The following Fedora 27 Security updates need testing:
Age URL
278
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
210
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
173
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
165
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
141
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
141
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
99
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c
tomcat-8.0.53-1.fc27
99
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1
unixODBC-2.3.7-1.fc27
48
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc2ba807a6
xerces-c27-2.7.0-28.fc27
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4c0b99a9eb
drupal7-7.60-2.fc27
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-60c74d2b16
php-Smarty2-2.6.31-2.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cca4732a99
thunderbird-60.3.0-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fe24359b69 xen-4.9.3-3.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0363fec36c
chromium-70.0.3538.77-4.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5743ef02a1
rubygem-rack-2.0.3-4.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4febd7f702
rubygem-i18n-0.7.0-6.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4ce40afcb6
rubygem-loofah-2.0.3-6.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-399bce9f8f
libtiff-4.0.10-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-dbe9da512d
soundtouch-2.1.1-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4ae94c8deb
community-mysql-5.7.24-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b68776e5b0
kernel-headers-4.18.19-100.fc27 kernel-tools-4.18.19-100.fc27 kernel-4.18.19-100.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-192148f4ff
mariadb-10.2.19-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-50eceed44a
kio-extras-17.12.3-1.fc27.1
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-daee493feb
php-PHPMailer-5.2.27-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-46b92c9064
php-phpmailer6-6.0.6-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-382362e255
firefox-63.0.3-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9b7d7a155b
flatpak-1.0.6-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c271659b1e
nginx-1.14.1-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
194
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
154
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
118
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
99
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24
iproute-4.17.0-1.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cca4732a99
thunderbird-60.3.0-1.fc27
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6c6faa135b
selinux-policy-3.13.1-284.38.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fe24359b69 xen-4.9.3-3.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-399bce9f8f
libtiff-4.0.10-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b68776e5b0
kernel-headers-4.18.19-100.fc27 kernel-tools-4.18.19-100.fc27 kernel-4.18.19-100.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9b7d7a155b
flatpak-1.0.6-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-382362e255
firefox-63.0.3-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a864e8515f
osinfo-db-20181116-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
ibus-typing-booster-2.2.0-1.fc27
moodle-3.3.9-1.fc27
perl-CPAN-Perl-Releases-3.82-1.fc27
prosody-0.11.0-1.fc27
Details about builds:
================================================================================
ibus-typing-booster-2.2.0-1.fc27 (FEDORA-2018-8969691f4d)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Inline completion feature added
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Mike FABIAN <mfabian(a)redhat.com> - 2.2.0-1
- Update translations from zanata (de updated)
- Save some screen space in the setup tool
- Add inline completion feature
- Tab should force a lookup when the minimum number of characters is not yet reached
--------------------------------------------------------------------------------
================================================================================
moodle-3.3.9-1.fc27 (FEDORA-2018-4ec3eecd7f)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
CVE-2018-16854
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 3.3.9-1
- 3.3.9+
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1652022 - CVE-2018-16854 moodle: Login CSRF vulnerability in login form
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1652022
[ 2 ] Bug #1652021 - CVE-2018-16854 moodle: Login CSRF vulnerability in login form
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1652021
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.82-1.fc27 (FEDORA-2018-c47509e11d)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 21 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.82-1
- 3.82 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1651941 - Upgrade perl-CPAN-Perl-Releases to 3.82
https://bugzilla.redhat.com/show_bug.cgi?id=1651941
--------------------------------------------------------------------------------
================================================================================
prosody-0.11.0-1.fc27 (FEDORA-2018-d659808c80)
Flexible communications server for Jabber/XMPP
--------------------------------------------------------------------------------
Update Information:
Prosody 0.11.0 ============== See upstream's blog post at
https://blog.prosody.im/prosody-0-11-0-released/ for a full overview of the
release features. This release includes significant improvements to MUC and
Pubsub, adds support for vCard4, mobile battery optimisations and Lua 5.2.
Upgrade notes ------------- There are some changes that users running previous
versions of Prosody should be aware of: Modules added ------------- *
`mod_csi_simple` This is a renamed version of the `mod_csi_pump` community
module. If you are using `mod_csi_pump` or do not yet have a CSI module set up,
we encourage you to use this one. * `mod_muc_mam` This replaces the
community module `mod_mam_muc` (note the name change!). It provides support
for archiving and querying chatroom messages using XEP-0313. It should be added
to `modules_enabled` under your MUC component: ``` Component
"rooms.example.com" "muc" modules_enabled = {
"muc_mam"; } ```
* `mod_vcard4`, `mod_vcard_legacy` Prosody now offers support for vCard4 in
`mod_vcard4`. Since most clients today do not yet support this format, if you
use this module you should also enable `mod_vcard_legacy`. These modules
are separate to the old `mod_vcard`, which still exists and works for services
that want to continue just supporting the older vcard-temp protocol. Modules
removed --------------- The following modules were deprecated in previous
releases and have been removed in 0.11: * `mod_storage_sql1` *
`mod_compression` * `mod_privacy` MySQL schema upgrade --------------------
Some limitations were found with the current MySQL schema that prevented it from
working properly with our new pubsub and PEP features. Prosody will refuse to
connect to the database until this is fixed, but this can be done easily with
the following command: ``` prosodyctl mod_storage_sql upgrade ``` Lua 5.2
------- The recommended Lua version for 0.11 is Lua 5.2, while Lua 5.1 is still
supported for the platforms that need it. However the 0.11.x series is the last
series that will still support Lua 5.1 (and by extension, LuaJIT).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 19 2018 Robert Scheck <robert(a)fedoraproject.org> 0.11.0-1
- Upgrade to 0.11.0
--------------------------------------------------------------------------------