The following Fedora 27 Security updates need testing:
Age URL
15
https://bodhi.fedoraproject.org/updates/FEDORA-2017-15efa72a0c
docker-1.13.1-44.git584d391.fc27
12
https://bodhi.fedoraproject.org/updates/FEDORA-2017-5dd9b12179
python-dulwich-0.18.6-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2017-913288e9a9
mongodb-3.4.10-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d7c0748c1b pdns-4.1.0-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-0053bb9719 exim-4.89-7.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-14f5c6cdac
qpid-cpp-1.37.0-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2017-386e856a4f
rubygem-yard-0.9.8-4.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-bc2edc421d tor-0.3.1.9-1.fc27
2
https://bodhi.fedoraproject.org/updates/FEDORA-2017-874bd165c0
perl-DBD-MySQL-4.043-6.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-b16cdbdc34
libvirt-3.7.0-3.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e56a2ddd09
optipng-0.7.6-5.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-cf7dede496
asterisk-14.7.3-1.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-677069c484
python26-2.6.9-10.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-99d12bf610
python35-3.5.4-2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a95dd74301
shellinabox-2.20-5.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-d0046bc0ae dhcp-4.3.6-7.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-a41f6a8078
python34-3.4.7-2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-e6be32cb7a
nodejs-8.9.3-2.fc27
0
https://bodhi.fedoraproject.org/updates/FEDORA-2017-97b730736f ceph-12.2.2-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
18
https://bodhi.fedoraproject.org/updates/FEDORA-2017-50372d7dcf
pungi-4.1.20-3.fc27
The following builds have been pushed to Fedora 27 updates-testing
R-3.4.3-1.fc27
ceph-12.2.2-1.fc27
electrum-3.0.2-1.fc27
geany-1.32-1.fc27
geany-plugins-1.32-1.fc27
golang-github-AudriusButkevicius-pfilter-0.0.3-1.fc27
golang-github-SAP-go-hdb-0.9.5-1.fc27
golang-github-billziss-gh-cgofuse-1.0.4-1.fc27
golang-github-ccding-go-stun-0.1.0-5.git20171206.gitd9bbe8f.fc27
golang-github-klauspost-reedsolomon-1.6-2.20171118.gite52c150.fc27
golang-github-minio-sha256-simd-0-0.5.git96c8f86.fc27
golang-github-sasha-s-go-deadlock-0.1.0-1.20171130.git03d40e5.fc27
legendsbrowser-1.15-1.fc27
libguestfs-1.37.34-3.fc27
libguestfs-1.37.35-1.fc27
mingw-LibRaw-0.18.6-1.fc27
nbdkit-1.1.25-1.fc27
ocaml-mccs-1.1-4.4.fc27
pkgconf-1.3.12-1.fc27
polarsys-b612-fonts-1.003-1.20171129gitbd14fde.fc27
pulledpork-0.7.3-1.fc27
python-certbot-dns-rfc2136-0.19.0-2.fc27
python-descartes-1.1.0-5.fc27
python-fiona-1.7.10-1.fc27
python-geopandas-0.3.0-3.fc27
python-jsonrpclib-0.3.1-1.fc27
python-sortedcontainers-1.5.9-1.fc27
qbs-1.10.0-1.fc27
qt-creator-4.5.0-1.fc27
rkward-0.6.5-11.fc27
rootfs-resize-2.0-10.fc27
rpy-2.8.6-5.fc27
runc-1.0.0-13.rc4.git1d3ab6d.fc27
Details about builds:
================================================================================
R-3.4.3-1.fc27 (FEDORA-2017-583321e8c8)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
Update to R 3.4.3, rebuild rpy and rkward to match.
--------------------------------------------------------------------------------
================================================================================
ceph-12.2.2-1.fc27 (FEDORA-2017-97b730736f)
User space components of the Ceph file system
--------------------------------------------------------------------------------
Update Information:
New release (1:12.2.2-1), security fix for CVE-2017-16818
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1515872 - CVE-2017-16818 ceph: Failed assertion through user input in
ceph_assert() function in rgw_iam_policy.cc
https://bugzilla.redhat.com/show_bug.cgi?id=1515872
--------------------------------------------------------------------------------
================================================================================
electrum-3.0.2-1.fc27 (FEDORA-2017-fb672f6815)
A lightweight Bitcoin Client
--------------------------------------------------------------------------------
Update Information:
Updated to version 3.0.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1510611 - update 3.0.1
https://bugzilla.redhat.com/show_bug.cgi?id=1510611
--------------------------------------------------------------------------------
================================================================================
geany-1.32-1.fc27 (FEDORA-2017-75f63c5469)
A fast and lightweight IDE using GTK3
--------------------------------------------------------------------------------
Update Information:
This update brings the new Geany release in version 1.32 to you. For more
details see the release notes at
https://www.geany.org/Documentation/ReleaseNotes. This also includes an update
for Geany-Plugins which brings a new plugin: workbench. More details about the
new Geany-Plugins release can be found here:
https://github.com/geany/geany-
plugins/releases/tag/1.32.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1515008 - geany-plugins-1.32.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1515008
--------------------------------------------------------------------------------
================================================================================
geany-plugins-1.32-1.fc27 (FEDORA-2017-75f63c5469)
Plugins for Geany
--------------------------------------------------------------------------------
Update Information:
This update brings the new Geany release in version 1.32 to you. For more
details see the release notes at
https://www.geany.org/Documentation/ReleaseNotes. This also includes an update
for Geany-Plugins which brings a new plugin: workbench. More details about the
new Geany-Plugins release can be found here:
https://github.com/geany/geany-
plugins/releases/tag/1.32.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1515008 - geany-plugins-1.32.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1515008
--------------------------------------------------------------------------------
================================================================================
golang-github-AudriusButkevicius-pfilter-0.0.3-1.fc27 (FEDORA-2017-9f5be1274e)
Simple Packet Filtering package written in Go
--------------------------------------------------------------------------------
Update Information:
Update to version 0.0.3.
--------------------------------------------------------------------------------
================================================================================
golang-github-SAP-go-hdb-0.9.5-1.fc27 (FEDORA-2017-3821e4cec8)
SAP HANA Database Client for Go (Golang)
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.5. (#1523964)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523964 - golang-github-SAP-go-hdb-0.9.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1523964
--------------------------------------------------------------------------------
================================================================================
golang-github-billziss-gh-cgofuse-1.0.4-1.fc27 (FEDORA-2017-b8e27293a2)
Cross-platform FUSE library for Go
--------------------------------------------------------------------------------
Update Information:
Upstream release 1.0.4
--------------------------------------------------------------------------------
================================================================================
golang-github-ccding-go-stun-0.1.0-5.git20171206.gitd9bbe8f.fc27
(FEDORA-2017-9dc3031d6e)
STUN client (RFC 3489 and RFC 5389) implementation in Go
--------------------------------------------------------------------------------
Update Information:
Bump to commit d9bbe8f.
--------------------------------------------------------------------------------
================================================================================
golang-github-klauspost-reedsolomon-1.6-2.20171118.gite52c150.fc27
(FEDORA-2017-67652b7034)
Reed-Solomon Erasure Coding in Go
--------------------------------------------------------------------------------
Update Information:
Bump to commit e52c150.
--------------------------------------------------------------------------------
================================================================================
golang-github-minio-sha256-simd-0-0.5.git96c8f86.fc27 (FEDORA-2017-9bbef4f1d2)
SHA256 implementation using SIMD instructions for Go
--------------------------------------------------------------------------------
Update Information:
Bump to commit 96c8f86. This includes support for using the new AVX512
instructions on the x86_64 platform.
--------------------------------------------------------------------------------
================================================================================
golang-github-sasha-s-go-deadlock-0.1.0-1.20171130.git03d40e5.fc27
(FEDORA-2017-9d0853407a)
Online deadlock detection in go
--------------------------------------------------------------------------------
Update Information:
Bump to commit 03d40e5.
--------------------------------------------------------------------------------
================================================================================
legendsbrowser-1.15-1.fc27 (FEDORA-2017-c92036a0c4)
Java-based legends viewer for Dwarf Fortress
--------------------------------------------------------------------------------
Update Information:
Updated to latest upstream release, with DF 0.44 support.
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.37.34-3.fc27 (FEDORA-2017-4d91b4dadf)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
New version of nbdkit. Requires update to libguestfs: * Fix locking on NBD
drives. ---- Fix Python 3 builds / RHEL macros (RHBZ#1404631). ---- New
upstream version 1.1.18. Add NBD forwarding plugin. Add libselinux-devel so that
SELinux support is enabled in the daemon. Apply all patches from upstream since
1.1.18. ---- New upstream version 1.1.18. Add new NBD forwarding plugin.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1404631 - nbdkit: nbdkit-plugin-python3 requires a Python 2 package
https://bugzilla.redhat.com/show_bug.cgi?id=1404631
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.37.35-1.fc27 (FEDORA-2017-e153911f0b)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.37.35. Add virt-builder-repository and man page.
--------------------------------------------------------------------------------
================================================================================
mingw-LibRaw-0.18.6-1.fc27 (FEDORA-2017-5cdad15553)
Library for reading RAW files obtained from digital photo cameras
--------------------------------------------------------------------------------
Update Information:
Update to version 0.18.6, see
https://github.com/LibRaw/LibRaw/blob/0.18-stable/Changelog.txt for details.
--------------------------------------------------------------------------------
================================================================================
nbdkit-1.1.25-1.fc27 (FEDORA-2017-4d91b4dadf)
NBD server
--------------------------------------------------------------------------------
Update Information:
New version of nbdkit. Requires update to libguestfs: * Fix locking on NBD
drives. ---- Fix Python 3 builds / RHEL macros (RHBZ#1404631). ---- New
upstream version 1.1.18. Add NBD forwarding plugin. Add libselinux-devel so that
SELinux support is enabled in the daemon. Apply all patches from upstream since
1.1.18. ---- New upstream version 1.1.18. Add new NBD forwarding plugin.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1404631 - nbdkit: nbdkit-plugin-python3 requires a Python 2 package
https://bugzilla.redhat.com/show_bug.cgi?id=1404631
--------------------------------------------------------------------------------
================================================================================
ocaml-mccs-1.1-4.4.fc27 (FEDORA-2017-6adf4aecaa)
Multi Criteria CUDF Solver with OCaml bindings
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release.
--------------------------------------------------------------------------------
================================================================================
pkgconf-1.3.12-1.fc27 (FEDORA-2017-143c830dc1)
Package compiler and linker metadata toolkit
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.12
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1519994 - pkg-config --path pkgconf segfaults
https://bugzilla.redhat.com/show_bug.cgi?id=1519994
[ 2 ] Bug #1524157 - pkgconf-1.3.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1524157
--------------------------------------------------------------------------------
================================================================================
polarsys-b612-fonts-1.003-1.20171129gitbd14fde.fc27 (FEDORA-2017-43123347f9)
A typeface designed for reading comfort and safety in aeroplane cockpits
--------------------------------------------------------------------------------
Update Information:
Initial release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1509386 - Review Request: polarsys-b612-fonts - A typeface designed for
reading comfort and safety in aeroplane cockpits
https://bugzilla.redhat.com/show_bug.cgi?id=1509386
--------------------------------------------------------------------------------
================================================================================
pulledpork-0.7.3-1.fc27 (FEDORA-2017-e32da5af24)
Pulled Pork for Snort and Suricata rule management
--------------------------------------------------------------------------------
Update Information:
version 0.7.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523896 - pulledpork-v0.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1523896
--------------------------------------------------------------------------------
================================================================================
python-certbot-dns-rfc2136-0.19.0-2.fc27 (FEDORA-2017-80fbea10bc)
RFC 2136 DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1515554 - Review Request: python-certbot-dns-rfc2136 - RFC 2136 DNS
Authenticator plugin for Certbot
https://bugzilla.redhat.com/show_bug.cgi?id=1515554
--------------------------------------------------------------------------------
================================================================================
python-descartes-1.1.0-5.fc27 (FEDORA-2017-2ba15b2637)
Use geometric objects as Matplotlib paths and patches
--------------------------------------------------------------------------------
Update Information:
Use python2-* BRs.
--------------------------------------------------------------------------------
================================================================================
python-fiona-1.7.10-1.fc27 (FEDORA-2017-33f82fd86a)
Fiona reads and writes spatial data files
--------------------------------------------------------------------------------
Update Information:
Update to latest version.
--------------------------------------------------------------------------------
================================================================================
python-geopandas-0.3.0-3.fc27 (FEDORA-2017-8f5af13691)
Geographic Pandas extensions
--------------------------------------------------------------------------------
Update Information:
Initial package of geopandas for Python.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1468995 - Review Request: python-geopandas - Geographic pandas extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1468995
--------------------------------------------------------------------------------
================================================================================
python-jsonrpclib-0.3.1-1.fc27 (FEDORA-2017-65c2789a36)
JSON-RPC v2.0 client library for Python
--------------------------------------------------------------------------------
Update Information:
Changed upstream to jsonrpclib-pelix
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1510611 - update 3.0.1
https://bugzilla.redhat.com/show_bug.cgi?id=1510611
--------------------------------------------------------------------------------
================================================================================
python-sortedcontainers-1.5.9-1.fc27 (FEDORA-2017-b25c48c41a)
Pure Python sorted container types
--------------------------------------------------------------------------------
Update Information:
Update to latest version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1523898 - python-sortedcontainers-1.5.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1523898
--------------------------------------------------------------------------------
================================================================================
qbs-1.10.0-1.fc27 (FEDORA-2017-0b54ad4fc3)
Cross platform build tool
--------------------------------------------------------------------------------
Update Information:
Update to qbs-1.10.0 and qt-creator-4.5.0, see
https://blog.qt.io/blog/2017/12/07/qbs-1-10-released/ and
http://blog.qt.io/blog/2017/12/07/qt-creator-4-5-0-released/ for details.
--------------------------------------------------------------------------------
================================================================================
qt-creator-4.5.0-1.fc27 (FEDORA-2017-0b54ad4fc3)
Cross-platform IDE for Qt
--------------------------------------------------------------------------------
Update Information:
Update to qbs-1.10.0 and qt-creator-4.5.0, see
https://blog.qt.io/blog/2017/12/07/qbs-1-10-released/ and
http://blog.qt.io/blog/2017/12/07/qt-creator-4-5-0-released/ for details.
--------------------------------------------------------------------------------
================================================================================
rkward-0.6.5-11.fc27 (FEDORA-2017-583321e8c8)
Graphical frontend for R language
--------------------------------------------------------------------------------
Update Information:
Update to R 3.4.3, rebuild rpy and rkward to match.
--------------------------------------------------------------------------------
================================================================================
rootfs-resize-2.0-10.fc27 (FEDORA-2017-2eb4cd9f99)
Root partition re-sizing service (typically for SD cards)
--------------------------------------------------------------------------------
Update Information:
Correct copy & paste error in %postun scriptlet (#1524031)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524031 - rootfs-resize has copy-pasto in scriptlet
https://bugzilla.redhat.com/show_bug.cgi?id=1524031
--------------------------------------------------------------------------------
================================================================================
rpy-2.8.6-5.fc27 (FEDORA-2017-583321e8c8)
Python interface to the R language
--------------------------------------------------------------------------------
Update Information:
Update to R 3.4.3, rebuild rpy and rkward to match.
--------------------------------------------------------------------------------
================================================================================
runc-1.0.0-13.rc4.git1d3ab6d.fc27 (FEDORA-2017-3676a27a48)
CLI for running Open Containers
--------------------------------------------------------------------------------
Update Information:
Many bug fixes
--------------------------------------------------------------------------------