interface for Linux servers
--------------------------------------------------------------------------------
Update Information:
- Kubernetes: Add creation of Virtual Machines - Realms: Automatically set up
Kerberos keytab for Cockpit web server - Numbers now get formatted correctly for
the selected language
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Martin Pitt <martin(a)piware.de> - 166-1
- Kubernetes: Add creation of Virtual Machines
- Realms: Automatically set up Kerberos keytab for Cockpit web server
- Numbers now get formatted correctly for the selected language
--------------------------------------------------------------------------------
================================================================================
datagrepper-0.9.4-1.fc27 (FEDORA-2018-5527df1c43)
A webapp to query fedmsg history
--------------------------------------------------------------------------------
Update Information:
https://github.com/fedora-infra/datagrepper/pull/207
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Ralph Bean <rbean(a)redhat.com> - 0.9.4-1
- new version
--------------------------------------------------------------------------------
================================================================================
fedora-upgrade-28.2-1.fc27 (FEDORA-2018-8bbdadbd9c)
Upgrade Fedora to next version using dnf upgrade (unofficial tool)
--------------------------------------------------------------------------------
Update Information:
- remove --distro-sync for dnf system-upgrade - be more verbose so we have some
progress
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Miroslav Such�� <msuchy(a)redhat.com> 28.2-1
- remove --distro-sync for dnf system-upgrade
- do not check for dnf-plugins-core, it has been installed by check_dnf_deps()
- be more verbose so we have some progress
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568484 - Upgrade cannot be achieved when relying on current unofficial
tool.
https://bugzilla.redhat.com/show_bug.cgi?id=1568484
--------------------------------------------------------------------------------
================================================================================
file-5.31-11.fc27 (FEDORA-2018-af4805ccc4)
A utility for determining file types
--------------------------------------------------------------------------------
Update Information:
- increase strength of GIF to beat MBR (#1515180)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Kamil Dudka <kdudka(a)redhat.com> - 5.31-11
- increase strength of GIF to beat MBR (#1515180)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1515180 - file-5.30-11.fc26.x86_64 gif regression
https://bugzilla.redhat.com/show_bug.cgi?id=1515180
--------------------------------------------------------------------------------
================================================================================
git-publish-1.4.3-1.fc27 (FEDORA-2018-3e3d9e5c72)
Prepare and store patch revisions as git tags
--------------------------------------------------------------------------------
Update Information:
Contains a number of bug fixes and a new man page.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Stefan Hajnoczi <stefanha(a)gmail.com> - 1.4.3-1
- Add 's' menu command to select a subset of patches to send
- Use UTF-8 encoding for annotated tags
- Use a cover letter by default for pull requests
- Convert README.rst to git-publish.pod man page
- Add --no-sign-pull option to skip pull request signing
- Run cccmd in the top-level directory
- Show meaningful error message when run outside top-level directory
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1545853 - RFE: provide a man page for git-publish
https://bugzilla.redhat.com/show_bug.cgi?id=1545853
--------------------------------------------------------------------------------
================================================================================
git-subrepo-0.3.1-1.20170206gita7ee886.fc27 (FEDORA-2018-f754474102)
Git Submodule Alternative
--------------------------------------------------------------------------------
Update Information:
Initial upload.
--------------------------------------------------------------------------------
================================================================================
gmediarender-0-0.8.20180414git4f221e6.fc27 (FEDORA-2018-524af5560c)
Resource efficient UPnP/DLNA renderer
--------------------------------------------------------------------------------
Update Information:
Add gmediarender into Fedora
--------------------------------------------------------------------------------
================================================================================
gnome-software-3.28.1-1.fc27.1 (FEDORA-2018-fead989b97)
A software center for GNOME
--------------------------------------------------------------------------------
Update Information:
Sync F28 distro upgrade background image with final F28 artwork
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Kalev Lember <klember(a)redhat.com> - 3.28.1-1.1
- Sync F28 upgrade background image with final F28 artwork
--------------------------------------------------------------------------------
================================================================================
golang-github-grpc-grpc-go-1.0.0-0.11.20180324gitbdb0727.fc27 (FEDORA-2018-452c1f1021)
The Go language implementation of gRPC. HTTP/2 based RPC
--------------------------------------------------------------------------------
Update Information:
Bump to 5b3c4e850e90a4cf6a20ebd46c8b32a0a3afcb9e ---- Bump to
5b3c4e850e90a4cf6a20ebd46c8b32a0a3afcb9e
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 24 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> -
1.0.0-0.11.20180324gitbdb0727
- Bump to 5b3c4e850e90a4cf6a20ebd46c8b32a0a3afcb9e
* Thu Mar 8 2018 Jan Chaloupka <jchaloup(a)redhat.com> - 1.0.0-0.10.git5b3c4e8
- Bump to 5b3c4e850e90a4cf6a20ebd46c8b32a0a3afcb9e
related: #1250461
* Wed Feb 28 2018 Jan Chaloupka <jchaloup(a)redhat.com> -
1.0.0-0.9.20170407git8050b9c
- Autogenerate some parts using the new macros
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.0.0-0.8.git8050b9c
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1250461 - Tracker for golang-github-grpc-grpc-go
https://bugzilla.redhat.com/show_bug.cgi?id=1250461
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-go-crypto-0-0.21.20180324git88942b9.fc27 (FEDORA-2018-c02bf4210c)
Supplementary Go cryptography libraries
--------------------------------------------------------------------------------
Update Information:
Bump to upstream 88942b9c40a4c9d203b82b3731787b672d6e809b
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 24 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> -
0-0.21.20180324git9419663
- Bump to upstream 88942b9c40a4c9d203b82b3731787b672d6e809b
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1231618 - Tracker for golang-googlecode-go-crypto
https://bugzilla.redhat.com/show_bug.cgi?id=1231618
--------------------------------------------------------------------------------
================================================================================
gsoap-2.8.49-4.fc27 (FEDORA-2018-b7a613ea5d)
Generator Tools for Coding SOAP/XML Web Services in C and C++
--------------------------------------------------------------------------------
Update Information:
This patch addresses a critical issue with the DIME protocol receiver that may
cause the receiver to become unresponsive when a malformed DIME protocol message
is received. --
https://www.genivia.com/advisory.html
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.8.49-4
- Fix issue with DIME protocol receiver and malformed DIME headers
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568930 - gsoap: Infinite loop on malformed DIME protocol messages
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1568930
--------------------------------------------------------------------------------
================================================================================
hedgewars-0.9.24-1.fc27 (FEDORA-2018-d8870cfc44)
Funny turn-based artillery game, featuring fighting Hedgehogs!
--------------------------------------------------------------------------------
Update Information:
https://www.hedgewars.org/node/6906
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.9.24-1
- 0.9.24
--------------------------------------------------------------------------------
================================================================================
hplip-3.18.3-2.fc27 (FEDORA-2018-f5c5e509a1)
HP Linux Imaging and Printing Project
--------------------------------------------------------------------------------
Update Information:
set dependency to /usr/bin/gpg
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Zdenek Dohnal <zdohnal(a)redhat.com> - 3.18.3-2
- set dependency directly to /usr/bin/gpg
--------------------------------------------------------------------------------
================================================================================
libtirpc-1.0.3-2.fc27 (FEDORA-2018-4f9921ffc3)
Transport Independent RPC Library
--------------------------------------------------------------------------------
Update Information:
Fixed memory leak in RPC code
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Steve Dickson <steved(a)redhat.com> 1.0.3-2
- Fixed memory leak in __try_protocol_version_2()
--------------------------------------------------------------------------------
================================================================================
lldpd-1.0.1-1.fc27 (FEDORA-2018-af3afbff15)
ISC-licensed implementation of LLDP
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 17 2018 James Hogarth <james.hogarth(a)gmail.com> - 1.0.1-1
- Update to 1.0.1
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1516066 - lldpd-1.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1516066
--------------------------------------------------------------------------------
================================================================================
mod_http2-1.10.18-1.fc27 (FEDORA-2018-16d07bea5c)
module implementing HTTP/2 for Apache 2
--------------------------------------------------------------------------------
Update Information:
This release includes the latest stable upstream release of mod_http2. The
changes since the last update are: * fixes a race condition where aborting
streams triggers an unnecessary timeout. * accurate reporting of h2 data
input/output per request via mod_logio. Fixes an issue where output sizes where
counted n-times on reused slave connections. See [issue
#158](https://github.com/icing/mod_h2/issues/158). * normalized connection
prefix logging when trace2 is enabled for direct h2 connection detection.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Joe Orton <jorton(a)redhat.com> - 1.10.18-1
- update to 1.10.18
--------------------------------------------------------------------------------
================================================================================
perl-File-Copy-Recursive-Reduced-0.003-1.fc27 (FEDORA-2018-cd0128afc0)
Recursive copying of files and directories within Perl 5 toolchain
--------------------------------------------------------------------------------
Update Information:
This is the first Fedora/EPEL build of perl-File-Copy-Recursive-Reduced.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568877 - Review Request: perl-File-Copy-Recursive-Reduced - Recursive
copying of files and directories within Perl 5 toolchain
https://bugzilla.redhat.com/show_bug.cgi?id=1568877
--------------------------------------------------------------------------------
================================================================================
perl-Math-BigRat-0.2614-1.fc27 (FEDORA-2018-4dd9fdcddc)
Arbitrary big rational numbers
--------------------------------------------------------------------------------
Update Information:
This release fixes an operand corruption on multiplication.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Petr Pisar <ppisar(a)redhat.com> - 0.2614-1
- 0.2614 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568637 - perl-Math-BigRat-0.2614 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1568637
--------------------------------------------------------------------------------
================================================================================
php-pecl-redis4-4.0.1-1.fc27 (FEDORA-2018-9cce31502c)
Extension for communicating with the Redis key-value store
--------------------------------------------------------------------------------
Update Information:
**phpredis 4.0.1** * Fix arginfo for connect/pconnect issue #1337 [c3b228]
(@mathroc) * Don't leak a ZVAL [278232] (Michael Grunder) * Fix config.m4 for
lzf issue #1325 [20e173] (Pavlo Yatsukhnenko) * Updates EXISTS documentation and
notes change in 4.0.0 [bed186] (Michael Grunder) * Fix typo in notes [0bed36]
(@szepeviktor)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Remi Collet <remi(a)remirepo.net> - 4.0.1-1
- update to 4.0.1
--------------------------------------------------------------------------------
================================================================================
python-django-threadedcomments-1.2-2.fc27 (FEDORA-2018-06f3954aa3)
A simple yet flexible threaded commenting system for Django
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 17 2018 Luis Bazan <lbazan(a)fedoraproject.org> - 1.2-2
- remove patch
* Tue Apr 17 2018 Luis Bazan <lbazan(a)fedoraproject.org> - 1.2-1
- New Upstream version
- remove contributros doc
--------------------------------------------------------------------------------
================================================================================
python-ntlm-auth-1.1.0-1.fc27 (FEDORA-2018-ff9fc57b02)
Python 3 compatible NTLM library
--------------------------------------------------------------------------------
Update Information:
Update pywinrm to latest version This also requires updates to python-
requests_ntlm and this required the new python-ntlm-auth library.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568553 - python-winrm-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1568553
[ 2 ] Bug #1568560 - python-requests_ntlm-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1568560
[ 3 ] Bug #1528288 - Review Request: python-ntlm-auth - Python 3 compatible NTLM
library
https://bugzilla.redhat.com/show_bug.cgi?id=1528288
--------------------------------------------------------------------------------
================================================================================
python-requests_ntlm-1.1.0-1.fc27 (FEDORA-2018-ff9fc57b02)
NTLM module for python requests
--------------------------------------------------------------------------------
Update Information:
Update pywinrm to latest version This also requires updates to python-
requests_ntlm and this required the new python-ntlm-auth library.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 17 2018 James Hogarth <james.hogarth(a)gmail.com> - 1.1.0-1
- Upstream release 1.1.0
* Wed Feb 28 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 0.3.0-6
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568553 - python-winrm-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1568553
[ 2 ] Bug #1568560 - python-requests_ntlm-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1568560
[ 3 ] Bug #1528288 - Review Request: python-ntlm-auth - Python 3 compatible NTLM
library
https://bugzilla.redhat.com/show_bug.cgi?id=1528288
--------------------------------------------------------------------------------
================================================================================
python-winrm-0.3.0-1.fc27 (FEDORA-2018-ff9fc57b02)
Python libraries for interacting with windows remote management
--------------------------------------------------------------------------------
Update Information:
Update pywinrm to latest version This also requires updates to python-
requests_ntlm and this required the new python-ntlm-auth library.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 17 2018 James Hogarth <james.hogarth(a)gmail.com> - 0.3.0-1
- Update to 0.3.0
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568553 - python-winrm-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1568553
[ 2 ] Bug #1568560 - python-requests_ntlm-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1568560
[ 3 ] Bug #1528288 - Review Request: python-ntlm-auth - Python 3 compatible NTLM
library
https://bugzilla.redhat.com/show_bug.cgi?id=1528288
--------------------------------------------------------------------------------
================================================================================
qt5ct-0.35-1.fc27 (FEDORA-2018-b51bc88d2d)
Qt5 Configuration Tool
--------------------------------------------------------------------------------
Update Information:
Update to 0.35
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Christian Dersch - 0.35-1
- new version
* Wed Feb 14 2018 Jan Grulich <jgrulich(a)redhat.com> - 0.34-5
- rebuild (qt5)
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.34-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1553153 - qt5ct-0.35 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1553153
--------------------------------------------------------------------------------
================================================================================
rocksndiamonds-4.1.0.0-1.fc27 (FEDORA-2018-f8ddf32011)
Underground digging game
--------------------------------------------------------------------------------
Update Information:
Update to 4.1.0.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 17 2018 Tom Callaway <spot(a)fedoraproject.org> - 4.1.0.0-1
- update to 4.1.0.0
--------------------------------------------------------------------------------
================================================================================
sslh-1.19c-1.fc27 (FEDORA-2018-b769c1bbfb)
Applicative protocol(SSL/SSH) multiplexer
--------------------------------------------------------------------------------
Update Information:
Update to 1.19c
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 James Hogarth <james.hogarth(a)gmail.com> - 1.19c-1
- Update to 1.19c upstream
* Fri Feb 9 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.18-6
- Escape macros in %changelog
* Thu Nov 30 2017 James Hogarth <james.hogarth(a)gmail.com> - 1.18-5
- Remove dependency on libwrap for F28+ as per accepted change
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1536809 - sslh-1.19c is available
https://bugzilla.redhat.com/show_bug.cgi?id=1536809
--------------------------------------------------------------------------------
================================================================================
task-spooler-1.0-1.fc27 (FEDORA-2018-98566f9d41)
Personal job scheduler
--------------------------------------------------------------------------------
Update Information:
First release of package.
--------------------------------------------------------------------------------
================================================================================
usbmuxd-1.1.0-11.fc27 (FEDORA-2018-8c783f6186)
Daemon for communicating with Apple's iOS devices
--------------------------------------------------------------------------------
Update Information:
This update fixes problem with usbmuxd not starting properly under some
circumstances.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Bastien Nocera <bnocera(a)redhat.com> - 1.1.0-10
+ usbmuxd-1.1.0-13
- Fix usbmuxd not starting up a second time, and properties being lost
with kernel >= 4.12
--------------------------------------------------------------------------------
================================================================================
xca-1.4.1-1.fc27 (FEDORA-2018-58d5cbdaf5)
Graphical X.509 certificate management tool
--------------------------------------------------------------------------------
Update Information:
New upstream release. New URL and source location. Fixes BZ #1568760.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Patrick Monnerat <patrick(a)monnerat.net> 1.4.1-1
- New upstream release.
- New URL and source location.
Fixes BZ #1568760.
* Wed Mar 7 2018 Patrick Monnerat <patrick(a)monnerat.net> 1.4.0-3
- "Modernize" spec file.
- BR gcc-g++.
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568760 - Upgarade to version 1.4.1 so that old XCA files could be opened
https://bugzilla.redhat.com/show_bug.cgi?id=1568760
--------------------------------------------------------------------------------
================================================================================
yoshimi-1.5.7-1.fc27 (FEDORA-2018-710d411f08)
Rewrite of ZynAddSubFx aiming for better JACK support
--------------------------------------------------------------------------------
Update Information:
Update to upstream bugfix release 1.5.7
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 22 2018 Adam Huffman <bloch(a)verdurin.com> - 1.5.7-1
- Update to upstream bugfix release 1.5.7
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.4.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jan 18 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.5.4.1-2
- Remove obsolete scriptlets
--------------------------------------------------------------------------------
================================================================================
zsh-5.4.1-3.fc27 (FEDORA-2018-ac1d9c2777)
Powerful interactive shell
--------------------------------------------------------------------------------
Update Information:
- fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100) -
fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083) - fix
stack-based buffer overflow in exec.c:hashcmd() (CVE-2018-1071)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Kamil Dudka <kdudka(a)redhat.com> - 5.4.1-3
- fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
- fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
- fix stack-based buffer overflow in exec.c:hashcmd() (CVE-2018-1071)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563396 - CVE-2018-1100 zsh: buffer overflow in utils.c:checkmailpath() can
lead to local arbitrary code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1563396
[ 2 ] Bug #1560696 - CVE-2018-1083 zsh: Stack-based buffer overflow in
gen_matches_files() at compctl.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1560696
[ 3 ] Bug #1553533 - CVE-2018-1071 zsh: Stack-based buffer overflow in exec.c:hashcmd()
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1553533
--------------------------------------------------------------------------------