The following Fedora 27 Security updates need testing:
Age URL
209
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
141
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
105
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
96
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
73
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
73
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c
tomcat-8.0.53-1.fc27
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1
unixODBC-2.3.7-1.fc27
29
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7051d682fa
ntp-4.2.8p12-1.fc27
22
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e914e7a9e2
chromium-68.0.3440.106-3.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11ed8d95e2
libxkbcommon-0.8.2-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a1bd27f59b
dokuwiki-20180422a-2.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3aafb854a9
yum-utils-1.1.31-514.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4a21a8ca59 nss-3.39.0-1.0.fc27
nss-softokn-3.39.0-1.0.fc27 nss-util-3.39.0-1.0.fc27 nspr-4.20.0-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a7916c8b9
thunderbird-60.0-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bf613d82be CImg-2.3.6-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a82282e4e gmic-2.3.6-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ba443bcb6d
curl-7.55.1-14.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ec9bc84fda
libzypp-16.17.20-1.fc27 zypper-1.13.45-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1a85045c79 icu-57.1-10.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f1b1ed38b3
ghostscript-9.22-6.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9a4d7ec61e
glusterfs-3.12.14-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-dbeb27d783
okular-17.12.3-2.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
125
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
86
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
50
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24
iproute-4.17.0-1.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-11ed8d95e2
libxkbcommon-0.8.2-1.fc27
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c223c11259
libldb-1.3.2-2.fc27.1.2.3 samba-4.7.10-0.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3aafb854a9
yum-utils-1.1.31-514.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-db7b8aabc5
edk2-20180815gitcb5f4f45ce-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ba443bcb6d
curl-7.55.1-14.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-73bc9229ee
webkitgtk4-2.22.0-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3a7916c8b9
thunderbird-60.0-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4a21a8ca59 nss-3.39.0-1.0.fc27
nss-softokn-3.39.0-1.0.fc27 nss-util-3.39.0-1.0.fc27 nspr-4.20.0-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d2f0264871
perl-File-Path-2.16-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c1a73a9e0
osinfo-db-20180903-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f0bf476cb8 pcre-8.42-4.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25df8eeb1f
pcre2-10.31-11.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-40906e11a7
hwdata-0.315-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9a4d7ec61e
glusterfs-3.12.14-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-60b107e6b6
gnome-software-3.28.2-2.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5de433cf0f
pungi-4.1.28-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9dba618394
btrfs-progs-4.17.1-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1a85045c79 icu-57.1-10.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-35efb2e3e1 rpm-4.14.2-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-227775ff3a ceph-12.2.8-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-afc61ca113
p11-kit-0.23.14-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
aom-1.0.0-2.fc27
ctstream-29-1.fc27
ddgr-1.5-1.fc27
flatpak-1.0.2-1.fc27
gala-0.3.1-0.7.20180910.git2995cd6.fc27
git-extras-4.6.0-3.fc27
gitolite3-3.6.9-1.fc27
gnome-shell-extension-media-player-indicator-0-0.20.20180902git0795671.fc27
gsequencer-2.0.2-0.fc27
guayadeque-0.4.5-0.16.beta1gitfa7ab20.fc27
mame-0.201-1.fc27
mate-user-admin-1.1.1-1.fc27
php-7.1.22-1.fc27
python-h11-0.8.1-1.fc27
python-outcome-1.0.0-1.fc27
roca-detect-1.2.12-4.fc27
sequeler-0.6.2-1.fc27
syncthing-gtk-0.9.4.1-1.fc27
worker-3.15.2-1.fc27
Details about builds:
================================================================================
aom-1.0.0-2.fc27 (FEDORA-2018-8935aa89ce)
Royalty-free next-generation video format
--------------------------------------------------------------------------------
Update Information:
Update the archive in order to detect the correct version from the changelog
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
ctstream-29-1.fc27 (FEDORA-2018-7f2b1bc3e5)
Get URLs of Czech Television video streams
--------------------------------------------------------------------------------
Update Information:
This release adapts to changes in server's behavior.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 13 2018 Petr Pisar <ppisar(a)redhat.com> - 29-1
- Version 29 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1628413 - ctstream-29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1628413
--------------------------------------------------------------------------------
================================================================================
ddgr-1.5-1.fc27 (FEDORA-2018-b512d53449)
DuckDuckGo from the terminal
--------------------------------------------------------------------------------
Update Information:
Release 1.5
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 11 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.5-1
- Release 1.5
--------------------------------------------------------------------------------
================================================================================
flatpak-1.0.2-1.fc27 (FEDORA-2018-6ec2c424b8)
Application deployment framework for desktop apps
--------------------------------------------------------------------------------
Update Information:
flatpak 1.0.2 release. * The dbus proxy is now available in a separate git
module, xdg-dbus-portal, which is imported into flatpak as a submodule. It is
possible to build flatpak against the system xdg-dbus-portal instead, but
this is not currently very useful as no other applications yet depend on xdg-
dbus-portal. * Build regressions with older versions of glib have been fixed.
* Flatpak ps now also tracks the pid the main process inside the sandbox. *
Added flatpak override --reset to reset overrides for an app. * Added flatpak
override --show to show overrides for an app. * flatpak install now
automatically pick user or system based on the remote name given (unless the
remote exists in both). * flatpak uninstall --unused now does not remove SDKs
if some installed app refers to them. * Fixed bug where flatpak uninstall
--unused prompted for uninstall twice. * Set IO class on the system helper to
"idle", which should cause backgroun updates to affect the system less. *
Fixed regression in flatpak uninstall --no-related. * Better handling of empty
collection ids in flatpak bundles. * Cleaned up some error messages. * Various
documentation fixes and cleanups. * Updated translations. ---- flatpak 1.0.1
release. * Print application tags in the prompt when installing/updating. *
Make sure we don't accidentally leak the host /proc into the sandbox. *
Translation updates. * Added a "flatpak ps" command that lists running flatpak
instances. * Improve error reporting when exporting documents. * Improve
detection of dynamic p2p remotes. * Build fixes for older versions of glib. *
Fix threading issue in the OCI support that was causing the installed tests to
sometimes fail. * Fix OCI AppStream support on 32bit architectures. * Fix utf8
issue in the dbus API description. * Some install fixes to make installed tests
work * Make the tests work with python3 (as well as python2) * Improve
introspection annotations in libflatpak * Improve libflatpak API docs
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 13 2018 Kalev Lember <klember(a)redhat.com> - 1.0.2-1
- Update to 1.0.2
* Tue Aug 28 2018 David King <amigadave(a)amigadave.com> - 1.0.1-1
- Update to 1.0.1
--------------------------------------------------------------------------------
================================================================================
gala-0.3.1-0.7.20180910.git2995cd6.fc27 (FEDORA-2018-6c9636bb5b)
Gala window manager
--------------------------------------------------------------------------------
Update Information:
Bump to commit 2995cd6, providing a few bug fixes. Changes:
https://github.com/elementary/gala/compare/15f722a...2995cd6
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 12 2018 Fabio Valentini <decathorpe(a)gmail.com> -
0.3.1-0.7.20180910.git2995cd6
- Bump to commit 2995cd6.
--------------------------------------------------------------------------------
================================================================================
git-extras-4.6.0-3.fc27 (FEDORA-2018-63fb28fae2)
Little git extras
--------------------------------------------------------------------------------
Update Information:
- Update to 4.6.0. - Disable self-update feature.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 11 2018 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.6.0-3
- Use POSIX shell instead of '(/usr)/bin/bash'
* Tue Sep 11 2018 Vasiliy N. Glazov <vascom2(a)gmail.com> - 4.6.0-2
- Correct shebang
* Fri Sep 7 2018 Vasiliy N. Glazov <vascom2(a)gmail.com> - 4.6.0-1
- Update to 4.6.0
- Disable self-update feature
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.4.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.4.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1546515 - git-extras-4.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1546515
--------------------------------------------------------------------------------
================================================================================
gitolite3-3.6.9-1.fc27 (FEDORA-2018-7993dea41b)
Highly flexible server for git directory version tracker
--------------------------------------------------------------------------------
Update Information:
3.6.9
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 11 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 1:3.6.9-1
- Latest upstream.
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-media-player-indicator-0-0.20.20180902git0795671.fc27
(FEDORA-2018-88b391654a)
Control MPRIS2 capable media players: Rhythmbox, Banshee, Clementine and more
--------------------------------------------------------------------------------
Update Information:
Update to 0-0.20.20180902git0795671
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 5 2018 Martin Gansser <martinkg(a)fedoraproject.org> -
0-0.20.20180902git0795671
- Update to new git snapshot 0-0.20.20180902git0795671
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.19.20171119gite5ac200
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.18.20171119gite5ac200
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gsequencer-2.0.2-0.fc27 (FEDORA-2018-b8dd1cdffe)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
provide patch to disable functional tests
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 9 2018 Jo��l Kr��hemann <jkraehemann(a)gmail.com> 2.0.1-1
- provide patch to disable functional tests
* Sun Sep 9 2018 Jo��l Kr��hemann <jkraehemann(a)gmail.com> 2.0.1-0
- updated Source to point to new major version directory
--------------------------------------------------------------------------------
================================================================================
guayadeque-0.4.5-0.16.beta1gitfa7ab20.fc27 (FEDORA-2018-fc8f73ae31)
Music player
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.5-0.16.beta1gitfa7ab20
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.4.5-0.16.beta1fa7ab20
- Update to 0.4.5-0.16.beta1gitfa7ab20
--------------------------------------------------------------------------------
================================================================================
mame-0.201-1.fc27 (FEDORA-2018-3004b73acf)
Multiple Arcade Machine Emulator
--------------------------------------------------------------------------------
Update Information:
An update to the latest mame release: *
https://www.mamedev.org/?p=460
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 30 2018 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.201-1
- Update to 0.201
- Drop upstreamed imgtool patch
- Add ExcludeArch: %{arm} due to issues with linker running out of memory
- Apply -g1 across the board to prevent relocation overflows
--------------------------------------------------------------------------------
================================================================================
mate-user-admin-1.1.1-1.fc27 (FEDORA-2018-b573289c5b)
User management tool
--------------------------------------------------------------------------------
Update Information:
- initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1627729 - Review Request: mate-user-admin - User management tool
https://bugzilla.redhat.com/show_bug.cgi?id=1627729
--------------------------------------------------------------------------------
================================================================================
php-7.1.22-1.fc27 (FEDORA-2018-25100b492c)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
**PHP version 7.1.22** (13 Sep 2018) **Core:** * Fixed bug php#76754 (parent
private constant in extends class memory leak). (Laruence) * Fixed bug php#72443
(Generate enabled extension). (petk) **Apache2:** * Fixed bug php#76582
(Apache bucket brigade sometimes becomes invalid). (stas) **Bz2:** * Fixed
arginfo for bzcompress. (Tyson Andre) **gettext:** * Fixed bug php#76517
(incorrect restoring of LDFLAGS). (sji) **iconv:** * Fixed bug php#68180
(iconv_mime_decode can return extra characters in a header). (cmb) * Fixed bug
php#63839 (iconv_mime_decode_headers function is skipping headers). (cmb) *
Fixed bug php#60494 (iconv_mime_decode does ignore special characters). (cmb) *
Fixed bug php#55146 (iconv_mime_decode_headers() skips some headers). (cmb)
**intl:** * Fixed bug php#74484 (MessageFormatter::formatMessage memory
corruption with 11+ named placeholders). (Anatol) **libxml:** * Fixed bug
php#76777 ("public id" parameter of libxml_set_external_entity_loader callback
undefined). (Ville Hukkam��ki) **mbstring:** * Fixed bug php#76704
(mb_detect_order return value varies based on argument type). (cmb)
**Opcache:** * Fixed bug php#76747 (Opcache treats path containing
"test.pharma.tld" as a phar file). (Laruence) **OpenSSL:** * Fixed bug
php#76705 (unusable ssl => peer_fingerprint in stream_context_create()). (Jakub
Zelenka) **phpdbg:** * Fixed bug php#76595 (phpdbg man page contains outdated
information). (Kevin Abel) **SPL:** * Fixed bug php#68825 (Exception in
DirectoryIterator::getLinkTarget()). (cmb) * Fixed bug php#68175 (RegexIterator
pregFlags are NULL instead of 0). (Tim Siebels) **Standard:** * Fixed bug
php#76778 (array_reduce leaks memory if callback throws exception). (cmb)
**zlib:** * Fixed bug php#65988 (Zlib version check fails when an include/zlib/
style dir is passed to the --with-zlib configure option). (Jay Bonci) * Fixed
bug php#76709 (Minimal required zlib library is 1.2.0.4). (petk)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 12 2018 Remi Collet <remi(a)remirepo.net> - 7.1.22-1
- Update to 7.1.22 -
http://www.php.net/releases/7_1_22.php
--------------------------------------------------------------------------------
================================================================================
python-h11-0.8.1-1.fc27 (FEDORA-2018-e2294f3655)
A pure-Python, bring-your-own-I/O implementation of HTTP/1.1
--------------------------------------------------------------------------------
Update Information:
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1628367 - Review Request: python-h11 - A pure-Python, bring-your-own-I/O
implementation of HTTP/1.1
https://bugzilla.redhat.com/show_bug.cgi?id=1628367
--------------------------------------------------------------------------------
================================================================================
python-outcome-1.0.0-1.fc27 (FEDORA-2018-7d54e2c6f6)
Capture the outcome of Python function calls
--------------------------------------------------------------------------------
Update Information:
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1628300 - Review Request: python-outcome - Capture the outcome of Python
function calls
https://bugzilla.redhat.com/show_bug.cgi?id=1628300
--------------------------------------------------------------------------------
================================================================================
roca-detect-1.2.12-4.fc27 (FEDORA-2018-2cce72d1ce)
Key fingerprinting tools for CVE-2017-15361
--------------------------------------------------------------------------------
Update Information:
This is a somewhat belated new package that checks RSA keys for the known
vulnerability described in CVE-2017-15361. RSA key generators *should* be
checking for this automatically by now, but this lets you make sure.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1503915 - Review Request: roca-detect - test RSA public keys for ROCA
vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1503915
--------------------------------------------------------------------------------
================================================================================
sequeler-0.6.2-1.fc27 (FEDORA-2018-c567e4bbea)
SQL Client built in Vala
--------------------------------------------------------------------------------
Update Information:
Update to version 0.6.2. Release notes:
https://github.com/Alecaddd/sequeler/releases/tag/v0.6.2 Update to version
0.6.1. Release notes:
https://github.com/Alecaddd/sequeler/releases/tag/v0.6.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 12 2018 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.2-1
- Update to version 0.6.2.
* Sat Sep 8 2018 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.1-1
- Update to version 0.6.1.
--------------------------------------------------------------------------------
================================================================================
syncthing-gtk-0.9.4.1-1.fc27 (FEDORA-2018-40061ffdf9)
Syncthing GTK+ GUI
--------------------------------------------------------------------------------
Update Information:
Update to version 0.9.4.1. Release notes:
https://github.com/syncthing
/syncthing-gtk/releases/tag/v0.9.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 12 2018 Fabio Valentini <decathorpe(a)gmail.com> - 0.9.4.1-1
- Update to version 0.9.4.1.
--------------------------------------------------------------------------------
================================================================================
worker-3.15.2-1.fc27 (FEDORA-2018-dd41d3661f)
File Manager for the X11
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new upstream version 3.15.2 fixes rhbz #1579346 and #1606703
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 11 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 3.15.2-1
- Rebuilt for new upstream version 3.15.0 fixes rhbz #1579346 and #1606703
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.15.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Apr 9 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 3.15.0-3
- added gcc as BR
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.15.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1606703 - worker: FTBFS in Fedora rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1606703
[ 2 ] Bug #1579346 - worker-3.15.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1579346
--------------------------------------------------------------------------------