The following Fedora 27 Security updates need testing:
Age URL
35
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9fd430dba0
wireshark-2.4.2-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5adf087854
perl-Net-Ping-External-0.15-11.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-783a436ee8
postgresql-9.6.6-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ffa8601413 ldns-1.7.0-9.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-1fbb5ccbd6
python-copr-1.84-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-898a922aff
backintime-1.1.24-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2e5119be33
jbig2dec-0.14-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-4cf72e2c11
openssl-1.1.0g-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2017-7d25605e98
quagga-1.2.2-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-87142683f1
konversation-1.7.4-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f73d3f1fc4
kernel-4.13.13-300.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-c31799ee4a xen-4.9.0-14.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-195e7ea9a8
lucene4-4.10.4-11.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2c7ddf53d3 git-2.14.3-2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9e775c0d06
slurm-17.02.9-3.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-72b50be8d4
varnish-5.1.3-4.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-78a4610238
mediawiki-1.29.2-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f93ebc905e mrbs-1.7.0-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-f76bf63612
qpid-cpp-1.36.0-8.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-2e8122d7f7
NetworkManager-1.8.4-7.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b2c1d2e9d7
spice-0.14.0-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-97eab6fef7 sssd-1.16.0-3.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-370293d5c3
libguestfs-1.37.34-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-75ccfc6dde
python-coverage-4.4.2-1.fc27.1
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-ace4bec94a
python-pyasn1-0.3.7-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
NetworkManager-1.8.4-7.fc27
beaker-24.5-1.fc27
buildah-0.7-1.gitb7e3320.fc27
cabal-rpm-0.12-1.fc27
cinnamon-3.6.3-2.fc27
classified-ads-0.12-1.fc27
docker-1.13.1-42.git4402c09.fc27
fedfind-3.8.2-1.fc27
getdns-1.2.1-1.fc27
ghc-generics-sop-0.3.1.0-1.fc27
ghc-hxt-9.3.1.16-1.fc27
ghc-skylighting-0.1.1.5-3.fc27
ghc-string-qq-0.0.2-1.fc27
ignuit-2.24.3-1.fc27
libguestfs-1.37.34-1.fc27
mediawiki-1.29.2-1.fc27
mingw-libgsf-1.14.42-1.fc27
mingw-nspr-4.17-1.fc27
module-build-service-1.5.0-1.fc27
mongo-c-driver-1.8.2-1.fc27
mrbs-1.7.0-1.fc27
ndctl-58.4-1.fc27
php-pear-Mail-Mime-1.10.2-1.fc27
pix-1.6.1-3.fc27
python-coverage-4.4.2-1.fc27.1
python-httpbin-0.6.2-3.fc27
python-keyring-10.5.0-1.fc27
python-liblarch-3.0-1.fc27
python-metakernel-0.20.12-1.fc27
python-mwclient-0.8.6-1.fc27
python-pyasn1-0.3.7-1.fc27
python-pyngus-2.2.1-3.fc27
python-pytest-httpbin-0.3.0-1.fc27
python-pytest-relaxed-1.0.0-2.fc27
python-wikitcms-2.2.1-1.fc27
python-xapp-1.0.1-7.fc27
qpid-cpp-1.36.0-8.fc27
qpid-dispatch-0.8.0-6.fc27
qpid-proton-0.18.1-1.fc27
qt5-qtcharts-5.9.2-1.fc27
qt5-qtscxml-5.9.2-1.fc27
qt5-qtspeech-5.9.2-1.fc27
redis-4.0.2-2.fc27
relval-2.2.0-1.fc27
rubygem-qpid_proton-0.18.1-1.fc27
skopeo-0.1.25-2.git7fd6f66.fc27
slick-greeter-1.1.1-1.fc27
slurm-17.02.9-3.fc27
spice-0.14.0-1.fc27
sssd-1.16.0-3.fc27
varnish-5.1.3-4.fc27
xed-1.6.2-1.fc27
xfce4-whiskermenu-plugin-1.7.4-1.fc27
Details about builds:
================================================================================
NetworkManager-1.8.4-7.fc27 (FEDORA-2017-2e8122d7f7)
Network connection manager and user applications
--------------------------------------------------------------------------------
Update Information:
- libnm: fix accessing enabled and metered properties (which should already have
been in the last update)
--------------------------------------------------------------------------------
================================================================================
beaker-24.5-1.fc27 (FEDORA-2017-123263f05d)
Full-stack software and hardware integration testing system
--------------------------------------------------------------------------------
Update Information:
Upstream release 24.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508174 - beaker-24.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508174
--------------------------------------------------------------------------------
================================================================================
buildah-0.7-1.gitb7e3320.fc27 (FEDORA-2017-61e8a7fa9d)
A command line tool used for creating OCI Images
--------------------------------------------------------------------------------
Update Information:
Fix SELinux issue, when using buildah with containers created by kpod/cri-o
--------------------------------------------------------------------------------
================================================================================
cabal-rpm-0.12-1.fc27 (FEDORA-2017-3bff6fe2e2)
RPM packaging tool for Haskell Cabal-based packages
--------------------------------------------------------------------------------
Update Information:
- query Stackage LTS package version via https - run cabal update before cabal
commands - devel packages now provide doc subpackage for forward compatibility -
new --hackage option to get package version from Hackage not Stackage - silence
mock rpmbuild -bs warnings about undefined %ghc_version
--------------------------------------------------------------------------------
================================================================================
cinnamon-3.6.3-2.fc27 (FEDORA-2017-0356a2c225)
Window management and application launching for GNOME
--------------------------------------------------------------------------------
Update Information:
* Add patch from upstream to switch to libnm * Rewrite Debian downstream patch
for libnm
--------------------------------------------------------------------------------
================================================================================
classified-ads-0.12-1.fc27 (FEDORA-2017-a1e37999eb)
Classified ads is distributed, server-less messaging system
--------------------------------------------------------------------------------
Update Information:
New upstream version: new features, many new translations
--------------------------------------------------------------------------------
================================================================================
docker-1.13.1-42.git4402c09.fc27 (FEDORA-2017-3da8ad596a)
Automates deployment of containerized applications
--------------------------------------------------------------------------------
Update Information:
move rhel secrets info from docker to skopeo-containers ---- Add override
kernel check. ---- built commit 28d4e08 ---- Addition of remediate ----
New atomic and registries code ---- Addition of run for system containers
remove skopeo build from update since 0.1.24-7 is already set to move to stable.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1479003 - skopeo-containers file conflict with inn
https://bugzilla.redhat.com/show_bug.cgi?id=1479003
[ 2 ] Bug #1478843 - Package version 0.1.23-2.git1bbd87f has a file conflict with inn
https://bugzilla.redhat.com/show_bug.cgi?id=1478843
[ 3 ] Bug #1504065 - docker daemon failed to start (missing /etc/docker/seccomp.json)
https://bugzilla.redhat.com/show_bug.cgi?id=1504065
[ 4 ] Bug #1507679 - Docker default registry change breaks many default behaviors
including
docker.com tutorial
https://bugzilla.redhat.com/show_bug.cgi?id=1507679
[ 5 ] Bug #1504709 - oc cluster up fails with secrets added to skopeo-containers
https://bugzilla.redhat.com/show_bug.cgi?id=1504709
--------------------------------------------------------------------------------
================================================================================
fedfind-3.8.2-1.fc27 (FEDORA-2017-2b39d3fe2d)
Fedora compose and image finder
--------------------------------------------------------------------------------
Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the
Modular Server candidate composes which are currently being produced. fedfind
3.8.1 returns to using the pkgdb `collections` API end point for
`get_current_release`, as it is now being manually updated until PDC is ready to
replace it. fedfind 3.8.2 fixes `get_package_nvras` and `https_url_generic` for
modular composes, and `get_package_nvras` with Python 3 (it previously raised an
exception for all composes in Python 3, and modular composes in Python 2).
python-wikitcms 2.2.1 adds support for OpenID Connect authentication. The Fedora
wikis are being converted to use only OpenID Connect authentication, with
standard mediawiki authentication disabled.
--------------------------------------------------------------------------------
================================================================================
getdns-1.2.1-1.fc27 (FEDORA-2017-ac293d62cf)
Modern asynchronous API to the DNS
--------------------------------------------------------------------------------
Update Information:
Updated to 1.2.1
--------------------------------------------------------------------------------
================================================================================
ghc-generics-sop-0.3.1.0-1.fc27 (FEDORA-2017-c229e0c8f9)
Generic Programming using True Sums of Products
--------------------------------------------------------------------------------
Update Information:
New package ghc-generics-sop
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514120 - Review Request: ghc-generics-sop - Generic Programming using True
Sums of Products
https://bugzilla.redhat.com/show_bug.cgi?id=1514120
--------------------------------------------------------------------------------
================================================================================
ghc-hxt-9.3.1.16-1.fc27 (FEDORA-2017-f062f93498)
A collection of tools for processing XML with Haskell
--------------------------------------------------------------------------------
Update Information:
New libraries needed to builder recent pandoc
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1511911 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1511911
[ 2 ] Bug #1502200 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1502200
--------------------------------------------------------------------------------
================================================================================
ghc-skylighting-0.1.1.5-3.fc27 (FEDORA-2017-f062f93498)
Syntax highlighting library
--------------------------------------------------------------------------------
Update Information:
New libraries needed to builder recent pandoc
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1511911 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1511911
[ 2 ] Bug #1502200 - None
https://bugzilla.redhat.com/show_bug.cgi?id=1502200
--------------------------------------------------------------------------------
================================================================================
ghc-string-qq-0.0.2-1.fc27 (FEDORA-2017-a4bd2ae9e0)
QuasiQuoter for non-interpolated strings, texts and bytestrings
--------------------------------------------------------------------------------
Update Information:
New package ghc-string-qq
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514212 - Review Request: ghc-string-qq - QuasiQuoter for non-interpolated
strings, texts and bytestrings
https://bugzilla.redhat.com/show_bug.cgi?id=1514212
--------------------------------------------------------------------------------
================================================================================
ignuit-2.24.3-1.fc27 (FEDORA-2017-4aed64aea6)
Memorization aid based on the Leitner flashcard system
--------------------------------------------------------------------------------
Update Information:
Update to new upstream version 2.24.3 (rhbz#1514436)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514436 - ignuit-2.24.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1514436
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.37.34-1.fc27 (FEDORA-2017-370293d5c3)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.37.34.
--------------------------------------------------------------------------------
================================================================================
mediawiki-1.29.2-1.fc27 (FEDORA-2017-78a4610238)
A wiki engine
--------------------------------------------------------------------------------
Update Information:
https://lists.wikimedia.org/pipermail/mediawiki-
announce/2017-November/000216.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1513206 - mediawiki-1.29.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1513206
--------------------------------------------------------------------------------
================================================================================
mingw-libgsf-1.14.42-1.fc27 (FEDORA-2017-8fb1472994)
MinGW build of structured file editing library
--------------------------------------------------------------------------------
Update Information:
Upstream version 1.14.42
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1512240 - mingw-libgsf-1.14.42 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512240
--------------------------------------------------------------------------------
================================================================================
mingw-nspr-4.17-1.fc27 (FEDORA-2017-f0fb839927)
MinGW build of Netscape Portable Runtime
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1476050 - mingw-nspr-4.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1476050
--------------------------------------------------------------------------------
================================================================================
module-build-service-1.5.0-1.fc27 (FEDORA-2017-52c548198c)
The Module Build Service for Modularity
--------------------------------------------------------------------------------
Update Information:
Changes: * Fix an issue where the latest ref for a branch wasn't being used *
Fixes the issue where builds stay in the "build" state even though they've
had a
component fail * Set the timeout on Koji sessions to 10 minutes (this will help
during outages) * Transition stale failed builds to the "garbage" state and
untag their components (after 180 days of inactivity) * Add a "short" query
parameter to show less detail on the "module-builds" API ---- Changes: *
Change the MBS builders into setuptools plugins so now you can now create your
own builder plugin * Updated some documentation * mbs-build local now builds
only from yaml files (this bypasses the need for SCM) * Only complete the module
build when all components are tagged and a KojiRepoRegen message is received *
Don't trigger init handler when importing a local build and mark the build as
done after import * Validate component git refs when a commit is explicitly
stated in the modulemd before starting the module build * Set Access-Control-
Allow-Origin to "*" on GET API routes * Fix duplicate module build state traces
* Make the module build log name configurable
--------------------------------------------------------------------------------
================================================================================
mongo-c-driver-1.8.2-1.fc27 (FEDORA-2017-f6b7e67a18)
Client library written in C for MongoDB
--------------------------------------------------------------------------------
Update Information:
**Version 1.8.2** * Remove option to bundle the Snappy compression library,
it caused issues for programs linking to libmongoc * Fix pkg-config and
CMake config file flags for programs that statically link to libmongoc when
libmongoc is statically linked to zLib * The configure flag "--with-zlib=no"
was ignored Crash in authentication when username is NULL
--------------------------------------------------------------------------------
================================================================================
mrbs-1.7.0-1.fc27 (FEDORA-2017-f93ebc905e)
Meeting Room Booking System
--------------------------------------------------------------------------------
Update Information:
Changes since MRBS 1.6.1: - Fixed a number of security issues in MRBS that were
disclosed to the project by SySS GmbH, including XSS, CSRF protection and
session fixation. - Improved behaviour of browser caching in MRBS. - Improved
localisation, especially the use of colons in labels. - Added new config
variable $weekdays to define weekdays and weekends, allowing for the possibility
that weekdays are not the same as working days. - MRBS now restricts form
actions which modify data/pass passwords to only accept POSTs. - Added the
ability to have different period names in each area. - Add SAML auth and session
schemes, thanks to J��rn ��ne. - Updated to jQuery 3.2.1 and jQueryUI 1.12.1,
which includes XSS fixes. - Plus a few other bug fixes/improvements. - Dropped
support for Internet Explorer 9 and lower.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514285 - mrbs-1.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1514285
--------------------------------------------------------------------------------
================================================================================
ndctl-58.4-1.fc27 (FEDORA-2017-c8764cb108)
Manage "libnvdimm" subsystem devices (Non-volatile Memory)
--------------------------------------------------------------------------------
Update Information:
release v58.4
--------------------------------------------------------------------------------
================================================================================
php-pear-Mail-Mime-1.10.2-1.fc27 (FEDORA-2017-2c1133714f)
Classes to create MIME messages
--------------------------------------------------------------------------------
Update Information:
**Version 1.10.2** * Fix Bug pear#21255: Boundary gets added twice when using
setContentType() [alec] * PHP 7.2 compatibility fixes [alec]
--------------------------------------------------------------------------------
================================================================================
pix-1.6.1-3.fc27 (FEDORA-2017-53f09b45f3)
Image management application
--------------------------------------------------------------------------------
Update Information:
* Enable sm-client
--------------------------------------------------------------------------------
================================================================================
python-coverage-4.4.2-1.fc27.1 (FEDORA-2017-75ccfc6dde)
Code coverage testing module for Python
--------------------------------------------------------------------------------
Update Information:
Re-add platform subpackage.
--------------------------------------------------------------------------------
================================================================================
python-httpbin-0.6.2-3.fc27 (FEDORA-2017-ba927ebc4a)
HTTP Request & Response Service, written in Python + Flask
--------------------------------------------------------------------------------
Update Information:
This update provides a new release of pytest-httpbin. It adds some new features,
including one requested by @hroncok. It should not have any backward
compatibility issues. For Fedora 27, the update also includes a new build of
python-httpbin. The python-pytest-httpbin test suite belatedly discovered that
`python-httpbin-0.6.2-1` had several setuptools dependency issues. Those are
resolved in this build.
--------------------------------------------------------------------------------
================================================================================
python-keyring-10.5.0-1.fc27 (FEDORA-2017-575a0813f4)
Store and access your passwords safely
--------------------------------------------------------------------------------
Update Information:
Update to latest python-keyring 10.5.0; bz#1512519
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1512519 - python-keyring-10.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1512519
--------------------------------------------------------------------------------
================================================================================
python-liblarch-3.0-1.fc27 (FEDORA-2017-4a42fceca9)
Data structures helper library for python
--------------------------------------------------------------------------------
Update Information:
* Update to latest release in py3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1453139 - python-liblarch: Provide a Python 3 subpackage
https://bugzilla.redhat.com/show_bug.cgi?id=1453139
--------------------------------------------------------------------------------
================================================================================
python-metakernel-0.20.12-1.fc27 (FEDORA-2017-3fb7a04eaf)
Metakernel for Jupyter
--------------------------------------------------------------------------------
Update Information:
New release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508214 - python-metakernel-v0.20.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508214
--------------------------------------------------------------------------------
================================================================================
python-mwclient-0.8.6-1.fc27 (FEDORA-2017-9a271deb3b)
Mwclient is a client to the MediaWiki API
--------------------------------------------------------------------------------
Update Information:
This update provides the latest upstream release of mwclient, with various
enhancements and bug fixes, notably for Semantic Mediawiki support. Please see
the [upstream release
notes](https://github.com/mwclient/mwclient/releases) for
more details. I don't believe any of the changes should break compatibility in
any way. Note that the previous "0.8.4" builds of mwclient were in fact still
0.8.3 due to an error on my part, so this update includes the changes from 0.8.4
as well as 0.8.5 and 0.8.6.
--------------------------------------------------------------------------------
================================================================================
python-pyasn1-0.3.7-1.fc27 (FEDORA-2017-ace4bec94a)
ASN.1 tools for Python
--------------------------------------------------------------------------------
Update Information:
Update to upstream release 0.3.7 and modules to 0.1.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1492446 - python-pyasn1-v0.3.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1492446
--------------------------------------------------------------------------------
================================================================================
python-pyngus-2.2.1-3.fc27 (FEDORA-2017-c7e3d6e00d)
Callback API implemented over Proton
--------------------------------------------------------------------------------
Update Information:
Rebuilt against qpid-proton 0.18.1-1.
--------------------------------------------------------------------------------
================================================================================
python-pytest-httpbin-0.3.0-1.fc27 (FEDORA-2017-ba927ebc4a)
Fixture providing local instance of httpbin test service
--------------------------------------------------------------------------------
Update Information:
This update provides a new release of pytest-httpbin. It adds some new features,
including one requested by @hroncok. It should not have any backward
compatibility issues. For Fedora 27, the update also includes a new build of
python-httpbin. The python-pytest-httpbin test suite belatedly discovered that
`python-httpbin-0.6.2-1` had several setuptools dependency issues. Those are
resolved in this build.
--------------------------------------------------------------------------------
================================================================================
python-pytest-relaxed-1.0.0-2.fc27 (FEDORA-2017-a188512d5f)
Relaxed test discovery for pytest
--------------------------------------------------------------------------------
Update Information:
First release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1513789 - Review Request: python-pytest-relaxed - Relaxed test discovery for
pytest
https://bugzilla.redhat.com/show_bug.cgi?id=1513789
--------------------------------------------------------------------------------
================================================================================
python-wikitcms-2.2.1-1.fc27 (FEDORA-2017-2b39d3fe2d)
Fedora QA wiki test management Python library
--------------------------------------------------------------------------------
Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the
Modular Server candidate composes which are currently being produced. fedfind
3.8.1 returns to using the pkgdb `collections` API end point for
`get_current_release`, as it is now being manually updated until PDC is ready to
replace it. fedfind 3.8.2 fixes `get_package_nvras` and `https_url_generic` for
modular composes, and `get_package_nvras` with Python 3 (it previously raised an
exception for all composes in Python 3, and modular composes in Python 2).
python-wikitcms 2.2.1 adds support for OpenID Connect authentication. The Fedora
wikis are being converted to use only OpenID Connect authentication, with
standard mediawiki authentication disabled.
--------------------------------------------------------------------------------
================================================================================
python-xapp-1.0.1-7.fc27 (FEDORA-2017-dc238c6686)
Python bindings for xapps
--------------------------------------------------------------------------------
Update Information:
* Use unified macros for Python3
--------------------------------------------------------------------------------
================================================================================
qpid-cpp-1.36.0-8.fc27 (FEDORA-2017-f76bf63612)
Libraries for Qpid C++ client applications
--------------------------------------------------------------------------------
Update Information:
Rebuilt against qpid-
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1471925 - CVE-2015-0203 qpid-cpp: 3 qpidd DoS issues in AMQP 0-10 protocol
handling [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1471925
[ 2 ] Bug #1471927 - CVE-2015-0203 qpid-cpp: 3 qpidd DoS issues in AMQP 0-10 protocol
handling [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1471927
[ 3 ] Bug #1445604 - qpid-cpp-1.35.0-4.fc27 FTBFS:
'<anonymous>.qpid::broker::Token::type' may be used uninitialized in this
function
https://bugzilla.redhat.com/show_bug.cgi?id=1445604
--------------------------------------------------------------------------------
================================================================================
qpid-dispatch-0.8.0-6.fc27 (FEDORA-2017-6055339dde)
Dispatch router for Qpid
--------------------------------------------------------------------------------
Update Information:
Rebuilt against qpid-proton 0.18.1-1.
--------------------------------------------------------------------------------
================================================================================
qpid-proton-0.18.1-1.fc27 (FEDORA-2017-f4b0a3b0ea)
A high performance, lightweight messaging library
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.18.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1504158 - qpid-proton-c is missing fd leak plug patch causing goferd to
eventually fail
https://bugzilla.redhat.com/show_bug.cgi?id=1504158
--------------------------------------------------------------------------------
================================================================================
qt5-qtcharts-5.9.2-1.fc27 (FEDORA-2017-e14ff44a08)
Qt5 - Charts component
--------------------------------------------------------------------------------
Update Information:
QtCharts 5.9.2 release
--------------------------------------------------------------------------------
================================================================================
qt5-qtscxml-5.9.2-1.fc27 (FEDORA-2017-8048d355a1)
Qt5 - ScXml component
--------------------------------------------------------------------------------
Update Information:
QtScxml 5.9.2 release
--------------------------------------------------------------------------------
================================================================================
qt5-qtspeech-5.9.2-1.fc27 (FEDORA-2017-0ccd4020ca)
Qt5 - Speech component
--------------------------------------------------------------------------------
Update Information:
QtSpeech 5.9.2
--------------------------------------------------------------------------------
================================================================================
redis-4.0.2-2.fc27 (FEDORA-2017-9479a2fe86)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
Install the base modules directories, owned by the main package.
--------------------------------------------------------------------------------
================================================================================
relval-2.2.0-1.fc27 (FEDORA-2017-2b39d3fe2d)
Tool for interacting with Fedora QA wiki pages
--------------------------------------------------------------------------------
Update Information:
These new releases of fedfind, python-wikitcms and relval add support for the
Modular Server candidate composes which are currently being produced. fedfind
3.8.1 returns to using the pkgdb `collections` API end point for
`get_current_release`, as it is now being manually updated until PDC is ready to
replace it. fedfind 3.8.2 fixes `get_package_nvras` and `https_url_generic` for
modular composes, and `get_package_nvras` with Python 3 (it previously raised an
exception for all composes in Python 3, and modular composes in Python 2).
python-wikitcms 2.2.1 adds support for OpenID Connect authentication. The Fedora
wikis are being converted to use only OpenID Connect authentication, with
standard mediawiki authentication disabled.
--------------------------------------------------------------------------------
================================================================================
rubygem-qpid_proton-0.18.1-1.fc27 (FEDORA-2017-a475c09549)
Ruby language bindings for the Qpid Proton messaging framework
--------------------------------------------------------------------------------
Update Information:
Rebased to 0.18.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1508236 - rubygem-qpid_proton-0.18.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1508236
--------------------------------------------------------------------------------
================================================================================
skopeo-0.1.25-2.git7fd6f66.fc27 (FEDORA-2017-3da8ad596a)
Inspect Docker images and repositories on registries
--------------------------------------------------------------------------------
Update Information:
move rhel secrets info from docker to skopeo-containers ---- Add override
kernel check. ---- built commit 28d4e08 ---- Addition of remediate ----
New atomic and registries code ---- Addition of run for system containers
remove skopeo build from update since 0.1.24-7 is already set to move to stable.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1479003 - skopeo-containers file conflict with inn
https://bugzilla.redhat.com/show_bug.cgi?id=1479003
[ 2 ] Bug #1478843 - Package version 0.1.23-2.git1bbd87f has a file conflict with inn
https://bugzilla.redhat.com/show_bug.cgi?id=1478843
[ 3 ] Bug #1504065 - docker daemon failed to start (missing /etc/docker/seccomp.json)
https://bugzilla.redhat.com/show_bug.cgi?id=1504065
[ 4 ] Bug #1507679 - Docker default registry change breaks many default behaviors
including
docker.com tutorial
https://bugzilla.redhat.com/show_bug.cgi?id=1507679
[ 5 ] Bug #1504709 - oc cluster up fails with secrets added to skopeo-containers
https://bugzilla.redhat.com/show_bug.cgi?id=1504709
--------------------------------------------------------------------------------
================================================================================
slick-greeter-1.1.1-1.fc27 (FEDORA-2017-244c1b07f2)
A slick-looking LightDM greeter
--------------------------------------------------------------------------------
Update Information:
* New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514464 - slick-greeter-1.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1514464
--------------------------------------------------------------------------------
================================================================================
slurm-17.02.9-3.fc27 (FEDORA-2017-9e775c0d06)
Simple Linux Utility for Resource Management
--------------------------------------------------------------------------------
Update Information:
Harden the Slurm build and allows it to operate in full relro with GOT sections
of the ELF binaries marked read-only.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514211 - Enable full relro build and operation for slurm
https://bugzilla.redhat.com/show_bug.cgi?id=1514211
--------------------------------------------------------------------------------
================================================================================
spice-0.14.0-1.fc27 (FEDORA-2017-b2c1d2e9d7)
Implements the SPICE protocol
--------------------------------------------------------------------------------
Update Information:
Update to new stable release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1514366 - F27 version lower than F26
https://bugzilla.redhat.com/show_bug.cgi?id=1514366
--------------------------------------------------------------------------------
================================================================================
sssd-1.16.0-3.fc27 (FEDORA-2017-97eab6fef7)
System Security Services Daemon
--------------------------------------------------------------------------------
Update Information:
Adds a backport of an extended NSS-like API from the upstream master branch.
--------------------------------------------------------------------------------
================================================================================
varnish-5.1.3-4.fc27 (FEDORA-2017-72b50be8d4)
High-performance HTTP accelerator
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2017-8807: This fixes a possible data leak in stevedore
transient objects in varnishd. Upstream reports: "It is not inconceiveable that
an attack can provoke this situation on vulnerable varnishd instances, where the
leaked memory contains confidential data and therefore we have classified this
as a security vulnerability."
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1513523 - CVE-2017-8807 varnish: Data leak - ���-sfile��� Stevedore transient
objects
https://bugzilla.redhat.com/show_bug.cgi?id=1513523
--------------------------------------------------------------------------------
================================================================================
xed-1.6.2-1.fc27 (FEDORA-2017-ce1dd5f4ac)
X-Apps [Text] Editor (Cross-DE, backward-compatible, GTK3, traditional UI)
--------------------------------------------------------------------------------
Update Information:
* New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1513985 - xed-1.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1513985
--------------------------------------------------------------------------------
================================================================================
xfce4-whiskermenu-plugin-1.7.4-1.fc27 (FEDORA-2017-ae60c122b9)
An alternate application launcher for Xfce
--------------------------------------------------------------------------------
Update Information:
- update to 1.7.4
--------------------------------------------------------------------------------