The following Fedora 27 Security updates need testing:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b444c3b9c5
libwmf-0.2.8.4-53.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-15819d2c37
jasper-2.0.14-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0cc84101de
python-jwt-1.5.3-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7af44272e2
ImageMagick-6.9.9.13-1.fc27 rubygem-rmagick-2.16.0-6.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1136e13b6a
php-horde-Horde-Image-2.5.2-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-aaefb84ff3
wordpress-4.8.2-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-23dba9fb5d
kernel-4.13.3-300.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d270e932a3
nagios-4.3.4-3.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e3fcecbae7
php-horde-passwd-5.0.7-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-346d6e00dd
php-horde-wicked-2.0.8-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-52ed023208
php-horde-nag-4.2.17-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-fdd3a98e8f
httpd-2.4.27-8.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f0c18420e8
samba-4.7.0-12.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0348398d64
LibRaw-0.18.5-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
FlightGear-2017.3.1-1.fc27
FlightGear-data-2017.3.1-1.fc27
OpenSceneGraph-3.4.1-1.fc27
SDL2-2.0.6-1.fc27
SimGear-2017.3.1-1.fc27
atomic-1.19.1-4.fc27
bodhi-2.11.0-2.fc27
certbot-0.18.2-1.fc27
fedora-repos-27-0.5
fgrun-2016.3.1-15.fc27
golang-github-prometheus-common-0-0.11.git49fee29.fc27
humanity-icon-theme-0.6.13-1.fc27
libguestfs-1.37.27-1.fc27
libreoffice-5.4.2.1-1.fc27
light-themes-16.10-1.20170918bzr563.fc27
nfs-ganesha-2.5.2-5.fc27
osgearth-2.7-15.fc27
php-SymfonyCmfRouting-1.4.1-1.fc27
python-acme-0.18.2-1.fc27
python-certbot-apache-0.18.2-1.fc27
python-certbot-nginx-0.18.2-1.fc27
python-paramiko-2.3.1-1.fc27
python-pymod2pkg-0.10.1-1.fc27
qcad-3.18.0.0-1.fc27
speed-dreams-2.2.1-6.fc27
veusz-2.0.1-1.fc27
xorgxrdp-0.2.4-3.fc27
youtube-dl-2017.09.15-1.fc27
Details about builds:
================================================================================
FlightGear-2017.3.1-1.fc27 (FEDORA-2017-fb5de406e4)
The FlightGear Flight Simulator
--------------------------------------------------------------------------------
Update Information:
- Rebuild for OpenSceneGraph-3.4.1 - Update SimGear, FiightGear, FlightGear-data
--------------------------------------------------------------------------------
================================================================================
FlightGear-data-2017.3.1-1.fc27 (FEDORA-2017-fb5de406e4)
FlightGear base scenery and data files
--------------------------------------------------------------------------------
Update Information:
- Rebuild for OpenSceneGraph-3.4.1 - Update SimGear, FiightGear, FlightGear-data
--------------------------------------------------------------------------------
================================================================================
OpenSceneGraph-3.4.1-1.fc27 (FEDORA-2017-fb5de406e4)
High performance real-time graphics toolkit
--------------------------------------------------------------------------------
Update Information:
- Rebuild for OpenSceneGraph-3.4.1 - Update SimGear, FiightGear, FlightGear-data
--------------------------------------------------------------------------------
================================================================================
SDL2-2.0.6-1.fc27 (FEDORA-2017-edb5706dac)
A cross-platform multimedia library
--------------------------------------------------------------------------------
Update Information:
- Added cross-platform Vulkan graphics support in `SDL_vulkan.h` -
SDL_Vulkan_LoadLibrary() - SDL_Vulkan_GetVkGetInstanceProcAddr() -
SDL_Vulkan_GetInstanceExtensions() - SDL_Vulkan_CreateSurface() -
SDL_Vulkan_GetDrawableSize() - SDL_Vulkan_UnloadLibrary() - Added
`SDL_ComposeCustomBlendMode()` to create custom blend modes for 2D rendering -
Added `SDL_HasNEON()` which returns whether the CPU has NEON instruction support
- Added support for many game controllers, including the Nintendo Switch Pro
Controller - Added support for inverted axes and separate axis directions in
game controller mappings - Added functions to return information about a
joystick before it���s opened: - SDL_JoystickGetDeviceVendor() -
SDL_JoystickGetDeviceProduct() - SDL_JoystickGetDeviceProductVersion() -
SDL_JoystickGetDeviceType() - SDL_JoystickGetDeviceInstanceID() - Added
functions to return information about an open joystick: -
SDL_JoystickGetVendor() - SDL_JoystickGetProduct() -
SDL_JoystickGetProductVersion() - SDL_JoystickGetType() -
SDL_JoystickGetAxisInitialState() - Added functions to return information about
an open game controller: - SDL_GameControllerGetVendor() -
SDL_GameControllerGetProduct() - SDL_GameControllerGetProductVersion() -
Added `SDL_GameControllerNumMappings()` and
`SDL_GameControllerMappingForIndex()` to be able to enumerate the built-in game
controller mappings - Added `SDL_LoadFile()` and `SDL_LoadFile_RW()` to load a
file into memory - Added `SDL_DuplicateSurface()` to make a copy of a surface -
Added an experimental JACK audio driver - Implemented non-power-of-two audio
resampling, optionally using libsamplerate to perform the resampling - Added the
hint `SDL_HINT_AUDIO_RESAMPLING_MODE` to control the quality of resampling -
Added the hint `SDL_HINT_RENDER_LOGICAL_SIZE_MODE` to control the scaling policy
for `SDL_RenderSetLogicalSize()`: - ���0��� or ���letterbox��� - Uses
letterbox/sidebars to fit the entire rendering on screen (the default) - ���1���
or ���overscan��� - Will zoom the rendering so it fills the entire screen, allowing
edges to be drawn offscreen - Added the hints
`SDL_HINT_MOUSE_NORMAL_SPEED_SCALE` and `SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE` to
scale the mouse speed when being read from raw mouse input - Added the hint
`SDL_HINT_TOUCH_MOUSE_EVENTS` to control whether SDL will synthesize mouse
events from touch events - Updated the GUID format for game controller mappings,
older mappings will be automatically converted on load - Added an experimental
KMS/DRM video driver for embedded development
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1494769 - SDL2-2.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1494769
--------------------------------------------------------------------------------
================================================================================
SimGear-2017.3.1-1.fc27 (FEDORA-2017-fb5de406e4)
Simulation library components
--------------------------------------------------------------------------------
Update Information:
- Rebuild for OpenSceneGraph-3.4.1 - Update SimGear, FiightGear, FlightGear-data
--------------------------------------------------------------------------------
================================================================================
atomic-1.19.1-4.fc27 (FEDORA-2017-fc3f7b24f6)
Tool for managing ProjectAtomic systems and containers
--------------------------------------------------------------------------------
Update Information:
Addition of remediate ---- New atomic and registries code ---- Addition of
run for system containers
--------------------------------------------------------------------------------
================================================================================
bodhi-2.11.0-2.fc27 (FEDORA-2017-ab5f75bb11)
A modular framework that facilitates publishing software updates
--------------------------------------------------------------------------------
Update Information:
Retry auth upon captcha failures. ---- Update to
[
bodhi-2.11.0](https://github.com/fedora-infra/bodhi/releases/tag/2.11.0).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1494644 - fedora.client.bodhi.BodhiClientException: You must provide a
captcha_key
https://bugzilla.redhat.com/show_bug.cgi?id=1494644
[ 2 ] Bug #1493587 - bodhi-2.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493587
--------------------------------------------------------------------------------
================================================================================
certbot-0.18.2-1.fc27 (FEDORA-2017-10686cbc6b)
A free, automated certificate authority client
--------------------------------------------------------------------------------
Update Information:
Update to 0.18.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493796 - python-certbot-nginx-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493796
[ 2 ] Bug #1493795 - python-certbot-apache-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493795
[ 3 ] Bug #1493794 - certbot-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493794
[ 4 ] Bug #1493792 - python-acme-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493792
--------------------------------------------------------------------------------
================================================================================
fedora-repos-27-0.5 (FEDORA-2017-eb3af17400)
Fedora package repositories
--------------------------------------------------------------------------------
Update Information:
Split out GPG keys into fedora-gpg-keys
--------------------------------------------------------------------------------
================================================================================
fgrun-2016.3.1-15.fc27 (FEDORA-2017-fb5de406e4)
Graphical front-end for launching FlightGear flight simulator
--------------------------------------------------------------------------------
Update Information:
- Rebuild for OpenSceneGraph-3.4.1 - Update SimGear, FiightGear, FlightGear-data
--------------------------------------------------------------------------------
================================================================================
golang-github-prometheus-common-0-0.11.git49fee29.fc27 (FEDORA-2017-7493543848)
Go libraries shared across Prometheus components and libraries
--------------------------------------------------------------------------------
Update Information:
add missing dependency
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1315096 - Tracker for golang-github-prometheus-common
https://bugzilla.redhat.com/show_bug.cgi?id=1315096
--------------------------------------------------------------------------------
================================================================================
humanity-icon-theme-0.6.13-1.fc27 (FEDORA-2017-695ecc1028)
Humanity icon theme
--------------------------------------------------------------------------------
Update Information:
This update provides the latest version of the Humanity icon theme and the Light
themes, as provided by latest prereleases of Ubuntu 17.10. This new version
supports GTK >= 3.22.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493162 - Please update to the latest upstream version
https://bugzilla.redhat.com/show_bug.cgi?id=1493162
[ 2 ] Bug #1470595 - This theme is not working with GTK 3.20+
https://bugzilla.redhat.com/show_bug.cgi?id=1470595
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.37.27-1.fc27 (FEDORA-2017-cc1d2e1667)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.37.27.
--------------------------------------------------------------------------------
================================================================================
libreoffice-5.4.2.1-1.fc27 (FEDORA-2017-f7fff4c965)
Free Software Productivity Suite
--------------------------------------------------------------------------------
Update Information:
update to 5.4.2 rc1
--------------------------------------------------------------------------------
================================================================================
light-themes-16.10-1.20170918bzr563.fc27 (FEDORA-2017-695ecc1028)
Themes for Ubuntu
--------------------------------------------------------------------------------
Update Information:
This update provides the latest version of the Humanity icon theme and the Light
themes, as provided by latest prereleases of Ubuntu 17.10. This new version
supports GTK >= 3.22.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493162 - Please update to the latest upstream version
https://bugzilla.redhat.com/show_bug.cgi?id=1493162
[ 2 ] Bug #1470595 - This theme is not working with GTK 3.20+
https://bugzilla.redhat.com/show_bug.cgi?id=1470595
--------------------------------------------------------------------------------
================================================================================
nfs-ganesha-2.5.2-5.fc27 (FEDORA-2017-8edc2c1b5f)
NFS-Ganesha is a NFS Server running in user space
--------------------------------------------------------------------------------
Update Information:
/var/log/ganesha -> ganesha_var_log_t ---- /var/log/ganesha owner
ganesha.ganesha -> ganesha.root
--------------------------------------------------------------------------------
================================================================================
osgearth-2.7-15.fc27 (FEDORA-2017-fb5de406e4)
Dynamic map generation toolkit for OpenSceneGraph
--------------------------------------------------------------------------------
Update Information:
- Rebuild for OpenSceneGraph-3.4.1 - Update SimGear, FiightGear, FlightGear-data
--------------------------------------------------------------------------------
================================================================================
php-SymfonyCmfRouting-1.4.1-1.fc27 (FEDORA-2017-5a5e16fbdf)
Extends the Symfony2 routing component for dynamic routes and chaining
--------------------------------------------------------------------------------
Update Information:
## 1.4.1 * Fix locale matching in candidates
--------------------------------------------------------------------------------
================================================================================
python-acme-0.18.2-1.fc27 (FEDORA-2017-10686cbc6b)
Python library for the ACME protocol
--------------------------------------------------------------------------------
Update Information:
Update to 0.18.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493796 - python-certbot-nginx-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493796
[ 2 ] Bug #1493795 - python-certbot-apache-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493795
[ 3 ] Bug #1493794 - certbot-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493794
[ 4 ] Bug #1493792 - python-acme-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493792
--------------------------------------------------------------------------------
================================================================================
python-certbot-apache-0.18.2-1.fc27 (FEDORA-2017-10686cbc6b)
The apache plugin for certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.18.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493796 - python-certbot-nginx-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493796
[ 2 ] Bug #1493795 - python-certbot-apache-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493795
[ 3 ] Bug #1493794 - certbot-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493794
[ 4 ] Bug #1493792 - python-acme-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493792
--------------------------------------------------------------------------------
================================================================================
python-certbot-nginx-0.18.2-1.fc27 (FEDORA-2017-10686cbc6b)
The nginx plugin for certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.18.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493796 - python-certbot-nginx-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493796
[ 2 ] Bug #1493795 - python-certbot-apache-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493795
[ 3 ] Bug #1493794 - certbot-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493794
[ 4 ] Bug #1493792 - python-acme-0.18.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493792
--------------------------------------------------------------------------------
================================================================================
python-paramiko-2.3.1-1.fc27 (FEDORA-2017-054600e32a)
SSH2 protocol library for python
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.1 (rhbz #1494764) / Fix upstream bug #1071: AttributeError:
'Ed25519Key' object has no attribute 'public_blob' ---- Current
upstream
maintenance release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1494764 - python-paramiko-2.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1494764
[ 2 ] Bug #1493324 - python-paramiko-2.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493324
--------------------------------------------------------------------------------
================================================================================
python-pymod2pkg-0.10.1-1.fc27 (FEDORA-2017-b7185783e1)
python module name to package name map
--------------------------------------------------------------------------------
Update Information:
Updated to upstream release 0.10.1
--------------------------------------------------------------------------------
================================================================================
qcad-3.18.0.0-1.fc27 (FEDORA-2017-c900e8752f)
Powerful 2D CAD system
--------------------------------------------------------------------------------
Update Information:
- Update to 3.18.0.0
--------------------------------------------------------------------------------
================================================================================
speed-dreams-2.2.1-6.fc27 (FEDORA-2017-fb5de406e4)
The Open Racing Car Simulator
--------------------------------------------------------------------------------
Update Information:
- Rebuild for OpenSceneGraph-3.4.1 - Update SimGear, FiightGear, FlightGear-data
--------------------------------------------------------------------------------
================================================================================
veusz-2.0.1-1.fc27 (FEDORA-2017-b0f69ad07a)
GUI scientific plotting package
--------------------------------------------------------------------------------
Update Information:
Update to Veusz 2.0.1. Veusz 2.0 upgrades Veusz to use Qt5 and features an
updated manual. Veusz 2.0.1 contains bug fixes for 2.0. ---- Update to Veusz
2.0. This release upgrades Veusz to use Qt5 and features an updated manual.
--------------------------------------------------------------------------------
================================================================================
xorgxrdp-0.2.4-3.fc27 (FEDORA-2017-f834c2cd8f)
Implementation of xrdp backend as Xorg modules
--------------------------------------------------------------------------------
Update Information:
xorgxrdp v0.2.4 has been released. This version includes fixes of following
issues: - Implement disconnection by xrdp-dis command #51
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1482107 - xrdp Xorg session doesn't start after RHEL 7.3 to 7.4 update
due to undefined symbol error
https://bugzilla.redhat.com/show_bug.cgi?id=1482107
[ 2 ] Bug #1493328 - xorgxrdp-0.2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1493328
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2017.09.15-1.fc27 (FEDORA-2017-1e78ffc3e2)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1490153 - youtube-dl-2017.09.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1490153
--------------------------------------------------------------------------------