The following Fedora 27 Security updates need testing: Age URL 40 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d270e932a3 nagios-4.3.4-3.fc27 19 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9fd430dba0 wireshark-2.4.2-1.fc27 10 https://bodhi.fedoraproject.org/updates/FEDORA-2017-8db9c497f9 qemu-2.10.1-1.fc27 9 https://bodhi.fedoraproject.org/updates/FEDORA-2017-baeedefe13 seamonkey-2.49.1-1.fc27 9 https://bodhi.fedoraproject.org/updates/FEDORA-2017-cc316727f5 modulemd-1.3.2-1.fc27 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9cac2b8b4a fedpkg-1.30-1.fc27 rpkg-1.51-1.fc27 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-46e8bdccef php-7.1.11-1.fc27 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ebb76fc3c9 tomcat-8.0.47-1.fc27 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-48368de8c9 apr-1.6.3-1.fc27 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9e28c78e07 community-mysql-5.7.20-1.fc27 2 https://bodhi.fedoraproject.org/updates/FEDORA-2017-98a361c2b5 java-9-openjdk-9.0.1.11-1.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-ea254105cc kernel-4.13.10-300.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-c2729c23b0 ansible-2.4.1.0-2.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f293e717e2 wordpress-4.8.3-1.fc27 The following builds have been pushed to Fedora 27 updates-testing R-commonmark-1.4-1.fc27 SDL2_image-2.0.2-2.fc27 beignet-1.3.2-1.fc27 bind99-9.9.11-3.fc27 ccdciel-0.9.11-1.605svn.fc27 clinfo-2.2.17.10.25-1.fc27 entr-3.9-1.fc27 fedora-release-notes-27.01-1.fc27 gnome-todo-3.26.2-1.fc27 gnome-tweak-tool-3.26.3-2.fc27 golang-github-patrickmn-go-cache-2.1.0-1.fc27 golang-github-xtaci-smux-1.0.6-1.fc27 gphoto2-2.5.15-1.fc27 libgphoto2-2.5.16-1.fc27 libstoragemgmt-1.6.1-1.fc27 mdds-1.3.0-1.fc27 micropython-1.9.3-1.fc27 mimedefang-2.83-1.fc27 mock-1.4.7-1.fc27 mpdris2-0.7-5.20171028git3c3fe12.fc27 nodejs-8.9.0-1.fc27 pakiti-3.0.2-1.fc27 perl-Alien-pkgconf-0.10-13.fc27 perl-CGI-4.37-1.fc27 pkgconf-1.3.10-1.fc27 pop-gtk-theme-2.2.3.0-1.fc27 postfix-3.2.4-1.fc27 python-mpd2-0.5.5-3.fc27 python-ndjson-testrunner-1.0.0-1.fc27 python2-2.7.14-1.fc27 roundcubemail-1.3.2-1.fc27 scap-security-guide-0.1.36-1.fc27 system-storage-manager-0.5-0.fc27 wordpress-4.8.3-1.fc27 wpa_supplicant-2.6-12.fc27 zint-2.6.2-1.fc27 Details about builds: ================================================================================ R-commonmark-1.4-1.fc27 (FEDORA-2017-37612d34a8) High Performance CommonMark and Github Markdown Rendering in R -------------------------------------------------------------------------------- Update Information: Initial package of commonmark for R. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1507774 - Review Request: R-commonmark - High Performance CommonMark and Github Markdown Rendering in R https://bugzilla.redhat.com/show_bug.cgi?id=1507774 -------------------------------------------------------------------------------- ================================================================================ SDL2_image-2.0.2-2.fc27 (FEDORA-2017-a6b7cb4d20) Image loading library for SDL -------------------------------------------------------------------------------- Update Information: Update to 2.0.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508228 - SDL2_image-2.0.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508228 -------------------------------------------------------------------------------- ================================================================================ beignet-1.3.2-1.fc27 (FEDORA-2017-45e1576bc8) Open source implementation of the OpenCL for Intel GPUs -------------------------------------------------------------------------------- Update Information: - Add some Gemini Lake devices support. - Add cl_intel_required_subgroup_size extension support. - Fix some other bugs. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508176 - beignet-1.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508176 -------------------------------------------------------------------------------- ================================================================================ bind99-9.9.11-3.fc27 (FEDORA-2017-b0f6ce0915) The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries -------------------------------------------------------------------------------- Update Information: Fix dynamic symbols conflict with ldap (#1205168) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1205168 - dhcp not working with ldap configuration https://bugzilla.redhat.com/show_bug.cgi?id=1205168 -------------------------------------------------------------------------------- ================================================================================ ccdciel-0.9.11-1.605svn.fc27 (FEDORA-2017-fc9ca90955) CCD capture software -------------------------------------------------------------------------------- Update Information: Update to 0.9.11 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1497001 - None https://bugzilla.redhat.com/show_bug.cgi?id=1497001 -------------------------------------------------------------------------------- ================================================================================ clinfo-2.2.17.10.25-1.fc27 (FEDORA-2017-4b808040cb) Enumerate OpenCL platforms and devices -------------------------------------------------------------------------------- Update Information: Update to 2.2.17.10.25 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1507124 - clinfo-2.2.17.10.25 is available https://bugzilla.redhat.com/show_bug.cgi?id=1507124 -------------------------------------------------------------------------------- ================================================================================ entr-3.9-1.fc27 (FEDORA-2017-b479aa0ca3) Run arbitrary commands when files change -------------------------------------------------------------------------------- Update Information: New upstream release: * Run the command when spacebar is pressed * Fix use of poll(2) to avoid possible busy-loop on Linux -------------------------------------------------------------------------------- ================================================================================ fedora-release-notes-27.01-1.fc27 (FEDORA-2017-f1d9edde16) Release Notes -------------------------------------------------------------------------------- Update Information: Update release notes for F27 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1506052 - Package build of official release notes required for Fedora 27 Final https://bugzilla.redhat.com/show_bug.cgi?id=1506052 [ 2 ] Bug #1485651 - fedora-release-notes on F26 have a higher version than f27 https://bugzilla.redhat.com/show_bug.cgi?id=1485651 -------------------------------------------------------------------------------- ================================================================================ gnome-todo-3.26.2-1.fc27 (FEDORA-2017-f8753bfa86) Personal task manager for GNOME -------------------------------------------------------------------------------- Update Information: Update to 3.26.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508187 - gnome-todo-3.26.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508187 -------------------------------------------------------------------------------- ================================================================================ gnome-tweak-tool-3.26.3-2.fc27 (FEDORA-2017-a9a604f014) A tool to customize advanced GNOME 3 options -------------------------------------------------------------------------------- Update Information: Add dependency on Nautilus (see [GNOME Bugzilla #788685](https://bugzilla.gnome.org/show_bug.cgi?id=788685)) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1473049 - gnome-tweak-tool-3.26.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1473049 -------------------------------------------------------------------------------- ================================================================================ golang-github-patrickmn-go-cache-2.1.0-1.fc27 (FEDORA-2017-5cd4cef969) An in-memory key:value store/cache library for Go (Golang) -------------------------------------------------------------------------------- Update Information: Update to upstream release 2.1.0: * Add SetDefault(k string, x interface{}) for setting with the default expiration value * Add GetWithExpiration(k string) (interface{}, time.Time, bool) for getting both the value and expiration time (thanks Alex Edwards) * Fix janitor data race (thanks Vivian Mathews) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508200 - golang-github-patrickmn-go-cache-2.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508200 -------------------------------------------------------------------------------- ================================================================================ golang-github-xtaci-smux-1.0.6-1.fc27 (FEDORA-2017-15e4bcda1f) Simple Stream Multiplexing for golang -------------------------------------------------------------------------------- Update Information: Update to version 1.0.6. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508244 - golang-github-xtaci-smux-v1.0.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508244 -------------------------------------------------------------------------------- ================================================================================ gphoto2-2.5.15-1.fc27 (FEDORA-2017-79e5d3c217) Software for accessing digital cameras -------------------------------------------------------------------------------- Update Information: Update gphoto2 and libgphoto2 to latest releases -------------------------------------------------------------------------------- References: [ 1 ] Bug #1498059 - gphoto2-2_5_15 is available https://bugzilla.redhat.com/show_bug.cgi?id=1498059 [ 2 ] Bug #1497874 - libgphoto2-2.5.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1497874 -------------------------------------------------------------------------------- ================================================================================ libgphoto2-2.5.16-1.fc27 (FEDORA-2017-79e5d3c217) Library for accessing digital cameras -------------------------------------------------------------------------------- Update Information: Update gphoto2 and libgphoto2 to latest releases -------------------------------------------------------------------------------- References: [ 1 ] Bug #1498059 - gphoto2-2_5_15 is available https://bugzilla.redhat.com/show_bug.cgi?id=1498059 [ 2 ] Bug #1497874 - libgphoto2-2.5.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=1497874 -------------------------------------------------------------------------------- ================================================================================ libstoragemgmt-1.6.1-1.fc27 (FEDORA-2017-dd7ccff55e) Storage array management library -------------------------------------------------------------------------------- Update Information: Upgrade to 1.6.1 ---- Upgrade to version 1.6.0: * New error number for deleting volume/fs with child dependency: * C: `LSM_ERR_HAS_CHILD_DEPENDENCY` * Python: `lsm.ErrorNumber.HAS_CHILD_DEPENDENCY` * Fix incorrect SCSI VPD query for 0x89 and 0xb1. * Fix regression on using libstoragemgmt with pywbem 0.7.0. * Updates on manpage and help message of lsmcli. -------------------------------------------------------------------------------- ================================================================================ mdds-1.3.0-1.fc27 (FEDORA-2017-29b6fb5234) A collection of multi-dimensional data structures and indexing algorithms -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ================================================================================ micropython-1.9.3-1.fc27 (FEDORA-2017-0da2a9d81a) Implementation of Python 3 with very low memory footprint -------------------------------------------------------------------------------- Update Information: Update to [1.9.3](https://github.com/micropython/micropython/releases/tag/v1.9.3) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508424 - micropython-v1.9.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508424 -------------------------------------------------------------------------------- ================================================================================ mimedefang-2.83-1.fc27 (FEDORA-2017-60700be746) E-Mail filtering framework using Sendmail's Milter interface -------------------------------------------------------------------------------- Update Information: MIMEDefang 2.83 =============== * mimedefang.pl: Do not add a Message-ID: header when handing a message to SpamAssassin if the original message lacks such a header. * Add systemd unit files; thanks to Richard Laager. Downstream comment: No impact or change, Fedora and EPEL packages are using optimized systemd unit files already since MIMEDefang 2.78 (January 2016) * Minor tweaks to the sample filter. * mimedefang-multiplexor: Change the maxLifetime option to kick in only once a worker has processed at least one request; also check for exceeded lifetimes during the periodic idle-time check. * mimedefang-multiplexor: Fix an exit(EXIT_FAILURE) to be exit(EXIT_SUCCESS) in on place. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508217 - mimedefang-2.83 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508217 -------------------------------------------------------------------------------- ================================================================================ mock-1.4.7-1.fc27 (FEDORA-2017-22f9473ef7) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: * There is a new option in config `config_opts['chrootgroup']`, which allows you to change name of group inside of chroot. * Any key for `config_opts` you specify with 'bootstrap_*' will be copied to bootstrap config e.g., `config_opts['bootstrap_system_yum_command'] = '/usr/bin/yum-deprecated'` will become `config_opts['system_yum_command'] = '/usr/bin/yum-deprecated'` for bootstrap config. * There are three new default: config_opts['bootstrap_chroot_additional_packages'] = [] config_opts['bootstrap_module_enable'] = [] config_opts['bootstrap_module_install'] = [] This will not install any additional packages or modules into bootstrap chroot. * Mock now recognize DeskOS. * Previously when `config_opts['rpmbuild_networking']` was enabled we passed `--private-network` to systemd-nspawn. However that lead there was no default route. And you cannot bind() UDP socket to all IP addresses and then join multicast group, without having default route. Now we do onot add `--private-network` to systemd-nspawn, instead we setup network namespace ourselves and we also add default route pointing to loopback interface (only interface in the new namespace). This feature introduce new dependency on pyroute2. Bugfixes: * Delete rootdir as well when calling clean. In case one overrides the rootdir option, and the rootdir is located outside of basedir, it was not cleaned up when calling --clean. Fix this case by checking if the rootdir is outside basedir. If that is the case, run an extra rmtree() on it. * Choose good symbolic link of default.cfg on Mageia. * Ccache is now mounted to /var/tmp as /tmp gets over-mounted with tmpfs when system-nspawn is used. * Output of `--debug-config` is now sorted. * Use primary key for Fedora 27+ on s390x. -------------------------------------------------------------------------------- ================================================================================ mpdris2-0.7-5.20171028git3c3fe12.fc27 (FEDORA-2017-7cbd10475c) Provide MPRIS 2 support to mpd -------------------------------------------------------------------------------- Update Information: - New package - python-mpd2 - mpdris2 updated to use this -------------------------------------------------------------------------------- References: [ 1 ] Bug #1507235 - Review Request: python-mpd2 - Python library providing a client interface for MPD https://bugzilla.redhat.com/show_bug.cgi?id=1507235 [ 2 ] Bug #1404618 - mpdris2: Switch to Python 3 https://bugzilla.redhat.com/show_bug.cgi?id=1404618 [ 3 ] Bug #1389586 - mpdris2 should depend on python-mutagen https://bugzilla.redhat.com/show_bug.cgi?id=1389586 -------------------------------------------------------------------------------- ================================================================================ nodejs-8.9.0-1.fc27 (FEDORA-2017-b1c759aafe) JavaScript runtime -------------------------------------------------------------------------------- Update Information: * Update to 8.9.0 * Drop some patches now carried upstream https://github.com/nodejs/node/blob/v8.9.0/doc/changelogs/CHANGELOG_V8.md#8.9.0 -------------------------------------------------------------------------------- ================================================================================ pakiti-3.0.2-1.fc27 (FEDORA-2017-cf3b307ea6) Patching status monitoring tool -------------------------------------------------------------------------------- Update Information: * new upstream release -------------------------------------------------------------------------------- ================================================================================ perl-Alien-pkgconf-0.10-13.fc27 (FEDORA-2017-6d5f115965) Discover pkgconf and libpkgconf -------------------------------------------------------------------------------- Update Information: * Bug fixes: - ensure we work on a zeroed buffer prior to calling `realpath(2)` with it - fix path deduplication edge case when `cache-inodes` feature is unavailable - fix path rewriting regression with `PKG_CONFIG_SYSROOT_DIR` when `PKG_CONFIG_SYSROOT_DIR` is set to `/` -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508420 - pkgconf-1.3.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508420 -------------------------------------------------------------------------------- ================================================================================ perl-CGI-4.37-1.fc27 (FEDORA-2017-fd6cd0c897) Handle Common Gateway Interface requests and responses -------------------------------------------------------------------------------- Update Information: Updated to the latest version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508409 - None https://bugzilla.redhat.com/show_bug.cgi?id=1508409 -------------------------------------------------------------------------------- ================================================================================ pkgconf-1.3.10-1.fc27 (FEDORA-2017-6d5f115965) Package compiler and linker metadata toolkit -------------------------------------------------------------------------------- Update Information: * Bug fixes: - ensure we work on a zeroed buffer prior to calling `realpath(2)` with it - fix path deduplication edge case when `cache-inodes` feature is unavailable - fix path rewriting regression with `PKG_CONFIG_SYSROOT_DIR` when `PKG_CONFIG_SYSROOT_DIR` is set to `/` -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508420 - pkgconf-1.3.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508420 -------------------------------------------------------------------------------- ================================================================================ pop-gtk-theme-2.2.3.0-1.fc27 (FEDORA-2017-7fd49de960) Version 2 of the Pop GTK+ Theme -------------------------------------------------------------------------------- Update Information: Bump 2.2.3.0 release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1507015 - update https://bugzilla.redhat.com/show_bug.cgi?id=1507015 [ 2 ] Bug #1505197 - pop-gtk-theme-2.2.0-0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1505197 -------------------------------------------------------------------------------- ================================================================================ postfix-3.2.4-1.fc27 (FEDORA-2017-da9c8a283b) Postfix Mail Transport Agent -------------------------------------------------------------------------------- Update Information: This is new version of postfix. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508234 - postfix-3.2.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508234 -------------------------------------------------------------------------------- ================================================================================ python-mpd2-0.5.5-3.fc27 (FEDORA-2017-7cbd10475c) Python library providing a client interface for MPD -------------------------------------------------------------------------------- Update Information: - New package - python-mpd2 - mpdris2 updated to use this -------------------------------------------------------------------------------- References: [ 1 ] Bug #1507235 - Review Request: python-mpd2 - Python library providing a client interface for MPD https://bugzilla.redhat.com/show_bug.cgi?id=1507235 [ 2 ] Bug #1404618 - mpdris2: Switch to Python 3 https://bugzilla.redhat.com/show_bug.cgi?id=1404618 [ 3 ] Bug #1389586 - mpdris2 should depend on python-mutagen https://bugzilla.redhat.com/show_bug.cgi?id=1389586 -------------------------------------------------------------------------------- ================================================================================ python-ndjson-testrunner-1.0.0-1.fc27 (FEDORA-2017-ce848c555e) A test runner that outputs newline delimited JSON results -------------------------------------------------------------------------------- Update Information: Initial package of ndjson-testrunner for Python. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1507704 - Review Request: python-ndjson-testrunner - A test runner that outputs newline delimited JSON results https://bugzilla.redhat.com/show_bug.cgi?id=1507704 -------------------------------------------------------------------------------- ================================================================================ python2-2.7.14-1.fc27 (FEDORA-2017-53602db43f) An interpreted, interactive, object-oriented programming language -------------------------------------------------------------------------------- Update Information: Update to version 2.7.14 -------------------------------------------------------------------------------- ================================================================================ roundcubemail-1.3.2-1.fc27 (FEDORA-2017-a93039e233) Round Cube Webmail is a browser-based multilingual IMAP client -------------------------------------------------------------------------------- Update Information: Update to 1.3.2 with various bugfixes. See: https://github.com/roundcube/roundcubemail/releases/tag/1.3.2 for full details. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508242 - roundcubemail-1.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508242 -------------------------------------------------------------------------------- ================================================================================ scap-security-guide-0.1.36-1.fc27 (FEDORA-2017-c1fb7864ad) Security guidance and baselines in SCAP formats -------------------------------------------------------------------------------- Update Information: Update to latest upstream SCAP-Security-Guide-0.1.36 release: -------------------------------------------------------------------------------- ================================================================================ system-storage-manager-0.5-0.fc27 (FEDORA-2017-192c64c5c4) A single tool to manage your storage -------------------------------------------------------------------------------- Update Information: New upstream stable version 0.5 -------------------------------------------------------------------------------- ================================================================================ wordpress-4.8.3-1.fc27 (FEDORA-2017-f293e717e2) Blog tool and publishing platform -------------------------------------------------------------------------------- Update Information: Update to wordpress 4.8.3. See: https://wordpress.org/news/2017/10/wordpress-4-8-3-security-release/ for details -------------------------------------------------------------------------------- References: [ 1 ] Bug #1508255 - wordpress-4.8.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1508255 -------------------------------------------------------------------------------- ================================================================================ wpa_supplicant-2.6-12.fc27 (FEDORA-2017-daa452ea9d) WPA/WPA2/IEEE 802.1X Supplicant -------------------------------------------------------------------------------- Update Information: The update * fixes crash when using MACsec without macsec.ko loaded - rh #1497640 * enables Fast BSS Transition - rh #1372928 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1497640 - wpa_supplicant segfaults when 'driver_macsec_linux' is used, macsec.ko is not loaded and EAPOL packet is received https://bugzilla.redhat.com/show_bug.cgi?id=1497640 [ 2 ] Bug #1372928 - compiled without 802.11r fast roaming https://bugzilla.redhat.com/show_bug.cgi?id=1372928 -------------------------------------------------------------------------------- ================================================================================ zint-2.6.2-1.fc27 (FEDORA-2017-c8f693cba3) Barcode generator library -------------------------------------------------------------------------------- Update Information: This is a bugfix release with the following changes/additions: - fixed some bugs in Aztec and DotCode - fixed an issue concerning raster images of Maxicode - expanded escape sequence support -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx
