The following Fedora 27 Security updates need testing:
Age URL
38
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
29
https://bodhi.fedoraproject.org/updates/FEDORA-2018-dc984c59e5
drupal7-7.57-1.fc27
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-52d79f4f36
dovecot-2.2.34-1.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e38f759144
python-bleach-2.1.3-1.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ff86925c3
memcached-1.5.6-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c923533479
webkitgtk4-2.20.0-1.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6db2f7a02e
python-paramiko-2.3.2-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7c2e0a998d
acpica-tools-20180209-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ad652798b8
mosquitto-1.4.15-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cf918d73cc
apache-commons-compress-1.14-3.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0a473d6e7b
unboundid-ldapsdk-4.0.5-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-50f0da5d38
tomcat-8.0.50-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a4353f97db
slf4j-1.7.25-4.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-223d8fc52a
java-1.8.0-openjdk-aarch32-1.8.0.161-1.180220.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b621d86462
python-notebook-5.2.1-2.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c442aad4dc
exempi-2.4.5-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4897772a43
libvncserver-0.9.11-5.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e6a51e99a4
libtiff-4.0.9-7.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c31f1eccd
iptables-1.6.2-2.fc27 libnftnl-1.0.9-2.fc27 nftables-0.8.2-2.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c923533479
webkitgtk4-2.20.0-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-55a6726164
PackageKit-1.1.9-2.fc27 gnome-software-3.28.0-4.fc27 libappstream-glib-0.7.7-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-95dac71a1c pcre-8.42-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e344a6d79b
xfce4-settings-4.12.3-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-adbc1da28c pcre2-10.31-4.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e6a51e99a4
libtiff-4.0.9-7.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c442aad4dc
exempi-2.4.5-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3480b01a6d
osinfo-db-20180325-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ad9976b6a2
selinux-policy-3.13.1-283.29.fc27
The following builds have been pushed to Fedora 27 updates-testing
R-gdata-2.18.0-2.fc27
R-sp-1.2.7-1.fc27
akmods-0.5.6-15.fc27
autofs-5.1.4-7.fc27
cacti-1.1.37-1.fc27
clang-5.0.1-5.fc27
eclipse-dtp-1.14.100-3.fc27
electrum-3.1.1-1.fc27
gd-2.2.5-3.fc27
golang-googlecode-gomock-0-0.12.20180326git58cd061.fc27
golang-googlecode-goprotobuf-0-0.36.20180318git5afd06f.fc27
js-jquery-datetimepicker-2.5.20-1.fc27
librelp-1.2.15-1.fc27
mypaint-1.2.1-12.fc27
nautilus-3.26.3.1-1.fc27
nmap-7.60-8.fc27
ofono-1.23-1.fc27
perl-DateTime-TimeZone-2.18-1.fc27
perl-Test-PostgreSQL-1.25-1.fc27
php-scssphp-0.7.5-2.fc27
podman-0.3.4-1.git57b403e.fc27
python-ansicolors-1.1.8-4.fc27
python-pygit2-0.26.4-1.fc27
python-websocket-client-0.47.0-1.fc27
rpm-ostree-2018.4-1.fc27
urh-2.0.1-1.fc27
Details about builds:
================================================================================
R-gdata-2.18.0-2.fc27 (FEDORA-2018-4e93f0cdf3)
Various R Programming Tools for Data Manipulation
--------------------------------------------------------------------------------
Update Information:
Initial package of gdata for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1555219 - Review Request: R-gdata - Various R Programming Tools for Data
Manipulation
https://bugzilla.redhat.com/show_bug.cgi?id=1555219
--------------------------------------------------------------------------------
================================================================================
R-sp-1.2.7-1.fc27 (FEDORA-2018-af2158cf3d)
Classes and Methods for Spatial Data
--------------------------------------------------------------------------------
Update Information:
Update to latest version.
--------------------------------------------------------------------------------
================================================================================
akmods-0.5.6-15.fc27 (FEDORA-2018-2899e23814)
Automatic kmods build and install tool
--------------------------------------------------------------------------------
Update Information:
- Add inihibitor for akmods@.service - Use restart on akmodsposttrans - Switch
to always retry by default - Drop akmods preset by f28 - Don't enable service on
ah - Test a rw directory
--------------------------------------------------------------------------------
================================================================================
autofs-5.1.4-7.fc27 (FEDORA-2018-fa53dc3267)
A tool for automatically mounting and unmounting filesystems
--------------------------------------------------------------------------------
Update Information:
- tiny patch for autofs typo and possible bug. - add units After line to include
statd service. - use systemd sd_notify() at startup. - add "BuildRequires:
systemd-devel". - fix NFS version mask usage. - fix incorrect date in changelog.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1552216 - PID file never created or disappears
https://bugzilla.redhat.com/show_bug.cgi?id=1552216
--------------------------------------------------------------------------------
================================================================================
cacti-1.1.37-1.fc27 (FEDORA-2018-7aaf9a041a)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.37 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.37
--------------------------------------------------------------------------------
================================================================================
clang-5.0.1-5.fc27 (FEDORA-2018-31b7d5c1db)
A C language family front-end for LLVM
--------------------------------------------------------------------------------
Update Information:
Fix for rhbz#1534098
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1534098 - There is no versioned binary for clang++ such as clang++-5.0
https://bugzilla.redhat.com/show_bug.cgi?id=1534098
--------------------------------------------------------------------------------
================================================================================
eclipse-dtp-1.14.100-3.fc27 (FEDORA-2018-7f3fbc97b6)
Eclipse Data Tools Platform
--------------------------------------------------------------------------------
Update Information:
Fixes a ClassDefNotFoundException when the Connectivity bundles start up.
--------------------------------------------------------------------------------
================================================================================
electrum-3.1.1-1.fc27 (FEDORA-2018-589b7a81a4)
A lightweight Bitcoin Client
--------------------------------------------------------------------------------
Update Information:
Updated to version 3.1.1
--------------------------------------------------------------------------------
================================================================================
gd-2.2.5-3.fc27 (FEDORA-2018-ba81e4e4a0)
A graphics library for quick creation of PNG or JPEG images
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2018-5711 - Potential infinite loop in gdImageCreateFromGifCtx
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1536738 - Potential infinite loop in gdImageCreateFromGifCtx
https://bugzilla.redhat.com/show_bug.cgi?id=1536738
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-gomock-0-0.12.20180326git58cd061.fc27 (FEDORA-2018-ed9c164bef)
Mocking framework for the Go
--------------------------------------------------------------------------------
Update Information:
Bump to 58cd061d09382b6011f84c1291ebe50ef2e25bab Update to new Go guidelines
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1555830 - golang-googlecode-gomock: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1555830
--------------------------------------------------------------------------------
================================================================================
golang-googlecode-goprotobuf-0-0.36.20180318git5afd06f.fc27 (FEDORA-2018-1c97a1b5a7)
Go support for Google protocol buffers
--------------------------------------------------------------------------------
Update Information:
Bump to 5afd06f9d81a86d6e3bb7dc702d6bd148ea3ff23 ---- Bump to
5a0f697c9ed9d68fef0116532c6e05cfeae00e55
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1246113 - Tracker for golang-googlecode-goprotobuf
https://bugzilla.redhat.com/show_bug.cgi?id=1246113
[ 2 ] Bug #1555831 - golang-googlecode-goprotobuf: FTBFS in F28
https://bugzilla.redhat.com/show_bug.cgi?id=1555831
[ 3 ] Bug #1520873 - Please update to a newer version
https://bugzilla.redhat.com/show_bug.cgi?id=1520873
--------------------------------------------------------------------------------
================================================================================
js-jquery-datetimepicker-2.5.20-1.fc27 (FEDORA-2018-7dccad4bd8)
jQuery Plugin Date and Time Picker
--------------------------------------------------------------------------------
Update Information:
Update to
[
2.5.20](https://github.com/xdan/datetimepicker/compare/2.5.18...2.5.20).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1559194 - js-jquery-datetimepicker-2.5.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1559194
--------------------------------------------------------------------------------
================================================================================
librelp-1.2.15-1.fc27 (FEDORA-2018-2f9d3604d6)
The Reliable Event Logging Protocol library
--------------------------------------------------------------------------------
Update Information:
rebase and fixed CVE-2018-1000140
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560084 - CVE-2018-1000140 librelp: Stack-based buffer overflow in
relpTcpChkPeerName function in src/tcp,c
https://bugzilla.redhat.com/show_bug.cgi?id=1560084
--------------------------------------------------------------------------------
================================================================================
mypaint-1.2.1-12.fc27 (FEDORA-2018-4908df51f5)
A fast and easy graphics application for digital painters
--------------------------------------------------------------------------------
Update Information:
Fix startup issue on wayland with custom cursors.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1555277 - Unable to load arrow from the cursor theme
https://bugzilla.redhat.com/show_bug.cgi?id=1555277
--------------------------------------------------------------------------------
================================================================================
nautilus-3.26.3.1-1.fc27 (FEDORA-2018-32f808c1c1)
File manager for GNOME
--------------------------------------------------------------------------------
Update Information:
nautilus 3.26.3.1 release. * Don���t strip extension from folders in compress
dialog * Fix items not being focused when selected in list view * Remove name
suggestion when creating new folders * Don���t show thumbnails in lower zoom
levels * Reduce help overlay size * Add support for closing tabs by middle-
clicking * Fix batch renaming for files with names, containing special
characters * Scroll to files when renaming * Disable bookmarking for recent
and trash locations * Fix label weight in preferences window * Remove drop
support for search locations * Fix ctrl-z in rename popovers * Install
appstream data to the non-deprecated location * Add generic type name support
for more file types * Don���t sort directories first in searches * Reveal
selection when opening location from recent view * Ignore extensions in
duplicate folder name generation * Fix modification time displayed for future-
dated files * Fix status bar interference with double-clicking * Fix crash in
file selection * Fix crash when triggering search while loading * Fix build
failure due to missing dependency * Add more unsupported characters in file
names in FAT * Fix windows being placed between screens in multihead setups *
Fix crashes, caused by scripts with certain names * Fix media keys not working
--------------------------------------------------------------------------------
================================================================================
nmap-7.60-8.fc27 (FEDORA-2018-d4d7108de8)
Network exploration tool and security scanner
--------------------------------------------------------------------------------
Update Information:
Fix directory traverse
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560005 - nmap: directory traversal in the way the non-default http-fetch
script sanitized URLs
https://bugzilla.redhat.com/show_bug.cgi?id=1560005
--------------------------------------------------------------------------------
================================================================================
ofono-1.23-1.fc27 (FEDORA-2018-8070baf4cc)
Open Source Telephony
--------------------------------------------------------------------------------
Update Information:
Latest upstream release.
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-TimeZone-2.18-1.fc27 (FEDORA-2018-12382064dc)
Time zone object base class and factory
--------------------------------------------------------------------------------
Update Information:
Updated to the latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560173 - perl-DateTime-TimeZone-2.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560173
--------------------------------------------------------------------------------
================================================================================
perl-Test-PostgreSQL-1.25-1.fc27 (FEDORA-2018-028fdd9656)
PostgreSQL runner for Perl tests
--------------------------------------------------------------------------------
Update Information:
This release bails out if Postgres PID has gone. It also supress "pg_ctl: could
not start server" error message. It also adds support for database seeding after
startup and for writing custom postgresql.conf.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560548 - perl-Test-PostgreSQL-1.25 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560548
--------------------------------------------------------------------------------
================================================================================
php-scssphp-0.7.5-2.fc27 (FEDORA-2018-40fa326053)
A compiler for SCSS written in PHP
--------------------------------------------------------------------------------
Update Information:
## v0.7.5 ### Fixes - Fix `for` loop with units (@of2607) - Fix side-effects
in `abs()`, `ceil()`, `floor()`, and `round()` (@jugyhead) ### New - Add
option for custom `SourceMapGenerator` (@dleffler) ## v0.7.4 ### Bug fixes -
Fat fingered cleanup; broke file-based source maps (@dleffler) ## v0.7.3 ###
Enhancements - Add inline sourcemaps (@NicolaF, @oyejorge) - Add file-based
sourcemaps (@dleffler) ## v0.7.2 ### Compatibility - increase default
precision to 10 (was 5) to match ruby scss 3.5.0 ### Bug fixes - replace
`locale()` with `number_format()` (@Arlisaha) ## v0.7.1 ### Compat Buster -
Server class moved to `/example` folder - Server::serveFrom() removed; use `(new
Server)->serve()` instead - Removed `.phar` build ### Bug fixes - `each()`
deprecated in PHP 7.2 (@marinaglancy) ## v0.7.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1504394 - php-scssphp-0.7.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1504394
--------------------------------------------------------------------------------
================================================================================
podman-0.3.4-1.git57b403e.fc27 (FEDORA-2018-586a0ce3b3)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
Weekly update
--------------------------------------------------------------------------------
================================================================================
python-ansicolors-1.1.8-4.fc27 (FEDORA-2018-7955650a80)
ANSI colors for Python
--------------------------------------------------------------------------------
Update Information:
Enhancement allowing usage of bright colors in terminal.
--------------------------------------------------------------------------------
================================================================================
python-pygit2-0.26.4-1.fc27 (FEDORA-2018-a73608a7cf)
Python bindings for libgit2
--------------------------------------------------------------------------------
Update Information:
Update to 0.26.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560127 - python-pygit2-0.26.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560127
--------------------------------------------------------------------------------
================================================================================
python-websocket-client-0.47.0-1.fc27 (FEDORA-2018-1150fce8d8)
WebSocket client for python
--------------------------------------------------------------------------------
Update Information:
- Latest upstream (rhbz# 1548228) - Fixes python3-websocket-client requires both
Python 2 and 3 (rhbz# 1531541)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531541 - python-websocket-client: python3-websocket-client requires both
Python 2 and Python 3
https://bugzilla.redhat.com/show_bug.cgi?id=1531541
[ 2 ] Bug #1548228 - python-websocket-client-0.47.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1548228
--------------------------------------------------------------------------------
================================================================================
rpm-ostree-2018.4-1.fc27 (FEDORA-2018-3345f37ffb)
Hybrid image/package system
--------------------------------------------------------------------------------
Update Information:
New upstream release v2018.4. See release notes here:
https://github.com/projectatomic/rpm-ostree/releases/tag/v2018.4.
--------------------------------------------------------------------------------
================================================================================
urh-2.0.1-1.fc27 (FEDORA-2018-0cac14ad7f)
Universal Radio Hacker: investigate wireless protocols like a boss
--------------------------------------------------------------------------------
Update Information:
This is new version of urh, for details see upstream release page:
https://github.com/jopohl/urh/releases/tag/v2.0.1 ---- This is new version of
the package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560129 - urh-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560129
[ 2 ] Bug #1550057 - urh-2.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1550057
--------------------------------------------------------------------------------