The following Fedora 27 Security updates need testing:
Age URL
49
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1ec1cd6db3 bro-2.5.3-1.fc27
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e38f759144
python-bleach-2.1.3-1.fc27
30
https://bodhi.fedoraproject.org/updates/FEDORA-2018-8ff86925c3
memcached-1.5.6-1.fc27
16
https://bodhi.fedoraproject.org/updates/FEDORA-2018-223d8fc52a
java-1.8.0-openjdk-aarch32-1.8.0.161-1.180220.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-143886fdbd
drupal7-7.58-1.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-6e6d8c314b
drupal8-8.4.6-2.fc27
5
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e06468b832
libid3tag-0.15.1b-26.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1b3a73b45f
libofx-0.9.10-5.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d48955723f
wordpress-4.9.5-1.fc27
The following Fedora 27 Critical Path updates have yet to be approved:
Age URL
34
https://bodhi.fedoraproject.org/updates/FEDORA-2018-1c31f1eccd
iptables-1.6.2-2.fc27 libnftnl-1.0.9-2.fc27 nftables-0.8.2-2.fc27
19
https://bodhi.fedoraproject.org/updates/FEDORA-2018-55a6726164
PackageKit-1.1.9-2.fc27 gnome-software-3.28.0-4.fc27 libappstream-glib-0.7.7-2.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-7df97ca3e3
highlight-3.42-1.fc27
7
https://bodhi.fedoraproject.org/updates/FEDORA-2018-13dc9b1bf6 exo-0.12.0-3.fc27
xfce4-screenshooter-1.9.1-1.fc27
3
https://bodhi.fedoraproject.org/updates/FEDORA-2018-772fcd140c
linux-firmware-20180402-83.git8c1e439c.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-af1b0ba270 xen-4.9.2-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5d0bdfb533 bluez-5.49-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-5f72371a85
python-productmd-1.11-2.fc27 pungi-4.1.23-1.fc27
1
https://bodhi.fedoraproject.org/updates/FEDORA-2018-73fd17a963
kernel-4.15.15-300.fc27
The following builds have been pushed to Fedora 27 updates-testing
R-deldir-0.1.14-1.fc27
Thunar-1.6.15-1.fc27
bind-9.11.3-4.fc27
collectd-5.8.0-3.fc27
compat-openssl10-1.0.2o-1.fc27
dmlite-1.10.1-4.fc27
fedrepo-req-1.12.0-1.fc27
golang-github-google-go-genproto-0-0.6.20180328gitf8c8703.fc27
golang-github-zillode-notify-0-0.8.20180313.gita4d89c1.fc27
libcouchbase-2.8.6-1.fc27
lollypop-0.9.403-2.fc27
magic-8.2.54-1.fc27
man-pages-fr-3.70-12.fc27
python-click-completion-0.2.1-1.fc27
python-jwt-1.6.1-1.fc27
python-pip-9.0.3-1.fc27
python-pycares-2.3.0-2.fc27
python-resultsdb_api-2.1.1-1.fc27
python3-3.6.5-1.fc27
python3-docs-3.6.5-1.fc27
rsyslog-8.34.0-1.fc27
strace-4.22-1.fc27
sugar-physics-33-1.fc27
sugar-read-120-1.fc27
sugar-stopwatch-20-1.fc27
syncthing-0.14.46-1.fc27
trustedqsl-2.4-1.fc27
variety-0.6.7-2.fc27
vim-8.0.1661-1.fc27
vim-toml-0-0.1.20180306git624f024.fc27
xorg-x11-server-1.19.6-6.fc27
Details about builds:
================================================================================
R-deldir-0.1.14-1.fc27 (FEDORA-2018-99bacaf3fa)
Delaunay Triangulation and Dirichlet (Voronoi) Tessellation
--------------------------------------------------------------------------------
Update Information:
Initial package of deldir for R
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1558907 - Review Request: R-deldir - Delaunay Triangulation and Dirichlet
(Voronoi) Tessellation
https://bugzilla.redhat.com/show_bug.cgi?id=1558907
--------------------------------------------------------------------------------
================================================================================
Thunar-1.6.15-1.fc27 (FEDORA-2018-a988f26601)
Thunar File Manager
--------------------------------------------------------------------------------
Update Information:
Release notes for 1.6.15 ======================== This is a bugfix release.
Bugs fixed: - Thunar User Configurable Actions do not work for remote locations
(bug#7652) patch from (bug#7305) - replaced links to "http://thunar.xfce.org/"
with "https://docs.xfce.org/xfce/thunar/Start/" - SIGSEGV when thumbnailer is
under heavy load after opening many tabs (bug #13756) - Fixed creation of
.desktop file when dropping URL into folder (bug #14239) - Restoring non-empty
folders leaves copy in Trash (bug #13535) - Translation updates: Persian (Iran),
Portuguese, Swedish
--------------------------------------------------------------------------------
================================================================================
bind-9.11.3-4.fc27 (FEDORA-2018-9bec30fe9a)
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
--------------------------------------------------------------------------------
Update Information:
- Do not link libidn2 to all libraries (#1098783) - Update named.ca
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1098783 - BIND only supports IDNA 2003 but not IDNA 2008
https://bugzilla.redhat.com/show_bug.cgi?id=1098783
--------------------------------------------------------------------------------
================================================================================
collectd-5.8.0-3.fc27 (FEDORA-2018-50d5b037d7)
Statistics collection daemon for filling RRD files
--------------------------------------------------------------------------------
Update Information:
Fix segfault in Ceph plugin
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1531596 - segfault collectd/collectd-ceph plugin
https://bugzilla.redhat.com/show_bug.cgi?id=1531596
--------------------------------------------------------------------------------
================================================================================
compat-openssl10-1.0.2o-1.fc27 (FEDORA-2018-9490b422e7)
Compatibility version of the OpenSSL library
--------------------------------------------------------------------------------
Update Information:
Minor security update from upstream fixing CVE-2018-0739
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1561266 - CVE-2018-0739 openssl: Handling of crafted recursive ASN.1
structures can cause a stack overflow and resulting denial of service
https://bugzilla.redhat.com/show_bug.cgi?id=1561266
--------------------------------------------------------------------------------
================================================================================
dmlite-1.10.1-4.fc27 (FEDORA-2018-4f0e8470d6)
Lcgdm grid data management and storage framework
--------------------------------------------------------------------------------
Update Information:
* new upstream release ---- dmlite 1.10 is a major update to DPM internals
including Dome. ---- dmlite 1.10 is a major update to DPM internals including
Dome. ---- dmlite 1.10 is a major update to DPM internals including Dome.
---- * new upstream release
--------------------------------------------------------------------------------
================================================================================
fedrepo-req-1.12.0-1.fc27 (FEDORA-2018-45ac2a8dd6)
CLI for Fedora package repo requests
--------------------------------------------------------------------------------
Update Information:
Enhancements: * Allow requesting modular repository without a bug ID * Raise an
error if '/' is present in the repo name
--------------------------------------------------------------------------------
================================================================================
golang-github-google-go-genproto-0-0.6.20180328gitf8c8703.fc27 (FEDORA-2018-a0b762163a)
Go generated proto packages
--------------------------------------------------------------------------------
Update Information:
Bump to f8c8703595236ae70fdf8789ecb656ea0bcdcf46
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1553067 - Tracker for golang-github-google-go-genproto
https://bugzilla.redhat.com/show_bug.cgi?id=1553067
--------------------------------------------------------------------------------
================================================================================
golang-github-zillode-notify-0-0.8.20180313.gita4d89c1.fc27 (FEDORA-2018-0179746bf4)
File system event notification library on steroids
--------------------------------------------------------------------------------
Update Information:
Update syncthing to version 0.14.46.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1555113 - syncthing-0.14.46-rc.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1555113
--------------------------------------------------------------------------------
================================================================================
libcouchbase-2.8.6-1.fc27 (FEDORA-2018-7206e5233f)
Client and protocol library for the Couchbase project
--------------------------------------------------------------------------------
Update Information:
Update to 2.8.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1564312 - libcouchbase-2.8.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1564312
--------------------------------------------------------------------------------
================================================================================
lollypop-0.9.403-2.fc27 (FEDORA-2018-17f8b09f90)
Music player for GNOME
--------------------------------------------------------------------------------
Update Information:
Add art_album.py.diff (BZ #1562595) ---- Update to 0.9.403 ---- - Update
lollypop-portal to 0.9.7 ---- Update to 0.9.402 ---- Update to 0.9.401
---- Update to 0.9.400
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562595 - [abrt] lollypop: __on_save_artwork_tags():
art_album.py:432:__on_save_artwork_tags:GLib.GError: g_convert_error: L'URI
��sftp://bertof@192.168.1.42/mnt/1TB/Condivisa/Musica/Fondamentali/30%20Seconds%20To%20Mars%20-%20Kings%20and%20Queens.mp3��
non �� ...
https://bugzilla.redhat.com/show_bug.cgi?id=1562595
--------------------------------------------------------------------------------
================================================================================
magic-8.2.54-1.fc27 (FEDORA-2018-a0ba69655a)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.2.54 is released.
--------------------------------------------------------------------------------
================================================================================
man-pages-fr-3.70-12.fc27 (FEDORA-2018-e5240aafa1)
French version of the Linux man-pages
--------------------------------------------------------------------------------
Update Information:
Remove pidof.8 since it is provided by procps-ng package (as pidof.1) ---- Fix
invalid license tag in man-pages-fr
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1524074 - Invalid license in man-pages-fr
https://bugzilla.redhat.com/show_bug.cgi?id=1524074
--------------------------------------------------------------------------------
================================================================================
python-click-completion-0.2.1-1.fc27 (FEDORA-2018-d1fb8f192e)
Add automatic completion support for fish, Zsh, Bash and PowerShell to Click
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
================================================================================
python-jwt-1.6.1-1.fc27 (FEDORA-2018-819f0bf542)
JSON Web Token implementation in Python
--------------------------------------------------------------------------------
Update Information:
- Latest upstream - Add patch0 to remove pytest-{cov,runner} deps - Share doc
and license dir between subpackages - Enable EPEL PY3 build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551251 - python-jwt-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1551251
--------------------------------------------------------------------------------
================================================================================
python-pip-9.0.3-1.fc27 (FEDORA-2018-a042f795b2)
A tool for installing and managing Python packages
--------------------------------------------------------------------------------
Update Information:
Update to 3.6.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548683 - Filter bogus rpmlint errors/warnings
https://bugzilla.redhat.com/show_bug.cgi?id=1548683
[ 2 ] Bug #1560103 - Invalid content of C header file
/usr/include/python3.6m/pyconfig.h
https://bugzilla.redhat.com/show_bug.cgi?id=1560103
[ 3 ] Bug #1560295 -
/usr/lib/debug/usr/lib64/libpython3.6m.so.1.0-3.6.4-20.fc28.x86_64.debug-gdb.py has wrong
shebang
https://bugzilla.redhat.com/show_bug.cgi?id=1560295
[ 4 ] Bug #1563462 - CVE-2018-1060 CVE-2018-1061 python3: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1563462
[ 5 ] Bug #1546990 - pathfix.py leaves bunch of ~ suffixed files around
https://bugzilla.redhat.com/show_bug.cgi?id=1546990
[ 6 ] Bug #1531253 - %py_byte_compile() macro works for Python 3 only
https://bugzilla.redhat.com/show_bug.cgi?id=1531253
--------------------------------------------------------------------------------
================================================================================
python-pycares-2.3.0-2.fc27 (FEDORA-2018-f670107629)
Python interface for c-ares
--------------------------------------------------------------------------------
Update Information:
Initial import
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562964 - Review Request: python-pycares - Python interface for c-ares
https://bugzilla.redhat.com/show_bug.cgi?id=1562964
--------------------------------------------------------------------------------
================================================================================
python-resultsdb_api-2.1.1-1.fc27 (FEDORA-2018-30f56edbc0)
Interface api to ResultsDB
--------------------------------------------------------------------------------
Update Information:
Fix the python.six interaction with non-string inputs ---- - Add support for
auth token - Retry on HTTP 500 errors by default - py3: Updates to work with
Python 3
--------------------------------------------------------------------------------
================================================================================
python3-3.6.5-1.fc27 (FEDORA-2018-a042f795b2)
Interpreter of the Python programming language
--------------------------------------------------------------------------------
Update Information:
Update to 3.6.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548683 - Filter bogus rpmlint errors/warnings
https://bugzilla.redhat.com/show_bug.cgi?id=1548683
[ 2 ] Bug #1560103 - Invalid content of C header file
/usr/include/python3.6m/pyconfig.h
https://bugzilla.redhat.com/show_bug.cgi?id=1560103
[ 3 ] Bug #1560295 -
/usr/lib/debug/usr/lib64/libpython3.6m.so.1.0-3.6.4-20.fc28.x86_64.debug-gdb.py has wrong
shebang
https://bugzilla.redhat.com/show_bug.cgi?id=1560295
[ 4 ] Bug #1563462 - CVE-2018-1060 CVE-2018-1061 python3: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1563462
[ 5 ] Bug #1546990 - pathfix.py leaves bunch of ~ suffixed files around
https://bugzilla.redhat.com/show_bug.cgi?id=1546990
[ 6 ] Bug #1531253 - %py_byte_compile() macro works for Python 3 only
https://bugzilla.redhat.com/show_bug.cgi?id=1531253
--------------------------------------------------------------------------------
================================================================================
python3-docs-3.6.5-1.fc27 (FEDORA-2018-a042f795b2)
Documentation for the Python 3 programming language
--------------------------------------------------------------------------------
Update Information:
Update to 3.6.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548683 - Filter bogus rpmlint errors/warnings
https://bugzilla.redhat.com/show_bug.cgi?id=1548683
[ 2 ] Bug #1560103 - Invalid content of C header file
/usr/include/python3.6m/pyconfig.h
https://bugzilla.redhat.com/show_bug.cgi?id=1560103
[ 3 ] Bug #1560295 -
/usr/lib/debug/usr/lib64/libpython3.6m.so.1.0-3.6.4-20.fc28.x86_64.debug-gdb.py has wrong
shebang
https://bugzilla.redhat.com/show_bug.cgi?id=1560295
[ 4 ] Bug #1563462 - CVE-2018-1060 CVE-2018-1061 python3: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1563462
[ 5 ] Bug #1546990 - pathfix.py leaves bunch of ~ suffixed files around
https://bugzilla.redhat.com/show_bug.cgi?id=1546990
[ 6 ] Bug #1531253 - %py_byte_compile() macro works for Python 3 only
https://bugzilla.redhat.com/show_bug.cgi?id=1531253
--------------------------------------------------------------------------------
================================================================================
rsyslog-8.34.0-1.fc27 (FEDORA-2018-18c307bcf6)
Enhanced system logging and kernel message trapping daemon
--------------------------------------------------------------------------------
Update Information:
rebase to 8.34.0 ============== new plugins: ------------------ - [mmkubernetes]
(
http://www.rsyslog.com/doc/master/configuration/modules/mmkubernetes.html) -
[
fmhhtp](https://www.rsyslog.com/doc/master/rainerscript/functions/mo-
http_request.html) imfile rewrite: ------------------- - "sortfiles" now works
under linux - picking up files not present at startup should now work - more
complete wildcard support omelasticsearch now supports CA certs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1547320 - rsyslog-8.34.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1547320
[ 2 ] Bug #1507144 - omelasticsearch support client cert authentication
https://bugzilla.redhat.com/show_bug.cgi?id=1507144
--------------------------------------------------------------------------------
================================================================================
strace-4.22-1.fc27 (FEDORA-2018-d33432ef5a)
Tracks and displays system calls associated with a running process
--------------------------------------------------------------------------------
Update Information:
v4.21 -> v4.22.
--------------------------------------------------------------------------------
================================================================================
sugar-physics-33-1.fc27 (FEDORA-2018-859800d6e8)
A physical world simulator and playground for Sugar
--------------------------------------------------------------------------------
Update Information:
Release 33
--------------------------------------------------------------------------------
================================================================================
sugar-read-120-1.fc27 (FEDORA-2018-82dee59aeb)
A document reader for Sugar
--------------------------------------------------------------------------------
Update Information:
Release 120
--------------------------------------------------------------------------------
================================================================================
sugar-stopwatch-20-1.fc27 (FEDORA-2018-e2675c14f0)
Simple stopwatch for Sugar
--------------------------------------------------------------------------------
Update Information:
Release 20
--------------------------------------------------------------------------------
================================================================================
syncthing-0.14.46-1.fc27 (FEDORA-2018-0179746bf4)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update syncthing to version 0.14.46.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1555113 - syncthing-0.14.46-rc.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1555113
--------------------------------------------------------------------------------
================================================================================
trustedqsl-2.4-1.fc27 (FEDORA-2018-115d2634c9)
Tool for digitally signing Amateur Radio QSO records
--------------------------------------------------------------------------------
Update Information:
Update to 2.4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1562655 - trustedqsl-2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1562655
--------------------------------------------------------------------------------
================================================================================
variety-0.6.7-2.fc27 (FEDORA-2018-96bf4c640a)
Wallpaper changer that automatically downloads wallpapers
--------------------------------------------------------------------------------
Update Information:
Add bytecompile with Python 2 %%global __python %%{__python2} ---- - Update to
0.6.6 - Changed SOURCE link to github - Fix python requires for f28
--------------------------------------------------------------------------------
================================================================================
vim-8.0.1661-1.fc27 (FEDORA-2018-6666fa23de)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit
--------------------------------------------------------------------------------
================================================================================
vim-toml-0-0.1.20180306git624f024.fc27 (FEDORA-2018-8ac5f44258)
Vim syntax for TOML
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
================================================================================
xorg-x11-server-1.19.6-6.fc27 (FEDORA-2018-c27082f100)
X.Org X11 X server
--------------------------------------------------------------------------------
Update Information:
Patched to allow more modes in 16:9 and 16:10 resolutions.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1339930 - 16:9 resolutions not provided
https://bugzilla.redhat.com/show_bug.cgi?id=1339930
--------------------------------------------------------------------------------