The following Fedora 27 Security updates need testing:
Age URL
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
20
https://bodhi.fedoraproject.org/updates/FEDORA-2018-81e1618ab9
glibc-arm-linux-gnu-2.26-4.fc27
17
https://bodhi.fedoraproject.org/updates/FEDORA-2018-dc984c59e5
drupal7-7.57-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-de113aeac6
ntp-4.2.8p11-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a32082df51
postgresql-9.6.8-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-52d79f4f36
dovecot-2.2.34-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e38f759144
python-bleach-2.1.3-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ff86925c3
memcached-1.5.6-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c38e40a4bf
golang-1.9.4-2.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bd1147f152
python-django-1.11.11-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-af30668257
advancecomp-2.1-4.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-38a0e1e6f5 ming-0.4.8-5.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1697970ac4
dolphin-emu-5.0-21.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-55b7018374
mailman-2.1.21-8.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ed907ef9a0 ceph-12.2.4-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5649824f49
calibre-3.19.0-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-96601292a2
php-simplesamlphp-saml2_1-1.10.6-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6db40b0c37
php-simplesamlphp-saml2-2.3.8-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4fb7cdd27f
libgit2-0.26.3-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a2cc71c081
afflib-3.7.16-4.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e27287a733 pcre2-10.31-3.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c31f1eccd
iptables-1.6.2-2.fc27 libnftnl-1.0.9-2.fc27 nftables-0.8.2-2.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d4a2b7350f
xfce4-settings-4.12.2-2.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7acb1065ee
lxpanel-0.9.3-7.D20180305gitb85c71a6.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa5edf1551 gsm-1.0.17-4.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-975e9f8b47
shared-mime-info-1.9-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c1e573d9d7
desktop-file-utils-0.23-6.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-243f8a93d5
libtirpc-1.0.2-5.rc2.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ed907ef9a0 ceph-12.2.4-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-77fdb91f3e nss-3.36.0-1.0.fc27
nss-softokn-3.36.0-1.0.fc27 nss-util-3.36.0-1.0.fc27 nspr-4.19.0-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5221fc3883
osinfo-db-20180311-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
ImageMagick-6.9.9.38-1.fc27
R-webp-0.4-1.fc27
R-yaml-2.1.18-1.fc27
calligra-3.1.0-2.fc27
cava-0.6.0-8.fc27
ccnet-6.1.6-1.fc27
chirp-20180313-1.fc27
erlang-cowlib-2.2.0-1.fc27
fmit-1.1.13-1.fc27
freeipa-4.6.3-3.fc27
i3-4.15-1.fc27
jansson-2.11-1.fc27
kernel-4.15.9-300.fc27
libappstream-glib-0.7.7-1.fc27
libldb-1.3.2-1.fc27
php-simplesamlphp-saml2_3-3.1.4-3.fc27
python-backoff-1.4.3-1.fc27
python-testinfra-1.11.1-1.fc27
resource-agents-4.1.1-1.fc27
samba-4.7.6-0.fc27
scram-0.16.2-1.fc27
seafile-6.1.6-1.fc27
seafile-client-6.1.6-1.fc27
selinux-policy-3.13.1-283.28.fc27
sensible-utils-0.0.12-1.fc27
sqliteodbc-0.9996-1.fc27
urlscan-0.8.7-1.fc27
vagrant-sshfs-1.3.1-1.fc27
waiverdb-0.9.0-1.fc27
webkitgtk4-2.20.0-1.fc27
wireshark-2.4.5-2.fc27
Details about builds:
================================================================================
ImageMagick-6.9.9.38-1.fc27 (FEDORA-2018-035a7a9ccc)
An X application for displaying and manipulating images
--------------------------------------------------------------------------------
Update Information:
Fixed numerous use of uninitialized values, integer overflow, memory exceeded,
and timeouts (credit to OSS Fuzz).
--------------------------------------------------------------------------------
================================================================================
R-webp-0.4-1.fc27 (FEDORA-2018-14ddb81795)
A New Format for Lossless and Lossy Image Compression
--------------------------------------------------------------------------------
Update Information:
Initial package of webp for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1553944 - Review Request: R-webp - A New Format for Lossless and Lossy Image
Compression
https://bugzilla.redhat.com/show_bug.cgi?id=1553944
--------------------------------------------------------------------------------
================================================================================
R-yaml-2.1.18-1.fc27 (FEDORA-2018-3a95488e1b)
Methods to Convert R Data to YAML and Back
--------------------------------------------------------------------------------
Update Information:
Update to latest version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551823 - R-yaml-2.1.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1551823
--------------------------------------------------------------------------------
================================================================================
calligra-3.1.0-2.fc27 (FEDORA-2018-3c769e763a)
An integrated office suite
--------------------------------------------------------------------------------
Update Information:
Calligra 3.1.0 release, see also
https://www.calligra.org/news/calligra-3-1-0-released/
--------------------------------------------------------------------------------
================================================================================
cava-0.6.0-8.fc27 (FEDORA-2018-05a23d7cff)
Console-based Audio Visualizer for Alsa
--------------------------------------------------------------------------------
Update Information:
fixes from review (rhbz#1553999): remove defattr
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1553999 - Review Request: cava - console-based audio visualizer
https://bugzilla.redhat.com/show_bug.cgi?id=1553999
--------------------------------------------------------------------------------
================================================================================
ccnet-6.1.6-1.fc27 (FEDORA-2018-50c8ad41d3)
A framework for writing networked applications in C
--------------------------------------------------------------------------------
Update Information:
Update to 6.1.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1552472 - [abrt] seafile-client: std::__atomic_base<int>::operator++():
seafile-applet killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1552472
[ 2 ] Bug #1542472 - ccnet-6.1.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1542472
--------------------------------------------------------------------------------
================================================================================
chirp-20180313-1.fc27 (FEDORA-2018-aedf3048af)
A tool for programming two-way radio equipment
--------------------------------------------------------------------------------
Update Information:
New Model #5329 FT70 Driver I now have enough of the driver working to be
useful. Read / write memories, a number of the settings, and import from
RepeaterBook work. Saving modes dn,vw and AMS in memory channels, do not
currently work. Banks have not been tested - may now work, VFO settings not
implemented (etc)
--------------------------------------------------------------------------------
================================================================================
erlang-cowlib-2.2.0-1.fc27 (FEDORA-2018-570122b693)
Support library for manipulating Web protocols
--------------------------------------------------------------------------------
Update Information:
* Ver. 2.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551799 - erlang-cowlib-2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1551799
--------------------------------------------------------------------------------
================================================================================
fmit-1.1.13-1.fc27 (FEDORA-2018-03fcde37c2)
Free Music Instrument Tuner
--------------------------------------------------------------------------------
Update Information:
Update to the latest available version.
--------------------------------------------------------------------------------
================================================================================
freeipa-4.6.3-3.fc27 (FEDORA-2018-0a4399f314)
The Identity, Policy and Audit system
--------------------------------------------------------------------------------
Update Information:
Don't try to back up CS.cfg during upgrade if CA is not configured
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1550555 - freeipa 4.6.1->4.6.3 upgrade breaks in ipa-server-upgrade: No
such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
https://bugzilla.redhat.com/show_bug.cgi?id=1550555
--------------------------------------------------------------------------------
================================================================================
i3-4.15-1.fc27 (FEDORA-2018-49fe3646c1)
Improved tiling window manager
--------------------------------------------------------------------------------
Update Information:
Update to 4.15
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1554041 - i3-4.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1554041
--------------------------------------------------------------------------------
================================================================================
jansson-2.11-1.fc27 (FEDORA-2018-f7a759e8c1)
C library for encoding, decoding and manipulating JSON data
--------------------------------------------------------------------------------
Update Information:
Update to Jansson 2.11
--------------------------------------------------------------------------------
================================================================================
kernel-4.15.9-300.fc27 (FEDORA-2018-cf76003e1f)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.15.9 update contains a number of important fixes across the tree.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1554199 - CVE-2018-8043 kernel: NULL pointer dereference in
drivers/net/phy/mdio-bcm-unimac.c:unimac_mdio_probe() can lead to denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1554199
[ 2 ] Bug #1553911 - CVE-2018-7995 kernel: Race condition in the
store_int_with_restart() function in cpu/mcheck/mce.c
https://bugzilla.redhat.com/show_bug.cgi?id=1553911
--------------------------------------------------------------------------------
================================================================================
libappstream-glib-0.7.7-1.fc27 (FEDORA-2018-464eb6dc5e)
Library for AppStream metadata
--------------------------------------------------------------------------------
Update Information:
- New upstream release - Add custom metadata key for shell extension uuid -
Always resize AppStream icons to fit the destination size - Correctly validate
files using OR in the metadata_license - Do not fail to validate if the
timestamps are out of order - Don't abort the build if pngquant fails - Update
the SPDX license list to v3.0
--------------------------------------------------------------------------------
================================================================================
libldb-1.3.2-1.fc27 (FEDORA-2018-c5c651ac44)
A schema-less, ldap like, API and database
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-1050 CVE-2018-1057
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1553553 - CVE-2018-1057 samba: Authenticated users can change other users
password in an AD DC configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1553553
[ 2 ] Bug #1538771 - CVE-2018-1050 samba: Null pointer indirection in printer server
process
https://bugzilla.redhat.com/show_bug.cgi?id=1538771
--------------------------------------------------------------------------------
================================================================================
php-simplesamlphp-saml2_3-3.1.4-3.fc27 (FEDORA-2018-37e28670f2)
SAML2 PHP library from SimpleSAMLphp (version 3)
--------------------------------------------------------------------------------
Update Information:
* [SSPSA 201803-01 /
CVE-2018-7711](https://simplesamlphp.org/security/201803-01) * [SSPSA 201802-01
/
CVE-2018-7644](https://simplesamlphp.org/security/201802-01) * [SSPSA
201801-01 /
CVE-2018-6519](https://simplesamlphp.org/security/201801-01)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1553357 - CVE-2018-7711 php-simplesamlphp-saml2: Authentication Bypass in the
signature validation utilities
https://bugzilla.redhat.com/show_bug.cgi?id=1553357
[ 2 ] Bug #1553352 - CVE-2018-7644 php-simplesamlphp-saml2: Signature Validation Bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1553352
[ 3 ] Bug #1542244 - CVE-2018-6519 php-simplesamlphp-saml2: Denial of Service in
xs:DateTime timestamp in SAML2 library
https://bugzilla.redhat.com/show_bug.cgi?id=1542244
--------------------------------------------------------------------------------
================================================================================
python-backoff-1.4.3-1.fc27 (FEDORA-2018-f6f04bf6a6)
Python library providing function decorators for configurable backoff and retry
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1553447 - Review Request: python-backoff - Python library providing function
decorators for configurable backoff and retry
https://bugzilla.redhat.com/show_bug.cgi?id=1553447
--------------------------------------------------------------------------------
================================================================================
python-testinfra-1.11.1-1.fc27 (FEDORA-2018-fd30fcfe75)
Unit testing for config-managed server state
--------------------------------------------------------------------------------
Update Information:
update to 1.11.1
--------------------------------------------------------------------------------
================================================================================
resource-agents-4.1.1-1.fc27 (FEDORA-2018-58731435f4)
Open Source HA Reusable Cluster Resource Scripts
--------------------------------------------------------------------------------
Update Information:
New release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514278 - resource-agents-v4.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1514278
--------------------------------------------------------------------------------
================================================================================
samba-4.7.6-0.fc27 (FEDORA-2018-c5c651ac44)
Server and Client software to interoperate with Windows machines
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-1050 CVE-2018-1057
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1553553 - CVE-2018-1057 samba: Authenticated users can change other users
password in an AD DC configuration
https://bugzilla.redhat.com/show_bug.cgi?id=1553553
[ 2 ] Bug #1538771 - CVE-2018-1050 samba: Null pointer indirection in printer server
process
https://bugzilla.redhat.com/show_bug.cgi?id=1538771
--------------------------------------------------------------------------------
================================================================================
scram-0.16.2-1.fc27 (FEDORA-2018-2e4245c838)
Probabilistic Risk Analysis Tool
--------------------------------------------------------------------------------
Update Information:
Update to 0.16.2 and add gui.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1544524 - update 0.16.2
https://bugzilla.redhat.com/show_bug.cgi?id=1544524
--------------------------------------------------------------------------------
================================================================================
seafile-6.1.6-1.fc27 (FEDORA-2018-50c8ad41d3)
Cloud storage cli client
--------------------------------------------------------------------------------
Update Information:
Update to 6.1.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1552472 - [abrt] seafile-client: std::__atomic_base<int>::operator++():
seafile-applet killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1552472
[ 2 ] Bug #1542472 - ccnet-6.1.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1542472
--------------------------------------------------------------------------------
================================================================================
seafile-client-6.1.6-1.fc27 (FEDORA-2018-50c8ad41d3)
Seafile cloud storage desktop client
--------------------------------------------------------------------------------
Update Information:
Update to 6.1.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1552472 - [abrt] seafile-client: std::__atomic_base<int>::operator++():
seafile-applet killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1552472
[ 2 ] Bug #1542472 - ccnet-6.1.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1542472
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.13.1-283.28.fc27 (FEDORA-2018-32ebae3424)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
More info:
https://koji.fedoraproject.org/koji/buildinfo?buildID=1054475
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1543997 - SELinux is preventing gnome-directory from 'getattr'
accesses on the fifo_file /run/dmeventd-server.
https://bugzilla.redhat.com/show_bug.cgi?id=1543997
[ 2 ] Bug #1545643 - SELinux is preventing bluetoothd from 'map' accesses on the
file /usr/libexec/bluetooth/bluetoothd.
https://bugzilla.redhat.com/show_bug.cgi?id=1545643
[ 3 ] Bug #1547057 - SELinux is preventing pool from 'read' accesses on the
Datei resolv.conf.
https://bugzilla.redhat.com/show_bug.cgi?id=1547057
[ 4 ] Bug #1547098 - SELinux is preventing NetworkManager from 'read' accesses
on the Datei resolv.conf.
https://bugzilla.redhat.com/show_bug.cgi?id=1547098
[ 5 ] Bug #1547338 - SELinux is preventing (uetoothd) from 'mounton' accesses on
the directory /var/lib/bluetooth.
https://bugzilla.redhat.com/show_bug.cgi?id=1547338
[ 6 ] Bug #1547761 - SELinux is preventing /usr/lib/systemd/systemd-journald from
'map' accesses on the file
2F6D656D66643A73642D73797374656D642D636F726564756D202864656C6574656429.
https://bugzilla.redhat.com/show_bug.cgi?id=1547761
[ 7 ] Bug #1544273 - SELinux is preventing abrt-action-gen from 'map' accesses
on the file /var/spool/abrt/ccpp-2018-02-12-09:44:13.351807-3048/coredump.
https://bugzilla.redhat.com/show_bug.cgi?id=1544273
[ 8 ] Bug #1544551 - SELinux is preventing openconnect from 'map' accesses on
the file /usr/share/pki/ca-trust-source/ca-bundle.trust.p11-kit.
https://bugzilla.redhat.com/show_bug.cgi?id=1544551
[ 9 ] Bug #1552437 - SELinux is preventing boinc_client from 'open' accesses on
the file /proc/sys/vm/mmap_min_addr.
https://bugzilla.redhat.com/show_bug.cgi?id=1552437
[ 10 ] Bug #1551842 - SELinux is preventing plymouthd from 'map' accesses on the
chr_file /dev/fb0.
https://bugzilla.redhat.com/show_bug.cgi?id=1551842
[ 11 ] Bug #1547875 - SELinux is preventing powertop from 'read' accesses on the
file id.
https://bugzilla.redhat.com/show_bug.cgi?id=1547875
[ 12 ] Bug #1552416 - SELinux is preventing ffspart from 'map' accesses on the
chr_file /dev/zero.
https://bugzilla.redhat.com/show_bug.cgi?id=1552416
[ 13 ] Bug #1547416 - SELinux is preventing (uetoothd) from 'mounton' accesses
on the directory /var/lib/bluetooth.
https://bugzilla.redhat.com/show_bug.cgi?id=1547416
[ 14 ] Bug #1532015 - SELinux is preventing systemd from 'create' accesses on
the tcp_socket port None (lpr)
https://bugzilla.redhat.com/show_bug.cgi?id=1532015
[ 15 ] Bug #1547227 - SELinux is preventing systemd-update- from
'module_request' accesses on the system Unknown.
https://bugzilla.redhat.com/show_bug.cgi?id=1547227
[ 16 ] Bug #1552398 - SELinux is preventing rpcbind from 'create' accesses on
the directory rpcbind.
https://bugzilla.redhat.com/show_bug.cgi?id=1552398
[ 17 ] Bug #1543650 - SELinux is preventing systemd-rfkill from 'module_request'
accesses on the system Unknown.
https://bugzilla.redhat.com/show_bug.cgi?id=1543650
[ 18 ] Bug #1544251 - SELinux is preventing gdm-wayland-ses from 'read' accesses
on the lnk_file machine-id.
https://bugzilla.redhat.com/show_bug.cgi?id=1544251
[ 19 ] Bug #1551770 - SELinux is preventing mkhomedir_helpe from 'write'
accesses on the sock_file system_bus_socket.
https://bugzilla.redhat.com/show_bug.cgi?id=1551770
[ 20 ] Bug #1501331 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1501331
[ 21 ] Bug #1542803 - SELinux preventing L2TP VPN connection
https://bugzilla.redhat.com/show_bug.cgi?id=1542803
[ 22 ] Bug #1534111 - New tmux AVC on F27
https://bugzilla.redhat.com/show_bug.cgi?id=1534111
[ 23 ] Bug #1544627 - SELinux is preventing boinc_client from 'read' accesses on
the file mmap_min_addr.
https://bugzilla.redhat.com/show_bug.cgi?id=1544627
[ 24 ] Bug #1552436 - SELinux is preventing boinc_client from 'open' accesses on
the file /sys/fs/cgroup/cpuset/cpuset.cpus.
https://bugzilla.redhat.com/show_bug.cgi?id=1552436
[ 25 ] Bug #1544270 - SELinux is preventing telepathy-logge from 'map' accesses
on the file /run/user/1000/dconf/user.
https://bugzilla.redhat.com/show_bug.cgi?id=1544270
[ 26 ] Bug #1547056 - SELinux is preventing abrt-action-sav from 'read' accesses
on the Datei resolv.conf.
https://bugzilla.redhat.com/show_bug.cgi?id=1547056
[ 27 ] Bug #1547259 - SELinux is preventing addconn from 'read' accesses on the
file nm-l2tp-ipsec-56798339-a275-487a-a299-1d1d0a179e66.conf.
https://bugzilla.redhat.com/show_bug.cgi?id=1547259
[ 28 ] Bug #1551738 - snapper causes selinux denials after dnf update
https://bugzilla.redhat.com/show_bug.cgi?id=1551738
[ 29 ] Bug #1546423 - SELinux is preventing bluetoothd from 'create' accesses on
the socket Unknown.
https://bugzilla.redhat.com/show_bug.cgi?id=1546423
[ 30 ] Bug #1468381 - SELinux is preventing boinc_client from 'read' accesses on
the file cpuset.mems.
https://bugzilla.redhat.com/show_bug.cgi?id=1468381
[ 31 ] Bug #1544272 - SELinux is preventing systemd from using the 'sigkill'
accesses on a process.
https://bugzilla.redhat.com/show_bug.cgi?id=1544272
[ 32 ] Bug #1554087 - minidlna service runs as unconfined_service_t because of wrong
file context pattern
https://bugzilla.redhat.com/show_bug.cgi?id=1554087
[ 33 ] Bug #1545348 - SELinux is preventing nm-l2tp-service from 'search'
accesses on the directory strongswan.
https://bugzilla.redhat.com/show_bug.cgi?id=1545348
[ 34 ] Bug #1552765 - SELinux is preventing ABRT a map access to /tmp /var/tmp
https://bugzilla.redhat.com/show_bug.cgi?id=1552765
[ 35 ] Bug #1543375 - SELinux is preventing unix_update from using the 'fsetid'
capabilities.
https://bugzilla.redhat.com/show_bug.cgi?id=1543375
[ 36 ] Bug #1551033 - SELinux is preventing colord from 'map' accesses on the
file /home/fedora/kasmith/.local/share/icc/edid-a920bbe26e6ac81fc5b993f93b3b4cba.icc.
https://bugzilla.redhat.com/show_bug.cgi?id=1551033
[ 37 ] Bug #1543033 - SELinux is preventing memcached from starting
https://bugzilla.redhat.com/show_bug.cgi?id=1543033
[ 38 ] Bug #1552535 - SELinux is preventing modprobe from 'map' accesses on the
file /usr/lib/modules/4.15.6-300.fc27.x86_64/modules.dep.bin.
https://bugzilla.redhat.com/show_bug.cgi?id=1552535
[ 39 ] Bug #1552536 - SELinux is preventing php-fpm from 'create' accesses on
the netlink_kobject_uevent_socket Unknown.
https://bugzilla.redhat.com/show_bug.cgi?id=1552536
[ 40 ] Bug #1542903 - SELinux is preventing hostname from read, write access on the
chr_file /dev/ttyUSB1.
https://bugzilla.redhat.com/show_bug.cgi?id=1542903
[ 41 ] Bug #1554150 - SELinux is preventing lxdm-session from 'sys_ptrace'
accesses on the cap_userns Unknown.
https://bugzilla.redhat.com/show_bug.cgi?id=1554150
[ 42 ] Bug #1547874 - SELinux is preventing powertop from 'setopt' accesses on
the netlink_generic_socket Unknown.
https://bugzilla.redhat.com/show_bug.cgi?id=1547874
[ 43 ] Bug #1471545 - SElinux prevents postfix from reading
/run/systemd/resolve/resolv.conf
https://bugzilla.redhat.com/show_bug.cgi?id=1471545
[ 44 ] Bug #1547876 - SELinux is preventing systemd from 'bind' accesses on the
netlink_selinux_socket Unknown.
https://bugzilla.redhat.com/show_bug.cgi?id=1547876
[ 45 ] Bug #1542746 - SELinux is preventing addconn from 'search' accesses on
the directory /var/lib/unbound.
https://bugzilla.redhat.com/show_bug.cgi?id=1542746
--------------------------------------------------------------------------------
================================================================================
sensible-utils-0.0.12-1.fc27 (FEDORA-2018-2e31648739)
Utilities for sensible alternative selection
--------------------------------------------------------------------------------
Update Information:
Update to sensible-utils-0.0.12, see
http://metadata.ftp-
master.debian.org/changelogs/main/s/sensible-utils/sensible-
utils_0.0.12_changelog for details.
--------------------------------------------------------------------------------
================================================================================
sqliteodbc-0.9996-1.fc27 (FEDORA-2018-b0f0139b2b)
SQLite ODBC Driver
--------------------------------------------------------------------------------
Update Information:
Update to the latest available version
--------------------------------------------------------------------------------
================================================================================
urlscan-0.8.7-1.fc27 (FEDORA-2018-b99694afa8)
Extract and browse the URLs contained in an email (urlview replacement)
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1550763 - urlscan-0.8.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1550763
--------------------------------------------------------------------------------
================================================================================
vagrant-sshfs-1.3.1-1.fc27 (FEDORA-2018-a45bc65330)
A Vagrant synced folder plugin that mounts folders via SSHFS
--------------------------------------------------------------------------------
Update Information:
New version v1.3.1. No backwards incompatible changes.
--------------------------------------------------------------------------------
================================================================================
waiverdb-0.9.0-1.fc27 (FEDORA-2018-95ea870af2)
Service for waiving results in ResultsDB
--------------------------------------------------------------------------------
Update Information:
Fix some database migrations. ---- Release notes:
https://docs.pagure.org/waiverdb/release-notes.html#waiverdb-0-8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1538463 - waiverdb-cli --help crashes
https://bugzilla.redhat.com/show_bug.cgi?id=1538463
--------------------------------------------------------------------------------
================================================================================
webkitgtk4-2.20.0-1.fc27 (FEDORA-2018-c923533479)
GTK+ Web content engine library
--------------------------------------------------------------------------------
Update Information:
This update brings the following changes: * New API to retrieve and delete
cookies with WebKitCookieManager. * New web process API to detect when form is
submitted via JavaScript. * Several improvements and fixes in the touch/gestures
support. * Support for the ���system��� CSS font family. * Complex text rendering
improvements and fixes. * Added a low power mode. * More complete and spec
compliant WebDriver implementation.
--------------------------------------------------------------------------------
================================================================================
wireshark-2.4.5-2.fc27 (FEDORA-2018-89ed29a14b)
Network traffic analyzer
--------------------------------------------------------------------------------
Update Information:
Added wireshark-qt to wireshark metapackage ---- - New version 2.4.5 -
Contains fixes for CVE-2018-7419, CVE-2018-7418, CVE-2018-7417, CVE-2018-7420,
CVE-2018-7320, CVE-2018-7336, CVE-2018-7337, CVE-2018-7334, CVE-2018-7335,
CVE-2018-6836, CVE-2018-5335, CVE-2018-5334, CVE-2017-6014, CVE-2017-9616,
CVE-2017-9617, CVE-2017-9766
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1506859 - wireshark meta package is missing wireshark-qt dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1506859
[ 2 ] Bug #1549309 - CVE-2018-7419 wireshark: NBAP dissector crash in nbap.cnf
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549309
[ 3 ] Bug #1549306 - CVE-2018-7418 wireshark: SIGCOMP dissector crash in
packet-sigcomp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549306
[ 4 ] Bug #1549302 - CVE-2018-7417 wireshark: IPMI dissector crash in
packet-ipmi-picmg.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549302
[ 5 ] Bug #1549286 - CVE-2018-7420 wireshark: Pcapng file parser crash in pcapng.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549286
[ 6 ] Bug #1549278 - CVE-2018-7320 wireshark: Heap-based Buffer Overflow in SIGCOMP
dissector crash in packet-sigcomp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549278
[ 7 ] Bug #1549271 - CVE-2018-7336 wireshark: FCP dissector crash in packet-fcp.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549271
[ 8 ] Bug #1549266 - CVE-2018-7337 wireshark: DOCSIS dissector crash in packet-docsis.c
by injecting a malformed packet [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549266
[ 9 ] Bug #1549256 - CVE-2018-7334 wireshark: out of bounds access in UMTS MAC dissector
in packet-umts_mac.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549256
[ 10 ] Bug #1549246 - CVE-2018-7335 wireshark: IEEE 802.11 dissector crash in airpdcap.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549246
[ 11 ] Bug #1543583 - CVE-2018-6836 wireshark: free operation on an uninitialized memory
address in wiretap/netmon.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1543583
[ 12 ] Bug #1534365 - CVE-2018-5335 wireshark: WCP dissector crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1534365
[ 13 ] Bug #1534362 - CVE-2018-5334 wireshark: IxVeriWave file parser crash
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1534362
[ 14 ] Bug #1425376 - CVE-2017-6014 wireshark: Memory exhaustion/infinite loop via
malformed STANAG 4607 capture file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1425376
[ 15 ] Bug #1464052 - CVE-2017-9616 CVE-2017-9617 CVE-2017-9766 wireshark: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1464052
[ 16 ] Bug #1548665 - wireshark: Partial Fedora build flags injection
https://bugzilla.redhat.com/show_bug.cgi?id=1548665
[ 17 ] Bug #1542775 - wireshark-2.4.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1542775
--------------------------------------------------------------------------------