The following Fedora 27 Security updates need testing:
Age URL
107
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
56
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c9395f9bec remctl-3.14-1.fc27
38
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
24
https://bodhi.fedoraproject.org/updates/FEDORA-2018-775d96b54b
blktrace-1.2.0-6.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a10c1d234e
vim-syntastic-3.9.0-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aec846c0ef xen-4.9.2-4.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d1cfa444d2
wireshark-2.6.1-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-812b5d5a71
chromium-66.0.3359.181-2.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-76c82b393e
pdns-recursor-4.1.3-2.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1f651350de
thunderbird-enigmail-2.0.6-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f96f72ce8f
cobbler-2.8.3-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a459acd54b ruby-2.4.4-89.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-79792e0c64 batik-1.10-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-579ff80ed8
java-1.8.0-openjdk-aarch32-1.8.0.171-1.180511.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-44c6f91560
libtiff-4.0.9-9.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8f793bbfc
kernel-4.16.13-200.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0a0da2f3b7 qt3-3.3.8b-74.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8d8f0e1643
sqlite-3.20.1-3.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-455803056d
prosody-0.10.2-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8f5a50e4d7
slurm-17.02.11-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-419559236b
ntfs-3g-2017.3.23-6.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f2666b417c
pungi-4.1.25-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aec846c0ef xen-4.9.2-4.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-51102af7af
libunistring-0.9.10-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-82213f4d94 sssd-1.16.1-9.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2a57dc63c1
selinux-policy-3.13.1-283.35.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-eb868d383c
perl-5.26.2-406.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-44c6f91560
libtiff-4.0.9-9.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f9b6091ae
cryptsetup-1.7.5-4.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8f793bbfc
kernel-4.16.13-200.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fdfc43e671
p11-kit-0.23.12-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3be6573661 quota-4.03-12.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-03e49e01c0
osinfo-db-20180531-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8d8f0e1643
sqlite-3.20.1-3.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-33052e653e
iproute-4.16.0-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
R-prettydoc-0.2.1-1.fc27
R-sysfonts-0.7.2-1.fc27
clamav-0.100.0-2.fc27
fwbackups-1.43.7-2.fc27
gala-0.3.1-0.3.20180603.git3661cbd.fc27
mate-desktop-1.20.2-1.fc27
mate-settings-daemon-1.20.2-1.fc27
mate-themes-3.22.17-1.fc27
nheko-0.4.3-1.fc27
xfce4-dict-0.8.1-1.fc27
Details about builds:
================================================================================
R-prettydoc-0.2.1-1.fc27 (FEDORA-2018-20f5a03533)
Creating Pretty Documents from R Markdown
--------------------------------------------------------------------------------
Update Information:
Initial package of prettydoc for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1585317 - Review Request: R-prettydoc - Creating Pretty Documents from R
Markdown
https://bugzilla.redhat.com/show_bug.cgi?id=1585317
--------------------------------------------------------------------------------
================================================================================
R-sysfonts-0.7.2-1.fc27 (FEDORA-2018-73f3657160)
Loading Fonts into R
--------------------------------------------------------------------------------
Update Information:
Initial package of sysfonts for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1585024 - Review Request: R-sysfonts - Loading Fonts into R
https://bugzilla.redhat.com/show_bug.cgi?id=1585024
--------------------------------------------------------------------------------
================================================================================
clamav-0.100.0-2.fc27 (FEDORA-2018-b5afbce392)
End-user tools for the Clam Antivirus scanner
--------------------------------------------------------------------------------
Update Information:
Try to mitigate bug #1583599 ---- ClamAV 0.100.0 ============== ClamAV
0.100.0 is a feature release which includes many code submissions from the
ClamAV community. Some of the more prominent submissions include: *
Interfaces to the Prelude SIEM open source package for collecting ClamAV virus
events. * Support for Visual Studio 2015 for Windows builds. Please note that
we have deprecated support for Windows XP, and while Vista may still work, we no
longer test ClamAV on Windows XP or Vista. * Support libmspack internal code
or as a shared object library. The internal library is the default and includes
modifications to enable parsing of CAB files that do not entirely adhere to the
CAB file format. * Linking with OpenSSL 1.1.0. * Deprecation of the
AllowSupplementaryGroups parameter statement in clamd, clamav-milter, and
freshclam. Use of supplementary is now in effect by default. * Numerous bug
fixes, typo corrections, and compiler warning fixes. Additionally, upstream
introduced important changes and new features in ClamAV 0.100, including but not
limited to: * Deprecating internal LLVM code support. The configure script
has changed to search the system for an installed instance of the LLVM
development libraries, and to otherwise use the bytecode interpreter for ClamAV
bytecode signatures. To use the LLVM Just-In-Time compiler for executing
bytecode signatures, please ensure that the LLVM development package at version
3.6 or lower is installed. Using the deprecated LLVM code is possible with the
command: `./configure --with-system-llvm=no`, but it no longer compiles on all
platforms. * Compute and check PE import table hash (a.k.a. "imphash")
signatures. * Support file property collection and analysis for MHTML files.
* Raw scanning of PostScript files. * Fix clamsubmit to use the new virus and
false positive submission web interface. * Optionally, flag files with the
virus "Heuristic.Limits.Exceeded" when size limitations are exceeded. *
Improved decoders for PDF files. * Reduced number of compile time warnings.
* Improved support for C++11. * Improved detection of system installed
libraries. * Fixes to ClamAV's Container system and the introduction of
Intermediates for more descriptive signatures. * Improvements to clamd's On-
Access scanning capabilities for Linux.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 3 2018 S��rgio Basto <sergio(a)serjux.com> - 0.100.0-2
- Try to mitigate bug #1583599
- Move comments one line (to read before starting the scriptlet)
- clamav-milter could work without clamd and without sendmail (#1583599)
- Get rid of provides/requires with updateuser, virusgroup, scanuser and
milteruser and just simply require clamav-filesystem
* Mon May 28 2018 Robert Scheck <robert(a)fedoraproject.org> - 0.100.0-1
- Upgrade to 0.100.0 (#1565381)
* Wed Mar 21 2018 S��rgio Basto <sergio(a)serjux.com> - 0.99.4-3
- Fix data-empty sub-package (ghost the correct files)
- Add Obsoletes systemd sub-packages
* Mon Mar 12 2018 S��rgio Basto <sergio(a)serjux.com> - 0.99.4-2
- Revert fix for llvm, build using -std=gnu++98 (#1307378)
- Revert CFLAG assignment in commmit a4a6d252 (made in 2006)
- BR systemd-devel to fix detection in configure.
- Disable llvm in ppc64 (#1534071)
- "Disable llvm will use the internal bytecode interpreter rather than the llvm
jit", so drop bytecode build condition and use condional on enable or disable
llvm.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1583599 - 0.100.0-1 re-packaging stops and disables services
https://bugzilla.redhat.com/show_bug.cgi?id=1583599
[ 2 ] Bug #1526628 - please backport OnAccessExcludeRootUID from clamav-master
https://bugzilla.redhat.com/show_bug.cgi?id=1526628
[ 3 ] Bug #1565381 - clamav-0.100.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1565381
--------------------------------------------------------------------------------
================================================================================
fwbackups-1.43.7-2.fc27 (FEDORA-2018-52e60a2b6a)
A feature-rich user backup program
--------------------------------------------------------------------------------
Update Information:
Add patch to remove 'import Crypto' verification; prevents traceback on startup
if python2-crypto is not installed manually ---- Update to version 1.43.7
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 2 2018 Stewart Adam <s.adam(a)diffingo.com> - 1.43.7-2
- Add patch to remove 'import Crypto' verification
* Tue Dec 26 2017 Stewart Adam <s.adam(a)diffingo.com> - 1.43.7-1
- Update to 1.43.7
--------------------------------------------------------------------------------
================================================================================
gala-0.3.1-0.3.20180603.git3661cbd.fc27 (FEDORA-2018-774e5e27ce)
Gala window manager
--------------------------------------------------------------------------------
Update Information:
Bump to commit 3661cbd. This brings a fix for the bug when the screenshot area
was visible on produced screenshots, other improvements, and better HiDPI
support.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 3 2018 Fabio Valentini <decathorpe(a)gmail.com> -
0.3.1-0.3.20180603.git3661cbd
- Bump to commit 3661cbd.
--------------------------------------------------------------------------------
================================================================================
mate-desktop-1.20.2-1.fc27 (FEDORA-2018-c2beb0ee80)
Shared code for mate-panel, mate-session, mate-file-manager, etc
--------------------------------------------------------------------------------
Update Information:
- new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 3 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.2-1
- update to 1.20.2
--------------------------------------------------------------------------------
================================================================================
mate-settings-daemon-1.20.2-1.fc27 (FEDORA-2018-c2beb0ee80)
MATE Desktop settings daemon
--------------------------------------------------------------------------------
Update Information:
- new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 3 2018 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.20.2-1
- update to 1.20.2
- use xrandr-applet improvements from upstream
--------------------------------------------------------------------------------
================================================================================
mate-themes-3.22.17-1.fc27 (FEDORA-2018-dfab9af828)
MATE Desktop themes
--------------------------------------------------------------------------------
Update Information:
- update to 3.22.17
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 3 2018 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 3.22.17-1
- update to 3.22.17 release
--------------------------------------------------------------------------------
================================================================================
nheko-0.4.3-1.fc27 (FEDORA-2018-20ceac77a5)
Desktop client for the Matrix protocol
--------------------------------------------------------------------------------
Update Information:
Changes ============= * Overdue fixes for some regressions with regard to
widget height introduced in the previous two releases * The matrix id will be
shown on hover on the display name.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 3 2018 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0.4.3-1
- Updated to version 0.4.3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1585399 - nheko-0.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1585399
--------------------------------------------------------------------------------
================================================================================
xfce4-dict-0.8.1-1.fc27 (FEDORA-2018-1d23990725)
A Dictionary Client for the Xfce desktop environment
--------------------------------------------------------------------------------
Update Information:
bugfix update to 0.8.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 2 2018 Mukundan Ragavan <nonamedotc(a)fedoraproject.org> - 0.8.1-1
- Update to 0.8.1
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------