The following Fedora 27 Security updates need testing:
Age URL
148
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
80
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
65
https://bodhi.fedoraproject.org/updates/FEDORA-2018-775d96b54b
blktrace-1.2.0-6.fc27
53
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a10c1d234e
vim-syntastic-3.9.0-1.fc27
43
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
36
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f7a1334c68
sox-14.4.2.0-22.fc27
35
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ae1ced8fb6
dcraw-9.28.0-1.fc27
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2d2179e7d0
python-XStatic-jquery-ui-1.12.0.1-2.fc27
16
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0712169848 bind-9.11.3-6.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6c465c127c
bibutils-6.5-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2b053454a4
libvirt-3.7.0-6.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0f7448b3ab
kernel-tools-4.17.4-100.fc27 kernel-4.17.4-100.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-53790a5236
ansible-2.6.1-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-df2593ee6a
docker-1.13.1-60.git9cb56fd.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-160b3d2f6c
docker-latest-1.13.1-37.git9cb56fd.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-04b3af1edf
uwsgi-2.0.17.1-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ebebe9abe2
perl-Archive-Zip-1.59-6.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fb071377ba
libgit2-0.26.5-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f38d1cb219 rust-1.27.1-2.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d1a767f9f3
firefox-61.0.1-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-35325c9faf
qutebrowser-1.4.1-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-83df5dc658
polkit-0.113-16.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bee0aefb05
thunderbird-52.9.1-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-39e0872379
libtomcrypt-1.18.2-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
64
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
42
https://bodhi.fedoraproject.org/updates/FEDORA-2018-33052e653e
iproute-4.16.0-1.fc27
36
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.10-2.fc27
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f5989c8ede
osinfo-db-20180612-1.fc27
24
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2900e03ce5
glib2-2.54.3-3.fc27
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6559e94544 sssd-1.16.2-4.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-383ac28bf9
libguestfs-1.38.3-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-31974dc1e0
dnsmasq-2.79-3.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20d0222e17
hwdata-0.313-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d28d8987aa
pungi-4.1.25-6.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0f7448b3ab
kernel-tools-4.17.4-100.fc27 kernel-4.17.4-100.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2b053454a4
libvirt-3.7.0-6.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-acb94ec334 gdisk-1.0.4-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-83df5dc658
polkit-0.113-16.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-03fe10c037 vim-8.1.177-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d1a767f9f3
firefox-61.0.1-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-274a301d10
flatpak-builder-0.99.3-1.fc27 flatpak-0.99.3-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f1534907c
python-rpm-macros-3-26.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6ad41fc770 nss-3.38.0-1.0.fc27
nss-softokn-3.38.0-1.0.fc27 nss-util-3.38.0-1.0.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-74bb50b821 pcre2-10.31-7.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bee0aefb05
thunderbird-52.9.1-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-26806901e4
kernel-4.17.6-100.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-39ebc8f764
glusterfs-3.12.12-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
ceph-12.2.6-1.fc27
fleet-commander-admin-0.10.9-1.fc27
geary-0.12.3-1.fc27
gtk-gnutella-1.1.13-1.fc27
i3status-2.12-1.fc27
kyua-0.13-1.fc27
msmtp-1.6.7-3.fc27
orthanc-1.4.0-1.fc27
podman-0.7.2-1.git4ca4c5f.fc27
python-django-helpdesk-0.2.8-1.fc27
python-trololio-1.0-2.fc27
qt-virt-manager-0.70.90-1.fc27
tipcutils-2.2.0-2.fc27
Details about builds:
================================================================================
ceph-12.2.6-1.fc27 (FEDORA-2018-9c7dbf277a)
User space components of the Ceph file system
--------------------------------------------------------------------------------
Update Information:
New release (1:12.2.6-1) CVE-2018-1128 CVE-2018-1129 CVE-2018-10861
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 11 2018 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 1:12.2.6-1
- New release (1:12.2.6-1)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1599406 - CVE-2018-1128 ceph: cephx protocol is vulnerable to replay attack
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1599406
[ 2 ] Bug #1599407 - CVE-2018-10861 ceph: ceph-mon does not perform authorization on OSD
pool ops [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1599407
[ 3 ] Bug #1599408 - CVE-2018-1129 ceph: cephx uses weak signatures [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1599408
--------------------------------------------------------------------------------
================================================================================
fleet-commander-admin-0.10.9-1.fc27 (FEDORA-2018-625260d933)
Fleet Commander
--------------------------------------------------------------------------------
Update Information:
Fixed errors in Chromium policy file access
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 12 2018 Oliver Gutierrez <ogutierrez(a)redhat.com> - 0.10.9-1
- Fixed errors in Chromium policy file access
- Fixed unhandled exception accessing non existent virtio device file
* Mon Jul 2 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.10.8-6
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
================================================================================
geary-0.12.3-1.fc27 (FEDORA-2018-41068a006b)
A lightweight email program designed around conversations
--------------------------------------------------------------------------------
Update Information:
Geary 0.12.3 released 2018-07-14 Bug fixes included in this release: * Not
syncing mail using Turkish locale. Bug 795906 * Fix crash saving an attachment
with unknown content type * Fix crash in secret_collection_get_locked. Bug
795328 * "Move to folder" selection bug. Issue #24 * Subfolders with special
folders not displayed in list. Issue #11 * Add OARS metadata for Flathub
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 14 2018 Thomas Moschny <thomas.moschny(a)gmx.de> - 0.12.3-1
- Update to 0.12.3.
--------------------------------------------------------------------------------
================================================================================
gtk-gnutella-1.1.13-1.fc27 (FEDORA-2018-c7712f4854)
GUI based Gnutella Client
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.13
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 14 2018 Dmitry Butskoy <Dmitry(a)Butskoy.name> - 1.1.13-1
- update to 1.1.13
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.12-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.12-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
i3status-2.12-1.fc27 (FEDORA-2018-42cce9ea1e)
Status bar generator for i3bar, dzen2, xmobar or similar programs
--------------------------------------------------------------------------------
Update Information:
Update to 2.12
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 14 2018 Christian Dersch <lupinix(a)fedoraproject.org> - 2.12-1
- new version
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.11-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.11-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Aug 23 2017 Christian Dersch <lupinix(a)mailbox.org> - 2.11-6
- rebuilt for libconfuse
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1577184 - i3status-2.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1577184
--------------------------------------------------------------------------------
================================================================================
kyua-0.13-1.fc27 (FEDORA-2018-5868441703)
Testing framework for infrastructure software
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
================================================================================
msmtp-1.6.7-3.fc27 (FEDORA-2018-b39e326de3)
SMTP client
--------------------------------------------------------------------------------
Update Information:
Adjust alternatives priority rhbz#1598386
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 14 2018 Gerald Cox <gbcox(a)fedoraproject.org> - 1.6.7-3
- Adjust alternatives priority rhbz#1598386
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1598386 - msmtp cannot be included in kickstart installation
https://bugzilla.redhat.com/show_bug.cgi?id=1598386
--------------------------------------------------------------------------------
================================================================================
orthanc-1.4.0-1.fc27 (FEDORA-2018-f9cf030d48)
RESTful DICOM server for healthcare and medical research
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 14 2018 Sebastien Jodogne <s.jodogne(a)gmail.com> - 1.4.0-1
- New upstream version
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
podman-0.7.2-1.git4ca4c5f.fc27 (FEDORA-2018-34ac445577)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
Latest update
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 14 2018 Dan Walsh <dwalsh(a)fedoraproject.org> - 0.7.4-1.git
Bump to v0.7.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1599130 - CVE-2018-10892 podman: docker: container breakout without selinux
in enforcing mode [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1599130
--------------------------------------------------------------------------------
================================================================================
python-django-helpdesk-0.2.8-1.fc27 (FEDORA-2018-8a368d3c29)
A Django powered ticket tracker for small enterprise
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 13 2018 Luis Bazan <lbazan(a)fedoraproject.org> - 0.2.8-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
python-trololio-1.0-2.fc27 (FEDORA-2018-f8e662b25e)
Trollius and asyncio compatibility library
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1599312 - Review Request: python-trololio - Trollius and asyncio
compatibility library
https://bugzilla.redhat.com/show_bug.cgi?id=1599312
--------------------------------------------------------------------------------
================================================================================
qt-virt-manager-0.70.90-1.fc27 (FEDORA-2018-14635b5e03)
Qt Virtual Machine Manager
--------------------------------------------------------------------------------
Update Information:
enhancements;
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 12 2018 Fl@sh <kaperang07(a)gmail.com> - 0.70.90-1
- version updated;
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1596938 - qt-virt-manager-0.70.90 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1596938
--------------------------------------------------------------------------------
================================================================================
tipcutils-2.2.0-2.fc27 (FEDORA-2018-f800bef7c8)
Utils package required to configure TIPC
--------------------------------------------------------------------------------
Update Information:
Newer stable version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 9 2018 Peter Hanecak <hany(a)hany.sk> - 2.2.0-2
- Newer stable version
- Switched back to source tarball on Sourceforge since it is newer
- Added BuildRequires: gcc (by Igor Gnatenko's), libtool and libdaemon-devel
- Updated description
- Updated license: some of the code is also under GPLv2
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.6-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.6-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------