stable

FEDORA-2018-061bafe369 created by ajax 4 years ago for Fedora 27

libvorbis 1.3.6. Fixes CVE-2018-5146.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2018-061bafe369

This update has been submitted for testing by ajax.

4 years ago

can you please update for Fedora 26, too?

This update has been pushed to testing.

4 years ago
User Icon filiperosset commented & provided feedback 4 years ago
karma

no regressions noted

User Icon cserpentis commented & provided feedback 4 years ago
karma

works for me

User Icon hreindl commented & provided feedback 4 years ago
karma

works for me

This update has been submitted for batched by bodhi.

4 years ago
User Icon jayjayjazz commented & provided feedback 4 years ago
karma

Works fine for me!

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Error: Transaction check error: file /usr/share/licenses/libvorbis/COPYING from install of libvorbis-1:1.3.6-1.fc27.i686 conflicts with file from package libvorbis-1:1.3.5-4.fc27.x86_64

Error Summary

karma: -1

@anonymous: as you can see the mirror dnf selected is lacking the x86_64 package in the newer version and so that is not a package problem at it's own - "dnf clean all && dnf upgrade" and hope dnf selects a proper one

@hreindl: Same result, no progress after applying your suggested fix. I tried removing the libvorbis package altogether but that involved removing almost all the fedora installation packages associated with it so that is out of the equation. I am padding all the log of the command as if, just if someone is running into my same dilemma.

[user@localhost ~]$ sudo dnf clean all && dnf upgrade [sudo] password for user: Repository intellinuxgraphics has no mirror or baseurl set. 150 files removed Repository intellinuxgraphics has no mirror or baseurl set. Error: This command has to be run under the root user. [user@localhost ~]$ su Password: [root@localhost user]# dnf clean all && dnf upgrade Repository intellinuxgraphics has no mirror or baseurl set. 0 files removed Repository intellinuxgraphics has no mirror or baseurl set. negativo17 - Multimedia 127 kB/s | 810 kB 00:06
Fedora 27 - x86_64 - Updates 1.2 MB/s | 21 MB 00:17
Fedora 27 - x86_64 1.3 MB/s | 58 MB 00:43
google-chrome 16 kB/s | 3.7 kB 00:00
RPM Fusion for Fedora 27 - Free - Updates 66 kB/s | 342 kB 00:05
RPM Fusion for Fedora 27 - Free 462 kB/s | 717 kB 00:01
RPM Fusion for Fedora 27 - Nonfree - Updates 179 kB/s | 78 kB 00:00
RPM Fusion for Fedora 27 - Nonfree 113 kB/s | 163 kB 00:01
Failed to synchronize cache for repo 'fedora-HandBrake', disabling. Last metadata expiration check: 0:00:00 ago on Thu 22 Mar 2018 12:39:56 AM EDT. Dependencies resolved. ================================================================================= Package Arch Version Repository Size ================================================================================= Installing: kernel-devel x86_64 4.15.10-300.fc27 updates 12 M Upgrading: elfutils-libelf i686 0.170-10.fc27 updates 212 k elfutils-libs i686 0.170-10.fc27 updates 320 k libvorbis i686 1:1.3.6-1.fc27 updates 189 k pcre2 i686 10.31-3.fc27 updates 239 k Removing: kernel-core x86_64 4.15.7-300.fc27 @updates 58 M kernel-devel x86_64 4.15.7-300.fc27 @updates 44 M Removing dependent packages: kernel x86_64 4.15.7-300.fc27 @updates 0
kernel-modules x86_64 4.15.7-300.fc27 @updates 26 M kernel-modules-extra x86_64 4.15.7-300.fc27 @updates 2.1 M

Transaction Summary

Install 1 Package Upgrade 4 Packages Remove 5 Packages

Total download size: 13 M Is this ok [y/N]: y Downloading Packages: (1/5): elfutils-libelf-0.170-10.fc27.i686.rpm 37 kB/s | 212 kB 00:05
(2/5): elfutils-libs-0.170-10.fc27.i686.rpm 55 kB/s | 320 kB 00:05
(3/5): libvorbis-1.3.6-1.fc27.i686.rpm 826 kB/s | 189 kB 00:00
(4/5): pcre2-10.31-3.fc27.i686.rpm 740 kB/s | 239 kB 00:00
(5/5): kernel-devel-4.15.10-300.fc27.x86_64.rpm 998 kB/s | 12 MB 00:12


Total 1.0 MB/s | 13 MB 00:13
Running transaction check Transaction check succeeded. Running transaction test The downloaded packages were saved in cache until the next successful transaction. You can remove cached packages by executing 'dnf clean packages'. Error: Transaction check error: file /usr/share/licenses/libvorbis/COPYING from install of libvorbis-1:1.3.6-1.fc27.i686 conflicts with file from package libvorbis-1:1.3.5-4.fc27.x86_64

Error Summary

[root@localhost user]#

karma: -1

@anonymous "I tried removing the libvorbis package altogether but that involved removing almost all the fedora installation packages associated with it so that is out of the equation" is NOT TRUE - "rpm -e --nodpes" works fine for libraries not need from the coreos and rpm/dnf itself and than you do a ordinary "dnf install" and you are done - i resolved multilib issues that way a decade ago or even longer

@hreindl sudo rpm -e --nodeps libvorbis-1:1.3.5-4.fc27.x86_64 did the trick :) Thank You for your veteran advice kind sir ;)

karma: +1


Please login to add feedback.

Metadata
Type
security
Karma
4
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
4 years ago
in testing
4 years ago
in stable
4 years ago

Automated Test Results