The following Fedora 27 Security updates need testing:
Age URL
228
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
160
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
124
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
115
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
92
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
92
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
49
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c
tomcat-8.0.53-1.fc27
49
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1
unixODBC-2.3.7-1.fc27
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a7916c8b9
thunderbird-60.0-1.fc27
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bf613d82be CImg-2.3.6-1.fc27
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a82282e4e gmic-2.3.6-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e9f26489b lcms2-2.8-6.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8b109a6de0
python-marshmallow-2.11.1-8.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-187e212568
php-tcpdf-6.2.25-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b14abc9b0
libmad-0.15.1b-26.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-54d84b0b0c
bind-9.11.4-3.P2.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11b3ae4e31
ca-certificates-2018.2.26-1.0.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3d187b1a5b
udisks2-2.7.6-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9a09435935
liblouis-2.6.2-13.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1f64819623
php-horde-Horde-Core-2.31.6-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-69cce46328 rust-1.29.1-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1de045298c
php-horde-horde-5.2.20-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d280e35281
php-horde-kronolith-4.2.25-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e52160d0bc
python-markdown2-2.3.6-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-edf90410ea
mediawiki-1.29.3-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-113c354377
php-horde-nag-4.2.19-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-22776e8ca9 pdns-4.1.4-1.fc27.1
fawkes-1.0.1-9.fc27.1 calamares-3.1.8-2.fc27.1 librime-1.2-18.fc27.1
mongodb-3.4.11-4.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
144
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
105
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
69
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
49
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24
iproute-4.17.0-1.fc27
34
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c223c11259
libldb-1.3.2-2.fc27.1.2.3 samba-4.7.10-0.fc27
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a7916c8b9
thunderbird-60.0-1.fc27
24
https://bodhi.fedoraproject.org/updates/FEDORA-2018-227775ff3a ceph-12.2.8-1.fc27
16
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ca54aecfc8
highlight-3.44-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ede34350d8
dash-0.5.10.2-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e9f26489b lcms2-2.8-6.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-387a30f785
osinfo-db-20180920-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cf532c08b5
libguestfs-1.38.6-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11b3ae4e31
ca-certificates-2018.2.26-1.0.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3d187b1a5b
udisks2-2.7.6-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3006b99087 xen-4.9.3-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9cb655df88
kernel-headers-4.18.11-100.fc27 kernel-4.18.11-100.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-80839db392
hwdata-0.316-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
audacity-2.3.0-1.fc27
ghc-simple-cmd-0.1.1-1.fc27
ipv6calc-1.1.0-28.fc27
mariadb-10.2.18-1.fc27
opam-2.0.0-0.9.beta6.fc27
perl-WWW-Form-UrlEncoded-0.25-1.fc27
php-pecl-zip-1.15.4-1.fc27
rubygem-pry-nav-0.2.4-1.fc27
rubygem-spy-0.4.5-1.fc27
vim-8.1.450-1.fc27
wingpanel-indicator-nightlight-2.0.1-1.fc27
wingpanel-indicator-power-2.1.3-1.fc27
wingpanel-indicator-session-2.2.0-1.fc27
Details about builds:
================================================================================
audacity-2.3.0-1.fc27 (FEDORA-2018-5c01437fa7)
Multitrack audio editor
--------------------------------------------------------------------------------
Update Information:
Release of Audacity 2.3.0. Package is now always compiled with mp3 support, and
includes various packaging improvements. Changes and improvements since
previous version: * Audacity 2.3.0 replaces all previous versions. * Includes
fixes to Timer Record, and to 'Envelope Points'. * New feature - "Punch and
Roll
Recording". * Toolbars controlling volume and speed can now be resized for
greater precision. * Play-at-Speed now can be adjusted whilst playing. * Macros
(formerly 'Chains') substantially extended. * Pinned-play-head can now be
repositioned by dragging.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 1 2018 David Timms <iinet.net.au@dtimms> - 2.3.0-1
- Update to Audacity 2.3.0 release.
- change mp3 capability to be always present rather than a compile option.
- further improvements from S��rgio Basto <sergio(a)serjux.com>
- Add conditionals to enable or disable ffmpeg
- Also add conditionals to be possible build with local ffmpeg (not in use)
- Use autoconf before ./configure
- Re-add libmp3lame-default.patch and libdir.patch
- Add to configure --disable-dynamic-loading
- General review of spec
- Re-add desktop.in.patch
- Add to configure --with-lv2 --with-midi --with-portmidi with some commentaries
- Temporary fix to portaudio became permanent (--with-portaudio=local)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1607135 - [abrt] audacity: __libc_sigaction(): audacity killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1607135
[ 2 ] Bug #1589485 - [abrt] audacity: OnExit(): audacity killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1589485
[ 3 ] Bug #1576605 - [abrt] audacity: OnExit(): audacity killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1576605
[ 4 ] Bug #1574661 - Audacity upgrade to ver 2.2
https://bugzilla.redhat.com/show_bug.cgi?id=1574661
[ 5 ] Bug #1572867 - [abrt] audacity: XGetWindowProperty(): audacity killed by SIGTRAP
https://bugzilla.redhat.com/show_bug.cgi?id=1572867
[ 6 ] Bug #1568032 - [abrt] audacity: raise(): audacity killed by SIGTRAP
https://bugzilla.redhat.com/show_bug.cgi?id=1568032
[ 7 ] Bug #1566380 - volume change with pulse audio plugin, changes hardware volume
instead of audacity playback
https://bugzilla.redhat.com/show_bug.cgi?id=1566380
[ 8 ] Bug #1562829 - audacity needs to bo rebuild with latest libid3tag
https://bugzilla.redhat.com/show_bug.cgi?id=1562829
[ 9 ] Bug #1541330 - [abrt] audacity: OnExit(): audacity killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1541330
[ 10 ] Bug #1516047 - [abrt] audacity: OnExit(): audacity killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1516047
[ 11 ] Bug #1450227 - audacity: enable MP2/MP3 output support
https://bugzilla.redhat.com/show_bug.cgi?id=1450227
--------------------------------------------------------------------------------
================================================================================
ghc-simple-cmd-0.1.1-1.fc27 (FEDORA-2018-e7947e5126)
Simple String-based process commands
--------------------------------------------------------------------------------
Update Information:
https://hackage.haskell.org/package/simple-cmd
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1634010 - Review Request: ghc-simple-cmd - Simple String-based process
commands
https://bugzilla.redhat.com/show_bug.cgi?id=1634010
--------------------------------------------------------------------------------
================================================================================
ipv6calc-1.1.0-28.fc27 (FEDORA-2018-8a38006d77)
IPv6 address format change and calculation utility
--------------------------------------------------------------------------------
Update Information:
new release 1.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Peter Bieringer <pb(a)bieringer.de> - 1.1.0-28
- new release 1.1.0
- subpackage ipv6calcweb: add dependency Perl(Proc::ProcessTable)
* Mon Sep 18 2017 Peter Bieringer <pb(a)bieringer.de> - 1.0.0-23
- mod_ipv6calc: fix missing link flags
--------------------------------------------------------------------------------
================================================================================
mariadb-10.2.18-1.fc27 (FEDORA-2018-d334887f75)
A community developed branch of MySQL
--------------------------------------------------------------------------------
Update Information:
**MariaDB 10.2.18** Release notes:
https://mariadb.com/kb/en/library/mariadb-10218-release-notes/ Maintainer
notes: There are several CVEs mentioned as "fixed" in the changelog and a
commit message. Those CVEs were already fixed by previous version as
documented. No CVEs were fixed by this particular release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 26 2018 Michal Schorm <mschorm(a)redhat.com> - 3:10.2.18-1
- Rebase to 10.2.18
- CVE's fixed:
CVE-2018-3060 CVE-2018-3064 CVE-2018-3063 CVE-2018-3058 CVE-2018-3066
--------------------------------------------------------------------------------
================================================================================
opam-2.0.0-0.9.beta6.fc27 (FEDORA-2018-b6bcc7ad5c)
Source-based package manager for OCaml
--------------------------------------------------------------------------------
Update Information:
Add Requires on gcc so opam init works (rhbz#1631969). ---- Add missing
Requires on patch, unzip (rhbz#1631969).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 2 2018 Ben Rosser <rosser.bjr(a)gmail.com> - 2.0.0-0.9.beta6
- Add Requires on gcc so opam init works (rhbz#1631969).
* Sat Sep 22 2018 Ben Rosser <rosser.bjr(a)gmail.com> - 2.0.0-0.8.beta6
- Add missing Requires on patch, unzip (rhbz#1631969).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631969 - opam missing dependencies: patch and unzip
https://bugzilla.redhat.com/show_bug.cgi?id=1631969
--------------------------------------------------------------------------------
================================================================================
perl-WWW-Form-UrlEncoded-0.25-1.fc27 (FEDORA-2018-b343b71827)
Parser and builder for application/x-www-form-urlencoded
--------------------------------------------------------------------------------
Update Information:
Upstream update
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 2 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 0.25-1
- Update to 0.25.
--------------------------------------------------------------------------------
================================================================================
php-pecl-zip-1.15.4-1.fc27 (FEDORA-2018-180730d56f)
A ZIP archive management extension
--------------------------------------------------------------------------------
Update Information:
**Version 1.15.4** - Fixed Bug #76524 ZipArchive memory leak (OVERWRITE flag
and empty archive) - Fixed incorrrecr zval_dtor() usage to replace value of
argument passed by reference, that may lead to memory leaks.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Remi Collet <remi(a)remirepo.net> - 1.15.4-1
- Update to 1.15.4
--------------------------------------------------------------------------------
================================================================================
rubygem-pry-nav-0.2.4-1.fc27 (FEDORA-2018-b22c118256)
Simple execution navigation for Pry
--------------------------------------------------------------------------------
Update Information:
Initial packages of rubygem-spy and rubygem-pry-nav for the f27 branch.
--------------------------------------------------------------------------------
================================================================================
rubygem-spy-0.4.5-1.fc27 (FEDORA-2018-b22c118256)
Simple modern mocking library that uses the spy pattern
--------------------------------------------------------------------------------
Update Information:
Initial packages of rubygem-spy and rubygem-pry-nav for the f27 branch.
--------------------------------------------------------------------------------
================================================================================
vim-8.1.450-1.fc27 (FEDORA-2018-31111d54a7)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.1.450-1
- patchlevel 450
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-nightlight-2.0.1-1.fc27 (FEDORA-2018-2ea3876840)
Night Light Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.0.1. Release notes:
https://github.com/elementary
/wingpanel-indicator-nightlight/releases/tag/2.0.1
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-power-2.1.3-1.fc27 (FEDORA-2018-26ca3e1893)
Power indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.1.3. Release notes:
https://github.com/elementary
/wingpanel-indicator-power/releases/tag/2.1.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 2 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.1.3-1
- Update to version 2.1.3.
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-session-2.2.0-1.fc27 (FEDORA-2018-3d51a6162b)
Session Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.2.0. Release notes:
https://github.com/elementary
/wingpanel-indicator-session/releases/tag/2.2.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 2 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.2.0-1
- Update to version 2.2.0.
--------------------------------------------------------------------------------