The following Fedora 27 Security updates need testing:
Age URL
254
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
185
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
149
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
140
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
117
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
117
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
74
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c
tomcat-8.0.53-1.fc27
74
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1
unixODBC-2.3.7-1.fc27
23
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc2ba807a6
xerces-c27-2.7.0-28.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e010c6501
chromium-69.0.3497.100-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28ea2290ad
python33-3.3.7-3.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c9120d494
rpm-4.14.2.1-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b24201fc50
teeworlds-0.6.5-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-343ab5abbd
firefox-63.0-2.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f20a0cead5 xen-4.9.3-2.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d527206a77
roundcubemail-1.3.8-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
170
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
130
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
94
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
74
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24
iproute-4.17.0-1.fc27
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a93cc4270
gnome-software-3.28.2-4.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e1a19af16e
pungi-4.1.29-3.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2c9120d494
rpm-4.14.2.1-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f20a0cead5 xen-4.9.3-2.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fb5a8bfa34
qt5-qtbase-5.9.6-4.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-343ab5abbd
firefox-63.0-2.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-845c2b9bc6
highlight-3.47-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
ansifilter-2.11-1.fc27
converseen-0.9.7.2-1.fc27
disper-0.3.1-14.fc27
feh-2.28-1.fc27
julietaula-montserrat-fonts-7.200-5.fc27
libneurosim-0-2.20181028.git7d074da.fc27
linsmith-0.99.31-1.fc27
mozilla-noscript-10.1.9.9-1.fc27
mozilla-privacy-badger-2018.10.3.1-1.fc27
mozilla-ublock-origin-1.17.2-1.fc27
pdf2djvu-0.9.11-1.fc27
python-certifi-2018.10.15-1.fc27
python-libNeuroML-0.2.45-5.fc27
slibtool-0.5.26-1.fc27
Details about builds:
================================================================================
ansifilter-2.11-1.fc27 (FEDORA-2018-d1a4efdb73)
ANSI terminal escape code converter
--------------------------------------------------------------------------------
Update Information:
- Updated to new 2.11 upstream version - upstream changelog
http://www.andre-
simon.de/doku/ansifilter/en/changelog.php
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 2.11-1
- Updated to new 2.11 upstream version
- upstream changelog
http://www.andre-simon.de/doku/ansifilter/en/changelog.php
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.10-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Sun Apr 8 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 2.10-2
- added gcc-c++ as BR
--------------------------------------------------------------------------------
================================================================================
converseen-0.9.7.2-1.fc27 (FEDORA-2018-419bff7752)
A batch image conversion tool written in C++ with Qt5 and Magick++
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream version 0.9.7.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.7.2-1
- Rebuilt for new upstream version 0.9.7.2
--------------------------------------------------------------------------------
================================================================================
disper-0.3.1-14.fc27 (FEDORA-2018-79a660c9e5)
On-the-fly display switch utility
--------------------------------------------------------------------------------
Update Information:
- rebuilt to fix FTBFS on rawhide, fixes rhbz #1603791 - fixes rhbz #1283552
(thanks to Alex Peyser a.peyser at fz-juelich.de) - fixes rhbz #1540683 and
#1577523 also - rebuilt to fix python2_sitelib issues
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 28 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.3.1-14
- rebuilt to fix python2_sitelib issues
* Sat Oct 27 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.3.1-13
- rebuilt to fix FTBFS on rawhide, fixes rhbz #1603791
- fixes rhbz #1283552 (thanks to Alex Peyser a.peyser at fz-juelich.de)
- fixes rhbz #1540683 and #1577523 also
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.1-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.1-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Tue Aug 8 2017 Iryna Shcherbina <ishcherb(a)redhat.com> - 0.3.1-9
- Add a build-time dependency on python2-devel
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1603791 - disper: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1603791
[ 2 ] Bug #1577523 - [abrt] disper: XQueryExtension(): python2.7 killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1577523
[ 3 ] Bug #1540683 - [abrt] disper: XQueryExtension(): python2.7 killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1540683
[ 4 ] Bug #1283552 - Segmentation fault / not working
https://bugzilla.redhat.com/show_bug.cgi?id=1283552
--------------------------------------------------------------------------------
================================================================================
feh-2.28-1.fc27 (FEDORA-2018-56ec0ccd82)
Fast command line image viewer using Imlib2
--------------------------------------------------------------------------------
Update Information:
- update to 2.28 fixes rhbz #1438979 #1444077 and #1602421
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 2.28-1
- update to 2.28 fixes rhbz #1438979 #1444077 and #1602421
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.19.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.19.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1602421 - feh no longer depends on giblib
https://bugzilla.redhat.com/show_bug.cgi?id=1602421
[ 2 ] Bug #1444077 - CVE-2017-7875 feh: Integer overflow in wallpaper.c while receiving
an IPC message [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1444077
[ 3 ] Bug #1438979 - feh-2.27.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1438979
--------------------------------------------------------------------------------
================================================================================
julietaula-montserrat-fonts-7.200-5.fc27 (FEDORA-2018-455ea0cfec)
Sans-serif typeface inspired from Montserrat area
--------------------------------------------------------------------------------
Update Information:
This update resolves the installation of alternate fonts ---- This update
splits Montserrat fonts package in its base and alternate version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:7.200-5
- Add missing epoch for dependencies rhbz#1643607
- Shorten the description
* Sat Oct 20 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:7.200-4
- Update spec file adhering to Fedora Fonts guideline rhbz#1628832
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:7.200-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:7.200-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643607 - julietaula-montserrat-alternates-fonts uninstallable
https://bugzilla.redhat.com/show_bug.cgi?id=1643607
[ 2 ] Bug #1628832 - Package cleanup required
https://bugzilla.redhat.com/show_bug.cgi?id=1628832
--------------------------------------------------------------------------------
================================================================================
libneurosim-0-2.20181028.git7d074da.fc27 (FEDORA-2018-1fc41a6b7a)
Common interfaces for neuronal simulators
--------------------------------------------------------------------------------
Update Information:
New package!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1638968 - Review Request: libneurosim - Common interfaces for neuronal
simulators
https://bugzilla.redhat.com/show_bug.cgi?id=1638968
--------------------------------------------------------------------------------
================================================================================
linsmith-0.99.31-1.fc27 (FEDORA-2018-cd3991ca0d)
A Smith charting program
--------------------------------------------------------------------------------
Update Information:
- Update to new upstream version 0.99.31 + spec cleanup and modernization
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.99.31-1
- Update to new upstream version 0.99.31 + spec cleanup and modernization
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.99.30-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.99.30-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1583880 - linsmith-0.99.31 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1583880
[ 2 ] Bug #1589549 - [abrt] linsmith: sprintf(): linsmith killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1589549
--------------------------------------------------------------------------------
================================================================================
mozilla-noscript-10.1.9.9-1.fc27 (FEDORA-2018-42a2d61370)
JavaScript white list extension for Mozilla Firefox
--------------------------------------------------------------------------------
Update Information:
# Notable changes: ### WebExtension version: * Prevention of potential race
condition in the new per-tab configuration cookie-based hack * Better cross-
platfrom build script compatibility * Per-tab configuration cookie-based hack,
leaves window.name alone * Fixed preset customization UI showing inherited
DEFAULT permissions if a protocol-level preset exists * Simplified CSP HTTP
header injection, avoiding report-to until actually supported by browsers *
[L10n] Updated ru (thanks fatboy) * [L10n] Updated (es, ru) and new (el, he, ms,
nb) locales from OTF's Localization Lab Transifex project * [L10n] no_BO
translation by comradekingu * FTP directory UI emulation on script-disabled
domains * Include ftp:// URLs in non-secure domain matching (thanks Rassilon for
RFE) ### Classic version: * Fixed automatic reload bug (thanks ThomasW and
barbaz for reporting)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 26 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.9.9-1
- update to 10.1.9.9
- update classic version to 5.1.9
--------------------------------------------------------------------------------
================================================================================
mozilla-privacy-badger-2018.10.3.1-1.fc27 (FEDORA-2018-5e1314d828)
Protects your privacy by blocking spying ads and invisible trackers
--------------------------------------------------------------------------------
Update Information:
* Added protection against outgoing link click tracking on Google Search, Google
Docs and Google Hangouts * Fixed various site breakages * Fixed style problems
with Google Search results * Fixed the setting to open results in new browser
windows on Google Search * Added buttons to back up and restore the disabled
sites list using Firefox/Google Sync. The new buttons live under the Manage Data
tab on the options page. * Added saving of in-progress error reports so that you
no longer lose your typing when you close the popup for whatever reason * Fixed
popup layout problems when opened in the overflow menu in Firefox * Updated
popup and options to use a higher resolution Badger logo on higher pixel density
displays * Fixed problems with broken fonts and images on Google Docs * Added
pre-trained tracker data for new Privacy Badger installations. Visit
www.eff.org
/badger-pretraining to learn more. * Added reset/clear tracker data buttons to
the Manage Data options page tab * Added Finnish, Persian and Brazilian
Portuguese translations * Improved translations (Simplified Chinese, Traditional
Chinese, Danish, Esperanto, French, German, Italian, Norwegian Bokm��l, Russian,
Spanish, Swedish, Turkish)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Dominik 'Rathann' Mierzejewski <rpm(a)greysector.net> -
2018.10.3.1-1
- update to 2018.10.3.1
- update bundled components and license list
--------------------------------------------------------------------------------
================================================================================
mozilla-ublock-origin-1.17.2-1.fc27 (FEDORA-2018-ffe0d36aca)
An efficient blocker for Firefox
--------------------------------------------------------------------------------
Update Information:
Notable changes since 1.16.14: * Per-site JavaScript master switch * Cache
storage compression * Keyboard shortcuts See full upstream changelog here:
https://addons.mozilla.org/en-GB/firefox/addon/ublock-origin/versions/ .
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 1.17.2-1
- update to 1.17.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1613092 - mozilla-ublock-origin-1.16.17b2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1613092
--------------------------------------------------------------------------------
================================================================================
pdf2djvu-0.9.11-1.fc27 (FEDORA-2018-c9fb4166ec)
PDF to DjVu converter
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream release 0.9.11 - Upstream changelog
https://github.com/jwilk/pdf2djvu/blob/master/doc/changelog
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.11-1
- Rebuilt for new upstream release 0.9.11
- Upstream changelog
https://github.com/jwilk/pdf2djvu/blob/master/doc/changelog
--------------------------------------------------------------------------------
================================================================================
python-certifi-2018.10.15-1.fc27 (FEDORA-2018-0292711039)
Python package for providing Mozilla's CA Bundle
--------------------------------------------------------------------------------
Update Information:
Update to release: 2018.10.15
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 23 2018 William Moreno Reyes <williamjmorenor(a)gmail.com> - 2018.10.15-1
- Update to release: 2018.10.15
- Update patch to point to system certificates
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2016.9.26-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2016.9.26-8
- Rebuilt for Python 3.7
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2016.9.26-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Oct 14 2017 williamjmorenor(a)gmail.com - 2016.9.26-6
- Fix path of .pem file
Thanks to @carlwgeorge
See:
https://src.fedoraproject.org/rpms/python-certifi/pull-request/1
* Thu Oct 12 2017 williamjmorenor(a)gmail.com - 2016.9.26-5
- If fedora path to use current ca-certificates
- If epel7 follow proper file to .pem file
* Thu Oct 12 2017 Carl George <carl(a)george.computer> - 2016.9.26-4
- EPEL compatibility
- Include license
- Move ca-certificates requirement to subpackages
--------------------------------------------------------------------------------
================================================================================
python-libNeuroML-0.2.45-5.fc27 (FEDORA-2018-9d4ad4de74)
Python libNeuroML for working with neuronal models specified in NeuroML
--------------------------------------------------------------------------------
Update Information:
New package!
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643266 - Review Request: python-libNeuroML - Python libNeuroML for working
with neuronal models specified in NeuroML
https://bugzilla.redhat.com/show_bug.cgi?id=1643266
--------------------------------------------------------------------------------
================================================================================
slibtool-0.5.26-1.fc27 (FEDORA-2018-2a7d6edc0e)
A skinny libtool implementation, written in C
--------------------------------------------------------------------------------
Update Information:
Update to 0.5.26
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 27 2018 Neal Gompa <ngompa13(a)gmail.com> - 0.5.26-1
- Update to 0.5.26
--------------------------------------------------------------------------------