The following Fedora 27 Security updates need testing:
Age URL
20
https://bodhi.fedoraproject.org/updates/FEDORA-2017-15efa72a0c
docker-1.13.1-44.git584d391.fc27
16
https://bodhi.fedoraproject.org/updates/FEDORA-2017-913288e9a9
mongodb-3.4.10-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d7c0748c1b pdns-4.1.0-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-14f5c6cdac
qpid-cpp-1.37.0-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bc2edc421d tor-0.3.1.9-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-874bd165c0
perl-DBD-MySQL-4.043-6.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-677069c484
python26-2.6.9-10.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99d12bf610
python35-3.5.4-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a95dd74301
shellinabox-2.20-5.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a41f6a8078
python34-3.4.7-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e6be32cb7a
nodejs-8.9.3-2.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2e5a17c4cc
python33-3.3.7-2.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-354b9647ba
libextractor-1.6-2.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-8a9862f4b7
php-symfony4-4.0.1-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5945560816 xen-4.9.1-4.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-66e9367f7e
asterisk-14.7.4-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2fab3f12c4
sensible-utils-0.0.11-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1682a6a2a0
qt5-qtbase-5.9.2-6.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-129969aa8a
kernel-4.14.6-300.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f0e5ad250c
heimdal-7.5.0-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
FlightGear-2017.3.1-3.fc27
audit-2.8.2-1.fc27
avogadro2-1.90.0-7.fc27
avogadro2-libs-1.90.0-11.fc27
cairo-1.15.10-1.fc27
checkpolicy-2.7-2.fc27
ckeditor-4.8.0-1.fc27
drupal7-drafty-1.0-0.5.rc1.fc27
electrum-3.0.3-1.fc27
enchant2-2.2.0-2.fc27
heimdal-7.5.0-1.fc27
kernel-4.14.6-300.fc27
libreoffice-5.4.4.2-1.fc27
libselinux-2.7-3.fc27
libsemanage-2.7-2.fc27
libsepol-2.7-2.fc27
mingw-enchant2-2.2.0-2.fc27
nordugrid-arc-5.4.2-1.fc27
nordugrid-arc-doc-2.0.19-1.fc27
perl-Algorithm-Loops-1.032-1.fc27
php-erusev-parsedown-1.6.4-1.fc27
php-jms-serializer-1.10.0-1.fc27
policycoreutils-2.7-3.fc27
pymol-1.8.6-4.20170314svn4170.fc27
qt5-qtbase-5.9.2-6.fc27
qupzilla-2.2.2-1.fc27
rsyslog-8.31.0-2.fc27
rtags-2.15-2.fc27
secilc-2.7-2.fc27
spglib-1.10.2-1.fc27
waiverdb-0.4.0-2.fc27
Details about builds:
================================================================================
FlightGear-2017.3.1-3.fc27 (FEDORA-2017-a91ddba172)
The FlightGear Flight Simulator
--------------------------------------------------------------------------------
Update Information:
This update resolves the duplicated launcher issue
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524209 - Duplicated application icon
https://bugzilla.redhat.com/show_bug.cgi?id=1524209
--------------------------------------------------------------------------------
================================================================================
audit-2.8.2-1.fc27 (FEDORA-2017-c008d8ab48)
User space tools for 2.6 kernel auditing
--------------------------------------------------------------------------------
Update Information:
This is a bugfix release which updates tables to match the 4.14 kernel, fixes
ipv6 socket binding, fixes auditctl --reset-lost command, corrects the
expr_create_timestamp_comparison_ex function in libauparse, and fixes building
on old systems without linux/fanotify.h.
--------------------------------------------------------------------------------
================================================================================
avogadro2-1.90.0-7.fc27 (FEDORA-2017-b7092f20fa)
Advanced molecular editor
--------------------------------------------------------------------------------
Update Information:
- Update to spglib-1.10.2 - Fix dependencies
--------------------------------------------------------------------------------
================================================================================
avogadro2-libs-1.90.0-11.fc27 (FEDORA-2017-b7092f20fa)
Avogadro2 libraries
--------------------------------------------------------------------------------
Update Information:
- Update to spglib-1.10.2 - Fix dependencies
--------------------------------------------------------------------------------
================================================================================
cairo-1.15.10-1.fc27 (FEDORA-2017-a8c9410860)
A 2D graphics library
--------------------------------------------------------------------------------
Update Information:
cairo 1.15.10 development snapshot with new features and bug fixes. For details,
see
https://lists.cairographics.org/archives/cairo/2017-December/028488.html
--------------------------------------------------------------------------------
================================================================================
checkpolicy-2.7-2.fc27 (FEDORA-2017-290cd03a8c)
SELinux policy compiler
--------------------------------------------------------------------------------
Update Information:
Several fixes backported from upstream: - sepolicy: do not fail when
file_contexts.local does not exist - sepolicy: fix misspelling of _ra_content_t
suffix - sepolicy: support non-MLS policy in manpage - sepolicy: support non-MCS
policy in manpage - sepolicy: remove stray space in section "SEE ALSO" - Fixed
bad reference in roleattribute -
checkpolicy,libselinux,libsepol,policycoreutils: Update my email address -
libsepol: reset pointer after free - libsepol: cil: Add ability to redeclare
types[attributes] - libsepol/cil: Keep attributes used by generated attributes
in neverallow rules - libsepol: use IN6ADDR_ANY_INIT to initialize IPv6
addresses - libsepol/cil: __cil_post_db_neverallow_attr_helper() does not use
extra_args - libsepol/cil: fix -Wwrite-strings warning - libsepol/cil: drop
wrong unused attribute - restorecond: check write() and daemon() results -
libsepol: fix memory leak in sepol_bool_query() - sepolicy: do not fail when
file_contexts.local or .subs do not exist - gui: port to Python 3 by migrating
to PyGI - sepolicy: ignore comments and empty lines in file_contexts.subs_dist -
sepolicy: support non-MLS policy in gui - gui: remove the status bar - gui: fix
parsing of "semodule -lfull" in tab Modules - gui: delete overridden definition
of usersPage.delete() - gui: remove mappingsPage - libsemanage: Keep copy of
file_contexts.homedirs in policy store - libsemanage: Add support for listing
fcontext.homedirs file - python/semanage: Enable listing file_contexts.homedirs
- libselinux: Add support for pcre2 to pkgconfig definition - libsepol: free
ibendport device names - libsemanage: free genhomedircon fallback user -
python/semanage: drop *_ini functions - python/semanage: Don't use global setup
variable - python/semanage: Enforce noreload only if it's requested by -N option
- python/semanage: Fix export of ibendport entries - python/semanage: Update
Infiniband code to work on python3 - python/sepolicy: Fix sepolicy manpage. -
python/semanage: make seobject.py backward compatible testcases:
https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semodule
https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semanage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1522942 - spec file should own python module directories
https://bugzilla.redhat.com/show_bug.cgi?id=1522942
[ 2 ] Bug #1487521 - libselinux.pc references libpcre in Requires.private instead of
pcre2-8
https://bugzilla.redhat.com/show_bug.cgi?id=1487521
[ 3 ] Bug #1476798 - please install "setrans" directory to "/run"
instead of "/var/run"
https://bugzilla.redhat.com/show_bug.cgi?id=1476798
[ 4 ] Bug #1484905 - cil_strpool.c: cil_strpool_tab variable is not properly destroyed
https://bugzilla.redhat.com/show_bug.cgi?id=1484905
--------------------------------------------------------------------------------
================================================================================
ckeditor-4.8.0-1.fc27 (FEDORA-2017-76a4dcd363)
WYSIWYG text editor to be used inside web pages
--------------------------------------------------------------------------------
Update Information:
## CKEditor 4.8 ### Important Notes * [#1249](https://github.com/ckeditor
/ckeditor-dev/issues/1249): Enabled the [Upload
Image](https://ckeditor.com/cke4/addon/uploadimage) plugin by default in
standard and full presets. Also, it will no longer log an error in case of
missing [`config.imageUploadUrl`](https://docs.ckeditor.com/ckeditor4/docs/#!/ap
i/CKEDITOR.config-cfg-imageUploadUrl) property. ### New Features *
[#933](https://github.com/ckeditor/ckeditor-dev/issues/933): Introduced [Balloon
Toolbar](https://ckeditor.com/cke4/addon/balloontoolbar) plugin. *
[#662](https://github.com/ckeditor/ckeditor-dev/issues/662): Introduced image
inlining for the [Paste from
Word](https://ckeditor.com/cke4/addon/pastefromword) plugin. *
[#468](https://github.com/ckeditor/ckeditor-dev/issues/468): [Edge] Introduced
support for the Clipboard API. * [#607](https://github.com/ckeditor/ckeditor-
dev/issues/607): Manually inserted Hex color is prefixed with a hash character
(`#`) if needed. It ensures a valid Hex color value is used when setting the
table cell border or background color with the [Color
Dialog](https://ckeditor.com/cke4/addon/colordialog) window. *
[#584](https://github.com/ckeditor/ckeditor-dev/issues/584): [Font size and
Family](https://ckeditor.com/cke4/addon/font) and
[
Format](https://ckeditor.com/cke4/addon/format) drop-downs are not toggleable
anymore. Default option to reset styles added. *
[#856](https://github.com/ckeditor/ckeditor-dev/issues/856): Introduced the [`CK
EDITOR.tools.keystrokeToArray`](https://docs.ckeditor.com/ckeditor4/docs/...
CKEDITOR.tools-method-keystrokeToArray) method. It converts a keystroke into its
string representation, returning every key name as a separate array element. *
[#1053](https://github.com/ckeditor/ckeditor-dev/issues/1053): Introduced the [`
CKEDITOR.tools.object.merge`](https://docs.ckeditor.com/ckeditor4/docs/#!...
EDITOR.tools.object-method-merge) method. It allows to merge two objects,
returning the new object with all properties from both objects deeply cloned. *
[#1073](https://github.com/ckeditor/ckeditor-dev/issues/1073): Introduced the [`
CKEDITOR.tools.array.every`](https://docs.ckeditor.com/ckeditor4/docs/#!/...
DITOR.tools.array-method-every) method. It invokes a given test function on
every array element and returns `true` if all elements pass the test. ### Fixed
Issues * [#796](https://github.com/ckeditor/ckeditor-dev/issues/796): Fixed: A
list is pasted from OneNote in the reversed order. *
[#834](https://github.com/ckeditor/ckeditor-dev/issues/834): [IE9-11] Fixed: The
editor does not save the selected state of radio buttons inserted by the [Form
Elements](https://ckeditor.com/cke4/addon/forms) plugin. *
[#704](https://github.com/ckeditor/ckeditor-dev/issues/704): [Edge] Fixed: Using
<kbd>Ctrl</kbd>/<kbd>Cmd</kbd> + <kbd>Z</kbd> breaks
widget structure. *
[#591](https://github.com/ckeditor/ckeditor-dev/issues/591): Fixed: A column is
inserted in a wrong order inside the table if any cell has a vertical split. *
[#787](https://github.com/ckeditor/ckeditor-dev/issues/787): Fixed: Using Cut
inside a nested table does not cut the selected content. *
[#842](https://github.com/ckeditor/ckeditor-dev/issues/842): Fixed: List style
not restored when toggling list indent level in the [Indent
List](https://ckeditor.com/cke4/addon/indentlist) plugin. *
[#711](https://github.com/ckeditor/ckeditor-dev/issues/711): Fixed: Dragging
widgets should only work with the left mouse button. *
[#862](https://github.com/ckeditor/ckeditor-dev/issues/862): Fixed: The "Object
Styles" group in the [Styles
Combo](https://ckeditor.com/cke4/addon/stylescombo)
plugin is visible only if the whole element is selected. *
[#994](https://github.com/ckeditor/ckeditor-dev/pull/994): Fixed: Typo in the [`
CKEDITOR.focusManager.focus`](https://docs.ckeditor.com/ckeditor4/docs/#!...
EDITOR.focusManager-method-focus) API documentation. Thanks to
[
benjy](https://github.com/benjy)! * [#1014](https://github.com/ckeditor
/ckeditor-dev/issues/1014): Fixed: The [Table
Tools](https://ckeditor.com/cke4/addon/tabletools) Cell Properties dialog is now
[Advanced Content
Filter](https://docs.ckeditor.com/ckeditor4/docs/#!/guide/dev_acf) aware —
it is not possible to change the cell width or height if corresponding styles
are disabled. * [#877](https://github.com/ckeditor/ckeditor-dev/issues/877):
Fixed: A list with custom bullets with exotic characters crashes the editor when
[pasted from
Word](https://ckeditor.com/cke4/addon/pastefromword). *
[#605](https://github.com/ckeditor/ckeditor-dev/issues/605): Fixed: Inline
widgets do not preserve trailing spaces. * [#1008](https://github.com/ckeditor
/ckeditor-dev/issues/1008): Fixed: Shorthand Hex colors from the [`config.colorB
utton_colors`](https://docs.ckeditor.com/ckeditor4/docs/#!/api/CKEDITOR.c...
cfg-colorButton_colors) option are not correctly highlighted in the [Color
Button](https://ckeditor.com/cke4/addon/colorbutton) Text Color or Background
Color panel. * [#1094](https://github.com/ckeditor/ckeditor-dev/issues/1094):
Fixed: Widget definition [`upcast`](https://docs.ckeditor.com/ckeditor4/docs/#!/
api/CKEDITOR.plugins.widget.definition-property-upcasts) methods are called for
every element. * [#1057](https://github.com/ckeditor/ckeditor-dev/issues/1057):
Fixed: The [
Notification](https://ckeditor.com/addon/notification) plugin
overwrites Web Notifications API due to leakage to the global scope. *
[#1068](https://github.com/ckeditor/ckeditor-dev/issues/1068): Fixed: Upload
widget paste listener ignores changes to the [`uploadWidgetDefinition`](https://
docs.ckeditor.com/ckeditor4/docs/#!/api/CKEDITOR.fileTools.uploadWidgetDe...
n). * [#921](https://github.com/ckeditor/ckeditor-dev/issues/921): Fixed: [Edge]
CKEditor erroneously perceives internal copy and paste as type "external". *
[#1213](https://github.com/ckeditor/ckeditor-dev/issues/1213): Fixed: Multiple
images uploaded using [Upload
Image](https://ckeditor.com/cke4/addon/uploadimage) plugin are randomly
duplicated or mangled. * [#532](https://github.com/ckeditor/ckeditor-
dev/issues/532): Fixed: Removed an outdated user guide link from the
[
About](https://ckeditor.com/cke4/addon/about) dialog. *
[#1221](https://github.com/ckeditor/ckeditor-dev/issues/1221): Fixed: Invalid
CSS loaded by [Balloon
Panel](https://ckeditor.com/cke4/addon/balloonpanel)
plugin when
[`config.skin`](https://docs.ckeditor.com/ckeditor4/docs/#!/api/CKEDITOR.config-
cfg-skin) is loaded using a custom path. * [#522](https://github.com/ckeditor
/ckeditor-dev/issues/522): Fixed: Widget selection is not removed when widget is
inside table cell with [Table
Selection](https://ckeditor.com/cke4/addon/tableselection) plugin enabled. *
[#1027](https://github.com/ckeditor/ckeditor-dev/issues/1027): Fixed: Cannot add
multiple images to the table with [Table
Selection](https://ckeditor.com/cke4/addon/tableselection) plugin in certain
situations. * [#1069](https://github.com/ckeditor/ckeditor-dev/issues/1069):
Fixed: Wrong shape processing by [Paste from
Word](https://ckeditor.com/cke4/addon/pastefromword) plugin. *
[#995](https://github.com/ckeditor/ckeditor-dev/issues/995): Fixed: Hyperlinked
image gets inserted twice by [Paste from
Word](https://ckeditor.com/cke4/addon/pastefromword) plugin. *
[#1287](https://github.com/ckeditor/ckeditor-dev/issues/1287): Fixed:
[
Widget](https://ckeditor.com/cke4/addon/widget) plugin throws exception if
included in editor build but not loaded into editor's instance. ### API Changes
* [#1097](https://github.com/ckeditor/ckeditor-dev/issues/1097): Widget [`upcast
`](https://docs.ckeditor.com/ckeditor4/docs/#!/api/CKEDITOR.plugins.widget
.definition-property-upcast) methods are now called in the [widget
definition's](https://docs.ckeditor.com/ckeditor4/docs/#!/api/CKEDITO...
.widget-property-definition) context. * [#1118](https://github.com/ckeditor
/ckeditor-dev/issues/1118): Added the `show` option in the [`balloonPanel.attach
`](https://docs.ckeditor.com/ckeditor4/docs/#!/api/CKEDITOR.ui.balloonPanel-
method-attach) method, allowing to attach a hidden [Balloon
Panel](https://ckeditor.com/cke4/addon/balloonpanel) instance. *
[#1145](https://github.com/ckeditor/ckeditor-dev/issues/1145): Added the [`skipN
otifications`](https://docs.ckeditor.com/ckeditor4/docs/#!/api/CKEDITOR.f...
s.uploadWidgetDefinition-property-skipNotifications) option to the [`CKEDITOR.fi
leTools.uploadWidgetDefinition`](https://docs.ckeditor.com/ckeditor4/docs...
/CKEDITOR.fileTools.uploadWidgetDefinition), allowing to switch off default
notifications displayed by upload widgets. ### Other Changes *
[#815](https://github.com/ckeditor/ckeditor-dev/issues/815): Removed Node.js
dependency from the CKEditor build script. * [#1041](https://github.com/ckeditor
/ckeditor-dev/pull/1041), [#1131](https://github.com/ckeditor/ckeditor-
dev/issues/1131): Updated URLs pointing to [
CKSource](https://cksource.com/) and
[
CKEditor](https://ckeditor.com/) resources after the launch of new websites.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1525735 - ckeditor-4.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1525735
--------------------------------------------------------------------------------
================================================================================
drupal7-drafty-1.0-0.5.rc1.fc27 (FEDORA-2017-806e2ed64c)
Facilitates handling of draft revisions
--------------------------------------------------------------------------------
Update Information:
* [
7.x-1.0-rc1](https://www.drupal.org/project/drafty/releases/7.x-1.0-rc1)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1511721 - drupal7-drafty-1.0-rc1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1511721
--------------------------------------------------------------------------------
================================================================================
electrum-3.0.3-1.fc27 (FEDORA-2017-80b1d66f89)
A lightweight Bitcoin Client
--------------------------------------------------------------------------------
Update Information:
Updated to version 3.0.3
--------------------------------------------------------------------------------
================================================================================
enchant2-2.2.0-2.fc27 (FEDORA-2017-36fc2c0fb9)
An Enchanting Spell Checking Library
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1525706 - Review Request: enchant2 - An Enchanting Spell Checking Library
https://bugzilla.redhat.com/show_bug.cgi?id=1525706
[ 2 ] Bug #1525707 - Review Request: mingw-enchant2 - MinGW Windows enchant2 library
https://bugzilla.redhat.com/show_bug.cgi?id=1525707
--------------------------------------------------------------------------------
================================================================================
heimdal-7.5.0-1.fc27 (FEDORA-2017-f0e5ad250c)
A Kerberos 5 implementation without export restrictions
--------------------------------------------------------------------------------
Update Information:
Update to 7.5.0 GA release (CVE-2017-17439)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524546 - CVE-2017-17439 heimdal: NULL pointer dereference via crafted UDP
packets
https://bugzilla.redhat.com/show_bug.cgi?id=1524546
--------------------------------------------------------------------------------
================================================================================
kernel-4.14.6-300.fc27 (FEDORA-2017-129969aa8a)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.14.6 update contains various fixes across the tree.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1525762 - CVE-2017-17449 kernel: Missing namespace check in
net/netlink/af_netlink.c allows for network monitors to observe systemwide activity
https://bugzilla.redhat.com/show_bug.cgi?id=1525762
[ 2 ] Bug #1525761 - CVE-2017-17450 kernel: Unchecked capabilities in
net/netfilter/xt_osf.c allows for unprivileged modification to systemwide fingerprint
list
https://bugzilla.redhat.com/show_bug.cgi?id=1525761
[ 3 ] Bug #1525768 - CVE-2017-17448 kernel: Missing capabilities check in
net/netfilter/nfnetlink_cthelper.c allows for unprivileged access to systemwide
nfnl_cthelper_list structure
https://bugzilla.redhat.com/show_bug.cgi?id=1525768
[ 4 ] Bug #1525474 - CVE-2017-17558 kernel: Unallocated memory access by malicious USB
device via bNumInterfaces overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1525474
[ 5 ] Bug #1519591 - CVE-2017-8824 kernel: Use-after-free vulnerability in DCCP socket
https://bugzilla.redhat.com/show_bug.cgi?id=1519591
--------------------------------------------------------------------------------
================================================================================
libreoffice-5.4.4.2-1.fc27 (FEDORA-2017-582d030cad)
Free Software Productivity Suite
--------------------------------------------------------------------------------
Update Information:
update to 5.4.4 rc2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #105998 - kickstart.cfg omits port list for firewall
https://bugzilla.redhat.com/show_bug.cgi?id=105998
--------------------------------------------------------------------------------
================================================================================
libselinux-2.7-3.fc27 (FEDORA-2017-290cd03a8c)
SELinux library and simple utilities
--------------------------------------------------------------------------------
Update Information:
Several fixes backported from upstream: - sepolicy: do not fail when
file_contexts.local does not exist - sepolicy: fix misspelling of _ra_content_t
suffix - sepolicy: support non-MLS policy in manpage - sepolicy: support non-MCS
policy in manpage - sepolicy: remove stray space in section "SEE ALSO" - Fixed
bad reference in roleattribute -
checkpolicy,libselinux,libsepol,policycoreutils: Update my email address -
libsepol: reset pointer after free - libsepol: cil: Add ability to redeclare
types[attributes] - libsepol/cil: Keep attributes used by generated attributes
in neverallow rules - libsepol: use IN6ADDR_ANY_INIT to initialize IPv6
addresses - libsepol/cil: __cil_post_db_neverallow_attr_helper() does not use
extra_args - libsepol/cil: fix -Wwrite-strings warning - libsepol/cil: drop
wrong unused attribute - restorecond: check write() and daemon() results -
libsepol: fix memory leak in sepol_bool_query() - sepolicy: do not fail when
file_contexts.local or .subs do not exist - gui: port to Python 3 by migrating
to PyGI - sepolicy: ignore comments and empty lines in file_contexts.subs_dist -
sepolicy: support non-MLS policy in gui - gui: remove the status bar - gui: fix
parsing of "semodule -lfull" in tab Modules - gui: delete overridden definition
of usersPage.delete() - gui: remove mappingsPage - libsemanage: Keep copy of
file_contexts.homedirs in policy store - libsemanage: Add support for listing
fcontext.homedirs file - python/semanage: Enable listing file_contexts.homedirs
- libselinux: Add support for pcre2 to pkgconfig definition - libsepol: free
ibendport device names - libsemanage: free genhomedircon fallback user -
python/semanage: drop *_ini functions - python/semanage: Don't use global setup
variable - python/semanage: Enforce noreload only if it's requested by -N option
- python/semanage: Fix export of ibendport entries - python/semanage: Update
Infiniband code to work on python3 - python/sepolicy: Fix sepolicy manpage. -
python/semanage: make seobject.py backward compatible testcases:
https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semodule
https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semanage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1522942 - spec file should own python module directories
https://bugzilla.redhat.com/show_bug.cgi?id=1522942
[ 2 ] Bug #1487521 - libselinux.pc references libpcre in Requires.private instead of
pcre2-8
https://bugzilla.redhat.com/show_bug.cgi?id=1487521
[ 3 ] Bug #1476798 - please install "setrans" directory to "/run"
instead of "/var/run"
https://bugzilla.redhat.com/show_bug.cgi?id=1476798
[ 4 ] Bug #1484905 - cil_strpool.c: cil_strpool_tab variable is not properly destroyed
https://bugzilla.redhat.com/show_bug.cgi?id=1484905
--------------------------------------------------------------------------------
================================================================================
libsemanage-2.7-2.fc27 (FEDORA-2017-290cd03a8c)
SELinux binary policy manipulation library
--------------------------------------------------------------------------------
Update Information:
Several fixes backported from upstream: - sepolicy: do not fail when
file_contexts.local does not exist - sepolicy: fix misspelling of _ra_content_t
suffix - sepolicy: support non-MLS policy in manpage - sepolicy: support non-MCS
policy in manpage - sepolicy: remove stray space in section "SEE ALSO" - Fixed
bad reference in roleattribute -
checkpolicy,libselinux,libsepol,policycoreutils: Update my email address -
libsepol: reset pointer after free - libsepol: cil: Add ability to redeclare
types[attributes] - libsepol/cil: Keep attributes used by generated attributes
in neverallow rules - libsepol: use IN6ADDR_ANY_INIT to initialize IPv6
addresses - libsepol/cil: __cil_post_db_neverallow_attr_helper() does not use
extra_args - libsepol/cil: fix -Wwrite-strings warning - libsepol/cil: drop
wrong unused attribute - restorecond: check write() and daemon() results -
libsepol: fix memory leak in sepol_bool_query() - sepolicy: do not fail when
file_contexts.local or .subs do not exist - gui: port to Python 3 by migrating
to PyGI - sepolicy: ignore comments and empty lines in file_contexts.subs_dist -
sepolicy: support non-MLS policy in gui - gui: remove the status bar - gui: fix
parsing of "semodule -lfull" in tab Modules - gui: delete overridden definition
of usersPage.delete() - gui: remove mappingsPage - libsemanage: Keep copy of
file_contexts.homedirs in policy store - libsemanage: Add support for listing
fcontext.homedirs file - python/semanage: Enable listing file_contexts.homedirs
- libselinux: Add support for pcre2 to pkgconfig definition - libsepol: free
ibendport device names - libsemanage: free genhomedircon fallback user -
python/semanage: drop *_ini functions - python/semanage: Don't use global setup
variable - python/semanage: Enforce noreload only if it's requested by -N option
- python/semanage: Fix export of ibendport entries - python/semanage: Update
Infiniband code to work on python3 - python/sepolicy: Fix sepolicy manpage. -
python/semanage: make seobject.py backward compatible testcases:
https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semodule
https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semanage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1522942 - spec file should own python module directories
https://bugzilla.redhat.com/show_bug.cgi?id=1522942
[ 2 ] Bug #1487521 - libselinux.pc references libpcre in Requires.private instead of
pcre2-8
https://bugzilla.redhat.com/show_bug.cgi?id=1487521
[ 3 ] Bug #1476798 - please install "setrans" directory to "/run"
instead of "/var/run"
https://bugzilla.redhat.com/show_bug.cgi?id=1476798
[ 4 ] Bug #1484905 - cil_strpool.c: cil_strpool_tab variable is not properly destroyed
https://bugzilla.redhat.com/show_bug.cgi?id=1484905
--------------------------------------------------------------------------------
================================================================================
libsepol-2.7-2.fc27 (FEDORA-2017-290cd03a8c)
SELinux binary policy manipulation library
--------------------------------------------------------------------------------
Update Information:
Several fixes backported from upstream: - sepolicy: do not fail when
file_contexts.local does not exist - sepolicy: fix misspelling of _ra_content_t
suffix - sepolicy: support non-MLS policy in manpage - sepolicy: support non-MCS
policy in manpage - sepolicy: remove stray space in section "SEE ALSO" - Fixed
bad reference in roleattribute -
checkpolicy,libselinux,libsepol,policycoreutils: Update my email address -
libsepol: reset pointer after free - libsepol: cil: Add ability to redeclare
types[attributes] - libsepol/cil: Keep attributes used by generated attributes
in neverallow rules - libsepol: use IN6ADDR_ANY_INIT to initialize IPv6
addresses - libsepol/cil: __cil_post_db_neverallow_attr_helper() does not use
extra_args - libsepol/cil: fix -Wwrite-strings warning - libsepol/cil: drop
wrong unused attribute - restorecond: check write() and daemon() results -
libsepol: fix memory leak in sepol_bool_query() - sepolicy: do not fail when
file_contexts.local or .subs do not exist - gui: port to Python 3 by migrating
to PyGI - sepolicy: ignore comments and empty lines in file_contexts.subs_dist -
sepolicy: support non-MLS policy in gui - gui: remove the status bar - gui: fix
parsing of "semodule -lfull" in tab Modules - gui: delete overridden definition
of usersPage.delete() - gui: remove mappingsPage - libsemanage: Keep copy of
file_contexts.homedirs in policy store - libsemanage: Add support for listing
fcontext.homedirs file - python/semanage: Enable listing file_contexts.homedirs
- libselinux: Add support for pcre2 to pkgconfig definition - libsepol: free
ibendport device names - libsemanage: free genhomedircon fallback user -
python/semanage: drop *_ini functions - python/semanage: Don't use global setup
variable - python/semanage: Enforce noreload only if it's requested by -N option
- python/semanage: Fix export of ibendport entries - python/semanage: Update
Infiniband code to work on python3 - python/sepolicy: Fix sepolicy manpage. -
python/semanage: make seobject.py backward compatible testcases:
https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semodule
https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semanage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1522942 - spec file should own python module directories
https://bugzilla.redhat.com/show_bug.cgi?id=1522942
[ 2 ] Bug #1487521 - libselinux.pc references libpcre in Requires.private instead of
pcre2-8
https://bugzilla.redhat.com/show_bug.cgi?id=1487521
[ 3 ] Bug #1476798 - please install "setrans" directory to "/run"
instead of "/var/run"
https://bugzilla.redhat.com/show_bug.cgi?id=1476798
[ 4 ] Bug #1484905 - cil_strpool.c: cil_strpool_tab variable is not properly destroyed
https://bugzilla.redhat.com/show_bug.cgi?id=1484905
--------------------------------------------------------------------------------
================================================================================
mingw-enchant2-2.2.0-2.fc27 (FEDORA-2017-36fc2c0fb9)
MinGW Windows enchant2 library
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1525706 - Review Request: enchant2 - An Enchanting Spell Checking Library
https://bugzilla.redhat.com/show_bug.cgi?id=1525706
[ 2 ] Bug #1525707 - Review Request: mingw-enchant2 - MinGW Windows enchant2 library
https://bugzilla.redhat.com/show_bug.cgi?id=1525707
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-5.4.2-1.fc27 (FEDORA-2017-47f086f8f3)
Advanced Resource Connector Grid Middleware
--------------------------------------------------------------------------------
Update Information:
ARC Release 15.03u18
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-doc-2.0.19-1.fc27 (FEDORA-2017-47f086f8f3)
Advanced Resource Connector Documentation
--------------------------------------------------------------------------------
Update Information:
ARC Release 15.03u18
--------------------------------------------------------------------------------
================================================================================
perl-Algorithm-Loops-1.032-1.fc27 (FEDORA-2017-a9b144da91)
Perl module for looping constructs
--------------------------------------------------------------------------------
Update Information:
Specfile autogenerated by cpanspec 1.78.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1522917 - Review Request: perl-Algorithm-Loops - Perl module for looping
constructs
https://bugzilla.redhat.com/show_bug.cgi?id=1522917
--------------------------------------------------------------------------------
================================================================================
php-erusev-parsedown-1.6.4-1.fc27 (FEDORA-2017-1e8e0f7314)
Markdown parser in PHP
--------------------------------------------------------------------------------
Update Information:
## 1.6.4 Use `PHPUnit\Framework\TestCase` instead of
`PHPUnit_Framework_TestCase`
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1513209 - php-erusev-parsedown-1.6.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1513209
--------------------------------------------------------------------------------
================================================================================
php-jms-serializer-1.10.0-1.fc27 (FEDORA-2017-eb2d86bdbc)
Library for (de-)serializing data of any complexity
--------------------------------------------------------------------------------
Update Information:
## [
1.10.0](https://github.com/schmittjoh/serializer/tree/1.10.0) **Implemented
enhancements:** - support PSR-11 compatible DI containers
[\#844](https://github.com/schmittjoh/serializer/pull/844)
([
xabbuh](https://github.com/xabbuh)) **Closed issues:** - Serialize using
jsonSerialize\(\) if object implements JsonSerializable
[\#846](https://github.com/schmittjoh/serializer/issues/846) - ExclusionStrategy
backward compatibility break
[\#843](https://github.com/schmittjoh/serializer/issues/843) - @MaxDepth jms
/serializer-bundle 2.2
[\#842](https://github.com/schmittjoh/serializer/issues/842) ##
[
1.9.2](https://github.com/schmittjoh/serializer/tree/1.9.2) (2017-11-22)
**Fixed bugs:** - Missing ClassMetadata deserialization data
[\#841](https://github.com/schmittjoh/serializer/pull/841)
([
TristanMogwai](https://github.com/TristanMogwai)) **Closed issues:** -
DateTime format documentation
[\#836](https://github.com/schmittjoh/serializer/issues/836) - Deserialization
not working with camelCase
[\#831](https://github.com/schmittjoh/serializer/issues/831) **Merged pull
requests:** - Fix documentation syntax errors on available types
[\#839](https://github.com/schmittjoh/serializer/pull/839) ([andy-
morgan](https://github.com/andy-morgan)) - Improve documentation about default
DateTime format [\#838](https://github.com/schmittjoh/serializer/pull/838)
([
enumag](https://github.com/enumag)) ##
[
1.9.1](https://github.com/schmittjoh/serializer/tree/1.9.1) (2017-10-27)
**Fixed bugs:** - Dynamic exclusion strategy, Variable "object" is not valid
[\#826](https://github.com/schmittjoh/serializer/issues/826) **Closed issues:**
- Allow DateTime or Null
[\#779](https://github.com/schmittjoh/serializer/issues/779) **Merged pull
requests:** - Alow to use "object" var in expressions when deserializing
[\#827](https://github.com/schmittjoh/serializer/pull/827)
([
goetas](https://github.com/goetas))
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508429 - php-jms-serializer-1.10.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508429
--------------------------------------------------------------------------------
================================================================================
policycoreutils-2.7-3.fc27 (FEDORA-2017-290cd03a8c)
SELinux policy core utilities
--------------------------------------------------------------------------------
Update Information:
Several fixes backported from upstream: - sepolicy: do not fail when
file_contexts.local does not exist - sepolicy: fix misspelling of _ra_content_t
suffix - sepolicy: support non-MLS policy in manpage - sepolicy: support non-MCS
policy in manpage - sepolicy: remove stray space in section "SEE ALSO" - Fixed
bad reference in roleattribute -
checkpolicy,libselinux,libsepol,policycoreutils: Update my email address -
libsepol: reset pointer after free - libsepol: cil: Add ability to redeclare
types[attributes] - libsepol/cil: Keep attributes used by generated attributes
in neverallow rules - libsepol: use IN6ADDR_ANY_INIT to initialize IPv6
addresses - libsepol/cil: __cil_post_db_neverallow_attr_helper() does not use
extra_args - libsepol/cil: fix -Wwrite-strings warning - libsepol/cil: drop
wrong unused attribute - restorecond: check write() and daemon() results -
libsepol: fix memory leak in sepol_bool_query() - sepolicy: do not fail when
file_contexts.local or .subs do not exist - gui: port to Python 3 by migrating
to PyGI - sepolicy: ignore comments and empty lines in file_contexts.subs_dist -
sepolicy: support non-MLS policy in gui - gui: remove the status bar - gui: fix
parsing of "semodule -lfull" in tab Modules - gui: delete overridden definition
of usersPage.delete() - gui: remove mappingsPage - libsemanage: Keep copy of
file_contexts.homedirs in policy store - libsemanage: Add support for listing
fcontext.homedirs file - python/semanage: Enable listing file_contexts.homedirs
- libselinux: Add support for pcre2 to pkgconfig definition - libsepol: free
ibendport device names - libsemanage: free genhomedircon fallback user -
python/semanage: drop *_ini functions - python/semanage: Don't use global setup
variable - python/semanage: Enforce noreload only if it's requested by -N option
- python/semanage: Fix export of ibendport entries - python/semanage: Update
Infiniband code to work on python3 - python/sepolicy: Fix sepolicy manpage. -
python/semanage: make seobject.py backward compatible testcases:
https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semodule
https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semanage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1522942 - spec file should own python module directories
https://bugzilla.redhat.com/show_bug.cgi?id=1522942
[ 2 ] Bug #1487521 - libselinux.pc references libpcre in Requires.private instead of
pcre2-8
https://bugzilla.redhat.com/show_bug.cgi?id=1487521
[ 3 ] Bug #1476798 - please install "setrans" directory to "/run"
instead of "/var/run"
https://bugzilla.redhat.com/show_bug.cgi?id=1476798
[ 4 ] Bug #1484905 - cil_strpool.c: cil_strpool_tab variable is not properly destroyed
https://bugzilla.redhat.com/show_bug.cgi?id=1484905
--------------------------------------------------------------------------------
================================================================================
pymol-1.8.6-4.20170314svn4170.fc27 (FEDORA-2017-ecf052aee0)
PyMOL Molecular Graphics System
--------------------------------------------------------------------------------
Update Information:
closes BZ 1359812, pull request
https://src.fedoraproject.org/rpms/pymol/pull-
request/1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1359812 - pymol: pymol requires both Python 2 and Python 3
https://bugzilla.redhat.com/show_bug.cgi?id=1359812
--------------------------------------------------------------------------------
================================================================================
qt5-qtbase-5.9.2-6.fc27 (FEDORA-2017-1682a6a2a0)
Qt5 - QtBase components
--------------------------------------------------------------------------------
Update Information:
Security fix for QDnsLookup crash on unix when DNS response is over 512 bytes,
see also
https://bugreports.qt.io/browse/QTBUG-64742
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1518958 - qt5-qtbase: qt: Out of bounds read in QDnsLookup in
src/network/kernel/qdnslookup_unix.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1518958
--------------------------------------------------------------------------------
================================================================================
qupzilla-2.2.2-1.fc27 (FEDORA-2017-9075ac93fa)
Modern web browser
--------------------------------------------------------------------------------
Update Information:
An update of QupZilla to the latest upstream bugfix release, version 2.2.2: *
updated available user agent strings * added support for "font" option in
AdBlock * fix showing irrelevant domain completions in locationbar * fix showing
site icons on some systems * fix clearing visited links when clearing history *
fix using system network proxy configuration * fix saving window geometry when
closing app with Ctrl+Q shortcut * fix various issues with web page not being
focused after restoring session * fix AutoScroll plugin not being able to scroll
to all directions in some cases * add StartupWMClass to desktop file
--------------------------------------------------------------------------------
================================================================================
rsyslog-8.31.0-2.fc27 (FEDORA-2017-090d70b10a)
Enhanced system logging and kernel message trapping daemon
--------------------------------------------------------------------------------
Update Information:
Dependency change in mongodb module. added: mongo-c-driver-devel snappy-devel
cyrus-sasl-devel removed: libmongo-client libmongo-client is depricated
--------------------------------------------------------------------------------
================================================================================
rtags-2.15-2.fc27 (FEDORA-2017-058f9e2730)
A indexer for the c language family with Emacs integration
--------------------------------------------------------------------------------
Update Information:
Rebuild for LLVM 5.0
--------------------------------------------------------------------------------
================================================================================
secilc-2.7-2.fc27 (FEDORA-2017-290cd03a8c)
The SELinux CIL Compiler
--------------------------------------------------------------------------------
Update Information:
Several fixes backported from upstream: - sepolicy: do not fail when
file_contexts.local does not exist - sepolicy: fix misspelling of _ra_content_t
suffix - sepolicy: support non-MLS policy in manpage - sepolicy: support non-MCS
policy in manpage - sepolicy: remove stray space in section "SEE ALSO" - Fixed
bad reference in roleattribute -
checkpolicy,libselinux,libsepol,policycoreutils: Update my email address -
libsepol: reset pointer after free - libsepol: cil: Add ability to redeclare
types[attributes] - libsepol/cil: Keep attributes used by generated attributes
in neverallow rules - libsepol: use IN6ADDR_ANY_INIT to initialize IPv6
addresses - libsepol/cil: __cil_post_db_neverallow_attr_helper() does not use
extra_args - libsepol/cil: fix -Wwrite-strings warning - libsepol/cil: drop
wrong unused attribute - restorecond: check write() and daemon() results -
libsepol: fix memory leak in sepol_bool_query() - sepolicy: do not fail when
file_contexts.local or .subs do not exist - gui: port to Python 3 by migrating
to PyGI - sepolicy: ignore comments and empty lines in file_contexts.subs_dist -
sepolicy: support non-MLS policy in gui - gui: remove the status bar - gui: fix
parsing of "semodule -lfull" in tab Modules - gui: delete overridden definition
of usersPage.delete() - gui: remove mappingsPage - libsemanage: Keep copy of
file_contexts.homedirs in policy store - libsemanage: Add support for listing
fcontext.homedirs file - python/semanage: Enable listing file_contexts.homedirs
- libselinux: Add support for pcre2 to pkgconfig definition - libsepol: free
ibendport device names - libsemanage: free genhomedircon fallback user -
python/semanage: drop *_ini functions - python/semanage: Don't use global setup
variable - python/semanage: Enforce noreload only if it's requested by -N option
- python/semanage: Fix export of ibendport entries - python/semanage: Update
Infiniband code to work on python3 - python/sepolicy: Fix sepolicy manpage. -
python/semanage: make seobject.py backward compatible testcases:
https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semodule
https://fedoraproject.org/wiki/QA:Testcase_policycoreutils_semanage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1522942 - spec file should own python module directories
https://bugzilla.redhat.com/show_bug.cgi?id=1522942
[ 2 ] Bug #1487521 - libselinux.pc references libpcre in Requires.private instead of
pcre2-8
https://bugzilla.redhat.com/show_bug.cgi?id=1487521
[ 3 ] Bug #1476798 - please install "setrans" directory to "/run"
instead of "/var/run"
https://bugzilla.redhat.com/show_bug.cgi?id=1476798
[ 4 ] Bug #1484905 - cil_strpool.c: cil_strpool_tab variable is not properly destroyed
https://bugzilla.redhat.com/show_bug.cgi?id=1484905
--------------------------------------------------------------------------------
================================================================================
spglib-1.10.2-1.fc27 (FEDORA-2017-b7092f20fa)
C library for finding and handling crystal symmetries
--------------------------------------------------------------------------------
Update Information:
- Update to spglib-1.10.2 - Fix dependencies
--------------------------------------------------------------------------------
================================================================================
waiverdb-0.4.0-2.fc27 (FEDORA-2017-0c54369c95)
Service for waiving results in ResultsDB
--------------------------------------------------------------------------------
Update Information:
Synchronize specfile with upstream.
--------------------------------------------------------------------------------