The following Fedora 27 Security updates need testing:
Age URL
63
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c9395f9bec remctl-3.14-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6e6d8c314b
drupal8-8.4.6-3.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-825d37b810
opencv-3.2.0-15.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-70fac3f07e anki-2.0.50-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ff86925c3
memcached-1.5.7-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d275e6ff0c
scummvm-tools-2.0.0-1.fc27 scummvm-2.0.0-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9d1ff4b802
composer-1.6.4-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-335aec0507
libtiff-4.0.9-8.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ac1d9c2777 zsh-5.4.1-3.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b7a613ea5d
gsoap-2.8.49-4.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-97c275d576
boost-1.64.0-6.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-77533e644b
java-1.8.0-openjdk-1.8.0.171-1.b10.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
17
https://bodhi.fedoraproject.org/updates/FEDORA-2018-772fcd140c
linux-firmware-20180402-83.git8c1e439c.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5f72371a85
python-productmd-1.11-2.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-335aec0507
libtiff-4.0.9-8.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ea3f614267 samba-4.7.7-0.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e0a12453e8
libcgroup-0.41-17.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ecb0da3cb1
osinfo-db-20180416-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ae2c9dd927
python-urllib3-1.22-5.fc27 python-requests-2.18.4-2.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3085b9774
selinux-policy-3.13.1-283.32.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c31f1eccd
iptables-1.6.2-2.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fead989b97
gnome-software-3.28.1-1.fc27.1
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f9921ffc3
libtirpc-1.0.3-2.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-97c275d576
boost-1.64.0-6.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-83f08113c1
lua-socket-3.0-0.17.rc1.fc27
The following builds have been pushed to Fedora 27 updates-testing
appstream-data-27-11.fc27
bluez-5.49-3.fc27
caddy-0.10.11-5.fc27
community-mysql-5.7.22-1.fc27
coreutils-8.27-21.fc27
debmirror-2.26-2.fc27
dionaea-0.6.0-7.20180326git1748f3b.fc27
dmlite-1.10.2-1.fc27
electrum-3.1.3-1.fc27
findutils-4.6.0-19.fc27
gpxsee-5.9-1.fc27
hitch-1.4.8-1.fc27
kernel-4.16.3-200.fc27
mate-desktop-1.20.1-2.fc27
mate-panel-1.20.1-4.fc27
mate-settings-daemon-1.20.1-2.fc27
nss-3.36.1-1.0.fc27
nss-softokn-3.36.1-1.0.fc27
nss-util-3.36.1-1.0.fc27
openscad-2015.03.3-15.fc27
pam-u2f-1.0.6-1.fc27
perl-Carp-1.42-395.fc27
perl-Qt-4.14.3-14.fc27
php-mongodb-1.3.2-1.fc27
php-pecl-mongodb-1.4.3-1.fc27
php-sabre-vobject4-4.1.6-1.fc27
podman-0.4.3-1.git4c0d8b0.fc27
python-django-ajax-selects-1.7.0-1.fc27
python-django-helpdesk-0.2.7-1.fc27
python-importanize-0.6.3-3.fc27
qmapshack-1.11.1-1.fc27
qt-virt-manager-0.60.88-3.fc27
rpkg-1.53-2.fc27
ruby-2.4.4-88.fc27
systemtap-3.2-11.fc27
tng-1.8.2-1.fc27
toxcore-0.2.2-2.fc27
tracer-0.7.0-1.fc27
utox-0.17.0-1.fc27
xxhash-0.6.5-1.fc27
Details about builds:
================================================================================
appstream-data-27-11.fc27 (FEDORA-2018-d8ed52631a)
Fedora AppStream metadata
--------------------------------------------------------------------------------
Update Information:
New metadata version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Kalev Lember <klember(a)redhat.com> - 27-11
- New metadata version
--------------------------------------------------------------------------------
================================================================================
bluez-5.49-3.fc27 (FEDORA-2018-bf02f2b894)
Bluetooth utilities
--------------------------------------------------------------------------------
Update Information:
This update fixes a crash when the Bluetooth adapter does not support Bluetooth
Low-Energy.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 Bastien Nocera <bnocera(a)redhat.com> - 5.49-3
+ bluez-5.49-3
- Fix crash on non-LE adapters (#1567622)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1567622 - bluetoothd (bluez 5.49) crashes on start: core-dump
https://bugzilla.redhat.com/show_bug.cgi?id=1567622
--------------------------------------------------------------------------------
================================================================================
caddy-0.10.11-5.fc27 (FEDORA-2018-e099908b59)
HTTP/2 web server with automatic HTTPS
--------------------------------------------------------------------------------
Update Information:
- Add geoip plugin ---- - Enable s390x - Disable googlecloud and route53 dns
providers on EL7 due to dependency issues
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Carl George <carl(a)george.computer> - 0.10.11-5
- Add geoip plugin
* Tue Apr 17 2018 Carl George <carl(a)george.computer> - 0.10.11-4
- Correct ExclusiveArch fallback
* Mon Apr 16 2018 Carl George <carl(a)george.computer> - 0.10.11-3
- Enable s390x
- Disable googlecloud and route53 dns providers on EL7 due to dependency issues
--------------------------------------------------------------------------------
================================================================================
community-mysql-5.7.22-1.fc27 (FEDORA-2018-7025a5c25d)
MySQL client programs and shared libraries
--------------------------------------------------------------------------------
Update Information:
**MySQL 5.7.22** **Changelog**
https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-22.html **CVEs fixed**
CVE-2018-2755 CVE-2018-2758 CVE-2018-2759 CVE-2018-2761 CVE-2018-2762
CVE-2018-2766 CVE-2018-2769 CVE-2018-2771 CVE-2018-2773 CVE-2018-2775
CVE-2018-2776 CVE-2018-2777 CVE-2018-2778 CVE-2018-2779 CVE-2018-2780
CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2786 CVE-2018-2787
CVE-2018-2810 CVE-2018-2812 CVE-2018-2813 CVE-2018-2816 CVE-2018-2817
CVE-2018-2818 CVE-2018-2819 CVE-2018-2839 CVE-2018-2846
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Michal Schorm <mschorm(a)redhat.com> - 5.7.22-1
- Rebase to 5.7.22 version
- CVE fixes: #1568963
CVE-2018-2755 CVE-2018-2758 CVE-2018-2759 CVE-2018-2761 CVE-2018-2762
CVE-2018-2766 CVE-2018-2769 CVE-2018-2771 CVE-2018-2773 CVE-2018-2775
CVE-2018-2776 CVE-2018-2777 CVE-2018-2778 CVE-2018-2779 CVE-2018-2780
CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2786 CVE-2018-2787
CVE-2018-2810 CVE-2018-2812 CVE-2018-2813 CVE-2018-2816 CVE-2018-2817
CVE-2018-2818 CVE-2018-2819 CVE-2018-2839 CVE-2018-2846
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568963 - CVE-2018-2755 CVE-2018-2758 CVE-2018-2759 CVE-2018-2761
CVE-2018-2762 CVE-2018-2766 CVE-2018-2769 CVE-2018-2771 CVE-2018-2773 CVE-2018-2775
CVE-2018-2776 CVE-2018-2777 CVE-2018-2778 CVE-2018-2779 ... community-mysql: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1568963
--------------------------------------------------------------------------------
================================================================================
coreutils-8.27-21.fc27 (FEDORA-2018-72c7737ac6)
A set of basic GNU tools commonly used in shell scripts
--------------------------------------------------------------------------------
Update Information:
- fix crash caused by mistakenly enabled leaf optimization (#1558249)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 Kamil Dudka <kdudka(a)redhat.com> - 8.27-21
- fix crash caused by mistakenly enabled leaf optimization (#1558249)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1558249 - [abrt] findutils: leave_dir(): find killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1558249
--------------------------------------------------------------------------------
================================================================================
debmirror-2.26-2.fc27 (FEDORA-2018-20b9a3e8a3)
Debian partial mirror script, with ftp and package pool support
--------------------------------------------------------------------------------
Update Information:
Requires /usr/bin/pod2man instead perl-podlators (need it for el6) Add
License tag Add Requires: perl-Net-INET6Glue ---- Update to Debian stable
version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 S��rgio Basto <sergio(a)serjux.com> - 2.26-2
- Requires /usr/bin/pod2man instead perl-podlators (need it for el6)
- Add License tag
- Add Requires: perl-Net-INET6Glue
* Thu Apr 19 2018 S��rgio Basto <sergio(a)serjux.com> - 2.26-1
- Update to Debian stable version
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.16-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568654 - debmirror not syncing required components
https://bugzilla.redhat.com/show_bug.cgi?id=1568654
[ 2 ] Bug #1258928 - No epel7 build of debmirror available
https://bugzilla.redhat.com/show_bug.cgi?id=1258928
--------------------------------------------------------------------------------
================================================================================
dionaea-0.6.0-7.20180326git1748f3b.fc27 (FEDORA-2018-80215c3776)
Low interaction honeypot
--------------------------------------------------------------------------------
Update Information:
New package: dionaea Summary: Low interaction honeypot Description: Dionaea
honeypot is meant to be a nepenthes successor, embedding python as scripting
language, using libemu to detect shellcodes, supporting ipv6 and tls.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1564716 - Review Request: dionaea - Low interaction honeypot
https://bugzilla.redhat.com/show_bug.cgi?id=1564716
--------------------------------------------------------------------------------
================================================================================
dmlite-1.10.2-1.fc27 (FEDORA-2018-447cc35df6)
Lcgdm grid data management and storage framework
--------------------------------------------------------------------------------
Update Information:
* new upstream release ---- * new upstream release ---- dmlite 1.10 is a
major update to DPM internals including Dome. ---- dmlite 1.10 is a major
update to DPM internals including Dome. ---- dmlite 1.10 is a major update to
DPM internals including Dome. ---- * new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Andrea Manzi <amanzi(a)cern.ch> - 1.10.2-1
- new upstream release
* Thu Apr 5 2018 Oliver Keeble <oliver.keeble(a)cern.ch> - 1.10.1-4
- Fix dependency on epel7/el6
* Fri Mar 23 2018 Oliver Keeble <oliver.keeble(a)cern.ch> - 1.10.1-3
- New upstream 1.10.1l
* Mon Mar 12 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 1.10.0-2
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Fri Feb 16 2018 Andrea Manzi <amanzi(a)cern.ch> - 1.10.0-1
- new upstream release
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.8-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Nov 29 2017 Igor Gnatenko <ignatenko(a)redhat.com> - 0.8.8-5
- Rebuild for protobuf 3.5
* Tue Nov 14 2017 Andrea Manzi <amanzi(a)cern.ch> - 0.8.8-4
- new version to fix build with rawhide
* Mon Nov 13 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 0.8.8-3
- Rebuild for protobuf 3.4
* Thu Sep 21 2017 Andrea Manzi <amanzi(a)cern.ch> - 0.8.8-2
- change mysql-devel to mariadb-connector-c-devel
* Sat Aug 19 2017 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.8.7-6
- Python 2 binary package renamed to python2-dmlite
See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
--------------------------------------------------------------------------------
================================================================================
electrum-3.1.3-1.fc27 (FEDORA-2018-75875cd0e0)
A lightweight Bitcoin Client
--------------------------------------------------------------------------------
Update Information:
Updated to 3.1.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 Jonny Heggheim <hegjon(a)gmail.com> - 3.1.3-1
- Updated to version 3.1.3
--------------------------------------------------------------------------------
================================================================================
findutils-4.6.0-19.fc27 (FEDORA-2018-72c7737ac6)
The GNU versions of find utilities (find and xargs)
--------------------------------------------------------------------------------
Update Information:
- fix crash caused by mistakenly enabled leaf optimization (#1558249)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 Kamil Dudka <kdudka(a)redhat.com> - 1:4.6.0-19
- fix crash caused by mistakenly enabled leaf optimization (#1558249)
* Tue Mar 6 2018 Kamil Dudka <kdudka(a)redhat.com> - 1:4.6.0-18
- fix build failure with glibc-2.28
* Mon Feb 19 2018 Kamil Dudka <kdudka(a)redhat.com> - 1:4.6.0-17
- add explicit BR for the gcc compiler
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1558249 - [abrt] findutils: leave_dir(): find killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1558249
--------------------------------------------------------------------------------
================================================================================
gpxsee-5.9-1.fc27 (FEDORA-2018-f70eacc417)
GPS log file viewer and analyzer
--------------------------------------------------------------------------------
Update Information:
News in version **5.9**: - Fixed HTTP redirects handling - Proper fix of the
zoom changes/offset bugs (resolved only partially in 5.8) ---- News in version
**5.8**: - Fixed the irritating map zoom changes on OSM maps switching and the
1px map center offset bug - Added Polish translation News in version **5.7**:
- Added OziExplorer data files (plt, rte, wpt) support - OS X file icons update
(including missing GPX icon)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 Nikola Forr�� <nforro(a)redhat.com> - 5.9-1
- Update to version 5.9
resolves: #1569761
* Thu Apr 19 2018 Nikola Forr�� <nforro(a)redhat.com> - 5.8-1
- Update to version 5.8
resolves: #1568190
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1569761 - gpxsee-5.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1569761
[ 2 ] Bug #1568190 - gpxsee-5.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1568190
--------------------------------------------------------------------------------
================================================================================
hitch-1.4.8-1.fc27 (FEDORA-2018-32db7b3a41)
Network proxy that terminates TLS/SSL connections
--------------------------------------------------------------------------------
Update Information:
New upstream release hitch-1.4.8. Collected update for 1.4.7 and 1.4.8. See
https://github.com/varnish/hitch/blob/master/CHANGES.rst for detailed changelog.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Ingvar Hagelund <ingvar(a)redpill-linpro.com> - 1.4.8-1
- New upstream release 1.4.8, closes bz 1569501
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Mon Sep 4 2017 Ingvar Hagelund <ingvar(a)redpill-linpro.com> - 1.4.6-4
- Rebuilt against openssl-1.0.2k for epel7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1569501 - hitch-1.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1569501
--------------------------------------------------------------------------------
================================================================================
kernel-4.16.3-200.fc27 (FEDORA-2018-b6be90818d)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
Rebase to v4.16.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Jeremy Cline <jeremy(a)jcline.org> - 4.16.3-200
- Linux v4.16.3
* Thu Apr 19 2018 Peter Robinson <pbrobinson(a)fedoraproject.org>
- Enable UFS storage options on ARM
- Add support for Pocket Beagle
* Tue Apr 17 2018 Peter Robinson <pbrobinson(a)fedoraproject.org>
- Enable drivers for Xilinx ZYMQ-MP Ultra96
* Mon Apr 16 2018 Laura Abbott <labbott(a)fedoraproject.org>
- Fix for hang on removal of macsec module (rhbz 1566410)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531927 - lirc_zilog ceased working with kernel 4.14
https://bugzilla.redhat.com/show_bug.cgi?id=1531927
--------------------------------------------------------------------------------
================================================================================
mate-desktop-1.20.1-2.fc27 (FEDORA-2018-e285c92848)
Shared code for mate-panel, mate-session, mate-file-manager, etc
--------------------------------------------------------------------------------
Update Information:
- improve HIDPI support - fix menubar if using panel auto-hide - fix
https://github.com/mate-desktop/mate-panel/issues/773 - fiz rhbz (#1493289) -
recommends fortune-mod
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.1-2
- improve background handling for HIDPI monitors
- use
https://github.com/mate-desktop/mate-desktop/pull/310
--------------------------------------------------------------------------------
================================================================================
mate-panel-1.20.1-4.fc27 (FEDORA-2018-e285c92848)
MATE Desktop panel and applets
--------------------------------------------------------------------------------
Update Information:
- improve HIDPI support - fix menubar if using panel auto-hide - fix
https://github.com/mate-desktop/mate-panel/issues/773 - fiz rhbz (#1493289) -
recommends fortune-mod
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.1-4
- fiz rhbz (#1493289)
- recommends fortune-mod
* Thu Apr 19 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.1-3
- fix menubar if using panel auto-hide
- fix
https://github.com/mate-desktop/mate-panel/issues/773
* Wed Apr 18 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.1-2
- switch to --with-in-process-applets=all
- better for HIDPI
--------------------------------------------------------------------------------
================================================================================
mate-settings-daemon-1.20.1-2.fc27 (FEDORA-2018-e285c92848)
MATE Desktop settings daemon
--------------------------------------------------------------------------------
Update Information:
- improve HIDPI support - fix menubar if using panel auto-hide - fix
https://github.com/mate-desktop/mate-panel/issues/773 - fiz rhbz (#1493289) -
recommends fortune-mod
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.1-2
- improve background handling for HIDPI monitors
- use
https://github.com/mate-desktop/mate-settings-daemon/pull/217
--------------------------------------------------------------------------------
================================================================================
nss-3.36.1-1.0.fc27 (FEDORA-2018-c729ab6811)
Network Security Services
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.36.1. For details about
new functionality and a list of bugs fixed in this release please see the
upstream release notes
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.36.1_release_notes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Daiki Ueno <dueno(a)redhat.com> - 3.36.1-1.0
- Update to NSS 3.36.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1565393 - nss-3.36.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1565393
--------------------------------------------------------------------------------
================================================================================
nss-softokn-3.36.1-1.0.fc27 (FEDORA-2018-c729ab6811)
Network Security Services Softoken Module
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.36.1. For details about
new functionality and a list of bugs fixed in this release please see the
upstream release notes
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.36.1_release_notes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Daiki Ueno <dueno(a)redhat.com> - 3.36.1-1.0
- Update to NSS 3.36.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1565393 - nss-3.36.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1565393
--------------------------------------------------------------------------------
================================================================================
nss-util-3.36.1-1.0.fc27 (FEDORA-2018-c729ab6811)
Network Security Services Utilities Library
--------------------------------------------------------------------------------
Update Information:
Updates the nss family of packages to upstream NSS 3.36.1. For details about
new functionality and a list of bugs fixed in this release please see the
upstream release notes
https://developer.mozilla.org/en-
US/docs/Mozilla/Projects/NSS/NSS_3.36.1_release_notes
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 11 2018 Daiki Ueno <dueno(a)redhat.com> - 3.36.1-1.0
- Update to NSS 3.36.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1565393 - nss-3.36.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1565393
--------------------------------------------------------------------------------
================================================================================
openscad-2015.03.3-15.fc27 (FEDORA-2018-55218c321d)
The Programmers Solid 3D CAD Modeller
--------------------------------------------------------------------------------
Update Information:
Make sure what's shipped with MCAD, don't bring in python2 dependency
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2015.03.3-15
- Make sure what's shipped with MCAD, don't bring in python2 dependency
- Run the tests with python2 explicitly
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2015.03.3-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Tue Jan 23 2018 Jonathan Wakely <jwakely(a)redhat.com> - 2015.03.3-13
- Rebuilt for Boost 1.66
--------------------------------------------------------------------------------
================================================================================
pam-u2f-1.0.6-1.fc27 (FEDORA-2018-990ca867d2)
Implements PAM authentication over U2F
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Seth Jennings <spartacus06(a)gmail.com> - 1.0.6-1
- New upstream release
- resolves: #1568058
* Mon Apr 16 2018 Seth Jennings <spartacus06(a)gmail.com> - 1.0.5-2
- fix spec file
* Mon Apr 16 2018 Seth Jennings <spartacus06(a)gmail.com> - 1.0.5-1
- New upstream release
- resolves: #1568058
* Fri Feb 9 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.0.4-8
- Escape macros in %changelog
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568058 - pam-u2f module incorrectly handles 'nouserok' parameter
(fixed in v1.0.5)
https://bugzilla.redhat.com/show_bug.cgi?id=1568058
--------------------------------------------------------------------------------
================================================================================
perl-Carp-1.42-395.fc27 (FEDORA-2018-5eb5277f7d)
Alternative warn and die for modules
--------------------------------------------------------------------------------
Update Information:
This release prevents from some stack-not-ref-counted crashes in Carp that would
mask the real to-be-reported exception.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 Petr Pisar <ppisar(a)redhat.com> - 1.42-395
- Prevent from some stack-not-ref-counted crashes in Carp (RT#52610)
--------------------------------------------------------------------------------
================================================================================
perl-Qt-4.14.3-14.fc27 (FEDORA-2018-f9dccf3015)
Perl bindings for Qt
--------------------------------------------------------------------------------
Update Information:
Build-require kde-filesystem (bug #1568834)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 18 2018 Petr Pisar <ppisar(a)redhat.com> - 4.14.3-14
- Build-require kde-filesystem (bug #1568834)
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.14.3-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Jan 20 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.14.3-12
- Rebuilt for switch to libxcrypt
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568834 - Missing BuildRequires: kde-filesystem in perl-Qt.spec
https://bugzilla.redhat.com/show_bug.cgi?id=1568834
--------------------------------------------------------------------------------
================================================================================
php-mongodb-1.3.2-1.fc27 (FEDORA-2018-b02f28b99b)
MongoDB driver library
--------------------------------------------------------------------------------
Update Information:
**Version 1.3.2** * **Bugs** * [PHPLIB-342] - Change streams should use
the same session when resuming * [PHPLIB-344] - "Command does not support
non local read concern" on findAndModify query on replicasets * **Tasks**
* [PHPLIB-233] - Add examples for each GridFS API method *
[PHPLIB-278] - Add examples for calling methods on database, collection, and
index models * [PHPLIB-326] - Aggregation, runCommand, and index
management examples for Docs
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 Remi Collet <remi(a)remirepo.net> - 1.3.2-1
- update to 1.3.2
--------------------------------------------------------------------------------
================================================================================
php-pecl-mongodb-1.4.3-1.fc27 (FEDORA-2018-467913b501)
MongoDB driver for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.4.3** * ** Bugs** * [PHPC-1151] - Possible segfault is Session
object is freed before Cursor * [PHPC-1152] - Aggregate may fail to use the
same session for getMore commands * [PHPC-1162] - Dumping cursor while
iterating with IteratorIterator may segfault * ** Tasks** * [PHPC-1136] -
Add Appveyor build status badge to readme * [PHPC-1156] - Default to Secure
Transport on macOS before OpenSSL * [PHPC-1157] - Upgrade bundled libmongoc
and libbson to 1.9.4 * [PHPC-1159] - Test on specific server versions in
Travis CI * **Improvement** * [PHPC-1161] - Free reference to Session once
Cursor is exhausted
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Remi Collet <remi(a)remirepo.net> - 1.4.3-1
- update to 1.4.3
--------------------------------------------------------------------------------
================================================================================
php-sabre-vobject4-4.1.6-1.fc27 (FEDORA-2018-e629c51fd0)
Library to parse and manipulate iCalendar and vCard objects
--------------------------------------------------------------------------------
Update Information:
**Version 4.1.6** (2018-04-20) * fix #406, #407, #408, #409: Another round of
performance improvements in serialization of properties (gharlan, staabm) * fix
#410: Fixes in iTip for handling `BYDAY=SA,SO` (gharlan) * fix #381: Fixes in
iTip handling of `SCHEDULE-FORCE-SEND` (alecpl)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 Remi Collet <remi(a)remirepo.net> - 4.1.6-1
- update to 4.1.6
- undefine __brp_mangle_shebangs
--------------------------------------------------------------------------------
================================================================================
podman-0.4.3-1.git4c0d8b0.fc27 (FEDORA-2018-6a46e74b85)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
Upstream 0.4.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 baude <bbaude(a)redhat.com> - 0.4.3-1.git4c0d8b0d
- Upstream release 0.4.3
* Fri Apr 13 2018 baude <bbaude(a)redhat.com> - 0.4.2-1.gitf740ee0b
- Upstream release 0.4.2
- Update conmon for new console-related features
--------------------------------------------------------------------------------
================================================================================
python-django-ajax-selects-1.7.0-1.fc27 (FEDORA-2018-5ce2b8b687)
Enables editing of ForeignKey, ManyToMany and simple text fields
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Luis Bazan <lbazan(a)fedoraproject.org> - 1.7.0-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
python-django-helpdesk-0.2.7-1.fc27 (FEDORA-2018-824efdadb8)
A Django powered ticket tracker for small enterprise
--------------------------------------------------------------------------------
Update Information:
New Upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Luis Bazan <lbazan(a)fedoraproject.org> - 0.2.7-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
python-importanize-0.6.3-3.fc27 (FEDORA-2018-559199989c)
Utility for organizing Python imports using PEP8 or custom rules
--------------------------------------------------------------------------------
Update Information:
Minor fix ---- Update to upstream latest version 0.6.3 ---- Update to
upstream latest version 0.6.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 Sundeep Anand <suanand(a)redhat.com> - 0.6.3-3
- Minor fix
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Tue Jan 30 2018 Sundeep Anand <suanand(a)redhat.com> - 0.6.3-1
- Update to upstream latest version 0.6.3
* Fri Jan 19 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 0.6.2-2
- Update Python 2 dependency declarations to new packaging standards
- (See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Thu Jan 11 2018 Sundeep Anand <suanand(a)redhat.com> - 0.6.2-1
- Update to upstream latest version 0.6.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1539372 - python-importanize-0.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1539372
[ 2 ] Bug #1532418 - python-importanize-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1532418
--------------------------------------------------------------------------------
================================================================================
qmapshack-1.11.1-1.fc27 (FEDORA-2018-85e076b071)
GPS mapping and management tool
--------------------------------------------------------------------------------
Update Information:
- updated to 1.11.1 - changelog
https://bitbucket.org/maproom/qmapshack/src/9ce2
1cd38521351c06c721f9c0d3ac6785ea6908/changelog.txt?at=default&fileviewer=file-
view-default
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Dan Hor��k <dan(a)danny.cz> - 1.11.1-1
- update to 1.11.1 (#1569518)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1569518 - qmapshack-1.11.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1569518
--------------------------------------------------------------------------------
================================================================================
qt-virt-manager-0.60.88-3.fc27 (FEDORA-2018-675b5cc77f)
Qt Virtual Machine Manager
--------------------------------------------------------------------------------
Update Information:
improved display of key events to remote viewer; fixed scancodes;
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 20 2018 Fl@sh <kaperang07(a)gmail.com> - 0.60.88-3
- added bundled qterminal Provides;
- release updated;
* Sat Apr 14 2018 Fl@sh <kaperang07(a)gmail.com> - 0.60.88-2
- added bundled krdc Provides;
- release updated;
* Sat Apr 14 2018 Fl@sh <kaperang07(a)gmail.com> - 0.60.88-1
- added krdc BR, R;
- version updated;
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1567570 - qt-virt-manager-0.60.88 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1567570
[ 2 ] Bug #1563528 - qt-virt-viewer bundles parts from krdc-libs
https://bugzilla.redhat.com/show_bug.cgi?id=1563528
--------------------------------------------------------------------------------
================================================================================
rpkg-1.53-2.fc27 (FEDORA-2018-6129178042)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
- Require python2-koji 1.15 as the minimum version - Refine BuildRequires
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Chenxiong Qi <cqi(a)redhat.com> - 1.53-2
- Require python2-koji 1.15 as the minimum version
- Refine BuildRequires
--------------------------------------------------------------------------------
================================================================================
ruby-2.4.4-88.fc27 (FEDORA-2018-a85044d389)
An interpreter of object-oriented scripting language
--------------------------------------------------------------------------------
Update Information:
Rebase to Ruby 2.4.4. Includes several CVE fixes.
https://www.ruby-
lang.org/en/news/2018/03/28/ruby-2-4-4-released/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 16 2018 Pavel Valena <pvalena(a)redhat.com> - 2.4.4-88
- Update to Ruby 2.4.4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561953 - CVE-2018-8778 ruby: Buffer under-read in String#unpack
https://bugzilla.redhat.com/show_bug.cgi?id=1561953
[ 2 ] Bug #1561952 - CVE-2017-17742 ruby: HTTP response splitting in WEBrick
https://bugzilla.redhat.com/show_bug.cgi?id=1561952
[ 3 ] Bug #1561950 - CVE-2018-8777 ruby: DoS by large request in WEBrick
https://bugzilla.redhat.com/show_bug.cgi?id=1561950
[ 4 ] Bug #1561949 - CVE-2018-8780 ruby: Unintentional directory traversal by poisoned
NULL byte in Dir
https://bugzilla.redhat.com/show_bug.cgi?id=1561949
[ 5 ] Bug #1561948 - CVE-2018-8779 ruby: Unintentional socket creation by poisoned NULL
byte in UNIXServer and UNIXSocket
https://bugzilla.redhat.com/show_bug.cgi?id=1561948
[ 6 ] Bug #1561947 - CVE-2018-6914 ruby: Unintentional file and directory creation with
directory traversal in tempfile and tmpdir
https://bugzilla.redhat.com/show_bug.cgi?id=1561947
--------------------------------------------------------------------------------
================================================================================
systemtap-3.2-11.fc27 (FEDORA-2018-b6ed279f75)
Programmable system-wide instrumentation system
--------------------------------------------------------------------------------
Update Information:
Unwind backtrace and module load fixes for newer kernels.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Mark Wielaard <mjw(a)fedoraproject.org> - 3.2-11
- Add rhbz1549063.patch (/bin/env -> /usr/bin/env)
- Add rhbz1566745.patch (4.15 kernel tapset updates)
- Enable accidentially disabled Suggests: kernel-devel again.
* Wed Apr 18 2018 Mark Wielaard <mjw(a)fedoraproject.org> - 3.2-10
- Add unwind-fallback.patch
- rhbz1566422.patch
* Tue Apr 17 2018 Mark Wielaard <mjw(a)fedoraproject.org> - 3.2-9
- Add unwind-fallback.patch.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1549063 - systemtap depends on removed /bin/env
https://bugzilla.redhat.com/show_bug.cgi?id=1549063
[ 2 ] Bug #1566745 - systemtap script compilation fails due to __GFP_COLD undeclared
https://bugzilla.redhat.com/show_bug.cgi?id=1566745
[ 3 ] Bug #1566422 - stap ERROR: Build-id mismatch with (re)inserted/removed kernel
module probe
https://bugzilla.redhat.com/show_bug.cgi?id=1566422
--------------------------------------------------------------------------------
================================================================================
tng-1.8.2-1.fc27 (FEDORA-2018-a8c05574d0)
Trajectory Next Generation binary format manipulation library
--------------------------------------------------------------------------------
Update Information:
Update to v1.8.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Christoph Junghans <junghans(a)votca.org> 1.8.2-1
- update to 1.8.2 (bug #1569468)
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1569468 - tng-1.8.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1569468
--------------------------------------------------------------------------------
================================================================================
toxcore-0.2.2-2.fc27 (FEDORA-2018-790a69ad40)
Peer to peer instant messenger
--------------------------------------------------------------------------------
Update Information:
Build using cmake
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.2.2-2
- Build using cmake
* Thu Apr 19 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.2.2-1
- Upstream release 0.2.2
--------------------------------------------------------------------------------
================================================================================
tracer-0.7.0-1.fc27 (FEDORA-2018-9bf0d24113)
Finds outdated running applications in your system
--------------------------------------------------------------------------------
Update Information:
Features: - Cache process info (elyscape(a)gmail.com) - Update Python 2
dependency declarations to new packaging standards (seanokeeffe797(a)gmail.com) -
Switch Travis to container-based infrastructure (seanokeeffe797(a)gmail.com)
Bugfixes: - Fix argparse logic in spec (#94) (frostyx(a)email.cz) - Fix RHBug
#1469282 - bash completion should exit cleanly if python- argcomplete is not
installed (seanokeeffe797(a)gmail.com) - Handle sshd sessions that use privilege
separation (elyscape(a)gmail.com) - Fixes #105 - check ID_LIKE in /etc/os-release
(seanokeeffe797(a)gmail.com) - Fixes #98 - Don't try appending None, helpers
(seanokeeffe797(a)gmail.com) - Fixes #104 - Replace None with "" when sorting
(seanokeeffe797(a)gmail.com) - fix typo in docs (seanokeeffe797(a)gmail.com) ----
- Fix argparse logic (RhBug:
[
1492078](https://bugzilla.redhat.com/show_bug.cgi?id=1492078)) ---- Correct
package version comparision (seanokeeffe797(a)gmail.com)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Sean O'Keeffe <seanokeeffe797(a)gmail.com> 0.7.0-1
- Fixes #98 - Don't try appending `None`, helpers (seanokeeffe797(a)gmail.com)
- Fixes #104 - Replace None with "" when sorting (seanokeeffe797(a)gmail.com)
- Update Python 2 dependency declarations to new packaging standards
(seanokeeffe797(a)gmail.com)
- Fixes #105 - check ID_LIKE in /etc/os-release (seanokeeffe797(a)gmail.com)
- Cache process info (elyscape(a)gmail.com)
- Handle sshd sessions that use privilege separation (elyscape(a)gmail.com)
- fix typo in docs (seanokeeffe797(a)gmail.com)
- Switch Travis to container-based infrastructure (seanokeeffe797(a)gmail.com)
- Fix RHBug #1469282 - bash completion should exit cleanly if python-
argcomplete is not installed (seanokeeffe797(a)gmail.com)
- Fix argparse logic in spec (#94) (frostyx(a)email.cz)
- Update branches for fedora releaser (frostyx(a)email.cz)
- Add epel releaser (seanokeeffe797(a)gmail.com)
- rename tito releasers (seanokeeffe797(a)gmail.com)
* Wed Feb 21 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 0.6.13.1-4
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.6.13.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Mon Oct 2 2017 Jakub Kadl����k <frostyx(a)email.cz> 0.6.13.1-2
- Fix argparse logic (RhBug: 1492078)
* Mon Sep 11 2017 Sean O'Keeffe <seanokeeffe797(a)gmail.com> 0.6.13.1-1
- Fixes #92 - Correct package version comparision (seanokeeffe797(a)gmail.com)
- EPEL uses python-argcomplete not pythonX-argcomplete
(seanokeeffe797(a)gmail.com)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1474260 - tracer-0.6.13-1 is extremely slow
https://bugzilla.redhat.com/show_bug.cgi?id=1474260
[ 2 ] Bug #1492078 - python3-tracer depends on python2 packages
https://bugzilla.redhat.com/show_bug.cgi?id=1492078
--------------------------------------------------------------------------------
================================================================================
utox-0.17.0-1.fc27 (FEDORA-2018-1722477bc2)
The lightweight Tox client
--------------------------------------------------------------------------------
Update Information:
Upstream release 0.17.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.17.0-1
- Upstream release 0.17.0
--------------------------------------------------------------------------------
================================================================================
xxhash-0.6.5-1.fc27 (FEDORA-2018-31157a4b9a)
Extremely fast hash algorithm
--------------------------------------------------------------------------------
Update Information:
Version 0.6.5.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 19 2018 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.6.5-1
- Update to version 0.6.5
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------