The following Fedora 27 Security updates need testing: Age URL 39 https://bodhi.fedoraproject.org/updates/FEDORA-2017-15efa72a0c docker-1.13.1-44.git584d391.fc27 35 https://bodhi.fedoraproject.org/updates/FEDORA-2017-913288e9a9 mongodb-3.4.10-1.fc27 32 https://bodhi.fedoraproject.org/updates/FEDORA-2017-d7c0748c1b pdns-4.1.0-1.fc27 32 https://bodhi.fedoraproject.org/updates/FEDORA-2017-14f5c6cdac qpid-cpp-1.37.0-1.fc27 19 https://bodhi.fedoraproject.org/updates/FEDORA-2017-f0e5ad250c heimdal-7.5.0-1.fc27 15 https://bodhi.fedoraproject.org/updates/FEDORA-2017-01ad8b3946 heketi-5.0.1-1.fc27 13 https://bodhi.fedoraproject.org/updates/FEDORA-2017-3997279e65 wireshark-2.4.3-1.fc27 7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-2d4c9a6e37 monit-5.25.1-1.fc27 5 https://bodhi.fedoraproject.org/updates/FEDORA-2017-41242dfe10 asterisk-14.7.5-1.fc27 4 https://bodhi.fedoraproject.org/updates/FEDORA-2017-1c73749b66 xrdp-0.9.5-1.fc27 3 https://bodhi.fedoraproject.org/updates/FEDORA-2017-4c30d86843 mupdf-1.12.0-1.fc27 1 https://bodhi.fedoraproject.org/updates/FEDORA-2018-b1f3217ae6 nasm-2.13.02-1.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-7edfa0cfbf awstats-7.6-8.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-d034538627 php-7.1.13-1.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-448444341e sox-14.4.2.0-13.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-22d5fa8a90 kernel-4.14.11-300.fc27 The following builds have been pushed to Fedora 27 updates-testing R-littler-0.3.3-1.fc27 R-withr-2.1.1-1.fc27 apr-util-1.6.1-2.fc27 atop-2.3.0-8.fc27 awstats-7.6-8.fc27 bcc-0.5.0-1.fc27 bcm283x-firmware-20171201-1.9426e18.fc27 community-mysql-5.7.20-2.fc27 crrcsim-0.9.13-1.fc27 ctk-0.1-0.7.20171224git71799c2.fc27 ddccontrol-0.4.3-1.fc27 dianara-1.4.1-2.fc27 fedmsg-1.1.0-1.fc27 fotoxx-18.01-1.fc27 gala-0.3.0-0.git139.439f.2.fc27 gap-pkg-sophus-1.23-1.fc27 gdbm-1.14-1.fc27 getdns-1.3.0-1.fc27 golang-github-nwidger-jsoncolor-0-0.1.20170215git75a6de4.fc27 initscripts-9.79-1.fc27 iproute-4.14.1-2.fc27 kernel-4.14.11-300.fc27 libcircle-0.2.1-0.3rc1.fc27 librs232-1.0.3-3.20171229git21ecc3c.fc27 mellowplayer-3.2.0-1.fc27 nim-0.17.2-5.fc27 os-autoinst-4.5-2.20171222git1c7bb3f.fc27 perl-AppConfig-1.71-10.fc27 persepolis-3.0.1-2.fc27 php-7.1.13-1.fc27 php-pecl-apcu-5.1.9-1.fc27 php-pecl-redis-3.1.6-1.fc27 python-htmlmin-0.1.12-1.git220b1d1.fc27 python-nbconvert-5.3.1-3.fc27 python-pyinsane2-2.0.10-1.fc27 python-pypillowfight-0.2.2-2.fc27 python-zuul-sphinx-0.2.1-1.fc27 quodlibet-4.0.0-2.fc27 rebloom-1.0.3-2.fc27 rejson-1.0.1-1.fc27 scipy-1.0.0-4.fc27 shyaml-0.5.0-3.fc27 sox-14.4.2.0-13.fc27 timew-1.0.0-3.fc27 xsel-1.2.0-21.fc27 xxhash-0.6.4-1.fc27 Details about builds: ================================================================================ R-littler-0.3.3-1.fc27 (FEDORA-2018-958ac7da29) littler: R at the Command-Line via 'r' -------------------------------------------------------------------------------- Update Information: New upstream release. -------------------------------------------------------------------------------- ================================================================================ R-withr-2.1.1-1.fc27 (FEDORA-2018-2f79ff9e6a) Run Code 'With' Temporarily Modified Global State -------------------------------------------------------------------------------- Update Information: Update to latest release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1528101 - R-withr-2.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1528101 -------------------------------------------------------------------------------- ================================================================================ apr-util-1.6.1-2.fc27 (FEDORA-2018-b24e8679cc) Apache Portable Runtime Utility library -------------------------------------------------------------------------------- Update Information: This update fixes apr-util-mysql to correctly use the MariaDB client libraries. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1526789 - httpd does not work with mysql in f27, although apr-util-mysql properly installed https://bugzilla.redhat.com/show_bug.cgi?id=1526789 [ 2 ] Bug #1494093 - Use mariadb-connector-c-devel instead of mysql-devel or mariadb-devel https://bugzilla.redhat.com/show_bug.cgi?id=1494093 -------------------------------------------------------------------------------- ================================================================================ atop-2.3.0-8.fc27 (FEDORA-2018-64c69efe31) An advanced interactive monitor to view the load on system and process level -------------------------------------------------------------------------------- Update Information: Multiple bugfixes. -------------------------------------------------------------------------------- ================================================================================ awstats-7.6-8.fc27 (FEDORA-2018-7edfa0cfbf) Advanced Web Statistics -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-1000501 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529349 - CVE-2017-1000501 awstat: Two path traversal issues in awstat.pl https://bugzilla.redhat.com/show_bug.cgi?id=1529349 -------------------------------------------------------------------------------- ================================================================================ bcc-0.5.0-1.fc27 (FEDORA-2018-bc2f095429) BPF Compiler Collection (BCC) -------------------------------------------------------------------------------- Update Information: Rebase to new released version -------------------------------------------------------------------------------- ================================================================================ bcm283x-firmware-20171201-1.9426e18.fc27 (FEDORA-2018-77076682c9) Broadcom bcm283x firmware for the Raspberry Pi -------------------------------------------------------------------------------- Update Information: Latest firmware -------------------------------------------------------------------------------- ================================================================================ community-mysql-5.7.20-2.fc27 (FEDORA-2018-4bfe75eb5e) MySQL client programs and shared libraries -------------------------------------------------------------------------------- Update Information: Start providing static library in order to be able to fix "mysql-connector-odbc" package. -------------------------------------------------------------------------------- ================================================================================ crrcsim-0.9.13-1.fc27 (FEDORA-2018-5f441487a4) Model-Airplane Flight Simulation Program -------------------------------------------------------------------------------- Update Information: Update to the latest avilable version (rhbz#1510107) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1510107 - update 0.9.13 https://bugzilla.redhat.com/show_bug.cgi?id=1510107 -------------------------------------------------------------------------------- ================================================================================ ctk-0.1-0.7.20171224git71799c2.fc27 (FEDORA-2018-18c6d89c1c) The Commmon Toolkit for biomedical imaging -------------------------------------------------------------------------------- Update Information: - Update to recent snapshot - Fix FTBFS -------------------------------------------------------------------------------- ================================================================================ ddccontrol-0.4.3-1.fc27 (FEDORA-2018-ae4afdd56d) Control your monitor by software using the DDC/CI protocol -------------------------------------------------------------------------------- Update Information: This is new version of ddccontrol. -------------------------------------------------------------------------------- ================================================================================ dianara-1.4.1-2.fc27 (FEDORA-2018-4885fe3613) Pump.io application for the desktop -------------------------------------------------------------------------------- Update Information: - New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529936 - Review Request: dianara - Pump.io application for the desktop https://bugzilla.redhat.com/show_bug.cgi?id=1529936 -------------------------------------------------------------------------------- ================================================================================ fedmsg-1.1.0-1.fc27 (FEDORA-2018-d8928dadc1) Tools for Fedora Infrastructure real-time messaging -------------------------------------------------------------------------------- Update Information: # v1.1.0 ## Deprecations - Using URLs for the CA and CRL settings (`ca_cert_location` and `crl_location` respectively) is now deprecated and will be removed in a future release. Please use filesystem paths instead. ## Features - Allow the CA and CRL configuration options to be file paths ([\#484](https://github.com/fedora-infra/fedmsg/pull/484)). - All configuration settings now have defaults and validators ([\#488](https://github.com/fedora-infra/fedmsg/pull/488)). - Strengthen "legacy protection" in fedmsg.meta by catching KeyErrors ([\#493](https://github.com/fedora-infra/fedmsg/pull/493)). ## Bug fixes - Remove the duplicate dependency on `cryptography` from the main install requires ([\#486](https://github.com/fedora-infra/fedmsg/pull/486)). - Adjust the x509 signing API to return text instead of bytes ([\#495](https://github.com/fedora-infra/fedmsg/issues/495)). ## Development improvements - Alter how the tests determine if cryptography is available to work better with old versions of pyOpenSSL ([\#482](https://github.com /fedora-infra/fedmsg/pull/482)). -------------------------------------------------------------------------------- ================================================================================ fotoxx-18.01-1.fc27 (FEDORA-2018-1a9ebf63e1) Photo editor -------------------------------------------------------------------------------- Update Information: 18.01 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1530007 - fotoxx-18.01 is available https://bugzilla.redhat.com/show_bug.cgi?id=1530007 -------------------------------------------------------------------------------- ================================================================================ gala-0.3.0-0.git139.439f.2.fc27 (FEDORA-2018-2af03493b7) Gala window manager -------------------------------------------------------------------------------- Update Information: Add a patch so the default window button layout matches the default on fedora. ---- Bump to commit 439fdf6. -------------------------------------------------------------------------------- ================================================================================ gap-pkg-sophus-1.23-1.fc27 (FEDORA-2018-0fe1c1ffed) Computing in nilpotent Lie algebras -------------------------------------------------------------------------------- Update Information: This new package is written to compute with nilpotent Lie algebras over finite prime fields. Using this package, you can compute the cover, the list of immediate descendants, and the automorphism group of such Lie algebras. You can also test if two such Lie algebras are isomorphic. The immediate descendant function of the package can be used to classify small-dimensional nilpotent Lie algebras over a given field. For instance, the package author obtained a classification of nilpotent Lie algebras with dimension at most 9 over F_2; see http://www.sztaki.hu/~schneider/Research/SmallLie. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1519608 - None https://bugzilla.redhat.com/show_bug.cgi?id=1519608 -------------------------------------------------------------------------------- ================================================================================ gdbm-1.14-1.fc27 (FEDORA-2018-639290a9b9) A GNU set of database routines which use extensible hashing -------------------------------------------------------------------------------- Update Information: Update to latest version that also fixes problem with GDBM_UNKNOWN_UPDATE definition problem. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1467431 - GDBM_UNKNOWN_UPDATE definition problem https://bugzilla.redhat.com/show_bug.cgi?id=1467431 -------------------------------------------------------------------------------- ================================================================================ getdns-1.3.0-1.fc27 (FEDORA-2018-7b15dc332b) Modern asynchronous API to the DNS -------------------------------------------------------------------------------- Update Information: Updated to 1.3.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1462043 - getdns-1.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1462043 -------------------------------------------------------------------------------- ================================================================================ golang-github-nwidger-jsoncolor-0-0.1.20170215git75a6de4.fc27 (FEDORA-2018-343f30b49e) Colorized JSON output for Go -------------------------------------------------------------------------------- Update Information: First package for Fedora -------------------------------------------------------------------------------- References: [ 1 ] Bug #1525696 - Review Request: golang-github-nwidger-jsoncolor - Colorized JSON output for Go https://bugzilla.redhat.com/show_bug.cgi?id=1525696 -------------------------------------------------------------------------------- ================================================================================ initscripts-9.79-1.fc27 (FEDORA-2018-4c9bc9e9d8) Scripts to bring up network interfaces and legacy utilities -------------------------------------------------------------------------------- Update Information: This release fixes newly discovered [regression](https://github.com/fedora- sysv/initscripts/issues/155). -------------------------------------------------------------------------------- ================================================================================ iproute-4.14.1-2.fc27 (FEDORA-2018-949640c83d) Advanced IP routing and network device configuration tools -------------------------------------------------------------------------------- Update Information: Rebase package onto upstream version 4.14. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1530542 - Rebase iproute to 4.14 https://bugzilla.redhat.com/show_bug.cgi?id=1530542 -------------------------------------------------------------------------------- ================================================================================ kernel-4.14.11-300.fc27 (FEDORA-2018-22d5fa8a90) The Linux kernel -------------------------------------------------------------------------------- Update Information: The 4.14.11 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1530274 - CVE-2017-17857 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging mishandling of invalid variable stack read operations https://bugzilla.redhat.com/show_bug.cgi?id=1530274 [ 2 ] Bug #1530273 - CVE-2017-17856 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging the lack of stack-pointer alignment enforcement https://bugzilla.redhat.com/show_bug.cgi?id=1530273 [ 3 ] Bug #1530272 - CVE-2017-17855 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging improper use of pointers in place of scalars https://bugzilla.redhat.com/show_bug.cgi?id=1530272 [ 4 ] Bug #1530271 - CVE-2017-17854 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging unrestricted integer values for pointer arithmetic https://bugzilla.redhat.com/show_bug.cgi?id=1530271 [ 5 ] Bug #1530270 - CVE-2017-17853 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging incorrect BPF_RSH signed bounds calculations https://bugzilla.redhat.com/show_bug.cgi?id=1530270 [ 6 ] Bug #1530269 - CVE-2017-17852 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging mishandling of 32-bit ALU ops https://bugzilla.redhat.com/show_bug.cgi?id=1530269 [ 7 ] Bug #1529124 - CVE-2017-17862 kernel: Improper logic pruning in bpf/verifier.c https://bugzilla.redhat.com/show_bug.cgi?id=1529124 [ 8 ] Bug #1529123 - CVE-2017-17863 kernel: integer overflow in static int check_alu_op function in bpf/verifier.c https://bugzilla.redhat.com/show_bug.cgi?id=1529123 [ 9 ] Bug #1529120 - CVE-2017-17864 kernel: information disclosure via pointer leak in kernel/bpf/verifier.c https://bugzilla.redhat.com/show_bug.cgi?id=1529120 -------------------------------------------------------------------------------- ================================================================================ libcircle-0.2.1-0.3rc1.fc27 (FEDORA-2018-0975aa7ad1) A library used to distribute workloads -------------------------------------------------------------------------------- Update Information: Initial import -------------------------------------------------------------------------------- References: [ 1 ] Bug #1513733 - Review Request: libcircle - A library used to distribute workloads https://bugzilla.redhat.com/show_bug.cgi?id=1513733 -------------------------------------------------------------------------------- ================================================================================ librs232-1.0.3-3.20171229git21ecc3c.fc27 (FEDORA-2018-b490728a33) Library for serial communications over RS-232 with Lua bindings -------------------------------------------------------------------------------- Update Information: librs232 is a multi-platform library that provides support for communicating over serial ports (e.g. RS-232). It also provides Lua bindings. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1528612 - Review Request: librs232 - Library for serial communications over RS-232 with Lua bindings https://bugzilla.redhat.com/show_bug.cgi?id=1528612 -------------------------------------------------------------------------------- ================================================================================ mellowplayer-3.2.0-1.fc27 (FEDORA-2018-66ff19f596) Cloud music integration for your desktop -------------------------------------------------------------------------------- Update Information: Update to 3.2.0-1 -------------------------------------------------------------------------------- ================================================================================ nim-0.17.2-5.fc27 (FEDORA-2018-712ec65937) Statically typed, imperative programming language -------------------------------------------------------------------------------- Update Information: Updated runtime dependencies -------------------------------------------------------------------------------- ================================================================================ os-autoinst-4.5-2.20171222git1c7bb3f.fc27 (FEDORA-2018-c1435bfdbf) OS-level test automation -------------------------------------------------------------------------------- Update Information: This update includes a single specific [bug fix](https://github.com/os-autoinst /os-autoinst/commit/1c7bb3f56f09b4ee902cd4632c7dc134cb315499) from upstream, which *may* apply to us. We have tests that use `NUMDISKS` - they don't seem to be affected, but it can't really hurt. I had to rebuild the package for Rawhide anyway, so figured updating for F27 can't hurt anything. -------------------------------------------------------------------------------- ================================================================================ perl-AppConfig-1.71-10.fc27 (FEDORA-2018-4fd6b890a7) Perl module for reading configuration files -------------------------------------------------------------------------------- Update Information: General package clean-up, fixing an issue in the changelog for the csmock static analysis tool. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1527541 - %check RPM macro used in %changelog needs to be escaped https://bugzilla.redhat.com/show_bug.cgi?id=1527541 -------------------------------------------------------------------------------- ================================================================================ persepolis-3.0.1-2.fc27 (FEDORA-2018-2e35b639c9) A powerful download manager powered by aria2 -------------------------------------------------------------------------------- Update Information: Initial release of Persepolis download manager -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529891 - Review Request: persepolis - A powerful download manager powered by aria2 https://bugzilla.redhat.com/show_bug.cgi?id=1529891 -------------------------------------------------------------------------------- ================================================================================ php-7.1.13-1.fc27 (FEDORA-2018-d034538627) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information: **PHP version 7.1.13** (04 Jan 2018) **Core:** * Fixed bug php#75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence) * Fixed bug php#75384 (PHP seems incompatible with OneDrive files on demand). (Anatol) * Fixed bug php#74862 (Unable to clone instance when private __clone defined). (Daniel Ciochiu) * Fixed bug php#75074 (php-process crash when is_file() is used with strings longer 260 chars). (Anatol) **CLI Server:** * Fixed bug php#60471 (Random "Invalid request (unexpected EOF)" using a router script). (SammyK) * Fixed bug php#73830 (Directory does not exist). (Anatol) **FPM:** * Fixed bug php#64938 (libxml_disable_entity_loader setting is shared between requests). (Remi) **Opcache:** * Fixed bug php#75608 ("Narrowing occurred during type inference" error). (Laruence, Dmitry) * Fixed bug php#75579 (Interned strings buffer overflow may cause crash). (Dmitry) * Fixed bug php#75570 ("Narrowing occurred during type inference" error). (Dmitry) **PCRE:** * Fixed bug php#74183 (preg_last_error not returning error code after error). (Andrew Nester) **Phar:** * Fixed bug php#74782 (remove file name from output to avoid XSS). (stas) **Standard:** * Fixed bug php#75511 (fread not free unused buffer). (Laruence) * Fixed bug php#75514 (mt_rand returns value outside [$min,$max]+ on 32-bit) (Remi) * Fixed bug php#75535 (Inappropriately parsing HTTP response leads to PHP segment fault). (Nikita) * Fixed bug php#75409 (accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing). (sarciszewski) * Fixed bug php#73124 (php_ini_scanned_files() not reporting correctly). (John Stevenson) * Fixed bug php#75574 (putenv does not work properly if parameter contains non-ASCII unicode character). (Anatol) **Zip:** * Fixed bug php#75540 (Segfault with libzip 1.3.1). (Remi) -------------------------------------------------------------------------------- ================================================================================ php-pecl-apcu-5.1.9-1.fc27 (FEDORA-2018-623ece652f) APC User Cache -------------------------------------------------------------------------------- Update Information: **Version 5.1.9** - fix gh#234 mmap disabled when configure is called with --enable-apcu-mmap - fix gh#226 Warning: apcu_fetch(): apc_fetch() expects a string or array of strings. - mitigate gh#223 Fatal error when starting php on windows - add support for PCRE2 in 7.3 - use row formatting for information in phpinfo() tables - set IS_STR_PERSISTENT so refcounting failures are reported by -DRC_DEBUG=1 - fix gh#266 refcounting errors in APCIterator -------------------------------------------------------------------------------- ================================================================================ php-pecl-redis-3.1.6-1.fc27 (FEDORA-2018-10b68111ba) Extension for communicating with the Redis key-value store -------------------------------------------------------------------------------- Update Information: Release notes **phpredis 3.1.6** This release conains only fix of RedisArray distributor hashing function which was broken in 3.1.4. Huge thanks to rexchen123 -------------------------------------------------------------------------------- ================================================================================ python-htmlmin-0.1.12-1.git220b1d1.fc27 (FEDORA-2018-5bb08e4ceb) HTML Minifier -------------------------------------------------------------------------------- Update Information: Update to 0.1.12 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529798 - python-htmlmin-0.1.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1529798 -------------------------------------------------------------------------------- ================================================================================ python-nbconvert-5.3.1-3.fc27 (FEDORA-2018-12813dbbb2) Converting Jupyter Notebooks -------------------------------------------------------------------------------- Update Information: Fix directory ownership in python subpackages -------------------------------------------------------------------------------- ================================================================================ python-pyinsane2-2.0.10-1.fc27 (FEDORA-2018-6642f2fc52) Python library to access and use image scanners (Linux/Windows/etc) -------------------------------------------------------------------------------- Update Information: Initial package of pyinsane2 for Python. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529230 - Review Request: python-pyinsane2 - Python library to access and use image scanners (Linux/Windows/etc) https://bugzilla.redhat.com/show_bug.cgi?id=1529230 -------------------------------------------------------------------------------- ================================================================================ python-pypillowfight-0.2.2-2.fc27 (FEDORA-2018-96ce59df4a) Various image processing algorithms -------------------------------------------------------------------------------- Update Information: Initial package of pypillowfight for Python. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529785 - Review Request: python-pypillowfight - Various image processing algorithms https://bugzilla.redhat.com/show_bug.cgi?id=1529785 -------------------------------------------------------------------------------- ================================================================================ python-zuul-sphinx-0.2.1-1.fc27 (FEDORA-2018-5a2a61caa1) Sphinx extension for Zuul jobs -------------------------------------------------------------------------------- Update Information: Import from software factory repository -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529643 - Review Request: python-zuul-sphinx - A Sphinx extension for documenting Zuul jobs https://bugzilla.redhat.com/show_bug.cgi?id=1529643 -------------------------------------------------------------------------------- ================================================================================ quodlibet-4.0.0-2.fc27 (FEDORA-2018-5e83a8849a) A music management program -------------------------------------------------------------------------------- Update Information: - update to 4.0.0 - https://quodlibet.readthedocs.io/en/latest/changelog.html #speculative-fiction-where-everything-s-the-same-except-for-one-chilling- difference -------------------------------------------------------------------------------- ================================================================================ rebloom-1.0.3-2.fc27 (FEDORA-2018-3d7054648a) Bloom Filter Module for Redis -------------------------------------------------------------------------------- Update Information: Remove python installation assumptions. -------------------------------------------------------------------------------- ================================================================================ rejson-1.0.1-1.fc27 (FEDORA-2018-f1a2f152b6) JSON data type for Redis -------------------------------------------------------------------------------- Update Information: Remove python installation assumptions. -------------------------------------------------------------------------------- ================================================================================ scipy-1.0.0-4.fc27 (FEDORA-2018-0f974f8804) Scientific Tools for Python -------------------------------------------------------------------------------- Update Information: Disable tests on s390x -------------------------------------------------------------------------------- References: [ 1 ] Bug #1492449 - scipy-v1.0.0b1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1492449 -------------------------------------------------------------------------------- ================================================================================ shyaml-0.5.0-3.fc27 (FEDORA-2018-b4f66a68b6) YAML for command line -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529784 - Review Request: shyaml - YAML for command line https://bugzilla.redhat.com/show_bug.cgi?id=1529784 -------------------------------------------------------------------------------- ================================================================================ sox-14.4.2.0-13.fc27 (FEDORA-2018-448444341e) A general purpose sound file conversion tool -------------------------------------------------------------------------------- Update Information: This bugfix resolves **CVE-2017-15731** -------------------------------------------------------------------------------- References: [ 1 ] Bug #1500570 - It is a reachable assertion abort in function sox_append_comment(in formats.c:227) that will lead to denial of service attack https://bugzilla.redhat.com/show_bug.cgi?id=1500570 -------------------------------------------------------------------------------- ================================================================================ timew-1.0.0-3.fc27 (FEDORA-2018-f10bc5d87f) Timewarrior tracks and reports time -------------------------------------------------------------------------------- Update Information: New package! -------------------------------------------------------------------------------- References: [ 1 ] Bug #1402416 - Review Request: timew - Timewarrior tracks and reports time https://bugzilla.redhat.com/show_bug.cgi?id=1402416 -------------------------------------------------------------------------------- ================================================================================ xsel-1.2.0-21.fc27 (FEDORA-2018-a45561d016) Command line clipboard and X selection tool -------------------------------------------------------------------------------- Update Information: Fixed pasting into Chromium browser -------------------------------------------------------------------------------- References: [ 1 ] Bug #1529894 - Pasting text from xsel into Chromium makes tab hang (patch available) https://bugzilla.redhat.com/show_bug.cgi?id=1529894 -------------------------------------------------------------------------------- ================================================================================ xxhash-0.6.4-1.fc27 (FEDORA-2018-6c1a90c1e0) Extremely fast hash algorithm -------------------------------------------------------------------------------- Update Information: New upstream release. -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx