The following Fedora 27 Security updates need testing:
Age URL
248
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
180
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
143
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
135
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
111
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
111
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
69
https://bodhi.fedoraproject.org/updates/FEDORA-2018-21ffebf41c
tomcat-8.0.53-1.fc27
69
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e8533a3ef1
unixODBC-2.3.7-1.fc27
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fc2ba807a6
xerces-c27-2.7.0-28.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3e010c6501
chromium-69.0.3497.100-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7c235a496f
thunderbird-60.2.1-2.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-de6d032aae
lighttpd-1.4.51-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-28ea2290ad
python33-3.3.7-3.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a2c1453607
python35-3.5.6-3.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-14526cbebe
python26-2.6.9-17.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f2f8571abd
sos-collector-1.5-3.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
164
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
124
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
88
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.11-1.fc27
68
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20c3deae24
iproute-4.17.0-1.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7c235a496f
thunderbird-60.2.1-2.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5a93cc4270
gnome-software-3.28.2-4.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5303fe7f1d
glusterfs-3.12.15-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e1a19af16e
pungi-4.1.29-3.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5f573e7590 qt-4.8.7-44.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-dd18390a3b vim-8.1.483-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
NetworkManager-strongswan-1.4.4-1.fc27
R-mockery-0.4.1.1-1.fc27
R-rlang-0.2.2-1.fc27
caddy-0.11.0-3.fc27
grub-customizer-5.1.0-1.fc27
julietaula-montserrat-fonts-7.200-4.fc27
kernel-4.18.16-100.fc27
kernel-headers-4.18.16-100.fc27
libqxt-qt5-0.7.0-0.14.20130718giteaf6872f6ad4.fc27
lollypop-0.9.607-1.fc27
papirus-icon-theme-20181007-1.fc27
perl-File-Slurp-9999.23-1.fc27
php-cs-fixer-2.13.1-1.fc27
php-pecl-igbinary-2.0.8-1.fc27
pygame-1.9.4-4.fc27
rpm-4.14.2.1-1.fc27
sequeler-0.6.3-1.fc27
switchboard-plug-networking-2.1.3-1.fc27
teeworlds-0.6.5-1.fc27
Details about builds:
================================================================================
NetworkManager-strongswan-1.4.4-1.fc27 (FEDORA-2018-aeb84f08f2)
NetworkManager strongSwan IPSec VPN plug-in
--------------------------------------------------------------------------------
Update Information:
Updated to satisfy dependencies of strongswan-5.7.1-1.fc27, which was updated to
fix several CVE vulnerabilities.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 18 2018 Mikhail Zabaluev <mikhail.zabaluev(a)gmail.com> - 1.4.4-1
- new version
* Wed Feb 21 2018 Lubomir Rintel <lkundrak(a)v3.sk> - 1.4.3-1
- Update to 1.4.3
* Thu Nov 30 2017 Lubomir Rintel <lkundrak(a)v3.sk> - 1.4.2-1
- Update to 1.4.2
--------------------------------------------------------------------------------
================================================================================
R-mockery-0.4.1.1-1.fc27 (FEDORA-2018-9675b85bba)
Mocking Library for R
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
R-rlang-0.2.2-1.fc27 (FEDORA-2018-a6611a3bb7)
Functions for Base Types and Core R and 'Tidyverse' Features
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 19 2018 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.2.2-1
- Update to latest version
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
caddy-0.11.0-3.fc27 (FEDORA-2018-ccc928e047)
HTTP/2 web server with automatic HTTPS
--------------------------------------------------------------------------------
Update Information:
- Enable httpd_can_network_connect selinux boolean to connect to ACME endpoint
rhbz#1641158 - Define UDP 80/443 as selinux http_port_t for QUIC rhbz#1608548 -
Define TCP 5033 as selinux http_port_t for HTTP challenge rhbz#1641160
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 19 2018 Carl George <carl(a)george.computer> - 0.11.0-3
- Enable httpd_can_network_connect selinux boolean to connect to ACME endpoint
rhbz#1641158
- Define UDP 80/443 as selinux http_port_t for QUIC rhbz#1608548
- Define TCP 5033 as selinux http_port_t for HTTP challenge rhbz#1641160
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1641160 - caddy: alternate HTTP port
https://bugzilla.redhat.com/show_bug.cgi?id=1641160
[ 2 ] Bug #1641158 - caddy: enable httpd_can_network_connect
https://bugzilla.redhat.com/show_bug.cgi?id=1641158
[ 3 ] Bug #1608548 - caddy: selinux blocking QUIC
https://bugzilla.redhat.com/show_bug.cgi?id=1608548
--------------------------------------------------------------------------------
================================================================================
grub-customizer-5.1.0-1.fc27 (FEDORA-2018-8e13fbdaa2)
Graphical GRUB2 settings manager
--------------------------------------------------------------------------------
Update Information:
bump version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 15 2018 josef radinger <cheese(a)nosuchhost.net> - 5.1.0-1
- bump version
- update Source-url
- switch to svg for icons
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.0.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
julietaula-montserrat-fonts-7.200-4.fc27 (FEDORA-2018-e042c35825)
Sans-serif typeface inspired from Montserrat area
--------------------------------------------------------------------------------
Update Information:
This update splits Montserrat fonts package in its base and alternate version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 20 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:7.200-4
- Update spec file adhering to Fedora Fonts guideline rhbz#1628832
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:7.200-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:7.200-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1628832 - Package cleanup required
https://bugzilla.redhat.com/show_bug.cgi?id=1628832
--------------------------------------------------------------------------------
================================================================================
kernel-4.18.16-100.fc27 (FEDORA-2018-edf9c345c3)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.18.16 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 20 2018 Peter Robinson <pbrobinson(a)fedoraproject.org> 4.18.16-100
- Linux v4.18.16
- Fix network on some i.MX6 devices (rhbz 1628209)
* Thu Oct 18 2018 Justin M. Forbes <jforbes(a)fedoraproject.org> - 4.18.15-100
- Linux v4.18.15
* Mon Oct 15 2018 Justin M. Forbes <jforbes(a)fedoraproject.org> - 4.18.14-100
- Linux v4.18.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1628209 - kernel 4.18.5-200.fc28.armv7hl has non-functional ethernet on
wandboard quad
https://bugzilla.redhat.com/show_bug.cgi?id=1628209
--------------------------------------------------------------------------------
================================================================================
kernel-headers-4.18.16-100.fc27 (FEDORA-2018-edf9c345c3)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 4.18.16 update contains a number of important fixes across the tree
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 21 2018 Laura Abbott <labbott(a)redhat.com> - 4.18.16-100
- Linux v4.18.16
* Thu Oct 18 2018 Justin M. Forbes <jforbes(a)fedoraproject.org> - 4.18.15-100
- Linux v4.18.15
* Mon Oct 15 2018 Justin M. Forbes <jforbes(a)fedoraproject.org> - 4.18.14-100
- Linux v4.18.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1628209 - kernel 4.18.5-200.fc28.armv7hl has non-functional ethernet on
wandboard quad
https://bugzilla.redhat.com/show_bug.cgi?id=1628209
--------------------------------------------------------------------------------
================================================================================
libqxt-qt5-0.7.0-0.14.20130718giteaf6872f6ad4.fc27 (FEDORA-2018-71f6e2782a)
Extended version of the original Qt extension library
--------------------------------------------------------------------------------
Update Information:
Fix pkgconfig files install dependencies, avoid pulling Qt4 libraries
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 21 2018 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> -
0.7.0-0.14.20130718giteaf6872f6ad4
- Fix pkgconfig files install dependencies, avoid pulling Qt4 libraries
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.7.0-0.13.20130718giteaf6872f6ad4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.7.0-0.12.20130718giteaf6872f6ad4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
lollypop-0.9.607-1.fc27 (FEDORA-2018-305b0885ae)
Music player for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.607 ---- Update to 0.9.605
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.607-1
- Update to 0.9.607
* Fri Oct 19 2018 Martin Gansser <martinkg(a)fedoraproject.org> - 0.9.605-1
- Update to 0.9.605
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1641370 - [abrt] lollypop: _on_populated():
view.py:272:_on_populated:AttributeError: 'RadioWidget' object has no attribute
'is_populated'
https://bugzilla.redhat.com/show_bug.cgi?id=1641370
--------------------------------------------------------------------------------
================================================================================
papirus-icon-theme-20181007-1.fc27 (FEDORA-2018-de244a1f9b)
Free and open source SVG icon theme based on Paper Icon Set
--------------------------------------------------------------------------------
Update Information:
Update to release 20181007
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1635367 - Review Request: papirus-icon-theme - Free and open source SVG icon
theme based on Paper Icon Set
https://bugzilla.redhat.com/show_bug.cgi?id=1635367
--------------------------------------------------------------------------------
================================================================================
perl-File-Slurp-9999.23-1.fc27 (FEDORA-2018-bb63aaa566)
Efficient Reading/Writing of Complete Files
--------------------------------------------------------------------------------
Update Information:
Upstream update.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 9999.23-1
- Update to 9999.23.
* Sat Oct 13 2018 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 9999.21-1
- Update to 9999.21.
- Rework BRs.
- Drop xt-test.
- Spec file cosmetics.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1638230 - Upgrade perl-File-Slurp to 9999.21
https://bugzilla.redhat.com/show_bug.cgi?id=1638230
--------------------------------------------------------------------------------
================================================================================
php-cs-fixer-2.13.1-1.fc27 (FEDORA-2018-483943b994)
A tool to automatically fix PHP code style
--------------------------------------------------------------------------------
Update Information:
Changelog for v2.13.1 --------------------- * bug #3977
NoSuperfluousPhpdocTagsFixer - Fix handling of description with variable
(julienfalque) * bug #4027 PhpdocAnnotationWithoutDotFixer - add failing cases
(keradus) * bug #4028 PhpdocNoEmptyReturnFixer - handle single line PHPDoc
(kubawerlos) * bug #4034 PhpUnitTestCaseIndicator - handle anonymous class
(kubawerlos) * bug #4037 NativeFunctionInvocationFixer - fix function detection
(kubawerlos) * feature #4019 PhpdocTypesFixer - allow for configuration
(keradus) * minor #3980 Clarifies allow-risky usage (josephzidell) * minor #4016
Bump console component due to it's bug (keradus) * minor #4023 Enhancement:
Update localheinz/composer-normalize (localheinz) * minor #4049 use
parent::offset*() methods when moving items arround in insertAt() (staabm)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 21 2018 Remi Collet <remi(a)remirepo.net> - 2.13.1-1
- update to 2.13.1
--------------------------------------------------------------------------------
================================================================================
php-pecl-igbinary-2.0.8-1.fc27 (FEDORA-2018-e7562024df)
Replacement for the standard PHP serializer
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.8** Release notes ------------- * Be more aggressive about
deduplication when generating serialization of arrays in php 7.0+. * Define
HAVE_IGBINARY on Unix/Linux. (previously defined only on Windows) * Update
formatting/wording of documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2018 Remi Collet <remi(a)remirepo.net> - 2.0.8-1
- update to 2.0.8
--------------------------------------------------------------------------------
================================================================================
pygame-1.9.4-4.fc27 (FEDORA-2018-f6ac19b5b1)
Python modules for writing games
--------------------------------------------------------------------------------
Update Information:
Restore pygame provides.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 1.9.4-4
- Requires fixes.
--------------------------------------------------------------------------------
================================================================================
rpm-4.14.2.1-1.fc27 (FEDORA-2018-2c9120d494)
The RPM package management system
--------------------------------------------------------------------------------
Update Information:
An unfortunate regression in rpm 4.14.2 causes --setperms to behave incorrectly
on symbolic links: file and directory permissions become world writable and
executable on symlink targets. A similar flaw exists in --setugids, but it is
less exploitable. If you have used --setperms (or --setugids, or --restore)
with rpm 4.14.2, you should ensure system integrity with rpm --verify before
proceeding to correct any mixed up permissions and ownerships to avoid possibly
giving suid capabilities to a modified binary. Further details of the
--setperms bug available upstream:
https://github.com/rpm-software-
management/rpm/commit/0d83637769b8a122b1e80f2e960ea1bbae8b4f10
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2018 Panu Matilainen <pmatilai(a)redhat.com> - 4.14.2.1-1
- Update to rpm 4.14.2.1 (
http://rpm.org/wiki/Releases/4.14.2.1)
--------------------------------------------------------------------------------
================================================================================
sequeler-0.6.3-1.fc27 (FEDORA-2018-54a4082fb9)
SQL Client built in Vala
--------------------------------------------------------------------------------
Update Information:
Update to version 0.6.3. Release notes:
https://github.com/Alecaddd/sequeler/releases/tag/v0.6.3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 21 2018 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.3-1
- Update to version 0.6.3.
--------------------------------------------------------------------------------
================================================================================
switchboard-plug-networking-2.1.3-1.fc27 (FEDORA-2018-ef95e3f52b)
Switchboard Networking plug
--------------------------------------------------------------------------------
Update Information:
Update to version 2.1.3. Release notes:
https://github.com/elementary
/switchboard-plug-network/releases/tag/2.1.3
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 20 2018 Fabio Valentini <decathorpe(a)gmail.com> - 2.1.3-1
- Update to version 2.1.3.
--------------------------------------------------------------------------------
================================================================================
teeworlds-0.6.5-1.fc27 (FEDORA-2018-b24201fc50)
Online multi-player platform 2D shooter
--------------------------------------------------------------------------------
Update Information:
0.6.5
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 22 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.6.5-1
- 0.6.5
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.4-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Mar 16 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.6.4-8
- Bam patch.
* Fri Feb 9 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 0.6.4-7
- Escape macros in %changelog
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1641644 - CVE-2018-18541 teeworlds: Missing challenge-response in the
connection build up [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1641644
[ 2 ] Bug #1641643 - CVE-2018-18541 teeworlds: Missing challenge-response in the
connection build up [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1641643
--------------------------------------------------------------------------------