The following Fedora 27 Security updates need testing:
Age URL
83
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
32
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c9395f9bec remctl-3.14-1.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a85044d389 ruby-2.4.4-88.fc27
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-46f48df07d flac-1.3.2-7.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-23a1b5975a patch-2.7.6-4.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e4c2507720 guava-18.0-12.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e56bdde239
pam-kwallet-5.12.5-3.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0e6e400e7a
seamonkey-2.49.3-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e31f52c5ee
mysql-mmm-2.2.1-20.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cf1dd2166b
asterisk-14.7.6-2.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ccb2cc96be
mingw-LibRaw-0.18.10-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-775d96b54b
blktrace-1.2.0-6.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-490f30ffa0
libreoffice-5.4.6.2-6.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-46f3f13c68
libgxps-0.3.0-4.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-363877c27c
firefox-60.0-4.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-93ba62d099
webkitgtk4-2.20.2-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-29ebba0906 wget-1.19.5-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
37
https://bodhi.fedoraproject.org/updates/FEDORA-2018-772fcd140c
linux-firmware-20180402-83.git8c1e439c.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-94173a387f
libnfs-1.11.0-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1b2145a7d6
libguestfs-1.38.1-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1d530ea7b8
osinfo-db-20180502-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5810b5719f
pungi-4.1.24-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-46f48df07d flac-1.3.2-7.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9fff2c4e8a
python-productmd-1.12-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b795b92cc0
python-pip-9.0.3-2.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-abae82adfd
python-urllib3-1.22-6.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-900d2b7675 sssd-1.16.1-4.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-73193bc5bb
systemd-234-11.git5f8984e.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-23a1b5975a patch-2.7.6-4.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-13213edbea ceph-12.2.5-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9676b06626
python2-2.7.15-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-93ba62d099
webkitgtk4-2.20.2-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-363877c27c
firefox-60.0-4.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-46f3f13c68
libgxps-0.3.0-4.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b84e143f09
compiler-rt-5.0.2-1.fc27 lld-5.0.2-1.fc27 lldb-5.0.2-1.fc27 llvm-5.0.2-1.fc27
clang-5.0.2-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
LibRaw-0.18.11-1.fc27
elementary-xfce-icon-theme-0.11-1.fc27
exiv2-0.26-10.fc27
fmf-0.4-1.fc27
geoipupdate-2.5.0-1.fc27
gnome-chemistry-utils-0.14.17-11.fc27
gnumeric-1.12.41-1.fc27
goffice-0.10.41-1.fc27
golang-googlecode-tools-0-23.1.20180404gitce871d1.fc27
greenwave-0.7.0-1.fc27
gsequencer-1.4.29-1.fc27
liferea-1.12.3-1.fc27
mock-1.4.10-1.fc27
ncurses-6.0-14.20170722.fc27
nuvolasdk-4.11.0-1.fc27
open-vm-tools-10.2.5-2.fc27
perl-experimental-0.020-1.fc27
puppetlabs-stdlib-4.25.1-1.fc27
python-molecule-2.13.1-1.fc27
shotwell-0.28.3-1.fc27
slick-greeter-1.2.0-1.fc27
sslh-1.19c-2.fc27
st-0.8.1-2.fc27
vim-8.0.1806-1.fc27
waiverdb-0.10.0-1.fc27
wesnoth-1.14.1-1.fc27
xen-4.9.2-3.fc27
Details about builds:
================================================================================
LibRaw-0.18.11-1.fc27 (FEDORA-2018-08ea7a5f0b)
Library for reading RAW files obtained from digital photo cameras
--------------------------------------------------------------------------------
Update Information:
https://www.libraw.org/news/libraw-0-18-11 ---- CVE-2018-10529 fixed: out
of bounds read in X3F parser CVE-2018-10528 fixed: possible stack overrun in
X3F parser
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.18.11-1
- 0.18.11.
* Thu May 3 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.18.10-1
- 0.18.10.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1576801 - LibRaw-0.18.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1576801
[ 2 ] Bug #1574326 - CVE-2018-10529 LibRaw: Out-of-bounds read in X3F property table
list functionality in libraw_x3f.cpp and libraw_cxx.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1574326
[ 3 ] Bug #1574322 - CVE-2018-10528 LibRaw: Stack-based buffer overflow in
libraw_cxx.cpp:utf2char() allows for potential code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1574322
[ 4 ] Bug #1574486 - LibRaw-0.18.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1574486
--------------------------------------------------------------------------------
================================================================================
elementary-xfce-icon-theme-0.11-1.fc27 (FEDORA-2018-fa5aebb338)
Icons for Xfce based on the elementary Project Icon Theme
--------------------------------------------------------------------------------
Update Information:
- update to 0.11
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 30 2018 Johannes Lips <hannes(a)fedoraproject.org> - 0.11-1
- update to latest upstream version 0.11
--------------------------------------------------------------------------------
================================================================================
exiv2-0.26-10.fc27 (FEDORA-2018-fc9c5969b4)
Exif and Iptc metadata manipulation library
--------------------------------------------------------------------------------
Update Information:
Security update for CVE-2017-17723, CVE-2017-17725, CVE-2018-5772
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 3 2018 Germano Massullo <germano.massullo(a)gmail.com> - 0.26-10
- added patches that fix CVE-2017-17723 CVE-2017-17725 CVE-2017-5772
- moved 0006-1296-Fix-submitted.patch file from sources to package tree
* Tue Feb 20 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 0.26-9
- BR: gcc-c++
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.26-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Feb 3 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 0.26-7
- Switch to %ldconfig_scriptlets
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1545249 - CVE-2017-17723 exiv2: heap-based buffer over-read in
Exiv2::Image::byteSwap4 in image.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1545249
[ 2 ] Bug #1545232 - CVE-2017-17725 exiv2: heap-based buffer over-read in
Exiv2::getULong function in types.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=1545232
[ 3 ] Bug #1536904 - CVE-2018-5772 exiv2: Uncontrolled recursion in
image.cpp:Exiv2::Image::printIFDStructure() can allow a remote attacker to cause a denial
of service via a crafted tif file
https://bugzilla.redhat.com/show_bug.cgi?id=1536904
--------------------------------------------------------------------------------
================================================================================
fmf-0.4-1.fc27 (FEDORA-2018-48b9635137)
Flexible Metadata Format
--------------------------------------------------------------------------------
Update Information:
Initial release of Flexible Metadata Format
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575645 - Review Request: fmf - Flexible Metadata Format
https://bugzilla.redhat.com/show_bug.cgi?id=1575645
--------------------------------------------------------------------------------
================================================================================
geoipupdate-2.5.0-1.fc27 (FEDORA-2018-d4889c61ba)
Update GeoIP2 and GeoIP Legacy binary databases from MaxMind
--------------------------------------------------------------------------------
Update Information:
Current upstream release, which updates free databases for libmaxminddb by
default. Support for free GeoIP database updates has ended, and the final
release database can be found in the GeoIP-GeoLite-data package.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 31 2017 Paul Howarth <paul(a)city-fan.org> - 2.5.0-1
- Update to 2.5.0
- Replace use of strnlen() due to lack of universal availability (GH#71)
- Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
- Remove unused base64 library (GH#68)
- Add the new configuration option 'PreserveFileTimes'; if set, the
downloaded files will get the same modification times as their original on
the server (default is '0') (GH#63)
- Use the correct types when calling 'curl_easy_setopt()'; this fixes
warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
- In 'GeoIP.conf', the 'UserId' option was renamed to
'AccountID' and the
'ProductIds' option was renamed to 'EditionIDs'; the old options will
continue to work, but upgrading to the new names is recommended for
forward compatibility
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1576034 - stock configuration causes geoipupdate to fail
https://bugzilla.redhat.com/show_bug.cgi?id=1576034
--------------------------------------------------------------------------------
================================================================================
gnome-chemistry-utils-0.14.17-11.fc27 (FEDORA-2018-bdcd195b8a)
A set of chemical utilities
--------------------------------------------------------------------------------
Update Information:
An update to the latest gnumeric and goffice releases: *
http://gnumeric.org/announcements/1.12/gnumeric-1.12.41.html ---- An update to
the latest gnumeric and goffice releases: *
gnumeric.org/announcements/1.12/gnumeric-1.12.40.html
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.17-11
- Rebuilt for gnumeric-1.12.41
* Sun May 6 2018 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.14.17-10
- Rebuilt for gnumeric-1.12.40
--------------------------------------------------------------------------------
================================================================================
gnumeric-1.12.41-1.fc27 (FEDORA-2018-bdcd195b8a)
Spreadsheet program for GNOME
--------------------------------------------------------------------------------
Update Information:
An update to the latest gnumeric and goffice releases: *
http://gnumeric.org/announcements/1.12/gnumeric-1.12.41.html ---- An update to
the latest gnumeric and goffice releases: *
gnumeric.org/announcements/1.12/gnumeric-1.12.40.html
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Julian Sikorski <belegdol(a)fedoraproject.org> - 0:1.12.41-2
- Updated to 1.12.41
- Ensured python2 is called explicitly as per
https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build
* Sun May 6 2018 Julian Sikorski <belegdol(a)fedoraproject.org> - 1:1.12.40-1
- Updated to 1.12.40
--------------------------------------------------------------------------------
================================================================================
goffice-0.10.41-1.fc27 (FEDORA-2018-bdcd195b8a)
G Office support libraries
--------------------------------------------------------------------------------
Update Information:
An update to the latest gnumeric and goffice releases: *
http://gnumeric.org/announcements/1.12/gnumeric-1.12.41.html ---- An update to
the latest gnumeric and goffice releases: *
gnumeric.org/announcements/1.12/gnumeric-1.12.40.html
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.10.41-1
- Updated to 0.10.41
* Sun May 6 2018 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.10.40-1
- Updated to 0.10.40
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-tools-0-23.1.20180404gitce871d1.fc27 (FEDORA-2018-6e5676271e)
Supplementary tools and packages for Go
--------------------------------------------------------------------------------
Update Information:
Package goyacc
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 9 2018 Sergey Avseyev <sergey.avseyev(a)gmail.com> - 0-23.1.gitce871d1
- Package goyacc
resolves: #1576672
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1576672 - Package goyacc with the golang-googlecode-tools
https://bugzilla.redhat.com/show_bug.cgi?id=1576672
--------------------------------------------------------------------------------
================================================================================
greenwave-0.7.0-1.fc27 (FEDORA-2018-28573fb571)
Service for gating on automated tests
--------------------------------------------------------------------------------
Update Information:
* New `RemoteOriginalSpecNvrRule` for extending policies (#75). * In case
Greenwave found no matching results for a decision, the summary text has been
re-worded to be clearer and to indicate how many results were expected (#145).
* Wildcard support for matching multiple product versions. This allows to
specify ``product_versions`` like ``fedora-*`` in policies to match
``fedora-27``, ``fedora-28`` and any future release. * Wildcard support in the
``repos`` list in ``rules`` in policy files (#155). * Both new and old
ResultsDB message format are now supported.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Lukas Holecek <lholecek(a)redhat.com> - 0.7.0-1
- New RemoteOriginalSpecNvrRule for extending policies (#75).
- In case Greenwave found no matching results for a decision, the summary text
has been re-worded to be clearer and to indicate how many results were
expected (#145).
- Wildcard support for matching multiple product versions. This allows to
specify ``product_versions`` like ``fedora-*`` in policies to match
``fedora-27``, ``fedora-28`` and any future release.
- Wildcard support in the ``repos`` list in ``rules`` in policy files (#155).
- Both new and old ResultsDB message format are now supported.
--------------------------------------------------------------------------------
================================================================================
gsequencer-1.4.29-1.fc27 (FEDORA-2018-f00b3e967b)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
liferea-1.12.3-1.fc27 (FEDORA-2018-056934f7bb)
An RSS/RDF feed reader
--------------------------------------------------------------------------------
Update Information:
Liferea 1.12.3 addresses some long-standing user concerns, allowing them to
specify a custom downloader. A lot of refactoring also allows liferea to provide
a GTK headerbar plugin for all fans of GNOME style window decorations. This
package now requires libpeas-loader-python3 to allow enabling of plugins.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 9 2018 Emmanuel Seyman <emmanuel(a)seyman.fr> - 1:1.12.3-1
- Update to 1.12.3
- Add a Requires on libpeas-loader-python3 to allow enabling
the 'plugin installer' plugin
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1569134 - liferea outputs an error message when enabling the 'plugin
installer' plugin
https://bugzilla.redhat.com/show_bug.cgi?id=1569134
--------------------------------------------------------------------------------
================================================================================
mock-1.4.10-1.fc27 (FEDORA-2018-8c3673366b)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
Features: - There is a new plugin [
overlayfs](https://github.com/rpm-software-
management/mock/wiki/Plugin-Overlayfs). This plugin implements mock's snapshot
functionality using overlayfs. From a user perspective, it works similar to LVM
plugin, but unlike LVM plugin, it only needs a directory (not a volume group)
for its data (snapshots). - Previously a [
bind_mount](https://github.com/rpm-
software-management/mock/wiki/Plugin-BindMount) plugin allowed to mount just a
directory. Now, you can bind mount even a single file. - Previously a
[
chroot_scan](https://github.com/rpm-software-management/mock/wiki/Plugin-
ChrootScan) allowed retrieving artifacts from chroot where build started. Now,
it can extract objects even from chroot which failed to initialize. Bugfixes:
- Change sign plugin to sign only built RPMs and not every file in results
directory [
RHBZ#1217495](https://bugzilla.redhat.com/show_bug.cgi?id=1217495) -
encode content before writing [
GH#176](https://github.com/rpm-software-
management/mock/issues/176) - revert workaround introduced in 057c51d6
[
RHBZ#1544801](https://bugzilla.redhat.com/show_bug.cgi?id=1544801)
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Miroslav Such�� <msuchy(a)redhat.com> 1.4.10-1
- remove executable bit from trace_decorator.py
- Change sign plugint to sign only builded rpm and not every file in results
[RHBZ#1217495] (necas.marty(a)gmail.com)
- overlayfs plugin: added explicit mount support (zzambers(a)redhat.com)
- encode content before writing [RHBZ#1564035]
- allow to bind_mount just one file (necas.marty(a)gmail.com)
- added overlayfs plugin (zzambers(a)redhat.com)
- invoke chroot scan for 'initfailed' event (clime7(a)gmail.com)
- add support for .spec in --installdeps (necas.marty(a)gmail.com)
- revert workaround introduced in 057c51d6 [RHBZ#1544801]
- comment out macro in changelog (msuchy(a)redhat.com)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1544801 - Impossible to (un)set $PROMPT_COMMAND environment variable without
--old-chroot
https://bugzilla.redhat.com/show_bug.cgi?id=1544801
[ 2 ] Bug #1217495 - The new sign plugin signs all rpms in resultdir
https://bugzilla.redhat.com/show_bug.cgi?id=1217495
--------------------------------------------------------------------------------
================================================================================
ncurses-6.0-14.20170722.fc27 (FEDORA-2018-6c01a593b0)
Ncurses support utilities
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-10754.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Miroslav Lichvar <mlichvar(a)redhat.com> 6.0-14.20170722
- fix crash in parsing of terminfo use capability (CVE-2018-10754)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1576119 - CVE-2018-10754 ncurses: NULL Pointer Dereference in _nc_parse_entry
function in tinfo/parse_entry.c.
https://bugzilla.redhat.com/show_bug.cgi?id=1576119
--------------------------------------------------------------------------------
================================================================================
nuvolasdk-4.11.0-1.fc27 (FEDORA-2018-831b0829cf)
SDK for building Nuvola Player's web app scripts
--------------------------------------------------------------------------------
Update Information:
Update to 4.11.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 4.11.0-1
- Update to stable 4.11.0-1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1576616 - nuvolasdk-4.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1576616
--------------------------------------------------------------------------------
================================================================================
open-vm-tools-10.2.5-2.fc27 (FEDORA-2018-7ea12a5bc4)
Open Virtual Machine Tools for virtual machines hosted on VMware
--------------------------------------------------------------------------------
Update Information:
Package new upstream version 10.2.5 that also fixes RHBZ#1431376.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 9 2018 Ravindra Kumar <ravindrakumar(a)vmware.com> - 10.2.5-2
- Use tirpc for Fedora 28 onwards.
* Wed May 9 2018 Ravindra Kumar <ravindrakumar(a)vmware.com> - 10.2.5-1
- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.
* Mon Apr 30 2018 Pete Walter <pwalter(a)fedoraproject.org> - 10.2.0-5
- Rebuild for ICU 61.1
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.2.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1431376 - "/sys$DEVPATH/device/timeout" does not expand to a path
https://bugzilla.redhat.com/show_bug.cgi?id=1431376
--------------------------------------------------------------------------------
================================================================================
perl-experimental-0.020-1.fc27 (FEDORA-2018-4dcaf32cb9)
Experimental features made easy
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.020-1
- 0.020 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1576612 - perl-experimental-0.020 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1576612
--------------------------------------------------------------------------------
================================================================================
puppetlabs-stdlib-4.25.1-1.fc27 (FEDORA-2018-9bcc8b1504)
Puppet Labs Standard Library
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Andrea Veri <averi(a)fedoraproject.org> - 4.25.1-1
- New upstream release.
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
4.5.1-7.20150121git7a91f20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-molecule-2.13.1-1.fc27 (FEDORA-2018-c8f6ad3297)
Molecule is designed to aid in the development and testing of Ansible roles
--------------------------------------------------------------------------------
Update Information:
update to 2.13.1, fix missing cookiecutter files
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 9 2018 Brett Lentz <brett.lentz(a)gmail.com> - 2.13.1-1
- update to 2.13.1
- ensure all needed files are installed
* Mon Apr 30 2018 Brett Lentz <brett.lentz(a)gmail.com> - 2.13-1
- update to 2.13
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1575821 - Molecule don't run because of python 3.6.5 non supported
https://bugzilla.redhat.com/show_bug.cgi?id=1575821
--------------------------------------------------------------------------------
================================================================================
shotwell-0.28.3-1.fc27 (FEDORA-2018-13fb694f63)
A photo organizer for the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
#### Shotwell 0.28.3 - 7 May 2018 #### * Fix spacings in search toolbar * Fix
"Out of memory" issues when scrolling through large collections
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 8 2018 Kalev Lember <klember(a)redhat.com> - 0.28.3-1
- Update to 0.28.3
--------------------------------------------------------------------------------
================================================================================
slick-greeter-1.2.0-1.fc27 (FEDORA-2018-2efe6d0f40)
A slick-looking LightDM greeter
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Leigh Scott <leigh123linux(a)googlemail.com> - 1.2.0-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
sslh-1.19c-2.fc27 (FEDORA-2018-d3a37b7a5a)
Applicative protocol(SSL/SSH) multiplexer
--------------------------------------------------------------------------------
Update Information:
Fixes bz#1574831
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 9 2018 James Hogarth <james.hogarth(a)gmail.com> - 1.19c-2
- Fix wrong path bz#1574831
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574831 - wrong path in systemd service file
https://bugzilla.redhat.com/show_bug.cgi?id=1574831
--------------------------------------------------------------------------------
================================================================================
st-0.8.1-2.fc27 (FEDORA-2018-ca75371245)
A simple terminal implementation for X
--------------------------------------------------------------------------------
Update Information:
This update fixes the st-user subpackage so that it installs all necessary
source files once again. ---- A new version of
suckless.org simple terminal,
aka st, is available for Fedora. See upstream release notes for 0.8 and 0.8.1
for the summary of changes:
https://lists.suckless.org/dev/1803/32584.html
https://lists.suckless.org/dev/1803/32600.html
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Petr ��abata <contyk(a)redhat.com> - 0.8.1-2
- Install all source files for st-user (rhbz#1574165)
* Mon Apr 9 2018 Petr ��abata <contyk(a)redhat.com> - 0.8.1-1
- 0.8.1 bump
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1574165 - st-user 0.8.1-1 cannot build custom st because install is missing
new source files
https://bugzilla.redhat.com/show_bug.cgi?id=1574165
[ 2 ] Bug #1556651 - st-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1556651
--------------------------------------------------------------------------------
================================================================================
vim-8.0.1806-1.fc27 (FEDORA-2018-eaeb988451)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit ---- 1575354 - Vim's update fails on perl
dependency
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Karsten Hopp <karsten(a)redhat.com> 8.0.1806-1
- patchlevel 1806
* Wed May 9 2018 Zdenek Dohnal <zdohnal(a)redhat.com> - 8.0.1789-2
- 1575354 - suggest more packages for embedded interpreters
* Fri May 4 2018 Karsten Hopp <karsten(a)redhat.com> 8.0.1789-1
- patchlevel 1789
--------------------------------------------------------------------------------
================================================================================
waiverdb-0.10.0-1.fc27 (FEDORA-2018-e0c8c7f9c5)
Service for waiving results in ResultsDB
--------------------------------------------------------------------------------
Update Information:
* Comment is now explicitly required when creating waivers (both in API and
CLI). * Multiple waivers can now be created with single POST request (#98). To
create multiple waivers, POST list to "waivers/" instead of single waiver. *
When creating a waiver by referring to a result ID, WaiverDB now accepts
results with ``'type': 'brew-build'`` as an alias for
``'koji_build'``. *
Messaging can be disabled is settings with ``MESSAGE_PUBLISHER = None``. * The
``KERBEROS_HTTP_HOST`` setting in the server configuration is now ignored.
This setting is no longer needed because GSSAPI will automatically find a key
in the Kerberos keytab matching the service principal in the client request.
* New man pages are available for ``waiverdb-cli(1)`` and ``waiverdb(7)`` (REST
API). * Changed error message for bad ``since`` value. E.g.
``api/v1.0/waivers/?since=123`` results in HTTP 400 with message
``{"message":
{"since": "time data '123' does not match format
'%Y-%m-%dT%H:%M:%S.%f'"}}``.
* CORS headers are now supported for every request (#160). * Wrong ``subject``
filter produces more user-friendly error (#162). * Setting a keytab file is no
longer required: if one is not explicitly set, ``/etc/krb5.keytab`` will be
used (#55). * Unused option ``resultsdb_api_url`` was removed from client.conf.
* Containers on Quay (`https://quay.io/repository/factory2/waiverdb`).
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 10 2018 Lukas Holecek <lholecek(a)redhat.com> - 0.10.0-1
- Comment is now explicitly required when creating waivers (both in API and
CLI).
- Multiple waivers can now be created with single POST request (#98). To create
multiple waivers, POST list to "waivers/" instead of single waiver.
- When creating a waiver by referring to a result ID, WaiverDB now accepts
results with ``'type': 'brew-build'`` as an alias for
``'koji_build'``.
- Messaging can be disabled is settings with ``MESSAGE_PUBLISHER = None``.
- The ``KERBEROS_HTTP_HOST`` setting in the server configuration is now
ignored. This setting is no longer needed because GSSAPI will automatically
find a key in the Kerberos keytab matching the service principal in the
client request.
- New man pages are available for ``waiverdb-cli(1)`` and ``waiverdb(7)`` (REST
API).
- Changed error message for bad ``since`` value. E.g.
``api/v1.0/waivers/?since=123`` results in HTTP 400 with message
``{"message": {"since": "time data '123' does not match
format
'%Y-%m-%dT%H:%M:%SOURCE.%f'"}}``.
- CORS headers are now supported for every request (#160).
- Wrong ``subject`` filter produces more user-friendly error (#162).
- Setting a keytab file is no longer required: if one is not explicitly set,
``/etc/krb5.keytab`` will be used (#55).
- Unused option ``resultsdb_api_url`` was removed from client.conf.
- Containers on Quay (`<https://quay.io/repository/factory2/waiverdb>`__).
* Mon Mar 12 2018 Ralph Bean <rbean(a)redhat.com - 0.9.1-1
- Include new resultsdb_api_url config for the client.
- Port to python3.
--------------------------------------------------------------------------------
================================================================================
wesnoth-1.14.1-1.fc27 (FEDORA-2018-7d2952ef12)
Turn-based strategy game with a fantasy theme
--------------------------------------------------------------------------------
Update Information:
1.14.1 ---- 1.14.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 9 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 1.14.1-1
- 1.14.1.
* Wed May 2 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 1.14.0-1
- 1.14.0.
* Mon Apr 30 2018 Pete Walter <pwalter(a)fedoraproject.org> - 1.13.14-2
- Rebuild for ICU 61.1
--------------------------------------------------------------------------------
================================================================================
xen-4.9.2-3.fc27 (FEDORA-2018-98684f429b)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
x86: mishandling of debug exceptions [XSA-260, CVE-2018-8897] x86 vHPET
interrupt injection errors [XSA-261] (#1576089) qemu may drive Xen into
unbounded loop [XSA-262]
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 9 2018 Michael Young <m.a.young(a)durham.ac.uk> - 4.9.2-3
- x86: mishandling of debug exceptions [XSA-260, CVE-2018-8897]
(with extra patch so it applies cleanly)
- x86 vHPET interrupt injection errors [XSA-261] (#1576089)
- qemu may drive Xen into unbounded loop [XSA-262]
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1571880 - xsa261 xen: x86 vHPET interrupt injection errors (XSA-261)
https://bugzilla.redhat.com/show_bug.cgi?id=1571880
--------------------------------------------------------------------------------