The following Fedora 27 Security updates need testing:
Age URL
230
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
162
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
125
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
116
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
93
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
93
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
50
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c
tomcat-8.0.53-1.fc27
50
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1
unixODBC-2.3.7-1.fc27
28
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a7916c8b9
thunderbird-60.0-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8b109a6de0
python-marshmallow-2.11.1-8.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-54d84b0b0c
bind-9.11.4-3.P2.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11b3ae4e31
ca-certificates-2018.2.26-1.0.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9a09435935
liblouis-2.6.2-13.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1f64819623
php-horde-Horde-Core-2.31.6-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1de045298c
php-horde-horde-5.2.20-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d280e35281
php-horde-kronolith-4.2.25-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e52160d0bc
python-markdown2-2.3.6-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-edf90410ea
mediawiki-1.29.3-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-113c354377
php-horde-nag-4.2.19-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-22776e8ca9 pdns-4.1.4-1.fc27.1
fawkes-1.0.1-9.fc27.1 calamares-3.1.8-2.fc27.1 librime-1.2-18.fc27.1
mongodb-3.4.11-4.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
146
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
106
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
70
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
50
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24
iproute-4.17.0-1.fc27
35
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c223c11259
libldb-1.3.2-2.fc27.1.2.3 samba-4.7.10-0.fc27
28
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a7916c8b9
thunderbird-60.0-1.fc27
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-227775ff3a ceph-12.2.8-1.fc27
17
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ca54aecfc8
highlight-3.44-1.fc27
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ede34350d8
dash-0.5.10.2-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-387a30f785
osinfo-db-20180920-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cf532c08b5
libguestfs-1.38.6-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3006b99087 xen-4.9.3-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11b3ae4e31
ca-certificates-2018.2.26-1.0.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9cb655df88
kernel-headers-4.18.11-100.fc27 kernel-4.18.11-100.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-80839db392
hwdata-0.316-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-31111d54a7 vim-8.1.450-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
elementary-capnet-assist-2.2.1-1.fc27
nut-2.7.4-19.fc27
perl-Test-Script-1.25-1.fc27
python-PyGithub-1.39-4.fc27
wingpanel-indicator-bluetooth-2.1.1-1.fc27
wingpanel-indicator-network-2.2.1-1.fc27
wingpanel-indicator-notifications-2.1.1-1.fc27
xerces-c27-2.7.0-28.fc27
Details about builds:
================================================================================
elementary-capnet-assist-2.2.1-1.fc27 (FEDORA-2018-f84aed7305)
Captive Portal Assistant for elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 2.2.1. Release notes:
https://github.com/elementary/capnet-
assist/releases/tag/2.2.1
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
nut-2.7.4-19.fc27 (FEDORA-2018-48fee97421)
Network UPS Tools
--------------------------------------------------------------------------------
Update Information:
do not use tcpwrapper, it was removed
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 24 2018 Adam Williamson <awilliam(a)redhat.com> - 2.7.4-19
- Rebuild for new net-snmp
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7.4-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Apr 17 2018 Xavier Bachelot <xavier(a)bachelot.org> - 2.7.4-17
- Remove unrecognized configure option --without-hal
- Explicitely disable tcpwrapper support
- Remove unneeded CRLF EOL fix
- Add BR: cppunit-devel
* Wed Mar 7 2018 Michal Hlavinka <mhlavink(a)redhat.com> - 2.7.4-16
- add gcc buildrequire
* Wed Feb 14 2018 Iryna Shcherbina <ishcherb(a)redhat.com> - 2.7.4-15
- Update Python 2 dependency declarations to new packaging standards
(See
https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7.4-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Tue Nov 7 2017 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 2.7.4-13
- Remove old crufty coreutils requires
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1568066 - Can't run upscmd because of tcpwrapper
https://bugzilla.redhat.com/show_bug.cgi?id=1568066
--------------------------------------------------------------------------------
================================================================================
perl-Test-Script-1.25-1.fc27 (FEDORA-2018-ce55fee622)
Cross-platform basic tests for scripts
--------------------------------------------------------------------------------
Update Information:
Upstream update.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 1.25-1
- Update to 1.25.
--------------------------------------------------------------------------------
================================================================================
python-PyGithub-1.39-4.fc27 (FEDORA-2018-bf6863f073)
Python library to work with the Github API
--------------------------------------------------------------------------------
Update Information:
- Require python-jwt on RHEL, python2-jwt on Fedora rhbz#1634082 - Add patch0 to
ensure comments are included in create_review method rhbz#1633197
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Carl George <carl(a)george.computer> - 1.39-4
- Require python-jwt on RHEL, python2-jwt on Fedora rhbz#1634082
- Add patch0 to ensure comments are included in create_review method rhbz#1633197
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.39-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.39-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1634082 - requires python2-jwt but base has python-jwt
https://bugzilla.redhat.com/show_bug.cgi?id=1634082
[ 2 ] Bug #1633197 - Line comments are not posted in create_review()
https://bugzilla.redhat.com/show_bug.cgi?id=1633197
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-bluetooth-2.1.1-1.fc27 (FEDORA-2018-16ea3d23fc)
Bluetooth Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.1.1. Release notes:
https://github.com/elementary
/wingpanel-indicator-bluetooth/releases/tag/2.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.1.1-1
- Update to version 2.1.1.
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-network-2.2.1-1.fc27 (FEDORA-2018-5fcc3b5ecf)
Network Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.2.1. Release notes:
https://github.com/elementary
/wingpanel-indicator-network/releases/tag/2.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.2.1-1
- Update to version 2.2.1.
--------------------------------------------------------------------------------
================================================================================
wingpanel-indicator-notifications-2.1.1-1.fc27 (FEDORA-2018-befa09ae99)
Notifications Indicator for wingpanel
--------------------------------------------------------------------------------
Update Information:
Update to version 2.1.1. Release notes:
https://github.com/elementary
/wingpanel-indicator-notifications/releases/tag/2.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 3 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.1.1-1
- Update to version 2.1.1.
--------------------------------------------------------------------------------
================================================================================
xerces-c27-2.7.0-28.fc27 (FEDORA-2018-fc2ba807a6)
Validating XML Parser
--------------------------------------------------------------------------------
Update Information:
Fixes for CVE-2016-4463 and CVE-2017-12627.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 8 2018 Xavier Bachelot <xavier(a)bachelot.org> - 2.7.0-28
- Clean up spec.
- Add patch for CVE-2016-4463 (RHBZ#1351469).
- Add patch for CVE-2017-12627 (RHBZ#1551526).
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7.0-27
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7.0-26
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551526 - CVE-2017-12627 xerces-c27: xerces-c: Null pointer dereference while
processing the path to DTD allows denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1551526
[ 2 ] Bug #1351469 - CVE-2016-4463 xerces-c27: xerces-c: Stack overflow when parsing
deeply nested DTD [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1351469
--------------------------------------------------------------------------------