The following Fedora 27 Security updates need testing: Age URL 263 https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27 195 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408 dpdk-17.08.2-1.fc27 158 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01 nodejs-brace-expansion-1.1.11-1.fc27 150 https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219 unrtf-0.21.9-8.fc27 126 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750 mailman-2.1.21-9.fc27 126 https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1 openslp-2.0.0-15.fc27 84 https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c tomcat-8.0.53-1.fc27 84 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1 unixODBC-2.3.7-1.fc27 33 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc2ba807a6 xerces-c27-2.7.0-28.fc27 29 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e010c6501 chromium-69.0.3497.100-1.fc27 21 https://bodhi.fedoraproject.org/updates/FEDORA-2018-28ea2290ad python33-3.3.7-3.fc27 15 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c9120d494 rpm-4.14.2.1-1.fc27 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f20a0cead5 xen-4.9.3-2.fc27 9 https://bodhi.fedoraproject.org/updates/FEDORA-2018-56ec0ccd82 feh-2.28-1.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4c0b99a9eb drupal7-7.60-2.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-60c74d2b16 php-Smarty2-2.6.31-2.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-95695b59c7 php-pear-CAS-1.3.6-1.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3448c8aec1 libgit2-0.26.8-1.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e9d1ec6dbc lldpad-1.0.1-9.git036e314.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc3018b1bd NetworkManager-1.8.8-2.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-41320b315a python-requests-2.20.0-1.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cca64e06ba java-1.8.0-openjdk-aarch32-1.8.0.191.181022-1.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-8587111c5a mkvtoolnix-28.2.0-1.fc27 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cca4732a99 thunderbird-60.3.0-1.fc27 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-3236af7d00 zchunk-0.9.14-1.fc27 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f3d995c6a8 icecast-2.4.4-1.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-91ba32a0ff subscription-manager-1.24.2-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved: Age URL 179 https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27 mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1 139 https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93 upower-0.99.8-1.fc27 103 https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e geoclue2-2.4.11-1.fc27 84 https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24 iproute-4.17.0-1.fc27 15 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c9120d494 rpm-4.14.2.1-1.fc27 11 https://bodhi.fedoraproject.org/updates/FEDORA-2018-f20a0cead5 xen-4.9.3-2.fc27 10 https://bodhi.fedoraproject.org/updates/FEDORA-2018-845c2b9bc6 highlight-3.47-1.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-653a7a63f1 pungi-4.1.30-1.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-41320b315a python-requests-2.20.0-1.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc3018b1bd NetworkManager-1.8.8-2.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-6d5b4aca58 libssh-0.7.7-1.fc27 6 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e9d1ec6dbc lldpad-1.0.1-9.git036e314.fc27 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-2a541500c4 pcre2-10.32-4.fc27 5 https://bodhi.fedoraproject.org/updates/FEDORA-2018-e093a9ce9c hwdata-0.317-1.fc27 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-553390b29e osinfo-db-20181101-1.fc27 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-cca4732a99 thunderbird-60.3.0-1.fc27 4 https://bodhi.fedoraproject.org/updates/FEDORA-2018-31e9aff03c pcre-8.42-5.fc27 0 https://bodhi.fedoraproject.org/updates/FEDORA-2018-4550e1e9a4 vim-8.1.511-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
ax25-apps-1.0.5-8.fc27 cabextract-1.9-1.fc27 criu-3.11-1.fc27 firefox-63.0.1-4.fc27 gnome-shell-extension-media-player-indicator-0-0.22.20181105git813c05a.fc27 grass-7.4.2-2.fc27 kernel-4.18.17-100.fc27 kernel-headers-4.18.17-100.fc27 kernel-tools-4.18.17-100.fc27 kvantum-0.10.8-2.fc27 libmspack-0.9.1-0.1.alpha.fc27 perl-RT-Client-REST-0.53-1.fc27 pgadmin3-1.22.2-8.fc27 selinux-policy-3.13.1-284.38.fc27 syncthing-0.14.52-1.fc27 twa-1.6.2-1.fc27
Details about builds:
================================================================================ ax25-apps-1.0.5-8.fc27 (FEDORA-2018-e3ffdd4bbb) AX.25 ham radio applications -------------------------------------------------------------------------------- Update Information:
Fix segfault when using Unix98 pty. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2018 Richard Shaw hobbes1069@gmail.com - 1.0.5-8 - Add patch for segfault when using Unix98 pty, (#1644317). * Thu Jul 12 2018 Fedora Release Engineering releng@fedoraproject.org - 1.0.5-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Feb 7 2018 Fedora Release Engineering releng@fedoraproject.org - 1.0.5-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1644317 - Segfault when using Unix98 pty https://bugzilla.redhat.com/show_bug.cgi?id=1644317 --------------------------------------------------------------------------------
================================================================================ cabextract-1.9-1.fc27 (FEDORA-2018-c73d257297) Utility for extracting cabinet (.cab) archives -------------------------------------------------------------------------------- Update Information:
Latest stable releases of libmspack and cabextract, includes security fixes for CVE-2018-14680, CVE-2018-14681, CVE-2018-14682, CVE-2018-18584, CVE-2018-18585 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2018 Rex Dieter rdieter@fedoraproject.org - 1.9-1 - 1.9 * Tue Oct 30 2018 Rex Dieter rdieter@fedoraproject.org - 1.8-1 - 1.8 * Wed Jul 25 2018 Rex Dieter rdieter@fedoraproject.org - 1.7-1 - 1.7 (#1186186) * Thu Jul 12 2018 Fedora Release Engineering releng@fedoraproject.org - 1.5-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Feb 7 2018 Fedora Release Engineering releng@fedoraproject.org - 1.5-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1610941 - CVE-2018-14682 libmspack: off-by-one error in the TOLOWER() macro for CHM decompression https://bugzilla.redhat.com/show_bug.cgi?id=1610941 [ 2 ] Bug #1610896 - CVE-2018-14681 libmspack: out-of-bounds write in kwajd_read_headers in mspack/kwajd.c https://bugzilla.redhat.com/show_bug.cgi?id=1610896 [ 3 ] Bug #1610934 - CVE-2018-14680 libmspack: off-by-one error in the CHM chunk number validity checks https://bugzilla.redhat.com/show_bug.cgi?id=1610934 [ 4 ] Bug #1644215 - CVE-2018-18585 libmspack: NULL pointer dereference in chmd_read_headers in mspack/chmd.c https://bugzilla.redhat.com/show_bug.cgi?id=1644215 [ 5 ] Bug #1644214 - CVE-2018-18584 libmspack: Out-of-bounds write in mspack/cab.h https://bugzilla.redhat.com/show_bug.cgi?id=1644214 --------------------------------------------------------------------------------
================================================================================ criu-3.11-1.fc27 (FEDORA-2018-8ec561d2c4) Tool for Checkpoint/Restore in User-space -------------------------------------------------------------------------------- Update Information:
Updated to 3.11 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2018 Adrian Reber adrian@lisas.de - 3.11-1 - Updated to 3.11 - Removed upstreamed patches * Tue Oct 30 2018 Adrian Reber adrian@lisas.de - 3.10-5 - Added Recommends: tar It is necessary when checkpointing containers with a tmpfs --------------------------------------------------------------------------------
================================================================================ firefox-63.0.1-4.fc27 (FEDORA-2018-8799cdf191) Mozilla Firefox Web browser -------------------------------------------------------------------------------- Update Information:
- Fixed clipboard on Wayland (rhbz#1585393) ---- - Updated to latest upstream (63.0.1) -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 5 2018 Martin Stransky stransky@redhat.com - 63.0.1-4 - Added clipboard fix (mozbz#1504689) * Fri Nov 2 2018 Dan Horak dhorak@redhat.com - 63.0.1-3 - Added fixes for ppc64le * Thu Nov 1 2018 Martin Stransky stransky@redhat.com - 63.0.1-2 - Fixed typo on man page (rhbz#1643766) * Thu Nov 1 2018 Martin Stransky stransky@redhat.com - 63.0.1-1 - Updated to latest upstream (63.0.1 build 4) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1585393 - Firefox Wayland copy and paste is not working https://bugzilla.redhat.com/show_bug.cgi?id=1585393 --------------------------------------------------------------------------------
================================================================================ gnome-shell-extension-media-player-indicator-0-0.22.20181105git813c05a.fc27 (FEDORA-2018-227cd81555) Control MPRIS2 capable media players: Rhythmbox, Banshee, Clementine and more -------------------------------------------------------------------------------- Update Information:
Update to 0-0.22.20181105git813c05a -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2018 Martin Gansser martinkg@fedoraproject.org - 0-0.22.20181105git813c05a - Update to new git snapshot 0-0.22.20181105git813c05a --------------------------------------------------------------------------------
================================================================================ grass-7.4.2-2.fc27 (FEDORA-2018-3a2b635a69) GRASS GIS - Geographic Resources Analysis Support System -------------------------------------------------------------------------------- Update Information:
fix to include libgrass_*.so files in grass-libs.rpm ---- new upstream version GRASS GIS 7.4.2 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2018 Markus Neteler neteler@mundialis.de - 7.4.2-2 - fix to include libgrass_*.so files in grass-libs.rpm * Sun Oct 28 2018 Markus Neteler neteler@mundialis.de - 7.4.2-1 - new upstream version 7.4.2 * Sun Sep 9 2018 Pavel Raiskup praiskup@redhat.com - 7.4.1-8 - Clean up of PostgreSQL support (PR#4) * Tue Jul 31 2018 Florian Weimer fweimer@redhat.com - 7.4.1-7 - Rebuild with fixed binutils * Sun Jul 29 2018 Markus Neteler neteler@mundialis.de - 7.4.1-6 - added BuildRequires gcc-c++ to address RHBZ #1604262 due to RHBZ #1551327 (removing gcc and gcc-c++ from default buildroot) * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 7.4.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Sun Jul 8 2018 Markus Neteler neteler@mundialis.de - 7.4.1-4 - fix Python macro to explicitely use Python 2 interpreter * Sat Jul 7 2018 Scott Talbert swt@techie.net - 7.4.1-3 - Update BRs: remove wxGTK-devel and add cairo-devel * Sat Jun 23 2018 Markus Neteler neteler@mundialis.de - 7.4.1-2 - fix wxPython package dependency name for CentOS7 * Tue Jun 12 2018 Markus Neteler neteler@mundialis.de - 7.4.1-1 - new upstream version 7.4.1 - do not fail on EPEL6 with appstream-util --------------------------------------------------------------------------------
================================================================================ kernel-4.18.17-100.fc27 (FEDORA-2018-60c60bb5ab) The Linux kernel -------------------------------------------------------------------------------- Update Information:
The 4.18.17 update contains a number of important fixes across the tree -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 5 2018 Laura Abbott labbott@redhat.com - 4.18.17-100 - Linux v4.18.17 * Tue Oct 23 2018 Laura Abbott labbott@redhat.com - Add i915 eDP fixes --------------------------------------------------------------------------------
================================================================================ kernel-headers-4.18.17-100.fc27 (FEDORA-2018-60c60bb5ab) Header files for the Linux kernel for use by glibc -------------------------------------------------------------------------------- Update Information:
The 4.18.17 update contains a number of important fixes across the tree -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 5 2018 Laura Abbott labbott@redhat.com - 4.18.17-100 - Linux v4.18.17 --------------------------------------------------------------------------------
================================================================================ kernel-tools-4.18.17-100.fc27 (FEDORA-2018-60c60bb5ab) Assortment of tools for the Linux kernel -------------------------------------------------------------------------------- Update Information:
The 4.18.17 update contains a number of important fixes across the tree -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 5 2018 Laura Abbott labbott@redhat.com - 4.18.17-100 - Linux v4.18.17 --------------------------------------------------------------------------------
================================================================================ kvantum-0.10.8-2.fc27 (FEDORA-2018-5b66c2b573) SVG-based theme engine for Qt5, KDE and LXQt -------------------------------------------------------------------------------- Update Information:
Remove dependency to kde-filesystem and plasma-desktop -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1645908 - Kvantum package pulls in unneeded dependencies https://bugzilla.redhat.com/show_bug.cgi?id=1645908 --------------------------------------------------------------------------------
================================================================================ libmspack-0.9.1-0.1.alpha.fc27 (FEDORA-2018-c73d257297) Library for CAB and related files compression and decompression -------------------------------------------------------------------------------- Update Information:
Latest stable releases of libmspack and cabextract, includes security fixes for CVE-2018-14680, CVE-2018-14681, CVE-2018-14682, CVE-2018-18584, CVE-2018-18585 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2018 Rex Dieter rdieter@fedoraproject.org - 0.9.1-0.1.alpha - 0.9.1alpha - libmspack-0.8-0.1.alpha corrupts extracted cab files (#1647033) - examples no longer installed (by default) * Tue Oct 30 2018 Rex Dieter rdieter@fedoraproject.org - 0.8-0.1.alpha - 0.8alpha - use %make_build %make_install %ldconfig_scriptlets %license - devel: use %{?_isa} to tighten dep on main pkg - drop deprecated Group: tag - %files: tighten to include library soname -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1610941 - CVE-2018-14682 libmspack: off-by-one error in the TOLOWER() macro for CHM decompression https://bugzilla.redhat.com/show_bug.cgi?id=1610941 [ 2 ] Bug #1610896 - CVE-2018-14681 libmspack: out-of-bounds write in kwajd_read_headers in mspack/kwajd.c https://bugzilla.redhat.com/show_bug.cgi?id=1610896 [ 3 ] Bug #1610934 - CVE-2018-14680 libmspack: off-by-one error in the CHM chunk number validity checks https://bugzilla.redhat.com/show_bug.cgi?id=1610934 [ 4 ] Bug #1644215 - CVE-2018-18585 libmspack: NULL pointer dereference in chmd_read_headers in mspack/chmd.c https://bugzilla.redhat.com/show_bug.cgi?id=1644215 [ 5 ] Bug #1644214 - CVE-2018-18584 libmspack: Out-of-bounds write in mspack/cab.h https://bugzilla.redhat.com/show_bug.cgi?id=1644214 --------------------------------------------------------------------------------
================================================================================ perl-RT-Client-REST-0.53-1.fc27 (FEDORA-2018-98cd91cca0) Talk to RT using REST protocol -------------------------------------------------------------------------------- Update Information:
This release exposes CC and Admin CC adresses on Queues. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2018 Petr Pisar ppisar@redhat.com - 0.53-1 - 0.53 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1646997 - Upgrade perl-RT-Client-REST to 0.53 https://bugzilla.redhat.com/show_bug.cgi?id=1646997 --------------------------------------------------------------------------------
================================================================================ pgadmin3-1.22.2-8.fc27 (FEDORA-2018-0fbaf250ef) Graphical client for PostgreSQL -------------------------------------------------------------------------------- Update Information:
Fix Fedora builds again. Experimental PG10 support. A few bugs fixed - but the reports are not easily reproducible. Since pgadmin4 is still not ready, we have to keep this going in the mean time. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2018 Scott Talbert swt@techie.net - 1.22.2-8 - Adjust BRs to fix FTBFS * Tue Nov 6 2018 Stuart Gathman stuart@gathman.org - 1.22.2-7 - Build against compat-openssl10 Sandro Mani manisandro@gmail.com - Fix failure to use EVP_CIPHER_CTX_new() - Fix broken pgadmin3-nullthis.patch - Add patch for PG10 support * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 1.22.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Fri Feb 9 2018 Fedora Release Engineering releng@fedoraproject.org - 1.22.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Aug 3 2017 Fedora Release Engineering releng@fedoraproject.org - 1.22.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering releng@fedoraproject.org - 1.22.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Sat Feb 11 2017 Fedora Release Engineering releng@fedoraproject.org - 1.22.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Fri Nov 11 2016 Devrim G��nd��z devrim@gunduz.org 1.22.2-1 - Update to 1.22.2 -- the final release of pgadmin3 - Update patch3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1605430 - pgadmin3: FTBFS in Fedora rawhide https://bugzilla.redhat.com/show_bug.cgi?id=1605430 [ 2 ] Bug #1556111 - pgadmin3: FTBFS in F28 https://bugzilla.redhat.com/show_bug.cgi?id=1556111 --------------------------------------------------------------------------------
================================================================================ selinux-policy-3.13.1-284.38.fc27 (FEDORA-2018-6c6faa135b) SELinux policy configuration -------------------------------------------------------------------------------- Update Information:
More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=1160975 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2018 Lukas Vrabec lvrabec@redhat.com - 3.13.1-284.38 - Allow httpd_t domain to mmap httpd_config_t files - Update dev_filetrans_all_named_dev() to allow create event22-30 character files with label event_device_t -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1628764 - SELinux is preventing bluetoothd from read, write access on the file settings. https://bugzilla.redhat.com/show_bug.cgi?id=1628764 [ 2 ] Bug #1601169 - selinux-policy forbid gnome-session-c access map on chr_file /dev/nvidiactl, which in return prevent GDM to show https://bugzilla.redhat.com/show_bug.cgi?id=1601169 [ 3 ] Bug #1643790 - SELinux is preventing lighttpd from 'map' accesses on the file /etc/lighttpd/conf.d/dirlisting.conf. https://bugzilla.redhat.com/show_bug.cgi?id=1643790 [ 4 ] Bug #1547139 - Spurious SELinux alerts: SELinux is preventing acpid from 'open' accesses on the chr_file /dev/input/event26. https://bugzilla.redhat.com/show_bug.cgi?id=1547139 [ 5 ] Bug #1598995 - SELinux is preventing sddm-greeter from 'map' accesses on the chr_file /dev/nvidiactl. https://bugzilla.redhat.com/show_bug.cgi?id=1598995 [ 6 ] Bug #1513704 - nssdb auth doesn't work with selinux enforcing due to map permissions denials https://bugzilla.redhat.com/show_bug.cgi?id=1513704 --------------------------------------------------------------------------------
================================================================================ syncthing-0.14.52-1.fc27 (FEDORA-2018-21a79a77c9) Continuous File Synchronization -------------------------------------------------------------------------------- Update Information:
Update to version 0.14.52. Release notes: https://github.com/syncthing/syncthing/releases/tag/v0.14.52 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2018 Fabio Valentini decathorpe@gmail.com - 0.14.52-1 - Update to version 0.14.52. --------------------------------------------------------------------------------
================================================================================ twa-1.6.2-1.fc27 (FEDORA-2018-90bf5e24c9) Tiny web auditor with strong opinions -------------------------------------------------------------------------------- Update Information:
Update to latest upstream version -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2018 Artur Iwicki fedora@svgames.pl - 1.6.2-1 - Update to latest upstream version --------------------------------------------------------------------------------