The following Fedora 27 Security updates need testing:
Age URL
47
https://bodhi.fedoraproject.org/updates/FEDORA-2017-15efa72a0c
docker-1.13.1-44.git584d391.fc27
43
https://bodhi.fedoraproject.org/updates/FEDORA-2017-913288e9a9
mongodb-3.4.10-1.fc27
40
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d7c0748c1b pdns-4.1.0-1.fc27
40
https://bodhi.fedoraproject.org/updates/FEDORA-2017-14f5c6cdac
qpid-cpp-1.37.0-1.fc27
15
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2d4c9a6e37
monit-5.25.1-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-57c3a424eb
qtpass-1.2.1-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c4e4935e01 irssi-1.0.6-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6cb474b8ff
python-bottle-0.12.13-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-16a76da6cc
icecat-52.5.3-2.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ef9e28d9e4
poco-1.7.8p3-3.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-448444341e
sox-14.4.2.0-13.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2299cfb708
keycloak-httpd-client-install-0.8-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-75e780a7c2 ruby-2.4.3-86.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d2b135d345
rootsh-1.5.3-17.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b528f28c59
sox-14.4.2.0-14.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0590e4af13
webkitgtk4-2.18.5-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21a7ad920c
kernel-4.14.13-300.fc27
The following builds have been pushed to Fedora 27 updates-testing
abrt-server-info-page-1.4-1.fc27
acpica-tools-20180105-1.fc27
authselect-0.2-2.fc27
awstats-7.7-1.fc27
bind-9.11.1-10.P3.fc27
cargo-0.24.0-1.fc27
flmsg-4.0.4-1.fc27
getdns-1.3.0-3.fc27
glib2-2.54.3-1.fc27
imsettings-1.7.3-2.fc27
indi-aagcloudwatcher-1.6.2-1.fc27
indi-apogee-1.6.2-1.fc27
indi-eqmod-1.6.2-1.fc27
indi-gphoto-1.6.2-1.fc27
indi-sx-1.6.2-1.fc27
kernel-4.14.13-300.fc27
keycloak-httpd-client-install-0.8-1.fc27
kstars-2.9.1-1.fc27
libindi-1.6.2-1.fc27
matrix-synapse-0.26.0-1.fc27
module-build-service-copr-0.4-1.fc27
perl-Data-Dumper-2.167-398.fc27
php-cs-fixer-2.10.0-1.fc27
python-importanize-0.6.2-1.fc27
recap-1.3.0-1.fc27
rho-0.0.31-2.fc27
rootsh-1.5.3-17.fc27
ruby-2.4.3-86.fc27
rust-1.23.0-1.fc27
sox-14.4.2.0-13.fc27
sox-14.4.2.0-14.fc27
timedatex-0.5-2.fc27
urw-base35-fonts-20170801-4.fc27
webkitgtk4-2.18.5-1.fc27
xorg-x11-server-1.19.6-2.fc27
yarock-1.3.0-1.fc27
Details about builds:
================================================================================
abrt-server-info-page-1.4-1.fc27 (FEDORA-2018-9951f6e0fb)
Web page with summary of ABRT services
--------------------------------------------------------------------------------
Update Information:
swap two links
--------------------------------------------------------------------------------
================================================================================
acpica-tools-20180105-1.fc27 (FEDORA-2018-1db1c5f9f2)
ACPICA tools for the development and debug of ACPI tables
--------------------------------------------------------------------------------
Update Information:
This update includes the changes from the 20171215, 20171214 and 20180105
upstream versions. NB: 20171214->20171215 corrected a typo, basically.
---------------------------------------- 05 January 2018. Summary of changes for
version 20180105: 1) ACPICA kernel-resident subsystem: * Updated all
copyrights to 2018. This affects all source code modules. * Fixed a possible
build error caused by an unresolved reference to the AcpiUtSafeStrncpy
function. * Removed NULL pointer arithmetic in the various pointer manipulation
macros. All "(void *) NULL" constructs are converted to "(void *) 0".
This
eliminates warnings/errors in newer C compilers. Jung-uk Kim. * Added support
for A32 ABI compilation, which uses the ILP32 model. Anuj Mittal. 2) iASL
Compiler/Disassembler and Tools: * ASLTS: Updated all copyrights to 2018. *
Tools: Updated all signon copyrights to 2018. * AcpiXtract: Fixed a regression
related to ACPI table signatures where the signature was truncated to 3
characters (instead of 4). * AcpiExec: Restore the original terminal mode after
the use of the -v and -vd options. * ASLTS: Deployed the iASL __METHOD__ macro
across the test suite. ---------------------------------------- 14 December
2017. Summary of changes for version 20171214: 1) ACPICA kernel-resident
subsystem: * Fixed a regression in the external (public)
AcpiEvaluateObjectTyped interface where the optional "pathname" argument had
inadvertently become a required argument returning an error if omitted (NULL
pointer argument). * Fixed two possible memory leaks related to the recently
developed "late resolution" of reference objects within ASL Package Object
definitions. * Added two recently defined _OSI strings: "Windows 2016" and
"Windows 2017". Mario Limonciello. * Implemented and deployed a safer version
of the C library function strncpy: AcpiUtSafeStrncpy. The intent is to at
least prevent the creation of unterminated strings as a possible result of a
standard strncpy. * Cleaned up and restructured the global variable file
(acglobal.h). There are many changes, but no functional changes. 2) iASL
Compiler/Disassembler and Tools: * iASL Table Compiler: Fixed a problem with
the DBG2 ACPI table where the optional OemData field at the end of the table was
incorrectly required for proper compilation. It is now correctly an optional
field. * ASLTS: The entire suite was converted from standard ASL to the ASL+
language, using the ASL-to-ASL+ converter which is integrated into the iASL
compiler. A binary compare of all output files has verified the correctness of
the conversion. * iASL: Fixed the source code build for platforms where "char"
is unsigned. This affected the iASL lexer only. Jung-uk Kim.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1525938 - %check RPM macro used in %changelog needs to be escaped
https://bugzilla.redhat.com/show_bug.cgi?id=1525938
[ 2 ] Bug #1526651 - acpica-tools-20180105 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1526651
--------------------------------------------------------------------------------
================================================================================
authselect-0.2-2.fc27 (FEDORA-2018-c1de5bcc39)
Configures authentication and identity sources from supported profiles
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream 0.2. This release contains several improvements. - improved
documentation and manual pages - sssd+fprint and winbind+fprint profiles were
removed and merged into sssd and winbind where fingerprint is enabled by enable-
fingerprint option - improved generation of dconf files - added ?! conditional
operator
--------------------------------------------------------------------------------
================================================================================
awstats-7.7-1.fc27 (FEDORA-2018-284552f911)
Advanced Web Statistics
--------------------------------------------------------------------------------
Update Information:
Version 7.7 -
http://www.awstats.org/docs/awstats_changelog.txt
--------------------------------------------------------------------------------
================================================================================
bind-9.11.1-10.P3.fc27 (FEDORA-2018-44fc201c4c)
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
--------------------------------------------------------------------------------
Update Information:
Proper fix for python3-bind subpackage directory ownership (#1522944)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1522944 - spec file should own python module directories
https://bugzilla.redhat.com/show_bug.cgi?id=1522944
--------------------------------------------------------------------------------
================================================================================
cargo-0.24.0-1.fc27 (FEDORA-2018-d5eb234853)
Rust's package manager and build tool
--------------------------------------------------------------------------------
Update Information:
New versions of Rust and Cargo -- see the release notes for [1.23](https://blog
.rust-lang.org/2018/01/04/Rust-1.23.html).
--------------------------------------------------------------------------------
================================================================================
flmsg-4.0.4-1.fc27 (FEDORA-2018-0e5bd23829)
Fast Light Message Amateur Radio Forms Manager
--------------------------------------------------------------------------------
Update Information:
Version 4.0.4 - Maintenance release Documentation update * Update
documentation describing file transfers File Transfer * Add user
configurable compression of file transfers unlikely define for OS X G4 build
* Insure that utils.h and utils.cxx are included in build Calendar widget
* Fix to year display bug Min Mode List * Update list of compatible
fldigi modes
--------------------------------------------------------------------------------
================================================================================
getdns-1.3.0-3.fc27 (FEDORA-2018-56f90c130b)
Modern asynchronous API to the DNS
--------------------------------------------------------------------------------
Update Information:
Minor fixup for previous patch, Provides: stubby ---- Updated to 1.3.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1462043 - getdns-1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1462043
--------------------------------------------------------------------------------
================================================================================
glib2-2.54.3-1.fc27 (FEDORA-2018-4745a9bbeb)
A library of handy utility functions
--------------------------------------------------------------------------------
Update Information:
glib 2.54.3 release, fixing the following bugs: - 691436 glib-mkenums output
arch dependent - 761102 Increase performance for main loop - 776147
gio/glocalfilemonitor.c doesn't handle case G_FILE_MONITOR_EVENT_MOVE... -
779182 xdg-open fails with gio open for some uris - 782057 Unit tests fail in
run-assert-msg-test.sh - 785113 glib-mkenums Python port fixes - 788990
Include licensing information in output from glib-mkenums, glib-genma... -
789637 glib-mkenums: Fails when --ouput file does not exist - 789894 Text tool
has color from previous line, when overwriting existing text - 790030
GResource/GVariant fails to load from non-pointer aligned memory - 790093 gio-
tool: fix inverted logic in monitor tool - 790126 gengiotypefuncs.py is missing
from tarballs - 790829 glib-genmarshal --body must not generate alias
implementations - 790934 gtester doesn't handle skipped tests - 791235 Fix
gschema.dtd regarding flags. - 791267 Make gschema.dtd usable. - 791296
gtester-report: fix range usage when running as python3 app - 791325 Gio
handling of thumbnail:: attribute namespace causes inconsistent b... - 791334
gbinding.c:898: The target object of type GNetworkAddress has no prop... -
791337 Crash opening URIs with g_desktop_app_info_launch_uris_with_spawn() -
791720 Criticals in gio/xdp-dbus.h leading to crash under flatpak - 791744
gmenumodel test sometimes fails: assertion failed (items_changed_coun... -
791754 gdbus-peer test intermittently fails: assertion 'source->ref_count > ...
- 791906 GSocketListenerClass.event has wrong signature This update also
includes a new timedatex build, fixing an issue that causes 100% processor use
with the new glib 2.54.3 release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450628 - timedatex high CPU usage
https://bugzilla.redhat.com/show_bug.cgi?id=1450628
--------------------------------------------------------------------------------
================================================================================
imsettings-1.7.3-2.fc27 (FEDORA-2018-1fa79bbe67)
Delivery framework for general Input Method configuration
--------------------------------------------------------------------------------
Update Information:
This update fixes the unbound variable error which happened when do "set -u".
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1533079 - xinit script unbound variable
https://bugzilla.redhat.com/show_bug.cgi?id=1533079
--------------------------------------------------------------------------------
================================================================================
indi-aagcloudwatcher-1.6.2-1.fc27 (FEDORA-2018-197bc8b83e)
INDI driver for the AAG Cloud Watcher
--------------------------------------------------------------------------------
Update Information:
Update to INDI 1.6.2 and KStars 2.9.1, containing several bugfixes and
improvements, but also new supported devices: + Added 10Micron Mount support.
+ Added spectrum support and libDSPAU. + Added NexDome support. + Added
Pyxis Rotator support. + Added Pegasus Focuser support. + Added MBox Weather
box support. + Added SnapCap dust cap and flat panel support. + Added Sesto-
Senso focuser support. + Added USB_DewPoint support. + Added GPS-NMEA
sources support. + Added Gemini Telescope Design Integra85 Focusing Rotator
WIP support. + Added Lunatico's Armadillo and Platypus support. + IOptron
fixes and improvements. + More NextstarEvo improvements. + Dedicated Guider
Simulator. + EQMod Horizon fixes. + Skywatcher Alt-Az Mount & Syncscan fixes
and improvements including guide support. + StarSense support in Celestron
Driver. + Improvements to mount parking & unparking. + New experimental
Astrophysics Driver. + Support for Losmandy UDP protocol. + Fixed Dome
slaving slew and tracking. + Added Radio Antenna Simulator. + New INDI
Rotator Interface. + UDEV rule to disable automount of DSLR cameras. + Sky
Quality Meter simulator. + Improvements to INDI GPS drivers. + TCFS Fixes.
+ SkySensorPC2000 fixes. + Fixed WatchDog behavior in case of unavailable
dome.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532226 - libindi-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532226
--------------------------------------------------------------------------------
================================================================================
indi-apogee-1.6.2-1.fc27 (FEDORA-2018-197bc8b83e)
The INDI driver for Apogee Alta (U & E) line of CCDs
--------------------------------------------------------------------------------
Update Information:
Update to INDI 1.6.2 and KStars 2.9.1, containing several bugfixes and
improvements, but also new supported devices: + Added 10Micron Mount support.
+ Added spectrum support and libDSPAU. + Added NexDome support. + Added
Pyxis Rotator support. + Added Pegasus Focuser support. + Added MBox Weather
box support. + Added SnapCap dust cap and flat panel support. + Added Sesto-
Senso focuser support. + Added USB_DewPoint support. + Added GPS-NMEA
sources support. + Added Gemini Telescope Design Integra85 Focusing Rotator
WIP support. + Added Lunatico's Armadillo and Platypus support. + IOptron
fixes and improvements. + More NextstarEvo improvements. + Dedicated Guider
Simulator. + EQMod Horizon fixes. + Skywatcher Alt-Az Mount & Syncscan fixes
and improvements including guide support. + StarSense support in Celestron
Driver. + Improvements to mount parking & unparking. + New experimental
Astrophysics Driver. + Support for Losmandy UDP protocol. + Fixed Dome
slaving slew and tracking. + Added Radio Antenna Simulator. + New INDI
Rotator Interface. + UDEV rule to disable automount of DSLR cameras. + Sky
Quality Meter simulator. + Improvements to INDI GPS drivers. + TCFS Fixes.
+ SkySensorPC2000 fixes. + Fixed WatchDog behavior in case of unavailable
dome.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532226 - libindi-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532226
--------------------------------------------------------------------------------
================================================================================
indi-eqmod-1.6.2-1.fc27 (FEDORA-2018-197bc8b83e)
INDI driver providing support for SkyWatcher Protocol
--------------------------------------------------------------------------------
Update Information:
Update to INDI 1.6.2 and KStars 2.9.1, containing several bugfixes and
improvements, but also new supported devices: + Added 10Micron Mount support.
+ Added spectrum support and libDSPAU. + Added NexDome support. + Added
Pyxis Rotator support. + Added Pegasus Focuser support. + Added MBox Weather
box support. + Added SnapCap dust cap and flat panel support. + Added Sesto-
Senso focuser support. + Added USB_DewPoint support. + Added GPS-NMEA
sources support. + Added Gemini Telescope Design Integra85 Focusing Rotator
WIP support. + Added Lunatico's Armadillo and Platypus support. + IOptron
fixes and improvements. + More NextstarEvo improvements. + Dedicated Guider
Simulator. + EQMod Horizon fixes. + Skywatcher Alt-Az Mount & Syncscan fixes
and improvements including guide support. + StarSense support in Celestron
Driver. + Improvements to mount parking & unparking. + New experimental
Astrophysics Driver. + Support for Losmandy UDP protocol. + Fixed Dome
slaving slew and tracking. + Added Radio Antenna Simulator. + New INDI
Rotator Interface. + UDEV rule to disable automount of DSLR cameras. + Sky
Quality Meter simulator. + Improvements to INDI GPS drivers. + TCFS Fixes.
+ SkySensorPC2000 fixes. + Fixed WatchDog behavior in case of unavailable
dome.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532226 - libindi-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532226
--------------------------------------------------------------------------------
================================================================================
indi-gphoto-1.6.2-1.fc27 (FEDORA-2018-197bc8b83e)
INDI driver providing support for gPhoto
--------------------------------------------------------------------------------
Update Information:
Update to INDI 1.6.2 and KStars 2.9.1, containing several bugfixes and
improvements, but also new supported devices: + Added 10Micron Mount support.
+ Added spectrum support and libDSPAU. + Added NexDome support. + Added
Pyxis Rotator support. + Added Pegasus Focuser support. + Added MBox Weather
box support. + Added SnapCap dust cap and flat panel support. + Added Sesto-
Senso focuser support. + Added USB_DewPoint support. + Added GPS-NMEA
sources support. + Added Gemini Telescope Design Integra85 Focusing Rotator
WIP support. + Added Lunatico's Armadillo and Platypus support. + IOptron
fixes and improvements. + More NextstarEvo improvements. + Dedicated Guider
Simulator. + EQMod Horizon fixes. + Skywatcher Alt-Az Mount & Syncscan fixes
and improvements including guide support. + StarSense support in Celestron
Driver. + Improvements to mount parking & unparking. + New experimental
Astrophysics Driver. + Support for Losmandy UDP protocol. + Fixed Dome
slaving slew and tracking. + Added Radio Antenna Simulator. + New INDI
Rotator Interface. + UDEV rule to disable automount of DSLR cameras. + Sky
Quality Meter simulator. + Improvements to INDI GPS drivers. + TCFS Fixes.
+ SkySensorPC2000 fixes. + Fixed WatchDog behavior in case of unavailable
dome.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532226 - libindi-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532226
--------------------------------------------------------------------------------
================================================================================
indi-sx-1.6.2-1.fc27 (FEDORA-2018-197bc8b83e)
INDI driver providing support for Starlight Xpress devices
--------------------------------------------------------------------------------
Update Information:
Update to INDI 1.6.2 and KStars 2.9.1, containing several bugfixes and
improvements, but also new supported devices: + Added 10Micron Mount support.
+ Added spectrum support and libDSPAU. + Added NexDome support. + Added
Pyxis Rotator support. + Added Pegasus Focuser support. + Added MBox Weather
box support. + Added SnapCap dust cap and flat panel support. + Added Sesto-
Senso focuser support. + Added USB_DewPoint support. + Added GPS-NMEA
sources support. + Added Gemini Telescope Design Integra85 Focusing Rotator
WIP support. + Added Lunatico's Armadillo and Platypus support. + IOptron
fixes and improvements. + More NextstarEvo improvements. + Dedicated Guider
Simulator. + EQMod Horizon fixes. + Skywatcher Alt-Az Mount & Syncscan fixes
and improvements including guide support. + StarSense support in Celestron
Driver. + Improvements to mount parking & unparking. + New experimental
Astrophysics Driver. + Support for Losmandy UDP protocol. + Fixed Dome
slaving slew and tracking. + Added Radio Antenna Simulator. + New INDI
Rotator Interface. + UDEV rule to disable automount of DSLR cameras. + Sky
Quality Meter simulator. + Improvements to INDI GPS drivers. + TCFS Fixes.
+ SkySensorPC2000 fixes. + Fixed WatchDog behavior in case of unavailable
dome.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532226 - libindi-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532226
--------------------------------------------------------------------------------
================================================================================
kernel-4.14.13-300.fc27 (FEDORA-2018-21a7ad920c)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.14.13 stable kernel update contains a number of important fixes across the
tree. This is also the first update to contain some spectre mitigations. Some
patches for variant 1 as well as the initial retpoline build for variant 2.
These variant 2 mitigations will improve with further patches, and once compiler
support is improved.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531182 - Out-of-tree kernel modules fail to build on aarch64
https://bugzilla.redhat.com/show_bug.cgi?id=1531182
[ 2 ] Bug #1532058 - CONFIG_RESET_ATTACK_MITIGATION forces Lenovo X220 to hard power off
and power on instead of reboot
https://bugzilla.redhat.com/show_bug.cgi?id=1532058
[ 3 ] Bug #1514969 - Bug in backlight handling renders system almost unusable
https://bugzilla.redhat.com/show_bug.cgi?id=1514969
--------------------------------------------------------------------------------
================================================================================
keycloak-httpd-client-install-0.8-1.fc27 (FEDORA-2018-2299cfb708)
Tools to configure Apache HTTPD as Keycloak client
--------------------------------------------------------------------------------
Update Information:
Two minor security issues were discovered and were assigned CVE's.
CVE-2017-15112 concerns the ability to pass a password on the command line where
it could be exposed. That option has been deprecated. See the man page for
multiple ways to pass the password. CVE-2017-15111 corrects the default location
of a log file when running the low level utilities directly, it had placed the
log file in /tmp where a symbolic link could be created pointing to another
file. The risk with CVE-2017-15111 is very low as this feature is seldom used,
it's mostly for developers.
--------------------------------------------------------------------------------
================================================================================
kstars-2.9.1-1.fc27 (FEDORA-2018-197bc8b83e)
Desktop Planetarium
--------------------------------------------------------------------------------
Update Information:
Update to INDI 1.6.2 and KStars 2.9.1, containing several bugfixes and
improvements, but also new supported devices: + Added 10Micron Mount support.
+ Added spectrum support and libDSPAU. + Added NexDome support. + Added
Pyxis Rotator support. + Added Pegasus Focuser support. + Added MBox Weather
box support. + Added SnapCap dust cap and flat panel support. + Added Sesto-
Senso focuser support. + Added USB_DewPoint support. + Added GPS-NMEA
sources support. + Added Gemini Telescope Design Integra85 Focusing Rotator
WIP support. + Added Lunatico's Armadillo and Platypus support. + IOptron
fixes and improvements. + More NextstarEvo improvements. + Dedicated Guider
Simulator. + EQMod Horizon fixes. + Skywatcher Alt-Az Mount & Syncscan fixes
and improvements including guide support. + StarSense support in Celestron
Driver. + Improvements to mount parking & unparking. + New experimental
Astrophysics Driver. + Support for Losmandy UDP protocol. + Fixed Dome
slaving slew and tracking. + Added Radio Antenna Simulator. + New INDI
Rotator Interface. + UDEV rule to disable automount of DSLR cameras. + Sky
Quality Meter simulator. + Improvements to INDI GPS drivers. + TCFS Fixes.
+ SkySensorPC2000 fixes. + Fixed WatchDog behavior in case of unavailable
dome.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532226 - libindi-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532226
--------------------------------------------------------------------------------
================================================================================
libindi-1.6.2-1.fc27 (FEDORA-2018-197bc8b83e)
Instrument Neutral Distributed Interface
--------------------------------------------------------------------------------
Update Information:
Update to INDI 1.6.2 and KStars 2.9.1, containing several bugfixes and
improvements, but also new supported devices: + Added 10Micron Mount support.
+ Added spectrum support and libDSPAU. + Added NexDome support. + Added
Pyxis Rotator support. + Added Pegasus Focuser support. + Added MBox Weather
box support. + Added SnapCap dust cap and flat panel support. + Added Sesto-
Senso focuser support. + Added USB_DewPoint support. + Added GPS-NMEA
sources support. + Added Gemini Telescope Design Integra85 Focusing Rotator
WIP support. + Added Lunatico's Armadillo and Platypus support. + IOptron
fixes and improvements. + More NextstarEvo improvements. + Dedicated Guider
Simulator. + EQMod Horizon fixes. + Skywatcher Alt-Az Mount & Syncscan fixes
and improvements including guide support. + StarSense support in Celestron
Driver. + Improvements to mount parking & unparking. + New experimental
Astrophysics Driver. + Support for Losmandy UDP protocol. + Fixed Dome
slaving slew and tracking. + Added Radio Antenna Simulator. + New INDI
Rotator Interface. + UDEV rule to disable automount of DSLR cameras. + Sky
Quality Meter simulator. + Improvements to INDI GPS drivers. + TCFS Fixes.
+ SkySensorPC2000 fixes. + Fixed WatchDog behavior in case of unavailable
dome.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532226 - libindi-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532226
--------------------------------------------------------------------------------
================================================================================
matrix-synapse-0.26.0-1.fc27 (FEDORA-2018-4cbb48f225)
A Matrix reference homeserver written in Python using Twisted
--------------------------------------------------------------------------------
Update Information:
See
https://github.com/matrix-org/synapse/releases/tag/v0.26.0 for the release
notes.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1505206 - matrix-synapse-0.26.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1505206
--------------------------------------------------------------------------------
================================================================================
module-build-service-copr-0.4-1.fc27 (FEDORA-2018-07eb559cf1)
Copr plugin for the Module Build Service
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
================================================================================
perl-Data-Dumper-2.167-398.fc27 (FEDORA-2018-79f6b5c5fc)
Stringify perl data structures, suitable for printing and eval
--------------------------------------------------------------------------------
Update Information:
This relase fixes quoting upgraded glob names in the Dumper ouput.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532524 - perl-Data-Dumper-2.161-3.fc26 breaks perl-Catalyst-Runtime tests
https://bugzilla.redhat.com/show_bug.cgi?id=1532524
--------------------------------------------------------------------------------
================================================================================
php-cs-fixer-2.10.0-1.fc27 (FEDORA-2018-c5661efb69)
A tool to automatically fix PHP code style
--------------------------------------------------------------------------------
Update Information:
**Changelog for v2.10.0** * feature #3290 Add PhpdocOpeningClosingFixer
(Slamdunk, keradus) * feature #3327 Add MultilineWhitespaceBeforeSemicolonsFixer
(egircys, keradus) * feature #3351 PhuUnit: migrate getMock to createPartialMock
when arguments count is 2 (Slamdunk) * feature #3362 Add
BacktickToShellExecFixer (Slamdunk) * minor #3285 PHPUnit - use protective
traits (keradus) * minor #3329 ConfigurationResolver - detect deprecated fixers
(keradus, SpacePossum) * minor #3343 Tokens - improve block end lookup (keradus)
* minor #3360 Adjust Symfony ruleset (keradus) * minor #3361
no_extra_consecutive_blank_lines - rename to no_extra_blank_lines (with BC
layer) (keradus) * minor #3363 progress-type - name main option value 'dots'
(keradus) * minor #3404 Deprecate "use_yoda_style" in IsNullFixer (kubawerlos,
keradus) * minor #3418 ConfigurableFixerInterface,
ConfigurationDefinitionFixerInterface - update deprecations (keradus) * minor
#3419 Dont use deprecated fixer in itest (keradus) ---- **Changelog for
v2.9.1** * bug #3298 DiffConsoleFormatter - fix output escaping. (SpacePossum)
* bug #3312 PhpUnitTestAnnotationFixer: Only remove prefix if it really is a
prefix (localheinz) * bug #3318 SingleLineCommentStyleFixer - fix closing tag
inside comment causes an error (kubawerlos) * bug #3334
ExplicitStringVariableFixer: handle parsed array and object (Slamdunk) * bug
#3337 BracesFixer: nowdoc bug on template files (Slamdunk) * bug #3349 Fix stdin
handling and add tests for it (keradus) * bug #3350
PhpUnitNoExpectationAnnotationFixer - fix handling of multiline
expectedExceptionMessage annotation (Slamdunk) * bug #3352
FunctionToConstantFixer - bugfix for get_class with leading backslash
(kubawerlos) * bug #3359 BracesFixer - handle comment for content outside of
given block (keradus) * bug #3371 IsNullFixer must be run before YodaStyleFixer
(kubawerlos) * bug #3373 PhpdocAlignFixer - Fix removing of everything after @
when there is a space after the @ (ntzm) * bug #3415 FileFilterIterator - input
checks and utests (SpacePossum, keradus) * bug #3420 SingleLineCommentStyleFixer
- fix 'strpos() expects parameter 1 to be string, boolean given' (keradus,
SpacePossum) * bug #3428 Fix archive analysing (keradus) * bug #3429 Fix archive
analysing (keradus) * minor #3137 PHPUnit - use common base class (keradus) *
minor #3311 FinalInternalClassFixer - fix typo (localheinz) * minor #3328 Remove
duplicated space in exceptions (keradus) * minor #3342
PhpUnitDedicateAssertFixer - Remove unexistent method is_boolean
(carusogabriel) * minor #3345 StdinFileInfo - fix __toString (keradus) * minor
#3346 StdinFileInfo - drop getContents (keradus) * minor #3347 DX: reapply
newest CS (keradus) * minor #3365 COOKBOOK-FIXERS.md - update to provide
definition instead of description (keradus) * minor #3370 AbstractFixer - FQCN
in in exceptions (Slamdunk) * minor #3372 ProjectCodeTest - fix comment
(keradus) * minor #3393 Method call typos (Slamdunk, keradus) * minor #3402
Always provide delimiter to `preg_quote` calls (ntzm) * minor #3403 Remove
unused import (ntzm) * minor #3405 Fix `fopen` mode (ntzm) * minor #3407
CombineConsecutiveIssetsFixer - Improve description (kubawerlos) * minor #3408
Improving fixers descriptions (kubawerlos) * minor #3409 move itests from misc
to priority (keradus) * minor #3411 Better type hinting for
AbstractFixerTestCase::$fixer (kubawerlos) * minor #3412 Convert `strtolower`
inside `strpos` to just `stripos` (ntzm) * minor #3421 DX: Use ::class (keradus)
* minor #3424 AbstractFixerTest: fix expectException arguments (Slamdunk,
keradus) * minor #3425 FixerFactoryTest - test that priority pair fixers have
itest (keradus, SpacePossum) * minor #3427 ConfigurationResolver: fix @return
annotation (Slamdunk)
--------------------------------------------------------------------------------
================================================================================
python-importanize-0.6.2-1.fc27 (FEDORA-2018-aafb602e51)
Utility for organizing Python imports using PEP8 or custom rules
--------------------------------------------------------------------------------
Update Information:
Update to upstream latest version 0.6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1532418 - python-importanize-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532418
--------------------------------------------------------------------------------
================================================================================
recap-1.3.0-1.fc27 (FEDORA-2018-2c6d457a26)
Generates reports of various system information
--------------------------------------------------------------------------------
Update Information:
- Latest upstream - Move config file from /etc/recap to /etc/recap.conf
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1525746 - recap-1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1525746
--------------------------------------------------------------------------------
================================================================================
rho-0.0.31-2.fc27 (FEDORA-2018-b78aa044ce)
An SSH system profiler
--------------------------------------------------------------------------------
Update Information:
# Testing Rho To set up Rho, you create profiles that control how to run each
scan. - Authentication profiles contain user credentials for a user with
sufficient authority to complete the scan (for example, a root user or one with
root-level access obtained through -sudo privilege escalation). - Network
profiles contain network identifiers (for example, a hostname, IP address, or
range of IP addresses) and the authentication profiles to be used for a scan.
Complete the following steps, repeating them as necessary to access all parts of
your environment that you want to scan: 1. Create at least one authentication
profile with root-level access to Rho: ``` rho auth add --name auth_name
--username root_name(--sshkeyfile key_file | --password) ``` a. At the Rho
vault password prompt, create a new Rho vault password. This password is
required to access the encrypted Rho data, such as authentication and network
profiles, scan data, and other information. b. If you did not use the
sshkeyfile option to provide an SSH key for the username value, enter the
password of the user with root-level access at the connection password prompt.
For example, for an authentication profile where the authentication profile name
is roothost1, the user with root-level access is root, and the SSH key for the
user is in the path ~/.ssh/id_rsa, you would enter the following command: ```
rho auth add --name roothost1 --username root --sshkeyfile ~/.ssh/id_rsa ``` You
can also use the sudo-password option to create an authentication profile for a
user with root-level access who requires a password to obtain this privilege.
You can use the sudo-password option with either the sshkeyfile or the password
option. For example, for an authentication profile where the authentication
profile name is sudouser1, the user with root-level access is sysadmin, and the
access is obtained through the password option, you would enter the following
command: ``` rho auth add --name sudouser1 --username sysadmin --password
--sudo-password ``` After you enter this command, you are prompted to enter two
passwords. First, you would enter the connection password for the username user,
and then you would enter the password for the sudo command. 2. Create at least
one network profile that specifies one or more network identifiers, such as a
host name, an IP address, a list of IP addresses, or an IP range, and one or
more authentication profiles to be used for the scan: ``` rho profile add --name
profile_name --hosts host_name_or_file --auth auth_name ``` For example, for a
network profile where the name of the network profile is mynetwork, the network
to be scanned is the 192.0.2.0/24 subnet, and the authentication profiles that
are used to run the scan are roothost1 and roothost2, you would enter the
following command: ``` rho profile add --name mynetwork --hosts 192.0.2.[1:254]
--auth roothost1 roothost2 ``` You can also use a file to pass in the network
identifiers. If you use a file to enter multiple network identifiers, such as
multiple individual IP addresses, enter each on a single line. For example, for
a network profile where the path to this file is /home/user1/hosts_file, you
would enter the following command: ``` rho profile add --name mynetwork --hosts
/home/user1/hosts_file --auth roothost1 roothost2 ``` # Running a scan Run the
scan by using the scan command, specifying a network profile for the profile
option and a location to store the output as a file in the comma-separated
variables (CSV) format for the reportfile option: ``` rho scan --profile
profile_name --reportfile filename.csv ``` For example, if you want to use the
network profile mynetwork and save the report as mynetwork_scan1.csv, you would
enter the following command: ``` rho scan --profile mynetwork --reportfile
mynetwork_scan1.csv ```
--------------------------------------------------------------------------------
================================================================================
rootsh-1.5.3-17.fc27 (FEDORA-2018-d2b135d345)
Shell wrapper for auditing
--------------------------------------------------------------------------------
Update Information:
Fix permissions on rootsh log directory to limit it to root.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1526255 - rootsh log directory is world readable
https://bugzilla.redhat.com/show_bug.cgi?id=1526255
--------------------------------------------------------------------------------
================================================================================
ruby-2.4.3-86.fc27 (FEDORA-2018-75e780a7c2)
An interpreter of object-oriented scripting language
--------------------------------------------------------------------------------
Update Information:
Update to Ruby 2.4.3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1500654 - CVE-2017-0903 ruby: rubygems: Unsafe object deserialization through
YAML formatted gem specifications [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1500654
--------------------------------------------------------------------------------
================================================================================
rust-1.23.0-1.fc27 (FEDORA-2018-d5eb234853)
The Rust Programming Language
--------------------------------------------------------------------------------
Update Information:
New versions of Rust and Cargo -- see the release notes for [1.23](https://blog
.rust-lang.org/2018/01/04/Rust-1.23.html).
--------------------------------------------------------------------------------
================================================================================
sox-14.4.2.0-13.fc27 (FEDORA-2018-448444341e)
A general purpose sound file conversion tool
--------------------------------------------------------------------------------
Update Information:
This bugfix resolves **CVE-2017-15371**
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1500570 - It is a reachable assertion abort in function sox_append_comment(in
formats.c:227) that will lead to denial of service attack
https://bugzilla.redhat.com/show_bug.cgi?id=1500570
--------------------------------------------------------------------------------
================================================================================
sox-14.4.2.0-14.fc27 (FEDORA-2018-b528f28c59)
A general purpose sound file conversion tool
--------------------------------------------------------------------------------
Update Information:
Resolves **CVE-2017-15370** ---- This bugfix resolves **CVE-2017-15371**
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1510917 - CVE-2017-15370 sox: Heap-based buffer overflow in the ImaExpandS
function
https://bugzilla.redhat.com/show_bug.cgi?id=1510917
--------------------------------------------------------------------------------
================================================================================
timedatex-0.5-2.fc27 (FEDORA-2018-4745a9bbeb)
D-Bus service for system clock and RTC settings
--------------------------------------------------------------------------------
Update Information:
glib 2.54.3 release, fixing the following bugs: - 691436 glib-mkenums output
arch dependent - 761102 Increase performance for main loop - 776147
gio/glocalfilemonitor.c doesn't handle case G_FILE_MONITOR_EVENT_MOVE... -
779182 xdg-open fails with gio open for some uris - 782057 Unit tests fail in
run-assert-msg-test.sh - 785113 glib-mkenums Python port fixes - 788990
Include licensing information in output from glib-mkenums, glib-genma... -
789637 glib-mkenums: Fails when --ouput file does not exist - 789894 Text tool
has color from previous line, when overwriting existing text - 790030
GResource/GVariant fails to load from non-pointer aligned memory - 790093 gio-
tool: fix inverted logic in monitor tool - 790126 gengiotypefuncs.py is missing
from tarballs - 790829 glib-genmarshal --body must not generate alias
implementations - 790934 gtester doesn't handle skipped tests - 791235 Fix
gschema.dtd regarding flags. - 791267 Make gschema.dtd usable. - 791296
gtester-report: fix range usage when running as python3 app - 791325 Gio
handling of thumbnail:: attribute namespace causes inconsistent b... - 791334
gbinding.c:898: The target object of type GNetworkAddress has no prop... -
791337 Crash opening URIs with g_desktop_app_info_launch_uris_with_spawn() -
791720 Criticals in gio/xdp-dbus.h leading to crash under flatpak - 791744
gmenumodel test sometimes fails: assertion failed (items_changed_coun... -
791754 gdbus-peer test intermittently fails: assertion 'source->ref_count > ...
- 791906 GSocketListenerClass.event has wrong signature This update also
includes a new timedatex build, fixing an issue that causes 100% processor use
with the new glib 2.54.3 release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1450628 - timedatex high CPU usage
https://bugzilla.redhat.com/show_bug.cgi?id=1450628
--------------------------------------------------------------------------------
================================================================================
urw-base35-fonts-20170801-4.fc27 (FEDORA-2018-74676ac3c1)
Core Font Set containing 35 freely distributable fonts from (URW)++
--------------------------------------------------------------------------------
Update Information:
This update contains several fixes and improvements, both for users & package
maintainers: * priority/ordering has been decreased even more [`60`->`61`] to
prevent these fonts from hijacking default system configuration * `*.otf`
format is now shipped as well, so the fonts can be used inside *LibreOffice* *
`devel` subpackage has been added, which now provides the
`%{urw_base35_fontpath}` macro. This macro provides full path to fonts location,
which is useful for some other packages. * `nimbus-sans-narrow` subpackage has
been merged into `nimbus-sans` subpackage * additional internal fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1496466 - URW fonts not available in LibreOffice
https://bugzilla.redhat.com/show_bug.cgi?id=1496466
--------------------------------------------------------------------------------
================================================================================
webkitgtk4-2.18.5-1.fc27 (FEDORA-2018-0590e4af13)
GTK+ Web content engine library
--------------------------------------------------------------------------------
Update Information:
This update includes improvements to mitigate the effects of Spectre
([
CVE-2017-5753](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753)
and [
CVE-2017-5715](https://cve.mitre.org/cgi-
bin/cvename.cgi?name=CVE-2017-5715)): * Disable SharedArrayBuffers from Web
API. * Reduce the precision of ���high��� resolution time to 1ms. Additional fixes:
* Fix API documentation generation with newer gtk-doc.
--------------------------------------------------------------------------------
================================================================================
xorg-x11-server-1.19.6-2.fc27 (FEDORA-2018-f9a505d6eb)
X.Org X11 X server
--------------------------------------------------------------------------------
Update Information:
Fix handling of devices with ID_INPUT=null, these should be ignored
--------------------------------------------------------------------------------
================================================================================
yarock-1.3.0-1.fc27 (FEDORA-2018-abda542548)
Lightweight, beautiful music player
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.0-1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1530578 - yarock-1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1530578
--------------------------------------------------------------------------------