The following Fedora 27 Security updates need testing:
Age URL
145
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
77
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8dc6395408
dpdk-17.08.2-1.fc27
63
https://bodhi.fedoraproject.org/updates/FEDORA-2018-775d96b54b
blktrace-1.2.0-6.fc27
50
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a10c1d234e
vim-syntastic-3.9.0-1.fc27
41
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3b33f65b01
nodejs-brace-expansion-1.1.11-1.fc27
33
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f7a1334c68
sox-14.4.2.0-22.fc27
32
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a748acc219
unrtf-0.21.9-8.fc27
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ae1ced8fb6
dcraw-9.28.0-1.fc27
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2d2179e7d0
python-XStatic-jquery-ui-1.12.0.1-2.fc27
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0712169848 bind-9.11.3-6.fc27
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1a467757ce xen-4.9.2-6.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6c465c127c
bibutils-6.5-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f6ccdeb750
mailman-2.1.21-9.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc864bb9e1
openslp-2.0.0-15.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fd29597fa4
rubygem-sprockets-3.7.2-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-62394ac295
xapian-bindings-1.4.6-1.fc27 xapian-core-1.4.6-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2b053454a4
libvirt-3.7.0-6.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-abe4d2383e
singularity-2.5.2-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0f7448b3ab
kernel-tools-4.17.4-100.fc27 kernel-4.17.4-100.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-64af4d2108
cinnamon-3.8.7-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4197fff086
soundtouch-2.0.0-3.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8fc2cb8cb0
wordpress-4.9.7-1.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-53790a5236
ansible-2.6.1-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-df2593ee6a
docker-1.13.1-60.git9cb56fd.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-160b3d2f6c
docker-latest-1.13.1-37.git9cb56fd.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-04b3af1edf
uwsgi-2.0.17.1-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ebebe9abe2
perl-Archive-Zip-1.59-6.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-fb071377ba
libgit2-0.26.5-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8484550fff
kernel-4.17.5-100.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f38d1cb219 rust-1.27.1-2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d1a767f9f3
firefox-61.0.1-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-35325c9faf
qutebrowser-1.4.1-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-83df5dc658
polkit-0.113-16.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
61
https://bodhi.fedoraproject.org/updates/FEDORA-2018-25d5c86330 libidn-1.34-2.fc27
mcabber-1.1.0-1.fc27.1 pidgin-2.13.0-1.fc27.1 python-slixmpp-1.3.0-5.fc27.1
39
https://bodhi.fedoraproject.org/updates/FEDORA-2018-33052e653e
iproute-4.16.0-1.fc27
33
https://bodhi.fedoraproject.org/updates/FEDORA-2018-05a68ea22e
geoclue2-2.4.10-2.fc27
27
https://bodhi.fedoraproject.org/updates/FEDORA-2018-f5989c8ede
osinfo-db-20180612-1.fc27
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-200dba6b93
upower-0.99.8-1.fc27
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2900e03ce5
glib2-2.54.3-3.fc27
15
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6559e94544 sssd-1.16.2-4.fc27
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d3507ef90d pcre-8.42-2.fc27
14
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1a467757ce xen-4.9.2-6.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-383ac28bf9
libguestfs-1.38.3-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-31974dc1e0
dnsmasq-2.79-3.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-20d0222e17
hwdata-0.313-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d28d8987aa
pungi-4.1.25-6.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0f7448b3ab
kernel-tools-4.17.4-100.fc27 kernel-4.17.4-100.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2b053454a4
libvirt-3.7.0-6.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-acb94ec334 gdisk-1.0.4-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-83df5dc658
polkit-0.113-16.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-03fe10c037 vim-8.1.177-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d1a767f9f3
firefox-61.0.1-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8484550fff
kernel-4.17.5-100.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-274a301d10
flatpak-builder-0.99.3-1.fc27 flatpak-0.99.3-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f1534907c
python-rpm-macros-3-26.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6ad41fc770 nss-3.38.0-1.0.fc27
nss-softokn-3.38.0-1.0.fc27 nss-util-3.38.0-1.0.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2018-74bb50b821 pcre2-10.31-7.fc27
The following builds have been pushed to Fedora 27 updates-testing
compose-utils-0.1.23-1.fc27
libtomcrypt-1.18.2-1.fc27
ndctl-61.2-1.fc27
php-pecl-gearman-2.0.5-1.fc27
python-dockerfile-parse-0.0.11-1.fc27
python-wikitcms-2.3.1-1.fc27
texstudio-2.12.10-1.fc27
thunderbird-52.9.1-1.fc27
Details about builds:
================================================================================
compose-utils-0.1.23-1.fc27 (FEDORA-2018-fba03aa534)
Utilities for working with composes
--------------------------------------------------------------------------------
Update Information:
Added utility and library for diffing composes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 11 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 0.1.23-1
- New upstream release
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.1.21-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
================================================================================
libtomcrypt-1.18.2-1.fc27 (FEDORA-2018-39e0872379)
A comprehensive, portable cryptographic toolkit
--------------------------------------------------------------------------------
Update Information:
- Fix Side Channel Based ECDSA Key Extraction (CVE-2018-12437) (PR #408) - Fix
potential stack overflow when DER flexi-decoding (CVE-2018-0739) (PR #373) - Fix
two-key 3DES (PR #390) - Fix accelerated CTR mode (PR #359) - Fix Fortuna PRNG
(PR #363) - Fix compilation on platforms where cc doesn't point to gcc (PR #382)
- Fix using the wrong environment variable LT instead of LIBTOOL (PR #392) - Fix
build on platforms where the compiler provides WCHAR_MAX but wchar.h is not
available (PR #390) - Fix & re-factor crypt_list_all_sizes() and
crypt_list_all_constants() (PR #414) - Minor fixes (PR's #350 #351 #375 #377
#378 #379)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 8 2018 Simone Caronni <negativo17(a)gmail.com> - 1.18.2-1
- Udpate to 1.18.2.
* Wed Apr 18 2018 Simone Caronni <negativo17(a)gmail.com> - 1.18.1-5
- Update build requirement for texlive rebase.
* Mon Apr 9 2018 Rafael Santos <rdossant(a)redhat.com> - 1.18.1-4
- Fix missing Fedora linker flags (bug #1548709)
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.18.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Feb 3 2018 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.18.1-2
- Switch to %ldconfig_scriptlets
* Fri Dec 8 2017 Simone Caronni <negativo17(a)gmail.com> - 1.18.1-1
- Update to 1.18.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1591906 - CVE-2018-12437 libtomcrypt: memory-cache side-channel attack on
ECDSA signatures [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1591906
[ 2 ] Bug #1591905 - CVE-2018-12437 libtomcrypt: memory-cache side-channel attack on
ECDSA signatures [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1591905
[ 3 ] Bug #1548709 - libtomcrypt: Partial build flags injection
https://bugzilla.redhat.com/show_bug.cgi?id=1548709
--------------------------------------------------------------------------------
================================================================================
ndctl-61.2-1.fc27 (FEDORA-2018-0a3fa582bb)
Manage "libnvdimm" subsystem devices (Non-volatile Memory)
--------------------------------------------------------------------------------
Update Information:
release v61.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 11 2018 Vishal Verma <vishal.l.verma(a)intel.com> - 61.2-1
- release v61.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1598972 - ndctl-v61.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1598972
--------------------------------------------------------------------------------
================================================================================
php-pecl-gearman-2.0.5-1.fc27 (FEDORA-2018-75735062c9)
PHP wrapper to libgearman
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.5** GearmanClient::addServer and GearmanClient::addServer(s)
along with their functional equivalents had an incorrect # set for required
params, which led to issues when reflected classes were using these values
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 12 2018 Remi Collet <remi(a)remirepo.net> - 2.0.5-1
- update to 2.0.5
--------------------------------------------------------------------------------
================================================================================
python-dockerfile-parse-0.0.11-1.fc27 (FEDORA-2018-9a0122f597)
Python library for Dockerfile manipulation
--------------------------------------------------------------------------------
Update Information:
New upstream release 0.0.11
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 12 2018 Tim Waugh <twaugh(a)redhat.com> - 0.0.11-1
- New upstream release 0.0.11
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.0.10-2
- Rebuilt for Python 3.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1535725 - python-dockerfile-parse-0.0.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1535725
--------------------------------------------------------------------------------
================================================================================
python-wikitcms-2.3.1-1.fc27 (FEDORA-2018-bcd43c0dcf)
Fedora QA wiki test management Python library
--------------------------------------------------------------------------------
Update Information:
This update prevents the `helpers.cid_to_event` parser from returning spurious
events for updates and updates-testing composes (it was interpreting them as
candidate composes).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 11 2018 Adam Williamson <awilliam(a)redhat.com> - 2.3.1-1
- New release 2.3.1: don't create events for updates composes
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 2.3.0-2
- Rebuilt for Python 3.7 (F29+ only)
--------------------------------------------------------------------------------
================================================================================
texstudio-2.12.10-1.fc27 (FEDORA-2018-24957c134c)
A feature-rich editor for LaTeX documents
--------------------------------------------------------------------------------
Update Information:
- update to 2.12.10 - fixing the structure view -
https://github.com/texstudio-
org/texstudio/releases/tag/2.12.10
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 11 2018 Johannes Lips <hannes(a)fedoraproject.org> 2.12.10-1
- Update to latest upstream bugfix release 2.12.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1597192 - [abrt] texstudio: qt_message_fatal(): texstudio killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1597192
[ 2 ] Bug #1583576 - [abrt] texstudio: QTreeViewPrivate::isIndexExpanded(): texstudio
killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1583576
[ 3 ] Bug #1550217 - [abrt] texstudio: qt_message_fatal(): texstudio killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1550217
--------------------------------------------------------------------------------
================================================================================
thunderbird-52.9.1-1.fc27 (FEDORA-2018-bee0aefb05)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream stable version.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 10 2018 Jan Horak <jhorak(a)redhat.com> - 52.9.1-1
- Update to 52.9.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1597936 - thunderbird-52.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1597936
--------------------------------------------------------------------------------