The following Fedora 27 Security updates need testing:
Age URL
164
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
95
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
81
https://bodhi.fedoraproject.org/updates/FEDORA-2018-775d96b54b
blktrace-1.2.0-6.fc27
69
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a10c1d234e
vim-syntastic-3.9.0-1.fc27
59
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
51
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f7a1334c68
sox-14.4.2.0-22.fc27
50
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
45
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2d2179e7d0
python-XStatic-jquery-ui-1.12.0.1-2.fc27
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
26
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2b053454a4
libvirt-3.7.0-6.fc27
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-df2593ee6a
docker-1.13.1-60.git9cb56fd.fc27
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-160b3d2f6c
docker-latest-1.13.1-37.git9cb56fd.fc27
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bee0aefb05
thunderbird-52.9.1-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9829c6ddcf
quazip-0.7.6-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-502e31a658 mutt-1.9.2-2.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8738f5f4a7 ceph-12.2.7-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9ec3061fc8
bibutils-6.6-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-47d2ad9eaf cups-2.2.4-11.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-73bd3d14a3
pam_yubico-2.26-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9c0b765d2d
wesnoth-1.14.4-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9ef52861b5
wireshark-2.6.2-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e1f03d1f72
poppler-0.57.0-10.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2cf8d705ad
seamonkey-2.49.4-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ee076d0530
myrepos-1.20180726-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0a61e79f56
dpkg-1.18.25-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
79
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
57
https://bodhi.fedoraproject.org/updates/FEDORA-2018-33052e653e
iproute-4.16.0-1.fc27
40
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
26
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2b053454a4
libvirt-3.7.0-6.fc27
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bee0aefb05
thunderbird-52.9.1-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-01441e6ea8
boost-1.64.0-7.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1df6a39717
tigervnc-1.9.0-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c5b37f6b46
pulseaudio-12.2-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1312f831bc
pungi-4.1.26-2.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8738f5f4a7 ceph-12.2.7-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cf1b3b7c45 avahi-0.7-13.fc27
gitso-0.6-19.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-47d2ad9eaf cups-2.2.4-11.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-66d5c87587
python-setuptools-37.0.0-2.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8aed9eb598 vim-8.1.209-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3f3e6d136e
perl-5.26.2-407.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4bb4de2d86
selinux-policy-3.13.1-284.37.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-de439295e3
kernel-4.17.10-100.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e1f03d1f72
poppler-0.57.0-10.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2bb229d1b3
breeze-icon-theme-5.48.0-2.fc27 extra-cmake-modules-5.48.0-2.fc27 kf5-5.48.0-3.fc27
kf5-attica-5.48.0-2.fc27 kf5-baloo-5.48.0-1.fc27 kf5-bluez-qt-5.48.0-2.fc27
kf5-frameworkintegration-5.48.0-1.fc27 kf5-kactivities-5.48.0-3.fc27
kf5-kactivities-stats-5.48.0-2.fc27 kf5-kapidox-5.48.0-2.fc27 kf5-karchive-5.48.0-2.fc27
kf5-kauth-5.48.0-2.fc27 kf5-kbookmarks-5.48.0-2.fc27 kf5-kcmutils-5.48.0-1.fc27
kf5-kcodecs-5.48.0-2.fc27 kf5-kcompletion-5.48.0-2.fc27 kf5-kconfig-5.48.0-2.fc27
kf5-kconfigwidgets-5.48.0-2.fc27 kf5-kcoreaddons-5.48.0-2.fc27 kf5-kcrash-5.48.0-2.fc27
kf5-kdbusaddons-5.48.0-2.fc27 kf5-kdeclarative-5.48.0-1.fc27 kf5-kded-5.48.0-1.fc27
kf5-kdelibs4support-5.48.0-2.fc27 kf5-kdesignerplugin-5.48.0-2.fc27
kf5-kdesu-5.48.0-2.fc27 kf5-kdewebkit-5.48.0-1.fc27 kf5-kdnssd-5.48.0-2.fc27
kf5-kdoctools-5.48.0-2.fc27 kf5-kemoticons-5.48.0-2.fc27 kf5-kfilemetadata-5.48.0-2.fc27
kf5-kglobalaccel-5.48.0-2.fc27 kf5-kguiad
dons-5.48.0-2.fc27 kf5-kholidays-5.48.0-2.fc27 kf5-khtml-5.48.0-1.fc27
kf5-ki18n-5.48.0-2.fc27 kf5-kiconthemes-5.48.0-2.fc27 kf5-kidletime-5.48.0-2.fc27
kf5-kimageformats-5.48.0-2.fc27 kf5-kinit-5.48.0-1.fc27 kf5-kio-5.48.0-1.fc27
kf5-kirigami2-5.48.0-2.fc27 kf5-kitemmodels-5.48.0-2.fc27 kf5-kitemviews-5.48.0-2.fc27
kf5-kjobwidgets-5.48.0-2.fc27 kf5-kjs-5.48.0-2.fc27 kf5-kjsembed-5.48.0-2.fc27
kf5-kmediaplayer-5.48.0-1.fc27 kf5-knewstuff-5.48.0-1.fc27
kf5-knotifications-5.48.0-2.fc27 kf5-knotifyconfig-5.48.0-1.fc27
kf5-kpackage-5.48.0-2.fc27 kf5-kparts-5.48.0-1.fc27 kf5-kpeople-5.48.0-2.fc27
kf5-kplotting-5.48.0-2.fc27 kf5-kpty-5.48.0-2.fc27 kf5-kross-5.48.0-1.fc27
kf5-krunner-5.48.0-2.fc27 kf5-kservice-5.48.0-2.fc27 kf5-ktexteditor-5.48.0-1.fc27
kf5-ktextwidgets-5.48.0-3.fc27 kf5-kunitconversion-5.48.0-2.fc27 kf5-kwallet-5.48.0-2.fc27
kf5-kwayland-5.48.0-2.fc27 kf5-kwidgetsaddons-5.48.0-2.fc27
kf5-kwindowsystem-5.48.0-2.fc27 kf5-kxmlgui-5.48.0-2.fc27 kf5-kxmlrpcclient-5.48.0-1.fc27
kf5-modemmanager-qt-5.48.0-2.fc27 kf5-networkmanager-qt-5.48.0-2.fc27
kf5-plasma-5.48.0-2.fc27 kf5-prison-5.48.0-2.fc27 kf5-purpose-5.48.0-1.fc27
kf5-solid-5.48.0-2.fc27 kf5-sonnet-5.48.0-2.fc27 kf5-syntax-highlighting-5.48.0-2.fc27
kf5-threadweaver-5.48.0-2.fc27 oxygen-icon-theme-5.48.0-2.fc27
qqc2-desktop-style-5.48.0-2.fc27
The following builds have been pushed to Fedora 27 updates-testing
atomic-reactor-1.6.33-1.fc27
cabal-rpm-0.12.5-2.fc27
js-php-date-formatter-1.3.5-1.fc27
mozilla-noscript-10.1.8.16-2.fc27
mozilla-privacy-badger-2018.7.18.1-1.fc27
mozilla-ublock-origin-1.16.14-1.fc27
nodejs-8.11.3-2.fc27
osbs-client-0.49-1.fc27
perl-CPAN-Perl-Releases-3.72-1.fc27
python-mongoengine-0.15.3-1.fc27
Details about builds:
================================================================================
atomic-reactor-1.6.33-1.fc27 (FEDORA-2018-2247cf60ff)
Improved builder for Docker images
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2018 Clement Verna <cverna(a)fedoraproject.org> - 1.6.33-1
- New upstream release
- Drop patches
- Drop stop_autorebuild_if_disabled plugin
* Thu Jun 21 2018 Clement Verna <cverna(a)fedoraproject.org> - 1.6.31-3
- Adding patch fo docker-py compatibility
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.6.31-2
- Rebuilt for Python 3.7
* Tue May 15 2018 Clement Verna <cverna(a)fedoraproject.org> - 1.6.31-1
- Update to latest upstream
* Mon Feb 19 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 1.6.29-3
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
--------------------------------------------------------------------------------
================================================================================
cabal-rpm-0.12.5-2.fc27 (FEDORA-2018-c9c5f8672a)
RPM packaging tool for Haskell Cabal-based packages
--------------------------------------------------------------------------------
Update Information:
- default tracked stream to lts-11 - improvements to update and refresh -
improved revising of .cabal files - use "fedpkg sources" to fetch current
Fedora
sources - do not put doc* in docs - better output for missing sub-deps ---- -
now uses Hackage revisions of packages (using wget) - spec --stream STREAM
replaces --hackage
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2018 Jens Petersen <petersen(a)redhat.com> - 0.12.5-2
- patch default tracked stream to lts-11
* Sun Jul 29 2018 Jens Petersen <petersen(a)redhat.com> - 0.12.5-1
- improvements to update and refresh
- improved revising of .cabal files
- use "fedpkg sources" to fetch current Fedora sources
- do not put doc* in docs
- better output for missing sub-deps
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu May 31 2018 Jens Petersen <petersen(a)redhat.com> - 0.12.4-2
- requires wget
* Thu May 31 2018 Jens Petersen <petersen(a)redhat.com> - 0.12.4-1
- now uses Hackage revisions of packages
- spec --stream STREAM replaces --hackage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1609524 - cabal-rpm-0.12.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1609524
--------------------------------------------------------------------------------
================================================================================
js-php-date-formatter-1.3.5-1.fc27 (FEDORA-2018-60fdb8b0aa)
A JS date-time formatting/manipulation library using PHP date-time formats
--------------------------------------------------------------------------------
Update Information:
Update to [
1.3.5](https://github.com/kartik-v/php-date-
formatter/releases/tag/v1.3.5).
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 29 2018 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 1.3.5-1
- Update to 1.3.5 (#1600937).
-
https://github.com/kartik-v/php-date-formatter/releases/tag/v1.3.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1600937 - js-php-date-formatter-v1.3.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1600937
--------------------------------------------------------------------------------
================================================================================
mozilla-noscript-10.1.8.16-2.fc27 (FEDORA-2018-3df5b8e635)
JavaScript white list extension for Mozilla Firefox
--------------------------------------------------------------------------------
Update Information:
**NOTE:** All packaged Firefox add-ons are affected by Firefox bug
fedora#1508827 . A workaround is provided in the bug report. Please do not give
negative karma just because of that bug. ### Changes since 10.1.8.8: ###
10.1.8.16 * Fixed random stallings on page transitions (thanks sage11, Brush and
pbelleisle for reporting) ### 10.1.8.15 * Fixed browser action icon not bein
updated on BF cache navigation (thanks therube for reporting) ### 10.1.8.14 *
Fixed regression in NOSCRIPT elements emulation ### 10.1.8.12 * Fixed some
video streams not playing anymore ### 10.1.8.10 * Fixed window.stop() being
called on empty frames, causing WYSIWYG editors to break (thanks Dave Allen for
reporting) ### 10.1.8.9 * Fixed externally handled resources opened in popups
broken by dynamic script injection (thanks rpr and paulmcg for reporting) * More
edge case covered in dynamic script injection (thanks skriptimaahinen for
reporting) * Fixed some resource loading feedback glitches * [XSS] Updated HTML
event attributes matching * Updated TLDs * Fixed stalling embedded objects load
on dynamic script injection (thanks therube for reporting) * [L10n] Updated it
(thanks Sebastiano Pistore) * Work-around for serviceWorker loads bypassing
webRequest (thanks therube for reporting) * More flexible CSS layout for preset
buttons (thanks fatboy) * Improved edge case script disablement detection * More
reliable handling of edge cases on startup (thanks therube for reporting) *
Fixed dynamic script injection failing sometimes with "No matching message
handler" error (thanks skriptimaahinen for reporting) * Prevent multiple
canScript content messages during the same page load
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.8.16-2
- update to 10.1.8.16 (#1609266)
- make main package dependencies on subpackages versioned
* Fri Jul 20 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.8.8-1
- update to 10.1.8.8 (#1601456)
- update classic version to 5.1.8.6
- extract only the licenses and cfg file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1609266 - mozilla-noscript-10.1.8.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1609266
--------------------------------------------------------------------------------
================================================================================
mozilla-privacy-badger-2018.7.18.1-1.fc27 (FEDORA-2018-0a5766505c)
Protects your privacy by blocking spying ads and invisible trackers
--------------------------------------------------------------------------------
Update Information:
**NOTE:** All packaged Firefox add-ons are affected by Firefox bug
fedora#1508827 . A workaround is provided in the bug report. Please do not give
negative karma just because of that bug. Privacy Badger is a browser add-on
that stops advertisers and other third-party trackers from secretly tracking
where you go and what pages you look at on the web. If an advertiser seems to be
tracking you across multiple websites without your permission, Privacy Badger
automatically blocks that advertiser from loading any more content in your
browser. To the advertiser, it's like you suddenly disappeared.
--------------------------------------------------------------------------------
================================================================================
mozilla-ublock-origin-1.16.14-1.fc27 (FEDORA-2018-ae82fb3909)
An efficient blocker for Firefox
--------------------------------------------------------------------------------
Update Information:
**NOTE:** All packaged Firefox add-ons are affected by Firefox bug
fedora#1508827 . A workaround is provided in the bug report. Please do not give
negative karma just because of that bug. Bugs fixed since **1.16.12**: * Race
condition at filter lists load time potentially breaking highly-generic cosmetic
filters * Cursor jumps to next matched item when adding char to search *
Inifinite update attempts with "AdGuard Experimental filter" * Odd sorting in
popup domains list when domains have same SLD but different TLD * Cosmetic rules
not logged for embedded YouTube videos
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 1.16.14-1
- update to 1.16.14 (#1598265)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1598265 - mozilla-ublock-origin-1.16.15b6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1598265
--------------------------------------------------------------------------------
================================================================================
nodejs-8.11.3-2.fc27 (FEDORA-2018-a9a3ec52a5)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
Revert to using OpenSSL 1.0.2 for Node.js 8.x. Despite upstream statements,
Node.js 8.x does not work properly with OpenSSL 1.1.x.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 24 2018 Stephen Gallagher <sgallagh(a)redhat.com> - 1:8.11.3-2
- Switch back to using OpenSSL 1.0.2 for crypto
- Resolves: rhbz#1607112 - Segmentation Fault when running upstream Antora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1607112 - Segmentation Fault when running upstream Antora
https://bugzilla.redhat.com/show_bug.cgi?id=1607112
--------------------------------------------------------------------------------
================================================================================
osbs-client-0.49-1.fc27 (FEDORA-2018-f3994a35f8)
Python command line client for OpenShift Build Service
--------------------------------------------------------------------------------
Update Information:
New upstrean Release 0.49
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2018 Clement Verna <cverna(a)fedoraproject.org> - 0.49-1
- New upstrean Release 0.49
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-3.72-1.fc27 (FEDORA-2018-aa743e4784)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version ---- Updated to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 30 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.72-1
- 3.72 bump
* Mon Jul 23 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.70-1
- 3.70 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1609256 - perl-CPAN-Perl-Releases-3.72 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1609256
[ 2 ] Bug #1606925 - perl-CPAN-Perl-Releases-3.70 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1606925
--------------------------------------------------------------------------------
================================================================================
python-mongoengine-0.15.3-1.fc27 (FEDORA-2018-779f9a1e4b)
A Python Document-Object Mapper for working with MongoDB
--------------------------------------------------------------------------------
Update Information:
Update to [
0.15.3](https://github.com/MongoEngine/mongoengine/blob/v0.15.3/docs/
changelog.rst).
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 29 2018 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 0.15.3-1
- Update to 0.15.3 (#1597681).
-
https://github.com/MongoEngine/mongoengine/blob/v0.15.3/docs/changelog.rst
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1597681 - python-mongoengine-v0.15.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1597681
--------------------------------------------------------------------------------