The following Fedora 27 Security updates need testing:
Age URL
125
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
57
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
43
https://bodhi.fedoraproject.org/updates/FEDORA-2018-775d96b54b
blktrace-1.2.0-6.fc27
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a10c1d234e
vim-syntastic-3.9.0-1.fc27
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f7a1334c68
sox-14.4.2.0-22.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-de5457b0a2
epiphany-3.26.7-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b99d43ee9b ppp-2.4.7-14.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aac3ca8936
webkitgtk4-2.20.3-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b5de855e94 file-5.31-12.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ce05750e27
redis-4.0.10-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-da33a74b32
libgxps-0.3.0-5.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ae1ced8fb6
dcraw-9.28.0-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2d2179e7d0
python-XStatic-jquery-ui-1.12.0.1-2.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a3e631b454 pass-1.7.2-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-86026275ea
mariadb-10.2.15-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-79841c871e
nodejs-8.11.3-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2f3c0cdf93
podofo-0.9.5-9.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2807317e7a
mingw-podofo-0.9.5-6.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-69780fc4d7
gnupg-1.4.23-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b619637e45
ansible-2.5.5-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f82bcf6850 xen-4.9.2-5.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-320cb9d7fb
cri-o-1.10.3-1.gite558bd5.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f02e5ed7b qemu-2.10.1-4.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e657c3c037
libvirt-3.7.0-5.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
41
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
24
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2a57dc63c1
selinux-policy-3.13.1-283.35.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-33052e653e
iproute-4.16.0-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bd7544b85b fwupd-1.0.8-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-de5457b0a2
epiphany-3.26.7-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.10-2.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b99d43ee9b ppp-2.4.7-14.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a9dee99bdb sssd-1.16.2-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b5de855e94 file-5.31-12.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aac3ca8936
webkitgtk4-2.20.3-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f5989c8ede
osinfo-db-20180612-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e4c3c67c5c
glusterfs-3.12.10-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5c3b7f0960
perl-Time-Local-1.280-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-da33a74b32
libgxps-0.3.0-5.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f82bcf6850 xen-4.9.2-5.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9b320376ec
ethtool-4.17-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e5d54db474
NetworkManager-1.8.8-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-69780fc4d7
gnupg-1.4.23-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c41dfbff1e bash-4.4.23-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ee8501523
analitza-17.12.3-1.fc27 calibre-3.19.0-1.fc27.1 deepin-tool-kit-0.3.3-5.fc27
dnscrypt-proxy-gui-1.11.15-1.fc27.1 fcitx-qt5-1.2.3-1.fc27.1 gammaray-2.8.1-4.fc27
gsettings-qt-0-0.8.20170715bzr83.fc27 kf5-akonadi-server-17.12.3-1.fc27.1
kf5-frameworkintegration-5.47.0-1.fc27.1 kf5-kdeclarative-5.47.0-1.fc27.1
kf5-kwayland-5.47.0-1.fc27.1 kf5-kxmlgui-5.47.0-1.fc27.1 kwin-5.12.5-1.fc27.1
libfm-qt-0.11.2-9.fc27 libqtxdg-2.0.0-9.fc27 lxqt-qtplugin-0.11.1-9.fc27
mscore-2.1.0-12.fc27 plasma-integration-5.12.5-1.fc27.1 postbooks-4.10.1-17.fc27
pyotherside-1.5.3-4.fc27 python-qt5-5.9.1-3.fc27 pythonqt-3.2-6.fc27
qgnomeplatform-0.3-7.fc27 qstardict-1.2-8.fc27 qt-creator-4.6.2-1.fc27.1 qt5-5.9.6-1.fc27
qt5-qt3d-5.9.6-1.fc27 qt5-qtbase-5.9.6-1.fc27 qt5-qtcanvas3d-5.9.6-1.fc27
qt5-qtcharts-5.9.6-1.fc27 qt5-qtconnectivity-5.9.6-1.fc27 qt5-qtdeclarative-5.9.6-1.fc27
qt5-qtdoc-5.9.6-1.fc27 qt5-qtenginio-1.6.2-13.fc27 qt5-qtgamepad-
5.9.6-1.fc27 qt5-qtgraphicaleffects-5.9.6-1.fc27 qt5-qtimageformats-5.9.6-1.fc27
qt5-qtlocation-5.9.6-1.fc27 qt5-qtmultimedia-5.9.6-1.fc27 qt5-qtquickcontrols-5.9.6-1.fc27
qt5-qtquickcontrols2-5.9.6-1.fc27 qt5-qtremoteobjects-5.9.6-1.fc27
qt5-qtscript-5.9.6-1.fc27 qt5-qtscxml-5.9.6-1.fc27 qt5-qtsensors-5.9.6-1.fc27
qt5-qtserialbus-5.9.6-1.fc27 qt5-qtserialport-5.9.6-1.fc27 qt5-qtspeech-5.9.6-1.fc27
qt5-qtstyleplugins-5.0.0-25.fc27 qt5-qtsvg-5.9.6-1.fc27 qt5-qttools-5.9.6-1.fc27
qt5-qttranslations-5.9.6-1.fc27 qt5-qtvirtualkeyboard-5.9.6-1.fc27
qt5-qtwayland-5.9.6-1.fc27 qt5-qtwebchannel-5.9.6-1.fc27 qt5-qtwebengine-5.10.1-4.fc27.1
qt5-qtwebkit-5.212.0-0.20.alpha2.fc27.1 qt5-qtwebsockets-5.9.6-1.fc27
qt5-qtwebview-5.9.6-1.fc27 qt5-qtx11extras-5.9.6-1.fc27 qt5-qtxmlpatterns-5.9.6-1.fc27
qt5ct-0.35-1.fc27.1 skrooge-2.12.0-1.fc27.1 texmaker-5.0.2-3.fc27 ugene-1.28.1-3.fc27
xdg-desktop-portal-kde-5.12.5-1.fc27.1 yarock-1.3.1-1.fc27.1
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-49b4b4638d
python-productmd-1.15-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d70cf2c993
python-rpm-macros-3-25.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f02e5ed7b qemu-2.10.1-4.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e657c3c037
libvirt-3.7.0-5.fc27
The following builds have been pushed to Fedora 27 updates-testing
389-ds-base-1.3.8.4-1.fc27
Lmod-7.7.35-1.fc27
certbot-0.25.1-3.fc27
gsequencer-1.4.32-1.fc27
ibus-typing-booster-2.0.1-1.fc27
jss-4.4.4-2.fc27
kernel-4.16.17-200.fc27
latexmk-4.57-1.fc27
perl-Test-POE-Client-TCP-1.16-1.fc27
python-black-18.6b4-1.fc27
python-dns-lexicon-2.4.3-1.fc27
python-neo-0.6.1-2.fc27
qutebrowser-1.3.3-1.fc27
samba-4.7.8-0.fc27
vim-8.1.095-1.fc27
vim-toml-0-0.2.20180615git85ba827.fc27
xcircuit-3.10.10-1.fc27
Details about builds:
================================================================================
389-ds-base-1.3.8.4-1.fc27 (FEDORA-2018-84c640b8fa)
389 Directory Server (base)
--------------------------------------------------------------------------------
Update Information:
Bump version to 1.3.8.4-1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Mark Reynolds <mreynolds(a)redhat.com> - 1.3.8.4-1
- Bump version to 1.3.8.4-1
- Ticket 49751 - passwordMustChange attribute is not honored by a RO consumer if using
"Chain on Update"
- Ticket 49734 - Fix various issues with Disk Monitoring
- Ticket 49788 - Fixing 4-byte UTF-8 character validation
--------------------------------------------------------------------------------
================================================================================
Lmod-7.7.35-1.fc27 (FEDORA-2018-306294687a)
Environmental Modules System in Lua
--------------------------------------------------------------------------------
Update Information:
Update to 7.7.35
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Orion Poplawski <orion(a)cora.nwra.com> - 7.7.35-1
- Update to 7.7.35
* Wed Mar 7 2018 Orion Poplawski <orion(a)cora.nwra.com> - 7.7.18-1
- Update to 7.7.18
- Add BR gcc
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.5.16-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1545264 - Man stops working because MANPATH is set to
/usr/share/lmod/lmod/share/man:.:.
https://bugzilla.redhat.com/show_bug.cgi?id=1545264
--------------------------------------------------------------------------------
================================================================================
certbot-0.25.1-3.fc27 (FEDORA-2018-59466bc8f1)
A free, automated certificate authority client
--------------------------------------------------------------------------------
Update Information:
This makes the certbot package depend on python-certbot with the same version,
to ensure that `dnf upgrade certbot` also upgrades the actual library, as one
might expect.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.25.1-3
- Rebuilt for Python 3.7
* Mon Jun 18 2018 Eli Young <elyscape(a)gmail.com> - 0.25.1-2
- Make certbot depend on same version of python-certbot
--------------------------------------------------------------------------------
================================================================================
gsequencer-1.4.32-1.fc27 (FEDORA-2018-c0baf69e32)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-2.0.1-1.fc27 (FEDORA-2018-193c2b3457)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Mike FABIAN <mfabian(a)redhat.com> - 2.0.1-1
- Update to 2.0.1
- Update translations from zanata (ja updated)
- Update emoji annotations from CLDR
- Fix some bugs in the usage of ���prefix��� for prefixes other than ���/usr��� (For
FreeBSD)
- Make itb_util.get_ime_help() work on FreeBSD
- Update UnicodeData.txt to Unicode 11.0.0
- Remove useless 't-nil vi-base': 'vi-base.mim', from M17N_INPUT_METHODS
- Remove extra space in entry for sa-IAST input method to make it work
- Show in the setup tool in the input listbox whether minput_open_im() succeeded.
- Use the rocket icon emoji_u1f680.svg from the ���Noto Color Emoji��� font
--------------------------------------------------------------------------------
================================================================================
jss-4.4.4-2.fc27 (FEDORA-2018-7b51c71fb8)
Java Security Services (JSS)
--------------------------------------------------------------------------------
Update Information:
JSS Pagure Issue #11 - (RFE) Migrate Dogtag x509 cert and crl functionality to
JSS (jmagne)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Dogtag PKI Team <pki-devel(a)redhat.com> 4.4.4-2
- JSS Pagure Issue #11 - (RFE) Migrate Dogtag x509 cert and crl
functionality to JSS (jmagne)
--------------------------------------------------------------------------------
================================================================================
kernel-4.16.17-200.fc27 (FEDORA-2018-17ca06863d)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The v4.16.17 update includes important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Jeremy Cline <jcline(a)redhat.com> - 4.16.17-200
- Linux v4.16.17
--------------------------------------------------------------------------------
================================================================================
latexmk-4.57-1.fc27 (FEDORA-2018-20dde717ba)
A make-like utility for LaTeX files
--------------------------------------------------------------------------------
Update Information:
Changes in version 4.57: - Correct problem that in calculation of md5 checksum,
an error sometimes occurs about malformed utf8 characters. This can happen if
the environment variable PERL_UNICODE is set. - Add configuration variable
$bibtex_fudge to allow to choose whether to use the fudge that made bibtex run
correctly when an output directory (or aux directory) is specified. (A planned
future version of bibtex in TeXLive will not need the fudge.)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Jerry James <loganjerry(a)gmail.com> - 4.57-1
- Update to 4.57
--------------------------------------------------------------------------------
================================================================================
perl-Test-POE-Client-TCP-1.16-1.fc27 (FEDORA-2018-c4131d0e36)
POE Component providing TCP client services for test cases
--------------------------------------------------------------------------------
Update Information:
This release fixes misspellings in a documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 22 2018 Petr Pisar <ppisar(a)redhat.com> - 1.16-1
- 1.16 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594050 - perl-Test-POE-Client-TCP-1.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1594050
--------------------------------------------------------------------------------
================================================================================
python-black-18.6b4-1.fc27 (FEDORA-2018-0d576e29f8)
The uncompromising code formatter
--------------------------------------------------------------------------------
Update Information:
New upstream release 18.6b4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 22 2018 Christian Heimes <cheimes(a)redhat.com> - 18.6b4-1
- New upstream release 18.6b4, rhbz#1593485
- Remove workaround for missing empty_pyproject.toml
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1593485 - python-black-18.6b4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1593485
--------------------------------------------------------------------------------
================================================================================
python-dns-lexicon-2.4.3-1.fc27 (FEDORA-2018-12e4af95b6)
Manipulate DNS records on various DNS providers in a standardized/agnostic way
--------------------------------------------------------------------------------
Update Information:
Update to 2.4.3.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 19 2018 Eli Young <elyscape(a)gmail.com> - 2.4.3-1
- Update to 2.4.3 (#1592158)
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2.4.0-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592158 - python-dns-lexicon-2.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1592158
--------------------------------------------------------------------------------
================================================================================
python-neo-0.6.1-2.fc27 (FEDORA-2018-5d07d13a1a)
Represent electrophysiology data in Python
--------------------------------------------------------------------------------
Update Information:
New package: python-neo!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1150099 - Review Request: python-neo - Represent electrophysiology data in
Python
https://bugzilla.redhat.com/show_bug.cgi?id=1150099
--------------------------------------------------------------------------------
================================================================================
qutebrowser-1.3.3-1.fc27 (FEDORA-2018-fa19f76ac5)
A keyboard-driven, vim-like browser based on PyQt5 and QtWebEngine
--------------------------------------------------------------------------------
Update Information:
This update fixes an XSS vulnerability on the qute://history page (:history).
The vulnerability allowed websites to inject HTML into the page via a crafted
title tag. This could allow them to steal your browsing history. It also ships
some minor fixes not worth mentioning. ---- Add a few (minor) options.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 22 2018 Timoth��e Floure <fnux(a)fedoraproject.org> - 1.3.3-1
- Rebase to 1.3.3
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.3.2-2
- Rebuilt for Python 3.7
* Tue Jun 12 2018 Timoth��e Floure <fnux(a)fedoraproject.org> - 1.3.2-1
- Rebase to 1.3.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594048 - qutebrowser-v1.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1594048
[ 2 ] Bug #1589606 - qutebrowser-v1.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1589606
--------------------------------------------------------------------------------
================================================================================
samba-4.7.8-0.fc27 (FEDORA-2018-7aa8911d0d)
Server and Client software to interoperate with Windows machines
--------------------------------------------------------------------------------
Update Information:
Update to Samba 4.7.8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Guenther Deschner <gdeschner(a)redhat.com> - 4.7.8-0
- Update to Samba 4.7.8
--------------------------------------------------------------------------------
================================================================================
vim-8.1.095-1.fc27 (FEDORA-2018-125e89ea30)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 22 2018 Karsten Hopp <karsten(a)redhat.com> 8.1.095-1
- patchlevel 095
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2:8.1.072-2
- Rebuilt for Python 3.7
* Mon Jun 18 2018 Karsten Hopp <karsten(a)redhat.com> 8.1.072-1
- patchlevel 072
--------------------------------------------------------------------------------
================================================================================
vim-toml-0-0.2.20180615git85ba827.fc27 (FEDORA-2018-ceddb53edd)
Vim syntax for TOML
--------------------------------------------------------------------------------
Update Information:
- Latest upstream commit
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 21 2018 Carl George <carl(a)george.computer> - 0-0.2.20180615git85ba827
- Latest upstream commit
--------------------------------------------------------------------------------
================================================================================
xcircuit-3.10.10-1.fc27 (FEDORA-2018-ea2963aca2)
Electronic circuit schematic drawing program
--------------------------------------------------------------------------------
Update Information:
New version 3.10.10 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 22 2018 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 3.10.10-1
- 3.10.10
--------------------------------------------------------------------------------