The following Fedora 27 Security updates need testing:
Age URL
39
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
31
https://bodhi.fedoraproject.org/updates/FEDORA-2018-dc984c59e5
drupal7-7.57-1.fc27
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-52d79f4f36
dovecot-2.2.34-1.fc27
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e38f759144
python-bleach-2.1.3-1.fc27
21
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ff86925c3
memcached-1.5.6-1.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c923533479
webkitgtk4-2.20.0-1.fc27
11
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6db2f7a02e
python-paramiko-2.3.2-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7c2e0a998d
acpica-tools-20180209-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-ad652798b8
mosquitto-1.4.15-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-0a473d6e7b
unboundid-ldapsdk-4.0.5-1.fc27
8
https://bodhi.fedoraproject.org/updates/FEDORA-2018-50f0da5d38
tomcat-8.0.50-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a4353f97db
slf4j-1.7.25-4.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-223d8fc52a
java-1.8.0-openjdk-aarch32-1.8.0.161-1.180220.fc27
6
https://bodhi.fedoraproject.org/updates/FEDORA-2018-b621d86462
python-notebook-5.2.1-2.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c442aad4dc
exempi-2.4.5-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d4d7108de8 nmap-7.60-8.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-2f9d3604d6
librelp-1.2.15-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
25
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c31f1eccd
iptables-1.6.2-2.fc27 libnftnl-1.0.9-2.fc27 nftables-0.8.2-2.fc27
13
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c923533479
webkitgtk4-2.20.0-1.fc27
10
https://bodhi.fedoraproject.org/updates/FEDORA-2018-55a6726164
PackageKit-1.1.9-2.fc27 gnome-software-3.28.0-4.fc27 libappstream-glib-0.7.7-2.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-95dac71a1c pcre-8.42-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e344a6d79b
xfce4-settings-4.12.3-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-adbc1da28c pcre2-10.31-4.fc27
4
https://bodhi.fedoraproject.org/updates/FEDORA-2018-c442aad4dc
exempi-2.4.5-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-32f808c1c1
nautilus-3.26.3.1-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d4d7108de8 nmap-7.60-8.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-3480b01a6d
osinfo-db-20180325-1.fc27
The following builds have been pushed to Fedora 27 updates-testing
R-bit-1.1.12-2.fc27
R-fastmatch-1.1.0-1.fc27
R-webutils-0.6-1.fc27
arduino-1.8.5-4.fc27
btrbk-0.26.1-4.fc27
byobu-5.125-3.fc27
cri-tools-1.0.0-3.alpha.0.git8e6013a.fc27
freeciv-2.5.11-1.fc27
gcompris-qt-0.90-1.fc27
gnome-shell-extension-no-topleft-hot-corner-17.0-1.fc27
gsequencer-1.4.24-1.fc27
kernel-4.15.13-300.fc27
lightdm-gtk-2.0.5-1.fc27
magic-8.2.50-1.fc27
mingw-windows-default-manifest-6.4-1.fc27
modem-manager-gui-0.0.19-4.fc27
mypaint-1.2.1-15.fc27
netpbm-10.81.00-3.fc27
perl-Authen-SCRAM-0.006-2.fc27
php-pecl-xdebug-2.6.0-1.fc27
php-phpmailer6-6.0.4-1.fc27
php-sabre-vobject4-4.1.5-1.fc27
python-dns-lexicon-2.2.1-1.fc27
python-pyramid-fas-openid-0.3.9-1.fc27
python-pysword-0.2.5-2.fc27
python3-mypy-0.580-1.fc27
radeontop-1.1-1.fc27
satyr-0.25-2.fc27
stellarium-0.18.0-1.fc27
timeline-1.17.0-1.fc27
topgit-0.19.11-1.fc27
util-linux-2.30.2-3.fc27
wesnoth-1.13.12-1.fc27
xrdp-0.9.6-1.fc27
Details about builds:
================================================================================
R-bit-1.1.12-2.fc27 (FEDORA-2018-86ef05248e)
A class for vectors of 1-bit booleans
--------------------------------------------------------------------------------
Update Information:
Initial import of bit for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1553054 - Review Request: R-bit - A class for vectors of 1-bit booleans
https://bugzilla.redhat.com/show_bug.cgi?id=1553054
--------------------------------------------------------------------------------
================================================================================
R-fastmatch-1.1.0-1.fc27 (FEDORA-2018-601f3707b6)
Fast match() function
--------------------------------------------------------------------------------
Update Information:
Initial package of fastmatch for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1553053 - Review Request: R-fastmatch - Fast match() function
https://bugzilla.redhat.com/show_bug.cgi?id=1553053
--------------------------------------------------------------------------------
================================================================================
R-webutils-0.6-1.fc27 (FEDORA-2018-db226beb70)
Utility Functions for Developing Web Applications
--------------------------------------------------------------------------------
Update Information:
Initial package of webutils for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1553082 - Review Request: R-webutils - Utility Functions for Developing Web
Applications
https://bugzilla.redhat.com/show_bug.cgi?id=1553082
--------------------------------------------------------------------------------
================================================================================
arduino-1.8.5-4.fc27 (FEDORA-2018-e7610397a3)
An IDE for Arduino-compatible electronics prototyping platforms
--------------------------------------------------------------------------------
Update Information:
Consistenty use appstream ID to ensure inclusion in, e.g., Gnome Software.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1557598 - arduino IDE does not appear in Gnome-software
https://bugzilla.redhat.com/show_bug.cgi?id=1557598
--------------------------------------------------------------------------------
================================================================================
btrbk-0.26.1-4.fc27 (FEDORA-2018-649883768c)
Tool for creating snapshots and remote backups of btrfs sub-volumes
--------------------------------------------------------------------------------
Update Information:
Fix python3 macro not expanding ---- rebuilt ---- Force correct python3
path: ---- Update to 0.26.1
--------------------------------------------------------------------------------
================================================================================
byobu-5.125-3.fc27 (FEDORA-2018-aac661ae87)
Light-weight, configurable window manager built upon GNU screen
--------------------------------------------------------------------------------
Update Information:
- Fix wrong dependencies on <=F27 ---- - Fix wrong dependencies on <=F27
---- - Rebuilt for new upstream release 5.125, fixes rhbz #1480023
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1480023 - byobu-5.125 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1480023
--------------------------------------------------------------------------------
================================================================================
cri-tools-1.0.0-3.alpha.0.git8e6013a.fc27 (FEDORA-2018-5749109ec8)
CLI and validation tools for Container Runtime Interface
--------------------------------------------------------------------------------
Update Information:
built commit 8e6013a ---- include critest binary
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1542931 - Review Request: cri-tools - CLI and validation tools for Container
Runtime Interface
https://bugzilla.redhat.com/show_bug.cgi?id=1542931
--------------------------------------------------------------------------------
================================================================================
freeciv-2.5.11-1.fc27 (FEDORA-2018-1ea0e8b66f)
A multi-player strategy game
--------------------------------------------------------------------------------
Update Information:
http://freeciv.wikia.com/wiki/NEWS-2.5.11
--------------------------------------------------------------------------------
================================================================================
gcompris-qt-0.90-1.fc27 (FEDORA-2018-d79d9a7acd)
Educational software suite for children aged 2 to 10
--------------------------------------------------------------------------------
Update Information:
Initial import.
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-no-topleft-hot-corner-17.0-1.fc27 (FEDORA-2018-67a97ff334)
Disable the "hot corner" in the top-left of GNOME Shell
--------------------------------------------------------------------------------
Update Information:
Bump to upstream version 17.0, which assures compatibility with the upcoming
GNOME 3.28 release.
--------------------------------------------------------------------------------
================================================================================
gsequencer-1.4.24-1.fc27 (FEDORA-2018-81c5bc5923)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kernel-4.15.13-300.fc27 (FEDORA-2018-bccbdbe5c3)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 4.15.13 update contains a number of important fixes across the tree.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1511786 - 4.13+ kernels (nouveau) don't provide nv_backlight
https://bugzilla.redhat.com/show_bug.cgi?id=1511786
--------------------------------------------------------------------------------
================================================================================
lightdm-gtk-2.0.5-1.fc27 (FEDORA-2018-b44066268e)
LightDM GTK Greeter
--------------------------------------------------------------------------------
Update Information:
- update to 2.0.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1557989 - lightdm-gtk-2.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1557989
--------------------------------------------------------------------------------
================================================================================
magic-8.2.50-1.fc27 (FEDORA-2018-69a9f511b5)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.2.50 is released.
--------------------------------------------------------------------------------
================================================================================
mingw-windows-default-manifest-6.4-1.fc27 (FEDORA-2018-c979b52f75)
MinGW Default Windows application manifest
--------------------------------------------------------------------------------
Update Information:
MinGW Default Windows application manifest
--------------------------------------------------------------------------------
================================================================================
modem-manager-gui-0.0.19-4.fc27 (FEDORA-2018-70397e1009)
Graphical interface for ModemManager
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 0.0.19, separate connection management and modem
management plugins into individual packages
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1557773 - Update modem-manager-gui to version 0.0.19
https://bugzilla.redhat.com/show_bug.cgi?id=1557773
--------------------------------------------------------------------------------
================================================================================
mypaint-1.2.1-15.fc27 (FEDORA-2018-4908df51f5)
A fast and easy graphics application for digital painters
--------------------------------------------------------------------------------
Update Information:
Fix startup issue on wayland with custom cursors.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1555277 - Unable to load arrow from the cursor theme
https://bugzilla.redhat.com/show_bug.cgi?id=1555277
--------------------------------------------------------------------------------
================================================================================
netpbm-10.81.00-3.fc27 (FEDORA-2018-44b3bc2989)
A library for handling different graphics file formats
--------------------------------------------------------------------------------
Update Information:
New upstream version 10.82.00
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1529904 - netpbm-10.81.00 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1529904
[ 2 ] Bug #1560330 - netpbm-10.82.00 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560330
--------------------------------------------------------------------------------
================================================================================
perl-Authen-SCRAM-0.006-2.fc27 (FEDORA-2018-217e4d3f5e)
Salted Challenge Response Authentication Mechanism (RFC 5802)
--------------------------------------------------------------------------------
Update Information:
This release fixes handling user names with wide characters.
--------------------------------------------------------------------------------
================================================================================
php-pecl-xdebug-2.6.0-1.fc27 (FEDORA-2018-543639efab)
PECL package for debugging PHP scripts
--------------------------------------------------------------------------------
Update Information:
Mon, Jan 29, 2018 - **xdebug 2.6.0** **Fixed bugs:** - Fixed issue #1522:
Remote debugging test failures on s390 (Big Endian). ---- Tue, Jan 23, 2018 -
**xdebug 2.6.0RC2** **Fixed bugs:** - Fixed issue #1521: xdebug_gc_stats.*
missing from 2.6.0RC1 tarball ---- Thu, Dec 28, 2017 - **xdebug 2.6.0beta1**
**Added features:** - Fixed issue #1059: Add filter capabilities to tracing,
stack traces, and code coverage. - Fixed issue #1437: Add X-Profile-File-Name
header when a profile file has been generated. **Improvements:** - Fixed issue
#1493: Run test suite in AppVeyor for Windows CI. - Fixed issue #1498: Use new
ZEND_EXTENSION API in config.w32 build scripts. (Kalle) **Fixed bugs:** -
Fixed issue #702: Check whether variables tracing also works with =&. - Fixed
issue #1501: Xdebug var dump tries casting properties. - Fixed issue #1502:
SEND_REF lines are not marked as covered. ---- Sat, Dec 2, 2018 - **xdebug
2.6.0alpha1** **Added features:** - Implemented issue #474: Added "memory"
output to profiling files, to find out where memory is allocated. - Implemented
issue #575: Dump super globals contents to error log upon errors, just like when
this would happen for stack traces. - Implemented issue #964: Parse X-Forwarded-
For for the first IP address when selecting the remote_connect_back host (Steve
Easley). - Implemented issue #990: Add DBGp: notifications for notices and
warnings to be shown in IDEs. - Implemented issue #1312: Implement
extended_properties feature to remote debugging to support names and values with
low ASCII values. - Implemented issue #1323: Added xdebug.filename_format
setting to configure the formatting of filenames when tracing. - Implemented
issue #1379: Added support for Unix domain sockets to xdebug.remote_host (Sara
Golemon). - Implemented issue #1380: Added xdebug_is_debugger_active() that
returns true when debugger is connected. - Implemented issue #1391: Added
support for earlier stack frames through new argument for xdebug_call_*
functions. - Implemented issue #1420: Handle PHP 7.2's new methods for
switch/case - Implemented issue #1470: Added xdebug.remote_timeout to make
connect timeout configurable. - Implemented issue #1495: Make var_dump() also
use the new xdebug.filename_format when formatting filenames. **Improvements:**
- Implemented issue #847: Added support for "%s" specifier for
xdebug.trace_output_name. - Implemented issue #1384: Compile warning on Ubuntu
16.04 with GCC 5.4.x. - Implemented issue #1401: Improved error message in case
the connection breaks. - Implemented issue #1430: Change DBGp tests to use
TEST_PHP_EXECUTABLE instead of hard coded 'php' - Implemented issue #1484: Use
FD_CLOEXEC with debugging sockets to prevent FDs from leaking to forked
processes (Chris Wright). - Improve the foldexpr in xt.vim to fold lines
correctly (Donie Leigh). **Fixed bugs:** - Fixed issue #1272: property_get
doesn't return @attributes for SimpleXMLElement. - Fixed issue #1305: Property
names with quotes can not be fetch while debugging. - Fixed issue #1431: Fix
"use after free" with in add_name_attribute_or_element. - Fixed issue #1432:
Fixed memory leak with xdebug_path_info_dtor. - Fixed issue #1449: Debugging
breaks with array element keys containing low-ASCII variables. - Fixed issue
#1471: Tracing crashes with return_assignments and ternairy operator. - Fixed
issue #1474: Crashes due to variable resolving/reading mechanism not taking care
of temporary hash tables correctly (Nikita Popov, Derick). - Fixed issue #1481:
Fixed s390x and ppc64 builds (Remi Collet). - Fixed issue #1486: Crash on
ZEND_SWITCH_LONG / ZEND_SWITCH_STRING with more than 32 cases. - Fixed issue
#1496: Rewrite README.rst to be more clear on how to install and build Xdebug.
**Changes:** - Fixed issue #1411: Use Error (Throwable) instead of fatal error
when maximum nesting level is reached. **Removed features:** - Implemented
issue #1377: Drop support for PHP 5.5 and 5.6, only PHP 7 is now supported
--------------------------------------------------------------------------------
================================================================================
php-phpmailer6-6.0.4-1.fc27 (FEDORA-2018-39da3ce07a)
Full-featured email creation and transfer class for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 6.0.4** * Add some modern MIME types * Add Hindi translation
(thanks to dextel2) * Improve composer docs * Fix generation of path to
language files (RPM are not affected)
--------------------------------------------------------------------------------
================================================================================
php-sabre-vobject4-4.1.5-1.fc27 (FEDORA-2018-842e9e2578)
Library to parse and manipulate iCalendar and vCard objects
--------------------------------------------------------------------------------
Update Information:
Version 4.1.5 (2018-03-08) ------------------ * Serialization: Performance
boost for long properties (@gharlan)
--------------------------------------------------------------------------------
================================================================================
python-dns-lexicon-2.2.1-1.fc27 (FEDORA-2018-495b1ec0f9)
Manipulate DNS records on various DNS providers in a standardized/agnostic way
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560755 - python-dns-lexicon-2.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560755
--------------------------------------------------------------------------------
================================================================================
python-pyramid-fas-openid-0.3.9-1.fc27 (FEDORA-2018-70cf6eadac)
A view for pyramid that functions as an OpenID consumer
--------------------------------------------------------------------------------
Update Information:
Support Python 3.
--------------------------------------------------------------------------------
================================================================================
python-pysword-0.2.5-2.fc27 (FEDORA-2018-576f260ae9)
Open source python API wrapper for Sword Bible files
--------------------------------------------------------------------------------
Update Information:
0.2.5 Release repackage
--------------------------------------------------------------------------------
================================================================================
python3-mypy-0.580-1.fc27 (FEDORA-2018-3b17279a6a)
A static type checker for Python
--------------------------------------------------------------------------------
Update Information:
0.580 ---- 0.570
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551170 - python3-mypy-v0.570 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1551170
[ 2 ] Bug #1560123 - python3-mypy-v0.580 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560123
--------------------------------------------------------------------------------
================================================================================
radeontop-1.1-1.fc27 (FEDORA-2018-cbbdceface)
View GPU utilization of AMD/ATI Radeon devices
--------------------------------------------------------------------------------
Update Information:
New stable release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560543 - radeontop-v1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560543
--------------------------------------------------------------------------------
================================================================================
satyr-0.25-2.fc27 (FEDORA-2018-3255279d3d)
Tools to create anonymous, machine-friendly problem reports
--------------------------------------------------------------------------------
Update Information:
- Append Python interpreter as related package
--------------------------------------------------------------------------------
================================================================================
stellarium-0.18.0-1.fc27 (FEDORA-2018-ede6d34d6a)
Photo-realistic nightsky renderer
--------------------------------------------------------------------------------
Update Information:
0.18.0
--------------------------------------------------------------------------------
================================================================================
timeline-1.17.0-1.fc27 (FEDORA-2018-a63c534c27)
Displays and navigates events on a timeline
--------------------------------------------------------------------------------
Update Information:
1.17.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560264 - timeline-1.17.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1560264
--------------------------------------------------------------------------------
================================================================================
topgit-0.19.11-1.fc27 (FEDORA-2018-4f499aa61d)
A different patch queue manager
--------------------------------------------------------------------------------
Update Information:
Update to the latest
[
release](https://github.com/mackyle/topgit/releases/topgit-0.19.11).
--------------------------------------------------------------------------------
================================================================================
util-linux-2.30.2-3.fc27 (FEDORA-2018-3563dbdf5e)
A collection of basic system utilities
--------------------------------------------------------------------------------
Update Information:
fix #1560283 - column does not properly handle spaces at beginning of tab-
separated table columns
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1560283 - /usr/bin/column does not properly handle spaces at beginning of
tab-separated table columns
https://bugzilla.redhat.com/show_bug.cgi?id=1560283
--------------------------------------------------------------------------------
================================================================================
wesnoth-1.13.12-1.fc27 (FEDORA-2018-9ff64fe366)
Turn-based strategy game with a fantasy theme
--------------------------------------------------------------------------------
Update Information:
1.13.12
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.6-1.fc27 (FEDORA-2018-50923dbcc3)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
Release notes for xrdp v0.9.6 (2018/03/26) Compatibility notice Exclamation
mark (!) has been removed from comment out symbol of config files. Use number
sign (#) or semicolon (;) instead. As a result of this change, now you can use
exclamation mark as config value such as in tls_ciphers.
tls_ciphers=HIGH:!aNULL:!eNULL:!EXPORT:!RC4 See also: #1033 macOS support
Please note that xrdp still doesn't support macOS officially so far. However, a
volunteer is working on macOS compatibility. - Generate dylibs for macOS #1015
- Add PAM support for macOS #1021 Bug fixes - Make listen check before daemon
fork #988 - Fix xrdp sometimes become zombie processes #1000 - Include hostname
in sesman password file name #1006 #1007 #1076 - Fix default startwm.sh to use
bash explicitly #1009 #1049 - Fix the issue FreeBSD doesn't acknowledge
terminated sessions #1016 #1030 Other changes - Add Swiss French keyboard
#1053 - Improve perfect forward secrecy, explicitly enable ECDHE/DHE #1024 #1052
#1063 - Lots of leak fixes, cleanups and refactoring Known issues - Audio
redirection by MP3 codec doesn't sound with some client, use AAC instead #965
--------------------------------------------------------------------------------