The following Fedora 27 Security updates need testing:
Age URL
251
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
183
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
147
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
138
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
115
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
115
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
72
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c
tomcat-8.0.53-1.fc27
72
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1
unixODBC-2.3.7-1.fc27
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc2ba807a6
xerces-c27-2.7.0-28.fc27
17
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e010c6501
chromium-69.0.3497.100-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28ea2290ad
python33-3.3.7-3.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f2f8571abd
sos-collector-1.5-3.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c9120d494
rpm-4.14.2.1-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b24201fc50
teeworlds-0.6.5-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-343ab5abbd
firefox-63.0-2.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
167
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
128
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
92
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
72
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24
iproute-4.17.0-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a93cc4270
gnome-software-3.28.2-4.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5303fe7f1d
glusterfs-3.12.15-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e1a19af16e
pungi-4.1.29-3.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5f573e7590 qt-4.8.7-44.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c9120d494
rpm-4.14.2.1-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-12160eeac5
webkitgtk4-2.22.2-2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fb5a8bfa34
qt5-qtbase-5.9.6-4.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-343ab5abbd
firefox-63.0-2.fc27
The following builds have been pushed to Fedora 27 updates-testing
gnome-shell-extension-netspeed-3.28-0.6.20181019gitc109544.fc27
gnome-shell-extension-topicons-plus-21-7.20181024.6470a38.fc27
roundcubemail-1.3.8-1.fc27
xen-4.9.3-2.fc27
Details about builds:
================================================================================
gnome-shell-extension-netspeed-3.28-0.6.20181019gitc109544.fc27 (FEDORA-2018-645d22d3f2)
A gnome-shell extension to show speed of the internet
--------------------------------------------------------------------------------
Update Information:
Update to 3.28-0.6.20181019gitc109544
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Martin Gansser <martinkg(a)fedoraproject.org> -
3.28-0.6.20181019gitc109544
- Update to recent git version 3.28-0.6.20181019gitc109544
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-topicons-plus-21-7.20181024.6470a38.fc27 (FEDORA-2018-0f52158d5b)
Move all legacy tray icons to the top panel
--------------------------------------------------------------------------------
Update Information:
Upstream developer phocean is merging various forks back into the original
project, and fixing more stability issues.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Andrew Toskin <andrew(a)tosk.in> - 21-7.20181024.6470a38
- phocean is merging various forks back into the original project, and
fixing more stability issues.
--------------------------------------------------------------------------------
================================================================================
roundcubemail-1.3.8-1.fc27 (FEDORA-2018-d527206a77)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
**Version 1.3.8** This is a service release to update the stable version 1.3 of
Roundcube Webmail. It contains fixes to several bugs backported from the master
branch including a security fix for a reported XSS vulnerability plus updates to
ensure compatibility with PHP 7.3 and recent versions of Courier-IMAP, Dovecot
and MySQL 8. See the complete changelog below. **Changelog** - Fix PHP
warnings on dummy QUOTA responses in Courier-IMAP 4.17.1 (#6374) - Fix so
fallback from BINARY to BODY FETCH is used also on [PARSE] errors in dovecot 2.3
(#6383) - Enigma: Fix deleting keys with authentication subkeys (#6381) - Fix
invalid regular expressions that throw warnings on PHP 7.3 (#6398) - Fix so
Classic skin splitter does not escape out of window (#6397) - Fix XSS issue in
handling invalid style tag content (#6410) - Fix compatibility with MySQL 8 -
error on 'system' table use - Managesieve: Fix bug where show_real_foldernames
setting wasn't respected (#6422) - New_user_identity: Fix %fu/%u vars
substitution in user specific LDAP params (#6419) - Fix support for "allow-from
<uri>" in "x_frame_options" config option (#6449) - Fix bug where
valid content
between HTML comments could have been skipped in some cases (#6464) - Fix
multiple VCard field search (#6466) - Fix session issue on long running requests
(#6470)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 26 2018 Remi Collet <remi(a)remirepo.net> - 1.3.8-1
- update to 1.3.8
--------------------------------------------------------------------------------
================================================================================
xen-4.9.3-2.fc27 (FEDORA-2018-f20a0cead5)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
x86: Nested VT-x usable even when disabled [XSA-278]
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 25 2018 Michael Young <m.a.young(a)durham.ac.uk> - 4.9.3-2
- x86: Nested VT-x usable even when disabled [XSA-278] (#1643118)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643116 - xen: Nested VT-x usable even when disabled
https://bugzilla.redhat.com/show_bug.cgi?id=1643116
--------------------------------------------------------------------------------