The following Fedora 27 Security updates need testing:
Age URL
47
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
29
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e38f759144
python-bleach-2.1.3-1.fc27
29
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ff86925c3
memcached-1.5.6-1.fc27
22
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c923533479
webkitgtk4-2.20.0-1.fc27
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-223d8fc52a
java-1.8.0-openjdk-aarch32-1.8.0.161-1.180220.fc27
9
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2f9d3604d6
librelp-1.2.15-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1217b02061
bchunk-1.2.2-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-143886fdbd
drupal7-7.58-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6e6d8c314b
drupal8-8.4.6-2.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e06468b832
libid3tag-0.15.1b-26.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1b3a73b45f
libofx-0.9.10-5.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d48955723f
wordpress-4.9.5-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f61d8bdd42 koji-1.15.1-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
33
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c31f1eccd
iptables-1.6.2-2.fc27 libnftnl-1.0.9-2.fc27 nftables-0.8.2-2.fc27
22
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c923533479
webkitgtk4-2.20.0-1.fc27
18
https://bodhi.fedoraproject.org/updates/FEDORA-2018-55a6726164
PackageKit-1.1.9-2.fc27 gnome-software-3.28.0-4.fc27 libappstream-glib-0.7.7-2.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-adbc1da28c pcre2-10.31-4.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7df97ca3e3
highlight-3.42-1.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-13dc9b1bf6 exo-0.12.0-3.fc27
xfce4-screenshooter-1.9.1-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2018-772fcd140c
linux-firmware-20180402-83.git8c1e439c.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f61d8bdd42 koji-1.15.1-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5d0bdfb533 bluez-5.49-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5f72371a85
python-productmd-1.11-2.fc27 pungi-4.1.23-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-73fd17a963
kernel-4.15.15-300.fc27
The following builds have been pushed to Fedora 27 updates-testing
auter-0.11-4.fc27
certbot-0.23.0-1.fc27
containerd-1.0.3-1.fc27
ddgr-1.4-1.fc27
fstrm-0.3.2-1.fc27
geteltorito-0.6-7.fc27
gfal2-2.15.4-1.fc27
gnudos-1.11-1.fc27
libemu-0.2.0-8.20130410gitab48695.fc27
mypaint-brushes-1.3.0-1.fc27
nmh-1.7.1-2.fc27
open-eid-17.12-1.fc27
openttd-1.8.0-1.fc27
php-bartlett-php-compatinfo-db-1.31.0-1.fc27
purple-discord-0-17.20180401git4bea5d7.fc27
purple-hangouts-0-57.20180328hg0e137e6.fc27
purple-matrix-0-9.20180325git49ea988.fc27
purple-skypeweb-1.4-9.20180315gitc395028.fc27
python-acme-0.23.0-1.fc27
python-avocado-52.1-1.fc27
python-certbot-apache-0.23.0-1.fc27
python-certbot-dns-cloudflare-0.23.0-1.fc27
python-certbot-dns-cloudxns-0.23.0-1.fc27
python-certbot-dns-digitalocean-0.23.0-1.fc27
python-certbot-dns-dnsimple-0.23.0-1.fc27
python-certbot-dns-dnsmadeeasy-0.23.0-1.fc27
python-certbot-dns-google-0.23.0-1.fc27
python-certbot-dns-luadns-0.23.0-1.fc27
python-certbot-dns-nsone-0.23.0-1.fc27
python-certbot-dns-rfc2136-0.23.0-1.fc27
python-certbot-dns-route53-0.23.0-1.fc27
python-certbot-nginx-0.23.0-1.fc27
python-cloudflare-2.1.0-2.fc27
python-datanommer-models-0.9.1-2.fc27
python-olefile-0.45.1-1.fc27
python3-3.6.5-1.fc27
xen-4.9.2-1.fc27
Details about builds:
================================================================================
auter-0.11-4.fc27 (FEDORA-2018-0b198282c4)
Prepare and apply updates
--------------------------------------------------------------------------------
Update Information:
Update to 0.11 with bugfixes applied
--------------------------------------------------------------------------------
================================================================================
certbot-0.23.0-1.fc27 (FEDORA-2018-410cc6f628)
A free, automated certificate authority client
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563899 - certbot-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563899
--------------------------------------------------------------------------------
================================================================================
containerd-1.0.3-1.fc27 (FEDORA-2018-ebae182522)
An industry-standard container runtime
--------------------------------------------------------------------------------
Update Information:
upstream 1.0.3
--------------------------------------------------------------------------------
================================================================================
ddgr-1.4-1.fc27 (FEDORA-2018-23c9fc8b30)
DuckDuckGo from the terminal
--------------------------------------------------------------------------------
Update Information:
Release 1.4
--------------------------------------------------------------------------------
================================================================================
fstrm-0.3.2-1.fc27 (FEDORA-2018-bf9ab3d7b6)
Frame Streams implementation in C
--------------------------------------------------------------------------------
Update Information:
Changelog: * Accommodate systems without pthread_condattr_setclock (Issue #34)
* Add support for '-' as a filename for stdin/stdout (PR #28) * destroy
condition variable and mutexes in fstrm_iothr_destroy() (PR #25)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1424662 - fstrm-v0.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1424662
--------------------------------------------------------------------------------
================================================================================
geteltorito-0.6-7.fc27 (FEDORA-2018-6a067d65d5)
El Torito boot image extractor
--------------------------------------------------------------------------------
Update Information:
- Use release tarball from upstream
--------------------------------------------------------------------------------
================================================================================
gfal2-2.15.4-1.fc27 (FEDORA-2018-82b88d2de0)
Grid file access library 2.0
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------
================================================================================
gnudos-1.11-1.fc27 (FEDORA-2018-f841383649)
The GnuDOS library for GNU/Linux
--------------------------------------------------------------------------------
Update Information:
Bug fixes in mino (almost rewritten from scratch)
--------------------------------------------------------------------------------
================================================================================
libemu-0.2.0-8.20130410gitab48695.fc27 (FEDORA-2018-27aaee2a9c)
The x86 shell-code detection and emulation
--------------------------------------------------------------------------------
Update Information:
New package - libemu Summary: The x86 shell-code detection and emulation
Description: The libemu is a small library written in C offering basic x86
emulation and shell-code detection using GetPC heuristics. Intended use is
within network intrusion/prevention detection and honeypots.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1559711 - Review Request: libemu - The x86 shell-code detection and
emulation
https://bugzilla.redhat.com/show_bug.cgi?id=1559711
--------------------------------------------------------------------------------
================================================================================
mypaint-brushes-1.3.0-1.fc27 (FEDORA-2018-710b265bd7)
Brushes to be used with the MyPaint library
--------------------------------------------------------------------------------
Update Information:
This update includes the first release of the mypaint-brushes package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562452 - Review Request: mypaint-brushes - Brushes to be used with the
MyPaint library
https://bugzilla.redhat.com/show_bug.cgi?id=1562452
--------------------------------------------------------------------------------
================================================================================
nmh-1.7.1-2.fc27 (FEDORA-2018-674f79819e)
A capable MIME-email-handling system with a command-line interface
--------------------------------------------------------------------------------
Update Information:
Changed default send port from 587 back to original 25.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562144 - nmh 1.7.1-3.el7 switches default sendmail port to 587 from 25,
breaking applications
https://bugzilla.redhat.com/show_bug.cgi?id=1562144
--------------------------------------------------------------------------------
================================================================================
open-eid-17.12-1.fc27 (FEDORA-2018-e84d057947)
Meta-package for Estonian Electronic Identity Software
--------------------------------------------------------------------------------
Update Information:
first release
--------------------------------------------------------------------------------
================================================================================
openttd-1.8.0-1.fc27 (FEDORA-2018-2bee87a605)
Transport system simulation game
--------------------------------------------------------------------------------
Update Information:
Updated to 1.8.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563813 - please update to 1.8.0
https://bugzilla.redhat.com/show_bug.cgi?id=1563813
--------------------------------------------------------------------------------
================================================================================
php-bartlett-php-compatinfo-db-1.31.0-1.fc27 (FEDORA-2018-c23b57483b)
Reference Database to be used with php-compatinfo library
--------------------------------------------------------------------------------
Update Information:
**Version 1.31.0** - 2018-04-04 **Added** - Support to PHP 7.1.16 - Support to
PHP 7.0.29 - Support to PHP 5.6.35 **Changed** - Varnish reference updated to
version 1.2.3 (stable)
--------------------------------------------------------------------------------
================================================================================
purple-discord-0-17.20180401git4bea5d7.fc27 (FEDORA-2018-9481e6ea26)
Discord plugin for libpurple
--------------------------------------------------------------------------------
Update Information:
Updated purple plugins to latest Git snapshots.
--------------------------------------------------------------------------------
================================================================================
purple-hangouts-0-57.20180328hg0e137e6.fc27 (FEDORA-2018-9481e6ea26)
Hangouts plugin for libpurple
--------------------------------------------------------------------------------
Update Information:
Updated purple plugins to latest Git snapshots.
--------------------------------------------------------------------------------
================================================================================
purple-matrix-0-9.20180325git49ea988.fc27 (FEDORA-2018-9481e6ea26)
Matrix plugin for libpurple
--------------------------------------------------------------------------------
Update Information:
Updated purple plugins to latest Git snapshots.
--------------------------------------------------------------------------------
================================================================================
purple-skypeweb-1.4-9.20180315gitc395028.fc27 (FEDORA-2018-9481e6ea26)
Adds support for Skype to Pidgin
--------------------------------------------------------------------------------
Update Information:
Updated purple plugins to latest Git snapshots.
--------------------------------------------------------------------------------
================================================================================
python-acme-0.23.0-1.fc27 (FEDORA-2018-081839dbb5)
Python library for the ACME protocol
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563878 - python-acme-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563878
--------------------------------------------------------------------------------
================================================================================
python-avocado-52.1-1.fc27 (FEDORA-2018-23df703333)
Framework with tools and libraries for Automated Testing
--------------------------------------------------------------------------------
Update Information:
Sync with upstream release 52.1 (LTS series).
--------------------------------------------------------------------------------
================================================================================
python-certbot-apache-0.23.0-1.fc27 (FEDORA-2018-67314c4e0a)
The apache plugin for certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563900 - python-certbot-apache-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563900
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-cloudflare-0.23.0-1.fc27 (FEDORA-2018-292a1d113c)
Cloudflare DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563901 - python-certbot-dns-cloudflare-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563901
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-cloudxns-0.23.0-1.fc27 (FEDORA-2018-30cb4ade8f)
CloudXNS DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563902 - python-certbot-dns-cloudxns-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563902
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-digitalocean-0.23.0-1.fc27 (FEDORA-2018-f6c27d0052)
DigitalOcean DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563903 - python-certbot-dns-digitalocean-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563903
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-dnsimple-0.23.0-1.fc27 (FEDORA-2018-23f14978a9)
DNSimple DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563904 - python-certbot-dns-dnsimple-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563904
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-dnsmadeeasy-0.23.0-1.fc27 (FEDORA-2018-1917a87644)
DNS Made Easy DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563905 - python-certbot-dns-dnsmadeeasy-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563905
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-google-0.23.0-1.fc27 (FEDORA-2018-f925c3450c)
Google Cloud DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563906 - python-certbot-dns-google-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563906
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-luadns-0.23.0-1.fc27 (FEDORA-2018-ab543f601a)
LuaDNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563907 - python-certbot-dns-luadns-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563907
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-nsone-0.23.0-1.fc27 (FEDORA-2018-6cba03088d)
NS1 DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563908 - python-certbot-dns-nsone-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563908
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-rfc2136-0.23.0-1.fc27 (FEDORA-2018-d8387c2725)
RFC 2136 DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563909 - python-certbot-dns-rfc2136-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563909
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-route53-0.23.0-1.fc27 (FEDORA-2018-7882860467)
Route53 DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563910 - python-certbot-dns-route53-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563910
--------------------------------------------------------------------------------
================================================================================
python-certbot-nginx-0.23.0-1.fc27 (FEDORA-2018-6221d971ab)
The nginx plugin for certbot
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563911 - python-certbot-nginx-0.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1563911
--------------------------------------------------------------------------------
================================================================================
python-cloudflare-2.1.0-2.fc27 (FEDORA-2018-cc6f9e3a4c)
Python wrapper for the Cloudflare Client API v4
--------------------------------------------------------------------------------
Update Information:
Fix python3 package dependencies ---- Update to 2.1.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1563427 - pkg_resources.DistributionNotFound: The 'pyyaml'
distribution was not found and is required by cloudflare
https://bugzilla.redhat.com/show_bug.cgi?id=1563427
[ 2 ] Bug #1560758 - python-cloudflare-2.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560758
--------------------------------------------------------------------------------
================================================================================
python-datanommer-models-0.9.1-2.fc27 (FEDORA-2018-dd8a93bbb6)
SQLAlchemy models for datanommer
--------------------------------------------------------------------------------
Update Information:
Python3 subpackage.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1466738 - python-datanommer-models: Provide a Python 3 subpackage
https://bugzilla.redhat.com/show_bug.cgi?id=1466738
[ 2 ] Bug #1369549 - Datanommer packages dependencies
https://bugzilla.redhat.com/show_bug.cgi?id=1369549
--------------------------------------------------------------------------------
================================================================================
python-olefile-0.45.1-1.fc27 (FEDORA-2018-a96a934cb5)
Python package to parse, read and write Microsoft OLE2 files
--------------------------------------------------------------------------------
Update Information:
bugfix
--------------------------------------------------------------------------------
================================================================================
python3-3.6.5-1.fc27 (FEDORA-2018-a042f795b2)
Interpreter of the Python programming language
--------------------------------------------------------------------------------
Update Information:
Update to 3.6.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548683 - Filter bogus rpmlint errors/warnings
https://bugzilla.redhat.com/show_bug.cgi?id=1548683
[ 2 ] Bug #1560103 - Invalid content of C header file
/usr/include/python3.6m/pyconfig.h
https://bugzilla.redhat.com/show_bug.cgi?id=1560103
[ 3 ] Bug #1560295 -
/usr/lib/debug/usr/lib64/libpython3.6m.so.1.0-3.6.4-20.fc28.x86_64.debug-gdb.py has wrong
shebang
https://bugzilla.redhat.com/show_bug.cgi?id=1560295
[ 4 ] Bug #1563462 - CVE-2018-1060 CVE-2018-1061 python3: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1563462
[ 5 ] Bug #1546990 - pathfix.py leaves bunch of ~ suffixed files around
https://bugzilla.redhat.com/show_bug.cgi?id=1546990
--------------------------------------------------------------------------------
================================================================================
xen-4.9.2-1.fc27 (FEDORA-2018-af1b0ba270)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
update to 4.9.2
--------------------------------------------------------------------------------